[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] [linux-linus bisection] complete test-amd64-amd64-rumpuserxen-amd64



branch xen-unstable
xenbranch xen-unstable
job test-amd64-amd64-rumpuserxen-amd64
testid xen-boot

Tree: linux git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: rumpuserxen git://xenbits.xen.org/rumpuser-xen.git
Tree: rumpuserxen_buildrumpsh https://github.com/rumpkernel/buildrump.sh.git
Tree: rumpuserxen_netbsdsrc https://github.com/rumpkernel/src-netbsd
Tree: xen git://xenbits.xen.org/xen.git

*** Found and reproduced problem changeset ***

  Bug is in tree:  linux 
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git
  Bug introduced:  2dc10ad81fc017837037e60439662e1b16bdffb9
  Bug not present: 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/63832/


  commit 2dc10ad81fc017837037e60439662e1b16bdffb9
  Merge: e627078 f8f8bdc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 14:47:13 2015 -0800

      Merge tag 'arm64-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 updates from Catalin Marinas:

       - "genirq: Introduce generic irq migration for cpu hotunplugged" patch
         merged from tip/irq/for-arm to allow the arm64-specific part to be
         upstreamed via the arm64 tree

       - CPU feature detection reworked to cope with heterogeneous systems
         where CPUs may not have exactly the same features.  The features
         reported by the kernel via internal data structures or ELF_HWCAP are
         delayed until all the CPUs are up (and before user space starts)

       - Support for 16KB pages, with the additional bonus of a 36-bit VA
         space, though the latter only depending on EXPERT

       - Implement native {relaxed, acquire, release} atomics for arm64

       - New ASID allocation algorithm which avoids IPI on roll-over, together
         with TLB invalidation optimisations (using local vs global where
         feasible)

       - KASan support for arm64

       - EFI_STUB clean-up and isolation for the kernel proper (required by
         KASan)

       - copy_{to,from,in}_user optimisations (sharing the memcpy template)

       - perf: moving arm64 to the arm32/64 shared PMU framework

       - L1_CACHE_BYTES increased to 128 to accommodate Cavium hardware

       - Support for the contiguous PTE hint on kernel mapping (16 consecutive
         entries may be able to use a single TLB entry)

       - Generic CONFIG_HZ now used on arm64

       - defconfig updates

      * tag 'arm64-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux: (91 commits)
        arm64/efi: fix libstub build under CONFIG_MODVERSIONS
        ARM64: Enable multi-core scheduler support by default
        arm64/efi: move arm64 specific stub C code to libstub
        arm64: page-align sections for DEBUG_RODATA
        arm64: Fix build with CONFIG_ZONE_DMA=n
        arm64: Fix compat register mappings
        arm64: Increase the max granular size
        arm64: remove bogus TASK_SIZE_64 check
        arm64: make Timer Interrupt Frequency selectable
        arm64/mm: use PAGE_ALIGNED instead of IS_ALIGNED
        arm64: cachetype: fix definitions of ICACHEF_* flags
        arm64: cpufeature: declare enable_cpu_capabilities as static
        genirq: Make the cpuhotplug migration code less noisy
        arm64: Constify hwcap name string arrays
        arm64/kvm: Make use of the system wide safe values
        arm64/debug: Make use of the system wide safe value
        arm64: Move FP/ASIMD hwcap handling to common code
        arm64/HWCAP: Use system wide safe values
        arm64/capabilities: Make use of system wide safe value
        arm64: Delay cpu feature capability checks
        ...

  commit e627078a0cbdc0c391efeb5a2c4eb287328fd633
  Merge: 14c7909 b38fecc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 11:31:31 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

      Pull s390 updates from Martin Schwidefsky:
       "There is only one new feature in this pull for the 4.4 merge window,
        most of it is small enhancements, cleanup and bug fixes:

         - Add the s390 backend for the software dirty bit tracking.  This
           adds two new pgtable functions pte_clear_soft_dirty and
           pmd_clear_soft_dirty which is why there is a hit to
           arch/x86/include/asm/pgtable.h in this pull request.

         - A series of cleanup patches for the AP bus, this includes the
           removal of the support for two outdated crypto cards (PCICC and
           PCICA).

         - The irq handling / signaling on buffer full in the runtime
           instrumentation code is dropped.

         - Some micro optimizations: remove unnecessary memory barriers for a
           couple of functions: [smb_]rmb, [smb_]wmb, atomics, bitops, and for
           spin_unlock.  Use the builtin bswap if available and make
           test_and_set_bit_lock more cache friendly.

         - Statistics and a tracepoint for the diagnose calls to the
           hypervisor.

         - The CPU measurement facility support to sample KVM guests is
           improved.

         - The vector instructions are now always enabled for user space
           processes if the hardware has the vector facility.  This simplifies
           the FPU handling code.  The fpu-internal.h header is split into fpu
           internals, api and types just like x86.

         - Cleanup and improvements for the common I/O layer.

         - Rework udelay to solve a problem with kprobe.  udelay has busy loop
           semantics but still uses an idle processor state for the wait"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux: (66 commits)
        s390: remove runtime instrumentation interrupts
        s390/cio: de-duplicate subchannel validation
        s390/css: unneeded initialization in for_each_subchannel
        s390/Kconfig: use builtin bswap
        s390/dasd: fix disconnected device with valid path mask
        s390/dasd: fix invalid PAV assignment after suspend/resume
        s390/dasd: fix double free in dasd_eckd_read_conf
        s390/kernel: fix ptrace peek/poke for floating point registers
        s390/cio: move ccw_device_stlck functions
        s390/cio: move ccw_device_call_handler
        s390/topology: reduce per_cpu() invocations
        s390/nmi: reduce size of percpu variable
        s390/nmi: fix terminology
        s390/nmi: remove casts
        s390/nmi: remove pointless error strings
        s390: don't store registers on disabled wait anymore
        s390: get rid of __set_psw_mask()
        s390/fpu: split fpu-internal.h into fpu internals, api, and type headers
        s390/dasd: fix list_del corruption after lcu changes
        s390/spinlock: remove unneeded serializations at unlock
        ...

  commit 14c79092909a52b6fd6394b6ad5e7756c4f9565e
  Merge: 1b1050c a01fece
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 11:30:22 2015 -0800

      Merge branch 'parisc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux

      Pull parisc updates from Helge Deller:
       "The most important change is that we reduce L1_CACHE_BYTES to 16
        bytes, for which a trivial patch for XPS in the network layer was
        needed.  Then we wire up the sys_membarrier and userfaultfd syscalls
        and added two other small cleanups"

      * 'parisc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux:
        parisc: Change L1_CACHE_BYTES to 16
        net/xps: Fix calculation of initial number of xps queues
        parisc: reduce syslog debug output
        parisc: serial/mux: Convert to uart_console_device instead of open-coded
        parisc: Wire up userfaultfd syscall
        parisc: allocate sys_membarrier system call number

  commit 1b1050cdc5cdde43177b375b5f22dc070d45d8f8
  Merge: b0f85fa 353b39d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 10:12:43 2015 -0800

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/ide

      Pull IDE fixlet from David Miller:
       "Just a y2038 fix to the pdc202xx_new IDE driver"

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/ide:
        ide: pdc202xx_new: Replace timeval with ktime_t

  commit b0f85fa11aefc4f3e03306b4cd47f113bd57dcba
  Merge: ccc9d4a f32bfb9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 09:41:05 2015 -0800

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

      Pull networking updates from David Miller:

      Changes of note:

       1) Allow to schedule ICMP packets in IPVS, from Alex Gartrell.

       2) Provide FIB table ID in ipv4 route dumps just as ipv6 does, from
          David Ahern.

       3) Allow the user to ask for the statistics to be filtered out of
          ipv4/ipv6 address netlink dumps.  From Sowmini Varadhan.

       4) More work to pass the network namespace context around deep into
          various packet path APIs, starting with the netfilter hooks.  From
          Eric W Biederman.

       5) Add layer 2 TX/RX checksum offloading to qeth driver, from Thomas
          Richter.

       6) Use usec resolution for SYN/ACK RTTs in TCP, from Yuchung Cheng.

       7) Support Very High Throughput in wireless MESH code, from Bob
          Copeland.

       8) Allow setting the ageing_time in switchdev/rocker.  From Scott
          Feldman.

       9) Properly autoload L2TP type modules, from Stephen Hemminger.

      10) Fix and enable offload features by default in 8139cp driver, from
          David Woodhouse.

      11) Support both ipv4 and ipv6 sockets in a single vxlan device, from
          Jiri Benc.

      12) Fix CWND limiting of thin streams in TCP, from Bendik Rønning
          Opstad.

      13) Fix IPSEC flowcache overflows on large systems, from Steffen
          Klassert.

      14) Convert bridging to track VLANs using rhashtable entries rather than
          a bitmap.  From Nikolay Aleksandrov.

      15) Make TCP listener handling completely lockless, this is a major
          accomplishment.  Incoming request sockets now live in the
          established hash table just like any other socket too.

          From Eric Dumazet.

      15) Provide more bridging attributes to netlink, from Nikolay
          Aleksandrov.

      16) Use hash based algorithm for ipv4 multipath routing, this was very
          long overdue.  From Peter Nørlund.

      17) Several y2038 cures, mostly avoiding timespec.  From Arnd Bergmann.

      18) Allow non-root execution of EBPF programs, from Alexei Starovoitov.

      19) Support SO_INCOMING_CPU as setsockopt, from Eric Dumazet.  This
          influences the port binding selection logic used by SO_REUSEPORT.

      20) Add ipv6 support to VRF, from David Ahern.

      21) Add support for Mellanox Spectrum switch ASIC, from Jiri Pirko.

      22) Add rtl8xxxu Realtek wireless driver, from Jes Sorensen.

      23) Implement RACK loss recovery in TCP, from Yuchung Cheng.

      24) Support multipath routes in MPLS, from Roopa Prabhu.

      25) Fix POLLOUT notification for listening sockets in AF_UNIX, from Eric
          Dumazet.

      26) Add new QED Qlogic river, from Yuval Mintz, Manish Chopra, and
          Sudarsana Kalluru.

      27) Don't fetch timestamps on AF_UNIX sockets, from Hannes Frederic
          Sowa.

      28) Support ipv6 geneve tunnels, from John W Linville.

      29) Add flood control support to switchdev layer, from Ido Schimmel.

      30) Fix CHECKSUM_PARTIAL handling of potentially fragmented frames, from
          Hannes Frederic Sowa.

      31) Support persistent maps and progs in bpf, from Daniel Borkmann.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next: (1790 
commits)
        sh_eth: use DMA barriers
        switchdev: respect SKIP_EOPNOTSUPP flag in case there is no recursion
        net: sched: kill dead code in sch_choke.c
        irda: Delete an unnecessary check before the function call 
"irlmp_unregister_service"
        net: dsa: mv88e6xxx: include DSA ports in VLANs
        net: dsa: mv88e6xxx: disable SA learning for DSA and CPU ports
        net/core: fix for_each_netdev_feature
        vlan: Invoke driver vlan hooks only if device is present
        arcnet/com20020: add LEDS_CLASS dependency
        bpf, verifier: annotate verbose printer with __printf
        dp83640: Only wait for timestamps for packets with timestamping enabled.
        ptp: Change ptp_class to a proper bitmask
        dp83640: Prune rx timestamp list before reading from it
        dp83640: Delay scheduled work.
        dp83640: Include hash in timestamp/packet matching
        ipv6: fix tunnel error handling
        net/mlx5e: Fix LSO vlan insertion
        net/mlx5e: Re-eanble client vlan TX acceleration
        net/mlx5e: Return error in case mlx5e_set_features() fails
        net/mlx5e: Don't allow more than max supported channels
        ...

  commit ccc9d4a6d640cbde05d519edeb727881646cf71b
  Merge: 66ef349 271817a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 09:11:12 2015 -0800

      Merge branch 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto update from Herbert Xu:
       "API:

         - Add support for cipher output IVs in testmgr
         - Add missing crypto_ahash_blocksize helper
         - Mark authenc and des ciphers as not allowed under FIPS.

      Algorithms:

         - Add CRC support to 842 compression
         - Add keywrap algorithm
         - A number of changes to the akcipher interface:
            + Separate functions for setting public/private keys.
            + Use SG lists.

      Drivers:

         - Add Intel SHA Extension optimised SHA1 and SHA256
         - Use dma_map_sg instead of custom functions in crypto drivers
         - Add support for STM32 RNG
         - Add support for ST RNG
         - Add Device Tree support to exynos RNG driver
         - Add support for mxs-dcp crypto device on MX6SL
         - Add xts(aes) support to caam
         - Add ctr(aes) and xts(aes) support to qat
         - A large set of fixes from Russell King for the marvell/cesa driver"

      * 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (115 commits)
        crypto: asymmetric_keys - Fix unaligned access in x509_get_sig_params()
        crypto: akcipher - Don't #include crypto/public_key.h as the contents 
aren't used
        hwrng: exynos - Add Device Tree support
        hwrng: exynos - Fix missing configuration after suspend to RAM
        hwrng: exynos - Add timeout for waiting on init done
        dt-bindings: rng: Describe Exynos4 PRNG bindings
        crypto: marvell/cesa - use __le32 for hardware descriptors
        crypto: marvell/cesa - fix missing cpu_to_le32() in mv_cesa_dma_add_op()
        crypto: marvell/cesa - use memcpy_fromio()/memcpy_toio()
        crypto: marvell/cesa - use gfp_t for gfp flags
        crypto: marvell/cesa - use dma_addr_t for cur_dma
        crypto: marvell/cesa - use readl_relaxed()/writel_relaxed()
        crypto: caam - fix indentation of close braces
        crypto: caam - only export the state we really need to export
        crypto: caam - fix non-block aligned hash calculation
        crypto: caam - avoid needlessly saving and restoring caam_hash_ctx
        crypto: caam - print errno code when hash registration fails
        crypto: marvell/cesa - fix memory leak
        crypto: marvell/cesa - fix first-fragment handling in 
mv_cesa_ahash_dma_last_req()
        crypto: marvell/cesa - rearrange handling for sw padded hashes
        ...

  commit 66ef3493d4bb387f5a83915e33dc893102fd1b43
  Merge: 639ab3e d1f0f6c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 21:33:18 2015 -0800

      Merge branch 'x86-platform-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 platform changes from Ingo Molnar:
       "Misc updates to the Intel MID and SGI UV platforms"

      * 'x86-platform-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/intel-mid: Make intel_mid_ops static
        arch/x86/intel-mid: Use kmemdup rather than duplicating its 
implementation
        x86/platform/uv: Implement simple dump failover if kdump fails
        x86/platform/uv: Insert per_cpu accessor function on uv_hub_nmi

  commit 639ab3eb38c6e92e27e061551dddee6dd3bbb5d2
  Merge: 4302d50 e1a5832
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 21:23:56 2015 -0800

      Merge branch 'x86-mm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 mm changes from Ingo Molnar:
       "The main changes are: continued PAT work by Toshi Kani, plus a new
        boot time warning about insecure RWX kernel mappings, by Stephen
        Smalley.

        The new CONFIG_DEBUG_WX=y warning is marked default-y if
        CONFIG_DEBUG_RODATA=y is already eanbled, as a special exception, as
        these bugs are hard to notice and this check already found several
        live bugs"

      * 'x86-mm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/mm: Warn on W^X mappings
        x86/mm: Fix no-change case in try_preserve_large_page()
        x86/mm: Fix __split_large_page() to handle large PAT bit
        x86/mm: Fix try_preserve_large_page() to handle large PAT bit
        x86/mm: Fix gup_huge_p?d() to handle large PAT bit
        x86/mm: Fix slow_virt_to_phys() to handle large PAT bit
        x86/mm: Fix page table dump to show PAT bit
        x86/asm: Add pud_pgprot() and pmd_pgprot()
        x86/asm: Fix pud/pmd interfaces to handle large PAT bit
        x86/asm: Add pud/pmd mask interfaces to handle large PAT bit
        x86/asm: Move PUD_PAGE macros to page_types.h
        x86/vdso32: Define PGTABLE_LEVELS to 32bit VDSO

  commit 4302d506d5f3419109abdd0d6e400ed6e8148209
  Merge: ce4d72f 0e2815d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 21:05:40 2015 -0800

      Merge branch 'x86-headers-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 sigcontext header cleanups from Ingo Molnar:
       "This series reorganizes and cleans up various aspects of the main
        sigcontext UAPI headers, such as unifying the data structures and
        updating/adding lots of comments to explain all the ABI details and
        quirks.  The headers can now also be built in user-space standalone"

      * 'x86-headers-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/headers: Clean up too long lines
        x86/headers: Remove <asm/sigcontext.h> references on the kernel side
        x86/headers: Remove direct sigcontext32.h uses
        x86/headers: Convert sigcontext_ia32 uses to sigcontext_32
        x86/headers: Unify 'struct sigcontext_ia32' and 'struct sigcontext_32'
        x86/headers: Make sigcontext pointers bit independent
        x86/headers: Move the 'struct sigcontext' definitions into the UAPI 
header
        x86/headers: Clean up the kernel's struct sigcontext types to be 
ABI-clean
        x86/headers: Convert uses of _fpstate_ia32 to _fpstate_32
        x86/headers: Unify 'struct _fpstate_ia32' and i386 struct _fpstate
        x86/headers: Unify register type definitions between 32-bit compat and 
i386
        x86/headers: Use ABI types consistently in sigcontext*.h
        x86/headers: Separate out legacy user-space structure definitions
        x86/headers: Clean up and better document uapi/asm/sigcontext.h
        x86/headers: Clean up uapi/asm/sigcontext32.h
        x86/headers: Fix (old) header file dependency bug in 
uapi/asm/sigcontext32.h

  commit ce4d72fac16a9540452957b526443b6080030bff
  Merge: 0f25f2c 158ecc3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 20:50:26 2015 -0800

      Merge branch 'x86-fpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fpu changes from Ingo Molnar:
       "There are two main areas of changes:

         - Rework of the extended FPU state code to robustify the kernel's
           usage of cpuid provided xstate sizes - and related changes (Dave
           Hansen)"

         - math emulation enhancements: new modern FPU instructions support,
           with testcases, plus cleanups (Denys Vlasnko)"

      * 'x86-fpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (23 commits)
        x86/fpu: Fixup uninitialized feature_name warning
        x86/fpu/math-emu: Add support for FISTTP instructions
        x86/fpu/math-emu, selftests: Add test for FISTTP instructions
        x86/fpu/math-emu: Add support for FCMOVcc insns
        x86/fpu/math-emu: Add support for F[U]COMI[P] insns
        x86/fpu/math-emu: Remove define layer for undocumented opcodes
        x86/fpu/math-emu, selftests: Add tests for FCMOV and FCOMI insns
        x86/fpu/math-emu: Remove !NO_UNDOC_CODE
        x86/fpu: Check CPU-provided sizes against struct declarations
        x86/fpu: Check to ensure increasing-offset xstate offsets
        x86/fpu: Correct and check XSAVE xstate size calculations
        x86/fpu: Add C structures for AVX-512 state components
        x86/fpu: Rework YMM definition
        x86/fpu/mpx: Rework MPX 'xstate' types
        x86/fpu: Add xfeature_enabled() helper instead of test_bit()
        x86/fpu: Remove 'xfeature_nr'
        x86/fpu: Rework XSTATE_* macros to remove magic '2'
        x86/fpu: Rename XFEATURES_NR_MAX
        x86/fpu: Rename XSAVE macros
        x86/fpu: Remove partial LWP support definitions
        ...

  commit 0f25f2c1b18f7e47279ec2cf1d24c11c3108873b
  Merge: f323c49 0d44975
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 20:12:10 2015 -0800

      Merge branch 'x86-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 kgdb fixlet from Ingo Molnar:
       "A single debugging related commit: compress the memory usage of a kgdb
        data structure"

      * 'x86-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/kgdb: Replace bool_int_array[NR_CPUS] with bitmap

  commit f323c49b300baf89e2cb4050b0def1856c0b1852
  Merge: 33d46f9 2167cea
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 19:39:42 2015 -0800

      Merge branch 'x86-cpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 cpu changes from Ingo Molnar:
       "Two changes in this cycle: a Kconfig help text enhancement, and an AMD
        CLZERO instruction capability detection and enumeration"

      * 'x86-cpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/cpu: Add CLZERO detection
        x86/Kconfig/cpus: Fix/complete CPU type help texts

  commit 33d46f9765901a08d7759c031779073263e8b4e3
  Merge: 378e4e9 3435dd0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 19:34:22 2015 -0800

      Merge branch 'x86-cleanups-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 cleanups from Ingo Molnar:
       "An early_printk cleanup plus deinlining enhancements"

      * 'x86-cleanups-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/early_printk: Set __iomem address space for IO
        x86/signal: Deinline get_sigframe, save 240 bytes
        x86: Deinline early_console_register, save 403 bytes
        x86/e820: Deinline e820_type_to_string, save 126 bytes

  commit 378e4e98258ad92097bfdf795dbef8b49cf52a34
  Merge: a75a3f6 e9c40d2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 19:28:37 2015 -0800

      Merge branch 'x86-boot-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 boot cleanup from Ingo Molnar:
       "A single commit: remove an obsolete kcrash boot flag"

      * 'x86-boot-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/kexec: Remove obsolete 'in_crash_kexec' flag

  commit a75a3f6fc92888e4119744d8594ffdf748c3d444
  Merge: d2bea73 3bd2951
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:59:10 2015 -0800

      Merge branch 'x86-asm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 asm changes from Ingo Molnar:
       "The main change in this cycle is another step in the big x86 system
        call interface rework by Andy Lutomirski, which moves most of the low
        level x86 entry code from assembly to C, for all syscall entries
        except native 64-bit system calls:

          arch/x86/entry/entry_32.S        | 182 ++++------
          arch/x86/entry/entry_64_compat.S | 547 ++++++++-----------------------
          194 insertions(+), 535 deletions(-)

        ... our hope is that the final remaining step (converting native
        64-bit system calls) will be less painful as all the previous steps,
        given that most of the legacies and quirks are concentrated around
        native 32-bit and compat environments"

      * 'x86-asm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (47 commits)
        x86/entry/32: Fix FS and GS restore in opportunistic SYSEXIT
        x86/entry/32: Fix entry_INT80_32() to expect interrupts to be on
        um/x86: Fix build after x86 syscall changes
        x86/asm: Remove the xyz_cfi macros from dwarf2.h
        selftests/x86: Style fixes for the 'unwind_vdso' test
        x86/entry/64/compat: Document sysenter_fix_flags's reason for existence
        x86/entry: Split and inline syscall_return_slowpath()
        x86/entry: Split and inline prepare_exit_to_usermode()
        x86/entry: Use pt_regs_to_thread_info() in syscall entry tracing
        x86/entry: Hide two syscall entry assertions behind CONFIG_DEBUG_ENTRY
        x86/entry: Micro-optimize compat fast syscall arg fetch
        x86/entry: Force inlining of 32-bit syscall code
        x86/entry: Make irqs_disabled checks in exit code depend on lockdep
        x86/entry: Remove unnecessary IRQ twiddling in fast 32-bit syscalls
        x86/asm: Remove thread_info.sysenter_return
        x86/entry/32: Re-implement SYSENTER using the new C path
        x86/entry/32: Switch INT80 to the new C syscall path
        x86/entry/32: Open-code return tracking from fork and kthreads
        x86/entry/compat: Implement opportunistic SYSRETL for compat syscalls
        x86/vdso/compat: Wire up SYSENTER and SYSCSALL for compat userspace
        ...

  commit d2bea739f8b41d620c235d81e00289d01169dc3c
  Merge: 5352869 4faefda
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:33:15 2015 -0800

      Merge branch 'x86-apic-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 apic changes from Ingo Molnar:
       "The main changes in this cycle were:

         - Numachip updates: new hardware support, fixes and cleanups.
           (Daniel J Blueman)

         - misc smaller cleanups and fixlets"

      * 'x86-apic-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/io_apic: Make eoi_ioapic_pin() static
        x86/irq: Drop unlikely before IS_ERR_OR_NULL
        x86/x2apic: Make stub functions available even if !CONFIG_X86_LOCAL_APIC
        x86/apic: Deinline various functions
        x86/numachip: Fix timer build conflict
        x86/numachip: Introduce Numachip2 timer mechanisms
        x86/numachip: Add Numachip IPI optimisations
        x86/numachip: Add Numachip2 APIC support
        x86/numachip: Cleanup Numachip support

  commit 53528695ff6d8b77011bc818407c13e30914a946
  Merge: b831ef2 e73e85f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:03:50 2015 -0800

      Merge branch 'sched-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler changes from Ingo Molnar:
       "The main changes in this cycle were:

         - sched/fair load tracking fixes and cleanups (Byungchul Park)

         - Make load tracking frequency scale invariant (Dietmar Eggemann)

         - sched/deadline updates (Juri Lelli)

         - stop machine fixes, cleanups and enhancements for bugs triggered by
           CPU hotplug stress testing (Oleg Nesterov)

         - scheduler preemption code rework: remove PREEMPT_ACTIVE and related
           cleanups (Peter Zijlstra)

         - Rework the sched_info::run_delay code to fix races (Peter Zijlstra)

         - Optimize per entity utilization tracking (Peter Zijlstra)

         - ... misc other fixes, cleanups and smaller updates"

      * 'sched-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (57 commits)
        sched: Don't scan all-offline ->cpus_allowed twice if !CONFIG_CPUSETS
        sched: Move cpu_active() tests from stop_two_cpus() into 
migrate_swap_stop()
        sched: Start stopper early
        stop_machine: Kill cpu_stop_threads->setup() and cpu_stop_unpark()
        stop_machine: Kill smp_hotplug_thread->pre_unpark, introduce 
stop_machine_unpark()
        stop_machine: Change cpu_stop_queue_two_works() to rely on 
stopper->enabled
        stop_machine: Introduce __cpu_stop_queue_work() and 
cpu_stop_queue_two_works()
        stop_machine: Ensure that a queued callback will be called before 
cpu_stop_park()
        sched/x86: Fix typo in __switch_to() comments
        sched/core: Remove a parameter in the migrate_task_rq() function
        sched/core: Drop unlikely behind BUG_ON()
        sched/core: Fix task and run queue sched_info::run_delay inconsistencies
        sched/numa: Fix task_tick_fair() from disabling numa_balancing
        sched/core: Add preempt_count invariant check
        sched/core: More notrace annotations
        sched/core: Kill PREEMPT_ACTIVE
        sched/core, sched/x86: Kill thread_info::saved_preempt_count
        sched/core: Simplify preempt_count tests
        sched/core: Robustify preemption leak checks
        sched/core: Stop setting PREEMPT_ACTIVE
        ...

  commit b831ef2cad979912850e34f82415c0c5d59de8cb
  Merge: b02ac6b dc34bdd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 17:51:33 2015 -0800

      Merge branch 'ras-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RAS changes from Ingo Molnar:
       "The main system reliability related changes were from x86, but also
        some generic RAS changes:

         - AMD MCE error injection subsystem enhancements.  (Aravind
           Gopalakrishnan)

         - Fix MCE and CPU hotplug interaction bug.  (Ashok Raj)

         - kcrash bootup robustness fix.  (Baoquan He)

         - kcrash cleanups.  (Borislav Petkov)

         - x86 microcode driver rework: simplify it by unmodularizing it and
           other cleanups.  (Borislav Petkov)"

      * 'ras-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (23 commits)
        x86/mce: Add a default case to the switch in __mcheck_cpu_ancient_init()
        x86/mce: Add a Scalable MCA vendor flags bit
        MAINTAINERS: Unify the microcode driver section
        x86/microcode/intel: Move #ifdef DEBUG inside the function
        x86/microcode/amd: Remove maintainers from comments
        x86/microcode: Remove modularization leftovers
        x86/microcode: Merge the early microcode loader
        x86/microcode: Unmodularize the microcode driver
        x86/mce: Fix thermal throttling reporting after kexec
        kexec/crash: Say which char is the unrecognized
        x86/setup/crash: Check memblock_reserve() retval
        x86/setup/crash: Cleanup some more
        x86/setup/crash: Remove alignment variable
        x86/setup: Cleanup crashkernel reservation functions
        x86/amd_nb, EDAC: Rename amd_get_node_id()
        x86/setup: Do not reserve crashkernel high memory if low reservation 
failed
        x86/microcode/amd: Do not overwrite final patch levels
        x86/microcode/amd: Extract current patch level read to a function
        x86/ras/mce_amd_inj: Inject bank 4 errors on the NBC
        x86/ras/mce_amd_inj: Trigger deferred and thresholding errors interrupts
        ...

  commit b02ac6b18cd4e2c76bf0a102c20c429b973f5f76
  Merge: 105ff3c bebd23a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 17:38:09 2015 -0800

      Merge branch 'perf-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf updates from Ingo Molnar:
       "Kernel side changes:

         - Improve accuracy of perf/sched clock on x86.  (Adrian Hunter)

         - Intel DS and BTS updates.  (Alexander Shishkin)

         - Intel cstate PMU support.  (Kan Liang)

         - Add group read support to perf_event_read().  (Peter Zijlstra)

         - Branch call hardware sampling support, implemented on x86 and
           PowerPC.  (Stephane Eranian)

         - Event groups transactional interface enhancements.  (Sukadev
           Bhattiprolu)

         - Enable proper x86/intel/uncore PMU support on multi-segment PCI
           systems.  (Taku Izumi)

         - ... misc fixes and cleanups.

        The perf tooling team was very busy again with 200+ commits, the full
        diff doesn't fit into lkml size limits.  Here's an (incomplete) list
        of the tooling highlights:

        New features:

         - Change the default event used in all tools (record/top): use the
           most precise "cycles" hw counter available, i.e. when the user
           doesn't specify any event, it will try using cycles:ppp, cycles:pp,
           etc and fall back transparently until it finds a working counter.
           (Arnaldo Carvalho de Melo)

         - Integration of perf with eBPF that, given an eBPF .c source file
           (or .o file built for the 'bpf' target with clang), will get it
           automatically built, validated and loaded into the kernel via the
           sys_bpf syscall, which can then be used and seen using 'perf trace'
           and other tools.

           (Wang Nan)

        Various user interface improvements:

         - Automatic pager invocation on long help output.  (Namhyung Kim)

         - Search for more options when passing args to -h, e.g.: (Arnaldo
           Carvalho de Melo)

              $ perf report -h interface

              Usage: perf report [<options>]

               --gtk    Use the GTK2 interface
               --stdio  Use the stdio interface
               --tui    Use the TUI interface

         - Show ordered command line options when -h is used or when an
           unknown option is specified.  (Arnaldo Carvalho de Melo)

         - If options are passed after -h, show just its descriptions, not all
           options.  (Arnaldo Carvalho de Melo)

         - Implement column based horizontal scrolling in the hists browser
           (top, report), making it possible to use the TUI for things like
           'perf mem report' where there are many more columns than can fit in
           a terminal.  (Arnaldo Carvalho de Melo)

         - Enhance the error reporting of tracepoint event parsing, e.g.:

             $ oldperf record -e sched:sched_switc usleep 1
             event syntax error: 'sched:sched_switc'
                                  \___ unknown tracepoint
             Run 'perf list' for a list of valid events

           Now we get the much nicer:

             $ perf record -e sched:sched_switc ls
             event syntax error: 'sched:sched_switc'
                                  \___ can't access trace events

             Error: No permissions to read 
/sys/kernel/debug/tracing/events/sched/sched_switc
             Hint:  Try 'sudo mount -o remount,mode=755 /sys/kernel/debug'

           And after we have those mount point permissions fixed:

             $ perf record -e sched:sched_switc ls
             event syntax error: 'sched:sched_switc'
                                  \___ unknown tracepoint

             Error: File /sys/kernel/debug/tracing/events/sched/sched_switc not 
found.
             Hint:  Perhaps this kernel misses some CONFIG_ setting to enable 
this feature?.

           I.e.  basically now the event parsing routing uses the 
strerror_open()
           routines introduced by and used in 'perf trace' work.  (Jiri Olsa)

         - Fail properly when pattern matching fails to find a tracepoint,
           i.e. '-e non:existent' was being correctly handled, with a proper
           error message about that not being a valid event, but '-e
           non:existent*' wasn't, fix it.  (Jiri Olsa)

         - Do event name substring search as last resort in 'perf list'.
           (Arnaldo Carvalho de Melo)

           E.g.:

             # perf list clock

             List of pre-defined events (to be used in -e):

              cpu-clock                                          [Software 
event]
              task-clock                                         [Software 
event]

              uncore_cbox_0/clockticks/                          [Kernel PMU 
event]
              uncore_cbox_1/clockticks/                          [Kernel PMU 
event]

              kvm:kvm_pvclock_update                             [Tracepoint 
event]
              kvm:kvm_update_master_clock                        [Tracepoint 
event]
              power:clock_disable                                [Tracepoint 
event]
              power:clock_enable                                 [Tracepoint 
event]
              power:clock_set_rate                               [Tracepoint 
event]
              syscalls:sys_enter_clock_adjtime                   [Tracepoint 
event]
              syscalls:sys_enter_clock_getres                    [Tracepoint 
event]
              syscalls:sys_enter_clock_gettime                   [Tracepoint 
event]
              syscalls:sys_enter_clock_nanosleep                 [Tracepoint 
event]
              syscalls:sys_enter_clock_settime                   [Tracepoint 
event]
              syscalls:sys_exit_clock_adjtime                    [Tracepoint 
event]
              syscalls:sys_exit_clock_getres                     [Tracepoint 
event]
              syscalls:sys_exit_clock_gettime                    [Tracepoint 
event]
              syscalls:sys_exit_clock_nanosleep                  [Tracepoint 
event]
              syscalls:sys_exit_clock_settime                    [Tracepoint 
event]

        Intel PT hardware tracing enhancements:

         - Accept a zero --itrace period, meaning "as often as possible".  In
           the case of Intel PT that is the same as a period of 1 and a unit
           of 'instructions' (i.e.  --itrace=i1i).  (Adrian Hunter)

         - Harmonize itrace's synthesized callchains with the existing
           --max-stack tool option.  (Adrian Hunter)

         - Allow time to be displayed in nanoseconds in 'perf script'.
           (Adrian Hunter)

         - Fix potential infinite loop when handling Intel PT timestamps.
           (Adrian Hunter)

         - Slighly improve Intel PT debug logging.  (Adrian Hunter)

         - Warn when AUX data has been lost, just like when processing
           PERF_RECORD_LOST.  (Adrian Hunter)

         - Further document export-to-postgresql.py script.  (Adrian Hunter)

         - Add option to synthesize branch stack from auxtrace data.  (Adrian
           Hunter)

        Misc notable changes:

         - Switch the default callchain output mode to 'graph,0.5,caller', to
           make it look like the default for other tools, reducing the
           learning curve for people used to 'caller' based viewing.  (Arnaldo
           Carvalho de Melo)

         - various call chain usability enhancements.  (Namhyung Kim)

         - Introduce the 'P' event modifier, meaning 'max precision level,
           please', i.e.:

              $ perf record -e cycles:P usleep 1

           Is now similar to:

              $ perf record usleep 1

           Useful, for instance, when specifying multiple events.  (Jiri Olsa)

         - Add 'socket' sort entry, to sort by the processor socket in 'perf
           top' and 'perf report'.  (Kan Liang)

         - Introduce --socket-filter to 'perf report', for filtering by
           processor socket.  (Kan Liang)

         - Add new "Zoom into Processor Socket" operation in the perf hists
           browser, used in 'perf top' and 'perf report'.  (Kan Liang)

         - Allow probing on kmodules without DWARF.  (Masami Hiramatsu)

         - Fix 'perf probe -l' for probes added to kernel module functions.
           (Masami Hiramatsu)

         - Preparatory work for the 'perf stat record' feature that will allow
           generating perf.data files with counting data in addition to the
           sampling mode we have now (Jiri Olsa)

         - Update libtraceevent KVM plugin.  (Paolo Bonzini)

         - ... plus lots of other enhancements that I failed to list properly,
           by: Adrian Hunter, Alexander Shishkin, Andi Kleen, Andrzej Hajda,
           Arnaldo Carvalho de Melo, Dima Kogan, Don Zickus, Geliang Tang, He
           Kuang, Huaitong Han, Ingo Molnar, Jan Stancek, Jiri Olsa, Kan
           Liang, Kirill Tkhai, Masami Hiramatsu, Matt Fleming, Namhyung Kim,
           Paolo Bonzini, Peter Zijlstra, Rabin Vincent, Scott Wood, Stephane
           Eranian, Sukadev Bhattiprolu, Taku Izumi, Vaishali Thakkar, Wang
           Nan, Yang Shi and Yunlong Song"

      * 'perf-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (260 commits)
        perf unwind: Pass symbol source to libunwind
        tools build: Fix libiberty feature detection
        perf tools: Compile scriptlets to BPF objects when passing '.c' to 
--event
        perf record: Add clang options for compiling BPF scripts
        perf bpf: Attach eBPF filter to perf event
        perf tools: Make sure fixdep is built before libbpf
        perf script: Enable printing of branch stack
        perf trace: Add cmd string table to decode sys_bpf first arg
        perf bpf: Collect perf_evsel in BPF object files
        perf tools: Load eBPF object into kernel
        perf tools: Create probe points for BPF programs
        perf tools: Enable passing bpf object file to --event
        perf ebpf: Add the libbpf glue
        perf tools: Make perf depend on libbpf
        perf symbols: Fix endless loop in dso__split_kallsyms_for_kcore
        perf tools: Enable pre-event inherit setting by config terms
        perf symbols: we can now read separate debug-info files based on a 
build ID
        perf symbols: Fix type error when reading a build-id
        perf tools: Search for more options when passing args to -h
        perf stat: Cache aggregated map entries in extra cpumap
        ...

  commit 105ff3cbf225036b75a6a46c96d1ddce8e7bdc66
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 17:22:17 2015 -0800

      atomic: remove all traces of READ_ONCE_CTRL() and atomic*_read_ctrl()

      This seems to be a mis-reading of how alpha memory ordering works, and
      is not backed up by the alpha architecture manual.  The helper functions
      don't do anything special on any other architectures, and the arguments
      that support them being safe on other architectures also argue that they
      are safe on alpha.

      Basically, the "control dependency" is between a previous read and a
      subsequent write that is dependent on the value read.  Even if the
      subsequent write is actually done speculatively, there is no way that
      such a speculative write could be made visible to other cpu's until it
      has been committed, which requires validating the speculation.

      Note that most weakely ordered architectures (very much including alpha)
      do not guarantee any ordering relationship between two loads that depend
      on each other on a control dependency:

          read A
          if (val == 1)
              read B

      because the conditional may be predicted, and the "read B" may be
      speculatively moved up to before reading the value A.  So we require the
      user to insert a smp_rmb() between the two accesses to be correct:

          read A;
          if (A == 1)
              smp_rmb()
              read B

      Alpha is further special in that it can break that ordering even if the
      *address* of B depends on the read of A, because the cacheline that is
      read later may be stale unless you have a memory barrier in between the
      pointer read and the read of the value behind a pointer:

          read ptr
          read offset(ptr)

      whereas all other weakly ordered architectures guarantee that the data
      dependency (as opposed to just a control dependency) will order the two
      accesses.  As a result, alpha needs a "smp_read_barrier_depends()" in
      between those two reads for them to be ordered.

      The coontrol dependency that "READ_ONCE_CTRL()" and "atomic_read_ctrl()"
      had was a control dependency to a subsequent *write*, however, and
      nobody can finalize such a subsequent write without having actually done
      the read.  And were you to write such a value to a "stale" cacheline
      (the way the unordered reads came to be), that would seem to lose the
      write entirely.

      So the things that make alpha able to re-order reads even more
      aggressively than other weak architectures do not seem to be relevant
      for a subsequent write.  Alpha memory ordering may be strange, but
      there's no real indication that it is *that* strange.

      Also, the alpha architecture reference manual very explicitly talks
      about the definition of "Dependence Constraints" in section 5.6.1.7,
      where a preceding read dominates a subsequent write.

      Such a dependence constraint admittedly does not impose a BEFORE (alpha
      architecture term for globally visible ordering), but it does guarantee
      that there can be no "causal loop".  I don't see how you could avoid
      such a loop if another cpu could see the stored value and then impact
      the value of the first read.  Put another way: the read and the write
      could not be seen as being out of order wrt other cpus.

      So I do not see how these "x_ctrl()" functions can currently be necessary.

      I may have to eat my words at some point, but in the absense of clear
      proof that alpha actually needs this, or indeed even an explanation of
      how alpha could _possibly_ need it, I do not believe these functions are
      called for.

      And if it turns out that alpha really _does_ need a barrier for this
      case, that barrier still should not be "smp_read_barrier_depends()".
      We'd have to make up some new speciality barrier just for alpha, along
      with the documentation for why it really is necessary.

      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Paul E McKenney <paulmck@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d63a9788650fcd999b34584316afee6bd4378f19
  Merge: 2814228 6e490b0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 16:10:43 2015 -0800

      Merge branch 'locking-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull locking changes from Ingo Molnar:
       "The main changes in this cycle were:

         - More gradual enhancements to atomic ops: new atomic*_read_ctrl()
           ops, synchronize atomic_{read,set}() ordering requirements between
           architectures, add atomic_long_t bitops.  (Peter Zijlstra)

         - Add _{relaxed|acquire|release}() variants for inc/dec atomics and
           use them in various locking primitives: mutex, rtmutex, mcs, rwsem.
           This enables weakly ordered architectures (such as arm64) to make
           use of more locking related optimizations.  (Davidlohr Bueso)

         - Implement atomic[64]_{inc,dec}_relaxed() on ARM.  (Will Deacon)

         - Futex kernel data cache footprint micro-optimization.  (Rasmus
           Villemoes)

         - pvqspinlock runtime overhead micro-optimization.  (Waiman Long)

         - misc smaller fixlets"

      * 'locking-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        ARM, locking/atomics: Implement _relaxed variants of 
atomic[64]_{inc,dec}
        locking/rwsem: Use acquire/release semantics
        locking/mcs: Use acquire/release semantics
        locking/rtmutex: Use acquire/release semantics
        locking/mutex: Use acquire/release semantics
        locking/asm-generic: Add _{relaxed|acquire|release}() variants for 
inc/dec atomics
        atomic: Implement atomic_read_ctrl()
        atomic, arch: Audit atomic_{read,set}()
        atomic: Add atomic_long_t bitops
        futex: Force hot variables into a single cache line
        locking/pvqspinlock: Kick the PV CPU unconditionally when _Q_SLOW_VAL
        locking/osq: Relax atomic semantics
        locking/qrwlock: Rename ->lock to ->wait_lock
        locking/Documentation/lockstat: Fix typo - lokcing -> locking
        locking/atomics, cmpxchg: Privatize the inclusion of asm/cmpxchg.h

  commit 281422869942c19f05a08d4017c633d08d390938
  Merge: f5a8160 b33e18f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:40:38 2015 -0800

      Merge branch 'core-rcu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RCU changes from Ingo Molnar:
       "The main changes in this cycle were:

         - Improvements to expedited grace periods (Paul E McKenney)

         - Performance improvements to and locktorture tests for percpu-rwsem
           (Oleg Nesterov, Paul E McKenney)

         - Torture-test changes (Paul E McKenney, Davidlohr Bueso)

         - Documentation updates (Paul E McKenney)

         - Miscellaneous fixes (Paul E McKenney, Boqun Feng, Oleg Nesterov,
           Patrick Marlier)"

      * 'core-rcu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (54 commits)
        fs/writeback, rcu: Don't use list_entry_rcu() for pointer offsetting in 
bdi_split_work_to_wbs()
        rcu: Better hotplug handling for synchronize_sched_expedited()
        rcu: Enable stall warnings for synchronize_rcu_expedited()
        rcu: Add tasks to expedited stall-warning messages
        rcu: Add online/offline info to expedited stall warning message
        rcu: Consolidate expedited CPU selection
        rcu: Prepare for consolidating expedited CPU selection
        cpu: Remove try_get_online_cpus()
        rcu: Stop excluding CPU hotplug in synchronize_sched_expedited()
        rcu: Stop silencing lockdep false positive for expedited grace periods
        rcu: Switch synchronize_sched_expedited() to IPI
        locktorture: Fix module unwind when bad torture_type specified
        torture: Forgive non-plural arguments
        rcutorture: Fix unused-function warning for torturing_tasks()
        rcutorture: Fix module unwind when bad torture_type specified
        rcu_sync: Cleanup the CONFIG_PROVE_RCU checks
        locking/percpu-rwsem: Clean up the lockdep annotations in 
percpu_down_read()
        locking/percpu-rwsem: Fix the comments outdated by rcu_sync
        locking/percpu-rwsem: Make use of the rcu_sync infrastructure
        locking/percpu-rwsem: Make percpu_free_rwsem() after kzalloc() safe
        ...

  commit f5a8160c1e055c0fd8d16a5b3ac97c638365b0db
  Merge: 7eeef2a 78b9bc9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:05:52 2015 -0800

      Merge branch 'core-efi-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull EFI changes from Ingo Molnar:
       "The main changes in this cycle were:

         - further EFI code generalization to make it more workable for ARM64
         - various extensions, such as 64-bit framebuffer address support,
           UEFI v2.5 EFI_PROPERTIES_TABLE support
         - code modularization simplifications and cleanups
         - new debugging parameters
         - various fixes and smaller additions"

      * 'core-efi-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (23 commits)
        efi: Fix warning of int-to-pointer-cast on x86 32-bit builds
        efi: Use correct type for struct efi_memory_map::phys_map
        x86/efi: Fix kernel panic when CONFIG_DEBUG_VIRTUAL is enabled
        efi: Add "efi_fake_mem" boot option
        x86/efi: Rename print_efi_memmap() to efi_print_memmap()
        efi: Auto-load the efi-pstore module
        efi: Introduce EFI_NX_PE_DATA bit and set it from properties table
        efi: Add support for UEFIv2.5 Properties table
        efi: Add EFI_MEMORY_MORE_RELIABLE support to efi_md_typeattr_format()
        efifb: Add support for 64-bit frame buffer addresses
        efi/arm64: Clean up efi_get_fdt_params() interface
        arm64: Use core efi=debug instead of uefi_debug command line parameter
        efi/x86: Move efi=debug option parsing to core
        drivers/firmware: Make efi/esrt.c driver explicitly non-modular
        efi: Use the generic efi.memmap instead of 'memmap'
        acpi/apei: Use appropriate pgprot_t to map GHES memory
        arm64, acpi/apei: Implement arch_apei_get_mem_attributes()
        arm64/mm: Add PROT_DEVICE_nGnRnE and PROT_NORMAL_WT
        acpi, x86: Implement arch_apei_get_mem_attributes()
        efi, x86: Rearrange efi_mem_attributes()
        ...

  commit 7eeef2abe87dc0d8c276f97ccfdb1f42d9d1e4d8
  Merge: 6aa2fdb b2f7392
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:04:04 2015 -0800

      Merge branch 'core-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull wchan kernel address hiding from Ingo Molnar:
       "This fixes a wchan related information leak in /proc/PID/stat.

        There's a bit of an ABI twist to it: instead of setting the wchan
        field to 0 (which is our usual technique) we set it conditionally to a
        0/1 flag to keep ABI compatibility with older procps versions that
        only fetches /proc/PID/wchan (symbolic names) if the absolute wchan
        address is nonzero"

      * 'core-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        fs/proc, core/debug: Don't expose absolute kernel addresses via wchan

  commit 6aa2fdb87cf01d7746955c600cbac352dc04d451
  Merge: 7b2a430 d9e4ad5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 14:40:01 2015 -0800

      Merge branch 'irq-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq updates from Thomas Gleixner:
       "The irq departement delivers:

         - Rework the irqdomain core infrastructure to accomodate ACPI based
           systems.  This is required to support ARM64 without creating
           artificial device tree nodes.

         - Sanitize the ACPI based ARM GIC initialization by making use of the
           new firmware independent irqdomain core

         - Further improvements to the generic MSI management

         - Generalize the irq migration on CPU hotplug

         - Improvements to the threaded interrupt infrastructure

         - Allow the migration of "chained" low level interrupt handlers

         - Allow optional force masking of interrupts in disable_irq[_nosysnc]

         - Support for two new interrupt chips - Sigh!

         - A larger set of errata fixes for ARM gicv3

         - The usual pile of fixes, updates, improvements and cleanups all
           over the place"

      * 'irq-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (71 commits)
        Document that IRQ_NONE should be returned when IRQ not actually handled
        PCI/MSI: Allow the MSI domain to be device-specific
        PCI: Add per-device MSI domain hook
        of/irq: Use the msi-map property to provide device-specific MSI domain
        of/irq: Split of_msi_map_rid to reuse msi-map lookup
        irqchip/gic-v3-its: Parse new version of msi-parent property
        PCI/MSI: Use of_msi_get_domain instead of open-coded "msi-parent" 
parsing
        of/irq: Use of_msi_get_domain instead of open-coded "msi-parent" parsing
        of/irq: Add support code for multi-parent version of "msi-parent"
        irqchip/gic-v3-its: Add handling of PCI requester id.
        PCI/MSI: Add helper function pci_msi_domain_get_msi_rid().
        of/irq: Add new function of_msi_map_rid()
        Docs: dt: Add PCI MSI map bindings
        irqchip/gic-v2m: Add support for multiple MSI frames
        irqchip/gic-v3: Fix translation of LPIs after conversion to irq_fwspec
        irqchip/mxs: Add Alphascale ASM9260 support
        irqchip/mxs: Prepare driver for hardware with different offsets
        irqchip/mxs: Panic if ioremap or domain creation fails
        irqdomain: Documentation updates
        irqdomain/msi: Use fwnode instead of of_node
        ...

  commit 7b2a4306f9e7d64bb408a6df3bb419500578068a
  Merge: 316dde2 03f136a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 14:13:41 2015 -0800

      Merge branch 'timers-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer updates from Thomas Gleixner:
       "The timer departement provides:

         - More y2038 work in the area of ntp and pps.

         - Optimization of posix cpu timers

         - New time related selftests

         - Some new clocksource drivers

         - The usual pile of fixes, cleanups and improvements"

      * 'timers-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (25 commits)
        timeconst: Update path in comment
        timers/x86/hpet: Type adjustments
        clocksource/drivers/armada-370-xp: Implement ARM delay timer
        clocksource/drivers/tango_xtal: Add new timer for Tango SoCs
        clocksource/drivers/imx: Allow timer irq affinity change
        clocksource/drivers/exynos_mct: Use container_of() instead of 
this_cpu_ptr()
        clocksource/drivers/h8300_*: Remove unneeded memset()s
        clocksource/drivers/sh_cmt: Remove unneeded memset() in sh_cmt_setup()
        clocksource/drivers/em_sti: Remove unneeded memset()s
        clocksource/drivers/mediatek: Use GPT as sched clock source
        clockevents/drivers/mtk: Fix spurious interrupt leading to crash
        posix_cpu_timer: Reduce unnecessary sighand lock contention
        posix_cpu_timer: Convert cputimer->running to bool
        posix_cpu_timer: Check thread timers only when there are active thread 
timers
        posix_cpu_timer: Optimize fastpath_timer_check()
        timers, kselftest: Add 'adjtick' test to validate adjtimex() tick 
adjustments
        timers: Use __fls in apply_slack()
        clocksource: Remove return statement from void functions
        net: sfc: avoid using timespec
        ntp/pps: use y2038 safe types in pps_event_time
        ...

  commit 316dde2fe95b33657de1fc2db54bfc16aa065790
  Merge: 2c2b828 116ef0f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:54:35 2015 -0800

      Merge branch 'for-linus' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM updates from Russell King:
       "In this ARM merge, we remove more lines than we add.  Changes include:

         - Enable imprecise aborts early, so that bus errors aren't masked
           until later in the boot.  This has the side effect that boot
           loaders which provoke these aborts can cause the kernel to crash
           early in boot, so we install a handler to report this event around
           the site where these are enabled.

         - Remove the buggy but impossible to enable cmpxchg syscall code.

         - Add unwinding annotations to some assembly code.

         - Add support for atomic half-word exchange for ARMv6k+.

         - Reduce ioremap() alignment for SMP/LPAE cases where we don't need
           the large alignment.

         - Addition of an "optimal" 3G configuration for systems with 1G of
           RAM.

         - Increase vmalloc space by 128M.

         - Constify some SMP operations structures, which have never been
           writable.

         - Improve ARMs dma_mmap() support for mapping DMA coherent mappings
           into userspace.

         - Fix to the NMI backtrace code in the IPI case on ARM where the
           failing CPU gets stuck for 10s waiting for its own IPI to be
           delivered.

         - Removal of legacy PM support from the AMBA bus driver.

         - Another fix for the previous fix of vdsomunge"

      * 'for-linus' of git://ftp.arm.linux.org.uk/~rmk/linux-arm: (23 commits)
        ARM: 8449/1: fix bug in vdsomunge swab32 macro
        arm: add missing of_node_put
        ARM: 8447/1: catch pending imprecise abort on unmask
        ARM: 8446/1: amba: Remove unused callbacks for legacy system PM
        ARM: 8443/1: Adding support for atomic half word exchange
        ARM: clean up TWD after previous patch
        ARM: 8441/2: twd: Don't set CLOCK_EVT_FEAT_C3STOP unconditionally
        ARM: 8440/1: remove obsolete documentation
        ARM: make highpte an expert option
        ARM: 8433/1: add a VMSPLIT_3G_OPT config option
        ARM: 8439/1: Fix backtrace generation when IPI is masked
        ARM: 8428/1: kgdb: Fix registers on sleeping tasks
        ARM: 8427/1: dma-mapping: add support for offset parameter in dma_mmap()
        ARM: 8426/1: dma-mapping: add missing range check in dma_mmap()
        ARM: remove user cmpxchg syscall
        ARM: 8438/1: Add unwinding to __clear_user_std()
        ARM: 8436/1: hw_breakpoint: remove unnecessary header
        ARM: 8434/2: Revert "7655/1: smp_twd: make 
twd_local_timer_of_register() no-op for nosmp"
        ARM: 8432/1: move VMALLOC_END from 0xff000000 to 0xff800000
        ARM: 8430/1: use default ioremap alignment for SMP or LPAE
        ...

  commit 2c2b8285dcd4d0674b6e77269cf32721fffea59e
  Merge: 0921f1e 5a364c2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:21:09 2015 -0800

      Merge tag 'arc-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc

      Pull ARC updates from Vineet Gupta:

       - Support for new MM features in ARCv2 cores (THP, PAE40) Some generic
         THP bits are touched - all ACKed by Kirill

       - Platform framework updates to prepare for EZChip arrival (still in 
works)

       - ARC Public Mailing list setup finally 
(linux-snps-arc@xxxxxxxxxxxxxxxxxx)

      * tag 'arc-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc: (42 commits)
        ARC: mm: PAE40 support
        ARC: mm: PAE40: tlbex.S: Explicitify the size of pte_t
        ARC: mm: PAE40: switch to using phys_addr_t for physical addresses
        ARC: mm: HIGHMEM: populate high memory from DT
        ARC: mm: HIGHMEM: kmap API implementation
        ARC: mm: preps ahead of HIGHMEM support #2
        ARC: mm: preps ahead of HIGHMEM support
        ARC: mm: use generic macros _BITUL()/_AC()
        ARC: mm: Improve Duplicate PD Fault handler
        MAINTAINERS: Add public mailing list for ARC
        ARC: Ensure DT mem base is same as what kernel is built with
        ARC: boot: Non Master cpus only need to call EARLY_CPU_SETUP once
        ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_smp()
        ARC: smp: Introduce smp hook @init_irq_cpu called for all cores
        ARC: smp: Rename platform hook @init_smp -> @init_cpu_smp
        ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_early_smp()
        ARC: smp: Introduce smp hook @init_early_smp for Master core
        ARC: remove @init_time, @init_irq platform callbacks
        ARC: smp: irqchip: handle IPI as percpu irq like timer
        ARC: boot: Support Halt-on-reset and Run-on-reset SMP booting modes
        ...

  commit 0921f1efb605d8fda43d794734222d1ad39c6840
  Merge: 15f9340 4247896
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:15:46 2015 -0800

      Merge tag 'cris-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jesper/cris

      Pull CRIS changes from Jesper Nilsson:
       "Mostly another batch of code removal due to move to standard
        frameworks for CRISv32, initial devicetree configuration for a couple
        of boards, and some small fixes for kgdb and time handling"

      * tag 'cris-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jesper/cris:
        cris: Drop reference to get_cmos_time()
        CRIS: Drop code related to obsolete or unused kconfigs
        cris: time: Cleanup of persistent clock stuff
        cris: re-use helpers to dump data in hex format
        CRIS v32: remove old GPIO and LEDs code
        CRIS v32: remove I2C bitbanging driver
        CRIS v32: add ARTPEC-3 and P1343 device trees
        CRIS v32: dev88: add GPIO, LEDs, RTC, temp sensor
        CRIS: add dt-bindings symlink
        CRIS v32: increase NR_IRQS
        cris: arch-v10: kgdb: Add '__used' for static variable is_dyn_brkp
        cris: arch-v10: kgdb: Use BAR instead of DTP0 for register P12
        cris: kgdb: use native hex2bin

  commit 15f93405aae307a3cb2c33c795286463601963f7
  Merge: df91fba 6ebbabb
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:09:32 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/egtvedt/linux-avr32

      Pull avr32 update from Hans-Christian Noren Egtvedt.

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/egtvedt/linux-avr32:
        avr32: atngw100: remove useless include

  commit df91fba5e7ed414b1856b33bbed6d55439a14c47
  Merge: e8a2a17 bab84fa
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:01:48 2015 -0800

      Merge branch 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k

      Pull m68k update from Geert Uytterhoeven.

      * 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k:
        m68k/sun3: Use %pM format specifier to print ethernet address

  commit e8a2a176dd0f3e4c7252b79dc5cea6bd4acaf78e
  Merge: 5062ecd ffdc307
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 12:20:29 2015 -0800

      Merge tag 'leds_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds

      Pull LED updates from Jacek Anaszewski:

       - Move the out-of-LED-tree led-sead3 driver to the LED subsystem.

       - Add 'invert' sysfs attribute to the heartbeat trigger.

       - Add Device Tree support to the leds-netxbig driver and add related DT
         nodes to the kirkwood-netxbig.dtsi and kirkwood-net5big.dts files.
         Remove static LED setup from the related board files.

       - Remove redundant brightness conversion operation from leds-netxbig.

       - Improve leds-bcm6328 driver: improve default-state handling, add more
         init configuration options, print invalid LED instead of warning only
         about maximum LED value.

       - Add a shutdown function for setting gpio-leds into off state when
         shutting down.

       - Fix DT flash timeout property naming in leds-aat1290.txt.

       - Switch to using devm prefixed version of led_classdev_register()
         (leds-cobalt-qube, leds-hp6xx, leds-ot200, leds-ipaq-micro,
         leds-netxbig, leds-locomo, leds-menf21bmc, leds-net48xx, leds-wrap).

       - Add missing of_node_put (leds-powernv, leds-bcm6358, leds-bcm6328,
         leds-88pm860x).

       - Coding style fixes and cleanups: led-class/led-core, leds-ipaq-micro.

      * tag 'leds_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds: (27 
commits)
        leds: 88pm860x: add missing of_node_put
        leds: bcm6328: add missing of_node_put
        leds: bcm6358: add missing of_node_put
        powerpc/powernv: add missing of_node_put
        leds: leds-wrap.c: Use devm_led_classdev_register
        leds: aat1290: Fix property naming of flash-timeout-us
        leds: leds-net48xx: Use devm_led_classdev_register
        leds: leds-menf21bmc.c: Use devm_led_class_register
        leds: leds-locomo.c: Use devm_led_classdev_register
        leds: leds-gpio: add shutdown function
        Documentation: leds: update DT bindings for leds-bcm6328
        leds-bcm6328: add more init configuration options
        leds-bcm6328: simplify and improve default-state handling
        leds-bcm6328: print invalid LED
        leds: netxbig: set led_classdev max_brightness
        leds: netxbig: convert to use the devm_ functions
        ARM: mvebu: remove static LED setup for netxbig boards
        ARM: Kirkwood: add LED DT entries for netxbig boards
        leds: netxbig: add device tree binding
        leds: triggers: add invert to heartbeat
        ...

  commit f32bfb9a8ca083f8d148ea90ae5ba66f4831836e
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 22:36:04 2015 +0300

      sh_eth: use DMA barriers

      Commit  7d7355f58ba4 ("sh_eth: Ensure proper ordering of descriptor active
      bit write/read") did the right thing  but used too "heavy" barriers while
      there were already "lighter" DMA barriers exactly  for this case...

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 73186df8d7fa574345f0ad626ebe89649f8308a5
  Merge: 0c63d80 ebac62f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:41:45 2015 -0500

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Minor overlapping changes in net/ipv4/ipmr.c, in 'net' we were
      fixing the "BH-ness" of the counter bumps whilst in 'net-next'
      the functions were modified to take an explicit 'net' parameter.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c63d80c3fac4e6eb0f01dff756e47bc7cd50092
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Tue Nov 3 17:40:53 2015 +0100

      switchdev: respect SKIP_EOPNOTSUPP flag in case there is no recursion

      Caller passing down the SKIP_EOPNOTSUPP switchdev flag expects that
      -EOPNOTSUPP cannot be returned. But in case of direct op call without
      recurtion, this may happen. So fix this by checking it always on the
      end of __switchdev_port_attr_set function.

      Fixes: 464314ea6c11 ("switchdev: skip over ports returning -EOPNOTSUPP 
when recursing ports")
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2a4f4176217d3a29176dff83f2647c48ebaa30a4
  Author: Phil Sutter <phil@xxxxxx>
  Date:   Tue Nov 3 19:01:41 2015 +0100

      net: sched: kill dead code in sch_choke.c

      It looks like this has never been used at all.

      Signed-off-by: Phil Sutter <phil@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 37b8e1ca0fd7adce1c75b5d95e5515bd2dc234dd
  Author: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:18:37 2015 +0100

      irda: Delete an unnecessary check before the function call 
"irlmp_unregister_service"

      The irlmp_unregister_service() function tests whether its argument is NULL
      and then returns immediately. Thus the test around the call is not needed.

      This issue was detected by using the Coccinelle software.

      Signed-off-by: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 353b39d1b1511376aca71bc3aba62831370561ca
  Author: Amitoj Kaur Chawla <amitoj1606@xxxxxxxxx>
  Date:   Thu Oct 22 18:15:50 2015 +0530

      ide: pdc202xx_new: Replace timeval with ktime_t

      This driver uses 'struct timeval' which we are trying to remove since
      32 bit time types will break in the year 2038 by replacing it with
      ktime_t.

      This patch changes do_gettimeofday() to ktime_get() because
      ktime_get() returns a ktime_t while do_gettimeofday() returns struct
      timeval.

      This patch also uses ktime_us_delta() to get the elapsed time.

      Signed-off-by: Amitoj Kaur Chawla <amitoj1606@xxxxxxxxx>
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b3047a77cba193658ebf534ee4abab9cb5446842
  Merge: 3d131f0 e420842
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 11:30:57 2015 -0500

      Merge tag 'mac80211-for-davem-2015-11-03' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211

      Johannes Berg says:

      ====================
      Another set of fixes:
       * remove a warning on a check that can trigger without any
         errors having happened (Andrei)
       * correctly handle deauth request while in the process of
         associating (Andrei)
       * fix TDLS HT operation (Arik)
       * allow changing AID/listen interval during client setup (Ayala)
       * be more forgiving with WMM parameters to get HT/VHT in case of
         broken APs with bad WMM settings (Emmanuel, myself)
       * a number of other fixes (some in documentation)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3d131f070948e4ad93189cb379b3a45d53dce71b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 10:52:52 2015 -0500

      net: dsa: mv88e6xxx: include DSA ports in VLANs

      DSA ports must be members of a VLAN in order to ensure frame bridging
      between chained switch chips.

      Thus tag them in addition to the CPU port when adding a VLAN, and skip
      them when deleting a VLAN and reporting VLAN members.

      Also use the UNMODIFIED egress policy, so that frames egress on these
      ports as they ingress, tagged or untagged.

      Fixes: 0d3b33e60206 ("net: dsa: mv88e6xxx: add VLAN Load support")
      Reported-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c7ea3c0791e971f05f78453a587a1640fe09a61
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Tue Nov 3 10:52:36 2015 -0500

      net: dsa: mv88e6xxx: disable SA learning for DSA and CPU ports

      Frames with DSA headers passing to/from the CPU were taking place in the
      MAC learning on these ports, resulting in incorrect ATU entries. Disable
      learning on these ports.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5ba3f7d61a3a9e6d94462b207d302931b53d8c61
  Author: Jarod Wilson <jarod@xxxxxxxxxx>
  Date:   Tue Nov 3 10:15:59 2015 -0500

      net/core: fix for_each_netdev_feature

      As pointed out by Nikolay and further explained by Geert, the initial
      for_each_netdev_feature macro was broken, as feature would get set outside
      of the block of code it was intended to run in, thus only ever working for
      the first feature bit in the mask. While less pretty this way, this is
      tested and confirmed functional with multiple feature bits set in
      NETIF_F_UPPER_DISABLES.

      [root@dell-per730-01 ~]# ethtool -K bond0 lro off
      ...
      [  242.761394] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p2.
      [  243.552178] bnx2x 0000:06:00.1 p5p2: using MSI-X  IRQs: sp 74  fp[0] 
76 ... fp[7] 83
      [  244.353978] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p1.
      [  245.147420] bnx2x 0000:06:00.0 p5p1: using MSI-X  IRQs: sp 62  fp[0] 
64 ... fp[7] 71

      [root@dell-per730-01 ~]# ethtool -K bond0 gro off
      ...
      [  251.925645] bond0: Disabling feature 0x0000000000004000 on lower dev 
p5p2.
      [  252.713693] bnx2x 0000:06:00.1 p5p2: using MSI-X  IRQs: sp 74  fp[0] 
76 ... fp[7] 83
      [  253.499085] bond0: Disabling feature 0x0000000000004000 on lower dev 
p5p1.
      [  254.290922] bnx2x 0000:06:00.0 p5p1: using MSI-X  IRQs: sp 62  fp[0] 
64 ... fp[7] 71

      Fixes: fd867d51f ("net/core: generic support for disabling netdev 
features down stack")
      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: Eric Dumazet <edumazet@xxxxxxxxxx>
      CC: Jay Vosburgh <j.vosburgh@xxxxxxxxx>
      CC: Veaceslav Falico <vfalico@xxxxxxxxx>
      CC: Andy Gospodarek <gospo@xxxxxxxxxxxxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      CC: Nikolay Aleksandrov <razor@xxxxxxxxxxxxx>
      CC: Michal Kubecek <mkubecek@xxxxxxx>
      CC: Alexander Duyck <alexander.duyck@xxxxxxxxx>
      CC: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      CC: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Jarod Wilson <jarod@xxxxxxxxxx>
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74f2d19caff885bc656e9acf2a6e727b66ab0ed1
  Author: Padmanabh Ratnakar <padmanabh.ratnakar@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 20:25:59 2015 +0530

      vlan: Invoke driver vlan hooks only if device is present

      NIC drivers mark device as detached during error recovery.
      It expects no manangement hooks to be invoked in this state.
      Invoke driver vlan hooks only if device is present.

      Signed-off-by: Padmanabh Ratnakar <padmanabh.ratnakar@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 754107e34165373b3696620cef344227b10eaa99
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Nov 3 14:51:29 2015 +0100

      arcnet/com20020: add LEDS_CLASS dependency

      The newly added led trigger support in the com20020-pci driver causes
      build errors when CONFIG_LEDS_CLASS is disabled:

      drivers/built-in.o: In function `com20020pci_probe':
      (.text+0x185dc4): undefined reference to `devm_led_classdev_register'
      (.text+0x185dd8): undefined reference to `devm_led_classdev_register'

      This adds a Kconfig dependency to prevent the invalid configurations.
      Other drivers appear to be split 50:50 between 'select' and 'depends on'
      for this symbol, I picked 'depends on' as I could not find a common
      policy and it generally causes fewer problems.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 8890624a4e8c ("arcnet: com20020-pci: add led trigger support")
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d056d9c95be87725c07e514930b41c2c7174e75
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 11:39:20 2015 +0100

      bpf, verifier: annotate verbose printer with __printf

      The verbose() printer dumps the verifier state to user space, so let gcc
      take care to check calls to verbose() for (future) errors. make with W=1
      correctly suggests: function might be possible candidate for 'gnu_printf'
      format attribute [-Wsuggest-attribute=format].

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 85013ab5722268cd3c410425bd5a42feb6974a1f
  Merge: 0561e8e a1f8723
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 11:08:22 2015 -0500

      Merge branch 'dp83640-fixes'

      Stefan Sørensen says:

      ====================
      dp83640 driver fixes

      This series fixes a number of minor bugs in the dp83640 driver.
      ====================

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1f8723f38921a0216a63d3ec9f01ec1e2813363
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:08 2015 +0100

      dp83640: Only wait for timestamps for packets with timestamping enabled.

      In the packet timestamping function, check that the ptp version and
      protocol of the packet matches what we have configured the hardware to
      actually generate timestamps for, before looking/waiting for a timestamp.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5f94c943d5dd4b51f3248193e622dd5fcdbb8b11
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:07 2015 +0100

      ptp: Change ptp_class to a proper bitmask

      Change the definition of PTP_CLASS_L2 to not have any bits overlapping 
with
      the other defined protocol values, allowing the PTP_CLASS_* definitions to
      be for simple filtering on packet type.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ccf6ee9a6980eff9ec0eeaa8f63c65bff34d9697
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:06 2015 +0100

      dp83640: Prune rx timestamp list before reading from it

      The list of rx timestamps are currently only pruned of old entries when a
      new entry is inserted. If no new entries are added, old timestamps may
      survive beyond their lifetime, possible causing them to be attached to
      packets with the same sequence number after a rollover.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4b063258ab9360207a4f6913d31d761bd85631ab
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:05 2015 +0100

      dp83640: Delay scheduled work.

      Currently rx_timestamp_work reschedules itself as a regular workqueue 
item,
      effectively causing it run constantly as long as there are packets left in
      the queue. Fix by using delayed workqueue items, limiting it to run only
      every two jiffies.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 539e44d26855fdd198280ee41360a0b3adcf699b
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:04 2015 +0100

      dp83640: Include hash in timestamp/packet matching

      Only using the message type and sequence id for matching timestamps
      with packets is error prone, as multiple clients may very well be
      sending packets with the same messagetype and timestamp at the same
      time. Fix by extending the check to include the hash of bytes 20-29
      (source id in PTPv2) that is provided with the timestamps.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebac62fe3d24c0ce22dd83afa7b07d1a2aaef44d
  Author: Michal KubeÄ?ek <mkubecek@xxxxxxx>
  Date:   Tue Nov 3 08:51:07 2015 +0100

      ipv6: fix tunnel error handling

      Both tunnel6_protocol and tunnel46_protocol share the same error
      handler, tunnel6_err(), which traverses through tunnel6_handlers list.
      For ipip6 tunnels, we need to traverse tunnel46_handlers as we do e.g.
      in tunnel46_rcv(). Current code can generate an ICMPv6 error message
      with an IPv4 packet embedded in it.

      Fixes: 73d605d1abbd ("[IPSEC]: changing API of xfrm6_tunnel_register")
      Signed-off-by: Michal Kubecek <mkubecek@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0561e8e8786203f1b82322550e5c31aeef033d2f
  Merge: fd867d5 3ea4891
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 10:41:51 2015 -0500

      Merge branch 'mlx5-fixes'

      Or Gerlitz says:

      ====================
      Mellanox mlx5e driver update, Nov 3 2015

      This series contains bunch of small fixes to the mlx5e driver from Achiad.

      Changes from V0:
        - removed the driver patch that dealt with IRQ affinity changes during
          NAPI poll, as this is a generic problem which needs generic solution.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ea4891db8d0d224f59b2fae0f386c8f5e68993f
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:24 2015 +0200

      net/mlx5e: Fix LSO vlan insertion

      Consider vlan insertion impact on headers copy size also for LSO
      packets.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e4cf27bd9ce64d048df52a21cf162ce8b1a99362
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:23 2015 +0200

      net/mlx5e: Re-eanble client vlan TX acceleration

      This reverts commit cd58c714acb9 "net/mlx5e: Disable client vlan TX 
acceleration".

      Bring back client vlan insertion offload, the original
      performance issue was found and fixed in the next patch.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fe9f4fe58d17e09b210061ed089dba6e81564652
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:22 2015 +0200

      net/mlx5e: Return error in case mlx5e_set_features() fails

      In case mlx5e_set_features() fails, return the failure status rather
      than 0.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3435ab59d3febe0c00af2a4d40a6df401effe3de
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:21 2015 +0200

      net/mlx5e: Don't allow more than max supported channels

      Consider MLX5E_MAX_NUM_CHANNELS @ethtool set/get_channels

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61d0e73e0a5ab5fc80f6cd9d54f5146e33288a8d
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:20 2015 +0200

      net/mlx5_core: Use the the real irqn in eq->irqn

      Instead of storing the msix array index in eq->irqn (vecidx),
      store the real irq number.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 01c196a2d3d1cfaab7d20879236e981104749510
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:19 2015 +0200

      net/mlx5e: Wait for RX buffers initialization in a more proper manner

      Use jiffies rather than wait loop with msleep().

      The wait loop didn't take into consideration time when the
      process was not executing.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1985740904342a884471348f6e038ee5d706c36
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:18 2015 +0200

      net/mlx5e: Avoid NULL pointer access in case of configuration failure

      In case a configuration operation that involves closing and re-opening
      resources (e.g RX/TX queue size change) fails at the re-opening stage
      these resources will remain closed.
      So when executing (following) configuration operations (e.g ifconfig
      down) we cannot assume that these resources are available.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b38feccd663b55ab07116208b68e1ffc7c3c7e78
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Nov 2 14:03:46 2015 +0100

      s390: remove runtime instrumentation interrupts

      The external interrupts for runtime instrumentation buffer-full
      and runtime instrumentation halted are unused and have no current
      user. Remove the support and ignore the second parameter of the
      s390_runtime_instr system call from now on.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e510f681d27d402d74dc7b81e13db118e4180937
  Author: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 11:13:18 2015 +0100

      s390/cio: de-duplicate subchannel validation

      cio_validate_io_subchannel() and cio_validate_msg_subchannel() are
      identical, as the called functions already take care about the
      differences between subchannel types.

      Just inline the code into the only user,
      cio_validate_subchannel(), instead.

      Signed-off-by: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Acked-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8f0ba83178d4f3630687296c45d593326ec2d63d
  Author: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 10:45:04 2015 +0100

      s390/css: unneeded initialization in for_each_subchannel

      The ret variable is always set by the fn function.
      There is no need to initialize it.

      Signed-off-by: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
      Reviewed-By: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
      Acked-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 295d8fa961466bb9e9ebb87b46fdad4edaf736de
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Thu Oct 29 01:16:04 2015 +0100

      s390/Kconfig: use builtin bswap

      Depending on the gcc version we can use builtin_bswap instead of
      architecture functions. Doing so is better than the inline assembly
      version of load reverse for two reasons:
      - the sequence of load reversed, apply constant mask, save reversed can
        be optimized to load, apply reversed mask, save
      - builtins are slightly better to optimize e.g. gcc instruction
        scheduler cannot optimize grouping on inline assemblies.

      To enable set we have to ARCH_USE_BUILTIN_BSWAP.
      bloat-o-meter results:
      add/remove: 1/1 grow/shrink: 75/533 up/down: 1711/-9394 (-7683)

      Suggested-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Acked-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ccc0e7dc708ce1bd2e1c4a2b6a180ae7459374de
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Fri Oct 23 12:10:51 2015 +0200

      s390/dasd: fix disconnected device with valid path mask

      Path verification is either done via dasd_eckd_read_conf() which is
      triggered during online processing and resume or via
      do_path_verification_work() which is triggered after path events.
      The dasd_eckd_read_conf() version added paths unconditionally and did
      not check if the path mask was empty. This led to devices having the
      disconnected stop flag set but a valid path mask. So they where not
      working although they had paths validated successfully. After a resume
      this state could even not be solved with additional paths added.

      Fix by checking for an empty path mask in dasd_eckd_read_conf() and
      clearing the device stop bits for a newly added channel path.

      Reviewed-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 251afd69e3328653bae4a8ca09700971ca4000c5
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Thu Oct 15 13:54:39 2015 +0200

      s390/dasd: fix invalid PAV assignment after suspend/resume

      For a valid PAV assignment the DASD driver needs to notice possibly
      changed configuration data. Thus the failing of read configuration
      data should also fail the device restore to prevent invalid PAV
      assignment. The failed device may get restored after additional paths
      get available later on.
      If the restore fails after the device was added to the lcu alias
      handling it needs to be removed from the alias handling before exiting
      the restore function.

      Reviewed-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit c7c0c9deb0a4b0715d2c09438420437b86f387c4
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Thu Oct 15 11:10:08 2015 +0200

      s390/dasd: fix double free in dasd_eckd_read_conf

      The configuration data is stored per path and also the first valid
      configuration data per device. When dasd_eckd_read_conf is called
      again after a path got lost the device configuration data is cleared
      but possibly not the per path configuration data. This might lead to a
      double free when the lost path gets operational again.

      Fix by clearing all per path configuration data when the first valid
      configuration data is received and stored.

      Reviewed-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 55a423b6f105fa323168f15f4bb67f23b21da44e
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Oct 27 13:13:38 2015 +0100

      s390/kernel: fix ptrace peek/poke for floating point registers

      git commit 155e839a814834a3b4b31e729f4716e59d3d2dd4
      "s390/kernel: dynamically allocate FP register save area"
      introduced a regression in regard to ptrace.

      If the vector register extension is not present or unused the
      ptrace peek of a floating pointer register return incorrect data
      and the ptrace poke to a floating pointer register overwrites the
      task structure starting at task->thread.fpu.fprs.

      Cc: stable@xxxxxxxxxx # v4.3
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e4208427247ecc7306c8f71ab3c5c08e08cf9fda
  Author: Ayala Beker <ayala.beker@xxxxxxxxx>
  Date:   Fri Oct 23 11:20:06 2015 +0300

      cfg80211: allow AID/listen interval changes for unassociated station

      Currently, cfg80211 rejects updates of AID and listen interval parameters
      for existing entries. This information is known only at association stage
      and as a result it's impossible to update entries that were added
      unassociated.
      Fix this by allowing updates of these properies for stations that the
      driver (or mac80211) assigned unassociated state.

      This then fixes mac80211's use of NL80211_FEATURE_FULL_AP_CLIENT_STATE.

      Signed-off-by: Ayala Beker <ayala.beker@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit dcae9e0203dfd887a7413cd38d1f87aaac1127f4
  Author: Chaitanya T K <chaitanya.mgit@xxxxxxxxx>
  Date:   Fri Oct 30 23:16:15 2015 +0530

      mac80211: document sleep requirements for channel context ops

      Channel context driver operations can sleep, so add might_sleep()
      and document this.

      Signed-off-by: Chaitanya T K <chaitanya.mgit@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ef95d8ba384781ce574c10f87b97d6bab2659735
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Sun Oct 25 10:59:42 2015 +0200

      mac80211: further improve "no supported rates" warning

      Allow distinguishing the non-station case from the case of a
      station without rates, by using -1 for the non-station case.
      This value cannot be reached with a station since that many
      legacy rates don't exist.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 2ed77ea69205139c3f6016b250d34e09bf48574d
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 22 17:46:06 2015 +0200

      mac80211: treat bad WMM parameters more gracefully

      As WMM is required for HT/VHT operation, treat bad WMM parameters
      more gracefully by falling back to default parameters instead of
      not using WMM assocation. This makes it possible to still use HT
      or VHT, although potentially with reduced quality of service due
      to unintended WMM parameters.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 730a755017139ddedac08d82f73c3532a020d372
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Thu Oct 22 17:46:05 2015 +0200

      mac80211: fixup AIFSN instead of disabling WMM

      Disabling WMM has a huge impact these days. It implies that
      HT and VHT will be disabled which means that the throughput
      will be drammatically reduced.
      Since the AIFSN is a transmission parameter, we can play a
      bit and fix it up to make it compliant with the 802.11
      specification which requires it to be at least 2.
      Increasing it from 1 to 2 will slightly reduce the
      likelyhood to get a transmission opportunity compared to
      other clients that would accept to set AIFSN=1, but at
      least it will allow HT and VHT which is a huge gain.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit cec6628350802b0a652486c41b57d4e1dd37a65c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 22 17:46:04 2015 +0200

      mac80211: make enable_qos parameter to ieee80211_set_wmm_default()

      The function currently determines this value, for use in bss_info.qos,
      based on the interface type itself. Make it a parameter instead and
      set it with the same logic for now.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit e86abc689c5cb963f713c1bab9c37775421a6a96
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 22 17:35:14 2015 +0200

      cfg80211/mac80211: clarify RSSI CQM reporting requirements

      The previous patch changed mac80211 to always report an event
      after a CQM RSSI reconfiguration. Document that as expected
      behaviour in both the cfg80211 and mac80211 API.

      Currently, iwlmvm already implements that behaviour; the other
      drivers implementing CQM RSSI events may have to be changed.

      This behaviour lets userspace know what the current state is
      without relying on querying the data which is racy.

      Reviewed-by: Sharon, Sara <sara.sharon@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 520c75dcae6e588670962243bac6324e7839b648
  Author: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 21:25:51 2015 +0200

      mac80211: fix crash on mesh local link ID generation with VIFs

      llid_in_use needs to be limited to stations of the same VIF, otherwise it
      will cause a NULL deref as the sta_info of non-mesh-VIFs don't have
      sta->mesh set.

      Steps to reproduce:

         modprobe mac80211_hwsim channels=2
         iw phy phy0 interface add ibss0 type ibss
         iw phy phy0 interface add mesh0 type mp
         iw phy phy1 interface add ibss1 type ibss
         iw phy phy1 interface add mesh1 type mp
         ip link set ibss0 up
         ip link set mesh0 up
         ip link set ibss1 up
         ip link set mesh1 up
         iw dev ibss0 ibss join foo 2412
         iw dev ibss1 ibss join foo 2412
         # Ensure that ibss0 and ibss1 are actually associated; I often need to
         # leave and join the cell on ibss1 a second time.
         iw dev mesh0 mesh join bar
         iw dev mesh1 mesh join bar # crash

      Signed-off-by: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 57f255f58165974c131f048b4302728052d92d29
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:34 2015 +0200

      mac80211: TDLS: add proper HT-oper IE

      When 11n peers performs a TDLS connection on a legacy BSS, the HT
      operation IE must be specified according to IEEE802.11-2012 section
      9.23.3.2. Otherwise HT-protection is compromised and the medium becomes
      noisy for both the TDLS and the BSS links.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 0d440ea294a00b60ced66c0bc5cb5caa42fd4fbd
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:33 2015 +0200

      mac80211: don't reconfigure sched scan in case of wowlan

      Scheduled scan has to be reconfigured only if wowlan wasn't
      configured, since otherwise it should continue to run (with
      the 'any' trigger) or be aborted.

      The current code will end up asking the driver to start a new
      scheduled scan without stopping the previous one, and leaking
      some memory (from the previous request.)

      Fix this by doing the abort/restart under the proper conditions.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 968a76cef3d1bb9a3b4d135cd788056e742859f3
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:36 2015 +0200

      mac80211: call drv_stop only if driver is started

      If drv_start() fails during hw_restart, all the running
      interfaces are being closed/stopped, which results in
      drv_stop() being called, although the driver was never
      started successfully.

      This might cause drivers to perform operations on uninitialized
      memory (as they assume it was initialized on drv_start)

      Consider the local->started flag, and call the driver's stop()
      op only if drv_start() succeeded before.

      Move drv_start() and drv_stop() to driver-ops.c, as they are no
      longer simple wrappers.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit c189a685b83955a39884dc2bdae531bc0adf3b98
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sun Oct 25 10:59:40 2015 +0200

      mac80211: Remove WARN_ON_ONCE in ieee80211_recalc_smps

      The recalc_smps work can run after the station disassociates.
      At this stage we already released the channel, but the work
      will be cancelled only when the interface stops.
      In this scenario we can hit the warning in ieee80211_recalc_smps, so
      just remove it.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 43d6df007c0cc111ab8ead8bd95aafab9bb4531d
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:35 2015 +0200

      mac80211: use freezable workqueue for restart work

      Requesting hw restart during suspend might result
      in the restart work being executed after mac80211
      and the hw are suspended.

      Solve the race by simply scheduling the restart
      work on a freezable workqueue.

      Note that there can be some cases of reconfiguration
      on resume (besides the hardware restart):

      * wowlan is not configured -
          All the interfaces removed were removed on suspend,
          and drv_stop() was called. At this point the driver
          shouldn't expect for hw_restart anyway, so we can
          simply cancel it (on resume).

      * wowlan is configured, drv_resume() == 1
          There is no definitive expected behavior in this case,
          as each driver might have different expectations (e.g.
          setting some flags on suspend/restart vs. not handling
          spurious recovery).
          For now, simply let the hw_restart work run again after
          resume, and hope the driver will handle it well (or at
          least initiate another hw restart).

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a64cba3c5330704a034bd3179270b8d04daf6987
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sun Oct 25 10:59:38 2015 +0200

      mac80211: Fix local deauth while associating

      Local request to deauthenticate wasn't handled while associating, thus
      the association could continue even when the user space required to
      disconnect.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 254d3dfe445f94a764e399ca12e04365ac9413ed
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:41 2015 +0200

      mac80211: allow null chandef in tracing

      In TDLS channel-switch operations the chandef can sometimes be NULL.
      Avoid an oops in the trace code for these cases and just print a
      chandef full of zeros.

      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: a7a6bdd0670fe ("mac80211: introduce TDLS channel switch ops")
      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4baf6bea37247e59f1971e8009d13aeda95edba2
  Author: Ola Olsson <ola1olsson@xxxxxxxxx>
  Date:   Thu Oct 29 07:04:58 2015 +0100

      nl80211: Fix potential memory leak from parse_acl_data

      If parse_acl_data succeeds but the subsequent parsing of smps
      attributes fails, there will be a memory leak due to early returns.
      Fix that by moving the ACL parsing later.

      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: 18998c381b19b ("cfg80211: allow requesting SMPS mode on ap start")
      Signed-off-by: Ola Olsson <ola.olsson@xxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 519ee6918b91abdc4bc9720deae17599a109eb40
  Author: Janusz.Dziedzic@xxxxxxxxx <Janusz.Dziedzic@xxxxxxxxx>
  Date:   Tue Oct 27 08:35:11 2015 +0100

      mac80211: fix divide by zero when NOA update

      In case of one shot NOA the interval can be 0, catch that
      instead of potentially (depending on the driver) crashing
      like this:

      divide error: 0000 [#1] SMP
      [...]
      Call Trace:
      <IRQ>
      [<ffffffffc08e891c>] ieee80211_extend_absent_time+0x6c/0xb0 [mac80211]
      [<ffffffffc08e8a17>] ieee80211_update_p2p_noa+0xb7/0xe0 [mac80211]
      [<ffffffffc069cc30>] ath9k_p2p_ps_timer+0x170/0x190 [ath9k]
      [<ffffffffc070adf8>] ath_gen_timer_isr+0xc8/0xf0 [ath9k_hw]
      [<ffffffffc0691156>] ath9k_tasklet+0x296/0x2f0 [ath9k]
      [<ffffffff8107ad65>] tasklet_action+0xe5/0xf0
      [...]

      Cc: stable@xxxxxxxxxxxxxxx [3.16+, due to d463af4a1c34 using it]
      Signed-off-by: Janusz Dziedzic <janusz.dziedzic@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ffdc307d038f02617041f8e5c7e3cd00a1706a2a
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:30 2015 +0200

      leds: 88pm860x: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression n;
      expression e,r;
      @@

       for_each_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 6cc7624415466022749a868c159ac68367bc9a0e
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:29 2015 +0200

      leds: bcm6328: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each
      iteration, so a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 4b6ba5e28b2903fa8b51c6d5fdafb2979fe6eeab
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:28 2015 +0200

      leds: bcm6358: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each
      iteration, so a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit dde4afe7656084b7886f3b721530c32209842390
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:27 2015 +0200

      powerpc/powernv: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit e9aadb864f04f1f7c7f8713fead64a2370be940d
  Author: Fida Mohammad <fmthoker@xxxxxxxxx>
  Date:   Wed Oct 21 03:58:35 2015 -0700

      leds: leds-wrap.c: Use devm_led_classdev_register

      Use of resource managed function devm_led_classdev_register to
      make initialization path simpler. Also removed redundant remove
      function.

      Signed-off-by: Fida Mohammad <fmthoker@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 10238adb6f2bcc6c418188ef3425ea57297fa3a6
  Author: Ingi Kim <ingi2.kim@xxxxxxxxxxx>
  Date:   Thu Oct 22 10:14:07 2015 +0900

      leds: aat1290: Fix property naming of flash-timeout-us

      flash-timeout-us property name is changed to flash-max-timeout-us.
      This patch fixes that name.

      Signed-off-by: Ingi Kim <ingi2.kim@xxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 511676230b56249ecb613298f95f9910684fcb4f
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sat Oct 17 05:02:57 2015 +0530

      leds: leds-net48xx: Use devm_led_classdev_register

      Use devm_led_classdev_register instead of led_classdev_register,
      removing the redundant net48xx_led_remove function.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 81aad9f81e6d89819f12656bd38df9ef639dbe45
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sat Oct 17 01:47:55 2015 +0530

      leds: leds-menf21bmc.c: Use devm_led_class_register

      Use resource-managed function devm_led_classdev_register instead
      of led_classdev_register, consequently remove redundant
      menf21bmc_led_remove function.
      Also drop the unneeded label err_free_leds.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit d43986143463690642bac8897196496d4c776269
  Author: Fida Mohammad <fmthoker@xxxxxxxxx>
  Date:   Fri Oct 16 14:33:03 2015 -0700

      leds: leds-locomo.c: Use devm_led_classdev_register

      Use resource managed function devm_led_classdev_register to make
      initialisation path simpler.
      Also removed redundant led_classdev_unregister function.

      Signed-off-by: Fida Mohammad <fmthoker@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 707f33ed85ff423016674d27bb2e60fe8fa352ce
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Tue Oct 13 07:17:12 2015 +0200

      leds: leds-gpio: add shutdown function

      add a shutdown function for setting the gpio-leds
      into off state when shuting down.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 1d3ff22d633d35048c35c3deeead7ab116cebc32
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:55 2015 +0200

      Documentation: leds: update DT bindings for leds-bcm6328

      This patch adds latest DT bindings for leds-bcm6328 init register
      configuration.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 9f82c778ce17789a038351a411ff65cd41033c7a
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:54 2015 +0200

      leds-bcm6328: add more init configuration options

      This patch adds more init register configuration options:
      - Serial LEDs multiplexing.
      - Serial LEDs clock signal low/high polarity.
      - Serial LEDs data signal low/high polarity.
      - Serial LEDs shift direction inverted/normal.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit d8fe1606d1a7181c877d8b1727cdcfb82f76e91c
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:53 2015 +0200

      leds-bcm6328: simplify and improve default-state handling

      This patch simplifies and improves the code related to
      default-state handling.
      It also changes the code to power off the LEDs by default.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 79653fbb3365002899e7d25ec5ca96aff4241ede
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:52 2015 +0200

      leds-bcm6328: print invalid LED

      Print invalid LED instead of warning only about maximum LED value.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 7b9d9d88158e99a6a17a292ec4ec47105a771c4f
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:38 2015 +0200

      leds: netxbig: set led_classdev max_brightness

      This patch sets the led_classdev max_brightness to the maximum level
      value supported by hardware. This allows to get rid of the brightness
      conversion operation (from software [0:LED_FULL] to hardware ranges) in
      brightness_set().

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit cd0109555bd118ddb8ee0df0ca5d8f9bd3d7a77f
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:37 2015 +0200

      leds: netxbig: convert to use the devm_ functions

      This patch converts the leds-netxbig driver to use the devres functions
      devm_gpio_request_one() and devm_led_classdev_register(). This allows to
      simplify the code a bit.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit ebc278f1575942d08ad3278b71cde99bd24eae63
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:36 2015 +0200

      ARM: mvebu: remove static LED setup for netxbig boards

      Since DT support is now available for the LEDs found on the LaCie
      netxbig boards (Kirkwood-based), then the old-fashion netxbig board
      setup file is no longer needed. This patch removes this file.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 767361fac0f730293c1be8cdf1636cf9510b2245
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:35 2015 +0200

      ARM: Kirkwood: add LED DT entries for netxbig boards

      This patch adds DT entries for the LEDs found on the Kirkwood-based
      LaCie boards 2Big and 5Big Network v2.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 2976b17989094e97567510be3ea91fc2f0c7aab3
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:34 2015 +0200

      leds: netxbig: add device tree binding

      This patch adds device tree support for the netxbig LEDs.

      This also introduces a additionnal DT binding for the GPIO extension bus
      (netxbig-gpio-ext) used to configure the LEDs. Since this bus could also
      be used to control other devices, then it seems more suitable to have it
      in a separate DT binding.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 1c7b9d0edf5ada916fd02e66355f79f2089ee095
  Author: Jiri Prchal <jiri.prchal@xxxxxxxxxxx>
  Date:   Thu Oct 8 10:32:26 2015 +0200

      leds: triggers: add invert to heartbeat

      This patch adds possibility to invert heartbeat blinking.
      The inverted LED is more time ON then OFF. It's because it looks
      better when the heartbeat LED is next to other LED which is most
      time ON. The invert value is exported same way via sysfs in file
      invert like oneshot. I get inspiration from this trigger.

      Signed-off-by: Jiri Prchal <jiri.prchal@xxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 757b06ae04b3b6c8958ab067e879a8865d076d2a
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Mon Sep 28 14:38:04 2015 +0200

      leds: core: Move LED core callbacks out of led-class.c

      Since the API for controlling LED brightness and blinking is defined in
      the LED core, move the related timer and work callbacks to the led-core.c,
      and initialize them through a new led_core_init API.

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Acked-by: Pavel Machek <pavel@xxxxxx>

  commit 22a16873d38829570677871a22cf77f00445206f
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Mon Aug 3 17:04:01 2015 +0200

      LED/MIPS: Move SEAD3 LED driver to where it belongs.

      Fixes the following randconfig problem

      leds-sead3.c:(.text+0x7dc): undefined reference to 
`led_classdev_unregister'
      leds-sead3.c:(.text+0x7e8): undefined reference to 
`led_classdev_unregister'

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Bryan Wu <cooloney@xxxxxxxxx>
      Cc: Richard Purdie <rpurdie@xxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-leds@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 95281b5b598e9805b77dbbaaea400ebc2289bac8
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Mon Sep 7 21:58:29 2015 +0530

      leds: leds-ipaq-micro: Fix coding style issues

      Spaces at the starting of a line are removed, indentation using
      tab, instead of space. Also, line width of more than 80 characters
      is also taken care of.
      Two warnings are left alone to aid better readability.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 431557f4a44f582f83fd83cbee571baeab24b853
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Mon Sep 7 19:43:23 2015 +0530

      leds: leds-ipaq-micro: Use devm_led_classdev_register

      Use of resource-managed function devm_led_classdev_register
      instead of led_classdev_register is preferred, consequently
      remove redundant function micro_leds_remove.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 583a2b2cd73c13a91b5f529466dec4d27716d226
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sat Sep 5 19:53:27 2015 +0530

      leds: leds-ot200: Use devm_led_classdev_register

      Use resource-managed function devm_led_classdev_register
      instead of led_classdev_register to make the error path simpler.
      The goto is replaced with direct return, unneeded label err is
      dropped. Also, remove redundant ot200_led_remove.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit c0fc68ba97b0f96fa4aaa6010ead6b77d3ffc3dd
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sun Sep 6 01:23:37 2015 +0530

      leds: leds-hp6xx: Use devm_led_classdev_register

      Use resource-managed function devm_led_classdev_register
      instead of led_classdev_register to simplify error path.
      An unnecessary check of ret is replaced with a direct return
      Also, remove redundant hp6xxled_remove.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit aa4e2524955971730ff845c0589f2f8f441ad610
  Author: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
  Date:   Fri Sep 4 12:12:01 2015 +0200

      leds: leds-cobalt-qube: Use devm_led_classdev_register

      Use resource-managed function devm_led_classdev_register instead
      of led_classdev_register to make the error-path simpler.

      To be compatible with the change, goto is replaced with direct
      return, unneeded label err_null is dropped and unnecessary variable
      retval is removed. Also, remove redundant cobalt_qube_led_remove.

      Signed-off-by: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 6ebbabbaed0b38563f62100762e3b3780655f83f
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:14:21 2015 +0200

      avr32: atngw100: remove useless include

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Acked-by: Hans-Christian Egtvedt <egtvedt@xxxxxxxxxxxx>

  commit 5f6c99e0ab805d8ec9eda105822912d49aa1d409
  Author: Shaohui Xie <Shaohui.Xie@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 12:27:33 2015 +0800

      net: phy: fix a bug in get_phy_c45_ids

      When probing devices-in-package for a c45 phy, device zero is the last
      device to probe, however, if driver reads 0 from device zero,
      c45_ids->devices_in_package is set to '0', the loop condition of probing
      will be matched again, see codes below:

      for (i = 1;i < num_ids && c45_ids->devices_in_package == 0;i++)

      driver will run in a dead loop.

      This patch restructures the bug and confusing loop, it provides a helper
      function get_phy_c45_devs_in_pkg which to read devices-in-package 
registers
      of a MMD, and rewrites the loop with using the helper function.

      Signed-off-by: Shaohui Xie <Shaohui.Xie@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd867d51f889aec11cca235ebb008578780d052d
  Author: Jarod Wilson <jarod@xxxxxxxxxx>
  Date:   Mon Nov 2 21:55:59 2015 -0500

      net/core: generic support for disabling netdev features down stack

      There are some netdev features, which when disabled on an upper device,
      such as a bonding master or a bridge, must be disabled and cannot be
      re-enabled on underlying devices.

      This is a rework of an earlier more heavy-handed appraoch, which simply
      disables and prevents re-enabling of netdev features listed in a new
      define in include/net/netdev_features.h, NETIF_F_UPPER_DISABLES. Any upper
      device that disables a flag in that feature mask, the disabling will
      propagate down the stack, and any lower device that has any upper device
      with one of those flags disabled should not be able to enable said flag.

      Initially, only LRO is included for proof of concept, and because this
      code effectively does the same thing as dev_disable_lro(), though it will
      also activate from the ethtool path, which was one of the goals here.

      [root@dell-per730-01 ~]# ethtool -k bond0 |grep large
      large-receive-offload: on
      [root@dell-per730-01 ~]# ethtool -k p5p1 |grep large
      large-receive-offload: on
      [root@dell-per730-01 ~]# ethtool -K bond0 lro off
      [root@dell-per730-01 ~]# ethtool -k bond0 |grep large
      large-receive-offload: off
      [root@dell-per730-01 ~]# ethtool -k p5p1 |grep large
      large-receive-offload: off

      dmesg dump:

      [ 1033.277986] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p2.
      [ 1034.067949] bnx2x 0000:06:00.1 p5p2: using MSI-X  IRQs: sp 74  fp[0] 
76 ... fp[7] 83
      [ 1034.753612] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p1.
      [ 1035.591019] bnx2x 0000:06:00.0 p5p1: using MSI-X  IRQs: sp 62  fp[0] 
64 ... fp[7] 71

      This has been successfully tested with bnx2x, qlcnic and netxen network
      cards as slaves in a bond interface. Turning LRO on or off on the master
      also turns it on or off on each of the slaves, new slaves are added with
      LRO in the same state as the master, and LRO can't be toggled on the
      slaves.

      Also, this should largely remove the need for dev_disable_lro(), and most,
      if not all, of its call sites can be replaced by simply making sure
      NETIF_F_LRO isn't included in the relevant device's feature flags.

      Note that this patch is driven by bug reports from users saying it was
      confusing that bonds and slaves had different settings for the same
      features, and while it won't be 100% in sync if a lower device doesn't
      support a feature like LRO, I think this is a good step in the right
      direction.

      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: Eric Dumazet <edumazet@xxxxxxxxxx>
      CC: Jay Vosburgh <j.vosburgh@xxxxxxxxx>
      CC: Veaceslav Falico <vfalico@xxxxxxxxx>
      CC: Andy Gospodarek <gospo@xxxxxxxxxxxxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      CC: Nikolay Aleksandrov <razor@xxxxxxxxxxxxx>
      CC: Michal Kubecek <mkubecek@xxxxxxx>
      CC: Alexander Duyck <alexander.duyck@xxxxxxxxx>
      CC: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Jarod Wilson <jarod@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b2663a4f30e85ec606b806f5135413e6d5c78d1e
  Author: Martin Habets <mhabets@xxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:51:31 2015 +0000

      sfc: push partner queue for skb->xmit_more

      When the IP stack passes SKBs the sfc driver puts them in 2 different TX
      queues (called partners), one for checksummed and one for not checksummed.
      If the SKB has xmit_more set the driver will delay pushing the work to the
      NIC.

      When later it does decide to push the buffers this patch ensures it also
      pushes the partner queue, if that also has any delayed work. Before this
      fix the work in the partner queue would be left for a long time and cause
      a netdev watchdog.

      Fixes: 70b33fb ("sfc: add support for skb->xmit_more")
      Reported-by: Jianlin Shi <jishi@xxxxxxxxxx>
      Signed-off-by: Martin Habets <mhabets@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c238041f517d0a6458264582e8e2a1513766f8e7
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 01:28:07 2015 +0300

      sh_eth: fix typo in RX descriptor bit name

      The correct name of the RX descriptor 0 bit 30 is RDLE (receive descriptor
      list end),  not  RDEL.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ece9009774596ee3df0acba65a324b7ea79387c
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 2 17:08:19 2015 -0800

      sit: fix sit0 percpu double allocations

      sit0 device allocates its percpu storage twice :
      - One time in ipip6_tunnel_init()
      - One time in ipip6_fb_tunnel_init()

      Thus we leak 48 bytes per possible cpu per network namespace dismantle.

      ipip6_fb_tunnel_init() can be much simpler and does not
      return an error, and should be called after register_netdev()

      Note that ipip6_tunnel_clone_6rd() also needs to be called
      after register_netdev() (calling ipip6_tunnel_init())

      Fixes: ebe084aafb7e ("sit: Use ipip6_tunnel_init as the ndo_init 
function.")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a176ded3f4bdbd267bc9a79bde12d984c8c517b2
  Merge: 12d4309 52bc671
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 22:52:24 2015 -0500

      Merge branch 'bonding-actor-updates'

      Mahesh Bandewar says:

      ====================
      re-org actor admin/oper key updates

      I was observing machines entering into weird LACP state when the
      partner is in passive mode. This issue is not because of the partners
      in passive state but probably because of some operational key update
      which is pushing the state-machine is that weird state. This was
      happening randomly on about 1% of the machine (when the sample size
      is a large set of machines with a variety of NICs/ports bonded).

      In this patch-series I'm attempting to unify the logic of actor-key
      / operational-key changes to one place to avoid possible errors in
      update. Also this eliminates the need for the event-handler to decide
      if the key needs update.

      After this patch-set none of the machines (from same sample set) were
      exhibiting LACP-weirdness that was observed earlier.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52bc67168109ade61014a36feedf09f4bc53d8f1
  Author: Mahesh Bandewar <maheshb@xxxxxxxxxx>
  Date:   Sat Oct 31 12:45:11 2015 -0700

      bonding: simplify / unify event handling code for 3ad mode.

      Old logic of updating state-machine is not required since
      ad_update_actor_keys() does it implicitly. The only loss is
      the notification differentiation between speed vs. duplex
      change. Now only one unified notification is printed.

      Signed-off-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7bb11dc9f59ddcb33ee317da77b235235aaa582a
  Author: Mahesh Bandewar <maheshb@xxxxxxxxxx>
  Date:   Sat Oct 31 12:45:06 2015 -0700

      bonding: unify all places where actor-oper key needs to be updated.

      actor_admin, and actor_oper key is changed at multiple locations in
      the code. This patch brings all those updates into one location in
      an attempt to avoid possible inconsistent updates causing LACP state
      machine to go in weird state.

      The unified place is ad_update_actor_key() with simple state-machine
      logic -
        (a) If port is "duplex" then only it can participate in LACP
        (b) Speed change reinitializes the LACP state-machine.

      Signed-off-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b25c2e7d3c44aaadee55d70f70c31cbc9014c713
  Author: Mahesh Bandewar <maheshb@xxxxxxxxxx>
  Date:   Sat Oct 31 12:45:00 2015 -0700

      bonding: Simplify __get_duplex function.

      Eliminate 'else' clause by simply initializing variable

      Signed-off-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 12d4309636d30770b54985be05ac512131f328b8
  Merge: 1d6119b 42984d7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 22:48:39 2015 -0500

      Merge branch 'bpf-persistent'

      Daniel Borkmann says:

      ====================
      BPF updates

      This set adds support for persistent maps/progs. Please see
      individual patches for further details. A man-page update
      to bpf(2) will be sent later on, also a iproute2 patch for
      support in tc.

      v1 -> v2:
        - Reworked most of patch 4 and 5
        - Rebased to latest net-next
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 42984d7c1e563bf92e6ca7a0fd89f8e933f2162e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:10 2015 +0100

      bpf: add sample usages for persistent maps/progs

      This patch adds a couple of stand-alone examples on how BPF_OBJ_PIN
      and BPF_OBJ_GET commands can be used.

      Example with maps:

        # ./fds_example -F /sys/fs/bpf/m -P -m -k 1 -v 42
        bpf: map fd:3 (Success)
        bpf: pin ret:(0,Success)
        bpf: fd:3 u->(1:42) ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m -G -m -k 1
        bpf: get fd:3 (Success)
        bpf: fd:3 l->(1):42 ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m -G -m -k 1 -v 24
        bpf: get fd:3 (Success)
        bpf: fd:3 u->(1:24) ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m -G -m -k 1
        bpf: get fd:3 (Success)
        bpf: fd:3 l->(1):24 ret:(0,Success)

        # ./fds_example -F /sys/fs/bpf/m2 -P -m
        bpf: map fd:3 (Success)
        bpf: pin ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m2 -G -m -k 1
        bpf: get fd:3 (Success)
        bpf: fd:3 l->(1):0 ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m2 -G -m
        bpf: get fd:3 (Success)

      Example with progs:

        # ./fds_example -F /sys/fs/bpf/p -P -p
        bpf: prog fd:3 (Success)
        bpf: pin ret:(0,Success)
        bpf sock:4 <- fd:3 attached ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/p -G -p
        bpf: get fd:3 (Success)
        bpf: sock:4 <- fd:3 attached ret:(0,Success)

        # ./fds_example -F /sys/fs/bpf/p2 -P -p -o ./sockex1_kern.o
        bpf: prog fd:5 (Success)
        bpf: pin ret:(0,Success)
        bpf: sock:3 <- fd:5 attached ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/p2 -G -p
        bpf: get fd:3 (Success)
        bpf: sock:4 <- fd:3 attached ret:(0,Success)

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b2197755b2633e164a439682fb05a9b5ea48f706
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:09 2015 +0100

      bpf: add support for persistent maps/progs

      This work adds support for "persistent" eBPF maps/programs. The term
      "persistent" is to be understood that maps/programs have a facility
      that lets them survive process termination. This is desired by various
      eBPF subsystem users.

      Just to name one example: tc classifier/action. Whenever tc parses
      the ELF object, extracts and loads maps/progs into the kernel, these
      file descriptors will be out of reach after the tc instance exits.
      So a subsequent tc invocation won't be able to access/relocate on this
      resource, and therefore maps cannot easily be shared, f.e. between the
      ingress and egress networking data path.

      The current workaround is that Unix domain sockets (UDS) need to be
      instrumented in order to pass the created eBPF map/program file
      descriptors to a third party management daemon through UDS' socket
      passing facility. This makes it a bit complicated to deploy shared
      eBPF maps or programs (programs f.e. for tail calls) among various
      processes.

      We've been brainstorming on how we could tackle this issue and various
      approches have been tried out so far, which can be read up further in
      the below reference.

      The architecture we eventually ended up with is a minimal file system
      that can hold map/prog objects. The file system is a per mount namespace
      singleton, and the default mount point is /sys/fs/bpf/. Any subsequent
      mounts within a given namespace will point to the same instance. The
      file system allows for creating a user-defined directory structure.
      The objects for maps/progs are created/fetched through bpf(2) with
      two new commands (BPF_OBJ_PIN/BPF_OBJ_GET). I.e. a bpf file descriptor
      along with a pathname is being passed to bpf(2) that in turn creates
      (we call it eBPF object pinning) the file system nodes. Only the pathname
      is being passed to bpf(2) for getting a new BPF file descriptor to an
      existing node. The user can use that to access maps and progs later on,
      through bpf(2). Removal of file system nodes is being managed through
      normal VFS functions such as unlink(2), etc. The file system code is
      kept to a very minimum and can be further extended later on.

      The next step I'm working on is to add dump eBPF map/prog commands
      to bpf(2), so that a specification from a given file descriptor can
      be retrieved. This can be used by things like CRIU but also applications
      can inspect the meta data after calling BPF_OBJ_GET.

      Big thanks also to Alexei and Hannes who significantly contributed
      in the design discussion that eventually let us end up with this
      architecture here.

      Reference: https://lkml.org/lkml/2015/10/15/925
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9d8afa90b789b07d414637ab557d169d6b2b84e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:08 2015 +0100

      bpf: consolidate bpf_prog_put{, _rcu} dismantle paths

      We currently have duplicated cleanup code in bpf_prog_put() and
      bpf_prog_put_rcu() cleanup paths. Back then we decided that it was
      not worth it to make it a common helper called by both, but with
      the recent addition of resource charging, we could have avoided
      the fix in commit ac00737f4e81 ("bpf: Need to call 
bpf_prog_uncharge_memlock
      from bpf_prog_put") if we would have had only a single, common path.
      We can simplify it further by assigning aux->prog only once during
      allocation time.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c210129760a010b555372ef74f4e1a46d4eb8a22
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:07 2015 +0100

      bpf: align and clean bpf_{map,prog}_get helpers

      Add a bpf_map_get() function that we're going to use later on and
      align/clean the remaining helpers a bit so that we have them a bit
      more consistent:

        - __bpf_map_get() and __bpf_prog_get() that both work on the fd
          struct, check whether the descriptor is eBPF and return the
          pointer to the map/prog stored in the private data.

          Also, we can return f.file->private_data directly, the function
          signature is enough of a documentation already.

        - bpf_map_get() and bpf_prog_get() that both work on u32 user fd,
          call their respective __bpf_map_get()/__bpf_prog_get() variants,
          and take a reference.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aa79781b65b9cf79807ade78f2703f5e9402c336
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:06 2015 +0100

      bpf: abstract anon_inode_getfd invocations

      Since we're going to use anon_inode_getfd() invocations in more than just
      the current places, make a helper function for both, so that we only need
      to pass a map/prog pointer to the helper itself in order to get a fd. The
      new helpers are called bpf_map_new_fd() and bpf_prog_new_fd().

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d6119baf0610f813eb9d9580eb4fd16de5b4ceb
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 2 09:03:11 2015 -0800

      net: fix percpu memory leaks

      This patch fixes following problems :

      1) percpu_counter_init() can return an error, therefore
        init_frag_mem_limit() must propagate this error so that
        inet_frags_init_net() can do the same up to its callers.

      2) If ip[46]_frags_ns_ctl_register() fail, we must unwind
         properly and free the percpu_counter.

      Without this fix, we leave freed object in percpu_counters
      global list (if CONFIG_HOTPLUG_CPU) leading to crashes.

      This bug was detected by KASAN and syzkaller tool
      (http://github.com/google/syzkaller)

      Fixes: 6d7b857d541e ("net: use lib/percpu_counter API for fragmentation 
mem accounting")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Cc: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fa677d2706d325d71dab91bf6e6512c05214e37
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 2 07:50:07 2015 -0800

      net: avoid NULL deref in inet_ctl_sock_destroy()

      Under low memory conditions, tcp_sk_init() and icmp_sk_init()
      can both iterate on all possible cpus and call inet_ctl_sock_destroy(),
      with eventual NULL pointer.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5062ecdb662bf3aed6dc975019c53ffcd3b01d1c
  Merge: e86328c d4a1a31
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 16:16:24 2015 -0800

      Merge tag 'regmap-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap

      Pull regmap updates from Mark Brown:
       "Quite a few new features for regmap this time, mostly expanding things
        around the edges of the existing functionality to cover more devices
        rather than thinsg with wide applicability:

         - Support for offload of the update_bits() operation to hardware
           where devices implement bit level access.
         - Support for a few extra operations that need scratch buffers on
           fast_io devices where we can't sleep.
         - Expanded the feature set of regmap_irq to cope with some extra
           register layouts.
         - Cleanups to the debugfs code"

      * tag 'regmap-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap:
        regmap: Allow installing custom reg_update_bits function
        regmap: debugfs: simplify regmap_reg_ranges_read_file() slightly
        regmap: debugfs: use memcpy instead of snprintf
        regmap: debugfs: use snprintf return value in 
regmap_reg_ranges_read_file()
        regmap: Add generic macro to define regmap_irq
        regmap: debugfs: Remove scratch buffer for register length calculation
        regmap: irq: add ack_invert flag for chips using cleared bits as ack
        regmap: irq: add support for chips who have separate unmask registers
        regmap: Allocate buffers with GFP_ATOMIC when fast_io == true

  commit c451113291c193d3bfbd0682011d2979d649010c
  Author: Simon Horman <horms+renesas@xxxxxxxxxxxx>
  Date:   Mon Nov 2 10:40:17 2015 +0900

      ravb: use pdev rather than ndev for error messages

      This corrects what appear to be typos, making the code consistent with
      itself, and allowing meaningful prefixes to be displayed with the errors 
in
      question.

      Before:
       (null): failed to initialize MDIO
       (null): Cannot allocate desc base address table (size 176 bytes)

      After:
      ravb e6800000.ethernet: failed to initialize MDIO
      ravb e6800000.ethernet: Cannot allocate desc base address table (size 176 
bytes)

      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec13ad1d705c9990d55ed8ab21946cef323d30c7
  Author: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 01:24:38 2015 +0100

      ipv6: fix crash on ICMPv6 redirects with prohibited/blackholed source

      There are other error values besides ip6_null_entry that can be returned 
by
      ip6_route_redirect(): fib6_rule_action() can also result in
      ip6_blk_hole_entry and ip6_prohibit_entry if such ip rules are installed.

      Only checking for ip6_null_entry in rt6_do_redirect() causes ip6_ins_rt()
      to be called with rt->rt6i_table == NULL in these cases, making the kernel
      crash.

      Signed-off-by: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e17f8a475fca81950fdddc08df428ed66cf441f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Nov 1 15:36:55 2015 -0800

      net: make skb_set_owner_w() more robust

      skb_set_owner_w() is called from various places that assume
      skb->sk always point to a full blown socket (as it changes
      sk->sk_wmem_alloc)

      We'd like to attach skb to request sockets, and in the future
      to timewait sockets as well. For these kind of pseudo sockets,
      we need to take a traditional refcount and use sock_edemux()
      as the destructor.

      It is now time to un-inline skb_set_owner_w(), being too big.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Bisected-by: Haiyang Zhang <haiyangz@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eca1e006cf6f6f66a1a90c055a8a6d393475c3f9
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Sun Nov 1 18:31:45 2015 +0200

      bridge: vlan: Use rcu_dereference instead of rtnl_dereference

      br_should_learn() is protected by RCU and not by RTNL, so use correct
      flavor of nbp_vlan_group().

      Fixes: 907b1e6e83ed ("bridge: vlan: use proper rcu for the vlgrp
      member")
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ab42d78e37a294ac7bc56901d563c642e03c4ae
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:22:53 2015 +0000

      ppp, slip: Validate VJ compression slot parameters completely

      Currently slhc_init() treats out-of-range values of rslots and tslots
      as equivalent to 0, except that if tslots is too large it will
      dereference a null pointer (CVE-2015-7799).

      Add a range-check at the top of the function and make it return an
      ERR_PTR() on error instead of NULL.  Change the callers accordingly.

      Compile-tested only.

      Reported-by: é?­æ°¸å?? <guoyonggang@xxxxxx>
      References: http://article.gmane.org/gmane.comp.security.oss.general/17908
      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0baa57d8dc32db78369d8b5176ef56c5e2e18ab3
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:21:24 2015 +0000

      isdn_ppp: Add checks for allocation failure in isdn_ppp_open()

      Compile-tested only.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70910791731b5956171e1bfcad707766b8e18fee
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Sun Nov 1 01:34:50 2015 +0100

      qmi_wwan: fix entry for HP lt4112 LTE/HSPA+ Gobi 4G Module

      The lt4112 is a HP branded Huawei me906e modem. Like other Huawei
      modems, it does not have a fixed interface to function mapping.
      Instead it uses a Huawei specific scheme: functions are mapped by
      subclass and protocol.

      However, the HP vendor ID is used for modems from many different
      manufacturers using different schemes, so we cannot apply a generic
      vendor rule like we do for the Huawei vendor ID.

      Replace the previous lt4112 entry pointing to an arbitrary interface
      number with a device specific subclass + protocol match.

      Reported-and-tested-by: Muri Nicanor <muri+libqmi@xxxxxxxxxx>
      Tested-by: Martin Hauke <mardnh@xxxxxx>
      Fixes: bb2bdeb83fb1 ("qmi_wwan: Add support for HP lt4112 LTE/HSPA+ Gobi 
4G Modem")
      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e86328c489d7ecdca99410a06a3f448caf7857bf
  Merge: bc9d8c2 0963670
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:59:12 2015 -0800

      Merge tag 'gpio-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio

      Pull GPIO updates from Linus Walleij:
       "Here is the bulk of GPIO changes for the v4.4 development cycle.

        The only changes hitting outside drivers/gpio are in the pin control
        subsystem and these seem to have settled nicely in linux-next.

        Development mistakes and catfights are nicely documented in the
        reverts as you can see.  The outcome of the ABI fight is that we're
        working on a chardev ABI for GPIO now, where hope to show results for
        the v4.5 kernel.

        Summary of changes:

        GPIO core:
         - Define and handle flags for open drain/open collector and open
           source/open emitter, also know as "single-ended" configurations.
         - Generic request/free operations that handle calling out to the
           (optional) pin control backend.
         - Some refactoring related to an ABI change that did not happen, yet
           provide useful.
         - Added a real-time compliance checklist.  Many GPIO chips have
           irqchips, and need to think this over with the RT patches going
           upstream.
         - Restructure, fix and clean up Kconfig menus a bit.

        New drivers:
         - New driver for AMD Promony.
         - New driver for ACCES 104-IDIO-16, a port-mapped I/O card,
           ISA-style.  Very retro.

        Subdriver changes:
         - OMAP changes to handle real time requirements.
         - Handle trigger types for edge and level IRQs on PL061 properly.  As
           this hardware is very common it needs to set a proper example for
           others to follow.
         - Some container_of() cleanups.
         - Delete the unused MSM driver in favor of the driver that is
           embedded inside the pin control driver.
         - Cleanup of the ath79 GPIO driver used by many, many OpenWRT router
           targets.
         - A consolidated IT87xx driver replacing the earlier very specific
           IT8761e driver.
         - Handle the TI TCA9539 in the PCA953x driver.  Also handle ACPI
           devices in this subdriver.
         - Drop xilinx arch dependencies as these FPGAs seem to profilate over
           a few different architectures.  MIPS and ARM come to mind"

      * tag 'gpio-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio: (57 commits)
        gpio: fix up SPI submenu
        gpio: drop surplus I2C dependencies
        gpio: drop surplus X86 dependencies
        gpio: dt-bindings: document the official use of "ngpios"
        gpio: MAINTAINERS: Add an entry for the ATH79 GPIO driver
        gpio / ACPI: Allow shared GPIO event to be read via operation region
        gpio: group port-mapped I/O drivers in a menu
        gpio: Add ACCES 104-IDIO-16 driver maintainer entry
        gpio: zynq: Document interrupt-controller DT binding
        gpio: xilinx: Drop architecture dependencies
        gpio: generic: Revert to old error handling in bgpio_map
        gpio: add a real time compliance notes
        Revert "gpio: add a real time compliance checklist"
        gpio: Add GPIO support for the ACCES 104-IDIO-16
        gpio: driver for AMD Promontory
        gpio: xlp: Convert to use gpiolib irqchip helpers
        gpio: add a real time compliance checklist
        gpio/xilinx: enable for MIPS
        gpiolib: Add and use OF_GPIO_SINGLE_ENDED flag
        gpiolib: Split GPIO flags parsing and GPIO configuration
        ...

  commit 44f49dd8b5a606870a1f21101522a0f9c4414784
  Author: Ani Sinha <ani@xxxxxxxxxx>
  Date:   Fri Oct 30 16:54:31 2015 -0700

      ipmr: fix possible race resulting from improper usage of 
IP_INC_STATS_BH() in preemptible context.

      Fixes the following kernel BUG :

      BUG: using __this_cpu_add() in preemptible [00000000] code: bash/2758
      caller is __this_cpu_preempt_check+0x13/0x15
      CPU: 0 PID: 2758 Comm: bash Tainted: P           O   3.18.19 #2
       ffffffff8170eaca ffff880110d1b788 ffffffff81482b2a 0000000000000000
       0000000000000000 ffff880110d1b7b8 ffffffff812010ae ffff880007cab800
       ffff88001a060800 ffff88013a899108 ffff880108b84240 ffff880110d1b7c8
      Call Trace:
      [<ffffffff81482b2a>] dump_stack+0x52/0x80
      [<ffffffff812010ae>] check_preemption_disabled+0xce/0xe1
      [<ffffffff812010d4>] __this_cpu_preempt_check+0x13/0x15
      [<ffffffff81419d60>] ipmr_queue_xmit+0x647/0x70c
      [<ffffffff8141a154>] ip_mr_forward+0x32f/0x34e
      [<ffffffff8141af76>] ip_mroute_setsockopt+0xe03/0x108c
      [<ffffffff810553fc>] ? get_parent_ip+0x11/0x42
      [<ffffffff810e6974>] ? pollwake+0x4d/0x51
      [<ffffffff81058ac0>] ? default_wake_function+0x0/0xf
      [<ffffffff810553fc>] ? get_parent_ip+0x11/0x42
      [<ffffffff810613d9>] ? __wake_up_common+0x45/0x77
      [<ffffffff81486ea9>] ? _raw_spin_unlock_irqrestore+0x1d/0x32
      [<ffffffff810618bc>] ? __wake_up_sync_key+0x4a/0x53
      [<ffffffff8139a519>] ? sock_def_readable+0x71/0x75
      [<ffffffff813dd226>] do_ip_setsockopt+0x9d/0xb55
      [<ffffffff81429818>] ? unix_seqpacket_sendmsg+0x3f/0x41
      [<ffffffff813963fe>] ? sock_sendmsg+0x6d/0x86
      [<ffffffff813959d4>] ? sockfd_lookup_light+0x12/0x5d
      [<ffffffff8139650a>] ? SyS_sendto+0xf3/0x11b
      [<ffffffff810d5738>] ? new_sync_read+0x82/0xaa
      [<ffffffff813ddd19>] compat_ip_setsockopt+0x3b/0x99
      [<ffffffff813fb24a>] compat_raw_setsockopt+0x11/0x32
      [<ffffffff81399052>] compat_sock_common_setsockopt+0x18/0x1f
      [<ffffffff813c4d05>] compat_SyS_setsockopt+0x1a9/0x1cf
      [<ffffffff813c4149>] compat_SyS_socketcall+0x180/0x1e3
      [<ffffffff81488ea1>] cstar_dispatch+0x7/0x1e

      Signed-off-by: Ani Sinha <ani@xxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3e8b858f375595421817a5475611a3e63bb4a43
  Merge: 615a100 b61ed8f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:56:12 2015 -0500

      Merge branch 'sh_eth-fixes'

      Sergei Shtylyov says:

      ====================
      sh_eth: fix bugs in sh_eth_ring_init()

         Here's a set of 2 patches against DaveM's 'net.git' repo which fix 
couple of
      bugs in the sh_eth_ring_init() function.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b61ed8fdd845340ee31e8a97403b6101ccf4e4a2
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 02:06:29 2015 +0300

      sh_eth: fix WARNING in dma_common_free_remap()

      Iff the first dma_alloc_coherent()  call fails in sh_eth_ring_init(), the
      following  is printed to the kernel console:

      WARNING: CPU: 0 PID: 1 at drivers/base/dma-mapping.c:334 
dma_common_free_remap+0x48/0x6c()
      trying to free invalid coherent area:   (null)
      Modules linked in:
      CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.3.0-rc7-dirty #969
      Hardware name: Generic R8A7791 (Flattened Device Tree)
      Backtrace:
      [<c0013820>] (dump_backtrace) from [<c00139bc>] (show_stack+0x18/0x1c)
       r6:c0662856 r5:00000009 r4:00000000 r3:00204140
      [<c00139a4>] (show_stack) from [<c0227510>] (dump_stack+0x74/0x90)
      [<c022749c>] (dump_stack) from [<c0026ef4>] 
(warn_slowpath_common+0x8c/0xb8)
       r4:ee84dce0 r3:c0712774
      [<c0026e68>] (warn_slowpath_common) from [<c0026fc4>] 
(warn_slowpath_fmt+0x38/0x40)
       r8:ee7f8000 r7:c0734520 r6:00001000 r5:20000008 r4:00000000
      [<c0026f90>] (warn_slowpath_fmt) from [<c02df404>] 
(dma_common_free_remap+0x48/0x6c)
       r3:00000000 r2:c0662871
      [<c02df3bc>] (dma_common_free_remap) from [<c001b9fc>] 
(__arm_dma_free+0xb8/0xd4)
      r6:00000001 r5:00000000 r4:00001000 r3:ee8c5584
      [<c001b944>] (__arm_dma_free) from [<c001ba68>] (arm_dma_free+0x24/0x2c)
       r10:0000016b r8:00000000 r7:ee9bc830 r6:00000000 r5:00000400 r4:ee9bc800
      [<c001ba44>] (arm_dma_free) from [<c032ebf0>] 
(sh_eth_ring_init+0x110/0x138)
      [<c032eae0>] (sh_eth_ring_init) from [<c033179c>] (sh_eth_open+0x94/0x1f4)
       r6:00000000 r5:ee9bcd18 r4:ee9bc800
      [<c0331708>] (sh_eth_open) from [<c041bf7c>] (__dev_open+0x84/0x104)
       r6:c0565c50 r5:00000000 r4:ee9bc800
      [<c041bef8>] (__dev_open) from [<c041c208>] 
(__dev_change_flags+0x94/0x13c)
       r7:00001002 r6:00000001 r5:00001003 r4:ee9bc800
      [<c041c174>] (__dev_change_flags) from [<c041c2e8>] 
(dev_change_flags+0x20/0x50)
       r7:c072c8a0 r6:00000138 r5:00001002 r4:ee9bc800
      [<c041c2c8>] (dev_change_flags) from [<c06e8d4c>] 
(ip_auto_config+0x174/0xf7c)
       r8:00001002 r7:c072c8a0 r6:c0700040 r5:00000001 r4:ee9bc800 r3:00000101
      [<c06e8bd8>] (ip_auto_config) from [<c000a810>] 
(do_one_initcall+0x100/0x1c8)
       r10:c06f883c r9:00000000 r8:c06e8bd8 r7:c0734000 r6:c070e918 r5:c070e918
       r4:ee083640
      [<c000a710>] (do_one_initcall) from [<c06c9ddc>] 
(kernel_init_freeable+0x11c/0x1ec)
       r10:c06f883c r9:00000000 r8:00000099 r7:c0734000 r6:c070372c r5:c06f8834
       r4:00000007
      [<c06c9cc0>] (kernel_init_freeable) from [<c0514d78>] 
(kernel_init+0x14/0xec)
       r10:00000000 r8:00000000 r7:00000000 r6:00000000 r5:c0514d64 r4:c0734000
      [<c0514d64>] (kernel_init) from [<c0010458>] (ret_from_fork+0x14/0x3c)
       r4:00000000 r3:ee84c000

      This is because the code jumps to a wrong label and so tries to free yet
      unallocated coherent memory.  Fix the *goto* in question.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c94e8567d7c7c9d619584da857e9f5b28f283ea
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 02:05:56 2015 +0300

      sh_eth: fix uninitialized arrays in sh_eth_ring_init()

      sh_eth_ring_free()  called in the sh_eth_ring_init()'s error path expects
      the arrays pointed  to  by 'sh_eth_private::[rt]x_skbuff' to be 
initialized
      with NULLs but they are allocated with just kmalloc_array() and so are 
left
      filled with random data. Use kcalloc() instead.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b9b377136eb83cace5667cb6e8d53da771df6faa
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 19:39:48 2015 -0400

      net: dsa: mv88e6xxx: lookup switch name

      All the mv88e6xxx drivers use the exact same code in their probe
      function to lookup the switch name given its ID. Thus introduce a
      mv88e6xxx_switch_id structure and a mv88e6xxx_lookup_name function in
      the common mv88e6xxx code.

      In the meantime make __mv88e6xxx_reg_{read,write} static since we do not
      need to expose these low-level r/w routines anymore.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3996a4ffb01f57f82abe6c7e60ac9048dd0c31df
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:56:45 2015 -0400

      net: dsa: mv88e6xxx: assert SMI lock

      It's easy to forget to lock the smi_mutex before calling the low-level
      _mv88e6xxx_reg_{read,write}, so add a assert_smi_lock function in them.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac00881f922106b45e934dc6988fa9c1ec542d71
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Fri Oct 30 15:16:26 2015 -0700

      bpf: convert hashtab lock to raw lock

      When running bpf samples on rt kernel, it reports the below warning:

      BUG: sleeping function called from invalid context at 
kernel/locking/rtmutex.c:917
      in_atomic(): 1, irqs_disabled(): 128, pid: 477, name: ping
      Preemption disabled at:[<ffff80000017db58>] kprobe_perf_func+0x30/0x228

      CPU: 3 PID: 477 Comm: ping Not tainted 4.1.10-rt8 #4
      Hardware name: Freescale Layerscape 2085a RDB Board (DT)
      Call trace:
      [<ffff80000008a5b0>] dump_backtrace+0x0/0x128
      [<ffff80000008a6f8>] show_stack+0x20/0x30
      [<ffff8000007da90c>] dump_stack+0x7c/0xa0
      [<ffff8000000e4830>] ___might_sleep+0x188/0x1a0
      [<ffff8000007e2200>] rt_spin_lock+0x28/0x40
      [<ffff80000018bf9c>] htab_map_update_elem+0x124/0x320
      [<ffff80000018c718>] bpf_map_update_elem+0x40/0x58
      [<ffff800000187658>] __bpf_prog_run+0xd48/0x1640
      [<ffff80000017ca6c>] trace_call_bpf+0x8c/0x100
      [<ffff80000017db58>] kprobe_perf_func+0x30/0x228
      [<ffff80000017dd84>] kprobe_dispatcher+0x34/0x58
      [<ffff8000007e399c>] kprobe_handler+0x114/0x250
      [<ffff8000007e3bf4>] kprobe_breakpoint_handler+0x1c/0x30
      [<ffff800000085b80>] brk_handler+0x88/0x98
      [<ffff8000000822f0>] do_debug_exception+0x50/0xb8
      Exception stack(0xffff808349687460 to 0xffff808349687580)
      7460: 4ca2b600 ffff8083 4a3a7000 ffff8083 49687620 ffff8083 0069c5f8 
ffff8000
      7480: 00000001 00000000 007e0628 ffff8000 496874b0 ffff8083 007e1de8 
ffff8000
      74a0: 496874d0 ffff8083 0008e04c ffff8000 00000001 00000000 4ca2b600 
ffff8083
      74c0: 00ba2e80 ffff8000 49687528 ffff8083 49687510 ffff8083 000e5c70 
ffff8000
      74e0: 00c22348 ffff8000 00000000 ffff8083 49687510 ffff8083 000e5c74 
ffff8000
      7500: 4ca2b600 ffff8083 49401800 ffff8083 00000001 00000000 00000000 
00000000
      7520: 496874d0 ffff8083 00000000 00000000 00000000 00000000 00000000 
00000000
      7540: 2f2e2d2c 33323130 00000000 00000000 4c944500 ffff8083 00000000 
00000000
      7560: 00000000 00000000 008751e0 ffff8000 00000001 00000000 124e2d1d 
00107b77

      Convert hashtab lock to raw lock to avoid such warning.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21086b990ba51d12670eba342eec76d4bba55d33
  Merge: ce10500 ddd611d
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:40:11 2015 -0500

      Merge branch 'bridge_vlan_fixes'

      Nikolay Aleksandrov says:

      ====================
      bridge: vlan: failure path and comment fixes

      This is a set from Ido which takes care of one failure path error in
      nbp_vlan_init (patch 1) and a few comment errors (patch 2).
      I must admit I didn't expect the port init continues after a vlan init
      failure but should've checked to make sure. Thanks to Ido for catching
      these!
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ddd611d3fffb90b967e50f5aa6d45d55eb0e1d3f
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 30 17:46:20 2015 +0100

      bridge: vlan: Use correct flag name in comment

      The flag used to indicate if a VLAN should be used for filtering - as
      opposed to context only - on the bridge itself (e.g. br0) is called
      'brentry' and not 'brvlan'.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 07bc588fc1087929e8e6dfe95ffcee1cb69a240f
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 30 17:46:19 2015 +0100

      bridge: vlan: Prevent possible use-after-free

      When adding a port to a bridge we initialize VLAN filtering on it. We do
      not bail out in case an error occurred in nbp_vlan_init, as it can be
      used as a non VLAN filtering bridge.

      However, if VLAN filtering is required and an error occurred in
      nbp_vlan_init, we should set vlgrp to NULL, so that VLAN filtering
      functions (e.g. br_vlan_find, br_get_pvid) will know the struct is
      invalid and will not try to access it.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce1050089c969b96c797118f9cb0cf5a421ddc69
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 30 09:46:12 2015 -0700

      tcp/dccp: fix ireq->pktopts race

      IPv6 request sockets store a pointer to skb containing the SYN packet
      to be able to transfer it to full blown socket when 3WHS is done
      (ireq->pktopts -> np->pktoptions)

      As explained in commit 5e0724d027f0 ("tcp/dccp: fix hashdance race for
      passive sessions"), we must transfer the skb only if we won the
      hashdance race, if multiple cpus receive the 'ack' packet completing
      3WHS at the same time.

      Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b5654349e4728021b9301e42ae16fa11f6832c8
  Author: santosh.shilimkar@xxxxxxxxxx <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Oct 30 08:49:10 2015 -0700

      RDS: convert bind hash table to re-sizable hashtable

      To further improve the RDS connection scalabilty on massive systems
      where number of sockets grows into tens of thousands  of sockets, there
      is a need of larger bind hashtable. Pre-allocated 8K or 16K table is
      not very flexible in terms of memory utilisation. The rhashtable
      infrastructure gives us the flexibility to grow the hashtbable based
      on use and also comes up with inbuilt efficient bucket(chain) handling.

      Reviewed-by: David Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3ffaefa1bbcfba1b4ef985fd53406f31b98f277
  Author: Saurabh Sengar <saurabh.truth@xxxxxxxxx>
  Date:   Fri Oct 30 19:46:44 2015 +0530

      net: rds: changing the return type from int to void

      as result of function rds_iw_flush_mr_pool is nowhere checked,
      changing its return type from int to void.
      also removing the unused variable rc as there is nothing to return

      Signed-off-by: Saurabh Sengar <saurabh.truth@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 615a1003c6502f0d1812fd2dbe08e86b1c3f5db9
  Merge: e6dbe1e 562b103
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:33:38 2015 -0500

      Merge tag 'linux-can-fixes-for-4.3-20151030' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can

      Marc Kleine-Budde says:

      ====================
      pull-request: can 2015-10-30

      this is a pull request for the upcoming v4.3 release.

      Marek Vasut provides a patch to use the correct attrlen in the nla_put() 
in the
      can_fill_info() function.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bc9d8c20ffb47e64a41a4716a06d37cdf88fcc42
  Merge: 9ff3ca5 d99c805
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:30:39 2015 -0800

      Merge tag 'pinctrl-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl

      Pull pin control updates from Linus Walleij:
       "This is the big bulk of pin control changes for the v4.4 kernel
        development cycle.  Development pace is high in pin control again this
        merge window.  28 contributors, 83 patches.

        It hits a few sites outside the pin control subsystem:

         - Device tree bindings in Documentation (as usual)
         - MAINTAINERS
         - drivers/base/* for the "init" state handling by Doug Anderson.
           This has been ACKed by Greg.
         - drivers/usb/renesas_usbhs/rcar2.c, for a dependent Renesas change
           in the USB subsystem.  This has been ACKed by both Greg and Felipe.
         - arch/arm/boot/dts/sama5d2.dtsi - this should ideally have gone
           through the ARM SoC tree but ended up here.

        This time I am using Geert Uytterhoeven as submaintainer for SH PFC
        since the are three-four people working in parallel with new Renesas
        ASICs.

        Summary of changes:

        Infrastructure:

         - Doug Anderson wrote a patch adding an "init" state different from
           the "default" state for pin control state handling in the core
           framework.  This is applied before the driver's probe() call if
           defined and takes precedence over "default".  If both are defined,
           "init" will be applied *before* probe() and "default" will be
           applied *after* probe().

        Significant subdriver improvements:

         - SH PFC is switched to getting GPIO ranges from the device tree
           ranges property on DT platforms.
         - Got rid of CONFIG_ARCH_SHMOBILE_LEGACY, we are all modernized.
         - Got rid of SH PFC hardcoded IRQ numbers.
         - Allwinner sunxi external interrupt through the "r" controller.
         - Moved the Cygnus driver to use DT-provided GPIO ranges.

        New drivers:

         - Atmel PIO4 pin controller for the SAMA4D2 family

        New subdrivers:

         - Rockchip RK3036 subdriver
         - Renesas SH PFC R8A7795 subdriver
         - Allwinner sunxi A83T PIO subdriver
         - Freescale i.MX7d iomux lpsr subdriver
         - Marvell Berlin BG4CT subdriver
         - SiRF Atlas 7 step B SoC subdriver
         - Intel Broxton SoC subdriver

        Apart from this, the usual slew if syntactic and semantic fixes"

      * tag 'pinctrl-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl: (81 commits)
        pinctrl: pinconf: remove needless loop
        pinctrl: uniphier: guard uniphier directory with CONFIG_PINCTRL_UNIPHIER
        pinctrl: zynq: fix UTF-8 errors
        pinctrl: zynq: Initialize early
        pinctrl: at91: add missing of_node_put
        pinctrl: tegra-xusb: Correct lane mux options
        pinctrl: intel: Add Intel Broxton pin controller support
        pinctrl: intel: Allow requesting pins which are in ACPI mode as GPIOs
        pinctrl: intel: Add support for multiple GPIO chips sharing the 
interrupt
        drivers/pinctrl: Add the concept of an "init" state
        pinctrl: uniphier: set input-enable before pin-muxing
        pinctrl: cygnus: Add new compatible string for gpio controller driver
        pinctrl: cygnus: Remove GPIO to Pinctrl pin mapping from driver
        pinctrl: cygnus: Optional DT property to support pin mappings
        pinctrl: sunxi: Add irq pinmuxing to sun6i "r" pincontroller
        pinctrl: sunxi: Fix irq_of_xlate for the r_pio pinctrl block
        pinctrl: sh-pfc: Remove obsolete r8a7778 platform_device_id entry
        pinctrl: sh-pfc: Remove obsolete r8a7779 platform_device_id entry
        pinctrl: sh-pfc: Stop including <linux/platform_data/gpio-rcar.h>
        usb: renesas_usbhs: Remove unneeded #include 
<linux/platform_data/gpio-rcar.h>
        ...

  commit 64cf370887ac497e74b2e4224b662bfd1d8db41a
  Merge: 322cf7e 07f56c6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:28:57 2015 -0500

      Merge branch 'encx24j600-fixes'

      Javier Martinez Canillas says:

      ====================
      net: encx24j600: Fix SPI driver module autoload

      Recently I've been trying to fix module autoloading for all SPI drivers 
and
      found that the encx24j600 driver does not fill module alias information 
due
      missing a MODULE_DEVICE_TABLE() so module autload won't work and the 
driver
      Kconfig symbol is tristate which means the driver can be built as a 
module.

      But also the SPI id table is not correctly defined so this series fixes 
both
      issues.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 07f56c616d06b966c0a63d16172935b257a6a8d4
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 13:49:18 2015 +0100

      net: encx24j600: Export missing SPI module alias information

      The driver Kconfig symbol is tristate which means that it can be built as
      a module but the module alias information is not added to the module info
      so module autoload won't work since user-space won't have the information.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d0cb48cd19ce1e249cd350aa67fbf63560292266
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 13:49:17 2015 +0100

      net: encx24j600: Fix SPI id table definition

      A driver's SPI id table is expected to be an array of struct spi_device_id
      that ends with a zero-initialized sentinel entry. But this driver defines
      the table as a single struct spi_device_id and sets .id_table to a pointer
      to this struct.

      But spi_match_id() has a loop that iterates while the struct spi_device_id
      .name[0] is not NULL, so not having a sentinel can cause a NULL pointer
      deference error.

      This patch defines the SPI id table correctly as all other SPI drivers do.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9ff3ca58b0f99475f269cd6faf4ab1b194243b3f
  Merge: 17a1359 990995b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:14:50 2015 -0800

      Merge tag 'edac_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bp/bp

      Pull EDAC updates from Borislav Petkov:
       "A bunch of fixes all over the place and some hw enablement this time.

         - Convert EDAC to debugfs wrappers and make drivers use those
           (Borislav Petkov)

         - L3 and SoC support for xgene_edac (Loc Ho)

         - AMD F15h, models 0x60-6f support to amd64_edac (Aravind
           Gopalakrishnan)

         - Fixes and cleanups all over the place"

      * tag 'edac_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bp/bp: (22 commits)
        EDAC: Fix PAGES_TO_MiB macro misuse
        EDAC, altera: SoCFPGA EDAC should not look for ECC_CORR_EN
        EDAC: Use edac_debugfs_remove_recursive()
        EDAC, ppc4xx_edac: Fix module autoload for OF platform driver
        Documentation/EDAC: Add reference documents section for amd64_edac
        EDAC, amd64_edac: Update copyright and remove changelog
        EDAC, amd64_edac: Extend scrub rate support to F15hM60h
        EDAC: Don't allow empty DIMM labels
        EDAC: Fix sysfs dimm_label store operation
        EDAC: Fix sysfs dimm_label show operation
        arm64, EDAC: Add L3/SoC DT subnodes to the APM X-Gene SoC EDAC node
        EDAC, xgene: Add SoC support
        EDAC, xgene: Fix possible sprintf() overflow issue
        EDAC, xgene: Add L3 support
        EDAC, Documentation: Update X-Gene EDAC binding for L3/SoC subnodes
        EDAC, sb_edac: Fix TAD presence check for sbridge_mci_bind_devs()
        EDAC, ghes_edac: Remove redundant memory_type array
        EDAC, xgene: Convert to debugfs wrappers
        EDAC, i5100: Convert to debugfs wrappers
        EDAC, altera: Convert to debugfs wrappers
        ...

  commit 322cf7e3a4e89236ae386cb5668ae0d787d21136
  Author: Govindarajulu Varadarajan <_govind@xxxxxxx>
  Date:   Fri Oct 30 16:52:51 2015 +0530

      enic: assign affinity hint to interrupts

      The affinity hint is used by the user space daemon, irqbalancer, to
      indicate a preferred CPU mask for irqs. This patch sets the irq affinity
      hint to local numa core first, when exausted we try non-local numa cores.

      Also set tx xps cpus mask bassed on affinity hint.

      v2: remove the global affinity policy.

      Signed-off-by: Govindarajulu Varadarajan <_govind@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 17a1359034e1fb5cfe9e5196a8ab5153acfacdc6
  Merge: 66b0199 7cc8d58
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 11:40:22 2015 -0800

      Merge tag 'mmc-v4.4' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC updates from Ulf Hansson:
       "MMC core:
         - Add new API to set VCCQ voltage - mmc_regulator_set_vqmmc()
         - Add new ioctl to allow userspace to send multi commands
         - Wait for card busy signalling before starting SDIO requests
         - Remove MMC_CLKGATE
         - Enable tuning for DDR50 mode
         - Some code clean-up/improvements to mmc pwrseq
         - Use highest priority for eMMC restart handler
         - Add DT bindings for eMMC hardware reset support
         - Extend the mmc_send_tuning() API
         - Improve ios show for debugfs
         - A couple of code optimizations

        MMC host:
         - Some generic OF improvements
         - Various code clean-ups
         - sirf: Add support for DDR50
         - sunxi: Add support for card busy detection
         - mediatek: Use MMC_CAP_RUNTIME_RESUME
         - mediatek: Add support for eMMC HW-reset
         - mediatek: Add support for HS400
         - dw_mmc: Convert to use the new mmc_regulator_set_vqmmc() API
         - dw_mmc: Add external DMA interface support
         - dw_mmc: Some various improvements
         - dw_mmc-rockchip: MMC tuning with the clock phase framework
         - sdhci: Properly clear IRQs during resume
         - sdhci: Enable tuning for DDR50 mode
         - sdhci-of-esdhc: Use IRQ mode for card detection
         - sdhci-of-esdhc: Support both BE and LE host controller
         - sdhci-pci: Build o2micro support in the same module
         - sdhci-pci: Support for new Intel host controllers
         - sdhci-acpi: Support for new Intel host controllers"

      * tag 'mmc-v4.4' of git://git.linaro.org/people/ulf.hansson/mmc: (73 
commits)
        mmc: dw_mmc: fix the wrong setting for UHS-DDR50 mode
        mmc: dw_mmc: fix the CardThreshold boundary at CardThrCtl register
        mmc: dw_mmc: NULL dereference in error message
        mmc: pwrseq: Use highest priority for eMMC restart handler
        mmc: mediatek: add HS400 support
        mmc: mmc: extend the mmc_send_tuning()
        mmc: mediatek: add implement of ops->hw_reset()
        mmc: mediatek: fix got GPD checksum error interrupt when data transfer
        mmc: mediatek: change the argument "ddr" to "timing"
        mmc: mediatek: make cmd_ints_mask to const
        mmc: dt-bindings: update Mediatek MMC bindings
        mmc: core: Add DT bindings for eMMC hardware reset support
        mmc: omap_hsmmc: Enable omap_hsmmc for Keystone 2
        mmc: sdhci-acpi: Add more ACPI HIDs for Intel controllers
        mmc: sdhci-pci: Add more PCI IDs for Intel controllers
        arm: lpc18xx_defconfig: remove CONFIG_MMC_DW_IDMAC
        arm: hisi_defconfig: remove CONFIG_MMC_DW_IDMAC
        arm: exynos_defconfig: remove CONFIG_MMC_DW_IDMAC
        arc: axs10x_defconfig: remove CONFIG_MMC_DW_IDMAC
        mips: pistachio_defconfig: remove CONFIG_MMC_DW_IDMAC
        ...

  commit 9920e48b830a0f4ec06bcbf0ec3147c88ae72bac
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Thu Oct 29 22:20:40 2015 +0100

      ipv4: use l4 hash for locally generated multipath flows

      This patch changes how the multipath hash is computed for locally
      generated flows: now the hash comprises l4 information.

      This allows better utilization of the available paths when the existing
      flows have the same source IP and the same destination IP: with l3 hash,
      even when multiple connections are in place simultaneously, a single path
      will be used, while with l4 hash we can use all the available paths.

      v2 changes:
      - use get_hash_from_flowi4() instead of implementing just another l4 hash
        function

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 66b019967845a5af58802fd9af77f2317e5298a1
  Merge: a5ad88c 3b5ea47
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 11:32:24 2015 -0800

      Merge tag 'hwmon-for-linus-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging

      Pull hwmon updates from Guenter Roeck:
       "New driver for MAX31790, added support for TMP75C, as well as cleanups
        and minor improvements in various drivers"

      * tag 'hwmon-for-linus-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:
        hwmon: (fam15h_power) Add max compute unit accumulated power
        hwmon: (fam15h_power) Enable power1_input on AMD Carrizo
        hwmon: (fam15h_power) Refactor attributes for dynamically added
        hwmon: (ina2xx) remove no longer used variable 'kind'
        hwmon: (nct6775) Introduce separate temperature labels for NCT6792 and 
NCT6793
        hwmon: (nct6775) NCT6791D and NCT6792D have an additional temperature 
source
        hwmon: (ina2xx) give precedence to DT over checking for platform data.
        hwmon: (ina2xx) convert driver to using regmap
        hwmon: (coretemp) Increase limit of maximum core ID from 32 to 128.
        hwmon: (lm75) Add support for TMP75C
        hwmon: (ibmpowernv) Add OF compatibility table entry
        hwmon: (abx500) drop the use of IRQF_NO_SUSPEND
        hwmon: (max31790) Fix dereference of ERR_PTR
        hwmon: Driver for Maxim MAX31790

  commit 4247896f4b8bdbe2c9a03c2f713b636e94eab210
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Oct 25 15:50:59 2015 -0700

      cris: Drop reference to get_cmos_time()

      Function get_cmos_time() was removed with commit 657926a83df9 ("cris:
      time: Cleanup of persistent clock stuff"). The remaining reference to
      it may cause the following build error.

      arch/cris/kernel/built-in.o:(___ksymtab+get_cmos_time+0x0):
        undefined reference to `get_cmos_time'
      Makefile:946: recipe for target 'vmlinux' failed

      Fixes: 657926a83df9 ("cris: time: Cleanup of persistent clock stuff")
      Cc: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
      Cc: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit e301a08be4e4ad349b6195562197950d74c86e8a
  Author: Jesper Nilsson <jespern@xxxxxxxx>
  Date:   Fri Oct 2 11:22:55 2015 +0200

      CRIS: Drop code related to obsolete or unused kconfigs

      Drop all code related to Kconfigs that don't exist.
      Fix one Kconfig where it was actually typo:ed (ETRAX_KGB_PORT2)
      Drop content related to CRIS v32 SoCs from etraxgpio.h headerfile,
      all use of GPIO for both ETRAX FS and ARTPEC-3 should now be through
      standard gpiolib instead.

      Signed-off-by: Jesper Nilsson <jesper.nilsson@xxxxxxxx>

  commit 9f4137fa2cf20bd1ffb1fcb2711c3c347cc86fea
  Author: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
  Date:   Fri Jul 17 17:31:26 2015 +0800

      cris: time: Cleanup of persistent clock stuff

      - Remove update_persistent_clock(), as it does nothing now.
      - Remove read_persistent_clock(), let it fall back to the weak version.

      Cc: Mikael Starvik <starvik@xxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
      Acked-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit fad5a06b0cfd9a65c71d09c70520d0cf67e0c577
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:17:25 2015 +0300

      cris: re-use helpers to dump data in hex format

      There are native helpers such as print_hex_byte() and %*ph specifier to 
dump
      data in hex format. Re-use them instead of a custom approach.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit ab28e96fd1cf1db1579854931890e5613efc5021
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:24 2015 +0200

      CRIS v32: remove old GPIO and LEDs code

      Since we now have a gpiolib driver, remove this code:

      The gpio-etraxfs driver (along with things like gpio-keys-polled for
      polling support) replaces the GIO driver implementations in mach-a3 and
      mach-fs.  The various generic external chip drivers replace the "virtual
      gpio" parts.

      The generic gpio-leds driver replaces the LED handling.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 79b863c68eba8f7aa5b76c44db3b1df8412c977e
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:23 2015 +0200

      CRIS v32: remove I2C bitbanging driver

      Now that we have a gpiolib GPIO driver, the generic i2c-gpio driver
      provides this functionality.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 25624b98509f6868829a093392bb6437bcbd7beb
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:22 2015 +0200

      CRIS v32: add ARTPEC-3 and P1343 device trees

      Add a device tree for the Axis P1343 with the ARTPEC-3 SoC and on-board
      LEDs and RTC.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit a95b3ba2c322c3c373d34988d6928311b1b447a1
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:21 2015 +0200

      CRIS v32: dev88: add GPIO, LEDs, RTC, temp sensor

      Add the GPIO driver to the device tree and, using it, support for the
      LEDs and the RTC chip (via I2C-GPIO), as well as the temperature sensor
      (via SPI-GPIO).

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit d4dde7d21c4e243744d574ae38e2971be6a7a3a7
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:20 2015 +0200

      CRIS: add dt-bindings symlink

      Add a dt-bindings symlink to get DT include files, as on other
      architectures.  See c58299a ("kbuild: create an "include chroot" for DT
      bindings") for the details.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit df90c338087fdec88727a025a8d6400ecb7fe4bd
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:19 2015 +0200

      CRIS v32: increase NR_IRQS

      Increase NR_IQRS so we can fit in GPIO interrupts.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit c33fe4444395a6972b30cb91676d04af2a3dc1a5
  Author: Chen Gang <xili_gchen_5257@xxxxxxxxxxx>
  Date:   Thu Aug 6 00:34:53 2015 +0200

      cris: arch-v10: kgdb: Add '__used' for static variable is_dyn_brkp

      Within one C file, current gcc can optimize the global static variables
      according to the C code, but it will skip assembly code -- it will pass
      them to gas directly.

      if the static variable is used between C code and assembly code in one C
      file (e.g. is_dyn_brkp in kgdb.c), it needs '__used' to let gcc know it
      should be still used, or gcc may remove it for optimization.

      The related error in this case:

          LD      init/built-in.o
        arch/cris/arch-v10/kernel/built-in.o: In function 
`kgdb_handle_breakpoint':
        (.text+0x2aca): undefined reference to `is_dyn_brkp'
        arch/cris/arch-v10/kernel/built-in.o: In function `is_static':
        kgdb.c:(.text+0x2ada): undefined reference to `is_dyn_brkp'

      Signed-off-by: Chen Gang <gang.chen.5i5j@xxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 8f40dcebefd4a9e8fa24d2ac5e3fd5e410eea58d
  Author: Chen Gang <xili_gchen_5257@xxxxxxxxxxx>
  Date:   Sat Jul 11 05:47:24 2015 +0800

      cris: arch-v10: kgdb: Use BAR instead of DTP0 for register P12

      For arch-v10, there is no DTP0 register, and at present, assembler know
      BAR, so use BAR instead of DTP0, the related error (with allmodconfig):

          CC      arch/cris/arch-v10/kernel/kgdb.o
        {standard input}: Assembler messages:
        {standard input}:6: Error: Illegal operands
        {standard input}:6: Error: Illegal operands

      Signed-off-by: Chen Gang <gang.chen.5i5j@xxxxxxxxx>
      Acked-by: Hans-Peter Nilsson <hp@xxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 4d0d39758d3e10a31e7f146d56760a92396feb85
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 14:42:29 2015 +0300

      cris: kgdb: use native hex2bin

      There are kernel native helpers to convert hex ascii to the binary format:
      hex_to_bin() and hex2bin(). Thus, no need to reimplement them customly.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Cc: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit f8f8bdc48851da979c6e0e4808b6031122e4af47
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Tue Oct 27 11:12:51 2015 +0900

      arm64/efi: fix libstub build under CONFIG_MODVERSIONS

      Now that we strictly forbid absolute relocations in libstub code,
      make sure that we don't emit any when CONFIG_MODVERSIONS is enabled,
      by stripping the kcrctab sections from the object file. This fixes
      a build problem under CONFIG_MODVERSIONS=y.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit a5ad88ce8c7fae7ddc72ee49a11a75aa837788e0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 17:09:15 2015 -0800

      mm: get rid of 'vmalloc_info' from /proc/meminfo

      It turns out that at least some versions of glibc end up reading
      /proc/meminfo at every single startup, because glibc wants to know the
      amount of memory the machine has.  And while that's arguably insane,
      it's just how things are.

      And it turns out that it's not all that expensive most of the time, but
      the vmalloc information statistics (amount of virtual memory used in the
      vmalloc space, and the biggest remaining chunk) can be rather expensive
      to compute.

      The 'get_vmalloc_info()' function actually showed up on my profiles as
      4% of the CPU usage of "make test" in the git source repository, because
      the git tests are lots of very short-lived shell-scripts etc.

      It turns out that apparently this same silly vmalloc info gathering
      shows up on the facebook servers too, according to Dave Jones.  So it's
      not just "make test" for git.

      We had two patches to just cache the information (one by me, one by
      Ingo) to mitigate this issue, but the whole vmalloc information of of
      rather dubious value to begin with, and people who *actually* want to
      know what the situation is wrt the vmalloc area should just look at the
      much more complete /proc/vmallocinfo instead.

      In fact, according to my testing - and perhaps more importantly,
      according to that big search engine in the sky: Google - there is
      nothing out there that actually cares about those two expensive fields:
      VmallocUsed and VmallocChunk.

      So let's try to just remove them entirely.  Actually, this just removes
      the computation and reports the numbers as zero for now, just to try to
      be minimally intrusive.

      If this breaks anything, we'll obviously have to re-introduce the code
      to compute this all and add the caching patches on top.  But if given
      the option, I'd really prefer to just remove this bad idea entirely
      rather than add even more code to work around our historical mistake
      that likely nobody really cares about.

      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 2e002662973fd8d67d5a760776a5d3ea3d3399a9
  Merge: 6a13feb fc90888
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:43:24 2015 -0800

      Merge branch 'fs-file-descriptor-optimization'

      Merge file descriptor allocation speedup.

      Eric Dumazet has a test-case for a fairly common network deamon load
      pattern: openign and closing a lot of sockets that each have very little
      work done on them.  It turns out that in that case, the cost of just
      finding the correct file descriptor number can be a dominating factor.

      We've long had a trivial optimization for allocating file descriptors
      sequentially, but that optimization ends up being not very effective
      when other file descriptors are being closed concurrently, and the fd
      patterns are not some simple FIFO pattern.  In such cases we ended up
      spending a lot of time just scanning the bitmap of open file descriptors
      in order to find the next file descriptor number to open.

      This trivial patch-series mitigates that by simply introducing a
      second-level bitmap of which words in the first bitmap are already fully
      allocated.  That cuts down the cost of scanning by an order of magnitude
      in some pathological (but realistic) cases.

      The second patch is an even more trivial patch to avoid unnecessarily
      dirtying the cacheline for the close-on-exec bit array that normally
      ends up being all empty.

      * fs-file-descriptor-optimization:
        vfs: conditionally clear close-on-exec flag
        vfs: Fix pathological performance case for __alloc_fd()

  commit 6a13feb9c82803e2b815eca72fa7a9f5561d7861
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:05:25 2015 -0800

      Linux 4.3

  commit 95fc00a4e15e804356d01c1c53c7da3d99a94f20
  Merge: ca04d39 182475b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 14:13:54 2015 -0800

      Merge branch 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

      Pull memremap fix from Dan Williams:
       "The new memremap() api introduced in the 4.3 cycle to unify/replace
        ioremap_cache() and ioremap_wt() is mishandling the highmem case.
        This patch has received a build success notification from a
        0day-kbuild-robot run and has received an ack from Ard"

      From the commit message:
       "The impact of this bug is low for now since the pmem driver is the
        only user of memremap(), but this is important to fix before more
        conversions to memremap arrive in 4.4"

      * 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        memremap: fix highmem support

  commit e6dbe1eb2db0d7a14991c06278dd3030c45fb825
  Author: Phil Reid <preid@xxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:43:55 2015 +0800

      stmmac: Correctly report PTP capabilities.

      priv->hwts_*_en indicate if timestamping is enabled/disabled at run
      time. But  priv->dma_cap.time_stamp  and priv->dma_cap.atime_stamp
      indicates HW is support for PTPv1/PTPv2.

      Signed-off-by: Phil Reid <preid@xxxxxxxxxxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1032a6687168af9509615879d513f77e4049062e
  Author: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
  Date:   Fri Oct 30 01:24:56 2015 -0700

      Use 64-bit timekeeping

      This patch changes the use of struct timespec in
      dccp_probe to use struct timespec64 instead. timespec uses a 32-bit
      seconds field which will overflow in the year 2038 and beyond. timespec64
      uses a 64-bit seconds field. Note that the correctness of the code isn't
      changed, since the original code only uses the timestamps to compute a
      small elapsed interval. This patch is part of a larger attempt to remove
      instances of 32-bit timekeeping structures (timespec, timeval, time_t)
      from the kernel so it is easier to identify where the real 2038 issues
      are.

      Signed-off-by: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fc2a263bb0604642703cda6cba5ac1ffb1935440
  Merge: 5dbebbb c9b3292
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:57:44 2015 -0500

      Merge branch 'ipv4_link_down'

      Julian Anastasov says:

      ====================
      ipv4: fix problems from the RTNH_F_LINKDOWN introduction

      Fix two problems from the change that introduced RTNH_F_LINKDOWN
      flag. The first patch deals with the removal of local route on
      DOWN event. The second patch makes sure the RTNH_F_LINKDOWN
      flag is properly updated on UP event because the DOWN event
      sets it in all cases.

      v2->v3:
      - use bool for force var

      v1->v2:
      - forgot to add ifconfig dummy0 down in the test case
      - split to 2 patches
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c9b3292eeb52c6834e972eb5b8fe38914771ed12
  Author: Julian Anastasov <ja@xxxxxx>
  Date:   Fri Oct 30 10:23:34 2015 +0200

      ipv4: update RTNH_F_LINKDOWN flag on UP event

      When nexthop is part of multipath route we should clear the
      LINKDOWN flag when link goes UP or when first address is added.
      This is needed because we always set LINKDOWN flag when DEAD flag
      was set but now on UP the nexthop is not dead anymore. Examples when
      LINKDOWN bit can be forgotten when no NETDEV_CHANGE is delivered:

      - link goes down (LINKDOWN is set), then link goes UP and device
      shows carrier OK but LINKDOWN remains set

      - last address is deleted (LINKDOWN is set), then address is
      added and device shows carrier OK but LINKDOWN remains set

      Steps to reproduce:
      modprobe dummy
      ifconfig dummy0 192.168.168.1 up

      here add a multipath route where one nexthop is for dummy0:

      ip route add 1.2.3.4 nexthop dummy0 nexthop SOME_OTHER_DEVICE
      ifconfig dummy0 down
      ifconfig dummy0 up

      now ip route shows nexthop that is not dead. Now set the sysctl var:

      echo 1 > /proc/sys/net/ipv4/conf/dummy0/ignore_routes_with_linkdown

      now ip route will show a dead nexthop because the forgotten
      RTNH_F_LINKDOWN is propagated as RTNH_F_DEAD.

      Fixes: 8a3d03166f19 ("net: track link-status of ipv4 nexthops")
      Signed-off-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f823defdd5b106a5e89745ee8b163c71855de1e
  Author: Julian Anastasov <ja@xxxxxx>
  Date:   Fri Oct 30 10:23:33 2015 +0200

      ipv4: fix to not remove local route on link down

      When fib_netdev_event calls fib_disable_ip on NETDEV_DOWN event
      we should not delete the local routes if the local address
      is still present. The confusion comes from the fact that both
      fib_netdev_event and fib_inetaddr_event use the NETDEV_DOWN
      constant. Fix it by returning back the variable 'force'.

      Steps to reproduce:
      modprobe dummy
      ifconfig dummy0 192.168.168.1 up
      ifconfig dummy0 down
      ip route list table local | grep dummy | grep host
      local 192.168.168.1 dev dummy0  proto kernel  scope host  src 
192.168.168.1

      Fixes: 8a3d03166f19 ("net: track link-status of ipv4 nexthops")
      Signed-off-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1cf7d8dda2bd1704ca8552c93d5475af444a986b
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 10:50:54 2015 +0800

      net: hisilicon: Remove .owner assignment from platform_driver

      platform_driver doesn't need to set .owner, because
      platform_driver_register() will set it.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76e398a6271285c1f361d66445a55cdcee5c1b4b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 12:33:55 2015 -0500

      net: dsa: use switchdev obj for VLAN add/del ops

      Simplify DSA by pushing the switchdev objects for VLAN add and delete
      operations down to its drivers. Currently only mv88e6xxx is affected.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5dbebbb44a6ad94aab2cd1a46f7676f255403f64
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Thu Oct 29 18:11:35 2015 -0700

      net: bcmgenet: Software reset EPHY after power on

      The EPHY on GENET v1->v3 is extremely finicky, and will show occasional
      failures based on the timing and reset sequence, ranging from duplicate
      packets, to extremely high latencies.

      Perform an additional software reset, and re-configuration to make sure 
it is
      in a consistent and working state.

      Fixes: 6ac3ce8295e6 ("net: bcmgenet: Remove excessive PHY reset")
      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca04d396a3229d37d8151311ad70d1255a5807bd
  Merge: f5eab26 2459ee8
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 11:45:26 2015 -0800

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Thomas Gleixner:
       "This set of updates contains:

         - Another bugfix for the pathologic vm86 machinery.  Clear
           thread.vm86 on fork to prevent corrupting the parent state.  This
           comes along with an update to the vm86 selftest case

         - Fix another corner case in the ioapic setup code which causes a
           boot crash on some oddball systems

         - Fix the fallout from the dma allocation consolidation work, which
           leads to a NULL pointer dereference when the allocation code is
           called with a NULL device"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/vm86: Set thread.vm86 to NULL on fork/clone
        selftests/x86: Add a fork() to entry_from_vm86 to catch fork bugs
        x86/ioapic: Prevent NULL pointer dereference in setup_ioapic_dest()
        x86/dma-mapping: Fix arch_dma_alloc_attrs() oops with NULL dev

  commit f5eab26701999b1aa26d06772e013b11c4a16f6a
  Merge: 4bf690d fe326c5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 11:39:03 2015 -0800

      Merge branch 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer fixes from Thomas Gleixner:
       "The last round of minimalistic fixes for clocksource drivers:

         - Prevent multiple shutdown of the sh_mtu2 clocksource

         - Annotate a bunch of clocksource/schedclock functions with notrace
           to prevent an annoying ftrace recursion issue"

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        clocksource/drivers/sh_mtu2: Fix multiple shutdown call issue
        clocksource/drivers/digicolor: Prevent ftrace recursion
        clocksource/drivers/fsl_ftm_timer: Prevent ftrace recursion
        clocksource/drivers/vf_pit_timer: Prevent ftrace recursion
        clocksource/drivers/prima2: Prevent ftrace recursion
        clocksource/drivers/samsung_pwm_timer: Prevent ftrace recursion
        clocksource/drivers/pistachio: Prevent ftrace recursion
        clocksource/drivers/arm_global_timer: Prevent ftrace recursion

  commit 4bf690d7e09bbac43dfac9af01ba263e08f37e3e
  Merge: 56ef9db 209da39
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 11:33:04 2015 -0800

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fixes from Thomas Gleixner:
       "The last two one-liners for 4.3 from the irqchip space:

         - Regression fix for armada SoC which addresses the fallout from the
           set_irq_flags() cleanup

         - Add the missing propagation of the irq_set_type() callback to the
           parent interrupt controller of the tegra interrupt chip"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqchip/tegra: Propagate IRQ type setting to parent
        irqchip/armada-370-xp: Fix regression by clearing IRQ_NOAUTOEN

  commit ea3803c193df18d8353d6c8d77034066a08c19f5
  Author: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
  Date:   Thu Oct 29 11:57:42 2015 +0000

      VSOCK: define VSOCK_SS_LISTEN once only

      The SS_LISTEN socket state is defined by both af_vsock.c and
      vmci_transport.c.  This is risky since the value could be changed in one
      file and the other would be out of sync.

      Rename from SS_LISTEN to VSOCK_SS_LISTEN since the constant is not part
      of enum socket_state (SS_CONNECTED, ...).  This way it is clear that the
      constant is vsock-specific.

      The big text reflow in af_vsock.c was necessary to keep to the maximum
      line length.  Text is unchanged except for s/SS_LISTEN/VSOCK_SS_LISTEN/.

      Signed-off-by: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b43c142f22236b37aa68faf23ac1bbd75f94c5b5
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Thu Oct 29 09:45:22 2015 +0300

      net: smsc911x: Fix crash if loopback test fails

      On certain hardware in certain situations loopback test fails and the
      driver gets removed. During mdiobus_unregister() instance of PHY driver
      gets disposed. But by this time it has already been started using
      phy_connect_direct().

      PHY driver uses DELAYED_WORK in order to maintain its state. Attempting
      to dispose the driver without calling phy_disconnect() causes deallocation
      of DELAYED_WORK being active. This shortly causes a bad crash in timer
      code.

      The problem can be discovered by enabling CONFIG_DEBUG_OBJECTS_TIMERS and
      CONFIG_DEBUG_OBJECTS_FREE

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5cbb28a4bf65c7e4daa6c25b651fed8eb888c620
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Wed Oct 28 13:09:53 2015 -0400

      tipc: linearize arriving NAME_DISTR and LINK_PROTO buffers

      Testing of the new UDP bearer has revealed that reception of
      NAME_DISTRIBUTOR, LINK_PROTOCOL/RESET and LINK_PROTOCOL/ACTIVATE
      message buffers is not prepared for the case that those may be
      non-linear.

      We now linearize all such buffers before they are delivered up to the
      generic reception layer.

      In order for the commit to apply cleanly to 'net' and 'stable', we do
      the change in the function tipc_udp_recv() for now. Later, we will post
      a commit to 'net-next' moving the linearization to generic code, in
      tipc_named_rcv() and tipc_link_proto_rcv().

      Fixes: commit d0f91938bede ("tipc: add ip/udp media type")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f4444574a41430315a9c3eeb9e37cb0a36444a35
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 10:20:30 2015 -0200

      fec: Use gpio_set_value_cansleep()

      We are in a context where we can sleep, and the FEC PHY reset gpio
      may be on an I2C expander. Use the cansleep() variant when
      setting the GPIO value.

      Based on a patch from Russell King for pci-mvebu.c.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 24c39de0091197f4c1f1a18a7c31e540000dc3b8
  Merge: b75ec3a 405c92f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 1 12:01:37 2015 -0500

      Merge branch 'csum_partial_frags'

      Hannes Frederic Sowa says:

      ====================
      net: clean up interactions of CHECKSUM_PARTIAL and fragmentation

      This series fixes wrong checksums on the wire for IPv4 and IPv6. Large
      send buffers and especially NFS lead to wrong checksums in both IPv4
      and IPv6.

      CHECKSUM_PARTIAL skbs should not receive the respective fragmentations
      functions, so we add WARN_ON_ONCE to those functions to fix up those as
      soon as they get reported.

      Changelog:
      v2: added v4 checks
      v3: removed WARN_ON_ONCES (advice by Tom Herbert)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 405c92f7a5417274419192ad134d6dc71aedaaa4
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:42 2015 +0100

      ipv6: add defensive check for CHECKSUM_PARTIAL skbs in ip_fragment

      CHECKSUM_PARTIAL skbs should never arrive in ip_fragment. If we get one
      of those warn about them once and handle them gracefully by recalculating
      the checksum.

      Fixes: commit 32dce968dd987 ("ipv6: Allow for partial checksums on 
non-ufo packets")
      See-also: commit 72e843bb09d45 ("ipv6: ip6_fragment() should check 
CHECKSUM_PARTIAL")
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 682b1a9d3f9686ee43fd66b48605daff00522157
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:41 2015 +0100

      ipv6: no CHECKSUM_PARTIAL on MSG_MORE corked sockets

      We cannot reliable calculate packet size on MSG_MORE corked sockets
      and thus cannot decide if they are going to be fragmented later on,
      so better not use CHECKSUM_PARTIAL in the first place.

      The IPv6 code also intended to protect and not use CHECKSUM_PARTIAL in
      the existence of IPv6 extension headers, but the condition was wrong. Fix
      it up, too. Also the condition to check whether the packet fits into
      one fragment was wrong and has been corrected.

      Fixes: commit 32dce968dd987 ("ipv6: Allow for partial checksums on 
non-ufo packets")
      See-also: commit 72e843bb09d45 ("ipv6: ip6_fragment() should check 
CHECKSUM_PARTIAL")
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dbd3393c56a8794fe596e7dd20d0efa613b9cf61
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:40 2015 +0100

      ipv4: add defensive check for CHECKSUM_PARTIAL skbs in ip_fragment

      CHECKSUM_PARTIAL skbs should never arrive in ip_fragment. If we get one
      of those warn about them once and handle them gracefully by recalculating
      the checksum.

      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d749c9cbffd666956694f307d237e018c464d973
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:39 2015 +0100

      ipv4: no CHECKSUM_PARTIAL on MSG_MORE corked sockets

      We cannot reliable calculate packet size on MSG_MORE corked sockets
      and thus cannot decide if they are going to be fragmented later on,
      so better not use CHECKSUM_PARTIAL in the first place.

      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2167ceabf34163727ca4e283c0f030e3960932e5
  Author: Wan Zongshun <Vincent.Wan@xxxxxxx>
  Date:   Fri Oct 30 13:11:39 2015 +0100

      x86/cpu: Add CLZERO detection

      AMD Fam17h processors introduce support for the CLZERO
      instruction. It zeroes out the 64 byte cache line specified in
      RAX.

      Add the bit here to allow /proc/cpuinfo to list the feature.

      Boris: we're adding this as a separate ->x86_capability leaf
      because CPUID_80000008_EBX is going to contain more feature bits
      and it will fill out with time.

      Signed-off-by: Wan Zongshun <Vincent.Wan@xxxxxxx>
      Signed-off-by: Aravind Gopalakrishnan <aravind.gopalakrishnan@xxxxxxx>
      [ Wrap code in patch form, fix comments. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Huang Rui <ray.huang@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446207099-24948-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dc34bdd2367fd31744ee3ba1de1b1cc0fa2ce193
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Fri Oct 30 13:11:38 2015 +0100

      x86/mce: Add a default case to the switch in __mcheck_cpu_ancient_init()

      Caught by building with W= which enable -Wswitch-default also.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446207099-24948-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c7f54d21fb02e90042e6233b46716dcb244e70e6
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Fri Oct 30 13:11:37 2015 +0100

      x86/mce: Add a Scalable MCA vendor flags bit

      Scalable MCA (SMCA) is a new feature in AMD Fam17h processors
      which indicates presence of MCA extensions.

      MCA extensions expands existing register space for the MCE banks
      and also introduces a new MSR range to accommodate new banks.

      Add the detection bit.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      [ Reformat mce_vendor_flags definitions and save indentation levels. 
Improve comments. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Ashok Raj <ashok.raj@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446207099-24948-2-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0963670aeaec2287aa263daa0d41384d4dcd5292
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Sun Nov 1 10:50:19 2015 +0100

      gpio: fix up SPI submenu

      - Relax dependencies on SPI_MASTER for drivers in the SPI menu
        that already has this dependency.
      - Move out the expander that would be hidden for I2C access if
        SPI_MASTER was not selected. Tentatively create a separate
        menu for this.
      - Move the ZX SoC driver to memory-mapped drivers, this must be
        a mistake and only worked because the system has an SPI master
        enabled at the same time.

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 269a46f80bd9c77b6f862a92ccb52eb8a68d3997
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Sun Nov 1 10:43:16 2015 +0100

      gpio: drop surplus I2C dependencies

      The I2C expander menu already depends on I2C, drop subdependecies
      on individual drivers. Keep the instances of depends on I2C=y
      though, so these are still restricted to the compiled-in case.

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 7768feb0f56d4ba6c1ae1395e144e168e41f1900
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Sun Nov 1 10:39:07 2015 +0100

      gpio: drop surplus X86 dependencies

      Port-mapped I/O depends on X86 already, so individual drivers need
      not specify this dependency.

      Suggested-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 56ef9db24633cf6528d2ce736de0985eb125a3c1
  Merge: 060b85b 53dd186
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 21:36:07 2015 -0700

      Merge tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Olof Johansson:
       "This should be our final batch of fixes for 4.3:

         - A patch from Sudeep Holla that fixes annotation of wakeup sources
           properly, old unused format seems to have spread through copying.

         - Two patches from Tony for OMAP.  One dealing with MUSB setup
           problems due to runtime PM being enabled too early on the parent
           device.  The other fixes IRQ numbering for OMAP1"

      * tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:
        usb: musb: omap2430: Fix regression caused by driver core change
        ARM: OMAP1: fix incorrect INT_DMA_LCD
        ARM: dts: fix gpio-keys wakeup-source property

  commit 060b85b0d3064032b6810928973f8c7a15ab9c11
  Merge: af7eba0 d6a32b9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 21:26:04 2015 -0700

      Merge tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

      Pull SCSI fixes from James Bottomley:
       "This is three essential bug fixes for various SCSI parts.

        The only affected users are SCSI multi-path via device handler
        (basically all the enterprise) and mvsas users.  The dh bugs are an
        async entanglement in boot resulting in a serious WARN_ON trip and a
        use after free on remove leading to a crash with strict memory
        accounting.  The mvsas bug manifests as a null deref oops but only on
        abort sequences; however, these can commonly occur with SATA attached
        devices, hence the fix"

      * tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:
        scsi_dh: don't try to load a device handler during async probing
        scsi_dh: fix use-after-free when removing scsi device
        mvsas: Fix NULL pointer dereference in mvs_slot_task_free

  commit af7eba0158e9b4632dcd94c1cd4100689666e14f
  Merge: d59ebbf d01552a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 21:20:49 2015 -0700

      Merge tag 'md/4.3-rc7-fixes' of git://neil.brown.name/md

      Pull md bug fixes from Neil Brown:
       "Two more bug fixes for md.

        One bugfix for a list corruption in raid5 because of incorrect
        locking.

        Other for possible data corruption when a recovering device is failed,
        removed, and re-added.

        Both tagged for -stable"

      * tag 'md/4.3-rc7-fixes' of git://neil.brown.name/md:
        Revert "md: allow a partially recovered device to be hot-added to an 
array."
        md/raid5: fix locking in handle_stripe_clean_event()

  commit b75ec3af27bf011a760e2f44eb25a99b6fbb0fb3
  Merge: e7b63ff 523e134
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 1 00:15:30 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

  commit d59ebbf19b29f4964b24f38c3ad876c33cdd7368
  Merge: 523e134 8731b26
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 16:16:51 2015 -0700

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Two drm atomic core fixes.

        And two radeon patches needed to fix a backlight regression on some
        older hardware"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm: Correct arguments to list_tail_add in create blob ioctl
        drm: crtc: integer overflow in drm_property_create_blob()
        drm/radeon: fix dpms when driver backlight control is disabled
        drm/radeon: move bl encoder assignment into bl init

  commit fc90888d07b8e17eec49c04bdb26344fdea96c3b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 16:06:40 2015 -0700

      vfs: conditionally clear close-on-exec flag

      We clear the close-on-exec flag when opening and closing files, and the
      bit was almost always already clear before.  Avoid dirtying the
      cacheline if the clearning isn't necessary.  That avoids unnecessary
      cacheline dirtying and bouncing in multi-socket environments.

      Eric Dumazet has a file descriptor benchmark that goes 4% faster from
      this on his two-socket machine.  It's probably partly superlinear
      improvement due to getting slightly less spinlock contention on the
      file_lock spinlock due to less work in the critical section.

      Tested-by: Eric Dumazet <eric.dumazet@xxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit f3f86e33dc3da437fa4f204588ce7c78ea756982
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:53:57 2015 -0700

      vfs: Fix pathological performance case for __alloc_fd()

      Al Viro points out that:
      > >     * [Linux-specific aside] our __alloc_fd() can degrade quite badly
      > > with some use patterns.  The cacheline pingpong in the bitmap is 
probably
      > > inevitable, unless we accept considerably heavier memory footprint,
      > > but we also have a case when alloc_fd() takes O(n) and it's _not_ hard
      > > to trigger - close(3);open(...); will have the next open() after that
      > > scanning the entire in-use bitmap.

      And Eric Dumazet has a somewhat realistic multithreaded microbenchmark
      that opens and closes a lot of sockets with minimal work per socket.

      This patch largely fixes it.  We keep a 2nd-level bitmap of the open
      file bitmaps, showing which words are already full.  So then we can
      traverse that second-level bitmap to efficiently skip already allocated
      file descriptors.

      On his benchmark, this improves performance by up to an order of
      magnitude, by avoiding the excessive open file bitmap scanning.

      Tested-and-acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3b5ea47dbff0c934b7b979bcc772427a2404ed3d
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Fri Oct 30 17:56:57 2015 +0800

      hwmon: (fam15h_power) Add max compute unit accumulated power

      This patch adds a member in fam15h_power_data which specifies the
      maximum accumulated power in a compute unit.

      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 46f29c2b494600cd326b84f87f5765e80fffface
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Fri Oct 30 17:56:56 2015 +0800

      hwmon: (fam15h_power) Enable power1_input on AMD Carrizo

      This patch enables power1_input attribute for Carrizo platform.

      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 7deb14b1316def5d4c85f99718d9e530d53cef4e
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Fri Oct 30 17:56:55 2015 +0800

      hwmon: (fam15h_power) Refactor attributes for dynamically added

      Attributes depend on the CPU model the driver gets loaded on.
      Therefore, add those attributes dynamically at init time. This is more
      flexible to control the different attributes on different platforms.

      Suggested-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 523e13455ec9ec4457a5a1d24ff7132949742b70
  Merge: 4bb0fb5 bae818e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 15:19:36 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fix from Sage Weil:
       "This sets the stable pages flag on the RBD block device when we have
        CRCs enabled.  (This is necessary since the default assumption for
        block devices changed in 3.9)"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        rbd: require stable pages if message data CRCs are enabled

  commit 4bb0fb57f3bbe2ed7d4aad75a3c60a051afbd1db
  Merge: c94eee8 5ffdbe8
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 14:49:19 2015 -0700

      Merge branch 'overlayfs-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs

      Pull overlayfs bug fixes from Miklos Szeredi:
       "This contains fixes for bugs that appeared in earlier kernels (all are
        marked for -stable)"

      * 'overlayfs-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs:
        ovl: free lower_mnt array in ovl_put_super
        ovl: free stack of paths in ovl_fill_super
        ovl: fix open in stacked overlay
        ovl: fix dentry reference leak
        ovl: use O_LARGEFILE in ovl_copy_up()

  commit d99c8053fc2473115f506782822cb7c33c687513
  Author: Laurent Meunier <laurent.meunier@xxxxxx>
  Date:   Fri Oct 30 15:15:51 2015 +0100

      pinctrl: pinconf: remove needless loop

      This removes a needless loop which was caught in pinconf.c.

      Suggested-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Laurent Meunier <laurent.meunier@xxxxxx>
      Reviewed-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 241297c2af8bf0459a590c143a1d15b93779fab1
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 19:28:15 2015 +0900

      pinctrl: uniphier: guard uniphier directory with CONFIG_PINCTRL_UNIPHIER

      CONFIG_PINCTRL_UNIPHIER is more suitable than CONFIG_ARCH_UNIPHIER
      to guard the drivers/pinctrl/uniphier directory.

      The current CONFIG_PINCTRL_UNIPHIER_CORE is a bit long
      (it would break the indentation in drivers/pinctrl/Makefile),
      so rename it into CONFIG_PINCTRL_UNIPHIER.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a7c6f30c02326a5acccc602b0d0f08a9853eec3f
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 30 15:04:37 2015 +0100

      pinctrl: zynq: fix UTF-8 errors

      Fix up Sören's name in the Zynq driver. I caused this. I fix it.

      Acked-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aacaffd1d9a6f8e2c7369d83c21d41c3b53e2edc
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 30 11:58:28 2015 +0100

      gpio: dt-bindings: document the official use of "ngpios"

      There are a bunch of drivers that utilize the "ngpios" DT property
      without any vendor prefix. Try to start cleaning up the mess by
      defining what we mean by this property.

      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Cc: Jonas Gorski <jogo@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aad7a2119965a4a504ddf1d8374968135e9a8780
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Fri Oct 30 11:36:29 2015 +0100

      gpio: MAINTAINERS: Add an entry for the ATH79 GPIO driver

      Add an entry for the ATH79 GPIO driver with myself as maintainer.

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c103a10f690cc49054c52f493eeeff143d5f59e7
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:02:05 2015 +0200

      gpio / ACPI: Allow shared GPIO event to be read via operation region

      In Microsoft Surface3 the GPIO detecting lid state is shared between GPIO
      event and operation region. Below is simplied version of the DSDT from
      Surface3 including relevant parts:

          Scope (GPO0)
          {
              Name (_AEI, ResourceTemplate ()
              {
                  GpioInt (Edge, ActiveBoth, Shared, PullNone, 0x0000,
                      "\\_SB.GPO0", 0x00, ResourceConsumer, ,
                      )
                      {   // Pin list
                          0x004C
                      }
              })

              OperationRegion (GPOR, GeneralPurposeIo, Zero, One)
              Field (GPOR, ByteAcc, NoLock, Preserve)
              {
                  Connection (
                      GpioIo (Shared, PullNone, 0x0000, 0x0000,
                          IoRestrictionNone, "\\_SB.GPO0", 0x00,
                          ResourceConsumer,,)
                          {   // Pin list
                              0x004C
                          }
                  ),
                  HELD,   1
              }

              Method (_E4C, 0, Serialized)  // _Exx: Edge-Triggered GPE
              {
                  If ((HELD == One))
                  {
                      ^^LID.LIDB = One
                  }
                  Else
                  {
                      ^^LID.LIDB = Zero
                      Notify (LID, 0x80) // Status Change
                  }

                  Notify (^^PCI0.SPI1.NTRG, One) // Device Check
              }
          }

      When GPIO 0x4c changes we call ASL method _E4C which tries to read HELD
      field (the same GPIO). This triggers following error on the console:

          ACPI Error: Method parse/execution failed [\_SB.GPO0._E4C]
              (Node ffff88013f4b4438), AE_ERROR (20150930/psparse-542)

      The error happens because ACPI GPIO operation region handler
      (acpi_gpio_adr_space_handler()) tries to acquire the very same GPIO which
      returns an error (-EBUSY) because the GPIO is already reserved for the 
GPIO
      event.

      Fix this so that we "borrow" the event GPIO if we find the GPIO belongs to
      an event. Allow this only for GPIOs that are read.

      To be able to go through acpi_gpio->events list for operation region 
access
      we need to make sure the list is properly initialized whenever GPIO chip 
is
      registered.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=106571
      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit bc6a73bbfba5d8325b0e659545ce2f3ad983829b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 30 10:32:19 2015 +0100

      gpio: group port-mapped I/O drivers in a menu

      Create a Kconfig submenu for drivers using X86 port-mapped I/O
      and depend on X86 for this.

      Suggested-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
      Cc: Andreas Bofjall <andreas@xxxxxxxxxx>
      Cc: Diego Elio Pettenò <flameeyes@xxxxxxxxxxxx>
      Cc: Daniel Krueger <daniel.krueger@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Bruno Randolf <br1@xxxxxxxxxxx>
      Cc: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c94eee8a3befe480a1193f2633f16988108393bc
  Merge: 38dab9a 89bc784
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 11:52:20 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

       1) Fix two regressions in ipv6 route lookups, particularly wrt output
          interface specifications in the lookup key.  From David Ahern.

       2) Fix checks in ipv6 IPSEC tunnel pre-encap fragmentation, from
          Herbert Xu.

       3) Fix mis-advertisement of 1000BASE-T on bcm63xx_enet, from Simon
          Arlott.

       4) Some smsc phys misbehave with energy detect mode enabled, so add a
          DT property and disable it on such switches.  From Heiko Schocher.

       5) Fix TSO corruption on TX in mv643xx_eth, from Philipp Kirchhofer.

       6) Fix regression added by removal of openvswitch vport stats, from
          James Morse.

       7) Vendor Kconfig options should be bool, not tristate, from Andreas
          Schwab.

       8) Use non-_BH() net stats bump in tcp_xmit_probe_skb(), otherwise we
          barf during TCP REPAIR operations.

       9) Fix various bugs in openvswitch conntrack support, from Joe
          Stringer.

      10) Fix NETLINK_LIST_MEMBERSHIPS locking, from David Herrmann.

      11) Don't have VSOCK do sock_put() in interrupt context, from Jorgen
          Hansen.

      12) Fix skb_realloc_headroom() failures properly in ISDN, from Karsten
          Keil.

      13) Add some device IDs to qmi_wwan, from Bjorn Mork.

      14) Fix ovs egress tunnel information when using lwtunnel devices, from
          Pravin B Shelar.

      15) Add missing NETIF_F_FRAGLIST to macvtab feature list, from Jason
          Wang.

      16) Fix incorrect handling of throw routes when the result of the throw
          cannot find a match, from Xin Long.

      17) Protect ipv6 MTU calculations from wrap-around, from Hannes Frederic
          Sowa.

      18) Fix failed autonegotiation on KSZ9031 micrel PHYs, from Nathan
          Sullivan.

      19) Add missing memory barries in descriptor accesses or xgbe driver,
          from Thomas Lendacky.

      20) Fix release conditon test in pppoe_release(), from Guillaume Nault.

      21) Fix gianfar bugs wrt filter configuration, from Claudiu Manoil.

      22) Fix violations of RX buffer alignment in sh_eth driver, from Sergei
          Shtylyov.

      23) Fixing missing of_node_put() calls in various places around the
          networking, from Julia Lawall.

      24) Fix incorrect leaf now walking in ipv4 routing tree, from Alexander
          Duyck.

      25) RDS doesn't check pskb_pull()/pskb_trim() return values, from
          Sowmini Varadhan.

      26) Fix VLAN configuration in mlx4 driver, from Jack Morgenstein.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (79 commits)
        ipv6: protect mtu calculation of wrap-around and infinite loop by 
rounding issues
        Revert "Merge branch 'ipv6-overflow-arith'"
        net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes
        net/mlx4_en: Explicitly set no vlan tags in WQE ctrl segment when no 
vlan is present
        vhost: fix performance on LE hosts
        bpf: sample: define aarch64 specific registers
        amd-xgbe: Fix race between access of desc and desc index
        RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in 
rds_tcp_data_recv
        forcedeth: fix unilateral interrupt disabling in netpoll path
        openvswitch: Fix skb leak using IPv6 defrag
        ipv6: Export nf_ct_frag6_consume_orig()
        openvswitch: Fix double-free on ip_defrag() errors
        fib_trie: leaf_walk_rcu should not compute key if key is less than 
pn->key
        net: mv643xx_eth: add missing of_node_put
        ath6kl: add missing of_node_put
        net: phy: mdio: add missing of_node_put
        netdev/phy: add missing of_node_put
        net: netcp: add missing of_node_put
        net: thunderx: add missing of_node_put
        ipv6: gre: support SIT encapsulation
        ...

  commit 5aa4e83dd54a3b33d0f2fbab0a1f06a3614a5949
  Author: Marc Titinger <mtitinger@xxxxxxxxxxxx>
  Date:   Thu Oct 29 10:07:17 2015 +0100

      hwmon: (ina2xx) remove no longer used variable 'kind'

      Signed-off-by: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 2459ee8651dc5ab72790c2ffa99af288c7641b64
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 30 22:42:46 2015 -0700

      x86/vm86: Set thread.vm86 to NULL on fork/clone

      thread.vm86 points to per-task information -- the pointer should not
      be copied on clone.

      Fixes: d4ce0f26c790 ("x86/vm86: Move fields from 'struct 
kernel_vm86_struct' to 'struct vm86'")
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Stas Sergeev <stsp@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/71c5d6985d70ec8197c8d72f003823c81b7dcf99.1446270067.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 226f1f729ce277720fab60c91dd1b12574cfe66c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 30 22:42:45 2015 -0700

      selftests/x86: Add a fork() to entry_from_vm86 to catch fork bugs

      Mere possession of vm86 state is strange.  Make sure that nothing
      gets corrupted if we fork after calling vm86().

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Stas Sergeev <stsp@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/08f83295460a80e41dc5e3e81ec40d6844d316f5.1446270067.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 38dab9ac1c017e96dc98e978111e365134d41d13
  Merge: f9793e3 1955621
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:49:44 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

      Pull input layer fixes from Dmitry Torokhov:

       - a change to the ALPS driver where we had limit the quirk for
         trackstick handling from being active on all Dells to just a few
         models

       - a fix for a build dependency issue in the sur40 driver

       - a small clock handling fixup in the LPC32xx touchscreen driver

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
        Input: alps - only the Dell Latitude D420/430/620/630 have separate 
stick button bits
        Input: sur40 - add dependency on VIDEO_V4L2
        Input: lpc32xx_ts - fix warnings caused by enabling unprepared clock

  commit f9793e379bbb1188c72d8a367083290a14f98c97
  Merge: 9b971e7 1266963
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:47:18 2015 -0700

      Merge tag 'pci-v4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci

      Pull PCI fix from Bjorn Helgaas:
       "Sorry for this last-minute update; it's been in -next for quite a
        while, but I forgot about it until I started getting ready for the
        merge window.

        It's small and fixes a way a user could cause a panic via sysfs, so I
        think it's worth getting it in v4.3.

        NUMA:
          - Prevent out of bounds access in sysfs numa_node override (Sasha 
Levin)"

      * tag 'pci-v4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci:
        PCI: Prevent out of bounds access in numa_node override

  commit 53dd186b3fb7254ae0cb4d6648abb5589aaa8c2d
  Merge: 4db7062 8f2279d
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Sat Oct 31 01:41:45 2015 +0000

      Merge tag 'omap-for-v4.3/fixes-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Two omap regression fixes:

      - Fix omap3 MUSB with DMA caused by driver core changes

      - Fix LCD DMA interrupt number for omap1 that did not
        get changed for sparse IRQ changes

      * tag 'omap-for-v4.3/fixes-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        usb: musb: omap2430: Fix regression caused by driver core change
        ARM: OMAP1: fix incorrect INT_DMA_LCD

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit 8731b269f01e16193390c7276e70530366b8d626
  Author: Maneet Singh <mmaneetsingh@xxxxxxxxxx>
  Date:   Thu Oct 8 10:10:24 2015 -0400

      drm: Correct arguments to list_tail_add in create blob ioctl

      Arguments passed to list_add_tail were reversed resulting in deletion
      of old blob property everytime the new one is added.

      Fixes

      commit e2f5d2ea479b9b2619965d43db70939589afe43a
      Author: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Date:   Fri May 22 13:34:51 2015 +0100

          drm/mode: Add user blob-creation ioctl

      Signed-off-by: Maneet Singh <mmaneetsingh@xxxxxxxxxx>
      [seanpaul tweaked commit subject a little]
      Signed-off-by: Sean Paul <seanpaul@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx # v4.2
      Reviewed-by: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Reviewed-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxx>

  commit d01552a76d71f9879af448e9142389ee9be6e95b
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Oct 31 11:00:56 2015 +1100

      Revert "md: allow a partially recovered device to be hot-added to an 
array."

      This reverts commit 7eb418851f3278de67126ea0c427641ab4792c57.

      This commit is poorly justified, I can find not discusison in email,
      and it clearly causes a problem.

      If a device which is being recovered fails and is subsequently
      re-added to an array, there could easily have been changes to the
      array *before* the point where the recovery was up to.  So the
      recovery must start again from the beginning.

      If a spare is being recovered and fails, then when it is re-added we
      really should do a bitmap-based recovery up to the recovery-offset,
      and then a full recovery from there.  Before this reversion, we only
      did the "full recovery from there" which is not corect.  After this
      reversion with will do a full recovery from the start, which is safer
      but not ideal.

      It will be left to a future patch to arrange the two different styles
      of recovery.

      Reported-and-tested-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx (3.14+)
      Fixes: 7eb418851f32 ("md: allow a partially recovered device to be 
hot-added to an array.")

  commit 9ac0934bbe52290e4e4c2a58ec41cab9b6ca8c96
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 29 16:37:54 2015 +0300

      drm: crtc: integer overflow in drm_property_create_blob()

      The size here comes from the user via the ioctl, it is a number between
      1-u32max so the addition here could overflow on 32 bit systems.

      Fixes: f453ba046074 ('DRM: add mode setting support')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Reviewed-by: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx # v4.2
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxx>

  commit 9b971e771ece3f3fa9c6074e5a12d9304e5fa9ef
  Merge: 7c0f488 73effcc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:57:55 2015 -0700

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Will Deacon:
       "Apologies for this being so late, but we've uncovered a few nasty
        issues on arm64 which didn't settle down until yesterday and the fixes
        all look suitable for 4.3.  Of the four patches, three of them are
        Cc'd to stable, with the remaining patch fixing an issue that only
        took effect during the merge window.

        Summary:

         - Fix corruption in SWP emulation when STXR fails due to contention
         - Fix MMU re-initialisation when resuming from a low-power state
         - Fix stack unwinding code to match what ftrace expects
         - Fix relocation code in the EFI stub when DRAM base is not 2MB 
aligned"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64/efi: do not assume DRAM base is aligned to 2 MB
        Revert "ARM64: unwind: Fix PC calculation"
        arm64: kernel: fix tcr_el1.t0sz restore on systems with extended idmap
        arm64: compat: fix stxr failure case in SWP emulation

  commit 7c0f488fbed7e498043f26de42c89c00855028c1
  Merge: 8a28d67 d305c47
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:56:44 2015 -0700

      Merge tag 'please-pull-syscalls' of 
git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux

      Pull ia64 kcmp syscall from Tony Luck:
       "Missed adding the kcmp() syscall a long time ago.  Now it seems that
        it is essential to build systemd"

      * tag 'please-pull-syscalls' of 
git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux:
        [IA64] Wire up kcmp syscall

  commit b8a9d66d043ffac116100775a469f05f5158c16f
  Author: Roman Gushchin <klamm@xxxxxxxxxxxxxx>
  Date:   Sat Oct 31 10:53:50 2015 +1100

      md/raid5: fix locking in handle_stripe_clean_event()

      After commit 566c09c53455 ("raid5: relieve lock contention in 
get_active_stripe()")
      __find_stripe() is called under conf->hash_locks + hash.
      But handle_stripe_clean_event() calls remove_hash() under
      conf->device_lock.

      Under some cirscumstances the hash chain can be circuited,
      and we get an infinite loop with disabled interrupts and locked hash
      lock in __find_stripe(). This leads to hard lockup on multiple CPUs
      and following system crash.

      I was able to reproduce this behavior on raid6 over 6 ssd disks.
      The devices_handle_discard_safely option should be set to enable trim
      support. The following script was used:

      for i in `seq 1 32`; do
          dd if=/dev/zero of=large$i bs=10M count=100 &
      done

      neilb: original was against a 3.x kernel.  I forward-ported
        to 4.3-rc.  This verison is suitable for any kernel since
        Commit: 59fc630b8b5f ("RAID5: batch adjacent full stripe write")
        (v4.1+).  I'll post a version for earlier kernels to stable.

      Signed-off-by: Roman Gushchin <klamm@xxxxxxxxxxxxxx>
      Fixes: 566c09c53455 ("raid5: relieve lock contention in 
get_active_stripe()")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>
      Cc: Shaohua Li <shli@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.13 - 4.2

  commit bae818ee1577c27356093901a0ea48f672eda514
  Author: Ronny Hegewald <ronny.hegewald@xxxxxxxxx>
  Date:   Thu Oct 15 18:50:46 2015 +0000

      rbd: require stable pages if message data CRCs are enabled

      rbd requires stable pages, as it performs a crc of the page data before
      they are send to the OSDs.

      But since kernel 3.9 (patch 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0
      "mm: only enforce stable page writes if the backing device requires
      it") it is not assumed anymore that block devices require stable pages.

      This patch sets the necessary flag to get stable pages back for rbd.

      In a ceph installation that provides multiple ext4 formatted rbd
      devices "bad crc" messages appeared regularly (ca 1 message every 1-2
      minutes on every OSD that provided the data for the rbd) in the
      OSD-logs before this patch. After this patch this messages are pretty
      much gone (only ca 1-2 / month / OSD).

      Cc: stable@xxxxxxxxxxxxxxx # 3.9+, needs backporting
      Signed-off-by: Ronny Hegewald <Ronny.Hegewald@xxxxxxxxx>
      [idryomov@xxxxxxxxx: require stable pages only in crc case, changelog]
      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>

  commit aa644fa64c25ab2231a0fa9464892f5579d4e161
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Mon Oct 19 17:55:49 2015 +0100

      ARM64: Enable multi-core scheduler support by default

      Make sure that the task scheduler domain hierarchy is set-up correctly
      on systems with single or multi-cluster topology.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Acked-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit bf457786f569cc480629d7855cac1fd1173ac009
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Oct 23 16:48:14 2015 +0200

      arm64/efi: move arm64 specific stub C code to libstub

      Now that we added special handling to the C files in libstub, move
      the one remaining arm64 specific EFI stub C file to libstub as
      well, so that it gets the same treatment. This should prevent future
      changes from resulting in binaries that may execute incorrectly in
      UEFI context.

      With efi-entry.S the only remaining EFI stub source file under
      arch/arm64, we can also simplify the Makefile logic somewhat.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Tested-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 50224f4d0959981ed03c407af1f35ed7917ae097
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Fri Oct 30 07:52:39 2015 -0700

      hwmon: (nct6775) Introduce separate temperature labels for NCT6792 and 
NCT6793

      NCT6792 and NCT6793 are mostly register compatible to NCT6791, but
      temperature sources are different and difficult to manage with a single
      temperature label array. Introduce separate temperature label arrays
      for those chips to reflect the differences.

      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 9a38371a8cda366400e592d10bc062deea09b695
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sat Aug 29 15:29:25 2015 -0700

      hwmon: (nct6775) NCT6791D and NCT6792D have an additional temperature 
source

      Both NCT6791D and NCT6792D permit selection of a 'virtual' temperature
      register as temperature source. The virtual temperature registers are
      registers 0xea to 0xef in bank 0 and can be written by software.

      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 562b103a21974c2f9cd67514d110f918bb3e1796
  Author: Marek Vasut <marex@xxxxxxx>
  Date:   Fri Oct 30 13:48:19 2015 +0100

      can: Use correct type in sizeof() in nla_put()

      The sizeof() is invoked on an incorrect variable, likely due to some
      copy-paste error, and this might result in memory corruption. Fix this.

      Signed-off-by: Marek Vasut <marex@xxxxxxx>
      Cc: Wolfgang Grandegger <wg@xxxxxxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Cc: linux-stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit e7b63ff115f21ea6c609cbb08f3d489af627af6e
  Merge: a493bcf cb866e3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 20:51:56 2015 +0900

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

      Steffen Klassert says:

      ====================
      pull request (net-next): ipsec-next 2015-10-30

      1) The flow cache is limited by the flow cache limit which
         depends on the number of cpus and the xfrm garbage collector
         threshold which is independent of the number of cpus. This
         leads to the fact that on systems with more than 16 cpus
         we hit the xfrm garbage collector limit and refuse new
         allocations, so new flows are dropped. On systems with 16
         or less cpus, we hit the flowcache limit. In this case, we
         shrink the flow cache instead of refusing new flows.

         We increase the xfrm garbage collector threshold to INT_MAX
         to get the same behaviour, independent of the number of cpus.

      2) Fix some unaligned accesses on sparc systems.
         From Sowmini Varadhan.

      3) Fix some header checks in _decode_session4. We may call
         pskb_may_pull with a negative value converted to unsigened
         int from pskb_may_pull. This can lead to incorrect policy
         lookups. We fix this by a check of the data pointer position
         before we call pskb_may_pull.

      4) Reload skb header pointers after calling pskb_may_pull
         in _decode_session4 as this may change the pointers into
         the packet.

      5) Add a missing statistic counter on inner mode errors.

      Please pull or let me know if there are problems.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a493bcf8d6caf28f062c5f8f2ba486fdbf1ae899
  Merge: e258d91 8aaa878
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 20:38:24 2015 +0900

      Merge tag 'wireless-drivers-next-for-davem-2015-10-29' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

      Kalle Valo says:

      ====================
      iwlwifi

      * bug fix for TDLS
      * fixes and cleanups in scan
      * support of several scan plans
      * improvements in FTM
      * fixes in FW API
      * improvements in the failure paths when the bus is dead
      * other various small things here and there

      ath10k

      * add QCA9377 support
      * fw_stats support for 10.4 firmware

      ath6kl

      * report antenna configuration to user space
      * implement ethtool stats

      ssb

      * add Kconfig SSB_HOST_SOC for compiling SoC related code
      * move functions specific to SoC hosted bus to separated file
      * pick PCMCIA host code support from b43 driver
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e258d919b175e0160a694a20fb309e29fc93d7b1
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Oct 28 23:17:31 2015 -0700

      switchdev: fix: pass correct obj size when deferring obj add

      Fixes: 4d429c5dd ("switchdev: introduce possibility to defer obj_add/del")
      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3a7bde55a11c4a22a6ccfc487993d621ae8e3688
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Oct 28 23:17:30 2015 -0700

      switchdev: fix: erasing too much of vlan obj when handling multiple vlan 
specs

      When adding vlans with multiple IFLA_BRIDGE_VLAN_INFO attrs set in AFSPEC,
      we would wipe the vlan obj struct after the first IFLA_BRIDGE_VLAN_INFO.
      Fix this by only clearing what's necessary on each IFLA_BRIDGE_VLAN_INFO
      iteration.

      Fixes: 9e8f4a54 ("switchdev: push object ID back to object structure")
      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 740215ddb5b3faa0006505de073654cc50e9a299
  Merge: 5bf8921 f116317
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 20:19:43 2015 +0900

      Merge tag 'nfc-next-4.4-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sameo/nfc-next

      Samuel Ortiz says:

      ====================
      NFC 4.4 pull request

      This is the NFC pull request for 4.4.

      It's a bit bigger than usual, the 3 main culprits being:

      - A new driver for Intel's Fields Peak NCI chipset. In order to
        support this chipset we had to export a few NCI routines and
        extend the driver NCI ops to not only support proprietary
        commands but also core ones.

      - Support for vendor commands for both STM drivers, st-nci
        and st21nfca. Those vendor commands allow to run factory tests
        through the NFC netlink interface.

      - New i2c and SPI support for the Marvell driver, together with
        firmware download support for this driver's core.

      Besides that we also have:

      - A few file renames in the STM drivers, to keep the naming
        consistent between drivers.

      - Some improvements and fixes on the NCI HCI layer, mostly to
        properly reach a secure element over a legacy HCI link.

      - A few fixes for the s3fwrn5 and trf7970a drivers.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5bf8921116ce0972c23b78ea2d98e5c0c6a99ae2
  Merge: b7b0b1d 324e786
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 19:41:10 2015 +0900

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-10-28

      Here are a some more Bluetooth patches for 4.4 which collected up during
      the past week. The most important ones are from Kuba Pawlak for fixing
      locking issues with SCO sockets. There's also a fix from Alexander Aring
      for 6lowpan, a memleak fix from Julia Lawall for the btmrvl driver and
      some cleanup patches from Marcel.

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 13e3008fae342c86dd645b2ec4c669bbb40c5d33
  Author: Mike Looijmans <mike.looijmans@xxxxxxxx>
  Date:   Thu Oct 22 13:30:20 2015 +0200

      pinctrl: zynq: Initialize early

      Supplying pinmux configuration for e.g. gpio pins leads to deferred
      probes because the pinctrl device is probed much later than gpio.
      Move the init call to a much earlier stage so it probes before the
      devices that may need it.

      Signed-off-by: Mike Looijmans <mike.looijmans@xxxxxxxx>
      Tested-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e25589894e24b07a33b143b9bfd95fe8d2c0a353
  Author: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
  Date:   Wed Oct 28 17:24:16 2015 -0400

      gpio: Add ACCES 104-IDIO-16 driver maintainer entry

      Add William Breathitt Gray as the maintainer of the ACCES 104-IDIO-16
      GPIO driver.

      Signed-off-by: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d9e4ad5badf4ccbfddee208c898fb8fd0c8836b1
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 16:14:31 2015 +0900

      Document that IRQ_NONE should be returned when IRQ not actually handled

      Our IRQ storm detection works when an interrupt handler returns
      IRQ_NONE for thousands of consecutive interrupts in a second. It
      doesn't hurt to occasionally return IRQ_NONE when the interrupt is
      actually genuine.

      Drivers should only be returning IRQ_HANDLED if they have actually
      *done* something to stop an interrupt from happening â?? it doesn't just
      mean "this really *was* my device".

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Cc: davem@xxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/1446016471.3405.201.camel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b7b0b1d290cc89c39607dd47f8047e1071e65692
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Mon Oct 26 11:06:33 2015 -0700

      ipv6: recreate ipv6 link-local addresses when increasing MTU over 
IPV6_MIN_MTU

      This change makes it so that we reinitialize the interface if the MTU is
      increased back above IPV6_MIN_MTU and the interface is up.

      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bebd23a2ed31d47e7dd746d3b125068aa2c42d85
  Merge: 66a565c 7ed4915
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Oct 30 10:09:37 2015 +0100

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      New features:

        - Allow passing C language eBPF scriptlets via --event in all tools,
          so that it gets built using clang and then pass it to the kernel via
          sys_bpf(). (Wang Nan)

        - Wire up the loaded ebpf object file with associated kprobes, so that
          it can determine if the kprobes will be filtered or not. (Wang Nan)

      User visible changes:

        - Add cmd string table to decode sys_bpf first arg in 'trace'. (Arnaldo 
Carvalho de Melo)

        - Enable printing of branch stack in 'perf script'. (Stephane Eranian)

        - Pass the right file with debug info to libunwind. (Rabin Vincent)

      Build Fixes:

        - Make sure fixdep is built before libbpf, fixing a race. (Jiri Olsa)

        - Fix libiberty feature detection. (Rabin Vincent)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ee6259382ca8f723a2cc90841f903667c7720584
  Merge: 65bdc43 c7070fc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:27:07 2015 +0900

      Merge branch 'mlxsw-flooding-and-cosmetics'

      Jiri Pirko says:

      ====================
      mlxsw: driver update

      This driver update mainly brings support for user to be able to setup
      flooding on specified port, via bridge flag. Also, there is a fix in 
ageing
      time conversion. The rest is just cosmetics.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7070fc4ecb50bee801cef85483e043d0ba1dd27
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:05 2015 +0100

      mlxsw: spectrum: Make mlxsw_sp_port_switchdev_ops static

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d9324f68eea7b01bde25ab4c204227f3583b92ba
  Author: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:04 2015 +0100

      mlxsw: Put braces on all arms of branch statement

      Fix a place where checkpatch complains that braces should be used
      on all arms of this statement.

      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef743fddb33f47b34c852f26fbd2057c72c70016
  Author: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:03 2015 +0100

      mlxsw: Put constant on the right side of comparisons

      Fixes those places where checkpatch complains that comparisons
      should place the constant on the right side of the test.

      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 135f9eceb7fa0287e535f9ec921485661e9d6667
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:02 2015 +0100

      mlxsw: spectrum: Fix ageing time value

      The value passed through switchdev attr set is not in jiffies, but in
      clock_t, so fix the convert.

      Reported-by: Sagi Rotem <sagir@xxxxxxxxxxxx>
      Fixes: 56ade8fe3f ("mlxsw: spectrum: Add initial support for Spectrum 
ASIC")
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 75c09280feddcf5c01c00aa11881c4b38559e2ef
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:01 2015 +0100

      mlxsw: reg: Avoid unnecessary line wrap for mlxsw_reg_sfd_uc_unpack

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8316f087f7c62a2d21ec4e72926ec07ce777fe48
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:00 2015 +0100

      mlxsw: reg: Fix desription typos of couple of SFN items

      Fix copy-paste errors.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e9ec0839b4994ebc764d8067832dd079336c42f
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:59 2015 +0100

      mlxsw: reg: Fix description for reg_sfd_uc_sub_port

      The original description was for LAG, so fix it.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0293038e0c36db45f2ea4e4e4a8ce0a0faa62139
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:58 2015 +0100

      mlxsw: spectrum: Add support for flood control

      Add or remove a bridged port from the flooding domain of unknown unicast
      packets according to user configuration.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1b3433a942922953df43ef0bc0172119041364c5
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:57 2015 +0100

      mlxsw: spectrum: Add support for VLAN ranges in flooding configuration

      When enabling a range of VLANs on a bridged port we can configure
      flooding for these VLANs by one register access instead of calling the
      same register for each VLAN. This is accomplished by using the 'range'
      field of the Switch Flooding Table Register (SFTR).

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0d9b970cee612968c6b888b93736d991762b9edb
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:56 2015 +0100

      mlxsw: spectrum: move "bridged" bool to u8 flags

      It is a flag anyway, so move it to existing u8 flag and don't waste mem.
      Fix the flags to be in single u8 on the way.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 371e59adcebf9953385bf46d5325ac39a53c5520
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:55 2015 +0100

      switchdev: Make flood to CPU optional

      In certain use cases it is not always desirable for the switch device to
      flood traffic to CPU port. Instead, only certain packet types (e.g.
      STP, LACP) should be trapped to it.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 741af0053b43d8b9a688a12c57ece62338616ae8
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:54 2015 +0100

      switchdev: Add support for flood control

      Allow devices supporting this feature to control the flooding of unknown
      unicast traffic, by making switchdev infrastructure propagate this setting
      to the switch driver.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 65bdc43d2220bc97af037c87aba2407b46f13c2a
  Merge: b7af147 6ccbe6b
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:21:57 2015 +0900

      Merge branch 'xgene_txrx_delay'

      Iyappan Subramanian says:

      ====================
      drivers: xgene: Add support RGMII TX/RX delay configuration

      X-Gene RGMII ethernet controller has a RGMII bridge that performs the
      task of converting the RGMII signal {RX_CLK,RX_CTL, RX_DATA[3:0]} from
      PHY to GMII signal {RX_DV,RX_ER,RX_DATA[7:0]} and vice versa.  This
      RGMII bridge has a provision to internally delay the input RX_CLK and
      the output TX_CLK using configuration registers. This will help in
      maintain the CLK-CTL delay relationship in various operating
      conditions.

      This patch adds support RGMII TX/RX delay configuration.
      ====================

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ccbe6b248ef8cc31477a388ea9841b56030bea9
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Mon Oct 26 15:25:16 2015 -0700

      Documentation: dts: xgene: Add TX/RX delay field

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 16615a4c6f4d54d7655dff19e7061c76043f907d
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Mon Oct 26 15:25:15 2015 -0700

      drivers: net: xgene: Add support RGMII TX/RX delay configuration

      Add RGMII TX/RX delay configuration support. RGMII standard requires 2ns
      delay to help the RGMII bridge receiver to sample data correctly. If the
      default value does not provide proper centering of the data sample, the
      TX/RX delay parameters can be used to adjust accordingly.

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b7af1472afa2228bd9fe8b4cea3b003b4027d72d
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:52:56 2015 -0700

      bridge: set is_local and is_static before fdb entry is added to the fdb 
hashtable

      Problem Description:
      We can add fdbs pointing to the bridge with NULL ->dst but that has a
      few race conditions because br_fdb_insert() is used which first creates
      the fdb and then, after the fdb has been published/linked, sets
      "is_local" to 1 and in that time frame if a packet arrives for that fdb
      it may see it as non-local and either do a NULL ptr dereference in
      br_forward() or attach the fdb to the port where it arrived, and later
      br_fdb_insert() will make it local thus getting a wrong fdb entry.
      Call chain br_handle_frame_finish() -> br_forward():
      But in br_handle_frame_finish() in order to call br_forward() the dst
      should not be local i.e. skb != NULL, whenever the dst is
      found to be local skb is set to NULL so we can't forward it,
      and here comes the problem since it's running only
      with RCU when forwarding packets it can see the entry before "is_local"
      is set to 1 and actually try to dereference NULL.
      The main issue is that if someone sends a packet to the switch while
      it's adding the entry which points to the bridge device, it may
      dereference NULL ptr. This is needed now after we can add fdbs
      pointing to the bridge.  This poses a problem for
      br_fdb_update() as well, while someone's adding a bridge fdb, but
      before it has is_local == 1, it might get moved to a port if it comes
      as a source mac and then it may get its "is_local" set to 1

      This patch changes fdb_create to take is_local and is_static as
      arguments to set these values in the fdb entry before it is added to the
      hash. Also adds null check for port in br_forward.

      Fixes: 3741873b4f73 ("bridge: allow adding of fdb entries pointing to the 
bridge device")
      Reported-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b8812fa88371ae567c907448d9a7ba62d09b90c9
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 09:49:00 2015 -0400

      geneve: add IPv6 bits to geneve_fill_metadata_dst

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3a56f86f1be6a381345800d69999eaff87e0161d
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 17:01:45 2015 -0400

      geneve: handle ipv6 priority like ipv4 tos

      Other callers of udp_tunnel6_xmit_skb just pass 0 for the prio
      argument.  Jesse Gross <jesse@xxxxxxxxxx> suggested that prio is really
      the same as IPv4's tos and should be handled the same, so this is my
      interpretation of that suggestion.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reported-by: Jesse Gross <jesse@xxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ed66f0e8235118a31720acdab3bbbe9debd0f6a
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 17:01:44 2015 -0400

      geneve: implement support for IPv6-based tunnels

      NOTE: Link-local IPv6 addresses for remote endpoints are not supported,
      since the driver currently has no capacity for binding a geneve
      interface to a specific link.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04ccb89073e7cfc31d9b9208d32b2cdf84a4d97d
  Merge: 8a28d67 ae93580
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 30 09:32:59 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      regression fix for backlight on old laptops.

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/radeon: fix dpms when driver backlight control is disabled
        drm/radeon: move bl encoder assignment into bl init

  commit 7ed4915ad60788d6b846e2cd034f49ee15698143
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Thu Oct 29 08:49:36 2015 +0100

      perf unwind: Pass symbol source to libunwind

      Even if --symfs is used to point to the debug binaries, we send in the
      non-debug filenames to libunwind, which leads to libunwind not finding
      the debug frame.  Fix this by preferring the file in --symfs, if it is
      available.

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446104978-26429-1-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3af6ed84eb43c587beb5f3252222e39e65d08c61
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Thu Oct 29 08:49:37 2015 +0100

      tools build: Fix libiberty feature detection

      Any CFLAGS or LDFLAGS set by the user need to be passed to the feature
      build command.  This many include for example -I or -L to point to
      libraries and include files in custom paths.

      In most of the test-*.bin rules in build/feature/Makefile, we use the 
BUILD
      macro which always sends in CFLAGS and LDFLAGS.  The libiberty build line
      however doesn't use the BUILD macro and thus needs to send in CFLAGS and
      LDFLAGS explicitly.  Without this, when using custom CFLAGS/LDFLAGS, 
libiberty
      fails to be detected and the perf link fails with something like:

         LINK     perf
        libbfd.a(bfd.o): In function `bfd_errmsg':
        bfd.c:(.text+0x168): undefined reference to `xstrerror'
        bbfd.a(opncls.o): In function `_bfd_new_bfd':
        opncls.c:(.text+0xe8): undefined reference to `objalloc_create'
        ...

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446104978-26429-2-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d509db0473e40134286271b1d1adadccf42ac467
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:20 2015 +0000

      perf tools: Compile scriptlets to BPF objects when passing '.c' to --event

      This patch provides infrastructure for passing source files to --event
      directly using:

       # perf record --event bpf-file.c command

      This patch does following works:

       1) Allow passing '.c' file to '--event'. parse_events_load_bpf() is
          expanded to allow caller tell it whether the passed file is source
          file or object.

       2) llvm__compile_bpf() is called to compile the '.c' file, the result
          is saved into memory. Use bpf_object__open_buffer() to load the
          in-memory object.

      Introduces a bpf-script-example.c so we can manually test it:

       # perf record --clang-opt "-DLINUX_VERSION_CODE=0x40200" --event 
./bpf-script-example.c sleep 1

      Note that '--clang-opt' must put before '--event'.

      Futher patches will merge it into a testcase so can be tested 
automatically.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-10-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 71dc2326252ff1bcdddc05db03c0f831d16c9447
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:19 2015 +0000

      perf record: Add clang options for compiling BPF scripts

      Although previous patch allows setting BPF compiler related options in
      perfconfig, on some ad-hoc situation it still requires passing options
      through cmdline. This patch introduces 2 options to 'perf record' for
      this propose: --clang-path and --clang-opt.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-9-git-send-email-wangnan0@xxxxxxxxxx
      [ Add the new options to the 'record' man page ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1f45b1d49073541947193bd7dac9e904142576aa
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:18 2015 +0000

      perf bpf: Attach eBPF filter to perf event

      This is the final patch which makes basic BPF filter work. After
      applying this patch, users are allowed to use BPF filter like:

       # perf record --event ./hello_world.o ls

      A bpf_fd field is appended to 'struct evsel', and setup during the
      callback function add_bpf_event() for each 'probe_trace_event'.

      PERF_EVENT_IOC_SET_BPF ioctl is used to attach eBPF program to a newly
      created perf event. The file descriptor of the eBPF program is passed to
      perf record using previous patches, and stored into evsel->bpf_fd.

      It is possible that different perf event are created for one kprobe
      events for different CPUs. In this case, when trying to call the ioctl,
      EEXIST will be return. This patch doesn't treat it as an error.

      Committer note:

      The bpf proggie used so far:

        __attribute__((section("fork=_do_fork"), used))
        int fork(void *ctx)
        {
          return 0;
        }

        char _license[] __attribute__((section("license"), used)) = "GPL";
        int _version __attribute__((section("version"), used)) = 0x40300;

      failed to produce any samples, even with forks happening and it being
      running in system wide mode.

      That is because now the filter is being associated, and the code above
      always returns zero, meaning that all forks will be probed but filtered
      away ;-/

      Change it to 'return 1;' instead and after that:

        # trace --no-syscalls --event /tmp/foo.o
           0.000 perf_bpf_probe:fork:(ffffffff8109be30))
           2.333 perf_bpf_probe:fork:(ffffffff8109be30))
           3.725 perf_bpf_probe:fork:(ffffffff8109be30))
           4.550 perf_bpf_probe:fork:(ffffffff8109be30))
        ^C#

      And it works with all tools, including 'perf trace'.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-8-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 50f1e6d0431d3343cb506037c43ce623bd15581f
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Oct 28 21:44:50 2015 +0100

      perf tools: Make sure fixdep is built before libbpf

      While doing 'make -C tools/perf build-test':

         LD       fixdep-in.o
         LINK     fixdep
       /bin/sh: /home/acme/git/linux/tools/build/fixdep: Permission denied
       make[6]: *** [bpf.o] Error 1
       make[5]: *** [libbpf-in.o] Error 2
       make[4]: *** [/home/acme/git/linux/tools/lib/bpf/libbpf.a] Error 2
       make[4]: *** Waiting for unfinished jobs....

      The fixdep tool needs to be built as the first binary.  Libraries are
      built in paralel, so each of them needs to depend on fixdep target.

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151028204450.GA25553@xxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dc323ce8e72d6d1beb9af9bbd29c4d55ce3d7fb0
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Mon Aug 31 18:41:13 2015 +0200

      perf script: Enable printing of branch stack

      This patch improves perf script by enabling printing of the
      branch stack via the 'brstack' and 'brstacksym' arguments to
      the field selection option -F. The option is off by default
      and operates only if the perf.data file has branch stack content.

      The branches are printed in to/from pairs. The most recent branch
      is printed first. The number of branch entries vary based on the
      underlying hardware and filtering used.

      The brstack prints FROM/TO addresses in raw hexadecimal format.
      The brstacksym prints FROM/TO addresses in symbolic form wherever
      possible.

       $ perf script -F ip,brstack
        5d3000 0x401aa0/0x5d2000/M/-/-/-/0 ...

       $ perf script -F ip,brstacksym
        4011e0 noploop+0x0/noploop+0x0/P/-/-/0

      The notation F/T/M/X/A/C describes the attributes of the branch.
      F=from, T=to, M/P=misprediction/prediction, X=TSX, A=TSX abort, C=cycles 
(SKL)

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Yuanfang Chen <cyfmxc@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441039273-16260-5-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit cb083816ab5ac3d10a9417527f07fc5962cc3808
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Oct 26 21:42:33 2015 +0000

      arm64: page-align sections for DEBUG_RODATA

      A kernel built with DEBUG_RO_DATA && !CONFIG_DEBUG_ALIGN_RODATA doesn't
      have .text aligned to a page boundary, though fixup_executable works at
      page-granularity thanks to its use of create_mapping. If .text is not
      page-aligned, the first page it exists in may be marked non-executable,
      leading to failures when an attempt is made to execute code in said
      page.

      This patch upgrades ALIGN_DEBUG_RO and ALIGN_DEBUG_RO_MIN to force page
      alignment for DEBUG_RO_DATA && !CONFIG_DEBUG_ALIGN_RODATA kernels,
      ensuring that all sections with specific RWX permission requirements are
      mapped with the correct permissions.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Reported-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Reviewed-by: Laura Abbott <laura@xxxxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Suzuki Poulose <suzuki.poulose@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Fixes: da141706aea52c1a ("arm64: add better page protections to arm64")
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 86a5906e4d1df1ec160fa9e18b6f2277a5216c60
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Tue Oct 27 17:40:26 2015 +0000

      arm64: Fix build with CONFIG_ZONE_DMA=n

      Trying to build with CONFIG_ZONE_DMA=n leaves visible references
      to the now-undefined ZONE_DMA, resulting in a syntax error.

      Hide the references behind an #ifdef instead of using IS_ENABLED.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5accd17d0eb523350c9ef754d655e379c9bb93b3
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Thu Oct 22 15:41:52 2015 +0100

      arm64: Fix compat register mappings

      For reasons not entirely apparent, but now enshrined in history, the
      architectural mapping of AArch32 banked registers to AArch64 registers
      actually orders SP_<mode> and LR_<mode> backwards compared to the
      intuitive r13/r14 order, for all modes except FIQ.

      Fix the compat_<reg>_<mode> macros accordingly, in the hope of avoiding
      subtle bugs with KVM and AArch32 guests.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 73effccb9196ccc0241c3fb51dfd8de1d14ae8ed
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Oct 29 15:07:25 2015 +0100

      arm64/efi: do not assume DRAM base is aligned to 2 MB

      The current arm64 Image relocation code in the UEFI stub assumes that
      the dram_base argument it receives is always a multiple of 2 MB. In
      reality, it is simply the lowest start address of all RAM entries in
      the UEFI memory map, which means it could be any multiple of 4 KB.

      Since the arm64 kernel Image needs to reside TEXT_OFFSET bytes beyond
      a 2 MB aligned base, or it will fail to boot, make sure we round dram_base
      to 2 MB before using it to calculate the relocation address.

      Fixes: e38457c361b30c5a ("arm64: efi: prefer AllocatePages() over 
efi_low_alloc() for vmlinux")
      Reported-by: Timur Tabi <timur@xxxxxxxxxxxxxx>
      Tested-by: Timur Tabi <timur@xxxxxxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 116ef0fcc9268a876c8d1bbf77d8fa80111fa526
  Merge: 9ffecb1 38850d7 a4283e4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 29 15:21:30 2015 +0000

      Merge branches 'fixes' and 'misc' into for-next

  commit 38850d786a799c3ff2de0dc1980902c3263698dc
  Author: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 19:00:26 2015 +0100

      ARM: 8449/1: fix bug in vdsomunge swab32 macro

      Commit 8a603f91cc48 ("ARM: 8445/1: fix vdsomunge not to depend on
      glibc specific byteswap.h") unfortunately introduced a bug created but
      not found during discussion and patch simplification.

      Reported-by: Efraim Yawitz <efraim.yawitz@xxxxxxxxx>
      Signed-off-by: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
      Fixes: 8a603f91cc48 ("ARM: 8445/1: fix vdsomunge not to depend on glibc 
specific byteswap.h")
      Signed-off-by: Nathan Lynch <nathan_lynch@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit ae93580ee59c02395c1711d3e6b90546b8137b86
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Oct 27 10:56:44 2015 -0400

      drm/radeon: fix dpms when driver backlight control is disabled

      If driver backlight control is disabled, either by driver
      parameter or default per-asic setting, revert to the old behavior.

      Fixes a regression in commit:
      4281f46ef839050d2ef60348f661eb463c21cc2e

      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 4cee6a9057d5e13911f0cb6e143d11dc1a3245dd
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Wed Oct 28 14:26:32 2015 -0400

      drm/radeon: move bl encoder assignment into bl init

      So that the bl encoder will be null if the GPU does not
      control the backlight.

      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 729a78417a7b5c1f59e15d21a1900758375c4647
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 29 11:48:18 2015 -0300

      perf trace: Add cmd string table to decode sys_bpf first arg

       # perf trace -e bpf perf record -e /tmp/foo.o -a
         362.779 (0.130 ms): perf/3451 bpf(cmd: PROG_LOAD, uattr: 
0x7ffe9a6825d0, size: 48) = 3

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-2b0nknu53baz9e0wj4thcdd8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 89bc7848a91bc99532f5c21b2885472ba710f249
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:21:04 2015 +0100

      ipv6: protect mtu calculation of wrap-around and infinite loop by 
rounding issues

      Raw sockets with hdrincl enabled can insert ipv6 extension headers
      right into the data stream. In case we need to fragment those packets,
      we reparse the options header to find the place where we can insert
      the fragment header. If the extension headers exceed the link's MTU we
      actually cannot make progress in such a case.

      Instead of ending up in broken arithmetic or rounding towards 0 and
      entering an endless loop in ip6_fragment, just prevent those cases by
      aborting early and signal -EMSGSIZE to user space.

      This is the second version of the patch which doesn't use the
      overflow_usub function, which got reverted for now.

      Suggested-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1e0d69a9cc9172d7896c2113f983a74f6e8ff303
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:21:03 2015 +0100

      Revert "Merge branch 'ipv6-overflow-arith'"

      Linus dislikes these changes. To not hold up the net-merge let's revert
      it for now and fix the bug like Linus suggested.

      This reverts commit ec3661b42257d9a06cf0d318175623ac7a660113, reversing
      changes made to c80dbe04612986fd6104b4a1be21681b113b5ac9.

      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8aaa878de83a0de3833f5b00bc822dbcd403ec36
  Merge: 845da6e 13eff53
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Thu Oct 29 15:34:27 2015 +0200

      Merge ath-next from ath.git

      Major changes:

      ath10k:

      * add QCA9377 support
      * fw_stats support for 10.4 firmware

      ath6kl:

      * report antenna configuration to user space
      * implement ethtool stats

  commit 5a364c2a1762e8a78721fafc93144509c0b6cb84
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Feb 6 18:44:57 2015 +0300

      ARC: mm: PAE40 support

      This is the first working implementation of 40-bit physical address
      extension on ARCv2.

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 66a565c203bc31b76969711fbd92da11bee2f129
  Merge: 6fc774e 4edf30e
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 29 13:17:56 2015 +0100

      Merge tag 'perf-ebpf-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull basic perf/ebpf integration:

       "Please see the changeset comments, but this is the very basic 
integration of
        perf with libbpf that, given a .o file built for the 'bpf' target with 
clang,
        will get it validated and loaded into the kernel via the sys_bpf 
syscall, which
        can be seen using 'perf trace' to trace the whole thing looking just 
for the
        bpf and perf_event_open syscalls:

          # perf trace -e bpf,perf_event_open perf record -g --event /tmp/foo.o 
-a
           362.779 ( 0.129 ms): perf/22408 bpf(cmd: 5, uattr: 0x7ffd4edb6db0, 
size: 48                           ) = 3
           384.192 ( 0.016 ms): perf/22408 perf_event_open(attr_uptr: 
0x7ffd4edbace0, pid: -1, cpu: 3, group_fd: -1, flags: FD_CLOEXEC) = 5
           384.247 ( 0.038 ms): perf/22408 perf_event_open(attr_uptr: 
0x37aedd8, pid: -1, group_fd: -1, flags: FD_CLOEXEC) = 5
           384.261 ( 0.007 ms): perf/22408 perf_event_open(attr_uptr: 
0x37aedd8, pid: -1, group_fd: -1, flags: FD_CLOEXEC) = 5
           387.680 ( 3.413 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, group_fd: -1, flags: FD_CLOEXEC) = 5
           387.688 ( 0.005 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, cpu: 1, group_fd: -1, flags: FD_CLOEXEC) = 6
           387.693 ( 0.004 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, cpu: 2, group_fd: -1, flags: FD_CLOEXEC) = 7
           387.698 ( 0.003 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, cpu: 3, group_fd: -1, flags: FD_CLOEXEC) = 8
          ^C[ perf record: Woken up 1 times to write data ]
            [ perf record: Captured and wrote 0.221 MB perf.data (2 samples) ]
          # perf script
          bash 18389 [002] 83446.412607: perf_bpf_probe:fork: (ffffffff8109be30)
                          29be31 _do_fork 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                          96d662 tracesys_phase2 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                           bd56c __libc_fork (/usr/lib64/libc-2.17.so)
                           413b2 make_child (/usr/bin/bash)

          bash 18389 [002] 83447.227255: perf_bpf_probe:fork: (ffffffff8109be30)
                          29be31 _do_fork 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                          96d662 tracesys_phase2 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                           bd56c __libc_fork (/usr/lib64/libc-2.17.so)
                           413b2 make_child (/usr/bin/bash)

          # perf evlist -v
          perf_bpf_probe:fork: type: 2, size: 112, config: 0x6cf, { 
sample_period, sample_freq }: 1, sample_type: 
IP|TID|TIME|CALLCHAIN|CPU|PERIOD|RAW, disabled: 1, inherit: 1, mmap: 1, comm: 
1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2: 1, comm_exec: 1
          #

        More work is about to be reviewed, tested and merged that will allow 
the whole
        process of going from a .c file to an .o file via clang, etc to be done
        automagically. (Wang Nan)"

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 13eff5311382cb109725363026cdb4717714bf65
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:07:39 2015 -0700

      ath6kl: implement ethtool stats

      This supports a way to get target stats through normal
      ethtool stats API.

      For instance:
      # ethtool -S wlan1
      NIC statistics:
           tx_pkts_nic: 353
           tx_bytes_nic: 25142
           rx_pkts_nic: 6
           rx_bytes_nic: 996
           d_tx_ucast_pkts: 89
           d_tx_bcast_pkts: 264
           d_tx_ucast_bytes: 3020
           d_tx_bcast_bytes: 22122
      ...

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0370248379579aa0274c8f14f2d9af1f32388104
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:07:38 2015 -0700

      ath6kl: break stats gathering code into separate method

      This will allow us to call it from elsewhere when implementing
      ethtool stats.

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 53cc3291bcfbefc0b3f1e3b7b30ed028b5f1a75d
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:53:21 2015 -0700

      ath6kl: fix firmware version assignment

      Improper use of strlcpy caused garbage to be appended to the
      firmware version string.  Fix this by paying attention to the
      ie_lenth.

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7fd98524560cac3a629aa1130d45260d4469d254
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:53:20 2015 -0700

      ath6kl: add error message to explain lack of HT

      It can take a user a while to understand why their
      NIC that advertises 802.11n support cannot actually
      do 802.11n.  Print out a warning in the logs to save
      the next poor person to use this NIC some trouble.

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 9c2e90ffc97a8f45b98d81345d8f2eff192d09ef
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:53:19 2015 -0700

      ath6kl: report antenna configuration

      This lets 'iw phy phy0 info' report antennas for
      the radio device:

      ...
        Available Antennas: TX 0x2 RX 0x2
        Configured Antennas: TX 0x2 RX 0x2
      ...

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 5140a5fde2b44d366338e00ad7c2a7ede8be3e65
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:24 2015 +0200

      wil6210: handle failure in Tx vring config

      When configuring Tx vring for new connection,
      WMI call to the firmware may fail. In this case, need to
      clean up properly. In particular, need to call
      cfg80211_del_sta() in case of AP like interface.

      Perform full "disconnect" procedure for proper clean up

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 817f18534412532198bf3da8dfd2663a1d75a7de
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:23 2015 +0200

      wil6210: fix device ready detection

      Adjust driver behavior during FW boot. Proper sequence of
      events after reset and FW download, is as following:

      - FW prepares mailbox structure and reports IRQ "FW_READY"
      - driver caches mailbox registers, marks mailbox readiness
      - FW sends WMI_FW_READY event, ignore it
      - FW sends WMI_READY event with some data
      - driver stores relevant data marks FW is operational

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit e3d2ed9434331dedb9eeece586d38aec9e29f60b
  Author: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:22 2015 +0200

      wil6210: Fix TSO overflow handling

      When Tx ring full is encountered with TSO,
      printout of "DMA error" was wrongly printed.

      In addition, in case of Tx ring full return
      proper error code so that NETDEV_TX_BUSY is
      returned to network stack in order not to
      drop the packets and retry transmission of the
      packets when ring is emptied.

      Signed-off-by: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b03fbab0c4d502510400b7ee5fb3d5bab6d859bf
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:21 2015 +0200

      wil6210: ignore selected WMI events

      Some events are ignored for purpose; such events should not
      be treated as "unhandled events". Replace info message
      saying "unhandled" with debug one saying "ignore", to reduce
      dmesg pollution

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a226b519d43a2a6b37267fea051aacb4a79c9614
  Author: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
  Date:   Wed Oct 28 15:09:53 2015 +0100

      ath10k: add QCA9377 chipset support

      Add the hardware name, revision and update the pci_id table.

      Currently there're two HW ref. designs available I'm aware of,
      with 1.0.2 and 1.1 chip revisions. I've access and been using
      the first one so far and this patch cover only it.

      QCA9377 inherits most of the stuff (e.g. fw interfaces)
      from QCA61x4 design, so the integration was pretty straightforward.

      Signed-off-by: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 5036fe0f6fae8a961745f5cf8d82a2a4912ae1ef
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:14 2015 +0530

      ath10k: reload HT/VHT capabilities on antenna change

      To reflect configured antenna settings in HT/VHT MCS map,
      reload the HT/VHT capabilities upon antenna change.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit f58512f336bbb166610be4a4c42ec1184edcd426
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:13 2015 +0530

      ath10k: move static HT/VHT capability setup functions

      Move HT and VHT capabiltity setup static functions to avoid
      forward declaration.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7a1d70ab05488146d20cfc8fb9e4acfd132c7bf5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:12 2015 +0530

      ath10k: fill HT/VHT MCS rateset only for configured chainmask

      HT/VHT MCS rateset should be filled only for configured chainmask
      rather that max supported chainmask. Fix that by checking configured
      chainmask while filling HT/VHT MCS rate map.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 166de3f1895dfc49d1f16cc39fd76dab6d7961d2
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:11 2015 +0530

      ath10k: remove supported chain mask

      Removing supported chainmask fields as it can be always derived
      from num_rf_chains.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b4c306d0c53ec1b444a4da1f1a3fefaace6b486e
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:06 2015 +0530

      ath10k: remove shadow copy of CE descriptors for source ring

      For the messages from host to target, shadow copy of CE descriptors
      are maintained in source ring. Before writing actual CE descriptor,
      first shadow copy is filled and then it is copied to CE address space.
      To optimize in download path and to reduce d-cache pressure, removing
      shadow copy of CE descriptors. This will also reduce driver memory
      consumption by 33KB during on device probing.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 765952e40dbadd4a74a44f55ac1344c338571bb9
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:05 2015 +0530

      ath10k: cleanup copy engine send completion

      The physical address necessary to unmap DMA ('bufferp') is stored
      in ath10k_skb_cb as 'paddr'. ath10k doesn't rely on the meta/transfer_id
      when handling send completion (htc ep id is stored in sk_buff control
      buffer). So the unused output arguments {bufferp, nbytesp and 
transfer_idp}
      are removed from CE send completion. This change is needed before removing
      the shadow copy of copy engine (CE) descriptors in follow up patch.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 1e8f86d9cbe9431dcda36fdd85a9f342d639dca5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:04 2015 +0530

      ath10k: remove send completion validation in diag read/write

      CE diag window access is serialized (it has to be by design) so
      there's no way to get a different send completion. so there's no
      need for post completion validation.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b4e84c5606f6c91a3fff96c25b9347dc75b2002d
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:03 2015 +0530

      ath10k: use local memory instead of shadow descriptor in ce_send

      Currently to avoid uncached memory access while filling up copy engine
      descriptors, shadow descriptors are used. This can be optimized further
      by removing shadow descriptors. To achieve that first shadow ring
      dependency in ce_send is removed by creating local copy of the
      descriptor on stack and make a one-shot copy into the "uncached"
      descriptor.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 98dd2b92bb591007e82fb58808f60134ee4479bf
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 21:38:33 2015 +0200

      ath10k: add fw_stats support to 10.4 firmware

      This patch adds support for getting firmware debug stats in 10.4 fw.

      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Tamizh chelvam <c_traja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a81a98cee94519807e826e199bb579a546efa289
  Author: Alan Liu <alanliu@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 21:38:32 2015 +0200

      ath10k: add FW API support to test mode

      Add WMI-TLV and FW API support in ath10k testmode.
      Ath10k can get right wmi command format from UTF image
      to communicate UTF firmware.

      Signed-off-by: Alan Liu <alanliu@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7cc8d580228cc712edcf7a1856a3bdb38c164e83
  Author: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
  Date:   Wed Oct 21 19:49:42 2015 +0900

      mmc: dw_mmc: fix the wrong setting for UHS-DDR50 mode

      When card is running with DDR mode, dwmmc needs to set DDR_REG bit at
      UHS_REG register.
      Before this patch, dwmmc controller doesn't consider this.
      If this patch is not applied, CRC or other error shoulds be occurred.

      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Reviewed-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 98daafd8a09d9a514bc2166709731d659037003b
  Author: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
  Date:   Wed Oct 21 19:49:41 2015 +0900

      mmc: dw_mmc: fix the CardThreshold boundary at CardThrCtl register

      According to DesignWare DoC file, CardThreshold bit should be
      bit[27:16].
      So it's correct to use (0xFFF << 16), not (0x1FFF << 16).

      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Reviewed-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4539d36ef2bbf2ee1519e7cfb51c6fdddda3e4e6
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 22 22:53:46 2015 +0300

      mmc: dw_mmc: NULL dereference in error message

      The "host->dms->ch" pointer is NULL here so we can't use it to print the
      error message.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 6fc774ef4ceca99c35dd3fb230dab618f78c8d6f
  Merge: 4341801 443f8c7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 29 10:29:18 2015 +0100

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Enable per-event perf_event_attr.inherit setting by config terms, i.e.
          this becomes possible:

              $ perf record -e cycles/inherit/ -e instructions/no-inherit/

          This affects the default, that can be changed globally using the 
--no-inherit
          option.

          This fine grained control appeared in the eBPF patchkit, but this 
added
          flexibility may end up being useful in other scenarios. (Wang Nan)

        - Setup pager when printing usage and help, we have long lists of 
options,
          better use the pager like we do with normal tooling output, i.e. when 
needed,
          and including any error messages in the paged output. (Namhyung Kim)

        - Search for more options when passing args to -h, e.g.: (Arnaldo 
Carvalho de Melo)

          $ perf report -h interface

           Usage: perf report [<options>]

            --gtk    Use the GTK2 interface
            --stdio  Use the stdio interface
            --tui    Use the TUI interface

        - Fix reading separate debuginfo files based on a build-id, problem
          found on a Debian system. (Dima Kogan)

        - Fix endless loop when splitting kallsyms symbols per section for
          handling kcore files, problem found on a s390x system. (Jiri Olsa)

      Infrastructure changes:

        - Prep work for the 'perf stat record' work that will allow generating
          perf.data files with counting data in addition to the sampling mode
          we have now (Jiri Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 001e2e730ce4e6dc2cd97fcb169097febfc7b200
  Author: Marc Titinger <mtitinger@xxxxxxxxxxxx>
  Date:   Tue Oct 27 10:51:08 2015 +0100

      hwmon: (ina2xx) give precedence to DT over checking for platform data.

      when checking for the value of the shunt resistor.

      Signed-off-by: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit a0de56c81fcf9f1a691e22e519b0dff21c48c645
  Author: Marc Titinger <mtitinger@xxxxxxxxxxxx>
  Date:   Wed Oct 28 12:04:53 2015 +0100

      hwmon: (ina2xx) convert driver to using regmap

      Any sysfs "show" read access from the client app will result in reading
      all registers (8 with ina226). Depending on the host this can limit the
      best achievable read rate.

      This changeset allows for individual register accesses through regmap.

      Tested with BeagleBone Black (Baylibre-ACME) and ina226.

      Signed-off-by: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit d305c4773458fdd6ff9c52bfdea8c67fbd3b2072
  Author: Ã?meric MASCHINO <emeric.maschino@xxxxxxxxx>
  Date:   Tue Sep 22 23:58:48 2015 +0200

      [IA64] Wire up kcmp syscall

      systemd > 218 fails to compile on ia64 with:

           error: â??__NR_kcmpâ?? undeclared [1].

      I've been told that this is because the kcmp syscall hasn't been wired up
      for the ia64 arch [2].

      The proposed patch thus wire up the kcmp syscall for the ia64 arch.

      [1] https://bugs.gentoo.org/show_bug.cgi?id=560492
      [2] https://bugs.gentoo.org/show_bug.cgi?id=560492#c17

      Signed-off-by: Ã?meric MASCHINO <emeric.maschino@xxxxxxxxx>
      Signed-off-by: Tony Luck <tony.luck@xxxxxxxxx>

  commit 62f77f095c27dc6b3536735aa960a8bb21e4c5eb
  Author: Maharaja <c_mkenna@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 11:49:18 2015 +0300

      ath10k: enable adaptive CCA

      European Union has made it mandatory that all devices working in 2.4 GHz
      has to adhere to the ETSI specification (ETSI EN 300 328 V1.9.1)
      beginnig this year. The standard basically speaks about interferences
      in 2.4Ghz band.
      For example, when 802.11 device detects interference, TX must be stopped
      as long as interference is present.

      Adaptive CCA is a feature, when enabled the device learns from the
      environment and configures CCA levels adaptively. This will improve
      detecting interferences and the device can stop trasmissions till the
      interference is present eventually leading to good performances in
      varying interference conditions.

      The patch includes code for enabling adaptive CCA for 10.2.4 firmware on
      QCA988X.

      Signed-off-by: Maharaja <c_mkenna@xxxxxxxxxxxxxxxx>
      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 97303480753e48fb313dc0e15daaf11b0451cdb8
  Author: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
  Date:   Tue Sep 22 19:59:48 2015 +0200

      arm64: Increase the max granular size

      Increase the standard cacheline size to avoid having locks in the same
      cacheline.

      Cavium's ThunderX core implements cache lines of 128 byte size. With
      current granulare size of 64 bytes (L1_CACHE_SHIFT=6) two locks could
      share the same cache line leading a performance degradation.
      Increasing the size fixes that.

      Increasing the size has no negative impact to cache invalidation on
      systems with a smaller cache line. There is an impact on memory usage,
      but that's not too important for arm64 use cases.

      Signed-off-by: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Acked-by: Timur Tabi <timur@xxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 845da6e58e19b932b8364ec3678b8f7f80d6b6a9
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Sun Oct 25 19:32:43 2015 +0100

      ssb: add Kconfig entry for compiling SoC related code

      This allows saving a little of space when not using ssb on Broadcom SoC.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 830c7df46247b44aa46ae276073e2e10727c9e93
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Sun Oct 25 19:32:42 2015 +0100

      ssb: move functions specific to SoC hosted bus to separated file

      This cleans main.c a bit and will allow us to compile SoC related code
      conditionally in the future.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 399500da18f7fe79699c0e4f603f8874cecb3898
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Thu Oct 15 07:23:25 2015 +0200

      ssb: pick PCMCIA host code support from b43 driver

      ssb bus can be found on various "host" devices like PCI/PCMCIA/SDIO.
      Every ssb bus contains cores AKA devices.
      The main idea is to have ssb driver scan/initialize bus and register
      ready-to-use cores. This way ssb drivers can operate on a single core
      mostly ignoring underlaying details.

      For some reason PCMCIA support was split between ssb and b43. We got
      PCMCIA host device probing in b43, then bus scanning in ssb and then
      wireless core probing back in b43. The truth is it's very unlikely we
      will ever see PCMCIA ssb device with no 802.11 core but I still don't
      see any advantage of the current architecture.

      With proposed change we get the same functionality with a simpler
      architecture, less Kconfig symbols, one killed EXPORT and hopefully
      cleaner b43. Since b43 supports both: ssb & bcma I prefer to keep ssb
      specific code in ssb driver.

      This mostly moves code from b43's pcmcia.c to bridge_pcmcia_80211.c. We
      already use similar solution with b43_pci_bridge.c. I didn't use "b43"
      in name of this new file as in theory any driver can operate on wireless
      core.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 0117e78aec73f1c0869e50d11a255b28aa4db8f0
  Author: Marty Faltesek <mfaltesek@xxxxxxxxxx>
  Date:   Sun Oct 25 22:54:01 2015 -0700

      mwifiex: toggle carrier state in start_ap/stop_ap.

      In uap mode the carrier is not enabled until after the first STA joins.
      The carrier triggers the bridge to start its state machine, and if STP
      is enabled, it takes 4 seconds as it transitions from disabled to
      forwarding. During this time the bridge drops all traffic, and the EAPOL
      handshake times out after 3 seconds, preventing stations from joining.

      Follow the logic used in mac80211 and start the carrier in start_ap
      and disable it in stop_ap. This has a nice benefit of allowing the
      first station connection time to be reduced by up to 75% when STP is
      in use.

      Signed-off-by: Martin Faltesek <mfaltesek@xxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 072255241d2e3e9c1e23fc693f0333be72adfe2a
  Author: yfw <fengwei.yin@xxxxxxxxxx>
  Date:   Mon Oct 26 10:36:22 2015 +0800

      wcn36xx: Remove warning message when dev is NULL for arm64 dma_alloc.

      arm64 has requirement that all the dma operations have actual device.
      Otherwise, following warnning message shown and dma allocation fails:

      WARNING: CPU: 0 PID: 954 at arch/arm64/mm/dma-mapping.c:106 
__dma_alloc+0x24c/0x258()
      Use an actual device structure for DMA allocation
      Modules linked in: wcn36xx wcn36xx_platform
      CPU: 0 PID: 954 Comm: ifconfig Not tainted 4.0.0+ #14
      Hardware name: Qualcomm Technologies, Inc. MSM 8916 MTP (DT)
      Call trace:
      [<ffffffc000089904>] dump_backtrace+0x0/0x124
      [<ffffffc000089a38>] show_stack+0x10/0x1c
      [<ffffffc000627114>] dump_stack+0x80/0xc4
      [<ffffffc0000b2e64>] warn_slowpath_common+0x98/0xd0
      [<ffffffc0000b2ee8>] warn_slowpath_fmt+0x4c/0x58
      [<ffffffc00009487c>] __dma_alloc+0x248/0x258
      [<ffffffbffc009270>] wcn36xx_dxe_allocate_mem_pools+0xc4/0x108 [wcn36xx]
      [<ffffffbffc0079c4>] wcn36xx_start+0x38/0x240 [wcn36xx]
      [<ffffffc0005f161c>] ieee80211_do_open+0x1b0/0x9a4
      [<ffffffc0005f1e68>] ieee80211_open+0x58/0x68
      [<ffffffc00051693c>] __dev_open+0xb0/0x120
      [<ffffffc000516c10>] __dev_change_flags+0x88/0x150
      [<ffffffc000516cf4>] dev_change_flags+0x1c/0x5c
      [<ffffffc000570950>] devinet_ioctl+0x644/0x6f0

      Signed-off-by: Yin, Fengwei <fengwei.yin@xxxxxxxxxx>
      Acked-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 8e8e54c490032f15779d7b199548eb0143b70f0f
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 13:42:15 2015 -0400

      wcn36xx: introduce per-channel ring buffer locks

      wcn36xx implements a ring buffer for transmitted frames for each
      (high and low priority) DMA channel.  The ring buffers are lockless:
      new frames are inserted at the head of the queue, while finished
      packets are reaped from the tail.

      Unfortunately, the list manipulations are missing any kind of barriers
      so are susceptible to various races: for example, a TX completion
      handler might read an updated desc->ctrl before the head has actually
      advanced, and then null out the ctl->skb pointer while it is still
      being used in the TX path.

      Simplify things here by adding a spin lock when traversing the ring.
      This change increased stability for me without adding any noticeable
      overhead on my platform (xperia z).

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 56bae464275ac57cbf993f3ed15e96d6e1ec00a2
  Author: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
  Date:   Tue Oct 20 14:19:26 2015 +0200

      ath9k: fix phyerror codes

      Some of the ath9k_phyerr enums were wrong from the
      beginning (and even before). Most of the time the
      codes were used for counters to be displayed over
      debugfs, which made this a non-functional issue.

      Some (e.g. ATH9K_PHYERR_FALSE_RADAR_EXT) are used
      for radar detection and require the correct code
      to work as intended.

      This patch includes:
      a) fixes
        ATH9K_PHYERR_FALSE_RADAR_EXT:    24 => 36
        ATH9K_PHYERR_CCK_LENGTH_ILLEGAL: 32 => 28
        ATH9K_PHYERR_CCK_POWER_DROP:     33 => 29
        ATH9K_PHYERR_HT_CRC_ERROR:       34 => 32
        ATH9K_PHYERR_HT_LENGTH_ILLEGAL:  35 => 33
        ATH9K_PHYERR_HT_RATE_ILLEGAL:    36 => 34

      b) extensions
        ATH9K_PHYERR_CCK_BLOCKER = 24
        ATH9K_PHYERR_HT_ZLF      = 35
        ATH9K_PHYERR_GREEN_FIELD = 37

      Aside from the correction and completion made in
      the enum, the patch also extends the display of
      the related counters in the debugfs.

      Signed-off-by: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 989b8376f33721f7206dd058330da05972a71384
  Author: John Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:15:00 2015 -0400

      orinoco_usb: return error in ezusb_probe when alloc_orinocodev fails

      The current code exits after alloc_orinocodev, but fails to change the
      return value to something that indicates the failure.  This patch
      changes the return value to -ENOMEM.

      https://bugzilla.kernel.org/show_bug.cgi?id=106181

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit dae0412d0caa4948da07fe4ad91352b5b61a70ec
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 21:04:14 2015 +0200

      airo: fix scan after SIOCSIWAP (airo_set_wap)

      SIOCSIWAP (airo_set_wap) affects scan: only the AP specified by
      SIOCSIWAP is present in scan results.

      This makes NetworkManager work for the first time but then unable to
      find any other APs.

      Clear APList before starting scan and set it back after scan completes
      to work-around the problem.

      To avoid losing packets during scan, modify disable_MAC() to omit
      netif_carrier_off() call when lock == 2.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit f675f93a797a18fc1f82030d56d02286039d0fb3
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 21:04:13 2015 +0200

      airo: Track APList_rid in struct airo_info

      Instead of dynamically allocating APList, make it a member of struct
      airo_info to always track state of APList_rid.
      This simplifies suspend/resume and allows removal of readAPListRid.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 6e4a0f2b5c56af6be43b546df16b1ece7df537d8
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Mon Oct 26 12:53:17 2015 +0900

      arm64: remove bogus TASK_SIZE_64 check

      The comparison between TASK_SIZE_64 and MODULES_VADDR does not
      make any sense on arm64, it is simply something that has been
      carried over from the ARM port which arm64 is based on. So drop it.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit b3bcb1b27203c24fbf181748cec6eec10419678d
  Merge: 6d08f61 2edb7a3
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 20:48:26 2015 +0200

      Merge tag 'iwlwifi-next-for-kalle-2015-10-25' of 
https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

      * bug fix for TDLS
      * fixes and cleanups in scan
      * support of several scan plans
      * improvements in FTM
      * fixes in FW API
      * improvements in the failure paths when the bus is dead
      * other various small things here and there

  commit f90df5e27d978c492c4d911476622a7413621213
  Author: Kefeng Wang <wangkefeng.wang@xxxxxxxxxx>
  Date:   Mon Oct 26 11:48:16 2015 +0800

      arm64: make Timer Interrupt Frequency selectable

      It allows a selectable timer interrupt frequency of 100, 250, 300 and 
1000 HZ.
      We will get better performance when choose a suitable frequency in some 
scene.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Kefeng Wang <wangkefeng.wang@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit f23bef34d34b6325916daddc4cfdeee53d5139e6
  Author: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
  Date:   Mon Oct 26 17:26:57 2015 +0600

      arm64/mm: use PAGE_ALIGNED instead of IS_ALIGNED

      The <linux/mm.h> already provides the PAGE_ALIGNED macro. Let's
      use this macro instead of IS_ALIGNED and passing PAGE_SIZE directly.

      Signed-off-by: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
      Acked-by: Laura Abbott <laura@xxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 59f2413573e4ee1e76062beef4a359156500db94
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 27 12:05:55 2015 +0000

      arm64: cachetype: fix definitions of ICACHEF_* flags

      test_bit and set_bit take the bit number to operate on, rather than a
      mask. This patch fixes the ICACHEF_* definitions so that they represent
      the bit index in __icache_flags as opposed to the mask returned by the
      BIT macro.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Reviewed-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fde4a59fc1c55709b96d0f07110895f20015b6cc
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 27 12:05:54 2015 +0000

      arm64: cpufeature: declare enable_cpu_capabilities as static

      enable_cpu_capabilities is only called from within cpufeature.c, so it
      can be declared static.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 8f2279d5d908119a08e906be1c6b69c744d0c379
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:04 2015 -0700

      usb: musb: omap2430: Fix regression caused by driver core change

      Commit ddef08dd00f5 ("Driver core: wakeup the parent device before trying
      probe") started automatically ensuring the parent device is enabled when
      the child gets probed.

      This however caused a regression for MUSB omap2430 interface as the
      runtime PM for the parent device needs the child initialized to access
      the MUSB hardware registers.

      Let's delay the enabling of PM runtime for the parent until the child
      has been properly initialized as suggested in an earlier patch by
      Grygorii Strashko <grygorii.strashko@xxxxxx>.

      In addition to delaying pm_runtime_enable, we now also need to make sure
      the parent is enabled during omap2430_musb_init. We also want to propagate
      an error from omap2430_runtime_resume if struct musb is not initialized.

      Note that we use pm_runtime_put_noidle here for both the child and parent
      to prevent an extra runtime_suspend/resume cycle.

      Let's also add some comments to avoid confusion between the
      two different devices.

      Fixes: ddef08dd00f5 ("Driver core: wakeup the parent device before
      trying probe")
      Suggested-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Reviewed-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Acked-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 9702970c7bd3e2d6fecb642a190269131d4ac16c
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Oct 28 16:56:13 2015 +0000

      Revert "ARM64: unwind: Fix PC calculation"

      This reverts commit e306dfd06fcb44d21c80acb8e5a88d55f3d1cf63.

      With this patch applied, we were the only architecture making this sort
      of adjustment to the PC calculation in the unwinder. This causes
      problems for ftrace, where the PC values are matched against the
      contents of the stack frames in the callchain and fail to match any
      records after the address adjustment.

      Whilst there has been some effort to change ftrace to workaround this,
      those patches are not yet ready for mainline and, since we're the odd
      architecture in this regard, let's just step in line with other
      architectures (like arch/arm/) for now.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit e13d918a19a7b6cba62b32884f5e336e764c2cc6
  Author: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
  Date:   Tue Oct 27 17:29:10 2015 +0000

      arm64: kernel: fix tcr_el1.t0sz restore on systems with extended idmap

      Commit dd006da21646 ("arm64: mm: increase VA range of identity map")
      introduced a mechanism to extend the virtual memory map range
      to support arm64 systems with system RAM located at very high offset,
      where the identity mapping used to enable/disable the MMU requires
      additional translation levels to map the physical memory at an equal
      virtual offset.

      The kernel detects at boot time the tcr_el1.t0sz value required by the
      identity mapping and sets-up the tcr_el1.t0sz register field accordingly,
      any time the identity map is required in the kernel (ie when enabling the
      MMU).

      After enabling the MMU, in the cold boot path the kernel resets the
      tcr_el1.t0sz to its default value (ie the actual configuration value for
      the system virtual address space) so that after enabling the MMU the
      memory space translated by ttbr0_el1 is restored as expected.

      Commit dd006da21646 ("arm64: mm: increase VA range of identity map")
      also added code to set-up the tcr_el1.t0sz value when the kernel resumes
      from low-power states with the MMU off through cpu_resume() in order to
      effectively use the identity mapping to enable the MMU but failed to add
      the code required to restore the tcr_el1.t0sz to its default value, when
      the core returns to the kernel with the MMU enabled, so that the kernel
      might end up running with tcr_el1.t0sz value set-up for the identity
      mapping which can be lower than the value required by the actual virtual
      address space, resulting in an erroneous set-up.

      This patchs adds code in the resume path that restores the tcr_el1.t0sz
      default value upon core resume, mirroring this way the cold boot path
      behaviour therefore fixing the issue.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Fixes: dd006da21646 ("arm64: mm: increase VA range of identity map")
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: James Morse <james.morse@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 589cb22bbedacf325951014c07a35a2b01ca57f6
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Thu Oct 15 13:55:53 2015 +0100

      arm64: compat: fix stxr failure case in SWP emulation

      If the STXR instruction fails in the SWP emulation code, we leave *data
      overwritten with the loaded value, therefore corrupting the data written
      by a subsequent, successful attempt.

      This patch re-jigs the code so that we only write back to *data once we
      know that the update has happened.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: bd35a4adc413 ("arm64: Port SWP/SWPB emulation support from arm")
      Reported-by: Shengjiu Wang <shengjiu.wang@xxxxxxxxxxxxx>
      Reported-by: Vladimir Murzin <vladimir.murzin@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 1bd5dfe41b994a6e793363894befef76626965a9
  Author: Aaro Koskinen <aaro.koskinen@xxxxxx>
  Date:   Mon Oct 26 20:23:53 2015 +0200

      ARM: OMAP1: fix incorrect INT_DMA_LCD

      Commit 685e2d08c54b ("ARM: OMAP1: Change interrupt numbering for
      sparse IRQ") turned on SPARSE_IRQ on OMAP1, but forgot to change
      the number of INT_DMA_LCD. This broke the boot at least on Nokia 770,
      where the device hangs during framebuffer initialization.

      Fix by defining INT_DMA_LCD like the other interrupts.

      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Fixes: 685e2d08c54b ("ARM: OMAP1: Change interrupt numbering for sparse 
IRQ")
      Signed-off-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 4edf30e39e6cff32390eaff6a1508969b3cd967b
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:17 2015 +0000

      perf bpf: Collect perf_evsel in BPF object files

      This patch creates a 'struct perf_evsel' for every probe in a BPF object
      file(s) and fills 'struct evlist' with them. The previously introduced
      dummy event is now removed. After this patch, the following command:

       # perf record --event filter.o ls

      Can trace on each of the probes defined in filter.o.

      The core of this patch is bpf__foreach_tev(), which calls a callback
      function for each 'struct probe_trace_event' event for a bpf program
      with each associated file descriptors. The add_bpf_event() callback
      creates evsels by calling parse_events_add_tracepoint().

      Since bpf-loader.c will not be built if libbpf is turned off, an empty
      bpf__foreach_tev() is defined in bpf-loader.h to avoid build errors.

      Committer notes:

      Before:

        # /tmp/oldperf record --event /tmp/foo.o -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.198 MB perf.data ]
        # perf evlist
        /tmp/foo.o
        # perf evlist -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period,
        sample_freq }: 4000, sample_type: IP|TID|TIME|CPU|PERIOD, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, freq: 1, task: 1, sample_id_all: 1,
        exclude_guest: 1, mmap2: 1, comm_exec: 1

      I.e. we create just the PERF_TYPE_SOFTWARE (type: 1),
      PERF_COUNT_SW_DUMMY(config 0x9) event, now, with this patch:

        # perf record --event /tmp/foo.o -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.210 MB perf.data ]
        # perf evlist -v
        perf_bpf_probe:fork: type: 2, size: 112, config: 0x6bd, { sample_period,
        sample_freq }: 1, sample_type: IP|TID|TIME|CPU|PERIOD|RAW, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, task: 1, sample_id_all: 1, exclude_guest:
        1, mmap2: 1, comm_exec: 1
        #

      We now have a PERF_TYPE_SOFTWARE (type: 1), but the config states 0x6bd,
      which is how, after setting up the event via the kprobes interface, the
      'perf_bpf_probe:fork' event is accessible via the perf_event_open
      syscall. This is all transient, as soon as the 'perf record' session
      ends, these probes will go away.

      To see how it looks like, lets try doing a neverending session, one that
      expects a control+C to end:

        # perf record --event /tmp/foo.o -a

      So, with that in place, we can use 'perf probe' to see what is in place:

        # perf probe -l
          perf_bpf_probe:fork  (on _do_fork@acme/git/linux/kernel/fork.c)

      We also can use debugfs:

        [root@felicio ~]# cat /sys/kernel/debug/tracing/kprobe_events
        p:perf_bpf_probe/fork _text+638512

      Ok, now lets stop and see if we got some forks:

        [root@felicio linux]# perf record --event /tmp/foo.o -a
        ^C[ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.325 MB perf.data (111 samples) ]

        [root@felicio linux]# perf script
            sshd  1271 [003] 81797.507678: perf_bpf_probe:fork: 
(ffffffff8109be30)
            sshd 18309 [000] 81797.524917: perf_bpf_probe:fork: 
(ffffffff8109be30)
            sshd 18309 [001] 81799.381603: perf_bpf_probe:fork: 
(ffffffff8109be30)
            sshd 18309 [001] 81799.408635: perf_bpf_probe:fork: 
(ffffffff8109be30)
        <SNIP>

      Sure enough, we have 111 forks :-)

      Callchains seems to work as well:

        # perf report --stdio --no-child
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        # Total Lost Samples: 0
        #
        # Samples: 562  of event 'perf_bpf_probe:fork'
        # Event count (approx.): 562
        #
        # Overhead  Command   Shared Object     Symbol
        # ........  ........  ................  ............
        #
            44.66%  sh        [kernel.vmlinux]  [k] _do_fork
                          |
                          ---_do_fork
                             entry_SYSCALL_64_fastpath
                             __libc_fork
                             make_child

          26.16%  make      [kernel.vmlinux]  [k] _do_fork
      <SNIP>
        #

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-7-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1e5e3ee8ff3877db6943032b54a6ac21c095affd
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:16 2015 +0000

      perf tools: Load eBPF object into kernel

      This patch utilizes bpf_object__load() provided by libbpf to load all
      objects into kernel.

      Committer notes:

      Testing it:

      When using an incorrect kernel version number, i.e., having this in your
      eBPF proggie:

        int _version __attribute__((section("version"), used)) = 0x40100;

      For a 4.3.0-rc6+ kernel, say, this happens and needs checking at event
      parsing time, to provide a better error report to the user:

        # perf record --event /tmp/foo.o sleep 1
        libbpf: load bpf program failed: Invalid argument
        libbpf: -- BEGIN DUMP LOG ---
        libbpf:

        libbpf: -- END LOG --
        libbpf: failed to load program 'fork=_do_fork'
        libbpf: failed to load object '/tmp/foo.o'
        event syntax error: '/tmp/foo.o'
                             \___ Invalid argument: Are you root and runing a 
CONFIG_BPF_SYSCALL kernel?

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events

      If we instead make it match, i.e. use 0x40300 on this v4.3.0-rc6+
      kernel, the whole process goes thru:

        # perf record --event /tmp/foo.o -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.202 MB perf.data ]
        # perf evlist -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period,
        sample_freq }: 4000, sample_type: IP|TID|TIME|CPU|PERIOD, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, freq: 1, task: 1, sample_id_all: 1,
        exclude_guest: 1, mmap2: 1, comm_exec: 1
        #

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-6-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit aa3abf30bb28addcf593578d37447d42e3f65fc3
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:15 2015 +0000

      perf tools: Create probe points for BPF programs

      This patch introduces bpf__{un,}probe() functions to enable callers to
      create kprobe points based on section names a BPF program. It parses the
      section names in the program and creates corresponding 'struct
      perf_probe_event' structures. The parse_perf_probe_command() function is
      used to do the main parsing work. The resuling 'struct perf_probe_event'
      is stored into program private data for further using.

      By utilizing the new probing API, this patch creates probe points during
      event parsing.

      To ensure probe points be removed correctly, register an atexit hook so
      even perf quit through exit() bpf__clear() is still called, so probing
      points are cleared. Note that bpf_clear() should be registered before
      bpf__probe() is called, so failure of bpf__probe() can still trigger
      bpf__clear() to remove probe points which are already probed.

      strerror style error reporting scaffold is created by this patch.
      bpf__strerror_probe() is the first error reporting function in
      bpf-loader.c.

      Committer note:

      Trying it:

      To build a test eBPF object file:

      I am testing using a script I built from the 'perf test -v LLVM' output:

        $ cat ~/bin/hello-ebpf
        export KERNEL_INC_OPTIONS="-nostdinc -isystem 
/usr/lib/gcc/x86_64-redhat-linux/4.8.3/include 
-I/home/acme/git/linux/arch/x86/include -Iarch/x86/include/generated/uapi 
-Iarch/x86/include/generated -I/home/acme/git/linux/include -Iinclude 
-I/home/acme/git/linux/arch/x86/include/uapi -Iarch/x86/include/generated/uapi 
-I/home/acme/git/linux/include/uapi -Iinclude/generated/uapi -include 
/home/acme/git/linux/include/linux/kconfig.h"
        export WORKING_DIR=/lib/modules/4.2.0/build
        export CLANG_SOURCE=-
        export CLANG_OPTIONS=-xc

        OBJ=/tmp/foo.o
        rm -f $OBJ
        echo '__attribute__((section("fork=do_fork"), used)) int fork(void 
*ctx) {return 0;} char _license[] __attribute__((section("license"), used)) = 
"GPL";int _version __attribute__((section("version"), used)) = 0x40100;' | \
        clang -D__KERNEL__ $CLANG_OPTIONS $KERNEL_INC_OPTIONS -Wno-unused-value 
-Wno-pointer-sign -working-directory $WORKING_DIR -c "$CLANG_SOURCE" -target 
bpf -O2 -o /tmp/foo.o && file $OBJ

       ---

      First asking to put a probe in a function not present in the kernel
      (misses the initial _):

        $ perf record --event /tmp/foo.o sleep 1
        Probe point 'do_fork' not found.
        event syntax error: '/tmp/foo.o'
                             \___ You need to check probing points in BPF file

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events
        $

       ---

      Now, with "__attribute__((section("fork=_do_fork"), used)):

       $ grep _do_fork /proc/kallsyms
       ffffffff81099ab0 T _do_fork
       $ perf record --event /tmp/foo.o sleep 1
       Failed to open kprobe_events: Permission denied
       event syntax error: '/tmp/foo.o'
                            \___ Permission denied

       ---

      Cool, we need to provide some better hints, "kprobe_events" is too low
      level, one doesn't strictly need to know the precise details of how
      these things are put in place, so something that shows the command
      needed to fix the permissions would be more helpful.

      Lets try as root instead:

        # perf record --event /tmp/foo.o sleep 1
        Lowering default frequency rate to 1000.
        Please consider tweaking /proc/sys/kernel/perf_event_max_sample_rate.
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.013 MB perf.data ]
        # perf evlist
        /tmp/foo.o
        [root@felicio ~]# perf evlist -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period,
        sample_freq }: 1000, sample_type: IP|TID|TIME|PERIOD, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, freq: 1, enable_on_exec: 1, task: 1,
        sample_id_all: 1, exclude_guest: 1, mmap2: 1, comm_exec: 1

       ---

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-5-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 84c86ca12b2189df751eed7b2d67cb63bc8feda5
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:14 2015 +0000

      perf tools: Enable passing bpf object file to --event

      By introducing new rules in tools/perf/util/parse-events.[ly], this
      patch enables 'perf record --event bpf_file.o' to select events by an
      eBPF object file. It calls parse_events_load_bpf() to load that file,
      which uses bpf__prepare_load() and finally calls bpf_object__open() for
      the object files.

      After applying this patch, commands like:

       # perf record --event foo.o sleep

      become possible.

      However, at this point it is unable to link any useful things onto the
      evsel list because the creating of probe points and BPF program
      attaching have not been implemented.  Before real events are possible to
      be extracted, to avoid perf report error because of empty evsel list,
      this patch link a dummy evsel. The dummy event related code will be
      removed when probing and extracting code is ready.

      Commiter notes:

      Using it:

        $ ls -la foo.o
        ls: cannot access foo.o: No such file or directory
        $ perf record --event foo.o sleep
        libbpf: failed to open foo.o: No such file or directory
        event syntax error: 'foo.o'
                             \___ BPF object file 'foo.o' is invalid

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events
        $

        $ file /tmp/build/perf/perf.o
        /tmp/build/perf/perf.o: ELF 64-bit LSB relocatable, x86-64, version 1 
(SYSV), not stripped
        $ perf record --event /tmp/build/perf/perf.o sleep
        libbpf: /tmp/build/perf/perf.o is not an eBPF object file
        event syntax error: '/tmp/build/perf/perf.o'
                             \___ BPF object file '/tmp/build/perf/perf.o' is 
invalid

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events
        $

        $ file /tmp/foo.o
        /tmp/foo.o: ELF 64-bit LSB relocatable, no machine, version 1 (SYSV), 
not stripped
        $ perf record --event /tmp/foo.o sleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.013 MB perf.data ]
        $ perf evlist
        /tmp/foo.o
        $ perf evlist  -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period, 
sample_freq }: 4000, sample_type: IP|TID|TIME|PERIOD, disabled: 1, inherit: 1, 
mmap: 1, comm: 1, freq: 1, enable_on_exec: 1, task: 1, sample_id_all: 1, 
exclude_guest: 1, mmap2: 1, comm_exec: 1
        $

      So, type 1 is PERF_TYPE_SOFTWARE, config 0x9 is PERF_COUNT_SW_DUMMY, ok.

        $ perf report --stdio
        Error:
        The perf.data file has no samples!
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        $

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-4-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 69d262a93a25cf475012ea2e00aeb29f4932c028
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:13 2015 +0000

      perf ebpf: Add the libbpf glue

      The 'bpf-loader.[ch]' files are introduced in this patch. Which will be
      the interface between perf and libbpf. bpf__prepare_load() resides in
      bpf-loader.c. Following patches will enrich these two files.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-3-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ed63f34c026e9a60d17fa750ecdfe3f600d49393
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:12 2015 +0000

      perf tools: Make perf depend on libbpf

      By adding libbpf into perf's Makefile, this patch enables perf to build
      libbpf if libelf is found and neither NO_LIBELF nor NO_LIBBPF is set.

      The newly introduced code is similar to how libapi and libtraceevent
      are wired into Makefile.perf.

      MANIFEST is also updated for 'make perf-*-src-pkg'.

      Append make_no_libbpf to tools/perf/tests/make.

      The 'bpf' feature check is appended into default FEATURE_TESTS and
      FEATURE_DISPLAY, so perf will check the API version of bpf in
      /path/to/kernel/include/uapi/linux/bpf.h. Which should not fail except
      when we are trying to port this code to an old kernel.

      Error messages are also updated to notify users about the lack of BPF
      support in 'perf record' if libelf is missing or the BPF API check
      failed.

      tools/lib/bpf is added to TAG_FOLDERS to allow us to navigate libbpf
      files when working on perf using tools/perf/tags.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-2-git-send-email-wangnan0@xxxxxxxxxx
      [ Document NO_LIBBPF in Makefile.perf, noted by Jiri Olsa ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fe326c5cc07cd265abad29c35c142cfae09889e4
  Author: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 10:43:23 2015 +0900

      clocksource/drivers/sh_mtu2: Fix multiple shutdown call issue

      On the r7s72100 Genmai board the MTU2 driver currently triggers a common
      clock framework WARN_ON(enable_count) when disabling the clock due to
      the MTU2 driver after recent callback rework may call 
->set_state_shutdown()
      multiple times. A similar issue was spotted for the TMU driver and fixed 
in:
      452b132 clocksource/drivers/sh_tmu: Fix traceback spotted in -next

      On r7s72100 Genmai v4.3-rc7 built with shmobile_defconfig spits out the
      following during boot:

      sh_mtu2 fcff0000.timer: ch0: used for clock events
      ------------[ cut here ]------------
      WARNING: CPU: 0 PID: 1 at drivers/clk/clk.c:675 
clk_core_disable+0x2c/0x6c()
      CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.3.0-rc7 #1
      Hardware name: Generic R7S72100 (Flattened Device Tree)
      Backtrace:
      [<c00133d4>] (dump_backtrace) from [<c0013570>] (show_stack+0x18/0x1c)
      [<c0013558>] (show_stack) from [<c01c7aac>] (dump_stack+0x74/0x90)
      [<c01c7a38>] (dump_stack) from [<c00272fc>] 
(warn_slowpath_common+0x88/0xb4)
      [<c0027274>] (warn_slowpath_common) from [<c0027400>] 
(warn_slowpath_null+0x24/0x2c)
      [<c00273dc>] (warn_slowpath_null) from [<c03a9320>] 
(clk_core_disable+0x2c/0x6c)
      [<c03a92f4>] (clk_core_disable) from [<c03aa0a0>] (clk_disable+0x40/0x4c)
      [<c03aa060>] (clk_disable) from [<c0395d2c>] (sh_mtu2_disable+0x24/0x50)
      [<c0395d08>] (sh_mtu2_disable) from [<c0395d6c>] 
(sh_mtu2_clock_event_shutdown+0x14/0x1c)
      [<c0395d58>] (sh_mtu2_clock_event_shutdown) from [<c007d7d0>] 
(clockevents_switch_state+0xc8/0x114)
      [<c007d708>] (clockevents_switch_state) from [<c007d834>] 
(clockevents_shutdown+0x18/0x28)
      [<c007d81c>] (clockevents_shutdown) from [<c007dd58>] 
(clockevents_exchange_device+0x70/0x78)
      [<c007dce8>] (clockevents_exchange_device) from [<c007e578>] 
(tick_check_new_device+0x88/0xe0)
      [<c007e4f0>] (tick_check_new_device) from [<c007daf0>] 
(clockevents_register_device+0xac/0x120)
      [<c007da44>] (clockevents_register_device) from [<c0395be8>] 
(sh_mtu2_probe+0x230/0x350)
      [<c03959b8>] (sh_mtu2_probe) from [<c028b6f0>] 
(platform_drv_probe+0x50/0x98)

      Reported-by: Chris Brandt <chris.brandt@xxxxxxxxxxx>
      Fixes: 19a9ffb ("clockevents/drivers/sh_mtu2: Migrate to new 'set-state' 
interface")
      Cc: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Cc: Laurent Pinchart <laurent.pinchart+renesas@xxxxxxxxxxxxxxxx>
      Signed-off-by: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Reviewed-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>

  commit 25d464183ca3522ae27ec1bbef5ddcbbbef65017
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 5 15:41:36 2015 +0530

      ARC: mm: PAE40: tlbex.S: Explicitify the size of pte_t

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 28b4af729fc4f7ee748c4bccb50ba5a6066418eb
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Sep 14 18:43:42 2015 -0700

      ARC: mm: PAE40: switch to using phys_addr_t for physical addresses

      That way a single flip of phys_addr_t to 64 bit ensures all places
      dealing with physical addresses get correct data

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 29e332261d2ae0900e3befffd90cd70594cd7a84
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Wed Oct 28 19:06:10 2015 +0530

      ARC: mm: HIGHMEM: populate high memory from DT

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 443f8c75e8d58d394b0e65b47e02e5cd8ed32b41
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 26 14:51:30 2015 +0100

      perf symbols: Fix endless loop in dso__split_kallsyms_for_kcore

      Currently we split symbols based on the map comparison, but symbols are 
stored
      within dso objects and maps could point into same dso objects (kernel 
maps).

      Hence we could end up changing rbtree we are currently iterating and mess 
it
      up. It's easily reproduced on s390x by running:

        $ perf record -a -- sleep 3
        $ perf buildid-list -i perf.data --with-hits

      The fix is to compare dso objects instead.

      Reported-by: Michael Petlan <mpetlan@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151026135130.GA26003@xxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 374ce938aaeb481114b2a8fdedd261f9b2ff9b2b
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 28 10:55:02 2015 +0000

      perf tools: Enable pre-event inherit setting by config terms

      This patch allows perf record setting event's attr.inherit bit by
      config terms like:

        # perf record -e cycles/no-inherit/ ...
        # perf record -e cycles/inherit/ ...

      So user can control inherit bit for each event separately.

      In following example, a.out fork()s in main then do some complex
      CPU intensive computations in both of its children.

      Basic result with and without inherit:

        # perf record -e cycles -e instructions ./a.out
        [ perf record: Woken up 9 times to write data ]
        [ perf record: Captured and wrote 2.205 MB perf.data (47920 samples) ]
        # perf report --stdio
        # ...
        # Samples: 23K of event 'cycles'
        # Event count (approx.): 23641752891
        ...
        # Samples: 24K of event 'instructions'
        # Event count (approx.): 30428312415

        # perf record -i -e cycles -e instructions ./a.out
        [ perf record: Woken up 5 times to write data ]
        [ perf record: Captured and wrote 1.111 MB perf.data (24019 samples) ]
        ...
        # Samples: 12K of event 'cycles'
        # Event count (approx.): 11699501775
        ...
        # Samples: 12K of event 'instructions'
        # Event count (approx.): 15058023559

      Cancel inherit for one event when globally enable:

        # perf record -e cycles/no-inherit/ -e instructions ./a.out
        [ perf record: Woken up 7 times to write data ]
        [ perf record: Captured and wrote 1.660 MB perf.data (36004 samples) ]
        ...
        # Samples: 12K of event 'cycles/no-inherit/'
        # Event count (approx.): 11895759282
       ...
        # Samples: 24K of event 'instructions'
        # Event count (approx.): 30668000441

      Enable inherit for one event when globally disable:

        # perf record -i -e cycles/inherit/ -e instructions ./a.out
        [ perf record: Woken up 7 times to write data ]
        [ perf record: Captured and wrote 1.654 MB perf.data (35868 samples) ]
        ...
        # Samples: 23K of event 'cycles/inherit/'
        # Event count (approx.): 23285400229
        ...
        # Samples: 11K of event 'instructions'
        # Event count (approx.): 14969050259

      Committer note:

      One can check if the bit was set, in addition to seeing the result in
      the perf.data file size as above by doing one of:

        # perf record -e cycles -e instructions -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.911 MB perf.data (63 samples) ]
        # perf evlist -v
        cycles: size: 112, { sample_period, sample_freq }: 4000, sample_type: 
IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, inherit: 1, mmap: 1, 
comm: 1, freq: 1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2: 1, 
comm_exec: 1
        instructions: size: 112, config: 0x1, { sample_period, sample_freq }: 
4000, sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, 
inherit: 1, freq: 1, sample_id_all: 1, exclude_guest: 1
        #

      So, the inherit bit was set in both, now, if we disable it globally using
      --no-inherit:

        # perf record --no-inherit -e cycles -e instructions -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.910 MB perf.data (56 samples) ]
        # perf evlist -v
        cycles: size: 112, { sample_period, sample_freq }: 4000, sample_type: 
IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, mmap: 1, comm: 1, 
freq: 1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2: 1, comm_exec: 1
        instructions: size: 112, config: 0x1, { sample_period, sample_freq }: 
4000, sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, 
freq: 1, sample_id_all: 1, exclude_guest: 1

      No inherit bit set, then disabling it and setting just on the cycles 
event:

        # perf record --no-inherit -e cycles/inherit/ -e instructions -a usleep 
1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.909 MB perf.data (48 samples) ]
        # perf evlist -v
        cycles/inherit/: size: 112, { sample_period, sample_freq }: 4000, 
sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, inherit: 
1, mmap: 1, comm: 1, freq: 1, task: 1, sample_id_all: 1, exclude_guest: 1, 
mmap2: 1, comm_exec: 1
        instructions: size: 112, config: 0x1, { sample_period, sample_freq }: 
4000, sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, 
freq: 1, sample_id_all: 1, exclude_guest: 1
        #

      We can see it as well in by using a more verbose level of debug messages 
in
      the tool that sets up the perf_event_attr, 'perf record' in this case:

        [root@zoo ~]# perf record -vv --no-inherit -e cycles/inherit/ -e 
instructions -a usleep 1
        ------------------------------------------------------------
        perf_event_attr:
          size                             112
          { sample_period, sample_freq }   4000
          sample_type                      IP|TID|TIME|ID|CPU|PERIOD
          read_format                      ID
          disabled                         1
          inherit                          1
          mmap                             1
          comm                             1
          freq                             1
          task                             1
          sample_id_all                    1
          exclude_guest                    1
          mmap2                            1
          comm_exec                        1
        ------------------------------------------------------------
        sys_perf_event_open: pid -1  cpu 0  group_fd -1  flags 0x8
        sys_perf_event_open: pid -1  cpu 1  group_fd -1  flags 0x8
        sys_perf_event_open: pid -1  cpu 2  group_fd -1  flags 0x8
        sys_perf_event_open: pid -1  cpu 3  group_fd -1  flags 0x8
        ------------------------------------------------------------
        perf_event_attr:
          size                             112
          config                           0x1
          { sample_period, sample_freq }   4000
          sample_type                      IP|TID|TIME|ID|CPU|PERIOD
          read_format                      ID
          disabled                         1
          freq                             1
          sample_id_all                    1
          exclude_guest                    1
        ------------------------------------------------------------
        sys_perf_event_open: pid -1  cpu 0  group_fd -1  flags 0x8

      <SNIP>

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: Li Zefan <lizefan@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1446029705-199659-2-git-send-email-wangnan0@xxxxxxxxxx
      [ s/u64/bool/ for the perf_evsel_config_term inherit field - jolsa]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 45890f6d34e70d9dd194bd1729eba3ff72cabf78
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Mar 9 18:53:49 2015 +0530

      ARC: mm: HIGHMEM: kmap API implementation

      Implement kmap* API for ARC.

      This enables
       - permanent kernel maps (pkmaps): :kmap() API
       - fixmap : kmap_atomic()

      We use a very simple/uniform approach for both (unlike some of the other
      arches). So fixmap doesn't use the customary compile time address stuff.
      The important semantic is sleep'ability (pkmap) vs. not (fixmap) which
      the API guarantees.

      Note that this patch only enables highmem for subsequent PAE40 support
      as there is no real highmem for ARC in pure 32-bit paradigm as explained
      below.

      ARC has 2:2 address split of the 32-bit address space with lower half
      being translated (virtual) while upper half unstranslated
      (0x8000_0000 to 0xFFFF_FFFF). kernel itself is linked at base of
      unstranslated space (i.e. 0x8000_0000 onwards), which is mapped to say
      DDR 0x0 by external Bus Glue logic (outside the core). So kernel can
      potentially access 1.75G worth of memory directly w/o need for highmem.
      (the top 256M is taken by uncached peripheral space from 0xF000_0000 to
      0xFFFF_FFFF)

      In PAE40, hardware can address memory beyond 4G (0x1_0000_0000) while
      the logical/virtual addresses remain 32-bits. Thus highmem is required
      for kernel proper to be able to access these pages for it's own purposes
      (user space is agnostic to this anyways).

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 6101be5ad439806c70b54bdd083e7db9e3affb3d
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Wed Oct 28 18:48:17 2015 +0530

      ARC: mm: preps ahead of HIGHMEM support #2

      Explicit'ify that all memory added so far is low memory
      Nothing semantical

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 336e2136e1353db8e9e731c27381ee0735656a8a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Mar 5 17:06:31 2015 +0530

      ARC: mm: preps ahead of HIGHMEM support

      Before we plug in highmem support, some of code needs to be ready for it
       - copy_user_highpage() needs to be using the kmap_atomic API
       - mk_pte() can't assume page_address()
       - do_page_fault() can't assume VMALLOC_END is end of kernel vaddr space

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit d40846457fc23cd841a60fdc2786e08a8bedb35b
  Author: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
  Date:   Wed Sep 2 20:43:30 2015 +0300

      ARC: mm: use generic macros _BITUL()/_AC()

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 8840e14cd82d398d348b2947fad3a630e93260ba
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Oct 13 12:11:38 2015 +0530

      ARC: mm: Improve Duplicate PD Fault handler

       - Move the verbosity knob from .data to .bss by using inverted logic
       - No need to readout PD1 descriptor
       - clip the non pfn bits of PD0 to avoid clipping inside the loop

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 5baecbcd9c9a2f491afe1369fc22e7363f9c94d5
  Author: Dima Kogan <dima@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 17:34:19 2015 -0700

      perf symbols: we can now read separate debug-info files based on a build 
ID

      Recent GDB (at least on a vanilla Debian box) looks for debug information 
in

        /usr/lib/debug/.build-id/nn/nnnnnnn

      where nn/nnnnnn is the build-id of the stripped ELF binary. This is
      documented here:

        https://sourceware.org/gdb/onlinedocs/gdb/Separate-Debug-Files.html

      This was not working in perf because we didn't read the build id until
      AFTER we searched for the separate debug information file. This patch
      reads the build ID and THEN does the search.

      Signed-off-by: Dima Kogan <dima@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/87si6pfwz4.fsf@xxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f2f3096888569ff1fc15fa0187a39eef3a24b28e
  Author: Dima Kogan <dima@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 17:30:28 2015 -0700

      perf symbols: Fix type error when reading a build-id

      This was benign, but wrong. The build-id should live in a char[], not a 
char*[]

      Signed-off-by: Dima Kogan <dima@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/87si6pfwz4.fsf@xxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b33e18f61bd18227a456016a77b1a968f5bc1d65
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Oct 27 14:19:39 2015 +0900

      fs/writeback, rcu: Don't use list_entry_rcu() for pointer offsetting in 
bdi_split_work_to_wbs()

      bdi_split_work_to_wbs() uses list_for_each_entry_rcu_continue()
      to walk @bdi->wb_list.  To set up the initial iteration
      condition, it uses list_entry_rcu() to calculate the entry
      pointer corresponding to the list head; however, this isn't an
      actual RCU dereference and using list_entry_rcu() for it ended
      up breaking a proposed list_entry_rcu() change because it was
      feeding an non-lvalue pointer into the macro.

      Don't use the RCU variant for simple pointer offsetting.  Use
      list_entry() instead.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Darren Hart <dvhart@xxxxxxxxxxxxxxx>
      Cc: David Howells <dhowells@xxxxxxxxxx>
      Cc: Dipankar Sarma <dipankar@xxxxxxxxxx>
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
      Cc: Lai Jiangshan <jiangshanlai@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Patrick Marlier <patrick.marlier@xxxxxxxxx>
      Cc: Paul McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: pranith kumar <bobby.prani@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151027051939.GA19355@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e4340bbb07dd38339c0773543dd928886e512a57
  Merge: c13dc31 a22c4d7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 28 13:17:01 2015 +0100

      Merge branch 'linus' into core/rcu, to fix up a semantic conflict

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 78b9bc947b18ed16b6c2c573d774e6d54ad9452d
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:48:17 2015 +0200

      efi: Fix warning of int-to-pointer-cast on x86 32-bit builds

      Commit:

        0f96a99dab36 ("efi: Add "efi_fake_mem" boot option")

      introduced the following warning message:

        drivers/firmware/efi/fake_mem.c:186:20: warning: cast to pointer from 
integer of different size [-Wint-to-pointer-cast]

      new_memmap_phy was defined as a u64 value and cast to void*,
      causing a int-to-pointer-cast warning on x86 32-bit builds.
      However, since the void* type is inappropriate for a physical
      address, the definition of struct efi_memory_map::phys_map has
      been changed to phys_addr_t in the previous patch, and so the
      cast can be dropped entirely.

      This patch also changes the type of the "new_memmap_phy"
      variable from "u64" to "phys_addr_t" to align with the types of
      memblock_alloc() and struct efi_memory_map::phys_map.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      [ Removed void* cast, updated commit log]
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: kamezawa.hiroyu@xxxxxxxxxxxxxx
      Cc: linux-efi@xxxxxxxxxxxxxxx
      Cc: matt.fleming@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1445593697-1342-2-git-send-email-ard.biesheuvel@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 44511fb9e55ada760822b0b0d7be9d150576f17f
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Oct 23 11:48:16 2015 +0200

      efi: Use correct type for struct efi_memory_map::phys_map

      We have been getting away with using a void* for the physical
      address of the UEFI memory map, since, even on 32-bit platforms
      with 64-bit physical addresses, no truncation takes place if the
      memory map has been allocated by the firmware (which only uses
      1:1 virtually addressable memory), which is usually the case.

      However, commit:

        0f96a99dab36 ("efi: Add "efi_fake_mem" boot option")

      adds code that clones and modifies the UEFI memory map, and the
      clone may live above 4 GB on 32-bit platforms.

      This means our use of void* for struct efi_memory_map::phys_map has
      graduated from 'incorrect but working' to 'incorrect and
      broken', and we need to fix it.

      So redefine struct efi_memory_map::phys_map as phys_addr_t, and
      get rid of a bunch of casts that are now unneeded.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: izumi.taku@xxxxxxxxxxxxxx
      Cc: kamezawa.hiroyu@xxxxxxxxxxxxxx
      Cc: linux-efi@xxxxxxxxxxxxxxx
      Cc: matt.fleming@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1445593697-1342-1-git-send-email-ard.biesheuvel@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9acdc911b55569145034b01075adf658891afbd2
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 26 10:52:57 2015 +0530

      MAINTAINERS: Add public mailing list for ARC

      Cc: <stable@xxxxxxxxxxxxxxx> #3.9+
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit f759ee57b205223e98fdc97e26cbef305b8048e1
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Jan 23 18:10:26 2015 +0530

      ARC: Ensure DT mem base is same as what kernel is built with

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 483bcc99c0a349570b30fc9cb20dea20c9387a4b
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Oct 15 20:32:39 2015 +0530

      ARC: boot: Non Master cpus only need to call EARLY_CPU_SETUP once

      With prev fixes, all cores now start via common entry point @stext which
      already calls EARLY_CPU_SETUP for all cores - so no need to invoke it
      again

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit aa0efcde45a36d1ea2bc5bde4d47f36ec17502de
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 15:15:48 2015 +0530

      ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_smp()

      MCIP now registers it's own per cpu setup routine (for IPI IRQ request)
      using smp_ops.init_irq_cpu().

      So no need for platforms to do that. This now completely decouples
      platforms from MCIP.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 286130ebf196d9643800977d57bdb7cda266b49e
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Wed Oct 14 14:38:02 2015 +0530

      ARC: smp: Introduce smp hook @init_irq_cpu called for all cores

      Note this is not part of platform owned static machine_desc,
      but more of device owned plat_smp_ops (rather misnamed) which a IPI
      provider or some such typically defines.

      This will help us seperate out the IPI registration from platform
      specific init_cpu_smp() into device specific init_irq_cpu()

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 8721a7f5a6f95c38cacbe1be22c820a7698926ef
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Oct 13 15:26:00 2015 +0530

      ARC: smp: Rename platform hook @init_smp -> @init_cpu_smp

      This conveys better that it is called for each cpu

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 26b8f996239884451aeb1213747e3ca808c26024
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 16:38:07 2015 +0530

      ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_early_smp()

      MCIP now registers it's own probe callback with smp_ops.init_early_smp()
      which is called by ARC common code, so no need for platforms to do that.

      This decouples the platforms and MCIP and helps confine MCIP details
      to it's own file.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit e55af4da026ebdb9ded3cb7708b8a8bd7884ad3a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 16:28:55 2015 +0530

      ARC: smp: Introduce smp hook @init_early_smp for Master core

      This adds a platform agnostic early SMP init hook which is called on
      Master core before calling setup_processor()

        setup_arch()
           smp_init_cpus()
               smp_ops.init_early_smp()
           ...
           setup_processor()

      How this helps:
       - Used for one time init of certain SMP centric IP blocks, before
         calling setup_processor() which probes various bits of core,
         possibly including this block

       - Currently platforms need to call this IP block init from their
         init routines, which doesn't make sense as this is specific to ARC
         core and not platform and otherwise requires copy/paste in all
         (and hence a possible point of failure)

      e.g. MCIP init is called from 2 platforms currently (axs10x and sim)
      which will go away once we have this.

      This change only adds the hooks but they are empty for now. Next commit
      will populate them and remove the explicit init calls from platforms.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 4c82f28617ab9ce938118f0b99156a96c64d3da0
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Oct 13 08:48:54 2015 +0530

      ARC: remove @init_time, @init_irq platform callbacks

      These are not in use for ARC platforms. Moreover DT mechanims exist to
      probe them w/o explicit platform calls.

       - clocksource drivers can use CLOCKSOURCE_OF_DECLARE()
       - intc IRQCHIP_DECLARE() calls + cascading inside DT allows external
         intc to be probed automatically

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit e0868e6f673d0d2db6a3c3798605e6efb756e61e
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:58:54 2015 +0530

      ARC: smp: irqchip: handle IPI as percpu irq like timer

      The reason this was not done so far was lack of genuine IPI_IRQ for
      ARC700, as we don't have a SMP version of core yet (which might change
      soon thx to EZChip). Nevertheles to increase the build coverage, we
      need to allow CONFIG_SMP for ARC700 and still be able to run it on a
      UP platform (nsim or AXS101) with a UP Device Tree (SMP-on-UP)

      The build itself requires some define for IPI_IRQ and even a dummy
      value is fine since that code won't run anyways.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 3971cdc202f638f252e39316d42492ace04cc1b1
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 9 11:26:12 2015 +0530

      ARC: boot: Support Halt-on-reset and Run-on-reset SMP booting modes

      For Run-on-reset, non masters need to spin wait. For Halt-on-reset they
      can jump to entry point directly.

      Also while at it, made reset vector handler as "the" entry point for
      kernel including host debugger based boot (which uses the ELF header
      entry point)

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 8a28d67457b613258aa0578ccece206d166f2b9f
  Merge: a22c4d7 977bf06
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 18:59:53 2015 +0900

      Merge tag 'powerpc-4.3-6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fix from Michael Ellerman:
       - powerpc/dma: dma_set_coherent_mask() should not be GPL only from Ben

      * tag 'powerpc-4.3-6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc/dma: dma_set_coherent_mask() should not be GPL only

  commit f11631748ee6973f85238109a3fa8ab8e760e5a4
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Mon Oct 26 13:58:54 2015 +0200

      NFC: nci: non-static functions can not be inline

      This fixes a build error that seems to be toochain
      dependent (Not seen with gcc v5.1):

      In file included from net/nfc/nci/rsp.c:36:0:
      net/nfc/nci/rsp.c: In function â??nci_rsp_packetâ??:
      include/net/nfc/nci_core.h:355:12: error: inlining failed in call to
      always_inline â??nci_prop_rsp_packetâ??: function body not available
       inline int nci_prop_rsp_packet(struct nci_dev *ndev, __u16 opcode,

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 977bf062bba3eb8d03f66d5b4e227e5d7ebc1e08
  Author: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:20:05 2015 +0900

      powerpc/dma: dma_set_coherent_mask() should not be GPL only

      When turning this from inline to an exported function I was a bit
      over-eager and made it GPL only. This prevents the use of pretty much
      all non-GPL PCI driver which is a bit over the top. Let's bring it
      back in line with other architecture.

      Fixes: 817820b0226a ("powerpc/iommu: Support "hybrid" iommu/direct DMA 
ops for coherent_mask < dma_mask")
      Signed-off-by: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit e18f6ac30d31433d8cd9ccf693d3cdd5d2e66ef9
  Merge: e407f39 c02b050
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 20:27:45 2015 -0700

      Merge branch 'mlx4-fixes'

      Or Gerlitz says:

      ====================
      Mellanox mlx4 driver fixes for 4.3-rc7

      Jack's fix is for a regression introduced in 4.3-rc1

      Carol's fix addresses an issue which exists for while and
      turns to beat us hard on PPC, please queue for -stable.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c02b05011fadf8e409e41910217ca689f2fc9d91
  Author: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:36:20 2015 +0200

      net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes

      When doing memcpy/memset of EQEs, we should use sizeof struct
      mlx4_eqe as the base size and not caps.eqe_size which could be bigger.

      If caps.eqe_size is bigger than the struct mlx4_eqe then we corrupt
      data in the master context.

      When using a 64 byte stride, the memcpy copied over 63 bytes to the
      slave_eq structure.  This resulted in copying over the entire eqe of
      interest, including its ownership bit -- and also 31 bytes of garbage
      into the next WQE in the slave EQ -- which did NOT include the ownership
      bit (and therefore had no impact).

      However, once the stride is increased to 128, we are overwriting the
      ownership bits of *three* eqes in the slave_eq struct.  This results
      in an incorrect ownership bit for those eqes, which causes the eq to
      seem to be full. The issue therefore surfaced only once 128-byte EQEs
      started being used in SRIOV and (overarchitectures that have 128/256
      byte cache-lines such as PPC) - e.g after commit 77507aa249ae
      "net/mlx4_core: Enable CQE/EQE stride support".

      Fixes: 08ff32352d6f ('mlx4: 64-byte CQE/EQE support')
      Signed-off-by: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 092bf0fc80f5fb7928244ad63d8a2a8df8a72a3e
  Author: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:36:19 2015 +0200

      net/mlx4_en: Explicitly set no vlan tags in WQE ctrl segment when no vlan 
is present

      We do not set the ins_vlan field to zero when no vlan id is present in 
the packet.

      Since WQEs in the TX ring are not zeroed out between uses, this oversight
      could result in having vlan flags present in the WQE ctrl segment when no
      vlan is preset.

      Fixes: e38af4faf01d ('net/mlx4_en: Add support for hardware accelerated 
802.1ad vlan')
      Reported-by: Gideon Naim <gideonn@xxxxxxxxxxxx>
      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6d08f617872cc048173d59f1ce4660b030bab5a6
  Author: yankejian <yankejian@xxxxxxxxxx>
  Date:   Tue Oct 27 19:16:34 2015 +0800

      net: hisilicon: updates HNS config and documents

      updates the bindings documents and dtsi file according to the review
      comments[https://lkml.org/lkml/2015/9/21/670] from Rob Herring 
<robh@xxxxxxxxxx>

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e407f39afdc0741dcf20aed100b8e738ccab7cb1
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Tue Oct 27 11:37:39 2015 +0200

      vhost: fix performance on LE hosts

      commit 2751c9882b947292fcfb084c4f604e01724af804 ("vhost: cross-endian
      support for legacy devices") introduced a minor regression: even with
      cross-endian disabled, and even on LE host, vhost_is_little_endian is
      checking is_le flag so there's always a branch.

      To fix, simply check virtio_legacy_is_little_endian first.

      Cc: Greg Kurz <gkurz@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Reviewed-by: Greg Kurz <gkurz@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit edc9b4272e3298c4a6a86d34d03e951033566f69
  Author: Li Peng <lipeng321@xxxxxxxxxx>
  Date:   Tue Oct 27 17:17:40 2015 +0800

      net: hns: fixes the bug tested XGE by ethtool -p

      delete action of ETHTOOL_ID_ON/ETHTOOL_ID_OFF in XGE ethtool -p,
      so Hardware control the LED state instead of software.

      Signed-off-by: Li Peng <lipeng321@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fcc60333ccf5622f1788ab72848e1a880667fe0
  Author: Abhimanyu <abhimanyu@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 14:17:43 2015 +0530

      gianfar: Increase TX_TIMEOUT to 5HZ

      Increased TX_TIMEOUT to 5HZ to accommodate worst case situation
      for traffic and CPU intensive use cases

      Signed-off-by: Priyanka Jain <Priyanka.Jain@xxxxxxxxxxxxx>
      Signed-off-by: Abhimanyu <abhimanyu@xxxxxxxxxxxxx>
      Acked-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d59542ddcb547871b1913c34c31a6d207627db02
  Merge: f8e529e c096377
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 19:56:56 2015 -0700

      Merge tag 'wireless-drivers-next-for-davem-2015-10-27' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

      Kalle Valo says:

      ====================
      here's a bigger pull request for 4.4. The diffstat looks scary as we
      created a new directory realtek for all realtek drivers. In the future
      I'm planning to create similar directories for all vendors, currently we
      just have ath, mediatek and realtek. This change has been in linux-next
      for a couple of weeks so it should be safe, but of course you never
      know.

      There's also a new driver rtl8xxxu for few realtek USB devices. This
      just made it to the last linux-next build.

      Otherwise there's nothing really special, more info below. If time
      permits, and it's ok for you, I'm hoping to send you a one more pull
      request this week.

      brcmfmac

      * using netdev carrier state
      * add and rework some cfg80211 callbacks mainly for AP mode
      * use devcoredump when triggered by firmware event

      realtek

      * create new directory drivers/net/wireless/realtek/ for all realtek
        drivers, not visible to users (no kconfig changes etc)
      * add rtl8xxxu, a new mac80211 driver for RTL8723AU, RTL8188CU,
        RTL8188RU, RTL8191CU, RTL8192CU and hopefully more in the future

      ath10k

      * add board 2 API support for automatically choosing correct board file
      * data path optimisations
      * disable PCI power save for qca988x and QCA99x0 due to interop reasons

      wil6210

      * BlockAckReq support
      * firmware crashdump using devcoredump
      * capture all frames with sniffer
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8e529ed941ba2bbcbf310b575d968159ce7e895
  Author: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 09:23:59 2015 +0900

      seccomp, ptrace: add support for dumping seccomp filters

      This patch adds support for dumping a process' (classic BPF) seccomp
      filters via ptrace.

      PTRACE_SECCOMP_GET_FILTER allows the tracer to dump the user's classic BPF
      seccomp filters. addr should be an integer which represents the ith 
seccomp
      filter (0 is the most recently installed filter). data should be a struct
      sock_filter * with enough room for the ith filter, or NULL, in which case
      the filter is not saved. The return value for this command is the number 
of
      BPF instructions the program represents, or negative in the case of 
errors.
      Command specific errors are ENOENT: which indicates that there is no ith
      filter in this seccomp tree, and EMEDIUMTYPE, which indicates that the ith
      filter was not installed as a classic BPF filter.

      A caveat with this approach is that there is no way to get explicitly at
      the heirarchy of seccomp filters, and users need to memcmp() filters to
      decide which are inherited. This means that a task which installs two of
      the same filter can potentially confuse users of this interface.

      v2: * make save_orig const
          * check that the orig_prog exists (not necessary right now, but when
             grows eBPF support it will be)
          * s/n/filter_off and make it an unsigned long to match ptrace
          * count "down" the tree instead of "up" when passing a filter offset

      v3: * don't take the current task's lock for inspecting its seccomp mode
          * use a 0x42** constant for the ptrace command value

      v4: * don't copy to userspace while holding spinlocks

      v5: * add another condition to WARN_ON

      v6: * rebase on net-next

      Signed-off-by: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      CC: Will Drewry <wad@xxxxxxxxxxxx>
      Reviewed-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      CC: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      CC: Pavel Emelyanov <xemul@xxxxxxxxxxxxx>
      CC: Serge E. Hallyn <serge.hallyn@xxxxxxxxxx>
      CC: Alexei Starovoitov <ast@xxxxxxxxxx>
      CC: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b9e3bd5b2f807f66a959cc079c495915f032c67
  Merge: c0f9c7e cf4b24f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 19:53:04 2015 -0700

      Merge branch 'mpls-multipath-improvements'

      Robert Shearman says:

      ====================
      mpls: mulipath improvements

      Two improvements to the recently added mpls multipath support. The
      first is a fix for missing initialisation the nexthop address length
      for the v4 and v6 explicit null label routes, and the second is to
      reduce the amount of memory used by mpls routes by changing the way
      the via addresses are stored.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cf4b24f0024fc2e3fbc653a659356d224b5b9172
  Author: Robert Shearman <rshearma@xxxxxxxxxxx>
  Date:   Tue Oct 27 00:37:36 2015 +0000

      mpls: reduce memory usage of routes

      Nexthops for MPLS routes have a via address field sized for the
      largest via address that is expected, which is 32 bytes. This means
      that in the most common case of having ipv4 via addresses, 28 bytes of
      memory more than required are used per nexthop. In the other common
      case of an ipv6 nexthop then 16 bytes more than required are
      used. With large numbers of MPLS routes this extra memory usage could
      start to become significant.

      To avoid allocating memory for a maximum length via address when not
      all of it is required and to allow for ease of iterating over
      nexthops, then the via addresses are changed to be stored in the same
      memory block as the route and nexthops, but in an array after the end
      of the array of nexthops. New accessors are provided to retrieve a
      pointer to the via address.

      To allow for O(1) access without having to store a pointer or offset
      per nh, the via address for each nexthop is sized according to the
      maximum via address for any nexthop in the route, which is stored in a
      new route field, rt_max_alen, but this is in an existing hole in
      struct mpls_route so it doesn't increase the size of the
      structure. Each via address is ensured to be aligned to VIA_ALEN_ALIGN
      to account for architectures that don't allow unaligned accesses.

      Signed-off-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b4e04fc7357b6cef0856cb14b42306af1af990e5
  Author: Robert Shearman <rshearma@xxxxxxxxxxx>
  Date:   Tue Oct 27 00:37:35 2015 +0000

      mpls: fix forwarding using v4/v6 explicit null

      Fill in the via address length for the predefined IPv4 and IPv6
      explicit-null label routes.

      Fixes: f8efb73c97e2 ("mpls: multipath route support")
      Signed-off-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Acked-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 85ff8a43f39fa6d2f970b5e1e5c03df87abde242
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Mon Oct 26 17:02:19 2015 -0700

      bpf: sample: define aarch64 specific registers

      Define aarch64 specific registers for building bpf samples correctly.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 20986ed826cbb36bb8f2d77f872e3c52d8d30647
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Mon Oct 26 17:13:54 2015 -0500

      amd-xgbe: Fix race between access of desc and desc index

      During Tx cleanup it's still possible for the descriptor data to be
      read ahead of the descriptor index. A memory barrier is required between
      the read of the descriptor index and the start of the Tx cleanup loop.
      This allows a change to a lighter-weight barrier in the Tx transmit
      routine just before updating the current descriptor index.

      Since the memory barrier does result in extra overhead on arm64, keep
      the previous change to not chase the current descriptor value. This
      prevents the execution of the barrier for each loop performed.

      Suggested-by: Alexander Duyck <alexander.duyck@xxxxxxxxx>
      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ce675ff39b9958d1c10f86cf58e357efaafc856
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Mon Oct 26 12:46:37 2015 -0400

      RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in 
rds_tcp_data_recv

      Either of pskb_pull() or pskb_trim() may fail under low memory conditions.
      If rds_tcp_data_recv() ignores such failures, the application will
      receive corrupted data because the skb has not been correctly
      carved to the RDS datagram size.

      Avoid this by handling pskb_pull/pskb_trim failure in the same
      manner as the skb_clone failure: bail out of rds_tcp_data_recv(), and
      retry via the deferred call to rds_send_worker() that gets set up on
      ENOMEM from rds_tcp_read_sock()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0b7c874348ea14ec3c358fe95e56d6f830540248
  Author: Neil Horman <nhorman@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:24:22 2015 -0400

      forcedeth: fix unilateral interrupt disabling in netpoll path

      Forcedeth currently uses disable_irq_lockdep and enable_irq_lockdep, 
which in
      some configurations simply calls local_irq_disable.  This causes errant 
warnings
      in the netpoll path as in netpoll_send_skb_on_dev, where we disable irqs 
using
      local_irq_save, leading to the following warning:

      WARNING: at net/core/netpoll.c:352 netpoll_send_skb_on_dev+0x243/0x250() 
(Not
      tainted)
      Hardware name:
      netpoll_send_skb_on_dev(): eth0 enabled interrupts in poll
      (nv_start_xmit_optimized+0x0/0x860 [forcedeth])
      Modules linked in: netconsole(+) configfs ipv6 iptable_filter ip_tables 
ppdev
      parport_pc parport sg microcode serio_raw edac_core edac_mce_amd k8temp
      snd_hda_codec_realtek snd_hda_codec_generic forcedeth snd_hda_intel
      snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd 
soundcore
      snd_page_alloc i2c_nforce2 i2c_core shpchp ext4 jbd2 mbcache sr_mod cdrom 
sd_mod
      crc_t10dif pata_amd ata_generic pata_acpi sata_nv dm_mirror dm_region_hash
      dm_log dm_mod [last unloaded: scsi_wait_scan]
      Pid: 1940, comm: modprobe Not tainted 2.6.32-573.7.1.el6.x86_64.debug #1
      Call Trace:
       [<ffffffff8107bbc1>] ? warn_slowpath_common+0x91/0xe0
       [<ffffffff8107bcc6>] ? warn_slowpath_fmt+0x46/0x60
       [<ffffffffa00fe5b0>] ? nv_start_xmit_optimized+0x0/0x860 [forcedeth]
       [<ffffffff814b3593>] ? netpoll_send_skb_on_dev+0x243/0x250
       [<ffffffff814b37c9>] ? netpoll_send_udp+0x229/0x270
       [<ffffffffa02e3299>] ? write_msg+0x39/0x110 [netconsole]
       [<ffffffffa02e331b>] ? write_msg+0xbb/0x110 [netconsole]
       [<ffffffff8107bd55>] ? __call_console_drivers+0x75/0x90
       [<ffffffff8107bdba>] ? _call_console_drivers+0x4a/0x80
       [<ffffffff8107c445>] ? release_console_sem+0xe5/0x250
       [<ffffffff8107d200>] ? register_console+0x190/0x3e0
       [<ffffffffa02e71a6>] ? init_netconsole+0x1a6/0x216 [netconsole]
       [<ffffffffa02e7000>] ? init_netconsole+0x0/0x216 [netconsole]
       [<ffffffff810020d0>] ? do_one_initcall+0xc0/0x280
       [<ffffffff810d4933>] ? sys_init_module+0xe3/0x260
       [<ffffffff8100b0d2>] ? system_call_fastpath+0x16/0x1b
      ---[ end trace f349c7af88e6a6d5 ]---
      console [netcon0] enabled
      netconsole: network logging started

      Fix it by modifying the forcedeth code to use
      disable_irq_nosync_lockdep_irqsavedisable_irq_nosync_lockdep_irqsave 
instead,
      which saves and restores irq state properly.  This also saves us a little 
code
      in the process

      Tested by the reporter, with successful restuls

      Patch applies to the head of the net tree

      Signed-off-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Reported-by: Vasily Averin <vvs@xxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c0f9c7e45d374ce6dc369443fa586c2fe228c345
  Author: Bert Kenward <bkenward@xxxxxxxxxxxxxx>
  Date:   Mon Oct 26 14:23:42 2015 +0000

      sfc: replace spinlocks with bit ops for busy poll locking

      This patch reduces the overhead of locking for busy poll.
      Previously the state was protected by a lock, whereas now
      it's manipulated solely with atomic operations.

      Signed-off-by: Shradha Shah <sshah@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 080a270f5adec1ada1357eb66321e7222cc34301
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 13:51:37 2015 +0100

      sock: don't enable netstamp for af_unix sockets

      netstamp_needed is toggled for all socket families if they request
      timestamping. But some protocols don't need the lower-layer timestamping
      code at all. This patch starts disabling it for af-unix.

      E.g. systemd enables timestamping during boot-up on the journald af-unix
      sockets, thus causing the system to globally enable timestamping in the
      lower networking stack. Still, it is very probable that timestamping
      gets activated, by e.g. dhclient or various NTP implementations.

      Reported-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6092db1aba2d151acd40a0370b80b5c043936d2d
  Merge: 8941faa 133fac0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 19:35:01 2015 -0700

      Merge branch 'qed-driver'

      Ariel Elior says:

      ====================
      Add new drivers: qed & qede

      This series implements the driver set for Qlogic's new QL4xxx series.
      These are 10/20/25/40/50/100 Gig capable converged nics, supporting
      ethernet (obviously), iscsi, fcoe, roce and iwarp protocols.

      The overall driver design includes a common module ('qed') and protocol
      specific dependent modules for ethernet ('qede'), fcoe ('qedf'),
      iscsi ('qedi') and roce ('qedr').
      The common module contains all of the common logic, e.g. initialization,
      cleanup, infrastructure for interrupt handling, link management, slowpath
      etc. as well as protocol agnostic features, and supplying an abstraction
      layer for other modules.
      The protocol specific modules can be compiled and operated independently
      of each other, with the exception of the rdma modules which are dependent
      on the ethernet module, in accordance with the kernel rdma stack design.

      This series only adds the core and ethernet modules, with basic L2
      capabilities. Future series will add the rest of the modules and enhance
      the L2 functionality.

      Ths patch series is constructed of the following patches:
      qed:  Add module with basic common support
      qed:  Add basic L2 interface
      qede: Add basic Network driver
      qed:  Add slowpath L2 support
      qede: Add basic network device support
      qede: Add classification configuration
      qed:  Add link support
      qede: Add support for link
      qed:  Add statistics support
      qede: Add basic ethtool support

      This project is a team effort, thanks go to Yuval Mintz, Dmitry Kravkov,
      Michal Kalderon, Tomer Tayar, Manish Chopra, Sudarsana Kalluru,
      Rajesh Borundia, Sony Chacko, Artum Zolotushko, Harish Patil, Rasesh Mody,
      Sergey Ukhterov and Elad Manela, as well as former team members,
      Eilon Greenstein and Shmulik Ravid.

      Changes from previos version:
      -----------------------------

      From Version 7:
        - Various small fixes according to Dave's suggestions; Largest change
          [code-wise] - don't use tabs for indenting function arguments.

      From Version 6:
        - Reduced the number of arguments for functions with exceptionally
          high number of parameters.

      From Version 5:
        - Style change and fixes [mostly in 1, 4 and 7].
          Thanks go to Francois Romieu, a mere mortal. ;-)

      From Version 4:
        - Drop dependency for x86_64.

      From Version 3:
        - Limit support of initial submission to x86_64.
        - Fix endian problems appearing via sparse [although no BE support yet].
        - Fix small issues suggested by the kbuild test robot.

      From Version 2:
        - Removed U64_{HI,LO}; Using {upper,lower}_32_bits instead.
        - Use regular napi weight definition.
        - [We still use the __le variants for variables, since we didn't get
           a reply regarding the change into non-user API types].

      From Version 1:
        - Removed private license file; Instead revised comments at source 
headers.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 133fac0eedc355be5cdbeb9cdfc6df59d2bbbdd1
  Author: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:34 2015 +0200

      qede: Add basic ethtool support

      This adds basic ethtool operations to the qed driver, allowing support in:
       - Statistics gathering [ethtool -S]
       - Setting of debug level [ethtool -s <interface> msglvl]
       - Getting basic information [ethtool, ethtool -i]

      In addition it adds the ability to change the MTU.

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9df2ed0415b13218f84262c2372323ef028310fc
  Author: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:33 2015 +0200

      qed: Add statistics support

      Device statistics can be gathered on-demand. This adds the qed support for
      reading the statistics [both function and port] from the device, and adds
      to the public API a method for requesting the current statistics.

      Signed-off-by: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2ec6172d29cf3aed92e9db40e83e36329db1dd5
  Author: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:32 2015 +0200

      qede: Add support for link

      This adds basic link functionality to qede - driver still doesn't provide
      users with an API to change any link property, but it does request qed to
      initialize the link using default configuration, and registers a callback
      that allows it to get link notifications.

      This patch adds the ability of the driver to set the carrier as active and
      to enable traffic as a result of async. link notifications.
      Following this patch, driver should be capable of running traffic.

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc875c2e4f34e86c2f562f18b6e917cfcc560bcb
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:31 2015 +0200

      qed: Add link support

      Physical link is handled by the management Firmware.
      This patch lays the infrastructure for attention handling in the driver,
      as link change notifications arrive via async. attentions,
      as well the handling of such notifications.

      This patch also extends the API with the protocol drivers by adding
      registered callbacks which the protocol driver passes to qed in order
      to be notified of async. events originating from the FW/HW.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0d8e0aa05796c8a5652c164de5e4f16d8c9ee199
  Author: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:30 2015 +0200

      qede: classification configuration

      Add the ability to configure basic classification in driver by
      implementing ndo_set_mac_address() and ndo_set_rx_mode().

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2950219d87b040959f23484dd4ff5856bf1bc172
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:29 2015 +0200

      qede: Add basic network device support

      This patch includes the basic Rx/Tx support for the driver [although
      carrier will still never be turned on].
      Following this patch the driver registers a network device, initializes
      it and prepares it for traffic.

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cee4d26448c1000ccc1711eb5e6ed4c15f18fa83
  Author: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:28 2015 +0200

      qed: Add slowpath L2 support

      This patch adds to the qed the support to configure various L2 elements,
      such as channels and basic filtering conditions.
      It also enhances its public API to allow qede to later utilize this
      functionality.

      Signed-off-by: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e712d52b9f2a8ecf14ba0a2ec9a80ed0b194c4a1
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:27 2015 +0200

      qede: Add basic Network driver

      The Qlogic Everest Driver for Ethernet is the Ethernet specific module for
      QL4xxx ethernet products by Qlogic.

      This patch adds a very minimal PCI driver, one that doesn't yet register
      a network device, but one that does interact with qed and does a basic
      initialization of the HW.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 25c089d78f3833edf614fc377e75e9cf848562f5
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:26 2015 +0200

      qed: Add basic L2 interface

      This patch adds a public API for a network driver to work on top of QED.
      The interface itself is very minimal - it's mostly infrastructure, as the
      only content it has after this patch is a query for HW-based information
      required for the creation of a network interface [I.e., no actual
      protocol-specific configurations are supported].

      Signed-off-by: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fe56b9e6a8d957d6a20729d626027f800c17a2da
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:25 2015 +0200

      qed: Add module with basic common support

      The Qlogic Everest Driver is the backend module for the QL4xxx ethernet
      products by Qlogic.

      This module serves two main purposes:
       1. It's responsible to contain all the common code that will be shared
          between the various drivers that would be used with said line of
          products. Flows such as chip initialization and de-initialization
          fall under this category.

       2. It would abstract the protocol-specific HW & FW components, allowing
          the protocol drivers to have a clean APIs which is detached in its
          slowpath configuration from the actual HSI.

      This adds a very basic module without any protocol-specific bits.
      I.e., this adds a basic implementation that almost entirely falls under
      the first category.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6f5cadee44d83395dcd78d557b577e1021e192e4
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Sun Oct 25 20:21:50 2015 -0700

      openvswitch: Fix skb leak using IPv6 defrag

      nf_ct_frag6_gather() makes a clone of each skb passed to it, and if the
      reassembly is successful, expects the caller to free all of the original
      skbs using nf_ct_frag6_consume_orig(). This call was previously missing,
      meaning that the original fragments were never freed (with the exception
      of the last fragment to arrive).

      Fix this by ensuring that all original fragments except for the last
      fragment are freed via nf_ct_frag6_consume_orig(). The last fragment
      will be morphed into the head, so it must not be freed yet. Furthermore,
      retain the ->next pointer for the head after skb_morph().

      Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
      Reported-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 190b8ffbb700a9aa47acc559779bc79c0cb14766
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Sun Oct 25 20:21:49 2015 -0700

      ipv6: Export nf_ct_frag6_consume_orig()

      This is needed in openvswitch to fix an skb leak in the next patch.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74c16618137f1505b0a32dea3ec73a2ef6f8f842
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Sun Oct 25 20:21:48 2015 -0700

      openvswitch: Fix double-free on ip_defrag() errors

      If ip_defrag() returns an error other than -EINPROGRESS, then the skb is
      freed. When handle_fragments() passes this back up to
      do_execute_actions(), it will be freed again. Prevent this double free
      by never freeing the skb in do_execute_actions() for errors returned by
      ovs_ct_execute. Always free it in ovs_ct_execute() error paths instead.

      Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
      Reported-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2229fe1430d4e1c70e36520229dd64a87802b20
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Tue Oct 27 15:06:45 2015 -0700

      fib_trie: leaf_walk_rcu should not compute key if key is less than pn->key

      We were computing the child index in cases where the key value we were
      looking for was actually less than the base key of the tnode.  As a result
      we were getting incorrect index values that would cause us to skip over
      some children.

      To fix this I have added a test that will force us to use child index 0 if
      the key we are looking for is less than the key of the current tnode.

      Fixes: 8be33e955cb9 ("fib_trie: Fib walk rcu should take a tnode and key 
instead of a trie and a leaf")
      Reported-by: Brian Rak <brak@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a22c4d7e34402ccdf3414f64c50365436eba7b93
  Author: Ming Lin <ming.l@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:59:42 2015 -0700

      block: re-add discard_granularity and alignment checks

      In commit b49a087("block: remove split code in
      blkdev_issue_{discard,write_same}"), discard_granularity and alignment
      checks were removed. Ideally, with bio late splitting, the upper layers
      shouldn't need to depend on device's limits.

      Christoph reported a discard regression on the HGST Ultrastar SN100 NVMe
      device when mkfs.xfs. We have not found the root cause yet.

      This patch re-adds discard_granularity and alignment checks by reverting
      the related changes in commit b49a087. The good thing is now we can
      remove the 2G discard size cap and just use UINT_MAX to avoid bi_size
      overflow.

      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Tested-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Ming Lin <ming.l@xxxxxxxxxxxxxxx>
      Reviewed-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 23d88271b4f97f66de521ac9b2c1471e6311cf26
  Merge: 3d0aa36 625faa6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:24:53 2015 +0900

      Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM fixes from Russell King:
       "Two fixes for ARM and one for clkdev:

         - Fix another build issue with vdsomunge on non-glibc systems
         - Fix a randconfig build error caused by an invalid configuration
         - Fix a clkdev problem causing the Nokia n700 to no longer boot"

      * 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm:
        clkdev: fix clk_add_alias() with a NULL alias device name
        ARM: 8445/1: fix vdsomunge not to depend on glibc specific byteswap.h
        ARM: make RiscPC depend on MMU

  commit 3d0aa366072a194c6a339d37b85d5b99e936097e
  Merge: dc5bc3f 174fd8d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:22:15 2015 +0900

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull blkcg fix from Jens Axboe:
       "One final fix that should go into 4.3.  It's a simple 2x1 liner,
        fixing a blkcg accounting issue.  It was using the wrong bio member to
        look at the sync and write bits..."

      * 'for-linus' of git://git.kernel.dk/linux-block:
        blkcg: fix incorrect read/write sync/async stat accounting

  commit dc5bc3f1e3d886ce1193281bb2bfb2b44f4aeae4
  Merge: 9e17f90 3fc89ad
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:20:10 2015 +0900

      Merge branch 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fix from Herbert Xu:
       "This fixes a problem in the Crypto API that may cause spurious errors
        when signals are received by the process that made the orignal system
        call into the kernel"

      * 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: api - Only abort operations on fatal signal

  commit 9e17f9070280bd58af9aead415544387a7a61427
  Merge: 858e904 275d7d4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:17:50 2015 +0900

      Merge tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

      Pull module preemption fix from Rusty Russell:
       "Turns out we should have always been disabling preemption here;
        someone finally caught it thanks to Peter Z's additional checks"

      * tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux:
        module: Fix locking in symbol_put_addr()

  commit f4efcce33d2e5224a905369f9906f3931f5d907c
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Oct 27 17:35:58 2015 -0300

      perf tools: Search for more options when passing args to -h

      Recently 'perf <tool> -h' was made aware of arguments and would show
      just the help for the arguments specified, but that required a strict
      form, i.e.:

        $ perf -h --tui

      worked, but:

        $ perf -h tui

      didn't.

      Make it support both cases and also look at the option help when neither
      matches, so that he following examples works:

        $ perf report -h interface

         Usage: perf report [<options>]

          --gtk    Use the GTK2 interface
          --stdio  Use the stdio interface
          --tui    Use the TUI interface

        $ perf report -h stack

         Usage: perf report [<options>]

          -g, --call-graph <print_type,threshold[,print_limit],order,
                            sort_key[,branch]>
            Display call graph (stack chain/backtrace):

              print_type:  call graph printing style (graph|flat|fractal|none)
              threshold:   minimum call graph inclusion threshold (<percent>)
              print_limit: maximum number of call graph entry (<number>)
              order:       call graph order (caller|callee)
              sort_key:    call graph sort key (function|address)
              branch:      include last branch info to call graph (branch)

            Default: graph,0.5,caller,function
              --max-stack <n>   Set the maximum stack depth when parsing the
                                callchain, anything beyond the specified depth
                                will be ignored. Default: 127
        $

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-xzqvamzqv3cv0p6w3inhols3@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1e5a29318ba8506f52a8d727b5c6a53143f9882a
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sun Oct 25 15:51:18 2015 +0100

      perf stat: Cache aggregated map entries in extra cpumap

      Currently any time we need to access socket or core id for given cpu, we
      access the sysfs topology file.

      Adding a cpus_aggr_map cpu_map to cache those entries.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445784728-21732-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2322f573f8131da9c6d1fab01fe0a0c2c23aa549
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sun Oct 25 15:51:17 2015 +0100

      perf cpu_map: Add cpu_map__empty_new function

      Adding cpu_map__empty_new interface to create empty cpumap with given
      size. The cpumap entries are initialized with -1.

      It'll be used for caching cpu_map in following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445784728-21732-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit af3399817428d8adc2c87c91df23fde77dbcdb35
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sun Oct 25 15:51:44 2015 +0100

      perf evsel: Move id_offset out of struct perf_evsel union member

      Because the 'perf stat record' patches will use the id_offset member
      together with the priv pointer.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445784728-21732-29-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 06ef431ab8060aa8ef51b36f56773d01f6a53f24
  Merge: 790a2ee 2c66e24d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 27 18:40:47 2015 +0100

      Merge tag 'efi-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi into core/efi

      Pull EFI fix from Matt Fleming:

        - Fix a kernel panic by not passing EFI virtual mapping addresses to
          __pa() in the x86 pageattr code. Since these virtual addreses are
          not part of the direct mapping or kernel text mapping, passing them
          to __pa() will trigger a BUG_ON() when CONFIG_DEBUG_VIRTUAL is
          enabled. (Sai Praneeth Prakhya)

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d94b986aa734efea09fbc8f59390ba2e4e00f9d0
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:35 2015 +0200

      pinctrl: at91: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Acked-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9d4cc85d290578ec07e37d063d73f0e8707ea3eb
  Author: Jon Hunter <jonathanh@xxxxxxxxxx>
  Date:   Fri Oct 16 10:24:01 2015 +0100

      pinctrl: tegra-xusb: Correct lane mux options

      The description of the XUSB_PADCTL_USB3_PAD_MUX_0 register in the Tegra124
      documentation implies that all functions (pcie, usb3 and sata) can be
      muxed onto to all lanes (pcie lanes 0-4 and sata lane 0). However, it has
      been confirmed that this is not the case and the mux'ing options much more
      limited. Unfortunately, the public documentation has not been updated to
      reflect this and so detail the actual mux'ing options here by function:

      Function:         Lanes:
      pcie1 x2:         pcie3, pcie4
      pcie1 x4:         pcie1, pcie2, pcie3, pcie4
      pcie2 x1 (option1):       pcie0
      pcie2 x1 (option2):       pcie2
      usb3 port 0:              pcie0
      usb3 port 1 (option 1):   pcie1
      usb3 port 1 (option 2):   sata0
      sata:                     sata0

      Signed-off-by: Jon Hunter <jonathanh@xxxxxxxxxx>
      Acked-by: Stephen Warren <swarren@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 787dfbb294b25b37211d0749e7cdbb20d443c680
  Author: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
  Date:   Fri Oct 23 09:25:30 2015 -0700

      gpio: zynq: Document interrupt-controller DT binding

      HW and driver support the GPIO as interrupt-controller.
      Document that in the DT binding.

      Signed-off-by: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 79786721c29ff8fecf2903ba080479476015553d
  Author: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
  Date:   Thu Oct 22 21:51:18 2015 -0700

      gpio: xilinx: Drop architecture dependencies

      The driver does not have any real architecture dependencies. To avoid
      listing each architecture that might use this driver on some
      FPGA-enabled platform, drop these dependencies.

      Signed-off-by: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Acked-by: Moritz Fischer <moritz.fischer@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ee1a6ca43dba07465c71f6ab661702d703f5eb06
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 13:08:45 2015 +0300

      pinctrl: intel: Add Intel Broxton pin controller support

      This driver adds pinctrl/GPIO support for Intel Broxton. The GPIO
      controller is based on the same hardware design that is already used in
      Intel Sunrisepoint so we leverage the core driver here.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4341e8a5458f10cb7265167061fa06ebf3a3a903
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 13:08:44 2015 +0300

      pinctrl: intel: Allow requesting pins which are in ACPI mode as GPIOs

      Reserved for ACPI actually means that in such case the GPIO hardware will
      not update the interrupt status register (GPI_IS) even if the pin is
      configured to trigger an interrupt. It will update GPI_GPE_STS instead and
      does not trigger an interrupt.

      Allow using such pins as GPIOs, only prevent their usage as interrupts.

      We also rename function intel_pad_reserved_for_acpi() to be
      intel_pad_acpi_mode() which reflects the actual meaning better.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c71183697250b356be6c7c1abc2e9a74073e1dca
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:27 2015 +0900

      perf tools: Introduce usage_with_options_msg()

      Now usage_with_options() setup a pager before printing message so normal
      printf() or pr_err() will not be shown.  The usage_with_options_msg()
      can be used to print some help message before usage strings.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-4-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 193b40c8258f781d8dc395909b2971472aad6796
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 13:08:43 2015 +0300

      pinctrl: intel: Add support for multiple GPIO chips sharing the interrupt

      On Intel Broxton the GPIO hardware consists of several chips that all 
share
      the parent interrupt. It is not possible to handle this by setting chained
      handler for each chip (as they will overwrite each other).

      To overcome this we need to request the interrupt using devm_request_irq()
      and pass IRQF_SHARED with the flags.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit b2f68b6306dbdbfd9b8cf46c697b52efa78f9ad6
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Wed Oct 21 00:12:00 2015 -0700

      gpio: generic: Revert to old error handling in bgpio_map

      Returning an error instead of NULL in bgpio_map if
      platform_get_resource_byname does not find a resource was introduced with
      commit cf3f2a2c8bae ("gpio: generic: improve error handling in 
bgpio_map").
      This results in several qemu runtime failures with default and non-default
      configurations, if attempts are made to boot from mmcblk0. Examples for
      failures with multi_v7_defconfig are

      Machine: vexpress-a9      dtb: vexpress-v2p-ca9
      Machine: vexpress-a15     dtb: vexpress-v2p-ca15-tc1

      Crash:

      VFS: Cannot open root device "mmcblk0" or unknown-block(0,0): error -6
      Please append a correct "root=" boot option; here are the available 
partitions:
      Kernel panic - not syncing: VFS: Unable to mount root fs on 
unknown-block(0,0)

      Looking into the code, always returning an error if bgpio_map fails
      does not appear to make much sense, since the code in bgpio_setup_io
      specifically supports some of the resources to be NULL.

      Fixes: cf3f2a2c8bae ("gpio: generic: improve error handling in bgpio_map")
      Cc: Heiner Kallweit <hkallweit1@xxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ef0eebc05130b0d22b0ea65c0cd014ee16fc89c7
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Tue Oct 20 21:15:06 2015 -0700

      drivers/pinctrl: Add the concept of an "init" state

      For pinctrl the "default" state is applied to pins before the driver's
      probe function is called.  This is normally a sensible thing to do,
      but in some cases can cause problems.  That's because the pins will
      change state before the driver is given a chance to program how those
      pins should behave.

      As an example you might have a regulator that is controlled by a PWM
      (output high = high voltage, output low = low voltage).  The firmware
      might leave this pin as driven high.  If we allow the driver core to
      reconfigure this pin as a PWM pin before the PWM's probe function runs
      then you might end up running at too low of a voltage while we probe.

      Let's introudce a new "init" state.  If this is defined we'll set
      pinctrl to this state before probe and then "default" after probe
      (unless the driver explicitly changed states already).

      An alternative idea that was thought of was to use the pre-existing
      "sleep" or "idle" states and add a boolean property that we should
      start in that mode.  This was not done because the "init" state is
      needed for correctness and those other states are only present (and
      only transitioned in to and out of) when (optional) power management
      is enabled.

      Changes in v3:
      - Moved declarations to pinctrl/devinfo.h
      - Fixed author/SoB

      Changes in v2:
      - Added comment to pinctrl_init_done() as per Linus W.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Tested-by: Caesar Wang <wxt@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c307b002548590c5d8c32b964831de671ad4affe
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Tue Oct 20 17:22:15 2015 +0300

      gpio: add a real time compliance notes

      Put in a compliance checklist.

      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4aa50b87f1e99164a93314c25ed3a827c24bc54f
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Oct 27 11:13:18 2015 +0100

      Revert "gpio: add a real time compliance checklist"

      This reverts commit 677b2ff4afd9996eabefc9472c701211b4b49e87.

  commit 1c6e58d83615678875bf52747f8841c49291dfcf
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 17:15:40 2015 +0200

      mmc: pwrseq: Use highest priority for eMMC restart handler

      The pwrseq_emmc driver does a eMMC card reset before a system reboot to
      allow broken or limited ROM boot-loaders (that don't have an eMMC reset
      logic) to be able to read the second stage from the eMMC.

      But this has to be called before a system reboot handler and while most
      of them use the priority 128, there are other restart handlers (such as
      the syscon-reboot one) that use a higher priority. So, use the highest
      priority to make sure that the eMMC hw is reset before a system reboot.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Tested-by: Markus Reichl <m.reichl@xxxxxxxxxxxxx>
      Tested-by: Anand Moon <linux.amoon@xxxxxxxxx>
      Reviewed-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Tested-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bac7f4c1bf5e7c6ccd5bb71edc015b26c77f7460
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Tue Oct 20 17:25:09 2015 +0900

      pinctrl: uniphier: set input-enable before pin-muxing

      While IECTRL is disabled, input signals are pulled-down internally.
      If pin-muxing is set up first, glitch signals (Low to High transition)
      might be input to hardware blocks.

      Bad case scenario:
      [1] The hardware block is already running before pinctrl is handled.
         (the reset is de-asserted by default or by a firmware, for example)
      [2] The pin-muxing is set up.  The input signals to hardware block
          are pulled-down by the chip-internal biasing.
      [3] The pins are input-enabled.  The signals from the board reach the
          hardware block.

      Actually, one invalid character is input to the UART blocks for such
      SoCs as PH1-LD4, PH1-sLD8, where UART devices start to run at the
      power on reset.

      To avoid such problems, pins should be input-enabled before muxing.

      Fixes: 6e9088920258 ("pinctrl: UniPhier: add UniPhier pinctrl core 
support")
      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Reported-by: Dai Okamura <okamura.dai@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 1ceacea220c36e7933216e79b0ca21e1318b7c8d
  Author: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
  Date:   Mon Oct 19 12:59:14 2015 -0400

      gpio: Add GPIO support for the ACCES 104-IDIO-16

      The ACCES 104-IDIO-16 family of PC/104 utility boards feature 16
      optically isolated inputs and 16 optically isolated FET solid state
      outputs. This driver provides GPIO support for these 32 channels of
      digital I/O. Change-of-State detection interrupts are not supported.

      GPIO 0-15 correspond to digital outputs 0-15, while GPIO 16-31
      correspond to digital inputs 0-15. The base port address for the device
      may be set via the idio_16_base module parameter.

      Signed-off-by: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e0548004d433e4454c5d129a5c5b0905442bfe8e
  Author: Pramod Kumar <pramodku@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:13:11 2015 +0530

      pinctrl: cygnus: Add new compatible string for gpio controller driver

      This new compatible string, "brcm,iproc-gpio", should be used for
      all new iproc-based future SoCs.

      Signed-off-by: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Reviewed-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ea92211c0844afbe8b3f83809ea2f51bc53acc68
  Author: Pramod Kumar <pramodku@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:13:09 2015 +0530

      pinctrl: cygnus: Remove GPIO to Pinctrl pin mapping from driver

      Remove gpio to pinctrl pin mapping code from driver and
      address this through standard property "gpio-ranges".

      Signed-off-by: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Reviewed-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 03e09bc18580c84961c8a05470e8d5ed197ecd84
  Author: Pramod Kumar <pramodku@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:13:08 2015 +0530

      pinctrl: cygnus: Optional DT property to support pin mappings

      If GPIO controller's pins are muxed, pin-controller subsystem
      need to be intimated by defining mapping between gpio and
      pinmux controller. This patch adds required properties to
      define this mapping via DT.

      Signed-off-by: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Reviewed-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 6397b7f5f405f30f03f67ef829306c5af6d3369b
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:29 2015 +0800

      mmc: mediatek: add HS400 support

      add HS400 mode and tune support

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9979dbe5158899b556eb772b7335e29417ac0ddd
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:28 2015 +0800

      mmc: mmc: extend the mmc_send_tuning()

      The mmc_execute_tuning() has already prepared the opcode,
      there is no need to prepare it again at mmc_send_tuning(),
      and, there is a BUG of mmc_send_tuning() to determine the opcode
      by bus width, assume eMMC was running at HS200, 4bit mode,
      then the mmc_send_tuning() will overwrite the opcode from CMD21
      to CMD19, then got error.

      in addition, extend an argument of "cmd_error" to allow getting
      if there was cmd error when tune response.

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      [Ulf: Rebased patch]
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c9b5061e7728da1f7192ecaf3ffab4a7300920dc
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:26 2015 +0800

      mmc: mediatek: add implement of ops->hw_reset()

      add implement of ops->hw_reset() for eMMC

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 62b0d27af85ef1b1729c2ed675c12020e1fbf10f
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:25 2015 +0800

      mmc: mediatek: fix got GPD checksum error interrupt when data transfer

      Even if we only use one gpd, we need alloc 2 gpd and make
      the gpd->next pointer to the second gpd, or may get gpd checksum
      error, this was checked by hardware

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 6e622947e149fa9fd62e3609aab010935c8e10bd
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:24 2015 +0800

      mmc: mediatek: change the argument "ddr" to "timing"

      use the ios->timing directly is better
      It can reflect current timing and do settings by timing

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 726a9aac31a89d5a02614ca8f2b3f644df621c27
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:23 2015 +0800

      mmc: mediatek: make cmd_ints_mask to const

      cmd_ints_mask and data_ints_mask are constant value,
      so make it to const

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2c21d26825d5c1fda1729541d5fad56ee7ef7fa2
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:22 2015 +0800

      mmc: dt-bindings: update Mediatek MMC bindings

      Add 400Mhz clock source for HS400 mode

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 794f15782d9f12aa5a43f796680a5fc4f2c424e3
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:21 2015 +0800

      mmc: core: Add DT bindings for eMMC hardware reset support

      Sometime only need set MMC_CAP_HW_RESET for one of MMC hosts,
      So set it in device tree is better.

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 324e786ee39c70ffbdc280c34b7d2b6da5c87879
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 27 08:35:24 2015 +0100

      bluetooth: 6lowpan: fix NOHZ: local_softirq_pending

      Jukka reported about the following warning:

      "NOHZ: local_softirq_pending 08"

      I remember this warning and we had a similar issue when using workqueues
      and calling netif_rx. See commit 5ff3fec ("mac802154: fix NOHZ
      local_softirq_pending 08 warning").

      This warning occurs when calling "netif_rx" inside the wrong context
      (non softirq context). The net core api offers "netif_rx_ni" to call
      netif_rx inside the correct softirq context.

      Reported-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ef12cb904e096335ef179bfe30e637a9c2464343
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:38:13 2015 +0100

      s390/cio: move ccw_device_stlck functions

      device_ops.c should only contain functions that are called by ccw device
      drivers. Move the cio internal functions that handle unconditional
      reserve + release to device_pgid.c

      Acked-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8421d212e831cb03ba65bada57a733ad875286bf
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:35:06 2015 +0100

      s390/cio: move ccw_device_call_handler

      device_ops.c should only contain functions that are called by ccw device
      drivers. Move the cio internal function ccw_device_call_handler to
      device_fsm.c where it's used. Remove some useless comments while at it.

      Acked-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 439eb131f796d8b2cf625d791b22b42962b9dd0d
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Oct 15 13:40:55 2015 +0200

      s390/topology: reduce per_cpu() invocations

      Each per_cpu() invocation generates extra code. Since there are a lot
      of similiar calls in the topology code we can avoid a lot of them.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 36324963a3006d2c416095d87d8272e4825c679b
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 13:04:12 2015 +0200

      s390/nmi: reduce size of percpu variable

      Change the flag fields within struct mcck_struct to simple bit fields
      to reduce the size of the structure which is used as percpu variable.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 975be635d929e3cfdae149d6de055f31a17c92d7
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 13:03:05 2015 +0200

      s390/nmi: fix terminology

      According to the architecture registers are validated and not
      revalidated. So change comments and functions names to match.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit dc6e15556a9f21d640a62ae6de3cbfa68ec687a4
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 13:00:39 2015 +0200

      s390/nmi: remove casts

      Remove all the casts to and from the machine check interruption code.
      This patch changes struct mci to a union, which contains an anonymous
      structure with the already known bits and in addition an unsigned
      long field, which contains the raw machine check interruption code.

      This allows to simply assign and decoce the interruption code value
      without the need for all those casts we had all the time.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 3d68286a4304574c250ca3b0a5429d2901688f16
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 12:39:09 2015 +0200

      s390/nmi: remove pointless error strings

      s390_handle_damage() has character string parameter which was used as
      a pointer to verbose error message. The hope was (a lot of years ago)
      when analyzing dumps that register R2 would still contain the pointer
      and therefore it would be rather easy to tell what went wrong.

      However gcc optimizes the strings away since a long time. And even if
      it wouldn't it is necessary to have a close look at the machine check
      interruption code to tell what's wrong.

      So remove the pointless error strings.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit f9e6edfb9cf780edfe0a649a85ed00032e787f69
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 12:28:28 2015 +0200

      s390: don't store registers on disabled wait anymore

      The current disabled wait code stores register contents into their
      save areas, however it is (at least) missing the new vector registers.

      Given the fact that the whole exercise seems to be rather pointless
      simply don't save any registers anymore.

      In a "live" system it is always possible to inspect register contents,
      and in case of a dump the register contents will be stored by the
      dump mechanism.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ecbafda85371a3d85814aab8ff080a19e4d98b36
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 11:54:03 2015 +0200

      s390: get rid of __set_psw_mask()

      With the removal of 31 bit code we can always assume that the epsw
      instruction is available. Therefore use the __extract_psw() function
      to disable and enable machine checks.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 174fd8d369613c4e06660f3704caaba48dac8554
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Thu Oct 22 09:27:12 2015 +0900

      blkcg: fix incorrect read/write sync/async stat accounting

      While unifying how blkcg stats are collected, 77ea733884eb ("blkcg:
      move io_service_bytes and io_serviced stats into blkcg_gq")
      incorrectly used bio->flags instead of bio->rw to tell the IO type.
      This made IOs to be accounted as the wrong type.  Fix it.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: 77ea733884eb ("blkcg: move io_service_bytes and io_serviced stats 
into blkcg_gq")
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit d6a32b98099fb6b257e9b4f7b3febb5aae6f7408
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Thu Oct 8 09:25:32 2015 +0100

      scsi_dh: don't try to load a device handler during async probing

      Request_module gets really unhappy when called from async probing, so
      revert to not auto load device handler modules during the SCSI bus
      scan.  While autoloading would be really useful we never did this
      until 4.3-rc and it turns out that functionality doesn't actually
      work.

      Fixes: 566079 ("dm-mpath, scsi_dh: request scsi_dh modules in scsi_dh, 
not dm-mpath")
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Reported-by: Paul Mackerras <paulus@xxxxxxxxxx>
      Tested-by: Paul Mackerras <paulus@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 8941faa161b526199e55ca7764cf875383453612
  Author: emmanuel.grumbach@xxxxxxxxx <emmanuel.grumbach@xxxxxxxxx>
  Date:   Mon Oct 26 10:31:29 2015 +0200

      net: tso: add support for IPv6

      Adding IPv6 for the TSO helper API is trivial:
      * Don't play with the id (which doesn't exist in IPv6)
      * Correctly update the payload_len (don't include the
        length of the IP header itself)

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61b9da925a5e985afc268eb8184f1af3ef542422
  Merge: 4b3418f 59fbcbc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 22:16:02 2015 -0700

      Merge tag 'arcnet-for-4.4-rc1' of git://git.pengutronix.de/git/mgr/linux

      Michael Grzeschik says:

      ====================
      This series includes code simplifaction. The main changes are the correct
      xceiver handling (enable/disable) of the com20020 cards. The driver now 
handles
      link status change detection. The EAE PCI-ARCNET cards now make use of the
      rotary encoded subdevice indexing and got support for led triggers on 
transmit
      and reconnection events.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fe012964a39ead19405ba8d65f50d4fd598f5b8
  Merge: 7e3b6e7 26b7974
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 22:08:22 2015 -0700

      Merge branch 'net_of_node_put'

      Julia Lawall says:

      ====================
      add missing of_node_put

      The various for_each device_node iterators performs an of_node_get on each
      iteration, so a break out of the loop requires an of_node_put.

      The complete semantic patch that fixes this problem is
      (http://coccinelle.lip6.fr):

      // <smpl>
      @r@
      local idexpression n;
      expression e1,e2;
      iterator name for_each_node_by_name, for_each_node_by_type,
      for_each_compatible_node, for_each_matching_node,
      for_each_matching_node_and_match, for_each_child_of_node,
      for_each_available_child_of_node, for_each_node_with_property;
      iterator i;
      statement S;
      expression list [n1] es;
      @@

      (
      (
      for_each_node_by_name(n,e1) S
      |
      for_each_node_by_type(n,e1) S
      |
      for_each_compatible_node(n,e1,e2) S
      |
      for_each_matching_node(n,e1) S
      |
      for_each_matching_node_and_match(n,e1,e2) S
      |
      for_each_child_of_node(e1,n) S
      |
      for_each_available_child_of_node(e1,n) S
      |
      for_each_node_with_property(n,e1) S
      )
      &
      i(es,n,...) S
      )

      @@
      local idexpression r.n;
      iterator r.i;
      expression e;
      expression list [r.n1] es;
      @@

       i(es,n,...) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
         return n;
      |
      +  of_node_put(n);
      ?  return ...;
      )
         ...
       }

      @@
      local idexpression r.n;
      iterator r.i;
      expression e;
      expression list [r.n1] es;
      @@

       i(es,n,...) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n

      @@
      local idexpression r.n;
      iterator r.i;
      expression e;
      identifier l;
      expression list [r.n1] es;
      @@

       i(es,n,...) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  goto l;
      )
         ...
       }
      ...
      l: ... when != n// </smpl>
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 26b7974d9ad7f93891ee8c39ee63bd2515da7744
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:07 2015 +0100

      net: mv643xx_eth: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each 
iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 81a577034b000964ca791281a975f0ba9a9d7eed
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:06 2015 +0100

      ath6kl: add missing of_node_put

      for_each_compatible_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression e;
      local idexpression n;
      @@

       for_each_compatible_node(n,...) {
         ... when != of_node_put(n)
             when != e = n
      (
         return n;
      |
      +  of_node_put(n);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 028623418766ea64f4256035b06ac6cbc0a67892
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:03 2015 +0100

      net: phy: mdio: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each 
iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 447ed7360037b6e38c0206ddcbd04a256ec94099
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:02 2015 +0100

      netdev/phy: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each 
iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression r.n;
      expression r,e;
      @@

       for_each_available_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bd252796852193277a07da505601a2f407c70e0b
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:01 2015 +0100

      net: netcp: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression r.n;
      expression r,e;
      @@

       for_each_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8c387ebbaff8652943a1cbcab496aecadc6a8875
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:00 2015 +0100

      net: thunderx: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression r.n;
      expression r,e;
      @@

       for_each_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7e3b6e7423d5f994257c1de88e06b509673fdbcf
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sat Oct 24 05:47:44 2015 -0700

      ipv6: gre: support SIT encapsulation

      gre_gso_segment() chokes if SIT frames were aggregated by GRO engine.

      Fixes: 61c1db7fae21e ("ipv6: sit: add GSO/TSO support")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c501cdd6823a644cf35ac594c635310bf077125
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 26 16:17:14 2015 +0000

      Bluetooth: Fix crash on fast disconnect of SCO

      Fix a crash that may happen when a connection is closed before it was 
fully
      established. Mapping conn->hcon was released by shutdown function, but it
      is still referenced in (not yet finished) connection established handling
      function.

      [ 4635.254073] BUG: unable to handle kernel NULL pointer dereference at 
00000013
      [ 4635.262058] IP: [<c11659f0>] memcmp+0xe/0x25
      [ 4635.266835] *pdpt = 0000000024190001 *pde = 0000000000000000
      [ 4635.273261] Oops: 0000 [#1] PREEMPT SMP
      [ 4635.277652] Modules linked in: evdev ecb vfat fat libcomposite usb2380 
isofs zlib_inflate rfcomm(O) udc_core bnep(O) btusb(O) btbcm(O) btintel(O) 
bluetooth(O) cdc_acm arc4 uinput hid_mule
      [ 4635.321761] Pid: 363, comm: kworker/u:2H Tainted: G           O 
3.8.0-119.1-plk-adaptation-byt-ivi-brd #1
      [ 4635.332642] EIP: 0060:[<c11659f0>] EFLAGS: 00010206 CPU: 0
      [ 4635.338767] EIP is at memcmp+0xe/0x25
      [ 4635.342852] EAX: e4720678 EBX: 00000000 ECX: 00000006 EDX: 00000013
      [ 4635.349849] ESI: 00000000 EDI: fb85366c EBP: e40c7dc0 ESP: e40c7db4
      [ 4635.356846]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
      [ 4635.362873] CR0: 8005003b CR2: 00000013 CR3: 24191000 CR4: 001007f0
      [ 4635.369869] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      [ 4635.376865] DR6: ffff0ff0 DR7: 00000400
      [ 4635.381143] Process kworker/u:2H (pid: 363, ti=e40c6000 task=e40c5510 
task.ti=e40c6000)
      [ 4635.390080] Stack:
      [ 4635.392319]  e4720400 00000000 fb85366c e40c7df4 fb842285 e40c7de2 
fb853200 00000013
      [ 4635.401003]  e3f101c4 e4720678 e3f101c0 e403be0a e40c7dfc e416a000 
e403be0a fb85366c
      [ 4635.409692]  e40c7e1c fb820186 020f6c00 e47c49ac e47c4008 00000000 
e416a000 e47c402c
      [ 4635.418380] Call Trace:
      [ 4635.421153]  [<fb842285>] sco_connect_cfm+0xff/0x236 [bluetooth]
      [ 4635.427893]  [<fb820186>] 
hci_sync_conn_complete_evt.clone.101+0x227/0x268 [bluetooth]
      [ 4635.436758]  [<fb82370f>] hci_event_packet+0x1caa/0x21d3 [bluetooth]
      [ 4635.443859]  [<c106231f>] ? trace_hardirqs_on+0xb/0xd
      [ 4635.449502]  [<c1375b8a>] ? _raw_spin_unlock_irqrestore+0x42/0x59
      [ 4635.456340]  [<fb814b67>] hci_rx_work+0xb9/0x350 [bluetooth]
      [ 4635.462663]  [<c1039f1e>] ? process_one_work+0x17b/0x2e6
      [ 4635.468596]  [<c1039f77>] process_one_work+0x1d4/0x2e6
      [ 4635.474333]  [<c1039f1e>] ? process_one_work+0x17b/0x2e6
      [ 4635.480294]  [<fb814aae>] ? hci_cmd_work+0xda/0xda [bluetooth]
      [ 4635.486810]  [<c103a3fa>] worker_thread+0x171/0x20f
      [ 4635.492257]  [<c10456c5>] ? complete+0x34/0x3e
      [ 4635.497219]  [<c103ea06>] kthread+0x90/0x95
      [ 4635.501888]  [<c103a289>] ? manage_workers+0x1df/0x1df
      [ 4635.507628]  [<c1376537>] ret_from_kernel_thread+0x1b/0x28
      [ 4635.513755]  [<c103e976>] ? __init_kthread_worker+0x42/0x42
      [ 4635.519975] Code: 74 0d 3c 79 74 04 3c 59 75 0c c6 02 01 eb 03 c6 02 
00 31 c0 eb 05 b8 ea ff ff ff 5d c3 55 89 e5 57 56 53 31 db eb 0e 0f b6 34 18 
<0f> b6 3c 1a 43 29 fe 75 07 49 85 c9 7f
      [ 4635.541264] EIP: [<c11659f0>] memcmp+0xe/0x25 SS:ESP 0068:e40c7db4
      [ 4635.548166] CR2: 0000000000000013
      [ 4635.552177] ---[ end trace e05ce9b8ce6182f6 ]---

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4b3418fba0fe819197e3359d5ddbef84ba2c59de
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Sat Oct 24 14:00:20 2015 +0200

      ipv6: icmp: include addresses in debug messages

      Messages like "icmp6_send: no reply to icmp error" are close
      to useless. Adding source and destination addresses to provide
      some more clue.

      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1075ef5950da97927ae1b3ef76d03e211c4fdb55
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Fri Oct 23 14:58:19 2015 -0700

      bpf: make tracing helpers gpl only

      exported perf symbols are GPL only, mark eBPF helper functions
      used in tracing as GPL only as well.

      Suggested-by: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 62544ce8e01c1879d420ba309f7f319d24c0f4e6
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Thu Oct 22 17:10:14 2015 -0700

      bpf: fix bpf_perf_event_read() helper

      Fix safety checks for bpf_perf_event_read():
      - only non-inherited events can be added to perf_event_array map
        (do this check statically at map insertion time)
      - dynamically check that event is local and !pmu->count
      Otherwise buggy bpf program can cause kernel splat.

      Also fix error path after perf_event_attrs()
      and remove redundant 'extern'.

      Fixes: 35578d798400 ("bpf: Implement function bpf_perf_event_read() that 
get the selected hardware PMU conuter")
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d8e018c0b3211902af1bfb5d5b280f955a4633b7
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:45 2015 +0100

      NFC: nfcmrvl: update device tree bindings for Marvell NFC

      Align NFC bindgins to use marvell instead of mrvl.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit caf6e49bf6d02e6bb94df680bbe3beaf680fdefa
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:44 2015 +0100

      NFC: nfcmrvl: add spi driver

      This driver adds the support of SPI-based Marvell NFC controller.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2bd832459a0827b8dcf13b345380b66f92089d74
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:43 2015 +0100

      NFC: NCI: allow spi driver to choose transfer clock

      In some cases low level drivers might want to update the
      SPI transfer clock (e.g. during firmware download).

      This patch adds this support. Without any modification the
      driver will use the default SPI clock (from pdata or device tree).

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit fcd9d046fd8998cc984f2ff80e76f246ebca15b6
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:42 2015 +0100

      NFC: NCI: move generic spi driver to a module

      SPI driver should be a module.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit b5b3e23e4cace008e1a30e8614a484d14dfd07a1
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:41 2015 +0100

      NFC: nfcmrvl: add i2c driver

      This driver adds the support of I2C-based Marvell NFC controller.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 58d34aa677ec248539262c54a618d61804a893f1
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:40 2015 +0100

      NFC: nfcmrvl: configure head/tail room values per low level drivers

      Low-level drivers may need to add some data before and/or
      after NCI packet.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 3194c6870158e305dac2af52f83681e9cb67280f
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:39 2015 +0100

      NFC: nfcmrvl: add firmware download support

      Implement firmware download protocol for Marvell NFC controllers.
      This protocol is based on NCI frames that's why parts of its
      implementation use some NCI generic functions.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit e5629d29470134af1954d2bbe45c4f2b73f68ee9
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:38 2015 +0100

      NFC: NCI: export nci_send_frame and nci_send_cmd function

      Export nci_send_frame and nci_send_cmd symbols to allow drivers
      to use it. This is needed for example if NCI is used during
      firmware download phase.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit fb101c0e9cc635b811b413b26a6690240c303f54
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:37 2015 +0100

      NFC: nfcmrvl: remove unneeded version defines

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 15d17170b4e44c5768c3d32b093cd393c4dbc158
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Mon Oct 26 07:50:11 2015 +0100

      NFC: st21nfca: Add support for proprietary commands

      Add support for proprietary commands useful mainly
      for factory testings.

      Here is a list:

      - FACTORY_MODE: Allow to set the driver into a mode where no
        secure element are activated. It does not consider any
        NFC_ATTR_VENDOR_DATA.
      - HCI_CLEAR_ALL_PIPES: Allow to execute a HCI clear all pipes
        command. It does not consider any NFC_ATTR_VENDOR_DATA.
      - HCI_DM_PUT_DATA: Allow to configure specific CLF registry as
        for example RF trimmings or low level drivers configurations
        (I2C, SPI, SWP).
      - HCI_DM_UPDATE_AID: Allow to configure an AID routing into the
        CLF routing table following RF technology, CLF mode or protocol.
      - HCI_DM_GET_INFO: Allow to retrieve CLF information.
      - HCI_DM_GET_DATA: Allow to retrieve CLF configurable data such as
        low level drivers configurations or RF trimmings.
      - HCI_DM_LOAD: Allow to load a firmware into the CLF. A complete
        packet can be more than 8KB.
      - HCI_DM_RESET: Allow to run a CLF reset in order to "commit" CLF
        configuration changes without CLF power off.
      - HCI_GET_PARAM: Allow to retrieve an HCI CLF parameter (for example
        the white list).
      - HCI_DM_FIELD_GENERATOR: Allow to generate different kind of RF
        technology. When using this command to anti-collision is done.
      - HCI_LOOPBACK: Allow to echo a command and test the Dh to CLF
        connectivity.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2b6e5bfed0288524fca1376eb89856363cb8c55e
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:50 2015 +0100

      NFC: st-nci: Replace st21nfcb by st_nci in makefile

      Replace 1 missing st21nfcb by st_nci

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit bd8f1a31a98b9f26201167f695bc807e3ff45841
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:49 2015 +0100

      NFC: st-nci: remove duplicated skb dump

      Remove SPI_DUMP_SKB and I2C_DUMP_SKB as skb is already dumped
      in ndlc layer.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit bb2496c3ecae8a4a24c86b3c67de192f30fa1385
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:48 2015 +0100

      NFC: st-nci: Disable irq when powering the device up

      Upon some conditions (timing, CLF errors, platform errors...), the
      irq might be already active when powering the device.

      Add irq_active variable as a guard to avoid kernel warning message

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a9e062d0599f499082320006ae3b54cf391bf996
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:47 2015 +0100

      NFC: st21nfca: Add error messages for unexpected HCI events

      Potentially an unexpected HCI event may occur because of a
      firmware bug. It could be transparent for the user but we should
      at least log it.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 57dc828a7740f600ea8ce3049c3745aa805c83c9
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:45 2015 +0100

      NFC: st21nfca: Add few code style fixes

      Add a minor code style fixes

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 064d00479697907730a4aff9edf879c0ca4743f0
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:44 2015 +0100

      NFC: st-nci: Add few code style fixes

      Add some few code style fixes.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 96d4581f0b3712221d6ed4a765bb6b4ea40f2b2f
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:43 2015 +0100

      NFC: netlink: Add mode parameter to deactivate_target functions

      In order to manage in a better way the nci poll mode state machine,
      add mode parameter to deactivate_target functions.
      This way we can manage different target state.
      mode parameter make sense only in nci core.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit cde2aa99ba702ab8efa583495e54731b9f854e66
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:42 2015 +0100

      NFC: st21nfca: Fix host_list verification after SEactivation

      A secure element can be activated in different order.
      The host_list is updated keeping a fixed order:
        <terminal_host_id><uicc_id><ese_id>.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 4e932acc6fd66c905b2d0ca452dcf69321b6c414
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:41 2015 +0100

      NFC: st-nci: Fix host_list verification after SE activation

      A secure element can be activated in different order.
      The host_list is updated keeping a fixed order:
        <terminal_host_id><uicc_id><ese_id>.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 06521053a06062f62f001d79b7c1449a614cc4af
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:40 2015 +0100

      NFC: st-nci: Increase delay between 2 secure element activations

      After internal discussion, it appears this timing should be
      increased to 20 ms for interoperability reason.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 3648dc6d27f648b8e3ce9b48874627a833d53c3a
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:39 2015 +0100

      NFC: st-nci: Add ese-present/uicc-present dts properties

      In order to align with st21nfca, dts configuration properties
      ese_present and uicc_present are made available in st-nci driver.

      So far, in early development firmware, because
      nci_nfcee_mode_set(DISABLE) was not supported we had to try to
      enable it during the secure element discovery phase.

      After several trials on commercial and qualified firmware it appears
      that nci_nfcee_mode_set(ENABLE) and nci_nfcee_mode_set(DISABLE) are
      properly supported.

      Such feature also help us to eventually save some time (~5ms) when
      only one secure element is connected.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit be73c2cbc857a4a3424c0e3cdd70002d5a27a756
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:38 2015 +0100

      NFC: netlink: Add missing NFC_ATTR comments

      NFC_CMD_ACTIVATE_TARGET and NFC_ATTR_SE_PARAMS comments are missing.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2b5dbe089f619f995faf2fe6beb7efb705eed302
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:37 2015 +0100

      NFC: st-nci: Add error messages when an unexpected HCI event occurs

      Potentially an unexpected HCI event may occur because of a
      firmware bug. It could be transparent for the user but we need to
      at least log it.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit b1fa4dc4ffef843bda17f26bbf54fb5d8bc23d2b
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:36 2015 +0100

      NFC: st-nci: Add support for proprietary commands

      Add support for proprietary commands useful mainly for
      factory testings. Here is a list:

      - FACTORY_MODE: Allow to set the driver into a mode where
        no secure element are activated. It does not consider any
        NFC_ATTR_VENDOR_DATA.
      - HCI_CLEAR_ALL_PIPES: Allow to execute a HCI clear all pipes
        command. It does not consider any NFC_ATTR_VENDOR_DATA.
      - HCI_DM_PUT_DATA: Allow to configure specific CLF registry
        like for example RF trimmings or low level drivers
        configurations (I2C, SPI, SWP).
      - HCI_DM_UPDATE_AID: Allow to configure an AID routing into the
        CLF routing table following RF technology, CLF mode or protocol.
      - HCI_DM_GET_INFO: Allow to retrieve CLF information.
      - HCI_DM_GET_DATA: Allow to retrieve CLF configurable data such as
        low level drivers configurations or RF trimmings.
      - HCI_DM_DIRECT_LOAD: Allow to load a firmware into the CLF.
        A complete packet can be more than 8KB.
      - HCI_DM_RESET: Allow to run a CLF reset in order to "commit" CLF
        configuration changes without CLF power off.
      - HCI_GET_PARAM: Allow to retrieve an HCI CLF parameter (for example
        the white list).
      - HCI_DM_FIELD_GENERATOR: Allow to generate different kind of RF
        technology. When using this command to anti-collision is done.
      - HCI_LOOPBACK: Allow to echo a command and test the Dh to CLF
        connectivity.
      - HCI_DM_VDC_MEASUREMENT_VALUE: Allow to measure the field applied
        on the CLF antenna. A value between 0 and 0x0f is returned. 0 is
        maximum.
      - HCI_DM_FWUPD_START: Allow to put CLF into firmware update mode.
        It is a specific CLF command as there is no GPIO for this.
      - HCI_DM_FWUPD_END:  Allow to complete firmware update.
      - HCI_DM_VDC_VALUE_COMPARISON: Allow to compare the field applied
        on the CLF antenna to a reference value.
      - MANUFACTURER_SPECIFIC: Allow to retrieve manufacturer specific data
        received during a NCI_CORE_INIT_CMD.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 23695e41a1cac017edad2b38607f33678a31b877
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 04:32:57 2015 +0000

      scsi_dh: fix use-after-free when removing scsi device

      The commit 1bab0de0274f ("dm-mpath, scsi_dh: don't let dm detach device
      handlers") removed reference counting of attached scsi device handler.
      As a result, handler data is freed immediately via scsi_dh->detach()
      in the context of scsi_remove_device() where activation request can be
      still in flight.

      This patch moves scsi_dh_handler_detach() to sdev releasing function,
      scsi_device_dev_release_usercontext(), at that point the device
      is already in quiesced state.

      Fixes: 1bab0de0274f ("dm-mpath, scsi_dh: don't let dm detach device 
handlers")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 2280521719e81919283b82902ac24058f87dfc1b
  Author: DÄ?vis MosÄ?ns <davispuh@xxxxxxxxx>
  Date:   Fri Aug 21 07:29:22 2015 +0300

      mvsas: Fix NULL pointer dereference in mvs_slot_task_free

      When pci_pool_alloc fails in mvs_task_prep then task->lldd_task stays
      NULL but it's later used in mvs_abort_task as slot which is passed
      to mvs_slot_task_free causing NULL pointer dereference.

      Just return from mvs_slot_task_free when passed with NULL slot.

      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=101891
      Signed-off-by: DÄ?vis MosÄ?ns <davispuh@xxxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 3242c9ee0b6104c901336a9498bb7ec64923eb1f
  Merge: f7e1b37 cb36859
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 18:32:22 2015 -0700

      Merge branch 'sh_eth-fixes'

      Sergei Shtylyov says:

      ====================
      sh_eth: RX buffer alignment fixes

      Here's a set of 2 patches against DaveM's 'net.git' repo which are the
      fixes to the RX buffer size calculation.

      [1/2] sh_eth: fix RX buffer size alignment
      [2/2] sh_eth: fix RX buffer size calculation
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cb3685958dd4c46d7646d244063ea3ec8adf3618
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 00:46:40 2015 +0300

      sh_eth: fix RX buffer size calculation

      The RX buffer size calulation failed to account for the length granularity
      (which is now 32 bytes)...

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab8579169b79c062935dade949287113c7c1ba73
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 00:46:03 2015 +0300

      sh_eth: fix RX buffer size alignment

      Both  Renesas R-Car and RZ/A1 manuals state that RX buffer  length must be
      a multiple of 32 bytes, while the driver  only uses 16 byte granularity...

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8b7c94e3478dbb0296293b43a974c3561d01e9fb
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Fri Oct 23 12:11:08 2015 -0700

      net: dsa: bcm_sf2: Unhardcode port numbers

      While the current driver mostly supports BCM7445 which has a hardcoded
      location for its MoCA port on port 7 and port 0 for its internal PHY,
      this is not necessarily true for all other chips out there such as
      BCM3390 for instance.

      Walk the list of ports from Device Tree, get their port number ("reg"
      property), and then parse the "phy-mode" property and initialize two
      internal variables: moca_port and a bitmask of internal PHYs. Since we
      use interrupts for the MoCA port, we introduce two helper functions to
      enable/disable interrupts and do this at the appropriate bank (INTRL2_0
      or INTRL2_1).

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 680060d3e02d175516832e9af058ffe96ecc4cdc
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Fri Oct 23 11:38:07 2015 -0700

      net: dsa: bcm_sf2: Implement FDB operations

      Add support for the FDB add, delete, and dump operations. The add and
      delete operations are implemented using directed ARL operations using
      the specified MAC address and consist in a read operation, write and
      readback operation.

      The dump operation consists in using the ARL search and software
      filtering entries which are not for the desired port.

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76b1ba7feda533a74c5874a1d15bb4039083efc8
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:39 2015 +0800

      clocksource/drivers/digicolor: Prevent ftrace recursion

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      We should not trace digicolor_timer_sched_read() function. Fix this by 
adding
      the notrace attribute to this function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Baruch Siach <baruch@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit bd859a44b2f6749fd82e89dabbaa37f2c8aa33fe
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:40 2015 +0800

      clocksource/drivers/fsl_ftm_timer: Prevent ftrace recursion

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      We should not trace the ftm_read_sched_clock() function.

      Fix this by adding the notrace attribute to this function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 36361abc8bc14e80f6b4db561665e5e15249c181
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:38 2015 +0800

      clocksource/drivers/vf_pit_timer: Prevent ftrace recursion

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      We should not trace the pit_read_sched_clock() function. Fix this by 
adding a
      notrace attribute to this function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit cdc68ec01853baf3558c6d25f19c869add4a6888
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:37 2015 +0800

      clocksource/drivers/prima2: Prevent ftrace recursion

      Currently prima2 timer can be used as a scheduler clock. We properly
      marked sirfsoc_read_sched_clock() as notrace but we then call another
      function sirfsoc_timer_read() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding notrace attribute to the sirfsoc_timer_read() function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit b8725dab66f0b2d57affb33a7f6ca094d9f1f8dd
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:35 2015 +0800

      clocksource/drivers/samsung_pwm_timer: Prevent ftrace recursion

      Currently samsung_pwm_timer can be used as a scheduler clock. We properly
      marked samsung_read_sched_clock() as notrace but we then call another
      function samsung_clocksource_read() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding notrace attribute to the samsung_clocksource_read()
      function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit f8af0e9c644caf64d0f42dce816c18346c744a9f
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:36 2015 +0800

      clocksource/drivers/pistachio: Prevent ftrace recursion

      Currently pistachio can be used as a scheduler clock. We properly marked
      pistachio_read_sched_clock() as notrace but we then call another function
      pistachio_clocksource_read_cycles() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding notrace attribute to the 
pistachio_clocksource_read_cycles()
      function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit d6df3576e6b4bcf765f5ace69915b4fa4a7ee1c3
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:34 2015 +0800

      clocksource/drivers/arm_global_timer: Prevent ftrace recursion

      Currently arm_global_timer can be used as a scheduler clock. We properly
      marked gt_sched_clock_read() as notrace but we then call another function
      gt_counter_read() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding an extra notrace function to keep other users of
      gt_counter_read() traceable.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 195562194aad3a0a3915941077f283bcc6347b9b
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Mon Oct 26 01:50:28 2015 -0700

      Input: alps - only the Dell Latitude D420/430/620/630 have separate stick 
button bits

      commit 92bac83dd79e ("Input: alps - non interleaved V2 dualpoint has
      separate stick button bits") assumes that all alps v2 non-interleaved
      dual point setups have the separate stick button bits.

      Later we limited this to Dell laptops only because of reports that this
      broke things on non Dell laptops. Now it turns out that this breaks things
      on the Dell Latitude D600 too. So it seems that only the Dell Latitude
      D420/430/620/630, which all share the same touchpad / stick combo,
      have these separate bits.

      This patch limits the checking of the separate bits to only these models
      fixing regressions with other models.

      Reported-and-tested-by: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Tested-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-By: Pali Rohár <pali.rohar@xxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit ababae44108b0e94b58eef6cb5bd830bd040a47f
  Author: Werner Pawlitschko <werner.pawlitschko@xxxxxxxx>
  Date:   Tue Oct 27 09:08:04 2015 +0900

      x86/ioapic: Prevent NULL pointer dereference in setup_ioapic_dest()

      Commit 4857c91f0d19 changed the way how irq affinity is setup in
      setup_ioapic_dest() from using the core helper function to
      unconditionally calling the irq_set_affinity() callback of the
      underlying irq chip.

      That results in a NULL pointer dereference for the rare case where the
      underlying irq chip is lapic_chip which has no irq_set_affinity()
      callback. lapic_chip is occasionally used for the timer interrupt (irq
      0).

      The fix is simple: Check the availability of the callback instead of
      calling it unconditionally.

      Fixes: 4857c91f0d19 "x86/ioapic: Force affinity setting in 
setup_ioapic_dest()"
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 858e904bd71dd0057a548d6785d94ce5ec4aeabd
  Merge: ce6f988 cbf3ccd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:44:13 2015 +0900

      Merge tag 'iommu-fixes-v4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu

      Pull iommu fixes from Joerg Roedel:
       "Two late fixes for the AMD IOMMU driver:

         - add an additional check to the io page-fault handler to avoid a
           BUG_ON being hit in handle_mm_fault()

         - fix a problem with devices writing to the system management area
           and were blocked by the IOMMU because the driver wrongly cleared
           out the DTE flags allowing that access"

      * tag 'iommu-fixes-v4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu:
        iommu/amd: Don't clear DTE flags when modifying it
        iommu/amd: Fix BUG when faulting a PROT_NONE VMA

  commit ce6f9886037f5566cb8e440b9caa5e7d7334e53b
  Merge: 896066e 8bce6d3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:41:48 2015 +0900

      Merge tag 'md/4.3-rc6-fixes' of git://neil.brown.name/md

      Pull md fixes from Neil Brown:
       "Some raid1/raid10 fixes.

        I meant to get this to you before -rc7, but what with all the travel
        plans..

        Two fixes for bugs that are in both raid1 and raid10.  Both related to
        bad-block-lists and at least one needs to be back ported to 3.1.

        Also a revision for the "new" layout in raid10.  This "new" code
        (which aims to improve robustness) actually reduces robustness in some
        cases.  It probably isn't in use at all as not public user-space code
        makes use of these new layouts.  However just in case someone has
        their own code, it would be good to get the WARNing out for them
        sooner"

      * tag 'md/4.3-rc6-fixes' of git://neil.brown.name/md:
        md/raid10: fix the 'new' raid10 layout to work correctly.
        md/raid10: don't clear bitmap bit when bad-block-list write fails.
        md/raid1: don't clear bitmap bit when bad-block-list write fails.
        md/raid10: submit_bio_wait() returns 0 on success
        md/raid1: submit_bio_wait() returns 0 on success

  commit 896066ee1cf4d653057dac4e952f49c96ad16fa7
  Merge: 85051e2 22ca7ca
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:40:01 2015 +0900

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Last fixes from me: one amdgpu/radeon suspend resume and one leak fix,
        along with one vmware fix for some issues when command submission
        fails"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/amdgpu: don't try to recreate sysfs entries on resume
        drm/radeon: don't try to recreate sysfs entries on resume
        drm/amdgpu: stop leaking page flip fence
        drm/vmwgfx: Stabilize the command buffer submission code

  commit 182475b7a2831abf7e6ca83b2aced0bef5dcdfd3
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Mon Oct 26 16:55:56 2015 -0400

      memremap: fix highmem support

      Currently memremap checks if the range is "System RAM" and returns the
      kernel linear address.  This is broken for highmem platforms where a
      range may be "System RAM", but is not part of the kernel linear mapping.
      Fallback to ioremap_cache() in these cases, to let the arch code attempt
      to handle it.

      Note that ARM ioremap will WARN when attempting to remap ram, and in
      that case the caller needs to be fixed.  For this reason, existing
      ioremap_cache() usages for ARM are already trained to avoid attempts to
      remap ram.

      The impact of this bug is low for now since the pmem driver is the only
      user of memremap(), but this is important to fix before more conversions
      to memremap arrive in 4.4.

      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reported-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 01b19455c08cc37d1c3ef174524278e84c92fec1
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:26 2015 +0900

      perf tools: Setup pager when printing usage and help

      It's annoying to see error or help message when command has many options
      like in perf record, report or top.  So setup pager when print parser
      error or help message - it should be OK since no UI is enabled at the
      parsing time.  The usage_with_options() already disables it by calling
      exit_browser() anyway.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-3-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b272a59d835cd8ca6b45f41c66c61b473996c759
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:25 2015 +0900

      perf report: Rename to --show-cpu-utilization

      So that it can be more consistent with other --show-* options.  The old
      name (--showcpuutilization) is provided only for compatibility.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a5f4a6932ec2e1a53642e97a1be64bc7b169942f
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:24 2015 +0900

      perf tools: Improve ambiguous option help message

      Currently if an option name is ambiguous it only prints first two
      matched option names but no help.  It'd be better it could show all
      possible names and help messages too.

      Before:
        $ perf report --show
          Error: Ambiguous option: show (could be --show-total-period or
                                                  --show-ref-call-graph)
         Usage: perf report [<options>]

      After:
        $ perf report --show
          Error: Ambiguous option: show (could be --show-total-period or
                                                  --show-ref-call-graph)
         Usage: perf report [<options>]

            -n, --show-nr-samples
                                    Show a column with the number of samples
                --showcpuutilization
                                    Show sample percentage for different cpu 
modes
            -I, --show-info         Display extended information about 
perf.data file
                --show-total-period
                                    Show a column with the sum of periods
                --show-ref-call-graph
                                    Show callgraph from reference event

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c0963772cbbf1b7dc9fad4497f3aba8526bb07d6
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:24:38 2015 +0200

      rtl8xxxu: fix unused rtl8192cu_fops compiler warning

      kbuild reported:

      rtl8xxxu.c:5786:32: warning: â??rtl8192cu_fopsâ?? defined but not used 
[-Wunused-variable]

      Fix it by adding temporary ifdefs around the static functions.

      Fixes: 033695bdf6d7 ("rtl8xxxu: move devices supported by rtlwifi under 
UNTESTED config")
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit a7cedab6ccd7f02c86476ae52760a5d0482806fa
  Author: Lokesh Vutla <lokeshvutla@xxxxxx>
  Date:   Tue Oct 20 16:50:06 2015 -0500

      mmc: omap_hsmmc: Enable omap_hsmmc for Keystone 2

      Enable omap_hsmmc for Keystone 2 architecture which reuses the HSMMC
      IP found on OMAP platforms.

      Signed-off-by: Franklin S Cooper Jr <fcooper@xxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e839b134761444e5988d5eee1ef54a0ff2327344
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 21 11:15:46 2015 +0300

      mmc: sdhci-acpi: Add more ACPI HIDs for Intel controllers

      Add ACPI HIDs for Intel host controllers including one
      supporting HS400.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4fd4c0655b82b0f81841b915ef1e70e2141d4a38
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 21 11:15:45 2015 +0300

      mmc: sdhci-pci: Add more PCI IDs for Intel controllers

      Add PCI IDs for Intel host controllers

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b3b78f2cb2eeca47f3b81dd795fd341a337363c4
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:43:01 2015 +0800

      arm: lpc18xx_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Joachim Eastwood <manabian@xxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit fdd36e530e0f29b86aaa2013e0d9dee0964ecf6f
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:49 2015 +0800

      arm: hisi_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Wei Xu <xuwei5@xxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 391ce1e0eb0af2cb5d85273a142061fb77ecf135
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:37 2015 +0800

      arm: exynos_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 005a5243aab6a2d45910233593bf9cba4f207bf2
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:20 2015 +0800

      arc: axs10x_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b13af8f9685e85d0a0939aae8c5fce53f8e90186
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:05 2015 +0800

      mips: pistachio_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Govindraj Raja <govindraj.raja@xxxxxxxxxx>
      Acked-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 87ffa7d30d0be24f4bcf08005f145903c5ef55b7
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:41:50 2015 +0800

      Documentation: synopsys-dw-mshc: add bindings for idmac and edmac

      synopsys-dw-mshc supports three types of transfer mode. We add
      bindings and description for how to use them at runtime.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 70692752af12e2dbae48685b1d07fe7bdb2fab31
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:41:37 2015 +0800

      mmc: dw_mmc: use macro for HCON register operations

      This patch add some macros for HCON register operations
      to make code more readable.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 3fc7eaef44dbcbcd602b6bcd0ac6efba7a30b108
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:41:23 2015 +0800

      mmc: dw_mmc: Add external dma interface support

      DesignWare MMC Controller can supports two types of DMA
      mode: external dma and internal dma. We get a RK312x platform
      integrated dw_mmc and ARM pl330 dma controller. This patch add
      edmac ops to support these platforms. I've tested it on RK31xx
      platform with edmac mode and RK3288 platform with idmac mode.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9e4703df3aa9829a84d6ccf19c6062ba19a8de71
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:44:03 2015 +0800

      mmc: sdhci-of-esdhc: avoid writing power control register

      The eSDHC doesn't have a standard power control register, so when
      writing this register in stack we should do nothing to avoid
      incorrect operation.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit a599579ee8e32daebdfa4d97b24389c680ef5789
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 01:40:16 2015 +0300

      DT: mmc: sh_mmcif: document R8A7794 support

      Renesas R8A7794 SoC also has the MMCIF controller.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 76d63c2b59d4a1481bedc65a3ef25e9d1354dca3
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 01:39:39 2015 +0300

      DT: mmc: sh_mmcif: fix "compatible" property text

      The "compatible" property text contradicts even the example given in the 
MMCIF
      binding document itself;  moreover, the Renesas MMCIF driver only matches 
 on
      the generic "compatible" string and doesn't look for the SoC specific 
strings
      at all. Thus describe "renesas,sh-mmcif" as a fallback value.

      Fixes: b4c27763d749 ("mmc: sh_mmcif: Document DT bindings")
      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2860d060ac902df0164cc9580f843b101e27a2c6
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:53:03 2015 +0300

      mmc: skip reclaiming host on mmc_add_card() error

      There's little sense in releasing the host on mmc_add_card() error
      immediately after reclaiming  it, so reclaim the host  only in case
      of success.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7f8a9a7e98f99e9cd874eaf6ca2f00438c2a7c38
  Author: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 17:08:32 2015 +0100

      mmc: android-goldfish: Allow compiling the driver with COMPILE_TEST

      The driver depends on GOLDFISH but there isn't a build dependency
      so it's a good idea to allow the driver to always be built when the
      COMPILE_TEST option is enabled.

      That way, the driver can be built with a config generated by make
      allyesconfig and check if a patch would break the build.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Reviewed-by: Jean Delvare <jdelvare@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c41d31f71d8889919d2f3becbccd6d2d7a3bd243
  Author: Heiko Stuebner <heiko@xxxxxxxxx>
  Date:   Mon Oct 12 14:48:30 2015 +0200

      ARM: dts: rockchip: add tuning related settings to veyron devices

      This allows the tuning code to run and use higher speeds on capable cards.

      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f71ddc5873cb90ffb217de50aed8bdd2fb00fc9f
  Author: Alexandru M Stan <amstan@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:29 2015 +0200

      ARM: dts: rockchip: Add drive/sample clocks for rk3288 dw_mmc devices

      The drive/sample clocks can be phase shifted.  The drive clock
      could be used in a future patch to adjust hold times.  The sample
      clock is used for tuning.

      Signed-off-by: Alexandru M Stan <amstan@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit cbb79e43c82635840cdcbf71b1d1c374e2c3a025
  Author: Alexandru M Stan <amstan@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:28 2015 +0200

      mmc: dw_mmc-rockchip: MMC tuning with the clock phase framework

      This algorithm will try 1 degree increments, since there's no way to tell
      what resolution the underlying phase code uses. As an added bonus, doing
      many tunings yields better results since some tests are run more than once
      (ex: if the underlying driver uses 45 degree increments, the tuning code
      will try the same angle more than once).

      It will then construct a list of good phase ranges (even ranges that cross
      360/0), will pick the biggest range then it will set the sample_clk to the
      middle of that range.

      We do not touch ciu_drive (and by extension define default-drive-phase).
      Drive phase is mostly used to define minimum hold times, while one could
      write some code to determine what phase meets the minimum hold time (ex 10
      degrees) this will not work with the current clock phase framework (which
      floors angles, so we'll get 0 deg, and there's no way to know what
      resolution the floors happen at). We assume that the default drive angles
      set by the hardware are good enough.

      If a device has device specific code (like exynos) then that will still
      take precedence, otherwise this new code will execute. If the device wants
      to tune, but has no sample_clk defined we'll return EIO with an error
      message.

      Signed-off-by: Alexandru M Stan <amstan@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f8085bbada3b124b5b39b61bb1a7a0a78c24604b
  Author: Alexandru M Stan <amstan@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:27 2015 +0200

      mmc: dw_mmc-rockchip: dt-binding: Add tuning related things

      Add ciu_drive, ciu_sample clocks and default-sample-phase. This will later
      be used by tuning code.

      We do not touch ciu_drive (and by extension define default-drive-phase).
      Drive phase is mostly used to define minimum hold times, while one could
      write some code to determine what phase meets the minimum hold time
      (ex 10 degrees) this will not work with the current clock phase framework
      (which floors angles, so we'll get 0 deg, and there's no way to know what
      resolution the floors happen at). We assume that the default drive angles
      set by the hardware are good enough.

      Signed-off-by: Alexandru M Stan <amstan@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e0848f5d294c703917260a6228cc08b8be46c527
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:26 2015 +0200

      mmc: dw_mmc: Use mmc_regulator_set_vqmmc in start_signal_voltage_switch

      We've introduced a new helper in the MMC core:
      mmc_regulator_set_vqmmc().  Let's use this in dw_mmc.  Using this new
      helper has some advantages:

      1. We get the mmc_regulator_set_vqmmc() behavior of trying to match
         VQMMC and VMMC when the signal voltage is 3.3V.  This ensures max
         compatibility.

      2. We get rid of a few more warnings when probing unsupported
         voltages.

      3. We get rid of some non-dw_mmc specific code in dw_mmc.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2086f801cb2a796279e817e68255654c4cfd3be3
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:25 2015 +0200

      mmc: core: Add mmc_regulator_set_vqmmc()

      This adds logic to the MMC core to set VQMMC.  This is expected to be
      called by MMC drivers like dw_mmc as part of (or instead of) their
      start_signal_voltage_switch() callback.

      A few notes:

      * When setting the signal voltage to 3.3V we do our best to make VQMMC
        and VMMC match.  It's been reported that this makes some old cards
        happy since they were tested back in the day before UHS when VQMMC
        and VMMC were provided by the same regulator.  A nice side effect of
        this is that we don't end up on the hairy edge of VQMMC (2.7V),
        which some EEs claim is a little too close to the minimum for
        comfort.
        This is done in two steps. At first we try to find a VQMMC within
        a 0.3V tolerance of VMMC and if this is not supported by the
        supplying regulator we try to find a suitable voltage within the
        whole 2.7V-3.6V area of the spec.

      * The two step approach is currently necessary, as the used
        regulator_set_voltage_triplet(min, target, max) uses a simple
        implementation that just tries two basic steps:
        regulator_set_voltage(target, max);
        regulator_set_voltage(min, target);
        So with only one step with 2.7-3.6V borders, if a suitable voltage
        is a bit below VMMC, we would directly get the lowest 2.7V
        which some boards (like Rockchips) don't like at all.

      * When setting the signal voltage to 1.8V or 1.2V we aim for that
        specific voltage instead of picking the lowest one in the range.

      * We very purposely don't print errors in mmc_regulator_set_vqmmc().
        There are cases where the MMC core will try several different
        voltages and we don't want to pollute the logs.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 310c805e7f133443cd57f880b73557a4a8f54b30
  Author: Heiko Stuebner <heiko@xxxxxxxxx>
  Date:   Mon Oct 12 18:00:54 2015 +0200

      mmc: core: move ocr-bit to voltage translation into separate function

      We will shortly need the calculation of an ocr-bit to the actual
      voltage in a second place too, so move it from mmc_regulator_set_ocr
      to a common function mmc_ocrbitnum_to_vdd to make that possible.

      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9eadcc0581a8ccaf4c2378aa1c193fb164304f1d
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Fri Oct 2 10:56:11 2015 +0200

      mmc: core: Remove MMC_CLKGATE

      MMC_CLKGATE was once invented to save power by gating the bus clock at
      request inactivity. At that time it served its purpose. The modern way to
      deal with power saving for these scenarios, is by using runtime PM.

      Nowadays, several host drivers have deployed runtime PM, but for those
      that haven't and which still cares power saving at request inactivity,
      it's certainly time to deploy runtime PM as it has been around for several
      years now.

      To simplify code to mmc core and thus decrease maintenance efforts, this
      patch removes all code related to MMC_CLKGATE.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a22950c888e3770c958a5c489906b48d3764a783
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:57 2015 +0800

      mmc: sdhci-of-esdhc: add quirk SDHCI_QUIRK_BROKEN_TIMEOUT_VAL for ls1021a

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2ca635242ec40c8d575e337a0b2b0a1928ad6581
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:47 2015 +0800

      mmc: kconfig: reconfigure MMC_SDHCI_OF_ESDHC option

      Freescale eSDHC driver now supports both little-endian and
      big-endian mode eSDHC IPs for ARM and PPC. So, MMC_SDHCI_OF_ESDHC
      option needs to be reconfigured.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f4932cfd22f151af19d552c0ee607b2fb9c41b53
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:36 2015 +0800

      mmc: sdhci-of-esdhc: support both BE and LE host controller

      To support little endian eSDHC controller, we redefine both BE and
      LE IO accessors. In the new accessors, use ioread*/iowrite* instead
      of in_be32/out_be32 and will select accessors according to endian
      mode in probe function.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e38eeca5c23389f9a606e4847f0f9731b2e889f2
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:23 2015 +0800

      mmc: dt: add DT binding for little-endian eSDHC host controller

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 06bf9c565444643ce2732f8a297f76b953acde6b
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Oct 6 10:26:21 2015 +0300

      mmc: sdhci-pci: Add another PCI ID for an Intel eMMC host controller

      Add another PCI ID for an Intel eMMC host controller.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4351f19a337d48a780762d076408ebe9b0c1f945
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Wed Sep 30 16:07:38 2015 +0200

      clk: rockchip: Make calculations use rounding

      Let's use DIV_ROUND_CLOSEST for rounding, not just truncating
      division.  This lets us get closer to the right rate.

      Before this:
        set_phase(86) delay_nums=26 reg[0xf000420c]=0x468 actual_degrees=83
        set_phase(89) delay_nums=27 reg[0xf000420c]=0x46c actual_degrees=86

      After this:
        set_phase(86) delay_nums=27 reg[0xf000420c]=0x46c actual_degrees=86
        set_phase(89) delay_nums=28 reg[0xf000420c]=0x470 actual_degrees=90

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f0232063fb64fc79bfb7b6b35d611b2e4a79ffe6
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Wed Sep 30 16:07:37 2015 +0200

      clk: rockchip: Allow more precision for some mmc clock phases

      Because of the inexact nature of the extra MMC delay elements (it's
      not possible to keep the phase monotonic and to also make phases (mod
      90) > 70), we previously only allowed phases (mod 90) of 22.5, 45,
      and 67.5.

      But it's not the end of the world if the MMC clock phase goes
      non-monotonic.  At most we'll be 25 degrees off.  It's way better to
      test more phases to look for bad ones than to be 25 degrees off, because
      in the case of MMC really the point is to find bad phases and get as far
      asway from the as possible.  If we get to test extra phases by going
      slightly non-monotonic then that might be fine.  Worst case we would
      end up at a phases that's slight differnt than the one we wanted, but
      at least we'd still be quite far away from the a bad phase.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Fold in more precise variance-values of 44-77 instead of 40-80.
      Fold in the actual removal of the monotonic requirement and adapt
      patch message accordingly.
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7582041ff3d4aaa348894858d6384c4a9981c5fc
  Author: kbuild test robot <lkp@xxxxxxxxx>
  Date:   Tue Oct 6 04:01:04 2015 +0800

      mmc: sdhci-pci: fix simple_return.cocci warnings

      drivers/mmc/host/sdhci-pci-core.c:447:1-4: WARNING: end returns can be 
simpified

       Simplify a trivial if-return sequence.  Possibly combine with a
       preceding function call.

      Generated by: scripts/coccinelle/misc/simple_return.cocci

      CC: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f0cbd7806d736d77714994cc41c5161c0a29cccf
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 20:31:58 2015 +0100

      mmc: sdhci-pci: Make sdhci_pci_o2_fujin2_pci_init() static

      It has no external callers.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 659c9bc114a810b3a3c1e50585cc57f1312a6d60
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 20:31:18 2015 +0100

      mmc: sdhci-pci: Build o2micro support in the same module

      sdhci-pci-o2micro.c contains no initialisation and its functions are only
      called from shdci-pci.c, so there is no reason for it to be a separate
      module, let alone or for it to always be built-in.

      - Rename sdhci-pci.c to sdhci-pci-core.c so that the sdhci-pci module
        can be built from multiple source files
      - Add sdhci-pci-o2micro.c to it
      - Remove redundant exports

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 0de9125fa823e526c9f68dc0987aae342ec94cbd
  Author: Weijun Yang <york.yang@xxxxxxx>
  Date:   Sun Oct 4 12:04:13 2015 +0000

      mmc: sirf: fix the capbility to support DDR50

      According to hardware spec, validate DDR50 mode
      for SDXC.

      Signed-off-by: Weijun Yang <york.yang@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9faac7b95ea4f9e83b7a914084cc81ef1632fd91
  Author: Weijun Yang <york.yang@xxxxxxx>
  Date:   Sun Oct 4 12:04:12 2015 +0000

      mmc: sdhci: enable tuning for DDR50

      CMD19 tuning is also available for DDR50 mode.

      Signed-off-by: Weijun Yang <york.yang@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4324f6de6d2eb9b232410eb0d67bfafdde8ba711
  Author: Weijun Yang <york.yang@xxxxxxx>
  Date:   Sun Oct 4 12:04:11 2015 +0000

      mmc: core: enable CMD19 tuning for DDR50 mode

      As SD Specifications Part1 Physical Layer Specification Version
      3.01 says, CMD19 tuning is available for unlocked cards in transfer
      state of 1.8V signaling mode. The small difference between v3.00
      and 3.01 spec means that CMD19 tuning is also available for DDR50
      mode.

      Signed-off-by: Weijun Yang <york.yang@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b093410c9aef29efbf2f4af7b00b2dcc1c119fe8
  Author: Grant Grundler <grundler@xxxxxxxxxxxx>
  Date:   Wed Sep 23 18:30:33 2015 -0700

      mmc: block: copy resp[] data on err for MMC_IOC_MULTI_CMD

      MMC_IOC_CMD and MMC_IOC_MULTI_CMD ioctl() code currently bails on
      any eMMC errors. However, in case there is any resp[] data, we
      should attempt to copy resp[] back to user space. The user app
      can then determine which command(s) failed in the MMC_IOC_MULTI_CMD
      case AND/OR report better diagnostics in both cases.

      Gwendal Grignou provided the idea and it was previously implemented
      and tested on v3.18 ChromeOS kernel:
          https://chromium-review.googlesource.com/#/c/299956

      Signed-off-by: Grant Grundler <grundler@xxxxxxxxxxxx>
      Reviewed-by: Hyung Taek Ryoo <hryoo@xxxxxxxxxx>
      Reviewed-by: Gwendal Grignou <gwendal@xxxxxxxxxxxx>
      Tested-by: David Riley <davidriley@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 85f45058eeef94fdc9f533cca8e17679e44f1177
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Thu Sep 24 08:13:43 2015 +0800

      mmc: debugfs: implement ios show for SDR12 and SDR25

      This patch add MMC_TIMING_UHS_SDR12 and MMC_TIMING_UHS_SDR25
      for mmc_ios_show to show the ios->timing if mmc card runs under
      these two modes.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c1590dd86d6e34df214f30a501682e392be0ba3c
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Sep 22 17:30:26 2015 +0200

      mmc: sunxi: Add card busy detection

      Some sdio wifi modules have not been working reliable with the sunxi-mmc
      host code. This turns out to be caused by starting new io-rw commands 
while
      the card signals that it is still busy processing a previous command.

      This commit adds card-busy detection to the sunxi-mmc driver which 
together
      with recent core changes to check card-busy before starting io-rw commands
      fixes the wifi reliability issues on the Cubietruck and other sunxi boards
      using sdio wifi.

      Reported-by: Eugene K <sigintmailru@xxxxxxxxx>
      Suggested-by: Eugene K <sigintmailru@xxxxxxxxx>
      Cc: Eugene K <sigintmailru@xxxxxxxxx>
      Cc: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 5d3f6ef04d65dda92a3573841a7215fb05c347de
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Sep 22 17:30:25 2015 +0200

      mmc: Wait for card_busy before starting sdio requests

      Some sdio wifi chips will not work properly if we try to start new
      sdio-rw requests while the device is signalling that it is busy.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit de98c55682790437fb3c6b5335f2bf3ce20539db
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Sep 22 17:30:24 2015 +0200

      mmc: Add mmc_is_io_op helper function

      Add a helper function to check if an opcode is a sd-io-rw-* opcode.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit a5f5774c55a2e3ed75f4d6c5556b7bfcb726e6f0
  Author: Jon Hunter <jonathanh@xxxxxxxxxx>
  Date:   Tue Sep 22 10:27:53 2015 +0100

      mmc: block: Add new ioctl to send multi commands

      Certain eMMC devices allow vendor specific device information to be read
      via a sequence of vendor commands. These vendor commands must be issued
      in sequence and an atomic fashion. One way to support this would be to
      add an ioctl function for sending a sequence of commands to the device
      atomically as proposed here. These multi commands are simple array of
      the existing mmc_ioc_cmd structure.

      The structure passed via the ioctl uses a __u64 type to specify the number
      of commands (so that the structure is aligned on a 64-bit boundary) and a
      zero length array as a header for list of commands to be issued. The
      maximum number of commands that can be sent is determined by
      MMC_IOC_MAX_CMDS (which defaults to 255 and should be more than
      sufficient).

      This based upon work by Seshagiri Holi <sholi@xxxxxxxxxx>.

      Signed-off-by: Seshagiri Holi <sholi@xxxxxxxxxx>
      Signed-off-by: Jon Hunter <jonathanh@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit aaa58d0e932c518bdb1d9dc767876d7a8c68e17e
  Author: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:36:10 2015 +0800

      mmc: sdhci-pltfm: enable interrupt mode to detect card for ls1021a

      Enable interrupt mode to detect card instead of polling mode for
      ls1021a by removing the quirk SDHCI_QUIRK_BROKEN_CARD_DETECTION.
      This could improve data transferring performance and avoid the call
      trace caused by polling card status sometime.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit ce037275861ea6c016ab88a6b884adb8c481db31
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 14:14:54 2015 +0200

      mmc: pwrseq_simple: use GPIO descriptors array API

      The simple power sequence provider sets a value for multiple GPIOs in one
      go so it is better to use the API already provided by the GPIO descriptor
      API instead of open coding the same logic.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 8131e815f723ec8fee018d6fa34348d61c0e54b8
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Sep 22 14:00:44 2015 +0800

      mmc: mediatek: Add MMC_CAP_RUNTIME_RESUME support

      Add MMC_CAP_RUNTIME_RESUME support to save resume time
      Drop unnecessary SDC_ARG write

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit d1f23f9304f303e15200c8b7940eeeeb1a1c8c6a
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Tue Sep 22 09:20:08 2015 +0800

      mmc: debugfs: implement ios show for driver type

      This patch add ios->drv_type for mmc_ios_show to show the
      card's driver type.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b73f34c22d283f049347f7f625c272ec22830eb3
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 23:50:25 2015 +0200

      mmc: omap: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 774523539fff7bf34499b7b088dc8b2c0b4a04bc
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 23:49:59 2015 +0200

      mmc: moxart: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e02b9d7cbfe1536aef9e7ba7751993d7eca6e829
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Thu Sep 17 15:09:54 2015 +0200

      mmc: sdhci-pltfm: Use of_property_read_u32 instead of open-coding it

      Use of_property_read_u32 instead of of_get_property with return value
      checks and endianness conversion.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bf7241d02eb4704beeaa055cb027ba7b28344a0e
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:12:07 2015 +0200

      mmc: mmc_spi: Export OF module alias information

      Drivers needs to export the OF id table and this be built into
      the module or udev won't have the necessary information to autoload
      the driver module when the device is registered via OF.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 930d50f7fd49fe485d9126ffd26dcc0428d7920a
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 09:19:49 2015 +0300

      mmc: sdhci-of-at91: remove a line of dead code

      The goto is correct and the unreachable "return -EINVAL" should be
      removed.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 14a7b416434a8076afb2dea8bb51c6514b41a47b
  Author: Haibo Chen <haibo.chen@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 18:32:58 2015 +0800

      mmc: sdhci: call sdhci_init() before request irq

      sdhci_init() will clear all irqs and set the needed irqs. So
      logically sdhci_init() should be called before request irq.

      If not, some irqs may be triggled and handled wrongly. Take
      the following into consideration, after request irq, if
      SDIO card interrupt enabled, a sd card in the sd slot will
      trigger a mass of interrupt(SDHCI_INT_CARD_INT), because at
      this time, the vmmc-regulator still not restore, no voltage
      supply for the sd card, so the pin of data0~data3 change and
      keep low, interrupt(SDHCI_INT_CARD_INT) will rise up ceaselessly.
      Due to we already reguest irq, system will be busy in handling
      this endless irq, can't response to other event.

      So we should call sdhci_init() before request irq in sd resume.

      Signed-off-by: Haibo Chen <haibo.chen@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 28804293b9086100ae784a15d62ebf6249db433c
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:53:20 2015 +0200

      mmc: sdhci-bcm-kona: fix logic to check for 8-bit data width

      The driver prints if the data width is 8-bit but it's using a
      binary OR instead of a binary AND so it will always report as
      "is_8bit=Y" regardless of the flags in host->mmc->caps.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit a30b55119d086d33bd6046dfdd4723c810fd2579
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 14:00:35 2015 +0200

      mmc: pwrseq: use gpiod_get() instead of index 0

      The gpiod_get() function expands to gpiod_get_index() with index 0
      so it's better to use it since is easier to read and more concise.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f90d2e4035d456cb20c0b784725d556eb4de4d8a
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Tue Sep 15 15:19:45 2015 +0200

      mmc: core: Convert __mmc_switch() into an internal core function

      As there are no users of the __mmc_switch() API, except for the mmc core
      itself, let's convert it from an exported function into an internal.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7eece8d0e436e1eabc6b0adb04872964afe20b35
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:30:04 2015 +0200

      mmc: vub300: Remove unneded semicolons

      They aren't needed and are just creating null statements so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 17a90539710d090d7bfb736c071a94451dc09170
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:30:03 2015 +0200

      mmc: wbsd: Remove unneded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bf8b8511af7721e6f81848a1fd1359716602f3b7
  Author: Yousong Zhou <yszhou4tech@xxxxxxxxx>
  Date:   Thu Sep 10 00:33:16 2015 +0800

      mmc: sd: Remove superfluous error code assignment

      Signed-off-by: Yousong Zhou <yszhou4tech@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 8d1ffc8c982e4480059ef735e8f15f631e40e80c
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Fri Sep 11 14:41:55 2015 +0200

      mmc: core: Keep host claimed while invoking mmc_power_off|up()

      As mmc_claim_host() invokes pm_runtime_get_sync() for the mmc host device,
      it's important that the host is kept claimed for *all* accesses to it via
      the host_ops callbacks.

      In some code paths for SDIO, particularly related to the PM support,
      mmc_power_off|up() is invoked without keeping the host claimed. Let's fix
      these.

      Moreover, mmc_start|stop_host() also invokes mmc_power_off|up() without
      claiming the host, let's fix these as well.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Acked-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit 0cd2f04453fcb7bf3f38a4a72d1619636b4afa57
  Author: Michele Curti <michele.curti@xxxxxxxxx>
  Date:   Sat Sep 5 08:49:52 2015 +0200

      mmc: sdhci-acpi: detect sd card reader on asus x205ta

      Add an entry to the sdhci_acpi_uids list to detect the SD card
      reader on the Asus X205Ta laptop.

      dstd table:

      Device (SDHC)
      {
          Name (_ADR, Zero)  // _ADR: Address
          Name (_HID, "PNP0FFF")  // _HID: Hardware ID
          Name (_CID, "PNP0D40" /* SDA Standard Compliant SD Host Controller */)
          Name (_DDN, "Intel(R) SD Card Controller - 80860F16")  // _DDN: DOS 
Dev
          Name (_UID, 0x03)  // _UID: Unique ID
          Name (RDEP, Package (0x02)

      Signed-off-by: Michele Curti <michele.curti@xxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 10af309a86669878099b40cec24dbb52aca1d3ed
  Merge: 3f84ccf 660c40b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Mon Oct 26 14:49:11 2015 +0100

      Merge branch 'sh-pfc-for-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/renesas-drivers into devel

  commit 6057d40f41a30f234533e5cf28810dd3fd2b6995
  Author: YD Tseng <ltyu101@xxxxxxxxx>
  Date:   Mon Oct 19 11:07:37 2015 +0800

      gpio: driver for AMD Promontory

      This patch adds a new GPIO driver for AMD Promontory chip.

      This GPIO controller is enumerated by ACPI and the ACPI compliant
      hardware ID is AMDF030.

      Change history:

      v2: 1. fix coding style
          2. registers renaming
      v3: 1. change include file
          2. fix coding style
          3. remove module_init/exit, add module_platform_driver
          4. remove MODULE_ALIAS
      v4: 1. change TOTAL_GPIO_PINS to PT_TOTAL_GPIO
          2. remove PCI dependency in Kconfig
          3. fix subject line

      Signed-off-by: YD Tseng <Yd_Tseng@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a4283e41bbd80c629770f954cc5d013eb8851229
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sat Oct 10 23:41:42 2015 +0200

      arm: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      The of_node_put is duplicated in front of each error return, because the
      function contains a later error return that is beyond the end of the
      for_each_child_of_node and thus doesn't need of_node_put.

      The semantic patch that fixes this problem is as follows
      (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      iterator name for_each_child_of_node;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }

      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      +  of_node_put(child);
      ?  break;
         ...
      }
      ... when != child
      // </smpl>

      Additionally, concatenated a string in an affected line to avoid 
introducing
      a checkpatch warning.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 59fbcbc61e1f0fd9acdf3efb09faca0320049718
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:15:45 2015 +0200

      arcnet: add netif_carrier_on/off for reconnect

      The arcnet device has no interrupt to detect if the link has changed
      from disconnected to connected. This patch adds an timer to toggle the
      link detection. The timer will get retriggered as long as the
      reconnection interrupts accure. If the recon interrupts hold off
      for >1s we define the connection stable again.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 8890624a4e8c2c7046d63bfd15d7331af9f55f10
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 18 00:12:50 2014 +0200

      arcnet: com20020-pci: add led trigger support

      The EAE PLX-PCI card has special leds on the the main io pci resource
      bar. This patch adds support to trigger the conflict and data leds with
      the packages.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 5ef216c1f84825c6942fdd6c24d12a08ac2df135
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 18 00:12:50 2014 +0200

      arcnet: com20020-pci: add rotary index support

      The EAE PLX-PCI card has a special rotary encoder
      to configure the address of every card individually.
      We take this information for the initial setup of
      the cards dev_id.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit ae8ede6a0cdcf3b21596f44dff30bbd02265bb41
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Fri Mar 20 15:22:24 2015 +0100

      arcnet: com20020-pci: set dev_port to the subdevice index

      This patch sets the dev_port according to the index of
      the card. This can be used by udev to name the ports
      in userspace.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 27daf6ed5c1fbeca9029c59c7f4f70a5c7e13531
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Fri Mar 20 15:20:59 2015 +0100

      arcnet: com20020: add enable and disable device on open/close

      This patch changes the driver to properly work with the linux netif
      interface. The controller gets enabled on open and disabled on close.
      Therefor it removes every bogus start of the xceiver. It only gets
      enabled on com20020_open and disabled on com20020_close.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit b82de0e28ccac15e1a0c3b4f6f20dfd230049041
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Apr 22 16:41:46 2015 +0200

      arcnet: move dev_free_skb to its only user

      The call for dev_free_skb is done only once. This patch
      moves its call to its only user and removes the obsolete
      condition variable.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit c4297e8f7f453c83a75c2cbd93e57d8d9f36a316
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Mon Oct 26 02:08:38 2015 +0100

      Bluetooth: Fix some obvious coding style issues in the SCO module

      Lets fix this obvious coding style issues in the SCO module and bring it
      in line with the rest of the Bluetooth subsystem.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 05fcd4c4f1011858fe86dd7423304d8cae8e8d2e
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 25 23:29:22 2015 +0100

      Bluetooth: Replace hci_notify with hci_sock_dev_event

      There is no point in wrapping hci_sock_dev_event around hci_notify. It
      is an empty wrapper which adds no value. So remove it.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 242c0ebd3730334c43b9c04eeec40d8dd5c3a26e
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 25 22:45:53 2015 +0100

      Bluetooth: Rename bt_cb()->req into bt_cb()->hci

      The SKB context buffer for HCI request is really not just for requests,
      information in their are preserved for the whole HCI layer. So it makes
      more sense to actually rename it into bt_cb()->hci and also call it then
      struct hci_ctrl.

      In addition that allows moving the decoded opcode for outgoing packets
      into that struct. So far it was just consuming valuable space from the
      main shared items. And opcode are not valid for L2CAP packets.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit d94a61040d8f99cbaf7f3e7686315edcc6dc2400
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 25 22:45:18 2015 +0100

      Bluetooth: Remove unneeded parenthesis around MSG_OOB

      There are two checks that are still using (MSG_OOB) instead of just
      MSG_OOB and so lets just fix them.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 298a96c12b2d8fd845ae0c2c21c0a1c0b470f99e
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 23:11:43 2015 +0200

      x86/dma-mapping: Fix arch_dma_alloc_attrs() oops with NULL dev

      Commit 6894258eda2f broke drivers that pass NULL as the device pointer
      to dma_alloc. The reason is that arch_dma_alloc_attrs() now calls
      dma_alloc_coherent_gfp_flags() which in turn calls
      dma_alloc_coherent_mask(), where the device pointer is dereferenced
      unconditionally.

      Fix things by moving the ISA DMA fallback device assignment before the
      call to dma_alloc_coherent_gfp_flags().

      Fixes: 6894258eda2f ("dma-mapping: consolidate 
dma_{alloc,free}_{attrs,coherent}")
      Reported-and-tested-by: Meelis Roos <mroos@xxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Link: 
http://lkml.kernel.org/r/1445807503-8920-1-git-send-email-ville.syrjala@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ba723199d18eeb5021cd6ace4aaf90670d6b3133
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:35 2015 +0100

      NFC: st21nfca: Fix st21nfca_gates offset

      It is useless to start from index 0 when looking for a gate
      because only dynamic pipes are retrieved with
      ST21NFCA_DM_GETINFO(ST21NFCA_DM_GETINFO_PIPE_LIST).

      The first dynamic pipe is present at index 3.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit d3f13c558f2501d4bd0212030f692bc56fbcb755
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:34 2015 +0100

      NFC: st-nci: Fix st_nci_gates offset

      It is useless to start from index 0 when looking for a gate
      because only dynamic pipes are retrieved with
      ST_NCI_DM_GETINFO(ST_NCI_DM_GETINFO_PIPE_LIST).

      The first dynamic pipe is present at index 3.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 7e35740438bafcc8be0e05ff2461b73d631caeb0
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:33 2015 +0100

      NFC: st-nci: Add support for NCI_HCI_IDENTITY_MGMT_GATE

      NCI_HCI_IDENTITY_MGMT_GATE might be useful to get information
      about hardware or firmware version.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 404b3e585b15d7431a0ffa5cf67090569fad88c1
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:32 2015 +0100

      NFC: st-nci: initialize gate_count in st_nci_hci_network_init

      When initializing ndev->hci_dev->init_data, only gates field
      was set. gate_count needs to be initialized as well.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 92d108b6f4fcabf45df5fa9631cfc4ada35e9ab1
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:31 2015 +0100

      NFC: st21nfca: Keep st21nfca_gates unchanged in load_session

      We need to keep initial st_nci_gates values in order for
      nfc_hci_dev_connect_gates to create and open pipe when necessary.

      For example after a firmware update CLF pipes are cleared. Changing
      pipe values in st21nfca_gates was causing nfc_hci_dev_connect_gates
      not using accurate pipes value.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 22c84c5b23932161546b7b16c61a6eb85bf587b8
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:30 2015 +0100

      NFC: st-nci: Keep st_nci_gates unchanged in load_session

      We need to keep initial st_nci_gates values in order for
      nci_hci_dev_connect_gates to create and open pipe when necessary.

      For example after a firmware update CLF pipes are cleared. Changing
      pipe values in st_nci_gates was causing nci_hci_dev_connect_gates
      not using accurate pipes value.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 6443ce97d2266b24f8315cb7e3ff99adf822a597
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:29 2015 +0100

      NFC: st21nfca: Open NFC_HCI_LINK_MGMT_PIPE

      NFC_HCI_LINK_MGMT_PIPE was never opened in nfc_hci_load_session.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 9dfe29f1796f9d92db6e7d33a3fc8ed8e496912a
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:28 2015 +0100

      NFC: st-nci: Open NCI_HCI_LINK_MGMT_PIPE

      NCI_HCI_LINK_MGMT_PIPE was never opened in st_nci_hci_load_session.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 4d37a772b7437bed2ffb94e391a0534198588d20
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:27 2015 +0100

      NFC: st21nfca: Remove HCI gates initialization in load_session

      hdev->init_data.gates is already initialized in st21nfca_hci_probe.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 543a0a301fb831f19a37ac06fbe8094e0b5a2c73
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:26 2015 +0100

      NFC: st-nci: Remove HCI init_data.gates initialization in load_session

      ndev->hci_dev->init_data.gates is already initialized in
      st_nci_hci_network.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a1b0b9415817c14d207921582f269d03f848b69f
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:25 2015 +0100

      NFC: nci: Create pipe on specific gate in nci_hci_connect_gate

      Some gates might need to have their pipes explicitly created.
      Add a call to nci_hci_create_pipe in nci_hci_connect_gate for
      every gate that is different than NCI_HCI_LINK_MGMT_GATE or
      NCI_HCI_ADMIN_GATE.

      In case of an error when opening a pipe, like in hci layer,
      delete the pipe if it was created.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 8a49943f5bc5ff4f835d50451ecf2380eab44d2e
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:24 2015 +0100

      NFC: nci: Call nci_hci_clear_all_pipes at HCI initial activation.

      When session_id is filled to 0xff, the pipe configuration is
      probably incorrect and needs to be cleared.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit fa6fbadea5d3618339fae8f9d5136a470bad4fa7
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:23 2015 +0100

      NFC: nci: add nci_hci_clear_all_pipes functions

      nci_hci_clear_all_pipes might be use full in some cases
      for example after a firmware update.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit e65917b6d54f8b47d8293ea96adfa604fd46cf0d
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:22 2015 +0100

      NFC: nci: extract pipe value using NCI_HCP_MSG_GET_PIPE

      When receiving data in nci_hci_msg_rx_work, extract pipe
      value using NCI_HCP_MSG_GET_PIPE macro.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit d8cd37ed2fc871c66b4c79c59f651dc2cdf7091c
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:21 2015 +0100

      NFC: nci: Fix improper management of HCI return code

      When sending HCI data over NCI, HCI return code is part
      of the NCI data. In order to get correctly the HCI return
      code, we assume the NCI communication is successful and
      extract the return code for the nci_hci functions return code.

      This is done because nci_to_errno does not match hci return
      code value.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 500c4ef02277eaadbfe20537f963b6221f6ac007
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:20 2015 +0100

      NFC: nci: Fix incorrect data chaining when sending data

      When sending HCI data over NCI, cmd information should be
      present only on the first packet.
      Each packet shall be specifically allocated and sent to the
      NCI layer.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a1269dd116319335db6d73013a31c038486c813e
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:19 2015 +0100

      NFC: st-nci: Fix incorrect spi buffer size

      When sending data over SPI, the maximum expected length is the maximum
      nci packet payload + data header size + the frame head room (1 for the
      ndlc header) + the frame trail room (0).

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 1c54795da05a792e495387317240625696d37abd
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:18 2015 +0100

      NFC: st21nfca: Align st21nfca driver with other nfc driver

      Align st21nfca driver with or nfc driver:
      - Remove st21nfca_ prefix
      - Merge st21nfca_se.h, st21nfca_dep.h in st21nfca.h

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit d1611c3aba11ffa281bdd027aace52f5a370b8c5
  Author: Michael Chan <mchan@xxxxxxxxxxxx>
  Date:   Sun Oct 25 22:27:57 2015 -0400

      bnxt_en: Fix compile warnings when CONFIG_INET is not set.

      bnxt_gro_skb() has unused variables when CONFIG_INET is not set.  We
      really cannot support hardware GRO if CONFIG_INET is not set, so
      compile out bnxt_gro_skb() completely and define BNXT_FLAG_GRO to be 0
      if CONFIG_INET is not set.  This will effectively always disable
      hardware GRO if CONFIG_INET is not set.

      Signed-off-by: Michael Chan <mchan@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e67e7e596f3ff19fb90520be9f2130aa54914181
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:17 2015 +0100

      NFC: st-nci: include st-nci.h instead of ndlc.h

      st-nci.h already include ndlc.h.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit f5876627715e3584db379a0549f8ce6f3f06e2bc
  Author: Christophe Ricard <christophe-h.ricard@xxxxxx>
  Date:   Mon Oct 26 05:55:22 2015 +0100

      NFC: st-nci: Align st-nci driver with other nfc driver

      Align st-nci driver with other NFC drivers:
      - Remove st-nci_ prefix
      - Merge se.h in st-nci.h

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 85051e295fb7487fd22546f86058e99d5266dd88
  Merge: 32b8819 5dd32ea
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:29:16 2015 +0900

      Merge branch 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux

      Pull i2c fixes from Wolfram Sang:
       "Two driver bugfixes for the I2C subsystem"

      * 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:
        i2c: pnx: fix runtime warnings caused by enabling unprepared clock
        i2c: mv64xxx: really allow I2C offloading

  commit f7e1b37ec84730c759eee54289f61f30e59d79de
  Merge: 30aa7b1 abb1ed7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:28:23 2015 -0700

      Merge branch 'gianfar-fixes'

      Claudiu Manoil says:

      ====================
      gianfar: Misc. fixes and updates

      Various fixes for some older issues, including having a
      MAINTAINERS entry for this driver.
      I'd recommend applying them on top of net, thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit abb1ed7b793fcb10cadb378fe0eeee589b61a9e1
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:42:01 2015 +0300

      MAINTAINERS: Add entry for gianfar ethernet driver

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1de65a5ea32de7b335ab505366d45cefadbbdf71
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:42:00 2015 +0300

      gianfar: Fix Rx BSY error handling

      The Rx BSY error interrupt indicates that a frame was
      received and discarded due to lack of buffers, so it's
      a rx ring overflow condition and has nothing to do with
      with bad rx packets.  Use the right counter.

      BSY conditions happen when the SoC is under performance
      stress.  Doing *more* work in stress situations by trying
      to schedule NAPI is not a good idea as the stressed system
      becomes still more stressed.  The Rx interrupt is already
      at work making sure the NAPI is scheduled.
      So calling gfar_receive() here does not help.  This issue
      was present since day 1.

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 15bf176db1fb00333af7050c0c699fc7b4e4a960
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:41:59 2015 +0300

      gianfar: Don't enable the Filer w/o the Parser

      Under one unusual circumstance it's possible to wrongly set
      FILREN without enabling PRSDEP as well in the RCTRL register,
      against the hardware specifications.  With the default config
      this does not happen because the default Rx offloads (Rx csum
      and Rx VLAN) properly enable PRSDEP.  But if anyone disables
      all these offloads (via ethtool), we get a wrong configuration
      were the Rx flow classification and hashing, and other Filer
      based features (e.g. wake-on-filer interrupt) won't work.
      This patch fixes the issue.
      Also, account for Rx FCB insertion which happens every time
      PRSDEP is set.

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5188f7e5a7175975f8b943a4b25e499c98a7b9d6
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:41:58 2015 +0300

      gianfar: Remove duplicated argument to bitwise OR

      RQFCR_AND is duplicated.
      Add missing space as well.

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ed770f60317a02a5a5e4a7345dc13d8819f56e8
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 15:09:04 2015 -0400

      net: encx24j600: Fix mask to update LED configuration

      This fixes the mask used to update the LED configuration so that it clears
      the necessary bits as well as setting the bits according to the mask.
      Also reverse the LED configuration to show the Link state + collisions in
      LEDA and the Link state + TX/RX events in LEDB.

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit da92bf99dd9f4b62df6168787bf0a92dc7d1bce7
  Merge: 1586a58 e483911
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:20:41 2015 -0700

      Merge branch 'mvneta-ethtool-stats'

      Russell King says:

      ====================
      mvneta ethtool statistics

      Sorry for v3 - I forgot to update the commit message on patch 1 as
      requested by Marcin.

      This short series adds ethtool statistics reporting to mvneta.  Having
      discussed with Andrew on IRC, we decided I'd pick up his patch into my
      series.

      My change for patch 1 compared to the previous RFC splits out the
      reading of the statistics from the hardware into a separate function,
      in order to facilitate work going on elsewhere to arrange for the
      statistics to be preserved across a suspend/resume cycle.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e483911f9f16d508dd2652ac860977533b96e34e
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Thu Oct 22 18:37:36 2015 +0100

      net: mvneta: Fix clearing of MIB statistics

      The existing function to clear the MIB statatistics was using the
      wrong address for the registers. Also, the counters would of been
      cleared when the interface was brought up, not during the
      probe. Fix both of these.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9b0cdefa4cd5dca85967f66da8ab376c0321b845
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 18:37:30 2015 +0100

      net: mvneta: add ethtool statistics

      Add support for the ethtool statistic interface, returning the full set
      of statistics which both Armada 370, 38x and Armada XP can support.

      Tested-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 30aa7b18e8f997a6c35e8d866642396a787afbb8
  Merge: ce9d9b8 34411b6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:13:37 2015 -0700

      Merge branch 'thunderx-fixes'

      David Daney says:

      ====================
      net: thunderx: Support pass-2 revision hardware.

      With the availability of a new revision of the ThunderX NIC hardware a
      few changes to the driver are required.  With these, the driver works
      on all currently available hardware revisions.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34411b68b132e403ddf395419e986475a9993d9b
  Author: Thanneeru Srinivasulu <tsrinivasulu@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 17:14:10 2015 -0700

      net: thunderx: Incorporate pass2 silicon CPI index configuration changes

      Add support for ThunderX pass2 CPI and MPI configuration changes.
      MPI_ALG is not enabled i.e MCAM parsing is disabled.

      Signed-off-by: Thanneeru Srinivasulu <tsrinivasulu@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 88ed237720bd618240439714a57fb69ea96428e7
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Fri Oct 23 17:14:09 2015 -0700

      net: thunderx: Rewrite silicon revision tests.

      The test for pass-1 silicon was incorrect, it should be for all
      revisions less than 8.  Also the revision is already present in the
      pci_dev, so there is no need to read and keep a private copy.

      Remove rev_id and code to read it from struct nicpf.  Create new
      static inline function pass1_silicon() to be used to testing the
      silicon version.  Use pass1_silicon() for revision checks, this will
      be more widely used in follow on patches.

      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e85777ff071b51f500b130b6d036922af32be25
  Author: Sunil Goutham <sgoutham@xxxxxxxxxx>
  Date:   Fri Oct 23 17:14:08 2015 -0700

      net: thunderx: Fix incorrect subsystem devid of VF on pass2 silicon

      Signed-off-by: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9bf45e08ef36b6726a5744f0029325e81b3248a
  Author: Sunil Goutham <sgoutham@xxxxxxxxxx>
  Date:   Fri Oct 23 17:14:07 2015 -0700

      net: thunderx: Remove PF soft reset.

      In some silicon revisions, the soft reset clobbers PCI config space,
      so quit doing the reset.

      Signed-off-by: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03f136a2074b2b8890da4a24df7104558ad0da48
  Author: Jason A. Donenfeld <Jason@xxxxxxxxx>
  Date:   Tue Jul 14 19:24:45 2015 +0200

      timeconst: Update path in comment

      Signed-off-by: Jason A. Donenfeld <Jason@xxxxxxxxx>
      Cc: hofrat@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1436894685-5868-1-git-send-email-Jason@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 209da39154837ec1b69fb34f438041939911e4b4
  Author: Lucas Stach <dev@xxxxxxxxxx>
  Date:   Sun Oct 25 16:39:12 2015 +0100

      irqchip/tegra: Propagate IRQ type setting to parent

      The LIC doesn't deal with the different types of interrupts itself
      but needs to forward calls to set the appropriate type to its parent
      IRQ controller.

      Without this fix all IRQs routed through the LIC will stay at the
      initial EDGE type, while most of them should actually be level triggered.

      Fixes: 1eec582158e2 "irqchip: tegra: Add Tegra210 support"
      Signed-off-by: Lucas Stach <dev@xxxxxxxxxx>
      Cc: Stephen Warren <swarren@xxxxxxxxxxxxx>
      Cc: Thierry Reding <thierry.reding@xxxxxxxxx>
      Cc: Alexandre Courbot <gnurou@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1
      Link: 
http://lkml.kernel.org/r/1445787552-13062-1-git-send-email-dev@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 353d6d6c82e5d2533ba22e7f9fb081582bf50dc2
  Author: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 15:48:15 2015 +0200

      irqchip/armada-370-xp: Fix regression by clearing IRQ_NOAUTOEN

      Commit d17cab4451df1 ("irqchip: Kill off set_irq_flags usage") changed
      the code of armada_370_xp_mpic_irq_map() from using set_irq_flags() to
      irq_set_probe().

      While the commit log seems to imply that there are no functional
      changes, there are indeed functional changes introduced by this
      commit: the IRQ_NOAUTOEN flag is no longer cleared. This functional
      change causes a regression on Armada XP, which no longer works
      properly after suspend/resume because per-CPU interrupts remain
      disabled.

      Due to how the hardware registers work, the irq-armada-370-xp cannot
      simply save/restore a bunch of registers at suspend/resume to make
      sure that the interrupts remain in the same state after
      resuming. Therefore, it relies on the kernel to say whether the
      interrupt is disabled or not, using the irqd_irq_disabled()
      function. This was all working fine while the IRQ_NOAUTOEN flag was
      cleared.

      With the change introduced by Rob Herring in d17cab4451df1, the
      IRQ_NOAUTOEN flag is now set for all interrupts. irqd_irq_disabled()
      returns false for per-CPU interrupts, and therefore our per-CPU
      interrupts are no longer re-enabled after resume.

      This commit works around this problem by clearing again the
      IRQ_NOAUTOEN flags, so that we are back to the situation we had before
      commit d17cab4451df1. This work around is proposed as a minimal fix
      for the problem, while a better long-term solution is being worked on.

      Fixes: d17cab4451df1 "irqchip: Kill off set_irq_flags usage"
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Link: 
https://lkml.kernel.org/r/1445435295-19956-1-git-send-email-thomas.petazzoni@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1da5537eccd865b83fedbbb7ea704669f6d255fd
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 5 18:44:17 2015 +0200

      Bluetooth: Fix locking issue during fast SCO reconnection.

      When SCO connection is requested and disconnected fast, there is a change
      that sco_sock_shutdown is going to preempt thread started in 
sco_connect_cfm.
      When this happens struct sock sk may be removed but a pointer to it is 
still
      held in sco_conn_ready, where embedded spinlock is used. If it is used, 
but
      struct sock has been removed, it will crash.

      Block connection object, which will prevent struct sock from being removed
      and give connection process chance to finish.

      BUG: spinlock bad magic on CPU#0, kworker/u:2H/319
       lock: 0xe3e99434, .magic: f3000000, .owner: (���/0, .owner_cpu: 
-203804160
      Pid: 319, comm: kworker/u:2H Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      Call Trace:
       [<c1155659>] ? do_raw_spin_lock+0x19/0xe9
       [<fb75354f>] ? sco_connect_cfm+0x92/0x236 [bluetooth]
       [<fb731dbc>] ? hci_sync_conn_complete_evt.clone.101+0x18b/0x1cb 
[bluetooth]
       [<fb734ee7>] ? hci_event_packet+0x1acd/0x21a6 [bluetooth]
       [<c1041095>] ? finish_task_switch+0x50/0x89
       [<c1349a2e>] ? __schedule+0x638/0x6b8
       [<fb727918>] ? hci_rx_work+0xb9/0x2b8 [bluetooth]
       [<c103760a>] ? queue_delayed_work_on+0x21/0x2a
       [<c1035df9>] ? process_one_work+0x157/0x21b
       [<fb72785f>] ? hci_cmd_work+0xef/0xef [bluetooth]
       [<c1036217>] ? worker_thread+0x16e/0x20a
       [<c10360a9>] ? manage_workers+0x1cf/0x1cf
       [<c103a0ef>] ? kthread+0x8d/0x92
       [<c134adf7>] ? ret_from_kernel_thread+0x1b/0x28
       [<c103a062>] ? __init_kthread_worker+0x24/0x24
      BUG: unable to handle kernel NULL pointer dereference at   (null)
      IP: [<  (null)>]   (null)
      *pdpt = 00000000244e1001 *pde = 0000000000000000
      Oops: 0010 [#1] PREEMPT SMP
      Modules linked in: evdev ecb rfcomm(O) libcomposite usb2380 udc_core 
bnep(O) btusb(O) btbcm(O) cdc_acm btintel(O) bluetooth(O) arc4 uinput 
hid_multitouch usbhid hid iwlmvm(O)e
      Pid: 319, comm: kworker/u:2H Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      EIP: 0060:[<00000000>] EFLAGS: 00010246 CPU: 0
      EIP is at 0x0
      EAX: e3e99400 EBX: e3e99400 ECX: 00000100 EDX: 00000000
      ESI: e3e99434 EDI: fb763ce0 EBP: e49b9e44 ESP: e49b9e14
       DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
      CR0: 8005003b CR2: 00000000 CR3: 24444000 CR4: 001007f0
      DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      DR6: ffff0ff0 DR7: 00000400
      Process kworker/u:2H (pid: 319, ti=e49b8000 task=e4ab9030 
task.ti=e49b8000)
      Stack:
       fb75355b 00000246 fb763900 22222222 22222222 22222222 e3f94460 e3ca7c0a
       e49b9e4c e3f34c00 e3ca7c0a fb763ce0 e49b9e6c fb731dbc 02000246 e4cec85c
       e4cec008 00000000 e3f34c00 e4cec000 e3c2ce00 0000002c e49b9ed0 fb734ee7
      Call Trace:
       [<fb75355b>] ? sco_connect_cfm+0x9e/0x236 [bluetooth]
       [<fb731dbc>] ? hci_sync_conn_complete_evt.clone.101+0x18b/0x1cb 
[bluetooth]
       [<fb734ee7>] ? hci_event_packet+0x1acd/0x21a6 [bluetooth]
       [<c1041095>] ? finish_task_switch+0x50/0x89
       [<c1349a2e>] ? __schedule+0x638/0x6b8
       [<fb727918>] ? hci_rx_work+0xb9/0x2b8 [bluetooth]
       [<c103760a>] ? queue_delayed_work_on+0x21/0x2a
       [<c1035df9>] ? process_one_work+0x157/0x21b
       [<fb72785f>] ? hci_cmd_work+0xef/0xef [bluetooth]
       [<c1036217>] ? worker_thread+0x16e/0x20a
       [<c10360a9>] ? manage_workers+0x1cf/0x1cf
       [<c103a0ef>] ? kthread+0x8d/0x92
       [<c134adf7>] ? ret_from_kernel_thread+0x1b/0x28
       [<c103a062>] ? __init_kthread_worker+0x24/0x24
      Code:  Bad EIP value.
      EIP: [<00000000>] 0x0 SS:ESP 0068:e49b9e14
      CR2: 0000000000000000
      ---[ end trace 942a6577c0abd725 ]---

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 435c513369768f5840cd57101e398bc450fd26de
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 5 18:44:16 2015 +0200

      Bluetooth: Fix locking issue on SCO disconnection

      Thread handling SCO disconnection may get preempted in '__sco_sock_close'
      after dropping a reference to hci_conn but before marking this as NULL
      in associated struct sco_conn. When execution returs to this thread,
      this connection will possibly be released, resulting in kernel crash

      Lock connection before this point.

      BUG: unable to handle kernel NULL pointer dereference at   (null)
      IP: [<fb770ab9>] __sco_sock_close+0x194/0x1ff [bluetooth]
      *pdpt = 0000000023da6001 *pde = 0000000000000000
      Oops: 0002 [#1] PREEMPT SMP
      Modules linked in: evdev ecb rfcomm(O) libcomposite usb2380 udc_core 
bnep(O) btusb(O) btbcm(O) cdc_acm btintel(O) bluetooth(O) arc4 uinput 
hid_multitouch usbhid iwlmvm(O) hide
      Pid: 984, comm: bluetooth Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      EIP: 0060:[<fb770ab9>] EFLAGS: 00010282 CPU: 2
      EIP is at __sco_sock_close+0x194/0x1ff [bluetooth]
      EAX: 00000000 EBX: e49d7600 ECX: ef1ec3c2 EDX: 000000c3
      ESI: e4c12000 EDI: 00000000 EBP: ef1edf5c ESP: ef1edf4c
       DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
      CR0: 80050033 CR2: 00000000 CR3: 23da7000 CR4: 001007f0
      DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      DR6: ffff0ff0 DR7: 00000400
      Process bluetooth (pid: 984, ti=ef1ec000 task=e47f2550 task.ti=ef1ec000)
      Stack:
       e4c120d0 e49d7600 00000000 08421a40 ef1edf70 fb770b7a 00000002 e8a4cc80
       08421a40 ef1ec000 c12966b1 00000001 00000000 0000000b 084954c8 c1296b6c
       0000001b 00000002 0000001b 00000002 00000000 00000002 b2524880 00000046
      Call Trace:
       [<fb770b7a>] ? sco_sock_shutdown+0x56/0x95 [bluetooth]
       [<c12966b1>] ? sys_shutdown+0x37/0x53
       [<c1296b6c>] ? sys_socketcall+0x12e/0x1be
       [<c134ae7e>] ? sysenter_do_call+0x12/0x26
       [<c1340000>] ? ip_vs_control_net_cleanup+0x46/0xb1
      Code: e8 90 6b 8c c5 f6 05 72 5d 78 fb 04 74 17 8b 46 08 50 56 68 0a fd 
77 fb 68 60 5d 78 fb e8 68 95 9e c5 83 c4 10 8b 83 fc 01 00 00 <c7> 00 00 00 00 
00 eb 32 ba 68 00 00 0b
      EIP: [<fb770ab9>] __sco_sock_close+0x194/0x1ff [bluetooth] SS:ESP 
0068:ef1edf4c
      CR2: 0000000000000000
      ---[ end trace 47fa2f55a9544e69 ]---

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 75e34f5cf69bd731d3b7375a786d4a15494fb8c6
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 5 18:44:15 2015 +0200

      Bluetooth: Fix crash on SCO disconnect

      When disconnecting audio from the phone's side, it may happen, that
      a thread handling HCI message 'disconnection complete' will get preempted
      in 'sco_conn_del' before calling 'sco_sock_kill', still holding a pointer
      to struct sock sk. Interrupting thread started in 'sco_sock_shutdown' will
      carry on releasing resources and will eventually release struct sock.
      When execution goes back to first thread it will call sco_sock_kill using
      now invalid pointer to already destroyed socket.

      Fix is to grab a reference to the socket a release it after calling
      'sco_sock_kill'.

      [  166.358213] BUG: unable to handle kernel paging request at 7541203a
      [  166.365228] IP: [<fb6e8bfb>] bt_sock_unlink+0x1a/0x38 [bluetooth]
      [  166.372068] *pdpt = 0000000024b19001 *pde = 0000000000000000
      [  166.378483] Oops: 0002 [#1] PREEMPT SMP
      [  166.382871] Modules linked in: evdev ecb rfcomm(O) libcomposite 
usb2380 udc_core bnep(O) btusb(O) btbcm(O) btintel(O) cdc_acm bluetooth(O) arc4 
uinput hid_multitouch iwlmvm(O) usbhid hide
      [  166.424233] Pid: 338, comm: kworker/u:2H Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      [  166.435112] EIP: 0060:[<fb6e8bfb>] EFLAGS: 00010206 CPU: 0
      [  166.441259] EIP is at bt_sock_unlink+0x1a/0x38 [bluetooth]
      [  166.447382] EAX: 632e6563 EBX: e4bfc600 ECX: e466d4d3 EDX: 7541203a
      [  166.454369] ESI: fb7278ac EDI: e4d52000 EBP: e4669e20 ESP: e4669e0c
      [  166.461366]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
      [  166.467391] CR0: 8005003b CR2: 7541203a CR3: 24aba000 CR4: 001007f0
      [  166.474387] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      [  166.481375] DR6: ffff0ff0 DR7: 00000400
      [  166.485654] Process kworker/u:2H (pid: 338, ti=e4668000 task=e466e030 
task.ti=e4668000)
      [  166.494591] Stack:
      [  166.496830]  e4bfc600 e4bfc600 fb715c28 e4717ee0 e4d52000 e4669e3c 
fb715cf3 e4bfc634
      [  166.505518]  00000068 e4d52000 e4c32000 fb7277c0 e4669e6c fb6f2019 
0000004a 00000216
      [  166.514205]  e4660101 e4c32008 02000001 00000013 e4d52000 e4c32000 
e3dc9240 00000005
      [  166.522891] Call Trace:
      [  166.525654]  [<fb715c28>] ? sco_sock_kill+0x73/0x9a [bluetooth]
      [  166.532295]  [<fb715cf3>] ? sco_conn_del+0xa4/0xbf [bluetooth]
      [  166.538836]  [<fb6f2019>] ? 
hci_disconn_complete_evt.clone.55+0x1bd/0x205 [bluetooth]
      [  166.547609]  [<fb6f73d3>] ? hci_event_packet+0x297/0x223c [bluetooth]
      [  166.554805]  [<c10416da>] ? dequeue_task+0xaf/0xb7
      [  166.560154]  [<c1041095>] ? finish_task_switch+0x50/0x89
      [  166.566086]  [<c1349a2e>] ? __schedule+0x638/0x6b8
      [  166.571460]  [<fb6eb906>] ? hci_rx_work+0xb9/0x2b8 [bluetooth]
      [  166.577975]  [<c1035df9>] ? process_one_work+0x157/0x21b
      [  166.583933]  [<fb6eb84d>] ? hci_cmd_work+0xef/0xef [bluetooth]
      [  166.590448]  [<c1036217>] ? worker_thread+0x16e/0x20a
      [  166.596088]  [<c10360a9>] ? manage_workers+0x1cf/0x1cf
      [  166.601826]  [<c103a0ef>] ? kthread+0x8d/0x92
      [  166.606691]  [<c134adf7>] ? ret_from_kernel_thread+0x1b/0x28
      [  166.613010]  [<c103a062>] ? __init_kthread_worker+0x24/0x24
      [  166.619230] Code: 85 63 ff ff ff 31 db 8d 65 f4 89 d8 5b 5e 5f 5d c3 
56 8d 70 04 53 89 f0 89 d3 e8 7e 17 c6 c5 8b 53 28 85 d2 74 1a 8b 43 24 85 c0 
<89> 02 74 03 89 50 04 c7 43 28 00 00 00
      [  166.640501] EIP: [<fb6e8bfb>] bt_sock_unlink+0x1a/0x38 [bluetooth] 
SS:ESP 0068:e4669e0c
      [  166.649474] CR2: 000000007541203a
      [  166.653420] ---[ end trace 0181ff2c9e42d51e ]---
      [  166.658609] note: kworker/u:2H[338] exited with preempt_count 1

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c0859e2f4ca530c0bf6a333ca3eb8430008e62c9
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:32 2015 +0200

      Bluetooth: btmrvl: add missing of_node_put

      for_each_compatible_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression e;
      local idexpression n;
      @@

       for_each_compatible_node(n, ...) {
         ... when != of_node_put(n)
             when != e = n
      (
         return n;
      |
      +  of_node_put(n);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a06347c04c13e380afce0c9816df51f00b83faf1
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:42 2015 +0300

      NFC: Add Intel Fields Peak NFC solution driver

      Fields Peak complies with the ISO/IEC 14443A/B, 15693, 18092,
      and JIS X 6319-4. It is an NCI based controller.

      RF Protocols supported:
       - NFC Forum Type 1 Tags (Jewel, Topaz)
       - NFC Forum Type 2 Tags (Mifare UL)
       - NFC Forum Type 3 Tags (FeliCa)
       - NFC Forum Type 4A (ISO/IEC 14443 A-4 106kbps to 848kbps)
       - NFC Forum Type 4B (ISO/IEC 14443 B-4 106kbps to 848kbps)
       - NFCIP in passive and active modes (ISO/IEC 18092 106kbps
         to 424kbps)
       - Bâ?? (based on ISO/IEC 14443 B-2)
       - iCLASS (based on ISO/IEC 15693-2)
       - Vicinity cards (ISO/IEC 15693-3)
       - Kovio tags (NFC Forum Type 2)

      The device can be enumerated using ACPI using the id INT339A.
      The 1st GPIO is the IRQ and the 2nd is the RESET pin.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 85b9ce9a21b119a8163f20d60e7f0ce58fffbeef
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:41 2015 +0300

      NFC: nci: add nci_get_conn_info_by_id function

      This functin takes as a parameter a pointer to the nci_dev
      struct and the first byte from the values of the first domain
      specific parameter that was used for the connection creation.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit caa575a86ec1f177730cafa089d69ab4e424860c
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:40 2015 +0300

      NFC: nci: fix possible crash in nci_core_conn_create

      If the number of destination speific parameters supplied is 0
      the call will fail. If the first destination specific parameter
      does not have a value, curr_id will be set to 0.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 22e4bd09c401905671f3787a8392d269a0ebfa0d
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:39 2015 +0300

      NFC: nci: rename nci_prop_ops to nci_driver_ops

      Initially it was used to create hooks in the driver for
      proprietary operations. Currently it is being used for hooks
      for both proprietary and generic operations.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 0a97a3cba298fd989802bf34541c94b6488c3834
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:38 2015 +0300

      NFC: nci: Allow the driver to set handler for core nci ops

      The driver may be required to act when some responses or
      notifications arrive. For example the NCI core does not have a
      handler for NCI_OP_CORE_GET_CONFIG_RSP. The NFCC can send a
      config response that has to be read by the driver and the packet
      may contain vendor specific data.

      The Fields Peak driver needs to take certain actions when a reset
      notification arrives (packet also not handled by the nfc core).

      The driver handlers do not interfere with the core and they are
      called after the core processes the packet.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 7bc4824ed5cf9feb0173b90a6bec28f694a5f7ce
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:37 2015 +0300

      NFC: nci: Introduce nci_core_cmd

      This allows sending core commands from the driver. The driver
      should be able to send NCI core commands like CORE_GET_CONFIG_CMD.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit e4dbd62528931951aa9d3b313ee7d536df5069fc
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:36 2015 +0300

      NFC: nci: Do not call post_setup when setup fails

      The driver should know that it can continue with post setup where
      setup left off. Being able to execute post_setup when setup fails
      may force the developer to keep this state in the driver.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a9433c11b1aa0639cc6e4842fff52af2422af06d
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:35 2015 +0300

      NFC: nci: Introduce new core opcodes

      Add NCI_OP_CORE_GET_CONFIG_CMD, NCI_OP_CORE_GET_CONFIG_RSP
      and NCI_OP_CORE_RESET_NTF.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2663589ce67e5429bac89544bb0e102bb1fcf617
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:34 2015 +0300

      NFC: nci: Add function to get max packet size for conn

      FDP driver needs to send the firmware as regular packets
      (not fragmented). The driver should have a way to
      get the max packet size for a given connection.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit ea785c094d38bc5eae8011330759d68f45236559
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:33 2015 +0300

      NFC: nci: Export nci data send API

      For the firmware update the driver may use nci_send_data.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit dc42143b8468b1fe6385962d1d78ddadc76c5168
  Author: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 17:05:37 2015 +0200

      NFC: st-nci: Rename st-nci_se.c

      Rename it to se.c to keep the driver files namespace consistent.

      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 1586a5877db9eee313379738d6581bc7c6ffb5e3
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 23 10:59:16 2015 -0700

      af_unix: do not report POLLOUT on listeners

      poll(POLLOUT) on a listener should not report fd is ready for
      a write().

      This would break some applications using poll() and pfd.events = -1,
      as they would not block in poll()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Alan Burlison <Alan.Burlison@xxxxxxxxxx>
      Tested-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 742e038330a485350334ee5eb75dce4a9dff87cd
  Author: Wu Fengguang <fengguang.wu@xxxxxxxxx>
  Date:   Sat Oct 24 22:56:01 2015 +0800

      tipc: link_is_bc_sndlink() can be static

      TO: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: netdev@xxxxxxxxxxxxxxx
      CC: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      CC: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      CC: tipc-discussion@xxxxxxxxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx

      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Acked-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2edb7a3372c76c9379d0fc00e4274ea8f018248a
  Author: Moshe Harel <moshe.harel@xxxxxxxxx>
  Date:   Thu Sep 10 15:29:09 2015 +0300

      iwlwifi: nvm: free old section data when reading nvm file

      When reading external NVM file, if a section exists both in OTP
      and in the external file, the memory that was allocated at OTP
      reading is not freed.
      This is possible only on systems that have an external NVM
      file which is typically the case on embedded systems.

      Signed-off-by: Moshe Harel <moshe.harel@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 06ecdba319e2b389c94c7b6a9c936d09ec188359
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Mon Oct 12 14:47:11 2015 +0300

      iwlwifi: mvm: disable TDLS ac queues correctly

      The iwl_mvm_disable_queue function requires the TID to be set to
      IWL_MAX_TID_COUNT when disabling an AC queue. Call it correctly for TDLS
      scenarios.

      Fixes: 4ecafae9e568 ("iwlwifi: mvm: support using multiple ACs on single 
HW queue")
      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 78ba82f777f3ab41f10afa3694c9c7633bf595d4
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Thu Oct 15 10:58:48 2015 +0300

      iwlwifi: mvm: take scan ref only on success

      In some cases, scan reference was taken, but wasn't
      released even though scan command wasn't actually issued.

      Change the current code to simply take the reference
      only on success.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit c8f423159e3e53d30e5b36a455797ee2072b09d0
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 11 12:07:21 2015 +0200

      iwlwifi: mvm: remove pointless scan plan checks

      As cfg80211 already enforces these limits, there's little point
      in having them again here in our code.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 46eebec9794e47ebad0352285db50a10de595bb5
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 11 12:09:22 2015 +0200

      iwlwifi: mvm: clean up some whitespace in scan code

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit effd19298c7767457772d489c88f1b7ffa6e7bd9
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Tue Jun 30 12:08:28 2015 +0300

      iwlwifi: mvm: Implement per vif frame registration API

      Implement config_iface_filter() driver op. Currently support only
      probe request registration for p2p client vifs, by setting
      MAC_FILTER_IN_PROBE_REQUEST flag in MAC_CONTEXT_CMD.
      This is needed since WFDS spec and certification require a P2P client
      to be discoverable on its operating channel.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 053225de121a950b94a1989802c22895797ffbfc
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Thu Sep 10 15:00:22 2015 +0300

      iwlwifi: avoid read/write operations if the bus is dead

      Recovery takes too much time if the bus is dead (each timeout
      is 2000ms, etc.).
      Explicitly skip fw dump in this case, as it will result in
      garbage data (and might take signifcant time)

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit cd55ccea5978d7e87852be3ea5daf89c95b7e78a
  Author: Avraham Stern <avraham.stern@xxxxxxxxx>
  Date:   Wed Aug 19 12:46:12 2015 +0300

      iwlwifi: mvm: Add support for two scheduled scan plans

      Add support for two scan plans for scheduled scan. The first plan
      will run for a limited number of iterations, then the second plan
      will run infinitely.

      Signed-off-by: Avraham Stern <avraham.stern@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 5888a40c50b181bab6737167cfc1bf653945e2a1
  Author: Luca Coelho <luciano.coelho@xxxxxxxxx>
  Date:   Tue Oct 6 09:54:57 2015 +0300

      iwlwifi: mvm: let any command flag be passed to iwl_mvm_flushtx_path()

      Instead of only allowing the caller to decide whether the CMD_ASYNC
      flag is set, let it pass the entire flags bitmask.  This allows more
      flexibility and will be needed when we call this function in the
      suspend flow (where other flags are needed).

      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit c84af35de612fb45db6b5c5968b575813f5daa3b
  Author: Assaf Krauss <assaf.krauss@xxxxxxxxx>
  Date:   Wed Aug 12 17:52:12 2015 +0300

      iwlwifi: mvm: Allow setting ctrl-chnl-position in FTM responder

      This patch enables the debugfs user to configure an FTM responder
      with the appropriate control channel position.

      Signed-off-by: Assaf Krauss <assaf.krauss@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit b08dbed71a876d982e3506a97702535fd5cff48c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 6 14:07:44 2015 +0200

      iwlwifi: mvm: use short timeouts in P2P low latency if supported

      Those timeouts are used for AM-to-PSM transition.
      We already have those pairs defined for default and WOWLAN use cases.
      We expect that by using shorter threshold for low latency P2P,
      e.g. for Miracast video scenario, we might save a considerable amount of 
power.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Avri Altman <avri.altman@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 9645edb607427a9728b9269dfded74e8c42a9d48
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 6 13:28:48 2015 +0200

      iwlwifi: mvm: use wowlan RX/TX timeouts in D0i3

      In "hostless" mode (D3 or D0i3) the same parameters were intended
      to be used, but the code doesn't do that properly. Fix it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Avri Altman <avri.altman@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 78efc702c8b6ddd6563d836f0d9844bf1f288f9b
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Tue Oct 6 12:22:47 2015 +0300

      iwlwifi: mvm: correctly request DTS-measure for new cards

      Since the 8000 series, the DTS measurement request command has been
      changed. Use an ucode capability flag to determine which version is
      supported and send the extended command when needed.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 03a19cbb91994212be72ce15ac3406fa9f8ba079
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Oct 21 19:55:32 2015 +0300

      iwlwifi: pcie: fix (again) prepare card flow

      The hardware bug in the commit mentioned below forces us
      not to re-enable the clock gating in the Host Cluster.
      The impact on the power consumption is minimal and it allows
      the WAKE_ME interrupt to propagate.

      CC: <stable@xxxxxxxxxxxxxxx> [4.1+]
      Fixes: c9fdec9f3970 ("iwlwifi: pcie: fix prepare card flow")
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit f0afea54ee0dd212186de0291ec025c63016fa39
  Author: Matti Gottlieb <matti.gottlieb@xxxxxxxxx>
  Date:   Mon Jul 20 17:55:51 2015 +0300

      iwlwifi: mvm: Dump FW's virtual image in the case of a NIC error

      When paging is enabled the driver stores part of the FW's
      image in the DRAM.

      Dump FW's virtual image in the case of a NIC error.

      Signed-off-by: Golan Ben-Ami <golan.ben.ami@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit e621c2282e310aa83a50db4da3e16dfc5945db08
  Author: Alexander Bondar <alexander.bondar@xxxxxxxxx>
  Date:   Thu Sep 3 15:42:09 2015 +0300

      iwlwifi: rs: Remove workaround that disables MIMO on P2P

      Remove an old workaround that's no longer needed and
      enable MIMO on P2P interfaces.

      Signed-off-by: Alexander Bondar <alexander.bondar@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 10d15322ed26652263a579bcb59dfd49ab8a30de
  Merge: 0316d30 e5a9f8d
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Sun Oct 25 12:38:20 2015 +0200

      Merge remote-tracking branch 'mac80211-next/master' into next

  commit 2c66e24d75d424919c42288b418d2e593fa818b1
  Author: Sai Praneeth <sai.praneeth.prakhya@xxxxxxxxx>
  Date:   Fri Oct 16 16:20:27 2015 -0700

      x86/efi: Fix kernel panic when CONFIG_DEBUG_VIRTUAL is enabled

      When CONFIG_DEBUG_VIRTUAL is enabled, all accesses to __pa(address) are
      monitored to see whether address falls in direct mapping or kernel text
      mapping (see Documentation/x86/x86_64/mm.txt for details), if it does
      not, the kernel panics. During 1:1 mapping of EFI runtime services we 
access
      virtual addresses which are == physical addresses, thus the 1:1 mapping
      and these addresses do not fall in either of the above two regions and
      hence when passed as arguments to __pa() kernel panics as reported by
      Dave Hansen here https://lkml.kernel.org/r/5462999A.7090706@xxxxxxxxxx

      So, before calling __pa() virtual addresses should be validated which
      results in skipping call to split_page_count() and that should be fine
      because it is used to keep track of everything *but* 1:1 mappings.

      Signed-off-by: Sai Praneeth Prakhya <sai.praneeth.prakhya@xxxxxxxxx>
      Reported-by: Dave Hansen <dave.hansen@xxxxxxxxx>
      Reviewed-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Ricardo Neri <ricardo.neri@xxxxxxxxx>
      Cc: Glenn P Williamson <glenn.p.williamson@xxxxxxxxx>
      Cc: Ravi Shankar <ravi.v.shankar@xxxxxxxxx>
      Signed-off-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>

  commit a01fece2e4185ac173abd16d10304d73d47ebf00
  Author: John David Anglin <dave.anglin@xxxxxxxx>
  Date:   Wed Oct 14 20:32:11 2015 -0400

      parisc: Change L1_CACHE_BYTES to 16

      Change L1_CACHE_BYTES to 16 bytes.
      Tested for 16 days on rp3440.

      Additional remarks from Helge Deller:
      Saves ~17 kb of kernel code/data and gives a slight performance 
improvement in
      various test cases.

      Signed-off-by: John David Anglin <dave.anglin@xxxxxxxx>
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit c59f419bdd1f056e1ceacbd29f7be7bcff746a5d
  Author: Helge Deller <deller@xxxxxx>
  Date:   Sun Oct 25 10:00:32 2015 +0100

      net/xps: Fix calculation of initial number of xps queues

      The existing code breaks on architectures where the L1 cache size
      (L1_CACHE_BYTES) is smaller or equal the size of struct xps_map.

      The new code ensures that we get at minimum one initial xps queue, or 
even more
      as long as it fits into the next multiple of L1_CACHE_SIZE.

      Signed-off-by: Helge Deller <deller@xxxxxx>
      Acked-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>

  commit 4341801873e23bbecee76dabb7c111e3693b900f
  Merge: 80fcd45 161d904
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Oct 25 09:40:31 2015 +0100

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements from Arnaldo Carvalho de Melo:

      New user-visible features:

        - Show ordered command line options when -h is used or when an
          unknown option is specified. (Arnaldo Carvalho de Melo)

        - If options are passed after -h, show just its descriptions, not
          all options. (Arnaldo Carvalho de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 32b88194f71d6ae7768a29f87fbba454728273ee
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 10:39:47 2015 +0900

      Linux 4.3-rc7

  commit 22ca7ca52e80524360b43944a0556b2a6dc1aa21
  Merge: aef8cc9 09dc138
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Sun Oct 25 05:02:33 2015 +1000

      Merge branch 'vmwgfx-fixes-4.3' of 
git://people.freedesktop.org/~thomash/linux

      I'm not sure whether this patch comes in too late, but it would be good to
      have it in. It stabilizes command submission in case of command buffer 
errors.

      * 'vmwgfx-fixes-4.3' of git://people.freedesktop.org/~thomash/linux:
        drm/vmwgfx: Stabilize the command buffer submission code

  commit aef8cc903583c5a205b696fb0a51e1eca9117321
  Merge: 01815536 c86f5ebf
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Sun Oct 25 05:01:57 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux

      Two regression fixes and a memory leak fix for amdgpu and radeon.

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: don't try to recreate sysfs entries on resume
        drm/radeon: don't try to recreate sysfs entries on resume
        drm/amdgpu: stop leaking page flip fence

  commit 687f079addba1ac7f97ce97080c2291bbe8c8dce
  Merge: ba3e208 2af5ae3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 24 06:56:54 2015 -0700

      Merge branch 'tipc-next'

      Jon Maloy says:

      ====================
      tipc: improve broadcast implementation

      The TIPC broadcast link implementation is currently complex and hard to
      follow. It also incurs some amount of code and structure duplication,
      something that can be reduced significantly with a little effort.

      This commit series introduces a number of improvements which address
      both the locking structure, the code/structure duplication issue, and
      the overall readbility of the code.

      The series consists of three main parts:

      1-7: Adaptation to the new link structure, and preparation for the next
           step. In particular, we want the broadcast transmission link to
           have a life cycle that is longer than any of its potential (unicast
           and broadcast receive links) users. This eliminates the need to
           always test for the presence of this link before accessing it.

      8-10: This is what is really new in this series. Commit #9 is by far
            the largest and most important one, because it moves most of
            the broadcast functionality into link.c, partially reusing the
            fields and functionality of the unicast link. The removal of
            the "node_map" infrastructure in commit #10 is also an important
            achievement.

      11-16: Some improvements leveraging the changes made in the previous
             commits.

      The series needs commit 53387c4e22ac ("tipc: extend broadcast link window 
size")
      and commit e53567948f82 ("tipc: conditionally expand buffer headroom over 
udp tunnel")
      which are both present in 'net' but not yet in 'net-next', to apply 
cleanly.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2af5ae372a4b6d6e2d3314af0e9c865d6d64f8d3
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:48 2015 -0400

      tipc: clean up unused code and structures

      After the previous changes in this series, we can now remove some
      unused code and structures, both in the broadcast, link aggregation
      and link code.

      There are no functional changes in this commit.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c49a0a84391bcc313b3dc2a9ceee6de684e07655
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:47 2015 -0400

      tipc: ensure binding table initial distribution is sent via first link

      Correct synchronization of the broadcast link at first contact between
      two nodes is dependent on the assumption that the binding table "bulk"
      update passes via the same link as the initial broadcast syncronization
      message, i.e., via the first link that is established.

      This is not guaranteed in the current implementation. If two link
      come up very close to each other in time, the "bulk" may quite well
      pass via the second link, and hence void the guarantee of a correct
      initial synchronization before the broadcast link is opened.

      This commit makes two small changes to strengthen this guarantee.

      1) We let the second established link occupy slot 1 of the
         "active_links" array, while the first link will retain slot 0.
         (This is in reality a cosmetic change, we could just as well keep
          the current, opposite order)

      2) We let the name distributor always use link selector/slot 0 when
         it sends it binding table updates.

      The extra traffic bias on the first link caused by this change should
      be negligible, since binding table updates constitutes a very small
      fraction of the total traffic.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c72fa872a23f03b2b9c17e88f3b0a8070924e5f1
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:46 2015 -0400

      tipc: eliminate link's reference to owner node

      With the recent commit series, we have established a one-way dependency
      between the link aggregation (struct tipc_node) instances and their
      pertaining tipc_link instances. This has enabled quite significant code
      and structure simplifications.

      In this commit, we eliminate the field 'owner', which points to an
      instance of struct tipc_node, from struct tipc_link, and replace it with
      a pointer to struct net, which is the only external reference now needed
      by a link instance.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7214bcf8753109256d635ba079938fbd6fcf713b
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:45 2015 -0400

      tipc: eliminate redundant buffer cloning at transmission

      Since all packet transmitters (link, bcast, discovery) are now sending
      consumable buffer clones to the bearer layer, we can remove the
      redundant buffer cloning that is perfomed in the lower level functions
      tipc_l2_send_msg() and tipc_udp_send_msg().

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 60852d679575b0d7ce62497938116f92654ae908
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:44 2015 -0400

      tipc: let neighbor discoverer tranmsit consumable buffers

      The neighbor discovery function currently uses the function
      tipc_bearer_send() for transmitting packets, assuming that the
      sent buffers are not consumed by the called function.

      We want to change this, in order to avoid unnecessary buffer cloning
      elswhere in the code.

      This commit introduces a new function tipc_bearer_skb() which consumes
      the sent buffers, and let the discoverer functions use this new call
      instead. The discoverer does now itself perform the cloning when
      that is necessary.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 959e1781aa230aecc90e4deb80117fd9a53dede7
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:43 2015 -0400

      tipc: introduce jumbo frame support for broadcast

      Until now, we have only been supporting a fix MTU size of 1500 bytes
      for all broadcast media, irrespective of their actual capability.

      We now make the broadcast MTU adaptable to the carrying media, i.e.,
      we use the smallest MTU supported by any of the interfaces attached
      to TIPC.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b06b281e79375fcbd9ffaec7c5fdc350b888d089
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:42 2015 -0400

      tipc: simplify bearer level broadcast

      Until now, we have been keeping track of the exact set of broadcast
      destinations though the help structure tipc_node_map. This leads us to
      have to maintain a whole infrastructure for supporting this, including
      a pseudo-bearer and a number of functions to manipulate both the bearers
      and the node map correctly. Apart from the complexity, this approach is
      also limiting, as struct tipc_node_map only can support cluster local
      broadcast if we want to avoid it becoming excessively large. We want to
      eliminate this limitation, in order to enable introduction of scoped
      multicast in the future.

      A closer analysis reveals that it is unnecessary maintaining this "full
      set" overview; it is sufficient to keep a counter per bearer, indicating
      how many nodes can be reached via this bearer at the moment. The protocol
      is now robust enough to handle transitional discrepancies between the
      nominal number of reachable destinations, as expected by the broadcast
      protocol itself, and the number which is actually reachable at the
      moment. The initial broadcast synchronization, in conjunction with the
      retransmission mechanism, ensures that all packets will eventually be
      acknowledged by the correct set of destinations.

      This commit introduces these changes.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5266698661401afc5e4a1a521cf9ba10724d10dd
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:41 2015 -0400

      tipc: let broadcast packet reception use new link receive function

      The code path for receiving broadcast packets is currently distinct
      from the unicast path. This leads to unnecessary code and data
      duplication, something that can be avoided with some effort.

      We now introduce separate per-peer tipc_link instances for handling
      broadcast packet reception. Each receive link keeps a pointer to the
      common, single, broadcast link instance, and can hence handle release
      and retransmission of send buffers as if they belonged to the own
      instance.

      Furthermore, we let each unicast link instance keep a reference to both
      the pertaining broadcast receive link, and to the common send link.
      This makes it possible for the unicast links to easily access data for
      broadcast link synchronization, as well as for carrying acknowledges for
      received broadcast packets.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd556f209af53b9cdc45df8c467feb235376c4df
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:40 2015 -0400

      tipc: introduce capability bit for broadcast synchronization

      Until now, we have tried to support both the newer, dedicated broadcast
      synchronization mechanism along with the older, less safe, RESET_MSG/
      ACTIVATE_MSG based one. The latter method has turned out to be a hazard
      in a highly dynamic cluster, so we find it safer to disable it completely
      when we find that the former mechanism is supported by the peer node.

      For this purpose, we now introduce a new capabability bit,
      TIPC_BCAST_SYNCH, to inform any peer nodes that dedicated broadcast
      syncronization is supported by the present node. The new bit is conveyed
      between peers in the 'capabilities' field of neighbor discovery messages.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2f566124570625c29c3fd79bac4d9cd97c0c31a1
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:39 2015 -0400

      tipc: let broadcast transmission use new link transmit function

      This commit simplifies the broadcast link transmission function, by
      leveraging previous changes to the link transmission function and the
      broadcast transmission link life cycle.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c1ab3f1dea3df566ad38caf98baf69c656679090
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:38 2015 -0400

      tipc: make struct tipc_link generic to support broadcast

      Realizing that unicast is just a special case of broadcast, we also see
      that we can go in the other direction, i.e., that modest changes to the
      current unicast link can make it generic enough to support broadcast.

      The following changes are introduced here:

      - A new counter ("ackers") in struct tipc_link, to indicate how many
        peers need to ack a packet before it can be released.
      - A corresponding counter in the skb user area, to keep track of how
        many peers a are left to ack before a buffer can be released.
      - A new counter ("acked"), to keep persistent track of how far a peer
        has acked at the moment, i.e., where in the transmission queue to
        start updating buffers when the next ack arrives. This is to avoid
        double acknowledgements from a peer, with inadvertent relase of
        packets as a result.
      - A more generic tipc_link_retrans() function, where retransmit starts
        from a given sequence number, instead of the first packet in the
        transmision queue. This is to minimize the number of retransmitted
        packets on the broadcast media.

      When the new functionality is taken into use in the next commits,
      we expect it to have minimal effect on unicast mode performance.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 323019069e8d96d87e9dba51f897060f94999821
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:37 2015 -0400

      tipc: use explicit allocation of broadcast send link

      The broadcast link instance (struct tipc_link) used for sending is
      currently aggregated into struct tipc_bclink. This means that we cannot
      use the regular tipc_link_create() function for initiating the link, but
      do instead have to initiate numerous fields directly from the
      bcast_init() function.

      We want to reduce dependencies between the broadcast functionality
      and the inner workings of tipc_link. In this commit, we introduce
      a new function tipc_bclink_create() to link.c, and allocate the
      instance of the link separately using this function.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0e05498e9eae16a6d8c86543e77930ec152e655e
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:36 2015 -0400

      tipc: make link implementation independent from struct tipc_bearer

      In reality, the link implementation is already independent from
      struct tipc_bearer, in that it doesn't store any reference to it.
      However, we still pass on a pointer to a bearer instance in the
      function tipc_link_create(), just to have it extract some
      initialization information from it.

      I later commits, we need to create instances of tipc_link without
      having any associated struct tipc_bearer. To facilitate this, we
      want to extract the initialization data already in the creator
      function in node.c, before calling tipc_link_create(), and pass
      this info on as individual parameters in the call.

      This commit introduces this change.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5fd9fd635104f4816da158cdac6917e99e192eac
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:35 2015 -0400

      tipc: create broadcast transmission link at namespace init

      The broadcast transmission link is currently instantiated when the
      network subsystem is started, i.e., on order from user space via netlink.

      This forces the broadcast transmission code to do unnecessary tests for
      the existence of the transmission link, as well in single mode node as
      in network mode.

      In this commit, we do instead create the link during initialization of
      the name space, and remove it when it is stopped. The fact that the
      transmission link now has a guaranteed longer life cycle than any of its
      potential clients paves the way for further code simplifcations
      and optimizations.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0043550b0a88b72216161d6f25eb0a2e0e78babf
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:34 2015 -0400

      tipc: move broadcast link lock to struct tipc_net

      The broadcast lock will need to be acquired outside bcast.c in a later
      commit. For this reason, we move the lock to struct tipc_net. Consistent
      with the changes in the previous commit, we also introducee two new
      functions tipc_bcast_lock() and tipc_bcast_unlock(). The code that is
      currently using tipc_bclink_lock()/unlock() will be phased out during
      the coming commits in this series.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6beb19a62a87ef6f7107fcd43c2cc1ebad3edfb5
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:33 2015 -0400

      tipc: move bcast definitions to bcast.c

      Currently, a number of structure and function definitions related
      to the broadcast functionality are unnecessarily exposed in the file
      bcast.h. This obscures the fact that the external interface towards
      the broadcast link in fact is very narrow, and causes unnecessary
      recompilations of other files when anything changes in those
      definitions.

      In this commit, we move as many of those definitions as is currently
      possible to the file bcast.c.

      We also rename the structure 'tipc_bclink' to 'tipc_bc_base', both
      since the name does not correctly describe the contents of this
      struct, and will do so even less in the future, and because we want
      to use the term 'link' more appropriately in the functionality
      introduced later in this series.

      Finally, we rename a couple of functions, such as tipc_bclink_xmit()
      and others that will be kept in the future, to include the term 'bcast'
      instead.

      There are no functional changes in this commit.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba3e2084f268bdfed7627046e58a2218037e15af
  Merge: a72c951 ce9d9b8
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 24 06:54:12 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Conflicts:
        net/ipv6/xfrm6_output.c
        net/openvswitch/flow_netlink.c
        net/openvswitch/vport-gre.c
        net/openvswitch/vport-vxlan.c
        net/openvswitch/vport.c
        net/openvswitch/vport.h

      The openvswitch conflicts were overlapping changes.  One was
      the egress tunnel info fix in 'net' and the other was the
      vport ->send() op simplification in 'net-next'.

      The xfrm6_output.c conflicts was also a simplification
      overlapping a bug fix.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a72c9512bf2bef12c5e66a4d910c4b348fe31d61
  Merge: 379a80a 13972ad
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 24 05:13:16 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-10-22

      Here's probably the last bluetooth-next pull request for 4.4. Among
      several other changes it contains the rest of the fixes & cleanups from
      the Bluetooth UnplugFest (that didn't need to be hurried to 4.3).

       - Refactoring & cleanups to 6lowpan code
       - New USB ids for two Atheros controllers and BCM43142A0 from Broadcom
       - Fix (quirk) for broken Broadcom BCM2045 controllers
       - Support for latest Apple controllers
       - Improvements to the vendor diagnostic message support

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 033695bdf6d79180f74893830053fcf3e8bc9d24
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Fri Oct 23 20:27:58 2015 +0300

      rtl8xxxu: move devices supported by rtlwifi under UNTESTED config

      There are still four devices which are currently supported both by the new
      rtl8xxxu driver and rtlwifi. To not break existing setups enable the 
support
      for these four devices only when CONFIG_RTL8XXXU_UNTESTED is turned on.

      Once rtl8xxxu support is found to be good enough the devices can be 
removed
      from rtlwifi and enabled by default in rtl8xxxu.

      Reported-by: Xose Vazquez Perez <xose.vazquez@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 8bce6d35b308d73cdb2ee273c95d711a55be688c
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Oct 22 13:20:15 2015 +1100

      md/raid10: fix the 'new' raid10 layout to work correctly.

      In Linux 3.9 we introduce a new 'far' layout for RAID10 which was
      supposed to rotate the replicas differently and so provide better
      resilience.  In particular it could survive more combinations of 2
      drive failures.

      Unfortunately. due to a coding error, this some did what was wanted,
      sometimes improved less than we hoped, and sometimes - in very
      unlikely circumstances - put multiple replicas on the same device so
      the redundancy was harmed.

      No public user-space tool has created arrays using this layout so it
      is very unlikely that zero-redundancy arrays actually exist.  Probably
      no arrays using any form of the new layout exist.  But we cannot be
      certain.

      So use another bit in the 'layout' number and introduce a bug-fixed
      version of the layout.
      Also when assembling an array, if it has a zero-redundancy layout,
      give a warning.

      Reported-by: Heinz Mauelshagen <heinzm@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit c340702ca26a628832fade4f133d8160a55c29cc
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Oct 24 16:23:48 2015 +1100

      md/raid10: don't clear bitmap bit when bad-block-list write fails.

      When a write fails and a bad-block-list is present, we can
      update the bad-block-list instead of writing the data.  If
      this succeeds then it is OK clear the relevant bitmap-bit as
      no further 'sync' of the block is needed.

      However if writing the bad-block-list fails then we need to
      treat the write as failed and particularly must not clear
      the bitmap bit.  Otherwise the device can be re-added (after
      any hardware connection issues are resolved) and because the
      relevant bit in the bitmap is clear, that block will not be
      resynced.  This leads to data corruption.

      We already delay the final bio_endio() on the write until
      the bad-block-list is written so that when the write
      returns: either that data is safe, the bad-block record is
      safe, or the fact that the device is faulty is safe.
      However we *don't* delay the clearing of the bitmap, so the
      bitmap bit can be recorded as cleared before we know if the
      bad-block-list was written safely.

      So: delay that until the write really is safe.
      i.e. move the call to close_write() until just before
      calling bio_endio(), and recheck the 'is array degraded'
      status before making that call.

      This bug goes back to v3.1 when bad-block-lists were
      introduced, though it only affects arrays created with
      mdadm-3.3 or later as only those have bad-block lists.

      Backports will require at least
      Commit: 95af587e95aa ("md/raid10: ensure device failure recorded before 
write request returns.")
      as well.  I'll send that to 'stable' separately.

      Note that of the two tests of R10BIO_WriteError that this
      patch adds, the first is certain to fail and the second is
      certain to succeed.  However doing it this way makes the
      patch more obviously correct.  I will tidy the code up in a
      future merge window.

      Reported-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Fixes: bd870a16c594 ("md/raid10:  Handle write errors by updating 
badblock log.")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit bd8688a199b864944bf62eebed0ca13b46249453
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Oct 24 16:02:16 2015 +1100

      md/raid1: don't clear bitmap bit when bad-block-list write fails.

      When a write fails and a bad-block-list is present, we can
      update the bad-block-list instead of writing the data.  If
      this succeeds then it is OK clear the relevant bitmap-bit as
      no further 'sync' of the block is needed.

      However if writing the bad-block-list fails then we need to
      treat the write as failed and particularly must not clear
      the bitmap bit.  Otherwise the device can be re-added (after
      any hardware connection issues are resolved) and because the
      relevant bit in the bitmap is clear, that block will not be
      resynced.  This leads to data corruption.

      We already delay the final bio_endio() on the write until
      the bad-block-list is written so that when the write
      returns: either that data is safe, the bad-block record is
      safe, or the fact that the device is faulty is safe.
      However we *don't* delay the clearing of the bitmap, so the
      bitmap bit can be recorded as cleared before we know if the
      bad-block-list was written safely.

      So: delay that until the write really is safe.
      i.e. move the call to close_write() until just before
      calling bio_endio(), and recheck the 'is array degraded'
      status before making that call.

      This bug goes back to v3.1 when bad-block-lists were
      introduced, though it only affects arrays created with
      mdadm-3.3 or later as only those have bad-block lists.

      Backports will require at least
      Commit: 55ce74d4bfe1 ("md/raid1: ensure device failure recorded before 
write request returns.")
      as well.  I'll send that to 'stable' separately.

      Note that of the two tests of R1BIO_WriteError that this
      patch adds, the first is certain to fail and the second is
      certain to succeed.  However doing it this way makes the
      patch more obviously correct.  I will tidy the code up in a
      future merge window.

      Reported-and-tested-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Cc: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Fixes: cd5ff9a16f08 ("md/raid1:  Handle write errors by updating badblock 
log.")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 161d9041782b86c5493481566539bfc058ceeaff
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Oct 23 13:27:39 2015 -0300

      perf tools: Provide help for subset of options

      Some tools have a lot of options, so, providing a way to show help just
      for some of them may come handy:

        $ perf report -h --tui

         Usage: perf report [<options>]

              --tui             Use the TUI interface

        $ perf report -h --tui --showcpuutilization -b -c

         Usage: perf report [<options>]

          -b, --branch-stack    use branch records for per branch histogram 
filling
          -c, --comms <comm[,comm...]>
                                only consider symbols in these comms
              --showcpuutilization
                                Show sample percentage for different cpu modes
              --tui             Use the TUI interface

        $

      Using it with perf bash completion is also handy, just make sure you
      source the needed file:

        $ . ~/git/linux/tools/perf/perf-completion.sh

      Then press tab/tab after -- to see a list of options, put them after -h
      and only the options chosen will have its help presented:

        $ perf report -h --
        --asm-raw              --demangle-kernel      --group
        --kallsyms             --pretty               --stdio
        --branch-history       --disassembler-style   --gtk
        --max-stack            --showcpuutilization   --symbol-filter
        --branch-stack         --dsos                 --header
        --mem-mode             --show-info            --symbols
        --call-graph           --dump-raw-trace       --header-only
        --modules              --show-nr-samples      --symfs
        --children             --exclude-other        --hide-unresolved
        --objdump              --show-ref-call-graph  --threads
        --column-widths        --fields               --ignore-callees
        --parent               --show-total-period    --tid
        --comms                --field-separator      --input
        --percentage           --socket-filter        --tui
        --cpu                  --force                --inverted
        --percent-limit        --sort                 --verbose
        --demangle             --full-source-path     --itrace
        --pid                  --source               --vmlinux
        $ perf report -h --socket-filter

         Usage: perf report [<options>]

            --socket-filter <n>
                        only show processor socket that match with this filter

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-83mcdd3wj0379jcgea8w0fxa@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 869c55b0f473fecfe6c294c6fa965dedfe469e02
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Oct 23 11:23:28 2015 -0300

      perf tools: Show tool command line options ordered

      When asking for a listing of the options, be it using -h or when an
      unknown option is passed, order it by one-letter options, then the ones
      having just long names.

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-41qh68t35n4ehrpsuazp1dx8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 379a80a1d048dcacfc2011d5d32e16d5c804b9f4
  Author: Michael Chan <mchan@xxxxxxxxxxxx>
  Date:   Fri Oct 23 15:06:19 2015 -0400

      bnxt_en: Fix compile errors when CONFIG_BNXT_SRIOV is not set.

      struct bnxt_pf_info needs to be always defined.  Move bnxt_update_vf_mac()
      to bnxt_sriov.c and add some missing #ifdef CONFIG_BNXT_SRIOV.

      Reported-by: Jim Hull <jim.hull@xxxxxxx>
      Tested-by: Jim Hull <jim.hull@xxxxxxx>
      Signed-off-by: Michael Chan <mchan@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 018155365dccecd9ea9f26e1b26fb0f960c1ee32
  Merge: dd5ae68 fd7cd06
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:52:59 2015 +0900

      Merge tag 'usb-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

      Pull USB fixes from Greg KH:
       "Here are three xhci driver fixes for reported issues for 4.3-rc7

        All have been in linux-next for a while with no problems"

      * tag 'usb-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:
        xhci: Add spurious wakeup quirk for LynxPoint-LP controllers
        xhci: handle no ping response error properly
        xhci: don't finish a TD if we get a short transfer event mid TD

  commit dd5ae6818ccd4ab0aa6f7d84e88f60a48af0fb52
  Merge: 4ee8019 f235f66
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:52:09 2015 +0900

      Merge tag 'tty-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

      Pull tty/serial fixes from Greg KH:
       "Here are two fixes that resolve reported issues, one with the 8250
        driver, and the other with the generic fbcon driver.

        Both have been in linux-next for a while"

      * tag 'tty-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:
        fbcon: initialize blink interval before calling fb_set_par
        Revert "serial: 8250_dma: don't bother DMA with small transfers"

  commit 4ee8019d3fdc6cce14129a954632c0f81d456884
  Merge: 410694e 4301de3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:51:13 2015 +0900

      Merge tag 'staging-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

      Pull staging driver fixes from Greg KH:
       "Here are four iio driver fixes for 4.3-rc7, fixing some reported
        issues.  All of these have been in linux-next for a while"

      * tag 'staging-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
        iio: mxs-lradc: Fix temperature offset
        iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
        iio: st_accel: fix interrupt handling on LIS3LV02
        iio: adc: twl4030: Fix ADC[3:6] readings

  commit 410694e214d5b479bc8b035ded0bb832f1c469b4
  Merge: 35df017 0ca81a2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:28:05 2015 +0900

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull infiniband fixes from Doug Ledford:
       "It's late in the game, I know, but these fixes seemed important enough
        to warrant a late pull request.  They all involve oopses or use after
        frees or corruptions.

        Six serious fixes:

         - Hold the mutex around the find and corresponding update of our gid

         - The ifa list is rcu protected, copy its contents under rcu to avoid
           using a freed structure

         - On error, netdev might be null, so check it before trying to
           release it

         - On init, if workqueue alloc fails, fail init

         - The new demux patches exposed a bug in mlx5 and ipath drivers, we
           need to use the payload P_Key to determine the P_Key the packet
           arrived on because the hardware doesn't tell us the truth

         - Due to a couple convoluted error flows, it is possible for the CM
           to trigger a use_after_free and a double_free of rb nodes.  Add two
           checks to prevent that.  This code has worked for 10+ years.  It is
           likely that some of the recent changes have caused this issue to
           surface.  The current patch will protect us from nasty events for
           now while we track down why this is just now showing up"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/cm: Fix rb-tree duplicate free and use-after-free
        IB/cma: Use inner P_Key to determine netdev
        IB/ucma: check workqueue allocation before usage
        IB/cma: Potential NULL dereference in cma_id_from_event
        IB/core: Fix use after free of ifa
        IB/core: Fix memory corruption in ib_cache_gid_set_default_gid

  commit 35df017c4d5571ee6f3061964d1445aae250219c
  Merge: ea1ee5f 3201ac4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:23:52 2015 +0900

      Merge tag 'dm-4.3-fixes-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull device mapper fixes from Mike Snitzer:
       "Three stable fixes (two in btree code used by DM thinp and one to
        properly store flags in DM cache metadata's superblock)"

      * tag 'dm-4.3-fixes-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm cache: the CLEAN_SHUTDOWN flag was not being set
        dm btree: fix leak of bufio-backed block in btree_split_beneath error 
path
        dm btree remove: fix a bug when rebalancing nodes after removal

  commit ea1ee5ff1b500ccdc64782ecef13d276afb08f14
  Merge: ef594c4 e27c5b9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:20:57 2015 +0900

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull block layer fixes from Jens Axboe:
       "A final set of fixes for 4.3.

        It is (again) bigger than I would have liked, but it's all been
        through the testing mill and has been carefully reviewed by multiple
        parties.  Each fix is either a regression fix for this cycle, or is
        marked stable.  You can scold me at KS.  The pull request contains:

         - Three simple fixes for NVMe, fixing regressions since 4.3.  From
           Arnd, Christoph, and Keith.

         - A single xen-blkfront fix from Cathy, fixing a NULL dereference if
           an error is returned through the staste change callback.

         - Fixup for some bad/sloppy code in nbd that got introduced earlier
           in this cycle.  From Markus Pargmann.

         - A blk-mq tagset use-after-free fix from Junichi.

         - A backing device lifetime fix from Tejun, fixing a crash.

         - And finally, a set of regression/stable fixes for cgroup writeback
           from Tejun"

      * 'for-linus' of git://git.kernel.dk/linux-block:
        writeback: remove broken rbtree_postorder_for_each_entry_safe() usage 
in cgwb_bdi_destroy()
        NVMe: Fix memory leak on retried commands
        block: don't release bdi while request_queue has live references
        nvme: use an integer value to Linux errno values
        blk-mq: fix use-after-free in blk_mq_free_tag_set()
        nvme: fix 32-bit build warning
        writeback: fix incorrect calculation of available memory for memcg 
domains
        writeback: memcg dirty_throttle_control should be initialized with 
wb->memcg_completions
        writeback: bdi_writeback iteration must not skip dying ones
        writeback: fix bdi_writeback iteration in wakeup_dirtytime_writeback()
        writeback: laptop_mode_timer_fn() needs rcu_read_lock() around 
bdi_writeback iteration
        nbd: Add locking for tasks
        xen-blkfront: check for null drvdata in blkback_changed 
(XenbusStateClosing)

  commit ef594c421a0f96197f28d205e2ee58a83c1e0e37
  Merge: 37902bc 6d69bb53
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:19:33 2015 +0900

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fixes from Sage Weil:
       "Two fixes.

        One is a stopgap to prevent a stack blowout when users have a deep
        chain of image clones.  (We'll rewrite this code to be non-recursive
        for the next window, but in the meantime this is a simple fix that
        avoids a crash.)

        The second fixes a refcount underflow"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        rbd: prevent kernel stack blow up on rbd map
        rbd: don't leak parent_spec in rbd_dev_probe_parent()

  commit 37902bc190f1396a8c232783b29ddfcaa4026028
  Merge: 0386729 0f89abf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:17:58 2015 +0900

      Merge branch 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes from Chris Mason:
       "I have two more small fixes this week:

        Qu's fix avoids unneeded COW during fallocate, and Christian found a
        memory leak in the error handling of an earlier fix"

      * 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        btrfs: fix possible leak in btrfs_ioctl_balance()
        btrfs: Avoid truncate tailing page if fallocate range doesn't exceed 
inode size

  commit 5dd32eae604ee503e5a84a4f18d1381e4cc356cb
  Author: Vladimir Zapolskiy <vz@xxxxxxxxx>
  Date:   Sat Oct 17 21:52:27 2015 +0300

      i2c: pnx: fix runtime warnings caused by enabling unprepared clock

      The driver can not be used on a platform with common clock framework
      until clk_prepare/clk_unprepare calls are added, otherwise clk_enable
      calls will fail and a WARN is generated.

      Signed-off-by: Vladimir Zapolskiy <vz@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>

  commit 3201ac452e84a8a368197d648c9b7011e061804a
  Author: Joe Thornber <ejt@xxxxxxxxxx>
  Date:   Thu Oct 22 18:10:55 2015 +0100

      dm cache: the CLEAN_SHUTDOWN flag was not being set

      If the CLEAN_SHUTDOWN flag is not set when a cache is loaded then all 
cache
      blocks are marked as dirty and a full writeback occurs.

      __commit_transaction() is responsible for setting/clearing
      CLEAN_SHUTDOWN (based the flags_mutator that is passed in).

      Fix this issue, of the cache's on-disk flags being wrong, by making sure
      __commit_transaction() does not reset the flags after the mutator has
      altered the flags in preparation for them being serialized to disk.

      before:

      sb_flags = mutator(le32_to_cpu(disk_super->flags));
      disk_super->flags = cpu_to_le32(sb_flags);
      disk_super->flags = cpu_to_le32(cmd->flags);

      after:

      disk_super->flags = cpu_to_le32(cmd->flags);
      sb_flags = mutator(le32_to_cpu(disk_super->flags));
      disk_super->flags = cpu_to_le32(sb_flags);

      Reported-by: Bogdan Vasiliev <bogdan.vasiliev@xxxxxxxxx>
      Signed-off-by: Joe Thornber <ejt@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 4dcb8b57df3593dcb20481d9d6cf79d1dc1534be
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Thu Oct 22 10:56:40 2015 -0400

      dm btree: fix leak of bufio-backed block in btree_split_beneath error path

      btree_split_beneath()'s error path had an outstanding FIXME that speaks
      directly to the potential for _not_ cleaning up a previously allocated
      bufio-backed block.

      Fix this by releasing the previously allocated bufio block using
      unlock_block().

      Reported-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Acked-by: Joe Thornber <thornber@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2871c69e025e8bc507651d5a9cf81a8a7da9d24b
  Author: Joe Thornber <ejt@xxxxxxxxxx>
  Date:   Wed Oct 21 18:36:49 2015 +0100

      dm btree remove: fix a bug when rebalancing nodes after removal

      Commit 4c7e309340ff ("dm btree remove: fix bug in redistribute3") wasn't
      a complete fix for redistribute3().

      The redistribute3 function takes 3 btree nodes and shares out the entries
      evenly between them.  If the three nodes in total contained
      (MAX_ENTRIES * 3) - 1 entries between them then this was erroneously 
getting
      rebalanced as (MAX_ENTRIES - 1) on the left and right, and (MAX_ENTRIES + 
1) in
      the center.

      Fix this issue by being more careful about calculating the target number
      of entries for the left and right nodes.

      Unit tested in userspace using this program:
      
https://github.com/jthornber/redistribute3-test/blob/master/redistribute3_t.c

      Signed-off-by: Joe Thornber <ejt@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 6d69bb536bac0d403d83db1ca841444981b280cd
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Sun Oct 11 19:38:00 2015 +0200

      rbd: prevent kernel stack blow up on rbd map

      Mapping an image with a long parent chain (e.g. image foo, whose parent
      is bar, whose parent is baz, etc) currently leads to a kernel stack
      overflow, due to the following recursion in the reply path:

        rbd_osd_req_callback()
          rbd_obj_request_complete()
            rbd_img_obj_callback()
              rbd_img_parent_read_callback()
                rbd_obj_request_complete()
                  ...

      Limit the parent chain to 16 images, which is ~5K worth of stack.  When
      the above recursion is eliminated, this limit can be lifted.

      Fixes: http://tracker.ceph.com/issues/12538

      Cc: stable@xxxxxxxxxxxxxxx # 3.10+, needs backporting for < 4.2
      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Josh Durgin <jdurgin@xxxxxxxxxx>

  commit 1f2c6651f69c14d0d3a9cfbda44ea101b02160ba
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Sun Oct 11 19:38:00 2015 +0200

      rbd: don't leak parent_spec in rbd_dev_probe_parent()

      Currently we leak parent_spec and trigger a "parent reference
      underflow" warning if rbd_dev_create() in rbd_dev_probe_parent() fails.
      The problem is we take the !parent out_err branch and that only drops
      refcounts; parent_spec that would've been freed had we called
      rbd_dev_unparent() remains and triggers rbd_warn() in
      rbd_dev_parent_put() - at that point we have parent_spec != NULL and
      parent_ref == 0, so counter ends up being -1 after the decrement.

      Redo rbd_dev_probe_parent() to fix this.

      Cc: stable@xxxxxxxxxxxxxxx # 3.10+, needs backporting for < 4.2
      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Alex Elder <elder@xxxxxxxxxx>

  commit c86f5ebfbd147d1a228ab89ee1658e18939bd7ad
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 23 10:45:14 2015 -0400

      drm/amdgpu: don't try to recreate sysfs entries on resume

      Fixes an error on resume caused by:
      fa022a9b65d2886486a022fd66b20c823cd76ad9

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 49abb26651167c892393cd9f2ad23df429645ed9
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 23 10:38:52 2015 -0400

      drm/radeon: don't try to recreate sysfs entries on resume

      Fixes a harmless error message caused by:
      51a4726b04e880fdd9b4e0e58b13f70b0a68a7f5

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 5c92d87d30b23844e6998d8318e4c19ee3a907ac
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Wed Oct 21 21:58:28 2015 +0200

      drm/amdgpu: stop leaking page flip fence

      reservation_object_get_fences_rcu already takes the references.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit bf7958607d0b792e0c43482c0c78786023a69832
  Merge: e74f510 8443c1a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 06:58:09 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-23

      This series contains updates to i40e, i40evf, if_link, ixgbe and ixgbevf.

      Anjali adds a workaround to drop any flow control frames from being
      transmitted from any VSI, so that a malicious VF cannot send flow control
      or PFC packets out on the wire.  Also fixed a bug in debugfs by grabbing
      the filter list lock before adding or deleting a filter.

      Akeem fixes an issue where we were unconditionally returning VEB bridge
      mode before allowing LB in the add VSI routine, resolve by checking if
      the bridge is actually in VEB mode first.

      Mitch fixed an issue where the incorrect structure was being used for
      VLAN filter list, which meant the VLAN filter list did not get
      processed correctly and VLAN filters would not be re-enabled after any
      kind of reset.

      Helin fixed a problem of possibly getting inconsistent flow control
      status after a PF reset.  The issue was requested_mode was being set
      with a default value during probe, but the hardware state could be a
      different value from this mode.

      Carolyn fixed a problem where the driver output of the OEM version
      string varied from the other tools.

      Jean Sacren fixes up kernel documentation by fixing function header
      comments to match actual variables used in the functions.  Also
      cleaned up variable initialization, when the variable would be
      over-written immediately.

      Hiroshi Shimanoto provides three patches to add "trusted" VF by adding
      netlink directives and an NDO entry.  Then implement these new controls
      in ixgbe and ixgbevf.  This series has gone through several iterations
      to address all the suggested community changes and concerns.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03867292476e6fa7679395838d768dda0a0816c7
  Merge: df55793 f7d27c3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 22:34:32 2015 +0900

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Ingo Molnar:
       "Misc fixes: two KASAN fixes, two EFI boot fixes, two boot-delay
        optimization fixes, and a fix for a IRQ handling hang observed on
        virtual platforms"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/mm, kasan: Silence KASAN warnings in get_wchan()
        compiler, atomics, kasan: Provide READ_ONCE_NOCHECK()
        x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels
        x86/smpboot: Fix CPU #1 boot timeout
        x86/smpboot: Fix cpu_init_udelay=10000 corner case boot parameter 
misbehavior
        x86/ioapic: Disable interrupts when re-routing legacy IRQs
        x86/setup: Extend low identity map to cover whole kernel range
        x86/efi: Fix multiple GOP device support

  commit df55793680d36e37e6fc384fbd90c39ed83cbe75
  Merge: 9f30931 0aaafaa
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 22:31:39 2015 +0900

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fixes from Ingo Molnar:
       "Misc fixes all around the map: an instrumentation fix, a nohz
        usability fix, a lockdep annotation fix and two task group scheduling
        fixes"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched/core: Add missing lockdep_unpin() annotations
        sched/deadline: Fix migration of SCHED_DEADLINE tasks
        nohz: Revert "nohz: Set isolcpus when nohz_full is set"
        sched/fair: Update task group's load_avg after task migration
        sched/fair: Fix overly small weight for interactive group entities
        sched, tracing: Stop/start critical timings around the idle=poll idle 
loop

  commit e74f51056a167036f9168fb8d04b9e16ea12af43
  Merge: 654c9c5 1c78efa
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 06:26:50 2015 -0700

      Merge branch 'mpls_multipath'

      Roopa Prabhu says:

      ====================
      mpls: multipath support

      This patch adds support for MPLS multipath routes.

      Includes following changes to support multipath:
      - splits struct mpls_route into 'struct mpls_route + struct mpls_nh'.

      - struct mpls_nh represents a mpls nexthop label forwarding entry

      - Adds support to parse/fill RTA_MULTIPATH netlink attribute for
      multipath routes similar to ipv4/v6 fib

      - In the process of restructuring, this patch also consistently changes 
all
      labels to u8

      $ip -f mpls route add 100 nexthop as 200 via inet 10.1.1.2 dev swp1 \
                nexthop as 700 via inet 10.1.1.6 dev swp2 \
                nexthop as 800 via inet 40.1.1.2 dev swp3

      $ip  -f mpls route show
      100
        nexthop as to 200 via inet 10.1.1.2  dev swp1
        nexthop as to 700 via inet 10.1.1.6  dev swp2
        nexthop as to 800 via inet 40.1.1.2  dev swp3
      ====================

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1c78efa8319cad2f10f421afa627745fb4d9b29f
  Author: Robert Shearman <rshearma@xxxxxxxxxxx>
  Date:   Fri Oct 23 06:03:28 2015 -0700

      mpls: flow-based multipath selection

      Change the selection of a multipath route to use a flow-based
      hash. This more suitable for traffic sensitive to reordering within a
      flow (e.g. TCP, L2VPN) and whilst still allowing a good distribution
      of traffic given enough flows.

      Selection of the path for a multipath route is done using a hash of:
      1. Label stack up to MAX_MP_SELECT_LABELS labels or up to and
         including entropy label, whichever is first.
      2. 3-tuple of (L3 src, L3 dst, proto) from IPv4/IPv6 header in MPLS
         payload, if present.

      Naturally, a 5-tuple hash using L4 information in addition would be
      possible and be better in some scenarios, but there is a tradeoff
      between looking deeper into the packet to achieve good distribution,
      and packet forwarding performance, and I have erred on the side of the
      latter as the default.

      Signed-off-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8efb73c97e2fa0abbe2e07c5c5df07800312643
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 06:03:27 2015 -0700

      mpls: multipath route support

      This patch adds support for MPLS multipath routes.

      Includes following changes to support multipath:
      - splits struct mpls_route into 'struct mpls_route + struct mpls_nh'

      - 'struct mpls_nh' represents a mpls nexthop label forwarding entry

      - moves mpls route and nexthop structures into internal.h

      - A mpls_route can point to multiple mpls_nh structs

      - the nexthops are maintained as a array (similar to ipv4 fib)

      - In the process of restructuring, this patch also consistently changes
        all labels to u8

      - Adds support to parse/fill RTA_MULTIPATH netlink attribute for
      multipath routes similar to ipv4/v6 fib

      - In this patch, the multipath route nexthop selection algorithm
      simply returns the first nexthop. It is replaced by a
      hash based algorithm from Robert Shearman in the next patch

      - mpls_route_update cleanup: remove 'dev' handling in mpls_route_update.
      mpls_route_update though implemented to update based on dev, it was
      never used that way. And the dev handling gets tricky with multiple
      nexthops. Cannot match against any single nexthops dev. So, this patch
      removes the unused 'dev' handling in mpls_route_update.

      - dead route/path handling will be implemented in a subsequent patch

      Example:

      $ip -f mpls route add 100 nexthop as 200 via inet 10.1.1.2 dev swp1 \
                      nexthop as 700 via inet 10.1.1.6 dev swp2 \
                      nexthop as 800 via inet 40.1.1.2 dev swp3

      $ip  -f mpls route show
      100
              nexthop as to 200 via inet 10.1.1.2  dev swp1
              nexthop as to 700 via inet 10.1.1.6  dev swp2
              nexthop as to 800 via inet 40.1.1.2  dev swp3

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce9d9b8e5c2b7486edf76958bcdb5e6534a915b0
  Author: Li RongQing <roy.qing.li@xxxxxxxxx>
  Date:   Fri Oct 23 20:59:49 2015 +0800

      net: sysctl: fix a kmemleak warning

      the returned buffer of register_sysctl() is stored into net_header
      variable, but net_header is not used after, and compiler maybe
      optimise the variable out, and lead kmemleak reported the below warning

        comm "swapper/0", pid 1, jiffies 4294937448 (age 267.270s)
        hex dump (first 32 bytes):
        90 38 8b 01 c0 ff ff ff 00 00 00 00 01 00 00 00 .8..............
        01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
        backtrace:
        [<ffffffc00020f134>] create_object+0x10c/0x2a0
        [<ffffffc00070ff44>] kmemleak_alloc+0x54/0xa0
        [<ffffffc0001fe378>] __kmalloc+0x1f8/0x4f8
        [<ffffffc00028e984>] __register_sysctl_table+0x64/0x5a0
        [<ffffffc00028eef0>] register_sysctl+0x30/0x40
        [<ffffffc00099c304>] net_sysctl_init+0x20/0x58
        [<ffffffc000994dd8>] sock_init+0x10/0xb0
        [<ffffffc0000842e0>] do_one_initcall+0x90/0x1b8
        [<ffffffc000966bac>] kernel_init_freeable+0x218/0x2f0
        [<ffffffc00070ed6c>] kernel_init+0x1c/0xe8
        [<ffffffc000083bfc>] ret_from_fork+0xc/0x50
        [<ffffffffffffffff>] 0xffffffffffffffff <<end check kmemleak>>

      Before fix, the objdump result on ARM64:
      0000000000000000 <net_sysctl_init>:
         0:   a9be7bfd        stp     x29, x30, [sp,#-32]!
         4:   90000001        adrp    x1, 0 <net_sysctl_init>
         8:   90000000        adrp    x0, 0 <net_sysctl_init>
         c:   910003fd        mov     x29, sp
        10:   91000021        add     x1, x1, #0x0
        14:   91000000        add     x0, x0, #0x0
        18:   a90153f3        stp     x19, x20, [sp,#16]
        1c:   12800174        mov     w20, #0xfffffff4                // #-12
        20:   94000000        bl      0 <register_sysctl>
        24:   b4000120        cbz     x0, 48 <net_sysctl_init+0x48>
        28:   90000013        adrp    x19, 0 <net_sysctl_init>
        2c:   91000273        add     x19, x19, #0x0
        30:   9101a260        add     x0, x19, #0x68
        34:   94000000        bl      0 <register_pernet_subsys>
        38:   2a0003f4        mov     w20, w0
        3c:   35000060        cbnz    w0, 48 <net_sysctl_init+0x48>
        40:   aa1303e0        mov     x0, x19
        44:   94000000        bl      0 <register_sysctl_root>
        48:   2a1403e0        mov     w0, w20
        4c:   a94153f3        ldp     x19, x20, [sp,#16]
        50:   a8c27bfd        ldp     x29, x30, [sp],#32
        54:   d65f03c0        ret
      After:
      0000000000000000 <net_sysctl_init>:
         0:   a9bd7bfd        stp     x29, x30, [sp,#-48]!
         4:   90000000        adrp    x0, 0 <net_sysctl_init>
         8:   910003fd        mov     x29, sp
         c:   a90153f3        stp     x19, x20, [sp,#16]
        10:   90000013        adrp    x19, 0 <net_sysctl_init>
        14:   91000000        add     x0, x0, #0x0
        18:   91000273        add     x19, x19, #0x0
        1c:   f90013f5        str     x21, [sp,#32]
        20:   aa1303e1        mov     x1, x19
        24:   12800175        mov     w21, #0xfffffff4                // #-12
        28:   94000000        bl      0 <register_sysctl>
        2c:   f9002260        str     x0, [x19,#64]
        30:   b40001a0        cbz     x0, 64 <net_sysctl_init+0x64>
        34:   90000014        adrp    x20, 0 <net_sysctl_init>
        38:   91000294        add     x20, x20, #0x0
        3c:   9101a280        add     x0, x20, #0x68
        40:   94000000        bl      0 <register_pernet_subsys>
        44:   2a0003f5        mov     w21, w0
        48:   35000080        cbnz    w0, 58 <net_sysctl_init+0x58>
        4c:   aa1403e0        mov     x0, x20
        50:   94000000        bl      0 <register_sysctl_root>
        54:   14000004        b       64 <net_sysctl_init+0x64>
        58:   f9402260        ldr     x0, [x19,#64]
        5c:   94000000        bl      0 <unregister_sysctl_table>
        60:   f900227f        str     xzr, [x19,#64]
        64:   2a1503e0        mov     w0, w21
        68:   f94013f5        ldr     x21, [sp,#32]
        6c:   a94153f3        ldp     x19, x20, [sp,#16]
        70:   a8c37bfd        ldp     x29, x30, [sp],#48
        74:   d65f03c0        ret

      Add the possible error handle to free the net_header to remove the
      kmemleak warning

      Signed-off-by: Li RongQing <roy.qing.li@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f30931a5482d66710210dafe9b4f2cc92320540
  Merge: a2c01ed b67de01
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 22:10:51 2015 +0900

      Merge branch 'akpm' (patches from Andrew)

      Merge fixes from Andrew Morton:
       "9 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        ocfs2/dlm: unlock lockres spinlock before dlm_lockres_put
        fault-inject: fix inverted interval/probability values in printk
        lib/Kconfig.debug: disable -Wframe-larger-than warnings with KASAN=y
        mm: make sendfile(2) killable
        thp: use is_zero_pfn() only after pte_present() check
        mailmap: update Javier Martinez Canillas' email
        MAINTAINERS: add Sergey as zsmalloc reviewer
        mm: cma: fix incorrect type conversion for size during dma allocation
        kmod: don't run async usermode helper as a child of kworker thread

  commit 654c9c543ac025f4ecb73047f2e5b689137c77c5
  Merge: 6fb3b6b5 f050561
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 05:57:53 2015 -0700

      Merge branch 'mdiobus_nested_read_write'

      Neil Armstrong says:

      ====================
      Refactor nested mdiobus read/write functions

      In order to avoid locked signal false positive for nested mdiobus
      read/write calls, nested code was introduced in mv88e6xxx and
      mdio-mux.
      But mv88e6060 also needs such nested mdiobus read/write calls.
      For sake of refactoring, introduce nested variants of mdiobus read/write
      and make them used by mv88e6xxx and mv88e6060.
      In a next patch, mdio-mux should also use these variant calls.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f0505610505caf8443cd5ea269a7936b64711fee
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Thu Oct 22 10:37:57 2015 +0200

      net: dsa: Make mv88e6060 use nested mdiobus read/write

      Like mv88e6xxx and mdio-mux, to avoid lockdep give false positives
      because of nested MDIO busses, switch to previously introduced
      nested mdiobus_read/write variants.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e899e6c51320dd340ccc7a3d4391cedd0ba275b
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Thu Oct 22 10:37:53 2015 +0200

      net: dsa: Make mv88e6xxx use nested mdiobus read/write

      Make the mv88e6xxx driver use the previously introduced nested
      variants of mdiobus_read/write functions.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21dd19fed3c3eb42a3877600f4a97a774323e562
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Thu Oct 22 10:37:49 2015 +0200

      net: phy: Add nested variants of mdiobus read/write

      Since nested variants of mdiobus_read/write are used in multiple
      drivers, add nested variants in the mdiobus core.

      Suggested-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8443c1a4b192089e62642d847ebac3e4d15134c3
  Author: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 06:59:03 2015 +0000

      ixgbe, ixgbevf: Add new mbox API xcast mode

      The limitation of the number of multicast address for VF is not enough
      for the large scale server with SR-IOV feature. IPv6 requires the 
multicast
      MAC address for each IP address to handle the Neighbor Solicitation
      message. We couldn't assign over 30 IPv6 addresses to a single VF.

      This patch introduces the new mailbox API, IXGBE_VF_UPDATE_XCAST_MODE,
      to update multicast mode of VF. This adds 3 modes;
        - NONE     only L2 exact match addresses or Flow Director enabled
        - MULTI    BAM and ROMPE set
        - ALLMULTI BAM, ROMPE and MPE set

      If a guest VF user wants over 30 MAC multicast addresses, set IFF_ALLMULTI
      to request PF to update xcast mode to enable VF multicast promiscuous 
mode.

      On the other hand, enabling VF multicast promiscuous mode may affect
      security and performance in the network of the NIC. Only trusted VF can
      enable multicast promiscuous mode. The behavior of untrusted VF is the
      same as previous version.

      Signed-off-by: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 54011e4db839504791cf8317fc48949c683587d4
  Author: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 06:58:33 2015 +0000

      ixgbe: Add new ndo to trust VF

      Implements the new netdev op to trust VF in ixgbe.

      The administrator can turn on and off VF trusted by ip command which
      supports trust message.
       # ip link set dev eth0 vf 1 trust on
      or
       # ip link set dev eth0 vf 1 trust off

      Send a ping to reset VF on changing the status of trusting.
      VF driver will reconfigure its features on reset.

      Signed-off-by: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6fb3b6b57ae444d7723088656dce86b1be92498d
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Fri Oct 23 14:41:12 2015 +0300

      drivers: net: cpsw: use module_platform_driver

      There is no reasons to probe cpsw from late_initcall level
      and it's not recommended. Hence, use module_platform_driver()
      to register and probe cpsw driver from module_init() level.

      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Acked-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dd461d6aa894761fe67c30ddf81eec0d08be216b
  Author: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 06:57:55 2015 +0000

      if_link: Add control trust VF

      Add netlink directives and ndo entry to trust VF user.

      This controls the special permission of VF user.
      The administrator will dedicatedly trust VF user to use some features
      which impacts security and/or performance.

      The administrator never turn it on unless VF user is fully trusted.

      CC: Sy Jong Choi <sy.jong.choi@xxxxxxxxx>
      Signed-off-by: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
      Acked-by: Greg Rose <gregory.v.rose@xxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5e0724d027f0548511a2165a209572d48fe7a4c8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 22 08:20:46 2015 -0700

      tcp/dccp: fix hashdance race for passive sessions

      Multiple cpus can process duplicates of incoming ACK messages
      matching a SYN_RECV request socket. This is a rare event under
      normal operations, but definitely can happen.

      Only one must win the race, otherwise corruption would occur.

      To fix this without adding new atomic ops, we use logic in
      inet_ehash_nolisten() to detect the request was present in the same
      ehash bucket where we try to insert the new child.

      If request socket was not found, we have to undo the child creation.

      This actually removes a spin_lock()/spin_unlock() pair in
      reqsk_queue_unlink() for the fast path.

      Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2fc4cd52fa7ed86e9d1df94e459b6a2435bfa9c7
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:32 2015 -0600

      i40e: fix unconditional execution of cpu_to_le16()

      The commit 3092e5e4cc79 ("i40e: add little endian conversion for
      checksum") fixed the checksum bug on big-endian architecture.

      But we should not execute cpu_to_le16() unconditionally. Thus, put
      cpu_to_le16() under certain condition.

      Cc: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Cc: Paul M Stillwell Jr <paul.m.stillwell.jr@xxxxxxxxx>
      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0e5229c6c576969bf8f89f8ca74fa7ea355b434e
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:31 2015 -0600

      i40e: clean up local variable initialization

      In both i40e_calc_nvm_checksum() and i40e_update_nvm_checksum(), the
      local variables designated by 'ret_code' are overwritten immediately. As
      such, they should merely be declared.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ed17f7e5d7918adb487debe49fadf57fd2b98d1c
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:30 2015 -0600

      i40evf: clean up local variable initialization

      In i40evf_msix_aq(), the first two lines of rd32() are mainly to clear
      the registers. If we initialize 'val' at this point, it will be
      overwritten immediately. We shall simply discard the return value here.

      When we initialize 'val', we might as well include the mask in one step.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 554f4544afa541b25882cd0ca5fd6b01b4e2ce07
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:28 2015 -0600

      i40e: add missing kernel-doc argument

      The following kernel-doc arguments for their respective functions are
      missing:

      1) @cd_type_cmd_tso_mss for i40e_tso();
      2) @cd_type_cmd_tso_mss for i40e_tsyn();
      3) @tx_ring for i40e_tx_enable_csum().

      Add them all for the kernel-doc requirement.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 69c1d70ab6b5b53ec21919f4f8de84041d3f6cdd
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:27 2015 -0600

      i40evf: add missing kernel-doc argument

      @flush has been missing since the inception of i40evf_irq_enable(). Add
      it for the kernel doc.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a3524e95ac5339e9b65dba2228f3f7efd27648cf
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 12:18:16 2015 +0300

      i40e: re-use %*ph specifier to hexdump a data

      Instead of using a custom approach change the code to use %*ph format
      specifier.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0e320516b280a8cf7258d9d41e7140563dd7c027
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:41 2015 -0400

      i40e/i40evf: Bump i40e to 1.3.46 and i40evf to 1.3.33

      Bump up the version...

      Change-ID: Ib8d501021671ba20250115ed54330e2c182255b7
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit de445b3dc29835ae840f202bc62fd3ae42da12ad
  Author: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:40 2015 -0400

      i40e: Disable VEB bridge mode with SR-IOV failure

      If a call to enable SR-IOV in the kernel failed, we need to disable
      I40E_FLAG_VEB_MODE_ENABLED, so that bridge mode could fall back to
      VEPA, which is a default.

      Change-ID: I12b6f776769506db85b29bea94b9c88d0b5ee65e
      Signed-off-by: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2efaad86b5cdd0f6d70436fa304a567df8a3cf6c
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:39 2015 -0400

      i40e: Fix an incorrect OEM version string

      This patch fixes a problem where the driver output of the OEM
      version string varied from the other tools.  The mask value
      and the order of operations were incorrect, per the original
      change request.  Without this patch, the version string will
      appear incorrect from the driver.

      Change-ID: Ie1ca6485284b4ce3b57e5a99b18b7641617c7ef7
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 58fc3267f151f6facfc94c6982bef09a53bb5219
  Author: Helin Zhang <helin.zhang@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:38 2015 -0400

      i40e: fix inconsistent statuses after a PF reset

      This patch fixes a problem of possibly getting inconsistent flow control
      statuses after a PF reset. Requested_mode was being set with a default
      value during probing, but the initial HW state could be different from
      this mode.

      Change-ID: I772bf07b78616e87086418d4bd87954b66fa17cd
      Signed-off-by: Helin Zhang <helin.zhang@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 40d01366e6dd5ef1cb3505f11b2d208cfa3632f3
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:37 2015 -0400

      i40evf: use correct struct for list manipulation

      Not sure how this compiles at all. Use the correct struct for
      manipulating the VLAN filter list. Without this, the VLAN filter
      list doesn't get processed correctly, and VLAN filters will not
      be re-enabled after any kind of reset.

      Change-ID: Iceff2dc089f303058fb71ecb08419eed471e0e90
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 09603eaa5ca91dd9a318d8722ff5de8feb1e36ab
  Author: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:36 2015 -0400

      i40e: Fix VEB/VEPA bridge mode mismatch issue

      Fix i40e_is_vsi_uplink_mode_veb to check if bridge is actually
      in VEB mode before allowing LB in the add VSI routine, instead of
      unconditionally returning VEB bridge mode.

      Change-ID: I162397b1bdd02367735fe9baaeb51465be2a3ce9
      Signed-off-by: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 10dc0358e802ea60f95432f89c8dd051767fc06f
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:35 2015 -0400

      i40e: fix a bug in debugfs with add/del macaddr

      The new code flow requires us to grab the filter list lock before
      adding/deleting the filter.

      Change-ID: I4eaef508ab4da2d1b2e23f20f2a78d931d5b6aeb
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e7358f54a3954df16d4f87e3cad35063f1c17de5
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:34 2015 -0400

      i40e/i40evf: Add a workaround to drop all flow control frames

      This patch adds a workaround to drop any flow control frames from being
      transmitted from any VSI. FW can still send flow control frames if flow
      control is enabled.

      With this patch in place a malicious VF cannot send flow control or PFC
      packets out on the wire.

      Change-ID: I4303b24e98b93066d2767fec24dfe78be591c277
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1acea4f6ce1b1c0941438aca75dd2e5c6b09db60
  Author: Guillaume Nault <g.nault@xxxxxxxxxxxx>
  Date:   Thu Oct 22 16:57:10 2015 +0200

      ppp: fix pppoe_dev deletion condition in pppoe_release()

      We can't rely on PPPOX_ZOMBIE to decide whether to clear po->pppoe_dev.
      PPPOX_ZOMBIE can be set by pppoe_disc_rcv() even when po->pppoe_dev is
      NULL. So we have no guarantee that (sk->sk_state & PPPOX_ZOMBIE) implies
      (po->pppoe_dev != NULL).
      Since we're releasing a PPPoE socket, we want to release the pppoe_dev
      if it exists and reset sk_state to PPPOX_DEAD, no matter the previous
      value of sk_state. So we can just check for po->pppoe_dev and avoid any
      assumption on sk->sk_state.

      Fixes: 2b018d57ff18 ("pppoe: drop PPPOX_ZOMBIEs in pppoe_release")
      Signed-off-by: Guillaume Nault <g.nault@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6b8dec99865ea906150e963eacbfd037b579ee9
  Author: Li RongQing <roy.qing.li@xxxxxxxxx>
  Date:   Thu Oct 22 11:35:05 2015 +0800

      af_key: fix two typos

      Signed-off-by: Li RongQing <roy.qing.li@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0aaafaabfcba8aa991913cd3280a5dbf7f111a2a
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:50:08 2015 +0200

      sched/core: Add missing lockdep_unpin() annotations

      Luca and Wanpeng reported two missing annotations that led to
      false lockdep complaints. Add the missing annotations.

      Reported-by: Luca Abeni <luca.abeni@xxxxxxxx>
      Reported-by: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Juri Lelli <juri.lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: cbce1a686700 ("sched,lockdep: Employ lock pinning")
      Link: 
http://lkml.kernel.org/r/20151023095008.GY17308@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 20a41fba679d665cdae2808e2b9cae97c073351f
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Oct 21 15:37:05 2015 -0500

      amd-xgbe: Use wmb before updating current descriptor count

      The code currently uses the lightweight dma_wmb barrier before updating
      the current descriptor count. Under heavy load, the Tx cleanup routine
      was seeing the updated current descriptor count before the updated
      descriptor information. As a result, the Tx descriptor was being cleaned
      up before it was used because it was not "owned" by the hardware yet,
      resulting in a Tx queue hang.

      Using the wmb barrier insures that the descriptor is updated before the
      descriptor counter preventing the Tx queue hang. For extra insurance,
      the Tx cleanup routine is changed to grab the current decriptor count on
      entry and uses that initial value in the processing loop rather than
      trying to chase the current value.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Tested-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d2fd719bcb0e83cb39cfee22ee800f98a56eceb3
  Author: Nathan Sullivan <nathan.sullivan@xxxxxx>
  Date:   Wed Oct 21 14:17:04 2015 -0500

      net/phy: micrel: Add workaround for bad autoneg

      Very rarely, the KSZ9031 will appear to complete autonegotiation, but
      will drop all traffic afterwards.  When this happens, the idle error
      count will read 0xFF after autonegotiation completes.  Reset the PHY
      when in that state.

      Signed-off-by: Nathan Sullivan <nathan.sullivan@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b1311807f3d3eb8bef3ccc53127838b3bea3771
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Tue Oct 20 10:28:45 2015 +0200

      ipv4: implement support for NOPREFIXROUTE ifa flag for ipv4 address

      Currently adding a new ipv4 address always cause the creation of the
      related network route, with default metric. When a host has multiple
      interfaces on the same network, multiple routes with the same metric
      are created.

      If the userspace wants to set specific metric on each routes, i.e.
      giving better metric to ethernet links in respect to Wi-Fi ones,
      the network routes must be deleted and recreated, which is error-prone.

      This patch implements the support for IFA_F_NOPREFIXROUTE for ipv4
      address. When an address is added with such flag set, no associated
      network route is created, no network route is deleted when
      said IP is gone and it's up to the user space manage such route.

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2c01ed5d46f0686c52272e09f7d2f5be9f573fd
  Merge: d0ddf98 8832317
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:49:51 2015 +0900

      Merge tag 'powerpc-4.3-5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixes from Michael Ellerman:

       - Revert "Use the POWER8 Micro Partition Prefetch Engine in KVM HV on
         POWER8" from Paul
       - Handle irq_happened flag correctly in off-line loop from Paul
       - Validate rtas.entry before calling enter_rtas() from Vasant

      * tag 'powerpc-4.3-5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc/rtas: Validate rtas.entry before calling enter_rtas()
        powerpc/powernv: Handle irq_happened flag correctly in off-line loop
        powerpc: Revert "Use the POWER8 Micro Partition Prefetch Engine in KVM 
HV on POWER8"

  commit ec3661b42257d9a06cf0d318175623ac7a660113
  Merge: c80dbe0 b72a2b0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 02:49:41 2015 -0700

      Merge branch 'ipv6-overflow-arith'

      Hannes Frederic Sowa says:

      ====================
      overflow-arith: begin to add support for overflow builtins functions

      I add a new header, linux/overflow-arith.h, as the central place to add
      overflow and wrap-around checking functions. The reason I am doing so
      is that it can make use of compiler supported builtin functions which
      can leverage hardware.

      As I need this for a fix in the ipv6 stack, which is also included in
      this series, I propose to add it sooner than later over Davem's net
      tree. This is also the reason why I start slowly with only the one
      function I need at this time.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b72a2b01b686f242028038f630555513c9e4de38
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:32:43 2015 +0200

      ipv6: protect mtu calculation of wrap-around and infinite loop by 
rounding issues

      Raw sockets with hdrincl enabled can insert ipv6 extension headers
      right into the data stream. In case we need to fragment those packets,
      we reparse the options header to find the place where we can insert
      the fragment header. If the extension headers exceed the link's MTU we
      actually cannot make progress in such a case.

      Instead of ending up in broken arithmetic or rounding towards 0 and
      entering an endless loop in ip6_fragment, just prevent those cases by
      aborting early and signal -EMSGSIZE to user space.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79907146fb5b1778035870db895fb2bf64061284
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:32:42 2015 +0200

      overflow-arith: begin to add support for overflow builtin functions

      The idea of the overflow-arith.h header is to collect overflow checking
      functions in one central place.

      If gcc compiler supports the __builtin_overflow_* builtins we use them
      because they might give better performance, otherwise the code falls
      back to normal overflow checking functions.

      The builtin_overflow functions are supported by gcc-5 and clang. The
      matter of supporting clang is to just provide a corresponding
      CC_HAVE_BUILTIN_OVERFLOW, because the specific overflow checking builtins
      don't differ between gcc and clang.

      I just provide overflow_usub function here as I intend this to get merged
      into net, more functions will definitely follow as they are needed.

      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c80dbe04612986fd6104b4a1be21681b113b5ac9
  Author: Andrew Shewmaker <agshew@xxxxxxxxx>
  Date:   Sun Oct 18 21:59:08 2015 -0700

      tcp: allow dctcp alpha to drop to zero

      If alpha is strictly reduced by alpha >> dctcp_shift_g and if alpha is 
less
      than 1 << dctcp_shift_g, then alpha may never reach zero. For example,
      given shift_g=4 and alpha=15, alpha >> dctcp_shift_g yields 0 and alpha
      remains 15. The effect isn't noticeable in this case below cwnd=137, but
      could gradually drive uncongested flows with leftover alpha down to
      cwnd=137. A larger dctcp_shift_g would have a greater effect.

      This change causes alpha=15 to drop to 0 instead of being decrementing by 
1
      as it would when alpha=16. However, it requires one less conditional to
      implement since it doesn't have to guard against subtracting 1 from 0U. A
      decay of 15 is not unreasonable since an equal or greater amount occurs at
      alpha >= 240.

      Signed-off-by: Andrew G. Shewmaker <agshew@xxxxxxxxx>
      Acked-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab997ad408394bcaf7f3015d4c4e38047eaf2ad6
  Author: lucien <lucien.xin@xxxxxxxxx>
  Date:   Fri Oct 23 15:36:53 2015 +0800

      ipv6: fix the incorrect return value of throw route

      The error condition -EAGAIN, which is signaled by throw routes, tells
      the rules framework to walk on searching for next matches. If the walk
      ends and we stop walking the rules with the result of a throw route we
      have to translate the error conditions to -ENETUNREACH.

      Signed-off-by: Xin Long <lucien.xin@xxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d0ddf980d6efdcee6c7a85eb0f27baa6b60eeff6
  Merge: 2c44f4f 55f4129
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:38:00 2015 +0900

      Merge tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Arnd Bergmann:
       "Most of the changes this time are for incorrect device nodes in
        various ways, on on imx, berlin, exynos, ux500, uniphier, omap and
        meson.

        Chen-Yu Tsai now co-maintains mach-sunxi (Allwinner).

        Other bug fixes include
         - a partial revert of a broken tegra gpio patch
         - irq affinity for arm ccn
         - suspend on one Armada 385 machine
         - enable ZONE_DMA to avoid an OMAP crash for over 2GB RAM
         - turning on a regulator on beagleboard-x15 for HDMI
         - making the omap gpmc debug code visible
         - setup of orion network switch
         - a rare build regression for pxa"

      * tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (22 commits)
        ARM: OMAP2+: Fix imprecise external abort caused by bogus SRAM init
        thermal: exynos: Fix register read in TMU
        ARM: OMAP2+: Fix oops with LPAE and more than 2GB of memory
        ARM: tegra: Comment out gpio-ranges properties
        ARM: dts: uniphier: fix IRQ number for devices on PH1-LD6b ref board
        drivers/perf: arm_pmu: avoid CPU device_node reference leak
        bus: arm-ccn: Fix irq affinity setting on CPU migration
        bus: arm-ccn: Handle correctly no-more-cpus case
        ARM: mvebu: correct a385-db-ap compatible string
        ARM: meson6: DTS: Fix wrong reg mapping and IRQ numbers
        MAINTAINERS: Update Allwinner entry and add new maintainer
        ARM: ux500: modify initial levelshifter status
        ARM: pxa: fix pxa3xx DFI lockup hack
        Documentation: ARM: List new omap MMC requirements
        memory: omap-gpmc: dump "before" state before first modification
        memory: omap-gpmc: Fix unselectable debug option for GPMC
        ARM: dts: am57xx-beagle-x15: set VDD_SD to always-on
        ARM: dts: Fix audio card detection on Peach boards
        ARM: EXYNOS: Fix double of_node_put() when parsing child power domains
        ARM: orion: Fix DSA platform device after mvmdio conversion
        ...

  commit f23d538bc24a83c16127c2eb82c9cf1adc2b5149
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Fri Oct 23 00:57:05 2015 -0400

      macvtap: unbreak receiving of gro skb with frag list

      We don't have fraglist support in TAP_FEATURES. This will lead
      software segmentation of gro skb with frag list. Fixes by having
      frag list support in TAP_FEATURES.

      With this patch single session of netperf receiving were restored from
      about 5Gb/s to about 12Gb/s on mlx4.

      Fixes a567dd6252 ("macvtap: simplify usage of tap_features")
      Cc: Vlad Yasevich <vyasevic@xxxxxxxxxx>
      Cc: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c44f4f03574a3754306b5a8a80b9ed38a795104
  Merge: 8a990fb ad355e3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:32:29 2015 +0900

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM bugfixes from Paolo Bonzini:
       "Bug fixes for ARM, mostly 4.3 regressions related to virtual interrupt
        controller changes"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        arm/arm64: KVM: Fix disabled distributor operation
        arm/arm64: KVM: Clear map->active on pend/active clear
        arm/arm64: KVM: Fix arch timer behavior for disabled interrupts
        KVM: arm: use GIC support unconditionally
        KVM: arm/arm64: Fix memory leak if timer initialization fails
        KVM: arm/arm64: Do not inject spurious interrupts

  commit 8a990fb47b4c93653745512eca7d2d210678e6c1
  Merge: 0122835 1904be1
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:24:33 2015 +0900

      Merge tag 'trace-fixes-v4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace

      Pull tracing fixes from Steven Rostedt:
       "Running tests on other changes, the system locked up due to lots of
        warnings.  It was caused by the stack tracer triggering a warning
        about using rcu_dereference() when RCU was not watching.  This can
        happen due to the fact that the stack tracer uses the function tracer
        to check each function, and there are functions that may be called and
        traced when RCU stopped watching.  Namely when a function is called
        just before going idle or to userspace and after RCU stopped watching
        that current CPU.

        The first patch makes sure that RCU is watching when the stack tracer
        uses RCU.  The second patch is to make sure that the stack tracer does
        not get called by functions in NMI, as it's not NMI safe"

      * tag 'trace-fixes-v4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace:
        tracing: Do not allow stack_tracer to record stack in NMI
        tracing: Have stack tracer force RCU to be watching

  commit 0122835a020a9f5c007b3a49ea9b5f1ac68fc7c7
  Merge: 45d80f1 b9b6e4a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:21:55 2015 +0900

      Merge tag 'sound-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

      Pull sound fixes from Takashi Iwai:
       "There is nothing to worry you much, only a few small & stable patches
        are found for usual stuff, HD-audio (a Lenovo laptop quirk, a fix for
        minor error handling) and ASoC (trivial fixes for RT298 and WM
        codecs).

        The only remaining major change is the fix for ASoC SX_TLV control
        that was overseen during refactoring, but the fix itself is trivial
        and safe"

      * tag 'sound-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:
        ASoC: wm8962: mark cache_dirty flag after software reset in pm_resume
        ASoC: rt298: fix wrong setting of gpio2_en
        ASoC: wm8904: Correct number of EQ registers
        ALSA: hda - Fix deadlock at error in building PCM
        ASoC: Add info callback for SX_TLV controls
        ASoC: rt298: correct index default value
        ALSA: hda - Fix inverted internal mic on Lenovo G50-80
        ALSA: hdac: Explicitly add io.h

  commit 45d80f168d2727f60bf1de64536f4ba62f303130
  Merge: a67b20d 56ea37d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:15:20 2015 +0900

      Merge tag 'media/v4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media

      Pull media fixes from Mauro Carvalho Chehab:
       "Some regression fixes and potential security issues:

         - netup_unidvb: fix potential crash when spi is NULL
         - rtl28xxu: fix control message flaws
         - m88ds3103: fix a regression on Kernel 4.2
         - c8sectpfe: fix some issues on this new driver
         - v4l2-flash-led-class: fix a Kbuild dependency
         - si2157 and si2158: check for array boundary when uploading firmware
           files
         - horus3a and lnbh25: fix some building troubles when some options
           aren't selected
         - ir-hix5hd2: drop the use of IRQF_NO_SUSPEND"

      * tag 'media/v4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media:
        [media] m88ds3103: use own reg update_bits() implementation
        [media] rtl28xxu: fix control message flaws
        [media] v4l2-flash-led-class: Add missing VIDEO_V4L2 Kconfig dependency
        [media] netup_unidvb: fix potential crash when spi is NULL
        [media] si2168: Bounds check firmware
        [media] si2157: Bounds check firmware
        [media] ir-hix5hd2: drop the use of IRQF_NO_SUSPEND
        [media] c8sectpfe: fix return of garbage
        [media] c8sectpfe: fix ininitialized error return on firmware load 
failure
        [media] lnbh25: Fix lnbh25_attach() function return type
        [media] horus3a: Fix horus3a_attach() function parameters

  commit a67b20d24c9ed3719146c9a5e95937c38c89e16a
  Merge: 8a70dd2 c50f13f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:08:22 2015 +0900

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "I've been a bit slow gathering these:

         - drm/mst: one mutex leak in a fail path

         - radeon: two oops fixes, one dpm fix

         - i915: one messy set of fixes, where we revert the original fix, and
                 pull back the proper set of fixes from -next on top.

         - nouveau: one fix for an illegal buffer placement.

        Doesn't look too bad, hopefully shouldn't be too much more"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/nouveau/gem: return only valid domain when there's only one
        drm: fix mutex leak in drm_dp_get_mst_branch_device
        drm/amdgpu: add missing dpm check for KV dpm late init
        drm/amdgpu/dpm: don't add pwm attributes if DPM is disabled
        drm/radeon/dpm: don't add pwm attributes if DPM is disabled
        drm/i915: Add primary plane to mask if it's visible
        drm/i915: Move sprite/cursor plane disable to intel_sanitize_crtc()
        drm/i915: Assign hwmode after encoder state readout
        Revert "drm/i915: Add primary plane to mask if it's visible"
        drm/i915: Deny wrapping an userptr into a framebuffer
        drm/i915: Enable DPLL VGA mode before P1/P2 divider write
        drm/i915: Restore lost DPLL register write on gen2-4
        drm/i915: Flush pipecontrol post-sync writes
        drm/i915: Fix kerneldoc for i915_gem_shrink_all

  commit b67de018b37a97548645a879c627d4188518e907
  Author: Joseph Qi <joseph.qi@xxxxxxxxxx>
  Date:   Thu Oct 22 13:32:29 2015 -0700

      ocfs2/dlm: unlock lockres spinlock before dlm_lockres_put

      dlm_lockres_put will call dlm_lockres_release if it is the last
      reference, and then it may call dlm_print_one_lock_resource and
      take lockres spinlock.

      So unlock lockres spinlock before dlm_lockres_put to avoid deadlock.

      Signed-off-by: Joseph Qi <joseph.qi@xxxxxxxxxx>
      Cc: Mark Fasheh <mfasheh@xxxxxxx>
      Cc: Joel Becker <jlbec@xxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit bb387002693ed28b2bb0408c5dec65521b71e5f1
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Thu Oct 22 13:32:27 2015 -0700

      fault-inject: fix inverted interval/probability values in printk

      interval displays the probability and vice versa.

      Fixes: 6adc4a22f20bb ("fault-inject: add ratelimit option")
      Acked-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3f181b4d8652f7bcd7e9932c7307b8ecd4d87cf6
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 13:32:24 2015 -0700

      lib/Kconfig.debug: disable -Wframe-larger-than warnings with KASAN=y

      When the kernel compiled with KASAN=y, GCC adds redzones for each
      variable on stack.  This enlarges function's stack frame and causes:

        'warning: the frame size of X bytes is larger than Y bytes'

      The worst case I've seen for now is following:

         ../net/wireless/nl80211.c: In function `nl80211_send_wiphy':
         ../net/wireless/nl80211.c:1731:1: warning: the frame size of 5448 
bytes is larger than 2048 bytes [-Wframe-larger-than=]

      That kind of warning becomes useless with KASAN=y.  It doesn't
      necessarily indicate that there is some problem in the code, thus we
      should turn it off.

      (The KASAN=y stack size in increased from 16k to 32k for this reason)

      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Acked-by: Abylay Ospan <aospan@xxxxxxxx>
      Cc: Andi Kleen <andi@xxxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <m.chehab@xxxxxxxxxxx>
      Cc: Kozlov Sergey <serjk@xxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 296291cdd1629c308114504b850dc343eabc2782
  Author: Jan Kara <jack@xxxxxxxx>
  Date:   Thu Oct 22 13:32:21 2015 -0700

      mm: make sendfile(2) killable

      Currently a simple program below issues a sendfile(2) system call which
      takes about 62 days to complete in my test KVM instance.

              int fd;
              off_t off = 0;

              fd = open("file", O_RDWR | O_TRUNC | O_SYNC | O_CREAT, 0644);
              ftruncate(fd, 2);
              lseek(fd, 0, SEEK_END);
              sendfile(fd, fd, &off, 0xfffffff);

      Now you should not ask kernel to do a stupid stuff like copying 256MB in
      2-byte chunks and call fsync(2) after each chunk but if you do, sysadmin
      should have a way to stop you.

      We actually do have a check for fatal_signal_pending() in
      generic_perform_write() which triggers in this path however because we
      always succeed in writing something before the check is done, we return
      value > 0 from generic_perform_write() and thus the information about
      signal gets lost.

      Fix the problem by doing the signal check before writing anything.  That
      way generic_perform_write() returns -EINTR, the error gets propagated up
      and the sendfile loop terminates early.

      Signed-off-by: Jan Kara <jack@xxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 47aee4d8e314384807e98b67ade07f6da476aa75
  Author: Minchan Kim <minchan@xxxxxxxxxx>
  Date:   Thu Oct 22 13:32:19 2015 -0700

      thp: use is_zero_pfn() only after pte_present() check

      Use is_zero_pfn() on pteval only after pte_present() check on pteval
      (It might be better idea to introduce is_zero_pte() which checks
      pte_present() first).

      Otherwise when working on a swap or migration entry and if pte_pfn's
      result is equal to zero_pfn by chance, we lose user's data in
      __collapse_huge_page_copy().  So if you're unlucky, the application
      segfaults and finally you could see below message on exit:

      BUG: Bad rss-counter state mm:ffff88007f099300 idx:2 val:3

      Fixes: ca0984caa823 ("mm: incorporate zero pages into transparent huge 
pages")
      Signed-off-by: Minchan Kim <minchan@xxxxxxxxxx>
      Reviewed-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Acked-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Acked-by: Vlastimil Babka <vbabka@xxxxxxx>
      Cc: Hugh Dickins <hughd@xxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>      [4.1+]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit b8fa0efa01109e294e9be610465c324f771cb5ba
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 13:32:16 2015 -0700

      mailmap: update Javier Martinez Canillas' email

      The get_maintainer script still reports my old Collabora email based on
      old commits but that address no longer exist so update mailmap to report
      my current email and avoid people sending to the old address.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 41192a2d6a7f4cd6af9fc2f8edbbf24b2694f2f6
  Author: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
  Date:   Thu Oct 22 13:32:13 2015 -0700

      MAINTAINERS: add Sergey as zsmalloc reviewer

      Nominate myself as a zsmalloc reviewer.

      Signed-off-by: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
      Cc: Minchan Kim <minchan@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 67a2e213e7e937c41c52ab5bc46bf3f4de469f6e
  Author: Rohit Vaswani <rvaswani@xxxxxxxxxxxxxx>
  Date:   Thu Oct 22 13:32:11 2015 -0700

      mm: cma: fix incorrect type conversion for size during dma allocation

      This was found during userspace fuzzing test when a large size dma cma
      allocation is made by driver(like ion) through userspace.

        show_stack+0x10/0x1c
        dump_stack+0x74/0xc8
        kasan_report_error+0x2b0/0x408
        kasan_report+0x34/0x40
        __asan_storeN+0x15c/0x168
        memset+0x20/0x44
        __dma_alloc_coherent+0x114/0x18c

      Signed-off-by: Rohit Vaswani <rvaswani@xxxxxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 5211613978cb7353a3237e4372958c0e7514683f
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Oct 22 13:32:08 2015 -0700

      kmod: don't run async usermode helper as a child of kworker thread

      call_usermodehelper_exec_sync() does fork() + wait() with "unignored"
      SIGCHLD.  What we have missed is that this worker thread can have other
      children previously forked by call_usermodehelper_exec_work() without
      UMH_WAIT_PROC.  If such a child exits in between it becomes a zombie
      because auto-reaping only works if SIGCHLD is ignored, and nobody can
      reap it (unless/until this worker thread exits too).

      Change the !UMH_WAIT_PROC case to use CLONE_PARENT.

      Note: this is only first step.  All PF_KTHREAD tasks, even created by
      kernel_thread() should have ->parent == kthreadd by default.

      Fixes: bb304a5c6fc63d8506c ("kmod: handle UMH_WAIT_PROC from system 
unbound workqueue")
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Acked-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 80fcd45ee05b4ef05e61d37a5ffb70a67095a9f6
  Merge: 4ba792e f06cff7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Oct 23 10:25:57 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - The default for callchains is back to 'callee' when --children is not 
used.
          (Namhyung Kim)

        - Move the 'use_offset' option to the right place where the annotate 
code
          expects it to be to be able to properly handle it. (Namhyung Kim)

        - Don't die when an unknown 'annotate' option is found in the perf 
config
          file (usually ~/.perfconfig), just warn the user. (Arnaldo Carvalho 
de Melo)

      Infrastructure changes:

        - Support %ps/%pS in libtraceevent. (Scott Wood)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3f84ccf62c9fdd39d2cb1caa725663191c817b65
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Fri Oct 16 09:46:12 2015 +0200

      pinctrl: sunxi: Add irq pinmuxing to sun6i "r" pincontroller

      Add pinmuxing for external interrupt functionality through the
      sun6i "r" pincontroller.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 8297992cad599e8a214e65959ccdde51738fe5a2
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Fri Oct 16 09:46:11 2015 +0200

      pinctrl: sunxi: Fix irq_of_xlate for the r_pio pinctrl block

      The r_pio gpio / pin controller has a pin_base of non 0, we need to
      adjust for this before calling sunxi_pinctrl_desc_find_function_by_pin.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit cb866e3298cd7412503fc7e2c265753c853fab9d
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Fri Oct 23 07:52:58 2015 +0200

      xfrm: Increment statistic counter on inner mode error

      Increment the LINUX_MIB_XFRMINSTATEMODEERROR statistic counter
      to notify about dropped packets if we fail to fetch a inner mode.

      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit ea673a4d3a337184f3c314dcc6300bf02f39e077
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Fri Oct 23 07:32:39 2015 +0200

      xfrm4: Reload skb header pointers after calling pskb_may_pull.

      A call to pskb_may_pull may change the pointers into the packet,
      so reload the pointers after the call.

      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit 1a14f1e5550a341f76e5c8f596e9b5f8a886dfbc
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Fri Oct 23 07:31:23 2015 +0200

      xfrm4: Fix header checks in _decode_session4.

      We skip the header informations if the data pointer points
      already behind the header in question for some protocols.
      This is because we call pskb_may_pull with a negative value
      converted to unsigened int from pskb_may_pull in this case.
      Skipping the header informations can lead to incorrect policy
      lookups, so fix it by a check of the data pointer position
      before we call pskb_may_pull.

      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit b9b6e4ac2da74995cb7ac9394854a5fd563014c2
  Merge: d289619 f69eccc
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Fri Oct 23 06:56:56 2015 +0200

      Merge tag 'asoc-fix-v4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

      ASoC: Fixes for v4.3

      A bunch of driver fixes plus one core fix which fixes problems with
      misreporting values from _SX controls following a recent refactoring.
      This had gone unnoticed as such controls are quite rare.

  commit e33d4f13d21e9f604194ebc8730077ff39916c50
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Wed Oct 21 11:48:25 2015 -0400

      xfrm: Fix unaligned access to stats in copy_to_user_state()

      On sparc, deleting established SAs (e.g., by restarting ipsec)
      results in unaligned access messages via xfrm_del_sa ->
      km_state_notify -> xfrm_send_state_notify().

      Even though struct xfrm_usersa_info is aligned on 8-byte boundaries,
      netlink attributes are fundamentally only 4 byte aligned, and this
      cannot be changed for nla_data() that is passed up to userspace.
      As a result, the put_unaligned() macro needs to be used to
      set up potentially unaligned fields such as the xfrm_stats in
      copy_to_user_state()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit fc4099f17240767554ff3a73977acb78ef615404
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Thu Oct 22 18:17:16 2015 -0700

      openvswitch: Fix egress tunnel info.

      While transitioning to netdev based vport we broke OVS
      feature which allows user to retrieve tunnel packet egress
      information for lwtunnel devices.  Following patch fixes it
      by introducing ndo operation to get the tunnel egress info.
      Same ndo operation can be used for lwtunnel devices and compat
      ovs-tnl-vport devices. So after adding such device operation
      we can remove similar operation from ovs-vport.

      Fixes: 614732eaa12d ("openvswitch: Use regular VXLAN net_device device").
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c0c050c58d840994ba842ad1c338a98e7c12b764
  Author: Michael Chan <mchan@xxxxxxxxxxxx>
  Date:   Thu Oct 22 16:01:17 2015 -0400

      bnxt_en: New Broadcom ethernet driver.

      Broadcom ethernet driver for the new family of NetXtreme-C/E
      ethernet devices.

      v5:
        - Removed empty blank lines at end of files (noted by David Miller).
        - Moved busy poll helper functions to bnxt.h to at least make the
          .c file look less cluttered with #ifdef (noted by Stephen Hemminger).

      v4:
        - Broke up 2 long message strings with "\n" (suggested by John Linville)
        - Constify an array of strings (suggested by Stephen Hemminger)
        - Improve bnxt_vf_pciid() (suggested by Stephen Hemminger)
        - Use PCI_VDEVICE() to populate pci_device_id table for more compact
          source.

      v3:
        - Fixed 2 more sparse warnings.
        - Removed some unused structures in .h files.

      v2:
        - Fixed all kbuild test robot reported warnings.
        - Fixed many of the checkpatch.pl errors and warnings.
        - Fixed the Kconfig description (noted by Dmitry Kravkov).

      Acked-by: Eddie Wai <eddie.wai@xxxxxxxxxxxx>
      Acked-by: Jeffrey Huang <huangjw@xxxxxxxxxxxx>
      Signed-off-by: Prashant Sreedharan <prashant@xxxxxxxxxxxx>
      Signed-off-by: Michael Chan <mchan@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a31adae0b2ab70127b2d5faa6a685e2ea70cc1b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 16:54:31 2015 -0400

      net: dsa: mv88e6xxx: remove debugfs interface

      It is preferable to have a common debugfs interface for DSA or switchdev
      instead of a driver specific one. Thus remove the mv88e6xxx debug code.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c472b9b391ecf9011d383956b322e72593d87b2
  Merge: 8566b86 e9e5366
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 19:02:08 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/net-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-22

      This series contains fixes to i40e only.

      Jesse provides two small fixes for i40e, first fixes counters that were
      being displayed incorrectly due to indexing beyond the array of strings
      when printing stats.  Then fixed the fact that the driver was printing
      a message about not being able to assign VMDq because a lack of MSI-X
      vectors, when it was not true.  It was due to a line missing that
      initialized a variable.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8566b86ab9f0f45bc6f7dd422b21de9d0cf5415a
  Author: Jorgen Hansen <jhansen@xxxxxxxxxx>
  Date:   Thu Oct 22 08:25:25 2015 -0700

      VSOCK: Fix lockdep issue.

      The recent fix for the vsock sock_put issue used the wrong
      initializer for the transport spin_lock causing an issue when
      running with lockdep checking.

      Testing: Verified fix on kernel with lockdep enabled.

      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Signed-off-by: Jorgen Hansen <jhansen@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9e53662d8130dd950885e37dc1d97008e1283f9
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Oct 2 17:57:21 2015 -0700

      i40e: fix annoying message

      The driver was printing a message about not being able
      to assign VMDq because of a lack of MSI-X vectors.

      This was because a line was missing that initialized a variable,
      simply a merge error.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 74a6c66565f5f4eda4aaae53e2e325deeedeaca2
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Oct 2 19:09:34 2015 -0700

      i40e: fix stats offsets

      The code was setting up stats that were not being initialized.
      This caused several counters to be displayed incorrectly, due
      to indexing beyond the array of strings when printing stats.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f69eccc4b248ce53b1b830034babd0a795d5763c
  Merge: ab5cf7d f8f2dc4 3419871 97aff2c 4eb0f7a
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Oct 23 08:44:14 2015 +0900

      Merge remote-tracking branches 'asoc/fix/rt298', 'asoc/fix/sx', 
'asoc/fix/wm8904' and 'asoc/fix/wm8962' into asoc-linus

  commit ab5cf7df4578e46f6587c589f0c4d58c7c9a8753
  Merge: 7379047 79828b4
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Oct 23 08:44:13 2015 +0900

      Merge remote-tracking branch 'asoc/fix/rt5645' into asoc-linus

  commit f06cff7c59b6b252d667435d7baad48687b41002
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 22 18:10:52 2015 -0300

      perf annotate: Don't die() when finding an invalid config option

      The perf_config() infrastructure we inherited from git calls die() when
      the provided config callback returns -1, meaning some key in a config
      section is unexpected, that seems ok for a stdio based tool, but in
      --tui we end up messing up the output, so just tell the user about the
      error, wait for a keystroke and return 0, being more resilient and
      proceeding with what we managed to parse.

      That die() needs to die, tho :-)

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-pqtsffh2kwr5mwm4qg9kgotu@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 990995bad13c2bcf074f87236d1a6c5e09bd5eff
  Author: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
  Date:   Tue Oct 20 19:45:38 2015 +0800

      EDAC: Fix PAGES_TO_MiB macro misuse

      The PAGES_TO_MiB macro is used for unit conversion but the
      trace_mc_event() tracepoint expects a page address. Fix that.

      Signed-off-by: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445341538-24271-1-git-send-email-tanxiaojun@xxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 464b01a48eb6be48bc58332e029760b5e40ea119
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 22 16:44:17 2015 -0300

      perf ui tui: Register the error callbacks before initializing the widgets

      I.e. we want to tell the user about errors found during, for instance,
      the ui_browser initialization, so that a call to ui__warning() appears
      as a window waiting for a key to be pressed.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ederrwizcl6mfz10vfobl5qq@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 39ff7cdb5a5e6b75dd049255615828c6531cd109
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Oct 21 11:57:20 2015 +0900

      perf annotate: Fix 'annotate.use_offset' config variable usage

      The annotate__configs should be sorted so that it can use bsearch(3).

      However commit 0c4a5bcea460 ("perf annotate: Display total number of
      samples with --show-total-period") added a new config item at the end.
      This resulted in the 'annotate.use_offset' config variable cannot be
      found and perf terminated like below:

        $ perf report
        bad config file line 6 in ~/.perfconfig

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Martin Liška <mliska@xxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Taeung Song <treeze.taeung@xxxxxxxxx>
      Fixes: 0c4a5bcea460 ("perf annotate: Display total number of samples with 
--show-total-period")
      Link: 
http://lkml.kernel.org/r/1445396240-3428-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 76a26549eb367f683fbb394b7246bef5dc665f8c
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 23:28:32 2015 +0900

      perf tools: Improve call graph documents and help messages

      The --call-graph option is complex so we should provide better guide for
      users.  Also change help message to be consistent with config option
      names.  Now perf top will show help like below:

        $ perf top --call-graph
          Error: option `call-graph' requires a value

         Usage: perf top [<options>]

            --call-graph 
<record_mode[,record_size],print_type,threshold[,print_limit],order,sort_key[,branch]>
                 setup and enables call-graph (stack chain/backtrace):

                record_mode:    call graph recording mode (fp|dwarf|lbr)
                record_size:    if record_mode is 'dwarf', max size of stack 
recording (<bytes>)
                                default: 8192 (bytes)
                print_type:     call graph printing style 
(graph|flat|fractal|none)
                threshold:      minimum call graph inclusion threshold 
(<percent>)
                print_limit:    maximum number of call graph entry (<number>)
                order:          call graph order (caller|callee)
                sort_key:       call graph sort key (function|address)
                branch:         include last branch info to call graph (branch)

                Default: fp,graph,0.5,caller,function

      Requested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445524112-5201-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 792aeafa8ed08e5e18fb66ab93b470f78e619f75
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 16:45:46 2015 +0900

      perf tools: Defaults to 'caller' callchain order only if --children is 
enabled

      The caller callchain order is useful with --children option since it can
      show 'overview' style output, but other commands which don't use
      --children feature like 'perf script' or even 'perf report/top' without
      --children are better to keep callee order.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Acked-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445499946-29817-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a2c10d39af49b00514f7cc7b750757fcc2174f0c
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 15:28:49 2015 +0900

      perf top: Support call-graph display options also

      Currently 'perf top --call-graph' option is same as 'perf record'.  But
      'perf top' also need to receive display options in 'perf report'.  To do
      that, change parse_callchain_report_opt() to allow record options too.

      Now perf top can receive display options like below:

        $ perf top --call-graph
          Error: option `call-graph' requires a value

         Usage: perf top [<options>]

              --call-graph
                
<mode[,dump_size],output_type,min_percent[,print_limit],call_order[,branch]>
                           setup and enables call-graph (stack chain/backtrace)
                           recording: fp dwarf lbr, output_type (graph, flat,
                     fractal, or none), min percent threshold, optional
                     print limit, callchain order, key (function or
                     address), add branches

        $ perf top --call-graph callee,graph,fp

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445495330-25416-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 21cf62847d29392e51c37460856d3c3c57769c5e
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 15:28:48 2015 +0900

      perf tools: Move callchain help messages to callchain.h

      These messages will be used by 'perf top' in the next patch.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445495330-25416-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b6bd9c7d543ac160646a667470158c5da319a85c
  Author: Scott Wood <scottwood@xxxxxxxxxxxxx>
  Date:   Mon Aug 31 16:16:37 2015 -0500

      tools lib traceevent: Support %ps/%pS

      Commits such as 65dd297ac25565 ("xfs: %pF is only for function
      pointers") caused a regression because pretty_print() didn't support
      %ps/%pS.  The current %pf/%pF implementation in pretty_print() is what
      %ps/%pS is supposed to do, so use the same code for %ps/%pS.

      Addressing the incorrect %pf/%pF implementation is beyond the scope of
      this patch.

      Signed-off-by: Scott Wood <scottwood@xxxxxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Dave Chinner <david@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150831211637.GA12848@xxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 56ea37da3b93dfe46cb5c3ee0ee4cc44229ece47
  Author: Antti Palosaari <crope@xxxxxx>
  Date:   Sat Oct 3 18:35:14 2015 -0300

      [media] m88ds3103: use own reg update_bits() implementation

      Device stopped to tuning some channels after regmap conversion.
      Reason is that regmap_update_bits() works a bit differently for
      partially volatile registers than old homemade routine. Return
      back to old routine in order to fix issue.

      Fixes: 478932b16052f5ded74685d096ae920cd17d6424

      Cc: <stable@xxxxxxxxxx> # 4.2+
      Reported-by: Mark Clarkstone <hello@xxxxxxxxxxxxxxxxxxxx>
      Tested-by: Mark Clarkstone <hello@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Antti Palosaari <crope@xxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit d18ca5b7ceca0e9674cb4bb2ed476b0fcbb23ba2
  Author: Antti Palosaari <crope@xxxxxx>
  Date:   Tue Oct 6 00:22:23 2015 -0300

      [media] rtl28xxu: fix control message flaws

      Add lock to prevent concurrent access for control message as control
      message function uses shared buffer. Without the lock there may be
      remote control polling which messes the buffer causing IO errors.
      Increase buffer size and add check for maximum supported message
      length.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=103391
      Fixes: c56222a6b25c ("[media] rtl28xxu: move usb buffers to state")

      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+
      Signed-off-by: Antti Palosaari <crope@xxxxxx>

  commit 17f38822038ba5d4dba79b72fd111bbf64173063
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Fri Oct 2 06:19:15 2015 -0300

      [media] v4l2-flash-led-class: Add missing VIDEO_V4L2 Kconfig dependency

      Fixes the following randconfig problem:

      drivers/built-in.o: In function `v4l2_flash_release':
      (.text+0x12204f): undefined reference to `v4l2_async_unregister_subdev'
      drivers/built-in.o: In function `v4l2_flash_release':
      (.text+0x122057): undefined reference to `v4l2_ctrl_handler_free'
      drivers/built-in.o: In function `v4l2_flash_close':
      v4l2-flash-led-class.c:(.text+0x12208f): undefined reference to 
`v4l2_fh_is_singular'
      v4l2-flash-led-class.c:(.text+0x1220c8): undefined reference to 
`__v4l2_ctrl_s_ctrl'
      drivers/built-in.o: In function `v4l2_flash_open':
      v4l2-flash-led-class.c:(.text+0x12227f): undefined reference to 
`v4l2_fh_is_singular'
      drivers/built-in.o: In function `v4l2_flash_init_controls':
      v4l2-flash-led-class.c:(.text+0x12274e): undefined reference to 
`v4l2_ctrl_handler_init_class'
      v4l2-flash-led-class.c:(.text+0x122797): undefined reference to 
`v4l2_ctrl_new_std_menu'
      v4l2-flash-led-class.c:(.text+0x1227e0): undefined reference to 
`v4l2_ctrl_new_std'
      v4l2-flash-led-class.c:(.text+0x122826): undefined reference to 
`v4l2_ctrl_handler_setup'
      v4l2-flash-led-class.c:(.text+0x122839): undefined reference to 
`v4l2_ctrl_handler_free'
      drivers/built-in.o: In function `v4l2_flash_init':
      (.text+0x1228e2): undefined reference to `v4l2_subdev_init'
      drivers/built-in.o: In function `v4l2_flash_init':
      (.text+0x12293b): undefined reference to `v4l2_async_register_subdev'
      drivers/built-in.o: In function `v4l2_flash_init':
      (.text+0x122949): undefined reference to `v4l2_ctrl_handler_free'
      drivers/built-in.o:(.rodata+0x20ef8): undefined reference to 
`v4l2_subdev_queryctrl'
      drivers/built-in.o:(.rodata+0x20f10): undefined reference to 
`v4l2_subdev_querymenu'

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Cc: Sakari Ailus <sakari.ailus@xxxxxx>
      Cc: Hans Verkuil <hans.verkuil@xxxxxxxxx>

  commit 9d2b064c0ae42ad93b2a0c7da05daef312c96bcc
  Author: Abylay Ospan <aospan@xxxxxxxx>
  Date:   Fri Sep 25 04:56:21 2015 -0300

      [media] netup_unidvb: fix potential crash when spi is NULL

      Signed-off-by: Abylay Ospan <aospan@xxxxxxxx>
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit 47810b4341ac9d2f558894bc5995e6fa2a1298f9
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:10:09 2015 -0300

      [media] si2168: Bounds check firmware

      When reading the firmware and sending commands, the length must
      be bounds checked to avoid overrunning the size of the command
      buffer and smashing the stack if the firmware is not in the expected
      format:

      si2168 11-0064: found a 'Silicon Labs Si2168-B40'
      si2168 11-0064: downloading firmware from file 
'dvb-demod-si2168-b40-01.fw'
      si2168 11-0064: firmware download failed -95
      Kernel panic - not syncing: stack-protector: Kernel stack is corrupted 
in: ffffffffa085708f

      Add the proper check.

      Cc: stable@xxxxxxxxxx
      Reported-by: Stuart Auchterlonie <sauchter@xxxxxxxxxx>
      Reviewed-by: Antti Palosaari <crope@xxxxxx>
      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit a828d72df216c36e9c40b6c24dc4b17b6f7b5a76
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:10:10 2015 -0300

      [media] si2157: Bounds check firmware

      When reading the firmware and sending commands, the length
      must be bounds checked to avoid overrunning the size of the command
      buffer and smashing the stack if the firmware is not in the
      expected format. Add the proper check.

      Cc: stable@xxxxxxxxxx
      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit 54bec3970cb5351d08866af1ea8b0787edd7ede3
  Author: Sudeep Holla <sudeep.holla@xxxxxxx>
  Date:   Mon Sep 21 12:47:11 2015 -0300

      [media] ir-hix5hd2: drop the use of IRQF_NO_SUSPEND

      This driver doesn't claim the IR transmitter to be wakeup source. It
      even disables the clock and the IR during suspend-resume cycle.

      This patch removes yet another misuse of IRQF_NO_SUSPEND.

      Cc: Patrice Chotard <patrice.chotard@xxxxxx>
      Cc: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Cc: Guoxiong Yan <yanguoxiong@xxxxxxxxxx>
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Acked-by: Zhangfei Gao <zhangfei.gao@xxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit 51a3ac5f4dc45120c78fad51096d989914801457
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 17 07:12:54 2015 -0300

      [media] c8sectpfe: fix return of garbage

      The variable err was never initialized, that means we had been checking
      a garbage value in the for loop. Moreover if the segment is not outside
      the firmware file then also we have been returning the garbage.
      Initialize it to 0 so that on success we return the value and no need to
      check in the for loop also as it is initially 0 and whenever that value
      changes we have done a break from the loop.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit bf447221a8791d0f5dd28b19336e31e48f05f04a
  Author: Colin Ian King <colin.king@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 08:42:27 2015 -0300

      [media] c8sectpfe: fix ininitialized error return on firmware load failure

      static analysis with cppcheck detected the following error:

      [drivers/media/platform/sti/c8sectpfe/c8sectpfe-core.c:1210]:
        (error) Uninitialized variable: ret

      ret is never initialised, so garbage is being returned. Instead
      return the error return from the call of request_firmware_nowait

      Signed-off-by: Colin Ian King <colin.king@xxxxxxxxxxxxx>

  commit a9c4e5cfebc44e6caa6b9299af5603f5c2da0c33
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 19:45:21 2015 -0300

      [media] lnbh25: Fix lnbh25_attach() function return type

      If CONFIG_DVB_LNBH25 is disabled, a stub static inline function is
      defined that just prints a warning about the driver being disabled
      but the function return type was wrong which caused a build error.

      Fixes: e025273b86fb ("[media] lnbh25: LNBH25 SEC controller driver")

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>

  commit ebdd4b7e6a0dd86736eeb6b9e60b361ef64ccc30
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 19:39:22 2015 -0300

      [media] horus3a: Fix horus3a_attach() function parameters

      If CONFIG_DVB_HORUS3A is disabled a stub static inline function is
      defined that just prints a warning about the driver being disabled
      but the function parameters were wrong which caused a build error.

      Fixes: a5d32b358254f ("[media] horus3a: Sony Horus3A DVB-S/S2 tuner 
driver")

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>

  commit 4db7062c9a8bff92137bb2f381d81dd1bb5b7872
  Author: Sudeep Holla <sudeep.holla@xxxxxxx>
  Date:   Fri Oct 16 17:01:36 2015 +0100

      ARM: dts: fix gpio-keys wakeup-source property

      The keyboard driver for GPIO buttons(gpio-keys) checks for one of the
      two boolean properties to enable gpio buttons as wakeup source:
      1. "wakeup-source" or
      2. the legacy "gpio-key,wakeup"

      However juno, ste-snowball and emev2-kzm9d dts file have a undetected
      "wakeup" property to indictate the wakeup source.

      This patch fixes it by making use of "wakeup-source" property.

      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Acked-by: Simon Horman <horms@xxxxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit 6bccb4955c1cc6335d76a9cad87b97c7b1457b8d
  Merge: 9299b24 58c9c87
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Thu Oct 22 17:30:08 2015 +0100

      Merge branch 'irq/for-arm' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      This is an incremental fix for a patch previously pulled from tip
      irq/for-arm.

      * 'irq/for-arm' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        genirq: Make the cpuhotplug migration code less noisy

  commit 0db65fcfcded76fe4f74e3ca9f4e2baf67b683ef
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Thu Oct 22 14:15:58 2015 +0200

      qmi_wwan: add Sierra Wireless MC74xx/EM74xx

      New device IDs shamelessly lifted from the vendor driver.

      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 199c6550694dcdf5f568ea9db6fe2b46d14e4fa5
  Merge: d46a9d6 ca064bd
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:46:05 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec

      Steffen Klassert says:

      ====================
      pull request (net): ipsec 2015-10-22

      1) Fix IPsec pre-encap fragmentation for GSO packets.
         From Herbert Xu.

      2) Fix some header checks in _decode_session6.
         We skip the header informations if the data pointer points
         already behind the header in question for some protocols.
         This is because we call pskb_may_pull with a negative value
         converted to unsigened int from pskb_may_pull in this case.
         Skipping the header informations can lead to incorrect policy
         lookups. From Mathias Krause.

      3) Allow to change the replay threshold and expiry timer of a
         state without having to set other attributes like replay
         counter and byte lifetime. Changing these other attributes
         may break the SA. From Michael Rossberg.

      4) Fix pmtu discovery for local generated packets.
         We may fail dispatch to the inner address family.
         As a reault, the local error handler is not called
         and the mtu value is not reported back to userspace.

      Please pull or let me know if there are problems.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 998eb8079f03f44d4017d7941c082b4a57eb2db8
  Merge: e9829b9 1a49a2f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:39:07 2015 -0700

      Merge branch 'dsa-port_fdb_dump'

      Vivien Didelot says:

      ====================
      net: dsa: implement port_fdb_dump in drivers

      Not all switch chips provide a Get Next kind of operation to dump FDB 
entries.
      It is preferred to let the driver handle the dump operation the way it 
works
      best for the chip. Thus, drop port_fdb_getnext and implement the 
port_fdb_dump
      operation in DSA, which pushes the switchdev FDB dump callback down to the
      drivers. mv88e6xxx is the only driver affected and is updated accordingly.

      v3 -> v4: fix rejects on latest net-next

      v2 -> v3: opencode switchdev_obj_dump_cb_t to avoid multiple typedef;
                use ether_addr_copy in fdb_dump

      v1 -> v2: fix a few "return err" instead of "goto unlock" in mv88e6xxx.c
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1a49a2fbf8c15d63a0b5e60d935ec7d5d3d07fd5
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:43 2015 -0400

      net: dsa: remove port_fdb_getnext

      No driver implements port_fdb_getnext anymore, and port_fdb_dump is
      preferred anyway, so remove this function from DSA.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c49471b6695c5bac0d36c30ca07b8c311cd7cc3
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:42 2015 -0400

      net: dsa: mv88e6xxx: remove port_fdb_getnext

      Now that port_fdb_dump is implemented and even simpler, get rid of
      port_fdb_getnext.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f33475bd678e3c052f585d5660373ee7e957c742
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:41 2015 -0400

      net: dsa: mv88e6xxx: implement port_fdb_dump

      Implement the port_fdb_dump DSA operation.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b0e1a692ff17a37031af03599fbb3666e82c777b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:40 2015 -0400

      net: dsa: mv88e6xxx: write MAC outside of ATU Get Next code

      There is no need to write the MAC address before every Get Next
      operation, since ATU MAC registers are not cleared between calls.

      Move the _mv88e6xxx_atu_mac_write call outside of _mv88e6xxx_atu_getnext
      so future code could call ATU Get Next multiple times and save a few
      register access.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36d04ba127eeed94b003155129c7509a2139b474
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:39 2015 -0400

      net: dsa: mv88e6xxx: write VID outside of VTU Get Next code

      There is no need to write the VLAN ID before every Get Next operation,
      since the VTU VID register is not cleared between calls.

      Move the VID write call in a _mv88e6xxx_vtu_vid_write function outside
      of _mv88e6xxx_vtu_getnext so future code could call VTU Get Next
      multiple times and save a few register accesses.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ea70ba980666cffacb57d90d867b2c7952d90700
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:38 2015 -0400

      net: dsa: add port_fdb_dump function

      Not all switch chips support a Get Next operation to iterate on its FDB.
      So add a more simple port_fdb_dump function for them.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d46a9d678e4c9fac1e968d0593e4dba683389324
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 08:42:22 2015 -0700

      net: ipv6: Dont add RT6_LOOKUP_F_IFACE flag if saddr set

      741a11d9e410 ("net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is set")
      adds the RT6_LOOKUP_F_IFACE flag to make device index mismatch fatal if
      oif is given. Hajime reported that this change breaks the Mobile IPv6
      use case that wants to force the message through one interface yet use
      the source address from another interface. Handle this case by only
      adding the flag if oif is set and saddr is not set.

      Fixes: 741a11d9e410 ("net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is 
set")
      Cc: Hajime Tazaki <thehajime@xxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9829b9745b6e1683fd2a90842da498a2197299e
  Merge: c7fc9eb e5a9f8d
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:28:41 2015 -0700

      Merge tag 'mac80211-next-for-davem-2015-10-21' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

      Johannes Berg says:

      ====================
      Here's another set of patches for the current cycle:
       * I merged net-next back to avoid a conflict with the
       * cfg80211 scheduled scan API extensions
       * preparations for better scan result timestamping
       * regulatory cleanups
       * mac80211 statistics cleanups
       * a few other small cleanups and fixes
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 92a93fd5bbe7dbe0ee7322c92e44a820f62bef90
  Merge: 4ef7ea9 c96356a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:23:25 2015 -0700

      Merge branch 'isdn-null-deref'

      Karsten Keil says:

      ====================
      Fix potential NULL pointer access and memory leak in ISDN layer2 functions

      Insu Yun did brinup the issue with not checking the skb_clone() return
      value in the layer2 I-frame ull functions.
      This series fix the issue in a way which avoid protocol violations/data 
loss
      on a temporary memory shortage.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c96356a9baa2e3d628caf52f3b83df1968628b5f
  Author: Karsten Keil <keil@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:18:39 2015 +0200

      mISDN: fix OOM condition for sending queued I-Frames

      The old code did not check the return value of skb_clone().
      The extra skb_clone() is not needed at all, if using 
skb_realloc_headroom()
      instead, which gives us a private copy with enough headroom as well.
      We need to requeue the original skb if the call failed, because we cannot
      inform upper layers about the data loss. Restructure the code to minimise
      rollback effort if it happens.
      This fix kernel bug #86091

      Thanks to Insu Yun <wuninsu@xxxxxxxxx> to remind me on this issue.

      Signed-off-by: Karsten Keil <keil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7a7c95e8e18a3598c4d0f99c35e69dce591daf1
  Author: Karsten Keil <keil@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:18:38 2015 +0200

      ISDN: fix OOM condition for sending queued I-Frames

      The skb_clone() return value was not checked and the 
skb_realloc_headroom()
      usage was wrong, the old skb was not freed. It turned out, that the
      skb_clone is not needed at all, the skb_realloc_headroom() will create a
      private copy with enough headroom and the original SKB can be used for the
      ACK queue.
      We need to requeue the original skb if the call failed, since the upper
      layer cannot be informed about memory shortage.

      Thanks to Insu Yun <wuninsu@xxxxxxxxx> to remind me on this issue.

      Signed-off-by: Karsten Keil <keil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ef7ea9195ea73262cd9730fb54e1eb726da157b
  Author: Jorgen Hansen <jhansen@xxxxxxxxxx>
  Date:   Wed Oct 21 04:53:56 2015 -0700

      VSOCK: sock_put wasn't safe to call in interrupt context

      In the vsock vmci_transport driver, sock_put wasn't safe to call
      in interrupt context, since that may call the vsock destructor
      which in turn calls several functions that should only be called
      from process context. This change defers the callling of these
      functions  to a worker thread. All these functions were
      deallocation of resources related to the transport itself.

      Furthermore, an unused callback was removed to simplify the
      cleanup.

      Multiple customers have been hitting this issue when using
      VMware tools on vSphere 2015.

      Also added a version to the vmci transport module (starting from
      1.0.2.0-k since up until now it appears that this module was
      sharing version with vsock that is currently at 1.0.1.0-k).

      Reviewed-by: Aditya Asarwade <asarwade@xxxxxxxxxx>
      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Signed-off-by: Jorgen Hansen <jhansen@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7fc9eb79a89049214f9870a6cf978050aaea43a
  Author: yankejian <yankejian@xxxxxxxxxx>
  Date:   Wed Oct 21 17:57:44 2015 +0800

      net: hisilicon: deals with the sub ctrl by syscon

      the global Soc configuration is treated by syscon, and sub ctrl bus is
      Soc bus. it has to be treated by syscon.

      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: lisheng <lisheng011@xxxxxxxxxx>
      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 47191d65b647af5eb5c82ede70ed4c24b1e93ef4
  Author: David Herrmann <dh.herrmann@xxxxxxxxx>
  Date:   Wed Oct 21 11:47:43 2015 +0200

      netlink: fix locking around NETLINK_LIST_MEMBERSHIPS

      Currently, NETLINK_LIST_MEMBERSHIPS grabs the netlink table while copying
      the membership state to user-space. However, grabing the netlink table is
      effectively a write_lock_irq(), and as such we should not be triggering
      page-faults in the critical section.

      This can be easily reproduced by the following snippet:
          int s = socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
          void *p = mmap(0, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, 
-1, 0);
          int r = getsockopt(s, 0x10e, 9, p, (void*)((char*)p + 4092));

      This should work just fine, but currently triggers EFAULT and a possible
      WARN_ON below handle_mm_fault().

      Fix this by reducing locking of NETLINK_LIST_MEMBERSHIPS to a read-side
      lock. The write-lock was overkill in the first place, and the read-lock
      allows page-faults just fine.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: David Herrmann <dh.herrmann@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9e6d79c521b91e7103fea37411680e31927487b
  Merge: aec1592 b08f2b3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:04:08 2015 -0700

      Merge branch 'cxgb4-trivial-fixes'

      Hariprasad Shenai says:

      ====================
      Trivial fixes for cxgb4 driver

      This patch series updates driver description for next gen. adapters, 
updates
      firmware info., returns error for setup_rss error case, restores L1
      configuration in case of FW rejects new config, updates and aligns ethtool
      get stats settings, etc

       This patch series has been created against net-next tree and includes
      patches on cxgb4 and cxgb4vf driver.

      We have included all the maintainers of respective drivers. Kindly review
      the change and let us know in case of any review comments.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b08f2b35692e640e942deb49bbabe47a264f0023
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:57 2015 +0530

      cxgb4: Update ethtool get_drvinfo to get regdump len

      Update ethtool get_drvinfo to display regdump len and also update
      firmware string version print to display N/A in case FW isn't present

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9c673d156256f427657f0114eea981aaeefa3828
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:56 2015 +0530

      cxgb4: Use vmalloc, if kmalloc fails

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ac5fe75df57299cfbd89eb35a36d979742a69d8
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:55 2015 +0530

      cxgb4: Return error if setup_rss is called before probe

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52a5f8463b10e49da93190dd0ee24e7f1c4860fd
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:54 2015 +0530

      cxgb4/cxgb4vf: Update driver desc. to include Chelsio T6 adapter

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 43eb4e82ebf7e3442a724ab9ecd69322eccad530
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:53 2015 +0530

      cxgb4: Add info print to display number of MSI-X vectors allocated

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4116542897be9cb5eaae7fdbfd5b2ddeaaaaeaef
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:52 2015 +0530

      cxgb4: Restore L1 cfg, if FW rejects new L1 cfg settings

      In the ethtool set_settings() routine we need to remember our old L1
      Configuration in case the firmware rejects the request and then restore
      that.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9bfdad5ef555d92639a8b2a9e75e1f51ea3235d6
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:51 2015 +0530

      cxgb4: Don't disallow turning off auto-negotiation

      For {1, 10, 40} Gb/s. Prohibiting turning off autonegotiation isn't 
anywhere
      in the standard.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eed7342d4b53a697603d568ab8d10561273def42
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:50 2015 +0530

      cxgb4: Align ethtool get stat settings

      Align the ethtool get stats settings with the rest so it looks uniform

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aec15924740edc9886051593bc7769873be9498b
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Tue Oct 20 23:00:10 2015 -0700

      openvswitch: Use dev_queue_xmit for vport send.

      With use of lwtunnel, we can directly call dev_queue_xmit()
      rather than calling netdev vport send operation.
      Following change make tunnel vport code bit cleaner.

      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 99e28f18e3f4daa2091802e07ebeb4f541631320
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Tue Oct 20 20:47:46 2015 -0700

      openvswitch: Fix incorrect type use.

      Patch fixes following sparse warning.
      net/openvswitch/flow_netlink.c:583:30: warning: incorrect type in 
assignment (different base types)
      net/openvswitch/flow_netlink.c:583:30:    expected restricted __be16 
[usertype] ipv4
      net/openvswitch/flow_netlink.c:583:30:    got int

      Fixes: 6b26ba3a7d ("openvswitch: netlink attributes for IPv6 tunneling")
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b696e5e93835cee114f24b5b106c73f9f8503ec0
  Author: Helge Deller <deller@xxxxxx>
  Date:   Thu Oct 22 15:45:18 2015 +0200

      parisc: reduce syslog debug output

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit aa0bdd2995fb991f0c0f0145303803a0474c93e2
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Sat Sep 19 11:43:07 2015 +0800

      parisc: serial/mux: Convert to uart_console_device instead of open-coded

      The implementation of mux_console_device() is very similar to
      uart_console_device(). Setting .data field in mux_console then we can
      convert to use uart_console_device().

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 7bc2d40ea690a37eccc2f514c96c56fdcda626b5
  Author: Helge Deller <deller@xxxxxx>
  Date:   Tue Sep 8 15:45:32 2015 +0200

      parisc: Wire up userfaultfd syscall

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit b6096755f43c443101e6f5d3acc74efa746cb4ec
  Author: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
  Date:   Mon Sep 7 12:15:51 2015 -0400

      parisc: allocate sys_membarrier system call number

      Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Tested-by: Helge Deller <deller@xxxxxx>
      CC: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      CC: linux-api@xxxxxxxxxxxxxxx
      CC: "James E.J. Bottomley" <jejb@xxxxxxxxxxxxxxxx>
      CC: linux-parisc@xxxxxxxxxxxxxxx
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 721daebbdb9ba44756a9695878ecca8aad38009b
  Merge: 63b11e7 3911169
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 06:42:23 2015 -0700

      Merge branch 'bpf-perf'

      Alexei Starovoitov says:

      ====================
      bpf_perf_event_output helper

      Over the last year there were multiple attempts to let eBPF programs
      output data into perf events by He Kuang and Wangnan.
      The last one was:
      https://lkml.org/lkml/2015/7/20/736
      It was almost perfect with exception that all bpf programs would sent
      data into one global perf_event.
      This patch set takes different approach by letting user space
      open independent PERF_COUNT_SW_BPF_OUTPUT events, so that program
      output won't collide.

      Wangnan is working on corresponding perf patches.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 39111695b1b88a21e81983a38786d877e770da81
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 20 20:02:35 2015 -0700

      samples: bpf: add bpf_perf_event_output example

      Performance test and example of bpf_perf_event_output().
      kprobe is attached to sys_write() and trivial bpf program streams
      pid+cookie into userspace via PERF_COUNT_SW_BPF_OUTPUT event.

      Usage:
      $ sudo ./bld_x64/samples/bpf/trace_output
      recv 2968913 events per sec

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a43eec304259a6c637f4014a6d4767159b6a3aa3
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 20 20:02:34 2015 -0700

      bpf: introduce bpf_perf_event_output() helper

      This helper is used to send raw data from eBPF program into
      special PERF_TYPE_SOFTWARE/PERF_COUNT_SW_BPF_OUTPUT perf_event.
      User space needs to perf_event_open() it (either for one or all cpus) and
      store FD into perf_event_array (similar to bpf_perf_event_read() helper)
      before eBPF program can send data into it.

      Today the programs triggered by kprobe collect the data and either store
      it into the maps or print it via bpf_trace_printk() where latter is the 
debug
      facility and not suitable to stream the data. This new helper replaces
      such bpf_trace_printk() usage and allows programs to have dedicated
      channel into user space for post-processing of the raw data collected.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fa128e6a148a0a58355bd6814c6283515bbd028a
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 20 20:02:33 2015 -0700

      perf: pad raw data samples automatically

      Instead of WARN_ON in perf_event_output() on unpaded raw samples,
      pad them automatically.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 63b11e757d6dae570bc22450ec58a5b68cdf5c3c
  Author: Brenden Blanco <bblanco@xxxxxxxxxxxx>
  Date:   Tue Oct 20 16:47:33 2015 -0700

      ipvlan: read direct ifindex instead of iflink

      In the ipv4 outbound path of an ipvlan device in l3 mode, the ifindex is
      being grabbed from dev_get_iflink. This works for the physical device
      case, since as the documentation of that function notes: "Physical
      interfaces have the same 'ifindex' and 'iflink' values.".  However, if
      the master device is a veth, and the pairs are in separate net
      namespaces, the route lookup will fail with -ENODEV due to outer veth
      pair being in a separate namespace from the ipvlan master/routing
      namespace.

        ns0    |   ns1    |   ns2
       veth0a--|--veth0b--|--ipvl0

      In ipvlan_process_v4_outbound(), a packet sent from ipvl0 in the above
      configuration will pass fl.flowi4_oif == veth0a to
      ip_route_output_flow(), but *net == ns1.

      Notice also that ipv6 processing is not using iflink. Since there is a
      discrepancy in usage, fixup both v4 and v6 case to use local dev
      variable.

      Tested this with l3 ipvlan on top of veth, as well as with single
      physical interface in the top namespace.

      Signed-off-by: Brenden Blanco <bblanco@xxxxxxxxxxxx>
      Reviewed-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34e45ad9378c31ef2b59e8bd63d62f0ca8e719a3
  Author: Andrew F. Davis <afd@xxxxxx>
  Date:   Tue Oct 20 16:28:57 2015 -0500

      net: phy: dp83848: Add TI DP83848 Ethernet PHY

      Add support for the TI DP83848 Ethernet PHY device.

      The DP83848 is a highly reliable, feature rich, IEEE 802.3 compliant
      single port 10/100 Mb/s Ethernet Physical Layer Transceiver supporting
      the MII and RMII interfaces.

      Signed-off-by: Andrew F. Davis <afd@xxxxxx>
      Signed-off-by: Dan Murphy <dmurphy@xxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Acked-by: Dan Murphy <dmurphy@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dbf650b67bb4db1b95807d2aafe2d7cfafd458da
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Oct 20 13:17:40 2015 -0700

      tcp: fastopen: limit max_qlen

      Allowing an application to set whatever limit for
      the list of recently RST fastopen sessions [1] is not wise,
      as it open ways to deplete kernel memory.

      Cap the user provided limit by somaxconn sysctl,
      like listen() backlog.

      [1] https://tools.ietf.org/html/rfc7413#section-5.1

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0729a04977d497cf66234fd7f900ddcec3ef1c52
  Author: Hezi Shahmoon <hezi@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:32:24 2015 +0200

      i2c: mv64xxx: really allow I2C offloading

      Commit 00d8689b85a7 ("i2c: mv64xxx: rework offload support to fix
      several problems") completely reworked the offload support, but left a
      debugging-related "return false" at the beginning of the
      mv64xxx_i2c_can_offload() function. This has the unfortunate consequence
      that offloading is in fact never used, which wasn't really the
      intention.

      This commit fixes that problem by removing the bogus "return false".

      Fixes: 00d8689b85a7 ("i2c: mv64xxx: rework offload support to fix several 
problems")
      Signed-off-by: Hezi Shahmoon <hezi@xxxxxxxxxxx>
      [Thomas: reworked commit log and title.]
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>

  commit 83ea24fd45f8793706b9a259842ab3f144661e25
  Author: Kamlakant Patel <kamlakant.patel@xxxxxxxxxxxx>
  Date:   Thu Oct 15 18:23:32 2015 +0530

      gpio: xlp: Convert to use gpiolib irqchip helpers

      commit "325f0a (MIPS: Netlogic: Use chip_data for irq_chip methods)"
      Updates "mips/netlogic/common/irq.c" to use chip_data to store interrupt
      controller data pointer. Before this commit handler_data was used to
      store interrupt controller data which caused errors while using
      gpiochip_set_chained_irqchip.

      Update XLP GPIO driver to use the gpiolib irqchip helpers.
      And add missing depends on OF_GPIO in Kconfig.

      Signed-off-by: Kamlakant Patel <kamlakant.patel@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 58c9c87ca9dca99f269267f5aadcd051fef1637b
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 14:34:57 2015 +0200

      genirq: Make the cpuhotplug migration code less noisy

      The original arm code has a pr_debug() statement for the case where
      the irq chip has no set_affinity() callback. That's sufficient for
      debugging and we really don't want to spam dmesg with useless warnings
      for the normal case.

      Fixes: f1e0bb0ad473: "genirq: Introduce generic irq migration for cpu 
hotunplug"
      Reported-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Requested-by: Russell King <linux@xxxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Yang Yingliang <yangyingliang@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>

  commit 4eb0f7abcefad2d4c127aa7502d3122635eddab0
  Author: Jiada Wang <jiada_wang@xxxxxxxxxx>
  Date:   Tue Oct 20 11:47:11 2015 +0900

      ASoC: wm8962: mark cache_dirty flag after software reset in pm_resume

      By doing software reset of wm8962 in pm_resume, all registers which
      have already been set will be reset to default value without regmap
      interface be involved, thus driver need to mark cache_dirty flag,
      to let regcache can be updated by regcache_sync().

      Signed-off-by: Jiada Wang <jiada_wang@xxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 13972adc3240ea8b18b44906b819c622941a64b6
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 22 12:29:27 2015 +0200

      Bluetooth: Increase minor version of core module

      With the addition of support for diagnostic feature, it makes sense to
      increase the minor version of the Bluetooth core module.

      The module version is not used anywhere, but it gives a nice extra
      hint for debugging purposes.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit aeedebff6961d96e9df58799e6c3a93513d6f66b
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:27 2015 +0200

      ieee802154: 6lowpan: fix memory leak

      Looking at current situation of memory management in 6lowpan receive
      function I detected some invalid handling. After calling
      lowpan_invoke_rx_handlers we will do a kfree_skb and then NET_RX_DROP on
      error handling. We don't do this before, also on
      skb_share_check/skb_unshare which might manipulate the reference
      counters.

      After running some 'grep -r "dev_add_pack" net/' to look how others
      packet-layer receive callbacks works I detected that every subsystem do
      a kfree_skb, then NET_RX_DROP without calling skb functions which
      might manipulate the skb reference counters. This is the reason why we
      should do the same here like all others subsystems. I didn't find any
      documentation how the packet-layer receive callbacks handle NET_RX_DROP
      return values either.

      This patch will add a kfree_skb, then NET_RX_DROP handling for the
      "trivial checks", in case of skb_share_check/skb_unshare the kfree_skb
      call will be done inside these functions.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 88d07feb097b60fcca20ba63d2920b0f05a05fa0
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 10:49:39 2015 +0300

      Bluetooth: Make hci_disconnect() behave correctly for all states

      There are a few places that don't explicitly check the connection
      state before calling hci_disconnect(). To make this API do the right
      thing take advantage of the new hci_abort_conn() API and also make
      sure to only read the clock offset if we're really connected.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 89e0ccc882c47a4553698a580bec70cd90bc6319
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 10:49:38 2015 +0300

      Bluetooth: Take advantage of connection abort helpers

      Convert the various places mapping connection state to
      disconnect/cancel HCI command to use the new hci_abort_conn helper
      API.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit dcc0f0d9ce839e1cc97b95d9dac364047bd1b975
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 10:49:37 2015 +0300

      Bluetooth: Introduce hci_req helper to abort a connection

      There are several different places needing to make sure that a
      connection gets disconnected or canceled. The exact action needed
      depends on the connection state, so centralizing this logic can save
      quite a lot of code duplication.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a1857390e2a626cd44e494968fc1b41891caec66
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 22 12:06:09 2015 +0300

      Bluetooth: hci_bcm: checking for ERR_PTR instead of NULL

      bt_skb_alloc() returns NULL on error, it never returns an ERR_PTR.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4ba792e303e278052bb0ee60cce15d6d7dc15c7c
  Merge: 43e41ad e3d006c
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 22 09:33:46 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Print branch filter state in verbose mode. (Andi Kleen)

        - Fix core dump caused by per-socket/core system-wide stat. (Kan Liang)

        - Update libtraceevent KVM plugin. (Paolo Bonzini)

      Infrastructure changes:

        - Add fixdep to 'tools/build' .gitignore. (Yunlong Song)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c81d555a264bde740adc314f3931046994534106
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 09:38:35 2015 +0300

      Bluetooth: Fix crash in SMP when unpairing

      When unpairing the keys stored in hci_dev are removed. If SMP is
      ongoing the SMP context will also have references to these keys, so
      removing them from the hci_dev lists will make the pointers invalid.
      This can result in the following type of crashes:

       BUG: unable to handle kernel paging request at 6b6b6b6b
       IP: [<c11f26be>] __list_del_entry+0x44/0x71
       *pde = 00000000
       Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
       Modules linked in: hci_uart btqca btusb btintel btbcm btrtl hci_vhci 
rfcomm bluetooth_6lowpan bluetooth
       CPU: 0 PID: 723 Comm: kworker/u5:0 Not tainted 4.3.0-rc3+ #1379
       Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 
1.8.1-20150318_183358- 04/01/2014
       Workqueue: hci0 hci_rx_work [bluetooth]
       task: f19da940 ti: f1a94000 task.ti: f1a94000
       EIP: 0060:[<c11f26be>] EFLAGS: 00010202 CPU: 0
       EIP is at __list_del_entry+0x44/0x71
       EAX: c0088d20 EBX: f30fcac0 ECX: 6b6b6b6b EDX: 6b6b6b6b
       ESI: f4b60000 EDI: c0088d20 EBP: f1a95d90 ESP: f1a95d8c
        DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
       CR0: 8005003b CR2: 6b6b6b6b CR3: 319e5000 CR4: 00000690
       Stack:
        f30fcac0 f1a95db0 f82dc3e1 f1bfc000 00000000 c106524f f1bfc000 f30fd020
        f1a95dc0 f1a95dd0 f82dcbdb f1a95de0 f82dcbdb 00000067 f1bfc000 f30fd020
        f1a95de0 f1a95df0 f82d1126 00000067 f82d1126 00000006 f30fd020 f1bfc000
       Call Trace:
        [<f82dc3e1>] smp_chan_destroy+0x192/0x240 [bluetooth]
        [<c106524f>] ? trace_hardirqs_on_caller+0x14e/0x169
        [<f82dcbdb>] smp_teardown_cb+0x47/0x64 [bluetooth]
        [<f82dcbdb>] ? smp_teardown_cb+0x47/0x64 [bluetooth]
        [<f82d1126>] l2cap_chan_del+0x5d/0x14d [bluetooth]
        [<f82d1126>] ? l2cap_chan_del+0x5d/0x14d [bluetooth]
        [<f82d40ef>] l2cap_conn_del+0x109/0x17b [bluetooth]
        [<f82d40ef>] ? l2cap_conn_del+0x109/0x17b [bluetooth]
        [<f82c0205>] ? hci_event_packet+0x5b1/0x2092 [bluetooth]
        [<f82d41aa>] l2cap_disconn_cfm+0x49/0x50 [bluetooth]
        [<f82d41aa>] ? l2cap_disconn_cfm+0x49/0x50 [bluetooth]
        [<f82c0228>] hci_event_packet+0x5d4/0x2092 [bluetooth]
        [<c1332c16>] ? skb_release_data+0x6a/0x95
        [<f82ce5d4>] ? hci_send_to_monitor+0xe7/0xf4 [bluetooth]
        [<c1409708>] ? _raw_spin_unlock_irqrestore+0x44/0x57
        [<f82b3bb0>] hci_rx_work+0xf1/0x28b [bluetooth]
        [<f82b3bb0>] ? hci_rx_work+0xf1/0x28b [bluetooth]
        [<c10635a0>] ? __lock_is_held+0x2e/0x44
        [<c104772e>] process_one_work+0x232/0x432
        [<c1071ddc>] ? rcu_read_lock_sched_held+0x50/0x5a
        [<c104772e>] ? process_one_work+0x232/0x432
        [<c1047d48>] worker_thread+0x1b8/0x255
        [<c1047b90>] ? rescuer_thread+0x23c/0x23c
        [<c104bb71>] kthread+0x91/0x96
        [<c14096a7>] ? _raw_spin_unlock_irq+0x27/0x44
        [<c1409d61>] ret_from_kernel_thread+0x21/0x30
        [<c104bae0>] ? kthread_parkme+0x1e/0x1e

      To solve the issue, introduce a new smp_cancel_pairing() API that can
      be used to clean up the SMP state before touching the hci_dev lists.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit fc64361ac15318126c64193929616fc4832071a6
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 09:38:31 2015 +0300

      Bluetooth: Disable auto-connection parameters when unpairing

      For connection parameters that are left around until a disconnection
      we should at least clear any auto-connection properties. This way a
      new Add Device call is required to re-set them after calling Unpair
      Device.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e2aacd963a06fc558a809ecb62f5833e6c340b28
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 10:08:59 2015 -0400

      net: mdio-gpio: move platform data header

      This header file only contains the platform data structure definition,
      so move it to the include/linux/platform_data/ directory.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 844338e5a46f5d80566fa853c6168a78cdadab01
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 10:08:58 2015 -0400

      ARM: gemini: remove unnecessary mdio-gpio includes

      Remove the inclusion of linux/mdio-gpio.h in nas4220b, wbd111 and wbd222
      boards since mdio-gpio is not used.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 104eb270e665f4fcd8cb8c8ab4c4d4538c604e92
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Oct 20 10:42:24 2015 +0200

      net: sun4i-emac: Properly free resources on probe failure and remove

      Fix sun4i-emac not releasing the following resources:
      -iomapped memory not released on probe-failure nor on remove
      -clock not getting disabled on probe-failure nor on remove
      -sram not being released on remove

      And while at it also add error checking to the clk_prepare_enable call
      done on probe.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c6aa74d546ccb94c99a1e95fb461f8b0e9410a3e
  Author: Wu Fengguang <fengguang.wu@xxxxxxxxx>
  Date:   Tue Oct 20 14:56:00 2015 +0800

      net: hisilicon: fix ptr_ret.cocci warnings

      drivers/net/ethernet/hisilicon/hns/hnae.c:442:1-3: WARNING: 
PTR_ERR_OR_ZERO can be used

       Use PTR_ERR_OR_ZERO rather than if(IS_ERR(...)) + PTR_ERR

      Generated by: scripts/coccinelle/api/ptr_ret.cocci

      CC: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit feec0cb3f20b837f8ca36e974267918d7a4497f8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Oct 19 20:40:17 2015 -0700

      ipv6: gro: support sit protocol

      Tom Herbert added SIT support to GRO with commit
      19424e052fb4 ("sit: Add gro callbacks to sit_offload"),
      later reverted by Herbert Xu.

      The problem came because Tom patch was building GRO
      packets without proper meta data : If packets were locally
      delivered, we would not care.

      But if packets needed to be forwarded, GSO engine was not
      able to segment individual segments.

      With the following patch, we correctly set skb->encapsulation
      and inner network header. We also update gso_type.

      Tested:

      Server :
      netserver
      modprobe dummy
      ifconfig dummy0 8.0.0.1 netmask 255.255.255.0 up
      arp -s 8.0.0.100 4e:32:51:04:47:e5
      iptables -I INPUT -s 10.246.7.151 -j TEE --gateway 8.0.0.100
      ifconfig sixtofour0
      sixtofour0 Link encap:IPv6-in-IPv4
                inet6 addr: 2002:af6:798::1/128 Scope:Global
                inet6 addr: 2002:af6:798::/128 Scope:Global
                UP RUNNING NOARP  MTU:1480  Metric:1
                RX packets:411169 errors:0 dropped:0 overruns:0 frame:0
                TX packets:409414 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:20319631739 (20.3 GB)  TX bytes:29529556 (29.5 MB)

      Client :
      netperf -H 2002:af6:798::1 -l 1000 &

      Checked on server traffic copied on dummy0 and verify segments were
      properly rebuilt, with proper IP headers, TCP checksums...

      tcpdump on eth0 shows proper GRO aggregation takes place.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f3af27786913851e720bc9466d1abffcfa7aff6
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Oct 19 20:17:59 2015 -0700

      net: dummy: add more features

      While testing my SIT/GRO patch using netfilter TEE module and a dummy
      device, I found some features were missing :

      TSO IPv6, UFO, and encapsulated traffic.

      ethtool -k dummy0 now gives :
      ...
      tcp-segmentation-offload: on
        tx-tcp-segmentation: on
        tx-tcp-ecn-segmentation: on
        tx-tcp6-segmentation: on
      udp-fragmentation-offload: on
      ...
      tx-gre-segmentation: on
      tx-ipip-segmentation: on
      tx-sit-segmentation: on
      tx-udp_tnl-segmentation: on

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e754ec69ab69601420eb2ed58ece803d77c93f61
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:19:00 2015 -0700

      openvswitch: Serialize nested ct actions if provided

      If userspace provides a ct action with no nested mark or label, then the
      storage for these fields is zeroed. Later when actions are requested,
      such zeroed fields are serialized even though userspace didn't
      originally specify them. Fix the behaviour by ensuring that no action is
      serialized in this case, and reject actions where userspace attempts to
      set these fields with mask=0. This should make netlink marshalling
      consistent across deserialization/reserialization.

      Reported-by: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f0909ee3d8e3514a274121f3bf217a4920fa12d
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:18:59 2015 -0700

      openvswitch: Mark connections new when not confirmed.

      New, related connections are marked as such as part of ovs_ct_lookup(),
      but they are not marked as "new" if the commit flag is used. Make this
      consistent by setting the "new" flag whenever !nf_ct_is_confirmed(ct).

      Reported-by: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d008a1df927846788b9dc02e770f65951f98ddc
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:18:58 2015 -0700

      openvswitch: Clarify conntrack COMMIT behaviour

      The presence of this attribute does not modify the ct_state for the
      current packet, only future packets. Make this more clear in the header
      definition.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e384715e9e702704c6941c575f0e6b322132a3a
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:18:57 2015 -0700

      openvswitch: Reject ct_state masks for unknown bits

      Currently, 0-bits are generated in ct_state where the bit position is
      undefined, and matches are accepted on these bit-positions. If userspace
      requests to match the 0-value for this bit then it may expect only a
      subset of traffic to match this value, whereas currently all packets
      will have this bit set to 0. Fix this by rejecting such masks.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e2e8009ff72ad2a795b67785f3238af152146368
  Author: Renato Westphal <renatowestphal@xxxxxxxxx>
  Date:   Mon Oct 19 18:51:34 2015 -0200

      tcp: remove improper preemption check in tcp_xmit_probe_skb()

      Commit e520af48c7e5a introduced the following bug when setting the
      TCP_REPAIR sockoption:

      [ 2860.657036] BUG: using __this_cpu_add() in preemptible [00000000] 
code: daemon/12164
      [ 2860.657045] caller is __this_cpu_preempt_check+0x13/0x20
      [ 2860.657049] CPU: 1 PID: 12164 Comm: daemon Not tainted 4.2.3 #1
      [ 2860.657051] Hardware name: Dell Inc. PowerEdge R210 II/0JP7TR, BIOS 
2.0.5 03/13/2012
      [ 2860.657054]  ffffffff81c7f071 ffff880231e9fdf8 ffffffff8185d765 
0000000000000002
      [ 2860.657058]  0000000000000001 ffff880231e9fe28 ffffffff8146ed91 
ffff880231e9fe18
      [ 2860.657062]  ffffffff81cd1a5d ffff88023534f200 ffff8800b9811000 
ffff880231e9fe38
      [ 2860.657065] Call Trace:
      [ 2860.657072]  [<ffffffff8185d765>] dump_stack+0x4f/0x7b
      [ 2860.657075]  [<ffffffff8146ed91>] check_preemption_disabled+0xe1/0xf0
      [ 2860.657078]  [<ffffffff8146edd3>] __this_cpu_preempt_check+0x13/0x20
      [ 2860.657082]  [<ffffffff817e0bc7>] tcp_xmit_probe_skb+0xc7/0x100
      [ 2860.657085]  [<ffffffff817e1e2d>] tcp_send_window_probe+0x2d/0x30
      [ 2860.657089]  [<ffffffff817d1d8c>] do_tcp_setsockopt.isra.29+0x74c/0x830
      [ 2860.657093]  [<ffffffff817d1e9c>] tcp_setsockopt+0x2c/0x30
      [ 2860.657097]  [<ffffffff81767b74>] sock_common_setsockopt+0x14/0x20
      [ 2860.657100]  [<ffffffff817669e1>] SyS_setsockopt+0x71/0xc0
      [ 2860.657104]  [<ffffffff81865172>] entry_SYSCALL_64_fastpath+0x16/0x75

      Since tcp_xmit_probe_skb() can be called from process context, use
      NET_INC_STATS() instead of NET_INC_STATS_BH().

      Fixes: e520af48c7e5 ("tcp: add TCPWinProbe and TCPKeepAlive SNMP 
counters")
      Signed-off-by: Renato Westphal <renatow@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36a28b21169d28db2a3409a4e2d4b9a7563c1a00
  Merge: e535679 00db674
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 19:26:17 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf

      Pablo Neira Ayuso says:

      ====================
      Netfilter fixes for net

      The following patchset contains four Netfilter fixes for net, they are:

      1) Fix Kconfig dependencies of new nf_dup_ipv4 and nf_dup_ipv6.

      2) Remove bogus test nh_scope in IPv4 rpfilter match that is breaking
         --accept-local, from Xin Long.

      3) Wait for RCU grace period after dropping the pending packets in the
         nfqueue, from Florian Westphal.

      4) Fix sleeping allocation while holding spin_lock_bh, from Nikolay 
Borisov.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b1974ed05ea90264d534a200e8a13932ad55f8b8
  Author: Arad, Ronen <ronen.arad@xxxxxxxxx>
  Date:   Mon Oct 19 09:23:28 2015 -0700

      netlink: Rightsize IFLA_AF_SPEC size calculation

      if_nlmsg_size() overestimates the minimum allocation size of netlink
      dump request (when called from rtnl_calcit()) or the size of the
      message (when called from rtnl_getlink()). This is because
      ext_filter_mask is not supported by rtnl_link_get_af_size() and
      rtnl_link_get_size().

      The over-estimation is significant when at least one netdev has many
      VLANs configured (8 bytes for each configured VLAN).

      This patch-set "rightsizes" the protocol specific attribute size
      calculation by propagating ext_filter_mask to rtnl_link_get_af_size()
      and adding this a argument to get_link_af_size op in rtnl_af_ops.

      Bridge module already used filtering aware sizing for notifications.
      br_get_link_af_size_filtered() is consistent with the modified
      get_link_af_size op so it replaces br_get_link_af_size() in br_af_ops.
      br_get_link_af_size() becomes unused and thus removed.

      Signed-off-by: Ronen Arad <ronen.arad@xxxxxxxxx>
      Acked-by: Sridhar Samudrala <sridhar.samudrala@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e53567948f82368247b4b1a63fcab4c76ef7d51c
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:43:11 2015 -0400

      tipc: conditionally expand buffer headroom over udp tunnel

      In commit d999297c3dbbe ("tipc: reduce locking scope during packet 
reception")
      we altered the packet retransmission function. Since then, when
      restransmitting packets, we create a clone of the original buffer
      using __pskb_copy(skb, MIN_H_SIZE), where MIN_H_SIZE is the size of
      the area we want to have copied, but also the smallest possible TIPC
      packet size. The value of MIN_H_SIZE is 24.

      Unfortunately, __pskb_copy() also has the effect that the headroom
      of the cloned buffer takes the size MIN_H_SIZE. This is too small
      for carrying the packet over the UDP tunnel bearer, which requires
      a minimum headroom of 28 bytes. A change to just use pskb_copy()
      lets the clone inherit the original headroom of 80 bytes, but also
      assumes that the copied data area is of at least that size, something
      that is not always the case. So that is not a viable solution.

      We now fix this by adding a check for sufficient headroom in the
      transmit function of udp_media.c, and expanding it when necessary.

      Fixes: commit d999297c3dbbe ("tipc: reduce locking scope during packet 
reception")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7a4264a9250fc6d555ff305aa5e5168723805bb9
  Author: Andreas Schwab <schwab@xxxxxxx>
  Date:   Mon Oct 19 17:37:13 2015 +0200

      net: cavium: change NET_VENDOR_CAVIUM to bool

      CONFIG_NET_VENDOR_CAVIUM is only used to hide/show config options and to
      include subdirectories in the build, so it doesn't make sense to make it
      tristate.

      Signed-off-by: Andreas Schwab <schwab@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 45c8b7b175ceb2d542e0fe15247377bf3bce29ec
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:33:00 2015 -0400

      tipc: allow non-linear first fragment buffer

      The current code for message reassembly is erroneously assuming that
      the the first arriving fragment buffer always is linear, and then goes
      ahead resetting the fragment list of that buffer in anticipation of
      more arriving fragments.

      However, if the buffer already happens to be non-linear, we will
      inadvertently drop the already attached fragment list, and later
      on trig a BUG() in __pskb_pull_tail().

      We see this happen when running fragmented TIPC multicast across UDP,
      something made possible since
      commit d0f91938bede ("tipc: add ip/udp media type")

      We fix this by not resetting the fragment list when the buffer is non-
      linear, and by initiatlizing our private fragment list tail pointer to
      the tail of the existing fragment list.

      Fixes: commit d0f91938bede ("tipc: add ip/udp media type")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1241365f1aeb24ef0ffe82970f7c558022ddc85f
  Author: James Morse <james.morse@xxxxxxx>
  Date:   Mon Oct 19 16:31:55 2015 +0100

      openvswitch: Allocate memory for ovs internal device stats.

      "openvswitch: Remove vport stats" removed the per-vport statistics, in
      order to use the netdev's statistics fields.
      "openvswitch: Fix ovs_vport_get_stats()" fixed the export of these stats
      to user-space, by using the provided netdev_ops to collate them - but ovs
      internal devices still use an unallocated dev->tstats field to count
      packets, which are no longer exported by this api.

      Allocate the dev->tstats field for ovs internal devices, and wire up
      ndo_get_stats64 with the original implementation of
      ovs_vport_get_stats().

      On its own, "openvswitch: Fix ovs_vport_get_stats()" fixes the OOPs,
      unmasking a full-on panic on arm64:

      =============%<==============
      [<ffffffbffc00ce4c>] internal_dev_recv+0xa8/0x170 [openvswitch]
      [<ffffffbffc0008b4>] do_output.isra.31+0x60/0x19c [openvswitch]
      [<ffffffbffc000bf8>] do_execute_actions+0x208/0x11c0 [openvswitch]
      [<ffffffbffc001c78>] ovs_execute_actions+0xc8/0x238 [openvswitch]
      [<ffffffbffc003dfc>] ovs_packet_cmd_execute+0x21c/0x288 [openvswitch]
      [<ffffffc0005e8c5c>] genl_family_rcv_msg+0x1b0/0x310
      [<ffffffc0005e8e60>] genl_rcv_msg+0xa4/0xe4
      [<ffffffc0005e7ddc>] netlink_rcv_skb+0xb0/0xdc
      [<ffffffc0005e8a94>] genl_rcv+0x38/0x50
      [<ffffffc0005e76c0>] netlink_unicast+0x164/0x210
      [<ffffffc0005e7b70>] netlink_sendmsg+0x304/0x368
      [<ffffffc0005a21c0>] sock_sendmsg+0x30/0x4c
      [SNIP]
      Kernel panic - not syncing: Fatal exception in interrupt
      =============%<==============

      Fixes: 8c876639c985 ("openvswitch: Remove vport stats.")
      Signed-off-by: James Morse <james.morse@xxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f1900fb5eca2cf9b96837e4931165003918d7d29
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 08:26:05 2015 -0700

      net: Really fix vti6 with oif in dst lookups

      6e28b000825d ("net: Fix vti use case with oif in dst lookups for IPv6")
      is missing the checks on FLOWI_FLAG_SKIP_NH_OIF. Add them.

      Fixes: 42a7b32b73d6 ("xfrm: Add oif to dst lookups")
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 53387c4e22ac33d27a552b3d56bad932bd32531b
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Mon Oct 19 09:21:37 2015 -0400

      tipc: extend broadcast link window size

      The default fix broadcast window size is currently set to 20 packets.
      This is a very low value, set at a time when we were still testing on
      10 Mb/s hubs, and a change to it is long overdue.

      Commit 7845989cb4b3da1db ("net: tipc: fix stall during bclink wakeup 
procedure")
      revealed a problem with this low value. For messages of importance LOW,
      the backlog queue limit will be  calculated to 30 packets, while a
      single, maximum sized message of 66000 bytes, carried across a 1500 MTU
      network consists of 46 packets.

      This leads to the following scenario (among others leading to the same
      situation):

      1: Msg 1 of 46 packets is sent. 20 packets go to the transmit queue, 26
         packets to the backlog queue.
      2: Msg 2 of 46 packets is attempted sent, but rejected because there is
         no more space in the backlog queue at this level. The sender is added
         to the wakeup queue with a "pending packets chain size" number of 46.
      3: Some packets in the transmit queue are acked and released. We try to
         wake up the sender, but the pending size of 46 is bigger than the LOW
         wakeup limit of 30, so this doesn't happen.
      5: Subsequent acks releases all the remaining buffers. Each time we test
         for the wakeup criteria and find that 46 still is larger than 30,
         even after both the transmit and the backlog queues are empty.
      6: The sender is never woken up and given a chance to send its message.
         He is stuck.

      We could now loosen the wakeup criteria (used by link_prepare_wakeup())
      to become equal to the send criteria (used by tipc_link_xmit()), i.e.,
      by ignoring the "pending packets chain size" value altogether, or we can
      just increase the queue limits so that the criteria can be satisfied
      anyway. There are good reasons (potentially multiple waiting senders) to
      not opt for the former solution, so we choose the latter one.

      This commit fixes the problem by giving the broadcast link window a
      default value of 50 packets. We also introduce a new minimum link
      window size BCLINK_MIN_WIN of 32, which is enough to always avoid the
      described situation. Finally, in order to not break any existing users
      which may set the window explicitly, we enforce that the window is set
      to the new minimum value in case the user is trying to set it to
      anything lower.

      Fixes: 7845989cb4b3da1db ("net: tipc: fix stall during bclink wakeup 
procedure")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f89abf56abbd0e1c6e3cef9813e6d9f05383c1e
  Author: Christian Engelmayer <cengelma@xxxxxx>
  Date:   Wed Oct 21 00:50:06 2015 +0200

      btrfs: fix possible leak in btrfs_ioctl_balance()

      Commit 8eb934591f8b ("btrfs: check unsupported filters in balance
      arguments") adds a jump to exit label out_bargs in case the argument
      check fails. At this point in addition to the bargs memory, the
      memory for struct btrfs_balance_control has already been allocated.
      Ownership of bctl is passed to btrfs_balance() in the good case,
      thus the memory is not freed due to the introduced jump. Make sure
      that the memory gets freed in any case as necessary. Detected by
      Coverity CID 1328378.

      Signed-off-by: Christian Engelmayer <cengelma@xxxxxx>
      Reviewed-by: David Sterba <dsterba@xxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit c50f13f911b90a722308bffbf26187ff3890aa1e
  Merge: c2a7558 677c884
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 22 10:24:55 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      Just a crash fix for radeon and amdgpu if the user has forcibly disabled
      dpm and tries to access the pwm sysfs controls.

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: add missing dpm check for KV dpm late init
        drm/amdgpu/dpm: don't add pwm attributes if DPM is disabled
        drm/radeon/dpm: don't add pwm attributes if DPM is disabled

  commit c2a75586ff27ee7636bb2bf33ee66992a6603e49
  Merge: 37363bc 18e9345
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 22 10:24:21 2015 +1000

      Merge tag 'drm-intel-fixes-2015-10-16' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      The revert dance could use some explanation: we had stuff fixed in
      -next, and initially backported one commit to v4.3. Now, turns out we
      need more fixes, and we could cherry-pick them all without conflicts if
      we reverted the backported one first. So did that to not have to edit
      and backport them all.

      * tag 'drm-intel-fixes-2015-10-16' of 
git://anongit.freedesktop.org/drm-intel:
        drm/i915: Add primary plane to mask if it's visible
        drm/i915: Move sprite/cursor plane disable to intel_sanitize_crtc()
        drm/i915: Assign hwmode after encoder state readout
        Revert "drm/i915: Add primary plane to mask if it's visible"
        drm/i915: Deny wrapping an userptr into a framebuffer
        drm/i915: Enable DPLL VGA mode before P1/P2 divider write
        drm/i915: Restore lost DPLL register write on gen2-4
        drm/i915: Flush pipecontrol post-sync writes
        drm/i915: Fix kerneldoc for i915_gem_shrink_all

  commit 8832317f662c06f5c06e638f57bfe89a71c9b266
  Author: Vasant Hegde <hegdevasant@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:53:29 2015 +0530

      powerpc/rtas: Validate rtas.entry before calling enter_rtas()

      Currently we do not validate rtas.entry before calling enter_rtas(). This
      leads to a kernel oops when user space calls rtas system call on a powernv
      platform (see below). This patch adds code to validate rtas.entry before
      making enter_rtas() call.

        Oops: Exception in kernel mode, sig: 4 [#1]
        SMP NR_CPUS=1024 NUMA PowerNV
        task: c000000004294b80 ti: c0000007e1a78000 task.ti: c0000007e1a78000
        NIP: 0000000000000000 LR: 0000000000009c14 CTR: c000000000423140
        REGS: c0000007e1a7b920 TRAP: 0e40   Not tainted  
(3.18.17-340.el7_1.pkvm3_1_0.2400.1.ppc64le)
        MSR: 1000000000081000 <HV,ME>  CR: 00000000  XER: 00000000
        CFAR: c000000000009c0c SOFTE: 0
        NIP [0000000000000000]           (null)
        LR [0000000000009c14] 0x9c14
        Call Trace:
        [c0000007e1a7bba0] [c00000000041a7f4] avc_has_perm_noaudit+0x54/0x110 
(unreliable)
        [c0000007e1a7bd80] [c00000000002ddc0] ppc_rtas+0x150/0x2d0
        [c0000007e1a7be30] [c000000000009358] syscall_exit+0x0/0x98

      Cc: stable@xxxxxxxxxxxxxxx # v3.2+
      Fixes: 55190f88789a ("powerpc: Add skeleton PowerNV platform")
      Reported-by: NAGESWARA R. SASTRY <nasastry@xxxxxxxxxx>
      Signed-off-by: Vasant Hegde <hegdevasant@xxxxxxxxxxxxxxxxxx>
      [mpe: Reword change log, trim oops, and add stable + fixes]
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 37363bc03e0b53c45e98f34e35c75b55611417e0
  Merge: 30730c7 2a6c521
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 22 09:15:10 2015 +1000

      Merge branch 'linux-4.3' of 
git://anongit.freedesktop.org/nouveau/linux-2.6 into drm-fixes

      Just one fix from Ilia to resolve various issues that have resulted from
      buffer eviction.

      * 'linux-4.3' of git://anongit.freedesktop.org/nouveau/linux-2.6:
        drm/nouveau/gem: return only valid domain when there's only one

  commit 2a6c521bb41ce862e43db46f52e7681d33e8d771
  Author: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
  Date:   Tue Oct 20 01:15:39 2015 -0400

      drm/nouveau/gem: return only valid domain when there's only one

      On nv50+, we restrict the valid domains to just the one where the buffer
      was originally created. However after the buffer is evicted to system
      memory, we might move it back to a different domain that was not
      originally valid. When sharing the buffer and retrieving its GEM_INFO
      data, we still want the domain that will be valid for this buffer in a
      pushbuf, not the one where it currently happens to be.

      This resolves fdo#92504 and several others. These are due to suspend
      evicting all buffers, making it more likely that they temporarily end up
      in the wrong place.

      Cc: stable@xxxxxxxxxxxxxxx
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=92504
      Signed-off-by: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit 30730c7f5943b3beace1e29f7f1476e05de3da14
  Author: Adam Richter <adamrichter4@xxxxxxxxx>
  Date:   Fri Oct 16 03:33:02 2015 -0700

      drm: fix mutex leak in drm_dp_get_mst_branch_device

      In Linux 4.3-rc5, there is an error case in drm_dp_get_branch_device
      that returns without releasing mgr->lock, resulting a spew of kernel
      messages about a kernel work function possibly having leaked a mutex
      and presumably more serious adverse consequences later.  This patch
      changes the error to "goto out" to unlock the mutex before returning.

      [airlied: grabbed from drm-next as it fixes something we've seen]

      Signed-off-by: Adam J. Richter <adam_richter2004@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 8a70dd2669200ce83255ed8c5ebef7e59f9e8707
  Merge: 7f67786 ba2374f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 06:32:48 2015 +0900

      Merge tag 'for-linus-20151021' of git://git.infradead.org/intel-iommu

      Pull intel-iommu bugfix from David Woodhouse:
       "This contains a single fix, for when the IOMMU API is used to overlay
        an existing mapping comprised of 4KiB pages, with a mapping that can
        use superpages.

        For the *first* superpage in the new mapping, we were correctly¹
        freeing the old bottom-level page table page and clearing the link to
        it, before installing the superpage.  For subsequent superpages,
        however, we weren't.  This causes a memory leak, and a warning about
        setting a PTE which is already set.

        ¹ Well, not *entirely* correctly.  We just free the page table pages
          right there and then, which is wrong.  In fact they should only be
          freed *after* the IOTLB is flushed so we know the hardware will no
          longer be looking at them....  and in fact I note that the IOTLB
          flush is completely missing from the intel_iommu_map() code path,
          although it needs to be there if it's permitted to overwrite
          existing mappings.

          Fixing those is somewhat more intrusive though, and will probably
          need to wait for 4.4 at this point"

      * tag 'for-linus-20151021' of git://git.infradead.org/intel-iommu:
        iommu/vt-d: fix range computation when making room for large pages

  commit 7f67786330ba500ebd7c62ff52b5f7cc6336358f
  Merge: be0e198 08b137d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 06:31:27 2015 +0900

      Merge tag 'mmc-v4.3-rc5' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC bugfix from Ulf Hansson:
       "Here's yet another MMC fix intended for v4.3 rc7.  I don't expect to
        send any further pull requests for 4.3 rc[n].

        MMC core:
         - Don't re-tune in the reset sequence to allow re-init of the card"

      * tag 'mmc-v4.3-rc5' of git://git.linaro.org/people/ulf.hansson/mmc:
        mmc: core: Fix init_card in 52Mhz

  commit e3d006ce8180a0c025ce66bdc89bbc125f85be57
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Oct 21 15:45:13 2015 -0300

      perf annotate: Add debug message for out of bounds sample

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-q0lde9ajs84oi38nlyjcqbwg@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8b8cde49586566471d65af9a59e25d3edb941387
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 11:46:36 2015 -0700

      perf evsel: Print branch filter state with -vv

      Add a missing field to the perf_event_attr debug output.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Acked-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445366797-30894-4-git-send-email-andi@xxxxxxxxxxxxxx
      [ Print it between config2 and sample_regs_user (peterz)]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0ca81a2840f77855bbad1b9f172c545c4dc9e6a4
  Author: Doron Tsur <doront@xxxxxxxxxxxx>
  Date:   Sun Oct 11 15:58:17 2015 +0300

      IB/cm: Fix rb-tree duplicate free and use-after-free

      ib_send_cm_sidr_rep could sometimes erase the node from the sidr
      (depending on errors in the process). Since ib_send_cm_sidr_rep is
      called both from cm_sidr_req_handler and cm_destroy_id, cm_id_priv
      could be either erased from the rb_tree twice or not erased at all.
      Fixing that by making sure it's erased only once before freeing
      cm_id_priv.

      Fixes: a977049dacde ('[PATCH] IB: Add the kernel CM implementation')
      Signed-off-by: Doron Tsur <doront@xxxxxxxxxxxx>
      Signed-off-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 09dc1387c9c06cdaf55bc99b35238bd2ec0aed4b
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Wed Oct 21 21:31:49 2015 +0200

      drm/vmwgfx: Stabilize the command buffer submission code

      This commit addresses some stability problems with the command buffer
      submission code recently introduced:

      1) Make the vmw_cmdbuf_man_process() function handle reruns internally to
      avoid losing interrupts if the caller forgets to rerun on -EAGAIN.
      2) Handle default command buffer allocations using inline command buffers.
      This avoids rare allocation deadlocks.
      3) In case of command buffer errors we might lose fence submissions.
      Therefore send a new fence after each command buffer error. This will help
      avoid lengthy fence waits.

      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 17bc08f0d1b17d6d5e4967c1b430af627c5f2041
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:10 2015 +0300

      Bluetooth: Remove unnecessary hci_explicit_connect_lookup function

      There's only one user of this helper which can be replaces with a call
      to hci_pend_le_action_lookup() and a check for params->explicit_connect.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1ede9868f6577e2bd7eda1a05cd6812aff5c6c8a
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:07 2015 +0300

      Bluetooth: Remove redundant (and possibly wrong) flag clearing

      There's no need to clear the HCI_CONN_ENCRYPT_PEND flag in
      smp_failure. In fact, this may cause the encryption tracking to get
      out of sync as this has nothing to do with HCI activity.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b5c2b6214c609f2be4c020c0be90758b5feeb446
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:09 2015 +0300

      Bluetooth: Add hdev helper variable to hci_le_create_connection_cancel

      The hci_le_create_connection_cancel() function needs to use the hdev
      pointer in many places so add a variable for it to avoid the need to
      dereference the hci_conn every time.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ec182f0397e7065dabf13a99fc745fcab0bdc641
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:03 2015 +0300

      Bluetooth: Remove unnecessary indentation in unpair_device()

      Instead of doing all of the LE-specific handling in an else-branch in
      unpair_device() create a 'done' label for the BR/EDR branch to jump to
      and then remove the else-branch completely.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f5ad4ffceba0b34adb0d896a069b81fc68f2d7b6
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:02 2015 +0300

      Bluetooth: 6lowpan: Use hci_conn_hash_lookup_le() when possible

      Use the new hci_conn_hash_lookup_le() API to look up LE connections.
      This way we're guaranteed exact matches that also take into account
      the address type.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 9d4c1cc15b14b4a96ddfcfac533a12f9f527c129
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:01 2015 +0300

      Bluetooth: Use hci_conn_hash_lookup_le() when possible

      Use the new hci_conn_hash_lookup_le() API to look up LE connections.
      This way we're guaranteed exact matches that also take into account
      the address type.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1b51c7b6e878a2df6fdb5bcf51f966eb46a330e0
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:00 2015 +0300

      Bluetooth: Add hci_conn_hash_lookup_le() helper function

      Many of the existing LE connection lookups are forced to use
      hci_conn_hash_lookup_ba() which doesn't take into account the address
      type. What's worse, most of the users don't bother checking that the
      returned address type matches what was wanted.

      This patch adds a new helper API to look up LE connections based on
      their address and address type, paving the way to have the
      hci_conn_hash_lookup_ba() users converted to do more precise lookups.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 85813a7ec774b982899c82f86c52cad47588f863
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:02:59 2015 +0300

      Bluetooth: Add le_addr_type() helper function

      The mgmt code needs to convert from mgmt/L2CAP address types to HCI in
      many places. Having a dedicated helper function for this simplifies
      code by shortening it and removing unnecessary 'addr_type' variables.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ad355e383d826e3506c3caaa0fe991fd112de47b
  Merge: b10d92a 0d99749
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 21 17:46:56 2015 +0200

      Merge tag 'kvm-arm-for-v4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into kvm-master

      A late round of KVM/ARM fixes for v4.3-rc7, fixing:
       - A bug where level-triggered interrupts lowered from userspace
         are still routed to the guest
       - A memory leak an a failed initialization path
       - A build error under certain configurations
       - Several timer bugs introduced with moving the timer to the active
         state handling instead of the masking trick.

  commit 55f41297576ddb7868af2f13f3a8107178dee2d0
  Merge: 0690f4f db347f1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 21 17:03:37 2015 +0200

      Merge tag 'mvebu-fixes-4.3-2' of git://git.infradead.org/linux-mvebu into 
fixes

      Merge "mvebu fixes for 4.3 (part 2)" from Gregory CLEMENT:

      Fix wrong compatible for A385 DB AP preventing using suspend

      * tag 'mvebu-fixes-4.3-2' of git://git.infradead.org/linux-mvebu:
        ARM: mvebu: correct a385-db-ap compatible string

  commit 0690f4f2ef487259e9ce39f575c48c89745058f2
  Merge: 6701ef0 b28fec1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 21 17:02:13 2015 +0200

      Merge tag 'samsung-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung into fixes

      Merge "Samsung 2nd fixes for v4.3" from Kukjin Kim:

      - fix SOC detection of exynos thermal on exynos5260
      - fix audio card detection on Peach boards
      - fix double of_node_put() when parsing child power domains

      * tag 'samsung-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung:
        thermal: exynos: Fix register read in TMU
        ARM: dts: Fix audio card detection on Peach boards
        ARM: EXYNOS: Fix double of_node_put() when parsing child power domains

  commit 6701ef0318f76a9765a3fc762cbac405e024a8c2
  Merge: 4f1d841 57df538
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 21 17:01:14 2015 +0200

      Merge tag 'omap-for-v4.3/fixes-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Merge "Fixes for omaps for v4.3-rc cycle" from Tony Lindgren:

      - Fix oops with LPAE and moew than 2GB of memory by enabling
        ZONE_DMA for LPAE. Probably no need for stable on this one as we
        only recently ran into this with the mainline kernel

      - Fix imprecise external abort caused by bogus SRAM init. This affects
        dm814x recently merged, so no need for stable on this one AFAIK

      * tag 'omap-for-v4.3/fixes-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        ARM: OMAP2+: Fix imprecise external abort caused by bogus SRAM init
        ARM: OMAP2+: Fix oops with LPAE and more than 2GB of memory

  commit 6ac311ae8bfb47de09f349e781e26373944d2ee3
  Author: Elad Raz <eladr@xxxxxxxxxxxx>
  Date:   Mon Oct 19 15:37:25 2015 +0300

      Adding switchdev ageing notification on port bridged

      Configure ageing time to the HW for newly bridged device

      CC: Scott Feldman <sfeldma@xxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 50010c20597d14667eff0fdb628309986f195230
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Mon Oct 19 13:16:49 2015 +0300

      irda: precedence bug in irlmp_seq_hb_idx()

      This is decrementing the pointer, instead of the value stored in the
      pointer.  KASan detects it as an out of bounds reference.

      Reported-by: "Berry Cheng ç¨?å??(æ??æ·¼)" <chengmiao.cj@xxxxxxxxxxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca88ea1247dfee094e2467a3578eaec9bdf0833a
  Author: Joe Jin <joe.jin@xxxxxxxxxx>
  Date:   Mon Oct 19 13:37:17 2015 +0800

      xen-netfront: update num_queues to real created

      Sometimes xennet_create_queues() may failed to created all requested
      queues, we need to update num_queues to real created to avoid NULL
      pointer dereference.

      Signed-off-by: Joe Jin <joe.jin@xxxxxxxxxx>
      Cc: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Wei Liu <wei.liu2@xxxxxxxxxx>
      Cc: Ian Campbell <ian.campbell@xxxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6a835bb04ca34b6fd337eea0544a871ba2349b8
  Author: Gao feng <omarapazanadi@xxxxxxxxx>
  Date:   Sun Oct 18 23:35:56 2015 +0800

      vsock: fix missing cleanup when misc_register failed

      reset transport and unlock if misc_register failed.

      Signed-off-by: Gao feng <omarapazanadi@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 10be15ff6c33f1dc0a96cae6089dc2268834e568
  Merge: f3c9f95 968200f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 07:36:51 2015 -0700

      Merge branch 'mv643xx-fixes'

      Philipp Kirchhofer says:

      ====================
      net: mv643xx_eth: TSO TX data corruption fixes

      as previously discussed [1] the mv643xx_eth driver has some
      issues with data corruption when using TCP segmentation offload (TSO).

      The following patch set improves this situation by fixing two data
      corruption bugs in the TSO TX path.

      Before applying the patches repeatedly accessing large files located on
      a SMB share on my NSA325 NAS with TSO enabled resulted in different
      hash sums, which confirmed that data corruption is happening during
      file transfer. After applying the patches the hash sums were the same.

      As this is my first patch submission please feel free to point out any
      issues with the patch set.

      [1] http://thread.gmane.org/gmane.linux.network/336530
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 968200f322daccc6f08fee26fe1bb4232e460408
  Author: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:02:44 2015 +0200

      net: mv643xx_eth: Defer writing the first TX descriptor when using TSO

      To prevent a race between the TX DMA engine and the CPU the writing of the
      first transmit descriptor must be deferred until all following descriptors
      have been updated. The network card may otherwise start transmitting 
before
      all packet descriptors are set up correctly, which leads to data 
corruption
      or an aborted transmit operation.

      This deferral is already done in the non-TSO TX path, implement it also in
      the TSO TX path.

      Signed-off-by: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 91986fd3d335a2ea651bc85cf5a03f2f61a2aa34
  Author: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:02:43 2015 +0200

      net: mv643xx_eth: Ensure proper data alignment in TSO TX path

      The TX DMA engine requires that buffers with a size of 8 bytes or smaller
      must be 64 bit aligned. This requirement may be violated when doing TSO,
      as in this case larger skb frags can be broken up and transmitted in small
      parts with then inappropriate alignment.

      Fix this by checking for proper alignment before handing a buffer to the
      DMA engine. If the data is misaligned realign it by copying it into the
      TSO header data area.

      Signed-off-by: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9299b24712400d1cfe3dcf3e5dcb6cac2940df56
  Author: Dave Martin <Dave.Martin@xxxxxxx>
  Date:   Thu Jul 30 16:36:25 2015 +0100

      arm64: Constify hwcap name string arrays

      The hwcap string arrays used for generating the contents of
      /proc/cpuinfo are currently arrays of non-const pointers.

      There's no need for these pointers to be mutable, so this patch makes
      them const so that they can be moved to .rodata.

      Signed-off-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 4db8e5ea6b07ae83e4361aee3f967f7126e01fa4
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:55 2015 +0100

      arm64/kvm: Make use of the system wide safe values

      Use the system wide safe value from the new API for safer
      decisions

      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Cc: kvmarm@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Acked-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3085bb01b40676d946a13064483ab2819ae3b010
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:54 2015 +0100

      arm64/debug: Make use of the system wide safe value

      Use the system wide value of ID_AA64DFR0 to make safer decisions

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fe80f9f2da1006a4308c2bc018ee1d67f10dd8d0
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:53 2015 +0100

      arm64: Move FP/ASIMD hwcap handling to common code

      The FP/ASIMD is detected in fpsimd_init(), which is built-in
      unconditionally. Lets move the hwcap handling to the central place.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 37b01d53ceefa390d6eee7a82f3c156b64951bf3
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:52 2015 +0100

      arm64/HWCAP: Use system wide safe values

      Extend struct arm64_cpu_capabilities to handle the HWCAP detection
      and make use of the system wide value of the feature registers for
      a reliable set of HWCAPs.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit da8d02d19ffdd201af632c755a473b6df4b3e4cc
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:51 2015 +0100

      arm64/capabilities: Make use of system wide safe value

      Now that we can reliably read the system wide safe value for a
      feature register, use that to compute the system capability.
      This patch also replaces the 'feature-register-specific'
      methods with a generic routine to check the capability.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit dbb4e152b8da1f977d9d8cd7e494ab4ee3622f72
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:50 2015 +0100

      arm64: Delay cpu feature capability checks

      At the moment we run through the arm64_features capability list for
      each CPU and set the capability if one of the CPU supports it. This
      could be problematic in a heterogeneous system with differing 
capabilities.
      Delay the CPU feature checks until all the enabled CPUs are up(i.e,
      smp_cpus_done(), so that we can make better decisions based on the
      overall system capability. Once we decide and advertise the capabilities
      the alternatives can be applied. From this state, we cannot roll back
      a feature to disabled based on the values from a new hotplugged CPU,
      due to the runtime patching and other reasons. So, for all new CPUs,
      we need to make sure that they have the established system capabilities.
      Failing which, we bring the CPU down, preventing it from turning online.
      Once the capabilities are decided, any new CPU booting up goes through
      verification to ensure that it has all the enabled capabilities and also
      invokes the respective enable() method on the CPU.

      The CPU errata checks are not delayed and is still executed per-CPU
      to detect the respective capabilities. If we ever come across a non-errata
      capability that needs to be checked on each-CPU, we could introduce them 
via
      a new capability table(or introduce a flag), which can be processed per 
CPU.

      The next patch will make the feature checks use the system wide
      safe value of a feature register.

      NOTE: The enable() methods associated with the capability is scheduled
      on all the CPUs (which is the only use case at the moment). If we need
      a different type of 'enable()' which only needs to be run once on any CPU,
      we should be able to handle that when needed.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      [catalin.marinas@xxxxxxx: static variable and coding style fixes]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ce8b602c694c9482e0ffb7432cd59fa2276673fe
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:49 2015 +0100

      arm64: Refactor check_cpu_capabilities

      check_cpu_capabilities runs through a given list of caps and
      checks if the system has the cap, updates the system capability
      bitmap and also runs any enable() methods associated with them.
      All of this is not quite obvious from the name 'check'. This
      patch splits the check_cpu_capabilities into two parts :

      1) update_cpu_capabilities
       => Runs through the given list and updates the system
          wide capability map.
      2) enable_cpu_capabilities
       => Runs through the given list and invokes enable() (if any)
          for the caps enabled on the system.

      Cc: Andre Przywara <andre.przywara@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Suggested-by: Catalin Marinas <catalin.marinsa@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c1e8656cbae139c8aaf34d7b802edecbc8a1cf58
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:48 2015 +0100

      arm64: Cleanup mixed endian support detection

      Make use of the system wide safe register to decide the support
      for mixed endian.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit b3f1537893b54d0f42f52e0f4cde5e17e21f564c
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:47 2015 +0100

      arm64: Read system wide CPUID value

      Add an API for reading the safe CPUID value across the
      system from the new infrastructure.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3086d391f992984def0aa6aa4a36f54853c58536
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:46 2015 +0100

      arm64: Consolidate CPU Sanity check to CPU Feature infrastructure

      This patch consolidates the CPU Sanity check to the new infrastructure.

      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3c739b57108436211c7f798ba3de0bb0cd8ef469
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:45 2015 +0100

      arm64: Keep track of CPU feature registers

      This patch adds an infrastructure to keep track of the CPU feature
      registers on the system. For each register, the infrastructure keeps
      track of the system wide safe value of the feature bits. Also, tracks
      the which fields of a register should be matched strictly across all
      the CPUs on the system for the SANITY check infrastructure.

      The feature bits are classified into following 3 types depending on
      the implication of the possible values. This information is used to
      decide the safe value for a feature.

      LOWER_SAFE  - The smaller value is safer
      HIGHER_SAFE - The bigger value is safer
      EXACT       - We can't decide between the two, so a predefined safe_value 
is used.

      This infrastructure will be later used to make better decisions for:

       - Kernel features (e.g, KVM, Debug)
       - SANITY Check
       - CPU capability
       - ELF HWCAP
       - Exposing CPU Feature register to userspace.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      [catalin.marinas@xxxxxxx: whitespace fix]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ce98a677d897dbaac86905652292fab1eeeb2b93
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:44 2015 +0100

      arm64: Handle width of a cpuid feature

      Introduce a helper to extract cpuid feature for any given
      width.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 12d11817eaafa414eeb47af684093eb2165ebe37
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:43 2015 +0100

      arm64: Move /proc/cpuinfo handling code

      This patch moves the /proc/cpuinfo handling code:

      arch/arm64/kernel/{setup.c to cpuinfo.c}

      No functional changes

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit cdcf817b7e4b62b935d8797f7d07ea0b97760884
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:42 2015 +0100

      arm64: Move mixed endian support detection

      Move the mixed endian support detection code to cpufeature.c
      from cpuinfo.c. This also moves the update_cpu_features()
      used by mixed endian detection code, which will get more
      functionality.

      Also moves the ID register field shifts to asm/sysreg.h,
      where all the useful definitions will end up in later patches.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9cdf8ec4a86b9310111f741bbaf11df9120e0482
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:41 2015 +0100

      arm64: Move cpu feature detection code

      This patch moves the CPU feature detection code from
       arch/arm64/kernel/{setup.c to cpufeature.c}

      The plan is to consolidate all the CPU feature handling
      in cpufeature.c.

      Apart from changing pr_fmt from "alternatives" to "cpu features",
      there are no functional changes.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 4b998ff1885eecd3dc330bf057e24667c1db84a4
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:40 2015 +0100

      arm64: Delay cpuinfo_store_boot_cpu

      At the moment the boot CPU stores the cpuinfo long before the
      PERCPU areas are initialised by the kernel. This could be problematic
      as the non-boot CPU data structures might get copied with the data
      from the boot CPU, giving us no chance to detect if a particular CPU
      updated its cpuinfo. This patch delays the boot cpu store to
      smp_prepare_boot_cpu().

      Also kills the setup_processor() which no longer does meaningful
      work.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3a75578efae64b94d76eacbf8adf2a3ab13c6aa1
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:39 2015 +0100

      arm64: Delay ELF HWCAP initialisation until all CPUs are up

      Delay the ELF HWCAP initialisation until all the (enabled) CPUs are
      up, i.e, smp_cpus_done(). This is in preparation for detecting the
      common features across the CPUS and creating a consistent ELF HWCAP
      for the system.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 64f17818977d0989f7d05347670777611b295799
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:38 2015 +0100

      arm64: Make the CPU information more clear

      At early boot, we print the CPU version/revision. On a heterogeneous
      system, we could have different types of CPUs. Print the CPU info for
      all active cpus. Also, the secondary CPUs prints the message only when
      they turn online.

      Also, remove the redundant 'revision' information which doesn't
      make any sense without the 'variant' field.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit e27c5b9d23168cc2cb8fec147ae7ed1f7a2005c3
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Oct 13 18:14:19 2015 -0400

      writeback: remove broken rbtree_postorder_for_each_entry_safe() usage in 
cgwb_bdi_destroy()

      a20135ffbc44 ("writeback: don't drain bdi_writeback_congested on bdi
      destruction") added rbtree_postorder_for_each_entry_safe() which is
      used to remove all entries; however, according to Cody, the iterator
      isn't safe against operations which may rebalance the tree.  Fix it by
      switching to repeatedly removing rb_first() until empty.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: Cody P Schafer <dev@xxxxxxxxxx>
      Fixes: a20135ffbc44 ("writeback: don't drain bdi_writeback_congested on 
bdi destruction")
      Link: 
http://lkml.kernel.org/g/1443997973-1700-1-git-send-email-dev@xxxxxxxxxx
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit eb9fae328faff9807a4ab5c1834b19f34dd155d4
  Merge: c8fdc32 4f41b1c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 07:00:59 2015 -0700

      Merge branch 'tcp-rack'

      Yuchung Cheng says:

      ====================
      RACK loss detection

      RACK (Recent ACK) loss recovery uses the notion of time instead of
      packet sequence (FACK) or counts (dupthresh).

      It's inspired by the FACK heuristic in tcp_mark_lost_retrans(): when a
      limited transmit (new data packet) is sacked in recovery, then any
      retransmission sent before that newly sacked packet was sent must have
      been lost, since at least one round trip time has elapsed.

      But that existing heuristic from tcp_mark_lost_retrans()
      has several limitations:
        1) it can't detect tail drops since it depends on limited transmit
        2) it's disabled upon reordering (assumes no reordering)
        3) it's only enabled in fast recovery but not timeout recovery

      RACK addresses these limitations with a core idea: an unacknowledged
      packet P1 is deemed lost if a packet P2 that was sent later is is
      s/acked, since at least one round trip has passed.

      Since RACK cares about the time sequence instead of the data sequence
      of packets, it can detect tail drops when a later retransmission is
      s/acked, while FACK or dupthresh can't. For reordering RACK uses a
      dynamically adjusted reordering window ("reo_wnd") to reduce false
      positives on ever (small) degree of reordering, similar to the delayed
      Early Retransmit.

      In the current patch set RACK is only a supplemental loss detection
      and does not trigger fast recovery. However we are developing RACK
      to replace or consolidate FACK/dupthresh, early retransmit, and
      thin-dupack. These heuristics all implicitly bear the time notion.
      For example, the delayed Early Retransmit is simply applying RACK
      to trigger the fast recovery with small inflight.

      RACK requires measuring the minimum RTT. Tracking a global min is less
      robust due to traffic engineering pathing changes. Therefore it uses a
      windowed filter by Kathleen Nichols. The min RTT can also be useful
      for various other purposes like congestion control or stat monitoring.

      This patch has been used on Google servers for well over 1 year. RACK
      has also been implemented in the QUIC protocol. We are submitting an
      IETF draft as well.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f41b1c58a32537542f14c1150099131613a5e8a
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:47 2015 -0700

      tcp: use RACK to detect losses

      This patch implements the second half of RACK that uses the the most
      recent transmit time among all delivered packets to detect losses.

      tcp_rack_mark_lost() is called upon receiving a dubious ACK.
      It then checks if an not-yet-sacked packet was sent at least
      "reo_wnd" prior to the sent time of the most recently delivered.
      If so the packet is deemed lost.

      The "reo_wnd" reordering window starts with 1msec for fast loss
      detection and changes to min-RTT/4 when reordering is observed.
      We found 1msec accommodates well on tiny degree of reordering
      (<3 pkts) on faster links. We use min-RTT instead of SRTT because
      reordering is more of a path property but SRTT can be inflated by
      self-inflicated congestion. The factor of 4 is borrowed from the
      delayed early retransmit and seems to work reasonably well.

      Since RACK is still experimental, it is now used as a supplemental
      loss detection on top of existing algorithms. It is only effective
      after the fast recovery starts or after the timeout occurs. The
      fast recovery is still triggered by FACK and/or dupack threshold
      instead of RACK.

      We introduce a new sysctl net.ipv4.tcp_recovery for future
      experiments of loss recoveries. For now RACK can be disabled by
      setting it to 0.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 659a8ad56f490279f0efee43a62ffa1ac914a4e0
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:46 2015 -0700

      tcp: track the packet timings in RACK

      This patch is the first half of the RACK loss recovery.

      RACK loss recovery uses the notion of time instead
      of packet sequence (FACK) or counts (dupthresh). It's inspired by the
      previous FACK heuristic in tcp_mark_lost_retrans(): when a limited
      transmit (new data packet) is sacked, then current retransmitted
      sequence below the newly sacked sequence must been lost,
      since at least one round trip time has elapsed.

      But it has several limitations:
      1) can't detect tail drops since it depends on limited transmit
      2) is disabled upon reordering (assumes no reordering)
      3) only enabled in fast recovery ut not timeout recovery

      RACK (Recently ACK) addresses these limitations with the notion
      of time instead: a packet P1 is lost if a later packet P2 is s/acked,
      as at least one round trip has passed.

      Since RACK cares about the time sequence instead of the data sequence
      of packets, it can detect tail drops when later retransmission is
      s/acked while FACK or dupthresh can't. For reordering RACK uses a
      dynamically adjusted reordering window ("reo_wnd") to reduce false
      positives on ever (small) degree of reordering.

      This patch implements tcp_advanced_rack() which tracks the
      most recent transmission time among the packets that have been
      delivered (ACKed or SACKed) in tp->rack.mstamp. This timestamp
      is the key to determine which packet has been lost.

      Consider an example that the sender sends six packets:
      T1: P1 (lost)
      T2: P2
      T3: P3
      T4: P4
      T100: sack of P2. rack.mstamp = T2
      T101: retransmit P1
      T102: sack of P2,P3,P4. rack.mstamp = T4
      T205: ACK of P4 since the hole is repaired. rack.mstamp = T101

      We need to be careful about spurious retransmission because it may
      falsely advance tp->rack.mstamp by an RTT or an RTO, causing RACK
      to falsely mark all packets lost, just like a spurious timeout.

      We identify spurious retransmission by the ACK's TS echo value.
      If TS option is not applicable but the retransmission is acknowledged
      less than min-RTT ago, it is likely to be spurious. We refrain from
      using the transmission time of these spurious retransmissions.

      The second half is implemented in the next patch that marks packet
      lost using RACK timestamp.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 625a5e109a3ed6f36a1008a43069a3462b44a424
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:45 2015 -0700

      tcp: skb_mstamp_after helper

      a helper to prepare the first main RACK patch.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77c631273dc1305a89698929decafa6e43bea645
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:44 2015 -0700

      tcp: add tcp_tsopt_ecr_before helper

      a helper to prepare the main RACK patch

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit af82f4e84866ecd360a53f770d6217637116e6c1
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:43 2015 -0700

      tcp: remove tcp_mark_lost_retrans()

      Remove the existing lost retransmit detection because RACK subsumes
      it completely. This also stops the overloading the ack_seq field of
      the skb control block.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f672258391b42a5c7cc2732c9c063e56a85c8dbe
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:42 2015 -0700

      tcp: track min RTT using windowed min-filter

      Kathleen Nichols' algorithm for tracking the minimum RTT of a
      data stream over some measurement window. It uses constant space
      and constant time per update. Yet it almost always delivers
      the same minimum as an implementation that has to keep all
      the data in the window. The measurement window is tunable via
      sysctl.net.ipv4.tcp_min_rtt_wlen with a default value of 5 minutes.

      The algorithm keeps track of the best, 2nd best & 3rd best min
      values, maintaining an invariant that the measurement time of
      the n'th best >= n-1'th best. It also makes sure that the three
      values are widely separated in the time window since that bounds
      the worse case error when that data is monotonically increasing
      over the window.

      Upon getting a new min, we can forget everything earlier because
      it has no value - the new min is less than everything else in the
      window by definition and it's the most recent. So we restart fresh
      on every new min and overwrites the 2nd & 3rd choices. The same
      property holds for the 2nd & 3rd best.

      Therefore we have to maintain two invariants to maximize the
      information in the samples, one on values (1st.v <= 2nd.v <=
      3rd.v) and the other on times (now-win <=1st.t <= 2nd.t <= 3rd.t <=
      now). These invariants determine the structure of the code

      The RTT input to the windowed filter is the minimum RTT measured
      from ACK or SACK, or as the last resort from TCP timestamps.

      The accessor tcp_min_rtt() returns the minimum RTT seen in the
      window. ~0U indicates it is not available. The minimum is 1usec
      even if the true RTT is below that.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e45a3e36b363cc4c79c70f2b4f994e66543a219
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:41 2015 -0700

      tcp: apply Kern's check on RTTs used for congestion control

      Currently ca_seq_rtt_us does not use Kern's check. Fix that by
      checking if any packet acked is a retransmit, for both RTT used
      for RTT estimation and congestion control.

      Fixes: 5b08e47ca ("tcp: prefer packet timing to TS-ECR for RTT")
      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f3c9f95056acab715328ee63a80ddf5fd32c0a28
  Merge: aebd994 d88ecb3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 06:41:51 2015 -0700

      Merge branch 'smsc-energy-detect'

      Heiko Schocher says:

      ====================
      net, phy, smsc: add posibility to disable energy detect mode

      On some boards the energy enable detect mode leads in
      trouble with some switches, so make the enabling of
      this mode configurable through DT.
      Therefore the property "smsc,disable-energy-detect" is
      introduced.

      Patch 1 introduces phy-handle support for the ti,cpsw
      driver. This is needed now for the smsc phy.

      Patch 2 adds the disable energy mode functionality
      to the smsc phy

      Changes in v2:
      - add comments from Florian Fainelli
        - I did not change disable property name into enable
          because I fear to break existing behaviour
        - add smsc vendor prefix
        - remove CONFIG_OF and use __maybe_unused
        - introduce "phy-handle" ability into ti,cpsw
          driver, so I can remove bogus:
            if (!of_node && dev->parent->of_node)
                of_node = dev->parent->of_node;
          construct. Therefore new patch for the ti,cpsw
          driver is necessary.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d88ecb373bd1877acc43e13311a8e0e6daffc3d2
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Sat Oct 17 06:04:36 2015 +0200

      net: phy: smsc: disable energy detect mode

      On some boards the energy enable detect mode leads in
      trouble with some switches, so make the enabling of
      this mode configurable through DT.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e42f715264ff158478fa30eaed847f6e131366b
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Sat Oct 17 06:04:35 2015 +0200

      drivers: net: cpsw: add phy-handle parsing

      add the ability to parse "phy-handle". This
      is needed for phys, which have a DT node, and
      need to parse DT properties.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aebd99477f03950fb05b29c7248656167198bf2d
  Author: Simon Arlott <simon@xxxxxxxxxxx>
  Date:   Thu Oct 15 21:00:22 2015 +0100

      bcm63xx_enet: check 1000BASE-T advertisement configuration

      If a gigabit ethernet PHY is connected to a fast ethernet MAC,
      then it can detect 1000 support from the partner but not use it.

      This results in a forced speed of 1000 and RX/TX failure.

      Check for 1000BASE-T support and then check the advertisement
      configuration before setting the MAC speed to 1000mbit.

      Signed-off-by: Simon Arlott <simon@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c8fdc324916a864de753db6de6423b048c20cc0f
  Merge: 26440c8 a1f192c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 06:29:56 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-19

      This series contains updates to i40e and i40evf only.

      Kiran adds a spinlock around code accessing VSI MAC filter list to
      ensure that we are synchronizing access to the filter list, otherwise
      we can end up with multiple accesses at the same time which can cause
      the VSI MAC filter list to get in an unstable or corrupted state.

      Jesse fixes overlong BIT defines, where the RSS enabling call were
      mistakenly missed.  Also fixes a bug where the enable function was
      enabling the interrupt twice while trying to update the two interrupt
      throttle rate thresholds for Rx and Tx, while refactoring the IRQ
      enable function to simplify reading the flow.  Addressed the high
      CPU utilization of some small streaming workloads that the driver should
      reduce CPU in.

      Anjali fixes two X722 issues with respect to EEPROM checksum verify and
      reading NVM version info.  Fixed where a mask value was accidentally
      replaced with a bit mask causing Flow Director sideband to be broken.

      Alex Duyck fixes areas of the drivers which run from hard interrupt
      context or with interrupts already disabled in netpoll, so use
      napi_schedule_irqoff() instead of napi_schedule().

      Mitch fixes the VF drivers to not easily give up when it is not able
      to communicate with the PF driver.

      Carolyn fixes a problem where our tools MAC loopback test, after driver
      unbind would fail because the hardware was configured for multiqueue and
      unbind operation did not clear this configuration.  Also fixed a issue
      where the NVMUpdate tool gets bad data from the PHY when using the PHY
      NVM feature because of contention on the MDIO interface from getting
      PHY capability calls from the driver during regular operations.

      Catherine fixed an issue where we were checking if autoneg was allowed
      to change before checking if autoneg was changing, these checks need to
      be in the reverse order.

      Jean Sacren fixes up an function header comment to align the kernel-docs
      with the actual code.

      v2: Cleaned up the use of spin_is_locked() in patch 1 based on feedback
          from David Miller, since it always evaluates to zero on uni-processor
          builds
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ce783dc5ea3af3a213ac9b4d9d2ccfeeb9c9058
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 15:21:31 2015 +0300

      Bluetooth: Fix missing hdev locking for LE scan cleanup

      The hci_conn objects don't have a dedicated lock themselves but rely
      on the caller to hold the hci_dev lock for most types of access. The
      hci_conn_timeout() function has so far sent certain HCI commands based
      on the hci_conn state which has been possible without holding the
      hci_dev lock.

      The recent changes to do LE scanning before connect attempts added
      even more operations to hci_conn and hci_dev from hci_conn_timeout,
      thereby exposing potential race conditions with the hci_dev and
      hci_conn states.

      As an example of such a race, here there's a timeout but an
      l2cap_sock_connect() call manages to race with the cleanup routine:

      [Oct21 08:14] l2cap_chan_timeout: chan ee4b12c0 state BT_CONNECT
      [  +0.000004] l2cap_chan_close: chan ee4b12c0 state BT_CONNECT
      [  +0.000002] l2cap_chan_del: chan ee4b12c0, conn f3141580, err 111, 
state BT_CONNECT
      [  +0.000002] l2cap_sock_teardown_cb: chan ee4b12c0 state BT_CONNECT
      [  +0.000005] l2cap_chan_put: chan ee4b12c0 orig refcnt 4
      [  +0.000010] hci_conn_drop: hcon f53d56e0 orig refcnt 1
      [  +0.000013] l2cap_chan_put: chan ee4b12c0 orig refcnt 3
      [  +0.000063] hci_conn_timeout: hcon f53d56e0 state BT_CONNECT
      [  +0.000049] hci_conn_params_del: addr ee:0d:30:09:53:1f (type 1)
      [  +0.000002] hci_chan_list_flush: hcon f53d56e0
      [  +0.000001] hci_chan_del: hci0 hcon f53d56e0 chan f4e7ccc0
      [  +0.004528] l2cap_sock_create: sock e708fc00
      [  +0.000023] l2cap_chan_create: chan ee4b1770
      [  +0.000001] l2cap_chan_hold: chan ee4b1770 orig refcnt 1
      [  +0.000002] l2cap_sock_init: sk ee4b3390
      [  +0.000029] l2cap_sock_bind: sk ee4b3390
      [  +0.000010] l2cap_sock_setsockopt: sk ee4b3390
      [  +0.000037] l2cap_sock_connect: sk ee4b3390
      [  +0.000002] l2cap_chan_connect: 00:02:72:d9:e5:8b -> ee:0d:30:09:53:1f 
(type 2) psm 0x00
      [  +0.000002] hci_get_route: 00:02:72:d9:e5:8b -> ee:0d:30:09:53:1f
      [  +0.000001] hci_dev_hold: hci0 orig refcnt 8
      [  +0.000003] hci_conn_hold: hcon f53d56e0 orig refcnt 0

      Above the l2cap_chan_connect() shouldn't have been able to reach the
      hci_conn f53d56e0 anymore but since hci_conn_timeout didn't do proper
      locking that's not the case. The end result is a reference to hci_conn
      that's not in the conn_hash list, resulting in list corruption when
      trying to remove it later:

      [Oct21 08:15] l2cap_chan_timeout: chan ee4b1770 state BT_CONNECT
      [  +0.000004] l2cap_chan_close: chan ee4b1770 state BT_CONNECT
      [  +0.000003] l2cap_chan_del: chan ee4b1770, conn f3141580, err 111, 
state BT_CONNECT
      [  +0.000001] l2cap_sock_teardown_cb: chan ee4b1770 state BT_CONNECT
      [  +0.000005] l2cap_chan_put: chan ee4b1770 orig refcnt 4
      [  +0.000002] hci_conn_drop: hcon f53d56e0 orig refcnt 1
      [  +0.000015] l2cap_chan_put: chan ee4b1770 orig refcnt 3
      [  +0.000038] hci_conn_timeout: hcon f53d56e0 state BT_CONNECT
      [  +0.000003] hci_chan_list_flush: hcon f53d56e0
      [  +0.000002] hci_conn_hash_del: hci0 hcon f53d56e0
      [  +0.000001] ------------[ cut here ]------------
      [  +0.000461] WARNING: CPU: 0 PID: 1782 at lib/list_debug.c:56 
__list_del_entry+0x3f/0x71()
      [  +0.000839] list_del corruption, f53d56e0->prev is LIST_POISON2 
(00000200)

      The necessary fix is unfortunately more complicated than just adding
      hci_dev_lock/unlock calls to the hci_conn_timeout() call path.
      Particularly, the hci_conn_del() API, which expects the hci_dev lock to
      be held, performs a cancel_delayed_work_sync(&hcon->disc_work) which
      would lead to a deadlock if the hci_conn_timeout() call path tries to
      acquire the same lock.

      This patch solves the problem by deferring the cleanup work to a
      separate work callback. To protect against the hci_dev or hci_conn
      going away meanwhile temporary references are taken with the help of
      hci_dev_hold() and hci_conn_get().

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.3

  commit f8f2dc4a7127725383c93b501fcc4e47871b0a9d
  Author: Bard Liao <bardliao@xxxxxxxxxxx>
  Date:   Wed Oct 21 16:18:18 2015 +0800

      ASoC: rt298: fix wrong setting of gpio2_en

      The register value to enable gpio2 was incorrect. So fix it.

      Signed-off-by: Bard Liao <bardliao@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 53c656c4138511c2ba54df413dc29976cfa9f084
  Author: Paul Mackerras <paulus@xxxxxxxxx>
  Date:   Wed Oct 21 16:06:24 2015 +1100

      powerpc/powernv: Handle irq_happened flag correctly in off-line loop

      This fixes a bug where it is possible for an off-line CPU to fail to go
      into a low-power state (nap/sleep/winkle), and to become unresponsive to
      requests from the KVM subsystem to wake up and run a VCPU. What can
      happen is that a maskable interrupt of some kind (external, decrementer,
      hypervisor doorbell, or HMI) after we have called local_irq_disable() at
      the beginning of pnv_smp_cpu_kill_self() and before interrupts are
      hard-disabled inside power7_nap/sleep/winkle(). In this situation, the
      pending event is marked in the irq_happened flag in the PACA. This
      pending event prevents power7_nap/sleep/winkle from going to the
      requested low-power state; instead they return immediately. We don't
      deal with any of these pending event flags in the off-line loop in
      pnv_smp_cpu_kill_self() because power7_nap et al. return 0 in this case,
      so we will have srr1 == 0, and none of the processing to clear
      interrupts or doorbells will be done.

      Usually, the most obvious symptom of this is that a KVM guest will fail
      with a console message saying "KVM: couldn't grab cpu N".

      This fixes the problem by making sure we handle the irq_happened flags
      properly. First, we hard-disable before the off-line loop. Once we have
      hard-disabled, the irq_happened flags can't change underneath us. We
      unconditionally clear the DEC and HMI flags: there is no processing of
      timer interrupts while off-line, and the necessary HMI processing is all
      done in lower-level code. We leave the EE and DBELL flags alone for the
      first iteration of the loop, so that we won't fail to respond to a
      split-core request that came in just before hard-disabling. Within the
      loop, we handle external interrupts if the EE bit is set in irq_happened
      as well as if the low-power state was interrupted by an external
      interrupt. (We don't need to do the msgclr for a pending doorbell in
      irq_happened, because doorbells are edge-triggered and don't remain
      pending in hardware.) Then we clear both the EE and DBELL flags, and
      once clear, they cannot be set again (until this CPU comes online again,
      that is).

      This also fixes the debug check to not be done when we just ran a KVM
      guest or when the sleep didn't happen because of a pending event in
      irq_happened.

      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 23316316c1af0677a041c81f3ad6efb9dc470b33
  Author: Paul Mackerras <paulus@xxxxxxxxx>
  Date:   Wed Oct 21 16:03:14 2015 +1100

      powerpc: Revert "Use the POWER8 Micro Partition Prefetch Engine in KVM HV 
on POWER8"

      This reverts commit 9678cdaae939 ("Use the POWER8 Micro Partition
      Prefetch Engine in KVM HV on POWER8") because the original commit had
      multiple, partly self-cancelling bugs, that could cause occasional
      memory corruption.

      In fact the logmpp instruction was incorrectly using register r0 as the
      source of the buffer address and operation code, and depending on what
      was in r0, it would either do nothing or corrupt the 64k page pointed to
      by r0.

      The logmpp instruction encoding and the operation code definitions could
      be corrected, but then there is the problem that there is no clearly
      defined way to know when the hardware has finished writing to the
      buffer.

      The original commit attempted to work around this by aborting the
      write-out before starting the prefetch, but this is ineffective in the
      case where the virtual core is now executing on a different physical
      core from the one where the write-out was initiated.

      These problems plus advice from the hardware designers not to use the
      function (since the measured performance improvement from using the
      feature was actually mostly negative), mean that reverting the code is
      the best option.

      Fixes: 9678cdaae939 ("Use the POWER8 Micro Partition Prefetch Engine in 
KVM HV on POWER8")
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit cbf3ccd09d683abf1cacd36e3640872ee912d99b
  Author: Joerg Roedel <jroedel@xxxxxxx>
  Date:   Tue Oct 20 14:59:36 2015 +0200

      iommu/amd: Don't clear DTE flags when modifying it

      During device assignment/deassignment the flags in the DTE
      get lost, which might cause spurious faults, for example
      when the device tries to access the system management range.
      Fix this by not clearing the flags with the rest of the DTE.

      Reported-by: G. Richard Bellamy <rbellamy@xxxxxxxxxxxxx>
      Tested-by: G. Richard Bellamy <rbellamy@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit 79ebdc9536c132eb92b4bcce26daaed7f4bf359e
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:49 2015 +0200

      MAINTAINERS: Unify the microcode driver section

      Merge the AMD and Intel sections and generalize the file patterns.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-7-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c595ac2bac930ce79f336c7a7e45e1ea38abfe16
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:48 2015 +0200

      x86/microcode/intel: Move #ifdef DEBUG inside the function

      ... and save us the stub.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-6-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6f7fc44bf1eef6768f9dcb527c737ab24a3203ac
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:47 2015 +0200

      x86/microcode/amd: Remove maintainers from comments

      We have the MAINTAINERS file for that. Also, Andreas doesn't
      have the time for this work anymore.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andreas Herrmann <herrmann.der.user@xxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-5-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6b26e1bf66bb4bf1b1b9b4f27d1f324875689cf0
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:46 2015 +0200

      x86/microcode: Remove modularization leftovers

      Remove the remaining module functionality leftovers. Make
      "dis_ucode_ldr" an early_param and make it static again. Drop
      module aliases, autoloading table, description, etc.

      Bump version number, while at it.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fe055896c040df571e4ff56fb196d6845130057b
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:45 2015 +0200

      x86/microcode: Merge the early microcode loader

      Merge the early loader functionality into the driver proper. The
      diff is huge but logically, it is simply moving code from the
      _early.c files into the main driver.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9a2bc335f100a0f6ee6392b9f97ac4188d84db1d
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:44 2015 +0200

      x86/microcode: Unmodularize the microcode driver

      Make CONFIG_MICROCODE a bool. It was practically a bool already anyway,
      since early loader was forcing it to =y.

      Regardless, there's no real reason to have something be a module which
      gets built-in on the majority of installations out there. And its not
      like there's noticeable change in functionality - we still can load late
      microcode - just the module glue disappears.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-2-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3d45ac4b35cbdf942f2a45b2b927f2ef6a8bda48
  Author: Jan Beulich <JBeulich@xxxxxxxx>
  Date:   Mon Oct 19 04:35:44 2015 -0600

      timers/x86/hpet: Type adjustments

      Standardize on bool instead of an inconsistent mixture of u8 and plain 
'int'.

      Also use u32 or 'unsigned int' instead of 'unsigned long' when a 32-bit 
type
      suffices, generating slightly better code on x86-64.

      Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/5624E3A002000078000AC49A@xxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 221836e92cd5664de6fc2f1d836f6343ae5f2e43
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 10:41:17 2015 +0200

      x86/Kconfig/cpus: Fix/complete CPU type help texts

      Move the generic help text explaining each CPU type and what to
      select under the "Processor Family" prompt and not under the
      M486 option. Also, amend it with the missing options.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445244077-25120-1-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 81ffdcdd97d94110627caa81c23d5d780083731d
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:17:48 2015 +0200

      x86/mce: Fix thermal throttling reporting after kexec

      The per CPU thermal vector init code checks if the thermal
      vector is already installed and complains and bails out if it
      is.

      This happens after kexec, as kernel shut down does not clear the
      thermal vector APIC register.

      This causes two problems:

      1. So we always do not fully initialize thermal reports after
         kexec. The CPU is still likely initialized, as the previous
         kernel should have done it. But we don't set up the software
         pointer to the thermal vector, so reporting may end up with a
         unknown thermal interrupt message.

      2. Also it complains for every logical CPU, even though the
         value is actually derived from BP only.

      The problem is that we end up with one message per CPU, so on
      larger systems it becomes very noisy and messes up the otherwise
      nicely formatted CPU bootup numbers in the kernel log.

      Just remove the check. I checked the code and there's no valid
      code paths where the thermal init code for a CPU could be called
      multiple times.

      Why the kernel does not clean up this value on shutdown:

      The thermal monitoring is controlled per logical CPU thread.
      Normal shutdown code is just running on one CPU. To disable it
      we would need a broadcast NMI to all CPUs on shut down. That's
      overkill for this. So we just ignore it after kexec.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445246268-26285-9-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 53b90c0c56b502056da83d768047dcf765bac9fb
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:47 2015 +0200

      kexec/crash: Say which char is the unrecognized

      It is helpful when the crashkernel cmdline parsing routines
      actually say which character is the unrecognized one. Make them
      do so.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Baoquan He <bhe@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vivek Goyal <vgoyal@xxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-8-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6f3760570e26eefc214e641b6daeddb7106240bb
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:46 2015 +0200

      x86/setup/crash: Check memblock_reserve() retval

      memblock_reserve() can fail but the crashkernel reservation code
      doesn't check that and this can lead the user into believing
      that the crashkernel region was actually reserved. Make sure we
      check that return value and we exit early with a failure message
      in the error case.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-7-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f56d55781c1ff5663874775d0672ba954fe5634c
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:45 2015 +0200

      x86/setup/crash: Cleanup some more

      * Remove unused auto_set variable
      * Cleanup local function variable declarations
      * Reformat printk string and use pr_info()

      No functionality change.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-6-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 606134f77ce22997fd2800d5937698d85c6990d9
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:44 2015 +0200

      x86/setup/crash: Remove alignment variable

      Use a macro instead. No functionality change.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-5-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 97eac21babe47e1a8ed4cac4f8874c5746cf6e36
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:43 2015 +0200

      x86/setup: Cleanup crashkernel reservation functions

      * Shorten variable names
      * Realign code, space out for better readability

      No code changed:

        # arch/x86/kernel/setup.o:

         text    data     bss     dec     hex filename
         4543    3096   69904   77543   12ee7 setup.o.before
         4543    3096   69904   77543   12ee7 setup.o.after

      md5:
         8a1b7c6738a553ca207b56bd84a8f359  setup.o.before.asm
         8a1b7c6738a553ca207b56bd84a8f359  setup.o.after.asm

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1a6775c1a2c2ed863699403cda517916c22aeb72
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Oct 19 11:17:42 2015 +0200

      x86/amd_nb, EDAC: Rename amd_get_node_id()

      This function doesn't give us the "Node ID" as the function name
      suggests. Rather, it receives a PCI device as argument, checks
      the available F3 PCI device IDs in the system and returns the
      index of the matching Bus/Device IDs.

      Rename it to amd_pci_dev_to_node_id().

      No functional change is introduced.

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445246268-26285-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit eb6db83d105914c246ac5875be76fd4b944833d5
  Author: Baoquan He <bhe@xxxxxxxxxx>
  Date:   Mon Oct 19 11:17:41 2015 +0200

      x86/setup: Do not reserve crashkernel high memory if low reservation 
failed

      People reported that when allocating crashkernel memory using
      the ",high" and ",low" syntax, there were cases where the
      reservation of the high portion succeeds but the reservation of
      the low portion fails.

      Then kexec can load the kdump kernel successfully, but booting
      the kdump kernel fails as there's no low memory.

      The low memory allocation for the kdump kernel can fail on large
      systems for a couple of reasons. For example, the manually
      specified crashkernel low memory can be too large and thus no
      adequate memblock region would be found.

      Therefore, we try to reserve low memory for the crash kernel
      *after* the high memory portion has been allocated. If that
      fails, we free crashkernel high memory too and return. The user
      can then take measures accordingly.

      Tested-by: Joerg Roedel <jroedel@xxxxxxx>
      Signed-off-by: Baoquan He <bhe@xxxxxxxxxx>
      [ Massage text. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Young <dyoung@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Cc: yinghai@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-2-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 08b137d90eec51b0e90c42e123ca8ceb118d233f
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Mon Oct 12 17:22:23 2015 +0800

      mmc: core: Fix init_card in 52Mhz

      Suppose that we got a data crc error, and it triggers the mmc_reset.
      mmc_reset will call mmc_send_status to see if HW reset was supported.
      before issue CMD13, it will do retune, and if EMMC was in HS400 mode,
      it will reduce frequency to 52Mhz firstly, then results in card init
      was doing at 52Mhz.
      The mmc_send_status was originally only done for mmc_test, should drop
      it. And, rename the "eMMC hardware reset" to "Reset test", as we would
      also be able to use the test for SD-cards.

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Suggested-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Fixes: bd11e8bd03ca ("mmc: core: Flag re-tuning is needed on CRC errors")
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e5a9f8d04660da7ef3a98260aa74c3976f9cb4cd
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Oct 16 17:54:47 2015 +0200

      mac80211: move station statistics into sub-structs

      Group station statistics by where they're (mostly) updated
      (TX, RX and TX-status) and group them into sub-structs of
      the struct sta_info.

      Also rename the variables since the grouping now makes it
      obvious where they belong.

      This makes it easier to identify where the statistics are
      updated in the code, and thus easier to think about them.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 976bd9efdae6a844079ba4a7898a38d229ef246c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Oct 16 17:18:11 2015 +0200

      mac80211: move beacon_loss_count into ifmgd

      There's little point in keeping (and even sending to userspace)
      the beacon_loss_count value per station, since it can only apply
      to the AP on a managed-mode connection. Move the value to ifmgd,
      advertise it only in managed mode, and remove it from ethtool as
      it's available through better interfaces.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 763aa27a292113b6fd9f6ad8bf633edc9b13c98b
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Oct 16 16:55:51 2015 +0200

      mac80211: remove sta->last_ack_signal

      This file only feeds a debugfs file that isn't very useful, so remove
      it. If necessary, we can add other ways to get this information, for
      example in the NL80211_CMD_PROBE_CLIENT response.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 81c1f74de3b6a9be0006a734d3584150f9c2e295
  Merge: f8273ba bc6f9ae
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 21 11:07:55 2015 +0300

      Merge ath-next from ath.git

      Major changes:

      ath10k

      * add board 2 API support for automatically choosing correct board file
      * data path optimisations
      * disable PCI power save for qca988x and QCA99x0 due to interop reasons

      wil6210

      * BlockAckReq support
      * firmware crashdump using devcoredump
      * capture all frames with sniffer

  commit f8273bafcbc1bc04d1b139144f78f25c559f10c3
  Author: Eric Caruso <ejcaruso@xxxxxxxxxx>
  Date:   Wed Oct 14 12:34:11 2015 -0700

      brcm80211: Add support for brcm4371

      This is a new Broadcom chip and we should be able to recognize it.

      Signed-off-by: Eric Caruso <ejcaruso@xxxxxxxxxx>
      Acked-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 92121e69de8a982c0b33b359ce68657b3ec3c83d
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:21 2015 +0200

      brcmfmac: Properly set carrier state of netdev.

      Use the netif_carrier api to correctly set carrier state on the
      different modes.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 54b499d9ad10dd0ce9b4ac92507072cad0f37f7a
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:20 2015 +0200

      brcmfmac: Remove unused state AP creating.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit c443e169577c2dfb8172711ef4b765919d177429
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:19 2015 +0200

      brcmfmac: Move brcmf_c_preinit_dcmds prototype to correct file.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit bf2a7e0499b922b4d2ffc073a3d14cec93c33af1
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:18 2015 +0200

      brcmfmac: Add dump_station support to cfg80221 ops.

      With this feature it becomes possible to request a station
      assoc list.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit cae355dc90db2bd27bf5ed5400ab2a417a185faa
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:17 2015 +0200

      brcmfmac: Add RSSI information to get_station.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 124d517211e4322366f087774dadae136c6cec8b
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:16 2015 +0200

      brcmfmac: Fix station info rate information.

      Txrate and rxrate in get_station got assigned first with value
      in kbps and then divided by 100 to get it in 100kbps unit. The
      problem with that is that type of rate is u16 which resulted
      in incorrect values for high data rate values.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2b76acdbc0431a7d9e87eacb27bb537a211bed16
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:15 2015 +0200

      brcmfmac: Rework p2p attach, use single method for p2p dev creation.

      When module param p2pon is used a p2p device is created at init.
      This patch reworks how this is done by using the same method as
      for a dynamically (by user space) created p2p device.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 43569bfaf6ed0ee5b44533ee9ded7e8323734687
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:14 2015 +0200

      brcmfmac: remove conversational comment

      Removing a comment that was only useful during the review of
      the change that introduced it and which should never have been
      submitted.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 4a3462843f9f363162314ca7667e24c146c7fa71
  Author: Franky Lin <frankyl@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:13 2015 +0200

      brcmfmac: rename firmware_path to alternative_fw_path

      In brcmfmac the module parameter "firmware_path" is used as an
      alternative relative path under the search path used by firmware_class
      or ueventhelper. Rename the parameter to alternative_fw_path to avoid
      confusion.

      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Franky Lin <frankyl@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 185f0eb0b5fab0c9bfd7c5d322e2cd05b951d6e8
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:12 2015 +0200

      brcmfmac: Fix race condition between USB probe/load and disconnect.

      When a USB device gets disconnected due to for example removal
      then it is possible that it is still in the loading phase due to
      the asynchronous load routines. These routines can then possible
      access memory which has been freed. Fix this by mutex locking the
      device init phase.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ff4445a8502cdf06969540c92bb201ee47e70351
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:11 2015 +0200

      brcmfmac: expose device memory to devcoredump subsystem

      Upon PSM watchdog event received from firmware the driver will obtain
      a memory snapshot of the device and expose it to user-space through
      the devcoredump framework. This will trigger a uevent.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 26f1fad29ad973b0fb26a9ca3dcb2a73dde781aa
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Wed Oct 14 20:44:51 2015 -0400

      New driver: rtl8xxxu (mac80211)

      This is an alternate driver for a number of Realtek WiFi USB devices,
      including RTL8723AU, RTL8188CU, RTL8188RU, RTL8191CU, and RTL8192CU.
      It was written from scratch utilizing the Linux mac80211 stack.

      After spending months cleaning up the vendor provided rtl8723au
      driver, which comes with it's own 802.11 stack included, I decided to
      rewrite this driver from the bottom up.

      Many thanks to Johannes Berg for 802.11 insights and help and Larry
      Finger for help with the vendor driver.

      The full git log for the development of this driver can be found here:
      git git://git.kernel.org/pub/scm/linux/kernel/git/jes/linux.git
          branch rtl8723au-mac80211

      This driver is still under development, but has proven to be very
      stable for me. It currently supports station mode only. It has support
      for OFDM and CCK rates. It does lack certain features found in the
      staging driver, such as power management, AMPDU, and 40MHz channel
      support. In addition it does not support AD-HOC, AP, and monitor mode
      support at this point.

      The driver is known to work with the following devices:
      Lenovo Yoga (rtl8723au)
      TP-Link TL-WN823N (rtl8192cu)
      Etekcity 6R (rtl8188cu)
      Daffodil LAN03 (rtl8188cu)
      Alfa AWUS036NHR (rtl8188ru)

      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 213445b2b40e87e819c7d949ae7d97c30dcd0853
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 21 02:45:19 2015 +0200

      Bluetooth: btintel: Enable extra Intel vendor events

      The Intel Bluetooth controllers can emit extra vendor specific events in
      error conditions or for debugging purposes. To make the life easier for
      engineers, enable them by default. When the vendor_diag options has been
      enabled, then additional debug events are also enabled.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e4c534bbacab81fc67c81ae8af263a70f35ffec9
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 21 01:31:45 2015 +0200

      Bluetooth: btusb: Set manufacturer for Intel bootloader devices

      For Intel bootloader devices, set the manufacturer information so that
      it becomes possible to decode the boot process.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 98a63aaf245e2522b0ddd86f38fb83883344bcaf
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 23:25:42 2015 +0200

      Bluetooth: Introduce driver specific post init callback

      Some drivers might have to restore certain settings after the init
      procedure has been completed. This driver callback allows them to hook
      into that stage. This callback is run just before the controller is
      declared as powered up.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit aee61f7aa89bbfa48b91628291d8685aa61c970f
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 21:30:45 2015 +0200

      Bluetooth: hci_uart: Provide initial manufacturer information

      Provide an early indication about the manufacturer information so that
      it can be forwarded into monitor channel.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 0f6925fa2907df58496cabc33fa4677c635e2223
  Author: Qu Wenruo <quwenruo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 14 15:26:13 2015 +0800

      btrfs: Avoid truncate tailing page if fallocate range doesn't exceed 
inode size

      Current code will always truncate tailing page if its alloc_start is
      smaller than inode size.

      For example, the file extent layout is like:
      0 4K      8K      16K     32K
      |<-----Extent A---------------->|
      |<--Inode size: 18K---------->|

      But if calling fallocate even for range [0,4K), it will cause btrfs to
      re-truncate the range [16,32K), causing COW and a new extent.

      0 4K      8K      16K     32K
      |///////| <- Fallocate call range
      |<-----Extent A-------->|<--B-->|

      The cause is quite easy, just a careless btrfs_truncate_inode() in a
      else branch without extra judgment.
      Fix it by add judgment on whether the fallocate range is beyond isize.

      Signed-off-by: Qu Wenruo <quwenruo@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 1904be1b6bb92058c8e00063dd59df2df294e258
  Author: Steven Rostedt (Red Hat) <rostedt@xxxxxxxxxxx>
  Date:   Tue Oct 20 21:48:02 2015 -0400

      tracing: Do not allow stack_tracer to record stack in NMI

      The code in stack tracer should not be executed within an NMI as it grabs
      spinlocks and stack tracing an NMI gives the possibility of causing a
      deadlock. Although this is safe on x86_64, because it does not perform 
stack
      traces when the task struct stack is not in use (interrupts and NMIs), it
      may be an issue for NMIs on i386 and other archs that use the same stack 
as
      the NMI.

      Signed-off-by: Steven Rostedt <rostedt@xxxxxxxxxxx>

  commit 9f7378a9d6ced1784e08d3e21a9ddb769523baf2
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Wed Oct 14 12:18:47 2015 +0200

      Bluetooth: l2cap_disconnection_req priority over shutdown

      There is a L2CAP protocol race between the local peer and
      the remote peer demanding disconnection of the L2CAP link.

      When L2CAP ERTM is used, l2cap_sock_shutdown() can be called
      from userland to disconnect L2CAP. However, there can be a
      delay introduced by waiting for ACKs. During this waiting
      period, the remote peer may have sent a Disconnection Request.
      Therefore, recheck the shutdown status of the socket
      after waiting for ACKs because there is no need to do
      further processing if the connection has gone.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Harish Jenny K N <harish_kandiga@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 04ba72e6b24f1e0e2221fcd73f08782870473fa1
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Wed Oct 14 12:18:46 2015 +0200

      Bluetooth: Reorganize mutex lock in l2cap_sock_shutdown()

      This commit reorganizes the mutex lock and is now
      only protecting l2cap_chan_close(). This is now consistent
      with other places where l2cap_chan_close() is called.

      If a conn connection exists, call
      mutex_lock(&conn->chan_lock) before calling l2cap_chan_close()
      to ensure other L2CAP protocol operations do not interfere.

      Note that the conn structure has to be protected from being
      freed as it is possible for the connection to be disconnected
      whilst the locks are not held. This solution allows the mutex
      lock to be used even when the connection has just been
      disconnected.

      This commit also reduces the scope of chan locking.

      The only place where chan locking is needed is the call to
      l2cap_chan_close(chan, 0) which if necessary closes the channel.
      Therefore, move the l2cap_chan_lock(chan) and
      l2cap_chan_lock(chan) locking calls to around
      l2cap_chan_close(chan, 0).

      This allows __l2cap_wait_ack(sk, chan) to be called with no
      chan locks being held so L2CAP messaging over the ACL link
      can be done unimpaired.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Harish Jenny K N <harish_kandiga@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e7456437c15a2fd42cedd25c2b12b06876f285f0
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Wed Oct 14 12:18:45 2015 +0200

      Bluetooth: Unwind l2cap_sock_shutdown()

      l2cap_sock_shutdown() is designed to only action shutdown
      of the channel when shutdown is not already in progress.
      Therefore, reorganise the code flow by adding a goto
      to jump to the end of function handling when shutdown is
      already being actioned. This removes one level of code
      indentation and make the code more readable.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Harish Jenny K N <harish_kandiga@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 09bf420f101c9d35ca0b5f539c7f03951fd2e24d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:26 2015 +0200

      6lowpan: put mcast compression in an own function

      This patch moves the mcast compression algorithmn to an own function
      like all other compression/decompression methods in iphc.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b5af9bdbfe6d497d27e5936a7d110fc5f64e7c0d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:25 2015 +0200

      6lowpan: rework tc and flow label handling

      This patch reworks the handling of compression/decompression of traffic
      class and flow label handling. The current method is hard to understand,
      also doesn't checks if we can read the buffer from skb length.

      I tried to put the shifting operations into static inline functions and
      comment each steps which I did there to make it hopefully somewhat more
      readable. The big mess to deal with that is the that the ipv6 header
      bring the order "DSCP + ECN" but iphc uses "ECN + DSCP". Additional the
      DCSP + ECN bits are splitted in ipv6_hdr inside the priority and
      flow_lbl[0] fields.

      I tested these compressions by using fakelb 802.15.4 driver and
      manipulate the tc and flow label fields manually in function
      "__ip6_local_out" before the skb will be send to lower layers. Then I
      looked up the tc and flow label fields in wireshark on a wpan and lowpan
      interface.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c8a3e7eb98236f7c88e6deddf9f330874070fa09
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:24 2015 +0200

      6lowpan: iphc: change define values

      This patch has the main goal to delete shift operations. Instead we
      doing masks and equals afterwards. E.g. for the SAM evaluation we
      masking only the SAM value which fits in iphc1 byte, then comparing with
      all possible SAM values over a switch case statement. We will not
      shifting the SAM value to somewhat readable anymore.
      Additional this patch slighty change the naming style like RFC 6282,
      e.g. TTL to HLIM and we will drop an errno now if CID flag is set,
      because we don't support it.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 028b2a8c16c7c6a482075fe42275a44fbe5463fa
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:23 2015 +0200

      6lowpan: remove lowpan_is_addr_broadcast

      This macro is used at 802.15.4 6LoWPAN only and can be replaced by
      memcmp with the interface broadcast address.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6350047eb8dbd3dcf0ff29a637ece96db8f59d8d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:22 2015 +0200

      6lowpan: move IPHC functionality defines

      This patch removes the IPHC related defines for doing bit manipulation
      from global 6lowpan header to the iphc file which should the only one
      implementation which use these defines.

      Also move next header compression defines to their nhc implementation.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 607b0bd3f2b9ac118f2c67dbd18c55f1f5aefeb1
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:21 2015 +0200

      6lowpan: nhc: move iphc manipulation out of nhc

      This patch moves the iphc setting of next header commpression bit inside
      iphc functionality. Setting of IPHC bits should be happen at iphc.c file
      only.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 478208e3b9988adc7ec2c480f237049aaf7c4609
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:59 2015 +0200

      6lowpan: remove lowpan_fetch_skb_u8

      This patch removes the lowpan_fetch_skb_u8 function for getting the iphc
      bytes. Instead we using the generic which has a len parameter to tell
      the amount of bytes to fetch.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 8911d7748ca360ef96cb207cc5165eb9c08669e5
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:58 2015 +0200

      6lowpan: cleanup lowpan_header_decompress

      This patch changes the lowpan_header_decompress function by removing
      inklayer related information from parameters. This is currently for
      supporting short and extended address for iphc handling in 802154.
      We don't support short address handling anyway right now, but there
      exists already code for handling short addresses in
      lowpan_header_decompress.

      The address parameters are also changed to a void pointer, so 6LoWPAN
      linklayer specific code can put complex structures as these parameters
      and cast it again inside the generic code by evaluating linklayer type
      before. The order is also changed by destination address at first and
      then source address, which is the same like all others functions where
      destination is always the first, memcpy, dev_hard_header,
      lowpan_header_compress, etc.

      This patch also moves the fetching of iphc values from 6LoWPAN linklayer
      specific code into the generic branch.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a6f773891a836abfa16fcbb8af14c29c3e109336
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:57 2015 +0200

      6lowpan: cleanup lowpan_header_compress

      This patch changes the lowpan_header_compress function by removing
      unused parameters like "len" and drop static value parameters of
      protocol type. Instead we really check the protocol type inside inside
      the skb structure. Also we drop the use of IEEE802154_ADDR_LEN which is
      link-layer specific. Instead we using EUI64_ADDR_LEN which should always
      the default case for now.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit bf513fd6fc609590b7835c0dba624ccb9f8f9214
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:56 2015 +0200

      6lowpan: introduce LOWPAN_IPHC_MAX_HC_BUF_LEN

      This patch introduces the LOWPAN_IPHC_MAX_HC_BUF_LEN define which
      represent the worst-case supported IPHC buffer length. It's used to
      allocate the stack buffer space for creating the IPHC header.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit cefdb801c80736017b5a0d97a4a9f816d5a98fc4
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:55 2015 +0200

      bluetooth: 6lowpan: use lowpan dispatch helpers

      This patch adds a check if the dataroom of skb contains a dispatch value
      by checking if skb->len != 0. This patch also change the dispatch
      evaluation by the recently introduced helpers for checking the common
      6LoWPAN dispatch values for IPv6 and IPHC header.

      There was also a forgotten else branch which should drop the packet if
      no matching dispatch is available.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 71cd2aa53dbf9eb8cb954fc9e65de8dab774b7f6
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:54 2015 +0200

      mac802154: llsec: use kzfree

      This patch will use kzfree instead kfree for security related
      information which can be offered by acccident.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a6ad2a6b9cc1d9d791aee5462cfb8528f366f1d4
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Mon Oct 19 10:51:47 2015 +0300

      Bluetooth: Fix removing connection parameters when unpairing

      The commit 89cbb0638e9b7 introduced support for deferred connection
      parameter removal when unpairing by removing them only once an
      existing connection gets disconnected. However, it failed to address
      the scenario when we're *not* connected and do an unpair operation.

      What makes things worse is that most user space BlueZ versions will
      first issue a disconnect request and only then unpair, meaning the
      buggy code will be triggered every time. This effectively causes the
      kernel to resume scanning and reconnect to a device for which we've
      removed all keys and GATT database information.

      This patch fixes the issue by adding the missing call to the
      hci_conn_params_del() function to a branch which handles the case of
      no existing connection.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 3.19+

  commit 22f8e9dbf671a2f36d90d3d8723a2a0c5227fa4b
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 00:53:33 2015 +0200

      Bluetooth: btusb: Add support for latest Apple controllers

      The latest Apple Bluetooth controllers with Broadcom chip in it have
      a small design change. Instead of including a USB hub with mouse and
      keyboard devices, they are now HID interfaces on the same device.

      T:  Bus=04 Lev=02 Prnt=02 Port=04 Cnt=01 Dev#= 39 Spd=12   MxCh= 0
      D:  Ver= 2.01 Cls=ef(misc ) Sub=02 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=05ac ProdID=8290 Rev= 0.79
      S:  Manufacturer=Broadcom Corp.
      S:  Product=Bluetooth USB Host Controller
      C:* #Ifs= 6 Cfg#= 1 Atr=e0 MxPwr=  0mA
      A:  FirstIf#= 2 IfCount= 4 Cls=ff(vend.) Sub=01 Prot=01
      I:* If#= 0 Alt= 0 #EPs= 1 Cls=03(HID  ) Sub=01 Prot=01 Driver=usbhid
      E:  Ad=85(I) Atr=03(Int.) MxPS=   8 Ivl=10ms
      I:* If#= 1 Alt= 0 #EPs= 1 Cls=03(HID  ) Sub=01 Prot=02 Driver=usbhid
      E:  Ad=86(I) Atr=03(Int.) MxPS=   8 Ivl=10ms
      I:* If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 3 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 3 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 3 Alt= 3 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 3 Alt= 4 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 3 Alt= 5 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 4 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=btusb
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 5 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      The general layout of Bluetooth devices is that interface 0 is the main
      interface and interface 1 is for audio data. This design obviously moves
      it to main interface 2 and audio data on interface 3.

      Starting with the MacBookPro12,1 (early 2015 models) the new Broadcom
      BCM943602CS cards are used which show this interface layout.

      usb 4-1.5: New USB device found, idVendor=05ac, idProduct=8290
      usb 4-1.5: New USB device strings: Mfr=1, Product=2, SerialNumber=0
      usb 4-1.5: Product: Bluetooth USB Host Controller
      usb 4-1.5: Manufacturer: Broadcom Corp.
      Bluetooth: hci0: BCM: chip id 102 build 0243
      Bluetooth: hci0: BCM: product 05ac:8290
      Bluetooth: hci0: BCM20703A1 Generic USB UHE Apple 20Mhz fcbga_X87

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 49a5f782d03888e8b55ed799e57a592b76ce32f6
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 02:30:48 2015 +0200

      Bluetooth: btusb: Set early vendor info for Intel and Broadcom

      For the controllers from Intel and Broadcom (including Apple), it is
      helpful to have the information about the manufacturer send out early.

      This patch sets the hdev->manufacturer information which will be send
      out before actually calling the vendor specific hdev->setup driver
      callback.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e131d74a3afe2b44c3bc59dc4ff06bfd0481ab1a
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 02:30:47 2015 +0200

      Bluetooth: Add support setup stage internal notification event

      Before the vendor specific setup stage is triggered call back into the
      core to trigger an internal notification event. That event is used to
      send an index update to the monitor interface. With that specific event
      it is possible to update userspace with manufacturer information before
      any HCI command has been executed. This is useful for early stage
      debugging of vendor specific initialization sequences.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 18e0afab8ce3f1230ce3fef52b2e73374fd9c0e7
  Author: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
  Date:   Fri Oct 16 11:45:26 2015 +0300

      Bluetooth: ath3k: Add support of AR3012 0cf3:817b device

      T: Bus=04 Lev=02 Prnt=02 Port=04 Cnt=01 Dev#= 3 Spd=12 MxCh= 0
      D: Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs= 1
      P: Vendor=0cf3 ProdID=817b Rev=00.02
      C: #Ifs= 2 Cfg#= 1 Atr=e0 MxPwr=100mA
      I: If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      I: If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb

      BugLink: https://bugs.launchpad.net/bugs/1506615

      Signed-off-by: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit cd355ff071cd37e7197eccf9216770b2b29369f7
  Author: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
  Date:   Mon Oct 5 19:29:33 2015 +0300

      Bluetooth: ath3k: Add new AR3012 0930:021c id

      This adapter works with the existing linux-firmware.

      T:  Bus=01 Lev=01 Prnt=01 Port=03 Cnt=02 Dev#=  3 Spd=12  MxCh= 0
      D:  Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=0930 ProdID=021c Rev=00.01
      C:  #Ifs= 2 Cfg#= 1 Atr=e0 MxPwr=100mA
      I:  If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      I:  If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb

      BugLink: https://bugs.launchpad.net/bugs/1502781

      Signed-off-by: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2faf71ce90782d02e1710c12a19a2084fbbec5cc
  Author: Santtu Rekilä <sare@xxxxxxxxxx>
  Date:   Mon Oct 5 15:45:27 2015 +0300

      Bluetooth: btusb: Add support for Foxconn/Lenovo BCM43142A0 (105b:e065)

      Recently salvaged this 'BCM43142A0' WiFi/Bluetooth module from a Lenovo 
laptop
      and noticed it doesn't work automatically, because the USB IDs are missing
      from btusb.c.

      Plugging in the adapter on Linux 4.1 (dmesg):
      usb 3-3.3.3: new full-speed USB device number 90 using xhci_hcd
      usb 3-3.3.3: New USB device found, idVendor=105b, idProduct=e065
      usb 3-3.3.3: New USB device strings: Mfr=1, Product=2, SerialNumber=3
      usb 3-3.3.3: Product: BCM43142A0
      usb 3-3.3.3: Manufacturer: Broadcom Corp
      usb 3-3.3.3: SerialNumber: 0090A286559E

      /sys/kernel/debug/usb/devices:
      T:  Bus=03 Lev=03 Prnt=22 Port=02 Cnt=02 Dev#= 90 Spd=12   MxCh= 0
      D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=105b ProdID=e065 Rev= 1.12
      S:  Manufacturer=Broadcom Corp
      S:  Product=BCM43142A0
      S:  SerialNumber=0090A286559E
      C:* #Ifs= 4 Cfg#= 1 Atr=e0 MxPwr=  0mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 1 Alt= 1 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 1 Alt= 2 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 1 Alt= 3 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 1 Alt= 4 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 1 Alt= 5 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      Support for the chipset was added in commit 88f9b65 and a similar BCM43142
      based device was added in commit 8f0c304.

      To work around the issue, I got the firmware
      (BCM43142A0_001.001.011.0122.0153) off a Windows installation of Broadcom
      bluetooth driver and converted it to a .hcd -file via. hex2hcd and placed 
it
      in /lib/firmware/brcm/BCM.hcd. After that:

      $ echo "105b e065 0 19ff 0239" > /sys/bus/usb/drivers/btusb/new_id
      ...(plug in the adapter)
      usb 3-3.3.3: new full-speed USB device number 91 using xhci_hcd
      usb 3-3.3.3: New USB device found, idVendor=105b, idProduct=e065
      usb 3-3.3.3: New USB device strings: Mfr=1, Product=2, SerialNumber=3
      usb 3-3.3.3: Product: BCM43142A0
      usb 3-3.3.3: Manufacturer: Broadcom Corp
      usb 3-3.3.3: SerialNumber: 0090A286559E
      Bluetooth: hci0: BCM: chip id 70
      Bluetooth: hci0: BCM (001.001.011) build 0000
      bluetooth hci0: firmware: direct-loading firmware brcm/BCM.hcd
      Bluetooth: hci0: BCM (001.001.011) build 0154

      Bam, now it works for me!

      /sys/kernel/debug/usb/devices:
      T:  Bus=03 Lev=03 Prnt=22 Port=02 Cnt=02 Dev#= 92 Spd=12   MxCh= 0
      D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=105b ProdID=e065 Rev= 1.12
      S:  Manufacturer=Broadcom Corp
      S:  Product=BCM43142A0
      S:  SerialNumber=0090A286559E
      C:* #Ifs= 4 Cfg#= 1 Atr=e0 MxPwr=  0mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 1 Alt= 1 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 1 Alt= 2 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 1 Alt= 3 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 1 Alt= 4 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 1 Alt= 5 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      Signed-off-by: Santtu Rekilä <sare@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 660f0fc07d21114549c1862e67e78b1cf0c90c29
  Author: David Herrmann <dh.herrmann@xxxxxxxxx>
  Date:   Mon Sep 7 12:05:41 2015 +0200

      Bluetooth: hidp: fix device disconnect on idle timeout

      The HIDP specs define an idle-timeout which automatically disconnects a
      device. This has always been implemented in the HIDP layer and forced a
      synchronous shutdown of the hidp-scheduler. This works just fine, but
      lacks a forced disconnect on the underlying l2cap channels. This has been
      broken since:

          commit 5205185d461d5902325e457ca80bd421127b7308
          Author: David Herrmann <dh.herrmann@xxxxxxxxx>
          Date:   Sat Apr 6 20:28:47 2013 +0200

              Bluetooth: hidp: remove old session-management

      The old session-management always forced an l2cap error on the ctrl/intr
      channels when shutting down. The new session-management skips this, as we
      don't want to enforce channel policy on the caller. In other words, if
      user-space removes an HIDP device, the underlying channels (which are
      *owned* and *referenced* by user-space) are still left active. User-space
      needs to call shutdown(2) or close(2) to release them.

      Unfortunately, this does not work with idle-timeouts. There is no way to
      signal user-space that the HIDP layer has been stopped. The API simply
      does not support any event-passing except for poll(2). Hence, we restore
      old behavior and force EUNATCH on the sockets if the HIDP layer is
      disconnected due to idle-timeouts (behavior of explicit disconnects
      remains unmodified). User-space can still call

          getsockopt(..., SO_ERROR, ...)

      ..to retrieve the EUNATCH error and clear sk_err. Hence, the channels can
      still be re-used (which nobody does so far, though). Therefore, the API
      still supports the new behavior, but with this patch it's also compatible
      to the old implicit channel shutdown.

      Cc: <stable@xxxxxxxxxxxxxxx> # 3.10+
      Reported-by: Mark Haun <haunma@xxxxxxxxx>
      Reported-by: Luiz Augusto von Dentz <luiz.dentz@xxxxxxxxx>
      Signed-off-by: David Herrmann <dh.herrmann@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 34cea41e84d5e87a0bd4d5388adab58d0cbc9532
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 18 22:48:28 2015 +0200

      Bluetooth: btbcm: Read USB product information for Apple devices

      For the Apple Bluetooth devices, read the USB product information and
      print them. This allows for easy mapping of chip and USB details.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 8045ce2197bf61b5b82bbe38fcc5feeaf7348ad1
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 18 22:37:56 2015 +0200

      Bluetooth: btbcm: Fix firmware version number calculation

      The calculation for the firmware version number is off by one bit.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6c9d435d359898868f71e8ba03f8d5f1cbccaa69
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 14:39:27 2015 +0200

      Bluetooth: btusb: Mark BCM2045 devices to have broken link key commands

      The BCM2045 seems to have a problem with the stored link key commands
      and thus just mark them as broken.

        HCI Event: Command Complete (0x0e) plen 12
           Read Local Supported Features (0x04|0x0003) ncmd 1
           status 0x00
           Features: 0xff 0xff 0x8d 0xfe 0x8f 0xf9 0x00 0x80
        HCI Event: Command Complete (0x0e) plen 12
           Read Local Version Information (0x04|0x0001) ncmd 1
           status 0x00
           HCI Version: 2.0 (0x3) HCI Revision: 0x2000
           LMP Version: 2.0 (0x3) LMP Subversion: 0x410d
           Manufacturer: Broadcom Corporation (15)
        HCI Event: Command Complete (0x0e) plen 11
           Read Buffer Size (0x04|0x0005) ncmd 1
           status 0x00
           ACL MTU 1017:8 SCO MTU 64:0
        HCI Event: Command Complete (0x0e) plen 68
           Read Local Supported Commands (0x04|0x0002) ncmd 1
           status 0x00
           Commands: ffffff03feffcfffffffffff0300f8ff07
        HCI Event: Command Complete (0x0e) plen 4
           Delete Stored Link Key (0x03|0x0012) ncmd 1
           status 0x11 deleted 2048
           Error: Unsupported Feature or Parameter Value

      From the looks of it, this device seems genuine and not one of the
      devices that are neither Broadcom nor CSR devices in reality.

      T: Bus=04 Lev=02 Prnt=02 Port=02 Cnt=02 Dev#= 3 Spd=12 MxCh= 0
      D: Ver= 2.00 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs= 1
      P: Vendor=0a5c ProdID=2045 Rev= 1.12
      S: Manufacturer=Broadcom Corp
      S: Product=BCM2045A
      S: SerialNumber=000000000000
      C:* #Ifs= 4 Cfg#= 1 Atr=a0 MxPwr=100mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=81(I) Atr=03(Int.) MxPS= 16 Ivl=1ms
      E: Ad=82(I) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      E: Ad=02(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      I: If#= 1 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      I: If#= 1 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 17 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 17 Ivl=1ms
      I: If#= 1 Alt= 3 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 25 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 25 Ivl=1ms
      I: If#= 1 Alt= 4 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 33 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 33 Ivl=1ms
      I: If#= 1 Alt= 5 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 49 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
      E: Ad=84(I) Atr=02(Bulk) MxPS= 32 Ivl=0ms
      E: Ad=04(O) Atr=02(Bulk) MxPS= 32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=00 Driver=(none)

      Reported-and-tested-by: Julio González Mejías <juliolokooo@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 3e24767b78744c7f335ca8c485ab0a0dcec693ec
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 16:00:28 2015 +0200

      Bluetooth: btintel: Add diagnostic support for older controllers

      For the older controllers like Wilkens Peak and Stone Peak, enabling the
      traces requires to switch into manufacturer mode first. This patch does
      exactly that, but only for these older controllers.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit d8270fbb3ffe9a29d81bdaa66c81ef021ba09651
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 16:00:27 2015 +0200

      Bluetooth: btintel: Set quirk for non-persistent diagnostic settings

      For Intel controllers the diagnostics settings are not persistent over
      HCI Reset. So set the quirk to programm them again on every power up.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 7e995b9eadbe226e355b785a765fd90fe0487414
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 16:00:26 2015 +0200

      Bluetooth: Add new quirk for non-persistent diagnostic settings

      If the diagnostic settings are not persistent over HCI Reset, then this
      quirk can be used to tell the Bluetoth core about it. This will ensure
      that the settings are programmed correctly when the controller is
      powered up.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 7841d06e4398cff7d744539d1e6ea4026ceab2e5
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Sat Oct 17 00:03:38 2015 +0200

      Bluetooth: bpa10x: fix BT_HCIUART dependency

      The change to bpa10x to use the h4_recv_buf helper added a dependency
      on BT_HCIUART. This was incorrectly added to Kconfig by adding a
      'select' statement, which now in turn causes build failures
      when CONFIG_TTY is not set:

      warning: (BT_HCIBPA10X) selects BT_HCIUART which has unmet direct 
dependencies (NET && BT && TTY)
      vers/built-in.o: In function `hci_uart_tty_receive':
      fpga-mgr.c:(.text+0x282824): undefined reference to `tty_unthrottle'
      drivers/built-in.o: In function `hci_uart_tty_ioctl':
      fpga-mgr.c:(.text+0x282aa0): undefined reference to `n_tty_ioctl_helper'
      drivers/built-in.o: In function `hci_uart_flush':

      This replaces the 'select BT_HCIUART' dependency with 'depends on', which
      does not have this kind of problem. Alternatively, one could add 'depends
      on TTY', but avoiding 'select' on user-visible options is generally the
      preferred choice as that does not introduce the potential for dependency
      loops or incomplete dependency chains.

      Fixes: 91489919247a ("Bluetooth: bpa10x: Fix missing BT_HCIUART 
dependency")
      Fixes: 943cc592195e ("Bluetooth: bpa10x: Use h4_recv_buf helper for frame 
reassembly")
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 2220994e7187c15848c00c7d9dab632969533396
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 13 13:54:55 2015 +0200

      Bluetooth: btusb: Print information of Intel SfP lock states

      The lock states from Intel SfP controllers can only be read once before
      loading the firmware. So for debugging purposes, print them out.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit cad20c278085d893ebd616cd20c0747a8e9d53c7
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Mon Oct 12 13:36:19 2015 +0200

      Bluetooth: Don't use remote address type to decide IRK persistency

      There are LE devices on the market that start off by announcing their
      public address and then once paired switch to using private address.
      To be interoperable with such devices we should simply trust the fact
      that we're receiving an IRK from them to indicate that they may use
      private addresses in the future. Instead, simply tie the persistency
      to the bonding/no-bonding information the same way as for LTKs and
      CSRKs.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 581d6fd60f37be587690655de05aee200b939e06
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 16:13:51 2015 +0200

      Bluetooth: Queue diagnostic messages together with HCI packets

      Sending diagnostic messages directly to the monitor socket might cause
      issues for devices processing their messages in interrupt context. So
      instead of trying to directly forward them, queue them up with the other
      HCI packets and lets them be processed by the sockets at the same time.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit bb77543ebd2e38c08412fec7eb1e35b902c5ff77
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 16:13:50 2015 +0200

      Bluetooth: Restrict valid packet types via HCI_CHANNEL_RAW

      When using the HCI_CHANNEL_RAW, restrict the packet types to valid ones
      from the Bluetooth specification.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 8cd4f581427213e086fca601bb9d8c7ea9cfeabc
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 16:13:49 2015 +0200

      Bluetooth: Remove quirk for HCI_VENDOR_PKT filter handling

      The HCI_VENDOR_PKT quirk was needed for BPA-100/105 devices that send
      these messages. Now that there is support for proper diagnostic channel
      this quirk is no longer needed.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6d2e50d24098b1f80ad76db9a9cb9668c4bf6b50
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 14:42:08 2015 +0200

      Bluetooth: btintel: Add support for enabling tracing functionality

      For Intel controllers with firmware that allows tracing of baseband
      functionality this allows enabling it via set_diag driver callback.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 9d08f50401ac7eb32e3c9ae8c4c0a61c6b107fd1
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:23:08 2015 +0200

      Bluetooth: btusb: Add support for Broadcom LM_DIAG interface

      The Broadcom Bluetooth USB devices have a third interface that is
      dedicated for LM_DIAG messages. The If#= 2 describes this interface
      and it consists of one bulk in and one bulk endpoint.

      T:  Bus=01 Lev=01 Prnt=01 Port=01 Cnt=02 Dev#= 38 Spd=12   MxCh= 0
      D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=19ff ProdID=0239 Rev= 1.12
      S:  Manufacturer=Broadcom Corp
      S:  Product=BCM20702A0
      C:* #Ifs= 4 Cfg#= 1 Atr=e0 MxPwr=  0mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 1 Alt= 1 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 1 Alt= 2 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 1 Alt= 3 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 1 Alt= 4 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 1 Alt= 5 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=btusb
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      For all Broadcom based devices with this interface, the driver now
      claims it and schedules URBs for it. This allows to capture the
      LM_DIAG messages and allows forwarding them via hci_recv_diag into
      the diagnostic channel of the Bluetooth subsystem.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 91489919247a48ce02686520eca25e9c9200dc6f
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 19:30:05 2015 +0200

      Bluetooth: bpa10x: Fix missing BT_HCIUART dependency

      Selecting just BT_HCIUART_H4 is not enough and it also needs to select
      BT_HCIUART to avoid this warning:

      warning: (BT_HCIBPA10X) selects BT_HCIUART_H4 which has unmet direct
      dependencies (NET && BT && BT_HCIUART)

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 681ab4696062f5aa939c9e04d058732306a97176
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Tue Oct 20 12:09:13 2015 -0400

      md/raid10: submit_bio_wait() returns 0 on success

      This was introduced with 9e882242c6193ae6f416f2d8d8db0d9126bd996b
      which changed the return value of submit_bio_wait() to return != 0 on
      error, but didn't update the caller accordingly.

      Fixes: 9e882242c6 ("block: Add submit_bio_wait(), remove from md")
      Cc: stable@xxxxxxxxxxxxxxx (v3.10)
      Reported-by: Bill Kuzeja <William.Kuzeja@xxxxxxxxxxx>
      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 203d27b0226a05202438ddb39ef0ef1acb14a759
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Tue Oct 20 12:09:12 2015 -0400

      md/raid1: submit_bio_wait() returns 0 on success

      This was introduced with 9e882242c6193ae6f416f2d8d8db0d9126bd996b
      which changed the return value of submit_bio_wait() to return != 0 on
      error, but didn't update the caller accordingly.

      Fixes: 9e882242c6 ("block: Add submit_bio_wait(), remove from md")
      Cc: stable@xxxxxxxxxxxxxxx (v3.10)
      Reported-by: Bill Kuzeja <William.Kuzeja@xxxxxxxxxxx>
      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit bc1d03687b9be3a30aab8e8d78c7884449b6e511
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Oct 9 06:59:23 2015 -0400

      perf cpu_map: Fix core dump caused by per-socket/core system-wide stat

      Perf will core dump if --per-socket/core -a are applied for perf stat.

      The root cause is that cpu_map__build_map set refcnt of evlist's cpu_map
      to 1.  It should set refcnt for the newly created cpu_map, not evlist's
      cpu_map.

      Here is the example:

        # perf stat -e cycles --per-socket -a sleep 1

         Performance counter stats for 'system wide':

        S0       36         30,196,257      cycles
        S1       28         15,823,536      cycles

             1.001126828 seconds time elapsed

        *** Error in `./perf': corrupted double-linked list: 0x00000000021f9090 
***
        ======= Backtrace: =========
        /lib64/libc.so.6[0x3002e7bbe7]
        /lib64/libc.so.6[0x3002e7d2b5]
        ./perf(perf_evsel__delete+0x28)[0x485bdd]
        ./perf[0x4800e8]
        ./perf(perf_evlist__delete+0x5e)[0x482cd5]
        ./perf(cmd_stat+0xf25)[0x432328]
        ./perf[0x4768e0]
        ./perf[0x476ad6]
        ./perf[0x476b41]
        ./perf(main+0x1d0)[0x476db2]
        /lib64/libc.so.6(__libc_start_main+0xf5)[0x3002e21b45]
        ./perf[0x4202c5]

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444388363-35936-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2f465deef7ce8c722121b782dd91c284f5ae80ca
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 12:28:11 2015 +0200

      tools lib traceevent: update KVM plugin

      The format of the role word has changed through the years and the plugin
      was never updated; some VMX exit reasons were missing too.

      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: kvm@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443695293-31127-1-git-send-email-pbonzini@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ab3964ad2acfbb0dc5414d4c86fa6d8d690f27a1
  Author: Haggai Eran <haggaie@xxxxxxxxxxxx>
  Date:   Tue Oct 20 09:53:01 2015 +0300

      IB/cma: Use inner P_Key to determine netdev

      When discussing the patches to demux ids in rdma_cm instead of ib_cm, it
      was decided that it is best to use the P_Key value in the packet headers.
      However, the mlx5 and ipath drivers are currently unable to send correct
      P_Key values in GMP headers. They always send using a single P_Key that is
      set during the GSI QP initialization.

      Change the rdma_cm code to look at the P_Key value that is part of the
      packet payload as a workaround. Once the drivers are fixed this patch can
      be reverted.

      Fixes: 4c21b5bcef73 ("IB/cma: Add net_dev and private data checks to
      RDMA CM")
      Signed-off-by: Haggai Eran <haggaie@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 0174b381caf89443d92c6fe75f725f2bfeba96b6
  Author: Sasha Levin <sasha.levin@xxxxxxxxxx>
  Date:   Thu Sep 17 16:04:19 2015 -0400

      IB/ucma: check workqueue allocation before usage

      Allocating a workqueue might fail, which wasn't checked so far and would
      lead to NULL ptr derefs when an attempt to use it was made.

      Signed-off-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit b3b51f9f6f5d91cd16afaed0c22df2c56ed5f92e
  Author: Haggai Eran <haggaie@xxxxxxxxxxxx>
  Date:   Mon Sep 21 16:02:02 2015 +0300

      IB/cma: Potential NULL dereference in cma_id_from_event

      If the lookup of a listening ID failed for an AF_IB request, the code
      would try to call dev_put() on a NULL net_dev.

      Fixes: be688195bd08 ("IB/cma: Fix net_dev reference leak with failed
      requests")
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Haggai Eran <haggaie@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3909642034ffd7a8906ff3f2b2a71455bf39e7f6
  Author: Matan Barak <matanb@xxxxxxxxxxxx>
  Date:   Thu Oct 15 15:01:03 2015 +0300

      IB/core: Fix use after free of ifa

      When using ifup/ifdown while executing enum_netdev_ipv4_ips,
      ifa could become invalid and cause use after free error.
      Fixing it by protecting with RCU lock.

      Fixes: 03db3a2d81e6 ('IB/core: Add RoCE GID table management')
      Signed-off-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 625faa6a720d26fc0db9e20b48dc0dfe4c8d8ddf
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 11:49:44 2015 +0100

      clkdev: fix clk_add_alias() with a NULL alias device name

      clk_add_alias() was not correctly handling the case where alias_dev_name
      was NULL: rather than producing an entry with a NULL dev_id pointer,
      it would produce a device name of (null).  Fix this.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: 2568999835d7 ("clkdev: add clkdev_create() helper")
      Reported-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Tested-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 0d997491f814c87310a6ad7be30a9049c7150489
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Sat Oct 17 19:05:27 2015 +0200

      arm/arm64: KVM: Fix disabled distributor operation

      We currently do a single update of the vgic state when the distributor
      enable/disable control register is accessed and then bypass updating the
      state for as long as the distributor remains disabled.

      This is incorrect, because updating the state does not consider the
      distributor enable bit, and this you can end up in a situation where an
      interrupt is marked as pending on the CPU interface, but not pending on
      the distributor, which is an impossible state to be in, and triggers a
      warning.  Consider for example the following sequence of events:

      1. An interrupt is marked as pending on the distributor
         - the interrupt is also forwarded to the CPU interface
      2. The guest turns off the distributor (it's about to do a reboot)
         - we stop updating the CPU interface state from now on
      3. The guest disables the pending interrupt
         - we remove the pending state from the distributor, but don't touch
           the CPU interface, see point 2.

      Since the distributor disable bit really means that no interrupts should
      be forwarded to the CPU interface, we modify the code to keep updating
      the internal VGIC state, but always set the CPU interface pending bits
      to zero when the distributor is disabled.

      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 544c572e03174438b6656ed24a4516b9a9d5f14a
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Sat Oct 17 17:55:12 2015 +0200

      arm/arm64: KVM: Clear map->active on pend/active clear

      When a guest reboots or offlines/onlines CPUs, it is not uncommon for it
      to clear the pending and active states of an interrupt through the
      emulated VGIC distributor.  However, since the architected timers are
      defined by the architecture to be level triggered and the guest
      rightfully expects them to be that, but we emulate them as
      edge-triggered, we have to mimic level-triggered behavior for an
      edge-triggered virtual implementation.

      We currently do not signal the VGIC when the map->active field is true,
      because it indicates that the guest has already been signalled of the
      interrupt as required.  Normally this field is set to false when the
      guest deactivates the virtual interrupt through the sync path.

      We also need to catch the case where the guest deactivates the interrupt
      through the emulated distributor, again allowing guests to boot even if
      the original virtual timer signal hit before the guest's GIC
      initialization sequence is run.

      Reviewed-by: Eric Auger <eric.auger@xxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit cff9211eb1a1f58ce7f5a2d596b617928fd4be0e
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:21 2015 +0200

      arm/arm64: KVM: Fix arch timer behavior for disabled interrupts

      We have an interesting issue when the guest disables the timer interrupt
      on the VGIC, which happens when turning VCPUs off using PSCI, for
      example.

      The problem is that because the guest disables the virtual interrupt at
      the VGIC level, we never inject interrupts to the guest and therefore
      never mark the interrupt as active on the physical distributor.  The
      host also never takes the timer interrupt (we only use the timer device
      to trigger a guest exit and everything else is done in software), so the
      interrupt does not become active through normal means.

      The result is that we keep entering the guest with a programmed timer
      that will always fire as soon as we context switch the hardware timer
      state and run the guest, preventing forward progress for the VCPU.

      Since the active state on the physical distributor is really part of the
      timer logic, it is the job of our virtual arch timer driver to manage
      this state.

      The timer->map->active boolean field indicates whether we have signalled
      this interrupt to the vgic and if that interrupt is still pending or
      active.  As long as that is the case, the hardware doesn't have to
      generate physical interrupts and therefore we mark the interrupt as
      active on the physical distributor.

      We also have to restore the pending state of an interrupt that was
      queued to an LR but was retired from the LR for some reason, while
      remaining pending in the LR.

      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reported-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 4a5d69b73948d0e03cd38d77dc11edb2e707165f
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Oct 12 15:22:31 2015 +0200

      KVM: arm: use GIC support unconditionally

      The vgic code on ARM is built for all configurations that enable KVM,
      but the parent_data field that it references is only present when
      CONFIG_IRQ_DOMAIN_HIERARCHY is set:

      virt/kvm/arm/vgic.c: In function 'kvm_vgic_map_phys_irq':
      virt/kvm/arm/vgic.c:1781:13: error: 'struct irq_data' has no member named 
'parent_data'

      This flag is implied by the GIC driver, and indeed the VGIC code only
      makes sense if a GIC is present. This changes the CONFIG_KVM symbol
      to always select GIC, which avoids the issue.

      Fixes: 662d9715840 ("arm/arm64: KVM: Kill CONFIG_KVM_ARM_{VGIC,TIMER}")
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 399ea0f6bcd318af94ec8e4ffe96703ed674f22e
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Tue Oct 6 11:14:35 2015 +0300

      KVM: arm/arm64: Fix memory leak if timer initialization fails

      Jump to correct label and free kvm_host_cpu_state

      Reviewed-by: Wei Huang <wei@xxxxxxxxxx>
      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 437f9963bc4fd75889c1fe9289a92dea9124a439
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Fri Sep 25 17:00:29 2015 +0300

      KVM: arm/arm64: Do not inject spurious interrupts

      When lowering a level-triggered line from userspace, we forgot to lower
      the pending bit on the emulated CPU interface and we also did not
      re-compute the pending_on_cpu bitmap for the CPU affected by the change.

      Update vgic_update_irq_pending() to fix the two issues above and also
      raise a warning in vgic_quue_irq_to_lr if we encounter an interrupt
      pending on a CPU which is neither marked active nor pending.

        [ Commit text reworked completely - Christoffer ]

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit a2d7629048322ae62bff57f34f5f995e25ed234c
  Author: Steven Rostedt (Red Hat) <rostedt@xxxxxxxxxxx>
  Date:   Tue Oct 20 11:38:08 2015 -0400

      tracing: Have stack tracer force RCU to be watching

      The stack tracer was triggering the WARN_ON() in module.c:

       static void module_assert_mutex_or_preempt(void)
       {
       #ifdef CONFIG_LOCKDEP
        if (unlikely(!debug_locks))
                return;

        WARN_ON(!rcu_read_lock_sched_held() &&
                !lockdep_is_held(&module_mutex));
       #endif
       }

      The reason is that the stack tracer traces all function calls, and some of
      those calls happen while exiting or entering user space and idle. Some of
      these functions are called after RCU had already stopped watching, as RCU
      does not watch userspace or idle CPUs.

      If a max stack is hit, then the save_stack_trace() is called, which will
      check module addresses and call module_assert_mutex_or_preempt(), and then
      trigger the warning. Sad part is, the warning itself will also do a stack
      trace and tigger the same warning. That probably should be fixed.

      The warning was added by 0be964be0d45 "module: Sanitize RCU usage and
      locking" but this bug has probably been around longer. But it's unlikely 
to
      cause much harm, but the new warning causes the system to lock up.

      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc:"Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Steven Rostedt <rostedt@xxxxxxxxxxx>

  commit 97aff2c03a1e4d343266adadb52313613efb027f
  Author: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 10:25:58 2015 +0100

      ASoC: wm8904: Correct number of EQ registers

      There are 24 EQ registers not 25, I suspect this bug came about because
      the registers start at EQ1 not zero. The bug is relatively harmless as
      the extra register written is an unused one.

      Signed-off-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit d289619a219dd01e255d7b5e30f9171b25efea48
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Tue Oct 20 16:23:55 2015 +0200

      ALSA: hda - Fix deadlock at error in building PCM

      The HDA codec driver issues snd_hda_codec_reset() at the error path of
      PCM build.  This was needed in the earlier code base, but the recent
      rewrite to use the standard bus binding made this a deadlock:
       modprobe        D 0000000000000005     0   720    716 0x00000080
       Call Trace:
        [<ffffffff816a5dbe>] schedule+0x3e/0x90
        [<ffffffff816a61a5>] schedule_preempt_disabled+0x15/0x20
        [<ffffffff816a7ae5>] __mutex_lock_slowpath+0xb5/0x120
        [<ffffffff816a7b6b>] mutex_lock+0x1b/0x30
        [<ffffffff8148656b>] device_release_driver+0x1b/0x30
        [<ffffffff81485c15>] bus_remove_device+0x105/0x180
        [<ffffffff814822b9>] device_del+0x139/0x260
        [<ffffffffa05e0ec5>] snd_hdac_device_unregister+0x25/0x30 [snd_hda_core]
        [<ffffffffa074fa6a>] snd_hda_codec_reset+0x2a/0x70 [snd_hda_codec]
        [<ffffffffa075007b>] snd_hda_codec_build_pcms+0x18b/0x1b0 
[snd_hda_codec]
        [<ffffffffa074a44e>] hda_codec_driver_probe+0xbe/0x140 [snd_hda_codec]
        [<ffffffff81486ac4>] driver_probe_device+0x1f4/0x460
        [<ffffffff81486dc0>] __driver_attach+0x90/0xa0
        [<ffffffff81484844>] bus_for_each_dev+0x64/0xa0
        [<ffffffff814862de>] driver_attach+0x1e/0x20
        [<ffffffff81485e7b>] bus_add_driver+0x1eb/0x280
        [<ffffffff81487680>] driver_register+0x60/0xe0
        [<ffffffffa074a0da>] __hda_codec_driver_register+0x5a/0x60 
[snd_hda_codec]
        [<ffffffffa070a01e>] realtek_driver_init+0x1e/0x1000 
[snd_hda_codec_realtek]
        [<ffffffff810002f3>] do_one_initcall+0xb3/0x200
        [<ffffffff816a1fc5>] do_init_module+0x60/0x1f8
        [<ffffffff810ee5c3>] load_module+0x1653/0x1bd0
        [<ffffffff810eed48>] SYSC_finit_module+0x98/0xc0
        [<ffffffff810eed8e>] SyS_finit_module+0xe/0x10
        [<ffffffff816aa032>] entry_SYSCALL_64_fastpath+0x16/0x75

      The simple fix is just to remove this call, since we don't need to
      think about unbinding at there any longer.

      Bugzilla: https://bugzilla.suse.com/show_bug.cgi?id=948758
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 271817a3e92c0455bda5856d87eca244ad67d3a2
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Mon Oct 19 17:23:28 2015 -0400

      crypto: asymmetric_keys - Fix unaligned access in x509_get_sig_params()

      x509_get_sig_params() has the same code pattern as the one in
      pkcs7_verify() that is fixed by commit 62f57d05e287 ("crypto: pkcs7 - Fix
      unaligned access in pkcs7_verify()") so apply a similar fix here: make
      sure that desc is pointing at an algined value past the digest_size,
      and take alignment values into consideration when doing kzalloc()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 381ceef785aa3957cd78f13b9311a09a8ea8ed45
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Mon Oct 19 12:19:45 2015 +0100

      crypto: akcipher - Don't #include crypto/public_key.h as the contents 
aren't used

      Don't #include crypto/public_key.h in akcipher as the contents of the
      header aren't used and changes in a future patch cause it to fail to
      compile if CONFIG_KEYS=n.

      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 642c117b927fae34cb85ac7ff278f5fc5bb93a47
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:42 2015 +0900

      hwrng: exynos - Add Device Tree support

      Add Device Tree support for the driver. The Pseudo Random Number
      Generator module is the same in almost all of Exynos SoCs, since
      Exynos4210 (however the tests were done only on Trats2 board with
      Exynos4412). There are some differences on newer Exynos Octa
      (Exynos542x) SoCs.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit bd1dffb1424682ac5b5849e0998c26dffcd61d9e
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:41 2015 +0900

      hwrng: exynos - Fix missing configuration after suspend to RAM

      After suspend to RAM the device stopped to work with ETIMEDOUT error:

      $ dd if=/dev/hwrng of=/dev/null bs=1 count=16
      dd: reading `/dev/hwrng': Connection timed out

      In the STATUS register the bits #5 (PRNG_DONE) and #1
      (SEED_SETTING_DONE) were not set. Instead PRNG_ERROR (seventh bit) was
      high.

      After each system suspend initialize the seed to fix the error.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d7fd6075a205f19cd0c570c8b5badb8c69321d88
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:40 2015 +0900

      hwrng: exynos - Add timeout for waiting on init done

      Driver may hang waiting indefinitely for PRNG to finish its
      initialization stage. Instead of stalling return -ETIMEDOUT error.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 2b748a2f642a95c8125bfd8981d430a4e4d73e15
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:39 2015 +0900

      dt-bindings: rng: Describe Exynos4 PRNG bindings

      Document the bindings used by exynos-rng Pseudo Random Number Generator
      driver.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 6de59d453ae567c1b637ef9469c37fd8367cd1b4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:26 2015 +0100

      crypto: marvell/cesa - use __le32 for hardware descriptors

      Much of the driver uses cpu_to_le32() to convert values for descriptors
      to little endian before writing.  Use __le32 to define the hardware-
      accessed parts of the descriptors, and ensure most places where it's
      reasonable to do so use cpu_to_le32() when assigning to these.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ea1f662bde067563328ec3083884aaffb3d902d8
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:20 2015 +0100

      crypto: marvell/cesa - fix missing cpu_to_le32() in mv_cesa_dma_add_op()

      When tdma->src is freed in mv_cesa_dma_cleanup(), we convert the DMA
      address from a little-endian value prior to calling dma_pool_free().
      However, mv_cesa_dma_add_op() assigns tdma->src without first converting
      the DMA address to little endian.  Fix this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 0f3304dc18b1316bc6d32921f2a7837938f90c30
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:15 2015 +0100

      crypto: marvell/cesa - use memcpy_fromio()/memcpy_toio()

      Use the IO memcpy() functions when copying from/to MMIO memory.
      These locations were found via sparse.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 35622eae188761f30df916a6cae4fa8c942a6366
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:10 2015 +0100

      crypto: marvell/cesa - use gfp_t for gfp flags

      Use gfp_t not u32 for the GFP flags.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5d754137ab905aaaf69acf81c9c6c7005bcfe6e4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:05 2015 +0100

      crypto: marvell/cesa - use dma_addr_t for cur_dma

      cur_dma is part of the software state, not read by the hardware.
      Storing it in LE32 format is wrong, use dma_addr_t for this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b150856152cc442050ed3041e912ff0258c50f87
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:00 2015 +0100

      crypto: marvell/cesa - use readl_relaxed()/writel_relaxed()

      Use relaxed IO accessors where appropriate.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 660c40bd9837854b3d3cc75e6ddb41cc8ac32a1d
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 11:29:01 2015 +0200

      pinctrl: sh-pfc: Remove obsolete r8a7778 platform_device_id entry

      Since the removal of the r8a7778 legacy SoC code in commit
      4baadb9e05c68962 ("ARM: shmobile: r8a7778: remove obsolete setup code"),
      r8a7778 is only supported in generic DT-only ARM multi-platform builds.
      The driver doesn't need to match platform devices by name anymore, hence
      remove the corresponding platform_device_id entry.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5eb6fc210ea2f988731f54eda0497d0518b89347
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 11:27:19 2015 +0200

      pinctrl: sh-pfc: Remove obsolete r8a7779 platform_device_id entry

      Since the removal of the r8a7779 legacy SoC code in commit
      c99cd90d98a98aa1 ("ARM: shmobile: r8a7779: Remove legacy SoC code"),
      r8a7779 is only supported in generic DT-only ARM multi-platform builds.
      The driver doesn't need to match platform devices by name anymore, hence
      remove the corresponding platform_device_id entry.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 659f313dcfb9eaf4de7d415fe9fd1856252444f5
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:31 2015 +0100

      crypto: caam - fix indentation of close braces

      The kernel's coding style suggests that closing braces for initialisers
      should not be aligned to the open brace column.  The CodingStyle doc
      shows how this should be done.  Remove the additional tab.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5ec908319ab53072d3a2188e62ed2e5d7b846951
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:25 2015 +0100

      crypto: caam - only export the state we really need to export

      Avoid exporting lots of state by only exporting what we really require,
      which is the buffer containing the set of pending bytes to be hashed,
      number of pending bytes, the context buffer, and the function pointer
      state.  This reduces down the exported state size to 216 bytes from
      576 bytes.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c7556ff7e3e4f2747583bcc787f12ec9460ec3a6
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:20 2015 +0100

      crypto: caam - fix non-block aligned hash calculation

      caam does not properly calculate the size of the retained state
      when non-block aligned hashes are requested - it uses the wrong
      buffer sizes, which results in errors such as:

      caam_jr 2102000.jr1: 40000501: DECO: desc idx 5: SGT Length Error. The 
descriptor is trying to read more data than is contained in the SGT table.

      We end up here with:

      in_len 0x46 blocksize 0x40 last_bufsize 0x0 next_bufsize 0x6
      to_hash 0x40 ctx_len 0x28 nbytes 0x20

      which results in a job descriptor of:

      jobdesc@889: ed03d918: b0861c08 3daa0080 f1400000 3d03d938
      jobdesc@889: ed03d928: 00000068 f8400000 3cde2a40 00000028

      where the word at 0xed03d928 is the expected data size (0x68), and a
      scatterlist containing:

      sg@892: ed03d938: 00000000 3cde2a40 00000028 00000000
      sg@892: ed03d948: 00000000 3d03d100 00000006 00000000
      sg@892: ed03d958: 00000000 7e8aa700 40000020 00000000

      0x68 comes from 0x28 (the context size) plus the "in_len" rounded down
      to a block size (0x40).  in_len comes from 0x26 bytes of unhashed data
      from the previous operation, plus the 0x20 bytes from the latest
      operation.

      The fixed version would create:

      sg@892: ed03d938: 00000000 3cde2a40 00000028 00000000
      sg@892: ed03d948: 00000000 3d03d100 00000026 00000000
      sg@892: ed03d958: 00000000 7e8aa700 40000020 00000000

      which replaces the 0x06 length with the correct 0x26 bytes of previously
      unhashed data.

      This fixes a previous commit which erroneously "fixed" this due to a
      DMA-API bug report; that commit indicates that the bug was caused via a
      test_ahash_pnum() function in the tcrypt module.  No such function has
      ever existed in the mainline kernel.  Given that the change in this
      commit has been tested with DMA API debug enabled and shows no issue,
      I can only conclude that test_ahash_pnum() was triggering that bad
      behaviour by CAAM.

      Fixes: 7d5196aba3c8 ("crypto: caam - Correct DMA unmap size in 
ahash_update_ctx()")
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 434b421241f2d0faa7fea75f6320de00c5e3430e
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:15 2015 +0100

      crypto: caam - avoid needlessly saving and restoring caam_hash_ctx

      When exporting and importing the hash state, we will only export and
      import into hashes which share the same struct crypto_ahash pointer.
      (See hash_accept->af_alg_accept->hash_accept_parent.)

      This means that saving the caam_hash_ctx structure on export, and
      restoring it on import is a waste of resources.  So, remove this code.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 6ea30f0acfd1c269520c561b45762c0de590007f
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:10 2015 +0100

      crypto: caam - print errno code when hash registration fails

      Print the errno code when hash registration fails, so we know why the
      failure occurred.  This aids debugging.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8c07f3a8c487df241f5e809e8f6d5dd7c9d75b54
  Author: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:57 2015 +0100

      crypto: marvell/cesa - fix memory leak

      To: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>,Arnaud Ebalard 
<arno@xxxxxxxxxxxx>,Thomas Petazzoni 
<thomas.petazzoni@xxxxxxxxxxxxxxxxxx>,Jason Cooper <jason@xxxxxxxxxxxxxx>

      The local chain variable is not cleaned up if an error occurs in the 
middle
      of DMA chain creation. Fix that by dropping the local chain variable and
      using the dreq->chain field which will be cleaned up by
      mv_cesa_dma_cleanup() in case of errors.

      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Reported-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8efbc2c0f6b4e52e384ecb1714511f0194c4d56a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:52 2015 +0100

      crypto: marvell/cesa - fix first-fragment handling in 
mv_cesa_ahash_dma_last_req()

      When adding the software padding, this must be done using the first/mid
      fragment mode, and any subsequent operation needs to be a mid-fragment.
      Fix this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ab270e7055e0aa9d4dc3bf419cdfdde340174978
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:47 2015 +0100

      crypto: marvell/cesa - rearrange handling for sw padded hashes

      Rearrange the last request handling for hashes which require software
      padding.

      We prepare the padding to be appended, and then append as much of the
      padding to any existing data that's already queued up, adding an
      operation block and launching the operation.

      Any remainder is then appended as a separate operation.

      This ensures that the hardware only ever sees multiples of the hash
      block size to be operated on for software padded hashes, thus ensuring
      that the engine always indicates that it has finished the calculation.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit aee84a7e6ed515f0f217317ff261a15db4bff0bb
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:42 2015 +0100

      crypto: marvell/cesa - rearrange handling for hw finished hashes

      Rearrange the last request handling for hardware finished hashes
      by moving the generation of the fragment operation into this path.
      This results in a simplified sequence to handle this case, and
      allows us to move the software padded case further down into the
      function.  Add comments describing these parts.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 58953e15ef015ba9136b7234a7098cf827428999
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:37 2015 +0100

      crypto: marvell/cesa - rearrange last request handling

      Move the test for the last request out of mv_cesa_ahash_dma_last_req()
      to its caller, and move the mv_cesa_dma_add_frag() down into this
      function.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e41bbebddec44f7c06585f42686b2a529513fc6a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:32 2015 +0100

      crypto: marvell/cesa - avoid adding final operation within loop

      Avoid adding the final operation within the loop, but instead add it
      outside.  We combine this with the handling for the no-data case.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit bd274b10856b91f702fa767114aa7e6ac45b933d
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:26 2015 +0100

      crypto: marvell/cesa - ensure iter.base.op_len is the full op length

      When we process the last request of data, and the request contains user
      data, the loop in mv_cesa_ahash_dma_req_init() marks the first data size
      as being iter.base.op_len which does not include the size of the cache
      data.  This means we end up hashing an insufficient amount of data.

      Fix this by always including the cache size in the first operation
      length of any request.

      This has the effect that for a request containing no user data,

        iter.base.op_len === iter.src.op_offset === creq->cache_ptr

      As a result, we include one further change to use iter.base.op_len in
      the cache-but-no-user-data case to make the next change clearer.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d9bba4c3ebbc65b9113624eb1690bed776fb6106
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:21 2015 +0100

      crypto: marvell/cesa - use presence of scatterlist to determine data load

      Use the presence of the scatterlist to determine whether we should load
      any new user data to the engine.  The following shall always be true at
      this point:

        iter.base.op_len == 0 === iter.src.sg

      In doing so, we can:

      1. eliminate the test for iter.base.op_len inside the loop, which
         makes the loop operation more obvious and understandable.

      2. move the operation generation for the cache-only case.

      This prepares the code for the next step in its transformation, and also
      uncovers a bug that will be fixed in the next patch.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 0971d09a8566abd6640acdbe3fd304e67e257bd3
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:16 2015 +0100

      crypto: marvell/cesa - move mv_cesa_dma_add_frag() calls

      Move the calls to mv_cesa_dma_add_frag() into the parent function,
      mv_cesa_ahash_dma_req_init().  This is in preparation to changing
      when we generate the operation blocks, as we need to avoid generating
      a block for a partial hash block at the end of the user data.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 2f396a91d1d01a423fd87b7c6ff71600d06b9c05
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:11 2015 +0100

      crypto: marvell/cesa - always ensure mid-fragments after first-fragment

      If we add a template first-fragment operation, always update the
      template to be a mid-fragment.  This ensures that mid-fragments
      always follow on from a first fragment in every case.

      This means we can move the first to mid-fragment update code out of
      mv_cesa_ahash_dma_add_data().

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 9621288673cb2a1805eadf29b92e5bcec6a0e2e5
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:06 2015 +0100

      crypto: marvell/cesa - factor out adding an operation and launching it

      Add a helper to add the fragment operation block followed by the DMA
      entry to launch the operation.

      Although at the moment this pattern only strictly appears at one site,
      two other sites can be factored as well by slightly changing the order
      in which the DMA operations are performed.  This should be harmless as
      the only thing which matters is to have all the data loaded into SRAM
      prior to launching the operation.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8651791e5403a0e0634b76dee91b102dc4f40385
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:01 2015 +0100

      crypto: marvell/cesa - factor out first fragment decisions to helper

      Multiple locations in the driver test the operation context fragment
      type, checking whether it is a first fragment or not.  Introduce a
      mv_cesa_mac_op_is_first_frag() helper, which returns true if the
      fragment operation is for a first fragment.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c439e4eec73373c6d5b7129ece69d67978ada307
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:56 2015 +0100

      crypto: marvell/cesa - const-ify argument to mv_cesa_get_op_cfg()

      mv_cesa_get_op_cfg() does not write to its argument, it only reads.
      So, let's make it const.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d30cb2fa34829161cfa1f847049b3fcfcfeebc93
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:51 2015 +0100

      crypto: marvell/cesa - ensure template operation is initialised

      Ensure that the template operation is fully initialised, otherwise we
      end up loading data from the kernel stack into the engines, which can
      upset the hash results.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 51954a968bbedcabf2b42fec2ec51386f0dee0c4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:46 2015 +0100

      crypto: marvell/cesa - fix the bit length endianness

      The endianness of the bit length used in the final stage depends on the
      endianness of the algorithm - md5 hashes need it to be in little endian
      format, whereas SHA hashes need it in big endian format.  Use the
      previously added algorithm endianness flag to control this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit a9eb678f8addc1bfb80bacc45f6df1108fd1c0d9
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:40 2015 +0100

      crypto: marvell/cesa - add flag to determine algorithm endianness

      Rather than determining whether we're using a MD5 hash by looking at
      the digest size, switch to a cleaner solution using a per-request flag
      initialised by the method type.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 4c2b130c8ae79af734e5e57f3662e25ef4d20e8d
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:35 2015 +0100

      crypto: marvell/cesa - keep creq->state in CPU endian format at all times

      Currently, we read/write the state in CPU endian, but on the final
      request, we convert its endian according to the requested algorithm.
      (md5 is little endian, SHA are big endian.)

      Always keep creq->state in CPU native endian format, and perform the
      necessary conversion when copying the hash to the result.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 80754539ec936b0afe8a3c406b7d67612977cc71
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:30 2015 +0100

      crypto: marvell/cesa - easier way to get the transform

      There's an easier way to get at the hash transform - rather than
      using crypto_ahash_tfm(ahash), we can get it directly from
      req->base.tfm.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 524e56c31a6fe21e6f6f543360359e7a97dfabfb
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 09:37:41 2015 +0800

      crypto: ahash - Add crypto_ahash_blocksize

      This patch adds the missing helper crypto_ahash_blocksize which
      returns the block size of an ahash algorithm.

      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 63349d02c195030f97c9c2000bbf32539056316f
  Author: Stephan Mueller <smueller@xxxxxxxxxx>
  Date:   Sun Oct 18 12:45:18 2015 +0200

      lib/mpi: fix off by one in mpi_read_raw_from_sgl

      The patch fixes the analysis of the input data which contains an off
      by one.

      The issue is visible when the SGL contains one byte per SG entry.
      The code for checking for zero bytes does not operate on the data byte.

      Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 4a4b0bad0653a0dce876987f7487b2c5e3ecb05f
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Fri Oct 16 11:40:56 2015 -0700

      crypto: qat - fix crypto_get_instance_node function

      qat_crypto_get_instance_node function needs to handle situation when the
      first dev in the list is not started.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f02b7d0c7b433b9a8175ac9027391272877a43ce
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Fri Oct 16 17:01:51 2015 +0100

      hwrng: exynos - Fix unbalanced PM runtime get/puts

      Currently this driver calls pm_runtime_get_sync() rampantly
      but never puts anything back. This makes it impossible for the
      device to autosuspend properly; it will remain fully active
      after the first use.

      Fix in the obvious way.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Cc: Kukjin Kim <kgene@xxxxxxxxxx>
      Cc: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Tested-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 839a42af9441982311f33241529f711f23c857c8
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Thu Oct 15 20:34:53 2015 +0200

      lib/mpi: clean unused SHA1_DIGEST_LENGTH

      The define SHA1_DIGEST_LENGTH is not used anywhere, so remove it.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 69af775a18ff1d07f527b2f6caec171af5e1397e
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 10:55:44 2015 +0200

      pinctrl: sh-pfc: Stop including <linux/platform_data/gpio-rcar.h>

      This header file will be removed soon.

      Copy the helper macro RCAR_GP_PIN(), which is used by the pinctrl
      drivers only, to sh_pfc.h, and drop the #include.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit f15f30449ab252fdc9405f99d46edacc225328cf
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 10:51:02 2015 +0200

      usb: renesas_usbhs: Remove unneeded #include 
<linux/platform_data/gpio-rcar.h>

      This header file will be removed soon.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Felipe Balbi <balbi@xxxxxx>

  commit b8b47d678a5f0b5826044242780a988f8af50b22
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Mon Sep 21 16:27:23 2015 +0200

      pinctrl: sh-pfc: Rename .gpio_data[] to .pinmux_data[]

      The sh_pfc_soc_info.gpio_data[] array contains not only GPIO data, but
      also various other pinmux-related data (functions and marks).
      Every single driver already calls its local array pinmux_data[].
      Hence rename the sh_pfc_soc_info member to "pinmux_data".

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>

  commit ae7465a0972aee889d79d94dbd1e65d3fab07414
  Author: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
  Date:   Mon Oct 5 16:55:54 2015 +0200

      pinctrl: sh-pfc: r8a7778: Add bias (pull-up) pinconf support

      On this SoC there is no simple mapping of GP pins to pull-up register
      bits, so we need a table.

      Signed-off-by: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 22768fc60abbf58b04601b27796268f0363ab185
  Author: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
  Date:   Mon Oct 5 16:55:53 2015 +0200

      pinctrl: sh-pfc: Add macros defining GP ports with config flags

      PORT_GP_CFG_1 and PORT_GP_CFG_32 work like their non-CFG counterparts
      but accept an extra argument with config flags.

      Signed-off-by: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 0f7711aa300355d46e2a532d9c5cd13ca67d1b02
  Author: Koji Matsuoka <koji.matsuoka.xm@xxxxxxxxxxx>
  Date:   Sat Oct 3 02:21:49 2015 +0300

      pinctrl: sh-pfc: r8a7794: Add VIN pin groups

      Add VIN0/1 pin groups to R8A7794 PFC driver.

      Sergei:  rebased, renamed, added changelog, gathered 12  VIN1 data pins 
into
      a single pin group, added "vin1_data10" pin group, used 'union vin_data' 
and
      VIN_DATA_PIN_GROUP() macro to describe VIN1 pins, reversed the order of  
the
      VIN1 pin groups, removed unneeded empty lines, fixed  VIN1 separator 
comment.

      Signed-off-by: Koji Matsuoka <koji.matsuoka.xm@xxxxxxxxxxx>
      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 423caa52534ff15a63a8f86f8ecb99cfa8e9cbca
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 02:21:15 2015 +0300

      pinctrl: sh-pfc: r8a779[01]: Move 'union vin_data' to shared header file

      R8A7790/1 PFC  drivers use almost identical  'union vin_data' and 
completely
      identical VIN_DATA_PIN_GROUP() macro; we thus can  move them into the 
shared
      header file...

      Suggested-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 3fc89adb9fa4beff31374a4bf50b3d099d88ae83
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 18:23:57 2015 +0800

      crypto: api - Only abort operations on fatal signal

      Currently a number of Crypto API operations may fail when a signal
      occurs.  This causes nasty problems as the caller of those operations
      are often not in a good position to restart the operation.

      In fact there is currently no need for those operations to be
      interrupted by user signals at all.  All we need is for them to
      be killable.

      This patch replaces the relevant calls of signal_pending with
      fatal_signal_pending, and wait_for_completion_interruptible with
      wait_for_completion_killable, respectively.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 56a3f30e029396948989b96716f27b87e3510e0f
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Tue Oct 20 14:59:20 2015 +0100

      arm64: Make 36-bit VA depend on EXPERT

      Commit 215399392fe4 (arm64: 36 bit VA) introduced 36-bit VA support for
      the arm64 kernel when the 16KB page configuration is enabled. While this
      is a valid hardware configuration, it's not something we want to
      encourage since it reduces the memory (and I/O) range that the kernel
      can access. Make this depend on EXPERT to avoid complaints of Linux not
      mapping the whole RAM, especially on platforms following the ARM
      recommended memory map.

      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit e1d040cfcf76c1c1b5d71fc08ab577a0cf72fefd
  Author: Yunlong Song <yunlong.song@xxxxxxxxxx>
  Date:   Thu Oct 15 16:51:56 2015 +0800

      perf build: Add fixdep to .gitignore

      Commit 7c422f5572667fef0db38d2046ecce69dcf0afc8 ("tools build: Build
      fixdep helper from perf and basic libs") dynamically creates fixdep
      during the perf building. Add it to .gitignore.

      Signed-off-by: Yunlong Song <yunlong.song@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: 7c422f557266 ("tools build: Build fixdep helper from perf and 
basic libs")
      Link: 
http://lkml.kernel.org/r/1444899116-8220-1-git-send-email-yunlong.song@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 26440c835f8b1a491e2704118ac55bf87334366c
  Merge: 371f1c7 1099f86
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 20 06:08:27 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Conflicts:
        drivers/net/usb/asix_common.c
        net/ipv4/inet_connection_sock.c
        net/switchdev/switchdev.c

      In the inet_connection_sock.c case the request socket hashing scheme
      is completely different in net-next.

      The other two conflicts were overlapping changes.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3bc2159faf897bab51e4f1144b525d21823832a6
  Merge: b2c280b cb0f253
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Oct 20 12:37:45 2015 +0200

      Merge branch 'clockevents/4.4' of 
http://git.linaro.org/people/daniel.lezcano/linux into timers/core

      clockevent updates from Daniel Lezcano:

       - Remove unneeded memset in em_sti, sh_cmt and h8300 because there are 
already
         zeroed by a kzalloc (Alexey Klimov)

       - Optimize code by replacing this_cpu_ptr by container_of on the 
exynos_mct (Alexey
         Klimov)

       - Get immune from a spurious interrupt when enabling the mtk_timer 
(Daniel Lezcano)

       - Use the dynamic irq affinity to optimize wakeup and useless IPI timer 
on the imx
         timer (Lucas Stach)

       - Add new timer for Tango SoCs (Marc Gonzalez)

       - Implement the timer delay for armada-370-xp (Russell King)

       - Use GPT as clock source (Yingjoe Chen)

  commit b2c280bdd6ea31be66c9b6a666e71daa49beef75
  Merge: c8d75aa 090e2ed
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Oct 20 12:30:53 2015 +0200

      Merge branch 'fortglx/4.4/time' of 
https://git.linaro.org/people/john.stultz/linux into timers/core

      Time updates from John Stultz:

           - More 2038 work from Arnd Bergmann around ntp and pps

  commit f7d27c35ddff7c100d7a98db499ac0040149ac05
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:37:18 2015 +0300

      x86/mm, kasan: Silence KASAN warnings in get_wchan()

      get_wchan() is racy by design, it may access volatile stack
      of running task, thus it may access redzone in a stack frame
      and cause KASAN to warn about this.

      Use READ_ONCE_NOCHECK() to silence these warnings.

      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445243838-17763-3-git-send-email-aryabinin@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d976441f44bc5d48635d081d277aa76556ffbf8b
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:37:17 2015 +0300

      compiler, atomics, kasan: Provide READ_ONCE_NOCHECK()

      Some code may perform racy by design memory reads. This could be
      harmless, yet such code may produce KASAN warnings.

      To hide such accesses from KASAN this patch introduces
      READ_ONCE_NOCHECK() macro. KASAN will not check the memory
      accessed by READ_ONCE_NOCHECK(). The KernelThreadSanitizer
      (KTSAN) is going to ignore it as well.

      This patch creates __read_once_size_nocheck() a clone of
      __read_once_size(). The only difference between them is
      'no_sanitized_address' attribute appended to '*_nocheck'
      function. This attribute tells the compiler that instrumentation
      of memory accesses should not be applied to that function. We
      declare it as static '__maybe_unsed' because GCC is not capable
      to inline such function:
      https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67368

      With KASAN=n READ_ONCE_NOCHECK() is just a clone of READ_ONCE().

      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445243838-17763-2-git-send-email-aryabinin@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 43e41adc9e8c36545888d78fed2ef8d102a938dc
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:09:11 2015 +0200

      perf record: Add ability to sample call branches

      This patch add a new branch type sampling filter to perf record.
      It is named 'call' and maps to PERF_SAMPLE_BRANCH_CALL. It samples
      direct call branches only, unlike 'any_call' which includes indirect
      calls as well.

       $ perf record -j call -e cycles .....

      The man page is updated accordingly.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: khandual@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444720151-10275-5-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 24f1a79a5fc10858e05ee0bf651ec99abfc0319b
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:09:10 2015 +0200

      perf/powerpc: Add support for PERF_SAMPLE_BRANCH_CALL

      The patch catches PERF_SAMPLE_BRANCH_CALL because it is not clear whether
      this is actually supported by the hardware.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: khandual@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444720151-10275-4-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d892819faa6860d469aae71d70c336b391c25505
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:09:09 2015 +0200

      perf/x86: Add support for PERF_SAMPLE_BRANCH_CALL

      This patch enables the suport for the PERF_SAMPLE_BRANCH_CALL
      for Intel x86 processors. When the processor support LBR filtering
      this the selection is done in hardware. Otherwise, the filter is
      applied by software. Note that we chose to include zero length calls
      because they also represent calls.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: khandual@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444720151-10275-3-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c229bf9dc179d2023e185c0f705bdf68484c1e73
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:09:08 2015 +0200

      perf: Add PERF_SAMPLE_BRANCH_CALL

      Add a new branch sample type to cover only call branches (function calls).
      The current ANY_CALL included direct, indirect calls and far jumps.

      We want to be able to differentiate indirect from direct calls. Therefore
      we introduce PERF_SAMPLE_BRANCH_CALL. The implementation is up to each
      architecture.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: khandual@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444720151-10275-2-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b9511cd761faafca7a1acc059e792c1399f9d7c6
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Oct 16 16:24:05 2015 +0300

      perf/x86: Fix time_shift in perf_event_mmap_page

      Commit:

        b20112edeadf ("perf/x86: Improve accuracy of perf/sched clock")

      allowed the time_shift value in perf_event_mmap_page to be as much
      as 32.  Unfortunately the documented algorithms for using time_shift
      have it shifting an integer, whereas to work correctly with the value
      32, the type must be u64.

      In the case of perf tools, Intel PT decodes correctly but the timestamps
      that are output (for example by perf script) have lost 32-bits of
      granularity so they look like they are not changing at all.

      Fix by limiting the shift to 31 and adjusting the multiplier accordingly.

      Also update the documentation of perf_event_mmap_page so that new code
      based on it will be more future-proof.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Fixes: b20112edeadf ("perf/x86: Improve accuracy of perf/sched clock")
      Link: 
http://lkml.kernel.org/r/1445001845-13688-2-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e73e85f0593832aa583b252f9a16cf90ed6d30fa
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Sat Oct 10 20:53:15 2015 +0200

      sched: Don't scan all-offline ->cpus_allowed twice if !CONFIG_CPUSETS

      If CONFIG_CPUSETS=n then "case cpuset" changes the state and runs
      the already failed for_each_cpu() loop again for no reason.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151010185315.GA24100@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 62694cd51322262a9142e946915fc4783113ccff
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 18:36:29 2015 +0200

      sched: Move cpu_active() tests from stop_two_cpus() into 
migrate_swap_stop()

      The cpu_active() tests are not fundamentally part of stop_two_cpus(),
      move then into the scheduler where they belong.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 07f06cb3b5f6bd21374a48dbefdb431d71d53974
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 18:00:54 2015 +0200

      sched: Start stopper early

      Ensure the stopper thread is active 'early', because the load balancer
      pretty much assumes that its available. And when 'online && active' the
      load-balancer is fully available.

      Not only the numa balancing stop_two_cpus() caller relies on it, but
      also the self migration stuff does, and at CPU_ONLINE time the cpu
      really is 'free' to run anything.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151009160054.GA10176@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f0cf16cbd0659d2dd21352da9f06f3fab7a51596
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Oct 9 18:00:51 2015 +0200

      stop_machine: Kill cpu_stop_threads->setup() and cpu_stop_unpark()

      Now that we always use stop_machine_unpark() to wake the stopper
      threas up, we can kill ->setup() and fold cpu_stop_unpark() into
      stop_machine_unpark().

      And we do not need stopper->lock to set stopper->enabled = true.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151009160051.GA10169@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c00166d87e730088d919814020e96ffed129d0d1
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Oct 9 18:00:49 2015 +0200

      stop_machine: Kill smp_hotplug_thread->pre_unpark, introduce 
stop_machine_unpark()

      1. Change smpboot_unpark_thread() to check ->selfparking, just
         like smpboot_park_thread() does.

      2. Introduce stop_machine_unpark() which sets ->enabled and calls
         kthread_unpark().

      3. Change smpboot_thread_call() and cpu_stop_init() to call
         stop_machine_unpark() by hand.

      This way:

          - IMO the ->selfparking logic becomes more consistent.

          - We can kill the smp_hotplug_thread->pre_unpark() method.

          - We can easily unpark the stopper thread earlier. Say, we
            can move stop_machine_unpark() from smpboot_thread_call()
            to sched_cpu_active() as Peter suggests.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151009160049.GA10166@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d8bc853582bfd81a9c08ca6922aeb01570080ccc
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Oct 8 19:01:41 2015 +0200

      stop_machine: Change cpu_stop_queue_two_works() to rely on 
stopper->enabled

      Change cpu_stop_queue_two_works() to ensure that both CPU's have
      stopper->enabled == T or fail otherwise.

      This way stop_two_cpus() no longer needs to check cpu_active() to
      avoid the deadlock. This patch doesn't remove these checks, we will
      do this later.

      Note: we need to take both stopper->lock's at the same time, but this
      will also help to remove lglock from stop_machine.c, so I hope this
      is fine.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151008170141.GA25537@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5caa1c089aebcb83ccd5b79a3b88b0aa58288d05
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Oct 8 16:51:34 2015 +0200

      stop_machine: Introduce __cpu_stop_queue_work() and 
cpu_stop_queue_two_works()

      Preparation to simplify the review of the next change. Add two simple
      helpers, __cpu_stop_queue_work() and cpu_stop_queue_two_works() which
      simply take a bit of code from their callers.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151008145134.GA18146@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 233e7f267e580fefdeb36628b7efe8bfe056d27c
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Oct 8 16:51:31 2015 +0200

      stop_machine: Ensure that a queued callback will be called before 
cpu_stop_park()

      cpu_stop_queue_work() checks stopper->enabled before it queues the
      work, but ->enabled == T can only guarantee cpu_stop_signal_done()
      if we race with cpu_down().

      This is not enough for stop_two_cpus() or stop_machine(), they will
      deadlock if multi_cpu_stop() won't be called by one of the target
      CPU's. stop_machine/stop_cpus are fine, they rely on stop_cpus_mutex.
      But stop_two_cpus() has to check cpu_active() to avoid the same race
      with hotplug, and this check is very unobvious and probably not even
      correct if we race with cpu_up().

      Change cpu_down() pass to clear ->enabled before cpu_stopper_thread()
      flushes the pending ->works and returns with KTHREAD_SHOULD_PARK set.

      Note also that smpboot_thread_call() calls cpu_stop_unpark() which
      sets enabled == T at CPU_ONLINE stage, so this CPU can't go away until
      cpu_stopper_thread() is called at least once. This all means that if
      cpu_stop_queue_work() succeeds, we know that work->fn() will be called.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151008145131.GA18139@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6af597de62a365dfec6021b9796aa302044e7cc3
  Merge: 558a65b 5aa5050
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 20 10:18:16 2015 +0200

      Merge branch 'sched/urgent' into sched/core, to pick up fixes and resolve 
conflicts

      Conflicts:
        kernel/sched/fair.c

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 677b2ff4afd9996eabefc9472c701211b4b49e87
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 2 14:26:05 2015 -0700

      gpio: add a real time compliance checklist

      Add some information about real time compliance to the driver document.
      Inspired by Grygorii Strashko's real time compliance patches.

      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 6e490b0106a2118ee4c37c37847454a5c2dc6e32
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Oct 7 15:10:38 2015 +0100

      ARM, locking/atomics: Implement _relaxed variants of atomic[64]_{inc,dec}

      Now that the core code supports acquire/release/relaxed versions of
      the atomic_inc family, implement only the _relaxed flavours in the ARM
      backend so that we get all of the others for free.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444227038-12533-1-git-send-email-will.deacon@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a1a2ab2ff7040bdc9a31bfe7173913971f7d723b
  Merge: 00eb4ba 7379047
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 20 10:16:46 2015 +0200

      Merge tag 'v4.3-rc6' into locking/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5aa5050787f449e7eaef2c5ec93c7b357aa7dcdc
  Author: Luca Abeni <luca.abeni@xxxxxxxx>
  Date:   Fri Oct 16 10:06:21 2015 +0200

      sched/deadline: Fix migration of SCHED_DEADLINE tasks

      Commit:

        9d5142624256 ("sched/deadline: Reduce rq lock contention by eliminating 
locking of non-feasible target")

      broke select_task_rq_dl() and find_lock_later_rq(), because it introduced
      a comparison between the local task's deadline and dl.earliest_dl.curr of
      the remote queue.

      However, if the remote runqueue does not contain any SCHED_DEADLINE
      task its earliest_dl.curr is 0 (always smaller than the deadline of
      the local task) and the remote runqueue is not selected for pushing.

      As a result, if an application creates multiple SCHED_DEADLINE
      threads, they will never be pushed to runqueues that do not already
      contain SCHED_DEADLINE tasks.

      This patch fixes the issue by checking if dl.dl_nr_running == 0.

      Signed-off-by: Luca Abeni <luca.abeni@xxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Juri Lelli <juri.lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Wanpeng Li <wanpeng.li@xxxxxxxxxxxxxxx>
      Fixes: 9d5142624256 ("sched/deadline: Reduce rq lock contention by 
eliminating locking of non-feasible target")
      Link: 
http://lkml.kernel.org/r/1444982781-15608-1-git-send-email-luca.abeni@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0baabb385eb4bce699ddab0db015112be6cf1e6a
  Author: Frederic Weisbecker <fweisbec@xxxxxxxxx>
  Date:   Mon Oct 12 17:21:23 2015 +0200

      nohz: Revert "nohz: Set isolcpus when nohz_full is set"

      This reverts:

        8cb9764fc88b ("nohz: Set isolcpus when nohz_full is set")

      We assumed that full-nohz users always want scheduler isolation on full
      dynticks CPUs, therefore we included full-nohz CPUs on cpu_isolated_map.

      This means that tasks run by default on CPUs outside the nohz_full range
      unless their affinity is explicity overwritten.

      This suits pure isolation workloads but when the machine is needed to
      run common workloads, the available sets of CPUs to run common tasks
      becomes reduced.

      We reach an extreme case when CONFIG_NO_HZ_FULL_ALL is enabled as it
      leaves only CPU 0 for non-isolation tasks, which makes people think that
      their supercomputer regressed to 90's UP - which is true in a sense.

      Some full-nohz users appear to be interested in running normal workloads
      either before or after an isolation workload. Full-nohz isn't optimized
      toward normal workloads but it's still better than UP performance.

      We are reaching a limitation in kernel presets here. Lets revert this
      cpu_isolated_map inclusion and let userspace do its own scheduler
      isolation using cpusets or explicit affinity settings.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Reported-by: Mike Galbraith <umgwanakikbuti@xxxxxxxxx>
      Signed-off-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Alexey Dobriyan <adobriyan@xxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Chris Metcalf <cmetcalf@xxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Paul E . McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444663283-30068-1-git-send-email-fweisbec@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3e386d56bafbb6d2540b49367444997fc671ea69
  Author: Yuyang Du <yuyang.du@xxxxxxxxx>
  Date:   Tue Oct 13 09:18:23 2015 +0800

      sched/fair: Update task group's load_avg after task migration

      When cfs_rq has cfs_rq->removed_load_avg set (when a task migrates from
      this cfs_rq), we need to update its contribution to the group's load_avg.

      This should not increase tg's update too much, because in most cases, the
      cfs_rq has already decayed its load_avg.

      Tested-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Yuyang Du <yuyang.du@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444699103-20272-2-git-send-email-yuyang.du@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fde7d22e01aa0d252fc5c95fa11f0dac35a4dd59
  Author: Yuyang Du <yuyang.du@xxxxxxxxx>
  Date:   Tue Oct 13 09:18:22 2015 +0800

      sched/fair: Fix overly small weight for interactive group entities

      Commit:

        9d89c257dfb9 ("sched/fair: Rewrite runnable load and utilization 
average tracking")

      led to an overly small weight for interactive group entities. The bad case
      can be easily reproduced when a number of CPU hogs compete for the CPUs
      at the same time (thanks to Mike). This is largly because the task group's
      load average tracking cross CPUs lags behind the real changes.

      To fix this we accelerate the group share distribution process by using
      the load.weight of the cfs_rq. This may increase the entire group's
      share, but we have to do so to protect the (fragile) interactive
      tasks, especially from CPU hogs.

      Reported-by: Mike Galbraith <umgwanakikbuti@xxxxxxxxx>
      Tested-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Tested-by: Mike Galbraith <umgwanakikbuti@xxxxxxxxx>
      Signed-off-by: Yuyang Du <yuyang.du@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444699103-20272-1-git-send-email-yuyang.du@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 40d4f23f42b0e6997db5bbfba9dc6bf349e8ad81
  Merge: e9363de a4c6a3e
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 20 09:31:22 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes:

      User visible changes:

        - 'perf bench mem' now prefaults unconditionally, no sense in
          providing modes where page faults are measured. (Ingo Molnar)

        - Harmonize -l/--nr_loops accross 'perf bench'. (Ingo Molnar)

        - Various 'perf bench' consistency improvements. (Ingo Molnar)

        - Suppress libtraceevent warnings in non-verbose 'perf test' mode.
          (Namhyung Kim)

        - Move some tracepoint event test error messages to the verbose mode
          of 'perf test'. (Namhyung Kim)

        - Make 'perf help' usage message consistent with other tools. (Yunlong 
Song)

      Build fixes:

        - Fix 'perf bench' build with gcc 4.4.7. (Arnaldo Carvalho de Melo)

      Infrastructure changes:

        - 'perf stat' prep work for the 'perf stat scripting' patchkit. (Jiri 
Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit be0e1987bcb476be4fdd3dce89b6b6bf73a308a7
  Merge: ce1fad2 56b88a3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 16:20:53 2015 +0900

      Merge branch 'for-linus-4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rw/uml

      Pull UML fixes from Richard Weinberger:
       "This contains four overdue UML regression fixes"

      * 'for-linus-4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rw/uml:
        um: Fix kernel mode fault condition
        um: Fix waitpid() usage in helper code
        um: Do not rely on libc to provide modify_ldt()
        um: Fix out-of-tree build

  commit ce1fad2740c648a4340f6f6c391a8a83769d2e8c
  Merge: 1099f86 911b79c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 16:09:36 2015 +0900

      Merge branch 'keys-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs

      Pull key handling fixes from David Howells:
       "Here are two patches, the first of which at least should go upstream
        immediately:

        (1) Prevent a user-triggerable crash in the keyrings destructor when a
            negatively instantiated keyring is garbage collected.  I have also
            seen this triggered for user type keys.

        (2) Prevent the user from using requesting that a keyring be created
            and instantiated through an upcall.  Doing so is probably safe
            since the keyring type ignores the arguments to its instantiation
            function - but we probably shouldn't let keyrings be created in
            this manner"

      * 'keys-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs:
        KEYS: Don't permit request_key() to construct a new keyring
        KEYS: Fix crash when attempt to garbage collect an uninstantiated 
keyring

  commit a1f192cf70b187ab01b8b03cdeea82b8820c927a
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:17:00 2015 -0400

      i40e/i40evf: Bump i40e to 1.3.38 and i40evf to 1.3.25

      Bump.

      Change-ID: Id0a7ecaa491f88ce94c9eba4901e592a56044ee0
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6f66a484f1ff644b4600368fe3091e31b65d3c50
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Sat Sep 19 05:08:45 2015 -0600

      i40e: declare rather than initialize int object

      'err' would be overwritten immediately, so we should declare it only
      rather than initialize it to zero.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2bc11c634eaebb936345b136a196f555045a47ea
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Sat Sep 19 05:08:43 2015 -0600

      i40e: fix kernel-doc argument name

      The second argument name in the kernel-doc argument list for
      i40e_features_check() was slightly off. Fix it for the kernel doc.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 52e9689e4ef070eff1e0f9e6e84a8451b86813b5
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:59 2015 -0400

      i40e: Move error message to debug level

      There is an error coming back from get_phy_capabilities that does not
      seem to have any functional implications. We will continue looking into
      why this error message is occurring, but in the meantime, we will move it
      to debug to avoid confusion.

      Change-ID: I9091754bf62c066ddedeb249923d85606e2d68ed
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3ce12ee9d8f9ae245f38e6acbd32625d8e002c5b
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:58 2015 -0400

      i40e: Fix order of checks when enabling/disabling autoneg in ethtool

      We were previously checking if autoneg was allowed to change before
      checking if autoneg was changing. We need to do this in the other order
      or else we will erroneously return EINVAL when autoneg is not changing.

      Change-ID: Iff9f7d1c9bddc1ad1e5d227d4f42754f90155410
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a03dc368547a7a4e9fcedc6f64dd64a9ff5e0593
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:57 2015 -0400

      i40e/i40evf: Fix an accidental error with BIT_ULL replacement

      A mask value of 0x1FF was accidentally replaced with a bit mask
      causing flow director sideband to be broken.

      Change-ID: Id3387f67dd1b567b41692b570b383c58671e1eae
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8589af70d0879a68c93ef77505a6234d22b1b1a7
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:56 2015 -0400

      i40e: fix for PHY NVM interaction problem

      This patch fixes a problem where the NVMUpdate Tool, when using the PHY
      NVM feature, gets bad data from the PHY because of contention on the
      MDIO interface from get PHY capability calls from the driver during
      regular operations.  The problem is fixed by adding a check if media
      is available before calling get PHY capability function because that
      bit is not set when device is in PHY interaction mode.

      Change-ID: Ib89991b0f841808dd92410f5e8683d6ee3301cd0
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bcab2db97d2423b97b248ba35eb2277168e71fcc
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:55 2015 -0400

      i40e: Fix for Tools loopback test failing after driver load

      This patch fixes a problem where our Tools MAC Loopback test, after
      driver unbind would fail.  This was because the hw was configured
      for multiqueue and unbind operation did not clear this configuration.
      The problem is fixed by resetting this configuration in i40e_remove.

      Change-ID: I130c05138319182ed1476d3a0b5222d6a6320af9
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ee2319cf17ee64bbd0096f2f8f3f8390c93b1e39
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:54 2015 -0400

      i40e/i40evf: adjust interrupt throttle less frequently

      The adaptive ITR (interrupt throttle rate) algorithm was adjusting
      the hardware's interrupt rate too frequently.  This caused a lot
      of variation in the interrupt rate for fairly constant workloads.

      Change the code to have a counter and adjust only once every N
      number of interrupts.

      Change-ID: I0460f1f86571037484eca5aca36ac4d889cb8389
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c56625d59726ee2dc4dfd91c8b6c22098abe1ac4
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:53 2015 -0400

      i40e/i40evf: change dynamic interrupt thresholds

      The dynamic algorithm, while now working, doesn't have good
      performance in 40G mode.

      One part of this patch addresses the high CPU utilization of some small
      streaming workloads that the driver should reduce CPU in.

      It also changes the minimum ITR that the dynamic algorithm
      will settle on, causing our minimum latency to go from 12us
      to about 14us, when using adaptive mode.

      It also changes the BULK interrupt rate to allow maximum throughput
      on a 40Gb connection with a single thread of transmit, clamping
      interrupt rate to 8000 for TX makes single thread traffic go too
      slow.

      The new ULTRA bulk setting is introduced and is used
      when the Rx packet rate on this queue exceeds 40000 packets per
      second.  This value of 40000 was chosen because the automatic tuning
      of minimum ITR=20us means that a single queue can't quite achieve
      that many packets per second from a round-robin test.

      Change-ID: Icce8faa128688ca5fd2c4229bdd9726877a92ea2
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 51cc6d9fccde27310b7dfba2be268ff5b8dcf52d
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:52 2015 -0400

      i40e/i40evf: fix bug in throttle rate math

      The driver was using a value expressed in 2us increments
      for the divisor to figure out our bytes/usec values.

      Fix the usecs variable to contain a value in microseconds.

      Change-ID: I5c20493103c295d6f201947bb908add7040b7c41
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8f5e39ce9214888464d34ef7949e56bdc999b46c
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:51 2015 -0400

      i40e/i40evf: refactor IRQ enable function

      This change moves a multi-line register setting into a function
      which simplifies reading the flow of the enable function.

      This also fixes a bug where the enable function was enabling
      the interrupt twice while trying to update the two interrupt
      throttle rate thresholds for Rx and Tx.

      Change-ID: Ie308f9d0d48540204590cb9d7a5a7b1196f959bb
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit b9029e941dd66d2bc2ab529807a1eef4444f62f0
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:50 2015 -0400

      i40evf: don't give up

      When the VF driver is unable to communicate with the PF, it just gives
      up and never tries again. Aside from the obvious character flaw that
      this shows, it's also a lousy user experience.

      When PF communications fail, wait five seconds, and try again. And
      again. Don't give up, little VF driver! Your prince will come!

      Change-ID: Ia1378a39879883563b8faffce819f375821f9585
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5d3465a1e4c01be455ef00834ec365e578942d67
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Tue Sep 29 15:19:50 2015 -0700

      i40e/i40evf: use napi_schedule_irqoff()

      The i40e_intr and i40e/i40evf_msix_clean_rings functions run from hard
      interrupt context or with interrupts already disabled in netpoll.

      They can use napi_schedule_irqoff() instead of napi_schedule()

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 07f89be81fa51ec85456559d7db9bc71379a20c1
  Author: Anjali Singhai <anjali.singhai@xxxxxxxxx>
  Date:   Thu Sep 24 15:26:32 2015 -0700

      i40e: Fix basic support for X722 devices

      Acquire NVM, before issuing an AQ read nvm command for X722.
      We need to acquire the NVM before issuing an AQ read to the NVM
      otherwise we will get EBUSY from the FW. Also release when done.

      This fixes the two X722 issues with respect to eeprom checksum verify
      and reading NVM version info.

      With this patch in place, i40e driver will provide basic support
      for X722 devices.

      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d08f55585f22c38db5fcbed509a71d925e0509c1
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Wed Sep 16 19:01:08 2015 -0700

      i40evf: fix overlong BIT defines

      The defines from the RSS enabling call were mistakenly
      missed in the patches to the i40e which should have been
      to i40evf as well.

      This is a follow up to (commit ed921559886dd40528) "fix
      32 bit build warnings".

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 216590355cb0e79fa36c7220176ce850f0e3d276
  Author: Kiran Patil <kiran.patil@xxxxxxxxx>
  Date:   Wed Sep 30 14:09:03 2015 -0400

      i40e: Lock for VSI's MAC filter list

      This patch introduces a spinlock which is to be used for synchronizing
      access to VSI's MAC filter list.

      This patch also synchronizes execution of other codepaths which are
      accessing VSI's MAC filter list with execution of
      service_task:sync_vsi_filters.

      In function i40e_add_vsi, copied out LAA MAC address instead of cloning
      MAC filter entry because only MAC address is needed to remove MAC VLAN
      filter from FW/HW.

      Change-ID: I0e10ac7c715d44aa994239642aa4d57c998573a2
      Signed-off-by: Kiran Patil <kiran.patil@xxxxxxxxx>
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a4c6a3e8bbb675a601f529881c51ff226f83c3f1
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Oct 19 18:17:25 2015 -0300

      perf bench: Use named initializers in the trailer too

      To avoid this splat with gcc 4.4.7:

        cc1: warnings being treated as errors
        bench/mem-functions.c:273: error: missing initializer
        bench/mem-functions.c:273: error: (near initialization for 
â??memcpy_functions[4].descâ??)
        bench/mem-functions.c:366: error: missing initializer
        bench/mem-functions.c:366: error: (near initialization for 
â??memset_functions[4].descâ??)

      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-0s8o6tgw1pdwvdv02llb9tkd@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d2b5a315ae84d235f00761468885c466f81d7805
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:25 2015 +0200

      perf script: Check output fields only for samples

      There's no need to check sampling output fields for events without
      perf_event_attr::sample_type field set.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-51-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1fe7a30028eeccd92e6fccfbeb8c5c3811b11b64
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:15 2015 +0200

      perf cpu_map: Add data arg to cpu_map__build_map callback

      Adding data arg to cpu_map__build_map callback, so we could pass data
      along to the callback. It'll be needed in following patches to retrieve
      topology info from perf.data.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-41-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f1cbb8f35719e36803f226d1bbf08ac12cedcd76
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:14 2015 +0200

      perf cpu_map: Make cpu_map__build_map global

      We'll need to call it from perf stat in the stat_script patchkit

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-40-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 208df99ed07ca5e86ee41617e0384930fc9ca819
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:04 2015 +0200

      perf stat: Add AGGR_UNSET mode

      Adding AGGR_UNSET mode, so we could distinguish unset aggr_mode in
      following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-30-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 581cc8a2a2a00afc864840720186b0f6a38079d9
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:03 2015 +0200

      perf stat: Rename perf_stat struct into perf_stat_evsel

      It's used as the perf_evsel::priv data, so the name suits better. Also
      we'll need the perf_stat name free for more generic struct.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-29-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 56b88a3bf97a39d3f4f010509917b76a865a6dc8
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Sun Aug 9 22:26:33 2015 +0200

      um: Fix kernel mode fault condition

      We have to exclude memory locations <= PAGE_SIZE from
      the condition and let the kernel mode fault path catch it.
      Otherwise a kernel NULL pointer exception will be reported
      as a kernel user space access.

      Fixes: d2313084e2c (um: Catch unprotected user memory access)
      Signed-off-by: Richard Weinberger <richard@xxxxxx>

  commit 6b1873371cea13036171d03a7c1e3e59158b4505
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Sun Aug 9 21:49:07 2015 +0200

      um: Fix waitpid() usage in helper code

      If UML is executing a helper program it is using
      waitpid() with the __WCLONE flag to wait for the program
      as the helper is executed from a clone()'ed thread.
      While using __WCLONE is perfectly fine for clone()'ed
      childs it won't detect terminated childs if the helper
      has issued an execve().

      We have to use __WALL to wait for both clone()'ed and
      regular childs to detect the termination before and
      after an execve().

      Reported-and-tested-by: Thomas Meyer <thomas@xxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>

  commit 37e81a016cc847c03ea71570fea29f12ca390bee
  Author: Hans-Werner Hilse <hwhilse@xxxxxxxxx>
  Date:   Mon Jun 29 11:50:32 2015 +0200

      um: Do not rely on libc to provide modify_ldt()

      modify_ldt() was declared as an external symbol. Despite the man
      page for this syscall telling that there is no wrapper in glibc,
      since version 2.1 there actually is, so linking to the glibc
      works.

      Since modify_ldt() is not a POSIX interface, other libc
      implementations do not always provide a wrapper function.
      Even glibc headers do not provide a corresponding declaration.

      So go the recommended way to call this using syscall().

      Signed-off-by: Hans-Werner Hilse <hwhilse@xxxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>

  commit 0b5aedfe0e6654ec54f35109e1929a1cf7fc4cdd
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Sun Jun 28 22:55:26 2015 +0200

      um: Fix out-of-tree build

      Commit 30b11ee9a (um: Remove copy&paste code from init.h)
      uncovered an issue wrt. out-of-tree builds.
      For out-of-tree builds, we must not rely on relative paths.
      Before 30b11ee9a it worked by chance as no host code included
      generated header files.

      Acked-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>

  commit cb0f2538039c65f2bb64a9d427dbe9dd7d0f71a6
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 16:19:20 2015 +0100

      clocksource/drivers/armada-370-xp: Implement ARM delay timer

      Implement an ARM delay timer to be used for udelay() on Armada 37x
      platforms.  This allows us to skip the delay loop calibration at boot,
      saving 180ms on the boot time of the kernel (which is around 10%).

      It also means that udelay() will be unaffected by CPU frequency changes
      when cpufreq is enabled on these platforms.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Tested-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>

  commit 677c884ff6370add1360e2b9558285355ebe2b36
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 19 15:54:21 2015 -0400

      drm/amdgpu: add missing dpm check for KV dpm late init

      Skip dpm late init if dpm is disabled.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 27100735adbcb872854674bed1d000825f9954ac
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 19 15:49:11 2015 -0400

      drm/amdgpu/dpm: don't add pwm attributes if DPM is disabled

      PWM fan control is only available with DPM.  There is no non-DPM
      support on amdgpu, so we should never get a crash here because
      the sysfs nodes would never be created in the first place. Add the
      check just in case to be on the safe side.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 3a134ae96ca0af06804d343019b85026486e6fe1
  Author: Yunlong Song <yunlong.song@xxxxxxxxxx>
  Date:   Thu Oct 15 15:39:51 2015 +0800

      perf help: Change 'usage' to 'Usage' for consistency

      Capitalize 'usage' to make it consistent with all the other 'Usage' in
      the codes, e.g., usage_builtin.

      Signed-off-by: Yunlong Song <yunlong.song@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Ramkumar Ramachandra <artagnon@xxxxxxxxx>
      Cc: Sriram Raghunathan <sriram.r@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444894792-2338-3-git-send-email-yunlong.song@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2a7d44f47f53fa1be677f44c73d78b1bcf9c05d9
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 19 09:30:42 2015 -0400

      drm/radeon/dpm: don't add pwm attributes if DPM is disabled

      PWM fan control is only available with DPM.  If DPM disabled,
      don't expose the PWM fan controls to avoid a crash.

      Bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=92524

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit aa254af25c40d6d1cdc3f354db29eaf3e85a5ede
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:30 2015 +0200

      perf bench: Run benchmarks, don't test them

      So right now we output this text:

              memcpy: Benchmark for memcpy() functions
              memset: Benchmark for memset() functions
                 all: Test all memory access benchmarks

      But the right verb to use with benchmarks is to 'run' them, not 'test'
      them.

      So change this (and all similar texts) to:

              memcpy: Benchmark for memcpy() functions
              memset: Benchmark for memset() functions
                 all: Run all memory access benchmarks

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-15-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2f211c84ad40469c15226e899b720624fbd28e20
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:29 2015 +0200

      perf bench mem: Rename 'routine' to 'function'

      So right now there's a somewhat inconsistent mess of the benchmarking
      code and options sometimes calling benchmarked functions 'functions',
      sometimes calling them 'routines'.

      Name them 'functions' consistently.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-14-git-send-email-mingo@xxxxxxxxxx
      [ Updated perf-bench man page, pointed out by David Ahern ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b0d22e52e3d2c2b151dfaa0f6e01bafa5475344f
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:28 2015 +0200

      perf bench: Harmonize all the -l/--nr_loops options

      We have three benchmarking subsystems that specify some sort of 'number
      of loops' parameter - but all of them do it inconsistently:

       numa:              -l/--nr_loops
       sched messaging:   -l/--loops
       mem memset/memcpy: -i/--iterations

      Harmonize them to -l/--nr_loops by picking the numa variant - which is
      also the most likely one to have existing scripting which we don't want
      to break.

      Plus improve the parameter help texts to indicate the default value for
      the nr_loops variable to keep users from guessing ...

      Also propagate the naming to internal variables.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-13-git-send-email-mingo@xxxxxxxxxx
      [ Let the harmonisation reach the perf-bench man page as well ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5dd93304a5d386c73c0a59117752acdca67f857d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:27 2015 +0200

      perf bench mem: Reorganize the code a bit

      Reorder functions a bit, so that we synchronize the layout of the
      memcpy() and memset() portions of the code.

      This improves the code, especially after we'll add an strlcpy() variant
      as well.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-12-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 13b1fdce8d46027f346c0533a4323b58e2b5bad8
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:26 2015 +0200

      perf bench mem: Improve user visible strings

       - fix various typos in user visible output strings
       - make the output consistent (wrt. capitalization and spelling)
       - offer the list of routines to benchmark on '-r help'.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-11-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a69b4f741340a52d0976636a45c9976a883f03a0
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:25 2015 +0200

      perf bench mem: Fix 'length' vs. 'size' naming confusion

      So 'perf bench mem memcpy/memset' consistently uses 'len' and 'length'
      for buffer sizes - while it's really a memory buffer size. (strings have
      length.)

      Rename all affected variables.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-10-git-send-email-mingo@xxxxxxxxxx
      [ Update perf-bench man page ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e815e327604af880bdcf38cdd711dfa78627ab2a
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:24 2015 +0200

      perf bench mem: Rename 'routine' to 'routine_str'

      So bench/mem-functions.c has a 'routine' name for the routines parameter
      string, but a 'length_str' name for the length parameter string.

      We also have another entity named 'routine': 'struct routine'.

      This is inconsistent and confusing: rename 'routine' to 'routine_str'.

      Also fix typos in the --routine help text.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-9-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b14f2d357675bd7fb4e5a705ac7320a9638ecab5
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:23 2015 +0200

      perf bench mem: Change 'cycle' to 'cycles'

      So 'perf bench mem memset/memcpy' has a CPU cycles measurement method,
      but calls it 'cycle' (singular) throughout the code, which makes it
      harder to read.

      Rename all related functions, variables and options to a plural 'cycles'
      nomenclature.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-8-git-send-email-mingo@xxxxxxxxxx
      [ s/--cycle/--cycles/g in perf-bench man page ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7a46a8fd13bd60584687f417cd35935965f29ae2
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:22 2015 +0200

      perf bench: List output formatting options on 'perf bench -h'

      So 'perf bench -h' is not very helpful when printing the help line
      about the output formatting options:

          -f, --format <default>
                                    Specify format style

      There are two output format styles, 'default' and 'simple', so improve
      the help text to:

          -f, --format <default|simple>
                                    Specify the output formatting style

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-7-git-send-email-mingo@xxxxxxxxxx
      [ Removed leftovers from the mem-functions.c rename ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 6db175c7333e22ee818373cbea067e3eaa0236f7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:21 2015 +0200

      perf bench: Remove the prefaulting complication from 'perf bench mem mem*'

      So 'perf bench mem memcpy/memset' has elaborate code to measure
      memcpy()/memset() performance both with freshly allocated buffers (which
      includes initial page fault overhead) and with preallocated buffers.

      But the thing is, the resulting bandwidth results are mostly
      meaningless, because page faults dominate so much of the cost.

      It might make sense to measure cache cold vs. cache hot performance, but
      the code does not do this.

      So remove this complication, and always prefault the ranges before using
      them.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-6-git-send-email-mingo@xxxxxxxxxx
      [ Remove --no-prefault, --only-prefault from docs, noticed by David Ahern 
]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9b2fa7f3e7799a335fd839906ab4d45b7d595dc4
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:20 2015 +0200

      perf bench: Rename 'mem-memcpy.c' => 'mem-functions.c'

      So mem-memcpy.c started out as a simple memcpy() benchmark, then it grew
      memset() functionality and now I plan to add string copy benchmarks as
      well.

      This makes the file name a misnomer: rename it to the more generic
      mem-functions.c name.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-5-git-send-email-mingo@xxxxxxxxxx
      [ The "rename" was introducing __unused, wasn't removing the old file,
        and didn't update tools/perf/bench/Build, fix it ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2946f59ac31d703738c00c684613d289e8d001ea
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:19 2015 +0200

      perf bench: Eliminate unused argument from bench_mem_common()

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-4-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9abebb8a10ce93db45327bd3a4d06801e6db92f2
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 17 11:32:19 2015 +0200

      NFC: delete null dereference

      The exit label performs device_unlock(&dev->dev);, which will fail when 
dev
      is NULL, and nfc_put_device(dev);, which is not useful when dev is NULL, 
so
      just exit the function immediately.

      Problem found using scripts/coccinelle/null/deref_null.cocci

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit b43ef78145b10a3fb81a59596d562f21d9bab8d2
  Author: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
  Date:   Tue Oct 13 08:31:04 2015 +0200

      NFC: nfcwilink: Drop a useless static qualifier

      There is no need to have the 'struct nfcwilink *drv' variable static in 
the
      probe function.
      It only wastes a few bytes of memory.

      Signed-off-by: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 276197415685e2a91ce367562800cf0f8fbe482c
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:18 2015 +0200

      perf bench: Default to all routines in 'perf bench mem'

      So few people know that the --routine option to 'perf bench memcpy/memset'
      exists, and would not know that it's capable of testing the kernel's
      memcpy/memset implementations.

      Furthermore, 'perf bench mem all' will not run all routines:

        vega:~> perf bench mem all
        # Running mem/memcpy benchmark...
        Routine default (Default memcpy() provided by glibc)
        # Copying 1MB Bytes ...

             894.454383 MB/Sec
               3.844734 GB/Sec (with prefault)

        # Running mem/memset benchmark...
        Routine default (Default memset() provided by glibc)
        # Copying 1MB Bytes ...

               1.220703 GB/Sec
               9.042245 GB/Sec (with prefault)

      Because misleadingly the 'all' refers to 'all sub-benchmarks', not 'all
      sub-benchmarks and routines'.

      Fix all this by making the memcpy/memset routine to default to 'all',
      which results in all the benchmarks being run:

        triton:~> perf bench mem all
        # Running mem/memcpy benchmark...
        Routine default (Default memcpy() provided by glibc)
        # Copying 1MB Bytes ...

               1.448906 GB/Sec
               4.957170 GB/Sec (with prefault)
        Routine x86-64-unrolled (unrolled memcpy() in arch/x86/lib/memcpy_64.S)
        # Copying 1MB Bytes ...

               1.614153 GB/Sec
               4.379204 GB/Sec (with prefault)
        Routine x86-64-movsq (movsq-based memcpy() in arch/x86/lib/memcpy_64.S)
        # Copying 1MB Bytes ...

               1.570036 GB/Sec
               4.264465 GB/Sec (with prefault)
        Routine x86-64-movsb (movsb-based memcpy() in arch/x86/lib/memcpy_64.S)
        # Copying 1MB Bytes ...

               1.788576 GB/Sec
               6.554111 GB/Sec (with prefault)

        # Running mem/memset benchmark...
        Routine default (Default memset() provided by glibc)
        # Copying 1MB Bytes ...

               2.082223 GB/Sec
               9.126752 GB/Sec (with prefault)
        Routine x86-64-unrolled (unrolled memset() in arch/x86/lib/memset_64.S)
        # Copying 1MB Bytes ...

               5.710892 GB/Sec
               8.346688 GB/Sec (with prefault)
        Routine x86-64-stosq (movsq-based memset() in arch/x86/lib/memset_64.S)
        # Copying 1MB Bytes ...

               9.765625 GB/Sec
              12.520032 GB/Sec (with prefault)
        Routine x86-64-stosb (movsb-based memset() in arch/x86/lib/memset_64.S)
        # Copying 1MB Bytes ...

               9.668936 GB/Sec
              12.682630 GB/Sec (with prefault)

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-3-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 13839ec495a31844d66d487f740c07771c60a0d0
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:17 2015 +0200

      perf bench: Improve the 'perf bench mem memcpy' code readability

       - improve the readability of initializations
       - fix unnecessary double negations
       - fix ugly line breaks
       - fix other small details

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-2-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7cf6d08cafd67a34d0d78cd15baf64e214e050cb
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Oct 11 13:24:13 2015 +0200

      NFC: nxp-nci: constify nxp_nci_phy_ops structure

      The only instance of a nxp_nci_phy_ops structure is never modified.  Thus
      the declaration of the structure and all references to the structure type
      can be made const.

      Done with the help of Coccinelle.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 893a84e8180dcc37a3b0fd19d04dbe6cbc6e33db
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Fri Sep 25 10:59:04 2015 +0200

      NFC: nfcmrvl: Auto-select core module

      As I understand it, the core nfcmrvl module is useless without
      either the USB or the UART access module. So hide NFC_MRVL and select
      it automatically if either NFC_MRVL_USB or NFC_MRVL_UART is selected.

      This avoids presenting NFC_MRVL when neither NFC_MRVL_USB nor
      NFC_MRVL_UART can be selected.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Cc: Lauro Ramos Venancio <lauro.venancio@xxxxxxxxxxxxx>
      Cc: Aloisio Almeida Jr <aloisio.almeida@xxxxxxxxxxxxx>
      Cc: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 04831ae41c034db2e2922c460cc818c4a1f6e7e0
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Fri Sep 25 10:52:26 2015 +0200

      NFC: microread: Auto-select core module

      As I understand it, the core nfc_microread module is useless without
      either the I2C or the MEI access module. So hide NFC_MICROREAD and
      select it automatically if either NFC_MICROREAD_I2C or
      NFC_MICROREAD_MEI is selected.

      This avoids presenting NFC_MICROREAD when neither NFC_MICROREAD_I2C
      nor NFC_MICROREAD_MEI can be selected.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Cc: Lauro Ramos Venancio <lauro.venancio@xxxxxxxxxxxxx>
      Cc: Aloisio Almeida Jr <aloisio.almeida@xxxxxxxxxxxxx>
      Cc: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2690c730935873065175de33f59cce5bb221b9dc
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Tue Oct 20 00:23:49 2015 +0900

      perf test: Suppress libtraceevent warnings

      Currently libtraceevent emits warning on unsupported event formats.
      However it'd be better to see them only -v option is given.  To do that,
      it needs to override the warning() function which is used in the
      libtracevent.  Thus add set_warning_routine() same as set_die_routine()
      and check the verbose flag in our warning routine.

      Before:
        # perf test 5
         5: parse events tests                                       :
          Warning: [kvmmmu:kvm_mmu_get_page] bad op token {
          Warning: [kvmmmu:kvm_mmu_sync_page] bad op token {
          Warning: [kvmmmu:kvm_mmu_unsync_page] bad op token {
          Warning: [kvmmmu:kvm_mmu_prepare_zap_page] bad op token {
          Warning: [kvmmmu:fast_page_fault] function is_writable_pte not defined
          ...
         Ok

      After:
        # perf test 5
         5: parse events tests                                       : Ok

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445268229-1601-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8719138318316656988dbd422461c1addc9a9159
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Tue Oct 20 00:23:48 2015 +0900

      perf test: Silence tracepoint event failures

      Currently, when 'perf test' is run by a normal user, it'll fail to
      access tracepoint events.  The output becomes somewhat messy because it
      tries to be nice with long error messages and hints.

      IMHO this is not needed for 'perf test' by default and AFAIK 'perf test'
      uses pr_debug() rather than pr_err() for such messages so that one can
      use -v option to see further details on failed testcases if needed.

      Before:
        $ perf test
         1: vmlinux symtab matches kallsyms                          : FAILED!
         2: detect openat syscall event                              :Error:
        No permissions to read
        /sys/kernel/debug/tracing/events/syscalls/sys_enter_openat
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug/tracing'
        FAILED!
         3: detect openat syscall event on all cpus                  :Error:
        No permissions to read
        /sys/kernel/debug/tracing/events/syscalls/sys_enter_openat
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug/tracing'
        FAILED!
         ...

      After:
        $ perf test
         1: vmlinux symtab matches kallsyms                          : FAILED!
         2: detect openat syscall event                              : FAILED!
         3: detect openat syscall event on all cpus                  : FAILED!
         ...

        $ perf test -v 2
         2: detect openat syscall event                              :
        --- start ---
        test child forked, pid 30575
        Error:      No permissions to read
        /sys/kernel/debug/tracing/events/syscalls/sys_enter_openat
        Hint:  Try 'sudo mount -o remount,mode=755 /sys/kernel/debug/tracing'

        test child finished with -1
        ---- end ----
        detect openat syscall event: FAILED!

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445268229-1601-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b2117c12ab4d351cb309331ba8605a9d4e03f2f1
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Fri Sep 25 10:49:36 2015 +0200

      NFC: pn544: Auto-select core module

      As I understand it, the core nfc_pn544 module is useless without
      either the I2C or the MEI access module. So hide NFC_PN544 and
      select it automatically if either NFC_PN544_I2C or NFC_PN544_MEI is
      selected.

      This avoids presenting NFC_PN544 when neither NFC_PN544_I2C nor
      NFC_PN544_MEI can be selected.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Cc: Lauro Ramos Venancio <lauro.venancio@xxxxxxxxxxxxx>
      Cc: Aloisio Almeida Jr <aloisio.almeida@xxxxxxxxxxxxx>
      Cc: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 3c39c1a54a26c5495d48df796bc1f3fba78667f2
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:08:42 2015 +0200

      NFC: trf7970a: Add OF match table

      The Documentation/devicetree/bindings/net/nfc/trf7970a.txt DT binding doc
      lists "ti,trf7970a" as a compatible string but the corresponding driver
      does not have an OF match table. Add the table to the driver so the SPI
      core can do an OF style match.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 9f93f3e9461a30f425fdba15784db67ce878ce00
  Author: Jungseok Lee <jungseoklee85@xxxxxxxxx>
  Date:   Sat Oct 17 14:28:11 2015 +0000

      arm64: Synchronise dump_backtrace() with perf callchain

      Unlike perf callchain relying on walk_stackframe(), dump_backtrace()
      has its own backtrace logic. A major difference between them is the
      moment a symbol is recorded. Perf writes down a symbol *before*
      calling unwind_frame(), but dump_backtrace() prints it out *after*
      unwind_frame(). As a result, the last valid symbol cannot be hooked
      in case of dump_backtrace(). This patch addresses the issue as
      synchronising dump_backtrace() with perf callchain.

      A simple test and its results are as follows:

      - crash trigger

       $ sudo echo c > /proc/sysrq-trigger

      - current status

       Call trace:
       [<fffffe00003dc738>] sysrq_handle_crash+0x24/0x30
       [<fffffe00003dd2ac>] __handle_sysrq+0x128/0x19c
       [<fffffe00003dd730>] write_sysrq_trigger+0x60/0x74
       [<fffffe0000249fc4>] proc_reg_write+0x84/0xc0
       [<fffffe00001f2638>] __vfs_write+0x44/0x104
       [<fffffe00001f2e60>] vfs_write+0x98/0x1a8
       [<fffffe00001f3730>] SyS_write+0x50/0xb0

      - with this change

       Call trace:
       [<fffffe00003dc738>] sysrq_handle_crash+0x24/0x30
       [<fffffe00003dd2ac>] __handle_sysrq+0x128/0x19c
       [<fffffe00003dd730>] write_sysrq_trigger+0x60/0x74
       [<fffffe0000249fc4>] proc_reg_write+0x84/0xc0
       [<fffffe00001f2638>] __vfs_write+0x44/0x104
       [<fffffe00001f2e60>] vfs_write+0x98/0x1a8
       [<fffffe00001f3730>] SyS_write+0x50/0xb0
       [<fffffe00000939ec>] el0_svc_naked+0x20/0x28

      Note that this patch does not cover a case where MMU is disabled. The
      last stack frame of swapper, for example, has PC in a form of physical
      address. Unfortunately, a simple conversion using phys_to_virt() cannot
      cover all scenarios since PC is retrieved from LR - 4, not LR. It is
      a big tradeoff to change both head.S and unwind_frame() for only a few
      of symbols in *.S. Thus, this hunk does not take care of the case.

      Cc: AKASHI Takahiro <takahiro.akashi@xxxxxxxxxx>
      Cc: James Morse <james.morse@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Jungseok Lee <jungseoklee85@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 096b3224d5e7239ec3e5033bbc7612ac2d5dec3a
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Wed Sep 16 22:23:21 2015 +0800

      arm64: add cpu_idle tracepoints to arch_cpu_idle

      Currently, if cpuidle is disabled or not supported, powertop reports
      zero wakeups and zero events. This is due to the cpu_idle tracepoints
      are missing.

      This patch is to make cpu_idle tracepoints always available even if
      cpuidle is disabled or not supported.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 1099f86044111e9a7807f09523e42d4c9d0fb781
  Merge: 7379047 37850e3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 09:55:40 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

       1) Account for extra headroom in ath9k driver, from Felix Fietkau.

       2) Fix OOPS in pppoe driver due to incorrect socket state transition,
          from Guillaume Nault.

       3) Kill memory leak in amd-xgbe debugfx, from Geliang Tang.

       4) Power management fixes for iwlwifi, from Johannes Berg.

       5) Fix races in reqsk_queue_unlink(), from Eric Dumazet.

       6) Fix dst_entry usage in ARP replies, from Jiri Benc.

       7) Cure OOPSes with SO_GET_FILTER, from Daniel Borkmann.

       8) Missing allocation failure check in amd-xgbe, from Tom Lendacky.

       9) Various resource allocation/freeing cures in DSA< from Neil
          Armstrong.

      10) A series of bug fixes in the openvswitch conntrack support, from
          Joe Stringer.

      11) Fix two cases (BPF and act_mirred) where we have to clean the sender
          cpu stored in the SKB before transmitting.  From WANG Cong and
          Alexei Starovoitov.

      12) Disable VLAN filtering in promiscuous mode in mlx5 driver, from
          Achiad Shochat.

      13) Older bnx2x chips cannot do 4-tuple UDP hashing, so prevent this
          configuration via ethtool.  From Yuval Mintz.

      14) Don't call rt6_uncached_list_flush_dev() from rt6_ifdown() when
          'dev' is NULL, from Eric Biederman.

      15) Prevent stalled link synchronization in tipc, from Jon Paul Maloy.

      16) kcalloc() gstrings ethtool buffer before having driver fill it in,
          in order to prevent kernel memory leaking.  From Joe Perches.

      17) Fix mixxing rt6_info initialization for blackhole routes, from
          Martin KaFai Lau.

      18) Kill VLAN regression in via-rhine, from Andrej Ota.

      19) Missing pfmemalloc check in sk_add_backlog(), from Eric Dumazet.

      20) Fix spurious MSG_TRUNC signalling in netlink dumps, from Ronen Arad.

      21) Scrube SKBs when pushing them between namespaces in openvswitch,
          from Joe Stringer.

      22) bcmgenet enables link interrupts too early, fix from Florian
          Fainelli.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (92 commits)
        net: bcmgenet: Fix early link interrupt enabling
        tunnels: Don't require remote endpoint or ID during creation.
        openvswitch: Scrub skb between namespaces
        xen-netback: correctly check failed allocation
        net: asix: add support for the Billionton GUSB2AM-1G-B USB adapter
        netlink: Trim skb to alloc size to avoid MSG_TRUNC
        net: add pfmemalloc check in sk_add_backlog()
        via-rhine: fix VLAN receive handling regression.
        ipv6: Initialize rt6_info properly in ip6_blackhole_route()
        ipv6: Move common init code for rt6_info to a new function 
rt6_info_init()
        Bluetooth: Fix initializing conn_params in scan phase
        Bluetooth: Fix conn_params list update in hci_connect_le_scan_cleanup
        Bluetooth: Fix remove_device behavior for explicit connects
        Bluetooth: Fix LE reconnection logic
        Bluetooth: Fix reference counting for LE-scan based connections
        Bluetooth: Fix double scan updates
        mlxsw: core: Fix race condition in __mlxsw_emad_transmit
        tipc: move fragment importance field to new header position
        ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
        tipc: eliminate risk of stalled link synchronization
        ...

  commit 215399392fe40f33880ea9de49a1ed8ee26edd10
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:38 2015 +0100

      arm64: 36 bit VA

      36bit VA lets us use 2 level page tables while limiting the
      available address space to 64GB.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Steve Capper <steve.capper@xxxxxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 44eaacf1b8999b15cec89bd9d9cd989da4798d53
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:37 2015 +0100

      arm64: Add 16K page size support

      This patch turns on the 16K page support in the kernel. We
      support 48bit VA (4 level page tables) and 47bit VA (3 level
      page tables).

      With 16K we can map 128 entries using contiguous bit hint
      at level 3 to map 2M using single TLB entry.

      TODO: 16K supports 32 contiguous entries at level 2 to get us
      1G(which is not yet supported by the infrastructure). That should
      be a separate patch altogether.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Jeremy Linton <jeremy.linton@xxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Cc: Steve Capper <steve.capper@xxxxxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9d372c9fab34cd8803141871195141995f85c7f7
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Mon Oct 19 14:19:36 2015 +0100

      arm64: Add page size to the kernel image header

      This patch adds the page size to the arm64 kernel image header
      so that one can infer the PAGESIZE used by the kernel. This will
      be helpful to diagnose failures to boot the kernel with page size
      not supported by the CPU.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 4bf8b96ed3f7e11422d8b4f58cf43896ed02d1f6
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:35 2015 +0100

      arm64: Check for selected granule support

      Ensure that the selected page size is supported by the CPU(s). If it 
doesn't
      park it.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit db488be354bc85724d7b9523e94435fdaa761a35
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:34 2015 +0100

      arm64: Kconfig: Fix help text about AArch32 support with 64K pages

      Update the help text for ARM64_64K_PAGES to reflect the reality
      about AArch32 support.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit e25781e3dea914cc4c34c946bae5fa3d4516516f
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Oct 19 14:19:33 2015 +0100

      arm64: Simplify NR_FIX_BTMAPS calculation

      We choose NR_FIX_BTMAPS such that each slot (NR_FIX_BTMAPS * PAGE_SIZE)
      can address 256K.

      Use division to derive NR_FIX_BTMAPS rather than defining it for each
      page size.

      Signed-off-by:  Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by:  Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 755e70b7e3f189aa2503c510fb98208e477a5030
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:32 2015 +0100

      arm64: Clean config usages for page size

      We use !CONFIG_ARM64_64K_PAGES for CONFIG_ARM64_4K_PAGES
      (and vice versa) in code. It all worked well, so far since
      we only had two options. Now, with the introduction of 16K,
      these cases will break. This patch cleans up the code to
      use the required CONFIG symbol expression without the assumption
      that !64K => 4K (and vice versa)

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 6a3fd4026c0c0ac279265c2a5d228233b5bbd28f
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:31 2015 +0100

      arm64: Handle 4 level page table for swapper

      At the moment, we only support maximum of 3-level page table for
      swapper. With 48bit VA, 64K has only 3 levels and 4K uses section
      mapping. Add support for 4-level page table for swapper, needed
      by 16K pages.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c265af51c5f17ec5c0cf0d960133bd6fe5f39eb9
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:30 2015 +0100

      arm64: Calculate size for idmap_pg_dir at compile time

      Now that we can calculate the number of levels required for
      mapping a va width, reserve exact number of pages that would
      be required to cover the idmap. The idmap should be able to handle
      the maximum physical address size supported.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 686e783869d37935510b4d2c266948677be82665
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:29 2015 +0100

      arm64: Introduce helpers for page table levels

      Introduce helpers for finding the number of page table
      levels required for a given VA width, shift for a particular
      page table level.

      Convert the existing users to the new helpers. More users
      to follow.

      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Acked-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit b433dce056d3814dc4b33e5a8a533d6401ffcfb0
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:28 2015 +0100

      arm64: Handle section maps for swapper/idmap

      We use section maps with 4K page size to create the swapper/idmaps.
      So far we have used !64K or 4K checks to handle the case where we
      use the section maps.
      This patch adds a new symbol, ARM64_SWAPPER_USES_SECTION_MAPS, to
      handle cases where we use section maps, instead of using the page size
      symbols.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 87d1587bef394cd8a77dbca8cc92885fe7041b8f
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:27 2015 +0100

      arm64: Move swapper pagetable definitions

      Move the kernel pagetable (both swapper and idmap) definitions
      from the generic asm/page.h to a new file, asm/kernel-pgtable.h.

      This is mostly a cosmetic change, to clean up the asm/page.h to
      get rid of the arch specific details which are not needed by the
      generic code.

      Also renames the symbols to prevent conflicts. e.g,
        BLOCK_SHIFT => SWAPPER_BLOCK_SHIFT

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9254970cbbf542a0085e491810f0144a27885702
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Mon Oct 19 13:38:09 2015 +0100

      ARM: 8447/1: catch pending imprecise abort on unmask

      Install a non-faulting handler just before unmasking imprecise aborts
      and switch back to the regular one after unmasking is done.

      This catches any pending imprecise abort that the firmware/bootloader
      may have left behind that would normally crash the kernel at that point.
      As there are apparently a lot of bootlaoders out there that do such a
      thing it makes sense to handle it in the common startup code.

      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Tested-by: Tyler Baker <tyler.baker@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit c8d46ece44458a2088896d6fcae123a72bdfd429
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Mon Oct 19 09:17:40 2015 +0100

      ARM: 8446/1: amba: Remove unused callbacks for legacy system PM

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 8a603f91cc4848ab1a0458bc065aa9f64322e123
  Author: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 22:19:06 2015 +0100

      ARM: 8445/1: fix vdsomunge not to depend on glibc specific byteswap.h

      If the host toolchain is not glibc based then the arm kernel build
      fails with

        HOSTCC  arch/arm/vdso/vdsomunge
        arch/arm/vdso/vdsomunge.c:48:22: fatal error: byteswap.h: No such file 
or directory

      Observed: with omap2plus_defconfig and compile on Mac OS X with arm ELF
      cross-compiler.

      Reason: byteswap.h is a glibc only header.

      Solution: replace by private byte-swapping macros (taken from
      arch/mips/boot/elf2ecoff.c and kindly improved by Russell King)

      Tested to compile on Mac OS X 10.9.5 host.

      Signed-off-by: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
      Signed-off-by: Nathan Lynch <nathan_lynch@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 57df5380853460bc66b59a46273ce113c923d39c
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Fri Oct 16 12:23:33 2015 -0700

      ARM: OMAP2+: Fix imprecise external abort caused by bogus SRAM init

      Some omaps are producing imprecise external aborts because we are
      wrongly trying to init SRAM for device tree based booting. Only
      omap3 is still using the legacy SRAM code, so we need to make it
      omap3 specific. Otherwise we can get errors like this on at least
      dm814x:

      Unhandled fault: imprecise external abort (0xc06) at 0xc08b156c
      ...
      (omap_rev) from [<c08b12e0>] (omap_sram_init+0xf8/0x3e0)
      (omap_sram_init) from [<c08aca0c>] (omap_sdrc_init+0x10/0xb0)
      (omap_sdrc_init) from [<c08b581c>] (pdata_quirks_init+0x18/0x44)
      (pdata_quirks_init) from [<c08b5478>] (omap_generic_init+0x10/0x1c)
      (omap_generic_init) from [<c08a57e0>] (customize_machine+0x1c/0x40)
      (customize_machine) from [<c00098a4>] (do_one_initcall+0x80/0x1dc)
      (do_one_initcall) from [<c08a2ec4>] (kernel_init_freeable+0x218/0x2e8)
      (kernel_init_freeable) from [<c063a554>] (kernel_init+0x8/0xec)
      (kernel_init) from [<c000f890>] (ret_from_fork+0x14/0x24)

      Let's fix the issue by making sure omap_sdrc_init only gets called for
      omap3. To do that, we need to have compatible "ti,omap3" in the dts
      files. And let's also use "ti,omap3630" instead of "ti,omap36xx" like
      we're supposed to.

      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit bc6f9ae6043a219b5afadf0391ce77db401a966f
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:54:52 2015 +0300

      ath10k: make fw stats prints specific to firmware version

      The patch makes debug stats prints fw specific by adding a new member
      in wmi_ops. That way it's easier to add fw_stats support to 10.4 firmware.

      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Tamizh Chelvam <c_traja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 1aaf8efba0aeb25eb5858b19472badaa54a41a38
  Author: Anilkumar Kolli <akolli@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:54:51 2015 +0300

      ath10k: disable PCI PS for QCA988X and QCA99X0

      This patch disables PCI PS for QCA988X and QCA99X0, Since PCI PS is
      validated for QCA6174, let it be enabled only for QCA6174. It would be
      better to execute PCI PS related functions only for the supported devices.

      PCI time out issue is observed with QCA99X0 on x86 platform, We will
      disable PCI PS for QCA988X and QCA99X0 until PCI PS is properly 
implemented.

      Taking and releasing ps_lock is causing higher CPU consumption. Michal 
Kazior
      suggested ps_lock overhead to be reworked so that ath10k_pci_wake/sleep
      functions are called less often, i.e. move the powersave logic up (only 
during
      irq handling, tx path, submitting fw commands) but that's a bigger change 
and
      can be implemented later.

      Signed-off-by: Anilkumar Kolli <akolli@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 911b79cde95c7da0ec02f48105358a36636b7a71
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Mon Oct 19 11:20:28 2015 +0100

      KEYS: Don't permit request_key() to construct a new keyring

      If request_key() is used to find a keyring, only do the search part - 
don't
      do the construction part if the keyring was not found by the search.  We
      don't really want keyrings in the negative instantiated state since the
      rejected/negative instantiation error value in the payload is unioned with
      keyring metadata.

      Now the kernel gives an error:

        request_key("keyring", "#selinux,bdekeyring", "keyring", 
KEY_SPEC_USER_SESSION_KEYRING) = -1 EPERM (Operation not permitted)

      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>

  commit ca064bd89363a6e7e71b1c5226ff1b718957a9d4
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Mon Oct 19 10:30:05 2015 +0200

      xfrm: Fix pmtu discovery for local generated packets.

      Commit 044a832a777 ("xfrm: Fix local error reporting crash
      with interfamily tunnels") moved the setting of skb->protocol
      behind the last access of the inner mode family to fix an
      interfamily crash. Unfortunately now skb->protocol might not
      be set at all, so we fail dispatch to the inner address family.
      As a reault, the local error handler is not called and the
      mtu value is not reported back to userspace.

      We fix this by setting skb->protocol on message size errors
      before we call xfrm_local_error.

      Fixes: 044a832a7779c ("xfrm: Fix local error reporting crash with 
interfamily tunnels")
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit 558a65bc31a0c7811b34dad32f51f47c55a40000
  Author: Chuck Ebbert <cebbert.lkml@xxxxxxxxx>
  Date:   Wed Oct 14 14:31:19 2015 -0400

      sched/x86: Fix typo in __switch_to() comments

      Fix obvious mistake: FS/GS should be DS/ES.

      Signed-off-by: Chuck Ebbert <cebbert.lkml@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151014143119.78858eeb@r5
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c13dc31adb04c3f85d54d2fa13e34206f25742eb
  Merge: 7379047 39cd2dd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:09:54 2015 +0200

      Merge branch 'for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu into core/rcu

      Pull RCU updates from Paul E. McKenney:

        - Miscellaneous fixes. (Paul E. McKenney, Boqun Feng, Oleg Nesterov, 
Patrick Marlier)

        - Improvements to expedited grace periods. (Paul E. McKenney)

        - Performance improvements to and locktorture tests for percpu-rwsem.
          (Oleg Nesterov, Paul E. McKenney)

        - Torture-test changes. (Paul E. McKenney, Davidlohr Bueso)

        - Documentation updates. (Paul E. McKenney)

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a75ca545e8d57473da47ece828ad98a10727ec6f
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 14:28:53 2015 +0300

      x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels

      Declaration of memcpy() is hidden under #ifndef CONFIG_KMEMCHECK.
      In asm/efi.h under #ifdef CONFIG_KASAN we #undef memcpy(), due to
      which the following happens:

        In file included from arch/x86/kernel/setup.c:96:0:
        ./arch/x86/include/asm/desc.h: In function â??native_write_idt_entryâ??:
        ./arch/x86/include/asm/desc.h:122:2: error: implicit declaration of 
function â??memcpyâ?? [-Werror=implicit-function-declaration]   
memcpy(&idt[entry], gate, sizeof(*gate));
          ^
          cc1: some warnings being treated as errors
          make[2]: *** [arch/x86/kernel/setup.o] Error 1

      We will get rid of that #undef in asm/efi.h eventually.
      But in the meanwhile move memcpy() declaration out of #ifdefs
      to fix the build.

      Reported-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444994933-28328-1-git-send-email-aryabinin@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fcafddec4e78a7776db4b6685db6b2902d4300fc
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Fri Oct 16 00:14:29 2015 -0400

      x86/smpboot: Fix CPU #1 boot timeout

      The following commit:

        a9bcaa02a5104ac ("x86/smpboot: Remove SIPI delays from cpu_up()")

      Caused some Intel Core2 processors to time-out when bringing up CPU #1,
      resulting in the missing of that CPU after bootup.

      That patch reduced the SIPI delays from udelay() 300, 200 to udelay() 0,
      0 on modern processors.

      Several Intel(R) Core(TM)2 systems failed to bring up CPU #1 10/10 times
      after that change.

      Increasing either of the SIPI delays to udelay(1) results in
      success. So here we increase both to udelay(10).  While this may
      be 20x slower than the absolute minimum, it is still 20x to 30x
      faster than the original code.

      Tested-by: Donald Parsons <dparsons@xxxxxxxxxxxxx>
      Tested-by: Shane <shrybman@xxxxxxxxxxxx>
      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dparsons@xxxxxxxxxxxxx
      Cc: shrybman@xxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/6dd554ee8945984d85aafb2ad35793174d068af0.1444968087.git.len.brown@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f1ccd249319efca4ee4faf1d904f5a362cac7c81
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Fri Oct 16 00:14:28 2015 -0400

      x86/smpboot: Fix cpu_init_udelay=10000 corner case boot parameter 
misbehavior

      For legacy machines cpu_init_udelay defaults to 10,000.
      For modern machines it is set to 0.

      The user should be able to set cpu_init_udelay to
      any value on the cmdline, including 10,000.

      Before this patch, that was seen as "unchanged from default"
      and thus on a modern machine, the user request was ignored
      and the delay was set to 0.

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dparsons@xxxxxxxxxxxxx
      Cc: shrybman@xxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/de363cdbbcfcca1d22569683f7eb9873e0177251.1444968087.git.len.brown@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 85001089a764d6d12b47f33a8c9b49cf06cfe045
  Author: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
  Date:   Wed Oct 14 13:51:54 2015 +0100

      gpio/xilinx: enable for MIPS

      MIPSfpga uses the axi gpio controller. Enable the driver for MIPS.

      Signed-off-by: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 37850e37fcfb4dd831bc9e33221e8c49a732956f
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Sat Oct 17 14:22:46 2015 -0700

      net: bcmgenet: Fix early link interrupt enabling

      Link interrupts are enabled in init_umac(), which is too early for us to
      process them since we do not yet have a valid PHY device pointer. On
      BCM7425 chips for instance, we will crash calling phy_mac_interrupt()
      because phydev is NULL.

      Fix this by moving the link interrupts enabling in
      bcmgenet_netif_start(), under a specific function:
      bcmgenet_link_intr_enable() and while at it, update the comments
      surrounding the code.

      Fixes: 6cc8e6d4dcb36 ("net: bcmgenet: Delay PHY initialization to 
bcmgenet_open()")
      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit afc050dd8e3387f71def1d6114ecd589f16874df
  Merge: e277de5 de28a05
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 23:05:56 2015 -0700

      Merge tag 'wireless-drivers-for-davem-2015-10-17' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers

      Kalle Valo says:

      ====================
      iwlwifi:

      * mvm: flush fw_dump_wk when mvm fails to start
      * mvm: init card correctly on ctkill exit check
      * pci: add a few more PCI subvendor IDs for the 7265 series
      * fix firmware filename for 3160
      * mvm: clear csa countdown when AP is stopped
      * mvm: fix D3 firmware PN programming
      * dvm: fix D3 firmware PN programming
      * mvm: fix D3 CCMP TX PN assignment

      rtlwifi:

      * rtl8821ae: Fix system lockups on boot
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 371f1c7e0d854796adc622cc3bacfcc5fc638db1
  Merge: 7b4b000 f0a0a97
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 22:48:34 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

      Pablo Neira Ayuso says:

      ====================
      Netfilter/IPVS updates for net-next

      The following patchset contains Netfilter/IPVS updates for your net-next
      tree. Most relevantly, updates for the nfnetlink_log to integrate with
      conntrack, fixes for cttimeout and improvements for nf_queue core, they 
are:

      1) Remove useless ifdef around static inline function in IPVS, from
         Eric W. Biederman.

      2) Simplify the conntrack support for nfnetlink_queue: Merge
         nfnetlink_queue_ct.c file into nfnetlink_queue_core.c, then rename it 
back
         to nfnetlink_queue.c

      3) Use y2038 safe timestamp from nfnetlink_queue.

      4) Get rid of dead function definition in nf_conntrack, from Flavio
         Leitner.

      5) Attach conntrack support for nfnetlink_log.c, from Ken-ichirou 
MATSUZAWA.
         This adds a new NETFILTER_NETLINK_GLUE_CT Kconfig switch that
         controls enabling both nfqueue and nflog integration with conntrack.
         The userspace application can request this via NFULNL_CFG_F_CONNTRACK
         configuration flag.

      6) Remove unused netns variables in IPVS, from Eric W. Biederman and
         Simon Horman.

      7) Don't put back the refcount on the cttimeout object from xt_CT on 
success.

      8) Fix crash on cttimeout policy object removal. We have to flush out
         the cttimeout extension area of the conntrack not to refer to an 
unexisting
         object that was just removed.

      9) Make sure rcu_callback completion before removing nfnetlink_cttimeout
         module removal.

      10) Fix compilation warning in br_netfilter when no nf_defrag_ipv4 and
          nf_defrag_ipv6 are enabled. Patch from Arnd Bergmann.

      11) Autoload ctnetlink dependencies when NFULNL_CFG_F_CONNTRACK is
          requested. Again from Ken-ichirou MATSUZAWA.

      12) Don't use pointer to previous hook when reinjecting traffic via
          nf_queue with NF_REPEAT verdict since it may be already gone. This
          also avoids a deadloop if the userspace application keeps returning
          NF_REPEAT.

      13) A bunch of cleanups for netfilter IPv4 and IPv6 code from Ian Morris.

      14) Consolidate logger instance existence check in nfulnl_recv_config().

      15) Fix broken atomicity when applying configuration updates to logger
          instances in nfnetlink_log.

      16) Get rid of the .owner attribute in our hook object. We don't need
          this anymore since we're dropping pending packets that have escaped
          from the kernel when unremoving the hook. Patch from Florian Westphal.

      17) Remove unnecessary rcu_read_lock() from nf_reinject code, we always
          assume RCU read side lock from .call_rcu in nfnetlink. Also from 
Florian.

      18) Use static inline function instead of macros to define NF_HOOK() and
          NF_HOOK_COND() when no netfilter support in on, from Arnd Bergmann.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b4b000951f09cfe3604a6fdf5469894b4e75adb
  Author: santosh.shilimkar@xxxxxxxxxx <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Oct 16 22:13:21 2015 -0400

      RDS: fix rds-ping deadlock over TCP transport

      Sowmini found hang with rds-ping while testing RDS over TCP. Its
      a corner case and doesn't happen always. The issue is not reproducible
      with IB transport. Its clear from below dump why we see it with RDS TCP.

       [<ffffffff8153b7e5>] do_tcp_setsockopt+0xb5/0x740
       [<ffffffff8153bec4>] tcp_setsockopt+0x24/0x30
       [<ffffffff814d57d4>] sock_common_setsockopt+0x14/0x20
       [<ffffffffa096071d>] rds_tcp_xmit_prepare+0x5d/0x70 [rds_tcp]
       [<ffffffffa093b5f7>] rds_send_xmit+0xd7/0x740 [rds]
       [<ffffffffa093bda2>] rds_send_pong+0x142/0x180 [rds]
       [<ffffffffa0939d34>] rds_recv_incoming+0x274/0x330 [rds]
       [<ffffffff810815ae>] ? ttwu_queue+0x11e/0x130
       [<ffffffff814dcacd>] ? skb_copy_bits+0x6d/0x2c0
       [<ffffffffa0960350>] rds_tcp_data_recv+0x2f0/0x3d0 [rds_tcp]
       [<ffffffff8153d836>] tcp_read_sock+0x96/0x1c0
       [<ffffffffa0960060>] ? rds_tcp_recv_init+0x40/0x40 [rds_tcp]
       [<ffffffff814d6a90>] ? sock_def_write_space+0xa0/0xa0
       [<ffffffffa09604d1>] rds_tcp_data_ready+0xa1/0xf0 [rds_tcp]
       [<ffffffff81545249>] tcp_data_queue+0x379/0x5b0
       [<ffffffffa0960cdb>] ? rds_tcp_write_space+0xbb/0x110 [rds_tcp]
       [<ffffffff81547fd2>] tcp_rcv_established+0x2e2/0x6e0
       [<ffffffff81552602>] tcp_v4_do_rcv+0x122/0x220
       [<ffffffff81553627>] tcp_v4_rcv+0x867/0x880
       [<ffffffff8152e0b3>] ip_local_deliver_finish+0xa3/0x220

      This happens because rds_send_xmit() chain wants to take
      sock_lock which is already taken by tcp_v4_rcv() on its
      way to rds_tcp_data_ready(). Commit db6526dcb51b ("RDS: use
      rds_send_xmit() state instead of RDS_LL_SEND_FULL") which
      was trying to opportunistically finish the send request
      in same thread context.

      But because of above recursive lock hang with RDS TCP,
      the send work from rds_send_pong() needs to deferred to
      worker to avoid lock up. Given RDS ping is more of connectivity
      test than performance critical path, its should be ok even
      for transport like IB.

      Reported-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by:  Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Acked-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e277de5f3f7d6eed2a41920983c44c4df386b871
  Author: Jesse Gross <jesse@xxxxxxxxxx>
  Date:   Fri Oct 16 16:36:00 2015 -0700

      tunnels: Don't require remote endpoint or ID during creation.

      Before lightweight tunnels existed, it really didn't make sense to
      create a tunnel that was not fully specified, such as without a
      destination IP address - the resulting packets would go nowhere.
      However, with lightweight tunnels, the opposite is true - it doesn't
      make sense to require this information when it will be provided later
      on by the route. This loosens the requirements for this information.

      An alternative would be to allow the relaxed version only when
      COLLECT_METADATA is enabled. However, since there are several
      variations on this theme (such as NBMA tunnels in GRE), just dropping
      the restrictions seems the most consistent across tunnels and with
      the existing configuration.

      CC: John Linville <linville@xxxxxxxxxxxxx>
      Signed-off-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b3958b9e18140457b5600b03619e4c2e530761fe
  Author: stephen hemminger <stephen@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 16:12:34 2015 -0700

      uapi: add mpls_iptunnel.h

      Add missing rule to export mpls iptunnel header needed by iproute2

      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Acked-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dc6ef6be52154490c5c03f742e28bc781cc751b2
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 16 13:00:01 2015 -0700

      tcp: do not set queue_mapping on SYNACK

      At the time of commit fff326990789 ("tcp: reflect SYN queue_mapping into
      SYNACK packets") we had little ways to cope with SYN floods.

      We no longer need to reflect incoming skb queue mappings, and instead
      can pick a TX queue based on cpu cooking the SYNACK, with normal XPS
      affinities.

      Note that all SYNACK retransmits were picking TX queue 0, this no longer
      is a win given that SYNACK rtx are now distributed on all cpus.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 740dbc289155fdeed32438396370e70b684cd45e
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Fri Oct 16 11:08:18 2015 -0700

      openvswitch: Scrub skb between namespaces

      If OVS receives a packet from another namespace, then the packet should
      be scrubbed. However, people have already begun to rely on the behaviour
      that skb->mark is preserved across namespaces, so retain this one field.

      This is mainly to address information leakage between namespaces when
      using OVS internal ports, but by placing it in ovs_vport_receive() it is
      more generally applicable, meaning it should not be overlooked if other
      port types are allowed to be moved into namespaces in future.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a5d6f7dd300e7a3237410cc9d6d00427c18281c3
  Merge: 833b8f1 5157b8a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 22:23:33 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth

      Johan Hedberg says:

      ====================
      pull request: bluetooth 2015-10-16

      First of all, sorry for the late set of patches for the 4.3 cycle. We
      just finished an intensive week of testing at the Bluetooth UnPlugFest
      and discovered (and fixed) issues there. Unfortunately a few issues
      affect 4.3-rc5 in a way that they break existing Bluetooth LE mouse and
      keyboard support.

      The regressions result from supporting LE privacy in conjunction with
      scanning for Resolvable Private Addresses before connecting. A feature
      that has been tested heavily (including automated unit tests), but sadly
      some regressions slipped in. The UnPlugFest with its multitude of test
      platforms is a good battle testing ground for uncovering every corner
      case.

      The patches in this pull request focus only on fixing the regressions in
      4.3-rc5. The patches look a bit larger since we also added comments in
      the critical sections of the fixes to improve clarity.

      I would appreciate if we can get these regression fixes to Linus
      quickly. Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 951b5d959f1da4bae8910085a2d8d6a3d374c72d
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 16 12:00:51 2015 +0200

      net: hix5hd2_gmac: avoid integer overload warning

      BITS_RX_EN is an 'unsigned long' constant, so the ones complement of that
      has bits set that do not fit into a 32-bit variable on 64-bit 
architectures,
      which causes a harmless gcc warning:

      drivers/net/ethernet/hisilicon/hix5hd2_gmac.c: In function 
'hix5hd2_port_disable':
      drivers/net/ethernet/hisilicon/hix5hd2_gmac.c:374:2: warning: large 
integer implicitly truncated to unsigned type [-Woverflow]
        writel_relaxed(~(BITS_RX_EN | BITS_TX_EN), priv->base + PORT_EN);

      This adds a cast to (u32) to tell gcc that the code is indeed fine.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 876133d3161dcb743983d1f9e5bf247aea2fb0f1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 16 11:33:49 2015 +0200

      net: hisilicon: add OF dependency

      The HNS MDIO driver fails to build on older ARM machines that are not
      yet converted to CONFIG_OF:

      drivers/net/ethernet/hisilicon/hns_mdio.c: In function 
'hns_mdio_bus_name':
      drivers/net/ethernet/hisilicon/hns_mdio.c:405:14: error: 'OF_BAD_ADDR' 
undeclared (first use in this function)
        u64 taddr = OF_BAD_ADDR;
                    ^
      drivers/net/ethernet/hisilicon/hns_mdio.c:405:14: note: each undeclared 
identifier is reported only once for each function it appears in
      drivers/net/ethernet/hisilicon/hns_mdio.c:409:11: error: implicit 
declaration of function 'of_translate_address' 
[-Werror=implicit-function-declaration]
         taddr = of_translate_address(np, addr);
                 ^

      This clarifies the dependency to ensure we don't attempt to build these
      drivers without CONFIG_OF, but also adds a COMPILE_TEST alternative to
      give us better build coverage testing.

      Build-tested on x86 as well to ensure this actually works.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 119c7ad8084affb64b242b7c6d9d9f84b91163cb
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 16 11:30:56 2015 +0200

      net: hisilicon: include linux/vmalloc.h in dsaf

      Some configurations fail to build the hns dsaf code because of
      a missing header file:

      ethernet/hisilicon/hns/hns_dsaf_main.c: In function 'hns_dsaf_init':
      ethernet/hisilicon/hns/hns_dsaf_main.c:1096:2: error: implicit 
declaration of function 'vzalloc' [-Werror=implicit-function-declaration]
        priv->soft_mac_tbl = vzalloc(sizeof(*priv->soft_mac_tbl)

      This adds the correct #include.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a679dbbbc6a363339aad75589706ee73762b75d9
  Merge: 4639a3b 90a505b
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 19:57:12 2015 -0700

      Merge branch 'hns-fixes'

      yankejian says:

      ====================
      net: hns: fixes two bugs in hns driver

        This patchset fixes two bugs in hns driver.
        - fixes timeout when received pause frame from the connective ports
        - should be set by using ethtool -s when the devices are link down
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 90a505b9f607bf09525bb8eb766b73a658675b38
  Author: lisheng <lisheng011@xxxxxxxxxx>
  Date:   Fri Oct 16 17:03:20 2015 +0800

      net: hns: fixes a bug about timeout by pause frame

      this patch fixes the bug triggered timeout sequence. when the connective
      ports cannot accept the packets with higher speed, they will send out the
      pause frame to the Soc's mac. At that time, the driver resets the relevant
      of the Soc, then it causes the packets cannot be sent out immediately.
      this patch fixes the issue.

      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: lisheng <lisheng011@xxxxxxxxxx>
      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 20ddb1d3d0015ff77f83561a0ede7aaebf7417bf
  Author: Chenny Xu <chenny.xu@xxxxxxxxxx>
  Date:   Fri Oct 16 17:03:19 2015 +0800

      net: hns: fixes the issue by using ethtool -s

        before this patch, hns driver only permits user to set the net device
      by using ethtool -s when the device is link up. it is obviously not so
      good. it needs to be set no matter it is link up or down. so this patch
      fixes this issue.

      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: lisheng <lisheng011@xxxxxxxxxx>
      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: Chenny Xu <chenny.xu@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4639a3b522f1acec462896f1770523f380fe0157
  Merge: b89eb1f abc2b10
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 19:54:45 2015 -0700

      Merge branch 'hsi-fixes'

      huangdaode says:

      ====================
      net: hisilicon fix some bugs in HNS drivers

      This patchset fixes the two bugs in HNS driver, one is remove the hnae 
sysfs interface
      according to the review comments from Arnd Bergmann <arnd@xxxxxxxx>, 
another
      is fixing the wrong mac_id judgement bug which is found during internal 
tests.

      change log:
      v3:
       remove the hnae sysfs interface.

      v2:
        1) remove first bug fix, which is fixed in another patch submitted by
           Arnd Bergmann <arnd@xxxxxxxx>
        2) change the code sytyle according to Joe.

      v1:
       initial version.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit abc2b10eadc6587192adde6ab4050d27dda5ee8f
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:54:17 2015 +0800

      net: hisilicon fix a bug on Hisilicon Network Subsystem

      This patch fixes the wrong judgement of mac_id when get port num.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 31bbd77189a82ed0b7f167d3b8b6561898fa8a80
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:54:16 2015 +0800

      net: hisilicon rm hnae sysfs interface

      This patch removes the hns driver hnae sysfs interface according to
      Arnd's review comments.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 833b8f18adfcca04070a8a42d545a4553379d36f
  Author: Insu Yun <wuninsu@xxxxxxxxx>
  Date:   Thu Oct 15 18:02:28 2015 +0000

      xen-netback: correctly check failed allocation

      Since vzalloc can be failed in memory pressure,
      writes -ENOMEM to xenstore to indicate error.

      Signed-off-by: Insu Yun <wuninsu@xxxxxxxxx>
      Acked-by: Wei Liu <wei.liu2@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 80083a3c02ef4451edeef31a6f9afe130078f2bf
  Author: Chia-Sheng Chang <changchias@xxxxxxxxx>
  Date:   Fri Oct 16 02:00:21 2015 +0800

      net: asix: add support for the Billionton GUSB2AM-1G-B USB adapter

      Just another AX88178-based 10/100/1000 USB-to-Ethernet dongle. This one
      shows up in lsusb as: "ID 08dd:0114 Billionton Systems, Inc".

      Signed-off-by: Chia-Sheng Chang <changchias@xxxxxxxxx>
      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Luca Ceresoli <luca@xxxxxxxxxxxxxxxx>
      Cc: Christoph Jaeger <cj@xxxxxxxxx>
      Cc: "Woojung.Huh@xxxxxxxxxxxxx" <Woojung.Huh@xxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Cc: linux-usb@xxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b89eb1fcf2d4c068f088c39100f5e3067d8cccc9
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Thu Oct 15 10:37:13 2015 -0700

      net: phy: bcm-phy-lib: Fix module license issue

      The 'bcm-phy-lib.c', added as a part of the commit
      "net: phy: Add Broadcom phy library for common interfaces"
      was missing the module license. This was causing an issue
      when the library is built as a module; "module license
      'unspecified' taints kernel".

      This patch fixes the issue by adding the module license,
      author and description to the bcm-phy-lib.c file.

      Fixes: a1cba5613edf5 ("net: phy: Add Broadcom phy library for
      common interfaces")
      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit db65a3aaf29ecce2e34271d52e8d2336b97bd9fe
  Author: Arad, Ronen <ronen.arad@xxxxxxxxx>
  Date:   Thu Oct 15 01:55:17 2015 -0700

      netlink: Trim skb to alloc size to avoid MSG_TRUNC

      netlink_dump() allocates skb based on the calculated min_dump_alloc or
      a per socket max_recvmsg_len.
      min_alloc_size is maximum space required for any single netdev
      attributes as calculated by rtnl_calcit().
      max_recvmsg_len tracks the user provided buffer to netlink_recvmsg.
      It is capped at 16KiB.
      The intention is to avoid small allocations and to minimize the number
      of calls required to obtain dump information for all net devices.

      netlink_dump packs as many small messages as could fit within an skb
      that was sized for the largest single netdev information. The actual
      space available within an skb is larger than what is requested. It could
      be much larger and up to near 2x with align to next power of 2 approach.

      Allowing netlink_dump to use all the space available within the
      allocated skb increases the buffer size a user has to provide to avoid
      truncaion (i.e. MSG_TRUNG flag set).

      It was observed that with many VLANs configured on at least one netdev,
      a larger buffer of near 64KiB was necessary to avoid "Message truncated"
      error in "ip link" or "bridge [-c[ompressvlans]] vlan show" when
      min_alloc_size was only little over 32KiB.

      This patch trims skb to allocated size in order to allow the user to
      avoid truncation with more reasonable buffer size.

      Signed-off-by: Ronen Arad <ronen.arad@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 26fb342c734061859fec1bd9e987bb6b78061ef0
  Author: Li RongQing <roy.qing.li@xxxxxxxxx>
  Date:   Thu Oct 15 16:54:36 2015 +0800

      ipconfig: send Client-identifier in DHCP requests

      A dhcp server may provide parameters to a client from a pool of IP
      addresses and using a shared rootfs, or provide a specific set of
      parameters for a specific client, usually using the MAC address to
      identify each client individually. The dhcp protocol also specifies
      a client-id field which can be used to determine the correct
      parameters to supply when no MAC address is available. There is
      currently no way to tell the kernel to supply a specific client-id,
      only the userspace dhcp clients support this feature, but this can
      not be used when the network is needed before userspace is available
      such as when the root filesystem is on NFS.

      This patch is to be able to do something like "ip=dhcp,client_id_type,
      client_id_value", as a kernel parameter to enable the kernel to
      identify itself to the server.

      Signed-off-by: Li RongQing <roy.qing.li@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c8a1978e07c412f8d79b8612f45aaafe7238ca62
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:25:53 2015 -0700

      Input: sur40 - add dependency on VIDEO_V4L2

      Fix build errors due to missing Kconfig dependency.

      drivers/built-in.o: In function `sur40_disconnect':
      sur40.c:(.text+0x22be6e): undefined reference to `video_unregister_device'
      sur40.c:(.text+0x22be77): undefined reference to `v4l2_device_unregister'
      drivers/built-in.o: In function `sur40_process_video':
      sur40.c:(.text+0x22c1d4): undefined reference to `v4l2_get_timestamp'
      drivers/built-in.o: In function `sur40_probe':
      sur40.c:(.text+0x22ca82): undefined reference to `v4l2_device_register'
      sur40.c:(.text+0x22cb1a): undefined reference to `v4l2_device_unregister'
      sur40.c:(.text+0x22cbf7): undefined reference to 
`video_device_release_empty'
      sur40.c:(.text+0x22cc53): undefined reference to `__video_register_device'
      sur40.c:(.text+0x22cc90): undefined reference to `video_unregister_device'
      drivers/built-in.o: In function `sur40_vidioc_querycap':
      sur40.c:(.text+0x22ccb0): undefined reference to `video_devdata'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 7379047d5585187d1288486d4627873170d0005a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:08:42 2015 -0700

      Linux 4.3-rc6

  commit c44b325568ae58bcb10d2f5c198ec471d9ab1bce
  Merge: 81429a6 56d4b8a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 12:07:48 2015 -0700

      Merge branch 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux

      Pull i2c fixes from Wolfram Sang:
       "Here are some bugfixes for the I2C subsystem.

        Kieran found a flaw in the recently renewed wake irq handling.  Mika
        handled a user bug report where the ACPI info turned out to be
        unusable.  I updated MAINTAINERS so that such bug reports will sooner
        get to the right people.  Geert pointed me to a problem of some i2c
        drivers regarding PM which I fixed"

      * 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:
        i2c: designware: Do not use parameters from ACPI on Dell Inspiron 7348
        MAINTAINERS: add maintainers for Synopsis Designware I2C drivers
        i2c: designware-platdrv: enable RuntimePM before registering to the core
        i2c: s3c2410: enable RuntimePM before registering to the core
        i2c: rcar: enable RuntimePM before registering to the core
        i2c: return probe deferred status on dev_pm_domain_attach

  commit 56d4b8a24cef5d66f0d10ac778a520d3c2c68a48
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 12:06:54 2015 +0300

      i2c: designware: Do not use parameters from ACPI on Dell Inspiron 7348

      ACPI SSCN/FMCN methods were originally added because then the platform can
      provide the most accurate HCNT/LCNT values to the driver. However, this
      seems not to be true for Dell Inspiron 7348 where using these causes the
      touchpad to fail in boot:

        i2c_hid i2c-DLL0675:00: failed to retrieve report from device.
        i2c_designware INT3433:00: i2c_dw_handle_tx_abort: lost arbitration
        i2c_hid i2c-DLL0675:00: failed to retrieve report from device.
        i2c_designware INT3433:00: controller timed out

      The values received from ACPI are (in fast mode):

        HCNT: 72
        LCNT: 160

      this translates to following timings (input clock is 100MHz on Broadwell):

        tHIGH: 720 ns (spec min 600 ns)
        tLOW: 1600 ns (spec min 1300 ns)
        Bus period: 2920 ns (assuming 300 ns tf and tr)
        Bus speed: 342.5 kHz

      Both tHIGH and tLOW are within the I2C specification.

      The calculated values when ACPI parameters are not used are (in fast 
mode):

        HCNT: 87
        LCNT: 159

      which translates to:

        tHIGH: 870 ns (spec min 600 ns)
        tLOW: 1590 ns (spec min 1300 ns)
        Bus period 3060 ns (assuming 300 ns tf and tr)
        Bus speed 326.8 kHz

      These values are also within the I2C specification.

      Since both ACPI and calculated values meet the I2C specification timing
      requirements it is hard to say why the touchpad does not function properly
      with the ACPI values except that the bus speed is higher in this case (but
      still well below the max 400kHz).

      Solve this by adding DMI quirk to the driver that disables using ACPI
      parameters on this particulare machine.

      Reported-by: Pavel Roskin <plroskin@xxxxxxxxx>
      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Tested-by: Pavel Roskin <plroskin@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx

  commit 3bd29515d1cad26fa85a1a9b442de8816c1f5c54
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 16 15:42:55 2015 -0700

      x86/entry/32: Fix FS and GS restore in opportunistic SYSEXIT

      We either need to restore them before popping and thus changing
      ESP, or we need to adjust the offsets.  The former is simpler.

      Reported-and-tested-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 5f310f739b4c x86/entry/32: ("Re-implement SYSENTER using the new C 
path")
      Link: 
http://lkml.kernel.org/r/461e5c7d8fa3821529893a4893ac9c4bc37f9e17.1445035014.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 657c1eea0019e80685a84cbb1919794243a187c9
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 16 15:42:54 2015 -0700

      x86/entry/32: Fix entry_INT80_32() to expect interrupts to be on

      When I rewrote entry_INT80_32, I thought that int80 was an
      interrupt gate.  It's a trap gate.  *facepalm*

      Thanks to Brian Gerst for pointing out that it's better to
      change the entry code than to change the gate type.

      Suggested-by: Brian Gerst <brgerst@xxxxxxxxx>
      Reported-and-tested-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 150ac78d63af ("x86/entry/32: Switch INT80 to the new C syscall 
path")
      Link: 
http://lkml.kernel.org/r/dc09d9b574a5c1dcca996847875c73f8341ce0ad.1445035014.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f235f664a8afabccf863a5dee4777d2d7b676fda
  Author: Scot Doyle <lkml14@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 15:08:10 2015 +0000

      fbcon: initialize blink interval before calling fb_set_par

      Since commit 27a4c827c34ac4256a190cc9d24607f953c1c459
          fbcon: use the cursor blink interval provided by vt

      a PPC64LE kernel fails to boot when fbcon_add_cursor_timer uses an
      uninitialized ops->cur_blink_jiffies. Prevent by initializing
      in fbcon_init before the call to info->fbops->fb_set_par.

      Reported-and-tested-by: Alistair Popple <alistair@xxxxxxxxxxxx>
      Signed-off-by: Scot Doyle <lkml14@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> [v4.2]
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit f967fc8f165fadb72166f2bd4785094b3ca21307
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:14:56 2015 +0200

      Revert "serial: 8250_dma: don't bother DMA with small transfers"

      This reverts commit 9119fba0cfeda6d415c9f068df66838a104b87cb.

      This commit prevents from sending "big" file using Bluetooth.
      When sending a lot of data quickly through the Bluetooth interface, and
      after a variable amount of data sent, transfer fails with error:
          kernel: [  415.247453] Bluetooth: hci0 hardware error 0x00

      Found on T100TA.

      After reverting this commit, send works fine for any file size.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Fixes: 9119fba0cfed (serial: 8250_dma: don't bother DMA with small 
transfers)
      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx>
      Acked-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 324700604b04954510ddd4c6841a88a06938a28c
  Author: Vladimir Zapolskiy <vz@xxxxxxxxx>
  Date:   Sat Oct 17 11:30:15 2015 -0700

      Input: lpc32xx_ts - fix warnings caused by enabling unprepared clock

      If common clock framework is configured, the driver generates a warning,
      which is fixed by this change:

          root@devkit3250:~# cat /dev/input/touchscreen0
          ------------[ cut here ]------------
          WARNING: CPU: 0 PID: 720 at drivers/clk/clk.c:727 
clk_core_enable+0x2c/0xa4()
          Modules linked in: sc16is7xx snd_soc_uda1380
          CPU: 0 PID: 720 Comm: cat Not tainted 4.3.0-rc2+ #199
          Hardware name: LPC32XX SoC (Flattened Device Tree)
          Backtrace:
          [<>] (dump_backtrace) from [<>] (show_stack+0x18/0x1c)
          [<>] (show_stack) from [<>] (dump_stack+0x20/0x28)
          [<>] (dump_stack) from [<>] (warn_slowpath_common+0x90/0xb8)
          [<>] (warn_slowpath_common) from [<>] (warn_slowpath_null+0x24/0x2c)
          [<>] (warn_slowpath_null) from [<>] (clk_core_enable+0x2c/0xa4)
          [<>] (clk_core_enable) from [<>] (clk_enable+0x24/0x38)
          [<>] (clk_enable) from [<>] (lpc32xx_setup_tsc+0x18/0xa0)
          [<>] (lpc32xx_setup_tsc) from [<>] (lpc32xx_ts_open+0x14/0x1c)
          [<>] (lpc32xx_ts_open) from [<>] (input_open_device+0x74/0xb0)
          [<>] (input_open_device) from [<>] (evdev_open+0x110/0x16c)
          [<>] (evdev_open) from [<>] (chrdev_open+0x1b4/0x1dc)
          [<>] (chrdev_open) from [<>] (do_dentry_open+0x1dc/0x2f4)
          [<>] (do_dentry_open) from [<>] (vfs_open+0x6c/0x70)
          [<>] (vfs_open) from [<>] (path_openat+0xb4c/0xddc)
          [<>] (path_openat) from [<>] (do_filp_open+0x40/0x8c)
          [<>] (do_filp_open) from [<>] (do_sys_open+0x124/0x1c4)
          [<>] (do_sys_open) from [<>] (SyS_open+0x2c/0x30)
          [<>] (SyS_open) from [<>] (ret_fast_syscall+0x0/0x38)

      Signed-off-by: Vladimir Zapolskiy <vz@xxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 81429a6dbcbf3a01830de42dbdf0d9acbe68e1c1
  Merge: 16c8b9c 0701c53 56fd16c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 17 08:47:27 2015 -0700

      Merge branches 'irq-urgent-for-linus' and 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq/timer fixes from Thomas Gleixner:
       "irq: a fix for the new hierarchical MSI interrupt handling which
        unbreaks PCI=n configurations.

        timers: a fix for the new hrtimer clock offset update mechanism to
        ensure that the boot time offset is respected"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        genirq/msi: Do not use pci_msi_[un]mask_irq as default methods

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        timekeeping: Increment clock_was_set_seq in timekeeping_init()

  commit f0a0a978b66fea782a52b0a7075b3fa9ab27ad0a
  Merge: c8d71d0 4be3158
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Sat Oct 17 14:11:08 2015 +0200

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

      This merge resolves conflicts with 75aec9df3a78 ("bridge: Remove
      br_nf_push_frag_xmit_sk") as part of Eric Biederman's effort to improve
      netns support in the network stack that reached upstream via David's
      net-next tree.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

      Conflicts:
        net/bridge/br_netfilter_hooks.c

  commit f33e9c434b8ce833bd3dd39436bd0799c3e1d1c5
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 9 12:16:02 2015 +0530

      ARC: smp: Move default boot kick/wait code out of MCIP into common code

      For non halt-on-reset case, all cores start of simultaneously in @stext.
      Master core0 proceeds with kernel boot, while other spin-wait on
      @wake_flag being set by master once it is ready. So NO hardware assist
      is needed for master to "kick" the others.

      This patch moves this soft implementation out of mcip.c (as there is no
      hardware assist) into common smp.c

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit d0890ea5b68f63d7b8641455dc5534886fee2fa1
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 2 19:24:20 2015 +0530

      ARC: boot log: decode more mmu config items

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 964cf28f9d10f4e5229e4365258c292bc5c856b2
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 2 19:20:27 2015 +0530

      ARC: boot log: move helper macros to header for reuse

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit b598e17f6a7a3a9bb6e0953ef586ee3697b59fce
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 2 12:25:35 2015 +0530

      ARC: mm: compute TLB size as needed from ways * sets

      This frees up some bits to hold more high level info such as PAE being
      present, w/o increasing the size of already bloated cpuinfo struct

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit c583ee4fb013bcf3501b9f10c252ea44cf7c657a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Sep 29 16:01:13 2015 +0530

      ARC: mm: MMU v1..v3 only selectable for ARCompact ISA based cores

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 5c35ee642a1d1341b225808b53fc69df2245b87e
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Sep 29 16:05:48 2015 +0530

      ARC: make write_aux_reg safer against macro substitution

      It was generating warnings when called as write_aux_reg(x, paddr >> 32)

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 9fabcc636bf57dcb9c6fc5b1f34861c548944fd4
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:52:27 2015 +0530

      ARC: [arcompact] entry.S: Elide extra check/branch in exception ret path

      This is done by improving the laddering logic !

      Before:

         if Exception
            goto excep_or_pure_k_ret

         if !Interrupt(L2)
            goto l1_chk
         else
            INTERRUPT_EPILOGUE 2

       l1_chk:
         if !Interrupt(L1)  (i.e. pure kernel mode)
            goto excep_or_pure_k_ret
         else
            INTERRUPT_EPILOGUE 1

       excep_or_pure_k_ret:
         EXCEPTION_EPILOGUE

      Now:

         if !Interrupt(L1 or L2) (i.e. exception or pure kernel mode)
            goto excep_or_pure_k_ret

        ; guaranteed to be an interrupt
         if !Interrupt(L2)
            goto l1_ret
         else
            INTERRUPT_EPILOGUE 2

       ; by virtue of above, no need to chk for L1 active
       l1_ret:
          INTERRUPT_EPILOGUE 1

       excep_or_pure_k_ret:
          EXCEPTION_EPILOGUE

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 5f888087455c5199195c2ba17b91ac7285a33921
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Sun Sep 6 19:11:12 2015 +0530

      ARC: [arcompact] entry.S: Document preemption games for L2 intr

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 55a2ae775ab4fe7aefa736e0fae6b8d4bd8aaab5
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Sat Sep 5 23:08:31 2015 +0530

      ARC: [arcompact] entry.S: Improve early return from exception

      The requirement is to
       - Reenable Exceptions (AE cleared)
       - Reenable Interrupts (E1/E2 set)

      We need to do wiggle these bits into ERSTATUS and call RTIE.

      Prev version used the pre-exception STATUS32 as starting point for what
      goes into ERSTATUS. This required explicit fixups of U/DE/L bits.

      Instead, use the current (in-exception) STATUS32 as starting point.
      Being in exception handler U/DE/L can be safely assumed to be correct.
      Only AE/E1/E2 need to be fixed.

      So the new implementation is slightly better
       -Avoids read form memory
       -Is 4 bytes smaller for the typical 1 level of intr configuration
       -Depicts the semantics more clearly

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 9dbd3d9bfd56707f9b1ccc301506e2fac0e95795
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Sat Sep 5 22:47:30 2015 +0530

      ARC: [arcompact] don't check for hard isr calling local_irq_enable()

      Historically this was done by ARC IDE driver, which is long gone.
      IRQ core is pretty robust now and already checks if IRQs are enabled
      in hard ISRs. Thus no point in checking this in arch code, for every
      call of irq enabled.

      Further if some driver does do that - let it bring down the system so we
      notice/fix this sooner than covering up for sucker

      This makes local_irq_enable() - for L1 only case atleast simple enough
      so we can inline it.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit c7119d56d2755fc2770b0e2c1c4385e10f4c9161
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Oct 15 08:04:45 2015 +0530

      ARCv2: mm: THP: flush_pmd_tlb_range make SMP safe

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 722fe8fd365a08bd53e9dd105009ab810107b02d
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Feb 27 19:36:35 2015 +0530

      ARCv2: mm: THP: Implement flush_pmd_tlb_range() optimization

      Implement the TLB flush routine to evict a sepcific Super TLB entry,
      vs. moving to a new ASID on every such flush.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 12ebc1581ad114543ae822aa3a12f76072e2f902
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Feb 20 10:36:28 2015 +0530

      mm,thp: introduce flush_pmd_tlb_range

      ARCHes with special requirements for evicting THP backing TLB entries
      can implement this.

      Otherwise also, it can help optimize TLB flush in THP regime.
      stock flush_tlb_range() typically has optimization to nuke the entire
      TLB if flush span is greater than a certain threshhold, which will
      likely be true for a single huge page. Thus a single thp flush will
      invalidate the entrire TLB which is not desirable.

      e.g. see arch/arc: flush_pmd_tlb_range

      Acked-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151009100816.GC7873@node
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit bd5e88ad72b26ebf7ecb231bc22ceecd6cbdb951
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Jul 9 17:22:44 2015 +0530

      mm,thp: reduce ifdef'ery for THP in generic code

      - pgtable-generic.c: Fold individual #ifdef for each helper into a top
        level #ifdef. Makes code more readable

      - Converted the stub helpers for !THP to BUILD_BUG() vs. runtime BUG()

      Acked-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151009133450.GA8597@node
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 52585bcc2505d6f888d4ac68ca6c55f6d1ad736a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Jul 9 17:19:30 2015 +0530

      mm: group pte related helpers together

      This reduces/simplifies the diff for the next patch which moves THP
      specific code.

      No semantical changes !

      Acked-by: Kirill A. Shutemov kirill.shutemov@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442918096-17454-9-git-send-email-vgupta@xxxxxxxxxxxx
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 443a6312832fe7362edffed960204f750b230f46
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Aug 27 14:03:20 2015 +0530

      Documentation/features/vm: THP now supported by ARC

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 6ce187985f31c441f7fc10a4d265182d05bc7ad3
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Mar 12 19:48:03 2015 +0530

      ARCv2: mm: THP: boot validation/reporting

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit fe6c1b8611aa3a79a937a5e3b85a16576b6ad159
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Jul 8 18:43:47 2014 +0530

      ARCv2: mm: THP support

      MMUv4 in HS38x cores supports Super Pages which are basis for Linux THP
      support.

      Normal and Super pages can co-exist (ofcourse not overlap) in TLB with a
      new bit "SZ" in TLB page desciptor to distinguish between them.
      Super Page size is configurable in hardware (4K to 16M), but fixed once
      RTL builds.

      The exact THP size a Linx configuration will support is a function of:
       - MMU page size (typical 8K, RTL fixed)
       - software page walker address split between PGD:PTE:PFN (typical
         11:8:13, but can be changed with 1 line)

      So for above default, THP size supported is 8K * 256 = 2M

      Default Page Walker is 2 levels, PGD:PTE:PFN, which in THP regime
      reduces to 1 level (as PTE is folded into PGD and canonically referred
      to as PMD).

      Thus thp PMD accessors are implemented in terms of PTE (just like sparc)

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit c7c49b8fde26b74277188bdc6c9dca38db6fa35b
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 18:52:25 2015 -0700

      net: add pfmemalloc check in sk_add_backlog()

      Greg reported crashes hitting the following check in __sk_backlog_rcv()

        BUG_ON(!sock_flag(sk, SOCK_MEMALLOC));

      The pfmemalloc bit is currently checked in sk_filter().

      This works correctly for TCP, because sk_filter() is ran in
      tcp_v[46]_rcv() before hitting the prequeue or backlog checks.

      For UDP or other protocols, this does not work, because the sk_filter()
      is ran from sock_queue_rcv_skb(), which might be called _after_ backlog
      queuing if socket is owned by user by the time packet is processed by
      softirq handler.

      Fixes: b4b9e35585089 ("netvm: set PF_MEMALLOC as appropriate during SKB 
processing")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Greg Thelen <gthelen@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 00db674bedd68ff8b5afae9030ff5e04d45d1b4a
  Author: Nikolay Borisov <kernel@xxxxxxxx>
  Date:   Fri Oct 16 09:40:28 2015 +0300

      netfilter: ipset: Fix sleeping memory allocation in atomic context

      Commit 00590fdd5be0 introduced RCU locking in list type and in
      doing so introduced a memory allocation in list_set_add, which
      is done in an atomic context, due to the fact that ipset rcu
      list modifications are serialised with a spin lock. The reason
      why we can't use a mutex is that in addition to modifying the
      list with ipset commands, it's also being modified when a
      particular ipset rule timeout expires aka garbage collection.
      This gc is triggered from set_cleanup_entries, which in turn
      is invoked from a timer thus requiring the lock to be bh-safe.

      Concretely the following call chain can lead to "sleeping function
      called in atomic context" splat:
      call_ad -> list_set_uadt -> list_set_uadd -> kzalloc(, GFP_KERNEL).
      And since GFP_KERNEL allows initiating direct reclaim thus
      potentially sleeping in the allocation path.

      To fix the issue change the allocation type to GFP_ATOMIC, to
      correctly reflect that it is occuring in an atomic context.

      Fixes: 00590fdd5be0 ("netfilter: ipset: Introduce RCU locking in list 
type")
      Signed-off-by: Nikolay Borisov <kernel@xxxxxxxx>
      Acked-by: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit fd7cd061adcf5f7503515ba52b6a724642a839c8
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:30:13 2015 +0300

      xhci: Add spurious wakeup quirk for LynxPoint-LP controllers

      We received several reports of systems rebooting and powering on
      after an attempted shutdown. Testing showed that setting
      XHCI_SPURIOUS_WAKEUP quirk in addition to the XHCI_SPURIOUS_REBOOT
      quirk allowed the system to shutdown as expected for LynxPoint-LP
      xHCI controllers. Set the quirk back.

      Note that the quirk was originally introduced for LynxPoint and
      LynxPoint-LP just for this same reason. See:

      commit 638298dc66ea ("xhci: Fix spurious wakeups after S5 on Haswell")

      It was later limited to only concern HP machines as it caused
      regression on some machines, see both bug and commit:

      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=66171
      commit 6962d914f317 ("xhci: Limit the spurious wakeup fix only to HP 
machines")

      Later it was discovered that the powering on after shutdown
      was limited to LynxPoint-LP (Haswell-ULT) and that some non-LP HP
      machine suffered from spontaneous resume from S3 (which should
      not be related to the SPURIOUS_WAKEUP quirk at all). An attempt
      to fix this then removed the SPURIOUS_WAKEUP flag usage completely.

      commit b45abacde3d5 ("xhci: no switching back on non-ULT Haswell")

      Current understanding is that LynxPoint-LP (Haswell ULT) machines
      need the SPURIOUS_WAKEUP quirk, otherwise they will restart, and
      plain Lynxpoint (Haswell) machines may _not_ have the quirk
      set otherwise they again will restart.

      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Cc: Takashi Iwai <tiwai@xxxxxxx>
      Cc: Oliver Neukum <oneukum@xxxxxxxx>
      [Added more history to commit message -Mathias]
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 3b4739b8951d650becbcd855d7d6f18ac98a9a85
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:30:12 2015 +0300

      xhci: handle no ping response error properly

      If a host fails to wake up a isochronous SuperSpeed device from U1/U2
      in time for a isoch transfer it will generate a "No ping response error"
      Host will then move to the next transfer descriptor.

      Handle this case in the same way as missed service errors, tag the
      current TD as skipped and handle it on the next transfer event.

      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit e210c422b6fdd2dc123bedc588f399aefd8bf9de
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:30:11 2015 +0300

      xhci: don't finish a TD if we get a short transfer event mid TD

      If the difference is big enough between the bytes asked and received
      in a bulk transfer we can get a short transfer event pointing to a TRB in
      the middle of the TD. We don't want to handle the TD yet as we will anyway
      receive a new event for the last TRB in the TD.

      Hold off from finishing the TD and removing it from the list until we
      receive an event for the last TRB in the TD

      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 4301de3b0ac4614fdf629fa414fb94f598e7ad6f
  Merge: 25cb62b b94e228
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 21:15:52 2015 -0700

      Merge tag 'iio-fixes-for-4.3a' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jic23/iio into staging-linus

      Jonathan writes:

      First set of IIO fixes for the 4.3 cycle.

      * twl4030 - incorrect readings for some channels due to a failure to
        initialize a bias regulator or configure the lines for input rather than
        USB use.
      * lis3lv02 - a missunderstanding of the way the interrupts worked on this
        chip lead to activation of the wrong interrupt.
      * sca3000 - an old bug meant that memory corruption could occur in the
        hardware ring buffer readout function.
      * mxs-lradc - wrong temp offset.

  commit 16c8b9cb246474ba4522182fc0d24caddcbba0dd
  Merge: 4f3f957 a487c03
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 17:39:27 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

      Pull input fixes from Dmitry Torokhov:
       "Just two small fixups to ads7846 touchscreen controller driver and
        Cypress touchpad driver"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
        Input: cyapa - fix the copy paste error on electrodes_rx value
        Input: ads7846 - correct the value got from SPI

  commit 4f3f9573b62be8953ac3d9888c253e0744af7195
  Merge: 045ce74 e79b202
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 17:11:14 2015 -0700

      Merge tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux

      Pull clk fix from Stephen Boyd:
       "Just one revert for Armada XP devices: the conversion to
        of_clk_get_parent_name() wasn't a direct translation, so we
        revert back to of_clk_get() + __clk_get_name().

        We could make of_clk_get_parent_name() more robust, but that
        may have unintended side-effects, so we'll do that in the
        next version"

      * tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:
        Partially revert "clk: mvebu: Convert to clk_hw based provider APIs"

  commit b28fec1324bf8f5010d2c3c5d57db4115bda66d4
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sat Oct 17 08:08:56 2015 +0900

      thermal: exynos: Fix register read in TMU

      The value of emul_con was getting overwritten if the selected soc is
      SOC_ARCH_EXYNOS5260. And so as a result we were reading from the wrong
      register in the case of SOC_ARCH_EXYNOS5260.

      Fixes: 488c7455d74c ("thermal: exynos: Add the support for Exynos5433 
TMU")
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Reviewed-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>
      Acked-by: Lukasz Majewski <l.majewski@xxxxxxxxxxx>
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit ec879f1272283c040bc70e1a1fff5edbb547be59
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 17:51:26 2015 +0300

      pinctrl: baytrail: Fix compilation warnings when !CONFIG_PM

      When CONFIG_PM is not set we get following compilation warnings:

       warning: ââ?¬Ë?byt_gpio_runtime_suspendââ?¬â?¢ defined but not used 
[-Wunused-function]
       warning: ââ?¬Ë?byt_gpio_runtime_resumeââ?¬â?¢ defined but not used 
[-Wunused-function]

      Fix this by guarding byt_gpio_runtime_suspend()/byt_gpio_runtime_resume()
      with #ifdef CONFIG_PM.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit f487bbf309759153f56bac7d7ba5ee63196ce584
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 17:51:25 2015 +0300

      pinctrl: intel: Fix compilation warning when !CONFIG_PM_SLEEP

      We get following warning when CONFIG_PM_SLEEP is not set

        warning: ââ?¬Ë?intel_gpio_irq_initââ?¬â?¢ defined but not used 
[-Wunused-function]

      Since the function is only called from intel_pinctrl_resume() move it
      inside CONFIG_PM_SLEEP guard as well.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 90b665f627b18822a7bbebeff44ce730ccf74275
  Author: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 00:20:21 2015 +0300

      gpiolib: Add and use OF_GPIO_SINGLE_ENDED flag

      The flag matches the DT GPIO_SINGLE_ENDED flag and allows drivers to
      parse and use the DT flag to handle single-ended (open-drain or
      open-source) GPIOs.

      Signed-off-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 923b93e451db876d1479d3e4458fce14fec31d1c
  Author: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 00:20:20 2015 +0300

      gpiolib: Split GPIO flags parsing and GPIO configuration

      When requesting a GPIO through the legacy or the gpiod_* API the
      gpiochip request operation is first called and then the GPIO flags are
      parsed and the GPIO is configured. This prevents the gpiochip from
      rejecting the request if the flags are not supported by the device.

      To fix this split the parse-and-configure operation in two and parse
      flags before requesting the GPIO.

      Signed-off-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 11091fb0a1227d569d09353e1ce1f88694a033dc
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:39:31 2015 +0200

      pinctrl: qcom: ssbi: fix compilation with DEBUG_FS=n

      The DEBUG_FS=n #defines for the dbg_show functions were missed when
      renaming the driver from msm_ to pm8xxx_, causing it to break the build
      when DEBUG_FS isn't enabled:

        CC [M]  drivers/pinctrl/qcom/pinctrl-ssbi-gpio.o
      drivers/pinctrl/qcom/pinctrl-ssbi-gpio.c:597:14: error: 
ââ?¬Ë?pm8xxx_gpio_dbg_showââ?¬â?¢ undeclared here (not in a function)
        .dbg_show = pm8xxx_gpio_dbg_show,

      Fix this by renaming them correctly.

      Fixes: b4c45fe974bc ("pinctrl: qcom: ssbi: Family A gpio & mpp drivers")
      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Reviewed-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 98c85d583a5dee70d75faed3eb79851dd0a2e2fe
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:19 2015 +0200

      pinctrl: replace trivial implementations of gpio_chip request/free

      Replace all trivial request/free callbacks that do nothing but call into
      pinctrl code with the generic versions.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Acked-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Acked-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Eric Anholt <eric@xxxxxxxxxx>
      Acked-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Acked-by: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Acked-by: Baruch Siach <baruch@xxxxxxxxxx>
      Acked-by: Matthias Brugger <matthias.bgg@xxxxxxxxx>
      Acked-by: Lee Jones <lee@xxxxxxxxxx>
      Acked-by: Laxman Dewangan <ldewangan@xxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 31831f41bfd1e340bad66014a1b7ccd761ee51cf
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:18 2015 +0200

      gpio: pl061: use the generic request/free implementations

      Instead of storing in the chip data whether the chip uses pinctrl and
      conditionally call pinctrl_{request,free}_gpio, just don't populate
      request/free in that case.

      This makes the implementations trivial and the same as the generic
      implementations, thus we can just use them.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit da4002ee901205df4238dd9a63e5598064a0cd17
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:17 2015 +0200

      gpio: gpio-xz: use the generic request/free implementations

      Instead of storing in the chip data whether the chip uses pinctrl and
      conditionally call pinctrl_{request,free}_gpio, just don't populate
      request/free in that case.

      This makes the implementations trivial and the same as the generic
      implementations, thus we can just use them.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 203f0daafdf228a7e4e90a714a2a085884d91ea4
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:16 2015 +0200

      gpio: replace trivial implementations of request/free with generic one

      Replace all trivial request/free callbacks that do nothing but call into
      pinctrl code with the generic versions.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Reviewed-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Acked-by: James Hogan <james.hogan@xxxxxxxxxx>
      Acked-by: Stefan Agner <stefan@xxxxxxxx>
      Acked-by: Joachim Eastwood <manabian@xxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c771c2f484857f3b1fc81d180485e96b7cb67c17
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:15 2015 +0200

      gpiolib: provide generic request/free implementations

      Provide generic request/free implementations that pinctrl aware gpio
      drivers can use instead of open coding if they use a 1:1 pin to gpio
      signal mapping.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 045ce743498881b39e672da948c210c769209515
  Merge: 6aa8ca4 ba30670
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 13:03:05 2015 -0700

      Merge tag 'dm-4.3-fixes-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull device mapper fixes from Mike Snitzer:
       "Two DM target error path cleanup fixes (one for stable in DM thinp and
        one for a v4.3-rc5 thinko in DM snapshot)"

      * tag 'dm-4.3-fixes-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm thin: fix missing pool reference count decrement in pool_ctr error 
path
        dm snapshot persistent: fix missing cleanup in persistent_ctr error path

  commit 3fa508cd233da76eb00377440600f53eebfec08a
  Author: Wei Chen <Wei.Chen@xxxxxxx>
  Date:   Fri Oct 9 06:31:18 2015 +0000

      pinctrl: atlas7: support atlas7 step B changes

      The the pin groups and pin functions have been changed
      in atlas7 step B soc. We have to update the driver
      to support step B chip.

      Changes:
      1. add 5 jtag pins to IOC_TOP:
        "jtag_tdo", "jtag_tms","jtag_tck", "jtag_tdi", "jtag_trstn"
        these 5 pins can be mutiplex with other functions, so we
        have to conver these 5 pins in pinmux.
      2. add pin groups for audio digmic, audio spdif, can transceiver
        en, can transceiver stb, i2s0, i2s1 and jtag.
      3. serval pins can be located to more PADs:
        audio_uart0_urfs, audio_uart1_urfs, audio_uart2_urfs,
        audio_uart2_urxd, audio_uart2_usclk, audio_uart2_utfs,
        audio_uart2_utxd, can0_rxd, can0_txd, can1_rxd, can1_txd
        jtag_ntrst, jtag_swdiotms, jtag_tck, jtag_tdi, jtag_tdo,
        pw_cko0, pw_cko1, pw_i2s01, pw_pwm0, pw_pwm1, sd2_cdb,
        sd2_wpb, uart2_cts, uart2_rts, uart2_rxd, uart2_txd,
        uart3_cts, uart3_rts, uart3_rxd, uart3_txd, uart4_cts,
        uart4_rts, usb0_drvvbus, usb1_drvvbus.

      Because of Changes#3, some functions should have more than one
      pin groups. So we have to split the original pin group to serval
      pin groups.

      For example:
      audio_uart0 has 5 pins, on STEPA, each of these 5 pins only has
      one related PAD. But on STEPB, audio_uart0_urfs has 4 related
      PAD.
      So we place the 4 pins with one PAD into a single pin group:
        audio_uart0_basic_group.
      and place urfs pin wtih different PADs to 4 different pin groups:
        audio_uart0_urfs_group0, ..., audio_uart0_urfs_group3

      A full audio_uart0 pin group can be:
        pinctrl-0 = <&audio_uart0_basic_group &audio_uart0_urfs_group0>;
      If audio_uart0 pin group encountered some confiction, we only have
      to change the urfs group:
        pinctrl-0 = <&audio_uart0_basic_group &audio_uart0_urfs_group2>;

      Signed-off-by: Wei Chen <Wei.Chen@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 6aa8ca4df0c1e2095c3f9f6fc28d85a991787879
  Merge: 59bcce1 dc6c5fb
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:55:34 2015 -0700

      Merge branch 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes from Chris Mason:
       "I have two more bug fixes for btrfs.

        My commit fixes a bug we hit last week at FB, a combination of lots of
        hard links and an admin command to resolve inode numbers.

        Dave is adding checks to make sure balance on current kernels ignores
        filters it doesn't understand.  The penalty for being wrong is just
        doing more work (not crashing etc), but it's a good fix"

      * 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        btrfs: fix use after free iterating extrefs
        btrfs: check unsupported filters in balance arguments

  commit 59bcce121691da06c6b027088d38b76ba893e0cb
  Merge: a4c4c49 e30b757
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:47:02 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fixes from Sage Weil:
       "Just two small items from Ilya:

        The first patch fixes the RBD readahead to grab full objects.  The
        second fixes the write ops to prevent undue promotion when a cache
        tier is configured on the server side"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        rbd: use writefull op for object size writes
        rbd: set max_sectors explicitly

  commit a4c4c49a611321d1b10379f72f1267802437fc07
  Merge: 8b7b56f fa54823
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:25:54 2015 -0700

      Merge tag 'pm+acpi-4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull power management and ACPI fixes from Rafael Wysocki:
       "These fix two recent regressions (ACPICA, the generic power domains
        framework) and one crash that may happen on specific hardware
        supported since 4.1 (intel_pstate).

        Specifics:

         - Fix a regression introduced by a recent ACPICA cleanup that
           uncovered a latent bug (Lv Zheng).

         - Fix a recent regression in the generic power domains framework that
           may cause it to violate PM QoS latency constraints in some cases
           (Ulf Hansson).

         - Fix an intel_pstate driver crash on the Knights Landing chips that
           do not update the MPERF counter as often as expected by the driver
           which may result in a divide by 0 (Srinivas Pandruvada)"

      * tag 'pm+acpi-4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL)
        ACPICA: Tables: Fix FADT dependency regression
        PM / Domains: Fix validation of latency constraints in genpd governor

  commit 8b7b56f37b13323d459aeec5c5290c2141366c84
  Merge: ebb65c8 d549f54
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:19:11 2015 -0700

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Nothing too crazy or exciting:

         - two MAINTAINERS entries that I didn't see the point in delaying.
         - one drm mst fix to stop sending uninitialised data to monitors
         - two amdgpu fixes
         - one radeon mst tiling fix
         - one vmwgfx regression fix
         - one virtio warning fix.

        I have found one locking problem that needs a bit of reorg to fix, but
        I'm not sure it's worth putting in -fixes as I don't think we've seen
        it hit in the real world ever, I just found it using the virtio-gpu
        driver when working on it.  I'll possibly send it next week once I've
        time to discuss with Daniel"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/virtio: use %llu format string form atomic64_t
        MAINTAINERS: Add myself as maintainer for the gma500 driver
        MAINTAINERS: add a maintainer for the atmel-hlcdc DRM driver
        drm/amdgpu: Keep the pflip interrupts always enabled v7
        drm/amdgpu: adjust default dispclk (v2)
        drm/dp/mst: make mst i2c transfer code more robust.
        drm/radeon: attach tile property to mst connector
        drm/vmwgfx: Fix kernel NULL pointer dereference on older hardware

  commit 6a3b764b8dc781c36f0f94287df5b2ec23b8fdd7
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Fri Oct 16 12:16:21 2015 -0700

      ARM: OMAP2+: Fix oops with LPAE and more than 2GB of memory

      On boards with more than 2GB of RAM booting goes wrong with things not
      working and we're getting lots of l3 warnings:

      WARNING: CPU: 0 PID: 1 at drivers/bus/omap_l3_noc.c:147
      l3_interrupt_handler+0x260/0x384()
      44000000.ocp:L3 Custom Error: MASTER MMC6 TARGET DMM1 (Idle):
      Data Access in User mode during Functional access
      ...
      [<c044e158>] (scsi_add_host_with_dma) from [<c04705c8>]
      (ata_scsi_add_hosts+0x5c/0x18c)
      [<c04705c8>] (ata_scsi_add_hosts) from [<c046b13c>]
      (ata_host_register+0x150/0x2cc)
      [<c046b13c>] (ata_host_register) from [<c046b38c>]
      (ata_host_activate+0xd4/0x124)
      [<c046b38c>] (ata_host_activate) from [<c047f42c>]
      (ahci_host_activate+0x5c/0x194)
      [<c047f42c>] (ahci_host_activate) from [<c0480854>]
      (ahci_platform_init_host+0x1f0/0x3f0)
      [<c0480854>] (ahci_platform_init_host) from [<c047c9dc>]
      (ahci_probe+0x70/0x98)
      [<c047c9dc>] (ahci_probe) from [<c04220cc>]
      (platform_drv_probe+0x54/0xb4)

      Let's fix the issue by enabling ZONE_DMA for LPAE. Note that we need to
      limit dma_zone_size to 2GB as the rest of the RAM is beyond the 4GB limit.

      Let's also fix things for dra7 as done in similar patches in the TI tree
      by Lokesh Vutla <lokeshvutla@xxxxxx>.

      Reviewed-by: Lokesh Vutla <lokeshvutla@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit ebb65c81e1042c0d73cb73738c607da54add739a
  Merge: 3d87518 abb39bc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:07:43 2015 -0700

      Merge tag 'powerpc-4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixes from Michael Ellerman:
       - Re-enable CONFIG_SCSI_DH in our defconfigs
       - Remove unused os_area_db_id_video_mode
       - cxl: fix leak of IRQ names in cxl_free_afu_irqs() from Andrew
       - cxl: fix leak of ctx->irq_bitmap when releasing context via kernel API 
from Andrew
       - cxl: fix leak of ctx->mapping when releasing kernel API contexts from 
Andrew
       - cxl: Workaround malformed pcie packets on some cards from Philippe
       - cxl: Fix number of allocated pages in SPA from Christophe Lombard
       - Fix checkstop in native_hpte_clear() with lockdep from Cyril
       - Panic on unhandled Machine Check on powernv from Daniel
       - selftests/powerpc: Fix build failure of load_unaligned_zeropad test

      * tag 'powerpc-4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        selftests/powerpc: Fix build failure of load_unaligned_zeropad test
        powerpc/powernv: Panic on unhandled Machine Check
        powerpc: Fix checkstop in native_hpte_clear() with lockdep
        cxl: Fix number of allocated pages in SPA
        cxl: Workaround malformed pcie packets on some cards
        cxl: fix leak of ctx->mapping when releasing kernel API contexts
        cxl: fix leak of ctx->irq_bitmap when releasing context via kernel API
        cxl: fix leak of IRQ names in cxl_free_afu_irqs()
        powerpc/ps3: Remove unused os_area_db_id_video_mode
        powerpc/configs: Re-enable CONFIG_SCSI_DH

  commit 3d875182d7f4b27b7778c3ab6a39800d383968cb
  Merge: 69984b6 934ed25
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:42:37 2015 -0700

      Merge branch 'akpm' (patches from Andrew)

      Merge misc fixes from Andrew Morton:
       "6 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        sh: add copy_user_page() alias for __copy_user()
        lib/Kconfig: ZLIB_DEFLATE must select BITREVERSE
        mm, dax: fix DAX deadlocks
        memcg: convert threshold to bytes
        builddeb: remove debian/files before build
        mm, fs: obey gfp_mapping for add_to_page_cache()

  commit 934ed25ea505859cec5236dcb1769be5f998dd25
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 15:28:38 2015 -0700

      sh: add copy_user_page() alias for __copy_user()

      copy_user_page() is needed by DAX.  Without this we get a compile error
      for DAX on SH:

        fs/dax.c:280:2: error: implicit declaration of function 
`copy_user_page' [-Werror=implicit-function-declaration]
          copy_user_page(vto, (void __force *)vfrom, vaddr, to);
            ^

      This was done with a random config that happened to include DAX support.

      This patch has only been compile tested.

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Reported-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Cc: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Cc: Matthew Wilcox <willy@xxxxxxxxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 1fd4e5c347bfcef6ae2c31f6a2abce00f6ecaa3f
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 15:28:35 2015 -0700

      lib/Kconfig: ZLIB_DEFLATE must select BITREVERSE

      lib/built-in.o: In function `__bitrev32':
      deftree.c:(.text+0x1e799): undefined reference to `byte_rev_table'
      deftree.c:(.text+0x1e7a0): undefined reference to `byte_rev_table'
      deftree.c:(.text+0x1e7b4): undefined reference to `byte_rev_table'
      deftree.c:(.text+0x1e7c1): undefined reference to `byte_rev_table'

      Anything which uses bitrevX() has to select BITREVERSE, to grab
      lib/bitrev.o.

      Reported-by: Jim Davis <jim.epost@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 0f90cc6609c72b0bdf2aad0cb0456194dd896e19
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 15:28:32 2015 -0700

      mm, dax: fix DAX deadlocks

      The following two locking commits in the DAX code:

      commit 843172978bb9 ("dax: fix race between simultaneous faults")
      commit 46c043ede471 ("mm: take i_mmap_lock in unmap_mapping_range() for 
DAX")

      introduced a number of deadlocks and other issues which need to be fixed
      for the v4.3 kernel.  The list of issues in DAX after these commits
      (some newly introduced by the commits, some preexisting) can be found
      here:

        https://lkml.org/lkml/2015/9/25/602 (Subject: "Re: [PATCH] dax: fix 
deadlock in __dax_fault").

      This undoes most of the changes introduced by those two commits,
      essentially returning us to the DAX locking scheme that was used in
      v4.2.

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Dan Williams <dan.j.williams@xxxxxxxxx>
      Tested-by: Dave Chinner <dchinner@xxxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxxx>
      Cc: "Kirill A. Shutemov" <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Matthew Wilcox <matthew.r.wilcox@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 424cdc14138088ada1b0e407a2195b2783c6e5ef
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Thu Oct 15 15:28:29 2015 -0700

      memcg: convert threshold to bytes

      page_counter_memparse() returns pages for the threshold, while
      mem_cgroup_usage() returns bytes for memory usage.  Convert the
      threshold to bytes.

      Fixes: 3e32cb2e0a12b6915 ("memcg: rename cgroup_event to 
mem_cgroup_event").
      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Cc: Johannes Weiner <hannes@xxxxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8d740a37b92f3d4a0435fe263b32efc7f61c5efb
  Author: Riku Voipio <riku.voipio@xxxxxxxxxx>
  Date:   Thu Oct 15 15:28:26 2015 -0700

      builddeb: remove debian/files before build

      Commit 3716001bcb7f ("deb-pkg: add source package") added the ability to
      create a debian changelog file.  This exposed that previously the
      builddeb script hasn't cleared debian/files between builds.

      As debian/files keeps accumulating entries, the changes file will end up
      growing indefinelty.  With outdated entries in debian/files, builddeb
      script will exit with failure.  This regression impacts those who use
      "make deb-pkg" target to build kernel into a .deb package and never use
      "make mrproper" or other means to clean kernel tree from generated
      directories.

      To fix the regression, remove debian/files before starting build and in
      the generated clean rule.

      Fixes: 3716001bcb7f ("deb-pkg: add source package")
      Signed-off-by: Riku Voipio <riku.voipio@xxxxxxxxxx>
      Reported-by: Doug Smythies <dsmythies@xxxxxxxxx>
      Tested-by: Doug Smythies <dsmythies@xxxxxxxxx>
      Tested-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
      Acked-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: Michal Marek <mmarek@xxxxxxx>
      Cc: maximilian attems <maks@xxxxxxx>
      Cc: Chris J Arges <chris.j.arges@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 063d99b4fa762cbae9324dbbf9b6bff4b3a8cfdc
  Author: Michal Hocko <mhocko@xxxxxxxx>
  Date:   Thu Oct 15 15:28:24 2015 -0700

      mm, fs: obey gfp_mapping for add_to_page_cache()

      Commit 6afdb859b710 ("mm: do not ignore mapping_gfp_mask in page cache
      allocation paths") has caught some users of hardcoded GFP_KERNEL used in
      the page cache allocation paths.  This, however, wasn't complete and
      there were others which went unnoticed.

      Dave Chinner has reported the following deadlock for xfs on loop device:
      : With the recent merge of the loop device changes, I'm now seeing
      : XFS deadlock on my single CPU, 1GB RAM VM running xfs/073.
      :
      : The deadlocked is as follows:
      :
      : kloopd1: loop_queue_read_work
      :       xfs_file_iter_read
      :       lock XFS inode XFS_IOLOCK_SHARED (on image file)
      :       page cache read (GFP_KERNEL)
      :       radix tree alloc
      :       memory reclaim
      :       reclaim XFS inodes
      :       log force to unpin inodes
      :       <wait for log IO completion>
      :
      : xfs-cil/loop1: <does log force IO work>
      :       xlog_cil_push
      :       xlog_write
      :       <loop issuing log writes>
      :               xlog_state_get_iclog_space()
      :               <blocks due to all log buffers under write io>
      :               <waits for IO completion>
      :
      : kloopd1: loop_queue_write_work
      :       xfs_file_write_iter
      :       lock XFS inode XFS_IOLOCK_EXCL (on image file)
      :       <wait for inode to be unlocked>
      :
      : i.e. the kloopd, with it's split read and write work queues, has
      : introduced a dependency through memory reclaim. i.e. that writes
      : need to be able to progress for reads make progress.
      :
      : The problem, fundamentally, is that mpage_readpages() does a
      : GFP_KERNEL allocation, rather than paying attention to the inode's
      : mapping gfp mask, which is set to GFP_NOFS.
      :
      : The didn't used to happen, because the loop device used to issue
      : reads through the splice path and that does:
      :
      :       error = add_to_page_cache_lru(page, mapping, index,
      :                       GFP_KERNEL & mapping_gfp_mask(mapping));

      This has changed by commit aa4d86163e4 ("block: loop: switch to VFS
      ITER_BVEC").

      This patch changes mpage_readpage{s} to follow gfp mask set for the
      mapping.  There are, however, other places which are doing basically the
      same.

      lustre:ll_dir_filler is doing GFP_KERNEL from the function which
      apparently uses GFP_NOFS for other allocations so let's make this
      consistent.

      cifs:readpages_get_pages is called from cifs_readpages and
      __cifs_readpages_from_fscache called from the same path obeys mapping
      gfp.

      ramfs_nommu_expand_for_mapping is hardcoding GFP_KERNEL as well
      regardless it uses mapping_gfp_mask for the page allocation.

      ext4_mpage_readpages is the called from the page cache allocation path
      same as read_pages and read_cache_pages

      As I've noticed in my previous post I cannot say I would be happy about
      sprinkling mapping_gfp_mask all over the place and it sounds like we
      should drop gfp_mask argument altogether and use it internally in
      __add_to_page_cache_locked that would require all the filesystems to use
      mapping gfp consistently which I am not sure is the case here.  From a
      quick glance it seems that some file system use it all the time while
      others are selective.

      Signed-off-by: Michal Hocko <mhocko@xxxxxxxx>
      Reported-by: Dave Chinner <david@xxxxxxxxxxxxx>
      Cc: "Theodore Ts'o" <tytso@xxxxxxx>
      Cc: Ming Lei <ming.lei@xxxxxxxxxxxxx>
      Cc: Andreas Dilger <andreas.dilger@xxxxxxxxx>
      Cc: Oleg Drokin <oleg.drokin@xxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit fbc61a26e6b7a2ebc399559ea22df4a35ac05fcb
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Fri Sep 18 14:09:00 2015 -0700

      arm64: debug: Fix typo in debug-monitors.c

      Fix handers to handlers.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c8d71d08aa23679f56e7072358383442c6ede352
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:08 2015 +0100

      netfilter: ipv4: whitespace around operators

      This patch cleanses whitespace around arithmetical operators.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 24cebe3f29884bb8f4581c68ba7a124ade0099b0
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:07 2015 +0100

      netfilter: ipv4: code indentation

      Use tabs instead of spaces to indent code.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6c28255b46823b37d220bbb2fddfb9b23dda2fd4
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:06 2015 +0100

      netfilter: ipv4: function definition layout

      Use tabs instead of spaces to indent second line of parameters in
      function definitions.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 27951a01688c012b6c77377703fcce90cfe8b1b7
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:05 2015 +0100

      netfilter: ipv4: ternary operator layout

      Correct whitespace layout of ternary operators in the netfilter-ipv4
      code.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 19f0a602014c0dd7f1ad9e458618c333a668b15a
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:04 2015 +0100

      netfilter: ipv4: label placement

      Whitespace cleansing: Labels should not be indented.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 008027c31d57a22bd80dda5acc95b037634eee0f
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 9 20:45:42 2015 +0200

      netfilter: turn NF_HOOK into an inline function

      A recent change to the dst_output handling caused a new warning
      when the call to NF_HOOK() is the only used of a local variable
      passed as 'dev', and CONFIG_NETFILTER is disabled:

      net/ipv6/ip6_output.c: In function 'ip6_output':
      net/ipv6/ip6_output.c:135:21: warning: unused variable 'dev' 
[-Wunused-variable]

      The reason for this is that the NF_HOOK macro in this case does
      not reference the variable at all, and the call to dev_net(dev)
      got removed from the ip6_output function. To avoid that warning now
      and in the future, this changes the macro into an equivalent
      inline function, which tells the compiler that the variable is
      passed correctly but still unused.

      The dn_forward function apparently had the same problem in
      the past and added a local workaround that no longer works
      with the inline function. In order to avoid a regression, we
      have to also remove the #ifdef from decnet in the same patch.

      Fixes: ede2059dbaf9 ("dst: Pass net into dst->output")
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 81b4325eba6baae80a70d1af866278af38fb6cdd
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Tue Oct 13 14:33:28 2015 +0200

      netfilter: nf_queue: remove rcu_read_lock calls

      All verdict handlers make use of the nfnetlink .call_rcu callback
      so rcu readlock is already held.

      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit ed78d09d59ba9764b7454e8e1ccbb0072a55b6d7
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Tue Oct 13 14:33:27 2015 +0200

      netfilter: make nf_queue_entry_get_refs return void

      We don't care if module is being unloaded anymore since hook unregister
      handling will destroy queue entries using that hook.

      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 2ffbceb2b08f8ca0496c54a9ebcd11d25275954e
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Tue Oct 13 14:33:26 2015 +0200

      netfilter: remove hook owner refcounting

      since commit 8405a8fff3f8 ("netfilter: nf_qeueue: Drop queue entries on
      nf_unregister_hook") all pending queued entries are discarded.

      So we can simply remove all of the owner handling -- when module is
      removed it also needs to unregister all its hooks.

      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 34198710f55b5f359f43e67d9a08fe5aadfbca1b
  Author: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 13:31:24 2015 +0100

      ASoC: Add info callback for SX_TLV controls

      SX_TLV controls are intended for situations where the register behind
      the control has some non-zero value indicating the minimum gain
      and then gains increasing from there and eventually overflowing through
      zero.

      Currently every CODEC implementing these controls specifies the minimum
      as the non-zero value for the minimum and the maximum as the number of
      gain settings available.

      This means when the info callback subtracts the minimum value from the
      maximum value to calculate the number of gain levels available it is
      actually under reporting the available levels. This patch fixes this
      issue by adding a new snd_soc_info_volsw_sx callback that does not
      subtract the minimum value.

      Fixes: 1d99f2436d0d ("ASoC: core: Rework SOC_DOUBLE_R_SX_TLV add 
SOC_SINGLE_SX_TLV")
      Signed-off-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Brian Austin <brian.austin@xxxxxxxxxx>
      Tested-by: Brian Austin <brian.austin@xxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit e30b7577bf1d338ca8a273bd2f881de5a41572b7
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Wed Oct 7 17:27:17 2015 +0200

      rbd: use writefull op for object size writes

      This covers only the simplest case - an object size sized write, but
      it's still useful in tiering setups when EC is used for the base tier
      as writefull op can be proxied, saving an object promotion.

      Even though updating ceph_osdc_new_request() to allow writefull should
      just be a matter of fixing an assert, I didn't do it because its only
      user is cephfs.  All other sites were updated.

      Reflects ceph.git commit 7bfb7f9025a8ee0d2305f49bf0336d2424da5b5b.

      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Alex Elder <elder@xxxxxxxxxx>

  commit 0d9fde4fc8f59a6bd316559d267a936b0737d05a
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Wed Oct 7 16:09:35 2015 +0200

      rbd: set max_sectors explicitly

      Commit 30e2bc08b2bb ("Revert "block: remove artifical max_hw_sectors
      cap"") restored a clamp on max_sectors.  It's now 2560 sectors instead
      of 1024, but it's not good enough: we set max_hw_sectors to rbd object
      size because we don't want object sized I/Os to be split, and the
      default object size is 4M.

      So, set max_sectors to max_hw_sectors in rbd at queue init time.

      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Alex Elder <elder@xxxxxxxxxx>

  commit 3c6531c7461b80c18284d43b59791c60cd67582f
  Author: Thomas Hebb <tommyhebb@xxxxxxxxx>
  Date:   Tue Oct 6 22:56:37 2015 +0200

      pinctrl: berlin: fix BG2CD field widths

      The previous register layout was incorrect, many of the fields having
      fewer bits than were needed to represent all their modes. The new layout
      is taken from the bootloader source of a BG2CD device.

      Signed-off-by: Thomas Hebb <tommyhebb@xxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 30cefeacec3e289c00128f28b831fb251650eea6
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Fri Sep 25 12:06:02 2015 -0700

      gpio: omap: fix static checker warning

      This patch fixes below static checker warning by changing
      type of irq field in struct gpio_bank from u16 to int.

      drivers/gpio/gpio-omap.c:1191 omap_gpio_probe()
        warn: assigning (-6) to unsigned variable 'bank->irq'

      drivers/gpio/gpio-omap.c
        1188          bank->irq = platform_get_irq(pdev, 0);
        1189          if (bank->irq <= 0) {

      bank->irq is u16.

        1190                  if (!bank->irq)
        1191                          bank->irq = -ENXIO;

      Does not work.

        1192                  if (bank->irq != -EPROBE_DEFER)

      Does not work.

        1193                          dev_err(dev,
        1194                                  "can't get irq resource 
ret=%d\n", bank->irq);
        1195                  return bank->irq;
        1196          }

      Fixes: commit 89d18e3af8b9: "gpio: omap: switch to use platform_get_irq"
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c0ff971ef9acacd4d2caa508e444edad958dead9
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Thu Oct 15 19:42:23 2015 +0200

      x86/ioapic: Disable interrupts when re-routing legacy IRQs

      A sporadic hang with consequent crash is observed when booting Hyper-V 
Gen1
      guests:

       Call Trace:
        <IRQ>
        [<ffffffff810ab68d>] ? trace_hardirqs_off+0xd/0x10
        [<ffffffff8107b616>] queue_work_on+0x46/0x90
        [<ffffffff81365696>] ? add_interrupt_randomness+0x176/0x1d0
        ...
        <EOI>
        [<ffffffff81471ddb>] ? _raw_spin_unlock_irqrestore+0x3b/0x60
        [<ffffffff810c295e>] __irq_put_desc_unlock+0x1e/0x40
        [<ffffffff810c5c35>] irq_modify_status+0xb5/0xd0
        [<ffffffff8104adbb>] mp_register_handler+0x4b/0x70
        [<ffffffff8104c55a>] mp_irqdomain_alloc+0x1ea/0x2a0
        [<ffffffff810c7f10>] irq_domain_alloc_irqs_recursive+0x40/0xa0
        [<ffffffff810c860c>] __irq_domain_alloc_irqs+0x13c/0x2b0
        [<ffffffff8104b070>] alloc_isa_irq_from_domain.isra.1+0xc0/0xe0
        [<ffffffff8104bfa5>] mp_map_pin_to_irq+0x165/0x2d0
        [<ffffffff8104c157>] pin_2_irq+0x47/0x80
        [<ffffffff81744253>] setup_IO_APIC+0xfe/0x802
        ...
        [<ffffffff814631c0>] ? rest_init+0x140/0x140

      The issue is easily reproducible with a simple instrumentation: if
      mdelay(10) is put between mp_setup_entry() and mp_register_handler() calls
      in mp_irqdomain_alloc() Hyper-V guest always fails to boot when re-routing
      IRQ0. The issue seems to be caused by the fact that we don't disable
      interrupts while doing IOPIC programming for legacy IRQs and IRQ0 actually
      happens.

      Protect the setup sequence against concurrent interrupts.

      [ tglx: Make the protection unconditional and not only for legacy
                interrupts ]

      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444930943-19336-1-git-send-email-vkuznets@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1d48fb6e4aeec5946574712c512c12a053ce82c0
  Author: Antoine Ténart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 23:31:41 2015 +0200

      pinctrl: berlin: fix my family name spelling

      My family name contained an accent when I submitted the
      Berlin pinctrl series in the first place. There was an
      encoding issue when the series was applied. Fix this.

      Signed-off-by: Antoine Ténart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      [Je me rendis tous les accents aigus]
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 7ba6e4ef76c7e43101bd5e0f8987c11a8ed0d325
  Author: Bard Liao <bardliao@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:21:32 2015 +0800

      ASoC: rt298: correct index default value

      Some of the default value on rt298_index_def are incorrect. Change
      them to the correct value.

      Signed-off-by: Bard Liao <bardliao@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 9c160bbd6c298c8b4f76b245e26f78bd4bba3993
  Author: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 23:31:39 2015 +0200

      pinctrl: berlin: add explicit dependency on OF

      Berlin pinctrl drivers depends on CONFIG_OF. This patch adds
      this dependency explicitly.

      Signed-off-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d02f997d61b30ef6f89ad2f2dc4d41613c8b8b88
  Author: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 23:31:37 2015 +0200

      pinctrl: berlin: select the pinctrl driver according to the SoC used

      This patch prepares to remove the pinctrl driver selection from the
      mach-berlin Kconfig. To do so, bool is replaced by def_bool.

      Signed-off-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c55a7746111144b0fa2c27dd28098f14d4ca79ee
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:37:10 2015 +0800

      pinctrl: dt-binding: document berlin4ct SoC pinctrl

      Add berlin4ct to existing berlin pinctrl device tree binding.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Acked-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4be3158abe1e02d24f82b34101e41d662fae2185
  Merge: 125ecf4 56ade8f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 07:15:31 2015 -0700

      Merge branch 'mlxsw-spectrum'

      Jiri Pirko says:

      ====================
      mlxsw: Driver update, add initial support for Spectrum ASIC

      Purpose of this patchset is to introduce initial support for Mellanox
      Spectrum ASIC, including L2 bridge forwarding offload.

      The only non-mlxsw patch in this patchset is the first one, introducing
      pre-change upper notifier. That is used in last patch to ensure ports of
      single ASIC are not bridged into multiple bridges, as that scenario is
      currently not supported by driver.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 56ade8fe3fe1e134783f61d164305107ae01030f
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:37 2015 +0200

      mlxsw: spectrum: Add initial support for Spectrum ASIC

      Add support for new generation Mellanox Spectrum ASIC, 10/25/40/50 and
      100Gb/s Ethernet Switch.

      The initial driver implements bridge forwarding offload including
      bridge internal VLAN support, FDB static entries, FDB learning and
      HW ageing including their setup.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a4feea74cd7a8f12d9fae67014533a4220135760
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:36 2015 +0200

      mlxsw: reg: Add Switch Port VLAN MAC Learning register definition

      Since we currently do not support the offloading of 802.1D bridges, we
      need to be able to let the device know it should not learn MAC addresses
      on specific {Port, VID} pairs.

      Add the SPVMLR register, which controls the learning enablement of
      {Port, VID} pairs.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e534a56a317fa4e55419cc255d6af2683288d71c
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:35 2015 +0200

      mlxsw: reg: Add Switch Filtering Database Aging Time register definition

      Add SFDAT which is used to control switch ageing time.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f65da742d15462786533cf3ea58335aa32e3daa
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:34 2015 +0200

      mlxsw: reg: Add Switch Virtual-Port Enabling register definition

      In order for a port to support {Port, VID} to FID mapping it needs to be
      configured to a virtual port mode (as opposed to VLAN mode).

      Add the SVPE register, which enables port virtualization.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 647902397663468c2feefa9cd8097e194802a0b3
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:33 2015 +0200

      mlxsw: reg: Add Switch VID to FID Allocation register definition

      An incoming packet can be classified into a filtering identifer (FID)
      based on its VID or incoming port and VID ({Port, VID}).

      Add the SVFA register, which controls this mapping.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f1fb693a0875d0d1510cf8e84d35df2661f5a38f
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:32 2015 +0200

      mlxsw: reg: Add Switch FID Management register definition

      Filtering identifiers (FIDs) are unique identifers of bridge instances
      in the hardware.

      Add the SFMR register, which is responsible for the creation and
      configuration of these FIDs.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e059436999d797bbdb36ec41b6f6890a569cbf94
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:31 2015 +0200

      mlxsw: reg: Add shared buffer configuration registers definitions

      Add definitions of SBPR, SBCM, SBPM, SBMM and PBMC registers that are
      used to configure shared buffers.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b2e345f9a454f6e435f1a61b02f0e4f0125b94e3
  Author: Elad Raz <eladr@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:30 2015 +0200

      mlxsw: reg: Add Switch Port VID and Switch Port VLAN Membership registers 
definitions

      Add SPVID and SPVM registers responsible for default port VID
      configuration and VLAN membership of a port.

      Signed-off-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f5d88f589297a9b5fb110bf01d621d8c09fb7512
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:29 2015 +0200

      mlxsw: reg: Add Switch FDB Notification register definition

      Add SFN register which is used to poll for newly added and aged-out FDB
      entries.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 236033b33c09ea9e34ce320d5cf9ef527077d7d5
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:28 2015 +0200

      mlxsw: reg: Add Switch Filtering Database register definition

      Add the SFD register which is responsible for filtering database
      manipulation, including static and dynamic FDB entries.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d64b1592535e390cdc0605a5b8d4b6665be47003
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:27 2015 +0200

      mlxsw: item: Add MLXSW_ITEM_BUF_INDEXED helper

      Add missing item helper which allows to access char bufs on multiple
      offsets. This is needed by SFD and SFN register definitions.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b0989b5bcac950c05d72dee5f6dcad38d355b3f
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:26 2015 +0200

      mlxsw: item: Make src arg of memcpy_to helper const

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 12fd35ab8af9fe32fce6b36881461d6f62408f70
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:25 2015 +0200

      mlxsw: cmd: Introduce FID-offset flooding tables

      Packets destined to offloaded netdevs will be classified to FIDs in the
      device and flooded in case of BUM.

      The flooding table used is of type FID-offset, which allows one to
      create different flooding domains for different FIDs and specify the
      offset in the flooding table for each FID (not necessarily equal to FID
      or VID).

      Add support for this flooding table type, by exposing the configuration
      of the number of tables from this type and their size.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 453b6a8dd8338d692770bda89a52bc71c8fea2b8
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:24 2015 +0200

      mlxsw: cmd: Introduce per-FID flooding tables

      In the newly introduced Spectrum switch ASIC, packets destined to not
      offloaded netdevs will be classified to special FIDs (vFIDs) in the
      device and flooded to the CPU port.

      The flooding table used is of type per-FID, which allows one to create
      different flooding domains for different vFIDs.

      While using a simple single-entry flood table is certainly sufficient at
      this point, we do plan to offload 802.1D bridges involving VLAN
      interfaces, thus making this change necessary.

      Add support for this flooding table type, by exposing the configuration
      of the number of tables from this type and their size.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bc2055f878acb1fbbb3f3e7cb851f2e318def010
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:23 2015 +0200

      mlxsw: Enable configuration of flooding domains

      As part of the introduction of L2 offloads, allow different ports to
      join/leave the flooding domain, according to user configuration.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 573c7ba006edbecff0714db651dd3602b9d0a6a0
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:22 2015 +0200

      net: introduce pre-change upper device notifier

      This newly introduced netdevice notifier is called before actual change
      upper happens. That provides a possibility for notifier handlers to
      know upper change will happen and react to it, including possibility to
      forbid the change. That is valuable for drivers which can check if the
      upper device linkage is supported and forbid that in case it is not.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bb3ba9558af081c15df2677e17d31861ee689f7b
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:37:08 2015 +0800

      pinctrl: berlin: add the berlin4ct pinctrl driver

      Add the pin-controller driver for Marvell Berlin BG4CT SoC, with 
definition
      of its groups and functions. This uses the core Berlin pinctrl driver.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Acked-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 2df26ef7da6f1960622f37c2a7c57d238603f0d6
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:37:07 2015 +0800

      pinctrl: berlin: Make berlin pinctrl driver visible if COMPILE_TEST=y

      It is good to allow berlin pinctrl driver to build with COMPILE_TEST, so
      make the it menu visible when compile-testing.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Acked-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d5c79fcb193ff825e5d5759cdbbb4a16385fb08f
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:37:06 2015 +0800

      pinctrl: berlin: introduce berlin_pinctrl_probe_regmap()

      This is to prepare for the next berlin4ct support, where we won't use
      simple-mfd any more.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Acked-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 77f3228f771506bac4b1308571a62c769552f8f8
  Author: Mark Salyzyn <salyzyn@xxxxxxxxxxx>
  Date:   Tue Oct 13 14:30:51 2015 -0700

      arm64: AArch32 user space PC alignment exception

      ARMv7 does not have a PC alignment exception. ARMv8 AArch32
      user space however can produce a PC alignment exception. Add
      handler so that we do not dump an unexpected stack trace in
      the logs.

      Signed-off-by: Mark Salyzyn <salyzyn@xxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 56fd16cabac9cd8f15e2902898a9d0cc96e2fa70
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:50:22 2015 +0200

      timekeeping: Increment clock_was_set_seq in timekeeping_init()

      timekeeping_init() can set the wall time offset, so we need to
      increment the clock_was_set_seq counter. That way hrtimers will pick
      up the early offset immediately. Otherwise on a machine which does not
      set wall time later in the boot process the hrtimer offset is stale at
      0 and wall time timers are going to expire with a delay of 45 years.

      Fixes: 868a3e915f7f "hrtimer: Make offset update smarter"
      Reported-and-tested-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Stefan Liebler <stli@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>

  commit 125ecf4b5994f17cb581af399933d0bd0b153080
  Merge: 51161aa d1d3951
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 06:41:10 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-16

      This series contains updates to e1000, e1000e, igb, igbvf, ixgbe, ixgbevf,
      i40e, i40evf and fm10k.

      Alex Duyck fixes the polling routine for i40e/i40evf were the NAPI budget
      for receive cleanup was being rounded up to 1 but the netpoll call was
      expecting no Rx to be processed as the budget passed was 0.  Also cleaned
      up IN_NETPOLL flag that was not adding any value due to the receive
      cleanup was handled in NAPI.  Added support for netpoll for i40evf as
      well.

      Jesse updates all of our drivers to use napi_complete_done() instead of
      napi_complete(), which allows us to use
      /sys/class/net/ethX/gro_flush_timeout.  Added ethtool support to control
      and report the new Interrupt Limit register, since the XL710 hardware
      has a different interrupt moderation design that can support a limit of
      total interrupts per second per vector.

      Shannon cleans up startup log entries to cut down the number by putting
      a couple behind debug flags and combining others into single line.  Added
      support to enable/disable printing VEB statistics via ethtool.

      Jingjing fixes a compile issue by adding const to functions that return
      strings that are not going to be modified.

      Greg Rose cleans up defines that were not used and were causing customer
      confusion.

      Greg Bowers adds support for setting a new bit in the Set Local LLDP MIB
      admin queue command Type field.

      Mitch fixes an issue where vlan_features field was set to the same value
      as netdev features field, but before the features were actually being
      set up, leaving the vlan_features empty.  Resolve the issue by setting
      up the netdev features first, then mask out the VLAN feature bits when
      assigning vlan_features.  Fixed VF init timing, where in some instances
      the VFs would fail to initialize the first time you loaded the driver.
      To correct this, increased the delay time for the init task and wait
      longer before giving up.

      v2: fix missing space in function header comment in patch 3, based on
          feedback from Sergei Shtylyov.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7db743c6d8bb7a08396a0ea3084fb9f8ebccc577
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Fri Oct 16 14:34:50 2015 +0100

      arm64: Minor coding style fixes for kc_offset_to_vaddr and 
kc_vaddr_to_offset

      These were introduced by commit 03875ad52fdd (arm64: add
      kc_offset_to_vaddr and kc_vaddr_to_offset macro).

      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 400143e45d39fcedb5106c3aa212746a80a61f7c
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:06 2015 +0530

      ath10k: remove htc polling for tx completion

      Since polling for tx completion is handled whenever target to host
      messages are received, removing the unnecessary polling mechanism for
      send completion at HTC level.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0da64f19f01a6dabc4a55c1ee9cef430fcb47f4a
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:05 2015 +0530

      ath10k: remove unused dl_is_polled

      Since polling for received messages not supported, remove unused
      dl_is_polled.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a70587b3389ae4a97f2b51153cc86b4c1769dcf5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:04 2015 +0530

      ath10k: configure copy engine 5 for HTT messages

      Currently target to host (T2H) HTT messages are received at copy engine 1.
      These messages are processed by HTC layer in both host and target.
      To avoid HTC level processing overhead in both host and target,
      the unused copy engine 5 is being used for receiving HTT T2H messages.
      This will speedup the receive data processing as well as htt tx 
completion.
      Hence host and target copy engine configuration tables are updated
      to enable CE5 pipe. The in-direction HTT mapping is now pointing to CE5
      for all HTT T2H.

      Moreover HTT send completion messages are polled from HTC handler
      as CE 4 is not interrupt-driven. For faster tx completion, CE4 polling
      needs to be done whenever CE pipe which transports HTT Rx (target->host)
      is processed. This avoids overhead of polling HTT messages from HTC
      layer. Servicing CE 4 faster is helping to solve "failed to transmit
      packet, dropping: -105".

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 3f0f7ed420594cc6b7eb8b43294a8ac6815a4be5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:03 2015 +0530

      ath10k: export htt tx rx handlers

      Some special copy engines delivers messages directly to HTT by
      bypassing HTC layer. Hence exporting tx_completion and rx_handler
      for delivering the data to HTT layer.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 9d9bdbb0c4099fea202ceee14000704c63338cce
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:02 2015 +0530

      ath10k: register per copy engine receive callbacks

      Register receive callbacks for every copy engines (CE) separately
      instead of having common receive handler. Some of the copy engines
      receives different type of messages (i.e HTT/HTC/pktlog) from target.
      Hence to service them accordingly, register per copy engine receive
      callbacks.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0e5b2950912e2925b8fe1666c5aa14199c809810
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:01 2015 +0530

      ath10k: register per copy engine send completion callbacks

      Register send completion callbacks for every copy engines (CE) separately
      instead of having common completion handler. Since some of the copy
      engines delivers different type of messages, per-CE callbacks help to
      service them differently.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit aed1dc8231a035af3e7ef3f7ce1bd4ed2a13db31
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:00 2015 +0530

      ath10k: export htc tx rx handlers

      Export HTC layer tx and rx handlers. This will be used by HIF layer
      for per-CE data processing. Instead of callback mechanism, HIF will
      call appropriate upper layers API directly.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit fa548237321c4469e80741f773c4f5935a68a998
  Merge: 25cb62b 62fcce9 a98f1b7 8e601a9
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Oct 16 14:32:27 2015 +0200

      Merge branches 'acpica', 'pm-domains' and 'pm-cpufreq'

      * acpica:
        ACPICA: Tables: Fix FADT dependency regression

      * pm-domains:
        PM / Domains: Fix validation of latency constraints in genpd governor

      * pm-cpufreq:
        cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL)

  commit 3b93baf56dafa2d27e4fc227990dcd3ffeb10510
  Merge: a71225e 54fa97e
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 14:22:15 2015 +0200

      Merge tag 'msi-map-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/maz/arm-platforms into irq/core

      Support for msi-map, and msi-parent update from Marc Zyngier:

      - New map-map property to describe the remapping of requester-ids,
        and the routing of MSIs to controllers
      - New hooks to make MSI domains per-device if required
      - Extension of msi-parent to provide sideband information
      - Extensive documentation for both msi-map and msi-parent

  commit ccd63ce471c9b69663783e919ca4dba9967cd690
  Author: Marc Gonzalez <marc_gonzalez@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:59:18 2015 +0200

      clocksource/drivers/tango_xtal: Add new timer for Tango SoCs

      Sigma Designs Tango platforms provide a 27 MHz crystal oscillator.
      Use it for clocksource, sched_clock, and delay_timer.

      Signed-off-by: Marc Gonzalez <marc_gonzalez@xxxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 54fa97eeb9e22b47d68b67ee00987afa7fbc2178
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 14:43:06 2015 +0100

      PCI/MSI: Allow the MSI domain to be device-specific

      So far, we've always considered that for a given PCI device, its
      MSI controller was either set by the architecture-specific
      pcibios hook, or simply inherited from the host bridge.

      This doesn't cover things like firmware-defined topologies like
      msi-map (DT) or IORT (ACPI), which can provide information about
      which MSI controller to use on a per-device basis.

      This patch adds the necessary hook into the MSI code to allow this
      feature, and provides the msi-map functionnality as a first
      implementation.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 098259eb16675a83e1d6ea31e06dc3ec152810a2
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 10:19:32 2015 +0100

      PCI: Add per-device MSI domain hook

      So far, we have considered that the MSI domain for a device was
      either set via the architecture-dependent pcibios implementation
      or inherited from the host bridge.

      As we're about to break that assumption, add pci_dev_msi_domain
      which is the equivalent of pci_host_bridge_msi_domain, but for
      a single device.

      Other than moving things around a bit, this patch on its own
      has no effect.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 82b9b4243c6d99d9e38087fa89183aa7479185e9
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 14:38:55 2015 +0100

      of/irq: Use the msi-map property to provide device-specific MSI domain

      While msi-parent is used to point to the MSI controller that
      works for all the devices behind a root complex, it doesn't
      allow configurations where each individual device can be routed
      to a separate MSI controller.

      The msi-map property provides this flexibility (and much more),
      so let's add a utility function that parses it, and return the
      corresponding MSI domain.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit a251b263346e38b9fafebeb49ada9ce894882616
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Thu Oct 1 17:05:45 2015 +0100

      of/irq: Split of_msi_map_rid to reuse msi-map lookup

      The msi-map property is also used to identify the MSI controller
      as a form of grown-up msi-parent property.

      Looking it up is complicated enough, and since of_msi_map_rid
      already implements this, let's turn it into an internal utility
      function. We'll put that to good use later on.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit deac7fc1c87f24099d7e15d8b662446497f57465
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Sep 18 14:07:40 2015 +0100

      irqchip/gic-v3-its: Parse new version of msi-parent property

      Now that 126b16e2ad98 ("Docs: dt: add generic MSI bindings")
      has made it into the tree, the time has come to get rid of the
      old hack, and to parse msi-parent in its full glory.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit c8d175883e0db09ce94b8b47bb2432b787149a6b
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Sep 18 14:07:40 2015 +0100

      PCI/MSI: Use of_msi_get_domain instead of open-coded "msi-parent" parsing

      Now that we have a function that implements the complexity of the
      "msi-parent" property parsing, switch to that.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 61c08240a103000b75dcf7ef2cf03d552aa91fa3
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Sep 18 14:07:40 2015 +0100

      of/irq: Use of_msi_get_domain instead of open-coded "msi-parent" parsing

      Now that we have a function that implements the complexity of the
      "msi-parent" property parsing, switch to that.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 48ae34fb39b0c0cfc76275e844fba5b0b04fa49e
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Sep 18 14:07:40 2015 +0100

      of/irq: Add support code for multi-parent version of "msi-parent"

      Since 126b16e2ad98 ("Docs: dt: add generic MSI bindings"),
      the definition of "msi-parent" has evolved, while maintaining
      some degree of compatibility. It can now express multiple MSI
      controllers as parents, as well as some sideband data being
      communicated to the controller.

      This patch adds the parsing of the property, iterating over
      the multiple parents until a suitable irqdomain is found.
      It can also fallback to the original parsing if the old
      binding is detected.

      This support code gets used in the subsequent patches.

      Suggested-by: Robin Murphy <robin.murphy@xxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit ccf91e68a4357e7b65a3f1f13f8af2b767213575
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Thu Oct 8 15:10:50 2015 -0700

      irqchip/gic-v3-its: Add handling of PCI requester id.

      Replace open coded generation PCI/MSI requester id with call to the
      new function pci_msi_domain_get_msi_rid() which applies the "msi-map"
      to the id value.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit b6eec9b717d4dcb39ef024b8a3b619a32468b01e
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Thu Oct 8 15:10:49 2015 -0700

      PCI/MSI: Add helper function pci_msi_domain_get_msi_rid().

      Add pci_msi_domain_get_msi_rid() to return the MSI requester id (RID).
      Initially needed by gic-v3 based systems. It will be used by follow on
      patch to drivers/irqchip/irq-gic-v3-its-pci-msi.c

      Initially supports mapping the RID via OF device tree.  In the future,
      this could be extended to use ACPI _IORT tables as well.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit d1d39516e41d7ad107e807ebeee1519c412bb0e3
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:44 2015 -0400

      i40e/i40evf: Bump i40e to 1.3.34 and i40evf to 1.3.21

      Bump.

      Change-ID: I7ec818a507554648675b9b245ced9e6b6bd9ed4e
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 628f096d8d244f54c3595a478b6e672cdb6c04ed
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:43 2015 -0400

      i40e: increase AQ work limit

      With 64 VFs, we can easily overwhelm the AQ on the PF if we have too low
      a limit on the number of AQ requests. This leads to ARQ overflow errors,
      and occasionally VFs that fail to initialize.

      Since we really only hit this condition on initial VF driver load, the
      requests that we process are lightweight, so this extra work doesn't
      cause problems for the PF driver.

      Change-ID: I620221520d8af987df6ace9ba938ffaf22107681
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3f7e5c330e19da2ac822ea1d02b744a24497e61b
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:42 2015 -0400

      i40evf: relax and stagger init timing a bit

      On some devices, in some systems, in some configurations, the VFs would
      fail to initialize the first time you loaded the driver.

      To correct this, increase the delay time for the init task slightly, and
      wait longer before giving up.

      If we enable VFs and load the VF driver in the same kernel as the PF
      driver, we can totally overwhelm the PF driver with AQ requests because
      all of the instances try to initialize at the same time.

      To help alleviate this, stagger the initial scheduling of the init task
      using the PCIe function as a multiplier. We mask off the function to
      only three bits so no instance has to wait too long.

      With these two changes, initializing 128 VFs on a single device goes
      from four minutes to just a few seconds.

      Change-ID: If3d8720c1c4e838ab36d8781d9ec295a62380936
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 48becae60f7e461b4b204e6608dc6beebe6c8aff
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:41 2015 -0400

      i40e: Recognize 1000Base_T_Optical phy type when link is up

      1000Base_T_Optical got added to the function that figures out what
      is supported when link is down but not when link is up. Add it in there
      too so that we display the correct information.

      Change-ID: I85ebcdfa7c02d898c44c673b1500552a53c8042e
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit cc7e406cb967ccc84cd2141398bba24b07d68788
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:40 2015 -0400

      i40evf: correctly populate vlan_features

      The vlan_features field was correctly being set to the same value as the
      netdev features field. However, this was being done before the features
      were actually being set up, leaving the vlan_features empty.

      Also, after a reset, vlan_features will be incorrectly assigned the
      previous netdev feature flags, which can contain VLAN feature bits. This
      makes the VLAN code angry and will cause a stack dump.

      To fix these issues, set up the netdev features first, then mask out the
      VLAN feature bits when assigning vlan_features.

      Change-ID: Ib0548869dc83cf6a841cb8697dd94c12359ba4d2
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5d38c93e7111a68fc7b9f771bf420d9e026a21de
  Author: Jingjing Wu <jingjing.wu@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:39 2015 -0400

      i40e: reset the invalid msg counter in vf when a valid msg is received

      When the number of invalid messages from a VF is exceeded, the VF
      will be disabled, due to the invalid messages.  This happens if
      other VF drivers (like DPDK) send a message through the driver's
      mailbox (aka virtchannel) interface, but the message is not
      supported by the i40e pf driver, such as CONFIG_PROMISCUOUS_MODE.

      This patch changes the num_invalid_msgs in struct i40e_vf to record
      the continuous invalid msgs, and it will be reset when a valid msg
      is received.

      Change-ID: Iaec42fd3dcdd281476b3518be23261dd46fc3718
      Signed-off-by: Jingjing Wu <jingjing.wu@xxxxxxxxx>
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ac26fc136c24edee53f1719e490d896fb07cd79b
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:37 2015 -0400

      i40e/i40evf: moderate interrupts differently

      The XL710 hardware has a different interrupt moderation design
      that can support a limit of total interrupts per second per
      vector, in addition to the "number of interrupts per second"
      controls already established in the driver.  This combination
      of hardware features allows us to set very low default latency
      settings but minimize the total CPU utilization by not
      making too many interrupts, should the user desire.

      The current driver implementation is still enabling the dynamic
      moderation in the driver, and only using the rx/tx-usecs
      limit in ethtool to limit the interrupt rate per second, by default.

      The new code implemented in this patch
      2) adds init/use of the new "Interrupt Limit" register
      3) adds ethtool knob to control/report the limits above

      Usage is ethtool -C ethx rx-usecs-high <value> Where <value> is number
      of microseconds to create a rate of 1/N interrupts per second,
      regardless of rx-usecs or tx-usecs values. Since there is a credit based
      scheme in the hardware, the rx-usecs and tx-usecs can be configured for
      very low latency for short bursts, but once the credit runs out the
      refill rate on the credits is limited by rx-usecs-high.

      Change-ID: I3a1075d3296123b0f4f50623c779b027af5b188d
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 947570e800e2ae3cbf827918a999aa88ee1600b0
  Author: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:35 2015 -0400

      i40e: Add support for non-willing Apps

      Adds support for setting a new bit in the Set Local LLDP MIB AQ command
      Type field.  When set to 1, the bit indicates to FW that Apps should be
      treated as non-willing.  When 0, FW behaves as before.

      Change-ID: I0d2101c1606c59c7188d3e6a0c7810e0f205233a
      Signed-off-by: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1cdfd88f2de89cbfffb5813dc92b7e711920c731
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:34 2015 -0400

      i40e: priv flag for controlling VEB stats

      Add an ethtool priv flag to enable and disable printing
      the VEB statistics.

      Change-ID: I7654054a3a73b08aa8310d94ee8fce6219107dd8
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d9d17cf74aed93add76c9cf648ce2f73b68ce410
  Author: Greg Rose <gregory.v.rose@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:33 2015 -0400

      i40e: Removed unused defines

      Two defines that are not used are causing customer confusion - remove
      them.

      Change-ID: Icef0325aca8e0f4fcdfc519e026bdd375e791200
      Signed-off-by: Greg Rose <gregory.v.rose@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3c5c420535ab7e25a639db16f7b2b16a70e147ec
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:32 2015 -0400

      i40e: remove read/write failed messages from nvmupdate

      Allow the nvmupdate application to decide when a read or write error
      should be exposed to the user.  Since the application needs to use
      write probes to find the ReadOnly sections on a potentially unknown NVM
      version in the HW and read probes to check the status of the last write,
      some error messages are expected, but need not be shown to the users.
      The driver doesn't know which are ignorable from real errors, so needs
      to let the application make the decision.

      Change-ID: I78fca8ab672bede11c10c820b83c26adfd536d03
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4e68adfeb91d684e5c7a0c6305af872120c71f23
  Author: Jingjing Wu <jingjing.wu@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:31 2015 -0400

      i40e/i40evf: Fix compile issue related to const string

      Add const to functions that return strings that aren't going to be
      modified. This addresses some reported compile complaints.

      Change-ID: Ic56b1e814ab4d23a50480e7fdec652445f776ee8
      Signed-off-by: Jingjing Wu <jingjing.wu@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6dec101765e442fc7f46205acdb2cf3b88879f16
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:30 2015 -0400

      i40e: generate fewer startup messages

      Cut down on the number of startup log entries by putting a couple behind
      debug flags and combining a couple others into a single line.

      Change-ID: I708089f086308f84d43f8b6f0e8a634a02d058fb
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 32b3e08fff60494cd1d281a39b51583edfd2b18f
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Sep 24 16:35:47 2015 -0700

      drivers/net/intel: use napi_complete_done()

      As per Eric Dumazet's previous patches:
      (see commit (24d2e4a50737) - tg3: use napi_complete_done())

      Quoting verbatim:
      Using napi_complete_done() instead of napi_complete() allows
      us to use /sys/class/net/ethX/gro_flush_timeout

      GRO layer can aggregate more packets if the flush is delayed a bit,
      without having to set too big coalescing parameters that impact
      latencies.
      </end quote>

      Tested
      configuration: low latency via ethtool -C ethx adaptive-rx off
                                rx-usecs 10 adaptive-tx off tx-usecs 15
      workload: streaming rx using netperf TCP_MAERTS

      igb:
      MIGRATED TCP MAERTS TEST from 0.0.0.0 (0.0.0.0) port 0 AF_INET to 
10.0.0.1 () port 0 AF_INET : demo
      ...
      Interim result:  941.48 10^6bits/s over 1.000 seconds ending at 
1440193171.589

      Alignment      Offset         Bytes    Bytes       Recvs   Bytes    Sends
      Local  Remote  Local  Remote  Xfered   Per                 Per
      Recv   Send    Recv   Send             Recv (avg)          Send (avg)
          8       8      0       0 1176930056  1475.36    797726   16384.00  
71905

      MIGRATED TCP MAERTS TEST from 0.0.0.0 (0.0.0.0) port 0 AF_INET to 
10.0.0.1 () port 0 AF_INET : demo
      ...
      Interim result:  941.49 10^6bits/s over 0.997 seconds ending at 
1440193142.763

      Alignment      Offset         Bytes    Bytes       Recvs   Bytes    Sends
      Local  Remote  Local  Remote  Xfered   Per                 Per
      Recv   Send    Recv   Send             Recv (avg)          Send (avg)
          8       8      0       0 1175182320  50476.00     23282   16384.00  
71816

      i40e:
      Hard to test because the traffic is incoming so fast (24Gb/s) that GRO
      always receives 87kB, even at the highest interrupt rate.

      Other drivers were only compile tested.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 7709b4c1fff39972b6a1b6183b593c43f1a555fb
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Thu Sep 24 09:04:38 2015 -0700

      i40evf: Add support for netpoll

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8b6503590510fd7a8b303feeaf8a45a192e2b8df
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Thu Sep 24 09:04:32 2015 -0700

      i40e/i40evf: Drop useless "IN_NETPOLL" flag

      The code in i40e and i40evf is using an "IN_NETPOLL" flag that has never
      added any value due to the fact that the Rx clean-up is handled in NAPI.
      As such the flag was set, the queue was scheduled via NAPI, and then 
polled
      from the netpoll controller and if any Rx packets were processed the were
      processed in the wrong context.

      In addition the flag itself just added an unneeded conditional to the
      hot-path so it can safely be dropped and save us a few instructions.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c67caceb864cf15731532ab25162166c228fa270
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Thu Sep 24 09:04:26 2015 -0700

      i40e/i40evf: Fix handling of napi budget

      The polling routine for i40e was rounding up the budget for Rx cleanup to
      1.  This is incorrect as the netpoll poll call is expecting no Rx to be
      processed as the budget passed was 0.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8db02d8b4089fa8098a170738e8ae7939aa8ae7a
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Thu Oct 8 15:10:48 2015 -0700

      of/irq: Add new function of_msi_map_rid()

      The device tree property "msi-map" specifies how to create the PCI
      requester id used in some MSI controllers.  Add a new function
      of_msi_map_rid() that finds the msi-map property and applies its
      translation to a given requester id.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit b531566e4dced7566dfa2e4925ec8b6a8cb7806b
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Thu Oct 8 15:10:47 2015 -0700

      Docs: dt: Add PCI MSI map bindings

      Currently msi-parent is used by a few bindings to describe the
      relationship between a PCI root complex and a single MSI controller, but
      this property does not have a generic binding document.

      Additionally, msi-parent is insufficient to describe more complex
      relationships between MSI controllers and devices under a root complex,
      where devices may be able to target multiple MSI controllers, or where
      MSI controllers use (non-probeable) sideband information to distinguish
      devices.

      This patch adds a generic binding for mapping PCI devices to MSI
      controllers. This document covers msi-parent, and a new msi-map property
      (specific to PCI*) which may be used to map devices (identified by their
      Requester ID) to sideband data for each MSI controller that they may
      target.

      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 0701c53e460ea64daf0ee789d0b08fef57800016
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 19:14:45 2015 +0100

      genirq/msi: Do not use pci_msi_[un]mask_irq as default methods

      When we create a generic MSI domain, that MSI_FLAG_USE_DEF_CHIP_OPS
      is set, and that any of .mask or .unmask are NULL in the irq_chip
      structure, we set them to pci_msi_[un]mask_irq.

      This is a bad idea for at least two reasons:
      - PCI_MSI might not be selected, kernel fails to build (yes, this is
        legitimate, at least on arm64!)
      - This may not be a PCI/MSI domain at all (platform MSI, for example)

      Either way, this looks wrong. Move the overriding of mask/unmask to
      the PCI counterpart, and panic is any of these two methods is not
      set in the core code (they really should be present).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444760085-27857-1-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1a800589052f03ce09008f82ad2c69f0af5d315a
  Merge: 8a53554 f5f3497
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Oct 16 12:03:22 2015 +0200

      Merge tag 'efi-urgent' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi into x86/urgent

      Pull EFI fix from Matt Fleming:

       - Ensure that the identity mapping in initial_page_table is updated
         to cover the entire kernel range. This fixes a triple fault on
         non-PAE kernels when booting on 32-bit EFI due to accessing an
         unmapped GDT in efi_call_phys_prolog(). (Paolo Bonzini)

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f5f3497cad8c8416a74b9aaceb127908755d020a
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 14 13:30:45 2015 +0200

      x86/setup: Extend low identity map to cover whole kernel range

      On 32-bit systems, the initial_page_table is reused by
      efi_call_phys_prolog as an identity map to call
      SetVirtualAddressMap.  efi_call_phys_prolog takes care of
      converting the current CPU's GDT to a physical address too.

      For PAE kernels the identity mapping is achieved by aliasing the
      first PDPE for the kernel memory mapping into the first PDPE
      of initial_page_table.  This makes the EFI stub's trick "just work".

      However, for non-PAE kernels there is no guarantee that the identity
      mapping in the initial_page_table extends as far as the GDT; in this
      case, accesses to the GDT will cause a page fault (which quickly becomes
      a triple fault).  Fix this by copying the kernel mappings from
      swapper_pg_dir to initial_page_table twice, both at PAGE_OFFSET and at
      identity mapping.

      For some reason, this is only reproducible with QEMU's dynamic translation
      mode, and not for example with KVM.  However, even under KVM one can 
clearly
      see that the page table is bogus:

          $ qemu-system-i386 -pflash OVMF.fd -M q35 vmlinuz0 -s -S -daemonize
          $ gdb
          (gdb) target remote localhost:1234
          (gdb) hb *0x02858f6f
          Hardware assisted breakpoint 1 at 0x2858f6f
          (gdb) c
          Continuing.

          Breakpoint 1, 0x02858f6f in ?? ()
          (gdb) monitor info registers
          ...
          GDT=     0724e000 000000ff
          IDT=     fffbb000 000007ff
          CR0=0005003b CR2=ff896000 CR3=032b7000 CR4=00000690
          ...

      The page directory is sane:

          (gdb) x/4wx 0x32b7000
          0x32b7000:    0x03398063      0x03399063      0x0339a063      
0x0339b063
          (gdb) x/4wx 0x3398000
          0x3398000:    0x00000163      0x00001163      0x00002163      
0x00003163
          (gdb) x/4wx 0x3399000
          0x3399000:    0x00400003      0x00401003      0x00402003      
0x00403003

      but our particular page directory entry is empty:

          (gdb) x/1wx 0x32b7000 + (0x724e000 >> 22) * 4
          0x32b7070:    0x00000000

      [ It appears that you can skate past this issue if you don't receive
        any interrupts while the bogus GDT pointer is loaded, or if you avoid
        reloading the segment registers in general.

        Andy Lutomirski provides some additional insight:

         "AFAICT it's entirely permissible for the GDTR and/or LDT
          descriptor to point to unmapped memory.  Any attempt to use them
          (segment loads, interrupts, IRET, etc) will try to access that memory
          as if the access came from CPL 0 and, if the access fails, will
          generate a valid page fault with CR2 pointing into the GDT or
          LDT."

        Up until commit 23a0d4e8fa6d ("efi: Disable interrupts around EFI
        calls, not in the epilog/prolog calls") interrupts were disabled
        around the prolog and epilog calls, and the functional GDT was
        re-installed before interrupts were re-enabled.

        Which explains why no one has hit this issue until now. ]

      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Reported-by: Laszlo Ersek <lersek@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      [ Updated changelog. ]

  commit 51161aa98d0aa4eb20952e16d6c6dbb1d085330e
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 16:44:00 2015 -0700

      net: Fix suspicious RCU usage in fib_rebalance

      This command:
        ip route add 192.168.1.0/24 nexthop via 10.2.1.5 dev eth1 nexthop via 
10.2.2.5 dev eth2

      generated this suspicious RCU usage message:

      [ 63.249262]
      [ 63.249939] ===============================
      [ 63.251571] [ INFO: suspicious RCU usage. ]
      [ 63.253250] 4.3.0-rc3+ #298 Not tainted
      [ 63.254724] -------------------------------
      [ 63.256401] ../include/linux/inetdevice.h:205 suspicious 
rcu_dereference_check() usage!
      [ 63.259450]
      [ 63.259450] other info that might help us debug this:
      [ 63.259450]
      [ 63.262297]
      [ 63.262297] rcu_scheduler_active = 1, debug_locks = 1
      [ 63.264647] 1 lock held by ip/2870:
      [ 63.265896] #0: (rtnl_mutex){+.+.+.}, at: [<ffffffff813ebfb7>] 
rtnl_lock+0x12/0x14
      [ 63.268858]
      [ 63.268858] stack backtrace:
      [ 63.270409] CPU: 4 PID: 2870 Comm: ip Not tainted 4.3.0-rc3+ #298
      [ 63.272478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 
1.7.5-20140531_083030-gandalf 04/01/2014
      [ 63.275745] 0000000000000001 ffff8800b8c9f8b8 ffffffff8125f73c 
ffff88013afcf301
      [ 63.278185] ffff8800bab7a380 ffff8800b8c9f8e8 ffffffff8107bf30 
ffff8800bb728000
      [ 63.280634] ffff880139fe9a60 0000000000000000 ffff880139fe9a00 
ffff8800b8c9f908
      [ 63.283177] Call Trace:
      [ 63.283959] [<ffffffff8125f73c>] dump_stack+0x4c/0x68
      [ 63.285593] [<ffffffff8107bf30>] lockdep_rcu_suspicious+0xfa/0x103
      [ 63.287500] [<ffffffff8144d752>] __in_dev_get_rcu+0x48/0x4f
      [ 63.289169] [<ffffffff8144d797>] fib_rebalance+0x3e/0x127
      [ 63.290753] [<ffffffff8144d986>] ? rcu_read_unlock+0x3e/0x5f
      [ 63.292442] [<ffffffff8144ea45>] fib_create_info+0xaf9/0xdcc
      [ 63.294093] [<ffffffff8106c12f>] ? sched_clock_local+0x12/0x75
      [ 63.295791] [<ffffffff8145236a>] fib_table_insert+0x8c/0x451
      [ 63.297493] [<ffffffff8144bf9c>] ? fib_get_table+0x36/0x43
      [ 63.299109] [<ffffffff8144c3ca>] inet_rtm_newroute+0x43/0x51
      [ 63.300709] [<ffffffff813ef684>] rtnetlink_rcv_msg+0x182/0x195
      [ 63.302334] [<ffffffff8107d04c>] ? trace_hardirqs_on+0xd/0xf
      [ 63.303888] [<ffffffff813ebfb7>] ? rtnl_lock+0x12/0x14
      [ 63.305346] [<ffffffff813ef502>] ? __rtnl_unlock+0x12/0x12
      [ 63.306878] [<ffffffff81407c4c>] netlink_rcv_skb+0x3d/0x90
      [ 63.308437] [<ffffffff813ec00e>] rtnetlink_rcv+0x21/0x28
      [ 63.309916] [<ffffffff81407742>] netlink_unicast+0xfa/0x17f
      [ 63.311447] [<ffffffff81407a5e>] netlink_sendmsg+0x297/0x2dc
      [ 63.313029] [<ffffffff813c6cd4>] sock_sendmsg_nosec+0x12/0x1d
      [ 63.314597] [<ffffffff813c835b>] ___sys_sendmsg+0x196/0x21b
      [ 63.316125] [<ffffffff8100bf9f>] ? native_sched_clock+0x1f/0x3c
      [ 63.317671] [<ffffffff8106c12f>] ? sched_clock_local+0x12/0x75
      [ 63.319185] [<ffffffff8106c397>] ? sched_clock_cpu+0x9d/0xb6
      [ 63.320693] [<ffffffff8107e2d7>] ? __lock_is_held+0x32/0x54
      [ 63.322145] [<ffffffff81159fcb>] ? __fget_light+0x4b/0x77
      [ 63.323541] [<ffffffff813c8726>] __sys_sendmsg+0x3d/0x5b
      [ 63.324947] [<ffffffff813c8751>] SyS_sendmsg+0xd/0x19
      [ 63.326274] [<ffffffff814c8f57>] entry_SYSCALL_64_fastpath+0x12/0x6f

      It looks like all of the code paths to fib_rebalance are under rtnl.

      Fixes: 0e884c78ee19 ("ipv4: L3 hash-based multipath")
      Cc: Peter Nørlund <pch@xxxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5f715c097965c0ad037f64393d0b95c50287775b
  Author: Andrej Ota <andrej@xxxxxx>
  Date:   Thu Oct 15 00:14:37 2015 +0200

      via-rhine: fix VLAN receive handling regression.

      Because eth_type_trans() consumes ethernet header worth of bytes, a call
      to read TCI from end of packet using rhine_rx_vlan_tag() no longer works
      as it's reading from an invalid offset.

      Tested to be working on PCEngines Alix board.

      Fixes: 810f19bcb862 ("via-rhine: add consistent memory barrier in vlan 
receive code.")
      Signed-off-by: Andrej Ota <andrej@xxxxxx>
      Acked-by: Francois Romieu <romieu@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac00737f4e8198f8ff5007c70af4dfe4fd47ea94
  Author: Tom Herbert <tom@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 14:40:44 2015 -0700

      bpf: Need to call bpf_prog_uncharge_memlock from bpf_prog_put

      Currently, is only called from __prog_put_rcu in the bpf_prog_release
      path. Need this to call this from bpf_prog_put also to get correct
      accounting.

      Fixes: aaac3ba95e4c8b49 ("bpf: charge user for creation of BPF maps and 
programs")
      Signed-off-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a302afe980ca6b25b2bae0b5bc816fe1dc1bb039
  Merge: 47ea032 ebb516a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 00:52:27 2015 -0700

      Merge branch 'robust_listener'

      Eric Dumazet says:

      ====================
      tcp/dccp: make our listener code more robust

      This patch series addresses request sockets leaks and listener dismantle
      phase. This survives a stress test with listeners being added/removed
      quite randomly.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebb516af60e18258aac8e80bbe068740ef1579ed
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 11:16:28 2015 -0700

      tcp/dccp: fix race at listener dismantle phase

      Under stress, a close() on a listener can trigger the
      WARN_ON(sk->sk_ack_backlog) in inet_csk_listen_stop()

      We need to test if listener is still active before queueing
      a child in inet_csk_reqsk_queue_add()

      Create a common inet_child_forget() helper, and use it
      from inet_csk_reqsk_queue_add() and inet_csk_listen_stop()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f03f2e154f52fdaa982de7e2c386737679963dc9
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 11:16:27 2015 -0700

      tcp/dccp: add inet_csk_reqsk_queue_drop_and_put() helper

      Let's reduce the confusion about inet_csk_reqsk_queue_drop() :
      In many cases we also need to release reference on request socket,
      so add a helper to do this, reducing code size and complexity.

      Fixes: 4bdc3d66147b ("tcp/dccp: fix behavior of stale SYN_RECV request 
sockets")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef84d8ce5a36d0c4a6454e7e9dff54d19f96a25f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 11:16:26 2015 -0700

      Revert "inet: fix double request socket freeing"

      This reverts commit c69736696cf3742b37d850289dc0d7ead177bb14.

      At the time of above commit, tcp_req_err() and dccp_req_err()
      were dead code, as SYN_RECV request sockets were not yet in ehash table.

      Real bug was fixed later in a different commit.

      We need to revert to not leak a refcount on request socket.

      inet_csk_reqsk_queue_drop_and_put() will be added
      in following commit to make clean inet_csk_reqsk_queue_drop()
      does not release the reference owned by caller.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b0753902d42f5cb01c33f0dec47ba2aa7ecfbb3f
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:59 2015 +0200

      s390/fpu: split fpu-internal.h into fpu internals, api, and type headers

      Split the API and FPU type definitions into separate header files
      similar to "x86/fpu: Rename fpu-internal.h to fpu/internal.h" 
(78f7f1e54b).

      The new header files and their meaning are:

      asm/fpu/types.h:
        FPU related data types, needed for 'struct thread_struct' and
        'struct task_struct'.

      asm/fpu/api.h:
        FPU related 'public' functions for other subsystems and device
        drivers.

      asm/fpu/internal.h:
        FPU internal functions mainly used to convert
        FPU register contents in signal handling.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 7de88271da98c0c6f918e4cf4aa214ac034bab00
  Merge: 53ca376 0a1f596
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 00:39:25 2015 -0700

      Merge branch 'ipv6-blackhole-route-fix'

      Martin KaFai Lau says:

      ====================
      ipv6: Initialize rt6_info properly in ip6_blackhole_route()

      This patchset ensures the rt6_info's fields are initialized properly
      in ip6_blackhole_route() where xfrm_policy is the primarily user.
      The first patch is a prep work.  The second patch is the fix.  It
      fixes d52d3997f843 ("ipv6: Create percpu rt6_info").

      Here is the oops reported by Phil Sutter <phil@xxxxxx>:

      BUG: unable to handle kernel NULL pointer dereference at 00000000000000a0
      IP: [<ffffffff8171a95e>] __ip6_datagram_connect+0x71e/0xa20
      PGD c2cb1067 PUD c2d7a067 PMD 0
      Oops: 0000 [#1] PREEMPT SMP
      Modules linked in: cmac nfs lockd grace sunrpc bridge stp llc nvidia(PO) 
snd_usb_audio snd_usbmidi_lib iTCO_wdt
      CPU: 1 PID: 2964 Comm: ping6 Tainted: P           O    4.2.1-aufs #10
      Hardware name: To Be Filled By O.E.M. To Be Filled By 
O.E.M./4Core1333-Viiv, BIOS P1.60 07/01/2008
      task: ffff8800ca62bc00 ti: ffff880129a14000 task.ti: ffff880129a14000
      RIP: 0010:[<ffffffff8171a95e>]  [<ffffffff8171a95e>] 
__ip6_datagram_connect+0x71e/0xa20
      RSP: 0018:ffff880129a17da8  EFLAGS: 00010296
      RAX: 000000000000000b RBX: 0000000000000000 RCX: 0000000000000006
      RDX: 0000000000000007 RSI: 0000000000000246 RDI: ffff88012fc8d5a0
      RBP: ffff8800cb9a9048 R08: 756e207369207472 R09: 216c6c756e207369
      R10: 0000000000000665 R11: 0000000000000006 R12: ffff8800cb9a8cf8
      R13: ffff8800cb9a8cf8 R14: 0000000000000000 R15: ffff8800cb9a8cc0
      FS:  00007fb76ad74700(0000) GS:ffff88012fc80000(0000) 
knlGS:0000000000000000
      CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      CR2: 00000000000000a0 CR3: 00000000c2dba000 CR4: 00000000000406e0
      Stack:
       ffff8800cb9a9048 ffff8800cb9a8de0 ffff8800cb9feb70 ffffffff816b2c41
       00007fb70000000b ffffea0000df7200 ffff8800cb9f5cfc ffff8800cb9a8cc0
       03fffffffe068a20 ffff8800cb9a8cc0 ffffffff817097c0 0000000100000000
      Call Trace:
       [<ffffffff816b2c41>] ? udp_lib_get_port+0x1a1/0x380
       [<ffffffff817097c0>] ? udpv6_rcv+0x20/0x20
       [<ffffffff8171ac82>] ? ip6_datagram_connect+0x22/0x40
       [<ffffffff8163ae9b>] ? SyS_connect+0x6b/0xb0
       [<ffffffff810767ac>] ? __do_page_fault+0x15c/0x380
       [<ffffffff8163a8d3>] ? SyS_socket+0x63/0xa0
       [<ffffffff81741957>] ? entry_SYSCALL_64_fastpath+0x12/0x6a
      Code: ba ae 00 00 00 48 c7 c6 7b 71 94 81 48 c7 c7 63 71 94 81 e8 6c 0f 
02 00 48 85 db 75 0e 48 c7 c7 9f 71 94 81 31 c0 e8 59 0f 02 00 <48> 83 bb a0 00 
00 00 00 75 0e 48 c7 c7 ae 71 94 81 31 c0 e8 41
      RIP  [<ffffffff8171a95e>] __ip6_datagram_connect+0x71e/0xa20
       RSP <ffff880129a17da8>
      CR2: 00000000000000a0
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a1f59620068fb82a2e2aded202e62f4bb856d52
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Thu Oct 15 16:39:58 2015 -0700

      ipv6: Initialize rt6_info properly in ip6_blackhole_route()

      ip6_blackhole_route() does not initialize the newly allocated
      rt6_info properly.  This patch:
      1. Call rt6_info_init() to initialize rt6i_siblings and rt6i_uncached

      2. The current rt->dst._metrics init code is incorrect:
         - 'rt->dst._metrics = ort->dst._metris' is not always safe
         - Not sure what dst_copy_metrics() is trying to do here
           considering ip6_rt_blackhole_cow_metrics() always returns
           NULL

         Fix:
         - Always do dst_copy_metrics()
         - Replace ip6_rt_blackhole_cow_metrics() with
           dst_cow_metrics_generic()

      3. Mask out the RTF_PCPU bit from the newly allocated blackhole route.
         This bug triggers an oops (reported by Phil Sutter) in 
rt6_get_cookie().
         It is because RTF_PCPU is set while rt->dst.from is NULL.

      Fixes: d52d3997f843 ("ipv6: Create percpu rt6_info")
      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Reported-by: Phil Sutter <phil@xxxxxx>
      Tested-by: Phil Sutter <phil@xxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Cc: Julian Anastasov <ja@xxxxxx>
      Cc: Phil Sutter <phil@xxxxxx>
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebfa45f0d952e5e7bb30a7f9daaad681de138728
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Thu Oct 15 16:39:57 2015 -0700

      ipv6: Move common init code for rt6_info to a new function rt6_info_init()

      Introduce rt6_info_init() to do the common init work for
      'struct rt6_info' (after calling dst_alloc).

      It is a prep work to fix the rt6_info init logic in the
      ip6_blackhole_route().

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Cc: Julian Anastasov <ja@xxxxxx>
      Cc: Phil Sutter <phil@xxxxxx>
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5157b8a503fa834e8569c7fed06981e3d3d53db0
  Author: Jakub Pawlowski <jpawlowski@xxxxxxxxxx>
  Date:   Fri Oct 16 10:07:54 2015 +0300

      Bluetooth: Fix initializing conn_params in scan phase

      This patch makes sure that conn_params that were created just for
      explicit_connect, will get properly deleted during cleanup.

      Signed-off-by: Jakub Pawlowski <jpawlowski@xxxxxxxxxx>
      Acked-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 9ad3e6ffe189a988389d88ce33101668cb2d54c6
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Oct 16 10:07:53 2015 +0300

      Bluetooth: Fix conn_params list update in hci_connect_le_scan_cleanup

      After clearing the params->explicit_connect variable the parameters
      may need to be either added back to the right list or potentially left
      absent from both the le_reports and the le_conns lists.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 679d2b6f9d742b3f091868bd9a0634647ce7e782
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Oct 16 10:07:52 2015 +0300

      Bluetooth: Fix remove_device behavior for explicit connects

      Devices undergoing an explicit connect should not have their
      conn_params struct removed by the mgmt Remove Device command. This
      patch fixes the necessary checks in the command handler to correct the
      behavior.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 49c509220db990ad003060db2267b9bbb597cd94
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Oct 16 10:07:51 2015 +0300

      Bluetooth: Fix LE reconnection logic

      We can't use hci_explicit_connect_lookup() since that would only cover
      explicit connections, leaving normal reconnections completely
      untouched. Not using it in turn means leaving out entries in
      pend_le_reports.

      To fix this and simplify the logic move conn params from the reports
      list to the pend_le_conns list for the duration of an explicit
      connect. Once the connect is complete move the params back to the
      pend_le_reports list. This also means that the explicit connect lookup
      function only needs to look into the pend_le_conns list.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b958f9a3e87766a88036616389eaaf3ad3bd5fc8
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Oct 16 10:07:50 2015 +0300

      Bluetooth: Fix reference counting for LE-scan based connections

      The code should never directly call hci_conn_hash_del since many
      cleanup & reference counting updates would be lost. Normally
      hci_conn_del is the right thing to do, but in the case of a connection
      doing LE scanning this could cause a deadlock due to doing a
      cancel_delayed_work_sync() on the same work callback that we were
      called from.

      Connections in the LE scanning state actually need very little cleanup
      - just a small subset of hci_conn_del. To solve the issue, refactor
      out these essential pieces into a new hci_conn_cleanup() function and
      call that from the two necessary places.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 168b8a25c0ac30f427bfe6ad547779c4c363d042
  Author: Jakub Pawlowski <jpawlowski@xxxxxxxxxx>
  Date:   Fri Oct 16 10:07:49 2015 +0300

      Bluetooth: Fix double scan updates

      When disable/enable scan command is issued twice, some controllers
      will return an error for the second request, i.e. requests with this
      command will fail on some controllers, and succeed on others.

      This patch makes sure that unnecessary scan disable/enable commands
      are not issued.

      When adding device to the auto connect whitelist when there is pending
      connect attempt, there is no need to update scan.

      hci_connect_le_scan_cleanup is conditionally executing
      hci_conn_params_del, that is calling hci_update_background_scan. Make
      the other case also update scan, and remove reduntand call from
      hci_connect_le_scan_remove.

      When stopping interleaved discovery the state should be set to stopped
      only when both LE scanning and discovery has stopped.

      Signed-off-by: Jakub Pawlowski <jpawlowski@xxxxxxxxxx>
      Acked-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 47ea0325337b166c1c8695119aa6e83cdc035ef5
  Author: Ivan Vecera <ivecera@xxxxxxxxxx>
  Date:   Thu Oct 15 21:28:52 2015 +0200

      drivers/net: get rid of unnecessary initializations in .get_drvinfo()

      Many drivers initialize uselessly n_priv_flags, n_stats, testinfo_len,
      eedump_len & regdump_len fields in their .get_drvinfo() ethtool op.
      It's not necessary as these fields is filled in ethtool_get_drvinfo().

      v2: removed unused variable
      v3: removed another unused variable

      Signed-off-by: Ivan Vecera <ivecera@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a515de660747eb01f3ef80e75bfc51ac63cfc546
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 14:28:56 2015 +0200

      cfg80211: reg: fix reg_ignore_cell_hint return type

      The return type should be enum reg_request_treatment for both
      branches of the #ifdef.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 81e925747e1c2ef2fa0316c2cd74410c65242a9e
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 14:27:04 2015 +0200

      cfg80211: reg: reduce chan_reg_rule_print_dbg() ifdef

      The function is void and static, so just ifdef its contents
      instead of duplicating the declaration.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 9f5068029274a15bf0a92f77e126fe52c3551c19
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 13:35:45 2015 +0200

      cfg80211: reg: fix antenna gain in chan_reg_rule_print_dbg()

      Printing "N/A mBi" is strange - print just "N/A" instead.

      Also add a missing opening parenthesis.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit d34265a3eebe994b3b9a0e4cabbc2dbb8436388b
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 13:05:55 2015 +0200

      cfg80211: reg: centralize freeing ignored requests

      Instead of having a lot of places that free ignored requests
      and then return REG_REQ_OK, make reg_process_hint() process
      REG_REQ_IGNORE by freeing the request, and let functions it
      calls return that instead of freeing.

      This also fixes a leak when a second (different) country IE
      hint was ignored.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 480908a7ec5f2d37d5610b7d9bc48a38f2093876
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 12:58:58 2015 +0200

      cfg80211: reg: clarify 'treatment' handling in reg_process_hint()

      This function can only deal with treatment values OK and ALREADY_SET
      so make the callees not return anything else and warn if they do.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit fd453d3c53eed367f18a0c75bd855cdfc9d6d416
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 10:22:12 2015 +0200

      cfg80211: reg: rename reg_regdb_query() to reg_query_builtin()

      The new name better reflects the functionality.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit b68630369167a7fd2c4c3d1be96430defc59fb9a
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 09:25:18 2015 +0200

      cfg80211: reg: make CRDA support optional

      If there's a built-in regulatory database, there may be little point
      in also calling out to CRDA and failing if the system is configured
      that way. Allow removing CRDA support to save ~1K kernel size.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ae23051820461bdc960b76d766e7c1e92dee2ee1
  Merge: 175f8d6 c819930
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 23:55:33 2015 -0700

      Merge branch 'tipc-link-improvements'

      Jon Maloy says:

      ====================
      tipc: some link level code improvements

      Extensive testing has revealed some weaknesses and non-optimal solutions
      in the link level code.

      This commit series addresses those issues.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c819930090fe3f74c822be765c185b3431360193
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:46 2015 -0400

      tipc: update node FSM when peer RESET message is received

      The change made in the previous commit revealed a small flaw in the way
      the node FSM is updated. When the function tipc_node_link_down() is
      called for the last link to a node, we should check whether this was
      caused by a local reset or by a received RESET message from the peer.
      In the latter case, we can directly issue a PEER_LOST_CONTACT_EVT to
      the node FSM, so that it is ready to re-establish contact. If this is
      not done, the peer node will sometimes have to go through a second
      establish cycle before the link becomes stable.

      We fix this in this commit by conditionally issuing the mentioned
      event in the function tipc_node_link_down(). We also move LINK_RESET
      FSM even away from the link_reset() function and into the caller
      function, partially because it is easier to follow the code when state
      changes are gathered at a limited number of locations, partially
      because there will be cases in future commits where we don't want the
      link to go RESET mode when link_reset() is called.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 282b3a056225b35024246f63feb91d769d714dad
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:45 2015 -0400

      tipc: send out RESET immediately when link goes down

      When a link is taken down because of a node local event, such as
      disabling of a bearer or an interface, we currently leave it to the
      peer node to discover the broken communication. The default time for
      such failure discovery is 1.5-2 seconds.

      If we instead allow the terminating link endpoint to send out a RESET
      message at the moment it is reset, we can achieve the impression that
      both endpoints are going down instantly. Since this is a very common
      scenario, we find it worthwhile to make this small modification.

      Apart from letting the link produce the said message, we also have to
      ensure that the interface is able to transmit it before TIPC is
      detached. We do this by performing the disabling of a bearer in three
      steps:

      1) Disable reception of TIPC packets from the interface in question.
      2) Take down the links, while allowing them so send out a RESET message.
      3) Disable transmission of TIPC packets on the interface.

      Apart from this, we now have to react on the NETDEV_GOING_DOWN event,
      instead of as currently the NEDEV_DOWN event, to ensure that such
      transmission is possible during the teardown phase.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 73f646cec35477b5099d7e952297cb9e1855be45
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:44 2015 -0400

      tipc: delay ESTABLISH state event when link is established

      Link establishing, just like link teardown, is a non-atomic action, in
      the sense that discovering that conditions are right to establish a link,
      and the actual adding of the link to one of the node's send slots is done
      in two different lock contexts. The link FSM is designed to help bridging
      the gap between the two contexts in a safe manner.

      We have now discovered a weakness in the implementaton of this FSM.
      Because we directly let the link go from state LINK_ESTABLISHING to
      state LINK_ESTABLISHED already in the first lock context, we are unable
      to distinguish between a fully established link, i.e., a link that has
      been added to its slot, and a link that has not yet reached the second
      lock context. It may hence happen that a manual intervention, e.g., when
      disabling an interface, causes the function tipc_node_link_down() to try
      removing the link from the node slots, decrementing its active link
      counter etc, although the link was never added there in the first place.

      We solve this by delaying the actual state change until we reach the
      second lock context, inside the function tipc_node_link_up(). This
      makes it possible for potentail callers of __tipc_node_link_down() to
      know if they should proceed or not, and the problem is solved.

      Unforunately, the situation described above also has a second problem.
      Since there by necessity is a tipc_node_link_up() call pending once
      the node lock has been released, we must defuse that call by setting
      the link back from LINK_ESTABLISHING to LINK_RESET state. This forces
      us to make a slight modification to the link FSM, which will now look
      as follows.

       +------------------------------------+
       |RESET_EVT                           |
       |                                    |
       |                             +--------------+
       |           +-----------------|   SYNCHING   |-----------------+
       |           |FAILURE_EVT      +--------------+   PEER_RESET_EVT|
       |           |                  A            |                  |
       |           |                  |            |                  |
       |           |                  |            |                  |
       |           |                  |SYNCH_      |SYNCH_            |
       |           |                  |BEGIN_EVT   |END_EVT           |
       |           |                  |            |                  |
       |           V                  |            V                  V
       |    +-------------+          +--------------+          +------------+
       |    |  RESETTING  |<---------|  ESTABLISHED |--------->| PEER_RESET |
       |    +-------------+ FAILURE_ +--------------+ PEER_    +------------+
       |           |        EVT        |    A         RESET_EVT       |
       |           |                   |    |                         |
       |           |  +----------------+    |                         |
       |  RESET_EVT|  |RESET_EVT            |                         |
       |           |  |                     |                         |
       |           |  |                     |ESTABLISH_EVT            |
       |           |  |  +-------------+    |                         |
       |           |  |  | RESET_EVT   |    |                         |
       |           |  |  |             |    |                         |
       |           V  V  V             |    |                         |
       |    +-------------+          +--------------+        RESET_EVT|
       +--->|    RESET    |--------->| ESTABLISHING |<----------------+
            +-------------+ PEER_    +--------------+
             |           A  RESET_EVT       |
             |           |                  |
             |           |                  |
             |FAILOVER_  |FAILOVER_         |FAILOVER_
             |BEGIN_EVT  |END_EVT           |BEGIN_EVT
             |           |                  |
             V           |                  |
            +-------------+                 |
            | FAILINGOVER |<----------------+
            +-------------+

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8306f99a517b91ebf8fa94d017c2c84ca62e107c
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:43 2015 -0400

      tipc: disallow packet duplicates in link deferred queue

      After the previous commits, we are guaranteed that no packets
      of type LINK_PROTOCOL or with illegal sequence numbers will be
      attempted added to the link deferred queue. This makes it possible to
      make some simplifications to the sorting algorithm in the function
      tipc_skb_queue_sorted().

      We also alter the function so that it will drop packets if one with
      the same seqeunce number is already present in the queue. This is
      necessary because we have identified weird packet sequences, involving
      duplicate packets, where a legitimate in-sequence packet may advance to
      the head of the queue without being detected and de-queued.

      Finally, we make this function outline, since it will now be called only
      in exceptional cases.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 81204c492b05274ade680c54787cd8ba234dcfd7
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:42 2015 -0400

      tipc: improve sequence number checking

      The sequence number of an incoming packet is currently only checked
      for less than, equality to, or bigger than the next expected number,
      meaning that the receive window in practice becomes one half sequence
      number cycle, or U16_MAX/2. This does not make sense, and may not even
      be safe if there are extreme delays in the network. Any packet sent by
      the peer during the ongoing cycle must belong inside his current send
      window, or should otherwise be dropped if possible.

      Since a link endpoint cannot know its peer's current send window, it
      has to base this sanity check on a worst-case assumption, i.e., that
      the peer is using a maximum sized window of 8191 packets. Using this
      assumption, we now add a check that the sequence number is not bigger
      than next_expected + TIPC_MAX_LINK_WIN. We also re-order the checks
      done, so that the receive window test is performed before the gap test.
      This way, we are guaranteed that no packet with illegal sequence numbers
      are ever added to the deferred queue.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9aa358a8109f9f33e96c3a7efb9a07631670294
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:41 2015 -0400

      tipc: simplify tipc_link_rcv() reception loop

      Currently, all packets received in tipc_link_rcv() are unconditionally
      added to the packet deferred queue, whereafter that queue is walked and
      all its buffers evaluated for delivery. This is both non-optimal and
      and makes the queue sorting function unnecessary complex.

      This commit changes the loop so that an arrived packet is evaluated
      first, and added to the deferred queue only when a sequence number gap
      is discovered. A non-empty deferred queue is walked until it is empty
      or until its head's sequence number doesn't fit.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9945e8043ef9273cfb633d930e2a5a9116009b09
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:40 2015 -0400

      tipc: limit usage of temporary skb list during packet reception

      During packet reception, the function tipc_link_rcv() adds its accepted
      packets to a temporary buffer queue, before finally splicing this queue
      into the lock protected input queue that will be delivered up to the
      socket layer. The purpose is to reduce potential contention on the input
      queue lock. However, since the vast majority of packets arrive in
      sequence, they will anyway be added one by one to the input queue, and
      the use of the temporary queue becomes a sub-optimization.

      The only case where this queue makes sense is when unpacking buffers
      from a bundle packet; here we want to avoid dozens of small buffers
      to be added individually to the lock-protected input queue in a tight
      loop.

      In this commit, we remove the general usage of the temporary queue,
      and keep it only for the packet unbundling case.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 175f8d6746aa4b1dac5ccf576bcbc5488ff21a36
  Author: Insu Yun <wuninsu@xxxxxxxxx>
  Date:   Thu Oct 15 12:24:09 2015 -0400

      mlx4: corretly check failed allocation

      When allocation fails, mlx4_alloc_cmd_mailbox returns -ENOMEM.
      Since there is no case that mlx4_alloc_cmd_mailbox returns NULL,
      it needs to be checked by IS_ERR, not IS_ERR_OR_NULL

      Signed-off-by: Insu Yun <wuninsu@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e87eb4051efe76b35d0a297db772f5964a001544
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 15 09:22:11 2015 -0700

      bonding: support encapsulated ipv6 TSO

      If using a sixtofour device on top of a bonding device,
      skb segmentation of TCP traffic is done right before calling
      bonding xmit, because bonding only enables TSO for IPv4.

      This patch improves single flow performance by about 120 % on my hosts,
      because segmentation is deferred right before calling slave xmit.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 181e4246b4666bc3af148c1dacb330c9be2acf76
  Merge: 96aec91 5cd16d8
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 23:28:03 2015 -0700

      Merge branch 'mlxsw-cleanups'

      Jiri Pirko says:

      ====================
      mlxsw: Driver update, cleanups

      This patchset contains various cleanups and improvements in mlxsw driver.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5cd16d8c78fd17520fff437256f0c3a4e960fd5d
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:29 2015 +0200

      mlxsw: cmd: Update CONFIG_PROFILE command documentation

      The meaning of certain parameters in the profile passed to the device
      during initialization has changed, so update their documentation
      accordingly.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 801bd3defb2eac756e6570168d0f8187781ad8ad
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:28 2015 +0200

      mlxsw: Add trap group for control packets

      Previously, we trapped flooded and control packets using the same trap
      group. This can cause flooded packets to overflow the PCI bus and
      prevent control packets (e.g. STP, LACP) from getting to the CPU.

      Solve this by splitting the RX trap group to RX and control, which allows
      us to configure a policer on the first, thereby preventing it from
      overflowing the PCI bus.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f24af330159aa1afbc6670e5786856a2a99d112c
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:27 2015 +0200

      mlxsw: Simplify traps creation

      The Host Trap Group Table (HTGT) register configures trap groups, which
      are populated with trap IDs using the Host PacKet Trap (HPKT) register.
      However, a trap ID can only be present inside one trap group (the last
      configured).

      Instead of passing both the trap group and ID for the function that
      packs HPKT, pass only the trap ID and derive from it the trap group.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebb7963f9b14bbaa07b6074579225d6338318ecb
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:26 2015 +0200

      mlxsw: Introduce mlxsw_reg_spms_vid_pack helper and use it

      Introduce separate helper for packing SPMS VIDs, as it can be used for
      multiple VIDs and not only for one as previous SPMS pack function
      provided.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fa6ad058bc77b6ae69bd4512b538245ee5db39eb
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:25 2015 +0200

      mlxsw: reg: Adjust definition of enum mlxsw_reg_sfgc_type

      Define max which would be needed later on.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36b78e8ababe6c596680d742f20bece5e8dc9820
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:24 2015 +0200

      mlxsw: reg: Remove extra space in SFGC ID define

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3f0effd16b69d84558f2e7eb7ccd0e27a43173f4
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:23 2015 +0200

      mlxsw: reg: Uppercase letters in register IDs

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6cf9dc8b77918c30260bc0f2e1853eb7d1ce34e8
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:22 2015 +0200

      mlxsw: Use dev_level_ratelimited instead of net_ratelimit & dev_level

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 18ea54454ecdd516ad11bf88d86f1994548692bf
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:21 2015 +0200

      mlxsw: core: Do not use EMADs in mlxsw_emad_fini

      Be symmetric with mlxsw_emad_init and don't use EMADs in mlxsw_emad_fini
      cleanup function. Use command interface instead.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3e2206da73e37c0fc07675b5caf25d3b26e33b7d
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:20 2015 +0200

      mlxsw: pci: Limit number of entries being sent in single MAP_FA cmd

      Firmware accepts only limited number of mapping entries for MAP_FA
      command. In order to prevent overflow, introduce a limit and in case the
      number of entries is bigger, call MAP_FA multiple times.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c85c3882ad88dd36105148912cd95084b09a5676
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:19 2015 +0200

      mlxsw: pci: Remove MLXSW_PCI_RDQS/SDQS defines and checks

      Remove strict number check of queues count as various ASICs have
      different counts.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 424e1114af94a543b3126f84ddd38742c7cfbbb6
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:18 2015 +0200

      mlxsw: pci: Do not use MLXSW_PCI_SDQS_COUNT define

      Use mlxsw_pci_sdq_count helper instead.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e4c870b1b496c90dc4fa9cf24937c7a45e84187f
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:17 2015 +0200

      mlxsw: pci: Use MLXSW_PCI_CQS_MAX instead of MLXSW_PCI_CQS_COUNT

      The count of CQs can be different for various ASICs, so just define
      maximal value and check for that.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ffe053285b77e9cd87c3b8e37f35bdb8de8172d1
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:16 2015 +0200

      mlxsw: switchx2: Use ETH_ALEN for mac address length

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 33a704a59b6618dceb4a3ec1200b879294962c88
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:15 2015 +0200

      mlxsw: Remove multicast ID configuration

      With respect to a firmware change, the Switch Multicast ID (SMID)
      register is no longer needed, so the related configuration code can be
      removed.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d549f545e690c3cbdeb33df3579eae3230eb8904
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 7 12:41:21 2015 +0200

      drm/virtio: use %llu format string form atomic64_t

      The virtgpu driver prints the last_seq variable using the %ld or
      %lu format string, which does not work correctly on all architectures
      and causes this compiler warning on ARM:

      drivers/gpu/drm/virtio/virtgpu_fence.c: In function 
'virtio_timeline_value_str':
      drivers/gpu/drm/virtio/virtgpu_fence.c:64:22: warning: format '%lu' 
expects argument of type 'long unsigned int', but argument 4 has type 'long 
long int' [-Wformat=]
        snprintf(str, size, "%lu", atomic64_read(&fence->drv->last_seq));
                            ^
      drivers/gpu/drm/virtio/virtgpu_debugfs.c: In function 
'virtio_gpu_debugfs_irq_info':
      drivers/gpu/drm/virtio/virtgpu_debugfs.c:37:16: warning: format '%ld' 
expects argument of type 'long int', but argument 3 has type 'long long int' 
[-Wformat=]
        seq_printf(m, "fence %ld %lld\n",
                      ^

      In order to avoid the warnings, this changes the format strings to %llu
      and adds a cast to u64, which makes it work the same way everywhere.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit ba2199a63df6a25ac6aa93cc197f7005ecb6781b
  Author: Patrik Jakobsson <patrik.r.jakobsson@xxxxxxxxx>
  Date:   Mon Oct 12 23:14:44 2015 +0200

      MAINTAINERS: Add myself as maintainer for the gma500 driver

      Signed-off-by: Patrik Jakobsson <patrik.r.jakobsson@xxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 99763bb85a9f99b6f58e81ee097059e2dce942bc
  Author: Boris BREZILLON <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 11:55:42 2015 +0200

      MAINTAINERS: add a maintainer for the atmel-hlcdc DRM driver

      Add myself as the maintainer of the atmel-hlcdc DRM driver.

      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Acked-by: Nicolas Ferre <nicolas.ferre@xxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 57606c73dca35f5ea0f2948e64c3ec6014e19cd0
  Merge: b2293cb f6c7aba
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 16 10:01:24 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      Just two fixes for amdgpu:
      - fix pageflip interrupt issue
      - fix display clock handling on certain fiji boards

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: Keep the pflip interrupts always enabled v7
        drm/amdgpu: adjust default dispclk (v2)

  commit b2293cb5c6356e31a1c3275b0f84919d592902c9
  Merge: ae49154 ed7d78b
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 16 08:10:21 2015 +1000

      Merge tag 'vmwgfx-fixes-4.3-151014' of 
git://people.freedesktop.org/~thomash/linux into drm-fixes

      Pull request of 2015-10-14

      * tag 'vmwgfx-fixes-4.3-151014' of 
git://people.freedesktop.org/~thomash/linux:
        drm/vmwgfx: Fix kernel NULL pointer dereference on older hardware

  commit 69984b64440729bf6b08d1ddc1b3ee8282a2c846
  Merge: 3155823 eb93ce2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 14:03:38 2015 -0700

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Will Deacon:
       "Here are a few more arm64 fixes for 4.3.  Again, nothing too
        significant, but worth having nonetheless.  The MINSIGSTKSZ update is
        a bit grotty, but the value we currently have is wrong (too small), so
        anybody using that will have issues already.  It has Arnd's ack for
        the asm-generic change.

        Summary:

         - Fix module CFLAGS setting in workaround for erratum #843419
         - Update MINSIGSTKSZ and SIGSTKSZ to match glibc
         - Wire up some new compat syscalls"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: compat: wire up new syscalls
        arm64: Fix MINSIGSTKSZ and SIGSTKSZ
        arm64: errata: use KBUILD_CFLAGS_MODULE for erratum #843419

  commit 31558237f86f6fc90eb5acf98d284a9f99aa6c10
  Merge: 58bd6e0 de7f8e3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 13:58:22 2015 -0700

      Merge tag 'pinctrl-v4.3-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl

      Pull pinctrl fixes from Linus Walleij:
       "Here are some overdue (what can I say, I was on a short vacation)
        driver fixes for the pin control subsystem:

         - Allwinner sun5i A10s had a faulty mapping

         - Freescale i.MX25 had some bad arithmetics

         - Uniphier PH1-sLD8 missed some input enable settings"

      * tag 'pinctrl-v4.3-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:
        pinctrl: uniphier: fix input enable settings for PH1-sLD8
        pinctrl: imx25: ensure that a pin with id i is at position i in the 
info array
        pinctrl: sun5i: Fix a10s pwm1 pinctrl mapping

  commit 8e601a9f97a00bab031980de34f9a81891c1f82f
  Author: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 12:34:21 2015 -0700

      cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL)

      This is a workaround for KNL platform, where in some cases MPERF counter
      will not have updated value before next read of MSR_IA32_MPERF. In this
      case divide by zero will occur. This change ignores current sample for
      busy calculation in this case.

      Fixes: b34ef932d79a (intel_pstate: Knights Landing support)
      Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
      Acked-by: Kristen Carlson Accardi <kristen@xxxxxxxxxxxxxxx>
      Cc: 4.1+ <stable@xxxxxxxxxxxxxxx> # 4.1+
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 58bd6e060260d938650687cdd8f02dfafcb51f91
  Merge: c7823b6 0b5c927
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 13:44:35 2015 -0700

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull rdma updates from Doug Ledford:
       "We have four batched up patches for the current rc kernel.

        Two of them are small fixes that are obvious.

        One of them is larger than I would like for a late stage rc pull, but
        we found an issue in the namespace lookup code related to RoCE and
        this works around the issue for now (we allow a lookup with a
        namespace to succeed on RoCE since RoCE namespaces aren't implemented
        yet).  This will go away in 4.4 when we put in support for namespaces
        in RoCE devices.

        The last one is large in terms of lines, but is all legal and no
        functional changes.  Cisco needed to update their files to be more
        specific about their license.  They had intended the files to be dual
        licensed as GPL/BSD all along, and specified that in their module
        license tag, but their file headers were not up to par.  They
        contacted all of the contributors to get agreement and then submitted
        a patch to update the license headers in the files.

        Summary:

         - Work around connection namespace lookup bug related to RoCE

         - Change usnic license to Dual GPL/BSD (was intended to be that way
           all along, but wasn't clear, permission from contributors was
           chased down)

         - Fix an issue between NFSoRDMA and mlx5 that could cause an oops

         - Fix leak of sendonly multicast groups"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/ipoib: For sendonly join free the multicast group on leave
        IB/cma: Accept connection without a valid netdev on RoCE
        xprtrdma: Don't require LOCAL_DMA_LKEY support for fastreg
        usnic: add missing clauses to BSD license

  commit c7823b6b97ddc3d9f627611557d2b5842c36b67e
  Merge: 176bed1 d4eb6de
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 13:31:00 2015 -0700

      Merge branch 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs

      Pull ext4 Kconfig description fixup from Jan Kara:
       "A small fixup in description of EXT4_USE_FOR_EXT2 config option"

      * 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs:
        ext4: Update EXT4_USE_FOR_EXT2 description

  commit 176bed1de5bf977938cad26551969eca8f0883b1
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 13:01:50 2015 -0700

      vmstat: explicitly schedule per-cpu work on the CPU we need it to run on

      The vmstat code uses "schedule_delayed_work_on()" to do the initial
      startup of the delayed work on the right CPU, but then once it was
      started it would use the non-cpu-specific "schedule_delayed_work()" to
      re-schedule it on that CPU.

      That just happened to schedule it on the same CPU historically (well, in
      almost all situations), but the code _requires_ this work to be per-cpu,
      and should say so explicitly rather than depend on the non-cpu-specific
      scheduling to schedule on the current CPU.

      The timer code is being changed to not be as single-minded in always
      running things on the calling CPU.

      See also commit 874bbfe600a6 ("workqueue: make sure delayed work run in
      local cpu") that for now maintains the local CPU guarantees just in case
      there are other broken users that depended on the accidental behavior.

      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 995e2fe9a4904c0b83c4eead7db42f5d52b09a85
  Merge: cfed1e3 874bbfe
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 12:58:37 2015 -0700

      Merge branch 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq

      Pull workqueue fixlet from Tejun Heo:
       "Single patch to make delayed work always be queued on the local CPU"

      This is not actually something we should guarantee, but it's something
      we by accident have historically done, and at least one call site has
      grown to depend on it.

      I'm going to fix that known broken callsite, but in the meantime this
      makes the accidental behavior be explicit, just in case there are other
      cases that might depend on it.

      * 'for-4.3-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq:
        workqueue: make sure delayed work run in local cpu

  commit 0dfc70c33409afc232ef0b9ec210535dfbf9bc61
  Author: Keith Busch <keith.busch@xxxxxxxxx>
  Date:   Thu Oct 15 13:38:48 2015 -0600

      NVMe: Fix memory leak on retried commands

      Resources are reallocated for requeued commands, so unmap and release
      the iod for the failed command.

      It's a pretty bad memory leak and causes a kernel hang if you remove a
      drive because of a busy dma pool. You'll get messages spewing like this:

        nvme 0000:xx:xx.x: dma_pool_destroy prp list 256, ffff880420dec000 busy

      and lock up pci and the driver since removal never completes while
      holding a lock.

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0.x-
      Signed-off-by: Keith Busch <keith.busch@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit fc531d9848a06e96280e60e4a5b5168de3ad5c3d
  Author: Wolfram Sang <wsa@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 15:50:15 2015 +0200

      MAINTAINERS: add maintainers for Synopsis Designware I2C drivers

      Those guys already have been helpful in the past and are actively
      working on this driver, unlike me.

      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Acked-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Acked-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Acked-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>

  commit 17b38fb89055bf5df402980c9546a8b046552f2b
  Author: Doron Tsur <doront@xxxxxxxxxxxx>
  Date:   Thu Oct 15 15:01:02 2015 +0300

      IB/core: Fix memory corruption in ib_cache_gid_set_default_gid

      When ib_cache_gid_set_default_gid is called from several threads,
      updating the table could make find_gid fail, therefore a negative
      index will be retruned and an invalid table entry will be used.
      Locking find_gid as well fixes this problem.

      Fixes: 03db3a2d81e6 ('IB/core: Add RoCE GID table management')
      Signed-off-by: Doron Tsur <doront@xxxxxxxxxxxx>
      Signed-off-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Thu Oct 15 17:21:37 2015 +0100

      KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring

      The following sequence of commands:

          i=`keyctl add user a a @s`
          keyctl request2 keyring foo bar @t
          keyctl unlink $i @s

      tries to invoke an upcall to instantiate a keyring if one doesn't already
      exist by that name within the user's keyring set.  However, if the upcall
      fails, the code sets keyring->type_data.reject_error to -ENOKEY or some
      other error code.  When the key is garbage collected, the key destroy
      function is called unconditionally and keyring_destroy() uses list_empty()
      on keyring->type_data.link - which is in a union with reject_error.
      Subsequently, the kernel tries to unlink the keyring from the keyring 
names
      list - which oopses like this:

        BUG: unable to handle kernel paging request at 00000000ffffff8a
        IP: [<ffffffff8126e051>] keyring_destroy+0x3d/0x88
        ...
        Workqueue: events key_garbage_collector
        ...
        RIP: 0010:[<ffffffff8126e051>] keyring_destroy+0x3d/0x88
        RSP: 0018:ffff88003e2f3d30  EFLAGS: 00010203
        RAX: 00000000ffffff82 RBX: ffff88003bf1a900 RCX: 0000000000000000
        RDX: 0000000000000000 RSI: 000000003bfc6901 RDI: ffffffff81a73a40
        RBP: ffff88003e2f3d38 R08: 0000000000000152 R09: 0000000000000000
        R10: ffff88003e2f3c18 R11: 000000000000865b R12: ffff88003bf1a900
        R13: 0000000000000000 R14: ffff88003bf1a908 R15: ffff88003e2f4000
        ...
        CR2: 00000000ffffff8a CR3: 000000003e3ec000 CR4: 00000000000006f0
        ...
        Call Trace:
         [<ffffffff8126c756>] key_gc_unused_keys.constprop.1+0x5d/0x10f
         [<ffffffff8126ca71>] key_garbage_collector+0x1fa/0x351
         [<ffffffff8105ec9b>] process_one_work+0x28e/0x547
         [<ffffffff8105fd17>] worker_thread+0x26e/0x361
         [<ffffffff8105faa9>] ? rescuer_thread+0x2a8/0x2a8
         [<ffffffff810648ad>] kthread+0xf3/0xfb
         [<ffffffff810647ba>] ? kthread_create_on_node+0x1c2/0x1c2
         [<ffffffff815f2ccf>] ret_from_fork+0x3f/0x70
         [<ffffffff810647ba>] ? kthread_create_on_node+0x1c2/0x1c2

      Note the value in RAX.  This is a 32-bit representation of -ENOKEY.

      The solution is to only call ->destroy() if the key was successfully
      instantiated.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Tested-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>

  commit 26ba9cd48fc0c2ff741de913270e9469506f3666
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Sep 24 17:52:52 2015 -0700

      gpio: pl061: assign the apropriate handler for irqs

      The PL061 can handle level IRQs and edge IRQs, however it is
      just utilizing handle_simple_irq() for all IRQs. Inspired by
      Stefan Agners patch to vf610, this assigns the right handler
      depending on what type is set up, and after this
      handle_bad_irq() is only used as default and if the type is
      not specified, as is done in the OMAP driver: defining the
      IRQ type is really not optional for this driver.

      The interrupt handler was just writing the interrupt clearing
      register for all lines that were high when entering the handling
      loop, this is wrong: that register is only supposed to be
      written (on a per-line basis) for edge IRQs, so this ACK
      was moved to the .irq_ack() callback as is proper.

      Tested with PL061 on the ARM RealView PB11MPCore and the
      MMC/SC card detect GPIO.

      Cc: Jonas Gorski <jogo@xxxxxxxxxxx>
      Cc: Stefan Agner <stefan@xxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4f1d841475e1f6e9e32496dda11215db56f4ea73
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Fri Oct 9 17:51:47 2015 +0200

      ARM: tegra: Comment out gpio-ranges properties

      While the addition of these properties is technically correct it unveils
      a bug with deferred probe. The problem is that the presence of the gpio-
      range property causes the gpio-tegra driver to defer probe (it needs the
      pinctrl driver to be ready). That's technically correct, but it causes a
      couple of issues:

        - The keyboard on Chromebooks stops working. The reason for that is
          that the gpio-tegra device has not registered an IRQ domain by the
          time the EC SPI device is registered, hence the interrupt number
          resolves to 0. This is technically a bug in the SPI core, since it
          should really resolve the interrupt at probe time and defer if the
          IRQ domain isn't available yet. This is similar to what's done for
          I2C and platform device already.

        - The gpio-tegra device deferring probe means that it is moved to the
          end of the dpm_list. This list defines the suspend/resume order for
          devices. However the core lacks a way to move all users of the
          gpio-tegra device to the end of the dpm_list at the same time. This
          in turn results in a subtle bug on Jetson TK1, where the gpio-keys
          device is used to expose the power key as input. The power key is a
          convenient way to wake the system from suspend. Interestingly, the
          gpio-keys device ends up getting probed at a point after gpio-tegra
          has been probed successfully from having been deferred earlier. As
          such the driver doesn't need to defer the probe itself, and hence
          the device isn't moved to the end of the dpm_list. This causes the
          gpio-tegra device to be suspended before gpio-keys, which in turn
          leaves gpio-keys unable to wake the system from suspend.

      There are patches in the works to fix both of the above issues, but they
      are too involved to make it into v4.3, so in the meantime let's fix the
      regressions by commenting out the gpio-ranges properties until the fixes
      have landed.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit b02176f30cd30acccd3b633ab7d9aed8b5da52ff
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 8 12:20:22 2015 -0400

      block: don't release bdi while request_queue has live references

      bdi's are initialized in two steps, bdi_init() and bdi_register(), but
      destroyed in a single step by bdi_destroy() which, for a bdi embedded
      in a request_queue, is called during blk_cleanup_queue() which makes
      the queue invisible and starts the draining of remaining usages.

      A request_queue's user can access the congestion state of the embedded
      bdi as long as it holds a reference to the queue.  As such, it may
      access the congested state of a queue which finished
      blk_cleanup_queue() but hasn't reached blk_release_queue() yet.
      Because the congested state was embedded in backing_dev_info which in
      turn is embedded in request_queue, accessing the congested state after
      bdi_destroy() was called was fine.  The bdi was destroyed but the
      memory region for the congested state remained accessible till the
      queue got released.

      a13f35e87140 ("writeback: don't embed root bdi_writeback_congested in
      bdi_writeback") changed the situation.  Now, the root congested state
      which is expected to be pinned while request_queue remains accessible
      is separately reference counted and the base ref is put during
      bdi_destroy().  This means that the root congested state may go away
      prematurely while the queue is between bdi_dstroy() and
      blk_cleanup_queue(), which was detected by Andrey's KASAN tests.

      The root cause of this problem is that bdi doesn't distinguish the two
      steps of destruction, unregistration and release, and now the root
      congested state actually requires a separate release step.  To fix the
      issue, this patch separates out bdi_unregister() and bdi_exit() from
      bdi_destroy().  bdi_unregister() is called from blk_cleanup_queue()
      and bdi_exit() from blk_release_queue().  bdi_destroy() is now just a
      simple wrapper calling the two steps back-to-back.

      While at it, the prototype of bdi_destroy() is moved right below
      bdi_setup_and_register() so that the counterpart operations are
      located together.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: a13f35e87140 ("writeback: don't embed root bdi_writeback_congested 
in bdi_writeback")
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Reported-and-tested-by: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/g/CAAeHK+zUJ74Zn17=rOyxacHU18SgCfC6bsYW=6kCY5GXJBwGfQ@xxxxxxxxxxxxxx
      Reviewed-by: Jan Kara <jack@xxxxxxxx>
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 81c04b943872e0332872df18cec1dec89b178b4d
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Mon Oct 12 21:23:39 2015 +0200

      nvme: use an integer value to Linux errno values

      Use a separate integer variable to hold the signed Linux errno
      values we pass back to the block layer.  Note that for pass through
      commands those might still be NVMe values, but those fit into the
      int as well.

      Fixes: f4829a9b7a61: ("blk-mq: fix racy updates of rq->errors")
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit f1c08c9bc8f475aa242270da30b6cc9232bd19e0
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Wed Oct 14 11:24:17 2015 +0200

      clocksource/drivers/imx: Allow timer irq affinity change

      Allow the timer core to change the smp affinity of the broadcast timer
      irq by setting CLOCK_EVT_FEAT_DYNIRQ flag. For this to work the timer
      core needs to be told about the used irq.

      This reduces interrupt pressure and wakeups on CPU0 as well as vastly
      reducing the number of timer broadcast IPIs.

      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 31f7987406497dc65408dee4e84e3f3cc3ffe9cd
  Author: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
  Date:   Fri Sep 4 02:49:58 2015 +0300

      clocksource/drivers/exynos_mct: Use container_of() instead of 
this_cpu_ptr()

      Since evt structure is embedded in per-CPU mevt structure it's
      definitely faster to use container_of() to get access to mevt
      if we have evt (for example as incoming function argument) instead
      of more expensive approach with this_cpu_ptr(&percpu_mct_tick).
      this_cpu_ptr() on per-CPU mevt structure leads to access to cp15
      to get cpu id and arithmetic operations.
      Container_of() is cheaper since it's just one asm instruction.
      This should work if used evt pointer is correct and owned by
      local mevt structure.

      For example, before this patch set_state_shutdown() looks like:

       4a4:     e92d4010        push    {r4, lr}
       4a8:     e3004000        movw    r4, #0
       4ac:     ebfffffe        bl      0 <debug_smp_processor_id>
       4b0:     e3003000        movw    r3, #0
       4b4:     e3404000        movt    r4, #0
       4b8:     e3403000        movt    r3, #0
       4bc:     e7933100        ldr     r3, [r3, r0, lsl #2]
       4c0:     e0844003        add     r4, r4, r3
       4c4:     e59400c0        ldr     r0, [r4, #192]  ; 0xc0
       4c8:     ebffffd4        bl      420 <exynos4_mct_tick_stop.isra.1>
       4cc:     e3a00000        mov     r0, #0
       4d0:     e8bd8010        pop     {r4, pc}

      With this patch:

       4a4:     e92d4010        push    {r4, lr}
       4a8:     e59000c0        ldr     r0, [r0, #192]  ; 0xc0
       4ac:     ebffffdb        bl      420 <exynos4_mct_tick_stop.isra.1>
       4b0:     e3a00000        mov     r0, #0
       4b4:     e8bd8010        pop     {r4, pc}

      Also, for me size of exynos_mct.o decreased from 84588 bytes
      to 83956.

      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>

  commit ba49af35be8a41af7f00a37902a2d70764078bc5
  Author: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
  Date:   Thu Sep 10 03:38:21 2015 +0300

      clocksource/drivers/h8300_*: Remove unneeded memset()s

      Memory for timer16_priv, timer8_priv and tpu_priv structs is
      allocated by devm_kzalloc() in corresponding probe functions
      of drivers.
      No need to zero it one more time.

      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 6eeb8c355fbbe66d1d52eadaa588d5651f8cb092
  Author: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
  Date:   Thu Sep 10 03:38:20 2015 +0300

      clocksource/drivers/sh_cmt: Remove unneeded memset() in sh_cmt_setup()

      Memory for cmt struct is allocated by kzalloc() in sh_cmt_setup.

      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit fdbd13105d08fed6a8201549f389e9c12021b67b
  Author: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
  Date:   Thu Sep 10 03:38:19 2015 +0300

      clocksource/drivers/em_sti: Remove unneeded memset()s

      Memory for cs and ced fields in struct em_sti_priv is allocated
      by devm_kzalloc() in the beginning of em_sti_probe() so they
      don't need to be zeroed one more time in
      em_sti_register_clocksource() and in em_sti_register_clockevent().

      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit f14665f63b92f958636b7e7610ec2c9726ea9335
  Author: Yingjoe Chen <yingjoe.chen@xxxxxxxxxxxx>
  Date:   Mon Jul 13 17:32:46 2015 +0800

      clocksource/drivers/mediatek: Use GPT as sched clock source

      When cpu is in deep idle, arch timer will stop counting. Setup GPT as
      sched clock source so it can keep counting in idle.

      Signed-off-by: Yingjoe Chen <yingjoe.chen@xxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Acked-by: Matthias Brugger <matthias.bgg@xxxxxxxxx>

  commit fc686d0037d782c994e338ecb01bfef8bbafff9f
  Author: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
  Date:   Mon Aug 24 15:14:30 2015 +0200

      clockevents/drivers/mtk: Fix spurious interrupt leading to crash

      After analysis done by Yingjoe Chen, the timer appears to have a pending
      interrupt when it is enabled.

      Fix this by acknowledging the pending interrupt when enabling the timer
      interrupt.

      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Tested-by: Yingjoe Chen <yingjoe.chen@xxxxxxxxxxxx>

  commit a787f40a9a29674d1b9146b7a35e491e7a571152
  Merge: 2e4e5da d8e1f5e
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Oct 15 17:13:26 2015 +0200

      Merge tag 'omap-for-v4.3/fixes-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Merge "Fixes for omap against v4.3-rc5" from Tony Lindgren:

      - Regulator fix for beagle-x15 to fix HDMI without a SD card being
        inserted

      - GPMC fix for showing proper timings and to allow enabling debug
        options that somehow was unselectable earlier

      - Add minimal documentation for new MMC1 dependency on
        REGULATOR_PBIAS as it may not be obvious for people with
        targeted .config files

      * tag 'omap-for-v4.3/fixes-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        Documentation: ARM: List new omap MMC requirements
        memory: omap-gpmc: dump "before" state before first modification
        memory: omap-gpmc: Fix unselectable debug option for GPMC
        ARM: dts: am57xx-beagle-x15: set VDD_SD to always-on

  commit 2e4e5da55afaf9315f2398e85424fd3824459220
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 20:32:05 2015 +0900

      ARM: dts: uniphier: fix IRQ number for devices on PH1-LD6b ref board

      The IRQ signal from external devices on this board is connected to
      the XIRQ4 pin of the SoC.  The IRQ number should be 52, not 50.

      Fixes: a5e921b4771f ("ARM: dts: uniphier: add ProXstream2 and PH1-LD6b 
SoC/board support")
      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit fb659882cc6482bd2e32ec0ab8ab7afeda649413
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Mon Oct 12 14:48:39 2015 +0100

      drivers/perf: arm_pmu: avoid CPU device_node reference leak

      of_cpu_device_node_get increments the reference count on the CPU
      device_node, so we must take care to of_node_put once we've finished
      with it.

      This patch fixes the perf IRQ probing code to avoid the leak.

      Cc: Sudeep Holla <sudeep.holla@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit a0bcbe969f564d1ec08658170dda72a1b7e9053a
  Author: Pawel Moll <pawel.moll@xxxxxxx>
  Date:   Thu Oct 15 14:32:46 2015 +0100

      bus: arm-ccn: Fix irq affinity setting on CPU migration

      When PMU context is migrating between CPUs, interrupt affinity is set as
      well. Only this should not happen when the CCN interrupt is not being
      used at all (the driver is using a hrtimer tick instead).

      Fixed now.

      Cc: <stable@xxxxxxxxxxxxxxx> # 4.2+
      Signed-off-by: Pawel Moll <pawel.moll@xxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit b20519fd5007908c6a816cab1b9db911915e9fbd
  Author: Pawel Moll <pawel.moll@xxxxxxx>
  Date:   Thu Oct 15 14:32:45 2015 +0100

      bus: arm-ccn: Handle correctly no-more-cpus case

      When migrating events the driver picks another cpu using
      cpumask_any_but() function, which returns value >= nr_cpu_ids
      when there is none available, not a negative value as the code
      assumed. Fixed now.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Pawel Moll <pawel.moll@xxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit f42d79ab67322e51b92dd7aa965e310c71352a64
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 05:02:15 2015 +0000

      blk-mq: fix use-after-free in blk_mq_free_tag_set()

      tags is freed in blk_mq_free_rq_map() and should not be used after that.
      The problem doesn't manifest if CONFIG_CPUMASK_OFFSTACK is false because
      free_cpumask_var() is nop.

      tags->cpumask is allocated in blk_mq_init_tags() so it's natural to
      free cpumask in its counter part, blk_mq_free_tags().

      Fixes: f26cdc8536ad ("blk-mq: Shared tag enhancements")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Cc: Keith Busch <keith.busch@xxxxxxxxx>
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 21d4de1469a1da20a14a745c5f49488bba417ea7
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 8 10:12:01 2015 +0300

      gpio: pl061: returning with lock held in pl061_irq_type()

      We were returning with "chip->lock" held by mistake.  It's safe to
      move the return to before we take the spinlock.

      Fixes: 1dbf7f299f90 ('gpio: pl061: detail IRQ trigger handling')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 922ec58c70cd4a1065dd3c9f94e845dc1348b533
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 09:12:49 2015 +0200

      cfg80211: reg: remove useless reg_timeout scheduling

      When the functions reg_set_rd_driver() and reg_set_rd_country_ie()
      return with an error, the calling function already restores data
      by calling restore_regulatory_settings(), so there's no need to
      also schedule a timeout (which would lead to other side effects
      such as indicating CRDA failed, which clearly isn't true.) Remove
      the scheduling.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit c7d319e542a3126bca029745735cdef5a5ca55c2
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 09:03:05 2015 +0200

      cfg80211: reg: search built-in database directly

      Instead of searching the built-in database only in the worker,
      search it directly and return an error if the entry cannot be
      found (or memory cannot be allocated.) This means that builtin
      database queries no longer rely on the timeout.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit cecbb069cce37dac754380d36c31e286a276e4c3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 08:47:34 2015 +0200

      cfg80211: reg: rename reg_call_crda to reg_query_database

      The new name is more appropriate since in the case of a built-in
      database it may not really rely on CRDA.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 25b20dbdc47f305ca31fc5eff65b8a069776f679
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 12:05:05 2015 +0200

      cfg80211: reg: fix reg_call_crda() return value bug

      The function reg_call_crda() can't actually validly return
      REG_REQ_IGNORE as it does now when calling CRDA fails since
      that return value isn't handled properly. Fix that.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 7cf374182391d67f08c0ef0519a57fb594e0f543
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 08:44:32 2015 +0200

      cfg80211: reg: remove useless non-NULL check

      There's no way that the alpha2 pointer can be NULL, so
      no point in checking that it isn't.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 8047d2616dc7ff47d34f5bc64835e060ccb5db1c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 16:16:09 2015 +0200

      cfg80211: fix gHz to GHz

      There's no "g" prefix, only "G" (1e9) that was clearly intended here.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit d14f6fced5f9360edca5a1325ddb7077aab1203b
  Author: Jay Cornwall <jay@xxxxxxxxxxxx>
  Date:   Wed Sep 16 14:10:03 2015 -0500

      iommu/amd: Fix BUG when faulting a PROT_NONE VMA

      handle_mm_fault indirectly triggers a BUG in do_numa_page
      when given a VMA without read/write/execute access. Check
      this condition in do_fault.

      do_fault -> handle_mm_fault -> handle_pte_fault -> do_numa_page

        mm/memory.c
        3147  static int do_numa_page(struct mm_struct *mm, struct 
vm_area_struct *vma,
        ....
        3159  /* A PROT_NONE fault should not end up here */
        3160  BUG_ON(!(vma->vm_flags & (VM_READ | VM_EXEC | VM_WRITE)));

      Signed-off-by: Jay Cornwall <jay@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit f6c7aba47bcc0b1cc2085c8d8af80f8c02f28269
  Author: Michel Dänzer <michel.daenzer@xxxxxxx>
  Date:   Thu Oct 8 17:48:04 2015 +0900

      drm/amdgpu: Keep the pflip interrupts always enabled v7

      This fixes flickering issues caused by prematurely firing pflip
      interrupts.

      v2 (chk): add commit message, fix DCE V10/V11 and DM as well
      v3: Re-enable pflip interrupt wherever we re-enable a CRTC
      v4: Enable pflip interrupt in DAL as well
      v5: drop DAL changes for upstream
      v6: (agd): only enable interrupts on crtcs that exist
      v7: (agd): integrate suggestions from Michel

      Signed-off-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 80c083c5e4dc35fa37c01f000b1393c51294b9de
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 12 10:38:02 2015 -0400

      drm/amdgpu: adjust default dispclk (v2)

      Set the default to 600Mhz if it's not set in the bios,
      and bump the default to 600Mhz if it's lower than that.

      Port of radeon commit:
      9368931db826d57b6b88b3145a00276626b48df0

      v2: clean up the code a bit

      bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=91896

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 96aec911482246a319bf457f39fa848ce436c8fd
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Oct 14 12:37:32 2015 -0500

      amd-xgbe: Use system workqueue for device restart

      A previous patch switched from using the system workqueue to the device
      workqueue for various operations. During a device restart the device
      workqueue is flushed so the restart cannot use this workqueue or else
      a deadlock results.  Move the device restart back to using the system
      workqueue.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74661bee1f524ca970086748291b3ca1b4c21ffe
  Merge: adc9048 771acac
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 06:09:58 2015 -0700

      Merge branch 'switchdev-locking'

      Jiri Pirko says:

      ====================
      switchdev: change locking

      This is something which I'm currently struggling with.
      Callers of attr_set and obj_add/del often hold not only RTNL, but also
      spinlock (bridge). So in that case, the driver implementing the op cannot 
sleep.

      The way rocker is dealing with this now is just to invoke driver operation
      and go out, without any checking or reporting of the operation status.

      Since it would be nice to at least put a warning in case the operation 
fails,
      it makes sense to do this in delayed work directly in switchdev core
      instead of implementing this in separate drivers. And that is what this 
patchset
      is introducing.

      So from now on, the locking of switchdev mod ops is consistent. Caller 
either
      holds rtnl mutex or in case it does not, caller sets defer flag, telling
      switchdev core to process the op later, in deferred queue.

      Function to force to process switchdev deferred ops can be called by op
      caller in appropriate location, for example after it releases
      spin lock, to force switchdev core to process pending ops.

      v1->v2:
      - rebased on current net-next head (including Scott's ageing patchset)
      v2->v3:
      - fixed comment s/of/or/ typo suggested by Nik
      v3->v4:
      - the actual patchset is sent instead of different branch I send in v3 :/
      v4->v5:
      - added patch to "const" attr param
      - reworked deferred ops infrastructure (mainly patch number 1 and
        internal users (patch 3 and 5)) - resolves the issue pointed out
        by John
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 771acac2ffa5957b91e881908cd4c9657978a209
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:55 2015 +0200

      switchdev: assert rtnl mutex when going over lower netdevs

      netdev_for_each_lower_dev has to be called with rtnl mutex held. So
      better enforce it in switchdev functions.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d33eeb645d59ffd14bbc6db977c3783af42dd700
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:54 2015 +0200

      rocker: remove nowait from switchdev callbacks.

      No need to avoid sleeping in switchdev callbacks now, as the switchdev
      core allows it.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 56607386e80cc7ce923592e115a3492485b47c72
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:53 2015 +0200

      bridge: defer switchdev fdb del call in fdb_del_external_learn

      Since spinlock is held here, defer the switchdev operation. Also, ensure
      that defered switchdev ops are processed before port master device
      is unlinked.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d429c5ddc5128fccd3048059ae26bb39f0d8284
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:52 2015 +0200

      switchdev: introduce possibility to defer obj_add/del

      Similar to the attr usecase, the caller knows if he is holding RTNL and is
      in atomic section. So let the called to decide the correct call variant.

      This allows drivers to sleep inside their ops and wait for hw to get the
      operation status. Then the status is propagated into switchdev core.
      This avoids silent errors in drivers.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 850d0cbc9171f63f0418afffb0d89a84db927851
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:51 2015 +0200

      switchdev: remove pointers from switchdev objects

      When object is used in deferred work, we cannot use pointers in
      switchdev object structures because the memory they point at may be 
already
      used by someone else. So rather do local copy of the value.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: John Fastabend <john.r.fastabend@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0bc05d585d381c30de3fdf955730df31593d2101
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:50 2015 +0200

      switchdev: allow caller to explicitly request attr_set as deferred

      Caller should know if he can call attr_set directly (when holding RTNL)
      or if he has to defer the att_set processing for later.

      This also allows drivers to sleep inside attr_set and report operation
      status back to switchdev core. Switchdev core then warns if status is
      not ok, instead of silent errors happening in drivers.

      Benefit from newly introduced switchdev deferred ops infrastructure.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f7fadf3047d005d17376da65aa9e5734f45a77d4
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:49 2015 +0200

      switchdev: make struct switchdev_attr parameter const for attr_set calls

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 793f40147e82cdedc80971fa7f5596d6ed1e555e
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:48 2015 +0200

      switchdev: introduce switchdev deferred ops infrastructure

      Introduce infrastructure which will be used internally to defer ops.
      Note that the deferred ops are queued up and either are processed by
      scheduled work or explicitly by user calling deferred_process function.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 50826874f059af9a7f1ed748528f68ea92d5039c
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Oct 14 21:15:13 2015 +0200

      crypto: n2 - set array of const as const

      Some array of const char are not set as const.
      This patch fix that.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit cac367bfc134174506a57a44834e3a608acc2f9b
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Oct 14 21:14:19 2015 +0200

      crypto: sahara - set array of const as const

      Some array of const char are not set as const.
      This patch fix that.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 19b14e7e224f1c119a1756fde02ccacefd280212
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Oct 14 21:11:00 2015 +0200

      crypto: s390/sha - replace raw value by their coresponding define

      SHA_MAX_STATE_SIZE is just the number of u32 word for SHA512.
      So replace the raw value "16" by their meaning (SHA512_DIGEST_SIZE / 4)

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 353519887ca3df97c0e60be4fdf05c44e2faca22
  Author: Stephan Mueller <smueller@xxxxxxxxxx>
  Date:   Mon Sep 21 20:59:56 2015 +0200

      crypto: keywrap - add testmgr support

      The testmanager code for symmetric ciphers is extended to allow
      verification of the IV after a cipher operation.

      In addition, test vectors for kw(aes) for encryption and decryption are
      added.

      Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 1c49678e8a35de7d009854f79337261df1e774df
  Author: Stephan Mueller <smueller@xxxxxxxxxx>
  Date:   Mon Sep 21 20:58:56 2015 +0200

      crypto: keywrap - enable compilation

      Hook keywrap source code into Kconfig and Makefile

      Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e28facde3c39005071cc5323d56539bb44efa446
  Author: Stephan Mueller <smueller@xxxxxxxxxx>
  Date:   Mon Sep 21 20:58:23 2015 +0200

      crypto: keywrap - add key wrapping block chaining mode

      This patch implements the AES key wrapping as specified in
      NIST SP800-38F and RFC3394.

      The implementation covers key wrapping without padding.

      IV handling: The caller does not provide an IV for encryption,
      but must obtain the IV after encryption which would serve as the first
      semblock in the ciphertext structure defined by SP800-38F. Conversely,
      for decryption, the caller must provide the first semiblock of the data
      as the IV and the following blocks as ciphertext.

      The key wrapping is an authenticated decryption operation. The caller
      will receive EBADMSG during decryption if the authentication failed.

      Albeit the standards define the key wrapping for AES only, the template
      can be used with any other block cipher that has a block size of 16
      bytes. During initialization of the template, that condition is checked.
      Any cipher not having a block size of 16 bytes will cause the
      initialization to fail.

      Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8a826a34a52eef9ea1cb93f49ada358fa7b0bb32
  Author: Boris BREZILLON <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Jun 16 11:46:46 2015 +0200

      crypto: testmgr - test IV value after a cipher operation

      The crypto drivers are supposed to update the IV passed to the crypto
      request before calling the completion callback.
      Test for the IV value before considering the test as successful.

      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 53ca376eec4eb635e2249c8e89093f499e180731
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 08:21:55 2015 +0200

      mlxsw: core: Fix race condition in __mlxsw_emad_transmit

      Under certain conditions EMAD responses can be returned from the device
      even before setting trans_active. This will cause the EMAD Rx listener
      to drop the EMAD response - as there are no active transactions - and
      timeouts will be generated.

      Fix this by setting trans_active before transmitting the EMAD skb.

      Fixes: 4ec14b7634b2 ("mlxsw: Add interface to access registers and 
process events")
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit adc9048c607a08320e87befc940955d6ffe51fac
  Author: lipeng <lipeng321@xxxxxxxxxx>
  Date:   Thu Oct 15 12:40:34 2015 +0800

      net: hisilicon: fixes a bug when using ethtool -S

      this patch fixes a bug in hns driver. when we want to get statistic info
      by using ethtool -S, it shows us there are 3 wrong counters info. because
      the strings related to the registers are wrong. it needs to modify the
      strings which give us wrong info.

      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e109a69145c059cede79236c3d44080640f23472
  Merge: f6bba8945 a85ce53
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 05:56:32 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-15

      This series contains updates to i40e, i40evf and ixgbe.

      Emil changes the ixgbe driver to disable LRO by default in favor or GRO.

      Mark provides two changes for ixgbe, first fixes a semaphore issue when
      a reset never completes, it is necessary to retake the semaphore before
      returning.

      Jesse fixes up a missing function header comment variable reference.  Then
      enables ethtool priv flags to control flow director at runtime.

      Neerav changes several i40e error messages to debug only since the
      messages were printing when there was no functional issue and were meant
      for debug only.

      Catherine changes the i40e driver to make only X722 support 100M SGMII,
      since it is the only device to actually support it.

      Anjali modifies the i40e/i40evf driver to add writeback on ITR offload
      support for X722 since the device has a way to work around the
      descriptor writeback issue.

      Mitch cleans up obsolete code.  Also reduces the i40evf init time by
      shortening up the delays in the init task to aid in performance in
      load/unload tests and mitigates DMAR errors in VF enable/disable tests.

      Shannon modifies i40e to allow flow director sideband when the device
      is in MFP mode and only has one partition enabled, since we still have
      plenty of interrupts for managing the flow director activity.  Also
      cleaned up flow director ATR control in debugfs since the priv flag
      has been added to our ethtool interface.  Makes several general code
      cleanups of redundant or unnecessary code for i40e.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36d48fb5766aee9717e429f772046696b215282d
  Author: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 10:39:24 2015 +0100

      i2c: designware-platdrv: enable RuntimePM before registering to the core

      The core may register clients attached to this master which may use
      funtionality from the master. So, RuntimePM must be enabled before, 
otherwise
      this will fail.

      Signed-off-by: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Acked-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx

  commit eadd709f5d2e8aebb1b7bf49460e97a68d81a9b0
  Author: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 08:24:23 2015 +0100

      i2c: s3c2410: enable RuntimePM before registering to the core

      The core may register clients attached to this master which may use
      funtionality from the master. So, RuntimePM must be enabled before, 
otherwise
      this will fail. While here, move drvdata, too.

      Signed-off-by: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
      Tested-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Acked-by: Kukjin Kim <kgene@xxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx

  commit 4f7effddf4549d57114289f273710f077c4c330a
  Author: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 10:39:25 2015 +0100

      i2c: rcar: enable RuntimePM before registering to the core

      The core may register clients attached to this master which may use
      funtionality from the master. So, RuntimePM must be enabled before, 
otherwise
      this will fail. While here, move drvdata, too.

      Reported-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx

  commit 74cedd30522819d87131715ca0e7d041748b2721
  Author: Kieran Bingham <kieranbingham@xxxxxxxxx>
  Date:   Mon Oct 12 21:54:43 2015 +0100

      i2c: return probe deferred status on dev_pm_domain_attach

      A change of return status was introduced in commit 3fffd1283927
      ("i2c: allow specifying separate wakeup interrupt in device tree")

      The commit prevents the defer status being passed up the call stack
      appropriately when dev_pm_domain_attach returns -EPROBE_DEFER.

      Catch the PROBE_DEFER and clear up the IRQ wakeup status

      Signed-off-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Fixes: 3fffd1283927 ("i2c: allow specifying separate wakeup interrupt in 
device tree")
      Reviewed-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>

  commit 941fd2e7096495c05d693efcd3141e4e79a51ff6
  Author: Dinh Nguyen <dinguyen@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 18:14:16 2015 -0500

      EDAC, altera: SoCFPGA EDAC should not look for ECC_CORR_EN

      The bootloader may or may not enable the ECC_CORR_EN bit. By
      not enabling ECC_CORR_EN, when error happens, it is the user's
      responsibility to perform a full SDRAM scrub.

      Remove the check for ECC_CORR_EN.

      Signed-off-by: Dinh Nguyen <dinguyen@xxxxxxxxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Thor Thayer <tthayer@xxxxxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444864456-21778-1-git-send-email-dinguyen@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit a85ce532f28efabda030d9065a0c2023a2003f36
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Wed Sep 9 13:37:33 2015 -0700

      ixgbe: Check for setup_internal_link method

      Only call the internal_setup_link method when it is provided. This
      check is required for newer version parts.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Darin Miller <darin.j.miller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 164f739361c962ac63aa6f7cbd48309d1bff15fb
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Thu Sep 3 17:19:02 2015 -0400

      i40e/i40evf: Bump i40e version to 1.3.28 and i40evf to 1.3.19

      Bump.

      Change-ID: I8d9a99f320af43960deba8718eee2d6de50eaf46
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c8d75aa47dd585c9538a8205e9bb9847e12cfb84
  Author: Jason Low <jason.low2@xxxxxx>
  Date:   Wed Oct 14 12:07:56 2015 -0700

      posix_cpu_timer: Reduce unnecessary sighand lock contention

      It was found while running a database workload on large systems that
      significant time was spent trying to acquire the sighand lock.

      The issue was that whenever an itimer expired, many threads ended up
      simultaneously trying to send the signal. Most of the time, nothing
      happened after acquiring the sighand lock because another thread
      had just already sent the signal and updated the "next expire" time.
      The fastpath_timer_check() didn't help much since the "next expire"
      time was updated after the threads exit fastpath_timer_check().

      This patch addresses this by having the thread_group_cputimer structure
      maintain a boolean to signify when a thread in the group is already
      checking for process wide timers, and adds extra logic in the fastpath
      to check the boolean.

      Signed-off-by: Jason Low <jason.low2@xxxxxx>
      Reviewed-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Reviewed-by: George Spelvin <linux@xxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: hideaki.kimura@xxxxxxx
      Cc: terry.rudd@xxxxxxx
      Cc: scott.norton@xxxxxxx
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444849677-29330-5-git-send-email-jason.low2@xxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d5c373eb5610686162ff50429f63f4c00c554799
  Author: Jason Low <jason.low2@xxxxxx>
  Date:   Wed Oct 14 12:07:55 2015 -0700

      posix_cpu_timer: Convert cputimer->running to bool

      In the next patch in this series, a new field 'checking_timer' will
      be added to 'struct thread_group_cputimer'. Both this and the
      existing 'running' integer field are just used as boolean values. To
      save space in the structure, we can make both of these fields booleans.

      This is a preparatory patch to convert the existing running integer
      field to a boolean.

      Suggested-by: George Spelvin <linux@xxxxxxxxxxx>
      Signed-off-by: Jason Low <jason.low2@xxxxxx>
      Reviewed: George Spelvin <linux@xxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: hideaki.kimura@xxxxxxx
      Cc: terry.rudd@xxxxxxx
      Cc: scott.norton@xxxxxxx
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444849677-29330-4-git-send-email-jason.low2@xxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 934715a191e4be0c602d39455a7a74316f274d60
  Author: Jason Low <jason.low2@xxxxxx>
  Date:   Wed Oct 14 12:07:54 2015 -0700

      posix_cpu_timer: Check thread timers only when there are active thread 
timers

      The fastpath_timer_check() contains logic to check for if any timers
      are set by checking if !task_cputime_zero(). Similarly, we can do this
      before calling check_thread_timers(). In the case where there
      are only process-wide timers, this will skip all of the computations for
      per-thread timers when there are no per-thread timers.

      As suggested by George, we can put the task_cputime_zero() check in
      check_thread_timers(), since that is more of an optization to the
      function. Similarly, we move the existing check of cputimer->running
      to check_process_timers().

      Signed-off-by: Jason Low <jason.low2@xxxxxx>
      Reviewed-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Reviewed-by: George Spelvin <linux@xxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: hideaki.kimura@xxxxxxx
      Cc: terry.rudd@xxxxxxx
      Cc: scott.norton@xxxxxxx
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444849677-29330-3-git-send-email-jason.low2@xxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7c177d994eb9637302b79e80d331f48dfbe26368
  Author: Jason Low <jason.low2@xxxxxx>
  Date:   Wed Oct 14 12:07:53 2015 -0700

      posix_cpu_timer: Optimize fastpath_timer_check()

      In fastpath_timer_check(), the task_cputime() function is always
      called to compute the utime and stime values. However, this is not
      necessary if there are no per-thread timers to check for. This patch
      modifies the code such that we compute the task_cputime values only
      when there are per-thread timers set.

      Signed-off-by: Jason Low <jason.low2@xxxxxx>
      Reviewed-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Reviewed-by: George Spelvin <linux@xxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: hideaki.kimura@xxxxxxx
      Cc: terry.rudd@xxxxxxx
      Cc: scott.norton@xxxxxxx
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444849677-29330-2-git-send-email-jason.low2@xxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 5be8308b1614947f056802cb5775307f0ad54ad2
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Sep 3 17:19:01 2015 -0400

      i40evf: speed up init

      Shorten up the delays in the init task, allowing the VF driver to
      initialize faster. This aids performance in load/unload tests and
      mitigates DMAR errors in VF enable/disable tests with absurdly short
      delays. In the real world, the VF driver will come up more quickly.

      The original values were set conservatively based on what we expected
      from the firmware in terms of performance. Now that the driver is in use
      and we know how well firmware responds to our requests, we can shorten
      these delays.

      Change-ID: Ibead77d34b19e8170e667c3f58bc14748bbc5bc9
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a916549029848f1356bf2d797e83218de53f17b2
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Sep 3 17:19:00 2015 -0400

      i40e: remove unnecessary string copy operations

      Save a little stack space and remove unnecessary strncpy() with a little
      string pointer.

      Change-ID: Id2719d34710bfc273d3bb445fec085cd04276e88
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3fced535079a6aaff2d85bd5c52ad50df0558e3d
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:59 2015 -0400

      i40e: X722 is on the IOSF bus and does not report the PCI bus info

      X722 will report Gen 1x1 in the PCI config space as it is on
      IOSF bus, so skip the PCI bus link/speed check.

      Change-ID: Icd5f5751dc7fb00dccf0d5dc5a0a644948e7062e
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3ac67d7bfa2f35cc8a52bdff39e3bbadb6e639a9
  Author: Kevin Scott <kevin.c.scott@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:58 2015 -0400

      i40e: Store off PHY capabilities

      Store off reported PHY capabilities in link_info structure.

      Change-ID: Ife0f037c26983ca985dbf79abf33f8f8791369e8
      Signed-off-by: Kevin Scott <kevin.c.scott@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 874d1a10eb1ab466f48627cdd268335a635dde52
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:57 2015 -0400

      i40e/i40evf: remove redundant declarations of a variable and a function

      Remove a variable declaration inside an if block hiding an existing
      declaration at the start of the function.

      Also remove a forward function declaration that is no longer needed due
      to code re-organization.

      Change-ID: I12954668b722718074949c93d74cd20eaacd93e4
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 106b1941ff304ad6b6b9828b24c8545814a7a4e4
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:56 2015 -0400

      i40e: remove FD atr control from debugfs

      Since the flow-director-atr priv flag was added to our ethtool interface,
      we don't need the on/off control in debugfs.

      Change-ID: Ib3b599916434ab30ccd40074e71d7a81609b5bb5
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6eae9c6a3536f3a676b54ebf82244c23d3b1019f
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:55 2015 -0400

      i40e: allow FD SB if MFP mode only has 1 partition

      Even though the device might be in MFP mode, if there's only one partition
      enabled, then we still have plenty of interrupts for managing the Flow
      Directory Sideband activity.  This patch enables FD SB in this case.
      This patch also reverses the sense of the conditional in order to remove
      the negative logic.

      Change-ID: I9edf211a6219fc8d159b4be9964f9fd7f4e00bc0
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9b28ef01003f815d9bbdb50c4208586c9246ad08
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:54 2015 -0400

      i40e: remove obsolete version check

      This version check only applies to very, very old firmware,
      that only ran on A0 hardware, which we never shipped and don't
      support in this driver anyway. Remove it, before somebody
      gets hurt.

      Change-ID: I3752d090ff488acf98ee76b075af961e9c968ee4
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1f012279163af2f1bec30de42960f0312be3a52e
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:53 2015 -0400

      i40e/i40evf: Add WB_ON_ITR offload support

      X722 has a way to work around the descriptor WB issue,
      this offload helps turn that feature on.

      Change-ID: I7ffa67622426bfca5a651417b63e3afcfeb60412
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3b6c2179eebf4536d08cf966c9f585dd95c72367
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:52 2015 -0400

      i40e: Remove 100M SGMII unless hw is X722

      Only the X722 device now supports 100M SGMII, and nothing supports
      100M on 1000Base_T.

      Change-ID: I6f44dcd818944edd40041410e6de380f4a359a0c
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8279e49531f427ae7e8db894072d91bc42d3eeb5
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:50 2015 -0400

      i40e: Change some messages from info to debug only

      There are several error messages that have been printing when there is
      no functional issue. These messages should be available at debug message
      level only.

      Change-ID: Id91e47bf942c483563995f30d8705fa53acd5aa3
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ef17178cf5abe304b2098a50f580e8c19e5084d2
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:49 2015 -0400

      i40e: use priv flags to control flow director

      Some customers wish to be able to control our hardware specific
      feature called flow director, at runtime.  This patch enables
      ethtool priv flags to control this driver/hardware specific feature.

      ethtool --set-priv-flags ethX flow-director-atr off

      NOTE: the ethtool ntuple interface controls the flow-director
            sideband rules.

      Change-ID: Iba156350b07fa2ce66f53ded51739f9a3781fe0e
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d4b2f9fe608320604748c3cb90c99b2255782935
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:48 2015 -0400

      i40e: Add missing parameter comment to ndo_bridge_setlink

      Add nlflags to the function comment for ndo_bridge_setlink.

      Change-ID: I34c704f307f2a3f7bac3ca4b44e2a094d3d082d6
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8bf7a7b879985321c63e3ae46fee4e7f0d654ab1
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Wed Aug 26 14:10:22 2015 -0700

      ixgbe: Fix CS4227-related semaphore error on reset failure

      If the reset never completes, it is necessary to retake the
      semaphore before returning, because the caller will release
      the semaphore.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Darin Miller <darin.j.miller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 72bfd32d2f84d26aa132dd74a8eef14d039d326f
  Author: Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
  Date:   Mon Aug 24 18:08:31 2015 -0700

      ixgbe: disable LRO by default

      This patch disables LRO by default in favor of GRO.

      LRO is incompatible with forwarding and is disabled when forwarding
      is turned on which makes the default offloads of the driver
      inconsistent. LRO can still be enabled via ethtool.

      Signed-off-by: Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
      Tested-by: Darin Miller <darin.j.miller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a71225e204f5ba8b41e7bb100ca37c074861d5b1
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Oct 14 12:27:17 2015 +0100

      irqchip/gic-v2m: Add support for multiple MSI frames

      The GICv2m driver is so far limited to a single MSI frame, but
      nothing prevents an implementation from having several of them.

      This patch expands the driver to enumerate all frames, keeping
      the first one as the canonical identifier for the MSI domains.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Tested-by: Duc Dang <dhdang@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444822037-16983-3-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit db8c70ec1f9d45e530383204c57f2971df4bd334
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Oct 14 12:27:16 2015 +0100

      irqchip/gic-v3: Fix translation of LPIs after conversion to irq_fwspec

      Commit f833f57ff254 ("irqchip: Convert all alloc/xlate users from
      of_node to fwnode") converted the GICv3 driver to using irq_fwspec
      as part of its 'translate' method.

      Too bad it ended up with a copy of the GICv2 'translate' method,
      which screws up LPI translation (by not translating them at all).

      Restore the code in its original shape, and just change what is
      really required...

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Duc Dang <dhdang@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444822037-16983-2-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 6933c35a307cad0b8b847042346dde68866d3d2a
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Wed Oct 14 11:01:05 2015 +0200

      s390/dasd: fix list_del corruption after lcu changes

      A summary unit check occurs when the lcu updates the PAV configuration
      e.g. base PAV assignment or PAV mode at all. This requires the reset
      of the drivers internal pavgroups. Therefore the alias devices are
      flushed and moved via a temporary list to the active_devices list
      where they are not associated with a pavgroup. In conjunction with
      updates to the base device the pavgroup may be removed since both
      base_list and alias_list are empty. Unfortunately during alias flush
      and move to the active_device list from alias_list the pavgroup
      pointer is not deleted in the device private structure. This leads to
      a list del_corruption if another lcu_update tries to move the device
      in the non existent pavgroup.

      Fix by removing the pavgroup pointer after the alias device was moved
      to the active_devices list.

      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit db347f1a5304d68c68c52f19971924b1e5842f3c
  Author: Marcin Wojtas <mw@xxxxxxxxxxxx>
  Date:   Thu Oct 15 03:17:08 2015 +0200

      ARM: mvebu: correct a385-db-ap compatible string

      This commit enables standby support on Armada 385 DB-AP board, because
      the PM initalization routine requires "marvell,armada380" compatible
      string for all Armada 38x-based platforms.

      Beside the compatible "marvell,armada38x" was wrong and should be fixed
      in the stable kernels too.

      [gregory.clement@xxxxxxxxxxxxxxxxxx: add information, about the fixes]
      Fixes: e5ee12817e9ea ("ARM: mvebu: Add Armada 385 Access Point
      Development Board support")
      Signed-off-by: Marcin Wojtas <mw@xxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>

  commit 8cbc870829ecd8f1062f2a756683c80e2d1eae7f
  Author: Pablo Neira <pablo@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 12:47:48 2015 +0200

      netfilter: nfnetlink_log: validate dependencies to avoid breaking 
atomicity

      Check that dependencies are fulfilled before updating the logger
      instance, otherwise we can leave things in intermediate state on errors
      in nfulnl_recv_config().

      [ Ken-ichirou reports that this is also fixing missing instance refcnt 
drop
        on error introduced in his patch 914eebf2f434 ("netfilter: 
nfnetlink_log:
        autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config 
flag"). ]

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Tested-by: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>

  commit 336a3b3ee925362ca720342bbae4f36b2215064a
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 12:47:47 2015 +0200

      netfilter: nfnetlink_log: consolidate check for instance in 
nfulnl_recv_config()

      This patch consolidates the check for valid logger instance once we have
      passed the command handling:

      The config message that we receive may contain the following info:

      1) Command only: We always get a valid instance pointer if we just
         created it. In case that the instance is being destroyed or the
         command is unknown, we jump to exit path of nfulnl_recv_config().
         This patch doesn't modify this handling.

      2) Config only: In this case, the instance must always exist since the
         user is asking for configuration updates. If the instance doesn't exist
         this returns -ENODEV.

      3) No command and no configs are specified: This case is rare. The
         user is sending us a config message with neither commands nor
         config options. In this case, we have to check if the instance exists
         and bail out otherwise. Before this patch, it was possible to send a
         config message with no command and no config updates for an
         unexisting instance without triggering an error. So this is the only
         case that changes.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Tested-by: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>

  commit f6bba8945e7cff591127be1f6992c3e466cfff4c
  Merge: f985c65 2b3ddf2
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 19:14:50 2015 -0700

      Merge branch 'mlx-next'

      Or Gerlitz says:

      ====================
      Mellanox driver update, Oct 14 2015

      This series contains two more patches from Eli, patch from Majd
      to support PCI error handlers and a fix from Jack to mlx4 VFs
      when probed without a provisioned mac address.

      The patch set applied on top of net-next commit bbb300e "Merge branch 
'bridge-vlan'"

      changes from V0:
        - made the health flag int --> bool to address comment from Dave on 
patch #1
        - fixed sparse warning noted by the 0-day build tests in patch #2
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2b3ddf27f48c8061f0676c5a8796008099945280
  Author: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 17:43:48 2015 +0300

      net/mlx4_core: Replace VF zero mac with random mac in mlx4_core

      By design, when no default MAC addresses are set in the Hypervisor for 
VFs,
      the VFs are passed zero-macs. When such a MAC is received by the VF, it
      generates a random MAC address and registers that MAC address
      with the Hypervisor.

      This random mac generation is currently done in the mlx4_en module.
      There is a problem, though, if the mlx4_ib module is loaded by a VF before
      the mlx4_en module. In this case, for RoCE, mlx4_ib will see the 
un-replaced
      zero-mac and register that zero-mac as part of QP1 initialization.

      Having a zero-mac in the port's MAC table creates problems for a
      Baseboard Management Console. The BMC occasionally sends packets with a
      zero-mac destination MAC. If there is a zero-mac present in the port's
      MAC table, the FW will send such BMC packets to the host driver rather 
than
      to the wire, and BMC will stop working.

      To address this problem, we move the replacement of zero-mac addresses
      with random-mac addresses to procedure mlx4_slave_cap(), which is part of 
the
      driver startup for VFs, and is before activation of mlx4_ib and mlx4_en.
      As a result, zero-mac addresses will never be registered in the port MAC 
table
      by the driver.

      In addition, when mlx4_en does initialize the net device, it needs to set
      the NET_ADDR_RANDOM flag in the netdev structure if the address was
      randomly generated. This is done so that udev on the VM does not create
      a new device name after each VF probe (VM boot and such). To accomplish 
this,
      we add a per-port flag in mlx4_dev which gets set whenever mlx4_core 
replaces
      a zero-mac with a randomly-generated mac. This flag is examined when 
mlx4_en
      initializes the net-device.

      Fix was suggested by Matan Barak <matanb@xxxxxxxxxxxx>

      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e3297246c2c8cf8548ba722da3e3a8104cdcd035
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Wed Oct 14 17:43:47 2015 +0300

      net/mlx5_core: Wait for FW readiness on startup

      On device initialization, wait till firmware indicates that that it is 
done
      with initialization before proceeding to initialize the device.

      Also update initialization segment layout to match driver/firmware
      interface definitions.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 89d44f0a6c732db23b219be708e2fe1e03ee4842
  Author: Majd Dibbiny <majd@xxxxxxxxxxxx>
  Date:   Wed Oct 14 17:43:46 2015 +0300

      net/mlx5_core: Add pci error handlers to mlx5_core driver

      This patch implement the pci_error_handlers for mlx5_core which allow the
      driver to recover from PCI error.

      Once an error is detected in the PCI, the mlx5_pci_err_detected is called
      and it:
      1) Marks the device to be in 'Internal Error' state.
      2) Dispatches an event to the mlx5_ib to flush all the outstanding cqes
      with error.
      3) Returns all the on going commands with error.
      4) Unloads the driver.

      Afterwards, the FW is reset and mlx5_pci_slot_reset is called and it
      enables the device and restore it's pci state.

      If the later succeeds, mlx5_pci_resume is called, and it loads the SW
      stack.

      Signed-off-by: Majd Dibbiny <majd@xxxxxxxxxxxx>
      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd76ee4da55abb21babfc69310d321b9cb9a32e0
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Wed Oct 14 17:43:45 2015 +0300

      net/mlx5_core: Fix internal error detection conditions

      The detection of a fatal condition has been updated to take into account
      the state reported by the device or by detecting an all ones read of the
      firmware version which indicates that the device is not accessible.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dde4b5ae65de659b9ec64bafdde0430459fcb495
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Wed Oct 14 09:23:18 2015 -0400

      tipc: move fragment importance field to new header position

      In commit e3eea1eb47a ("tipc: clean up handling of message priorities")
      we introduced a field in the packet header for keeping track of the
      priority of fragments, since this value is not present in the specified
      protocol header. Since the value so far only is used at the transmitting
      end of the link, we have not yet officially defined it as part of the
      protocol.

      Unfortunately, the field we use for keeping this value, bits 13-15 in
      in word 5, has turned out to be a poor choice; it is already used by the
      broadcast protocol for carrying the 'network id' field of the sending
      node. Since packet fragments also need to be transported across the
      broadcast protocol, the risk of conflict is obvious, and we see this
      happen when we use network identities larger than 2^13-1. This has
      escaped our testing because we have so far only been using small network
      id values.

      We now move this field to bits 0-2 in word 9, a field that is guaranteed
      to be unused by all involved protocols.

      Fixes: e3eea1eb47a ("tipc: clean up handling of message priorities")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f985c65c908f6b26c30019a83dc5ea295f5fcf62
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 06:16:49 2015 -0700

      tcp: avoid spurious SYN flood detection at listen() time

      At listen() time, there is a small window where listener is visible with
      a zero backlog, triggering a spurious "Possible SYN flooding on port"
      message.

      Nothing prevents us from setting the correct backlog.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2f34a65a61cd1ace3b53c93e8b38d2f79f4ff0d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 05:58:38 2015 -0700

      tcp/dccp: fix potential NULL deref in __inet_inherit_port()

      As we no longer hold listener lock in fast path, it is possible that a
      child is created right after listener freed its bound port, if a close()
      is done while incoming packets are processed.

      __inet_inherit_port() must detect this and return an error,
      so that caller can free the child earlier.

      Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fb0801dcc17845ef52a19f9f9fbbb88a1a93f9b6
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Oct 14 18:30:48 2015 +0800

      net: phy: aquantia/teranetics: Convert to use module_phy_driver macro

      Use module_phy_driver macro to simplify the code a bit.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 077cb37fcf6f00a45f375161200b5ee0cd4e937b
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Wed Oct 14 01:09:40 2015 -0700

      ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings

      It seems that kernel memory can leak into userspace by a
      kmalloc, ethtool_get_strings, then copy_to_user sequence.

      Avoid this by using kcalloc to zero fill the copied buffer.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Acked-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d6ba06b8b9a947a8385769f458611d3c97410226
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Wed Oct 14 17:04:55 2015 +0100

      hwrng: stm32 - Fix build with CONFIG_PM

      Commit c6a97c42e399 ("hwrng: stm32 - add support for STM32 HW RNG")
      was inadequately tested (actually it was tested quite hard so
      incompetent would be a better description that inadequate) and does
      not compile on platforms with CONFIG_PM set.

      Fix this.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 7f0abb1f0f2b110ec38ade73c241fcba30f9112a
  Author: lipeng <lipeng321@xxxxxxxxxx>
  Date:   Wed Oct 14 10:28:57 2015 +0800

      net: hisilicon net: fix a bug about led

      this patch fixes a bug in hns driver. the link led is on at the beginning,
      but at this time the ethernet port is on down status. it needs to reset
      the led status on init sequence.

      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3074cce904a26bb645d3ee7ab5026cf7ef0a3d1
  Author: Karen Xie <kxie@xxxxxxxxxxx>
  Date:   Tue Oct 13 17:13:59 2015 -0700

      cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes

      This helps improving the latency of small packets.

      Signed-off-by: Rakesh Ranjan <rakesh@xxxxxxxxxxx>
      Signed-off-by: Karen Xie <kxie@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c3503357fb71af9b215541e1959a7db9325c1f0f
  Merge: 4568637 42160a0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 18:36:58 2015 -0700

      Merge tag 'linux-can-next-for-4.4-20151013' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next

      Marc Kleine-Budde says:

      ====================
      pull-request: can-next 2015-09-17

      this is a pull request of 4 patches for net-next/master.

      Two patches are by Gerhard Bertelsmann, fixing some problems in the
      sun4i driver. The patch by Arnd Bergmann stops using timeval for the
      CAN broadcast manager. The last patch by Alexandre Belloni removes the
      otherwise unused struct at91_can_data from the driver.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef41a2cedb14871203ee28d7a5cb5aafe4e97439
  Merge: 0f8b8e2 4633dfc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 18:34:25 2015 -0700

      Merge tag 'mac80211-for-davem-2015-10-13' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211

      Johannes Berg says:

      ====================
      Like last time, we have two small fixes:
       * fast-xmit was not doing powersave filter clearing correctly,
         disable fast-xmit while any such operations are still pending
       * a debugfs file was broken due to some infrastructure changes
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ae491542cbbbcca0ec8938c37d4079a985e58440
  Author: Dave Airlie <airlied@xxxxxxxxx>
  Date:   Wed Oct 14 18:51:17 2015 +1000

      drm/dp/mst: make mst i2c transfer code more robust.

      This zeroes the msg so no random stack data ends up getting
      sent, it also limits the function to not accepting > 4
      i2c msgs.

      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit bc8c131ccdd62d4ed4f33c6b50f92907e7c32dee
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 15 09:04:21 2015 +1000

      drm/radeon: attach tile property to mst connector

      This allows tiled monitors to work with radeon once mst is enabled.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 62fcce91049a9681fc31d068ffcfaec8d168a857
  Author: Lv Zheng <lv.zheng@xxxxxxxxx>
  Date:   Wed Oct 14 13:53:57 2015 +0800

      ACPICA: Tables: Fix FADT dependency regression

      Some logics actually relying on the existence of FADT, currently relies on
      the number of loaded tables. This false dependency can easily trigger
      regressions. One of them has been introduced by commit 8ec3f459073e
      (ACPICA: Tables: Fix global table list issues by removing fixed table).

      The commit changing the fixed table indexes results in the change of FADT
      table index, originally, it was 3 (thus the installed table count should 
be
      greater than 4), while currently it is 0 (and the installed table count 
may
      be 3).

      This patch fixes this regression by cleaning up the code. Lv Zheng.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=105351
      Fixes: 8ec3f459073e (ACPICA: Tables: Fix global table list issues by 
removing fixed table)
      Reported-and-tested-by: Meelis Roos <mroos@xxxxxxxx>
      Signed-off-by: Lv Zheng <lv.zheng@xxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit f9e5ca86eeaae430e70b05ec312372dca1055d8d
  Author: Carlo Caione <carlo@xxxxxxxxxxxx>
  Date:   Thu Oct 1 12:52:40 2015 +0200

      ARM: meson6: DTS: Fix wrong reg mapping and IRQ numbers

      The DTS erronously uses the wrong reg mapping and IRQ numbers for some
      UART, WDT and timer nodes. Fix this.

      Reported-by: John Wehle <john@xxxxxxxxx>
      Signed-off-by: Carlo Caione <carlo@xxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit e79b202c632f24f49f2eb9459b88b5fd9e332263
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Wed Oct 14 11:23:09 2015 -0700

      Partially revert "clk: mvebu: Convert to clk_hw based provider APIs"

      This partially reverts commit eca61c9ff2588e1df373e61078e1874976315839.

      Thomas reports that it causes regressions on Armada XP devices.
      This is because of_clk_get_parent_name() relies on the property
      'clock-output-names' to resolve the name of a clock's parent,
      without trying to get the clock from the framework and call
      __clk_get_name(). Given that Armada XP devices don't have the
      'clock-output-names' property, of_clk_get_parent_name() returns
      the name of the node which doesn't match the actual parent
      clock's name at all, causing CPU clocks to never link up with
      their parents.

      Reported-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit cfed1e3de4764fb5b6a02c93ec246424b3bffd21
  Merge: 9e07f98 b10d92a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 10:01:32 2015 -0700

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM fixes from Paolo Bonzini:
       "Bug fixes for system management mode emulation.

        The first two patches fix SMM emulation on Nehalem processors.  The
        others fix some cases that became apparent as work progressed on the
        firmware side"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        KVM: x86: fix RSM into 64-bit protected mode
        KVM: x86: fix previous commit for 32-bit
        KVM: x86: fix SMI to halted VCPU
        KVM: x86: clean up kvm_arch_vcpu_runnable
        KVM: x86: map/unmap private slots in __x86_set_memory_region
        KVM: x86: build kvm_userspace_memory_region in x86_set_memory_region

  commit 30f84a891bf6dc7ffb9c0d0f3361ca6375633ac1
  Author: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
  Date:   Wed Oct 14 09:49:24 2015 +0800

      EDAC: Use edac_debugfs_remove_recursive()

      debugfs_remove() is used to remove a file or a directory from the
      debugfs filesystem, but mci->debugfs might not empty.

      This can be triggered by the following sequence:

      1) Enable CONFIG_EDAC_DEBUG
      2) insmod an EDAC module (like i3000_edac or similar)
      3) rmmod this module
      4) we can see files remaining under <debugfs_mountpoint>/edac/ like
         "fake_inject", for example.

      Removing edac_core then, causes a NULL pointer dereference.

      Reported-by: Yun Wu (Abel) <wuyun.wu@xxxxxxxxxx>
      Signed-off-by: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
      Cc: Doug Thompson <dougthompson@xxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444787364-104353-1-git-send-email-tanxiaojun@xxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 9e07f98ab76fdeab5629f2f6c977f870a414f1f9
  Merge: 5b5f145 1b52e50
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 09:47:38 2015 -0700

      Merge tag 'mfd-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd

      Pull MFD fixes from Lee Jones:
       "Bug Fixes:

         - Return correct error code i.e. not zero

         - Fix build error when !CONFIG_PM_SLEEP"

      * tag 'mfd-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd:
        mfd: max77843: Fix max77843_chg_init() return on error
        mfd: intel-lpss: Fix build error when !CONFIG_PM_SLEEP

  commit 6f1f5d5f4dc39e579b3ac348277dd60ee9e44e08
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:40:10 2015 +0200

      mac80211: remove event.c

      That file contains just a single function, which itself is just a
      single statement to call a different function. Remove it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 3beea3513f6157500984dc6117fcf036b3380d7e
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:36:43 2015 +0200

      mac80211: remove cfg.h

      The file contains just a single declaration that can easily
      move to another file - remove it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit fbd6ff5ceafa9c9c39e20f5a4f8c46c0b5efb2a2
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:31:30 2015 +0200

      mac80211: move sta_set_rate_info_rx() and make it static

      There's only a single caller of this function, so it can
      be moved to the same file and made static.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a732fa700133f864c542b335e80a845fe1b80f2b
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:27:07 2015 +0200

      mac80211: clean up ieee80211_rx_h_check_dup code

      Reduce indentation a bit to make the condition more readable.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4a733ef1bea705cdc69d936b95fedab4b47fbd40
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:02:43 2015 +0200

      mac80211: remove PM-QoS listener

      As this API has never really seen any use and most drivers don't
      ever use the value derived from it, remove it.

      Change the only driver using it (rt2x00) to simply use the DTIM
      period instead of the "max sleep" time.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 5c6dcd7f3b26736a88593586fbeec28b6a1ea78d
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 18:39:40 2015 +0100

      MAINTAINERS: Update Allwinner entry and add new maintainer

      Add Chen-Yu Tsai as a co-maintainer to the ARM sunxi support.

      While we are doing so, also update the entry for new SoCs.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit 83bf6b13834d9c926905e45cdfda23fe218fc598
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Oct 13 19:46:54 2015 +0200

      ARM: ux500: modify initial levelshifter status

      commit 1d8aca9df612f5751892fb2642d72536f2f48fd0
      "ARM: ux500: fix MMC/SD card regression"
      fixed broken the level shifter: it should be default ON
      but became default OFF.

      Fixes: 1d8aca9df612 "ARM: ux500: fix MMC/SD card regression"
      Reported-and-tested-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit 6391074598442b8a8d33e2cfdf277d5568b57f2d
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Oct 12 15:44:49 2015 +0200

      ARM: pxa: fix pxa3xx DFI lockup hack

      Some recently added code to avoid a bug introduced a build error
      when CONFIG_PM is disabled and a macro is hidden:

      arch/arm/mach-pxa/pxa3xx.c: In function 'pxa3xx_init':
      arch/arm/mach-pxa/pxa3xx.c:439:3: error: 'NDCR' undeclared (first use in 
this function)
         NDCR = (NDCR & ~NDCR_ND_ARB_EN) | NDCR_ND_ARB_CNTL;
         ^

      This moves the macro outside of the #ifdef so it can be
      referenced correctly.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: adf3442cc890 ("ARM: pxa: fix DFI bus lockups on startup")
      Acked-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>

  commit e639932e01c096eb280086401d8e3a597e41a3b1
  Merge: 8c80385 178b2d0
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 14 17:13:20 2015 +0200

      Merge tag 'imx-fixes-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux into fixes

      Pull "The i.MX fixes for 4.3, 2nd round:" from Shawn Guo:

      It includes a single fix for i.MX7D, which corrects the base address of
      UART2 in device tree.

      * tag 'imx-fixes-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux:
        ARM: dts: imx7d: Fix UART2 base address

  commit 8c803854ba06bcd86755c8754943041b110dd537
  Merge: d51664a 1f744fd
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 14 17:12:10 2015 +0200

      Merge tag 'berlin-fixes-for-4.3-1' of 
git://git.infradead.org/users/hesselba/linux-berlin into fixes

      Merge "Marvell Berlin fixes for v4.3 take 1" from Sebastian Hesselbarth:
      - BG2Q USB PHY compatible fix (also tagged for stable v4.2)

      * tag 'berlin-fixes-for-4.3-1' of 
git://git.infradead.org/users/hesselba/linux-berlin:
        ARM: dts: berlin: change BG2Q's USB PHY compatible

  commit d51664ab9e06225a039487990a3b051fed795137
  Merge: 25cb62b d836ace6
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 14 17:10:55 2015 +0200

      Merge tag 'mvebu-fixes-4.3-1' of git://git.infradead.org/linux-mvebu into 
fixes

      Merge "mvebu fixes for 4.3 (part 1)" from Gregory CLEMENT:

      DSA fixes for orion platform

      * tag 'mvebu-fixes-4.3-1' of git://git.infradead.org/linux-mvebu:
        ARM: orion: Fix DSA platform device after mvmdio conversion

  commit cc904f9cf26dc455cffbdf6e7eb86717e047d8ff
  Author: Lukasz Odzioba <lukasz.odzioba@xxxxxxxxx>
  Date:   Mon Oct 12 13:53:32 2015 +0200

      hwmon: (coretemp) Increase limit of maximum core ID from 32 to 128.

      A new limit selected arbitrarily as power of two greater than
      required minimum for Xeon Phi processor (72 for Knights Landing).

      Currently driver is not able to handle cores with core ID greater than 32.
      Such attempt ends up with the following error in dmesg:
      coretemp coretemp.0: Adding Core XXX failed

      Signed-off-by: Lukasz Odzioba <lukasz.odzioba@xxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 9c32e815cf9e29d5cfed738ad1cb3d07ea1bb67c
  Author: Ben Gardner <gardner.ben@xxxxxxxxx>
  Date:   Wed Oct 7 21:55:20 2015 -0500

      hwmon: (lm75) Add support for TMP75C

      The TMP75C has a different control register layout and only supports
      12-bit temperature samples (0.0625 deg C).
      The continuous sample rate is ~12 Hz.

      Signed-off-by: Ben Gardner <gardner.ben@xxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 0b056b29f28e45adaf756e579c1bf291584a87cd
  Author: Cédric Le Goater <clg@xxxxxxxxxx>
  Date:   Wed Sep 23 14:44:48 2015 +0200

      hwmon: (ibmpowernv) Add OF compatibility table entry

      Fix module autoload for IBM and Open power platforms.

      Signed-off-by: Cédric Le Goater <clg@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 47e4b5e152dd78476ed28ddeca3fd1ffe00cc3be
  Author: Sudeep Holla <sudeep.holla@xxxxxxx>
  Date:   Mon Sep 21 16:47:04 2015 +0100

      hwmon: (abx500) drop the use of IRQF_NO_SUSPEND

      The description in the driver states: "ABX500 does not provide auto ADC,
      so to monitor the required temperatures, a periodic work is used. It is
      more important to not wake up the CPU... If the chip gets too hot during
      a sleep state it's most likely due to external factors, such as the
      surrounding temperature and nothing can be done in S/W."

      So it makes no sense to keep IRQs enabled as it need not be wakeup
      source. This patch removes the use of IRQF_NO_SUSPEND flag

      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 791432cfd95bea3515f8cdfaf72ec263e5d3da80
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 16 19:32:59 2015 +0530

      hwmon: (max31790) Fix dereference of ERR_PTR

      max31790_update_device() return the error code in ERR_PTR. We were
      checking if it has returned error or not but before checking we have
      dereferenced it.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 195a4b4298a7951c845dac2b326585c66add3435
  Author: Il Han <corone.il.han@xxxxxxxxx>
  Date:   Sun Aug 30 20:44:26 2015 +0900

      hwmon: Driver for Maxim MAX31790

      The driver supports the Maxim MAX31790.

      Signed-off-by: Il Han <corone.il.han@xxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 612bece654ff6cd43160e201985be826e96b8bcb
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 12 17:32:14 2015 -0700

      um/x86: Fix build after x86 syscall changes

      I didn't realize that um didn't include x86's asm/syscall.h.
      Re-add a missing typedef.

      Reported-by: Richard Weinberger <richard@xxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 034042cc1e28 ("x86/entry/syscalls: Move syscall table declarations 
into asm/syscalls.h")
      Link: 
http://lkml.kernel.org/r/8d15b9a88f4fd49e3342757e0a34624ee5ce9220.1444696194.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit af22aa7c766d50712b9afeca53e9e4208ce6284c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 12 17:32:13 2015 -0700

      x86/asm: Remove the xyz_cfi macros from dwarf2.h

      They are currently unused, and I don't think that anyone was
      ever particularly happy with them.  They had the unfortunate
      property that they made it easy to CFI-annotate things without
      thinking about them -- when pushing, do you want to just update
      the CFA offset, or do you also want to update the saved location
      of the register being pushed?

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447bfbd10bb268b4593b32534ecefa1f4df287e.1444696194.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 893a3ec27e1dae62a904f78d53244001979748a6
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 12 17:32:12 2015 -0700

      selftests/x86: Style fixes for the 'unwind_vdso' test

      Checkpatch is really quite bad for user code like this, but it
      caught two legit style issues.

      Reported-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/3335040bdd40d2bca4b1a28a3f8b165361c801b7.1444696194.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 790a2ee2427852cff50993c98f15ed88511e9af0
  Merge: c7d77a7 0f96a99
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 14 16:05:40 2015 +0200

      Merge tag 'efi-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi into core/efi

      Pull v4.4 EFI updates from Matt Fleming:

        - Make the EFI System Resource Table (ESRT) driver explicitly
          non-modular by ripping out the module_* code since Kconfig doesn't
          allow it to be built as a module anyway. (Paul Gortmaker)

        - Make the x86 efi=debug kernel parameter, which enables EFI debug
          code and output, generic and usable by arm64. (Leif Lindholm)

        - Add support to the x86 EFI boot stub for 64-bit Graphics Output
          Protocol frame buffer addresses. (Matt Fleming)

        - Detect when the UEFI v2.5 EFI_PROPERTIES_TABLE feature is enabled
          in the firmware and set an efi.flags bit so the kernel knows when
          it can apply more strict runtime mapping attributes - Ard Biesheuvel

        - Auto-load the efi-pstore module on EFI systems, just like we
          currently do for the efivars module. (Ben Hutchings)

        - Add "efi_fake_mem" kernel parameter which allows the system's EFI
          memory map to be updated with additional attributes for specific
          memory ranges. This is useful for testing the kernel code that handles
          the EFI_MEMORY_MORE_RELIABLE memmap bit even if your firmware
          doesn't include support. (Taku Izumi)

      Note: there is a semantic conflict between the following two commits:

        8a53554e12e9 ("x86/efi: Fix multiple GOP device support")
        ae2ee627dc87 ("efifb: Add support for 64-bit frame buffer addresses")

      I fixed up the interaction in the merge commit, changing the type of
      current_fb_base from u32 to u64.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b10d92a54dac25a6152f1aa1ffc95c12908035ce
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 14 15:25:52 2015 +0200

      KVM: x86: fix RSM into 64-bit protected mode

      In order to get into 64-bit protected mode, you need to enable
      paging while EFER.LMA=1.  For this to work, CS.L must be 0.
      Currently, we load the segments before CR0 and CR4, which means
      that if RSM returns into 64-bit protected mode CS.L is already 1
      and everything breaks.

      Luckily, CS.L=0 is always the case when executing RSM, because it
      is forbidden to execute RSM from 64-bit protected mode.  Hence it
      is enough to load CR0 and CR4 first, and only then the segments.

      Fixes: 660a5d517aaab9187f93854425c4c63f4a09195c
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 25188b9986cf6b0cadcf1bc1d1693a2e9c50ed47
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 14 15:51:08 2015 +0200

      KVM: x86: fix previous commit for 32-bit

      Unfortunately I only noticed this after pushing.

      Fixes: f0d648bdf0a5bbc91da6099d5282f77996558ea4
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 62f57d05e287e950c6e1246b1dba08e12985195a
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Tue Oct 13 10:54:01 2015 -0400

      crypto: pkcs7 - Fix unaligned access in pkcs7_verify()

      On sparc, we see unaligned access messages on each modprobe[-r]:

      Kernel unaligned access at TPC[6ad9b4] pkcs7_verify [..]
      Kernel unaligned access at TPC[6a5484] crypto_shash_finup [..]
      Kernel unaligned access at TPC[6a5390] crypto_shash_update [..]
      Kernel unaligned access at TPC[10150308] sha1_sparc64_update [..]
      Kernel unaligned access at TPC[101501ac] __sha1_sparc64_update [..]

      These ware triggered by mod_verify_sig() invocations of pkcs_verify(), and
      are are being caused by an unaligned desc at (sha1, digest_size is 0x14)
              desc = digest + digest_size;

      To fix this, pkcs7_verify needs to make sure that desc is pointing
      at an aligned value past the digest_size, and kzalloc appropriately,
      taking alignment values into consideration.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5a4eea2658c933205cd014b87066f3faa2dbe7f7
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Mon Oct 12 19:47:04 2015 +0200

      crypto: ux500 - Use devm_xxx() managed function

      Using the devm_xxx() managed function to stripdown the error
      and remove code.
      In the same time, we replace request_mem_region/ioremap by the unified
      devm_ioremap_resource() function.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b0e8b3417a620e6e0a91fd526fbc6db78714198e
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Mon Oct 12 19:47:03 2015 +0200

      crypto: atmel - use devm_xxx() managed function

      Using the devm_xxx() managed function to stripdown the error and remove
      code.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit dc97fa02328b79f05a2ec1693b7596fae52c0e02
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Oct 12 15:52:34 2015 +0200

      crypto: mxs-dcp - mxs-dcp is an stmp device

      The mxs-dcp driver relies on the stmp_reset_block() helper function, which
      is provided by CONFIG_STMP_DEVICE. This symbol is always set on MXS,
      but the driver can now also be built for MXC (i.MX6), which results
      in a built error if no other driver selects STMP_DEVICE:

      drivers/built-in.o: In function `mxs_dcp_probe':
      vf610-ocotp.c:(.text+0x3df302): undefined reference to `stmp_reset_block'

      This adds the 'select', like all other stmp drivers have it.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: a2712e6c75f ("crypto: mxs-dcp - Allow MXS_DCP to be used on MX6SL")
      Acked-by: Marek Vasut <marex@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b47c9fab25fe0a2f92d32fcbb2eb55ad2111cd38
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Mon Oct 12 09:21:30 2015 +0100

      ARM: dts: stm32f429: Adopt STM32 RNG driver

      New bindings and driver have been created for STM32 series parts. This
      patch integrates this changes.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Acked-by: Maxime Coquelin <mcoquelin.stm32@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c6a97c42e399ad0d639f616e58e13f0b4ae87626
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Mon Oct 12 09:21:29 2015 +0100

      hwrng: stm32 - add support for STM32 HW RNG

      Add support for STMicroelectronics STM32 random number generator.

      The config value defaults to N, reflecting the fact that STM32 is a
      very low resource microcontroller platform and unlikely to be targeted
      by any "grown up" defconfigs.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ff90900a4b007d26d4a47abec9891bf8488a7668
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Mon Oct 12 09:21:28 2015 +0100

      dt-bindings: Document the STM32 HW RNG bindings

      This adds documentation of device tree bindings for the STM32 hardware
      random number generator.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Acked-by: Maxime Coquelin <mcoquelin.stm32@xxxxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit a6479ea487ca8ce11289e88a55a7e348f1ee39ac
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 21:14:22 2015 +0100

      crypto: marvell/cesa - factor out common import/export functions

      As all the import functions and export functions are virtually
      identical, factor out their common parts into a generic
      mv_cesa_ahash_import() and mv_cesa_ahash_export() respectively.  This
      performs the actual import or export, and we pass the data pointers and
      length into these functions.

      We have to switch a % const operation to do_div() in the common import
      function to avoid provoking gcc to use the expensive 64-bit by 64-bit
      modulus operation.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c3bf02a22c5369b25090d12c202ea0807d01978a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 20:43:48 2015 +0100

      crypto: marvell/cesa - fix wrong hash results

      Attempting to use the sha1 digest for openssh via openssl reveals that
      the result from the hash is wrong: this happens when we export the
      state from one socket and import it into another via calling accept().

      The reason for this is because the operation is reset to "initial block"
      state, whereas we may be past the first fragment of data to be hashed.

      Arrange for the operation code to avoid the initialisation of the state,
      thereby preserving the imported state.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e72f407ee793f1455051cfa834e758afca09e4f6
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 20:43:43 2015 +0100

      crypto: marvell/cesa - initialise struct mv_cesa_ahash_req

      When a AF_ALG fd is accepted a second time (hence hash_accept() is
      used), hash_accept_parent() allocates a new private context using
      sock_kmalloc().  This context is uninitialised.  After use of the new
      fd, we eventually end up with the kernel complaining:

      marvell-cesa f1090000.crypto: dma_pool_free cesa_padding, c0627770/0 (bad 
dma)

      where c0627770 is a random address.  Poisoning the memory allocated by
      the above sock_kmalloc() produces kernel oopses within the marvell hash
      code, particularly the interrupt handling.

      The following simplfied call sequence occurs:

      hash_accept()
        crypto_ahash_export()
          marvell hash export function
        af_alg_accept()
          hash_accept_parent()  <== allocates uninitialised struct hash_ctx
        crypto_ahash_import()
          marvell hash import function

      hash_ctx contains the struct mv_cesa_ahash_req in its req.__ctx member,
      and, as the marvell hash import function only partially initialises
      this structure, we end up with a lot of members which are left with
      whatever data was in memory prior to sock_kmalloc().

      Add zero-initialisation of this structure.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 9f5594c91e7cf5952ce39aff8b88c95a19a27e06
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 20:43:38 2015 +0100

      crypto: marvell/cesa - fix stack smashing in marvell/hash.c

      Several of the algorithms in marvell/hash.c have a statesize of zero.
      When an AF_ALG accept() on an already-accepted file descriptor to
      calls into hash_accept(), this causes:

        char state[crypto_ahash_statesize(crypto_ahash_reqtfm(req))];

      to be zero-sized, but we still pass this to:

        err = crypto_ahash_export(req, state);

      which proceeds to write to 'state' as if it was a "struct md5_state",
      "struct sha1_state" etc.  Add the necessary initialisers for the
      .statesize member.

      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c4d007bcb42b3898df5ad65a513f9120ab0eccfc
  Author: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:39:02 2015 +0200

      MAINTAINERS: add maintainers for the Marvell Crypto driver

      A new crypto driver for Marvell ARM platforms was added in
      drivers/crypto/marvell/ as part of commit f63601fd616ab ("crypto:
      marvell/cesa - add a new driver for Marvell's CESA"). This commit adds
      the relevant developers to the list of maintainers.

      Cc: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: Arnaud Ebalard <arno@xxxxxxxxxxxx>
      Cc: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Acked-by: Arnaud Ebalard <arno@xxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ea0b3984c1cc8b28de27a3bec285102b4e366a4c
  Author: Haren Myneni <haren@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 13:45:51 2015 -0700

      crypto: 842 - Add CRC and validation support

      This patch adds CRC generation and validation support for nx-842.
      Add CRC flag so that nx842 coprocessor includes CRC during compression
      and validates during decompression.

      Also changes in 842 SW compression to append CRC value at the end
      of template and checks during decompression.

      Signed-off-by: Haren Myneni <haren@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f5128432b08c3e263e1a7ce709d686b1ded51131
  Author: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
  Date:   Thu Oct 8 23:12:25 2015 +0600

      crypto: jitterentropy - remove unnecessary information from a comment

      The clocksource does not provide clocksource_register() function since
      f893598 commit (clocksource: Mostly kill clocksource_register()), so
      let's remove unnecessary information about this function from a comment.

      Signed-off-by: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
      Suggested-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 22287b0b5988b603b5f0daa282c89aaf2b877313
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Thu Oct 8 09:26:55 2015 -0700

      crypto: akcipher - Changes to asymmetric key API

      Setkey function has been split into set_priv_key and set_pub_key.
      Akcipher requests takes sgl for src and dst instead of void *.
      Users of the API i.e. two existing RSA implementation and
      test mgr code have been updated accordingly.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 2d4d1eea540b27c72488fd1914674c42473d53df
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Thu Oct 8 09:26:50 2015 -0700

      lib/mpi: Add mpi sgl helpers

      Add mpi_read_raw_from_sgl and mpi_write_to_sgl helpers.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c7d77a7980e434c3af17de19e3348157f9b9ccce
  Merge: 0ce423b 8a53554
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 14 16:05:18 2015 +0200

      Merge branch 'x86/urgent' into core/efi, to pick up a pending EFI fix

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8a53554e12e98d1759205afd7b8e9e2ea0936f48
  Author: KÅ?vágó, Zoltán <dirty.ice.hu@xxxxxxxxx>
  Date:   Mon Oct 12 15:13:56 2015 +0100

      x86/efi: Fix multiple GOP device support

      When multiple GOP devices exists, but none of them implements
      ConOut, the code should just choose the first GOP (according to
      the comments). But currently 'fb_base' will refer to the last GOP,
      while other parameters to the first GOP, which will likely
      result in a garbled display.

      I can reliably reproduce this bug using my ASRock Z87M Extreme4
      motherboard with CSM and integrated GPU disabled, and two PCIe
      video cards (NVidia GT640 and GTX980), booting from efi-stub
      (booting from grub works fine).  On the primary display the
      ASRock logo remains and on the secondary screen it is garbled
      up completely.

      Signed-off-by: KÅ?vágó, Zoltán <DirtY.iCE.hu@xxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444659236-24837-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4568637f7a20bbb1dcbf8ada56de08f6c940bcbd
  Author: yankejian <yankejian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:53:45 2015 +0800

      net: hisilicon: supports promisc mode

      this patch adds support to set promisc mode. it configs the queue on
      init seq  when it is on promisc mode.and being enabled or disabled promisc
      mode by upper level user.

      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f8b8e28fb3241f9fd82ce13bac2b40c35e987e0
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Tue Oct 13 12:41:51 2015 -0400

      tipc: eliminate risk of stalled link synchronization

      In commit 6e498158a827 ("tipc: move link synch and failover to link 
aggregation level")
      we introduced a new mechanism for performing link failover and
      synchronization. We have now detected a bug in this mechanism.

      During link synchronization we use the arrival of any packet on
      the tunnel link to trig a check for whether it has reached the
      synchronization point or not. This has turned out to be too
      permissive, since it may cause an arriving non-last SYNCH packet to
      end the synch state, just to see the next SYNCH packet initiate a
      new synch state with a new, higher synch point. This is not fatal,
      but should be avoided, because it may significantly extend the
      synchronization period, while at the same time we are not allowed
      to send NACKs if packets are lost. In the worst case, a low-traffic
      user may see its traffic stall until a LINK_PROTOCOL state message
      trigs the link to leave synchronization state.

      At the same time, LINK_PROTOCOL packets which happen to have a (non-
      valid) sequence number lower than the tunnel link's rcv_nxt value will
      be consistently dropped, and will never be able to resolve the situation
      described above.

      We fix this by exempting LINK_PROTOCOL packets from the sequence number
      check, as they should be. We also reduce (but don't completely
      eliminate) the risk of entering multiple synchronization states by only
      allowing the (logically) first SYNCH packet to initiate a synchronization
      state. This works independently of actual packet arrival order.

      Fixes: commit 6e498158a827 ("tipc: move link synch and failover to link 
aggregation level")

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9363deeb286e916353f11b11d1f351c6ff54082
  Merge: 0e537fe 3a70fcd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 14 15:06:33 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Use the alternative with the most descriptive filename containing
          a vmlinux file for a given build-id, providing a better title line
          for tools such as 'annotate'. (Arnaldo Carvalho de Melo)

        - Remove help messages about previous right and left arrow keybidings, 
that
          were repurposed for horizontal scrolling. (Arnaldo Carvalho de Melo)

        - Inform how to reset the symbol filter in the hists browser. (top & 
report)
          (Arnaldo Carvalho de Melo)

        - Add 'm' key for context menu display in the hists browser, that became
          inacessible with the repurposing of the right arrow key for horizontal
          scrolling. (Namhyung Kim)

        - Use debug_frame for callchains if eh_frame is unusable. (Rabin Vicent)

      Build fixes:

        - Fix strict-aliasing breakage with gcc 4.4 in the READ_ONCE/WRITE_ONCE 
code
          adopted from the kernel tree, that builds with -fno-strict-aliasing 
while
          tools/perf/ uses -Wstrict-aliasing=3. (Jiri Olsa)

        - Fix unw_word_t pointer casts in code using libunwind for callchains,
          fixing the build in at least 32-bit MIPS systems. (Rabin Vicent)

        - Work around cross compile build problems related to fixdep. (Jiri 
Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 02a6d6136fa2a17f400a030829a6435556b3e65b
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Wed Oct 14 14:25:53 2015 +0200

      Revert "ipv4/icmp: redirect messages can use the ingress daddr as source"

      Revert the commit e2ca690b657f ("ipv4/icmp: redirect messages
      can use the ingress daddr as source"), which tried to introduce a more
      suitable behaviour for ICMP redirect messages generated by VRRP routers.
      However RFC 5798 section 8.1.1 states:

          The IPv4 source address of an ICMP redirect should be the address
          that the end-host used when making its next-hop routing decision.

      while said commit used the generating packet destination
      address, which do not match the above and in most cases leads to
      no redirect packets to be generated.

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7d1f6411b04fef2f0a260205c92e811b280ae117
  Merge: 4b418bf b4a5127
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 05:53:48 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-13

      This series contains updates to i40e, i40evf, ixgbe and fm10k.

      Carolyn cleans up ndo_bridge_getlink() by flagging a parameter as
      __always_unused, since it is never used.  Adds a member to the nvm_info
      struct to store OEM version info to be output either by OID or ethtool.

      Neerav cleans up a remaining bit shift to use BIT() macro.

      Mitch fixes the i40evf driver to properly handle calls to its
      ndo_set_mac_address() method.  It did not properly check to see if the
      override would be allowed by the PF driver, and it never removed the old
      address from its filter list.  Cleaned up the use of
      i40e_enable_vf_mappings() in i40e_alloc_vfs(), since it is just redundant
      since we already call it by i40e_reset_vf().  Fixed a possible panic
      in some circumstances where the firmware may fail to allocate a VSI for
      a VF by checking the return value from i40e_alloc_vf_res() and don't
      try to configure the device further if it failed.

      Greg fixes the parsing of CEE App TLVs so the caller does not have to
      consider whether the App came from a CEE or IEEE DCBx negotiation.

      Shannon moves the device ids into a standalone file due to the desire
      to write user-land drivers (and other requests) without needing the rest
      of the include files.

      Catherine adds the ability to save the module information from
      get_phy_capabilities() to be used to determine which speeds the module
      supports.  Also cleaned up the PHY structure by removing unused members
      and add the ability to store the PHY capabilities reported by the
      firmware.

      Emil modifies ixgbe to ensure that flow control packets initiated by the
      VF are dropped and reported as spoofed.

      Jacob cleans up the fm10k driver to avoid buffer overflow by using
      sprintf(), so convert to using snprintf().  Also fixed the use of an
      enum as a boolean, so check for the actual value of NETREG_UNINITIALIZED
      in case it ever changes from the current value of zero.

      v2: Dropped patch 11 of the original series, which added functions that
          were never used.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eb93ce2cb7a85368c1f1733df35aab87152db56f
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Oct 14 13:20:36 2015 +0100

      arm64: compat: wire up new syscalls

      Commit 208473c1f3ac ("ARM: wire up new syscalls") hooked up the new
      userfaultfd and membarrier syscalls for ARM, so do the same for our
      compat syscall table in arm64.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit fdbbe8e7914765aef82c696dcefc97fe462c3925
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Oct 9 12:34:23 2015 +0200

      s390/spinlock: remove unneeded serializations at unlock

      the kernel locks have aqcuire/release semantics. No operation done
      after the lock can be "moved" before the lock and no operation before
      the unlock can be moved after the unlock. But it is perfectly fine
      that memory accesses which happen code wise after unlock are performed
      within the critical section.
      On s390x, reads are in-order with other reads (PoP section
      "Storage-Operand Fetch References") and writes are in-order with
      other writes (PoP section "Storage-Operand Store References"). Writes
      are also in-order with reads to the same memory location (PoP section
      "Storage-Operand Store References"). To other CPUs (and the channel
      subsystem), reads additionally appear to be performed prior to reads or
      writes that happen after them in the conceptual sequence (PoP section
      "Relation between Operand Accesses").
      So at least as observed by other CPUs and the channel subsystem, reads
      inside the critical sections will not happen after unlock (and writes
      are in-order anyway). That's exactly what we need for "RELEASE
      operations" (memory-barriers.txt): "It guarantees that all memory
      operations before the RELEASE operation will appear to happen before the
      RELEASE operation with respect to the other components of the system."

      Suggested-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Reviewed-By: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
      [cross-reading and lot of improvements for the patch description]
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8139b89d7cc5f53cff63a72c8e226385f34a70a2
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Jul 27 12:47:40 2015 +0200

      s390/zcrypt: use system work queue for ap_scan_bus

      There is a system work queue system_long_wq for long running work.
      Use this work queue for the AP bus scan loop.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit b96a9e5140d4d6253e499bd18c35a7d085ac46e2
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Sep 14 17:28:26 2015 +0200

      s390/zcrypt: remove support for PCICC and PCICA cards

      Remove the code for really old crypt cards, PCICC and PCICA.
      These cards have been out of service for several years.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 3f3007afda8bb731a3422430752ca91ddc102e4d
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Sep 14 17:01:23 2015 +0200

      s390/zcrypt: introduce state machine for the AP bus

      Replace the two fields 'unregistered' and 'reset' with a device
      state with 5 possible values. Introduce two events for the AP devices,
      device poll and device timeout. With the state machine it is easier
      to deal with device initialization and suspend/resume. Device polling
      is simpler as well, the arkane 'flags' passing is gone.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit f58fe336009f451748c1c337f35130a320ef923d
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Sep 14 16:59:27 2015 +0200

      s390/zcrypt: use explicit return code for flushed requests

      If a AP device is removed while messages are still pending, the requests
      are cancelled by calling the message receive function with an error 
pointer
      for the reply. The message type receive handler recognize this and create
      a fake hardware error TYPE82_RSP_CODE / REP82_ERROR_MACHINE_FAILURE.
      The message with the hardware error then causes a printk and a return
      code of -EAGAIN.

      Replace the intricate scheme with an explicit return code for this 
sitation
      and avoid the error message.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit fcd0d1f637e57777fdc742adee6bfbcab5876295
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Jul 23 10:55:59 2015 +0200

      s390/zcrypt: cleanup AP bus timer code

      Set the configuration timer at the end of the ap_scan_bus function.
      Make use of setup_timer and remove some unnecessary add_timer, mod_timer
      and del_timer_sync calls. Replace the complicated timer_pending, mod_timer
      and add_timer code in ap_config_time_store with a simple mod_timer.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 83e9d5d2d45e518deb8cb843bd2e41548c6bb9b2
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Jul 17 13:43:18 2015 +0200

      s390/zcrypt: fix suspend/resume of AP bus devices

      If there are no devices on the AP bus there will not be a single
      call to the per-device ap_bus_suspend function. Even worse,
      there will not be a call to the per-device ap_bus_resume either
      and the AP will fail so resume correctly.

      Introduce a bus specific dev_pm_ops to suspend / resume the AP
      bus related things. While we are at it, simplify the power management
      code of the AP bus.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 98733791e8ea9f700ce2c6feedcbeb7c4703359e
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Jul 17 15:01:08 2015 +0200

      s390/zcrypt: fix device unregister race

      The ap_queue_messsage function will call device_unregister if the
      unregistered field of the device has been set while trying to queue
      a message. This races with other device_unregister calls, e.g. from
      the ap_scan_bus. Remove the call to device_unregister from
      ap_queue_message and let ap_scan_bus deal with it.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 889875a14f0a3205e78613b3e78ecc4efc187d74
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Jun 26 16:55:35 2015 +0200

      s390/zcrypt: fix memory leak with ap configuration data

      The ap_query_configuration function allocates the ap_config_info
      structure, but there is no code to free the structure.
      Allocate the structure in the module_init function and free it
      again in module_exit.

      While we are at it simplify a few functions in regard to the
      ap configuration data.

      Reviewed-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 6acbe21f473f5cff8a11546f090967459b63ab3e
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Jun 26 15:40:41 2015 +0200

      s390/zcrypt: remove duplicate low level functions

      ap_test_queue, ap_query_facilities, __ap_query_functions all use
      the same PQAP(TAPQ) command. Consolidate the three into a single
      ap_test_queue function that returns the AP status and the 64-bit
      result. The exception table entry for PQAP(TAPQ) can be avoided
      if the T bit for the APFT facility is set only if test_facility(15)
      indicated that the facility is present.

      Integrate ap_query_function into ap_query queue to avoid calling
      PQAP(TAPQ) twice.

      Reviewed-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 29b0a8250ba63beffba4fe3a42fa75dddf4bd06a
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Fri Oct 9 13:48:03 2015 +0200

      s390/etr,stp: fix possible deadlock on machine check

      The first level machine check handler for etr and stp machine checks may
      call queue_work() while in nmi context. This may deadlock e.g. if the
      machine check happened when the interrupted context did hold a lock, that
      also will be acquired by queue_work().
      Therefore split etr and stp machine check handling into first and second
      level handling. The second level handling will then issue the queue_work()
      call in process context which avoids the potential deadlock.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 7cc8944e13c73374b6f33b39ca24c0891c87b077
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 11:07:06 2015 +0200

      s390/pci: reshuffle struct used to write debug data

      zpci_err_insn writes stale stack content to the debugfs.

      Ensure that the struct in zpci_err_insn is ordered in a way that
      we don't have uninitialized holes in it. In addition to that
      add the packed attribute.

      Fixes: 3d8258e (s390/pci: move debug messages to debugfs)
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Gerald Schaefer <gerald.schaefer@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 48002bd5af37c3f6ac4a1484427ac52f7f184950
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Oct 8 13:51:44 2015 +0200

      s390/bitops: remove 31 bit related comments

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e4165dcbc087eaf0fa892c6eee7fce8ac0482742
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Oct 8 13:38:49 2015 +0200

      s390/cmpxchg: remove dead code

      With the removal of 31 bit support a couple of defines became unused.
      Remove them.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 004f0bba1902960e0d94d3712b94f7cdd9889ea6
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Tue Oct 6 14:45:35 2015 +0200

      s390/nmi: change type of mcck_interruption_code lowcore field

      For some unknown reason the mcck_interruption_code field is defined
      as array of two 32 bit values. Given that this actually is a 64 bit
      field according to the architecture, change the type to u64.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 92778b9920abddacf31876b3f15d8ea07edeca8d
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Tue Oct 6 16:23:39 2015 +0200

      s390/flags: use _BITUL macro

      The defines that are used in entry.S have been partially converted to
      use the _BITUL macro (setup.h). This patch converts the rest.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Reviewed-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ac25e790d9c3c9b5d34609b7dc1d60c09494c668
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Tue Oct 6 16:23:29 2015 +0200

      s390/flags: fix flag handling

      The cpu flags and pt_regs flags fields are each 64 bits in size. A flag 
can
      be set with helper functions like set_cpu_flags().

      These functions create a mask using "1U << flag". This doesn't work if 
flag
      is larger than 31, since 1U << 32 == 0.

      So fix this in case we ever will have such flag numbers.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Reviewed-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit db7e007fd61ca07e5f3b04cf2168531b074d318d
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Sat Aug 15 11:42:21 2015 +0200

      s390/udelay: make udelay have busy loop semantics

      When using systemtap it was observed that our udelay implementation is
      rather suboptimal if being called from a kprobe handler installed by
      systemtap.

      The problem observed when a kprobe was installed on lock_acquired().
      When the probe was hit the kprobe handler did call udelay, which set
      up an (internal) timer and reenabled interrupts (only the clock comparator
      interrupt) and waited for the interrupt.
      This is an optimization to avoid that the cpu is busy looping while 
waiting
      that enough time passes. The problem is that the interrupt handler still
      does call irq_enter()/irq_exit() which then again can lead to a deadlock,
      since some accounting functions may take locks as well.

      If one of these locks is the same, which caused lock_acquired() to be
      called, we have a nice deadlock.

      This patch reworks the udelay code for the interrupts disabled case to
      immediately leave the low level interrupt handler when the clock
      comparator interrupt happens. That way no C code is being called and the
      deadlock cannot happen anymore.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 0c5a69f432ba1e586ac6ae5e4311c2f1cbd051fa
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Wed Oct 7 10:54:36 2015 +0200

      s390/compiler.h Fix sparse vs. hotpatch

      sparse does not understand the s390 specific hotpatch attribute and
      floods the log with messages like
      include/uapi/linux/swab.h:92:8: error: attribute 'hotpatch': unknown 
attribute

      Let's just dont use it, if __CHECKER__ is defined.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e22cf8ca6f75a6c4fccf2d6ee818bdb1205f32e6
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Tue Oct 6 18:06:15 2015 +0200

      s390/cpumf: rework program parameter setting to detect guest samples

      The program parameter can be used to mark hardware samples with
      some token.  Previously, it was used to mark guest samples only.

      Improve the program parameter doubleword by combining two parts,
      the leftmost LPP part and the rightmost PID part.  Set the PID
      part for processes by using the task PID.
      To distinguish host and guest samples for the kernel (PID part
      is zero), the guest must always set the program paramater to a
      non-zero value.  Use the leftmost bit in the LPP part of the
      program parameter to be able to detect guest kernel samples.

      [brueckner@xxxxxxxxxxxxxxxxxx]: Split __LC_CURRENT and introduced
      __LC_LPP. Corrected __LC_CURRENT users and adjusted assembler parts.
      And updated the commit message accordingly.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 6a62b485eacaf4db26923bf9442073320fc7199a
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Oct 5 13:04:09 2015 +0200

      s390/asm: make use of the OFFSET macro to define assember constants

      The use of OFFSET instead of DEFINE makes the definitions in asm-offsets.c
      more readable. While we are at it sort the defines for struct _lowcore
      according to the field order and remove some unneeded defines.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 18d1a7f675d7fb00d247eb858020da4bee199ddf
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Oct 1 14:11:35 2015 +0200

      s390/sclp: avoid merged message output

      The sclp console and tty code currently uses several message text
      objects in a single message event to print several lines with one
      SCCB. This causes the output of these lines to be fused into a
      block which is noticeable when selecting text in the operating system
      message panel.

      Instead use several message events with a single message text object
      each to print every line on its own. This changes the SCCB layout
      from

          struct sccb_header
              struct evbuf_header
                  struct mdb_header
                      struct go
                      struct mto
                ...
                struct mto

      to

          struct sccb_header
              struct evbuf_header
                  struct mdb_header
                      struct go
                      struct mto
        ...
              struct evbuf_header
                  struct mdb_header
                      struct go
                      struct mto

      Reviewed-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 83abeffbd5dece88129a67f736bdd43a40eccbb1
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 17:02:48 2015 +0200

      s390/entry: add assembler macro to conveniently tests under mask

      Various functions in entry.S perform test-under-mask instructions
      to test for particular bits in memory.  Because test-under-mask uses
      a mask value of one byte, the mask value and the offset into the
      memory must be calculated manually.  This easily introduces errors
      and is hard to review and read.

      Introduce the TSTMSK assembler macro to specify a mask constant and
      let the macro calculate the offset and the byte mask to generate a
      test-under-mask instruction.  The benefit is that existing symbolic
      constants can now be used for tests.  Also the macro checks for
      zero mask values and mask values that consist of multiple bytes.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 0ac277790ec938087c9047bc7b1b4f30a65406cd
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 17:53:22 2015 +0200

      s390/fpu: add static FPU save area for init_task

      Previously, the init task did not have an allocated FPU save area and
      saving an FPU state was not possible.  Now if the vector extension is
      always enabled, provide a static FPU save area to save FPU states of
      vector instructions that can be executed quite early.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit b5510d9b68c33964abd938148f407ad3789e369f
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:04:41 2015 +0200

      s390/fpu: always enable the vector facility if it is available

      If the kernel detects that the s390 hardware supports the vector
      facility, it is enabled by default at an early stage.  To force
      it off, use the novx kernel parameter.  Note that there is a small
      time window, where the vector facility is enabled before it is
      forced to be off.

      With enabling the vector facility by default, the FPU save and
      restore functions can be improved.  They do not longer require
      to manage expensive control register updates to enable or disable
      the vector enablement control for particular processes.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 395e6aa1d0ffbc493a04469aa8f6751ed2aad8c5
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Sep 29 12:51:40 2015 +0200

      s390/mm: try to avoid storage key operation in ptep_set_access_flags

      The call to pgste_set_key in ptep_set_access_flags can be avoided
      if the old pte is found to be valid at the time the new access
      rights are set. The function that created the old, valid pte already
      completed the required storage key operation.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 5da7667c035f3a711ec8d0a3997254807dd8bc6d
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Sep 28 15:27:26 2015 +0200

      s390/barrier: remove unnecessary serialization in atomics and bitops

      The principles of operation states reads are in order, writes are in
      order, writes can be reordered after reads, but no reads can be
      reordered after writes.

      The atomic and bitops variantes for z196 use the interlocked-access
      facility instructions with a memory barrier before and after the
      instruction. Because of the memory ordering the first barrier is
      unnecessary and can be removed.

      Acked-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit b5a6b71b1901b9ca495f669c9ad86f2181960aba
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Aug 21 16:05:32 2015 +0200

      s390/diag: add tracepoint for diagnose calls

      To be able to analyse problems in regard to hypervisor overhead
      add a tracepoing for diagnose calls. It reports the number of
      the diagnose issued, e.g.

                  sshd-1385  [002] ....    42.701431: diagnose: nr=0x9c
                <idle>-0     [001] ..s.    43.587528: diagnose: nr=0x9c

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 1ec2772e0c3ca3159035c03165355e355efc326b
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Aug 20 17:28:44 2015 +0200

      s390/diag: add a statistic for diagnose calls

      Introduce /sys/debug/kernel/diag_stat with a statistic how many diagnose
      calls have been done by each CPU in the system.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit acdc9fc9a8121ce2ebcd7533bd72852c20b353f3
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Aug 20 12:57:33 2015 +0200

      s390/bitops: implement cache friendly test_and_set_bit_lock

      The generic implementation for test_and_set_bit_lock in 
include/asm-generic
      uses the standard test_and_set_bit operation. This is done with either a
      'csg' or a 'loag' instruction. For both version the cache line is fetched
      exclusively, even if the bit is already set. The result is an increase in
      cache traffic, for a contented lock this is a bad idea.

      Acked-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 5614dd920a02a524c9abc9573374d81f0535f18a
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Wed Apr 22 14:47:42 2015 +0200

      s390/mm: implement soft-dirty bits for user memory change tracking

      Use bit 2**1 of the pte and bit 2**14 of the pmd for the soft dirty
      bit. The fault mechanism to do dirty tracking is already in place.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit a7b7617493179a0ff76cbc0cc2eb45ad07074765
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Wed Apr 22 14:20:47 2015 +0200

      mm: add architecture primitives for software dirty bit clearing

      There are primitives to create and query the software dirty bits
      in a pte or pmd. But the clearing of the software dirty bits is done
      in common code with x86 specific page table functions.

      Add the missing architecture primitives to clear the software dirty
      bits to allow the feature to be used on non-x86 systems, e.g. the
      s390 architecture.

      Acked-by: Cyrill Gorcunov <gorcunov@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 9d49f86daba3ed22cadf01beff1b130ad25fe0bf
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 18:40:33 2015 +0200

      s390/cio: introduce pathmask_to_pos

      We often need to correlate an 8 bit path mask with the position
      in a channel path array. Introduce and use pathmask_to_pos for
      that task.

      Reviewed-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ab97d211ef1863942a90d7c93dfd563f0381ca87
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 10:29:59 2015 +0200

      s390/cio: reactivate cmf after hibernate

      During resume from hibernate we already reenable measurement block
      updates on a per device basis. In addition to that we also need to
      activate channel measurement globally using the set channel monitor
      instruction.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 45bf4b96e6aea81594e510fe5cd10190ff4e6cb1
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:53:01 2015 +0200

      s390/cio: use kmem_cache for extended measurement block allocation

      Extended measurement blocks need to be 64 byte aligned. To achieve that
      128 bytes for each measurement block are allocated and an align callback
      returns a 64 byte aligned address inside this area.

      Replace this code with kmem_cache allocations.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit a5e9ca573b5fe47aef30e9c33c31b5fe7b0dfb88
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:52:31 2015 +0200

      s390/cio: fix memleak in channel measurement

      The measurement block for the extended measurement data is not freed when
      switching off per device measurement. Free the measurement block after HW
      stopped accessing it.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 616503d1d8940049841e5b6f2ab5157f37072ed9
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:52:06 2015 +0200

      s390/cio: improve locking during cmbe allocation

      During allocation of extended measurement blocks we check if the device is
      already active for channel measurement and add the device to a list of
      devices with active channel measurement. The check is done under ccwlock
      protection and the list modification is guarded by a different lock.

      To guarantee that both states are in sync make sure that both locks
      are held during the allocation process (like it's already done for the
      "normal" measurement block allocation).

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit a6ef15652d260f754ead223d0c55434a3a39fe1d
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:51:39 2015 +0200

      s390/cio: fix use after free in cmb processing

      Devices with active channel measurement are included in a list. When a
      device is removed without deactivating channel measurement first the
      list_head is freed but still used. Fix this by making sure that
      channel measurement is deactivated during device deregistration.

      For devices that we deregister because they are no longer accessible
      deactivating channel measurement will fail. In this case we can report
      success because the FW will no longer access the measurement block.

      In addition to these steps keep an extra device reference while
      channel measurement is active.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 1bc6664bdfb949bc69a08113801e7d6acbf6bc3f
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:11:42 2015 +0200

      s390/cio: use device_lock during cmb activation

      Hold the device_lock during [de]activation of the channel measurement
      block to synchronize concurrent usage of these functions.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 279b8f9a0f3ea3399764047d487dfdd8f7bc9795
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:50:25 2015 +0200

      s390/cio: cleanup cmb_enable sysfs attr

      Ensure that we hold the ccwlock when accessing private data. Return errors
      that occur during measurement enabling to userspace. Apply some cleanups
      while at it.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 3c4aac86cbb3389d74152a83c89cf3a31fd7cc0b
  Author: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
  Date:   Wed Sep 16 00:54:24 2015 +0600

      s390/crash_dump: use for_each_mem_range

      The <linux/memblock.h> already provides for_each_mem_range() macro that
      iterates through memblock areas from type_a and not included in type_b.
      We can remove custom for_each_dump_mem_range() macro and use the
      for_each_mem_range() instead.

      Signed-off-by: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>

  commit 1afc82aee45c118dc8026d54a230e75ff6baee66
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Sep 11 16:32:24 2015 +0200

      s390/barrier: avoid serialization in [smp_]rmb and [smp_]wmb

      The principles of operation says:

      The storage-operand fetch references of one instruction
      occur after those of all preceding instructions and
      before those of subsequent instructions, as observed
      by other CPUs and by channel programs.
      [...]
      The CPU may fetch the operands of instructions before the
      instructions are executed.
      [...]
      The CPU may delay placing results in storage.
      [...]
      the results of one instruction are placed in storage after
      the results of all preceding instructions have been placed
      in storage and before any results of the succeeding
      instructions are stored, as observed by other CPUs and by
      the channel subsystem.

      which boils down to:
      - reads are in order
      - writes are in order
      - reads can happen earlier
      - writes can happen later

      By definition (see memory-barrier.txt) read barriers orders
      reads vs reads and write barriers orders writes agains writes.
      but neither of these orders reads vs. writes.

      That means we can implement smp_wmb,smp_rmb,wmb and rmb as
      simple compiler barriers. To avoid reviewing all driver code
      for correct barrier usage we keep dma_[rw]mb as serialization
      for now.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 33b5881d11c5d852662efb764f5054347296a062
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Sep 11 16:23:06 2015 +0200

      s390/vdso: use correct memory barrier

      By definition smp_wmb only orders writes against writes. (Finish all
      previous writes, and do not start any future write). To protect the
      vdso init code against early reads on other CPUs, let's use a full
      smp_mb at the end of vdso init. As right now smp_wmb is implemented
      as full serialization, this needs no stable backport, but this change
      will be necessary if we reimplement smp_wmb.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e0af21c56ddd592b33f74f986a2cb4478b10786e
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Sep 11 16:09:56 2015 +0200

      s390/spinlock: use correct barriers

      _raw_write_lock_wait first sets the high order bit to indicate a
      pending writer and then waits for the reader to drop to zero.
      smp_rmb by definition only orders reads against reads. Let's use
      a full smp_mb instead. As right now smp_rmb is implemented
      as full serialization, this needs no stable backport, but this
      patch will be necessary if we reimplement smp_rmb.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 9a21268360f5438796fa935e0b2e9317187ef8f4
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Sep 4 13:52:44 2015 +0200

      s390/dasd: mark DASD devices as non rotational

      We were able to reduce the CPU overhead of big paging scenarios
      when announcing our paging disks as non-rotational.
      Almost all dasd devices are implemented in storage servers with
      cache, raid, striping and lots of magic. There is no point in
      optimizing the disk schedulers and swap code for a single platter
      moving arm rotational disks. Given the complexity of the setup
      and the fact that this change is mostly to disable the additional
      overhead in swap code, lets keep the other functionality unchanged
      and do not disable the this device as entropy source - unlike other
      non-rotational devices.

      Suggested-by: Christian Ehrhardt <ehrhardt@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 1330a1258dc20caa5961b07aa62482793d6f2ecf
  Author: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 09:57:24 2015 +0200

      s390/zcrypt: enable odd RSA modulus sizes in CRT format

      In the past only even modulus sizes were allowed for RSA keys in
      CRT format. This restriction was based on limited RSA key generation
      on older crypto adapters that provides only even modulus sizes. This
      restriction is not valid any more.

      Revoke restrictions that crypto requests can be serviced with odd
      RSA modulus length in CRT format.

      Signed-off-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit b02064a9b8134e1aac4e891abf72139ca0b126ee
  Author: Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 11:57:56 2015 +0200

      s390/numa: write kernel message when emu_size has been increased

      Signed-off-by: Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8785955bbc28be446bcb2ad08cfb0599246746f7
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Oct 9 04:26:35 2015 -0700

      mwifiex: remove unnecessary NULL check

      ra_list cannot be NULL here, so remove the unnecessary NULL check.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit fe24372d1b115863905174aa3c9f988c1eb40630
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Fri Oct 9 04:26:34 2015 -0700

      mwifiex: add ndo_validate_addr netdev ops

      ndo_validate_addr is set to generic eth_validate_addr() function
      used for MAC address validation.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 505c5cb82ddf0fb6a88d1fc2fbf2386133a9ffcd
  Author: Ganapathi Bhat <gbhat@xxxxxxxxxxx>
  Date:   Fri Oct 9 04:26:33 2015 -0700

      mwifiex: fix AP VHT behaviour

      Even if hostapd configuration file contains VHT parameters,
      they were not getting reflected in beacons. The reason is
      we are resetting them before starting AP. This patch removes
      redundant BSS_STOP and SYS_RESET firmware commands before
      starting AP to fix the problem.

      Signed-off-by: Ganapathi Bhat <gbhat@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 46dbe2476c93026b20ddf36c6995e678bd867000
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Fri Oct 9 04:26:23 2015 -0700

      mwifiex: control WLAN and bluetooth coexistence modes

      By default our chip will be in spatial coexistence mode.
      This patch adds a provision to change it to timeshare mode
      via debugfs command.

      Enable timeshare coexistence mode
         echo 1 > /sys/kernel/debug/mwifiex/mlan0/timeshare_coex

      Go back to spacial coexistence mode
         echo 0 > /sys/kernel/debug/mwifiex/mlan0/timeshare_coex

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit a484804b3eb8de64a2497c484a08359f7ae28210
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Sun Oct 4 16:46:55 2015 +0800

      mwifiex: fix a comment typo

      Just fix a typo in the code comment.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Acked-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit cfa2b42b4d9a3dc10aa1e0c82213f3d30d5bcdf8
  Author: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 13:24:37 2015 +0800

      ath9k: fix QCA9561 XLNA rxgain initial

      A small bugfix for commit ede6a5e7b859 ("ath9k: Add QCA956x HW support").
      I guess I would have skipped renaming (that initial QCA956x commit has
      been there already for almost a year with the "5g" in the name) and move
      the call outside AR_SREV_9462_20_OR_LATER() to make it reachable.

      Signed-off-by: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 871d0051f06030bfddd5971ef2afc1eb7291ab4e
  Author: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 13:24:36 2015 +0800

      ath9k: rename ini_modes_rxgain_5g_xlna to ini_modes_rxgain_xlna

      rename the variable as preparation for using the array with 2.4 GHz
      band, etc.

      Signed-off-by: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 16a4ea506503343a066e9b986e4775bf472e5205
  Author: Priit Laes <plaes@xxxxxxxxx>
  Date:   Tue Sep 15 09:01:56 2015 +0300

      rtlwifi: rtl8192cu: Add missing case in rtl92cu_get_hw_reg

      Driver was reporting 'switch case not processed' after association,
      so HW_VAR_KEEP_ALIVE was added and filled similarily to other drivers.

      Positive side effect to this seems to be a bit more stable connection.

      Signed-off-by: Priit Laes <plaes@xxxxxxxxx>
      Acked-by: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ce03966a16b03e5cf1a9cbd2f42ca0fbe4118ab5
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Thu Sep 10 07:27:34 2015 -0700

      mwifiex: correction in USB8997 chipset's product ID

      For 8897 chipset, mwifiex_usb unnecessarily used to
      come into picture when wlan is supposed to be used
      via PCIe interface and USB interface is for
      bluetooth.

      This problem has been resolved for newer chipset by
      having separate USB product ids for USB-USB8997 and
      PCIe-USB8997 chipset variants. This patch ensures to
      use wlan specific product id.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Frank Huang <frankh@xxxxxxxxxxx>
      Signed-off-by: Nishant Sarmukadam <nishants@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 60a188a2715f5cf9f495bd125600453b9e9b1a55
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Thu Sep 10 07:27:33 2015 -0700

      mwifiex: remove USB8897 chipset support

      We don't have any customer using this chipset via USB
      interface. if both mwifiex_pcie and mwifiex_usb modules
      are enabled by user, sometimes mwifiex_usb wins the race
      even if user wants wlan interface to be on PCIe and
      USB for bluetooth. This patch solves the problem.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Frank Huang <frankh@xxxxxxxxxxx>
      Signed-off-by: Nishant Sarmukadam <nishants@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 406df18f1f551a7f54bc68b56cf3ceb36f50cfc4
  Author: Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx>
  Date:   Wed Jul 22 10:42:43 2015 +0200

      ath9k: Fix NF CCA limits for AR9287 and AR9227

      The FreeBSD driver [0] uses the same 2G values as for the AR9280 chips.
      Using the same values in ath9k results in much better throughput for me.

      Before this patch I had a huge amount of packet loss (sometimes up to
      40%) and the max transfer speed was somewhere around 5Mbit/s. With this
      patch applied I have zero packet loss and ten times the throughput.
      My device uses a AR9227 which is the PCI variant of the AR9287.

      [0] http://bxr.su/FreeBSD/sys/dev/ath/ath_hal/ar9002/ar9287.h

      Signed-off-by: Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 18e9345b0db9fe7bd18c3c43967789fe0a2fdb52
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 16:11:41 2015 +0200

      drm/i915: Add primary plane to mask if it's visible

      This fixes the warnings like

      "plane A assertion failure, should be disabled but not"

      that on the initial modeset during boot. This can happen if
      the primary plane is enabled by the firmware, but inheriting
      it fails because the DMAR is active or for other reasons.

      Most likely caused by

      commit 36750f284b3a4f19b304fda1bb7d6e9e1275ea8d
      Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Date:   Mon Jun 1 12:49:54 2015 +0200

          drm/i915: update plane state during init

      This is a new version of

      commit 721a09f7393de6c28a07516dccd654c6e995944a
      Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Date:   Tue Sep 15 14:28:54 2015 +0200

          drm/i915: Add primary plane to mask if it's visible

      That was reverted in order to facilitate easier backporting of some
      commits from -next to v4.3.

      Reported-by: Andreas Reis <andreas.reis@xxxxxxxxx>
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=91429
      Reported-and-tested-by: Emil Renner Berthing <kernel@xxxxxxxx>
      Tested-by: Andreas Reis <andreas.reis@xxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      [Jani: cherry-picked from -next to v4.3]
      Acked-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 0836e6d8c47416d6eb60bb68a5d7213c0c2d0d29
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 18:59:08 2015 +0300

      drm/i915: Move sprite/cursor plane disable to intel_sanitize_crtc()

      Move the sprite/cursor plane disabling to occur in intel_sanitize_crtc()
      where it belongs instead of doing it in intel_modeset_readout_hw_state().

      The plane disabling was first added in
      4cf0ebbd4fafbdf8e6431dbb315e5511c3efdc3b drm/i915: Rework plane readout.

      I got the idea from some patches from Partik and/or Maarten but those
      moved also the plane state readout to intel_sanitize_crtc() which isn't
      quite right in my opinion.

      Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Cc: Patrik Jakobsson <patrik.jakobsson@xxxxxxxxxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      References: https://bugs.freedesktop.org/show_bug.cgi?id=91910
      Reviewed-by: Patrik Jakobsson <patrik.jakobsson@xxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      [Jani: cherry-picked from -next to v4.3]
      Acked-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit c4816c7389d8dbcad036be7e5a34584289d9f590
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 18:59:07 2015 +0300

      drm/i915: Assign hwmode after encoder state readout

      The dotclock is often calculated in encoder .get_config(), so we
      shouldn't copy the adjusted_mode to hwmode until we have read out the
      dotclock.

      Gets rid of some warnings like these:
      [drm:drm_calc_timestamping_constants [drm]] *ERROR* crtc 21: Can't 
calculate constants, dotclock = 0!
      [drm:i915_get_vblank_timestamp] crtc 0 is disabled

      v2: Steal Maarten's idea to move crtc->mode etc. assignment too

      Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Cc: Patrik Jakobsson <patrik.jakobsson@xxxxxxxxxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=91428
      Reviewed-by: Patrik Jakobsson <patrik.jakobsson@xxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      [Jani: cherry-picked from -next to v4.3]
      Acked-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 2e2edebefceef201624dcc323a1f7761e0040cf5
  Author: Jani Nikula <jani.nikula@xxxxxxxxx>
  Date:   Wed Oct 14 11:29:01 2015 +0300

      Revert "drm/i915: Add primary plane to mask if it's visible"

      This reverts commit 721a09f7393de6c28a07516dccd654c6e995944a.

      There is nothing wrong with the commit per se. We had two versions of
      the commit, one in -next headed for v4.4 and this one for v4.3. Turns
      out we'll need to backport more fixes from -next, and they conflict with
      the v4.3 version. It gets messy. It will be easiest to revert this one,
      and backport all the relevant commits from -next without modifications;
      they apply cleanly after this revert.

      Requested-by: Joseph Yasi <joe.yasi@xxxxxxxxx>
      References: https://bugs.freedesktop.org/show_bug.cgi?id=91910#c4
      Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Acked-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit f1d2b4d338bf090296f67830025228872fd52513
  Author: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
  Date:   Mon Sep 7 15:59:16 2015 -0500

      rtlwifi: rtl818x: Move drivers into new realtek directory

      Now that a new mac80211-based driver for Realtek devices has been 
submitted,
      it is time to reorganize the directories. Rather than having directories
      rtlwifi and rtl818x be in drivers/net/wireless/, they will now be in
      drivers/net/wireless/realtek/. This change simplifies the directory
      structure, but does not result in any configuration changes that are
      visable to the user.

      Signed-off-by: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit dbb526ebfec1a322405b7cfcb0c46730f9865ec6
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:20 2015 +0100

      netfilter: ipv6: pointer cast layout

      Correct whitespace layout of a pointer casting.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 4305ae44a9690e35c01278fe18270d45188a61bb
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:19 2015 +0100

      netfilter: ip6_tables: improve if statements

      Correct whitespace layout of if statements.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 7e4ac676ee468108886f12a20e25795f1c330939
  Author: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:15:34 2015 +0200

      irqchip/mxs: Add Alphascale ASM9260 support

      Freescale iMX23/iMX28 and Alphascale ASM9260 have similar interrupt
      collectors. We already prepared the mxs driver to handle a different
      register layout. Add the actual ASM9260 support.

      Differences between these devices:
      - Different register offsets
      - Different count of interupt lines per register
      - ASM9260 does not provide reset bit
      - ASM9260 does not support FIQ.

      Signed-off-by: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
      Tested-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Cc: Sascha Hauer <kernel@xxxxxxxxxxxxxx>
      Cc: marc.zyngier@xxxxxxx
      Cc: jason@xxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444677334-12242-6-git-send-email-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 25e34b44313b61d7a87819498ccfd0129441604a
  Author: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:15:33 2015 +0200

      irqchip/mxs: Prepare driver for hardware with different offsets

      Alphascale asm9260 has similar functionality but different register
      offsets. To support asm9260 in the mxs driver we need to rework the
      hardcoded access mechanisms.

      - Define SET_REG and CLR_REG. These controllers support seperate CLR and
        SET offsets for each register.

      - Reimplement HW_ICOLL_INTERRUPT with SET_REG and CLR_REG to make it
        usable for both cases.

      - Instead of using icoll_base and adding the offsets at runtime,
        create a new data structure which contains base pointers to all
        required regitsters and use it.

      - Split out functionality, which is required for the init code of mxs
        and asm9260, into helper functions

      [ tglx: Massaged changelog and moved the return value change to the
                previous patch ]

      Signed-off-by: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
      Tested-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Cc: Sascha Hauer <kernel@xxxxxxxxxxxxxx>
      Cc: marc.zyngier@xxxxxxx
      Cc: jason@xxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444677334-12242-5-git-send-email-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e59a8451be1162d5a10a33e40092f1796cb8fdca
  Author: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:15:30 2015 +0200

      irqchip/mxs: Panic if ioremap or domain creation fails

      Current code will only warn and then dereference the NULL pointer or
      continue, which results in a fatal NULL pointer dereference later.

      If the initialization fails, the machine is unusable, so panic right
      away.

      [ tglx: Massaged changelog and picked the irqdomain panic from the
                next patch]

      Signed-off-by: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
      Tested-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Cc: Sascha Hauer <kernel@xxxxxxxxxxxxxx>
      Cc: marc.zyngier@xxxxxxx
      Cc: jason@xxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444677334-12242-2-git-send-email-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b4a5127b03b7f0b06dcaf08a878ffc93ad53fa82
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Aug 24 17:02:00 2015 -0700

      fm10k: do not use enum as boolean

      Check for actual value NETREG_UNINITIALIZED in case it ever changes from
      the current value of zero.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Signed-off-by: Bruce Allan <bruce.w.allan@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f6f19f8bb9afcd0e9970fe51b5affa3063af4499
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Aug 24 17:01:58 2015 -0700

      fm10k: use snprintf() instead of sprintf() to avoid buffer overflow

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Signed-off-by: Bruce Allan <bruce.w.allan@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f079fa005aae08ee0e1bc32699874ff4f02e11c1
  Author: Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
  Date:   Thu Aug 20 15:31:20 2015 -0700

      ixgbe: add flow control ethertype to the anti-spoofing filter

      This patch makes sure that flow control packets initiated by the VF are
      dropped and reported as spoofed.

      Flow control packets can be used to limit the throughput or as DOS
      attack when generated from a VF. Flow control is not supported per VF
      hence any pause frames generated from a VF are considered malicious.

      Also cleaned up indentation and some redundant comments.

      Signed-off-by: Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 06a24dd6c29a814a81595861c2cc681329c56bfc
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:55 2015 -0400

      i40e/i40evf: Bump i40e version to 1.3.25 and i40evf to 1.3.17

      Bump.

      Change-ID: If3cd42f6c1b9546beed60faf9c79faab35216f58
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit fc72dbce09989b268b20342473ddc8d77c8da350
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Tue Sep 1 11:36:30 2015 -0400

      i40e/i40evf: Refactor PHY structure and add phy_capabilities enum

      Remove unused members in the PHY structure and add a new member to store
      all the capabilities the PHY has as reported by the FW. This information
      will help us determine what speeds the device is capable of when link is
      down.

      Also add an enum to decode the PHY types the NVM is capable of.
      Use the phy_types variable to determine what phy types are possible
      when link is down instead of device id as it will be more accurate.

      When on a backplane device, we do not support changing any settings,
      however we should display all the phy_types we are capable of so if we
      see a backplane dev ID set supported and advertised purely based on
      the phy_types variable.

      Change-ID: Ia75d560f1fcd30c54cbfb7458690c5867559a930
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0a862b43acc6c5d38fd462baa9c76f9197907d73
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:53 2015 -0400

      i40e/i40evf: Add module_types and update_link_info

      Add a module_types variable to the link_info struct to save the module
      information from get_phy_capabilities. This information can be used to
      determine which speeds the module supports.

      Also add a new function update_link_info which updates the module_types
      parameter and then calls get_link_info. This function should be called
      in place of get_link_info so that the module_types variable stays
      up-to-date with the rest of the link information.

      The EAS table does not reflect the values that are actually returned,
      so instead, basing these values on the Ethernet compliance codes
      specified in table 33 of SFF-8436 as these have been accurate.

      Use the new variable in ethtool to differentiate between a 10G/1G dual
      speed fiber module and a 10G only module.

      Change-ID: Ib7585cce321319c10ce15180054c41a6cbd41389
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d72c95ea422ab63c832a13c075cb73bc87a1276e
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:50 2015 -0400

      i40e/i40evf: split device ids into a separate file

      Due to desires to write userland drivers, and other requests, without
      needing the rest of the include files, the device ids are pulled out
      into a standalone file.

      Change-ID: Ic0b047dbf9d4b0891892309c1f2079f56d9b60e8
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f0b44440148c257bb5b1872e8ff5d6591afc8f4f
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:49 2015 -0400

      i40e: update fw version text string per previous product formats

      This patch moves the internal fw version and fw api version info to be
      output in probe.  The nvm version, etrack and oem version info are now
      configured for output via ethtool -i.

      Change-ID: I05d490093a7137dbefcdef263d014d1e5c9e83d0
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 21be99ec4ed366e24d4735d230aa3086ff2bc6ed
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:48 2015 -0400

      i40e: don't panic on VSI allocation failure

      In some circumstances, the firmware may fail to allocate a VSI for a VF.
      When this happens, the driver does not react well to the bad news and
      has a panic attack.

      To fix this problem, check the return value from i40e_alloc_vf_res and
      don't try to configure the device further if it failed. Additionally,
      explicitly clear the INIT bit when we free VF resources, so that this
      bit will be in the proper state in the failure case, and won't blow up
      elsewhere.

      Change-ID: I6a20ce2b59c3458fd832032e88fa28cd42500189
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e7e6cfce16e9184497716e004fc9e714a7411ad0
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:47 2015 -0400

      i40e: remove redundant call

      This function call isn't needed here; the same function is already
      called by i40e_reset_vf.

      Change-ID: I96ccbf91b752965c9e28fe895d4c7d4c46e3ba44
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a487c03fa28286d0de42558da1aa57d82d54fc4d
  Author: Dudley Du <dudl@xxxxxxxxxxx>
  Date:   Mon Oct 12 10:16:16 2015 -0700

      Input: cyapa - fix the copy paste error on electrodes_rx value

      Fix the copy paste error on the electrodes_rx value set code which will
      cause the electrodes_rx value be always set to the value of electrodes_y.

      Reported-by: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
      Signed-off-by: Dudley Du <dudl@xxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 41c3ae8b726e07e366fdb63e0e40a33528f1c3e4
  Author: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:46 2015 -0400

      i40e: Convert CEE App TLV selector to IEEE selector

      Changes the parsing of CEE App TLVs to fill in the App selector in struct
      i40e_dcbx_config with the IEEE App selector so the caller doesn't have to
      consider whether the App came from a CEE or IEEE DCBX negotiation.

      Change-ID: Ia7d9d664cde04d2ebcc9822fd22e4929c6edab3a
      Signed-off-by: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ac24382d41cc72541d5f8810336acf98a5e6d260
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:45 2015 -0400

      i40e/i40evf: Add info to nvm info struct for OEM version data

      This patch adds a member to the nvm_info struct for oem_ver info to be
      output either by OID or ethtool.

      Change-ID: I1e5d513ae67622e2af17042924fdb4b5d6d85366
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 14e52ee26bdfd6ad00075b66089b4b63fe36fff0
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:44 2015 -0400

      i40evf: properly handle ndo_set_mac_address calls

      The driver was not correctly handling calls to its ndo_set_mac_address
      method. It did not properly check to see if the override would be
      allowed by the PF driver, and never removed the old address from its
      filter list.

      Add a new flag to the adapter struct which is set if the MAC address is
      assigned by the PF. Check this flag and don't allow the MAC address to
      be changed if it is set. Search for and properly remove the filter
      for the old MAC address when the new one is set.

      Change-ID: I817bf620c869c5a80e6a7eab65c9cbad1dc89799
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ab252253e08c16de28ec0f6da0a7ff684a8fce98
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:43 2015 -0400

      i40e: Use BIT() macro for priority map parsing

      Replace one left over (1 << up) in the i40e_dcb.c file with the BIT()
      macro.

      Change-ID: I39492a400a2cee5ac566143a5b436cc478bea0db
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9f4ffc4426c4a4b6d4a84413e13efba6a72bf81d
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:42 2015 -0400

      i40e: Make it clear a parameter is never used

      Flag the filter_mask parameter as __always_unused in the
      ndo_bridge_getlink function.

      Change-ID: Ifc1e99c7fb84bcbf81cf7b0ac891ad8ca956ffb2
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1d55aa9c350b02a0c79d901518026e3af5d5b006
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:41 2015 -0400

      i40e/i40evf: Add new link status defines

      Add the new Port link status bit and rename the link status to function
      link status.

      Change-ID: I71289327ae62638ce967b6ad40114caf998b6dab
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0e339447cf2c8b5c742f9be8e2d73bc27b7ac9c4
  Author: Jeff Johnson <jjohnson@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 09:15:53 2015 -0700

      ath10k: cleanup ath10k_mac_register() error handling

      The logic in the error-handling path of ath10k_mac_register() is
      divergent from the logic in ath10k_mac_unregister().  Update the
      ath10k_mac_register() error handling logic to align with the
      ath10k_mac_unregister() logic.

      Signed-off-by: Jeff Johnson <jjohnson@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 83cfce87d91f06e37bd38f782f0714b406a95873
  Author: Mohammed Shafi Shajakhan <mohammed@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 16:03:03 2015 +0530

      ath10k: fix cleanup in ath10k_thermal_unregister

      First remove the 'cooling_device#n' syslink created
      for ath10k and then unregsiter from the thermal subsystem(cooling)

      Signed-off-by: Mohammed Shafi Shajakhan <mohammed@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit db0984e51a187f5bbe41231af7e671cc12586346
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 11:55:59 2015 +0300

      ath10k: select board data based on BMI chip id and board id

      QCA99X0 uses radio specific board names based on chip id and
      board id combinations. We get these IDs from the target using BMI after 
otp.bin
      has been started.

      This patch reorders the call to the function ath10k_core_fetch_board_file
      so that we have OTP binary before requesting for boardid-chipid. We get 
this
      OTP data after parsing firmware-N.bin.

      [kvalo@xxxxxxxxxxxxxxxx: try BMI_PARAM_GET_EEPROM_BOARD_ID with
       all boards and detect if command is not supported]
      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0a51b343abfe2c0dbcbd9ec3c4b18bb8779fefa8
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 11:55:58 2015 +0300

      ath10k: add board 2 API support

      QCA6174 needs different board files based on board type. To make it 
easier to
      distribute multiple board files and automatically choose correct board 
file
      create a simple TLV file format following the same principles as with FW 
IEs.
      The file is named board-2.bin and contain multiple board files. Each 
board file
      then can have multiple names.

      ath10k searches for file board-N.bin (where N is the interface version 
number
      for the board file, just like we for firmware files) in /lib/firmware/*, 
for
      example for qca99x0 it will try to find it here:

      /lib/firmware/ath10k/QCA99X0/hw2.0/board-2.bin

      If ath10k doesn't find board-2.bin then it will fallback to the old 
board.bin file.

      This patch adds a simple name scheme using pci device id which for now 
will be
      used by qca6174:

      bus=%s,vendor=%04x,device=%04x,subsystem-vendor=%04x,subsystem-device=%04x

      This removes the old method of having subsystem ids in ar->spec_board_id 
and
      using that in the board file name.

      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      [kvalo@xxxxxxxxxxxxxxxx: simplified the file format, rewrote commit log, 
other smaller changes]
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 4b418bff3dae0c017126220df3e148ba8127e99a
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 13:54:38 2015 -0700

      net: vrf: Documentation update, ip commands

      Add ip commands with examples for creating VRF devics, enslaving 
interfaces
      and dumping VRF-focused data (address, neighbors, routes).

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dc6c5fb3b514221f2e9d21ee626a9d95d3418dff
  Author: Chris Mason <clm@xxxxxx>
  Date:   Tue Oct 13 14:06:48 2015 -0400

      btrfs: fix use after free iterating extrefs

      The code for btrfs inode-resolve has never worked properly for
      files with enough hard links to trigger extrefs.  It was trying to
      get the leaf out of a path after freeing the path:

        btrfs_release_path(path);
        leaf = path->nodes[0];
        item_size = btrfs_item_size_nr(leaf, slot);

      The fix here is to use the extent buffer we cloned just a little higher
      up to avoid deadlocks caused by using the leaf in the path.

      Signed-off-by: Chris Mason <clm@xxxxxx>
      cc: stable@xxxxxxxxxxxxxxx # v3.7+
      cc: Mark Fasheh <mfasheh@xxxxxxx>
      Reviewed-by: Filipe Manana <fdmanana@xxxxxxxx>
      Reviewed-by: Mark Fasheh <mfasheh@xxxxxxx>

  commit 8eb934591f8bf584969454a658f629cd06e59f3a
  Author: David Sterba <dsterba@xxxxxxxx>
  Date:   Mon Oct 12 16:55:54 2015 +0200

      btrfs: check unsupported filters in balance arguments

      We don't verify that all the balance filter arguments supplemented by
      the flags are actually known to the kernel. Thus we let it silently pass
      and do nothing.

      At the moment this means only the 'limit' filter, but we're going to add
      a few more soon so it's better to have that fixed. Also in older stable
      kernels so that it works with newer userspace tools.

      Cc: stable@xxxxxxxxxxxxxxx # 3.16+
      Signed-off-by: David Sterba <dsterba@xxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit c3643885aa8a3c7cff3ba3269337f39361d76f76
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Mon Oct 12 01:19:07 2015 -0700

      mISDN: use kstrdup() in dsp_pipeline_build

      Use kstrdup instead of strlen-kmalloc-strcpy. Remove unneeded NULL
      test, it will be tested inside kstrdup. Remove 0 length string test,
      it has been tested in the caller of dsp_pipeline_build.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4bdc3d66147b3a623b32216a45431d0cff005f50
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Oct 13 17:12:54 2015 -0700

      tcp/dccp: fix behavior of stale SYN_RECV request sockets

      When a TCP/DCCP listener is closed, its pending SYN_RECV request sockets
      become stale, meaning 3WHS can not complete.

      But current behavior is wrong :
      incoming packets finding such stale sockets are dropped.

      We need instead to cleanup the request socket and perform another
      lookup :
      - Incoming ACK will give a RST answer,
      - SYN rtx might find another listener if available.
      - We expedite cleanup of request sockets and old listener socket.

      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a98f1b78ecf325bf29c9d3d1eb38cbc9340000af
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Tue Oct 13 16:10:28 2015 +0200

      PM / Domains: Fix validation of latency constraints in genpd governor

      Commit ba2bbfbf6307 (PM / Domains: Remove intermediate states from the
      power off sequence) changed the power off sequence in genpd. That also
      required some updates regarding the validation of latency constraints in
      the genpd governor. Unfortunate that wasn't covered, so let's fix this.

      From a runtime PM and latency point of view, we need to consider the worst
      case scenario while validating latency constraints. That's typically when
      a call to pm_runtime_get_sync() needs to wait for a ongoing runtime
      suspend operation to be carried out, as it then also needs to wait for the
      device to be runtime resumed again.

      The above mentioned commit made the genpd governor's ->stop_ok() callback
      responsible of validating genpd's device's runtime suspend/resume latency.
      In other words, the constraint needs to be validated towards the relevant
      latencies present in genpd's ->runtime_suspend|resume() callbacks.

      Earlier, that included latencies from the ->stop|start() callbacks, but as
      ->save|restore_state() are now also being invoked from genpd's
      ->runtime_suspend|resume() and to comply with the worst case scenario,
      let's take also those latencies into account.

      Fixes: ba2bbfbf6307 (PM / Domains: Remove intermediate states from the 
power off sequence)
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 0b5c9279e568d90903acedc2b9b832d8d78e8288
  Author: Christoph Lameter <cl@xxxxxxxxx>
  Date:   Sun Oct 11 18:49:42 2015 -0500

      IB/ipoib: For sendonly join free the multicast group on leave

      When we leave the multicast group on expiration of a neighbor we
      do not free the mcast structure. This results in a memory leak
      that causes ib_dealloc_pd to fail and print a WARN_ON message
      and backtrace.

      Fixes: bd99b2e05c4d (IB/ipoib: Expire sendonly multicast joins)
      Signed-off-by: Christoph Lameter <cl@xxxxxxxxx>
      Tested-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3435dd08092934ee9672fc28a3ee4c2017741bd6
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 13:47:17 2015 +0300

      x86/early_printk: Set __iomem address space for IO

      There are following warnings on unpatched code:

      arch/x86/kernel/early_printk.c:198:32: warning: incorrect type in 
initializer (different address spaces)
      arch/x86/kernel/early_printk.c:198:32:    expected void [noderef] 
<asn:2>*vaddr
      arch/x86/kernel/early_printk.c:198:32:    got unsigned int [usertype] 
*<noident>
      arch/x86/kernel/early_printk.c:205:32: warning: incorrect type in 
initializer (different address spaces)
      arch/x86/kernel/early_printk.c:205:32:    expected void [noderef] 
<asn:2>*vaddr
      arch/x86/kernel/early_printk.c:205:32:    got unsigned int [usertype] 
*<noident>

      Annotate it proper.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444646837-42615-1-git-send-email-andriy.shevchenko@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ba2374fd2bf379f933773811fdb06cb6a5445f41
  Author: Christian Zander <christian@xxxxxxxxxxxxxx>
  Date:   Wed Jun 10 09:41:45 2015 -0700

      iommu/vt-d: fix range computation when making room for large pages

      In preparation for the installation of a large page, any small page
      tables that may still exist in the target IOV address range are
      removed.  However, if a scatter/gather list entry is large enough to
      fit more than one large page, the address space for any subsequent
      large pages is not cleared of conflicting small page tables.

      This can cause legitimate mapping requests to fail with errors of the
      form below, potentially followed by a series of IOMMU faults:

      ERROR: DMA PTE for vPFN 0xfde00 already set (to 7f83a4003 not 7e9e00083)

      In this example, a 4MiB scatter/gather list entry resulted in the
      successful installation of a large page @ vPFN 0xfdc00, followed by
      a failed attempt to install another large page @ vPFN 0xfde00, due to
      the presence of a pointer to a small page table @ 0x7f83a4000.

      To address this problem, compute the number of large pages that fit
      into a given scatter/gather list entry, and use it to derive the
      last vPFN covered by the large page(s).

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christian Zander <christian@xxxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit 5b5f1455272e23f4e7889cec37228802d8d01adf
  Merge: 6006d452 3be7f32
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 11:31:03 2015 -0700

      Merge tag 'nfsd-4.3-2' of git://linux-nfs.org/~bfields/linux

      Pull nfsd fixes from Bruce Fields:
       "Two nfsd fixes, one for an RDMA crash, one for a pnfs/block protocol
        bug"

      * tag 'nfsd-4.3-2' of git://linux-nfs.org/~bfields/linux:
        svcrdma: Fix NFS server crash triggered by 1MB NFS WRITE
        nfsd/blocklayout: accept any minlength

  commit 6006d4521b158e5ef48620e8c9028bba91bf985d
  Merge: 7554225 8996eaf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 10:18:54 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fixes from Herbert Xu:
       "This fixes the following issues:

         - Fix AVX detection to prevent use of non-existent AESNI.

         - Some SPARC ciphers did not set their IV size which may lead to
           memory corruption"

      * git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: ahash - ensure statesize is non-zero
        crypto: camellia_aesni_avx - Fix CPU feature checks
        crypto: sparc - initialize blkcipher.ivsize

  commit 75542253127d4e4003a5542189c53ff85e4b27b2
  Merge: 06d1ee3 5adad99
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 10:09:59 2015 -0700

      Merge tag 'iommu-fixes-v4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu

      Pull IOMMU fixes from Joerg Roedel:
       "A few fixes piled up:

         - Fix for a suspend/resume issue where PCI probing code overwrote
           dev->irq for the MSI irq of the AMD IOMMU.

         - Fix for a kernel crash when a 32 bit PCI device was assigned to a
           KVM guest.

         - Fix for a possible memory leak in the VT-d driver

         - A couple of fixes for the ARM-SMMU driver"

      * tag 'iommu-fixes-v4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu:
        iommu/amd: Fix NULL pointer deref on device detach
        iommu/amd: Prevent binding other PCI drivers to IOMMU PCI devices
        iommu/vt-d: Fix memory leak in dmar_insert_one_dev_info()
        iommu/arm-smmu: Use correct address mask for CMD_TLBI_S2_IPA
        iommu/arm-smmu: Ensure IAS is set correctly for AArch32-capable SMMUs
        iommu/io-pgtable-arm: Don't use dma_to_phys()

  commit e7a46c818564329f977f8fa157b5e9e1d0d83012
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:45 2015 +0100

      irqdomain: Documentation updates

      Update the IRQ domain documentation to reflect the changes made
      while divorcing the domain infrastructure from Device Tree.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-18-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit be5436c83ac8921f33fe07323fab03c6644ce52e
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:44 2015 +0100

      irqdomain/msi: Use fwnode instead of of_node

      As we continue to push of_node towards the outskirts of irq domains,
      let's start tackling the case of msi_create_irq_domain and its little
      friends.

      This has limited impact in both PCI/MSI, platform MSI, and a few
      drivers.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-17-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2a5e9a072da6469a37d1f0b1577416f51223c280
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:43 2015 +0100

      irqdomain: Introduce irq_domain_create_hierarchy

      As we're about to start converting the various MSI layers to
      use fwnode_handle instead of device_node, add irq_domain_create_hierarchy
      as a directly equivalent of irq_domain_add_hierarchy (which still
      exists as a compatibility interface).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-16-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 462e4fc793b1071dee7c15680218a001318060c5
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:42 2015 +0100

      acpi/gsi: Cleanup acpi_register_gsi

      As the only user of drivers/acpi/gsi.c is now using acpi_set_irq_model
      to set acpi_gsi_domain_id to something meaningful, we can always rely
      on that information to be present (its absence is an error), and
      guarantee that new interrupt controllers will use this API.

      Take this opportunity to cleanup acpi_register_gsi.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-15-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 18bd8847cdd4dac3276ae9973739c570ce37e0b7
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:41 2015 +0100

      irqchip/gic: Kill the xlate method

      We are now left with only two use models for the GIC driver:
      - Via a firmware interface, which mandates a hierarchical domain,
        and the use of the 'translate' method
      - The legacy platforms, which assume irq==hwirq, hence not using
        the 'xlate' method.

      The logical conclusion is that we can now nuke the 'xlate' method
      altogether.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-14-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 891ae7694f862c3605d037066e15ca128faa95d5
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:40 2015 +0100

      irqchip/gic: Switch ACPI support to stacked domains

      Now that the basic ACPI GSI code is irq domain aware, make sure
      that the ACPI support in the GIC doesn't pointlessly deviate from
      the DT path.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-13-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e81a7cd96bd55bb57d92486c514b7b8f8c8cd8ce
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:39 2015 +0100

      irqchip/gic: Get rid of gic_init_bases()

      Since nobody is using gic_init_bases anymore outside of the GIC
      driver itself, let's do a bit of housekeeping and remove the now
      useless entry point.

      Only gic_init() is now exposed to the rest of the kernel for the
      benefit of legacy systems.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-12-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2bc6eba4a322e70eac8cde76442c4ac90699fb39
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:38 2015 +0100

      acpi/gsi: Add acpi_set_irq_model to initialize the GSI layer

      In order to start embrassing irqdomains at the GSI level, introduce
      a new initializer:

      void acpi_set_irq_model(enum acpi_irq_model_id model,
                        struct fwnode_handle *fwnode);

      where:
      - model is the value assigned to acpi_irq_model
      - fwnode is the identifier for the irqdomain mapping
        GSI interrupts

      As nobody calls this code yet, the current code is (mostly)
      left in place.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-11-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d7f8504d234450bf10bb2eb2d4565d6e9af78e5c
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:37 2015 +0100

      acpi/gsi: Always perform an irq domain lookup

      Instead of directly passing NULL to the various irq_domain functions,
      start by looking up the domain with a domain identifier..

      As this identifier is permanently set to NULL, the lookup function will
      return the same value (no domain found) and the default will be used,
      preserving the current behaviour.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-10-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b145dcc45a6af0abfcf9b4de8006d40559c50fc6
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:36 2015 +0100

      irqdomain: Add a fwnode_handle allocator

      In order to be able to reference an irqdomain from ACPI, we need
      to be able to create an identifier, which is usually a struct
      device_node.

      This device node does't really fit the ACPI infrastructure, so
      we cunningly allocate a new structure containing a fwnode_handle,
      and return that.

      This structure doesn't really point to a device (interrupt
      controllers are not "real" devices in Linux), but as we cannot
      really deny that they exist, we create them with a new fwnode_type
      (FWNODE_IRQCHIP).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-9-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1bf4ddc46c5d6123897a54cea4ffe3e90f30600b
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:35 2015 +0100

      irqdomain: Introduce irq_domain_create_{linear, tree}

      Just like we have irq_domain_add_{linear,tree} to create a irq domain
      identified by an of_node, introduce irq_domain_create_{linear,tree}
      that do the same thing, except that they take a struct fwnode_handle.

      Existing functions get rewritten in terms of the new ones so that
      everything keeps working as before (and __irq_domain_add is now
      fwnode_handle based as well).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-8-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c0131f09de8c2d301814cac86d78f643b8ee0574
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:34 2015 +0100

      irqdomain: Introduce irq_create_fwspec_mapping

      Just like we have irq_create_of_mapping, irq_create_fwspec_mapping
      creates a IRQ domain mapping for an interrupt described in a
      struct irq_fwspec.

      irq_create_of_mapping gets rewritten in terms of the new function,
      and the hack we introduced before gets removed (now that no stacked
      irqchip uses of_phandle_args anymore).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-7-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f833f57ff25450b7161798dceaf8575a48d80249
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:33 2015 +0100

      irqchip: Convert all alloc/xlate users from of_node to fwnode

      Since we now have a generic data structure to express an
      interrupt specifier, convert all hierarchical irqchips that
      are OF based to use a fwnode_handle as part of their alloc
      and xlate (which becomes translate) callbacks.

      As most of these drivers have dependencies (they exchange IRQ
      specifiers), change them all in a single, massive patch...

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-6-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 11e4438ee330fab0f216ee7cc1b651cb2ddceb5d
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:32 2015 +0100

      irqdomain: Introduce a firmware-specific IRQ specifier structure

      So far the closest thing to a generic IRQ specifier structure is
      of_phandle_args, which happens to be pretty OF specific (the of_node
      pointer in there is quite annoying).

      Let's introduce 'struct irq_fwspec' that can be used in place of
      of_phandle_args for OF, but also for other firmware implementations
      (that'd be ACPI). This is used together with a new 'translate' method
      that is the pendent of 'xlate'.

      We convert irq_create_of_mapping to use this new structure (with a
      small hack that will be removed later).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-5-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 130b8c6c8d86075304952241bf2365cea6489df1
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:31 2015 +0100

      irqdomain: Allow irq domain lookup by fwnode

      So far, our irq domains are still looked up by device node.
      Let's change this and allow a domain to be looked up using
      a fwnode_handle pointer.

      The existing interfaces are preserved with a couple of helpers.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-4-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f110711a6053f08731858aa91420104094188973
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:30 2015 +0100

      irqdomain: Convert irqdomain-%3Eof_node to fwnode

      Now that we have everyone accessing the of_node field via the
      irq_domain_get_of_node accessor, it is pretty easy to swap it
      for a pointer to a fwnode_handle.

      This translates into a few limited changes in __irq_domain_add,
      and an updated irq_domain_get_of_node.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-3-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 5d4c9bc7767bc86eb9a0e66df783e3fbada7dc97
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:29 2015 +0100

      irqdomain: Use irq_domain_get_of_node() instead of direct field access

      The struct irq_domain contains a "struct device_node *" field
      (of_node) that is almost the only link between the irqdomain
      and the device tree infrastructure.

      In order to prepare for the removal of that field, convert all
      users to use irq_domain_get_of_node() instead.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-2-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e50226b4b86755e65aef2129e94d952fee3df722
  Merge: e984977 25cb62b
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 19:00:14 2015 +0200

      Merge branch 'linus' into irq/core

      Bring in upstream updates for patches which depend on them

  commit 06d1ee32a4d25356a710b49d5e95dbdd68bdf505
  Merge: 25cb62b 7b98040
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 09:45:21 2015 -0700

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "I got a bit behind last week, so here is a delayed fixes pull:

         - a bunch of radeon/amd gpu fixes
         - some nouveau regression fixes (ppc bios reading and runtime pm fix)
         - one drm core oops fix
         - two qxl locking fixes
         - one qxl regression fix"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/nouveau/bios: fix OF loading
        drm/nouveau/fbcon: take runpm reference when userspace has an open fd
        drm/nouveau/nouveau: Disable AGP for SiS 761
        drm/nouveau/display: allow up to 16k width/height for fermi+
        drm/nouveau/bios: translate devinit pri/sec i2c bus to internal 
identifiers
        drm: Fix locking for sysfs dpms file
        drm/amdgpu: fix memory leak in amdgpu_vm_update_page_directory
        drm/amdgpu: fix 32-bit compiler warning
        drm/qxl: avoid dependency lock
        drm/qxl: avoid buffer reservation in qxl_crtc_page_flip
        drm/qxl: fix framebuffer dirty rectangle tracking.
        drm/amdgpu: flag iceland as experimental
        drm/amdgpu: check before checking pci bridge registers
        drm/amdgpu: fix num_crtc on CZ
        drm/amdgpu: restore the fbdev mode in lastclose
        drm/radeon: restore the fbdev mode in lastclose
        drm/radeon: add quirk for ASUS R7 370
        drm/amdgpu: add pm sysfs files late
        drm/radeon: add pm sysfs files late

  commit 73917739334c6509833b0403b81d4a04a8784bdf
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Oct 13 10:19:35 2015 +0200

      KVM: x86: fix SMI to halted VCPU

      An SMI to a halted VCPU must wake it up, hence a VCPU with a pending
      SMI must be considered runnable.

      Fixes: 64d6067057d9658acb8675afcfba549abdb7fc16
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 5d9bc648b94dd719022343b8675e6c4381f0c45f
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Oct 13 10:18:53 2015 +0200

      KVM: x86: clean up kvm_arch_vcpu_runnable

      Split the huge conditional in two functions.

      Fixes: 64d6067057d9658acb8675afcfba549abdb7fc16
      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit f0d648bdf0a5bbc91da6099d5282f77996558ea4
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Oct 12 13:56:27 2015 +0200

      KVM: x86: map/unmap private slots in __x86_set_memory_region

      Otherwise, two copies (one of them never populated and thus bogus)
      are allocated for the regular and SMM address spaces.  This breaks
      SMM with EPT but without unrestricted guest support, because the
      SMM copy of the identity page map is all zeros.

      By moving the allocation to the caller we also remove the last
      vestiges of kernel-allocated memory regions (not accessible anymore
      in userspace since commit b74a07beed0e, "KVM: Remove kernel-allocated
      memory regions", 2010-06-21); that is a nice bonus.

      Reported-by: Alexandre DERUMIER <aderumier@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: 9da0e4d5ac969909f6b435ce28ea28135a9cbd69
      Reviewed-by: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 1d8007bdee074fdffcf3539492d8a151a1fb3436
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Oct 12 13:38:32 2015 +0200

      KVM: x86: build kvm_userspace_memory_region in x86_set_memory_region

      The next patch will make x86_set_memory_region fill the
      userspace_addr.  Since the struct is not used untouched
      anymore, it makes sense to build it in x86_set_memory_region
      directly; it also simplifies the callers.

      Reported-by: Alexandre DERUMIER <aderumier@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: 9da0e4d5ac969909f6b435ce28ea28135a9cbd69
      Reviewed-by: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit ba30670f4d5292c4e7f7980bbd5071f7c4794cdd
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Tue Oct 13 12:04:28 2015 -0400

      dm thin: fix missing pool reference count decrement in pool_ctr error path

      Fixes: ac8c3f3df ("dm thin: generate event when metadata threshold 
passed")
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 3.10+

  commit a2a678ed4d0d6cb5f36dbabc411d60d9a4f9c435
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Tue Oct 13 13:33:08 2015 +0530

      dm snapshot persistent: fix missing cleanup in persistent_ctr error path

      If an unsupported option is given then the early return from
      persistent_ctr() leaked memory allocated for the 'pstore' and never
      destroyed the 'metadata_wq'.

      Fixes: b0d3cc011e53 ("dm snapshot: add new persistent store option to 
support overflow")
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit 42160a041db89807691b2a3fbf42e36a98b6019e
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 16:56:07 2015 +0200

      can: at91: remove at91_can_data

      struct at91_can_data was used to pass a callback to the driver, allowing 
it
      to switch the transceiver on and off. As all at91 boards are now using DT,
      this is not used anymore, remove that structure.

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit ba61a8d9d780980e8284355a0be750897e7af212
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:42 2015 +0200

      can: avoid using timeval for uapi

      The can subsystem communicates with user space using a bcm_msg_head
      header, which contains two timestamps. This is problematic for
      multiple reasons:

      a) The structure layout is currently incompatible between 64-bit
         user space and 32-bit user space, and cannot work in compat
         mode (other than x32).

      b) The timeval structure layout will change in 32-bit user
         space when we fix the y2038 overflow problem by redefining
         time_t to 64-bit, making new 32-bit user space incompatible
         with the current kernel interface.
         Cars last a long time and often use old kernels, so the actual
         users of this code are the most likely ones to migrate to y2038
         safe user space.

      This tries to work around part of the problem by changing the
      publicly visible user interface in the header, but not the binary
      interface. Fortunately, the values passed around in the structure
      are relative times and do not actually suffer from the y2038
      overflow, so 32-bit is enough here.

      We replace the use of 'struct timeval' with a newly defined
      'struct bcm_timeval' that uses the exact same binary layout
      as before and that still suffers from problem a) but not problem
      b).

      The downside of this approach is that any user space program
      that currently assigns a timeval structure to these members
      rather than writing the tv_sec/tv_usec portions individually
      will suffer a compile-time error when built with an updated
      kernel header. Fixing this error makes it work fine with old
      and new headers though.

      We could address problem a) by using '__u32' or 'int' members
      rather than 'long', but that would have a more significant
      downside in also breaking support for all existing 64-bit user
      binaries that might be using this interface, which is likely
      not acceptable.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Acked-by: Oliver Hartkopp <socketcan@xxxxxxxxxxxx>
      Cc: linux-can@xxxxxxxxxxxxxxx
      Cc: linux-api@xxxxxxxxxxxxxxx
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 3c200db56441365d964b5a983de948821f5011b9
  Author: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:58:39 2015 +0200

      can: sun4i: fix MODULE_DESCRIPTION

      This patch change description of the module.

      Signed-off-by: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 887e07be3fd2d056362a9f851f796580d7bca499
  Author: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:58:38 2015 +0200

      can: sun4i: fix arbitration lost error reporting

      This patch fixes a bug in arbitration error reporting

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 52fa1927e953d8b1fbdcf8a19dc75c1499cc3d5d
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Tue Oct 13 16:18:17 2015 +0100

      Revert "arm64: ioremap: add ioremap_cache macro"

      This reverts commit 1b6d7f8742d5d46c478f10c9e57da18d049b116d.

      This patch would conflict with Dan Williams' "tree-wide convert to
      memremap()" series (ioremap_cache replaced by arch_memremap)

      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3a70fcd3a4db56731f67f0189514953c74257944
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 13 14:43:58 2015 +0200

      tools build: Fix cross compile build

      He Kuang the new fixdep tool breaks cross compiling. The reason is it
      wouldn't get compiled under host arch, but under cross arch and failed
      to run.

      We need to add support for host side tools build, meanwhile disabling
      fixdep usage for cross arch builds.

      Reported-by: He Kuang <hekuang@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151013124358.GB9467@xxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c95f3432118c6b7a3bde63aa6eb95ccd163119eb
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 13 10:52:14 2015 +0200

      tools include: Fix strict-aliasing rules breakage

      Vinson reported build breakage with gcc 4.4 due to strict-aliasing.

         CC       util/annotate.o
       cc1: warnings being treated as errors
       util/annotate.c: In function â??disasm__purgeâ??:
       linux-next/tools/include/linux/compiler.h:66: error: dereferencing
       pointer â??res.41â?? does break strict-aliasing rules

      The reason is READ_ONCE/WRITE_ONCE code we took from kernel sources.  They
      intentionaly break aliasing rules. While this is ok for kernel because 
it's
      built with -fno-strict-aliasing, it breaks perf which is build with
      -Wstrict-aliasing=3.

      Using extra __may_alias__ type to allow aliasing in this case.

      Reported-and-tested-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Martin Liska <mliska@xxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabin@xxxxxx>
      Cc: linux-next@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151013085214.GB2705@xxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8996eafdcbad149ac0f772fb1649fbb75c482a6a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 20:43:33 2015 +0100

      crypto: ahash - ensure statesize is non-zero

      Unlike shash algorithms, ahash drivers must implement export
      and import as their descriptors may contain hardware state and
      cannot be exported as is.  Unfortunately some ahash drivers did
      not provide them and end up causing crashes with algif_hash.

      This patch adds a check to prevent these drivers from registering
      ahash algorithms until they are fixed.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 03875ad52fdde1f110f663470a45d3dcc34b8fef
  Author: yalin wang <yalin.wang2010@xxxxxxxxx>
  Date:   Mon Oct 12 14:52:59 2015 +0800

      arm64: add kc_offset_to_vaddr and kc_vaddr_to_offset macro

      This patch add kc_offset_to_vaddr() and kc_vaddr_to_offset(),
      the default version doesn't work on arm64, because arm64 kernel address
      is below the PAGE_OFFSET, like module address and vmemmap address are
      all below PAGE_OFFSET address.

      Signed-off-by: yalin wang <yalin.wang2010@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 1b6d7f8742d5d46c478f10c9e57da18d049b116d
  Author: yalin wang <yalin.wang2010@xxxxxxxxx>
  Date:   Mon Oct 12 10:28:18 2015 +0800

      arm64: ioremap: add ioremap_cache macro

      Add ioremap_cache macro, because some code will test if this macro
      is defined or not, and will generate a generric version if not defined,
      for example, memremap.c do like this.

      Signed-off-by: yalin wang <yalin.wang2010@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit cc917ab43541db3ff66d0136042686d40a1b4c9a
  Author: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 14:22:26 2015 +0100

      drm/i915: Deny wrapping an userptr into a framebuffer

      Pinning a userptr onto the hardware raises interesting questions about
      the lifetime of such a surface as the framebuffer extends that life
      beyond the client's address space. That is the hardware will need to
      keep scanning out from the backing storage even after the client wants
      to remap its address space. As the hardware pins the backing storage,
      the userptr becomes invalid and this raises a WARN when the clients
      tries to unmap its address space. The situation can be even more
      complicated when the buffer is passed between processes, between a
      client and display server, where the lifetime and hardware access is
      even more confusing. Deny it.

      Signed-off-by: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: Tvrtko Ursulin <tvrtko.ursulin@xxxxxxxxx>
      Cc: MichaÅ? Winiarski <michal.winiarski@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Tvrtko Ursulin <tvrtko.ursulin@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit c2b63374461c0986147902f719c26412d1f26fbc
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 22:08:25 2015 +0300

      drm/i915: Enable DPLL VGA mode before P1/P2 divider write

      Apparently writing the DPLL register P1/P2 divider fields won't trigger
      an actual change in the DPLL output unless VGA mode is enabled for
      prior to the register write that changes the P1/P2 dividers. The write
      with the new P1/P2 divider can itself disable VGA mode again without
      problems.

      I tested the behaviour on my 946GZ, and when manually frobbing the
      register with the display on, the behaviour is very clear. However I
      can't explain why this machine actually works. The P1/P2 divider
      changes caused by normal modesets do seem to make it through to the
      hardware somehow since I get a stable picture on the monitor with
      any resolution. Maybe it's the "three times for luck" stuff that
      somehow masks the problem, or something.

      But apparently there are machines (eg. Nick Bowler's G45) where that
      isn't the case and we fail to get the correct clock from the DPLL.

      Things used to work because we enabled VGA mode for disabled DPLLs,
      so when re-enabling the DPLL VGA mode was enabled just prior to the
      first register write, and hence the P1/P2 change went through without
      a hitch. That got changed in

      b8afb9113c51 drm/i915: Keep GMCH DPLL VGA mode always disabled

      in the name of consistency. In order to keep the consistency part,
      leave VGA mode disabled for disabled DPLLs, but turn it on just prior
      to updating the P1/P2 dividers to make sure the hardware picks up
      on the new values.

      Cc: Nick Bowler <nbowler@xxxxxxxxxx>
      Reported-by: Nick Bowler <nbowler@xxxxxxxxxx>
      Tested-by: Nick Bowler <nbowler@xxxxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 8e7a65aa70bcc1235a44e40ae0da5056525fe081
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 22:08:24 2015 +0300

      drm/i915: Restore lost DPLL register write on gen2-4

      We accidentally lost the initial DPLL register write in
      1c4e02746147 drm/i915: Fix DVO 2x clock enable on 830M

      The "three times for luck" hack probably saved us from a total
      disaster. But anyway, bring the initial write back so that the
      code actually makes some sense.

      Reported-and-tested-by: Nick Bowler <nbowler@xxxxxxxxxx>
      References: 
http://mid.gmane.org/CAN_QmVyMaArxYgEcVVsGvsMo7-6ohZr8HmF5VhkkL4i9KOmrhw@xxxxxxxxxxxxxx
      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Nick Bowler <nbowler@xxxxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 83040123fde42ec532d3b632efb5f7f84024e61d
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 13 14:01:06 2015 +0100

      arm64: kasan: fix issues reported by sparse

      Sparse reports some new issues introduced by the kasan patches:

        arch/arm64/mm/kasan_init.c:91:13: warning: no previous prototype for
        'kasan_early_init' [-Wmissing-prototypes] void __init 
kasan_early_init(void)
                   ^
        arch/arm64/mm/kasan_init.c:91:13: warning: symbol 'kasan_early_init'
        was not declared. Should it be static? [sparse]

      This patch resolves the problem by adding a prototype for
      kasan_early_init and marking the function as asmlinkage, since it's only
      called from head.S.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Acked-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 40a24488f5250d63341e74b9994159afc4589606
  Author: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 21 16:08:41 2015 +0100

      drm/i915: Flush pipecontrol post-sync writes

      In order to flush the results from in-batch pipecontrol writes (used for
      example in glQuery) before declaring the batch complete (and so declaring
      the query results coherent), we need to set the FlushEnable bit in our
      flushing pipecontrol. The FlushEnable bit "waits until all previous
      writes of immediate data from post-sync circles are complete before
      executing the next command".

      I get GPU hangs on byt without flushing these writes (running ue4).
      piglit has examples where the flush is required for correct rendering.

      Signed-off-by: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Acked-by: Daniel Vetter <daniel@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit e797e4b71777877b19b50e3d736331c947ccffe7
  Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
  Date:   Tue Oct 6 14:53:01 2015 +0200

      drm/i915: Fix kerneldoc for i915_gem_shrink_all

      I've botched this in

      commit eb0b44adc08c0be01a027eb009e9cdadc31e65a2
      Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Date:   Wed Mar 18 14:47:59 2015 +0100

          drm/i915: kerneldoc for i915_gem_shrinker.c

      so let's fix it.

      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 544d9b17f92d50132f47acd58f38992405298470
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:18 2015 +0100

      netfilter: ip6_tables: ternary operator layout

      Correct whitespace layout of ternary operators in the netfilter-ipv6
      code.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit f9527ea9b63ac861d5d992d24fdd63ee767e21db
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:17 2015 +0100

      netfilter: ipv6: whitespace around operators

      This patch cleanses whitespace around arithmetical operators.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 7695495d5a838995befd59796772c5348125c92b
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:16 2015 +0100

      netfilter: ipv6: code indentation

      Use tabs instead of spaces to indent code.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit cda219c6adb386687d64563671a5259ebf049d0e
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:15 2015 +0100

      netfilter: ip6_tables: function definition layout

      Use tabs instead of spaces to indent second line of parameters in
      function definitions.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6ac94619b66de77b39dc628099ef3260870b6c77
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:14 2015 +0100

      netfilter: ip6_tables: label placement

      Whitespace cleansing: Labels should not be indented.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 514ed62ed3f6846325d9bfb15cb5c3540547f13b
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Thu Oct 8 23:38:07 2015 +0200

      netfilter: sync with packet rx also after removing queue entries

      We need to sync packet rx again after flushing the queue entries.
      Otherwise, the following race could happen:

      cpu1: nf_unregister_hook(H) called, H unliked from lists, calls
      synchronize_net() to wait for packet rx completion.

      Problem is that while no new nf_queue_entry structs that use H can be
      allocated, another CPU might receive a verdict from userspace just before
      cpu1 calls nf_queue_nf_hook_drop to remove this entry:

      cpu2: receive verdict from userspace, lock queue
      cpu2: unlink nf_queue_entry struct E, which references H, from queue list
      cpu1: calls nf_queue_nf_hook_drop, blocks on queue spinlock
      cpu2: unlock queue
      cpu1: nf_queue_nf_hook_drop drops affected queue entries
      cpu2: call nf_reinject for E
      cpu1: kfree(H)
      cpu2: potential use-after-free for H

      Cc: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
      Fixes: 085db2c04557 ("netfilter: Per network namespace netfilter hooks.")
      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit bbb300eb976b613a8e4e666d3af39f5ab1031d22
  Merge: 4b91816 f409d0e
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 04:58:04 2015 -0700

      Merge branch 'bridge-vlan'

      Nikolay Aleksandrov says:

      ====================
      bridge: vlan: cleanups & fixes (part 3)

      Patch 01 converts the vlgrp member to use rcu as it was already used in a
      similar way so better to make it official and use all the available RCU
      instrumentation. Patch 02 fixes a bug where the vlan_list can be traversed
      without rtnl or rcu held which could lead to using freed entries.
      Patch 03 removes some redundant code that isn't needed anymore.
      Patch 04 fixes a bug reported by Ido Schimmel about the vlan_flush order
      and switchdevs, it moves it back.

      v2: patch 03 and 04 are new, couldn't escape the second synchronize_rcu()
      since the rhtable destruction can sleep
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f409d0ed87d2721e1099ce36266e98c5aea2d486
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:47:05 2015 +0200

      bridge: vlan: move back vlan_flush

      Ido Schimmel reported a problem with switchdev devices because of the
      order change of del_nbp operations, more specifically the move of
      nbp_vlan_flush() which deletes all vlans and frees vlgrp after the
      rx_handler has been unregistered. So in order to fix this move
      vlan_flush back where it was and make it destroy the rhtable after
      NULLing vlgrp and waiting a grace period to make sure noone can see it.

      Reported-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b8d02c3cace37393bf9ff0a9eaa1ee39cda1d259
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:47:04 2015 +0200

      bridge: vlan: drop unnecessary flush code

      As Ido Schimmel pointed out the vlan_vid_del() code in nbp_vlan_flush is
      unnecessary (and is actually a remnant of the old vlan code) so we can
      remove it.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9c953eff7f0ec69a52cfa87b912ab48902a0314
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:47:03 2015 +0200

      bridge: vlan: use rcu for vlan_list traversal in br_fill_ifinfo

      br_fill_ifinfo is called by br_ifinfo_notify which can be called from
      many contexts with different locks held, sometimes it relies upon
      bridge's spinlock only which is a problem for the vlan code, so use
      explicitly rcu for that to avoid problems.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 907b1e6e83ed25d9dece1e55b704581b6c127051
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:47:02 2015 +0200

      bridge: vlan: use proper rcu for the vlgrp member

      The bridge and port's vlgrp member is already used in RCU way, currently
      we rely on the fact that it cannot disappear while the port exists but
      that is error-prone and we might miss places with improper locking
      (either RCU or RTNL must be held to walk the vlan_list). So make it
      official and use RCU for vlgrp to catch offenders. Introduce proper vlgrp
      accessors and use them consistently throughout the code.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4b918163aecdec1c5424dcc317907282c58838df
  Merge: af37939 ca25449
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 04:55:10 2015 -0700

      Merge branch 'vrf-ipv6'

      David Ahern says:

      ====================
      net: VRF support in IPv6 stack

      Initial support for VRF in IPv6 stack. Makes IPv6 functionality on par
      with IPv4 -- ping, tcp client/server and udp client/server all work fine.
      tcpdump on vrf device and external tap (e.g., host side tap device) shows
      all packets with proper addresses. IPv6 does not need the source address
      operation like IPv4. Verified vti6 works properly in my setup as does use
      of an IPv6 address on the VRF device.

      v3
      - re-based to top of net-next (updates per net namespace changes by Eric)
      - fixed dst_entry typecasts as requested by Dave
      - added flags to inet6_rtm_getroute (IPv6 version of deaa0a6a930e)

      v2
      - fixed CONFIG_IPV6 dependency as questioned by Cong
        - if IPV6 is a module, kbuild ensures VRF is a module
        - if IPV6 is disabled IPV6 functionality is compiled out of VRF module
      - addressed comments from Nik over IRC
        - removed duplicate call to netif_is_l3_master in l3mdev_rt6_dst_by_oif
        - changed allocation flag from GFP_ATOMIC to GFP_KERNEL since it is 
init time
        - added free of rt6i_pcpu
        - check_ipv6_frame returns false only if packet is NDISC type
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca254490c8dfdaddb5df8a763774db0f4c5200c3
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:47:10 2015 -0700

      net: Add VRF support to IPv6 stack

      As with IPv4 support for VRFs added to IPv6 stack by replacing hardcoded
      table ids with possibly device specific ones and manipulating the oif in
      the flowi6. The flow flags are used to skip oif compare in nexthop lookups
      if the device is enslaved to a VRF via the L3 master device.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 35402e31366349a32b505afdfe856aeeb8d939a0
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:47:09 2015 -0700

      net: Add IPv6 support to VRF device

      Add support for IPv6 to VRF device driver. Implemenation parallels what
      has been done for IPv4.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c4850687783717fa854554965c4bc85625d0e4a8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:47:08 2015 -0700

      net: Export fib6_get_table and nd_tbl

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ccf3c8c3fe1bd4828556650ae7928da6ffb4aaf6
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:47:07 2015 -0700

      net: Add IPv6 support to l3mdev

      Add operations to retrieve cached IPv6 dst entry from l3mdev device
      and lookup IPv6 source address.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e332bc67cf5e5e5b71a1aec9750d0791aac65183
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Oct 12 11:02:08 2015 -0500

      ipv6: Don't call with rt6_uncached_list_flush_dev

      As originally written rt6_uncached_list_flush_dev makes no sense when
      called with dev == NULL as it attempts to flush all uncached routes
      regardless of network namespace when dev == NULL.  Which is simply
      incorrect behavior.

      Furthermore at the point rt6_ifdown is called with dev == NULL no more
      network devices exist in the network namespace so even if the code in
      rt6_uncached_list_flush_dev were to attempt something sensible it
      would be meaningless.

      Therefore remove support in rt6_uncached_list_flush_dev for handling
      network devices where dev == NULL, and only call 
rt6_uncached_list_flush_dev
       when rt6_ifdown is called with a network device.

      Fixes: 8d0b94afdca8 ("ipv6: Keep track of DST_NOCACHE routes in case of 
iface down/unregister")
      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Reviewed-by: Martin KaFai Lau <kafai@xxxxxx>
      Tested-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit af3793921d49a772ec1079449219bad4baa0bc96
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 17:55:55 2015 +0200

      bridge: fix gc_timer mod/del race condition

      commit c62987bbd8a1 ("bridge: push bridge setting ageing_time down to
      switchdev") introduced a timer race condition because the gc_timer can
      get rearmed after it's supposedly stopped and flushed in br_dev_delete()
      leading to a use of freed memory. So take rtnl to sync with bridge
      destruction when setting ageing_timer.
      Here's the trace reproduced with these two commands running in parallel:
      while :; do echo 10000 > /sys/class/net/br0/bridge/ageing_timer; done;
      while :; do brctl addbr br0; ip l set br0 up; ip l set br0 down;
      brctl delbr br0; done;

      [  300.000029] BUG: unable to handle kernel paging request at
      ffffffff811c59d3
      [  300.000263] IP: [<ffffffff810f168e>] __internal_add_timer+0x2e/0xd0
      [  300.000422] PGD 1a0f067 PUD 1a10063 PMD 10001e1
      [  300.000639] Oops: 0003 [#1] SMP
      [  300.000793] Modules linked in: bridge stp llc nfsd auth_rpcgss
      oid_registry nfs_acl nfs lockd grace fscache sunrpc crct10dif_pclmul
      crc32_pclmul crc32c_intel ghash_clmulni_intel ppdev aesni_intel
      aes_x86_64 glue_helper lrw gf128mul ablk_helper cryptd
      snd_hda_codec_generic qxl drm_kms_helper psmouse pcspkr ttm
      snd_hda_intel 9pnet_virtio evdev serio_raw joydev snd_hda_codec 9pnet
      virtio_balloon drm snd_hwdep virtio_console snd_hda_core pvpanic snd_pcm
      i2c_piix4 snd_timer acpi_cpufreq parport_pc snd parport soundcore button
      processor i2c_core ipv6 autofs4 hid_generic usbhid hid ext4 crc16
      mbcache jbd2 sg sr_mod cdrom ata_generic virtio_blk virtio_net e1000
      ehci_pci uhci_hcd ehci_hcd usbcore usb_common floppy ata_piix libata
      virtio_pci virtio_ring virtio scsi_mod
      [  300.004008] CPU: 1 PID: 1169 Comm: bash Not tainted 4.3.0-rc3+ #46
      [  300.004008] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
      [  300.004008] task: ffff880035be2200 ti: ffff88003795c000 task.ti:
      ffff88003795c000
      [  300.004008] RIP: 0010:[<ffffffff810f168e>]  [<ffffffff810f168e>]
      __internal_add_timer+0x2e/0xd0
      [  300.004008] RSP: 0018:ffff88003fd03e78  EFLAGS: 00010046
      [  300.004008] RAX: ffff88003fd0ef60 RBX: 840fc78949c08548 RCX:
      00000001ffffffff
      [  300.004008] RDX: 0000000000000000 RSI: ffffffff811c59d3 RDI:
      ffff88003fd0df00
      [  300.004008] RBP: ffff88003fd03e78 R08: 00000000ffffffff R09:
      0000000000000000
      [  300.004008] R10: 0000000000000000 R11: 0000000000000000 R12:
      ffff88003fd0df00
      [  300.004008] R13: 0000000000000000 R14: 0000000000000001 R15:
      ffffffff816032e0
      [  300.004008] FS:  00007fcbdd609700(0000) GS:ffff88003fd00000(0000)
      knlGS:0000000000000000
      [  300.004008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [  300.004008] CR2: ffffffff811c59d3 CR3: 0000000037879000 CR4:
      00000000000406e0
      [  300.004008] Stack:
      [  300.004008]  ffff88003fd03ea8 ffffffff810f1775 ffff88003c8cb958
      ffff88003fd0df00
      [  300.004008]  0000000000000000 0000000000000001 ffff88003fd03f18
      ffffffff810f28c4
      [  300.004008]  ffff88003fd0eb68 ffff88003fd0e968 ffff88003fd0e768
      ffff88003fd0df68
      [  300.004008] Call Trace:
      [  300.004008]  <IRQ>
      [  300.004008]  [<ffffffff810f1775>] cascade+0x45/0x70
      [  300.004008]  [<ffffffff810f28c4>] run_timer_softirq+0x2f4/0x340
      [  300.004008]  [<ffffffff8107e380>] __do_softirq+0xd0/0x440
      [  300.004008]  [<ffffffff8107e8a3>] irq_exit+0xb3/0xc0
      [  300.004008]  [<ffffffff815c2032>] smp_apic_timer_interrupt+0x42/0x50
      [  300.004008]  [<ffffffff815bfe37>] apic_timer_interrupt+0x87/0x90
      [  300.004008]  <EOI>
      [  300.004008]  [<ffffffff811fb80c>] ? create_object+0x13c/0x2e0
      [  300.004008]  [<ffffffff8109b23e>] ? __kernel_text_address+0x4e/0x70
      [  300.004008]  [<ffffffff8109b23e>] ? __kernel_text_address+0x4e/0x70
      [  300.004008]  [<ffffffff8101e17f>] print_context_stack+0x7f/0xf0
      [  300.004008]  [<ffffffff8101d55b>] dump_trace+0x11b/0x300
      [  300.004008]  [<ffffffff8102970b>] save_stack_trace+0x2b/0x50
      [  300.004008]  [<ffffffff811fb80c>] create_object+0x13c/0x2e0
      [  300.004008]  [<ffffffff815b2e8e>] kmemleak_alloc+0x4e/0xb0
      [  300.004008]  [<ffffffff811e475d>] kmem_cache_alloc_trace+0x18d/0x2f0
      [  300.004008]  [<ffffffff8128b139>] kernfs_fop_open+0xc9/0x380
      [  300.004008]  [<ffffffff8120214f>] do_dentry_open+0x1ff/0x2f0
      [  300.004008]  [<ffffffff8128b070>] ? kernfs_fop_release+0x70/0x70
      [  300.004008]  [<ffffffff812034f9>] vfs_open+0x59/0x60
      [  300.004008]  [<ffffffff812130de>] path_openat+0x1ce/0x1260
      [  300.004008]  [<ffffffff812154ae>] do_filp_open+0x7e/0xe0
      [  300.004008]  [<ffffffff812251ff>] ? __alloc_fd+0xaf/0x180
      [  300.004008]  [<ffffffff8120387b>] do_sys_open+0x12b/0x210
      [  300.004008]  [<ffffffff8120397e>] SyS_open+0x1e/0x20
      [  300.004008]  [<ffffffff815bf0b6>] entry_SYSCALL_64_fastpath+0x16/0x7a
      [  300.004008] Code: 66 90 48 8b 46 10 48 8b 4f 40 55 48 89 c2 48 89 e5
      48 29 ca 48 81 fa ff 00 00 00 77 20 0f b6 c0 48 8d 44 c7 68 48 8b 10 48
      85 d2 <48> 89 16 74 04 48 89 72 08 48 89 30 48 89 46 08 5d c3 48 81 fa
      [  300.004008] RIP  [<ffffffff810f168e>] __internal_add_timer+0x2e/0xd0
      [  300.004008]  RSP <ffff88003fd03e78>
      [  300.004008] CR2: ffffffff811c59d3

      Fixes: c62987bbd8a1 ("bridge: push bridge setting ageing_time down to 
switchdev")
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 87aaf2caed8496404d3809edc30d38d4a4a5d273
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 14:31:01 2015 +0200

      switchdev: check if the vlan id is in the proper vlan range

      VLANs 0 and 4095 are reserved and shouldn't be used, add checks to
      switchdev similar to the bridge. Also make sure ids above 4095 cannot
      be passed either.

      Fixes: 47f8328bb1a4 ("switchdev: add new switchdev bridge setlink")
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc02aa8e41c50f690d0bb22ed5629468483421b7
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 14:01:39 2015 +0200

      switchdev: enforce no pvid flag in vlan ranges

      We shouldn't allow BRIDGE_VLAN_INFO_PVID flag in VLAN ranges.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f225031fee6c39cbbf2a6c79cb150ff63f0556c
  Merge: 3bb35ac 196e373
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 04:32:50 2015 -0700

      Merge branch 'be2net-fixes'

      Sathya Perla says:

      ====================
      be2net: patch set

      Patch 1 fixes a FW image compatibility check in the driver that
      prevents certain FW images from being flashed on BE3 (not BE3-R)
      adapters.

      Patch 2 fixes a spin_lock not being released in a failure case in
      be_cmd_notify_wait().

      Patch 3 includes a workaround to pad packets that are only 32b long or 
less
      to be applicabe to BE3 too. This workaround was currently applied only to
      Skyhawk and Lancer chips. Such packets are causing BE3's TX path to stall
      on a SR-IOV config.

      Patch 4 fixes the be_cmd_get_profile_config() routine to set the pf_num
      field in the cmd request. The FW requires this field to be set for it to
      return the specific function's descriptors. If not set, the FW returns
      the descriptors of all the functions on the device. If the first 
descriptor
      is not what is being queried for, the driver will read wrong data.
      This patch fixes this issue by using the GET_CNTL_ATTRIB cmd to query the
      real pci_func_num of a function and then uses it in the GET_PROFILE_CONFIG
      cmd.

      Patch 5 completes an earlier fix that removed the vlan promisc capability
      for VFs. The earlier fix did not update the removal of this capability 
from
      the profile descriptor of the VF. This causes the VF driver to request 
this
      capability when it tries to create it's interface at probe time. This 
could
      potentailly cause the VF probe to fail if the FW enforces strict checking 
of
      the flags based on what was provisoned by the PF.  This strict checking is
      not being done by FW currently but will be fixed in a future version. This
      patch fixes this issue by updating the VF's profile descriptor so that 
they
      match the interface capability flags provisioned by the PF.

      Pls consider adding these patches to the net tree. Thanks!
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 196e3735fa66c8340d6fff9ec81f6201ffc60b7d
  Author: Kalesh AP <kalesh.purayil@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 03:47:21 2015 -0400

      be2net: remove vlan promisc capability from VF's profile descriptors

      The commit 435452aa8847 ("Prevent VFs from enabling VLAN promiscuous 
mode")
      fixed the PF driver to not include the VLAN promisc capability while
      provisioning the interface for a VF. But the fix did not remove this
      capability from the profile descriptor of the VF. This causes the VF
      driver to request this capability when it tries to create it's interface
      at probe time.  This could potentailly cause the VF probe to fail if the
      FW enforces strict checking of the flags based on what was provisoned
      by the PF.  This strict checking is not being done by FW currently but
      will be fixed in a future version. This patch fixes this issue by updating
      the VF's profile descriptor so that they match the interface capability
      flags provisioned by the PF.

      Fixes: 435452aa8847 ("Prevent VFs from enabling VLAN promiscuous mode")
      Signed-off-by: Kalesh AP <kalesh.purayil@xxxxxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 72ef3a88fa8e225301aaea296ffc95407de21986
  Author: Somnath Kotur <somnath.kotur@xxxxxxxxxx>
  Date:   Mon Oct 12 03:47:20 2015 -0400

      be2net: set pci_func_num while issuing GET_PROFILE_CONFIG cmd

      The FW requires the pf_num field in the cmd hdr to be set for it to return
      the specific function's descriptors in the GET_PROFILE_CONFIG cmd. If not
      set, the FW returns the descriptors of all the functions on the device.
      If the first descriptor is not what is being queried for, the driver will
      read wrong data. This patch fixes this issue by using the GET_CNTL_ATTRIB
      cmd to query the real pci_func_num of a function and then uses it in the
      GET_PROFILE_CONFIG cmd.

      Signed-off-by: Somnath Kotur <somnath.kotur@xxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8227e9901ded28d071f20313238e91e71d6bfdce
  Author: Suresh Reddy <Suresh.Reddy@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 03:47:19 2015 -0400

      be2net: pad skb to meet minimum TX pkt size in BE3

      On BE3 chips in SRIOV configs, the TX path stalls when a packet less
      than 32B is received from the host. A workaround to pad such packets
      already exists for the Skyhawk and Lancer chips. Use the same workaround
      for BE3 chips too.

      Signed-off-by: Suresh Reddy <suresh.reddy@xxxxxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c8845679f3b8f030f3bafcdf226ed92545fa2a9
  Author: Suresh Reddy <Suresh.Reddy@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 03:47:18 2015 -0400

      be2net: release mcc-lock in a failure case in be_cmd_notify_wait()

      The mcc/mbox lock is not being released when be_cmd_copy() returns
      an error.

      Signed-off-by: Suresh Reddy <suresh.reddy@xxxxxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ae4a9d6a6362df4e4e492c297157498d299bdb68
  Author: Kalesh AP <kalesh.purayil@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 03:47:17 2015 -0400

      be2net: fix BE3-R FW download compatibility check

      In the BE3 FW image, unlike Skyhawk's, the "asic_type_rev" field doesn't
      track the asic_rev of chip it is compatible with. When asic_type_rev
      is 0 the image is compatible only with pre-BE3-R chips (asic_rev < 0x10).
      Fix the current compatibility check to take care of this.
      We hit this issue when we try to flash old BE3 images (used prior to the
      release of BE3-R) on pre-BE3-R adapters.

      Fixes: a6e6ff6eee12f3e ("be2net: simplify UFI compatibility checking")
      Signed-off-by: Kalesh AP <kalesh.purayil@xxxxxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3bb35ac4978977cf414893ee721f442039c4b8a4
  Author: Gerlando Falauto <gerlando.falauto@xxxxxxxxxxx>
  Date:   Mon Oct 12 09:18:41 2015 +0200

      net/fsl_pq_mdio: fix computed address for the TBI register

      commit afae5ad78b342f401c28b0bb1adb3cd494cb125a
        "net/fsl_pq_mdio: streamline probing of MDIO nodes"

      added support for different types of MDIO devices:
      1) Gianfar MDIO nodes that only map the MII registers
      2) Gianfar MDIO nodes that map the full MDIO register set
      3) eTSEC2 MDIO nodes (which map the full MDIO register set)
      4) QE MDIO nodes (which map only the MII registers)

      However, the implementation for types 1 and 4 would mistakenly assume
      a mapping of the full MDIO register set, thereby computing the address
      for the TBI register starting from the containing structure.
      The TBI register would therefore be accessed at a wrong (much bigger)
      address, not giving the expected result at all.
      This patch restores the correct behavior we had prior to the above one.

      The consequences of this bug are apparent when trying to access a PHY
      with the same address as the value contained in the initial value of
      the TBI register (normally 0); in that case you'll get answers from the
      internal TBI device (even though MDIO/MDC pins are actually *also*
      toggling on the physical bus!).
      Beware that you also need to add a fake tbi node to your device tree
      with an unused address.

      Notice how this fix is related to commit
      220669495bf8b68130a8218607147c7b74c28d2b
        "powerpc: Add TBI PHY node to first MDIO bus"

      which fixed the behavior in kernel 3.3, which was later broken by the
      above commit on kernel 3.7.

      Signed-off-by: Gerlando Falauto <gerlando.falauto@xxxxxxxxxxx>
      Cc: Timur Tabi <timur@xxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3dd03e52a410818c0818924c2ba27a43725f5e94
  Author: Gerlando Falauto <gerlando.falauto@xxxxxxxxxxx>
  Date:   Mon Oct 12 09:18:40 2015 +0200

      net/fsl_pq_mdio: check TBI address for consistency with mapped range

      When configuring the MDIO subsystem it is also necessary to configure
      the TBI register. Make sure the TBI is contained within the mapped
      register range in order to:
      a) make sure the address is computed correctly
      b) make users aware that we're actually accessing that register

      In case of error, print a message but continue anyway.

      Signed-off-by: Gerlando Falauto <gerlando.falauto@xxxxxxxxxxx>
      Cc: Timur Tabi <timur@xxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f83665d0c41f3e24602f7dd03003574f852b326f
  Merge: 241b271 5fe7f68
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 04:26:44 2015 -0700

      Merge branch 'dsa-mv88e6xxx-fix-hardware-bridging'

      Vivien Didelot says:

      ====================
      net: dsa: mv88e6xxx: fix hardware bridging

      DSA and its drivers currently hook the NETDEV_CHANGEUPPER net_device 
event in
      order to configure the VLAN map of every port.

      This VLAN map is a feature of these switch chips to hardcode and restrict 
which
      output ports a given input port can egress frames to.

      A Linux bridge is a simple untagged VLAN propagated by the bridge code 
itself.
      With a proper 802.1Q support, a driver does not need this hook anymore, 
and
      will simply program the related VLAN object.

      This patchset improves the hardware bridging code in the mv88e6xxx driver 
with
      a strict 802.1Q mode.

      Ideally, the equivalent must be done for Broadcom Starfighter 2 and 
Rocker,
      before completely getting rid of this hook.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5fe7f68016ff9dcb59632071f9abf30296bbad3c
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 18:08:38 2015 -0400

      net: dsa: mv88e6xxx: fix hardware bridging

      Playing with the VLAN map of every port to implement "hardware bridging"
      in the 88E6352 driver was a hack until full 802.1Q was supported.

      Indeed with 802.1Q port mode "Disabled" or "Fallback", this feature is
      used to restrict which output ports an input port can egress frames to.

      A Linux bridge is an untagged VLAN. With full 802.1Q support, we don't
      need this hack anymore and can use the "Secure" strict 802.1Q port mode.

      With this mode, the port-based VLAN map still needs to be configured,
      but all the logic is VTU-centric. This means that the switch only cares
      about rules described in its hardware VLAN table, which is exactly what
      Linux bridge expects and what we want.

      Note also that the hardware bridging was broken with the previous
      flexible "Fallback" 802.1Q port mode. Here's an example:

      Port0 and Port1 belong to the same bridge. If Port0 sends crafted tagged
      frames with VID 200 to Port1, Port1 receives it. Even if Port1 is in
      hardware VLAN 200, but not Port0, Port1 will still receive it, because
      Fallback mode doesn't care about invalid VID or non-member source port.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit efd29b3d8266761570fd3f440e2d5aa24c678725
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 18:08:37 2015 -0400

      net: dsa: do not warn unsupported bridge ops

      A DSA driver may not provide the port_join_bridge and port_leave_bridge
      functions, so don't warn in such case.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f02bdffca29bc41e440ac67ffd47b56834d3bf85
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 18:08:36 2015 -0400

      net: dsa: mv88e6xxx: do not support per-port FID

      Since we configure a switch chip through a Linux bridge, and a bridge is
      implemented as a VLAN, there is no need for per-port FID anymore.

      This patch gets rid of this and simplifies the driver code since we can
      now directly map all 4095 FIDs available to all VLANs.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ede8098d0fef46ae48e59fcf7088149ca424d959
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 18:08:35 2015 -0400

      net: dsa: mv88e6xxx: bridges do not need an FID

      With 88E6352 and similar switch chips, each port has a map to restrict
      which output port this input port can egress frames to.

      The current driver code implements hardware bridging using this feature,
      and assigns to a bridge group the FID of its first member.

      Now that 802.1Q is fully implemented in this driver, a Linux bridge
      which is a simple untagged VLAN, already gets its own FID.

      This patch gets rid of the per-bridge FID and explicits the usage of the
      port based VLAN map feature.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 241b271952eb319622a6cc740a72abe41fc27ad6
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Sun Oct 11 16:49:44 2015 -0400

      RDS-TCP: Reset tcp callbacks if re-using an outgoing socket in 
rds_tcp_accept_one()

      Consider the following "duelling syn" sequence between two peers A and B:
                A               B
                SYN1     -->
                        <--     SYN2
                SYN2ACK  -->

      Note that the SYN/ACK has already been sent out by TCP before
      rds_tcp_accept_one() gets invoked as part of callbacks.

      If the inet_addr(A) is numerically less than inet_addr(B),
      the arbitration scheme in rds_tcp_accept_one() will prefer the
      TCP connection triggered by SYN1, and will send a CLOSE for the
      SYN2 (just after the SYN2ACK was sent).

      Since B also follows the same arbitration scheme, it will send the SYN-ACK
      for SYN1 that will set up a healthy ESTABLISHED connection on both sides.
      B will also get a  CLOSE for SYN2, which should result in the cleanup
      of the TCP state machine for SYN2, but it should not trigger any
      stale RDS-TCP callbacks (such as ->writespace, ->state_change etc),
      that would disrupt the progress of the SYN2 based RDS-TCP  connection.

      Thus the arbitration scheme in rds_tcp_accept_one() should restore
      rds_tcp callbacks for the winner before setting them up for the
      new accept socket, and also make sure that conn->c_outgoing
      is set to 0 so that we do not trigger any reconnect attempts on the
      passive side of the tcp socket in the future, in conformance with
      commit c82ac7e69efe ("net/rds: RDS-TCP: only initiate reconnect attempt
      on outgoing TCP socket.")

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 486798001b92eacbf9f809787a6348750c174035
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Sun Oct 11 16:46:03 2015 -0400

      RDS: Invoke ->laddr_check() in rds_bind() for explicitly bound transports.

      The IP address passed to rds_bind() should be vetted by the
      transport's ->laddr_check() for a previously bound transport.
      This needs to be done to avoid cases where, for example,
      the application has asked for an IB transport,
      but the IP address passed to bind is only usable on
      ethernet interfaces.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 571f2c11b343cd6997f35a21f6caa0f78e87fc84
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 11 13:48:05 2015 +0200

      qlcnic: constify qlcnic_mbx_ops structure

      The only instance of a qlcnic_mbx_ops structure is never modified.  Thus
      the declaration of the structure and all references to the structure type
      can be made const.

      In the definition of the qlcnic_mailbox structure, the ops field is no
      longer lined up with the other fields.  This was left as is, to avoid a 
lot
      of trivial changes on the other lines.

      Done with the help of Coccinelle.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Acked-by: Sony Chacko <sony.chacko@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7ceebfe46ec026b5405416b72772ac5aa9e09e84
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Fri Oct 9 13:10:37 2015 +0200

      netfilter: nfqueue: don't use prev pointer

      Usage of -prev seems buggy.  While packet was out our hook cannot be
      removed but we have no way to know if the previous one is still valid.

      So better not use ->prev at all.  Since NF_REPEAT just asks to invoke
      same hook function again, just do so, and continue with nf_interate
      if we get an ACCEPT verdict.

      A side effect of this change is that if nf_reinject(NF_REPEAT) causes
      another REPEAT we will now drop the skb instead of a kernel loop.

      However, NF_REPEAT loops would be a bug so this should not happen anyway.

      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 61f6bba006d4e643fdff62c3d7fd4ea6ca4f468d
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 13 11:36:21 2015 +0200

      mac80211: use new cfg80211_inform_bss_frame_data() API

      The new API is more easily extensible with a metadata struct
      passed to it, use it in mac80211.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit e8d65a8d985271a102f07c7456da5b86c19ffe16
  Author: David Henningsson <david.henningsson@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 10:10:18 2015 +0200

      ALSA: hda - Fix inverted internal mic on Lenovo G50-80

      Add the appropriate quirk to indicate the Lenovo G50-80 has a stereo
      mic input where one channel has reverse polarity.

      Alsa-info available at:
      https://launchpadlibrarian.net/220846272/AlsaInfo.txt

      Cc: stable@xxxxxxxxxxxxxxx
      BugLink: https://bugs.launchpad.net/bugs/1504778
      Signed-off-by: David Henningsson <david.henningsson@xxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 42f2bb1c494543084b764e1ca253c73db910daf2
  Author: Vinod Koul <vinod.koul@xxxxxxxxx>
  Date:   Tue Oct 13 14:57:49 2015 +0530

      ALSA: hdac: Explicitly add io.h

      Compiling the hdac extended core on arm fails with below error:

        sound/hda/ext/hdac_ext_bus.c: In function 'hdac_ext_writel':
      >> sound/hda/ext/hdac_ext_bus.c:29:2: error: implicit declaration of
      >> function
      +'writel' [-Werror=implicit-function-declaration]
           writel(value, addr);
           ^
         sound/hda/ext/hdac_ext_bus.c: In function 'hdac_ext_readl':
      >> sound/hda/ext/hdac_ext_bus.c:34:2: error: implicit declaration of
      >> function
      +'readl' [-Werror=implicit-function-declaration]
           return readl(addr);

      This is fixed by explicitly including io.h

      Fixes: 99463b3a3994 - ('ALSA: hda: provide default bus io ops extended 
hdac')
      Reported-by: kbuild test robot <lkp@xxxxxxxxx>
      Suggested-by: Mark Brown <broonie@xxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit e2845c458ea27e924b0f2cbd647ba43e810305a5
  Author: Avraham Stern <avraham.stern@xxxxxxxxx>
  Date:   Mon Oct 12 09:51:35 2015 +0300

      mac80211: Do not restart scheduled scan if multiple scan plans are set

      If multiple scan plans were set for scheduled scan, do not restart
      scheduled scan on reconfig because it is possible that some scan
      plans were already completed and there is no need to run them all
      over again. Instead, notify userspace that scheduled scan stopped
      so it can configure new scan plans for scheduled scan.

      Signed-off-by: Avraham Stern <avraham.stern@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 3b06d277957c7af705a9c0cdda4b371759efb717
  Author: Avraham Stern <avraham.stern@xxxxxxxxx>
  Date:   Mon Oct 12 09:51:34 2015 +0300

      cfg80211: Add multiple scan plans for scheduled scan

      Add the option to configure multiple 'scan plans' for scheduled scan.
      Each 'scan plan' defines the number of scan cycles and the interval
      between scans. The scan plans are executed in the order they were
      configured. The last scan plan will always run infinitely and thus
      defines only the interval between scans.
      The maximum number of scan plans supported by the device and the
      maximum number of iterations in a single scan plan are advertised
      to userspace so it can configure the scan plans appropriately.

      When scheduled scan results are received there is no way to know which
      scan plan is being currently executed, so there is no way to know when
      the next scan iteration will start. This is not a problem, however.
      The scan start timestamp is only used for flushing old scan results,
      and there is no difference between flushing all results received until
      the end of the previous iteration or the start of the current one,
      since no results will be received in between.

      Signed-off-by: Avraham Stern <avraham.stern@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit af61426187cd854bffe013ca8547bd8fa3c4dfbf
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 7 15:48:26 2015 +0200

      wireless: add WNM action frame categories

      Add the WNM and unprotected WNM categories and mark the latter
      as not robust.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a4288289f585d42a19145f266e214acb165fe9b3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 7 15:48:25 2015 +0200

      wireless: update robust action frame list

      Unprotected DMG and VHT action frames are not protected, reflect
      that in the list.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 6e19bc4b7091ffd26586100eee78232b44427ec7
  Author: Dmitry Shmidt <dimitrysh@xxxxxxxxxx>
  Date:   Wed Oct 7 11:32:53 2015 +0200

      nl80211: allow BSS data to include CLOCK_BOOTTIME timestamp

      For location and connectivity services, userspace would often like
      to know the time when the BSS was last seen. The current "last seen"
      value is calculated in a way that makes it less useful, especially
      if the system suspended in the meantime.

      Add the ability for the driver to report a real CLOCK_BOOTTIME stamp
      that can then be reported to userspace (if present).

      Drivers wishing to use this must be converted to the new API to call
      cfg80211_inform_bss_data() or cfg80211_inform_bss_frame_data(). They
      need to ensure the reported value is accurate enough even when the
      frame might have been buffered in the device (e.g. firmware.)

      Signed-off-by: Dmitry Shmidt <dimitrysh@xxxxxxxxxx>
      [modified to use struct, inlines]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4633dfc32c0019bed2996de9bbdbe7f3b518a44e
  Author: Mohammed Shafi Shajakhan <mohammed@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 19:20:14 2015 +0530

      mac80211: Fix hwflags debugfs file format

      Commit 30686bf7f5b3 ("mac80211: convert HW flags to unsigned long
      bitmap") accidentally removed the newline delimiter from the hwflags
      debugfs file. Fix this by adding back the newline between the HW flags.

      Cc: stable@xxxxxxxxxxxxxxx [4.2]
      Signed-off-by: Mohammed Shafi Shajakhan <mohammed@xxxxxxxxxxxxxxxx>
      [fix commit log]
      Signed-off-by: Jouni Malinen <jouni@xxxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 93f0490e5deb9445737cabf0e436f3288a4042b7
  Author: Tamizh chelvam <c_traja@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 10:40:04 2015 +0530

      Revert "mac80211: remove exposing 'mfp' to drivers"

      This reverts commit 5c48f1201744233d4f235c7dd916d5196ed20716.

      Some device drivers (ath10k) offload part of aggregation including 
AddBA/DelBA
      negotiations to firmware. In such scenario, the PMF configuration of
      the station needs to be provided to driver to enable encryption of
      AddBA/DelBA action frames.

      Signed-off-by: Tamizh chelvam <c_traja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 985f2c87a7109a42cac93f56ea595353d53a1746
  Merge: 4d57c67 6623c60
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 13 10:28:16 2015 +0200

      Merge remote-tracking branch 'net-next/master' into mac80211-next

      Merge net-next to get some driver changes that patches depend
      on (in order to avoid conflicts).

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ed7d78b2da32198ca4c70172e3b63c6b3e2c570b
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Mon Oct 12 01:49:39 2015 -0700

      drm/vmwgfx: Fix kernel NULL pointer dereference on older hardware

      The commit "drm/vmwgfx: Fix up user_dmabuf refcounting", while fixing a
      kernel crash introduced a NULL pointer dereference on older hardware.
      Fix this.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>
      Reviewed-by: Brian Paul <brianp@xxxxxxxxxx>

  commit abb39bc792aa8e9143e78a39ec13d7de1391f4b4
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Mon Oct 12 15:28:57 2015 +1100

      selftests/powerpc: Fix build failure of load_unaligned_zeropad test

      Commit 7a5692e6e533 ("arch/powerpc: provide zero_bytemask() for
      big-endian") added a call to __fls() in our word-at-a-time.h. That was
      fine for the kernel build but missed the fact that we also use
      word-at-a-time.h in a userspace test.

      Pulling in the kernel version of __fls() gets messy, so just define our
      own, it's unlikely to change often.

      Fixes: 7a5692e6e533 ("arch/powerpc: provide zero_bytemask() for 
big-endian")
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 6623c60dc28ee966cd85c6f12aa2fc3c952d0179
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 12:49:56 2015 +0200

      bridge: vlan: enforce no pvid flag in vlan ranges

      Currently it's possible for someone to send a vlan range to the kernel
      with the pvid flag set which will result in the pvid bouncing from a
      vlan to vlan and isn't correct, it also introduces problems for hardware
      where it doesn't make sense having more than 1 pvid. iproute2 already
      enforces this, so let's enforce it on kernel-side as well.

      Reported-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cbb41b91e68a302087762823136c9067138cff7c
  Author: Tillmann Heidsieck <theidsieck@xxxxxxxxx>
  Date:   Sat Oct 10 21:47:19 2015 +0200

      atm: iphase: fix misleading indention

      Fix a smatch warning:
      drivers/atm/iphase.c:1178 rx_pkt() warn: curly braces intended?

      The code is correct, the indention is misleading. In case the allocation
      of skb fails, we want to skip to the end.

      Signed-off-by: Tillmann Heidsieck <theidsieck@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21e26ff993dea9dceaf0f19cfec4bef58387b0f2
  Author: Tillmann Heidsieck <theidsieck@xxxxxxxxx>
  Date:   Sat Oct 10 21:47:18 2015 +0200

      atm: iphase: return -ENOMEM instead of -1 in case of failed kmalloc()

      Smatch complains about returning hard coded error codes, silence this
      warning.

      drivers/atm/iphase.c:115 ia_enque_rtn_q() warn: returning -1 instead of 
-ENOMEM is sloppy

      Signed-off-by: Tillmann Heidsieck <theidsieck@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8c5b83f0f255542b40a1273c32eb067ec00bb2b2
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 08:26:36 2015 -0700

      ipv6 route: use err pointers instead of returning pointer by reference

      This patch makes ip6_route_info_create return err pointer instead of
      returning the rt pointer by reference as suggested  by Dave

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 99dcc7dfb1960d5e2f1577ff3aad69dfeb6e9787
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Sat Oct 10 17:20:38 2015 +0800

      net: hns: fix the unknown phy_nterface_t type error

      This patch fix the building error reported by Jiri Pirko 
<jiri@xxxxxxxxxxx>

      drivers/net/ethernet/hisilicon/hns/hnae.h:465:2: error: unknown type
      name 'phy_interface_t'
              phy_interface_t phy_if;
        ^
      the full build log is on https://lists.01.org/pipermail/kbuild-all.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5fcd2d8be43664f1b6a5add3d21a367411add9d4
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 9 15:42:21 2015 -0700

      tun: use sk_fullsock() before reading sk->sk_tsflags

      timewait or request sockets are small and do not contain sk->sk_tsflags

      Without this fix, we might read garbage, and crash later in

      __skb_complete_tx_timestamp()
       -> sock_queue_err_skb()

      (These pseudo sockets do not have an error queue either)

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Acked-by: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b7a4609591612119869f2498732da98e4f8d5f4d
  Merge: 161642e b727759
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 19:44:22 2015 -0700

      Merge branch 'netns-defrag'

      Eric W. Biederman says:

      ====================
      net: Pass net into defragmentation

      This is the next installment of my work to pass struct net through the
      output path so the code does not need to guess how to figure out which
      network namespace it is in, and ultimately routes can have output
      devices in another network namespace.

      In netfilter and af_packet we defragment packets in the output path,
      and there is the usual amount of confusion about how to compute which
      net we are processing the packets in.  This patchset clears that
      confusion up by explicitly passing in struct net in ip_defrag,
      ip_check_defrag, and nf_ct_frag6_gather.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b72775977c39dcd380777ff5ea8041fdf67ee382
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Oct 9 13:44:55 2015 -0500

      ipv6: Pass struct net into nf_ct_frag6_gather

      The function nf_ct_frag6_gather is called on both the input and the
      output paths of the networking stack.  In particular ipv6_defrag which
      calls nf_ct_frag6_gather is called from both the the PRE_ROUTING chain
      on input and the LOCAL_OUT chain on output.

      The addition of a net parameter makes it explicit which network
      namespace the packets are being reassembled in, and removes the need
      for nf_ct_frag6_gather to guess.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 19bcf9f203c82c2028f5a0881b1f0690e3207190
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Oct 9 13:44:54 2015 -0500

      ipv4: Pass struct net into ip_defrag and ip_check_defrag

      The function ip_defrag is called on both the input and the output
      paths of the networking stack.  In particular conntrack when it is
      tracking outbound packets from the local machine calls ip_defrag.

      So add a struct net parameter and stop making ip_defrag guess which
      network namespace it needs to defragment packets in.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 37fcbab61b8ecf75cb5fd81e5809b71c270f9632
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Oct 9 13:44:53 2015 -0500

      ipv4: Only compute net once in ip_call_ra_chain

      ip_call_ra_chain is called early in the forwarding chain from
      ip_forward and ip_mr_input, which makes skb->dev the correct
      expression to get the input network device and dev_net(skb->dev) a
      correct expression for the network namespace the packet is being
      processed in.

      Compute the network namespace and store it in a variable to make the
      code clearer.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 161642e24fee40fba2c5bc2ceacc00d118a22d65
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 9 11:29:32 2015 -0700

      packet: fix match_fanout_group()

      Recent TCP listener patches exposed a prior af_packet bug :
      match_fanout_group() blindly assumes it is always safe
      to cast sk to a packet socket to compare fanout with af_packet_priv

      But SYNACK packets can be sent while attached to request_sock, which
      are smaller than a "struct sock".

      We can read non existent memory and crash.

      Fixes: c0de08d04215 ("af_packet: don't emit packet on orig fanout group")
      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Cc: Eric Leblond <eric@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e844463743095bc8b230f507de066d047c87476b
  Author: Arad, Ronen <ronen.arad@xxxxxxxxx>
  Date:   Fri Oct 9 10:35:47 2015 -0700

      rtnetlink: fix gcc -Wconversion warning

      RTA_ALIGNTO is currently define as 4. It has to be 4U to prevent warning
      for RTA_ALIGN and RTA_DATA expansions when -Wconversion gcc option is
      enabled.
      This follows NLMSG_ALIGNTO definition in <include/uapi/linux/netlink.h>.

      Signed-off-by: Ronen Arad <ronen.arad@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 991659674288dba28c2f5a3d1a0133ef4d20824a
  Merge: e2ca690 7e64e5e
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 19:39:18 2015 -0700

      Merge tag 'wireless-drivers-next-for-davem-2015-10-09' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

      Kalle Valo says:

      ====================
      Major changes:

      iwlwifi

      * some debugfs improvements
      * fix signedness in beacon statistics
      * deinline some functions to reduce size when device tracing is enabled
      * filter beacons out in AP mode when no stations are associated
      * deprecate firmwares version -12
      * fix a runtime PM vs. legacy suspend race
      * one-liner fix for a ToF bug
      * clean-ups in the rx code
      * small debugging improvement
      * fix WoWLAN with new firmware versions
      * more clean-ups towards multiple RX queues;
      * some rate scaling fixes and improvements;
      * some time-of-flight fixes;
      * other generic improvements and clean-ups;

      brcmfmac

      * rework code dealing with multiple interfaces
      * allow logging firmware console using debug level
      * support for BCM4350, BCM4365, and BCM4366 PCIE devices
      * fixed for legacy P2P and P2P device handling
      * correct set and get tx-power

      ath9k

      * add support for Outside Context of a BSS (OCB) mode

      mwifiex

      * add USB multichannel feature
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e2ca690b657f4ca5c204fcc6470d462b776d73b3
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Fri Oct 9 14:34:31 2015 +0200

      ipv4/icmp: redirect messages can use the ingress daddr as source

      This patch allows configuring how the source address of ICMP
      redirect messages is selected; by default the old behaviour is
      retained, while setting icmp_redirects_use_orig_daddr force the
      usage of the destination address of the packet that caused the
      redirect.

      The new behaviour fits closely the RFC 5798 section 8.1.1, and fix the
      following scenario:

      Two machines are set up with VRRP to act as routers out of a subnet,
      they have IPs x.x.x.1/24 and x.x.x.2/24, with VRRP holding on to
      x.x.x.254/24.

      If a host in said subnet needs to get an ICMP redirect from the VRRP
      router, i.e. to reach a destination behind a different gateway, the
      source IP in the ICMP redirect is chosen as the primary IP on the
      interface that the packet arrived at, i.e. x.x.x.1 or x.x.x.2.

      The host will then ignore said redirect, due to RFC 1122 section 3.2.2.2,
      and will continue to use the wrong next-op.

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0944d6b5a2fad9ba3b7abb2e94a6b7d40cd4a935
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 9 13:54:11 2015 +0200

      bridge: try switchdev op first in __vlan_vid_add/del

      Some drivers need to implement both switchdev vlan ops and
      vid_add/kill ndos. For that to work in bridge code, we need to try
      switchdev op first when adding/deleting vlan id.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3703ebe4035044dea3749fcdd1c0849937147959
  Author: wangweidong <wangweidong1@xxxxxxxxxx>
  Date:   Tue Oct 13 10:05:19 2015 +0800

      BNX2: free temp_stats_blk on error path

      In bnx2_init_board, missing free temp_stats_blk on error path when
      some operations do failed. Just add the 'kfree' operation.

      Signed-off-by: Wang Weidong <wangweidong1@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 31eb4360546b4bd890f349db01295a173c09b0fb
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Tue Oct 13 09:02:01 2015 +0900

      perf hists browser: Add 'm' key for context menu display

      With horizontal scrolling, the left/right arrow keys are used to scroll
      columns and ENTER/ESC keys are used to enter/exit menu.  However if
      callchain is recorded, the ENTER key is used to toggle callchain
      expansion so there's no way to display menu.  Use 'm' key to display the
      menu for this case.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444694521-8136-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 76973dd79fd52f187ba3df018bca65792a3d942d
  Merge: c7d39e3 d475f09
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 19:28:32 2015 -0700

      Merge branch 'setsockopt_incoming_cpu'

      Eric Dumazet says:

      ====================
      tcp: better smp listener behavior

      As promised in last patch series, we implement a better SO_REUSEPORT
      strategy, based on cpu hints if given by the application.

      We also moved sk_refcnt out of the cache line containing the lookup
      keys, as it was considerably slowing down smp operations because
      of false sharing. This was simpler than converting listen sockets
      to conventional RCU (to avoid sk_refcnt dirtying)

      Could process 6.0 Mpps SYN instead of 4.2 Mpps on my test server.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d475f090bf1c0dc2999e98bbf2e7cb2243358849
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 19:33:24 2015 -0700

      tcp: shrink tcp_timewait_sock by 8 bytes

      Reducing tcp_timewait_sock from 280 bytes to 272 bytes
      allows SLAB to pack 15 objects per page instead of 14 (on x86)

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ed53d0ab761f5c71d77c8dc05fd19c0a851200db
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 19:33:23 2015 -0700

      net: shrink struct sock and request_sock by 8 bytes

      One 32bit hole is following skc_refcnt, use it.
      skc_incoming_cpu can also be an union for request_sock rcv_wnd.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e5eb54d303b7cb1174977ca79030e135728c95e
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 19:33:22 2015 -0700

      net: align sk_refcnt on 128 bytes boundary

      sk->sk_refcnt is dirtied for every TCP/UDP incoming packet.
      This is a performance issue if multiple cpus hit a common socket,
      or multiple sockets are chained due to SO_REUSEPORT.

      By moving sk_refcnt 8 bytes further, first 128 bytes of sockets
      are mostly read. As they contain the lookup keys, this has
      a considerable performance impact, as cpus can cache them.

      These 8 bytes are not wasted, we use them as a place holder
      for various fields, depending on the socket type.

      Tested:
       SYN flood hitting a 16 RX queues NIC.
       TCP listener using 16 sockets and SO_REUSEPORT
       and SO_INCOMING_CPU for proper siloing.

       Could process 6.0 Mpps SYN instead of 4.2 Mpps

       Kernel profile looked like :
          11.68%  [kernel]  [k] sha_transform
           6.51%  [kernel]  [k] __inet_lookup_listener
           5.07%  [kernel]  [k] __inet_lookup_established
           4.15%  [kernel]  [k] memcpy_erms
           3.46%  [kernel]  [k] ipt_do_table
           2.74%  [kernel]  [k] fib_table_lookup
           2.54%  [kernel]  [k] tcp_make_synack
           2.34%  [kernel]  [k] tcp_conn_request
           2.05%  [kernel]  [k] __netif_receive_skb_core
           2.03%  [kernel]  [k] kmem_cache_alloc

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70da268b569d32a9fddeea85dc18043de9d89f89
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 19:33:21 2015 -0700

      net: SO_INCOMING_CPU setsockopt() support

      SO_INCOMING_CPU as added in commit 2c8c56e15df3 was a getsockopt() command
      to fetch incoming cpu handling a particular TCP flow after accept()

      This commits adds setsockopt() support and extends SO_REUSEPORT selection
      logic : If a TCP listener or UDP socket has this option set, a packet is
      delivered to this socket only if CPU handling the packet matches the 
specified
      one.

      This allows to build very efficient TCP servers, using one listener per
      RX queue, as the associated TCP listener should only accept flows handled
      in softirq by the same cpu.
      This provides optimal NUMA behavior and keep cpu caches hot.

      Note that __inet_lookup_listener() still has to iterate over the list of
      all listeners. Following patch puts sk_refcnt in a different cache line
      to let this iteration hit only shared and read mostly cache lines.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 186c6cfb32beae66140bc3c3fe4a519ee0234e33
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Sun Sep 27 20:37:55 2015 +0200

      perf callchains: Fix unw_word_t pointer casts

      unw_word_t is uint64_t even on 32-bit MIPS.  Cast it to uintptr_t before
      the cast to void *p to get rid of the following errors:

        util/unwind-libunwind.c: In function 'access_mem':
        util/unwind-libunwind.c:464:4: error: cast to pointer from integer of 
different size [-Werror=int-to-pointer-cast]
        util/unwind-libunwind.c:475:2: error: cast to pointer from integer of 
different size [-Werror=int-to-pointer-cast]
        cc1: all warnings being treated as errors
        make[3]: *** [util/unwind-libunwind.o] Error 1

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443379079-29133-1-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8eac1d5e9256260b9cc3bfcdd9b8b995990950f5
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Sun Sep 27 20:37:57 2015 +0200

      perf callchain: Use debug_frame if eh_frame is unusable

      When NO_LIBUNWIND_DEBUG_FRAME=0, use the .debug_frame if the .eh_frame
      doesn't contain the approprate unwind tables.

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443379079-29133-3-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c7d39e32632e5db9dc4da51198b76d8c315946ff
  Author: Edward Jee <edjee@xxxxxxxxxx>
  Date:   Thu Oct 8 14:56:49 2015 -0700

      packet: support per-packet fwmark for af_packet sendmsg

      Signed-off-by: Edward Hyunkoo Jee <edjee@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f28ea365cdefc3b4fd0373e70b0106a0cd9b4c23
  Author: Edward Jee <edjee@xxxxxxxxxx>
  Date:   Thu Oct 8 14:56:48 2015 -0700

      sock: support per-packet fwmark

      It's useful to allow users to set fwmark for an individual packet,
      without changing the socket state. The function this patch adds in
      sock layer can be used by the protocols that need such a feature.

      Signed-off-by: Edward Hyunkoo Jee <edjee@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c1bf5fe03184f782f2a6827cf314ae58834865da
  Merge: 0fa2887 bf50887
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 19:13:41 2015 -0700

      Merge branch 'bpf-unprivileged'

      Alexei Starovoitov says:

      ====================
      bpf: unprivileged

      v1-v2:
      - this set logically depends on cb patch
        "bpf: fix cb access in socket filter programs":
        http://patchwork.ozlabs.org/patch/527391/
        which is must have to allow unprivileged programs.
        Thanks Daniel for finding that issue.
      - refactored sysctl to be similar to 'modules_disabled'
      - dropped bpf_trace_printk
      - split tests into separate patch and added more tests
        based on discussion

      v1 cover letter:
      I think it is time to liberate eBPF from CAP_SYS_ADMIN.
      As was discussed when eBPF was first introduced two years ago
      the only piece missing in eBPF verifier is 'pointer leak detection'
      to make it available to non-root users.
      Patch 1 adds this pointer analysis.
      The eBPF programs, obviously, need to see and operate on kernel addresses,
      but with these extra checks they won't be able to pass these addresses
      to user space.
      Patch 2 adds accounting of kernel memory used by programs and maps.
      It changes behavoir for existing root users, but I think it needs
      to be done consistently for both root and non-root, since today
      programs and maps are only limited by number of open FDs (RLIMIT_NOFILE).
      Patch 2 accounts program's and map's kernel memory as RLIMIT_MEMLOCK.

      Unprivileged eBPF is only meaningful for 'socket filter'-like programs.
      eBPF programs for tracing and TC classifiers/actions will stay root only.

      In parallel the bpf fuzzing effort is ongoing and so far
      we've found only one verifier bug and that was already fixed.
      The 'constant blinding' pass also being worked on.
      It will obfuscate constant-like values that are part of eBPF ISA
      to make jit spraying attacks even harder.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bf5088773faffc4a052b95aa978a1660bf5f3f8d
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Wed Oct 7 22:23:23 2015 -0700

      bpf: add unprivileged bpf tests

      Add new tests samples/bpf/test_verifier:

      unpriv: return pointer
        checks that pointer cannot be returned from the eBPF program

      unpriv: add const to pointer
      unpriv: add pointer to pointer
      unpriv: neg pointer
        checks that pointer arithmetic is disallowed

      unpriv: cmp pointer with const
      unpriv: cmp pointer with pointer
        checks that comparison of pointers is disallowed
        Only one case allowed 'void *value = bpf_map_lookup_elem(..); if (value 
== 0) ...'

      unpriv: check that printk is disallowed
        since bpf_trace_printk is not available to unprivileged

      unpriv: pass pointer to helper function
        checks that pointers cannot be passed to functions that expect integers
        If function expects a pointer the verifier allows only that type of 
pointer.
        Like 1st argument of bpf_map_lookup_elem() must be pointer to map.
        (applies to non-root as well)

      unpriv: indirectly pass pointer on stack to helper function
        checks that pointer stored into stack cannot be used as part of key
        passed into bpf_map_lookup_elem()

      unpriv: mangle pointer on stack 1
      unpriv: mangle pointer on stack 2
        checks that writing into stack slot that already contains a pointer
        is disallowed

      unpriv: read pointer from stack in small chunks
        checks that < 8 byte read from stack slot that contains a pointer is
        disallowed

      unpriv: write pointer into ctx
        checks that storing pointers into skb->fields is disallowed

      unpriv: write pointer into map elem value
        checks that storing pointers into element values is disallowed
        For example:
        int bpf_prog(struct __sk_buff *skb)
        {
          u32 key = 0;
          u64 *value = bpf_map_lookup_elem(&map, &key);
          if (value)
             *value = (u64) skb;
        }
        will be rejected.

      unpriv: partial copy of pointer
        checks that doing 32-bit register mov from register containing
        a pointer is disallowed

      unpriv: pass pointer to tail_call
        checks that passing pointer as an index into bpf_tail_call
        is disallowed

      unpriv: cmp map pointer with zero
        checks that comparing map pointer with constant is disallowed

      unpriv: write into frame pointer
        checks that frame pointer is read-only (applies to root too)

      unpriv: cmp of frame pointer
        checks that R10 cannot be using in comparison

      unpriv: cmp of stack pointer
        checks that Rx = R10 - imm is ok, but comparing Rx is not

      unpriv: obfuscate stack pointer
        checks that Rx = R10 - imm is ok, but Rx -= imm is not

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aaac3ba95e4c8b496d22f68bd1bc01cfbf525eca
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Wed Oct 7 22:23:22 2015 -0700

      bpf: charge user for creation of BPF maps and programs

      since eBPF programs and maps use kernel memory consider it 'locked' memory
      from user accounting point of view and charge it against RLIMIT_MEMLOCK 
limit.
      This limit is typically set to 64Kbytes by distros, so almost all
      bpf+tracing programs would need to increase it, since they use maps,
      but kernel charges maximum map size upfront.
      For example the hash map of 1024 elements will be charged as 64Kbyte.
      It's inconvenient for current users and changes current behavior for root,
      but probably worth doing to be consistent root vs non-root.

      Similar accounting logic is done by mmap of perf_event.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1be7f75d1668d6296b80bf35dcf6762393530afc
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Wed Oct 7 22:23:21 2015 -0700

      bpf: enable non-root eBPF programs

      In order to let unprivileged users load and execute eBPF programs
      teach verifier to prevent pointer leaks.
      Verifier will prevent
      - any arithmetic on pointers
        (except R10+Imm which is used to compute stack addresses)
      - comparison of pointers
        (except if (map_value_ptr == 0) ... )
      - passing pointers to helper functions
      - indirectly passing pointers in stack to helper functions
      - returning pointer from bpf program
      - storing pointers into ctx or maps

      Spill/fill of pointers into stack is allowed, but mangling
      of pointers stored in the stack or reading them byte by byte is not.

      Within bpf programs the pointers do exist, since programs need to
      be able to access maps, pass skb pointer to LD_ABS insns, etc
      but programs cannot pass such pointer values to the outside
      or obfuscate them.

      Only allow BPF_PROG_TYPE_SOCKET_FILTER unprivileged programs,
      so that socket filters (tcpdump), af_packet (quic acceleration)
      and future kcm can use it.
      tracing and tc cls/act program types still require root permissions,
      since tracing actually needs to be able to see all kernel pointers
      and tc is for root only.

      For example, the following unprivileged socket filter program is allowed:
      int bpf_prog1(struct __sk_buff *skb)
      {
        u32 index = load_byte(skb, ETH_HLEN + offsetof(struct iphdr, protocol));
        u64 *value = bpf_map_lookup_elem(&my_map, &index);

        if (value)
        *value += skb->len;
        return 0;
      }

      but the following program is not:
      int bpf_prog1(struct __sk_buff *skb)
      {
        u32 index = load_byte(skb, ETH_HLEN + offsetof(struct iphdr, protocol));
        u64 *value = bpf_map_lookup_elem(&my_map, &index);

        if (value)
        *value += (u64) skb;
        return 0;
      }
      since it would leak the kernel address into the map.

      Unprivileged socket filter bpf programs have access to the
      following helper functions:
      - map lookup/update/delete (but they cannot store kernel pointers into 
them)
      - get_random (it's already exposed to unprivileged user space)
      - get_smp_processor_id
      - tail_call into another socket filter program
      - ktime_get_ns

      The feature is controlled by sysctl kernel.unprivileged_bpf_disabled.
      This toggle defaults to off (0), but can be set true (1).  Once true,
      bpf programs and maps cannot be accessed from unprivileged process,
      and the toggle cannot be set back to false.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d8e1f5ed11a39a68da00f05000466c4f6db4456e
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Mon Oct 12 16:19:54 2015 -0700

      Documentation: ARM: List new omap MMC requirements

      Earlier the PBIAS regulator was optional, not so with recent
      omap_hsmmc changes. To make things easier for people with
      custom .config files, let's add minimal documentation for it
      as suggested by Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>.

      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit fd820a1ec758bc25b0eb10ab5e88e6c61fbcc8aa
  Author: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
  Date:   Tue Oct 6 22:07:49 2015 +0200

      memory: omap-gpmc: dump "before" state before first modification

      When gpmc_cs_show_timings is called in gpmc_cs_set_timings()
      gpmc_cs_program_settings() was already run which modifies the CONFIG1
      register. So to be more useful do the "before" dump earlier.

      Signed-off-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Acked-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit be59b6192f43a9792f5f636b51358196ba11bbf6
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Mon Oct 12 16:19:54 2015 -0700

      memory: omap-gpmc: Fix unselectable debug option for GPMC

      Commit 63aa945b1013 ("memory: omap-gpmc: Add Kconfig option for debug")
      added a debug option for GPMC, but somehow managed to keep it 
unselectable.

      This probably happened because I had some uncommitted changes and the
      GPMC option is selected in the platform specific Kconfig.

      Let's also update the description a bit, it does not mention that
      enabling the debug option also disables the reset of GPMC controller
      during the init as pointed out by Uwe Kleine-König
      <u.kleine-koenig@xxxxxxxxxxxxxx> and Roger Quadros <rogerq@xxxxxx>.

      Fixes: 63aa945b1013 ("memory: omap-gpmc: Add Kconfig option for debug")
      Reported-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Acked-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 7e381ec6a36aa44f15fc1a76e6efb9e2cd942e61
  Author: Tomi Valkeinen <tomi.valkeinen@xxxxxx>
  Date:   Fri Sep 25 16:02:03 2015 +0300

      ARM: dts: am57xx-beagle-x15: set VDD_SD to always-on

      LDO1 regulator (VDD_SD) is connected to SoC's vddshv8. vddshv8 needs to
      be kept always powered (see commit 5a0f93c6576a ("ARM: dts: Add
      am57xx-beagle-x15"), but at the moment VDD_SD is enabled/disabled
      depending on whether an SD card is inserted or not.

      This patch sets LDO1 regulator to always-on.

      This patch has a side effect of fixing another issue, HDMI DDC not
      working when SD card is not inserted:

      Why this happens is that the tpd12s015 (HDMI level shifter/ESD
      protection chip) has LS_OE GPIO input, which needs to be enabled for the
      HDMI DDC to work. LS_OE comes from gpio6_28. The pin that provides
      gpio6_28 is powered by vddshv8, and vddshv8 comes from VDD_SD.

      So when SD card is not inserted, VDD_SD is disabled, and LS_OE stays
      off.

      The proper fix for the HDMI DDC issue would be to maybe have the pinctrl
      framework manage the pin specific power.

      Apparently this fixes also a third issue (copy paste from Kishon's
      patch):

      ldo1_reg in addition to being connected to the io lines is also
      connected to the card detect line. On card removal, omap_hsmmc
      driver does a regulator_disable causing card detect line to be
      pulled down. This raises a card insertion interrupt and once the
      MMC core detects there is no card inserted, it does a
      regulator disable which again raises a card insertion interrupt.
      This happens in a loop causing infinite MMC interrupts.

      Fixes: 5a0f93c6576a ("ARM: dts: Add am57xx-beagle-x15")
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>
      Reported-by: Louis McCarthy <compeoree@xxxxxxxxx>
      Acked-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 914eebf2f434c6c0355faa9d81b4ebdca94819c9
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Wed Oct 7 13:25:50 2015 +0900

      netfilter: nfnetlink_log: autoload nf_conntrack_netlink module 
NFQA_CFG_F_CONNTRACK config flag

      This patch enables to load nf_conntrack_netlink module if
      NFULNL_CFG_F_CONNTRACK config flag is specified.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit b8bb9baad27e455c467e8fac47eebadbe765c18f
  Author: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
  Date:   Tue Oct 13 04:32:53 2015 +0900

      ARM: dts: Fix audio card detection on Peach boards

      Since commit 2fad972d45c4 ("ARM: dts: Add mclk entry for Peach boards"),
      sound card detection is broken on peach boards and gives below errors:

      [    3.630457] max98090 7-0010: MAX98091 REVID=0x51
      [    3.634233] max98090 7-0010: use default 2.8v micbias
      [    3.640985] snow-audio sound: HiFi <-> 3830000.i2s mapping ok
      [    3.645307] max98090 7-0010: Invalid master clock frequency
      [    3.650824] snow-audio sound: ASoC: Peach-Pi-I2S-MAX98091 late_probe() 
failed: -22
      [    3.658914] snow-audio sound: snd_soc_register_card failed (-22)
      [    3.664366] snow-audio: probe of sound failed with error -22

      This patch adds missing assigned-clocks and assigned-clock-parents for
      pmu_system_controller node which is used as "mclk" for audio codec.

      Fixes: 2fad972d45c4 ("ARM: dts: Add mclk entry for Peach boards")
      Signed-off-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit 51a6256b00008a3c520f6f31bcd62cd15cb05960
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Tue Oct 13 04:32:49 2015 +0900

      ARM: EXYNOS: Fix double of_node_put() when parsing child power domains

      On each next iteration of for_each_compatible_node() the reference
      counter for current device node is already decreased by the loop
      iterator. The manual call to of_node_get() is required only on loop
      break which is not happening here.

      The double of_node_get() (with enabled CONFIG_OF_DYNAMIC) lead to
      decreasing the counter below expected, initial value.

      Fixes: fe4034a3fad7 ("ARM: EXYNOS: Add missing of_node_put() when parsing 
power domains")
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit 835da3f99d329b1160a1f7fc82c7ac81163d63d0
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 22:29:48 2015 +0200

      nvme: fix 32-bit build warning

      Compiling the nvme driver on 32-bit warns about a cast from a __u64
      variable to a pointer:

      drivers/block/nvme-core.c: In function 'nvme_submit_io':
      drivers/block/nvme-core.c:1847:4: warning: cast to pointer from integer 
of different size [-Wint-to-pointer-cast]
          (void __user *)io.addr, length, NULL, 0);

      The cast here is intentional and safe, so we can shut up the
      gcc warning by adding an intermediate cast to 'uintptr_t'.

      I had previously submitted a patch to fix this problem in the
      nvme driver, but it was accepted on the same day that two new
      warnings got added.

      For clarification, I also change the third instance of this cast
      to use uintptr_t instead of unsigned long now.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: d29ec8241c10e ("nvme: submit internal commands through the block 
layer")
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit d4a1a317e7478b70e18b9cc8eac7d29090121b6e
  Merge: b3961e8 b4a21fc ca07e9f 536b560
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Oct 12 19:25:07 2015 +0100

      Merge remote-tracking branches 'regmap/topic/atomic', 
'regmap/topic/debugfs' and 'regmap/topic/irq-hdr' into regmap-next

  commit b3961e8703cbacf45116aea44f0c1cdaf8c8b40c
  Merge: ba5890a 77792b1
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Oct 12 19:24:30 2015 +0100

      Merge tag 'regmap-offload-update-bits' into regmap-next

      regmap: Allow buses to provide a custom update_bits() operation

      Some buses provide a native _update_bits() operation which for uncached
      registers is faster than doing a read/modify/write cycle as it is a
      single bus transaction.  Add support for implementing this to regmap.

      # gpg: Signature made Tue 06 Oct 2015 16:21:47 BST using RSA key ID 
5D5487D0
      # gpg: Oops: keyid_from_fingerprint: no pubkey
      # gpg: Oops: keyid_from_fingerprint: no pubkey
      # gpg: key 00000000 occurs more than once in the trustdb
      # gpg: key 16005C11: no public key for trusted key - skipped
      # gpg: key 16005C11 marked as ultimately trusted
      # gpg: Good signature from "Mark Brown <broonie@xxxxxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <Mark.Brown@xxxxxxxxxx>"

  commit ba5890a0c7576776ada71a21d95833a2281695e2
  Merge: 25cb62b a650fdd
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Oct 12 19:24:30 2015 +0100

      Merge tag 'regmap-irq-unmask' into regmap-next

      regmap: Support for split mask and unmask interrupt registers

      This branch adds an interface for supporting devices which have separate
      mask and unmask registers.

      # gpg: Signature made Thu 17 Sep 2015 11:52:20 BST using RSA key ID 
5D5487D0
      # gpg: Oops: keyid_from_fingerprint: no pubkey
      # gpg: Oops: keyid_from_fingerprint: no pubkey
      # gpg: key 00000000 occurs more than once in the trustdb
      # gpg: key 16005C11: no public key for trusted key - skipped
      # gpg: key 16005C11 marked as ultimately trusted
      # gpg: Good signature from "Mark Brown <broonie@xxxxxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <Mark.Brown@xxxxxxxxxx>"

  commit 79828b4fa835f73cdaf4bffa48696abdcbea9d02
  Merge: 721b51f 8c1a9d6
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Oct 12 18:09:27 2015 +0100

      Merge remote-tracking branch 'asoc/fix/rt5645' into asoc-fix-rt5645

  commit 4aa8e454d347a1c96a2322683a6798de7e17da5f
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Oct 12 14:02:29 2015 -0300

      perf hists browser: Inform how to reset the symbol filter

      When in the hists browser, i.e. in 'perf report' or in 'perf top', it is
      possible to press '/' and specify a substring to filter by symbol name.

      Clarify how to remove a filter by making the prompt be:

         Please enter the name of symbol you want to see.
         To remove the filter later, press / + ENTER

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-vbq2b0kyufwy6p0ctkfswcoe@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7727a92544b2a507b83fdc7d3e4b6f4545c9f364
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Oct 12 13:56:50 2015 -0300

      perf ui browsers: Remove help messages about use of right and arrow keys

      They were repurposed for horizontal scrolling, so use just ENTER/ESC in
      the help messages.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: c6c3c02dea40 ("perf hists browser: Implement horizontal scrolling")
      Link: http://lkml.kernel.org/n/tip-n5ar4qg8fs12ax4vhr3rxhxj@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dc38218e8b598a0092dae9715e603e9628203bec
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Sun Oct 11 17:17:24 2015 -0300

      perf symbols: Try the .debug/ DSO cache as a last resort

      Not as the first attempt at finding a vmlinux for the running kernel,
      this way we get a more informative filename to present in tools, it will
      check that the build-id is the same as the one previously loaded in the
      DSO in dso->build_id, reading from /sys/kernel/notes, for instance.

      E.g. in the annotation TUI, going from 'perf top', for the scsi_sg_alloc
      kernel function, in the first line:

      Before:

      scsi_sg_alloc  
/root/.debug/.build-id/28/2777c262e6b3c0451375163c9a81c893218ab1

      After:

      scsi_sg_alloc  /lib/modules/4.3.0-rc1+/build/vmlinux

      And:

        # ls -la 
/root/.debug/.build-id/28/2777c262e6b3c0451375163c9a81c893218ab1
      lrwxrwxrwx. 1 root root 81 Sep 22 16:11 
/root/.debug/.build-id/28/2777c262e6b3c0451375163c9a81c893218ab1 -> 
../../home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1
        # file 
~/.debug/home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1
      
/root/.debug/home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1:
 ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, 
BuildID[sha1]=282777c262e6b3c0451375163c9a81c893218ab1, not stripped
        #

      The same as:

        # file /lib/modules/4.3.0-rc1+/build/vmlinux
      /lib/modules/4.3.0-rc1+/build/vmlinux: ELF 64-bit LSB executable, x86-64, 
version 1 (SYSV), statically linked, 
BuildID[sha1]=282777c262e6b3c0451375163c9a81c893218ab1, not stripped

      Furthermore:

        # sha256sum /lib/modules/4.3.0-rc1+/build/vmlinux
        e7a789bbdc61029ec09140c228e1dd651271f38ef0b8416c0b7d5ff727b98be2  
/lib/modules/4.3.0-rc1+/build/vmlinux
        # sha256sum 
~/.debug/home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1
        e7a789bbdc61029ec09140c228e1dd651271f38ef0b8416c0b7d5ff727b98be2  
/root/.debug/home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1
        [root@zoo new]#

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-9y42ikzq3jisiddoi6f07n8z@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4fc57692268bf841a3cc90b3b056640de2bb1605
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Mon Oct 12 18:53:00 2015 +0300

      Documentation/features/KASAN: arm64 supports KASAN now

      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ee7f881b59de4e0e0be250fd0c5d4ade3e30ec34
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Mon Oct 12 18:52:59 2015 +0300

      ARM64: kasan: print memory assignment

      This prints out the virtual memory assigned to KASan in the
      boot crawl along with other memory assignments, if and only
      if KASan is activated.

      Example dmesg from the Juno Development board:

      Memory: 1691156K/2080768K available (5465K kernel code, 444K rwdata,
      2160K rodata, 340K init, 217K bss, 373228K reserved, 16384K cma-reserved)
      Virtual kernel memory layout:
          kasan   : 0xffffff8000000000 - 0xffffff9000000000   (    64 GB)
          vmalloc : 0xffffff9000000000 - 0xffffffbdbfff0000   (   182 GB)
          vmemmap : 0xffffffbdc0000000 - 0xffffffbfc0000000   (     8 GB 
maximum)
                    0xffffffbdc2000000 - 0xffffffbdc3fc0000   (    31 MB actual)
          fixed   : 0xffffffbffabfd000 - 0xffffffbffac00000   (    12 KB)
          PCI I/O : 0xffffffbffae00000 - 0xffffffbffbe00000   (    16 MB)
          modules : 0xffffffbffc000000 - 0xffffffc000000000   (    64 MB)
          memory  : 0xffffffc000000000 - 0xffffffc07f000000   (  2032 MB)
            .init : 0xffffffc0007f5000 - 0xffffffc00084a000   (   340 KB)
            .text : 0xffffffc000080000 - 0xffffffc0007f45b4   (  7634 KB)
            .data : 0xffffffc000850000 - 0xffffffc0008bf200   (   445 KB)

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 39d114ddc68223022c12ae3a1573912bc4b585e5
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Mon Oct 12 18:52:58 2015 +0300

      arm64: add KASAN support

      This patch adds arch specific code for kernel address sanitizer
      (see Documentation/kasan.txt).

      1/8 of kernel addresses reserved for shadow memory. There was no
      big enough hole for this, so virtual addresses for shadow were
      stolen from vmalloc area.

      At early boot stage the whole shadow region populated with just
      one physical page (kasan_zero_page). Later, this page reused
      as readonly zero shadow for some memory that KASan currently
      don't track (vmalloc).
      After mapping the physical memory, pages for shadow memory are
      allocated and mapped.

      Functions like memset/memmove/memcpy do a lot of memory accesses.
      If bad pointer passed to one of these function it is important
      to catch this. Compiler's instrumentation cannot do this since
      these functions are written in assembly.
      KASan replaces memory functions with manually instrumented variants.
      Original functions declared as weak symbols so strong definitions
      in mm/kasan/kasan.c could replace them. Original functions have aliases
      with '__' prefix in name, so we could call non-instrumented variant
      if needed.
      Some files built without kasan instrumentation (e.g. mm/slub.c).
      Original mem* function replaced (via #define) with prefixed variants
      to disable memory access checks for such files.

      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Tested-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fd2203dd3556f6553231fa026060793e67a25ce6
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Mon Oct 12 18:52:57 2015 +0300

      arm64: move PGD_SIZE definition to pgalloc.h

      This will be used by KASAN latter.

      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c9692657c0321fec7bcb3ca8c6db56c08c640ace
  Author: Manjeet Pawar <manjeet.p@xxxxxxxxxxx>
  Date:   Fri Oct 9 15:59:40 2015 +0530

      arm64: Fix MINSIGSTKSZ and SIGSTKSZ

      MINSIGSTKSZ and SIGSTKSZ for ARM64 are not correctly set in latest kernel.
      This patch fixes this issue.

      This issue is reported in LTP (testcase: sigaltstack02.c).
      Testcase failed when sigaltstack() called with stack size "MINSIGSTKSZ - 
1"
      Since in Glibc-2.22, MINSIGSTKSZ is set to 5120 but in kernel
      it is set to 2048 so testcase gets failed.

      Testcase Output:
      sigaltstack02 1  TPASS  :  stgaltstack() fails, Invalid Flag 
value,errno:22
      sigaltstack02 2  TFAIL  :  sigaltstack() returned 0, expected -1,errno:12

      Reported Issue in Glibc Bugzilla:
      Bugfix in Glibc-2.22: [Bug 16850]
      https://sourceware.org/bugzilla/show_bug.cgi?id=16850

      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Akhilesh Kumar <akhilesh.k@xxxxxxxxxxx>
      Signed-off-by: Manjeet Pawar <manjeet.p@xxxxxxxxxxx>
      Signed-off-by: Rohit Thapliyal <r.thapliyal@xxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit b6dd8e0719c0d2d01429639a11b7bc2677de240c
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Thu Oct 8 11:11:17 2015 +0100

      arm64: errata: use KBUILD_CFLAGS_MODULE for erratum #843419

      Commit df057cc7b4fa ("arm64: errata: add module build workaround for
      erratum #843419") sets CFLAGS_MODULE to ensure that the large memory
      model is used by the compiler when building kernel modules.

      However, CFLAGS_MODULE is an environment variable and intended to be
      overridden on the command line, which appears to be the case with the
      Ubuntu kernel packaging system, so use KBUILD_CFLAGS_MODULE instead.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Fixes: df057cc7b4fa ("arm64: errata: add module build workaround for 
erratum #843419")
      Reported-by: Dann Frazier <dann.frazier@xxxxxxxxxxxxx>
      Tested-by: Dann Frazier <dann.frazier@xxxxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 305d454aaa292be3a09a9d674e6c35f5b4249a13
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Thu Oct 8 20:15:18 2015 +0100

      arm64: atomics: implement native {relaxed, acquire, release} atomics

      Commit 654672d4ba1a ("locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operation") introduced a relaxed atomic API to
      Linux that maps nicely onto the arm64 memory model, including the new
      ARMv8.1 atomic instructions.

      This patch hooks up the API to our relaxed atomic instructions, rather
      than have them all expand to the full-barrier variants as they do
      currently.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c5edf9cdc4c483b9a94c03fc0b9f769bd090bf3e
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 29 13:04:26 2015 -0400

      writeback: fix incorrect calculation of available memory for memcg domains

      For memcg domains, the amount of available memory was calculated as

       min(the amount currently in use + headroom according to memcg,
           total clean memory)

      This isn't quite correct as what should be capped by the amount of
      clean memory is the headroom, not the sum of memory in use and
      headroom.  For example, if a memcg domain has a significant amount of
      dirty memory, the above can lead to a value which is lower than the
      current amount in use which doesn't make much sense.  In most
      circumstances, the above leads to a number which is somewhat but not
      drastically lower.

      As the amount of memory which can be readily allocated to the memcg
      domain is capped by the amount of system-wide clean memory which is
      not already assigned to the memcg itself, the number we want is

       the amount currently in use +
       min(headroom according to memcg, clean memory elsewhere in the system)

      This patch updates mem_cgroup_wb_stats() to return the number of
      filepages and headroom instead of the calculated available pages.
      mdtc_cap_avail() is renamed to mdtc_calc_avail() and performs the
      above calculation from file, headroom, dirty and globally clean pages.

      v2: Dummy mem_cgroup_wb_stats() implementation wasn't updated leading
          to build failure when !CGROUP_WRITEBACK.  Fixed.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: c2aa723a6093 ("writeback: implement memcg writeback domain based 
throttling")
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit d60d1bddd5b642711a237511845853755b25bf1f
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 29 12:47:53 2015 -0400

      writeback: memcg dirty_throttle_control should be initialized with 
wb->memcg_completions

      MDTC_INIT() is used to initialize dirty_throttle_control for memcg
      domains.  It used DTC_INIT_COMMON() to initialized mdtc->wb and
      ->wb_completions which is incorrect as DTC_INIT_COMMON() sets the
      latter to wb->completions instead of wb->memcg_completions.  This can
      lead to wildly incorrect results when calculating the proportion of
      dirty memory the memcg domain should get.

      Remove DTC_INIT_COMMON() and update MDTC_INIT() to initialize
      mdtc->wb_completions to wb->memcg_completions.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: c2aa723a6093 ("writeback: implement memcg writeback domain based 
throttling")
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit b817525a4a80c04e4ca44192d97a1ffa9f2be572
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Fri Oct 2 14:47:05 2015 -0400

      writeback: bdi_writeback iteration must not skip dying ones

      bdi_for_each_wb() is used in several places to wake up or issue
      writeback work items to all wb's (bdi_writeback's) on a given bdi.
      The iteration is performed by walking bdi->cgwb_tree; however, the
      tree only indexes wb's which are currently active.

      For example, when a memcg gets associated with a different blkcg, the
      old wb is removed from the tree so that the new one can be indexed.
      The old wb starts dying from then on but will linger till all its
      inodes are drained.  As these dying wb's may still host dirty inodes,
      writeback operations which affect all wb's must include them.
      bdi_for_each_wb() skipping dying wb's led to sync(2) missing and
      failing to sync the inodes belonging to those wb's.

      This patch adds a RCU protected @bdi->wb_list which lists all wb's
      beloinging to that bdi.  wb's are added on creation and removed on
      release rather than on the start of destruction.  bdi_for_each_wb()
      usages are replaced with list_for_each[_continue]_rcu() iterations
      over @bdi->wb_list and bdi_for_each_wb() and its helpers are removed.

      v2: Updated as per Jan.  last_wb ref leak in bdi_split_work_to_wbs()
          fixed and unnecessary list head severing in cgwb_bdi_destroy()
          removed.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-and-tested-by: Artem Bityutskiy <dedekind1@xxxxxxxxx>
      Fixes: ebe41ab0c79d ("writeback: implement bdi_for_each_wb()")
      Link: http://lkml.kernel.org/g/1443012552.19983.209.camel@xxxxxxxxx
      Cc: Jan Kara <jack@xxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 6fdf860f15d4a6be8f0947bad608d687fe0c7af7
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 29 12:47:51 2015 -0400

      writeback: fix bdi_writeback iteration in wakeup_dirtytime_writeback()

      wakeup_dirtytime_writeback() walks and wakes up all wb's of all bdi's;
      unfortunately, it was always waking up bdi->wb instead of the wb being
      walked.  Fix it.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: 001fe6f617b1 ("writeback: make wakeup_dirtytime_writeback() handle 
multiple bdi_writeback's")
      Reviewed-by: Jan Kara <jack@xxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 9ad18ab938375502c03cf467abecbb77264c9475
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 29 12:47:50 2015 -0400

      writeback: laptop_mode_timer_fn() needs rcu_read_lock() around 
bdi_writeback iteration

      laptop_mode_timer_fn() was using bdi_for_each_wb() without the
      required RCU locking leading to the following warning.

       WARNING: CPU: 0 PID: 0 at include/linux/backing-dev.h:415 
laptop_mode_timer_fn+0x106/0x170()
       ...
       Call Trace:
        <IRQ>  [<ffffffff81480cdc>] dump_stack+0x4e/0x82
        [<ffffffff81051912>] warn_slowpath_common+0x82/0xc0
        [<ffffffff81051a0a>] warn_slowpath_null+0x1a/0x20
        [<ffffffff8115f0e6>] laptop_mode_timer_fn+0x106/0x170
        [<ffffffff810ca8e3>] call_timer_fn+0xb3/0x2f0
        [<ffffffff810cad25>] run_timer_softirq+0x205/0x370
        [<ffffffff81056854>] __do_softirq+0xd4/0x460
        [<ffffffff81056d69>] irq_exit+0x89/0xa0
        [<ffffffff8185a892>] smp_apic_timer_interrupt+0x42/0x50
        [<ffffffff81858a44>] apic_timer_interrupt+0x84/0x90
       ...

      Fix it by adding rcu_read_lock() around the iteration.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: a06fd6b10228 ("writeback: make laptop_mode_timer_fn() handle 
multiple bdi_writeback's")
      Reviewed-by: Jan Kara <jack@xxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 3be7f32878e742cf3c17b435c90e198862457706
  Author: Chuck Lever <chuck.lever@xxxxxxxxxx>
  Date:   Mon Oct 12 10:53:39 2015 -0400

      svcrdma: Fix NFS server crash triggered by 1MB NFS WRITE

      Now that the NFS server advertises a maximum payload size of 1MB
      for RPC/RDMA again, it crashes in svc_process_common() when NFS
      client sends a 1MB NFS WRITE on an NFS/RDMA mount.

      The server has set up a 259 element array of struct page pointers
      in rq_pages[] for each incoming request. The last element of the
      array is NULL.

      When an incoming request has been completely received,
      rdma_read_complete() attempts to set the starting page of the
      incoming page vector:

        rqstp->rq_arg.pages = &rqstp->rq_pages[head->hdr_count];

      and the page to use for the reply:

        rqstp->rq_respages = &rqstp->rq_arg.pages[page_no];

      But the value of page_no has already accounted for head->hdr_count.
      Thus rq_respages now points past the end of the incoming pages.

      For NFS WRITE operations smaller than the maximum, this is harmless.
      But when the NFS WRITE operation is as large as the server's max
      payload size, rq_respages now points at the last entry in rq_pages,
      which is NULL.

      Fixes: cc9a903d915c ('svcrdma: Change maximum server payload . . .')
      BugLink: https://bugzilla.linux-nfs.org/show_bug.cgi?id=270
      Signed-off-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Reviewed-by: Sagi Grimberg <sagig@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Shirley Ma <shirley.ma@xxxxxxxxxx>
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit c9322458119ecf2e5cf41dcb204aaf67238b2147
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Oct 8 14:30:15 2015 +0200

      netfilter: bridge: avoid unused label warning

      With the ARM mini2440_defconfig, the bridge netfilter code gets
      built with both CONFIG_NF_DEFRAG_IPV4 and CONFIG_NF_DEFRAG_IPV6
      disabled, which leads to a harmless gcc warning:

      net/bridge/br_netfilter_hooks.c: In function 'br_nf_dev_queue_xmit':
      net/bridge/br_netfilter_hooks.c:792:2: warning: label 'drop' defined but 
not used [-Wunused-label]

      This gets rid of the warning by cleaning up the code to avoid
      the respective #ifdefs causing this problem, and replacing them
      with if(IS_ENABLED()) checks. I have verified that the resulting
      object code is unchanged, and an additional advantage is that
      we now get compile coverage of the unused functions in more
      configurations.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: dd302b59bde0 ("netfilter: bridge: don't leak skb in error paths")
      Reviewed-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit d53195c25931a1f662f73488e604b85bc803c8f3
  Merge: 4302f5e 92240e8
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 17:35:42 2015 +0200

      Merge tag 'ipvs4-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next

      Simon Horman says:

      ====================
      Fourth Round of IPVS Updates for v4.4

      please consider these build warning cleanups from David Ahern and myself.
      They resolve some minor side effects of Eric Biederman' heroic work to
      cleanup IPVS which you recently pulled: its queued up for v4.4 so no need
      to worry about earlier kernel versions.
      ====================

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit cc4998febd567d1c671684abce5595344bd4e8b2
  Author: lucien <lucien.xin@xxxxxxxxx>
  Date:   Tue Oct 6 21:03:07 2015 +0800

      netfilter: ipt_rpfilter: remove the nh_scope test in 
rpfilter_lookup_reverse

      --accept-local  option works for res.type == RTN_LOCAL, which should be
      from the local table, but there, the fib_info's nh->nh_scope =
      RT_SCOPE_NOWHERE ( > RT_SCOPE_HOST). in fib_create_info().

        if (cfg->fc_scope == RT_SCOPE_HOST) {
                struct fib_nh *nh = fi->fib_nh;

                /* Local address is added. */
                if (nhs != 1 || nh->nh_gw)
                        goto err_inval;
                nh->nh_scope = RT_SCOPE_NOWHERE;   <===
                nh->nh_dev = dev_get_by_index(net, fi->fib_nh->nh_oif);
                err = -ENODEV;
                if (!nh->nh_dev)
                        goto failure;

      but in our rpfilter_lookup_reverse():

        if (dev_match || flags & XT_RPFILTER_LOOSE)
                return FIB_RES_NH(res).nh_scope <= RT_SCOPE_HOST;

      if nh->nh_scope > RT_SCOPE_HOST, it will fail. --accept-local option
      will never be passed.

      it seems the test is bogus and can be removed to fix this issue.

        if (dev_match || flags & XT_RPFILTER_LOOSE)
                return FIB_RES_NH(res).nh_scope <= RT_SCOPE_HOST;

      ipv6 does not have this issue.

      Signed-off-by: Xin Long <lucien.xin@xxxxxxxxx>
      Acked-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit e8f3010f7326c00368dbc057bd052bec80dfc072
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Oct 8 20:02:04 2015 +0100

      arm64/efi: isolate EFI stub from the kernel proper

      Since arm64 does not use a builtin decompressor, the EFI stub is built
      into the kernel proper. So far, this has been working fine, but actually,
      since the stub is in fact a PE/COFF relocatable binary that is executed
      at an unknown offset in the 1:1 mapping provided by the UEFI firmware, we
      should not be seamlessly sharing code with the kernel proper, which is a
      position dependent executable linked at a high virtual offset.

      So instead, separate the contents of libstub and its dependencies, by
      putting them into their own namespace by prefixing all of its symbols
      with __efistub. This way, we have tight control over what parts of the
      kernel proper are referenced by the stub.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 207918461eb0aca720fddec5da79bc71c133b9f1
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Oct 8 20:02:03 2015 +0100

      arm64: use ENDPIPROC() to annotate position independent assembler routines

      For more control over which functions are called with the MMU off or
      with the UEFI 1:1 mapping active, annotate some assembler routines as
      position independent. This is done by introducing ENDPIPROC(), which
      replaces the ENDPROC() declaration of those routines.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit d4dddfdbbc75f46d2cbab4e9f421999452617d64
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Oct 8 20:02:02 2015 +0100

      arm64/efi: remove /chosen/linux, uefi-stub-kern-ver DT property

      With the stub to kernel interface being promoted to a proper interface
      so that other agents than the stub can boot the kernel proper in EFI
      mode, we can remove the linux,uefi-stub-kern-ver field, considering
      that its original purpose was to prevent this from happening in the
      first place.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5ffdbe8bf1e485026e1c7e4714d2841553cf0b40
  Author: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
  Date:   Mon Aug 24 15:57:19 2015 +0300

      ovl: free lower_mnt array in ovl_put_super

      This fixes memory leak after umount.

      Kmemleak report:

      unreferenced object 0xffff8800ba791010 (size 8):
        comm "mount", pid 2394, jiffies 4294996294 (age 53.920s)
        hex dump (first 8 bytes):
          20 1c 13 02 00 88 ff ff                           .......
        backtrace:
          [<ffffffff811f8cd4>] create_object+0x124/0x2c0
          [<ffffffff817a059b>] kmemleak_alloc+0x7b/0xc0
          [<ffffffff811dffe6>] __kmalloc+0x106/0x340
          [<ffffffffa0152bfc>] ovl_fill_super+0x55c/0x9b0 [overlay]
          [<ffffffff81200ac4>] mount_nodev+0x54/0xa0
          [<ffffffffa0152118>] ovl_mount+0x18/0x20 [overlay]
          [<ffffffff81201ab3>] mount_fs+0x43/0x170
          [<ffffffff81220d34>] vfs_kern_mount+0x74/0x170
          [<ffffffff812233ad>] do_mount+0x22d/0xdf0
          [<ffffffff812242cb>] SyS_mount+0x7b/0xc0
          [<ffffffff817b6bee>] entry_SYSCALL_64_fastpath+0x12/0x76
          [<ffffffffffffffff>] 0xffffffffffffffff

      Signed-off-by: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Fixes: dd662667e6d3 ("ovl: add mutli-layer infrastructure")
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.0+

  commit 0f95502ad84874b3c05fc7cdd9d4d9d5cddf7859
  Author: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
  Date:   Mon Aug 24 15:57:18 2015 +0300

      ovl: free stack of paths in ovl_fill_super

      This fixes small memory leak after mount.

      Kmemleak report:

      unreferenced object 0xffff88003683fe00 (size 16):
        comm "mount", pid 2029, jiffies 4294909563 (age 33.380s)
        hex dump (first 16 bytes):
          20 27 1f bb 00 88 ff ff 40 4b 0f 36 02 88 ff ff   '......@xxxxxxx
        backtrace:
          [<ffffffff811f8cd4>] create_object+0x124/0x2c0
          [<ffffffff817a059b>] kmemleak_alloc+0x7b/0xc0
          [<ffffffff811dffe6>] __kmalloc+0x106/0x340
          [<ffffffffa01b7a29>] ovl_fill_super+0x389/0x9a0 [overlay]
          [<ffffffff81200ac4>] mount_nodev+0x54/0xa0
          [<ffffffffa01b7118>] ovl_mount+0x18/0x20 [overlay]
          [<ffffffff81201ab3>] mount_fs+0x43/0x170
          [<ffffffff81220d34>] vfs_kern_mount+0x74/0x170
          [<ffffffff812233ad>] do_mount+0x22d/0xdf0
          [<ffffffff812242cb>] SyS_mount+0x7b/0xc0
          [<ffffffff817b6bee>] entry_SYSCALL_64_fastpath+0x12/0x76
          [<ffffffffffffffff>] 0xffffffffffffffff

      Signed-off-by: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Fixes: a78d9f0d5d5c ("ovl: support multiple lower layers")
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.0+

  commit 4302f5eeb95f78da6351a38cb170943651e8599a
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 16:51:02 2015 +0200

      nfnetlink_cttimeout: add rcu_barrier() on module removal

      Make sure kfree_rcu() released objects before leaving the module removal
      exit path.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit ae2d708ed8fb8fa713fdd7eacea5df40bae6315b
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 16:51:01 2015 +0200

      netfilter: conntrack: fix crash on timeout object removal

      The object and module refcounts are updated for each conntrack template,
      however, if we delete the iptables rules and we flush the timeout
      database, we may end up with invalid references to timeout object that
      are just gone.

      Resolve this problem by setting the timeout reference to NULL when the
      custom timeout entry is removed from our base. This patch requires some
      RCU trickery to ensure safe pointer handling.

      This handling is similar to what we already do with conntrack helpers,
      the idea is to avoid bumping the timeout object reference counter from
      the packet path to avoid the cost of atomic ops.

      Reported-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 403d89ad9cc076db44c76ab75c7629497d8ddbb2
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 16:51:03 2015 +0200

      netfilter: xt_CT: don't put back reference to timeout policy object

      On success, this shouldn't put back the timeout policy object, otherwise
      we may have module refcount overflow and we allow deletion of timeout
      that are still in use.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 0399f73299f1b7e04de329050f7111b362b7eeb5
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 12 11:22:42 2015 +0200

      x86/microcode/amd: Do not overwrite final patch levels

      A certain number of patch levels of applied microcode should not
      be overwritten by the microcode loader, otherwise bad things
      will happen.

      Check those and abort update if the current core has one of
      those final patch levels applied by the BIOS. 32-bit needs
      special handling, of course.

      See https://bugzilla.suse.com/show_bug.cgi?id=913996 for more
      info.

      Tested-by: Peter KirchgeÃ?ner <pkirchgessner@xxxxxxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444641762-9437-7-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2eff73c0a11f19ff082a566e3429fbaaca7b8e7b
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 12 11:22:41 2015 +0200

      x86/microcode/amd: Extract current patch level read to a function

      Pave the way for checking the current patch level of the
      microcode in a core. We want to be able to do stuff depending on
      the patch level - in this case decide whether to update or not.
      But that will be added in a later patch.

      Drop unused local var uci assignment, while at it.

      Integrate a fix for 32-bit and CONFIG_PARAVIRT from Takashi Iwai:

       Use native_rdmsr() in check_current_patch_level() because with
       CONFIG_PARAVIRT enabled and on 32-bit, where we run before
       paging has been enabled, we cannot deref pv_info yet. Or we
       could, but we'd need to access its physical address. This way of
       fixing it is simpler. See:

         https://bugzilla.suse.com/show_bug.cgi?id=943179 for the background.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Takashi Iwai <tiwai@xxxxxxxx>:
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444641762-9437-6-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fa20a2ed6fff717839ec03b6574ea0affcb58841
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Oct 12 11:22:40 2015 +0200

      x86/ras/mce_amd_inj: Inject bank 4 errors on the NBC

      Bank 4 MCEs are logged and reported only on the node base core
      (NBC) in a socket. Refer to the D18F3x44[NbMcaToMstCpuEn] field
      in Fam10h and later BKDGs. The node base core (NBC) is the
      lowest numbered core in the node.

      This patch ensures that we inject the error on the NBC for bank
      4 errors. Otherwise, triggering #MC or APIC interrupts on a core
      which is not the NBC would not have any effect on the system,
      i.e. we would not see any relevant output on kernel logs for the
      error we just injected.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      [ Cleanup comments. ]
      [ Add a missing dependency on AMD_NB caught by Randy Dunlap. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Acked-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443190851-2172-4-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444641762-9437-5-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a1300e50529795cd605da6a015d4944a18921db0
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Oct 12 11:22:39 2015 +0200

      x86/ras/mce_amd_inj: Trigger deferred and thresholding errors interrupts

      Add the capability to trigger deferred error interrupts and
      threshold interrupts in order to test the APIC interrupt handler
      functionality for these type of errors.

      Update README section about the same too.

      Reported by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      [ Cleanup comments. ]
      [ Include asm/irq_vectors.h directly so that misc randbuilds don't fail. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443190851-2172-3-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444641762-9437-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 85c9306d44f757d2fb3b0e3e399080a025315c7f
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Oct 12 11:22:38 2015 +0200

      x86/ras/mce_amd_inj: Return early on invalid input

      Invalid inputs such as these are currently reported in dmesg as
      failing:

        $> echo sweet > flags
        [  122.079139] flags_write: Invalid flags value: et

      even though the 'flags' attribute has been updated correctly:

        $> cat flags
        sw

      This is because userspace keeps writing the remaining buffer
      until it encounters an error.

      However, the input as a whole is wrong and we should not be
      writing anything to the file. Therefore, correct flags_write()
      to return -EINVAL immediately on bad input strings.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443190851-2172-2-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444641762-9437-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1c8a47df36d72ace8cf78eb6c228aa0f8027d3c2
  Author: Miklos Szeredi <miklos@xxxxxxxxxx>
  Date:   Mon Oct 12 15:56:20 2015 +0200

      ovl: fix open in stacked overlay

      If two overlayfs filesystems are stacked on top of each other, then we 
need
      recursion in ovl_d_select_inode().

      I guess d_backing_inode() is supposed to do that.  But currently it 
doesn't
      and that functionality is open coded in vfs_open().  This is now copied
      into ovl_d_select_inode() to fix this regression.

      Reported-by: Alban Crequy <alban.crequy@xxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Fixes: 4bacc9c9234c ("overlayfs: Make f_path always point to the 
overlay...")
      Cc: David Howells <dhowells@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2+

  commit ab79efab0a0ba01a74df782eb7fa44b044dae8b5
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 18 11:45:22 2015 +0100

      ovl: fix dentry reference leak

      In ovl_copy_up_locked(), newdentry is leaked if the function exits through
      out_cleanup as this just to out after calling ovl_cleanup() - which 
doesn't
      actually release the ref on newdentry.

      The out_cleanup segment should instead exit through out2 as certainly
      newdentry leaks - and possibly upper does also, though this isn't caught
      given the catch of newdentry.

      Without this fix, something like the following is seen:

        BUG: Dentry ffff880023e9eb20{i=f861,n=#ffff880023e82d90} still in use 
(1) [unmount of tmpfs tmpfs]
        BUG: Dentry ffff880023ece640{i=0,n=bigfile}  still in use (1) [unmount 
of tmpfs tmpfs]

      when unmounting the upper layer after an error occurred in copyup.

      An error can be induced by creating a big file in a lower layer with
      something like:

        dd if=/dev/zero of=/lower/a/bigfile bs=65536 count=1 seek=$((0xf000))

      to create a large file (4.1G).  Overlay an upper layer that is too small
      (on tmpfs might do) and then induce a copy up by opening it writably.

      Reported-by: Ulrich Obergfell <uobergfe@xxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.18+

  commit 0480334fa60488d12ae101a02d7d9e1a3d03d7dd
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 18 11:45:12 2015 +0100

      ovl: use O_LARGEFILE in ovl_copy_up()

      Open the lower file with O_LARGEFILE in ovl_copy_up().

      Pass O_LARGEFILE unconditionally in ovl_copy_up_data() as it's purely for
      catching 32-bit userspace dealing with a file large enough that it'll be
      mishandled if the application isn't aware that there might be an integer
      overflow.  Inside the kernel, there shouldn't be any problems.

      Reported-by: Ulrich Obergfell <uobergfe@xxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.18+

  commit 0f96a99dab366333439e110d6ad253bc7c557c09
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Wed Sep 30 23:01:56 2015 +0900

      efi: Add "efi_fake_mem" boot option

      This patch introduces new boot option named "efi_fake_mem".
      By specifying this parameter, you can add arbitrary attribute
      to specific memory range.
      This is useful for debugging of Address Range Mirroring feature.

      For example, if "efi_fake_mem=2G@4G:0x10000,2G@0x10a0000000:0x10000"
      is specified, the original (firmware provided) EFI memmap will be
      updated so that the specified memory regions have
      EFI_MEMORY_MORE_RELIABLE attribute (0x10000):

       <original>
         efi: mem36: [Conventional Memory|  |  |  |  |  |   |WB|WT|WC|UC] 
range=[0x0000000100000000-0x00000020a0000000) (129536MB)

       <updated>
         efi: mem36: [Conventional Memory|  |MR|  |  |  |   |WB|WT|WC|UC] 
range=[0x0000000100000000-0x0000000180000000) (2048MB)
         efi: mem37: [Conventional Memory|  |  |  |  |  |   |WB|WT|WC|UC] 
range=[0x0000000180000000-0x00000010a0000000) (61952MB)
         efi: mem38: [Conventional Memory|  |MR|  |  |  |   |WB|WT|WC|UC] 
range=[0x00000010a0000000-0x0000001120000000) (2048MB)
         efi: mem39: [Conventional Memory|  |  |  |  |  |   |WB|WT|WC|UC] 
range=[0x0000001120000000-0x00000020a0000000) (63488MB)

      And you will find that the following message is output:

         efi: Memory: 4096M/131455M mirrored memory

      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Xishi Qiu <qiuxishi@xxxxxxxxxx>
      Cc: Kamezawa Hiroyuki <kamezawa.hiroyu@xxxxxxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 0bbea1ce98ed44779736ecc54ca9cdbca2b95544
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Wed Sep 30 19:20:00 2015 +0900

      x86/efi: Rename print_efi_memmap() to efi_print_memmap()

      This patch renames print_efi_memmap() to efi_print_memmap() and
      make it global function so that we can invoke it outside of
      arch/x86/platform/efi/efi.c

      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Xishi Qiu <qiuxishi@xxxxxxxxxx>
      Cc: Kamezawa Hiroyuki <kamezawa.hiroyu@xxxxxxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 9ac4d5ab3e7ae6f485501cb6bf3965da34ac1bac
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 01:44:16 2015 +0100

      efi: Auto-load the efi-pstore module

      efi-pstore should be auto-loaded on EFI systems, same as efivars.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Lee, Chun-Yi <jlee@xxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit a1041713349d0b823b492d7b4ea4325d0b5666db
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Wed Sep 23 07:29:34 2015 -0700

      efi: Introduce EFI_NX_PE_DATA bit and set it from properties table

      UEFI v2.5 introduces a runtime memory protection feature that splits
      PE/COFF runtime images into separate code and data regions. Since this
      may require special handling by the OS, allocate a EFI_xxx bit to
      keep track of whether this feature is currently active or not.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit bf924863c9445174c6e118f723dc477e2b6ccc7e
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Wed Sep 9 10:08:15 2015 +0200

      efi: Add support for UEFIv2.5 Properties table

      Version 2.5 of the UEFI spec introduces a new configuration table
      called the 'EFI Properties table'. Currently, it is only used to
      convey whether the Memory Protection feature is enabled, which splits
      PE/COFF images into separate code and data memory regions.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Acked-by: Dave Young <dyoung@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 8be4432eb629a2762bad9173d6b06e6ea9c0dfcb
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Thu Aug 27 02:11:19 2015 +0900

      efi: Add EFI_MEMORY_MORE_RELIABLE support to efi_md_typeattr_format()

      UEFI spec 2.5 introduces new Memory Attribute Definition named
      EFI_MEMORY_MORE_RELIABLE. This patch adds this new attribute
      support to efi_md_typeattr_format().

      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Xishi Qiu <qiuxishi@xxxxxxxxxx>
      Cc: KAMEZAWA Hiroyuki <kamezawa.hiroyu@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit ae2ee627dc87a70910de91b791b3cd0e9c6facdd
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Tue Aug 25 16:32:55 2015 +0100

      efifb: Add support for 64-bit frame buffer addresses

      The EFI Graphics Output Protocol uses 64-bit frame buffer addresses
      but these get truncated to 32-bit by the EFI boot stub when storing
      the address in the 'lfb_base' field of 'struct screen_info'.

      Add a 'ext_lfb_base' field for the upper 32-bits of the frame buffer
      address and set VIDEO_TYPE_CAPABILITY_64BIT_BASE when the field is
      useable.

      It turns out that the reason no one has required this support so far
      is that there's actually code in tianocore to "downgrade" PCI
      resources that have option ROMs and 64-bit BARS from 64-bit to 32-bit
      to cope with legacy option ROMs that can't handle 64-bit addresses.
      The upshot is that basically all GOP devices in the wild use a 32-bit
      frame buffer address.

      Still, it is possible to build firmware that uses a full 64-bit GOP
      frame buffer address. Chad did, which led to him reporting this issue.

      Add support in anticipation of GOP devices using 64-bit addresses more
      widely, and so that efifb works out of the box when that happens.

      Reported-by: Chad Page <chad.page@xxxxxxxx>
      Cc: Pete Hawkins <pete.hawkins@xxxxxxxx>
      Acked-by: Peter Jones <pjones@xxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 7968c0e338085eba0ee2f0e0b0d833057a966679
  Author: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
  Date:   Wed Aug 26 14:24:58 2015 +0100

      efi/arm64: Clean up efi_get_fdt_params() interface

      As we now have a common debug infrastructure between core and arm64 efi,
      drop the bit of the interface passing verbose output flags around.

      Signed-off-by: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit c9494dc818755f2dd934c93faa933317fae51594
  Author: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
  Date:   Wed Aug 26 14:24:57 2015 +0100

      arm64: Use core efi=debug instead of uefi_debug command line parameter

      Now that we have an efi=debug command line option in the core code, use
      this instead of the arm64-specific uefi_debug option.

      Signed-off-by: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 12dd00e83fb83fa41dcc965cdd1e1627494348cb
  Author: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
  Date:   Wed Aug 26 14:24:56 2015 +0100

      efi/x86: Move efi=debug option parsing to core

      fed6cefe3b6e ("x86/efi: Add a "debug" option to the efi= cmdline")
      adds the DBG flag, but does so for x86 only. Move this early param
      parsing to core code.

      Signed-off-by: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 18aefbc5cc075617b00ffefba70029541e18fd1a
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Tue Aug 25 19:00:48 2015 -0400

      drivers/firmware: Make efi/esrt.c driver explicitly non-modular

      The Kconfig for this driver is currently hidden with:

      config EFI_ESRT
              bool

      ...meaning that it currently is not being built as a module by anyone.
      Lets remove the modular code that is essentially orphaned, so that
      when reading the driver there is no doubt it is builtin-only.

      Since module_init translates to device_initcall in the non-modular
      case, the init ordering remains unchanged with this commit.

      We leave some tags like MODULE_AUTHOR for documentation purposes.

      We don't replace module.h with init.h since the file already has that.

      Cc: Peter Jones <pjones@xxxxxxxxxx>
      Cc: linux-efi@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit cdbcd239e2e264dc3ef7bc7865bcb8ec0023876f
  Merge: 6e06780 7e0abcd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 12 14:52:34 2015 +0200

      Merge branch 'x86/ras' into ras/core, to pick up changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0fa28877b26641cca56b607ccec1fcbda7ae09c6
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 9 14:53:54 2015 +0200

      net: HNS: fix MDIO dependencies

      The newly introduced HNS_MDIO Kconfig symbol selects 'MDIO', but
      that is the wrong symbol as the code used by this driver is
      provided by PHYLIB rather than the MDIO driver. Also, there is
      no need to make this driver user selectable, because it is already
      selected by all drivers that need it.

      This changes the Kconfig file to select the correct library, and
      to make the option silent.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 5b904d39406 ("net: add Hisilicon Network Subsystem MDIO support")
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c577e59ed7f55be398a2a730447a7f37d72eaa57
  Author: Daniel Pieczko <dpieczko@xxxxxxxxxxxxxx>
  Date:   Fri Oct 9 10:40:35 2015 +0100

      sfc: fully reset if MC_REBOOT event received without warm_boot_count 
increment

      On EF10, MC_CMD_VPORT_RECONFIGURE can cause a CODE_MC_REBOOT event
      to be sent to a function without incrementing the (adapter-wide)
      warm_boot_count.  In this case, the reboot is not detected by the
      loop on efx_mcdi_poll_reboot(), so prepare for recovery from an MC
      reboot anyway.  When this codepath is run, the MC has always just
      rebooted, so this recovery is valid.

      The loop on efx_mcdi_poll_reboot() is still required for other MC
      reboot cases, so that actions in response to an MC reboot are
      performed, such as clearing locally calculated statistics.
      Siena NICs are unaffected by this change as the above scenario
      does not apply.

      Signed-off-by: Shradha Shah <sshah@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d5404915a92de00cc2a6bd1d1b7f923b70effbd1
  Merge: 7533ce3 d0cf57f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 05:20:28 2015 -0700

      Merge branch 'switchdev_ageing_time'

      Scott Feldman says:

      ====================
      switchdev: push bridge ageing_time attribute down

      Push bridge-level attributes down to switchdev drivers.  This patchset
      adds the infrastructure and then pushes, as an example, ageing_time 
attribute
      down from bridge to switchdev (rocker) driver.  Add some range-checking
      for ageing_time.

      RTNETLINK answers: Numerical result out of range

      Up until now, switchdev attrs where port-level attrs, so the netdev used 
in
      switchdev_attr_set() would be a switch port or bond of switch ports.  With
      bridge-level attrs, the netdev passed to switchdev_attr_set() is the 
bridge
      netdev.  The same recusive algo is used to visit the leaves of the stacked
      drivers to set the attr, it's just in this case we start one layer higher 
in
      the stack.  One note is not all ports in the bridge may support setting a
      bridge-level attribute, so rather than failing the entire set, we'll skip 
over
      those ports returning -EOPNOTSUPP.

      v2->v3: Per Jiri review: push only ageing_time attr down at this time, and
      don't pass raw bridge IFLA_BR_* values; rather use new switchdev attr ID 
for
      ageing_time.

      v1->v2: rebase w/ net-next
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d0cf57f9dddb50ea404bf747a3c6b22b29f82b9a
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Thu Oct 8 19:23:20 2015 -0700

      rocker: handle setting bridge ageing_time

      The FDB cleanup timer will get rescheduled to re-evaluate FDB entries
      based on new ageing_time.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c62987bbd8a1a1664f99e89e3959339350a6131e
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Thu Oct 8 19:23:19 2015 -0700

      bridge: push bridge setting ageing_time down to switchdev

      Use SWITCHDEV_F_SKIP_EOPNOTSUPP to skip over ports in bridge that don't
      support setting ageing_time (or setting bridge attrs in general).

      If push fails, don't update ageing_time in bridge and return err to user.

      If push succeeds, update ageing_time in bridge and run gc_timer now to
      recalabrate when to run gc_timer next, based on new ageing_time.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 464314ea6c119ebc22ee78453e63814453c31611
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Thu Oct 8 19:23:18 2015 -0700

      switchdev: skip over ports returning -EOPNOTSUPP when recursing ports

      This allows us to recurse over all the ports, skipping over unsupporting
      ports.  Without the change, the recursion would stop at first unsupported
      port.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f55ac58ae64cbb0315382e738681fe31837dcac0
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Thu Oct 8 19:23:17 2015 -0700

      switchdev: add bridge ageing_time attribute

      Setting the stage to push bridge-level attributes down to port driver so
      hardware can be programmed accordingly.  Bridge-level attribute example is
      ageing_time.  This is a per-bridge attribute, not a per-bridge-port attr.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7533ce3055bbe9577276a847125b156c44a5bbce
  Author: Richard Sailer <richard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 02:41:37 2015 +0200

      tcp: change type of alive from int to bool

      The alive parameter of tcp_orphan_retries, indicates
      whether the connection is assumed alive or not.
      In the function and all places calling it is used as a boolean value.

      Therefore this changes the type of alive to bool in the function
      definition and all calling locations.

      Since tcp_orphan_tries is a tcp_timer.c local function no change in
      any other file or header is necessary.

      Signed-off-by: Richard Sailer <richard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3741873b4f73b572b8f8835e6bd114e08316a160
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 10:38:52 2015 -0700

      bridge: allow adding of fdb entries pointing to the bridge device

      This patch enables adding of fdb entries pointing to the bridge device.
      This can be used to propagate mac address of vlan interfaces
      configured on top of the vlan filtering bridge.

      Before:
      $bridge fdb add 44:38:39:00:27:9f dev bridge
      RTNETLINK answers: Invalid argument

      After:
      $bridge fdb add 44:38:39:00:27:9f dev bridge

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cb50ce324e72bfd5d191d0a834a0ead1a08666b7
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Mon Oct 12 12:10:53 2015 +0100

      arm64: Fix missing #include in hw_breakpoint.c

      A prior commit used to detect the hw breakpoint ABI behaviour based on
      the target state missed the asm/compat.h include and the build fails
      with !CONFIG_COMPAT.

      Fixes: 8f48c0629049 ("arm64: hw_breakpoint: use target state to determine 
ABI behaviour")
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 6035519fcf5aa17084b41790cdc584d881d82c03
  Author: John Stultz <john.stultz@xxxxxxxxxx>
  Date:   Mon Oct 5 18:16:57 2015 -0700

      timers, kselftest: Add 'adjtick' test to validate adjtimex() tick 
adjustments

      Recently a kernel side NTP bug was fixed via the following commit:

        2619d7e9c92d ("time: Fix timekeeping_freqadjust()'s incorrect use of 
abs() instead of abs64()")

      When the bug was reported it was difficult to detect, except by
      tweaking the adjtimex tick value, and noticing how quickly the
      adjustment took:

        https://lkml.org/lkml/2015/9/1/488

      Thus this patch introduces a new test which manipulates the
      adjtimex tick value and validates that the results are what we
      expect.

      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
      Cc: Nuno Gonçalves <nunojpg@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Prarit Bhargava <prarit@xxxxxxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444094217-20258-1-git-send-email-john.stultz@xxxxxxxxxx
      [ Tidied up the code and the changelog a bit. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b9f27c0f4f7db9e5a4ba59228442a75d3177470c
  Merge: 9fc4468 25cb62b
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 12 09:51:18 2015 +0200

      Merge tag 'v4.3-rc5' into timers/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9babcd7929bc8967ae3bb6093f603b93c2f9958f
  Author: Daniel Bristot de Oliveira <bristot@xxxxxxxxxx>
  Date:   Thu Oct 8 15:36:06 2015 -0300

      sched, tracing: Stop/start critical timings around the idle=poll idle loop

      When using idle=poll, the preemptoff tracer is always showing
      the idle task as the culprit for long latencies. That happens
      because critical timings are not stopped before idle loop. This
      patch stops critical timings before entering the idle loop,
      starting it again after the idle loop.

      This problem does not affect the irqsoff tracer because
      interruptions are enabled before entering the idle loop.

      Signed-off-by: Daniel Bristot de Oliveira <bristot@xxxxxxxxxx>
      Reviewed-by: Luis Claudio R. Goncalves <lgoncalv@xxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/10fc3705874aef11dbe152a068b591a7be1899b4.1444314899.git.bristot@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e9c40d257fdd58c5cc97d3fe3aa141dd23ee5e9d
  Author: Minfei Huang <mnfhuang@xxxxxxxxx>
  Date:   Tue Oct 6 02:35:55 2015 +0800

      x86/kexec: Remove obsolete 'in_crash_kexec' flag

      Previously, UV NMI used the 'in_crash_kexec' flag to determine whether
      we are in a kdump kernel or not:

        5edd19af18a36a4 ("x86, UV: Make kdump avoid stack dumps")

      But this flags was removed in the following commit:

        9c48f1c629ecfa1 ("x86, nmi: Wire up NMI handlers to new routines")

      Since it isn't used any more, remove it.

      Signed-off-by: Minfei Huang <mnfhuang@xxxxxxxxx>
      Acked-by: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: cpw@xxxxxxx
      Cc: kexec@xxxxxxxxxxxxxxxxxxx
      Cc: mhuang@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444070155-17934-1-git-send-email-mhuang@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7b98040a7718663903bb25c06c7aed9801abbd9d
  Merge: 621bd0f 25d2958
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Mon Oct 12 13:59:04 2015 +1000

      Merge branch 'linux-4.3' of 
git://anongit.freedesktop.org/git/nouveau/linux-2.6 into drm-fixes

      Nothing too crazy here, a couple of regression fixes + runpm/fbcon
      race fix.

      * 'linux-4.3' of git://anongit.freedesktop.org/git/nouveau/linux-2.6:
        drm/nouveau/bios: fix OF loading
        drm/nouveau/fbcon: take runpm reference when userspace has an open fd
        drm/nouveau/nouveau: Disable AGP for SiS 761
        drm/nouveau/display: allow up to 16k width/height for fermi+
        drm/nouveau/bios: translate devinit pri/sec i2c bus to internal 
identifiers

  commit 25d295882a1adfcdaaad85369289677b87c7c8f0
  Author: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
  Date:   Thu Oct 1 23:41:21 2015 -0400

      drm/nouveau/bios: fix OF loading

      Currently OF bios load fails for a few reasons:
       - checksum failure
       - bios size too small
       - no PCIR header
       - bios length not a multiple of 4

      In this change, we resolve all of the above by ignoring any checksum
      failures (since OF VBIOS tends not to have a checksum), and faking the
      PCIR data when loading from OF.

      Signed-off-by: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit f231976c2e8964ceaa9250e57d27c35ff03825c2
  Author: Ben Skeggs <bskeggs@xxxxxxxxxx>
  Date:   Fri Oct 2 14:03:19 2015 +1000

      drm/nouveau/fbcon: take runpm reference when userspace has an open fd

      We need to do this in order to prevent accesses to the device while it's
      powered down.  Userspace may have an mmap of the fb, and there's no good
      way (that I know of) to prevent it from touching the device otherwise.

      This fixes some nasty races between runpm and plymouth on some systems,
      which result in the GPU getting very upset and hanging the boot.

      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 953132b56a43c707979df8da7bfd00931bdfe695
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 21:19:57 2015 +0200

      drm/nouveau/nouveau: Disable AGP for SiS 761

      SiS 761 chipset does not support AGP cards but has AGP capability (for
      the onboard video). At least PC Chips A31G board using this chipset has
      an AGP-like AGPro slot that's wired to the PCI bus. Enabling AGP will
      fail (GPU lockup and software fbcon, X11 hangs).

      Add support for matching just the host bridge in nvkm_device_agp_quirks
      and add entry for SiS 761 with mode 0 (AGP disabled).

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit 5102ec3e99e271b3934a1e00bb52a2545eb7dbc5
  Author: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
  Date:   Thu Sep 17 22:31:20 2015 -0400

      drm/nouveau/display: allow up to 16k width/height for fermi+

      Signed-off-by: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit 2239b76b0b1782160d5ca91ea1653dd67aa37e8a
  Author: Ben Skeggs <bskeggs@xxxxxxxxxx>
  Date:   Tue Sep 29 12:08:35 2015 +1000

      drm/nouveau/bios: translate devinit pri/sec i2c bus to internal 
identifiers

      fdo#92013.

      Regression from "i2c: transition pad/ports away from being based on 
nvkm_object"

      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit 9fc4468d546b6eb55b0aa5b04b0c36238ebf57e7
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 09:45:30 2015 +0200

      timers: Use __fls in apply_slack()

      In apply_slack(), find_last_bit() is applied to a bitmask consisting
      of precisely BITS_PER_LONG bits. Since mask is non-zero, we might as
      well eliminate the function call and use __fls() directly. On x86_64,
      this shaves 23 bytes of the only caller, mod_timer().

      This also gets rid of Coverity CID 1192106, but that is a false
      positive: Coverity is not aware that mask != 0 implies that
      find_last_bit will not return BITS_PER_LONG.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443771931-6284-1-git-send-email-linux@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit cfed432d7f4114e16e0163bcfe65e96f0c304493
  Author: Guillaume Gomez <guillaume1.gomez@xxxxxxxxx>
  Date:   Wed Sep 23 13:19:19 2015 +0200

      clocksource: Remove return statement from void functions

      Signed-off-by: Guillaume Gomez <guillaume1.gomez@xxxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/CAAOQCfSDgmqSWDBsetau%2ByF8x0%2BDagCF_pfFw0p5xH_BKkKEog@xxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7e0abcd6b7ec1452bf4a850fccbae44043c05806
  Author: Gabriel Laskar <gabriel@xxxxxxxxxxxx>
  Date:   Tue Oct 6 16:27:35 2015 +0200

      x86/mce: Include linux/ioctl.h in uapi mce header

      asm/ioctls.h contains definition for termios, not just the _IO* macros.

      This error was found with a tool in development used to generate
      automated pretty-printing functions for ioctl decoding in strace.

      Signed-off-by: Gabriel Laskar <gabriel@xxxxxxxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444141657-14898-2-git-send-email-gabriel@xxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 4faefda97bc1be6ca909ba0fd0927ea78f37f67e
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:24:45 2015 +0300

      x86/io_apic: Make eoi_ioapic_pin() static

      We have to define internally used function as static, otherwise the 
following
      warning will be generated:

      arch/x86/kernel/apic/io_apic.c:532:6: warning: no previous prototype for 
'eoi_ioapic_pin' [-Wmissing-prototypes]

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Reviewed-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444400685-98611-1-git-send-email-andriy.shevchenko@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d1f0f6c72c14af8a27a6549e0623f7cd61805e83
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:25:41 2015 +0300

      x86/intel-mid: Make intel_mid_ops static

      The following warning is issued on unfixed code.

      arch/x86/platform/intel-mid/intel-mid.c:64:22: warning: symbol 
'intel_mid_ops' was not declared. Should it be static?

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444400741-98669-1-git-send-email-andriy.shevchenko@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 25cb62b76430a91cc6195f902e61c2cb84ade622
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 11:09:45 2015 -0700

      Linux 4.3-rc5

  commit 9a78f9c3c68c4d57f602b4100e766945d3362f4d
  Merge: 7cbbab0 95913d9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:24:32 2015 -0700

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fix from Thomas Gleixner:
       "Fix a long standing state race in finish_task_switch()"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched/core: Fix TASK_DEAD race in finish_task_switch()

  commit 7cbbab00cbbd3d36288f4d3634eb45d66d78d218
  Merge: a145164 00e6fa5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:23:52 2015 -0700

      Merge branch 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf fix from Thomas Glexiner:
       "Fix build breakage on powerpc in perf tools"

      * 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        perf tools: Fix build break on powerpc due to sample_reg_masks

  commit a145164ba86543604c54d5c1079a18d5eaabbc1b
  Merge: e3d6e0e 825fcfc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:23:00 2015 -0700

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull maintainer email update from Thomas Gleixner:
       "Change Matt Fleming's email address in the maintainers file"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        MAINTAINERS: Change Matt Fleming's email address

  commit e3d6e0e70139297977546f7af719396ebc4fe181
  Merge: 5a433f7 10abc7d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:16:59 2015 -0700

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fixes from Thomas Gleixner:
       "Three trivial commits:

         - Fix a kerneldoc regression

         - Export handle_bad_irq to unbreak a driver in next

         - Add an accessor for the of_node field so refactoring in next does
           not depend on merge ordering"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqdomain: Add an accessor for the of_node field
        genirq: Fix handle_bad_irq kerneldoc comment
        genirq: Export handle_bad_irq

  commit 5a433f7a6bc49b5745d5ccd4f1c84f57ab7013a9
  Merge: f24fe98 15e3d5a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:02:30 2015 -0700

      Merge tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

      Pull SCSI fixes from James Bottomley:
       "This is a set of three bug fixes, two of which are regressions from
        recent updates (the 3ware one from 4.1 and the device handler fixes
        from 4.2)"

      * tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:
        3w-9xxx: don't unmap bounce buffered commands
        scsi_dh: Use the correct module name when loading device handler
        libiscsi: Fix iscsi_check_transport_timeouts possible infinite loop

  commit f24fe98df8448d60867d2b81a1a67722a6568b19
  Merge: 4a06c8a a452744
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 09:35:51 2015 -0700

      Merge tag 'md/4.3-rc4-fix' of git://neil.brown.name/md

      Pull md bugfix from Neil Brown:
       "One bug fix for raid1/raid10.

        Very careless bug earler in 4.3-rc, now fixed :-)"

      * tag 'md/4.3-rc4-fix' of git://neil.brown.name/md:
        crash in md-raid1 and md-raid10 due to incorrect list manipulation

  commit b94e22805a2224061bb263a82b72e09544a5fbb3
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 13:10:54 2015 +0200

      iio: mxs-lradc: Fix temperature offset

      0° Kelvin is actually â??273.15°C, not -272.15°C. Fix the temperature 
offset.
      Also improve the comment explaining the calculation.

      Reported-by: Janusz Użycki <j.uzycki@xxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Acked-by: Stefan Wahren <stefan.wahren@xxxxxxxx>
      Acked-by: Marek Vasut <marex@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit 6bcfd7f8c28887a4298bc4386b02cb90c9fa0c13
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 11:16:48 2015 -0700

      tcp: fix RFS vs lockless listeners

      Before recent TCP listener patches, we were updating listener
      sk->sk_rxhash before the cloning of master socket.

      children sk_rxhash was therefore correct after the normal 3WHS.

      But with lockless listener, we no longer dirty/change listener sk_rxhash
      as it would be racy.

      We need to correctly update the child sk_rxhash, otherwise first data
      packet wont hit correct cpu if RFS is used.

      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Willem de Bruijn <willemb@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Acked-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9ef2e965e55481a52d6d91ce61977a27836268d3
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:19:53 2015 +0200

      ipv6: drop frames with attached skb->sk in forwarding

      This is a clone of commit 2ab957492d13b ("ip_forward: Drop frames with
      attached skb->sk") for ipv6.

      This commit has exactly the same reasons as the above mentioned commit,
      namely to prevent panics during netfilter reload or a misconfigured stack.

      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d9e4ce65b27694b0b70ff4d1cbbb740195fd916b
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:19:39 2015 +0200

      ipv6: gre: setup default multicast routes over PtP links

      GRE point-to-point interfaces should also support ipv6 multicast. Setting
      up default multicast routes on interface creation was forgotten. Add it.

      Bugzilla: <https://bugzilla.kernel.org/show_bug.cgi?id=103231>
      Cc: Julien Muchembled <jm@xxxxxxxxxxx>
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Nicolas Dumazet <ndumazet@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5010ea59e1b986d89023c0552fa38e32b519a617
  Merge: 6e86ac1 8057b3e
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 11 05:28:57 2015 -0700

      Merge branch 'dsa-next'

      Vivien Didelot says:

      ====================
      net: dsa: push switchdev prepare phase in FDB ops

      This patchset pushes the switchdev prepare phase for the FDB add and del
      operations down to the DSA drivers. Currently only mv88e6xxx is affected.

      Since the dump requires a bit of refactoring in the driver, it'll come in 
a
      future patchset.

      Changes in v2:
       * forward declare switchdev structs instead of fixing the dsa.h include.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8057b3e7a1cfb4da61717ba609e1ea642bb82f9b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 11:35:14 2015 -0400

      net: dsa: use switchdev obj in port_fdb_del

      For consistency with the FDB add operation, propagate the
      switchdev_obj_port_fdb structure in the DSA drivers.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f36faf26943f5f5fc1d1a7be6ce252d2ff25e1a
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 11:35:13 2015 -0400

      net: dsa: push prepare phase in port_fdb_add

      Now that the prepare phase is pushed down to the DSA drivers, propagate
      it to the port_fdb_add function.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 146a32067b3fde1424d737d7fb333eb0951e6419
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 11:35:12 2015 -0400

      net: dsa: add port_fdb_prepare

      Push the prepare phase for FDB operations down to the DSA drivers, with
      a new port_fdb_prepare function. Currently only mv88e6xxx is affected.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e86ac120e144154d345ebb5839d50b6f713149b
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 11:10:19 2015 -0400

      net: encx24j600: Fix typos in Kconfig

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7bcfeead48b6f920007ee41bc70a83b58c5ba396
  Merge: 8fae307 f640ee9
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 11 05:15:30 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-10-08

      Here's another set of Bluetooth & 802.15.4 patches for the 4.4 kernel.

      802.15.4:
       - Many improvements & fixes to the mrf24j40 driver
       - Fixes and cleanups to nl802154, mac802154 & ieee802154 code

      Bluetooth:
       - New chipset support in btmrvl driver
       - Fixes & cleanups to btbcm, btmrvl, bpa10x & btintel drivers
       - Support for vendor specific diagnostic data through common API
       - Cleanups to the 6lowpan code
       - New events & message types for monitor channel

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9468e8dc87e31f807fae04aae70380a461b95c6
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Thu Oct 8 16:19:01 2015 +0300

      bnx2x: Prevent UDP 4-tuple configurations on older adapters

      Configuring 4-tuple RSS hsahing for UDP
      [E.g., by using `ethtool -N <interface> rx-flow-hash udp4 sdfn']
      on a 57710/57711 adapter would cause it to assert as HW does not
      support such a configuration.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5edc11ab878a78eae45fb22a59a9a5554e305067
  Merge: 6ac644a bee1f75
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 11 05:08:14 2015 -0700

      Merge branch 'mlxsw-fixes'

      Jiri Pirko says:

      ====================
      mlxsw: couple of fixes

      Just a couple of small fixes.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bee1f753bfcb19660d8ad713b9dd3939630854b6
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:17:38 2015 +0200

      mlxsw: Fix bug in __mlxsw_item_bit_array_offset

      When calculating the shift needed in order to access a bit array element
      in a byte, we should multiply the index by the element size and not
      assume it is fixed at 2-bits.

      Fixes: 93c1edb27f9e ("mlxsw: Introduce Mellanox switch driver core")
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4b0c2541cbf223abd38b235146e30a3d207d3bfe
  Author: Elad Raz <eladr@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:17:37 2015 +0200

      mlxsw: switchx2: changing order of exit fallbacks

      Fixes: 31557f0f9755 ("mlxsw: Introduce Mellanox SwitchX-2 ASIC support")
      Signed-off-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fae307c8fe9789ff1f4161dcb2db0d689069448
  Author: wangweidong <wangweidong1@xxxxxxxxxx>
  Date:   Thu Oct 8 18:03:47 2015 +0800

      BNX2: fix a Null Pointer for stats_blk

      we have two processes to do:
      P1#: ifconfig eth0 down; which will call bnx2_close, then will
      , and set Null to stats_blk
      P2#: ifconfig eth0; which will call bnx2_get_stats64, it will
      use stats_blk.
      In one case:
          --P1#--                   --P2#--
                                    stats_blk(no null)
          bnx2_free_mem
          ->bp->stats_blk = NULL
                                    GET_64BIT_NET_STATS

      then it will cause 'NULL Pointer' Problem.
      it is as well with 'ethtool -S ethx'.

      Allocate the statistics block at probe time so that this problem is
      impossible

      Signed-off-by: Wang Weidong <wangweidong1@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e446f9dfe17bbaa76a1fe22912636f38be1e1af8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 05:01:55 2015 -0700

      net: synack packets can be attached to request sockets

      selinux needs few changes to accommodate fact that SYNACK messages
      can be attached to a request socket, lacking sk_security pointer

      (Only syncookies are still attached to a TCP_LISTEN socket)

      Adds a new sk_listener() helper, and use it in selinux and sch_fq

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported by: kernel test robot <ying.huang@xxxxxxxxxxxxxxx>
      Cc: Paul Moore <paul@xxxxxxxxxxxxxx>
      Cc: Stephen Smalley <sds@xxxxxxxxxxxxx>
      Cc: Eric Paris <eparis@xxxxxxxxxxxxxx>
      Acked-by: Paul Moore <paul@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21d11bd6f0f15c9c782d1f09557bb71f582a3f53
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 8 10:08:23 2015 +0530

      cxgb4: Enhance driver to update FW, when FW is too old

      t4_check_fw_version() can return several error codes (-EINVAL, -EBUSY,
      -EAGAIN). The present code sets the adapter state to UNINIT only if its
      an EFAULT. In all the error cases set the adapter to uninitialized state.

      In t4_check_fw_version() if call to t4_get_fw_version() fails, repeat the
      operation a few times before returning failure.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ac644a8ae2dabf884a1b01e82e32d96ffe6eee5
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Wed Oct 7 16:47:32 2015 -0700

      sch_hhf: fix return value of hhf_drop()

      Similar to commit c0afd9ce4d6a ("fq_codel: fix return value of 
fq_codel_drop()")
      ->drop() is supposed to return the number of bytes it dropped,
      but hhf_drop () returns the id of the bucket where it drops
      a packet from.

      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Cc: Terry Lam <vtlam@xxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Signed-off-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ff936a04e5f28b7e0455be0e7fa91334f89e4b44
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Wed Oct 7 10:55:41 2015 -0700

      bpf: fix cb access in socket filter programs

      eBPF socket filter programs may see junk in 'u32 cb[5]' area,
      since it could have been used by protocol layers earlier.

      For socket filter programs used in af_packet we need to clean
      20 bytes of skb->cb area if it could be used by the program.
      For programs attached to TCP/UDP sockets we need to save/restore
      these 20 bytes, since it's used by protocol layers.

      Remove SK_RUN_FILTER macro, since it's no longer used.

      Long term we may move this bpf cb area to per-cpu scratch, but that
      requires addition of new 'per-cpu load/store' instructions,
      so not suitable as a short term fix.

      Fixes: d691f9e8d440 ("bpf: allow programs to write to certain skb fields")
      Reported-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9849777d0e27cdd2902805be51da73e7c79578c
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 23:28:58 2015 +0200

      genirq: Add flag to force mask in disable_irq[_nosync]()

      If an irq chip does not implement the irq_disable callback, then we
      use a lazy approach for disabling the interrupt. That means that the
      interrupt is marked disabled, but the interrupt line is not
      immediately masked in the interrupt chip. It only becomes masked if
      the interrupt is raised while it's marked disabled. We use this to avoid
      possibly expensive mask/unmask operations for common case operations.

      Unfortunately there are devices which do not allow the interrupt to be
      disabled easily at the device level. They are forced to use
      disable_irq_nosync(). This can result in taking each interrupt twice.

      Instead of enforcing the non lazy mode on all interrupts of a irq
      chip, provide a settings flag, which can be set by the driver for that
      particular interrupt line.

      Reported-and-tested-by: Duc Dang <dhdang@xxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/alpine.DEB.2.11.1510092348370.6097@nanos

  commit 374a3a3916a70fc6236bc2b8f8ac02548a128a54
  Author: Borislav Petkov <bp@xxxxxxxxx>
  Date:   Fri Oct 9 19:08:59 2015 +0200

      x86/entry/64/compat: Document sysenter_fix_flags's reason for existence

      The code under the label can normally be inline, without the
      jumping back and forth but the latter is an optimization.

      Document that.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Acked-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151009170859.GA24266@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0ce423b6492a02be11662bfaa837dd16945aad3e
  Author: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 23:26:07 2015 +0100

      efi: Use the generic efi.memmap instead of 'memmap'

      Guenter reports that commit:

        7bf793115dd9 ("efi, x86: Rearrange efi_mem_attributes()")

      breaks the IA64 compilation with the following error:

        drivers/built-in.o: In function `efi_mem_attributes': (.text+0xde962): 
undefined reference to `memmap'

      Instead of using the (rather poorly named) global variable
      'memmap' which doesn't exist on IA64, use efi.memmap which
      points to the 'memmap' object on x86 and arm64 and which is NULL
      for IA64.

      The fact that efi.memmap is NULL for IA64 is OK because IA64
      provides its own implementation of efi_mem_attributes().

      Reported-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Jonathan Zhang <zjzhang@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151003222607.GA2682@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fcf8ab690e3decf8335c51fdabea773a3f5ea026
  Merge: 0e841b0 4f64cb6
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:04:51 2015 +0200

      Merge tag 'gic-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/maz/arm-platforms into irq/core

      GIC updates for Linux 4.4 from Marc Zyngier:

      - Enable basic GICv3 support on 32bit ARM (mostly for running VMs with
        more than 8 virtual CPUs)
      - arm64 changes to deal with firmware limitations that forces a GICv3
        to be used as a GICv2
      - A GICv2m erratum workaround on Applied Micro X-Gene2

  commit 825fcfce81921c9cc4ef801d844793815721e458
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Sat Oct 10 17:22:16 2015 +0100

      MAINTAINERS: Change Matt Fleming's email address

      My Intel email address will soon expire. Replace it with my
      personal address so people still know where to send patches.

      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444494136-10333-1-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4a06c8ac2fb3ef484579ce44f9b809bd310fad48
  Merge: 97d0c93 7219473
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 11:17:45 2015 -0700

      Merge tag 'usb-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

      Pull USB fixes from Greg KH:
       "Here are some small USB and PHY fixes and quirk updates for 4.3-rc5.

        Nothing major here, full details in the shortlog, and all of these
        have been in linux-next for a while"

      * tag 'usb-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:
        usb: Add device quirk for Logitech PTZ cameras
        USB: chaoskey read offset bug
        USB: Add reset-resume quirk for two Plantronics usb headphones.
        usb: renesas_usbhs: Add support for R-Car H3
        usb: renesas_usbhs: fix build warning if 64-bit architecture
        usb: gadget: bdc: fix memory leak
        phy: berlin-sata: Fix module autoload for OF platform driver
        phy: rockchip-usb: power down phy when rockchip phy probe
        phy: qcom-ufs: fix build error when the component is built as a module

  commit 97d0c931c043646abd1f4c5446a8dfcaba162004
  Merge: 91dbc04 0c556271
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 11:09:55 2015 -0700

      Merge tag 'tty-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

      Pull tty/serial driver fixes from Greg KH:
       "Here are a few bug fixes for the tty core that resolve reported
        issues, and some serial driver fixes as well (including the
        much-reported imx driver problem)

        All of these have been in linux-next with no reported problems"

      * tag 'tty-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:
        drivers/tty: require read access for controlling terminal
        serial: 8250: add uart_config entry for PORT_RT2880
        tty: fix data race on tty_buffer.commit
        tty: fix data race in tty_buffer_flush
        tty: fix data race in flush_to_ldisc
        tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
        serial: atmel: fix error path of probe function
        tty: don't leak cdev in tty_cdev_add()
        Revert "serial: imx: remove unbalanced clk_prepare"

  commit 91dbc047e9c1284634ae3570c0382c2288c5548b
  Merge: ef19df6 b1d562a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 11:03:31 2015 -0700

      Merge tag 'staging-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

      Pull staging fixes from Greg KH:
       "Here are two tiny staging tree fixes for 4.3-rc5.

        One fixes the broken speakup subsystem as reported by a user, and the
        other removes an entry in the MAINTAINERS file for a developer that
        doesn't want to be listed anymore"

      * tag 'staging-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
        staging: speakup: fix speakup-r regression
        MAINTAINERS: Remove myself as nvec co-maintainer

  commit ef19df60c9506e7ffe78d6a60048936c4e76a0a2
  Merge: bbecce8 41ada9d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 10:58:27 2015 -0700

      Merge tag 'char-misc-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

      Pull char/misc driver fixes from Greg KH:
       "Here are some small fixes for some misc drivers that resolve some
        reported issues.  All of these have been linux-next for a while"

      * tag 'char-misc-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:
        mcb: Fix error handling in mcb_pci_probe()
        mei: hbm: fix error in state check logic
        nvmem: sunxi: Check for memory allocation failure
        nvmem: core: Fix memory leak in nvmem_cell_write
        nvmem: core: Handle shift bits in-place if cell->nbits is non-zero
        nvmem: core: fix the out-of-range leak in read/write()

  commit bbecce8d764807701f2ff56b440cd5f787b0c844
  Merge: 1d8a12d da11f98
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 10:51:55 2015 -0700

      Merge git://git.linux-mips.org/pub/scm/ralf/upstream-linus

      Pull MIPS fixes from Ralf Baechle:

       - MIPS didn't define the new ioremap_uc.  Defined it as an alias for
         ioremap_uncached.

       - Replace workaround for MIPS16 build issue with a correct one.

      * git://git.linux-mips.org/pub/scm/ralf/upstream-linus:
        MIPS: Define ioremap_uc
        MIPS: UAPI: Ignore __arch_swab{16,32,64} when using MIPS16
        Revert "MIPS: UAPI: Fix unrecognized opcode WSBH/DSBH/DSHD when using 
MIPS16."

  commit 1d8a12d1de9d9d025d66c1b2a580a293cc5050e5
  Merge: daf3761 9d99c71
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 10:31:13 2015 -0700

      Merge branch 'stable/for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/konrad/swiotlb

      Pull swiotlb fixlet from Konrad Rzeszutek Wilk:
       "Enable the SWIOTLB under 32-bit PAE kernels.

        Nowadays most distros enable this due to CONFIG_HYPERVISOR|XEN=y which
        select SWIOTLB.  But for those that are not interested in
        virtualization and wanting to use 32-bit PAE kernels and wanting to
        have working DMA operations - this configures it for them"

      * 'stable/for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/konrad/swiotlb:
        swiotlb: Enable it under x86 PAE

  commit daf3761c9fcde0f4ca64321cbed6c1c86d304193
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 13:44:34 2015 -0400

      namei: results of d_is_negative() should be checked after dentry 
revalidation

      Leandro Awa writes:
       "After switching to version 4.1.6, our parallelized and distributed
        workflows now fail consistently with errors of the form:

        T34: ./regex.c:39:22: error: config.h: No such file or directory

        From our 'git bisect' testing, the following commit appears to be the
        possible cause of the behavior we've been seeing: commit 766c4cbfacd8"

      Al Viro says:
       "What happens is that 766c4cbfacd8 got the things subtly wrong.

        We used to treat d_is_negative() after lookup_fast() as "fall with
        ENOENT".  That was wrong - checking ->d_flags outside of ->d_seq
        protection is unreliable and failing with hard error on what should've
        fallen back to non-RCU pathname resolution is a bug.

        Unfortunately, we'd pulled the test too far up and ran afoul of
        another kind of staleness.  The dentry might have been absolutely
        stable from the RCU point of view (and we might be on UP, etc), but
        stale from the remote fs point of view.  If ->d_revalidate() returns
        "it's actually stale", dentry gets thrown away and the original code
        wouldn't even have looked at its ->d_flags.

        What we need is to check ->d_flags where 766c4cbfacd8 does (prior to
        ->d_seq validation) but only use the result in cases where we do not
        discard this dentry outright"

      Reported-by: Leandro Awa <lawa@xxxxxxxxxx>
      Link: https://bugzilla.kernel.org/show_bug.cgi?id=104911
      Fixes: 766c4cbfacd8 ("namei: d_is_negative() should be checked...")
      Tested-by: Leandro Awa <lawa@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.1+
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
      Acked-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 149fadf2ce82e0f8632fc1fb10a7ba6e0c977ee2
  Merge: 71419b7 670aee3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 18:39:04 2015 -0700

      Merge tag 'pm+acpi-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull power management and ACPI fixes from Rafael Wysocki:
       "These are four fixes for bugs in the devfreq and cpufreq subsystems,
        including two regression fixes (one for a recent regression and one
        for a problem introduced in 4.2).

        Specifics:

         - Two fixes for cpufreq regressions, an acpi-cpufreq driver one
           introduced during the 4.2 cycle when we started to preserve cpufreq
           directories for offline CPUs and a general one introduced recently
           (Srinivas Pandruvada).

         - Two devfreq fixes, one for a double kfree() in an error code path
           and one for a confusing sysfs-related failure (Geliang Tang, Tobias
           Jakobi)"

      * tag 'pm+acpi-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        cpufreq: prevent lockup on reading scaling_available_frequencies
        cpufreq: acpi_cpufreq: prevent crash on reading freqdomain_cpus
        PM / devfreq: fix double kfree
        PM / devfreq: Fix governor_store()

  commit 71419b7b8484531626251d56aa6d48d90e646df1
  Merge: f4ba1cf 7a5692e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 18:01:26 2015 -0700

      Merge branch 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile

      Pull strscpy powerpc fix from Chris Metcalf.

      Fix powerpc big-endian build.

      * 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile:
        arch/powerpc: provide zero_bytemask() for big-endian

  commit f4ba1cf8a40bc9f136f8e050e79a81112bf02ccd
  Merge: fe621fd 601d629
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:56:00 2015 -0700

      Merge tag 'sound-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

      Pull sound fixes from Takashi Iwai:
       "We see various small fixes, but nothing looks too scary, all are small
        gentle bug fixes:

         - Most of changes are for ASoC codecs: Realtek, SGTL5000, TAS2552,
           TLV320, WM8962

         - A couple of dwc and imx-ssi fixes

         - Usual oneliner HD-audio quirks

         - An old emux synth code fix"

      * tag 'sound-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:
        MAINTAINERS: Remove wm97xx entry
        ASoC: tas2552: fix dBscale-min declaration
        ALSA: synth: Fix conflicting OSS device registration on AWE32
        ALSA: hda - Disable power_save_node for IDT 92HD73xx chips
        ALSA: hda - Apply SPDIF pin ctl to MacBookPro 12,1
        ALSA: hda: Add dock support for ThinkPad T550
        ASoC: dwc: fix dma stop transferring issue
        ASoC: dwc: correct irq clear method
        ASoC: tlv320aic3x: Prevent writing reserved registers on tlv320aic3104 
CODECs
        ASoC: rt5645: Correct the naming and setting of ADC Boost Volume Control
        ASoC: sgtl5000: fix wrong register MIC_BIAS_VOLTAGE setup on probe
        ASoC: wm8962: balance pm_runtime_enable
        ASoC: imx-ssi: Fix DAI hardware signal inversions
        ASoC: sgtl5000: fix error message output for MicBias voltage
        ASoC: db1200: Fix DAI link format for db1300 and db1550

  commit fe621fdead1165599a7422821a2923953fa1f8de
  Merge: 8140e73 9f30a04
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:33:15 2015 -0700

      Merge tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux

      Pull clk fixes from Stephen Boyd:
       "A Samsung driver fix and a handful of TI driver fixes"

      * tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:
        clk: ti: dflt: fix enable_reg validity check
        clk: ti: fix dual-registration of uart4_ick
        clk: ti: clk-7xx: Remove hardwired ABE clock configuration
        clk: samsung: fix cpu clock's flags checking

  commit 8140e73614c9f4685dbede6fd55605ee00fdb01c
  Merge: 0444555 88c6eb0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:25:26 2015 -0700

      Merge tag 'mmc-v4.3-rc4' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC fixes from Ulf Hansson:
       "MMC host:
         - omap_hsmmc: Fix boot regressions for omap4430
         - omap_hsmmc: Fix legacy boot regression for omap3
         - sdhci-pxav3: Fix some clock issues for Armada 38x
         - sdhci-pxav3: Fix error handling at probe
         - sdhci-of-at91: Fix clock stabilization problem"

      * tag 'mmc-v4.3-rc4' of git://git.linaro.org/people/ulf.hansson/mmc:
        mmc: sdhci-of-at91: use SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST quirk
        mmc: sdhci: add quirk SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST
        mmc: sdhci-pxav3: fix error handling of armada_38x_quirks
        mmc: sdhci-pxav3: disable clock inversion for HS MMC cards
        mmc: sdhci-pxav3: remove broken clock base quirk for Armada 38x sdhci 
driver
        mmc: host: omap_hsmmc: Fix MMC for omap3 legacy booting
        Revert "mmc: host: omap_hsmmc: use regulator_is_enabled to find pbias 
status"

  commit 0444555670350b419496686f4012b9cef808c105
  Merge: 175d58c b0d3cc0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:58:11 2015 -0700

      Merge tag 'dm-4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull dm fixes from Mike Snitzer:
       "Three stable fixes:

         - DM core AB-BA deadlock fix in the device destruction path (vs
           device creation's DM table swap).

         - DM raid fix to properly round up the region_size to the next
           power-of-2.

         - DM cache fix for a NULL pointer seen while switching from the
           "cleaner" cache policy.

        Two fixes for regressions introduced during the 4.3 merge:

         - request-based DM error propagation regressed due to incorrect
           changes introduced when adding the bi_error field to bio.

         - DM snapshot fix to only support snapshots that overflow if the
           client (e.g. lvm2) is prepared to deal with the associated
           snapshot status interface change"

      * tag 'dm-4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm snapshot: add new persistent store option to support overflow
        dm cache: fix NULL pointer when switching from cleaner policy
        dm: fix request-based dm error reporting
        dm raid: fix round up of default region size
        dm: fix AB-BA deadlock in __dm_destroy()

  commit 175d58cfed70f132b8d4df39e19267ad6094bd16
  Merge: 38aa0a5 7d35199
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:39:35 2015 -0700

      Merge branch 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes from Chris Mason:
       "These are small and assorted.  Neil's is the oldest, I dropped the
        ball thinking he was going to send it in"

      * 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        Btrfs: support NFSv2 export
        Btrfs: open_ctree: Fix possible memory leak
        Btrfs: fix deadlock when finalizing block group creation
        Btrfs: update fix for read corruption of compressed and shared extents
        Btrfs: send, fix corner case for reference overwrite detection

  commit 38aa0a59a6669af702c523e1d525b24ff5fd471b
  Merge: 5163ac7 c91aed9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:34:45 2015 -0700

      Merge tag 'nfsd-4.3-1' of git://linux-nfs.org/~bfields/linux

      Pull nfsd bugfix from Bruce Fields:
       "Just one RDMA bugfix"

      * tag 'nfsd-4.3-1' of git://linux-nfs.org/~bfields/linux:
        svcrdma: handle rdma read with a non-zero initial page offset

  commit 5163ac76370dc5298219c92a4befeb9e23de6f66
  Merge: c6fa8e6 5a37b15
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 15:54:14 2015 -0700

      Merge tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Arnd Bergmann:
       "The fixes for this week include one small patch that was years in the
        making and that finally fixes using all eight CPUs on exynos542x.

        The rest are lots of minor changes for sunxi, imx, exynos and shmobile

         - fixing the minimum voltage for Allwinner A20
         - thermal boot issue on SMDK5250.
         - invalid clock used for FIMD IOMMU.
         - audio on Renesas r8a7790/r8a7791
         - invalid clock used for FIMD IOMMU
         - LEDs on exynos5422-odroidxu3-common
         - usb pin control for imx-rex
         - imx53: fix PMIC interrupt level
         - a Makefile typo"

      * tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:
        ARM: dts: Fix wrong clock binding for sysmmu_fimd1_1 on exynos5420
        ARM: dts: Fix bootup thermal issue on smdk5250
        ARM: shmobile: r8a7791 dtsi: Add CPG/MSTP Clock Domain for sound
        ARM: shmobile: r8a7790 dtsi: Add CPG/MSTP Clock Domain for sound
        arm-cci500: Don't enable PMU driver by default
        ARM: dts: fix usb pin control for imx-rex dts
        ARM: imx53: qsrb: fix PMIC interrupt level
        ARM: imx53: include IRQ dt-bindings header
        ARM: dts: add suspend opp to exynos4412
        ARM: dts: Fix LEDs on exynos5422-odroidxu3
        ARM: EXYNOS: reset Little cores when cpu is up
        ARM: dts: Fix Makefile target for sun4i-a10-itead-iteaduino-plus
        ARM: dts: sunxi: Raise minimum CPU voltage for sun7i-a20 to meet SoC 
specifications

  commit 4f64cb65bf76fbd89c62d8e69c7bf75091950739
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:19 2015 +0100

      arm/arm64: KVM: Only allow 64bit hosts to build VGICv3

      Hardware virtualisation of GICv3 is only supported by 64bit hosts for
      the moment. Some VGICv3 bits are missing from the 32bit side, and this
      patch allows to still be able to build 32bit hosts when CONFIG_ARM_GIC_V3
      is selected.

      To this end, we introduce a new option, CONFIG_KVM_ARM_VGIC_V3, that is
      only enabled on the 64bit side. The selection is done unconditionally
      because CONFIG_ARM_GIC_V3 is always enabled on arm64.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 0b28f1db3dd2d4377c4a4dd8f85713ef44f11a25
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:18 2015 +0100

      ARM: virt: select ARM_GIC_V3

      This patch allows ARM guests to use GICv3 on an arm64 host

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit d5cd50d318f70fc62cc2e1399f5f4a0803291395
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:17 2015 +0100

      ARM: add 32bit support to GICv3

      Implement the system and memory-mapped register accesses in
      asm/arch_gicv3.h for 32bit architectures.

      This patch is a straightforward translation of the arm64 header. 64bit
      accesses are done in two times and don't need atomicity: TYPER is
      read-only, and the upper-word of IROUTER is always zero on 32bit
      architectures.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 72c971262f00185b4c6208812645c3feab4c77a3
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:16 2015 +0100

      irqchip/gic-v3: Specialize readq and writeq accesses

      On 32bit platforms, we cannot assure that an I/O ldrd or strd will be
      done atomically. Besides, an hypervisor would be unable to emulate such
      accesses.
      In order to allow the AArch32 version of the driver to split them into
      two 32bit accesses while keeping the requirement for atomic writes, this
      patch specializes the IROUTER and TYPER accesses.
      Since the latter is an ID register, it won't need to be read atomically,
      but we still avoid future confusion by using gic_read_typer instead of a
      generic gic_readq.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit f6c86a41e1dc2214363b00cc0eadb8a5401c892d
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:15 2015 +0100

      irqchip/gic-v3: Change unsigned types for AArch32 compatibility

      This patch does a few simple compatibility-related changes:
      - change the system register access prototypes to their actual size,
      - homogenise mpidr accesses with unsigned long,
      - force the 64bit register values to unsigned long long.

      Note: the list registers are 64bit on GICv3, but the AArch32 vGIC driver
      will need to split their values into two 32bit registers: LRn and LRCn.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 7936e914f7b0827c2dcfe63fbefdc21de2d61dcb
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:14 2015 +0100

      irqchip/gic-v3: Refactor the arm64 specific parts

      This patch moves the GICv3 system register access helpers to
      arch/arm64/. Their 32bit counterparts will need to use mrc/mcr accesses
      instead of mrs_s/msr_s.

      [maz: fixed conflict with Cavium erratum handling]
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit ee5f7d6462c56ba083d5d80aa0d69914068a59ae
  Author: Duc Dang <dhdang@xxxxxxx>
  Date:   Tue Oct 6 15:32:38 2015 -0700

      irqchip/gic-v2m: Add workaround for APM X-Gene GICv2m erratum

      APM X-Gene GICv2m implementation has an erratum where the
      MSI data needs to be the offset from the spi_start in order to
      trigger the correct MSI interrupt. This is different from the
      standard GICv2m implementation where the MSI data is the absolute
      value within the range from spi_start to (spi_start + num_spis)
      of each v2m frame.

      This patch reads MSI_IIDR register (present in all GICv2m
      implementations) to identify X-Gene GICv2m implementation and
      apply workaround to change the data portion of MSI vector.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Duc Dang <dhdang@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 6d32ab2d8a982ffd46c4dcad9739292f57bc26de
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 12:05:17 2015 +0100

      arm64: Update booting requirements for GICv3 in GICv2 mode

      The current requirements do not describe the case where a GICv3
      system gets booted with system register access disabled, and
      expect the kernel to drive GICv3 in GICv2 mode.

      Describe the expected settings for that particular case.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 76e52dd01cabc340c1a58f540c9d6bf0e79c6b23
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 12:01:16 2015 +0100

      irqchip/gic: Warn if GICv3 system registers are enabled

      When using a GICv3 in compatibility (v2) mode, having GICv3 system
      register access enabled is not really compliant with the architecture.

      Warn if the firmware (or the hypervisor) has been lazy.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 963fcd40958711cecf9e9a1a8525f88b782d6a98
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 11:50:04 2015 +0100

      arm64: cpufeatures: Check ICC_EL1_SRE.SRE before enabling 
ARM64_HAS_SYSREG_GIC_CPUIF

      As the firmware (or the hypervisor) may have disabled SRE access,
      check that SRE can actually be enabled before declaring that we
      do have that capability.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 7cabd0086acd8f204d9b11a9b0aca90d6a9fcc5b
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 11:48:01 2015 +0100

      irqchip/gic-v3: Make gic_enable_sre an inline function

      In order for gic_enable_sre to be used by the arm64 core code,
      move it to arm-gic-v3.h. As a bonus, we now also check if
      system registers have been already enabled, and return early
      if they have.

      In all cases, the function now returns a boolean indicating if
      the enabling has been successful.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit d271976dbb31c3ac5653745d03d68c4235d34119
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 11:39:59 2015 +0100

      arm64: el2_setup: Make sure ICC_SRE_EL2.SRE sticks before using GICv3 
sysregs

      Contrary to what was originally expected, EL3 firmware can (for whatever
      reason) disable GICv3 system register access. In this case, the kernel
      explodes very early.

      Work around this by testing if the SRE bit sticks or not. If it doesn't,
      abort the GICv3 setup, and pray that the firmware has passed a DT that
      doesn't contain a GICv3 node.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit b0d3cc011e532d8c9db76cf717bcafa53c135595
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Thu Oct 8 18:05:41 2015 -0400

      dm snapshot: add new persistent store option to support overflow

      Commit 76c44f6d80 introduced the possibly for "Overflow" to be reported
      by the snapshot device's status.  Older userspace (e.g. lvm2) does not
      handle the "Overflow" status response.

      Fix this incompatibility by requiring newer userspace code, that can
      cope with "Overflow", request the persistent store with overflow support
      by using "PO" (Persistent with Overflow) for the snapshot store type.

      Reported-by: Zdenek Kabelac <zkabelac@xxxxxxxxxx>
      Fixes: 76c44f6d80 ("dm snapshot: don't invalidate on-disk image on 
snapshot write overflow")
      Reviewed-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit 0e841b04c829f59a5d5745f98d2857f48882efe9
  Author: Chen-Yu Tsai <wens@xxxxxxxx>
  Date:   Tue Oct 6 00:42:14 2015 +0800

      irqchip/sunxi-nmi: Switch to of_io_request_and_map() from of_iomap()

      Switch to the new of_io_request_and_map() call, so the IO resource is
      properly held, and also shows up in /proc/iomem.

      Signed-off-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444063334-19832-3-git-send-email-wens@xxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2d6caaed0997f335ce341703083c989c91ad76f4
  Author: Chen-Yu Tsai <wens@xxxxxxxx>
  Date:   Tue Oct 6 00:42:13 2015 +0800

      irqchip/sunxi-nmi: Use driver name instead of DT node name for 
identification

      The device tree node name is typically "interrupt-controller", which is
      rather useless when used in printk messages and irq chip names for
      identification purposes. Use the driver name "sunxi-nmi" instead.

      While at it move the identifier from pr_err() calls to the pr_fmt macro.

      Also remove the "__func__" identifier from the error message in the
      interrupt type setting callback, sunxi_sc_nmi_set_type(). The driver
      name in the pr_fmt macro should be enough.

      Signed-off-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444063334-19832-2-git-send-email-wens@xxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit fcf1ae2f7a044cda9956ec7afb487296afff058e
  Author: Feng Wu <feng.wu@xxxxxxxxx>
  Date:   Sat Oct 3 16:20:38 2015 +0800

      genirq: Make irq_set_vcpu_affinity available for CONFIG_SMP=n

      irq_set_vcpu_affinity() is needed when CONFIG_SMP=n, so move the
      definition out of "#ifdef CONFIG_SMP"

      Suggested-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Feng Wu <feng.wu@xxxxxxxxx>
      Cc: jiang.liu@xxxxxxxxxxxxxxx
      Cc: pbonzini@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443860438-144926-1-git-send-email-feng.wu@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e509bd7da149dc34916037484cd7545b2d48a2b0
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 13:12:15 2015 +0300

      genirq: Allow migration of chained interrupts by installing default action

      When a CPU is offlined all interrupts that have an action are migrated to
      other still online CPUs. However, if the interrupt has chained handler
      installed this is not done. Chained handlers are used by GPIO drivers 
which
      support interrupts, for instance.

      When the affinity is not corrected properly we end up in situation where
      most interrupts are not arriving to the online CPUs anymore. For example 
on
      Intel Braswell system which has SD-card card detection signal connected to
      a GPIO the IO-APIC routing entries look like below after CPU1 is offlined:

        pin30, enabled , level, low , V(52), IRR(0), S(0), logical , D(03), M(1)
        pin31, enabled , level, low , V(42), IRR(0), S(0), logical , D(03), M(1)
        pin32, enabled , level, low , V(62), IRR(0), S(0), logical , D(03), M(1)
        pin5b, enabled , level, low , V(72), IRR(0), S(0), logical , D(03), M(1)

      The problem here is that the destination mask still contains both CPUs 
even
      if CPU1 is already offline. This means that the IO-APIC still routes
      interrupts to the other CPU as well.

      We solve the problem by providing a default action for chained interrupts.
      This action allows the migration code to correct affinity (as it finds
      desc->action != NULL).

      Also make the default action handler to emit a warning if for some reason 
a
      chained handler ends up calling it.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444039935-30475-1-git-send-email-mika.westerberg@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 670aee3fc7ac37ae947f8b582d87b51d5fa36524
  Merge: d61e87a 55582bc
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Oct 9 22:13:30 2015 +0200

      Merge branches 'pm-devfreq' and 'pm-cpufreq'

      * pm-devfreq:
        PM / devfreq: fix double kfree
        PM / devfreq: Fix governor_store()

      * pm-cpufreq:
        cpufreq: prevent lockup on reading scaling_available_frequencies
        cpufreq: acpi_cpufreq: prevent crash on reading freqdomain_cpus

  commit 8c3ad9cb7343dc5f61b8cf3cdbe1016c5e7c2c8b
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Fri Oct 9 15:03:26 2015 +0200

      nfsd/blocklayout: accept any minlength

      Recent Linux clients have started to send GETLAYOUT requests with
      minlength less than blocksize.

      Servers aren't really allowed to impose this kind of restriction on
      layouts; see RFC 5661 section 18.43.3 for details.

      This has been observed to cause indefinite hangs on fsx runs on some
      clients.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit 217d453d473c5ddfd140a06bf9d8575218551020
  Author: Yang Yingliang <yangyingliang@xxxxxxxxxx>
  Date:   Thu Sep 24 17:32:14 2015 +0800

      arm64: fix a migrating irq bug when hotplug cpu

      When cpu is disabled, all irqs will be migratged to another cpu.
      In some cases, a new affinity is different, the old affinity need
      to be updated and if irq_set_affinity's return value is 
IRQ_SET_MASK_OK_DONE,
      the old affinity can not be updated. Fix it by using irq_do_set_affinity.

      And migrating interrupts is a core code matter, so use the generic
      function irq_migrate_all_off_this_cpu() to migrate interrupts in
      kernel/irq/migration.c.

      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Russell King - ARM Linux <linux@xxxxxxxxxxxxxxxx>
      Cc: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Yang Yingliang <yangyingliang@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5adad9915472e180712030d730cdc476c6f8a60b
  Author: Joerg Roedel <jroedel@xxxxxxx>
  Date:   Fri Oct 9 16:23:33 2015 +0200

      iommu/amd: Fix NULL pointer deref on device detach

      When a device group is detached from its domain, the iommu
      core code calls into the iommu driver to detach each device
      individually.

      Before this functionality went into the iommu core code, it
      was implemented in the drivers, also in the AMD IOMMU
      driver as the device alias handling code.

      This code is still present, as there might be aliases that
      don't exist as real PCI devices (and are therefore invisible
      to the iommu core code).

      Unfortunatly it might happen now, that a device is unbound
      multiple times from its domain, first by the alias handling
      code and then by the iommu core code (or vice verca).

      This ends up in the do_detach function which dereferences
      the dev_data->domain pointer. When the device is already
      detached, this pointer is NULL and we get a kernel oops.

      Removing the alias code completly is not an option, as that
      would also remove the code which handles invisible aliases.
      The code could be simplified, but this is too big of a
      change outside the merge window.

      For now, just check the dev_data->domain pointer in
      do_detach and bail out if it is NULL.

      Reported-by: Andreas Hartmann <andihartmann@xxxxxxxxxx>
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit a78afccbbaa6d2df49768cabad8af28a0a84181d
  Merge: 348a65c f1e0bb0
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Fri Oct 9 16:47:34 2015 +0100

      Merge branch 'irq/for-arm' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      * 'irq/for-arm' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        genirq: Introduce generic irq migration for cpu hotunplug

  commit cbbc00be2ce3af5d708226a9563fa27cb4e6b6b8
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 22:07:31 2015 +0800

      iommu/amd: Prevent binding other PCI drivers to IOMMU PCI devices

      AMD IOMMU driver makes use of IOMMU PCI devices, so prevent binding other
      PCI drivers to IOMMU PCI devices.

      This fixes a bug reported by Boris that system suspend/resume gets broken
      on AMD platforms. For more information, please refer to:
        https://lkml.org/lkml/2015/9/26/89

      Fixes: 991de2e59090 ("PCI, x86: Implement pcibios_alloc_irq() and 
pcibios_free_irq()")
      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit e8973a889e69cb86cac08bec2863c878c0d27af9
  Author: Sarbojit Ganguly <ganguly.s@xxxxxxxxxxx>
  Date:   Fri Oct 9 12:10:02 2015 +0100

      ARM: 8443/1: Adding support for atomic half word exchange

      Since support for half-word atomic exchange was not there and Qspinlock
      on ARM requires it, modified __xchg() to add support for that as well.
      ARMv6 and lower does not support ldrex{b,h} so, added a guard code to
      prevent build breaks.

      Signed-off-by: Sarbojit Ganguly <ganguly.s@xxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit e1b8c05dccc7d3de8c49c92c41b2b5ac7d8275b2
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:18:09 2015 +0100

      ARM: clean up TWD after previous patch

      Rename feat_c3stop to twd_features to match the other variables in this
      file.  Initialise it with the standard features that we always support,
      and arrange to set the CLOCK_EVT_FEAT_C3STOP when appropriate.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 194444c52edd857210b3895e83ce45c64b58e251
  Author: Marc Gonzalez <marc_gonzalez@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 10:20:47 2015 +0100

      ARM: 8441/2: twd: Don't set CLOCK_EVT_FEAT_C3STOP unconditionally

      In 5388a6b266 ("ARM: SMP: Always enable clock event broadcast support")
      Russell noted that "the TWD local timers are unable to wake up the CPU
      when it is placed into a low power mode".

      However, some platforms do not stop the TWD block in low-power mode,
      and can thus use the TWD timer in one-shot mode, without setting up
      a broadcast device.

      Make the driver check for the "always-on" boolean property, and set
      the CLOCK_EVT_FEAT_C3STOP flag accordingly.

      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Marc Gonzalez <marc_gonzalez@xxxxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit ff5138f3af4ed61ed42e00d7d771a0502460488f
  Author: Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
  Date:   Tue Oct 6 16:40:53 2015 +0100

      ARM: 8440/1: remove obsolete documentation

      The Victor target has been removed from mainline long ago.

      Signed-off-by: Nicolas Pitre <nico@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 10abc7df9277a81971924a6c03f74e86d799daf1
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 9 15:50:11 2015 +0100

      irqdomain: Add an accessor for the of_node field

      As we're about to remove the of_node field from the irqdomain
      structure, introduce an accessor for it. Subsequent patches
      will take care of the actual repainting.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444402211-1141-1-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e3096c9c7c645279808a6bf7ac2031b1895ddffb
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 22:59:40 2015 +0200

      genirq: Fix handle_bad_irq kerneldoc comment

      A recent cleanup removed the 'irq' parameter from many functions, but
      left the documentation for this in place for at least one function.

      This removes it.

      Fixes: bd0b9ac405e1 ("genirq: Remove irq argument from irq flow handlers")
      Reported-by: kbuild test robot <lkp@xxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: kbuild-all@xxxxxx
      Cc: Austin Schuh <austin@xxxxxxxxxxxxxxxx>
      Cc: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/5400000.cD19rmgWjV@wuerfel
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 9d67dc5da59d63f746aad8f6ec4fbb86d6486f76
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 22:24:50 2015 +0200

      genirq: Export handle_bad_irq

      A cleanup of the omap gpio driver introduced a use of the
      handle_bad_irq() function in a device driver that can be
      a loadable module.

      This broke the ARM allmodconfig build:

      ERROR: "handle_bad_irq" [drivers/gpio/gpio-omap.ko] undefined!

      This patch exports the handle_bad_irq symbol in order to
      allow the use in modules.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: Austin Schuh <austin@xxxxxxxxxxxxxxxx>
      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/5847725.4IBopItaOr@wuerfel
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d49ae37c613f7cc1f4c1fd6ef073d60c32e000dd
  Merge: 4d886d6 b3c8ec3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:52:35 2015 -0700

      Merge branch 'net-non-modular'

      Paul Gortmaker says:

      ====================
      make non-modular code explicitly non-modular

      [v2: drop m68k patches that Geert converted to modules; add one ARM
       driver patch ; update net-next baseline to today; switch to ARM
       for build testing.]

      In a previous merge window, we made changes to allow better
      delineation between modular and non-modular code in commit
      0fd972a7d91d6e15393c449492a04d94c0b89351 ("module: relocate module_init
      from init.h to module.h").  This allows us to now ensure module code
      looks modular and non-modular code does not accidentally look modular
      just to avoid suffering build breakage.

      Here we target code that is, by nature of their Makefile and/or
      Kconfig settings, only available to be built-in, but implicitly
      presenting itself as being possibly modular by way of using modular
      headers, macros, and functions.

      The goal here is to remove that illusion of modularity from these
      files, but in a way that leaves the actual runtime unchanged.
      In doing so, we remove code that has never been tested and adds
      no value to the tree.  And we continue the process of expecting a
      level of consistency between the Kconfig/Makefile of code and the
      code in use itself.

      Fortuntately the net subsystem has relatively few instances, given
      the overall amount of code and drivers it contains.  For comparison
      there are over 300 instances tree wide, resulting in a possible net
      removal of on the order of 5000 lines of unused code.

      Build tested on net-next from today, on ARM, since that is the arch
      where the one ethernet driver changed here is available.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b3c8ec35a93d61fde15eefde2d54ecf2f5950f68
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 17:27:46 2015 -0400

      drivers/net/ethernet: make ti/cpsw-phy-sel.c explicitly non-modular

      The Kconfig currently controlling compilation of this code is:

      drivers/net/ethernet/ti/Kconfig:config TI_CPSW_PHY_SEL
      drivers/net/ethernet/ti/Kconfig:        bool "TI CPSW Switch Phy sel 
Support"

      ...meaning that it currently is not being built as a module by anyone.

      Lets remove the couple traces of modularity so that when reading the
      driver there is no doubt it is builtin-only.

      Since module_platform_driver() uses the same init level priority as
      builtin_platform_driver() the init ordering remains unchanged with
      this commit.

      Also note that MODULE_DEVICE_TABLE is a no-op for non-modular code.

      We also delete the MODULE_LICENSE tag etc. since all that information
      was (or is now) contained at the top of the file in the comments.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Varka Bhadram <varkabhadram@xxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 075640e364f3b46311766f0eff28bd3695637e16
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 17:27:45 2015 -0400

      net/sched: make sch_blackhole.c explicitly non-modular

      The Kconfig currently controlling compilation of this code is:

      net/sched/Kconfig:menuconfig NET_SCHED
      net/sched/Kconfig:      bool "QoS and/or fair queueing"

      ...meaning that it currently is not being built as a module by anyone.

      Lets remove the modular code that is essentially orphaned, so that
      when reading the driver there is no doubt it is builtin-only.

      Since module_init translates to device_initcall in the non-modular
      case, the init ordering remains unchanged with this commit.  We can
      change to one of the other priority initcalls (subsys?) at any later
      date, if desired.

      We also delete the MODULE_LICENSE tag since all that information
      is already contained at the top of the file in the comments.

      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36b9ad8084bd7ecf6d2241beca23e71f5f4b0cf1
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 17:27:44 2015 -0400

      net/dcb: make dcbnl.c explicitly non-modular

      The Kconfig currently controlling compilation of this code is:

      net/dcb/Kconfig:config DCB
      net/dcb/Kconfig:        bool "Data Center Bridging support"

      ...meaning that it currently is not being built as a module by anyone.

      Lets remove the modular code that is essentially orphaned, so that
      when reading the driver there is no doubt it is builtin-only.

      Since module_init translates to device_initcall in the non-modular
      case, the init ordering remains unchanged with this commit.  We can
      change to one of the other priority initcalls (subsys?) at any later
      date, if desired.

      We also delete the MODULE_LICENSE tag etc. since all that information
      is (or is now) already contained at the top of the file in the comments.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Cc: Anish Bhatt <anish@xxxxxxxxxxx>
      Cc: John Fastabend <john.r.fastabend@xxxxxxxxx>
      Cc: Shani Michaeli <shanim@xxxxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b6191aeeec1045decb5964e6b5e8c314f5982c85
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 17:27:43 2015 -0400

      net/core: make sock_diag.c explicitly non-modular

      The Makefile currently controlling compilation of this code lists
      it under "obj-y" ...meaning that it currently is not being built as
      a module by anyone.

      Lets remove the modular code that is essentially orphaned, so that
      when reading the driver there is no doubt it is builtin-only.

      Since module_init translates to device_initcall in the non-modular
      case, the init ordering remains unchanged with this commit.  We can
      change to one of the other priority initcalls (subsys?) at any later
      date, if desired.

      We can't remove module.h since the file uses other module related
      stuff even though it is not modular itself.

      We move the information from the MODULE_LICENSE tag to the top of the
      file, since that information is not captured anywhere else.  The
      MODULE_ALIAS_NET_PF_PROTO becomes a no-op in the non modular case, so
      it is removed.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Craig Gallek <kraig@xxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d886d65ed89f2572727c354162341a4c106a963
  Merge: 8cec75b 0cbf334
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:49:08 2015 -0700

      Merge branch 'net-bool'

      Yaowei Bai says:

      ====================
      net: small improvement

      This patchset makes several functions in net return bool to improve
      readability and/or simplicity because these functions only use one
      or zero as their return value.

      No functional changes.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0cbf334376d5e82d7a2f5cd234ca4f5d0843f3ea
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:29:02 2015 +0800

      net/core: lockdep_rtnl_is_held can be boolean

      This patch makes lockdep_rtnl_is_held return bool due to this
      particular function only using either one or zero as its return
      value.

      In another patch lockdep_is_held is also made return bool.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f06cc7b284f3dfb2c5decbf9fde711b50a530050
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:29:01 2015 +0800

      net/inetdevice: bad_mask can be boolean

      This patch makes bad_mask return bool due to this particular function
      only using either one or zero as its return value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c3225164cf60ccecce2459dcb5813dd798233f2d
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:29:00 2015 +0800

      net/inetdevice: inet_ifa_match can be boolean

      This patch makes inet_ifa_match return bool due to this
      particular function only using either one or zero as its return
      value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 45ae74f56162e7a017c3a4e130cf1bcd8d2d17cc
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:59 2015 +0800

      net/dccp: dccp_bad_service_code can be boolean

      This patch makes dccp_bad_service_code return bool due to these
      particular functions only using either one or zero as their return
      value.

      dccp_list_has_service is also been made return bool in this patchset.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c6119d99bf5df9403a688d267537284e9cc8bcb
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:58 2015 +0800

      net/dccp: dccp_list_has_service can be boolean

      This patch makes dccp_list_has_service return bool due to this
      particular function only using either one or zero as its return
      value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d6fbaea5f635216c9861587c4e658086cf3b1b6b
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:57 2015 +0800

      net/can: can_dropped_invalid_skb can be boolean

      This patch makes can_dropped_invalid_skb return bool due to this
      particular function only using either one or zero as its return
      value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Acked-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 875e08294911b3cb8c60416d64d990809421de29
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:56 2015 +0800

      net/nfnetlink: lockdep_nfnl_is_held can be boolean

      This patch makes lockdep_nfnl_is_held return bool to improve
      readability due to this particular function only using either
      one or zero as its return value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 35498edc6481d588feadee7e76220884d5bbca48
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:55 2015 +0800

      net/ieee80211: ieee80211_is_* can be boolean

      This patch makes ieee80211_is_* return bool to improve
      readability due to these particular functions only using either
      one or zero as their return value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61d03535e4be3a46c1e171a25458237e343195e3
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:54 2015 +0800

      net/netlink: lockdep_genl_is_held can be boolean

      This patch makes lockdep_genl_is_held return bool to improve
      readability due to this particular function only using either
      one or zero as its return value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca7beb1fa776412ff80708ae98a8467fe4c52737
  Merge: 85121d6 d5a5209
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:44:04 2015 -0700

      Merge branch 'mlx'

      Or Gerlitz says:

      ====================
      Mellanox driver update to 4.3-rc4

      Small set of fixes for net, which includes Carol's patches, a fix
      from Achiad to have the right behaviour for mlx5 Eth devices w.r.t
      VLANs in promiscuous mode, a good-bye patch from Ido who left Mellanox
      and the 1st patch from Jiri to our NIC drivers (I love one-liners)...
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d5a52095afddee121b97c4aac250f18d06803b58
  Author: Ido Shamay <idos@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:26:19 2015 +0300

      MAINTAINERS: Update mlx4_en driver entry

      Remove Ido Shamay as co-maintainer for the mlx4 Ethernet driver,
      as he no longer works for Mellanox.

      Signed-off-by: Ido Shamay <idos@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c07543431e9f3d126d083808efa0e76461d8833b
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:26:18 2015 +0300

      net/mlx5e: Disable VLAN filter in promiscuous mode

      When the device was set to promiscuous mode, we didn't disable
      VLAN filtering, which is wrong behaviour, fix that.

      Now when the device is set to promiscuous mode RX packets
      sent over any VLAN (or no VLAN tag at all) will be accepted.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 13b7938883ea6e70e7e23f30dece6f79d7a2961d
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:26:17 2015 +0300

      net/mlx5: Fix typo in mlx5_query_port_pvlc

      We used the wrong register name for querying the PVLC register

      Fixes: a124d13ef59e ('net/mlx5_core: Add more query port helpers')
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 820d39f3c497df6c8e040b8dcc7c19eeaa312701
  Author: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 15:26:15 2015 +0300

      net/mlx4_core: Avoid failing the interrupts test

      Test interrupts fails if not all completion vectors called
      request_irq. This case happens if only mlx4_en is loaded and
      we have more completion vectors than rx rings.

      Fixes: c66fa19c405a ('net/mlx4: Add EQ pool')
      Signed-off-by: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
      Acked-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8cec75bd85cc26f81e85eb20e863cc564d354113
  Merge: 1c43f75 95e1963
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:28:38 2015 -0700

      Merge branch 'mlx-next'

      Or Gerlitz says:

      ==============================
      Mellanox driver update for net-next

      Some small fixes and small enhancements from the team.

      Series applies over net-next commit acb4a6b "tcp: ensure prior synack rtx 
behavior
      with small backlogs".
      ==============================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 95e196337a3bd1a1678e794064d8097600c277de
  Author: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:14:03 2015 +0300

      net/mlx4_core: Fix resource tracker error flow in add_res_range

      The 'for' loop when undoing rb-tree insertions and list-adds in the
      error flow in add_res_range had errors, fix them.

      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a5b3c56ef792009f6aff54ba93bd86ceca3e5bfc
  Author: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 17:14:02 2015 +0300

      net/mlx4_core: Fix mailbox leak in error flow when performing update qp

      The procedure mlx4_update_qp leaks mailboxes in its error-flow, fix that.

      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba4b87aedd7123df4e4cfd1ca4dcfe8a6d756511
  Author: Ido Shamay <idos@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:14:01 2015 +0300

      net/mlx4_en: Add steering rules after RSS creation

      Changed the receive control flow in a way that steering
      rules are added only when the RSS object is already in RTR/RTS mode.
      Some optimization features, which are enabled by the device firmware,
      require this condition in order to be effective.

      Signed-off-by: Ido Shamay <idos@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac6ea6e81a80172612e0c9ef93720f371b198918
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:14:00 2015 +0300

      net/mlx5_core: Use private health thread for each device

      Use a single threaded work queue for each device in the system instead of
      using one thread for any device. This is required so we can concurrently
      process system error handling for all the devices that need that.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0144a95e2ad53a40c62148f44fb0c1f9d2a0d1e9
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:13:59 2015 +0300

      net/mlx5_core: Use accessor functions to read from device memory

      Use ioread function to read health buffer data. In addition, print the
      firmware version as a string for readability and also use dev_err to have
      the device string to be printed.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 020446e01eebc9dbe7eda038e570ab9c7ab13586
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:13:58 2015 +0300

      net/mlx5_core: Prepare cmd interface to system errors handling

      In preparation to handling system errors at the mlx5_core level, change 
the
      interface of cmd_work_handler to accept a 64 bit argument for the vector.

      This allows to encode a flag that signifies when the handler is called
      as a result of a driver logic that wishes to terminate commands that
      the hardware may not be able to terminate. Such command completions
      are detected at the handler and proper return status is encoded.

      To be able to terminate page handler commands, we make sure to set
      the corresponding bit in the bitmask.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5a7883989b1c57513bb4067ca4b42c96d449d1a5
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:13:57 2015 +0300

      net/mlx5_core: Improve mlx5 messages

      Improve the messages printed by the mlx5 macros to include the device
      string. In addition, prefix names used by the macros with two underscores
      to avoid possible name collisions.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1c43f75ad436bbcb4a2526551005f62985dca3ca
  Merge: df71842 ce6fcb3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:05:49 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-08

      This series contains updates to i40e and i40evf only (again).

      Jesse fixes an issue where the driver was issuing a WARN_ON during ring
      size changes because the code was cloning the rx_ring struct but not
      zeroing out the pointers before allocating new memory, so simply zero
      out the pointers.  Also reduced the function call overhead by moving
      the interrupt enable function by moving it to the header file, which it
      in turn allows us to inline it.  Also does a thorough job of code
      cleanup to fix spaces after declarations, remove unnecessary braces
      and breaks, remove another __func__ use and general code tidiness.

      Mitch adds mover verbose error messages when the number of supported VFs
      is reported in driver init and it different from the number reported in
      config space.  Updated the VF driver to now detect a reset with the
      VF_ARQLEN register since the enable bit is cleared when the VF is reset
      and it stays cleared until the VF driver processes the reset and
      re-enables the admin queue which is more reliable than using the
      VFGEN_RSTAT as previously.

      Neerav adds parsing for CEE DCBx TLVs from the LLDP MIB since there is
      a need to get the CEE DesiredCfg Tx by firmware and DCB configuration
      Rx from peer for debug and other application purposes.

      Carolyn fixes a problem where the PF's Flow Director filter table would
      have an entry that the hardware was unable to add, when this occurs an
      invalid entry gets replayed and a valid one is lost.

      Matt fixes an issue where multiple link up messages can be logged
      resulting from admin queue link status timing when link properties are
      changed.

      Shannon adds the ability to control the period link polling through
      ethtool to be able to switch it off and on for debugging link issues.

      Serey explicitly assigns the enum index for each VSI type so that the PF
      and VF always reference to the same VSI type event if the enum lists
      are different.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2bffa1503c5c06192eb1459180fac4416575a966
  Author: Joe Thornber <ejt@xxxxxxxxxx>
  Date:   Fri Oct 9 14:03:38 2015 +0100

      dm cache: fix NULL pointer when switching from cleaner policy

      The cleaner policy doesn't make use of the per cache block hint space in
      the metadata (unlike the other policies).  When switching from the
      cleaner policy to mq or smq a NULL pointer crash (in dm_tm_new_block)
      was observed.  The crash was caused by bugs in dm-cache-metadata.c
      when trying to skip creation of the hint btree.

      The minimal fix is to change hint size for the cleaner policy to 4 bytes
      (only hint size supported).

      Signed-off-by: Joe Thornber <ejt@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 55ad769fde922982533d538bdef37c90a0d82e90
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Aug 27 14:02:33 2015 +0530

      Documentation/features/vm: pte_special now supported by ARC

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 24830fc782a3a740209d39cb27abbf5a9763f61f
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Feb 16 19:01:29 2015 +0530

      ARC: mm: Introduce PTE_SPECIAL

      Needed for THP, but will also come in handy for fast GUP later

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 129cbed54a8b3f80f0eaf49acb14fe835587f6f3
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Dec 5 12:05:05 2013 +0530

      ARC: mm: pte flags comsetic cleanups, comments

      No semantical changes

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit e8a75963a4b9433dca55286e222f4dd1cc1ca76c
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Aug 28 08:39:57 2015 +0530

      ARC: mm: switch pgtable_to to pte_t *

      ARC is the only arch with unsigned long type (vs. struct page *).
      Historically this was done to avoid the page_address() calls in various
      arch hooks which need to get the virtual/logical address of the table.

      Some arches alternately define it as pte_t *, and is as efficient as
      unsigned long (generated code doesn't change)

      Suggested-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit bffb7db279abe86949dabc7e63b6c2500f472a92
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Mon Oct 5 20:46:12 2015 +0800

      ath6kl: drop unlikely behind WARN_ON()

      WARN_ON() already contain an unlikely compiler flag. Drop it.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 706452b06866f950febb91e582c1d06c03ca85ee
  Author: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
  Date:   Tue Sep 29 12:29:49 2015 +0200

      ath: fix DFS timestamp wraparound reset condition

      The DFS pattern detector ought to reset the
      detector lines when a pulse is added with
      lower time stamp than the previous (which
      indicates a TSF restart).

      This did not work so far and is fixed with
      this patch.

      The modification does not change detection
      performance within the driver, since it
      only ensures early reset (which is later
      performed by the PRI detectors anyway).
      It is relevant for synthetic tests and
      statistical evaluations, where millions
      of pulse patterns are processed and an
      early reset helps reducing load.

      Signed-off-by: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 101d1f7fbf7dbb881f808c0fdc23124051ac5da6
  Author: Colin Ian King <colin.king@xxxxxxxxxxxxx>
  Date:   Mon Sep 7 14:49:05 2015 +0100

      ath6kl: remove redundant null pointer check on send_pkt

      The check for send_pkt being NULL is redundant before the call
      to htc_reclaim_txctrl_buf, therefore it should be removed. This was
      detected by static analysis by cppcheck.

      Signed-off-by: Colin Ian King <colin.king@xxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit f13e0630826f961732f3192282a6c249bb6208c1
  Author: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:27 2015 +0300

      wil6210: Do no schedule firmware recovery during reset flow

      During reset flow, ignore firmware errors detected prior
      to the actual hardware reset as the recovery flow would
      make additional unnecessary reset.

      Signed-off-by: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7dc47258a00d026ba1268133687b3b1940e36e58
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:26 2015 +0300

      wil6210: dump firmware memory when firmware crashes

      When firmware crashes, just before firmware recovery,
      dump the firmware memory to a devcoredump device.
      The resulting dump can be read from user space to be used
      in offline crash analysis.

      Signed-off-by: Lior David <liord@xxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a3dcbae2476f2c32e8f123dd833d789f7f494711
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:25 2015 +0300

      wil6210: ratelimit Tx error message

      Situations observed when IP stack schedules lots of
      frames for Tx while no connection (connection lost,
      for example). In this case, dmesg bloated with error
      message "FW not connected", printed for every frame.

      Ratelimit this error message to avoid dmesg pollution.

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 4765332df9222b9172ce2e5172f1e8e8ffc6d554
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:24 2015 +0300

      wil6210: capture all frames in sniffer mode

      For the sniffer (monitor) mode, capture either control only or both
      control and data PHY.

      It used to be control only or data only PHY due to firmware
      issues with configuration for PHY auto-detection; but now
      it is resolved.

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a8313341c4a83d5da18aad07501119da649d58dc
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:23 2015 +0300

      wil6210: support BAR (BlockAck Req)

      BAR frames delivered to the host via Rx path; whole BAR frame
      get delivered. Advance sequence in the reorder buffer and release
      old frames, as per IEEE802.11 spec.

      Firmware will reply to BAR, driver responsibility is only reorder
      buffer management.

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 68682b4108f1254a34e40f516f9ab1f49b4754fc
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:22 2015 +0300

      wil6210: treat broadcast bssid as "disconnect all"

      Hostapd request disconnect for broadcast bssid when it
      wants to disconnect all stations from the AP.

      Detect this and really disconnect all connected stations.

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 6cc6c468381e369e6450257645cf65c67f9f4a1b
  Author: Vladimir Shulman <QCA_shulmanv@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:21 2015 +0300

      wil6210: pmc logger bug fix

      When allocating pmc descriptor, the structure is
      initially created on stack and later copied to
      the physical ring (device) memory. The descriptor
      structure must be initialized to zero to avoid
      garbage configuration, which may result in pmc
      mechanism malfunctioning.

      Signed-off-by: Vladimir Shulman <QCA_shulmanv@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit bf2f67343eedc276b8441f91d8daaef4f3ed11d0
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:20 2015 +0300

      wil6210: log firmware crash information

      Print firmware and ucode assert codes when firmware crashed.

      Signed-off-by: Lior David <liord@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 3b282bc6095f77908cb83427d93f0764e8419fdb
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:19 2015 +0300

      wil6210: Add proper handling for invalid frames on Rx

      On Rx, when invalid frame is received and dropped,
      reaping of next frames from Rx ring is stopped.

      This stops NAPI polling and re-enables the Rx interrupt.

      However, in cases where no more frames received,
      interrupt will not be triggered and rest of Rx frames
      will not be processed.

      Skip bad frames and continue to reap Rx packets when
      such frames are encountered, and add statistics for
      such frames for debug.

      Signed-off-by: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 5a813da0068dbe46b77897c955b4059c7ffee4d8
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:18 2015 +0300

      wil6210: fix warning in system power management code

      Fix compilation warning where CONFIG_PM defined while
      CONFIG_PM_SLEEP is not defined

      Report follows:

      tree:   git://github.com/kvalo/ath pending
      head:   941145fc5e5afbb120271e5dfaf37213ddb55807
      commit: df596be39294d9712e5d568063a48448031e0a9f [37/39] wil6210: system 
power management
      config: xtensa-allyesconfig (attached as .config)
      reproduce:
        wget 
https://git.kernel.org/cgit/linux/kernel/git/wfg/lkp-tests.git/plain/sbin/make.cross
 -O ~/bin/make.cross
        chmod +x ~/bin/make.cross
        git checkout df596be39294d9712e5d568063a48448031e0a9f
        # save the attached .config to linux build tree
        make.cross ARCH=xtensa

      All warnings (new ones prefixed by >>):

      >> drivers/net/wireless/ath/wil6210/pcie_bus.c:264:12: warning: 
'wil6210_suspend' defined but not used [-Wunused-function]
          static int wil6210_suspend(struct device *dev, bool is_runtime)
                     ^
      >> drivers/net/wireless/ath/wil6210/pcie_bus.c:291:12: warning: 
'wil6210_resume' defined but not used [-Wunused-function]
          static int wil6210_resume(struct device *dev, bool is_runtime)
                     ^
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 72f8cef5d1155209561b01e092ce1a04ad50c4cb
  Author: Vivek Natarajan <nataraja@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:19:34 2015 +0300

      ath10k: use station's current operating mode from assoc request

      The current number of spatial streams used by the client is advertised
      as a separate IE in assoc request. Use this information to set
      the NSS operating mode.

      Fixes: 45c9abc059fa ("ath10k: implement more versatile set_bitrate_mask").
      Signed-off-by: Vivek Natarajan <nataraja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit ab4e3db043589204041c00272f751d05b4e52c50
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:19:33 2015 +0300

      ath10k: optimize ce_lock on post rx buffer processing

      After processing received packets from copy engine, host will allocate
      new buffer and queue them back to copy engine ring for further
      packet reception. On post rx processing path, skb allocation and
      dma mapping are unnecessarily handled within ce_lock. This is affecting
      peak throughput and also causing more CPU consumption. Optimize this
      by acquiring ce_lock only when accessing copy engine ring and moving
      skb allocation out of ce_lock.

      In AP148 platform with QCA99x0 in conducted environment, UDP uplink peak
      throughput is improved from ~1320 Mbps to ~1450 Mbps and TCP uplink peak
      throughput is increased from ~1240 Mbps (70% host CPU load) to ~1300 Mbps
      (71% CPU load). Similarly ~40Mbps improvement is observed in downlink
      path.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 39b91b8144e028cbe383548f76c1f8cdb7977532
  Author: Maharaja Kennadyrajan <c_mkenna@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:19:28 2015 +0300

      ath10k: increase pci wakeup timeout to 30 ms

      It is noticed that pci wakeup time is exceeding current timeout (10ms)
      randomly which is tested on QCA988x. So, the wake up time is increased
      to 30 ms and added debug prints to log total timeout.

      Signed-off-by: Maharaja Kennadyrajan <c_mkenna@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit f5e6a9753ac2965564a14e6285a06f44043ed9c8
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:24 2015 -0700

      x86/entry: Split and inline syscall_return_slowpath()

      GCC is unable to properly optimize functions that have a very
      short likely case and a longer and register-heavier cold part --
      it fails to sink all of the register saving and stack frame
      setup code into the unlikely part.

      Help it out with syscall_return_slowpath() by splitting it into
      two parts and inline the hot part.

      Saves 6 cycles for compat syscalls.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/0f773a894ab15c589ac794c2d34ca6ba9b5335c9.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 39b48e575e92e31251b74b4b48cea2129cee90bd
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:23 2015 -0700

      x86/entry: Split and inline prepare_exit_to_usermode()

      GCC is unable to properly optimize functions that have a very
      short likely case and a longer and register-heavier cold part --
      it fails to sink all of the register saving and stack frame
      setup code into the unlikely part.

      Help it out with prepare_exit_to_usermode() by splitting it into
      two parts and inline the hot part.

      Saves 6-8 cycles for compat syscalls.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/9fc53eda4a5b924070952f12fa4ae3e477640a07.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dd636071c3d8044c802b7a365e9934724a929530
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:22 2015 -0700

      x86/entry: Use pt_regs_to_thread_info() in syscall entry tracing

      It generates simpler and faster code than current_thread_info().

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a3b6633e7dcb9f673c1b619afae602d29d27d2cf.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4aabd140f9cbe0361401a1368bac74df1010abf5
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:21 2015 -0700

      x86/entry: Hide two syscall entry assertions behind CONFIG_DEBUG_ENTRY

      This shaves a few cycles off the slow paths.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/ce383fa9e129286ce6da6e00b53acd4c9fb5d06a.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c68ca6787bdd6d2df37cf950135aa11e71af358a
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:20 2015 -0700

      x86/entry: Micro-optimize compat fast syscall arg fetch

      We're following a 32-bit pointer, and the uaccess code isn't
      smart enough to figure out that the access_ok() check isn't
      needed.

      This saves about three cycles on a cache-hot fast syscall.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/bdff034e2f23c5eb974c760cf494cb5bddce8f29.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 33c52129f45e06d9ce23e1a3d50bf9fd6770748b
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:19 2015 -0700

      x86/entry: Force inlining of 32-bit syscall code

      On systems that support fast syscalls, we only really care about
      the performance of the fast syscall path.  Forcibly inline it
      and add a likely annotation.

      This saves 4-6 cycles.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/8472036ff1f4b426b4c4c3e3d0b3bf5264407c0c.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 460d12453e1afe20416ce9536cfecb31d17a9abd
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:18 2015 -0700

      x86/entry: Make irqs_disabled checks in exit code depend on lockdep

      These checks are quite slow.  Disable them in non-lockdep
      kernels to reduce the performance hit.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/eccff2a154ae6fb50f40228901003a6e9c24f3d0.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8b13c2552ffc8e54e57598df36707183933e8e8c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:17 2015 -0700

      x86/entry: Remove unnecessary IRQ twiddling in fast 32-bit syscalls

      This is slightly messy, but it eliminates an unnecessary cli;sti
      pair.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/22f34b1096694a37326f36c53407b8dd90f37948.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 487e3bf4f77699160aa81a414200060a78a67c3d
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:16 2015 -0700

      x86/asm: Remove thread_info.sysenter_return

      It's no longer needed.

      We could reinstate something like it as an optimization, which
      would remove two cachelines from the fast syscall entry working
      set.  I benchmarked it, and it makes no difference whatsoever to
      the performance of cache-hot compat syscalls on Sandy Bridge.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/f08cc0cff30201afe9bb565c47134c0a6c1a96a2.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5f310f739b4cc343f3f087681e41bbc2f0ce902d
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:15 2015 -0700

      x86/entry/32: Re-implement SYSENTER using the new C path

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/5b99659e8be70f3dd10cd8970a5c90293d9ad9a7.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 150ac78d63afb96360dab448b7b4d33c98c8266c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:14 2015 -0700

      x86/entry/32: Switch INT80 to the new C syscall path

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a7e8d8df96838eae3208dd0441023f3ce7a81831.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 39e8701f33d65c7f51d749a5d12a1379065e0926
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:13 2015 -0700

      x86/entry/32: Open-code return tracking from fork and kthreads

      syscall_exit is going away, and return tracing is just a
      function call now, so open-code the two non-syscall 32-bit
      users.

      While we're at it, update the big register layout comment.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a6b3c472fda7cda0e368c3ccd553dea7447dfdd2.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7841b408717d4c3b1b334c8f1fef7f18c98cd2bd
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:12 2015 -0700

      x86/entry/compat: Implement opportunistic SYSRETL for compat syscalls

      If CS, SS and IP are as expected and FLAGS is compatible with
      SYSRETL, then return from fast compat syscalls (both SYSCALL and
      SYSENTER) using SYSRETL.

      Unlike native 64-bit opportunistic SYSRET, this is not invisible
      to user code: RCX and R8-R15 end up in a different state than
      shown saved in pt_regs.  To compensate, we only do this when
      returning to the vDSO fast syscall return path.  This won't
      interfere with syscall restart, as we won't use SYSRETL when
      returning to the INT80 restart instruction.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/aa15e49db33773eb10b73d73466b6d5466d7856a.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a474e67c913d3ebaf02ba9d7835d5299d226c3ed
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:11 2015 -0700

      x86/vdso/compat: Wire up SYSENTER and SYSCSALL for compat userspace

      What, you didn't realize that SYSENTER and SYSCALL were actually
      the same thing? :)

      Unlike the old code, this actually passes the ptrace_syscall_32
      test on AMD systems.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/b74615af58d785aa02d917213ec64e2022a2c796.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 710246df58041106b7de645f4b45770f8a59a269
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:10 2015 -0700

      x86/entry: Add C code for fast system call entries

      This handles both SYSENTER and SYSCALL.  The asm glue will take
      care of the differences.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/6041a58a9b8ef6d2522ab4350deb1a1945eb563f.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ee08c6bd315e70756ad2c47ee6ea708a4a882b55
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:09 2015 -0700

      x86/entry/64/compat: Migrate the body of the syscall entry to C

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a2f0fce68feeba798a24339b5a7ec1ec2dd9eaf7.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit bd2d3a3ba67ac580f6e809aac36bf942f5447f91
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:08 2015 -0700

      x86/entry: Add do_syscall_32(), a C function to do 32-bit syscalls

      System calls are really quite simple.  Add a helper to call
      a 32-bit system call.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a77ed179834c27da436fb4a7fb23c8ee77abc11c.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit eb974c62565072e10c1422eb3205f5b611dd99a1
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:07 2015 -0700

      x86/syscalls: Give sys_call_ptr_t a useful type

      Syscalls are asmlinkage functions (on 32-bit kernels), take six
      args of type unsigned long, and return long.  Note that uml
      could probably be slightly cleaned up on top of this patch.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/4d3ecc4a169388d47009175408b2961961744e6f.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 034042cc1e2837a584cda0a5e4fc2b0a96b74543
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:06 2015 -0700

      x86/entry/syscalls: Move syscall table declarations into asm/syscalls.h

      The header was missing some compat declarations.

      Also make sys_call_ptr_t have a consistent type.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/3166aaff0fb43897998fcb6ef92991533f8c5c6c.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8169aff611956ed360e3313e8c718f530f58f6cb
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:05 2015 -0700

      x86/entry/64/compat: Set up full pt_regs for all compat syscalls

      This is conceptually simpler.  More importantly, it eliminates
      the PTREGSCALL and execve stubs, which were not compatible with
      the C ABI.  This means that C code can call through the compat
      syscall table.

      The execve stubs are a bit subtle.  They did two things: they
      cleared some registers and they forced slow-path return.
      Neither is necessary any more: elf_common_init clears the extra
      registers and start_thread calls force_iret().

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/f95b7f7dfaacf88a8cae85bb06226cae53769287.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2ec67971faccc21ff18878552ccfe4409088c4c8
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:04 2015 -0700

      x86/entry/64/compat: Remove most of the fast system call machinery

      We now have only one code path that calls through the compat
      syscall table.  This will make it much more pleasant to change
      the pt_regs vs register calling convention, which we need to do
      to move the call into C.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/320cda5573cefdc601b955d23fbe8f36c085432d.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c5f638ac90d514202155c87aa58730e86d484d9e
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:03 2015 -0700

      x86/entry/64/compat: Remove audit optimizations

      These audit optimizations are messy and hard to maintain.  We'll
      get a similar effect from opportunistic sysret when fast compat
      system calls are re-implemented.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/0bcca79ac7ff835d0e5a38725298865b01347a82.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e62a254a1f93fcc7299497a5c7231639400b8c3c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:02 2015 -0700

      x86/entry/64/compat: Disable SYSENTER and SYSCALL32 entries

      We've disabled the vDSO helpers to call them, so turn off the
      entries entirely (temporarily) in preparation for cleaning them
      up.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/8d6e84bf651519289dc532dcc230adfabbd2a3eb.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8242c6c84a644e5f0f721e4ae2bd542f640c89f9
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:01 2015 -0700

      x86/vdso/32: Save extra registers in the INT80 vsyscall path

      The goal is to integrate the SYSENTER and SYSCALL32 entry paths
      with the INT80 path.  SYSENTER clobbers ESP and EIP.  SYSCALL32
      clobbers ECX (and, invisibly, R11).  SYSRETL (long mode to
      compat mode) clobbers ECX and, invisibly, R11.  SYSEXIT (which
      we only need for native 32-bit) clobbers ECX and EDX.

      This means that we'll need to provide ESP to the kernel in a
      register (I chose ECX, since it's only needed for SYSENTER) and
      we need to provide the args that normally live in ECX and EDX in
      memory.

      The epilogue needs to restore ECX and EDX, since user code
      relies on regs being preserved.

      We don't need to do anything special about EIP, since the kernel
      already knows where we are.  The kernel will eventually need to
      know where int $0x80 lands, so add a vdso_image entry for it.

      The only user-visible effect of this code is that ptrace-induced
      changes to ECX and EDX during fast syscalls will be lost.  This
      is already the case for the SYSENTER path.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/b860925adbee2d2627a0671fbfe23a7fd04127f8.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7bcdea4d050cbe4912854a68b93494203eec8b24
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:00 2015 -0700

      x86/elf/64: Clear more registers in elf_common_init()

      Before we start calling execve in contexts that honor the full
      pt_regs, we need to teach it to initialize all registers.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/65a38a9edee61a1158cfd230800c61dbd963dac5.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 29c0ce9508458ed31a9db2ed425f64c0d6d3ddfb
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:59 2015 -0700

      x86/vdso: Replace hex int80 CFI annotations with GAS directives

      Maintaining the current CFI annotations written in R'lyehian is
      difficult for most of us.  Translate them to something a little
      closer to English.

      This will remove the CFI data for kernels built with extremely
      old versions of binutils.  I think this is a fair tradeoff for
      the ability for mortals to edit the asm.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/ae3ff4ff5278b4bfc1e1dab368823469866d4b71.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f24f910884277aa6824bbc2dda4b5d0418d45c28
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:58 2015 -0700

      x86/vdso: Define BUILD_VDSO while building and emit .eh_frame in asm

      For the vDSO, user code wants runtime unwind info.  Make sure
      that, if we use .cfi directives, we generate it.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/16e29ad8855e6508197000d8c41f56adb00d7580.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7b956f035a9ef8bd3ef5490f49fc1bd834d8a70a
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:57 2015 -0700

      x86/asm: Re-add parts of the manual CFI infrastructure

      Commit:

        131484c8da97 ("x86/debug: Remove perpetually broken, unmaintainable 
dwarf annotations")

      removed all the manual DWARF annotations outside the vDSO.  It also 
removed
      the macros we used for the manual annotations.

      Re-add these macros so that we can clean up the vDSO annotations.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/4c70bb98a8b773c8ccfaabf6745e569ff43e7f65.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 621bd0f6982badd6483acb191eb7b6226a578328
  Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
  Date:   Tue Sep 29 09:56:53 2015 +0200

      drm: Fix locking for sysfs dpms file

      With atomic drivers we need to make sure that (at least in general)
      property reads hold the right locks. But the legacy dpms property is
      special and can be read locklessly. Since userspace loves to just
      randomly look at that all the time (like with "status") do that.

      To make it clear that we play tricks use the READ_ONCE compiler
      barrier (and also for paranoia).

      Note that there's not really anything bad going on since even with the
      new atomic paths we eventually end up not chasing any pointers (and
      hence possibly freed memory and other fun stuff). The locking WARNING
      has been added in

      commit 88a48e297b3a3bac6022c03babfb038f1a886cea
      Author: Rob Clark <robdclark@xxxxxxxxx>
      Date:   Thu Dec 18 16:01:50 2014 -0500

          drm: add atomic properties

      but since drivers are converting not everyone will have seen this from
      the start.

      Jens reported this and submitted a patch to just grab the
      mode_config.connection_mutex, but we can do a bit better.

      v2: Remove unused variables I failed to git add for real.

      Reference: http://mid.gmane.org/20150928194822.GA3930@xxxxxxxxx
      Reported-by: Jens Axboe <axboe@xxxxxx>
      Tested-by: Jens Axboe <axboe@xxxxxx>
      Cc: Rob Clark <robdclark@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit e87d68dd61035b52f5a4b9d91051c98893dad61e
  Merge: 266424b 7a57455
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 9 10:06:18 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      radeon and amdgpu fixes for 4.3. Highlights:
      - Move pm sysfs setup later in the driver init process to avoid
        problems with laptop scripts attempting to change pm settings
        before the driver has finished setting up the pm hardware.
      - Fix console restore if a drm app (e.g. X) is forcibly killed
      - Flag iceland support as experimental for now
      - Misc bug fixes

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: fix memory leak in amdgpu_vm_update_page_directory
        drm/amdgpu: fix 32-bit compiler warning
        drm/amdgpu: flag iceland as experimental
        drm/amdgpu: check before checking pci bridge registers
        drm/amdgpu: fix num_crtc on CZ
        drm/amdgpu: restore the fbdev mode in lastclose
        drm/radeon: restore the fbdev mode in lastclose
        drm/radeon: add quirk for ASUS R7 370
        drm/amdgpu: add pm sysfs files late
        drm/radeon: add pm sysfs files late

  commit ce6fcb3f2467902b48e59d1c866c5b4c9f6136eb
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:59 2015 -0400

      i40e: print neato new features

      To help users and developers know what compile options
      and hardware features are enabled at compile time, print
      VxLAN is available.

      Change-ID: I3162f3b7678dc725a597f964217920eb218b480b
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f578f5f453abf09e8cb4c3aaf1e0c3bdf8125493
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:58 2015 -0400

      i40e/i40evf: pass QOS handle to VF

      The VF really doesn't care about the QOS handle but it will in the
      future. Since the VF only uses TC0, send it that handle. On the VF
      side, save the handle and use it to populate the QOS params when we call
      into the client interface.

      Change-ID: I76f41b070baeaa09b19383e9168bc677837e0761
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8ed995ff6bb9c5436db64b3653a0c62a0cd18f08
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:57 2015 -0400

      i40evf: use capabilities flags properly

      Use the capabilities passed to us by the PF driver to control VF driver
      behavior. In the process, clean up the VLAN add/remove code so it's not
      a horrible morass of ifdefs.

      Change-ID: I1050eaf12b658a26fea6813047c9964163c70a73
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a5fdaf342aa2fa6679dcb87dad2f78f1309de29e
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:56 2015 -0400

      i40e: refactor code to remove indent

      I found a code indent that was avoidable because a whole function is 
inside
      an if block, reverse the if and move the code back a tab.

      Change-ID: I9989c8750ee61678fbf96a3b0fd7bf7cc7ef300a
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6995b36c0fc3dd97c1d641f9630d19db2cadf44f
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:54 2015 -0400

      i40e/i40evf: clean up some code

      Add missings spaces after declarations, remove another __func__ use,
      remove uncessary braces, remove unneeded breaks, and useless returns,
      and generally fix up some code.

      Change-ID: Ie715d6b64976c50e1c21531685fe0a2bd38c4244
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ee5c1e92dd01d372b8e054b5a7e1cc19a1d32815
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:53 2015 -0400

      i40evf: detect reset more reliably

      Using VFGEN_RSTAT to detect a VF reset is an endeavor that is fraught
      with peril. It's entirely too easy to miss a reset because none of the
      bits are sticky. By the time the VF driver reads the register, the reset
      may have been processed and cleaned up by the PF driver, leaving the
      register in the same state that it was before the reset.

      Instead, detect a reset with the VF_ARQLEN register. When the VF is
      reset, the enable bit in this register is cleared, and it stays cleared
      until the VF driver processes the reset and re-enables the admin queue.

      Because we now deal with multiple registers in the reset and watchdog
      tasks, rename the rstat_val variable to reg_val.

      Change-ID: Id1df17045c0992e607da0162d31807f7fc20d199
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 95e5613f75ac93d0547b7d2077030a5fe11af21e
  Author: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:52 2015 -0400

      i40e: Support FW CEE DCB UP to TC map nibble swap

      Changes parsing of AQ command Get CEE DCBX OPER CFG (0x0A07). Change is
      required because FW creates the oper_prio_tc nibbles reversed from those
      in the CEE Priority Group sub-TLV.

      Change-ID: I7d9d8641bb430d30e286fc3fac909866ef8a0de8
      Signed-off-by: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 66486cd71723b2b41b36759159b551230ab8763d
  Author: Serey Kong <serey.kong@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:41 2015 -0400

      i40e/i40evf: Explicitly assign enum index for VSI type

      Ran into an issue where PF's VSI type list was different from VF's,
      which was resulted in different enum index. The VSI type list can
      be different depending on what build flag is used for PF and VF.

      The change is to explicitly assign enum index for each VSI type
      so that PF and VF always reference to the same VSI type event if the
      enum lists are different.

      Change-ID: I8c0e5fdb515f324f7964df863a458073cf467e57
      Signed-off-by: Serey Kong <serey.kong@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9ac77266379d070c6d140ad44f86a99936497eeb
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:40 2015 -0400

      i40e: add switch for link polling

      There's been some need for controlling the periodic link polling for
      debugging link issues.  This patch enables switching it off and on
      through an ethtool private flag.  The link poll remains on by default,
      but can be turned off with
        ethtool --set-priv-flags p261p1 LinkPolling off
      and later turned back on with
        ethtool --set-priv-flags p261p1 LinkPolling on

      To check the current status, use
        ethtool --show-priv-flags p261p1

      Change-ID: I32e4ab654ff3eec90a06cf144899971b82d71c40
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c156f856ad8ba4f71bcdb2c92ba1a9effaa29ac1
  Author: Matt Jared <matthew.a.jared@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:39 2015 -0400

      i40e: Fix multiple link up messages

      This patch addresses an issue where multiple link up messages can be 
logged
      resulting from aq link status timing when link properties are changed (fc,
      speed, etc.); solved by using a single function to handle status printing
      and adding a mechanism to track whether link state (up or down) has
      actually changed.

      Change-ID: Ied6ed6e49dc397c77d992adc0bc9ed3767152b9d
      Signed-off-by: Matt Jared <matthew.a.jared@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3487b6c30c0dd2204dc31e14330097dff02d9a58
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:38 2015 -0400

      i40e: Fix for extra Flow Director filter in table after error

      This patch fixes a problem where the PF's fdir filter table would have an
      entry that the hw was unable to add. This notification happens in the hot
      path, so instead of trying to fix it then, we note the location in the
      failure case and delete it during regular fdir subtask callback. Without
      this patch, a case can occur where an invalid entry gets replayed and a
      valid one is not.

      Change-ID: I67831c183b5d0309876de807cc434809b74c9cb7
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1a9375eb7f987e9338c17504dd2b358b688b32d8
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:37 2015 -0400

      i40e/i40evf: Store CEE DCBX DesiredCfg and RemoteCfg

      This patch adds capability to query and store the CEE DCBX DesiredCfg
      and RemoteCfg data from the LLDP MIB.
      Added new member "desired_dcbx_config" in the i40e_hw data structure
      to hold CEE only DesiredCfg data.

      Change-ID: I19c550369594384eaff4cc63e690ca740231195d
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 909b2d16c41f3a56ff67342073ae5f2569d58084
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:36 2015 -0400

      i40e: Add parsing for CEE DCBX TLVs

      This patch adds parsing for CEE DCBX TLVs from the LLDP MIB.

      While the driver gets the DCB CEE operational configuration from Firmware
      using the "Get CEE DCBX Oper Config" AQ command there is a need to get
      the CEE DesiredCfg Tx by firmware and DCB configuration Rx from peer; for
      debug and other application purposes.

      Change-ID: I9140edf1a25a2852c7eff805d81e5eff6266178d
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 96c8d0738aff3ecf3e8b3253fb286685e35d93e6
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:35 2015 -0400

      i40e: add more verbose error messages

      Under certain circumstances, the device may not have enough resources to
      enable all of the VFs that it advertises in config space. Although the
      number of supported VFs is reported upon driver init, it is not obvious
      when this is different from the number reported in config space. To
      eliminate this confusion, add an error message explaining the problem.
      Additionally, move the 'Allocating VFs' message down below the error
      checks so as to prevent further confusion.

      Change-ID: I45b7efca53a7aebf7777be33a8bc9d615ae48ea1
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 02d109be3ddc9768c1c38709218648d0c48a4ea9
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:34 2015 -0400

      i40e: inline interrupt enable

      The interrupt enable function can be inlined by moving it to the header
      file, which decreases the function call overhead for a frequently called
      function.

      Change-ID: I3214cc99593725768642680e7b8ce7e9bba7e44d
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1e8efb42cf32982d68c1ceab3e3dc15a05157632
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:33 2015 -0400

      i40e: fix erroneous WARN_ON

      The driver was issuing a WARN_ON during ring size changes
      because the code was cloning the rx_ring struct but
      not zeroing out the pointers before allocating new memory.

      Zero out the pointers in the cloned copy before allocating
      new memory for them.  In this case the code was correctly
      avoiding memory leaks but still triggering the warning.

      Change-ID: I186dd493948e9b7254ab0593d4aad8b68808918d
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a452744bcbf706eac65abb4c98496a366820c60a
  Author: Mikulas Patocka <mpatocka@xxxxxxxxxx>
  Date:   Thu Oct 1 15:17:43 2015 -0400

      crash in md-raid1 and md-raid10 due to incorrect list manipulation

      The commit 55ce74d4bfe1b9444436264c637f39a152d1e5ac (md/raid1: ensure
      device failure recorded before write request returns) is causing crash in
      the LVM2 testsuite test shell/lvchange-raid.sh. For me the crash is 100%
      reproducible.

      The reason for the crash is that the newly added code in raid1d moves the
      list from conf->bio_end_io_list to tmp, then tests if tmp is non-empty and
      then incorrectly pops the bio from conf->bio_end_io_list (which is empty
      because the list was alrady moved).

      Raid-10 has a similar bug.

      Kernel Fault: Code=15 regs=000000006ccb8640 (Addr=0000000100000000)
      CPU: 3 PID: 1930 Comm: mdX_raid1 Not tainted 4.2.0-rc5-bisect+ #35
      task: 000000006cc1f258 ti: 000000006ccb8000 task.ti: 000000006ccb8000

           YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI
      PSW: 00001000000001001111111000001111 Not tainted
      r00-03  000000ff0804fe0f 000000001059d000 000000001059f818 
000000007f16be38
      r04-07  000000001059d000 000000007f16be08 0000000000200200 
0000000000000001
      r08-11  000000006ccb8260 000000007b7934d0 0000000000000001 
0000000000000000
      r12-15  000000004056f320 0000000000000000 0000000000013dd0 
0000000000000000
      r16-19  00000000f0d00ae0 0000000000000000 0000000000000000 
0000000000000001
      r20-23  000000000800000f 0000000042200390 0000000000000000 
0000000000000000
      r24-27  0000000000000001 000000000800000f 000000007f16be08 
000000001059d000
      r28-31  0000000100000000 000000006ccb8560 000000006ccb8640 
0000000000000000
      sr00-03  0000000000249800 0000000000000000 0000000000000000 
0000000000249800
      sr04-07  0000000000000000 0000000000000000 0000000000000000 
0000000000000000

      IASQ: 0000000000000000 0000000000000000 IAOQ: 000000001059f61c 
000000001059f620
       IIR: 0f8010c6    ISR: 0000000000000000  IOR: 0000000100000000
       CPU:        3   CR30: 000000006ccb8000 CR31: 0000000000000000
       ORIG_R28: 000000001059d000
       IAOQ[0]: call_bio_endio+0x34/0x1a8 [raid1]
       IAOQ[1]: call_bio_endio+0x38/0x1a8 [raid1]
       RP(r2): raid_end_bio_io+0x88/0x168 [raid1]
      Backtrace:
       [<000000001059f818>] raid_end_bio_io+0x88/0x168 [raid1]
       [<00000000105a4f64>] raid1d+0x144/0x1640 [raid1]
       [<000000004017fd5c>] kthread+0x144/0x160

      Signed-off-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Fixes: 55ce74d4bfe1 ("md/raid1: ensure device failure recorded before 
write request returns.")
      Fixes: 95af587e95aa ("md/raid10: ensure device failure recorded before 
write request returns.")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit f2dd80ecca5f06b46134f2bd811f046c503c756c
  Author: Daniel Axtens <dja@xxxxxxxxxx>
  Date:   Wed Sep 23 16:41:48 2015 +1000

      powerpc/powernv: Panic on unhandled Machine Check

      All unrecovered machine check errors on PowerNV should cause an
      immediate panic. There are 2 reasons that this is the right policy:
      it's not safe to continue, and we're already trying to reboot.

      Firstly, if we go through the recovery process and do not successfully
      recover, we can't be sure about the state of the machine, and it is
      not safe to recover and proceed.

      Linux knows about the following sources of Machine Check Errors:
      - Uncorrectable Errors (UE)
      - Effective - Real Address Translation (ERAT)
      - Segment Lookaside Buffer (SLB)
      - Translation Lookaside Buffer (TLB)
      - Unknown/Unrecognised

      In the SLB, TLB and ERAT cases, we can further categorise these as
      parity errors, multihit errors or unknown/unrecognised.

      We can handle SLB errors by flushing and reloading the SLB. We can
      handle TLB and ERAT multihit errors by flushing the TLB. (It appears
      we may not handle TLB and ERAT parity errors: I will investigate
      further and send a followup patch if appropriate.)

      This leaves us with uncorrectable errors. Uncorrectable errors are
      usually the result of ECC memory detecting an error that it cannot
      correct, but they also crop up in the context of PCI cards failing
      during DMA writes, and during CAPI error events.

      There are several types of UE, and there are 3 places a UE can occur:
      Skiboot, the kernel, and userspace. For Skiboot errors, we have the
      facility to make some recoverable. For userspace, we can simply kill
      (SIGBUS) the affected process. We have no meaningful way to deal with
      UEs in kernel space or in unrecoverable sections of Skiboot.

      Currently, these unrecovered UEs fall through to
      machine_check_expection() in traps.c, which calls die(), which OOPSes
      and sends SIGBUS to the process. This sometimes allows us to stumble
      onwards. For example we've seen UEs kill the kernel eehd and
      khugepaged. However, the process killed could have held a lock, or it
      could have been a more important process, etc: we can no longer make
      any assertions about the state of the machine. Similarly if we see a
      UE in skiboot (and again we've seen this happen), we're not in a
      position where we can make any assertions about the state of the
      machine.

      Likewise, for unknown or unrecognised errors, we're not able to say
      anything about the state of the machine.

      Therefore, if we have an unrecovered MCE, the most appropriate thing
      to do is to panic.

      The second reason is that since e784b6499d9c ("powerpc/powernv: Invoke
      opal_cec_reboot2() on unrecoverable machine check errors."), we
      attempt a special OPAL reboot on an unhandled MCE. This is so the
      hardware can record error data for later debugging.

      The comments in that commit assert that we are heading down the panic
      path anyway. At the moment this is not always true. With UEs in kernel
      space, for instance, they are marked as recoverable by the hardware,
      so if the attempt to reboot failed (e.g. old Skiboot), we wouldn't
      panic() but would simply die() and OOPS. It doesn't make sense to be
      staggering on if we've just tried to reboot: we should panic().

      Explicitly panic() on unrecovered MCEs on PowerNV.
      Update the comments appropriately.

      This fixes some hangs following EEH events on cxlflash setups.

      Signed-off-by: Daniel Axtens <dja@xxxxxxxxxx>
      Reviewed-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Reviewed-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit fdf880a60835cd1dec2563463ac63ae3084e0ddc
  Author: Cyril Bur <cyrilbur@xxxxxxxxx>
  Date:   Thu Oct 8 11:04:26 2015 +1100

      powerpc: Fix checkstop in native_hpte_clear() with lockdep

      native_hpte_clear() is called in real mode from two places:
      - Early in boot during htab initialisation if firmware assisted dump is
        active.
      - Late in the kexec path.

      In both contexts there is no need to disable interrupts are they are
      already disabled. Furthermore, locking around the tlbie() is only required
      for pre POWER5 hardware.

      On POWER5 or newer hardware concurrent tlbie()s work as expected and on 
pre
      POWER5 hardware concurrent tlbie()s could result in deadlock. This code
      would only be executed at crashdump time, during which all bets are off,
      concurrent tlbie()s are unlikely and taking locks is unsafe therefore the
      best course of action is to simply do nothing. Concurrent tlbie()s are not
      possible in the first case as secondary CPUs have not come up yet.

      Signed-off-by: Cyril Bur <cyrilbur@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit dcc909d90ccdbb73226397ff6d298f7af35b0e11
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Tue Oct 6 20:03:54 2015 +0200

      nbd: Add locking for tasks

      The timeout handling introduced in
        7e2893a16d3e (nbd: Fix timeout detection)
      introduces a race condition which may lead to killing of tasks that are
      not in nbd context anymore. This was not observed or reproducable yet.

      This patch adds locking to critical use of task_recv and task_send to
      avoid killing tasks that already left the NBD thread functions. This
      lock is only acquired if a timeout occures or the nbd device
      starts/stops.

      Reported-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Reviewed-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Fixes: 7e2893a16d3e ("nbd: Fix timeout detection")
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 55582bccdc1e89ecc973c260d46e247df675d4df
  Author: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 13:50:44 2015 -0700

      cpufreq: prevent lockup on reading scaling_available_frequencies

      When scaling_available_frequencies is read on an offlined cpu, then
      either lockup or junk values are displayed. This is caused by
      freed freq_table, which policy is using.

      Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit e25303676e18a7947185a34e26dd08cf0c0ea573
  Author: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 13:50:43 2015 -0700

      cpufreq: acpi_cpufreq: prevent crash on reading freqdomain_cpus

      When freqdomain_cpus attribute is read from an offlined cpu, it will
      cause crash. This change prevents calling cpufreq_show_cpus when
      policy driver_data is NULL.

      Crash info:

      [  170.814949] BUG: unable to handle kernel NULL pointer dereference at 
0000000000000018
      [  170.814990] IP: [<ffffffff813b2490>] _find_next_bit.part.0+0x10/0x70
      [  170.815021] PGD 227d30067 PUD 229e56067 PMD 0
      [  170.815043] Oops: 0000 [#2] SMP
      [  170.816022] CPU: 3 PID: 3121 Comm: cat Tainted: G      D    OE   
4.3.0-rc3+ #33
      ...
      ...
      [  170.816657] Call Trace:
      [  170.816672]  [<ffffffff813b2505>] ? find_next_bit+0x15/0x20
      [  170.816696]  [<ffffffff8160e47c>] cpufreq_show_cpus+0x5c/0xd0
      [  170.816722]  [<ffffffffa031a409>] show_freqdomain_cpus+0x19/0x20 
[acpi_cpufreq]
      [  170.816749]  [<ffffffff8160e65b>] show+0x3b/0x60
      [  170.816769]  [<ffffffff8129b31c>] sysfs_kf_seq_show+0xbc/0x130
      [  170.816793]  [<ffffffff81299be3>] kernfs_seq_show+0x23/0x30
      [  170.816816]  [<ffffffff81240f2c>] seq_read+0xec/0x390
      [  170.816837]  [<ffffffff8129a64a>] kernfs_fop_read+0x10a/0x160
      [  170.816861]  [<ffffffff8121d9b7>] __vfs_read+0x37/0x100
      [  170.816883]  [<ffffffff813217c0>] ? security_file_permission+0xa0/0xc0
      [  170.816909]  [<ffffffff8121e2e3>] vfs_read+0x83/0x130
      [  170.816930]  [<ffffffff8121f035>] SyS_read+0x55/0xc0
      ...
      ...
      [  170.817185] ---[ end trace bc6eadf82b2b965a ]---

      Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Cc: 4.2+ <stable@xxxxxxxxxxxxxxx> # 4.2+
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 88c6eb0e3b81a30514d21679735fa25d028c2299
  Author: ludovic.desroches@xxxxxxxxx <ludovic.desroches@xxxxxxxxx>
  Date:   Thu Sep 17 10:16:20 2015 +0200

      mmc: sdhci-of-at91: use SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST quirk

      The Atmel sdhci device needs the
      SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST quirk. Without it, the
      internal clock could never stabilised when changing the sd clock
      frequency.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit af951761d01c89eea8f1dcccf8010218e4b55817
  Author: ludovic.desroches@xxxxxxxxx <ludovic.desroches@xxxxxxxxx>
  Date:   Thu Sep 17 10:16:19 2015 +0200

      mmc: sdhci: add quirk SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST

      The Atmel sdhci device needs a new quirk. sdhci_set_clock set the Clock
      Control Register to 0 before computing the new value and writing it.
      It disables the internal clock which causes a reset mecanism. If we
      write the new value before this reset mecanism is done, it will prevent
      the stabilisation of the internal clock, so a delay is needed. This
      delay is about 2-3 cycles of the base clock. To be safe, a 1 ms delay is
      used.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 348a65cdcbbf243073ee39d1f7d4413081ad7eab
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:25 2015 -0500

      arm64: Mark kernel page ranges contiguous

      With 64k pages, the next larger segment size is 512M. The linux
      kernel also uses different protection flags to cover its code and data.
      Because of this requirement, the vast majority of the kernel code and
      data structures end up being mapped with 64k pages instead of the larger
      pages common with a 4k page kernel.

      Recent ARM processors support a contiguous bit in the
      page tables which allows the a TLB to cover a range larger than a
      single PTE if that range is mapped into physically contiguous
      ram.

      So, for the kernel its a good idea to set this flag. Some basic
      micro benchmarks show it can significantly reduce the number of
      L1 dTLB refills.

      Add boot option to enable/disable CONT marking, as well as fix a
      bug found by Steve Capper.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      [catalin.marinas@xxxxxxx: remove CONFIG_ARM64_CONT_PTE altogether]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 202e41a1c257eb56a05b5ff5bfde06f7ae98e6eb
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:23 2015 -0500

      arm64: Make the kernel page dump utility aware of the CONT bit

      The kernel page dump utility needs to be aware of the CONT bit before
      it will break up pages ranges for display.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 06f90d2527845c4767207f54280df2c5ca11e82b
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:22 2015 -0500

      arm64: Default kernel pages should be contiguous

      The default page attributes for a PMD being broken should have the CONT 
bit
      set. Create a new definition for an early boot range of PTE's that are
      contiguous.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 93ef666a094ff9c9fc8d7cf1774ef0b92e270a75
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:21 2015 -0500

      arm64: Macros to check/set/unset the contiguous bit

      Add the supporting macros to check if the contiguous bit
      is set, set the bit, or clear it in a PTE entry.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ecf35a237a85d747ef1d6f713888c782f42064ac
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:20 2015 -0500

      arm64: PTE/PMD contiguous bit definition

      Define the bit positions in the PTE and PMD for the
      contiguous bit.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 2ff4439bb45a05433282d4fa9ca84202147819c7
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:19 2015 -0500

      arm64: Add contiguous page flag shifts and constants

      Add the number of pages required to form a contiguous range,
      as well as some supporting constants.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 2162d9f41e7c4778b96b8e3b97adcedbadc861f1
  Author: Marcin Wojtas <mw@xxxxxxxxxxxx>
  Date:   Tue Oct 6 03:22:37 2015 +0200

      mmc: sdhci-pxav3: fix error handling of armada_38x_quirks

      In case of armada_38x_quirks error, all clocks should be cleaned-up, same
      as after mv_conf_mbus_windows failure.

      Signed-off-by: Marcin Wojtas <mw@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Reviewed-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit fa7964147da57b2d40c2db2b6ed98fb7dc934bff
  Author: Nadav Haklai <nadavh@xxxxxxxxxxx>
  Date:   Tue Oct 6 03:22:36 2015 +0200

      mmc: sdhci-pxav3: disable clock inversion for HS MMC cards

      According to 'FE-2946959' erratum the clock inversion option is
      needed to support slow frequencies when the card input hold time
      requirement is high. This setting is not required for high speed
      MMC and might cause timing violation.

      Signed-off-by: Nadav Haklai <nadavh@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Reviewed-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 5de76bfcb1e5ac66c57b99e8e193dacac7416f0e
  Author: Nadav Haklai <nadavh@xxxxxxxxxxx>
  Date:   Tue Oct 6 03:22:35 2015 +0200

      mmc: sdhci-pxav3: remove broken clock base quirk for Armada 38x sdhci 
driver

      shci-pxav3 driver is enabling by default the
      SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN quirk. However this quirk is not
      required for Armada 38x and leads to wrong clock setting in the divider.

      Signed-off-by: Nadav Haklai <nadavh@xxxxxxxxxxx>
      Signed-off-by: Marcin Wojtas <mw@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Reviewed-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7a574557e62dc3d2d7ed55fa0b99e7d5bb403878
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Oct 8 19:28:01 2015 +0530

      drm/amdgpu: fix memory leak in amdgpu_vm_update_page_directory

      If amdgpu_ib_get() fails we returned the error code but we missed
      freeing ib.

      Cc: "Christian König" <christian.koenig@xxxxxxx>
      Cc: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Cc: Chunming Zhou <david1.zhou@xxxxxxx>
      Cc: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: "monk.liu" <monk.liu@xxxxxxx>
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 7a5692e6e533fd379081ab06fb58f3f5ee4d80bc
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Wed Oct 7 09:29:11 2015 -0400

      arch/powerpc: provide zero_bytemask() for big-endian

      For some reason, only the little-endian flavor of
      powerpc provided the zero_bytemask() implementation.

      Reported-by: Michal Sojka <sojkam1@xxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 9ad92bdff7062d9925754607f5a92b4f651fc7d3
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Wed Oct 7 13:23:29 2015 +0100

      hwrng: st - Improve FIFO size/depth description

      The original representation of FIFO size in the driver coupled with the
      ambiguity in the documentation meant that it was easy to confuse readers.
      This lead to a false positive BUG-find and subsequently time wastage
      debugging this phantom issue.

      Hopefully this patch can prevent future readers from falling into the
      same trap.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 93d649bd94e1003e2a766a59fadba0cc0089d58b
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Wed Oct 7 13:23:28 2015 +0100

      hwrng: st - Use real-world device timings for timeout

      Samples are documented to be available every 0.667us, so in theory
      the 8 sample deep FIFO should take 5.336us to fill.  However, during
      thorough testing, it became apparent that filling the FIFO actually
      takes closer to 12us.

      Also take into consideration that udelay() can behave oddly i.e. not
      delay for as long as requested.

        Suggested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>:

          "IIRC, Linus recommends a x2 factor on delays, especially
           timeouts generated by these functions.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8fd80f8ca60bdeda4f3098986e8a566ba9c0c57a
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Wed Oct 7 13:23:27 2015 +0100

      hwrng: st: dt: Fix trivial typo in node address

      DT nodes should not append their addresses with '0x'.

      Suggested-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 9d83d299549d0e121245d56954242750d0c14338
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Oct 2 14:12:58 2015 +0200

      crypto: atmel - Check for clk_prepare_enable() return value

      clk_prepare_enable() can fail so add a check for this and
      return the error code if it fails.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c6415a6016bff0b547c13cadb1d5e50e9ace2be3
  Author: Catalin Vasile <catalin.vasile@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 13:13:18 2015 +0300

      crypto: caam - add support for acipher xts(aes)

      Add support for AES working in XEX-based Tweaked-codebook mode with
      ciphertext Stealing (XTS)

      sector index - HW limitation: CAAM device supports sector index of only
      8 bytes to be used for sector index inside IV, instead of whole 16 bytes
      received on request. This represents 2 ^ 64 = 16,777,216 Tera of possible
      values for sector index.

      Signed-off-by: Cristian Hristea <cristi.hristea@xxxxxxxxx>
      Signed-off-by: Horia Geanta <horia.geanta@xxxxxxxxxxxxx>
      Signed-off-by: Alex Porosanu <alexandru.porosanu@xxxxxxxxxxxxx>
      Signed-off-by: Catalin Vasile <catalin.vasile@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit fea40451530fea9ed3efd31eb932d1855a3a6e2d
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Oct 2 08:01:02 2015 +0200

      crypto: qce - dma_map_sg can handle chained SG

      The qce driver use two dma_map_sg path according to SG are chained
      or not.
      Since dma_map_sg can handle both case, clean the code with all
      references to sg chained.

      Thus removing qce_mapsg, qce_unmapsg and qce_countsg functions.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 166db195536f380c4545a8d2fca9789402464bc8
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Thu Oct 1 16:32:50 2015 -0500

      crypto: ccp - Use module name in driver structures

      The convention is to use the name of the module in the driver structures
      that are used for registering the device. The CCP module is currently
      using a descriptive name. Replace the descriptive name with module name.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 21dc9e8f941f8693992230d189a556b220b50f5b
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Thu Oct 1 16:32:44 2015 -0500

      crypto: ccp - Change references to accelerator to offload

      The CCP is meant to be more of an offload engine than an accelerator
      engine. To avoid any confusion, change references to accelerator to
      offload.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 52948cef8406a5f75484e2922b7140bc7c17f3f9
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Thu Oct 1 16:32:38 2015 -0500

      crypto: ccp - Remove use ACPI field

      With the creation of the device_dma_is_coherent API the "use_acpi" field
      is no longer needed, so remove it.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 355eba5dda6984cbe10fa914e5cc8ef45a34cce2
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Thu Oct 1 16:32:31 2015 -0500

      crypto: ccp - Replace BUG_ON with WARN_ON and a return code

      Replace the usage of BUG_ON with WARN_ON and return an error.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 92b279070dd6c94265db32748bbeb5b583588de9
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 12:31:33 2015 +0100

      crypto: camellia_aesni_avx - Fix CPU feature checks

      We need to explicitly check the AVX and AES CPU features, as we can't
      infer them from the related XSAVE feature flags.  For example, the
      Core i3 2310M passes the XSAVE feature test but does not implement
      AES-NI.

      Reported-and-tested-by: Stéphane Glondu <glondu@xxxxxxxxxx>
      References: https://bugs.debian.org/800934
      Fixes: ce4f5f9b65ae ("x86/fpu, crypto x86/camellia_aesni_avx: 
Simplify...")
      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx> # 4.2
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit a66d7f724a96d6fd279bfbd2ee488def6b081bea
  Author: Dave Kleikamp <dave.kleikamp@xxxxxxxxxx>
  Date:   Mon Oct 5 10:08:51 2015 -0500

      crypto: sparc - initialize blkcipher.ivsize

      Some of the crypto algorithms write to the initialization vector,
      but no space has been allocated for it. This clobbers adjacent memory.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Kleikamp <dave.kleikamp@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f640ee98bbeaa169684a571e0b96bea563bb6015
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 12:35:42 2015 +0200

      Bluetooth: Fix basic debugfs entries for unconfigured controllers

      When the controller is unconfigured (for example it does not have a
      valid Bluetooth address), then the basic debugfs entries for dut_mode
      and vendor_diag are not creates. Ensure they are created in __hci_init
      and also __hci_unconf_init functions. One of them is called during setup
      stage of a new controller.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit df718423250c000ca4323a767cedc2f3219b685c
  Merge: 28335a7 3ad0040
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 05:26:44 2015 -0700

      Merge branch 'bpf_random32'

      Daniel Borkmann says:

      ====================
      BPF/random32 updates

      BPF update to split the prandom state apart, and to move the
      *once helpers to the core. For details, please see individual
      patches. Given the changes and since it's in the tree for
      quite some time, net-next is a better choice in our opinion.

      v1 -> v2:
       - Make DO_ONCE() type-safe, remove the kvec helper. Credits
         go to Alexei Starovoitov for the __VA_ARGS__ hint, thanks!
       - Add a comment to the DO_ONCE() helper as suggested by Alexei.
       - Rework prandom_init_once() helper to the new API.
       - Keep Alexei's Acked-by on the last patch.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ad0040573b0c00f88488bc31958acd07a55ee2e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:39 2015 +0200

      bpf: split state from prandom_u32() and consolidate {c, e}BPF prngs

      While recently arguing on a seccomp discussion that raw prandom_u32()
      access shouldn't be exposed to unpriviledged user space, I forgot the
      fact that SKF_AD_RANDOM extension actually already does it for some time
      in cBPF via commit 4cd3675ebf74 ("filter: added BPF random opcode").

      Since prandom_u32() is being used in a lot of critical networking code,
      lets be more conservative and split their states. Furthermore, consolidate
      eBPF and cBPF prandom handlers to use the new internal PRNG. For eBPF,
      bpf_get_prandom_u32() was only accessible for priviledged users, but
      should that change one day, we also don't want to leak raw sequences
      through things like eBPF maps.

      One thought was also to have own per bpf_prog states, but due to ABI
      reasons this is not easily possible, i.e. the program code currently
      cannot access bpf_prog itself, and copying the rnd_state to/from the
      stack scratch space whenever a program uses the prng seems not really
      worth the trouble and seems too hacky. If needed, taus113 could in such
      cases be implemented within eBPF using a map entry to keep the state
      space, or get_random_bytes() could become a second helper in cases where
      performance would not be critical.

      Both sides can trigger a one-time late init via prandom_init_once() on
      the shared state. Performance-wise, there should even be a tiny gain
      as bpf_user_rnd_u32() saves one function call. The PRNG needs to live
      inside the BPF core since kernels could have a NET-less config as well.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Chema Gonzalez <chema@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 897ece56e714a2cc64e6914cb89a362d7021b36e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:38 2015 +0200

      random32: add prandom_init_once helper for own rngs

      Add a prandom_init_once() facility that works on the rnd_state, so that
      users that are keeping their own state independent from prandom_u32() can
      initialize their taus113 per cpu states.

      The motivation here is similar to net_get_random_once(): initialize the
      state as late as possible in the hope that enough entropy has been
      collected for the seeding. prandom_init_once() makes use of the recently
      introduced prandom_seed_full_state() helper and is generic enough so that
      it could also be used on fast-paths due to the DO_ONCE().

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0dd50d1b0c003ab4f17597fe1198bb57a2fadc06
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:37 2015 +0200

      random32: add prandom_seed_full_state helper

      Factor out the full reseed handling code that populates the state
      through get_random_bytes() and runs prandom_warmup(). The resulting
      prandom_seed_full_state() will be used later on in more than the
      current __prandom_reseed() user. Fix also two minor whitespace
      issues along the way.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c90aeb948222a7b3d3391d232ec4f50fd8322ad3
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:36 2015 +0200

      once: make helper generic for calling functions once

      Make the get_random_once() helper generic enough, so that functions
      in general would only be called once, where one user of this is then
      net_get_random_once().

      The only implementation specific call is to get_random_bytes(), all
      the rest of this *_once() facility would be duplicated among different
      subsystems otherwise. The new DO_ONCE() helper will be used by prandom()
      later on, but might also be useful for other scenarios/subsystems as
      well where a one-time initialization in often-called, possibly fast
      path code could occur.

      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 46234253b9363894a254844a6550b4cc5f3edfe8
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:35 2015 +0200

      net: move net_get_random_once to lib

      There's no good reason why users outside of networking should not
      be using this facility, f.e. for initializing their seeds.

      Therefore, make it accessible from there as get_random_once().

      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d6a6aed22f91b35c14a6717d42953f260090175
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Oct 2 20:28:04 2015 +0200

      6lowpan: move shared settings to lowpan_netdev_setup

      This patch moves values for all lowpan interface to the shared
      implementation of 6lowpan. This patch also quietly fixes the forgotten
      IFF_NO_QUEUE flag for the bluetooth 6LoWPAN interface. An identically
      commit is 4afbc0d ("net: 6lowpan: convert to using IFF_NO_QUEUE") which
      wasn't changed for bluetooth 6lowpan.

      All 6lowpan interfaces should be virtual with IFF_NO_QUEUE, using EUI64
      address length, the mtu size is 1280 (IPV6_MIN_MTU) and the netdev type
      is ARPHRD_6LOWPAN.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 85121d6ee6973f98789bf7343f7f636c01e2de19
  Author: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 12:31:46 2015 -0400

      net/mlx4: Remove shared_ports variable at mlx4_enable_msi_x

      If we get MAX_MSIX interrupts would like to have each receive ring
      with his own msix interrupt line. Do not need the shared_ports
      variable at mlx4_enable_msix

      Fixes: 9293267a3e2a ('net/mlx4_core: Capping number of requested MSIXs to 
MAX_MSIX')
      Signed-off-by: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
      Acked-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 28335a7445202a3d118145a07d9138e9881ebe18
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 08:40:13 2015 -0700

      net: Do not drop to make_route if oif is l3mdev

      Commit deaa0a6a930 ("net: Lookup actual route when oif is VRF device")
      exposed a bug in __ip_route_output_key_hash for VRF devices: on FIB lookup
      failure if the oif is specified the current logic drops to make_route on
      the assumption that the route tables are wrong. For VRF/L3 master devices
      this leads to wrong dst entries and route lookups. For example:
          $ ip route ls table vrf-red
          unreachable default
          broadcast 10.2.1.0 dev eth1  proto kernel  scope link  src 10.2.1.2
          10.2.1.0/24 dev eth1  proto kernel  scope link  src 10.2.1.2
          local 10.2.1.2 dev eth1  proto kernel  scope host  src 10.2.1.2
          broadcast 10.2.1.255 dev eth1  proto kernel  scope link  src 10.2.1.2

          $ ip route get oif vrf-red 1.1.1.1
          1.1.1.1 dev vrf-red  src 10.0.0.2
              cache

      With this patch:
          $  ip route get oif vrf-red 1.1.1.1
          RTNETLINK answers: No route to host

      which is the correct response based on the default route

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9d3a6386c8238bfacf57ee9dac68ec4b40b302fe
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Wed Oct 7 10:26:38 2015 +0200

      net: mdio-octeon: Drop obsolete Kconfig advice

      "Y" was the right answer for MDIO_OCTEON when this option was only
      available on CAVIUM_OCTEON_SOC. But now that the option is visible on
      all (64-bit) systems, this piece of advice no longer makes sense. This
      helper module is selected automatically by drivers which need it
      anyway.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Fixes: a6d6786452 ("net: mdio-octeon: Modify driver to work on both 
ThunderX and Octeon")
      Cc: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Cc: Radha Mohan Chintakuntla <rchintakuntla@xxxxxxxxxx>
      Cc: David Daney <david.daney@xxxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Acked-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bcb9db49bb9da895ee809bfb2718d664dfb3ee2f
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 7 08:58:34 2015 +0200

      mlxsw: fix warnings for big-endian 32-bit dma_addr_t

      The recently added mlxsw driver produces warnings in ARM
      allmodconfig:

      drivers/net/ethernet/mellanox/mlxsw/pci.c: In function 
'mlxsw_pci_cmd_exec':
      drivers/net/ethernet/mellanox/mlxsw/pci.c:1585:59: warning: right shift 
count >= width of type [-Wshift-count-overflow]
      linux/byteorder/big_endian.h:38:51: note: in definition of macro 
'__cpu_to_be32'
      drivers/net/ethernet/mellanox/mlxsw/pci.c:76:2: note: in expansion of 
macro 'iowrite32be'

      This uses upper_32_bits() to extract the bits while avoiding that warning.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Fixes: eda6500a987a "mlxsw: Add PCI bus implementation"
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cfc81b50387086c3a1ca6d2be3c46561edfbc3b5
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 10:16:09 2015 +0200

      bpf, skb_do_redirect: clear sender_cpu before xmit

      Similar to commit c29390c6dfee ("xps: must clear sender_cpu before
      forwarding"), we also need to clear the skb->sender_cpu when moving
      from RX to TX via skb_do_redirect() due to the shared location of
      napi_id (used on RX) and sender_cpu (used on TX).

      Fixes: 27b29f63058d ("bpf: add bpf_redirect() helper")
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6bf0577374cfb6c2301dbf4934a4f23ad3d72763
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 6 20:46:07 2015 -0700

      bpf: clear sender_cpu before xmit

      Similar to commit c29390c6dfee ("xps: must clear sender_cpu before 
forwarding")
      the skb->sender_cpu needs to be cleared before xmit.

      Fixes: 3896d655f4d4 ("bpf: introduce bpf_clone_redirect() helper")
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d40496a56430eac0d330378816954619899fe303
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Tue Oct 6 17:23:47 2015 -0700

      act_mirred: clear sender cpu before sending to tx

      Similar to commit c29390c6dfee ("xps: must clear sender_cpu before 
forwarding")
      the skb->sender_cpu needs to be cleared when moving from Rx
      Tx, otherwise kernel could crash.

      Fixes: 2bd82484bb4c ("xps: fix xps for stacked devices")
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dfdd7230c5a2d9d675b4e7d6e111a8ead13cfb11
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 23:53:57 2015 +0200

      net: hns: fix 32-bit build warning

      The recently added hns driver causes a build warning in ARM
      allmodconfig builds:

      drivers/net/ethernet/hisilicon/hns/hnae.c: In function 'handles_show':
      drivers/net/ethernet/hisilicon/hns/hnae.c:452:13: warning: cast from 
pointer to integer of different size [-Wpointer-to-int-cast]
                j, (u64)h->qs[i]->io_base);
                   ^

      This removes the pointless cast and prints the pointer address using
      the "%p" format string in all three locations.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d70e53262f5cfc0b88a211ef9cbd1ca5256f4a6b
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 16:37:46 2015 -0400

      net: Microchip encx24j600 driver

      This ethernet driver supports the Micorchip enc424j600/626j600 Ethernet
      controller over a SPI bus interface. This driver makes use of the regmap 
API to
      optimize access to registers by caching registers where possible.

      Datasheet:
      http://ww1.microchip.com/downloads/en/DeviceDoc/39935b.pdf

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 494f8eb9b616590c78bb1974aed835a842f012b6
  Merge: 91d2f14 9200c27
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:46:03 2015 -0700

      Merge branch 'broadcom-iproc'

      Arun Parameswaran says:

      ====================
      Add support for Broadcom's iProc MDIO and Cygnus Ethernet PHY

      This patchset adds support for the iProc MDIO interface and the
      Broadcom Cygnus SoC's internal Ethernet PHY.

      The internal Ethernet PHY(s) in the Cygnus SoC's are accessed
      via the MDIO interface found in most of the iProc based chips.

      The patch also consolidates the common API's used by the
      Broadcom phys to a common library. Existing Broadcom phy
      drivers have been modified to use the common library API's.

      This patch series is based on Linux v4.3-rc1 and is avaliable in:
      https://github.com/Broadcom/cygnus-linux/tree/cygnus-net-phy-mdio-v3

      The Ethernet driver for the iProc family will be submitted soon,
      as will the device tree configurations for the different iProc
      family SoCs.

      Changes from v2:
      - Modified drivers/net/phy/Kconfig to modify the BCM_CYGNUS_PHY
        driver to 'depends on MDIO_BCM_IPROC' instead of 'select'.
      - Added github branch to the cover letter

      Changes from v1:
      - Updated device tree documentation for the iProc MDIO driver
        based on Florian's feedback.
      - Moved the core register defines from the Cygnus PHY driver to
        'include/linux/brcmphy.h' based on Florian's feedback.
      - Created a new patch/commit to modify the bcm7xxx phy driver
        to use the new core register defines.
      - Modified the Kconfig entry for the Broadcom PHY library to
        'tristate' instead of 'bool'
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9200c27a1cc7ac719e4c43411e5a170144ba0ac5
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:50 2015 -0700

      net: phy: bcm7xxx: Modified to use global core register defines

      Modified the bcm7xxx phy driver to remove local core register
      defines and use the common ones from "include/linux/brcmphy.h"

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e185d6997bb67068f0ca8f062a50caa2608cf1b
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:49 2015 -0700

      net: phy: Broadcom Cygnus internal Etherent PHY driver

      Add support for the Broadcom Cygnus SoCs internal PHY's.
      The PHYs are 1000M/100M/10M capable with support for 'EEE'
      and 'APD' (Auto Power Down).

      This driver supports the following Broadcom Cygnus SoCs:
       - BCM583XX (BCM58300, BCM58302, BCM58303, BCM58305)
       - BCM113XX (BCM11300, BCM11320, BCM11350, BCM11360)

      The PHY's on these SoC's require some workarounds for
      stable operation, both during configuration time and
      during suspend/resume. This driver handles the
      application of the workarounds.

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1cba5613edf50c2a213fa90c30aa10500b241b7
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:48 2015 -0700

      net: phy: Add Broadcom phy library for common interfaces

      This patch adds the Broadcom phy library to consolidate common
      interfaces shared by Broadcom phy's.

      Moved the common interfaces to the 'bcm-phy-lib.c' and updated
      the Broadcom PHY drivers to use the new APIs.

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ddc24ae1fd6ae2638365b0b824750b5b2ef13ca5
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:47 2015 -0700

      net: phy: Broadcom iProc MDIO bus driver

      This patch adds support for the Broadcom iProc MDIO bus interface.
      The MDIO interface can be found in the Broadcom iProc family Soc's.

      The MDIO bus is accessed using a combination of command and data
      registers. This MDIO driver provides access to the Etherent GPHY's
      connected to the MDIO bus.

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bb257c3813613ce11329568c21c200e95afe6fc1
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:46 2015 -0700

      dt-bindings: net: Broadcom iProc MDIO bus driver device tree binding

      Add device tree binding documentation for the Broadcom iProc MDIO
      bus driver.

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 91d2f14bc38336177c2d65e0c2cbf6447133cee1
  Merge: 6b92d0c 0676651
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:38:37 2015 -0700

      Merge branch 'net/rds/4.3-v3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/ssantosh/linux

      Santosh Shilimkar says:

      ====================
      RDS: connection scalability and performance improvements

      [v4]
      Re-sending the same patches from v3 again since my repost of
      patch 05/14 from v3 was whitespace damaged.

      [v3]
      Updated patch "[PATCH v2 05/14] RDS: defer the over_batch work to
      send worker" as per David Miller's comment [4] to avoid the magic
      value usage. Patch now makes use of already available but unused
      send_batch_count module parameter. Rest of the patches are same as
      earlier version v2 [3]

      [v2]:
      Dropped "[PATCH 05/15] RDS: increase size of hash-table to 8K" from
      earlier version [1]. I plan to address the hash table scalability using
      re-sizable hash tables as suggested by David Laight and David Miller [2]

      This series addresses RDS connection bottlenecks on massive workloads and
      improve the RDMA performance almost by 3X. RDS TCP also gets a small gain
      of about 12%.

      RDS is being used in massive systems with high scalability where several
      hundred thousand end points and tens of thousands of local processes
      are operating in tens of thousand sockets. Being RC(reliable connection),
      socket bind and release happens very often and any inefficiencies in
      bind hash look ups hurts the overall system performance. RDS bin 
hash-table
      uses global spin-lock which is the biggest bottleneck. To make matter 
worst,
      it uses rcu inside global lock for hash buckets.
      This is being addressed by simply using per bucket rw lock which makes the
      locking simple and very efficient. The hash table size is still an issue 
and
      I plan to address it by using re-sizable hash tables as suggested on the 
list.

      For RDS RDMA improvement, the completion handling is revamped so that we
      can do batch completions. Both send and receive completion handlers are
      split logically to achieve the same. RDS 8K messages being one of the
      key usecase, mr pool is adapted to have the 8K mrs along with default 1M
      mrs. And while doing this, few fixes and couple of bottlenecks seen with
      rds_sendmsg() are addressed.

      Series applies against 4.3-rc1 as well net-next. Its tested on Oracle
      hardware with IB fabric for both bcopy as well as RDMA mode. RDS TCP is
      tested with iXGB NIC. Like last time, iWARP transport is untested with
      these changes. The patchset is also available at below git repo:

      git://git.kernel.org/pub/scm/linux/kernel/git/ssantosh/linux.git 
net/rds/4.3-v3

      As a side note, the IB HCA driver I used for testing misses at least 3
      important patches in upstream to see the full blown IB performance and
      am hoping to get that in mainline with help of them.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6b92d0c4a6eefd32da7ecaf6873cb7e7e7602cfa
  Merge: e28383d ede2059
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:27:13 2015 -0700

      Merge branch 'pass_net_through_output_path'

      Eric W. Biederman says:

      ====================
      net: Pass net through the output path v2

      This is the next installment of my work to pass struct net through the
      output path so the code does not need to guess how to figure out which
      network namespace it is in, and ultimately routes can have output
      devices in another network namespace.

      The first patch in this series is a fix for a bug that came in when sk
      was passed through the functions in the output path, and as such is
      probably a candidate for net.  At the same time my later patches depend
      on it so sending the fix separately would be confusing.

      The second patch in this series is another fix that for an issue that
      came in when sk was passed through the output path.  I don't think it
      needs a backport as I don't think anyone uses the path where the code
      was incorrect.

      The rest of the patchset focuses on the path from xxx_local_out to
      dst_output and in the end succeeds in passing sock_net(sk) from the
      socket a packet locally originates on to the dst->output function.

      Given the size reduction in the code I think this counts as a cleanup as
      much as feature work.

      There remain a number of helper functions (like ip option processing) to
      take care of before the network stack can support destination devices in
      other network namespaces but with this set of changes the backbone of
      the work is done.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ede2059dbaf9c6557a49d466c8c7778343b208ff
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:47 2015 -0500

      dst: Pass net into dst->output

      The network namespace is already passed into dst_output pass it into
      dst->output lwt->output and friends.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 33224b16ffccb49cf798317670389e0bfba0024c
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:46 2015 -0500

      ipv4, ipv6: Pass net into ip_local_out and ip6_local_out

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cf91a99daa4651d0c1f52b8c3d813fd44b43cada
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:45 2015 -0500

      ipv4, ipv6: Pass net into __ip_local_out and __ip6_local_out

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 57c4bf859cad9d6c4f73d8c98a95e00f156301e0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:44 2015 -0500

      ipvlan: Cache net in ipvlan_process_v4_outbound and 
ipvlan_process_v6_outbound

      Compute net once in ipvlan_process_v4_outbound and
      ipvlan_process_v6_outbound and store it in a variable so that net does
      not need to be recomputed next time it is used.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a7093fefa543afad2bf292bba163800e81a4ba33
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:43 2015 -0500

      ppp: Cache net in pptp_xmit

      Compute net and store it in a variable in pptp_xmit, so that the value
      can be reused the next time it is needed.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77589ce0f84dd99cc946fd71fe6fb44dd8220d0a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:42 2015 -0500

      ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit

      Compute net and store it in a variable in the functions
      ip_build_and_send_pkt and ip_queue_xmit so that it does not need to be
      recomputed next time it is needed.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f859b0f662493e4f53d462f5759e3c4302933077
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:41 2015 -0500

      ipv4: Cache net in iptunnel_xmit

      Store net in a variable in ip_tunnel_xmit so it does not need
      to be recomputed when it is used again.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 792883303cdb3a7edd16017d7aba53926189ef41
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:40 2015 -0500

      ipv6: Merge ip6_local_out and ip6_local_out_sk

      Stop hidding the sk parameter with an inline helper function and make
      all of the callers pass it, so that it is clear what the function is
      doing.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f8955cc468ddb7d08a0e614a45f9a82c4019b00
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:39 2015 -0500

      ipv6: Merge __ip6_local_out and __ip6_local_out_sk

      Only __ip6_local_out_sk has callers so rename __ip6_local_out_sk
      __ip6_local_out and remove the previous __ip6_local_out.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e2cb77db089796f163092326ca25512845df7a3a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:38 2015 -0500

      ipv4: Merge ip_local_out and ip_local_out_sk

      It is confusing and silly hiding a parameter so modify all of
      the callers to pass in the appropriate socket or skb->sk if
      no socket is known.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b92dacd45698e120104ff81066ceb534916090d9
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:37 2015 -0500

      ipv4: Merge __ip_local_out and __ip_local_out_sk

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ebdfba73c09d8568d891bae87c40fad43dd7f41
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:36 2015 -0500

      dst: Pass a sk into .local_out

      For consistency with the other similar methods in the kernel pass a
      struct sock into the dst_ops .local_out method.

      Simplifying the socket passing case is needed a prequel to passing a
      struct net reference into .local_out.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 13206b6bff3b15b724926a222406476bf2c23c40
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:35 2015 -0500

      net: Pass net into dst_output and remove dst_output_okfn

      Replace dst_output_okfn with dst_output

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3f5312ae620c79e877a6aa0e8894c6603a090b4e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:34 2015 -0500

      xfrm: Only compute net once in xfrm_policy_queue_process

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 850dcc4d4dd7d5da5c1b2a780c5e649c3b649545
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:33 2015 -0500

      ipv4: Fix ip_queue_xmit to pass sk into ip_local_out_sk

      After a packet has been encapsulated by a tunnel we should use the
      tunnel sockets local multicast loopback flag to control if the
      encapsulated packet should be locally loopback back.

      Pass sk into ip_local_out_sk so that in the rare case we are dealing
      with a tunneled packet whose tunnel destination address is a multicast
      address the kernel properly decides to loopback this packet.

      In practice I don't think this matters as ip_queue_xmit is used by
      tcp, l2tp and sctp none of which I am aware of uses ip level
      multicasting as they are all point to point communications protocols.
      Let's fix this before someone uses ip_queue_xmit for a tunnel protocol
      that does use multicast.

      Fixes: aad88724c9d5 ("ipv4: add a sock pointer to dst->output() path.")
      Fixes: b0270e91014d ("ipv4: add a sock pointer to ip_queue_xmit()")
      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd2874b3bbe832e90ac480971a7a8bd736b629b9
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:32 2015 -0500

      ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk

      In the rare case where sk != skb->sk ip_local_out_sk arranges
      to call dst->output differently if the skb is queued or not.
      This is a bug.

      Fix this bug by passing the sk parameter of ip_local_out_sk through
      from ip_local_out_sk to __ip_local_out_sk (skipping __ip_local_out).

      Fixes: 7026b1ddb6b8 ("netfilter: Pass socket pointer down through 
okfn().")
      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e28383dd28afafefb0e445354c88f7b1e99aae9d
  Merge: 61d0372 7fd0ac6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:21:09 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-07

      This series contains updates to i40e and i40evf only.

      Paul updates i40e to simply increase the amount of time we wait for a
      reset to complete since we have seen in some rare occasions the reset
      can take longer to complete.

      Shannon updates the driver to turn on Wake-on-LAN by default if it is
      enabled in the hardware config to begin with, rather than always disable
      it and wait for the user to expressly turn it on.  Added new device id's
      and support for future devices.  Fixed a possible type compare problem
      between a size and possible negative number.  Also fixed a shift value
      that was wrong, which ended up with a bad bitmask.  Did general house
      cleaning of the driver to cleanup several low lying fruit in the
      driver.  Fixed an issue where new unicast address's would be added to
      the VSI list and then immediately removed and would never actually
      make it down to the hardware.  Resolved the issue by removing the
      separation from unicast and multicast in the search for filters to be
      deleted.

      Mitch fixes an issue where the hardware would continue to access the
      memory formerly used by the rings for a VF which have been removed,
      causing memory corruption or DMAR errors.  To relieve this condition,
      explicitly stop all rings associated with each VF before releasing its
      resources.  Also fixed a panic if the driver is unable to enable MSI-X
      or its unable to acquire enough vectors, so propagate interrupt
      allocation failure information to the calling function.  Cleaned up
      opcode that is not required.

      Carolyn extends the size of the test available for the interrupt names
      so that all the descriptive data available for the Flow Director
      interrupts is not truncated.

      Catherine fixes an issue where there was a possibility of speed getting
      set to 0 if advertised is set to 0 (which is the case when autoneg is
      disabled).

      Jesse fixes the checksum on big endian machines, so added code to swap
      it correctly.  Also fixed a bug in the return from get_link_status()
      where only true or false was being returned, but false could mean
      multiple things.  So allow the caller to get all the return values
      in the call chain bubbled back to the source so that the reason for
      the failure does not get lost.

      Anjali adds statistics to keep track of how many times we ask the stack
      to linearize the SKB because the hardware cannot handle SKBs with more
      than 8 frags per segment/single packet.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c72eda0608a30ca6aa8722d4afdbd2557b3c9345
  Author: Paul Moore <pmoore@xxxxxxxxxx>
  Date:   Tue Oct 6 15:03:53 2015 -0400

      af_unix: constify the sock parameter in unix_sk()

      Make unix_sk() just like inet[6]_sk() by constify'ing the sock
      parameter.

      Signed-off-by: Paul Moore <pmoore@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61d0372028d98046176a8a36e40b78b5bbac5512
  Merge: acb4a6b 77792b1
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:01:28 2015 -0700

      Merge tag 'regmap-offload-update-bits' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap

      regmap: Allow buses to provide a custom update_bits() operation

      Some buses provide a native _update_bits() operation which for uncached
      registers is faster than doing a read/modify/write cycle as it is a
      single bus transaction.  Add support for implementing this to regmap.

  commit 4d57c67827d7bb79c4fcf6618bf80930808e50c6
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Tue Oct 6 00:16:53 2015 +0200

      mac80211: add missing struct ieee80211_txq tid field initialization

      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 0e537fef24d64f7bf3ef61a27edf64a8d9a5424c
  Merge: d3df65c ae93880
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 8 10:52:44 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Adding a field via 'perf report -F' that already is enabled makes
          the tool get stuck in a loop, fix it. (Jiri Olsa)

      Infrastructure changes:

        - Support PERF_RECORD_SWITCH in the python binding. (Arnaldo Carvalho 
de Melo)

        - Fix handling read() result using a signed variable, found with 
Coccinelle.
          (Andrzej Hajda)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d3df65c198dc2f1deefb73c8427b04d1bdd1b18d
  Merge: 712df65 00e6fa5
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 8 10:52:18 2015 +0200

      Merge branch 'perf/urgent' into perf/core, before pulling new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 26d46dffbe2cd0a023aa6192708f80cd796af107
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:24 2015 +0300

      Bluetooth: 6lowpan: Remove unnecessary chan_get() function

      The chan_get() function just adds unnecessary indirection to calling
      the chan_create() call. The only added value it gives is the chan->ops
      assignment, but that can equally well be done in the calling code.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0cd088fc97bbe4834e9bc9727012ecac49386849
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:23 2015 +0300

      Bluetooth: 6lowpan: Rename confusing 'pchan' variables

      The typical convention when having both a child and a parent channel
      variable is to call the former 'chan' and the latter 'pchan'. When
      there's only one variable it's called chan. Rename the 'pchan'
      variables in the 6lowpan code to follow this convention.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 630ef791ea8e4274f20b833e1977cb1b0462d3ec
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:22 2015 +0300

      Bluetooth: 6lowpan: Remove unnecessary chan_open() function

      All the chan_open() function now does is to call chan_create() so it
      doesn't really add any value.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b0c09f94ff1660a1873549b788c998284ea5fb8a
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:21 2015 +0300

      Bluetooth: 6lowpan: Remove redundant BT_CONNECTED assignment

      The L2CAP core code makes sure of setting the channel state to
      BT_CONNECTED, so there's no need for the implementation code (6lowpan
      in this case) to do it.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5d0fd77a043504dabccb66d9b5671e682868e96d
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:20 2015 +0300

      Bluetooth: 6lowpan: Remove redundant (and incorrect) MPS assignments

      The L2CAP core code already sets the local MPS to a sane value. The
      remote MPS value otoh comes from the remote side so there's no point
      in trying to hard-code it to any value.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 301de2cb6a521405cde1a2f9cdc42c5257b5725b
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:19 2015 +0300

      Bluetooth: 6lowpan: Fix imtu & omtu values

      The omtu value is determined by the remote peer so there's no point in
      trying to hard-code it to any value. The IPSP specification otoh gives
      a more reasonable value for the imtu, i.e. 1280.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 123e20b14530b57bd75e295961d2c1f8c48455bf
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Wed Oct 7 06:22:25 2015 -0700

      mmc: host: omap_hsmmc: Fix MMC for omap3 legacy booting

      Starting with commit 7d607f917008 ("mmc: host: omap_hsmmc: use
      devm_regulator_get_optional() for vmmc") MMC on omap3 stopped working
      for legacy booting.

      This is because legacy booting sets up some of the resource in the
      platform init code, and for optional regulators always seem to
      return -EPROBE_DEFER for the legacy booting.

      Let's fix the issue by checking for device tree based booting for
      now. Then when omap3 boots in device tree only mode, this patch
      can be just reverted.

      Fixes: 7d607f917008 ("mmc: host: omap_hsmmc: use
      devm_regulator_get_optional() for vmmc")
      Cc: Felipe Balbi <balbi@xxxxxx>
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Cc: Nishanth Menon <nm@xxxxxx>
      Cc: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bb2726b52f2abdf46339a2d1293f76b5d5752705
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Wed Oct 7 06:22:24 2015 -0700

      Revert "mmc: host: omap_hsmmc: use regulator_is_enabled to find pbias 
status"

      This reverts commit c55d7a0553643a7e8f120688b82b594471084d3c.

      Without reverting this commit we get "unbalanced disables for 
pbias_mmc_omap4"
      errors on omap4430. It seems that 4430 and 4460 behave in a different way 
for
      the PBIAS regulator registers and until that has been debugged further we
      cannot rely on the regulator status registers in hardare on 4430.

      Fixes: 7d607f917008 ("mmc: host: omap_hsmmc: use
      devm_regulator_get_optional() for vmmc")
      Cc: Felipe Balbi <balbi@xxxxxx>
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Cc: Nishanth Menon <nm@xxxxxx>
      Cc: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit fe806dceded462f7930f8ac4a41c5d19819e70b7
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 03:14:28 2015 +0200

      Bluetooth: Enforce packet types in hci_recv_frame driver function

      When calling the hci_recv_frame driver function check for valid packet
      types that the core should process. This should catch issues with
      drivers trying to feed vendor packet types through this interface.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 943cc592195ea458058c121d9c4d7481d0f28be1
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 03:06:53 2015 +0200

      Bluetooth: bpa10x: Use h4_recv_buf helper for frame reassembly

      The manually coded frame reassembly is actually broken. The h4_recv_buf
      helper from the UART driver is a perfect fit for frame reassembly for
      this driver. So just export that function and use it here as well.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 881f7e86a1e0322fbda42c92a36b13c44120bca2
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 03:01:44 2015 +0200

      Bluetooth: bpa10x: Add support for set_diag driver callback

      The BPA-10x devices support tracing operation. Use the set_diag driver
      callback to allow enabling and disabling that functionality.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit ddd68ec8f4847b460c9f580076eafe13b031a6fd
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 02:24:06 2015 +0200

      Bluetooth: bpa10x: Read revision information in setup stage

      For debugging pruposes, read the revision string of the BPA-10x devices
      and print it. For example one of the latest devices respond with the
      string SNIF_102,BB930,02/01/18,10:37:56.

        < HCI Command: Vendor (0x3f|0x000e) plen 1
                07                                               .
        > HCI Event: Command Complete (0x0e) plen 49
              Vendor (0x3f|0x000e) ncmd 1
                Status: Success (0x00)
                53 4e 49 46 5f 31 30 32 2c 42 42 39 33 30 2c 30  
SNIF_102,BB930,0
                32 2f 30 31 2f 31 38 2c 31 30 3a 33 37 3a 35 36  
2/01/18,10:37:56
                00 00 00 00 00 00 00 00 00 00 00 00 00           .............

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit acc649c6540ef224cc07d17c4b632da9dedfb6a2
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 01:53:55 2015 +0200

      Bluetooth: Fix interaction of HCI_QUIRK_RESET_ON_CLOSE and HCI_AUTO_OFF

      When the controller requires the HCI Reset command to be send when
      closing the transport, the HCI_AUTO_OFF needs to be accounted for. The
      current code tries to actually do that, but the flag gets cleared to
      early. So store its value and use it that stored value instead of
      checking for a flag that is always cleared.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 075e1f5e6c201111e32da99919eb052edc6d1c82
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 20:08:26 2015 +0200

      Bluetooth: hci_bcm: Enable support for set_diag driver callback

      The set_diag driver callback allows enabling and disabling the vendor
      specific diagnostic information. Since Broadcom chips have support for
      a dedicated LM_DIAG channel, hook it up accordingly.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 4b4113d6dbdbdac095743c05f694af9b7cdc9a44
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 19:52:35 2015 +0200

      Bluetooth: Add debugfs entry for setting vendor diagnostic mode

      This adds a new debugfs entry for enabling and disabling the vendor
      diagnostic mode. It is only exposed for drivers that provide the
      set_diag driver callback and actually have an option for vendor
      specific diagnostic information.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 94c58132c062855df53db9a46fb8da0b878d69f0
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 19:12:54 2015 +0200

      Bluetooth: hci_bcm: Enable parsing of LM_DIAG messages

      The Broadcom UART based controllers can send LM_DIAG messages with the
      identifier 0x07 inside the HCI stream. These messages are 63 octets in
      size and have no variable payload or length indicator.

      This patch adds correct parsing information for the h4_recv_buf handler
      and in case these packets are received, they are forwarded to the
      Bluetooth core via hci_recv_diag interface.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e875ff84079b9e7d3ce24b97e3396230d41044d4
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:38:35 2015 +0200

      Bluetooth: Add support for vendor specific diagnostic channel

      Introduce hci_recv_diag function for HCI drivers to allow sending vendor
      specific diagnostic messages into the Bluetooth core stack. The messages
      are not processed, but they are forwarded to the monitor channel and can
      be retrieved by user space diagnostic tools.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6c566dd5a1253f73458ce6ba6cf3830e9d38c132
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 15:32:13 2015 +0200

      Bluetooth: Send index information updates to monitor channel

      The Bluetooth public device address might change during controller setup
      and it makes it a lot simpler for monitoring tools if they just get told
      what the new address is. In addition include the manufacturer / company
      information of the controller. That allows for easy vendor specific HCI
      command and event handling.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 39cd2dd39a8b92ce91c4dad95f6e979c946a3942
  Merge: d2856b0 ad2ad5d 4bace73 a36a996
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 16:06:25 2015 -0700

      Merge branches 'doc.2015.10.06a', 'percpu-rwsem.2015.10.06a' and 
'torture.2015.10.06a' into HEAD

      doc.2015.10.06a:  Documentation updates.
      percpu-rwsem.2015.10.06a:  Optimization of per-CPU reader-writer 
semaphores.
      torture.2015.10.06a:  Torture-test updates.

  commit d2856b046d2ce2bfb664727cb8671ad0e371bd6c
  Merge: 7f5f873 338b0f7
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 16:05:21 2015 -0700

      Merge branches 'fixes.2015.10.06a' and 'exp.2015.10.07a' into HEAD

      exp.2015.10.07a:  Reduce OS jitter of RCU-sched expedited grace periods.
      fixes.2015.10.06a:  Miscellaneous fixes.

  commit 338b0f760e84676130c6e4d8268cb8c923b38c8c
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 00:45:02 2015 -0700

      rcu: Better hotplug handling for synchronize_sched_expedited()

      Earlier versions of synchronize_sched_expedited() can prematurely end
      grace periods due to the fact that a CPU marked as cpu_is_offline()
      can still be using RCU read-side critical sections during the time that
      CPU makes its last pass through the scheduler and into the idle loop
      and during the time that a given CPU is in the process of coming online.
      This commit therefore eliminates this window by adding additional
      interaction with the CPU-hotplug operations.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit b08517c76d764c373c232cd309ed058c98705219
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 18 12:17:29 2015 -0700

      rcu: Enable stall warnings for synchronize_rcu_expedited()

      This commit redirects synchronize_rcu_expedited()'s wait to
      synchronize_sched_expedited_wait(), thus enabling RCU CPU
      stall warnings.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit c58656382e5f2919b05913584f2c54b4f841bc9f
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 18 11:25:48 2015 -0700

      rcu: Add tasks to expedited stall-warning messages

      This commit adds task-print ability to the expedited RCU CPU stall
      warning messages in preparation for adding stall warnings to
      synchornize_rcu_expedited().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 74611ecb0fc4c850a8f89a744ce99cbf0dd43cb2
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 18 10:20:43 2015 -0700

      rcu: Add online/offline info to expedited stall warning message

      This commit makes the RCU CPU stall warning message print online/offline
      indications immediately after the CPU number.  A "O" indicates global
      offline, a "." global online, and a "o" indicates RCU believes that the
      CPU is offline for the current grace period and "." otherwise, and an
      "N" indicates that RCU believes that the CPU will be offline for the
      next grace period, and "." otherwise, all right after the CPU number.
      So for CPU 10, you would normally see "10-...:" indicating that everything
      believes that the CPU is online.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit dcdb8807ba0f5127d4dc67daeeb154edf50a93d1
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 15 19:00:31 2015 -0700

      rcu: Consolidate expedited CPU selection

      Now that sync_sched_exp_select_cpus() and sync_rcu_exp_select_cpus()
      are identical aside from the the argument to smp_call_function_single(),
      this commit consolidates them with a functional argument.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 66fe6cbee44e3f78d05882195a6a38e30b97b936
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 15 17:20:58 2015 -0700

      rcu: Prepare for consolidating expedited CPU selection

      This commit brings sync_sched_exp_select_cpus() into alignment with
      sync_rcu_exp_select_cpus(), as a first step towards consolidating them
      into one function.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 02ef3c4a2aae65a1632b27770bfea3f83ca06772
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 7 15:14:30 2015 -0700

      cpu: Remove try_get_online_cpus()

      Now that synchronize_sched_expedited() no longer uses it, there are
      no users of try_get_online_cpus() in mainline.  This commit therefore
      removes it.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 807226e2fbb504d82cd504b7b6114896db41ef63
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 7 12:03:45 2015 -0700

      rcu: Stop excluding CPU hotplug in synchronize_sched_expedited()

      Now that synchronize_sched_expedited() uses IPIs, a hook in
      rcu_sched_qs(), and the ->expmask field in the rcu_node combining
      tree, it is no longer necessary to exclude CPU hotplug.  Any
      races with CPU hotplug will be detected when attempting to send
      the IPI.  This commit therefore removes the code excluding
      CPU hotplug operations.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 83c2c735e78da1a0d994911f730f6e1d36c88d7a
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 20:43:02 2015 -0700

      rcu: Stop silencing lockdep false positive for expedited grace periods

      This reverts commit af859beaaba4 (rcu: Silence lockdep false positive
      for expedited grace periods).  Because synchronize_rcu_expedited()
      no longer invokes synchronize_sched_expedited(), ->exp_funnel_mutex
      acquisition is no longer nested, so the false positive no longer happens.
      This commit therefore removes the extra lockdep data structures, as they
      are no longer needed.

  commit 6587a23b6b9bdb47205ec96c703e5bf8a2d39701
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 16:50:39 2015 -0700

      rcu: Switch synchronize_sched_expedited() to IPI

      This commit switches synchronize_sched_expedited() from 
stop_one_cpu_nowait()
      to smp_call_function_single(), thus moving from an IPI and a pair of
      context switches to an IPI and a single pass through the scheduler.
      Of course, if the scheduler actually does decide to switch to a different
      task, there will still be a pair of context switches, but there would
      likely have been a pair of context switches anyway, just a bit later.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit ae938802443732e77d01f8d5b52b900b9327ff30
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Oct 6 17:46:46 2015 -0300

      perf python: Support the PERF_RECORD_SWITCH event

      To test it check tools/perf/python/twatch.py, after following the
      instructions there to enable context_switch, output looks like:

        [root@zoo linux]# tools/perf/python/twatch.py
        cpu: 1, pid: 31463, tid: 31463 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31463, switch_out: 0 }
        cpu: 2, pid: 31463, tid: 31496 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31496, switch_out: 0 }
        cpu: 2, pid: 31463, tid: 31496 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31496, switch_out: 1 }
        cpu: 3, pid: 31463, tid: 31527 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31527, switch_out: 0 }
        cpu: 1, pid: 31463, tid: 31463 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31463, switch_out: 1 }
        cpu: 3, pid: 31463, tid: 31527 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31527, switch_out: 1 }
        cpu: 1, pid: 31463, tid: 31463 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31463, switch_out: 0 }
        ^CTraceback (most recent call last):
          File "tools/perf/python/twatch.py", line 67, in <module>
            main(context_switch = 1, thread = 31463)
          File "tools/perf/python/twatch.py", line 40, in main
            evlist.poll(timeout = -1)
        KeyboardInterrupt
        [root@zoo linux]#

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Guy Streeter <streeter@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-1ukistmpamc5z717k80ctcp2@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7fd0ac66c2de5767e234fea6436d28dce210da80
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:32 2015 -0400

      i40e/i40evf: remove unused opcode

      This opcode is not required. VFs that program RSS through the firmware
      do it by interacting directly with the firmware, and do not need to use
      the virtual channel for this functionality.

      Change-ID: Iaf17d2600e28ff1b6be8653f2fe9df1facd23b0e
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 313ed2d52052ad8dab9a6182cde55a832873cbea
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:31 2015 -0400

      i40evf: propagate interrupt allocation failure

      Lower level functions are properly reporting errors, and higher-level
      functions are correctly responding to errors, but the errors aren't
      actually getting through. Typically, the middle-manager function seems
      to want to shield its boss from any bad news.

      This change fixes a panic if the driver is unable to enable MSI-X or is
      unable to acquire enough vectors.

      Change-ID: Ifd5787ce92519a5d97e4b465902db930d97b71a1
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2642f02528b6e9c1e904f6e3ec902d8a2deb7af5
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:30 2015 -0400

      i40e: Additional checks for CEE APP priority validity

      The firmware has added additional status information to allow software
      to determine if the APP priority for FCoE/iSCSI/FIP is valid or not in
      CEE DCBX mode.

      This patch adds to support those additional checks and will only add
      applications to the software table that have oper and sync bits set
      without any error.

      Change-ID: I0a76c52427dadf97d4dba4538a3068d05e4eb56b
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2fc3d7152ae9562c15c30ed4a766ba05a3db8200
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:29 2015 -0400

      i40e/i40evf: Add a stat to keep track of linearization count

      Keep track of how many times we ask the stack to linearize the
      skb because the HW cannot handle skbs with more than 8 frags per
      segment/single packet.

      Change-ID: If455452060963a769bbe6112cba952e79e944b52
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2f41f3358672dfda67c1e254f1e823d98e6a3099
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:20 2015 -0400

      i40e/i40evf: fix unicast mac address add

      When using something like "ip maddr add ..." to add another unicast mac
      address to the netdev, the mac address comes into the set_rx_mode handler
      in the multicast list whether it is a unicast or multicast address.
      This was confusing the code when it was trying to search for addresses
      that needed to be deleted from the VSI, because it was looking for the
      VSI unicast address in the netdev unicast list.  The result was that a
      new unicast address would get added to the VSI list and then immediately
      removed, and would never actually make it down into the hardware.

      This patch removes the separation from unicast and multicast in the search
      for filters to be deleted.  It also simplifies the logic a little with a
      jump to the bottom of the loop when an address is found.  Now it doesn't
      matter which netdev list the address is hiding in, we'll check them all.

      Change-ID: Ie3685a92427ae7d2212bf948919ce295bc7a874c
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a72a5abcb37beac163704efba6a3d33ebca4d90a
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:19 2015 -0400

      i40e: fix bug in return from get_link_status and avoid spurious link 
messages

      Previously, the driver could call this function and have only true/false
      returned, but false could mean multiple things like failure to read
      or link was down. This change allows the caller to get all return values
      in the call chain bubbled back to the source, which keeps information 
about
      failures from being lost.

      Also, in some unlikely scenarios, the firmware can become slow to respond
      to admin queue (AQ) queries for link state.  Should the AQ time out,
      the driver can detect the state and avoid a link change when there
      may have been none.

      Change-ID: Ib2ac38407b7880750fb891b392fa77457fe6c21c
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit dd38c583aea07c508caeaf979c64e267584ee067
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:18 2015 -0400

      i40e: add little endian conversion for checksum

      The checksum is not correct on big endian machines so add code to swap it
      correctly.

      Change-ID: Ic92b886d172a2cbe49f5d7eee1bc78e447023c7b
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Paul M Stillwell Jr <paul.m.stillwell.jr@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit fb43201f150300fa2c0215f00418eda9143cdab1
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:17 2015 -0400

      i40e/i40evf: give up the __func__

      During early development, we added the function name to all of the error
      strings to make debugging simpler. Now that we've released the driver,
      our users should have more comprehensible error messages. So tear the
      roof off and give up the __func__. Ow.

      Change-ID: I7e1766252c7a032b9af6520da6aff536bdfd533c
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0002e1189b594d462c7a93417f5ac8bbc22bd768
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:16 2015 -0400

      i40e: Never let speed get set to 0 in get_settings

      In ethtool, there is a possibility of speed getting set to 0
      if advertise is set to 0 (which it is when autoneg is disabled).
      We never want this to happen as the firmware will actually attempt
      to set the speed to 0 sending link down, so add an extra check
      to make sure this doesn't happen.

      Change-ID: I62e0eeee2cbf043d8e6f5c9c9f0b92794e877f01
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit fba52e21e5cad1347255d0d3600f7e4df6e69435
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:15 2015 -0400

      i40e: Fix for truncated interrupt name

      This patch extends the size of the text available for the interrupt names.
      Without this patch, all the descriptive data available for the Flow
      Director interrupts is truncated.

      Change-ID: I2ac458f23ac3b4ea8f1edf73edc283b1d3704c7f
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9e1c26e35030aa56057a69514acb17da5e81eb16
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:14 2015 -0400

      i40e/i40evf: assure clean asq status report

      There was a possibility where the asq_last_status could get through 
without
      update and thus report a previous error.  I don't think we've actually 
seen
      this happen, but this patch will help make sure it doesn't.

      Change-ID: I9e33927052a5ee6ea21f80b66d4c4b76c2760b17
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Signed-off-by: Christopher Pau <christopher.pau@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 21364bcfc7810894114ab18f5335745e374cc2ea
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:13 2015 -0400

      i40e: make i40e_init_pf_fcoe to void

      i40e_init_pf_fcoe() didn't return anything except 0, it prints enough
      error info already, and no driver logic depends on the return value,
      so this can be void.

      Change-ID: Ie6afad849857d87a7064c42c3cce14c74c2f29d8
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 725821f340184fcdd35dbd369c5058eec8a30fcb
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:12 2015 -0400

      i40e: fix bad CEE status shift value

      Fix a shift value that was wrong, ending up with a bad bitmask.  Also add
      a blank line between two sets of #defines for better readability.

      Change-ID: I3e41fa2a2ab904d3a4e6cbf13972ab0036a10601
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit df08fd4dbcc95cbc5a35745b6a77a9df0dc5776f
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:11 2015 -0400

      i40e/i40evf: fix a potential type compare issue

      Rework an if expression to assure there is no type compare problem between
      a size and a possible negative number.

      Change-ID: I4921fcc96abfcf69490efce020a9e4007f251c99
      Reported-by: Helin Zhang <helin.zhang@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bc5166b908aaa126d524b84c767323b75c17bdee
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:10 2015 -0400

      i40e/i40evf: add driver support for new device ids

      Early addition of new a device id.

      Change-ID: I61a8c8556fdf4f5714be4e4089689e374f30293c
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0325fca7577c5157da2cdf064fc3e8d38242e47c
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:09 2015 -0400

      i40e: stop VF rings

      Explicitly stop the rings belonging to each VF when disabling SR-IOV.
      Even though the VFs were gone, and the associated VSIs were removed, the
      rings were not stopped, and in some circumstances the hardware would
      continue to access the memory formerly used by the rings, causing memory
      corruption or DMAR errors, both of which would lead to general malaise
      of the kernel.

      To relieve this condition, explicitly stop all the rings associated with
      each VF before releasing its resources.

      Change-ID: I78c05d562c66e7b594b7e48d67860f49b3e5b6ec
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1d5109d18757d8d6450905275bf362819781368c
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:08 2015 -0400

      i40e: enable WoL operation if config bit show WoL capable

      The driver was disabling Wake-on-LAN by default and waiting for the user
      to expressly turn it on.  This patch has the driver turning on WoL from
      the start if enabled in the hardware config, which matches the behavior
      of our other drivers.

      Change-ID: I43faedb907f8ba4d1a61b72a7c86072b97af12b1
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 22e05bd6f7949d3e638c9f4697a2198a19fff312
  Author: Paul M Stillwell Jr <paul.m.stillwell.jr@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:07 2015 -0400

      i40e: Increase the amount of time we wait for reset to be done

      In some rare cases the reset can take longer to complete so increase the
      amount of time we wait.

      Change-ID: Ib5628ec54b526a811ee33d1214fe763226406671
      Signed-off-by: Paul M Stillwell Jr <paul.m.stillwell.jr@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c3984cc994377671f18d3d719ddd86b5107457ee
  Merge: 8ace60f a54c8f0
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Wed Oct 7 13:50:17 2015 -0600

      Merge branch 'stable/for-jens-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen into for-linus

      Konrad writes:

      Please git pull an update branch to your 'for-4.3/drivers' branch (which
      oddly I don't see does not have the previous pull?)

       git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen.git 
stable/for-jens-4.3

      which has two fixes - one where we use the Xen blockfront EFI driver and
      don't release all the requests, the other if the allocation of resources
      for a particular state failed - we would go back 'Closing' and assume
      that an structure would be allocated while in fact it may not be - and
      crash.

  commit 9d99c7123c9af5f47a2037933a3ffaec3e37efad
  Author: Christian Melki <christian.melki@xxxxxxxxxx>
  Date:   Mon Oct 5 17:31:33 2015 +0200

      swiotlb: Enable it under x86 PAE

      Most distributions end up enabling SWIOTLB already with 32-bit
      kernels due to the combination of CONFIG_HYPERVISOR_GUEST|CONFIG_XEN=y
      as those end up requiring the SWIOTLB.

      However for those that are not interested in virtualization and
      run in 32-bit they will discover that: "32-bit PAE 4.2.0 kernel
      (no IOMMU code) would hang when writing to my USB disk. The kernel
      spews million(-ish messages per sec) to syslog, effectively
      "hanging" userspace with my kernel.

      Oct  2 14:33:06 voodoochild kernel: [  223.287447] nommu_map_sg:
      overflow 25dcac000+1024 of device mask ffffffff
      Oct  2 14:33:06 voodoochild kernel: [  223.287448] nommu_map_sg:
      overflow 25dcac000+1024 of device mask ffffffff
      Oct  2 14:33:06 voodoochild kernel: [  223.287449] nommu_map_sg:
      overflow 25dcac000+1024 of device mask ffffffff
      ... etc ..."

      Enabling it makes the problem go away.

      N.B. With a6dfa128ce5c414ab46b1d690f7a1b8decb8526d
      "config: Enable NEED_DMA_MAP_STATE by default when SWIOTLB is selected"
      we also have the important part of the SG macros enabled to make this
      work properly - in case anybody wants to backport this patch.

      Reported-and-Tested-by: Christian Melki <christian.melki@xxxxxxxxxx>
      Signed-off-by: Christian Melki <christian.melki@xxxxxxxxxx>
      Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>

  commit a54c8f0f2d7df525ff997e2afe71866a1a013064
  Author: Cathy Avery <cathy.avery@xxxxxxxxxx>
  Date:   Fri Oct 2 09:35:01 2015 -0400

      xen-blkfront: check for null drvdata in blkback_changed 
(XenbusStateClosing)

      xen-blkfront will crash if the check to talk_to_blkback()
      in blkback_changed()(XenbusStateInitWait) returns an error.
      The driver data is freed and info is set to NULL. Later during
      the close process via talk_to_blkback's call to xenbus_dev_fatal()
      the null pointer is passed to and dereference in blkfront_closing.

      CC: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Cathy Avery <cathy.avery@xxxxxxxxxx>
      Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>

  commit 601d62959d08a450d4666c728ddd2f47c5ba1cfe
  Merge: 225db57 e4fc141
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Wed Oct 7 20:11:21 2015 +0200

      Merge tag 'asoc-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

      ASoC: Fixes for v4.3

      Quite a few fixes here but they're all very small and driver specific,
      none of them really stand out if you aren't using the relevant hardware
      but they're all useful if you do happen to have an affected device.

  commit 15e3d5a285ab9283136dba34bbf72886d9146706
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Sat Oct 3 19:16:07 2015 +0200

      3w-9xxx: don't unmap bounce buffered commands

      3w controller don't dma map small single SGL entry commands but instead
      bounce buffer them.  Add a helper to identify these commands and don't
      call scsi_dma_unmap for them.

      Based on an earlier patch from James Bottomley.

      Fixes: 118c85 ("3w-9xxx: fix command completion race")
      Reported-by: Tóth Attila <atoth@xxxxxxxxxxxxx>
      Tested-by: Tóth Attila <atoth@xxxxxxxxxxxxx>
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Adam Radford <aradford@xxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit c6fa8e6de3dc420cba092bf155b2ed25bcd537f7
  Merge: e82fa92 62c6c61
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 18:17:46 2015 +0100

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Will Deacon:
       "This addresses a couple of issues found with RT, a broken initrd
        message in the console log and a simple performance fix for some MMC
        workloads.

        Summary:

         - A couple of locking fixes for RT kernels
         - Avoid printing bogus initrd warnings when initrd isn't present
         - Performance fix for random mmap file readahead
         - Typo fix"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: replace read_lock to rcu lock in call_break_hook
        arm64: Don't relocate non-existent initrd
        arm64: convert patch_lock to raw lock
        arm64: readahead: fault retry breaks mmap file read random detection
        arm64: debug: Fix typo in debug-monitors.c

  commit e82fa92e6208fa3d82c28bf006aea98c2cd6df1b
  Merge: 8ace60f d663bab
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 18:05:09 2015 +0100

      Merge tag 'fbdev-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tomba/linux

      Pull fbdev fixes from Tomi Valkeinen:

       - fbdev: Minor fixes to broadsheetfb, fsl-diu-fb, mb862xxfb, tridentfb,
         omapfb

       - display-timing: Fix memory leak in error path

      * tag 'fbdev-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tomba/linux:
        video: of: fix memory leak
        fbdev: broadsheetfb: fix memory leak
        OMAPDSS: panel-sony-acx565akm: Export OF module alias information
        fbdev: omap2: connector-dvi: use of_get_i2c_adapter_by_node interface
        tridentfb: Fix set_lwidth on TGUI9440 and CYBER9320
        tridentfb: fix hang on Blade3D with CONFIG_CC_OPTIMIZE_FOR_SIZE
        video: fbdev: mb862xx: Fix module autoload for OF platform driver
        video: fbdev: fsl: Fix the sleep function for FSL DIU module

  commit 00e6fa5fe15c0eccc95a9d1afc4615e467ee8dc9
  Merge: a0eeb8d 9fb4765
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 7 18:33:10 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fix from Arnaldo Carvalho de Melo:

        - Fix build break on (at least) powerpc due to sample_reg_masks, not 
being
          available for linking. (Sukadev Bhattiprolu)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1266963170f576d4d08e6310b6963e26d3ff9d1e
  Author: Sasha Levin <sasha.levin@xxxxxxxxxx>
  Date:   Wed Oct 7 11:03:28 2015 -0500

      PCI: Prevent out of bounds access in numa_node override

      63692df103e9 ("PCI: Allow numa_node override via sysfs") didn't check that
      the numa node provided by userspace is valid.  Passing a node number too
      high would attempt to access invalid memory and trigger a kernel panic.

      Fixes: 63692df103e9 ("PCI: Allow numa_node override via sysfs")
      Signed-off-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx        # v3.19+

  commit e4fc141d2a022a63c87a4851b3c688eca6a1647b
  Merge: 1e2fa4c 2d1180e 57622ae
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Oct 7 16:07:50 2015 +0100

      Merge remote-tracking branches 'asoc/fix/tlv320aic3x' and 
'asoc/fix/wm8962' into asoc-linus

  commit 1e2fa4cfdbf21b3c071e0d9739dce5aac9edcb85
  Merge: 049e6dd e74679b 924eb47 b7b01d3 ff6afc8 8c1a9d6 e256da8 e260046
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Oct 7 16:07:16 2015 +0100

      Merge remote-tracking branches 'asoc/fix/db1200', 'asoc/fix/dwc', 
'asoc/fix/imx-ssi', 'asoc/fix/maintainers', 'asoc/fix/rt5645', 
'asoc/fix/sgtl5000' and 'asoc/fix/tas2552' into asoc-linus

  commit 028423b0d8fa27c30a46da4af2a5cab230369de6
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 7 09:41:27 2015 +0200

      drm/amdgpu: fix 32-bit compiler warning

      The new amdgpu driver passes a user space pointer in a 64-bit structure
      member, which is the correct way to do it, but it attempts to
      directly cast it to a __user pointer in the kernel, which causes
      a warning in three places:

      drm/amd/amdgpu/amdgpu_cs.c: In function 'amdgpu_cs_parser_init':
      drm/amd/amdgpu/amdgpu_cs.c:180:21: warning: cast to pointer from integer 
of different size [-Wint-to-pointer-cast]
        chunk_array_user = (uint64_t __user *)(cs->in.chunks);

      This changes all three to add an intermediate cast to 'unsigned long'
      as other drivers do. This avoids the warning and works correctly on
      both 32-bit and 64-bit architectures.

      Fixes: e60b344f6c0eff ("drm/amdgpu: optimize amdgpu_parser_init")

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 70e238df1daa05366d091d75163e1b08d7f122c3
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:08 2015 +0100

      MAINTAINERS: add myself as arm perf reviewer

      As suggested by Will Deacon, add myself as a reviewer of the ARM PMU
      profiling and debugging code.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit dd06a84bf6446dab1592d4c7908a3037fbccdf1e
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:07 2015 +0100

      MAINTAINERS: update ARM PMU profiling and debugging for arm64

      Will Deacon maintains the profiling and debugging code under both
      arch/arm and arch/arm64. Update MAINTAINERS to reflect this, in
      preparation for adding myself as a reviewer of said code.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 01a507a371a35a5ee2b283af2ae7f8ed0b5e36f1
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:06 2015 +0100

      arm64: dts: juno: describe PMUs separately

      The A57 and A53 PMUs in Juno support different events, so describe them
      separately in both the Juno and Juno R1 DTs.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Liviu Dudau <liviu.dudau@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 62a4dda9d63a10e5b28943967fc936c74fa16dfb
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:05 2015 +0100

      arm64: perf: add Cortex-A57 support

      The Cortex-A57 PMU supports a few events outside of the required PMUv3
      set that are rather useful.

      This patch adds the event map data for said events.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ac82d12772158dfbc1d3827a68b317e10326bbaa
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:04 2015 +0100

      arm64: perf: add Cortex-A53 support

      The Cortex-A53 PMU supports a few events outside of the required PMUv3
      set that are rather useful.

      This patch adds the event map data for said events.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 6475b2d846176e3272351266869481a21ff47866
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:03 2015 +0100

      arm64: perf: move to shared arm_pmu framework

      Now that the arm_pmu framework has been factored out to drivers/perf we
      can make use of it for arm64, gaining support for heterogeneous PMUs
      and unifying the two codebases before they diverge further.

      The as yet unused PMU name for PMUv3 is changed to armv8_pmuv3, matching
      the style previously applied to the 32-bit PMUs.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9fb4765451f22c5e782c1590747717550bff34b2
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 17:53:49 2015 -0400

      perf tools: Fix build break on powerpc due to sample_reg_masks

      perf_regs.c does not get built on Powerpc as CONFIG_PERF_REGS is false.
      So the weak definition for 'sample_regs_masks' doesn't get picked up.

      Adding perf_regs.o to util/Build unconditionally, exposes a redefinition
      error for 'perf_reg_value()' function (due to the static inline version
      in util/perf_regs.h). So use #ifdef HAVE_PERF_REGS_SUPPORT' around that
      function.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Naveen N. Rao <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150930182836.GA27858@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8f48c0629049fdebb6e783803325bff19176d3fd
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Oct 7 11:37:36 2015 +0100

      arm64: hw_breakpoint: use target state to determine ABI behaviour

      The arm64 hw_breakpoint interface is slightly less flexible than its
      32-bit counterpart, thanks to some changes in the architecture rendering
      unaligned watchpoint addresses obselete for AArch64.

      However, in a multi-arch environment (i.e. debugging a 32-bit target
      with a 64-bit GDB under a 64-bit kernel), we need to provide a feature
      compatible interface to GDB in order for debugging to function correctly.

      This patch adds a new helper, is_compat_bp,  to our hw_breakpoint
      implementation which changes the interface behaviour based on the
      architecture of the debug target as opposed to the debugger itself.
      This allows debugged to function as expected for multi-arch
      configurations without relying on deprecated architectural behaviours
      when debugging native applications.

      Cc: Yao Qi <yao.qi@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 8ace60f8b760ff79aa2734e5e96223deae69f5f2
  Merge: 07443ce 176fc2d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 14:15:49 2015 +0100

      Merge tag 'regmap-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap

      Pull regmap fixes from Mark Brown:
       "A couple of fixes for the debugfs information on the register map,
        fixing issues with very small reads potentially causing underflows and
        wraparounds"

      * tag 'regmap-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap:
        regmap: debugfs: Don't bother actually printing when calculating max 
length
        regmap: debugfs: Ensure we don't underflow when printing access masks

  commit 07443cecdf68b4cf4c7d8ee0dbe0b2aa94c3e661
  Merge: 21f3c96 c2c80bd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 14:13:10 2015 +0100

      Merge tag 'spi-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi

      Pull spi fixes from Mark Brown:
       "A couple of very minor fixes, one for error handling in the Davinci
        driver probe function and another making the Renesas sh-msiof DT
        binding documentation correspond to what's actually implemented"

      * tag 'spi-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:
        spi: sh-msiof: Match renesas,rx-fifo-size in DT bindings doc with driver
        spi: davinci: fix handling platform_get_irq result

  commit 21f3c96188f1a1e592174bef3180d147e06f7b89
  Merge: 79c7c7a 22ca03a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 14:11:47 2015 +0100

      Merge tag 'regulator-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator

      Pull regulator fixes from Mark Brown:
       "Two fixes here, one device specific fix for axp20x and a core fix for
         cases where one regulator is supplying another which broke probe
        deferral, substituting in a dummy regulator too aggressively"

      * tag 'regulator-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:
        regulator: core: Handle probe deferral from DT when resolving supplies
        regulator: axp20x: Fix enable bit indexes for DCDC4 and DCDC5

  commit acb4a6bfc80ddeea4c44074dd630f916259e909e
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Oct 6 14:49:58 2015 -0700

      tcp: ensure prior synack rtx behavior with small backlogs

      Some applications use a listen() backlog of 1.

      Prior kernels were silently enforcing a qlen_log of 4, so that we were
      sending up to /proc/sys/net/ipv4/tcp_synack_retries SYNACK messages.

      Fixes: ef547f2ac16b ("tcp: remove max_qlen_log")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 41747509b437dcca880b52a035453f5e4ba14aa4
  Merge: 6087286 ab38a7b
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 05:03:16 2015 -0700

      Merge branch 'ovs-ct-fixes'

      Joe Stringer says:

      ====================
      OVS conntrack fixes for net

      The userspace side of the Open vSwitch conntrack changes is currently
      undergoing review, which has highlighted some minor bugs in the existing
      conntrack implementation in the kernel, as well as pointing out some
      future-proofing that can be done on the interface to reduce the need for
      additional compatibility code in future.

      The biggest changes here are to the userspace API for the ct_state match
      field and the CT action. This series proposes to firstly extend the 
ct_state
      match field to 32 bits, ensuring to reject any currently unsupported bits.
      Secondly, rather than representing CT action flags within a 32-bit field,
      simply use a netlink attribute as presence of the single flag that is
      defined today. This also serves to reject unsupported ct action flag bits.

      v4: Use 12-character abbreviated hashes in commit messages.
      v3: Fully acked.
      v2: Address minor style feedback, add acks.
      v1: Initial post.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab38a7b5a4493a3658d891a8e91f9ffcb3d2defb
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 11:00:01 2015 -0700

      openvswitch: Change CT_ATTR_FLAGS to CT_ATTR_COMMIT

      Previously, the CT_ATTR_FLAGS attribute, when nested under the
      OVS_ACTION_ATTR_CT, encoded a 32-bit bitmask of flags that modify the
      semantics of the ct action. It's more extensible to just represent each
      flag as a nested attribute, and this requires no additional error
      checking to reject flags that aren't currently supported.

      Suggested-by: Ben Pfaff <blp@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fbccce5965a58d56aaed9e9acd1bec75d8a66e87
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 11:00:00 2015 -0700

      openvswitch: Extend ct_state match field to 32 bits

      The ct_state field was initially added as an 8-bit field, however six of
      the bits are already being used and use cases are already starting to
      appear that may push the limits of this field. This patch extends the
      field to 32 bits while retaining the internal representation of 8 bits.
      This should cover forward compatibility of the ABI for the foreseeable
      future.

      This patch also reorders the OVS_CS_F_* bits to be sequential.

      Suggested-by: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6f225952461b5e9b5520d0dc6e2ff0af57874fbb
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 10:59:59 2015 -0700

      openvswitch: Reject ct_state unsupported bits

      Previously, if userspace specified ct_state bits in the flow key which
      are currently undefined (and therefore unsupported), then they would be
      ignored. This could cause unexpected behaviour in future if userspace is
      extended to support additional bits but attempts to communicate with the
      current version of the kernel. This patch rectifies the situation by
      rejecting such ct_state bits.

      Fixes: 7f8a436eaa2c "openvswitch: Add conntrack action"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec0d043d05e6e3c0c2fac5de922c800c027c6386
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 10:59:58 2015 -0700

      openvswitch: Ensure flow is valid before executing ct

      The ct action uses parts of the flow key, so we need to ensure that it
      is valid before executing that action.

      Fixes: 7f8a436eaa2c "openvswitch: Add conntrack action"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b8f2257069f179c7bdedc9501c1623070c4c37bb
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 10:59:57 2015 -0700

      openvswitch: Fix skb leak in ovs_fragment()

      If ovs_fragment() was unable to fragment the skb due to an L2 header
      that exceeds the supported length, skbs would be leaked. Fix the bug.

      Fixes: 7f8a436eaa2c "openvswitch: Add conntrack action"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a7cc172a01e4a203667fb601cd80131db8d0c9a
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 10:59:56 2015 -0700

      openvswitch: Fix typos in CT headers

      These comments hadn't caught up to their implementations, fix them.

      Fixes: 7f8a436eaa2c "openvswitch: Add conntrack action"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 686a562449af96a0e8c18c6f1b87b47ff8c36de8
  Author: Yuvaraja Mariappan <ymariappan@xxxxxxxxx>
  Date:   Tue Oct 6 10:53:29 2015 -0700

      net: ipv4: tcp.c Fixed an assignment coding style issue

      Fixed an assignment coding style issue

      Signed-off-by: Yuvaraja Mariappan <ymariappan@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 60872867d83581635d7b2948a027449ef5c9be32
  Merge: 6e28b00 4d7f3e7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:56:12 2015 -0700

      Merge branch 'dsa-unbind'

      Neil Armstrong says:

      ====================
      net: dsa: complete and fix the dsa unbinding

      In order to cleanly unbind the dsa core, either as a module removal,
      or a platform device unbind, switch the allocation the their devm_
      counterparts and complete the destroy functions.

      First, the missing kfree were added, the remove function were
      completed then kfree were removed in favor to devm_ calls.

      The last patch is an way to cleanly exit the probe when no
      switch is found in the discover process.

      The patches are based on the current net.

      v3:
       - make checkpatch happy with 1/5 & 5/5
       - fix 5/5 exit path with a goto
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d7f3e757c15051b4521a59791de87ce748c0eb2
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:40:43 2015 +0100

      net: dsa: exit probe if no switch were found

      If no switch were found in dsa_setup_dst, return -ENODEV and
      exit the dsa_probe cleanly.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d4ac35d6ed82e6c96ed5c016ea46fad31294fa7a
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:40:37 2015 +0100

      net: dsa: switch to devm_ calls and remove kfree calls

      Now the kfree calls exists in the the remove functions, remove them in all
      places except the of_probe functions and replace allocation calls
      with their devm_ counterparts.

      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cbc5d90b378cd255ffedeb12f5affe243230d47e
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:40:32 2015 +0100

      net: dsa: complete dsa_switch_destroy

      When unbinding dsa, complete the dsa_switch_destroy to unregister the
      fixed link phy then cleanly unregister and destroy the net devices.

      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e410ddb89ee8e68103ea58938b4972da594e3d2d
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:40:25 2015 +0100

      net: dsa: add missing dsa_switch mdiobus remove

      To prevent memory leakage on unbinding, add missing mdiobus unregister
      and unallocation calls.

      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1023d2ec1e8bd63ede9ed1d93ebb797f650859b7
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:39:53 2015 +0100

      net: dsa: add missing kfree on remove

      To prevent memory leakage on unbinding, add missing kfree calls.
      Includes minor cosmetic change to make patch clean.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 729ecbc77a1fe763de409be0307c61c1fa32cc06
  Merge: 68e4bd2 ec6674c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:52:14 2015 -0700

      Merge branch 's390-net'

      Ursula Braun says:

      ====================
      s390: qeth patches for net-next

      here are some s390 related patches for net-next. The qeth patches
      are performance optimizations in the driver. The qdio patch corrects
      a warning condition.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec6674c6382819542446b727a2bf54f3dd879ca2
  Author: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
  Date:   Tue Oct 6 15:12:29 2015 +0200

      s390/qdio: fix WARN_ON_ONCE condition

      If HiperSockets Completion Queueing is enabled, qdio always
      issues a warning, since the condition is always met.
      This patch fixes the condition in WARN_ON_ONCE that was always
      true.

      Signed-off-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fe5c802882f2eaaf5475b072f16066038754782a
  Author: Lakhvich Dmitriy <ldmitriy@xxxxxxxxxx>
  Date:   Tue Oct 6 15:12:28 2015 +0200

      s390/qeth: optimize MAC handling in rx_mode callback

      In layer2 mode of the qeth driver, MAC address lists
      from struct net_device require mapping to the OSA-card.
      The existing implementation is inefficient for lists with
      more than several MAC addresses, since for every
      ndo_set_rx_mode callback it removes all MAC addresses first,
      and then registers the current MAC address list.
      This patch changes implementation of ndo_set_rx_mode callback
      in qeth, only performing hardware registration/removal for
      new/deleted addresses. To shorten lookup of MAC addresses
      registered addresses are kept in a hashtable instead of a
      linear list.

      Signed-off-by: Lakhvich Dmitriy <ldmitriy@xxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Reviewed-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Reviewed-by: Thomas Richter <tmricht@xxxxxxxxxx>
      Tested-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9abfa8cb201b2167872654b92f567f8bff6016f4
  Author: Thomas Richter <tmricht@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:12:27 2015 +0200

      s390/qeth: switch to napi_gro_receive

      Add support for GRO (generic receive offload) in the layer 2
      part of device driver qeth. This results in a performance
      improvement when GRO and RX is turned on.

      Signed-off-by: Thomas Richter <tmricht@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 68e4bd2778fb48a98cf9db8e218ef2f3a817bafc
  Merge: deaa0a6 5d6ae47
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:49:39 2015 -0700

      Merge branch 'bridge-netlink-port-attrs'

      Nikolay Aleksandrov says:

      ====================
      bridge: netlink: complete port attribute support

      This is the second set that completes the bridge port's netlink support 
and
      makes everything from sysfs available via netlink. I've used sysfs as a
      guide of what and how to set again. I've tested setting/getting every
      option and also this time tested enabling KASAN. Again there're a few long
      line warnings about the ifla attribute names in br_port_info_size() but
      as the previous set - it's good to know what's been accounted for.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5d6ae479ab7ddf77bb22bdf739268581453ff886
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:12:02 2015 +0200

      bridge: netlink: add support for port's multicast_router attribute

      Add IFLA_BRPORT_MULTICAST_ROUTER to allow setting/getting port's
      multicast_router via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9b0c6e4deb3df91bf0aea8158ea77dc58c9d90b6
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:12:01 2015 +0200

      bridge: netlink: allow to flush port's fdb

      Add IFLA_BRPORT_FLUSH to allow flushing port's fdb similar to sysfs's
      flush.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61c0a9a83e0b12c712cd686172446aba8ea48685
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:12:00 2015 +0200

      bridge: netlink: export port's timer values

      Add the following attributes in order to export port's timer values:
      IFLA_BRPORT_MESSAGE_AGE_TIMER, IFLA_BRPORT_FORWARD_DELAY_TIMER and
      IFLA_BRPORT_HOLD_TIMER.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e08e838ac5707cb1f1294e0d53b31997a0367b99
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:59 2015 +0200

      bridge: netlink: export port's topology_change_ack and config_pending

      Add IFLA_BRPORT_TOPOLOGY_CHANGE_ACK and IFLA_BRPORT_CONFIG_PENDING to
      allow getting port's topology_change_ack and config_pending respectively
      via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 42d452c4b5e7bf0e3024fa9512ec462f70545ae5
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:58 2015 +0200

      bridge: netlink: export port's id and number

      Add IFLA_BRPORT_(ID|NO) to allow getting port's port_id and port_no
      respectively via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 96f94e7f4a216282a24819968184c881e6343692
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:57 2015 +0200

      bridge: netlink: export port's designated cost and port

      Add IFLA_BRPORT_DESIGNATED_(COST|PORT) to allow getting the port's
      designated cost and port respectively via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 80df9a2692edf7afffda9282e716e7b1df198e07
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:56 2015 +0200

      bridge: netlink: export port's bridge id

      Add IFLA_BRPORT_BRIDGE_ID to allow getting the designated bridge id via
      netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ebc7660ab4559cad10b6595e05f70562bb26dc5
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:55 2015 +0200

      bridge: netlink: export port's root id

      Add IFLA_BRPORT_ROOT_ID to allow getting the designated root id via
      netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit deaa0a6a930edc79081268bf23b196d0340499af
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 10:49:04 2015 -0700

      net: Lookup actual route when oif is VRF device

      If the user specifies a VRF device in a get route query the custom route
      pointing to the VRF device is returned:

          $ ip route ls table vrf-red
          unreachable default
          broadcast 10.2.1.0 dev eth1  proto kernel  scope link  src 10.2.1.2
          10.2.1.0/24 dev eth1  proto kernel  scope link  src 10.2.1.2
          local 10.2.1.2 dev eth1  proto kernel  scope host  src 10.2.1.2
          broadcast 10.2.1.255 dev eth1  proto kernel  scope link  src 10.2.1.2

          $ ip route get oif vrf-red 10.2.1.40
          10.2.1.40 dev vrf-red
              cache

      Add the flags to skip the custom route and go directly to the FIB. With
      this patch the actual route is returned:

          $ ip route get oif vrf-red 10.2.1.40
          10.2.1.40 dev eth1  src 10.2.1.2
              cache

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2579c98f0d04075ab8b041de7d5396393d2417f1
  Merge: 390a4be 5edfcee
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:29:18 2015 -0700

      Merge tag 'mac80211-next-for-davem-2015-10-05' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

      Johannes Berg says:

      ====================
      For the current cycle, we have the following right now:
       * many internal fixes, API improvements, cleanups, etc.
       * full AP client state tracking in cfg80211/mac80211 from Ayala
       * VHT support (in mac80211) for mesh
       * some A-MSDU in A-MPDU support from Emmanuel
       * show current TX power to userspace (from RafaÅ?)
       * support for netlink dump in vendor commands (myself)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 390a4bee5c2ade628565dd21fb5d8656a58f7804
  Merge: 4148987 bb191c3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:27:51 2015 -0700

      Merge branch 'l3mdev_saddr_op'

      David Ahern says:

      ====================
      net: Add saddr op to l3mdev and vrf

      First 2 patches are re-sends of patches that got lost in the ethosphere
      Tuesday; they were part of the first round of l3mdev conversions.
      Next 3 handle the source address lookup for raw and datagram sockets
      bound to a VRF device.

      The conversion to the get_saddr op also fixes locally originated TCP
      packets showing up at the VRF device. The use of the FLOWI_FLAG_L3MDEV_SRC
      flag in ip_route_connect_init was causing locally generated packets
      to skip the VRF device.

      v2
      - rebased to top of net-next per device delete fix and hash based
        multipath patches
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bb191c3e874650ae8f701885f3dd5f8ea8989b19
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:27 2015 -0700

      net: Add l3mdev saddr lookup to raw_sendmsg

      ping originated on box through a VRF device is showing up in tcpdump
      without a source address:
          $ tcpdump -n -i vrf-blue
          08:58:33.311303 IP 0.0.0.0 > 10.2.2.254: ICMP echo request, id 2834, 
seq 1, length 64
          08:58:33.311562 IP 10.2.2.254 > 10.2.2.2: ICMP echo reply, id 2834, 
seq 1, length 64

      Add the call to l3mdev_get_saddr to raw_sendmsg.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8cbb512c923d5f695ff6265b2b741b1718e3b444
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:26 2015 -0700

      net: Add source address lookup op for VRF

      Add operation to l3mdev to lookup source address for a given flow.
      Add support for the operation to VRF driver and convert existing
      IPv4 hooks to use the new lookup.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ce58d84358c7b477811b5100152fad848f936fc
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:25 2015 -0700

      net: Refactor path selection in __ip_route_output_key_hash

      VRF device needs the same path selection following lookup to set source
      address. Rather than duplicating code, move existing code into a
      function that is exported to modules.

      Code move only; no functional change.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fee6d4c777a125e56de9370db3b2bf359bf958d6
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:24 2015 -0700

      net: Add netif_is_l3_slave

      IPv6 addrconf keys off of IFF_SLAVE so can not use it for L3 slave.
      Add a new private flag and add netif_is_l3_slave function for checking
      it.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e2895a8e3824eb5611c97a015a3b6d678b4503e
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:23 2015 -0700

      net: Rename FLOWI_FLAG_VRFSRC to FLOWI_FLAG_L3MDEV_SRC

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e28b000825d959cb0c0b8fea8c2f132ddc516dc
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:32:51 2015 -0600

      net: Fix vti use case with oif in dst lookups for IPv6

      It occurred to me yesterday that 741a11d9e4103 ("net: ipv6: Add
      RT6_LOOKUP_F_IFACE flag if oif is set") means that xfrm6_dst_lookup
      needs the FLOWI_FLAG_SKIP_NH_OIF flag set. This latest commit causes
      the oif to be considered in lookups which is known to break vti. This
      explains why 58189ca7b274 did not the IPv6 change at the time it was
      submitted.

      Fixes: 42a7b32b73d6 ("xfrm: Add oif to dst lookups")
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4148987a5111b0c8062bd78f39a67c361f621a39
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:32:51 2015 -0600

      net: Fix vti use case with oif in dst lookups for IPv6

      It occurred to me yesterday that 741a11d9e4103 ("net: ipv6: Add
      RT6_LOOKUP_F_IFACE flag if oif is set") means that xfrm6_dst_lookup
      needs the FLOWI_FLAG_SKIP_NH_OIF flag set. This latest commit causes
      the oif to be considered in lookups which is known to break vti. This
      explains why 58189ca7b274 did not the IPv6 change at the time it was
      submitted.

      Fixes: 42a7b32b73d6 ("xfrm: Add oif to dst lookups")
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3e905b80b92146d8dd0bf2da3ade0944a3026597
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:19:59 2015 +0300

      gianfar: Add WAKE_UCAST and "wake-on-filer" support

      This enables eTSEC's filer (Rx parser) and the FGPI Rx
      interrupt (Filer General Purpose Interrupt) as a wakeup
      source event.

      Upon entering suspend state, the eTSEC filer is given
      a rule to match incoming L2 unicast packets.  A packet
      matching the rule will be enqueued in the Rx ring and
      a FGPI Rx interrupt will be asserted by the filer to
      wakeup the system.  Other packet types will be dropped.
      On resume the filer table is restored to the content
      before entering suspend state.
      The set of rules from gfar_filer_config_wol() could be
      extended to implement other WoL capabilities as well.

      The "fsl,wake-on-filer" DT binding enables this capability
      on certain platforms that feature the necessary power
      management infrastructure, targeting mainly printing and
      imaging applications.
      (refer to Power Management section of the SoC Ref Man)

      Cc: Li Yang <leoli@xxxxxxxxxxxxx>
      Cc: Zhao Chenhui <chenhui.zhao@xxxxxxxxxxxxx>

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70963d245ed11412658b89fe308b6188b62259c7
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:19:58 2015 +0300

      powerpc: dts: p1022si: Add fsl,wake-on-filer for eTSEC

      Enable the "wake-on-filer" (aka. wake on user defined packet)
      wake on lan capability for the eTSEC ethernet nodes.

      Cc: Li Yang <leoli@xxxxxxxxxxxxx>
      Cc: Zhao Chenhui <chenhui.zhao@xxxxxxxxxxxxx>

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 66cebb86ac77c6dff0751efa382551cab24075cd
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:19:57 2015 +0300

      doc: dt: net: Add fsl,wake-on-filer for eTSEC

      Add the "fsl,wake-on-filer" property for eTSEC nodes to
      indicate that the system has the power management
      infrastructure needed to be able to wake up the system
      via FGPI (filer, aka. h/w rx parser) interrupt.

      Cc: Li Yang <leoli@xxxxxxxxxxxxx>
      Cc: Zhao Chenhui <chenhui.zhao@xxxxxxxxxxxxx>

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04a8250b40394f34a54439c62c883322b3107bd2
  Merge: 4917a15 6b26ba3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:18:04 2015 -0700

      Merge branch 'ovs-ipv6-tunnel'

      Jiri Benc says:

      ====================
      openvswitch: add IPv6 tunneling support

      This builds on the previous work that added IPv6 support to lwtunnels and
      adds IPv6 tunneling support to ovs.

      To use IPv6 tunneling, there needs to be a metadata based tunnel 
net_device
      created and added to the ovs bridge. Currently, only vxlan is supported by
      the kernel, with geneve to follow shortly. There's no need nor intent to 
add
      a support for this into the vport-vxlan (etc.) compat layer.

      v3: dropped the last two patches added in v2.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6b26ba3a7d952e611dcde1f3f77ce63bcc70540a
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Mon Oct 5 13:09:47 2015 +0200

      openvswitch: netlink attributes for IPv6 tunneling

      Add netlink attributes for IPv6 tunnel addresses. This enables IPv6 
support
      for tunnels.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 00a93babd06aaad31d23384cda576ede0f586a8c
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Mon Oct 5 13:09:46 2015 +0200

      openvswitch: add tunnel protocol to sw_flow_key

      Store tunnel protocol (AF_INET or AF_INET6) in sw_flow_key. This field now
      also acts as an indicator whether the flow contains tunnel data (this was
      previously indicated by tun_key.u.ipv4.dst being set but with IPv6 
addresses
      in an union with IPv4 ones this won't work anymore).

      The new field was added to a hole in sw_flow_key.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4917a1548ff41e53d863d6845b4da1884e4282b4
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 12:11:21 2015 +0200

      bridge: netlink: make br_fill_info's frame size smaller

      When KASAN is enabled the frame size grows > 2048 bytes and we get a
      warning, so make it smaller.
      net/bridge/br_netlink.c: In function 'br_fill_info':
      >> net/bridge/br_netlink.c:1110:1: warning: the frame size of 2160 bytes
      >> is larger than 2048 bytes [-Wframe-larger-than=]

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d663baba8b16f3097ac3fb5baf97c54970d2f1ff
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 30 15:24:08 2015 +0530

      video: of: fix memory leak

      If of_parse_display_timing() fails we are printing an error message and
      jumping to the error path but we missed freeing "dt".

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 90d2c056bd85bbb47104c52e08eecf8408163a54
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Sat Oct 3 17:13:05 2015 -0700

      i40e/i40evf: set AQ count after memory allocation

      The standard way to check if the AQ is enabled is to look at the
      count field. So we should only set this field after we have
      successfully allocated memory. To do otherwise is to incite
      panic among the populace.

      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 16660f0bd942cec203eaf4de0e2ac1695bd9d32d
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 11:43:46 2015 -0700

      net: Add support for filtering neigh dump by device index

      Add support for filtering neighbor dumps by device by adding the
      NDA_IFINDEX attribute to the dump request.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 120798d2e7d1ac87365fe5ea91b074bb42ca1eff
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:30 2015 +0100

      arm64: mm: remove dsb from update_mmu_cache

      update_mmu_cache() consists of a dsb(ishst) instruction so that new user
      mappings are guaranteed to be visible to the page table walker on
      exception return.

      In reality this can be a very expensive operation which is rarely needed.
      Removing this barrier shows a modest improvement in hackbench scores and
      , in the worst case, we re-take the user fault and establish that there
      was nothing to do.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 28c6fbc3b446caf5f8d1f2d7b79e09e743158a4d
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:29 2015 +0100

      arm64: tlb: remove redundant barrier from __flush_tlb_pgtable

      __flush_tlb_pgtable is used to invalidate intermediate page table
      entries after they have been cleared and are about to be freed. Since
      pXd_clear imply memory barriers, we don't need the extra one here.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 38d96287504a2478eb538bfecfa1fddd743bb6b2
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:28 2015 +0100

      arm64: mm: kill mm_cpumask usage

      mm_cpumask isn't actually used for anything on arm64, so remove all the
      code trying to keep it up-to-date.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c2775b2ee5caca19f661ee2ab5af92462596db71
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:27 2015 +0100

      arm64: switch_mm: simplify mm and CPU checks

      switch_mm performs some checks to try and avoid entering the ASID
      allocator:

        (1) If we're switching to the init_mm (no user mappings), then simply
            set a reserved TTBR0 value with no page table (the zero page)

        (2) If prev == next *and* the mm_cpumask indicates that we've run on
            this CPU before, then we can skip the allocator.

      However, there is plenty of redundancy here. With the new ASID allocator,
      if prev == next, then we know that our ASID is valid and do not need to
      worry about re-allocation. Consequently, we can drop the mm_cpumask check
      in (2) and move the prev == next check before the init_mm check, since
      if prev == next == init_mm then there's nothing to do.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5a7862e83000ccfd36db927c6f060458fe271157
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:26 2015 +0100

      arm64: tlbflush: avoid flushing when fullmm == 1

      The TLB gather code sets fullmm=1 when tearing down the entire address
      space for an mm_struct on exit or execve. Given that the ASID allocator
      will never re-allocate a dirty ASID, this flushing is not needed and can
      simply be avoided in the flushing code.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit f3e002c24e1f3b66f6e392ecd6928b5d04672c54
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:25 2015 +0100

      arm64: tlbflush: remove redundant ASID casts to (unsigned long)

      The ASID macro returns a 64-bit (long long) value, so there is no need
      to cast to (unsigned long) before shifting prior to a TLBI operation.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5aec715d7d3122f77cabaa7578d9d25a0c1ed20e
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:24 2015 +0100

      arm64: mm: rewrite ASID allocator and MM context-switching code

      Our current switch_mm implementation suffers from a number of problems:

        (1) The ASID allocator relies on IPIs to synchronise the CPUs on a
            rollover event

        (2) Because of (1), we cannot allocate ASIDs with interrupts disabled
            and therefore make use of a TIF_SWITCH_MM flag to postpone the
            actual switch to finish_arch_post_lock_switch

        (3) We run context switch with a reserved (invalid) TTBR0 value, even
            though the ASID and pgd are updated atomically

        (4) We take a global spinlock (cpu_asid_lock) during context-switch

        (5) We use h/w broadcast TLB operations when they are not required
            (e.g. in flush_context)

      This patch addresses these problems by rewriting the ASID algorithm to
      match the bitmap-based arch/arm/ implementation more closely. This in
      turn allows us to remove much of the complications surrounding switch_mm,
      including the ugly thread flag.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 8e63d38876691756f9bc6930850f1fb77809be1b
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:23 2015 +0100

      arm64: flush: use local TLB and I-cache invalidation

      There are a number of places where a single CPU is running with a
      private page-table and we need to perform maintenance on the TLB and
      I-cache in order to ensure correctness, but do not require the operation
      to be broadcast to other CPUs.

      This patch adds local variants of tlb_flush_all and __flush_icache_all
      to support these use-cases and updates the callers respectively.
      __local_flush_icache_all also implies an isb, since it is intended to be
      used synchronously.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Acked-by: David Daney <david.daney@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fa7aae8a4257e6be7051420dac1f150c1eef721b
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:22 2015 +0100

      arm64: proc: de-scope TLBI operation during cold boot

      When cold-booting a CPU, we must invalidate any junk entries from the
      local TLB prior to enabling the MMU. This doesn't require broadcasting
      within the inner-shareable domain, so de-scope the operation to apply
      only to the local CPU.

      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Tested-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c51e97d89e526368eb697f87cd4d391b9e19f369
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:21 2015 +0100

      arm64: mm: remove unused cpu_set_idmap_tcr_t0sz function

      With commit b08d4640a3dc ("arm64: remove dead code"),
      cpu_set_idmap_tcr_t0sz is no longer called and can therefore be removed
      from the kernel.

      This patch removes the function and effectively inlines the helper
      function __cpu_set_tcr_t0sz into cpu_set_default_tcr_t0sz.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c2c80bdb9e91b412ea68f6dcc49c5d7b91e0b930
  Merge: 049e6dd 8494cde eb8d0ac
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Oct 7 11:43:39 2015 +0100

      Merge remote-tracking branches 'spi/fix/davinci' and 'spi/fix/sh-msiof' 
into spi-linus

  commit 127db024a7baee9874014dac33628253f438b4da
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Thu Sep 17 12:38:07 2015 +0300

      arm64: introduce VA_START macro - the first kernel virtual address.

      In order to not use lengthy (UL(0xffffffffffffffff) << VA_BITS) 
everywhere,
      replace it with VA_START.

      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 404268828c74ba06b1f21584b26edafb381c9d7d
  Author: Feng Kan <fkan@xxxxxxx>
  Date:   Wed Sep 23 11:55:39 2015 -0700

      arm64: copy_to-from-in_user optimization using copy template

      This patch optimize copy_to-from-in_user for arm 64bit architecture. The
      copy template is used as template file for all the copy*.S files. Minor
      change was made to it to accommodate the copy to/from/in user files.

      Signed-off-by: Feng Kan <fkan@xxxxxxx>
      Signed-off-by: Balamurugan Shanmugam <bshanmugam@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit e5c88e3f2fb35dca5f3e46d65095bf5d008595b7
  Author: Feng Kan <fkan@xxxxxxx>
  Date:   Wed Sep 23 11:55:38 2015 -0700

      arm64: Change memcpy in kernel to use the copy template file

      This converts the memcpy.S to use the copy template file. The copy
      template file was based originally on the memcpy.S

      Signed-off-by: Feng Kan <fkan@xxxxxxx>
      Signed-off-by: Balamurugan Shanmugam <bshanmugam@xxxxxxx>
      [catalin.marinas@xxxxxxx: removed tmp3(w) .req statements as they are not 
used]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit efa773fe913ff188c554ccaac577d0a1bb1dc2f4
  Author: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
  Date:   Mon Aug 24 18:01:15 2015 +0530

      arm64: defconfig: Enable samsung serial and mmc

      This patch update defconfig, adds samsung serial and
      Synopsys Designware MMC configs related to exynos SoC

      Signed-off-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 02685b1df0461ce4c23d263b66ea0aac66450d13
  Merge: 499f3aa 1c27df1
  Author: Joerg Roedel <jroedel@xxxxxxx>
  Date:   Wed Oct 7 12:23:24 2015 +0200

      Merge branch 'for-joerg/arm-smmu/fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/will/linux into iommu/fixes

  commit e892406f00e1f93d81fdb350e1bcb5cb0e5dabff
  Merge: d25b8e7 8552d85
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 03:01:53 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-03

      This series contains updates to i40e and i40evf, some of which are to
      resolve more Red Hat bugzilla issues.

      Jiang Liu updates the i40e and i40evf drivers to use numa_mem_id()
      instead of numa_node_id() to get the nearest node with memory which
      better supports memoryless nodes.

      Anjali fixes an issue from Dan Carpenter <dan.carpenter@xxxxxxxxxx>,
      to resolve a memory leak in X722 RSS configuration path, where we should
      free the memory allocated before exiting.

      Shannon modifies the drivers to ensure we have the spinlocks before we
      clear the ARQ and ASQ management registers.  In addition, we widen the
      locked portion insert a sanity check to ensure we are working with safe
      register values.

      Mitch fixes an issue where under certain circumstances, we can get an
      extra VF_RESOURCES message from the PF driver at runtime.  When this
      occurs, we need to parse it because our VSI may have changed and that
      will affect the relationship with the PF driver.  But this parsing also
      blows away our current MAC address, so resolve the issue by restoring
      the current MAC address from the netdev struct after we parse the
      resource message.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d25b8e74291fec2dbf3fe3df7f20289eeaa9d28f
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 18:09:07 2015 +0100

      net: dsa: better error reporting

      Add additional error reporting to the generic DSA code, so it's easier
      to debug when things go wrong.  This was useful when initially bringing
      up 88e6176 on a new board.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Reviewed-by: Andrew Lunn <andrew@xxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4bac50bace0377138fed2ac3627c1ad470ea1eca
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 18:09:01 2015 +0100

      net: dsa: mv88e6xxx: remove link polling

      The link status is polled by the generic phy layer, there's no need to
      duplicate that polling with additional polling.  This additional polling
      adds additional MDIO traffic, and races with the generic phy layer,
      resulting in missing or duplicated link status messages.

      Tested-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a6d1fa0d2b48fbae444e46e7f37a4832b2f8bdf
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:56 2015 -0700

      x86/vdso: Remove runtime 32-bit vDSO selection

      32-bit userspace will now always see the same vDSO, which is
      exactly what used to be the int80 vDSO.  Subsequent patches will
      clean it up and make it support SYSENTER and SYSCALL using
      alternatives.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/e7e6b3526fa442502e6125fe69486aab50813c32.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b611acf4736b5b00c89dcc238f640337832abcb4
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:55 2015 -0700

      x86/entry/64/compat: After SYSENTER, move STI after the NT fixup

      We eventually want to make it all the way into C code before
      enabling interrupts.  We need to rework our flags handling
      slightly to delay enabling interrupts.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/35d24d2a9305da3182eab7b2cdfd32902e90962c.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 72f924783b8a87e4454516520ffb5f35e4930371
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:54 2015 -0700

      x86/entry, locking/lockdep: Move lockdep_sys_exit() to 
prepare_exit_to_usermode()

      Rather than worrying about exactly where LOCKDEP_SYS_EXIT should
      go in the asm code, add it to prepare_exit_from_usermode() and
      remove all of the asm calls that are followed by
      prepare_exit_to_usermode().

      LOCKDEP_SYS_EXIT now appears only in the syscall fast paths.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1736ebe948b845e68120b86b89091f3ec27f5e8e.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dd27f998f0ed3c797032a82033fa191be7c61e4c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:53 2015 -0700

      x86/entry/64/compat: Fix SYSENTER's NT flag before user memory access

      Clearing NT is part of the prologue, whereas loading up arg6
      makes more sense to think about as part of syscall processing.
      Reorder them.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/19eb235828b2d2a52c53459e09f2974e15e65a35.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 04235c00b6bb72b589e99efcc18883378ee76f1b
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:52 2015 -0700

      selftests/x86: Add a test for ptrace syscall restart and arg modification

      This tests assumptions about how fast syscall works wrt pt_regs
      and, in particular, what happens if IP is decremented by 2
      during a syscall.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1c44dbfe59000ba135bbf35ccc5d2433a0b31618.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3b56aae34bc695638b8673fc8459be1837c18730
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:51 2015 -0700

      selftests/x86: Add a test for vDSO unwinding

      While the kernel itself doesn't use DWARF unwinding, user code
      expects to be able to unwind the vDSO.  The vsyscall
      (AT_SYSINFO) entry is manually CFI-annotated, and this tests
      that it unwinds correctly.

      I tested the test by incorrectly annotating __kernel_vsyscall,
      and the test indeed fails if I do that.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/8bf736d1925cdd165c0f980156a4248e55af47a1.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7e0f51cb445be8d3aee80e433ed8da4a33ad0157
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:50 2015 -0700

      x86/uaccess: Add unlikely() to __chk_range_not_ok() failure paths

      This should improve code quality a bit. It also shrinks the kernel text:

       Before:
             text     data      bss       dec    filename
         21828379  5194760  1277952  28301091    vmlinux

       After:
             text     data      bss       dec    filename
         21827997  5194760  1277952  28300709    vmlinux

      ... by 382 bytes.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/f427b8002d932e5deab9055e0074bb4e7e80ee39.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a76cf66e948afbaeda8e3ecc861f29c47a026c27
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:49 2015 -0700

      x86/uaccess: Tell the compiler that uaccess is unlikely to fault

      GCC doesn't realize that get_user(), put_user(), and their __
      variants are unlikely to fail.  Tell it.

      I noticed this while playing with the C entry code.

       Before:
             text     data      bss       dec    filename
         21828763  5194760  1277952  28301475    vmlinux.baseline

       After:
            text      data      bss       dec    filename
         21828379  5194760  1277952  28301091    vmlinux.new

      The generated code shrunk by 384 bytes.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/dc37bed7024319c3004d950d57151fca6aeacf97.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 25a9a924c0c8723ced99179eb639e8c5372a2557
  Merge: 0b101e6 a0eeb8d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 7 11:24:24 2015 +0200

      Merge branch 'linus' into x86/asm, to pick up fixes before applying new 
changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7e64e5e66af8308725bfd03fcdf185c09b3056a7
  Merge: f79683d 0316d30
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 7 12:14:23 2015 +0300

      Merge tag 'iwlwifi-next-for-kalle-2015-10-05' of 
git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

      * more clean-ups towards multiple RX queues;
      * some rate scaling fixes and improvements;
      * some time-of-flight fixes;
      * other generic improvements and clean-ups;

  commit 79c7c7acd25689b1d7669bdb33fb3cb7c64541fe
  Merge: 3f5e4a3 990486c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 09:52:42 2015 +0100

      Merge branch 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile

      Pull strscpy fixes from Chris Metcalf :
       "This patch series fixes up a couple of architecture issues where
        strscpy wasn't configured correctly (missing on h8300, duplicating
        local and asm-generic copies on powerpc and tile).

        It also adds a use of zero_bytemask() to the final store for strscpy
        to avoid writing uninitialized data to the destination.  However, to
        make this work we had to add support for zero_bytemask() to the two
        architectures that didn't have it (alpha and tile), because they were
        providing their own local copies, but didn't provide the
        zero_bytemask() that was previously only required when building with
        CONFIG_DCACHE_WORD_ACCESS"

      [ Side note: there is still no actual users of strscpy except for the
        one preexisting use in arch/tile that predates the generic version.
        So this is all about fixing the infrastructure so that we eventually
        can start using it.  - Linus ]

      * 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile:
        strscpy: zero any trailing garbage bytes in the destination
        word-at-a-time.h: support zero_bytemask() on alpha and tile
        word-at-a-time.h: fix some Kbuild files

  commit 3f5e4a311619533bfc742f2d8e04510334dd0dd5
  Merge: a0eeb8d e5a5d92
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 09:35:15 2015 +0100

      Merge tag 'for-linus-20151006' of git://git.infradead.org/linux-mtd

      Pull MTD fixes from Brian Norris:
       "A few MTD fixes:

         - mxc_nand: a "refactoring only" change in 4.3-rc1 had some bad
           pointer (array) arithmetic.  Fix that

         - sunxi_nand:

         - Fix an old list manipulation / memory management bug in the device
           release() code path

         - Correct a few mistakes in OOB write support"

      * tag 'for-linus-20151006' of git://git.infradead.org/linux-mtd:
        mxc_nand: fix copy_spare
        mtd: nand: sunxi: fix sunxi_nand_chips_cleanup()
        mtd: nand: sunxi: fix OOB handling in ->write_xxx() functions

  commit de28a05ee28e36fa1fc68fcfc7c6cc1c6f7c270c
  Merge: 54328e6 dbf73d4
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 7 11:12:01 2015 +0300

      Merge tag 'iwlwifi-for-kalle-2015-10-05' of 
git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-fixes

      * some fixes for PN key programming when entering D3;
      * fix for CSA when the AP is stopped during a channel switch;
      * fix firmware name for 3160 devices;
      * add some new PCI IDs for 7265 devices;
      * fix CT-kill entry;
      * fix kernel panic when a sysassert occurs in the init ucode flow;

  commit a0eeb8dd34f21fddfe85b37832b5f3d02ee6e34b
  Merge: 00a3d66 39d0d3b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 08:54:22 2015 +0100

      Merge tag 'nfs-for-4.3-3' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs

      Pull NFS client bugfixes from Trond Myklebust:
       "Highlights include:

        Bugfixes:
         - Fix a use-after-free bug in the RPC/RDMA client
         - Fix a write performance regression
         - Fix up page writeback accounting
         - Don't try to reclaim unused state owners
         - Fix a NFSv4 nograce recovery hang
         - reset states to use open_stateid when returning delegation
           voluntarily
         - Fix a tracepoint NULL-pointer dereference"

      * tag 'nfs-for-4.3-3' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs:
        NFS: Fix a tracepoint NULL-pointer dereference
        nfs4: reset states to use open_stateid when returning delegation 
voluntarily
        NFSv4: Fix a nograce recovery hang
        NFSv4.1: nfs4_opendata_check_deleg needs to handle 
NFS4_OPEN_CLAIM_DELEG_CUR_FH
        NFSv4: Don't try to reclaim unused state owners
        NFS: Fix a write performance regression
        NFS: Fix up page writeback accounting
        xprtrdma: disconnect and flush cqs before freeing buffers

  commit 00a3d660cbac05af34cca149cb80fb611e916935
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 08:32:38 2015 +0100

      Revert "fs: do not prefault sys_write() user buffer pages"

      This reverts commit 998ef75ddb5709bbea0bf1506cd2717348a3c647.

      The commit itself does not appear to be buggy per se, but it is exposing
      a bug in ext4 (and Ted thinks ext3 too, but we solved that by getting
      rid of it).  It's too late in the release cycle to really worry about
      this, even if Dave Hansen has a patch that may actually fix the
      underlying ext4 problem.  We can (and should) revisit this for the next
      release.

      The problem is that moving the prefaulting later now exposes a special
      case with partially successful writes that isn't handled correctly.  And
      the prefaulting likely isn't normally even that much of a performance
      issue - it looks like at least one reason Dave saw this in his
      performance tests is that he also ran them on Skylake that now supports
      the new SMAP code, which makes the normally very cheap user space
      prefaulting noticeably more expensive.

      Bisected-and-acked-by: Ted Ts'o <tytso@xxxxxxx>
      Analyzed-and-acked-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 4108efb02daa09cbb5db048ada55a5b021b5183d
  Author: Christophe Lombard <clombard@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 16:07:40 2015 +1100

      cxl: Fix number of allocated pages in SPA

      The scheduled process area is currently allocated before assigning the
      correct maximum processes to the AFU, which will mean we only ever
      allocate a fixed number of pages for the scheduled process area. This
      will limit us to 958 processes with 2 x 64K pages. If we try to use more
      processes than that we'd probably overrun the buffer and corrupt memory
      or crash.

      AFUs that require three or more interrupts per process will not be
      affected as they are already limited to less processes than that, but we
      could hit it on an AFU that requires 0, 1 or 2 interrupts per process,
      or when using 4K pages.

      This patch moves the initialisation of the num_procs to before the SPA
      allocation so that enough pages will be allocated for the number of
      processes that the AFU supports.

      Signed-off-by: Christophe Lombard <clombard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.18+
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 266424b5377ed1c3033d97ed5bc4fca7d89921a1
  Author: Frediano Ziglio <fziglio@xxxxxxxxxx>
  Date:   Thu Sep 24 14:18:22 2015 +0100

      drm/qxl: avoid dependency lock

      qxl_bo_unref calls drm_gem_object_unreference_unlocked which
      locks dev->struct_mutex. However this lock could be already
      locked if the call came from qxl_gem_object_free.
      As we don't need to call qxl_bo_ref/qxl_bo_unref cause
      qxl_release_list_add will hold a reference by itself avoid
      to call them and the possible deadlock.

      Signed-off-by: Frediano Ziglio <fziglio@xxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 7eb9974f3685f36f419bf9e66cfaee92849856fe
  Author: Frediano Ziglio <fziglio@xxxxxxxxxx>
  Date:   Thu Sep 24 14:25:14 2015 +0100

      drm/qxl: avoid buffer reservation in qxl_crtc_page_flip

      This avoid a dependency lock error.
      According to https://lwn.net/Articles/548909/ users of WW mutex API
      should avoid using different context.
      When a buffer is reserved with qxl_bo_reserve a ww_mutex_lock without
      context is used. However during qxl_draw_dirty_fb different locks
      with specific context are used.
      This is detected during a machine booting with a debug kernel with lock
      dependency checking enabled.
      Like many other function in this file to avoid this problem object
      pinning is used. Once the object is pinned is not necessary to keep
      the lock so it can be released avoiding the locking problem.

      Signed-off-by: Frediano Ziglio <fziglio@xxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 60906529bec506a4bde93f04eb5e7a9dd9c42a3b
  Author: Gerd Hoffmann <kraxel@xxxxxxxxxx>
  Date:   Mon Oct 5 12:20:26 2015 +0200

      drm/qxl: fix framebuffer dirty rectangle tracking.

      Commit "c0fe07a drm/qxl: rewrite framebuffer support" has a bug in the
      dirty rectangle tracking:  Instead of ignoring an empty dirty rectangle
      when adding a new dirty region the dirty region gets extended to the
      upper left corner.  Fix it.

      Cc: linux-stable@xxxxxxxxxxxxxxx
      Signed-off-by: Gerd Hoffmann <kraxel@xxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 9bc63ca0904da3f163c01087e27952dd962d548d
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Mon Oct 5 12:43:57 2015 +0200

      Bluetooth: btbcm: Read the local name in setup stage

      The Broadcom Bluetooth controllers have the chip name included in the
      ROM firmware or later in the patchram firmware. For debugging purposes
      read the local name and print it out. This is only done during setup
      stage and only once before loading the firmware and once after loading
      the firmware.

      For the Broadcom based controllers from Apple, the name is only read once
      after determining the chip id.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 92240e8dc0d1a94ea3dde7cb19aace113dcc6cb9
  Author: Simon Horman <horms@xxxxxxxxxxxx>
  Date:   Tue Oct 6 17:09:52 2015 +0900

      ipvs: Remove possibly unused variables from ip_vs_conn_net_{init,cleanup}

      If CONFIG_PROC_FS is undefined then the arguments of proc_create()
      and remove_proc_entry() are unused. As a result the net variables of
      ip_vs_conn_net_{init,cleanup} are unused.

      net/netfilter/ipvs//ip_vs_conn.c: In function â??ip_vs_conn_net_initâ??:
      net/netfilter/ipvs//ip_vs_conn.c:1350:14: warning: unused variable 
â??netâ?? [-Wunused-variable]
      net/netfilter/ipvs//ip_vs_conn.c: In function 
â??ip_vs_conn_net_cleanupâ??:
      net/netfilter/ipvs//ip_vs_conn.c:1361:14: warning: unused variable 
â??netâ?? [-Wunused-variable]
      ...

      Resolve this by dereferencing net as needed rather than storing it
      in a variable.

      Fixes: 3d99376689ee ("ipvs: Pass ipvs not net into 
ip_vs_control_net_(init|cleanup)")
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>

  commit ed1c9f0e78b3b360ade4fb838a6099d643f3cd04
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 08:49:04 2015 -0700

      ipvs: Remove possibly unused variable from ip_vs_out

      Eric's net namespace changes in 1b75097dd7a26 leaves net unreferenced if
      CONFIG_IP_VS_IPV6 is not enabled:

      ../net/netfilter/ipvs/ip_vs_core.c: In function â??ip_vs_outâ??:
      ../net/netfilter/ipvs/ip_vs_core.c:1177:14: warning: unused variable 
â??netâ?? [-Wunused-variable]

      After the net refactoring there is only 1 user; push the reference to the
      1 user. While the line length slightly exceeds 80 it seems to be the
      best change.

      Fixes: 1b75097dd7a26("ipvs: Pass ipvs into ip_vs_out")
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      [horms: updated subject]
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d7e7f02f71bee425d651ced7ba3b316df61ab945
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 22 17:49:26 2015 +0800

      nfc: s3fwrn5: i2c: Use devm_request_threaded_irq to avoid irq leak

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Acked-by: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 45ee28570d73205e2129d995d805c7ae898e7a94
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 22 17:48:40 2015 +0800

      nfc: s3fwrn5: Make NFC_S3FWRN5 select CRYPTO

      Make NFC_S3FWRN5 select CRYPTO to fix below build errors:

      ERROR: "crypto_destroy_tfm" [drivers/nfc/s3fwrn5/s3fwrn5.ko] undefined!
      ERROR: "crypto_alloc_base" [drivers/nfc/s3fwrn5/s3fwrn5.ko] undefined!
      scripts/Makefile.modpost:91: recipe for target '__modpost' failed
      make[1]: *** [__modpost] Error 1

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Acked-by: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 879f2fea8a5a748bcbf98d2cdce9139c045505d3
  Author: Andrey Gelman <andrey.gelman@xxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:43:43 2015 -0700

      Input: ads7846 - correct the value got from SPI

      According to the touch controller spec, SPI return a 16 bit value, only 12
      bits are valid, they are bit[14-3].

      The value of MISO and MOSI can be configured when SPI is in idle mode.
      Currently this touch driver assumes the SPI bus sets the MOSI and MISO in
      low level when SPI bus is in idle mode. So the bit[15] of the value got
      from SPI bus is always 0. But when SPI bus congfigures the MOSI and MISO 
in
      high level during the SPI idle mode, the bit[15] of the value get from SPI
      is always 1. If bit[15] is not masked, we may get the wrong value.

      Mask the invalid bit to make sure the correct value gets returned.
      Regardless of the SPI bus idle configuration.

      Signed-off-by: Andrey Gelman <andrey.gelman@xxxxxxxxxxxxxx>
      Signed-off-by: Haibo Chen <haibo.chen@xxxxxxxxxxxxx>
      Signed-off-by: Igor Grinberg <grinberg@xxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 39d0d3bdf7bab3021a31e501172ac0f18947f9b3
  Author: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
  Date:   Mon Oct 5 16:43:26 2015 -0400

      NFS: Fix a tracepoint NULL-pointer dereference

      Running xfstest generic/013 with the tracepoint nfs:nfs4_open_file
      enabled produces a NULL-pointer dereference when calculating fileid and
      filehandle of the opened file.  Fix this by checking if state is NULL
      before trying to use the inode pointer.

      Reported-by: Olga Kornievskaia <aglo@xxxxxxxxx>
      Signed-off-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 753da421ba467dcabc1b8bd2accbf605d0da2ea9
  Author: Valentin Rothberg <valentinrothberg@xxxxxxxxx>
  Date:   Wed Oct 7 00:51:23 2015 +0200

      NFC: s3fwrn5: Remove superfluous cflags

      NFC_DEBUG is not defined in Kconfig and since DEBUG is not used
      anywhere in this directory, we can safely remove this line.

      Signed-off-by: Valentin Rothberg <valentinrothberg@xxxxxxxxx>
      Acked-by: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 38349665388fb079fb2bc8c46db9446dd976802a
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Tue Oct 6 11:00:17 2015 +0200

      perf tools: Fix handling read result using a signed variable

      The function can return negative value, assigning it to unsigned
      variable can cause memory corruption.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Cc: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: kernel-janitors@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444122017-16856-1-git-send-email-a.hajda@xxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1178bfd41f3ab6914eb6884875b776bc3032c9b5
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 6 14:25:12 2015 +0200

      perf tools: Use hpp_dimension__add_output to register hpp columns

      The perf_hpp__init currently does not respect sorting dimensions and the
      setup_sorting function could endup queueing same format twice. That
      screwed up the perf_hpp__list and got stuck in loop within
      perf_hpp__setup_output_field function.

        $ perf report -F +overhead

        0x00000000004c1355 in perf_hpp__is_sort_entry 
(format=format@entry=0x880440 <perf_hpp.format>) at util/sort.c:1506
        1506    {

           #0  0x00000000004c1355 in perf_hpp__is_sort_entry 
(format=format@entry=0x880440 <perf_hpp.format>) at util/sort.c:1506
           #1  0x00000000004c139d in perf_hpp__same_sort_entry 
(a=a@entry=0x880440 <perf_hpp.format>, b=b@entry=0x2bb2fe0) at util/sort.c:1380
           #2  0x00000000004f8d3c in perf_hpp__setup_output_field () at 
ui/hist.c:554
           #3  0x00000000004c1d1e in setup_sorting () at util/sort.c:1984
           #4  0x000000000042efbf in cmd_report (argc=0, argv=0x7ffea5a0e790, 
prefix=<optimized out>) at builtin-report.c:874
           #5  0x0000000000476f13 in run_builtin (p=p@entry=0x875628 
<commands+168>, argc=argc@entry=3, argv=argv@entry=0x7ffea5a0e790) at perf.c:385
           #6  0x000000000047710b in handle_internal_command (argc=3, 
argv=0x7ffea5a0e790) at perf.c:445
           #7  0x0000000000477176 in run_argv 
(argcp=argcp@entry=0x7ffea5a0e5fc, argv=argv@entry=0x7ffea5a0e5f0) at perf.c:489
           #8  0x00000000004773e7 in main (argc=3, argv=0x7ffea5a0e790) at 
perf.c:606

      Using hpp_dimension__add_output function to register the output column.
      It will also mark the dimension as taken and omit above stuck.

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444134312-29136-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit beeaaeb3684d97e89548c1b6b6275329214014df
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 6 14:25:11 2015 +0200

      perf tools: Introduce hpp_dimension__add_output function

      This function will allow to register output column from ui code and
      respect taken sort/output dimensions.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444134312-29136-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0974d2c9719a4c74fea0f6886b9922b100b903a6
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 6 14:25:10 2015 +0200

      perf tools: Get rid of superfluos call to reset_dimensions

      There's no need to call reset_dimensions within __setup_output_field
      function. It's already called in its caller setup_sorting right before
      perf_hpp__init, which will be changed in following patch to respect
      taken dimension.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444134312-29136-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 990486c8af044f89bddfbde1d1cf9fde449bedbf
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Tue Oct 6 12:37:41 2015 -0400

      strscpy: zero any trailing garbage bytes in the destination

      It's possible that the destination can be shadowed in userspace
      (as, for example, the perf buffers are now).  So we should take
      care not to leak data that could be inspected by userspace.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit c753bf34c94e5ac901e625e52f47320eeec4de2d
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Tue Oct 6 14:20:45 2015 -0400

      word-at-a-time.h: support zero_bytemask() on alpha and tile

      Both alpha and tile needed implementations of zero_bytemask.

      The alpha version is untested.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 19c22f3a29fa8669c477f20a65f6c7c27108972a
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Tue Oct 6 13:35:10 2015 -0400

      word-at-a-time.h: fix some Kbuild files

      arch/tile added word-at-a-time.h after the patch that added generic-y
      entries; the generic-y entry is now stale.

      arch/h8300 is newer than the generic-y patch for word-at-a-time.h,
      and needs a generic-y entry.

      arch/powerpc seems to have gotten a generic-y entry by mistake in
      the first patch; this change removes it.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit a36a99618b1adb2d6ca0b7e08e3a656a04e477fe
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Aug 30 20:01:48 2015 -0700

      locktorture: Fix module unwind when bad torture_type specified

      The locktorture module has a list of torture types, and specifying
      a type not on this list is supposed to cleanly fail the module load.
      Unfortunately, the "fail" happens without the "cleanly".  This commit
      therefore adds the needed clean-up after an incorrect torture_type.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit a8c06024d0b557b465ad40b87ef0b51a428f99fd
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 25 17:12:09 2015 -0700

      torture: Forgive non-plural arguments

      This commit allows --bootarg instead of --bootargs, --config instead of
      --configs, and --qemu-arg instead of --qemu-args.  For those cases where
      a native English speaker might auto-correct the argument to be incorrect.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 4f441a258f7badf752b3d9b04b675869ca4e751c
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 13:13:51 2015 -0700

      rcutorture: Fix unused-function warning for torturing_tasks()

      The torturing_tasks() function is used only in kernels built with
      CONFIG_PROVE_RCU=y, so the second definition can result in unused-function
      compiler warnings.  This commit adds __maybe_unused to suppress these
      warnings.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 889d487a26de4bcd1a0a668754bcbce893969edf
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 11:37:58 2015 -0700

      rcutorture: Fix module unwind when bad torture_type specified

      The rcutorture module has a list of torture types, and specifying a
      type not on this list is supposed to cleanly fail the module load.
      Unfortunately, the "fail" happens without the "cleanly".  This commit
      therefore adds the needed clean-up after an incorrect torture_type.

      Reported-by: David Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Acked-by: David Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 4bace7344d6dbd7a1b0b801abf24ea9878064317
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Sep 11 17:59:18 2015 +0200

      rcu_sync: Cleanup the CONFIG_PROVE_RCU checks

      1. Rename __rcu_sync_is_idle() to rcu_sync_lockdep_assert() and
         change it to use rcu_lockdep_assert().

      2. Change rcu_sync_is_idle() to return rsp->gp_state == GP_IDLE
         unconditonally, this way we can remove the same check from
         rcu_sync_lockdep_assert() and clearly isolate the debugging
         code.

      Note: rcu_sync_enter()->wait_event(gp_state == GP_PASSED) needs
      another CONFIG_PROVE_RCU check, the same as is done in ->sync(); but
      this needs some simple preparations in the core RCU code to avoid the
      code duplication.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit cc5f730b41506d37a5c2826b2e801d0a59853d11
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:43:03 2015 +0200

      locking/percpu-rwsem: Clean up the lockdep annotations in 
percpu_down_read()

      Based on Peter Zijlstra's earlier patch.

      Change percpu_down_read() to use __down_read(), this way we can
      do rwsem_acquire_read() unconditionally at the start to make this
      code more symmetric and clean.

      Originally-From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit f324a76324c97e81a6ba66a8efac20cdbffd759e
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:43:00 2015 +0200

      locking/percpu-rwsem: Fix the comments outdated by rcu_sync

      Update the comments broken by the previous change.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 001dac627ff37433d5528ffb0d897cd19c2b1e43
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:57 2015 +0200

      locking/percpu-rwsem: Make use of the rcu_sync infrastructure

      Currently down_write/up_write calls synchronize_sched_expedited()
      twice, which is evil.  Change this code to rely on rcu-sync primitives.
      This avoids the _expedited "big hammer", and this can be faster in
      the contended case or even in the case when a single thread does
      down_write/up_write in a loop.

      Of course, a single down_write() will take more time, but otoh it
      will be much more friendly to the whole system.

      To simplify the review this patch doesn't update the comments, fixed
      by the next change.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 95b19f684c61ffc9b039e02c5d1113c2d8cd7105
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:55 2015 +0200

      locking/percpu-rwsem: Make percpu_free_rwsem() after kzalloc() safe

      This is the temporary ugly hack which will be reverted later. We only
      need it to ensure that the next patch will not break "change sb_writers
      to use percpu_rw_semaphore" patches routed via the VFS tree.

      The alloc_super()->destroy_super() error path assumes that it is safe
      to call percpu_free_rwsem() after kzalloc() without percpu_init_rwsem(),
      so let's not disappoint it.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 07899a6e5f56136028c44a57ad0451e797365ac3
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:52 2015 +0200

      rcu_sync: Introduce rcu_sync_dtor()

      This commit allows rcu_sync structures to be safely deallocated,
      The trick is to add a new ->wait field to the gp_ops array.
      This field is a pointer to the rcu_barrier() function corresponding
      to the flavor of RCU in question.  This allows a new rcu_sync_dtor()
      to wait for any outstanding callbacks before freeing the rcu_sync
      structure.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit b8cab5dab15ff5c2acc3faefdde28919b0341c11
  Author: Haggai Eran <haggaie@xxxxxxxxxxxx>
  Date:   Tue Oct 6 17:56:00 2015 +0300

      IB/cma: Accept connection without a valid netdev on RoCE

      The netdev checks recently added to RDMA CM expect a valid netdev to be
      found for both InfiniBand and RoCE, but the code that find a netdev is
      only implemented for InfiniBand.

      Currently RoCE doesn't provide an API to find the netdev matching a
      given set of parameters, so this patch just disables the netdev 
enforcement
      for each incoming connections when the link layer is RoCE.

      Fixes: 4c21b5bcef73 ("IB/cma: Add net_dev and private data checks to RDMA 
CM")
      Reported-by: Kamal Heib <kamalh@xxxxxxxxxxxx>
      Signed-off-by: Haggai Eran <haggaie@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3a518b76af7bb411efe6dd090fbf098e29accb2e
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:50 2015 +0200

      rcu_sync: Add CONFIG_PROVE_RCU checks

      This commit validates that the caller of rcu_sync_is_idle() holds the
      corresponding type of RCU read-side lock, but only in kernels built
      with CONFIG_PROVE_RCU=y.  This validation is carried out via a new
      rcu_sync_ops->held() method that is checked within rcu_sync_is_idle().

      Note that although this does add code to the fast path, it only does so
      in kernels built with CONFIG_PROVE_RCU=y.

      Suggested-by: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 82e8c565be8a72957570d7da8dd9b441db7bb648
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:47 2015 +0200

      rcu_sync: Simplify rcu_sync using new rcu_sync_ops structure

      This commit adds the new struct rcu_sync_ops which holds sync/call
      methods, and turns the function pointers in rcu_sync_struct into an array
      of struct rcu_sync_ops.  This simplifies the "init" helpers by collapsing
      a switch statement and explicit multiple definitions into a simple
      assignment and a helper macro, respectively.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit cc44ca848f5e517aeca9f5eabbe13609a3f71450
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:44 2015 +0200

      rcu: Create rcu_sync infrastructure

      The rcu_sync infrastructure can be thought of as infrastructure to be
      used to implement reader-writer primitives having extremely lightweight
      readers during times when there are no writers.  The first use is in
      the percpu_rwsem used by the VFS subsystem.

      This infrastructure is functionally equivalent to

              struct rcu_sync_struct {
                      atomic_t counter;
              };

        /* Check possibility of fast-path read-side operations. */
              static inline bool rcu_sync_is_idle(struct rcu_sync_struct *rss)
              {
                      return atomic_read(&rss->counter) == 0;
              }

        /* Tell readers to use slowpaths. */
              static inline void rcu_sync_enter(struct rcu_sync_struct *rss)
              {
                      atomic_inc(&rss->counter);
                      synchronize_sched();
              }

        /* Allow readers to once again use fastpaths. */
              static inline void rcu_sync_exit(struct rcu_sync_struct *rss)
              {
                      synchronize_sched();
                      atomic_dec(&rss->counter);
              }

      The main difference is that it records the state and only calls
      synchronize_sched() if required.  At least some of the calls to
      synchronize_sched() will be optimized away when rcu_sync_enter() and
      rcu_sync_exit() are invoked repeatedly in quick succession.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 3836f5337f74fedc15981688c3c31dbf4293ae84
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Aug 30 03:29:58 2015 -0700

      torture: Consolidate cond_resched_rcu_qs() into stutter_wait()

      This commit moves cond_resched_rcu_qs() into stutter_wait(), saving
      a line and also avoiding RCU CPU stall warnings from all torture
      loops containing a stutter_wait().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 617783dd99704331e22636388c932450e02ee636
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 29 14:46:29 2015 -0700

      locktorture: Add torture tests for percpu_rwsem

      This commit adds percpu_rwsem tests based on the earlier rwsem tests.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 302707fd7cd341a23dbc448a335d432ad0069c20
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 20:21:59 2015 -0700

      locking/percpu-rwsem: Export symbols for locktorture

      This commit exports percpu_down_read(), percpu_down_write(),
      __percpu_init_rwsem(), percpu_up_read(), and percpu_up_write() to allow
      locktorture to test them when built as a module.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 095777c417db142970adeb776fa0cb10810b8122
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Jul 22 14:07:27 2015 -0700

      locktorture: Support rtmutex torturing

      Real time mutexes is one of the few general primitives
      that we do not have in locktorture. Address this -- a few
      considerations:

      o To spice things up, enable competing thread(s) to become
      rt, such that we can stress different prio boosting paths
      in the rtmutex code. Introduce a ->task_boost callback,
      only used by rtmutex-torturer. Tasks will boost/deboost
      around every 50k (arbitrarily) lock/unlock operations.

      o Hold times are similar to what we have for other locks:
      only occasionally having longer hold times (per ~200k ops).
      So we roughly do two full rt boost+deboosting ops with
      short hold times.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit f022fa88ce6abc83c6e678a890df5c1e4b0eaf89
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Tue Oct 6 19:52:37 2015 +0300

      xprtrdma: Don't require LOCAL_DMA_LKEY support for fastreg

      There is no need to require LOCAL_DMA_LKEY support as the
      PD allocation makes sure that there is a local_dma_lkey. Also
      correctly set a return value in error path.

      This caused a NULL pointer dereference in mlx5 which removed
      the support for LOCAL_DMA_LKEY.

      Fixes: bb6c96d72879 ("xprtrdma: Replace global lkey with lkey local to 
PD")
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Reviewed-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Acked-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit ad2ad5d31f90fc6fb269e9be244224cecfc8b400
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 08:18:32 2015 -0700

      documentation: Add lockless_dereference()

      The recently added lockless_dereference() macro is not present in the
      Documentation/ directory, so this commit fixes that.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit b672adf8cfb822781ab904343e5de0297ee117ed
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 11:46:00 2015 -0700

      documentation: Catch up list of torture_type options

      This commit rids the documentation of long-obsolete torture_type options
      such as rcu_sync and adds new ones such as tasks.  Also add verbiage
      noting the fact that rcutorture now concurrently tests the asynchrounous,
      synchronous, expedited synchronous, and polling grace-period primitives.

      Reported-by: David Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Acked-by: David Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 2c4ac34bc2d97f056ed3c43fa03c0737fae46fb6
  Author: Jason A. Donenfeld <Jason@xxxxxxxxx>
  Date:   Tue Aug 11 14:26:33 2015 +0200

      documentation: Correct doc to use rcu_dereference_protected

      As there is lots of misinformation and outdated information on the
      Internet about nearly all topics related to the kernel, I thought it
      would be best if I based my RCU code on the guidelines of the examples
      in the Documentation/ tree of the latest kernel. One thing that stuck
      out when reading the whatisRCU.txt document was, "interesting how we
      don't need any function to dereference rcu protected pointers when doing
      updates if a lock is held. I wonder how static analyzers will work with
      that." Then, a few weeks later, upon discovering sparse's __rcu support,
      I ran it over my code, and lo and behold, things weren't done right.
      Examining other RCU usages in the kernel reveal consistent usage of
      rcu_dereference_protected, passing in lockdep_is_held as the
      conditional. So, this patch adds that idiom to the documentation, so
      that others ahead of me won't endure the same exercise.

      Signed-off-by: Jason A. Donenfeld <Jason@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit da873def8da5883a6c04d11f73dcd836c216cf4f
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 4 11:54:04 2015 -0700

      documentation: Call out slow consoles as cause of stall warnings

      The Linux kernel outputs copious text during boot, and a slow serial
      console can result in stall warnings, particularly when messages are
      printed with interrupts disabled.  This commit adds this to the list
      of causes of RCU CPU stall warning messages.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 27566139b6e2f6cfe273e8bb0e538d7616c2ea00
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 1 10:45:26 2015 -0700

      documentation: No acquire/release for RCU readers

      Documentation/memory-barriers.txt calls out RCU as one of the sets
      of primitives associated with ACQUIRE and RELEASE.  There really
      is an association in that rcu_assign_pointer() includes a RELEASE
      operation, but a quick read can convince people that rcu_read_lock() and
      rcu_read_unlock() have ACQUIRE and RELEASE semantics, which they do not.

      This commit therefore removes RCU from this list in order to avoid
      this confusion.

      Reported-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 7f5f873c6a0772970d5fee1f364231207051ecd8
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 08:45:22 2015 -0700

      rculist: Use WRITE_ONCE() when deleting from reader-visible list

      The various RCU list-deletion macros (list_del_rcu(),
      hlist_del_init_rcu(), hlist_del_rcu(), hlist_bl_del_init_rcu(),
      hlist_bl_del_rcu(), hlist_nulls_del_init_rcu(), and hlist_nulls_del_rcu())
      do plain stores into the ->next pointer of the preceding list elemment.
      Unfortunately, the compiler is within its rights to (for example) use
      byte-at-a-time writes to update the pointer, which would fatally confuse
      concurrent readers.  This patch therefore adds the needed WRITE_ONCE()
      macros.

      KernelThreadSanitizer (KTSAN) reported the __hlist_del() issue, which
      is a problem when __hlist_del() is invoked by hlist_del_rcu().

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit e62e3f620ba8d437f4998441fc11cf3dc9d466d1
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 12:23:01 2015 -0700

      rcu: Remove deprecated rcu_lockdep_assert()

      The old rcu_lockdep_assert() was retained to ease handling of incoming
      patches, but any use will result in deprecated warnings.  However, its
      replacement, RCU_LOCKDEP_WARN(), is now upstream.  It is therefore
      time to remove rcu_lockdep_assert(), which this commit does.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 8db70b132dd57696cfc7560203a72e90c51bfdda
  Author: Patrick Marlier <patrick.marlier@xxxxxxxxx>
  Date:   Fri Sep 11 15:50:35 2015 -0700

      rculist: Make list_entry_rcu() use lockless_dereference()

      The current list_entry_rcu() implementation copies the pointer to a stack
      variable, then invokes rcu_dereference_raw() on it.  This results in an
      additional store-load pair.  Now, most compilers will emit normal store
      and load instructions, which might seem to be of negligible overhead,
      but this results in a load-hit-store situation that can cause surprisingly
      long pipeline stalls, even on modern microprocessors.  The problem is
      that it takes time for the store to get the store buffer updated, which
      can delay the subsequent load, which immediately follows.

      This commit therefore switches to the lockless_dereference() primitive,
      which does not expect the __rcu annotations (that are anyway not present
      in the list_head structure) and which, like rcu_dereference_raw(),
      does not check for an enclosing RCU read-side critical section.
      Most importantly, it does not copy the pointer, thus avoiding the
      load-hit-store overhead.

      Signed-off-by: Patrick Marlier <patrick.marlier@xxxxxxxxx>
      [ paulmck: Switched to lockless_dereference() to suppress sparse 
warnings. ]
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit c3ac7cf1847a4e68c909984f60d36adef2088e35
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 16:29:02 2015 -0700

      rcu: Add rcu_pointer_handoff()

      This commit adds an rcu_pointer_handoff() that is intended to mark
      situations where a structure's protection transitions from RCU to some
      other mechanism (locking, reference counting, whatever).  These markings
      should allow external tools to more easily spot bugs involving leaking
      pointers out of RCU read-side critical sections.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit c34d2f418485a5d710bc002e490148b8ea53f456
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 11:21:28 2015 -0700

      rcu: Correct comment for values of ->gp_state field

      This commit corrects the comment for the values of the ->gp_state field,
      which previously incorrectly said that these were for the ->gp_flags
      field.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 77f81fe08ebd99d7e0eefde42ddac06a675bc4ad
  Author: Petr Mladek <pmladek@xxxxxxxx>
  Date:   Wed Sep 9 12:09:49 2015 -0700

      rcu: Finish folding ->fqs_state into ->gp_state

      Commit commit 4cdfc175c25c89ee ("rcu: Move quiescent-state forcing
      into kthread") started the process of folding the old ->fqs_state into
      ->gp_state, but did not complete it.  This situation does not cause
      any malfunction, but can result in extremely confusing trace output.
      This commit completes this task of eliminating ->fqs_state in favor
      of ->gp_state.

      The old ->fqs_state was also used to decide when to collect dyntick-idle
      snapshots.  For this purpose, we add a boolean variable into the kthread,
      which is set on the first call to rcu_gp_fqs() for a given grace period
      and clear otherwise.

      Signed-off-by: Petr Mladek <pmladek@xxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 49f5903b473c5f63f3b57856d1bd4593db0a2eef
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 00:42:57 2015 -0700

      rcu: Move preemption disabling out of __srcu_read_lock()

      Currently, __srcu_read_lock() cannot be invoked from restricted
      environments because it contains calls to preempt_disable() and
      preempt_enable(), both of which can invoke lockdep, which is a bad
      idea in some restricted execution modes.  This commit therefore moves
      the preempt_disable() and preempt_enable() from __srcu_read_lock()
      to srcu_read_lock().  It also inserts the preempt_disable() and
      preempt_enable() around the call to __srcu_read_lock() in do_exit().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 62c6c61adbc623cdacf74b8f29c278e539060c48
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Mon Oct 5 14:32:51 2015 -0700

      arm64: replace read_lock to rcu lock in call_break_hook

      BUG: sleeping function called from invalid context at 
kernel/locking/rtmutex.c:917
      in_atomic(): 0, irqs_disabled(): 128, pid: 342, name: perf
      1 lock held by perf/342:
       #0:  (break_hook_lock){+.+...}, at: [<ffffffc0000851ac>] 
call_break_hook+0x34/0xd0
      irq event stamp: 62224
      hardirqs last  enabled at (62223): [<ffffffc00010b7bc>] 
__call_rcu.constprop.59+0x104/0x270
      hardirqs last disabled at (62224): [<ffffffc0000fbe20>] 
vprintk_emit+0x68/0x640
      softirqs last  enabled at (0): [<ffffffc000097928>] 
copy_process.part.8+0x428/0x17f8
      softirqs last disabled at (0): [<          (null)>]           (null)
      CPU: 0 PID: 342 Comm: perf Not tainted 4.1.6-rt5 #4
      Hardware name: linux,dummy-virt (DT)
      Call trace:
      [<ffffffc000089968>] dump_backtrace+0x0/0x128
      [<ffffffc000089ab0>] show_stack+0x20/0x30
      [<ffffffc0007030d0>] dump_stack+0x7c/0xa0
      [<ffffffc0000c878c>] ___might_sleep+0x174/0x260
      [<ffffffc000708ac8>] __rt_spin_lock+0x28/0x40
      [<ffffffc000708db0>] rt_read_lock+0x60/0x80
      [<ffffffc0000851a8>] call_break_hook+0x30/0xd0
      [<ffffffc000085a70>] brk_handler+0x30/0x98
      [<ffffffc000082248>] do_debug_exception+0x50/0xb8
      Exception stack(0xffffffc00514fe30 to 0xffffffc00514ff50)
      fe20:                                     00000000 00000000 c1594680 
0000007f
      fe40: ffffffff ffffffff 92063940 0000007f 0550dcd8 ffffffc0 00000000 
00000000
      fe60: 0514fe70 ffffffc0 000be1f8 ffffffc0 0514feb0 ffffffc0 0008948c 
ffffffc0
      fe80: 00000004 00000000 0514fed0 ffffffc0 ffffffff ffffffff 9282a948 
0000007f
      fea0: 00000000 00000000 9282b708 0000007f c1592820 0000007f 00083914 
ffffffc0
      fec0: 00000000 00000000 00000010 00000000 00000064 00000000 00000001 
00000000
      fee0: 005101e0 00000000 c1594680 0000007f c1594740 0000007f ffffffd8 
ffffff80
      ff00: 00000000 00000000 00000000 00000000 c1594770 0000007f c1594770 
0000007f
      ff20: 00665e10 00000000 7f7f7f7f 7f7f7f7f 01010101 01010101 00000000 
00000000
      ff40: 928e4cc0 0000007f 91ff11e8 0000007f

      call_break_hook is called in atomic context (hard irq disabled), so 
replace
      the sleepable lock to rcu lock, replace relevant list operations to rcu
      version and call synchronize_rcu() in unregister_break_hook().

      And, replace write lock to spinlock in {un}register_break_hook.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 7f21aeef722d598ba350d1834f6e4134c7b5e8de
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 15 14:49:50 2015 -0700

      rcu: Add online/offline info to stall warning message

      This commit makes the RCU CPU stall warning message print online/offline
      indications immediately after a hyphen following the CPU number.  A "O"
      indicates that the global CPU-hotplug system believes that the CPU is
      online, a "o" that RCU perceived the CPU to be online at the beginning
      of the current expedited grace period, and an "N" that RCU currently
      believes that it will perceive the CPU as being online at the beginning
      of the next expedited grace period, with "." otherwise for all three
      indications.  So for CPU 10, you would normally see "10-OoN:" indicating
      that everything believes that the CPU is online.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit ee968ac61d5a3440b931375d81113e0eedfcb249
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Jul 31 08:28:35 2015 -0700

      rcu: Eliminate panic when silly boot-time fanout specified

      This commit loosens rcutree.rcu_fanout_leaf range checks
      and replaces a panic() with a fallback to compile-time values.
      This fallback is accompanied by a WARN_ON(), and both occur when the
      rcutree.rcu_fanout_leaf value is too small to accommodate the number of
      CPUs.  For example, given the current four-level limit for the rcu_node
      tree, a system with more than 16 CPUs built with CONFIG_FANOUT=2 must
      have rcutree.rcu_fanout_leaf larger than 2.

      Reported-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit bb73c52bad3666997ed2ec83c0c80c3f8ef55008
  Author: Boqun Feng <boqun.feng@xxxxxxxxx>
  Date:   Thu Jul 30 16:55:38 2015 -0700

      rcu: Don't disable preemption for Tiny and Tree RCU readers

      Because preempt_disable() maps to barrier() for non-debug builds,
      it forces the compiler to spill and reload registers.  Because Tree
      RCU and Tiny RCU now only appear in CONFIG_PREEMPT=n builds, these
      barrier() instances generate needless extra code for each instance of
      rcu_read_lock() and rcu_read_unlock().  This extra code slows down Tree
      RCU and bloats Tiny RCU.

      This commit therefore removes the preempt_disable() and preempt_enable()
      from the non-preemptible implementations of __rcu_read_lock() and
      __rcu_read_unlock(), respectively.  However, for debug purposes,
      preempt_disable() and preempt_enable() are still invoked if
      CONFIG_PREEMPT_COUNT=y, because this allows detection of sleeping inside
      atomic sections in non-preemptible kernels.

      However, Tiny and Tree RCU operates by coalescing all RCU read-side
      critical sections on a given CPU that lie between successive quiescent
      states.  It is therefore necessary to compensate for removing barriers
      from __rcu_read_lock() and __rcu_read_unlock() by adding them to a
      couple of the RCU functions invoked during quiescent states, namely to
      rcu_all_qs() and rcu_note_context_switch().  However, note that the latter
      is more paranoia than necessity, at least until link-time optimizations
      become more aggressive.

      This is based on an earlier patch by Paul E. McKenney, fixing
      a bug encountered in kernels built with CONFIG_PREEMPT=n and
      CONFIG_PREEMPT_COUNT=y.

      Signed-off-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit db3e8db45e1cbf8cc22f1083a559d78eb91ccd63
  Author: Boqun Feng <boqun.feng@xxxxxxxxx>
  Date:   Wed Jul 29 13:29:39 2015 +0800

      rcu: Use call_rcu_func_t to replace explicit type equivalents

      We have had the call_rcu_func_t typedef for a quite awhile, but we still
      use explicit function pointer types in some places.  These types can
      confuse cscope and can be hard to read.  This patch therefore replaces
      these types with the call_rcu_func_t typedef.

      Signed-off-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit b6a4ae766e3133a4db73fabc81e522d1601cb623
  Author: Boqun Feng <boqun.feng@xxxxxxxxx>
  Date:   Wed Jul 29 13:29:38 2015 +0800

      rcu: Use rcu_callback_t in call_rcu*() and friends

      As we now have rcu_callback_t typedefs as the type of rcu callbacks, we
      should use it in call_rcu*() and friends as the type of parameters. This
      could save us a few lines of code and make it clear which function
      requires an rcu callbacks rather than other callbacks as its argument.

      Besides, this can also help cscope to generate a better database for
      code reading.

      Signed-off-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 84778472e1b6a27a8931712c40e8cf31143c8f6c
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 2 01:28:44 2015 -0700

      sched: Export sched_setscheduler_nocheck

      The new locktorture rtmutex_lock tests exercise priority boosting, which
      means that they need to set some tasks to real-time priority.  To do this,
      they use sched_setscheduler_nocheck().  However, this is not exported to
      modules, which results in the following error when building locktorture
      as a module:

      ERROR: "sched_setscheduler_nocheck" [kernel/locking/locktorture.ko] 
undefined!

      This commit therefore adds an EXPORT_SYMBOL_GPL() to allow this function
      to be invoked from locktorture when built as a module.

      Reported-by: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Signed-off-by: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 3805eade3b7c4a5ad593525703c2c82a84fd9b13
  Author: Jeff Squyres <jsquyres@xxxxxxxxx>
  Date:   Wed Sep 30 13:34:00 2015 -0700

      usnic: add missing clauses to BSD license

      The usnic_verbs kernel module was clearly marked with the following in
      its code:

        MODULE_LICENSE("Dual BSD/GPL");

      However, we accidentally left a few clauses of the BSD text out of the
      license header in all the source files.  This commit fixes that: all
      the files are properly dual BSD/GPL-licensed.  Contributors that might
      have been confused by this have been contacted to get their permission
      and are Cc:ed here.

      Cc: Benoit Taine <benoit.taine@xxxxxxx>
      Cc: Ira Weiny <ira.weiny@xxxxxxxxx>
      Cc: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Masanari Iida <standby24x7@xxxxxxxxx>
      Cc: Matan Barak <matanb@xxxxxxxxxxxx>
      Cc: Michael Wang <yun.wang@xxxxxxxxxxxxxxxx>
      Cc: Roland Dreier <roland@xxxxxxxxxxxxxxx>
      Cc: Wei Yongjun <yongjun_wei@xxxxxxxxxxxxxxxxx>
      Cc: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Cc: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Cc: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: Jeff Squyres <jsquyres@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 4ca3bc86bea23f38596ce7508f75e072839bde44
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Tue Oct 6 18:24:37 2015 +0100

      arm64: Don't relocate non-existent initrd

      When booting a kernel without an initrd, the kernel reports that it
      moves -1 bytes worth, having gone through the motions with initrd_start
      equal to initrd_end:

          Moving initrd from [4080000000-407fffffff] to [9fff49000-9fff48fff]

      Prevent this by bailing out early when the initrd size is zero (i.e. we
      have no initrd), avoiding the confusing message and other associated
      work.

      Fixes: 1570f0d7ab425c1e ("arm64: support initrd outside kernel linear 
map")
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 9a65e6866f039ff029acffc05195d54bc6ca6aeb
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Oct 6 10:52:31 2015 -0400

      drm/amdgpu: flag iceland as experimental

      These have not been tested very extensively and generally
      seem to be problematic.  Mark them as experimental for now.

      bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=92270

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 712df65ccb63da08a484bf57c40b250dfd4103a7
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Thu Sep 24 21:10:21 2015 +0900

      perf/x86/intel/uncore: Fix multi-segment problem of 
perf_event_intel_uncore

      In multi-segment system, uncore devices may belong to buses whose segment
      number is other than 0:

        ....
        0000:ff:10.5 System peripheral: Intel Corporation Xeon E5 v3/Core i7 
Scratchpad & Semaphore Registers (rev 03)
        ...
        0001:7f:10.5 System peripheral: Intel Corporation Xeon E5 v3/Core i7 
Scratchpad & Semaphore Registers (rev 03)
        ...
        0001:bf:10.5 System peripheral: Intel Corporation Xeon E5 v3/Core i7 
Scratchpad & Semaphore Registers (rev 03)
        ...
        0001:ff:10.5 System peripheral: Intel Corporation Xeon E5 v3/Core i7 
Scratchpad & Semaphore Registers (rev 03
        ...

      In that case, relation of bus number and physical id may be broken
      because "uncore_pcibus_to_physid" doesn't take account of PCI segment.
      For example, bus 0000:ff and 0001:ff uses the same entry of
      "uncore_pcibus_to_physid" array.

      This patch fixes this problem by introducing the segment-aware 
pci2phy_map instead.

      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: acme@xxxxxxxxxx
      Cc: hpa@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443096621-4119-1-git-send-email-izumi.taku@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7ce1346a6842550a3c4c453cdf1c7b81fb60b07e
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Mon Sep 28 08:30:04 2015 -0400

      perf/x86: Add Intel cstate PMUs support

      This patch adds new PMUs to support cstate related free running
      (read-only) counters. These counters may be used simultaneously by other
      tools, such as turbostat. However, it still make sense to implement them
      in perf. Because we can conveniently collect them together with other
      events, and allow to use them from tools without special MSR access
      code.

      These counters include CORE_C*_RESIDENCY and PKG_C*_RESIDENCY.
      According to counters' scope and category, two PMUs are registered with
      the perf_event core subsystem.

       - 'cstate_core': The counter is available for each physical core. The
                        counters include CORE_C*_RESIDENCY.

       - 'cstate_pkg':  The counter is available for each physical package. The
                        counters include PKG_C*_RESIDENCY.

      The events are exposed in sysfs for use by perf stat and other tools.
      The files are:

        /sys/devices/cstate_core/events/c*-residency
        /sys/devices/cstate_pkg/events/c*-residency

      These events only support system-wide mode counting.
      The /sys/devices/cstate_*/cpumask file can be used by tools to figure
      out which CPUs to monitor by default.

      The PMU type (attr->type) is dynamically allocated and is available from
      /sys/devices/core_misc/type and /sys/device/cstate_*/type.

      Sampling is not supported.

      Here is an example.

       - To caculate the fraction of time when the core is running in C6 state
         CORE_C6_time% = CORE_C6_RESIDENCY / TSC

       # perf stat -x, -e"cstate_core/c6-residency/,msr/tsc/" -C0 -- taskset -c 
0 sleep 5

         11838820015,,cstate_core/c6-residency/,5175919658,100.00
         11877130740,,msr/tsc/,5175922010,100.00

       For sleep, 99.7% of time we ran in C6 state.

       # perf stat -x, -e"cstate_core/c6-residency/,msr/tsc/" -C0 -- taskset -c 
0 busyloop

         1253316,,cstate_core/c6-residency/,4360969154,100.00
         10012635248,,msr/tsc/,4360972366,100.00

       For busyloop, 0.01% of time we ran in C6 state.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: acme@xxxxxxxxxx
      Cc: eranian@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443443404-8581-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 00eb4bab69db349c3bdc7e0b0f7e9070dafea58c
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:15 2015 -0700

      locking/rwsem: Use acquire/release semantics

      As of 654672d4ba1 (locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operations) and 6d79ef2d30e (locking, asm-generic:
      Add _{relaxed|acquire|release}() variants for 'atomic_long_t'), weakly
      ordered archs can benefit from more relaxed use of barriers when locking
      and unlocking, instead of regular full barrier semantics. While currently
      only arm64 supports such optimizations, updating corresponding locking
      primitives serves for other archs to immediately benefit as well, once the
      necessary machinery is implemented of course.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-6-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3552a07a9c4aea32cc092fadf10a186c84ed8a61
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:14 2015 -0700

      locking/mcs: Use acquire/release semantics

      As of 654672d4ba1 (locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operations) and 6d79ef2d30e (locking, asm-generic:
      Add _{relaxed|acquire|release}() variants for 'atomic_long_t'), weakly
      ordered archs can benefit from more relaxed use of barriers when locking
      and unlocking, instead of regular full barrier semantics. While currently
      only arm64 supports such optimizations, updating corresponding locking
      primitives serves for other archs to immediately benefit as well, once the
      necessary machinery is implemented of course.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-5-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 700318d1d7b38bbfe86813d9c5c18364dd941526
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:13 2015 -0700

      locking/rtmutex: Use acquire/release semantics

      As of 654672d4ba1 (locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operations) and 6d79ef2d30e (locking, asm-generic:
      Add _{relaxed|acquire|release}() variants for 'atomic_long_t'), weakly
      ordered archs can benefit from more relaxed use of barriers when locking
      and unlocking, instead of regular full barrier semantics. While currently
      only arm64 supports such optimizations, updating corresponding locking
      primitives serves for other archs to immediately benefit as well, once the
      necessary machinery is implemented of course.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-4-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 81a43adae3b943193fb3afd20a36a7482332f964
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:12 2015 -0700

      locking/mutex: Use acquire/release semantics

      As of 654672d4ba1 (locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operations) and 6d79ef2d30e (locking, asm-generic:
      Add _{relaxed|acquire|release}() variants for 'atomic_long_t'), weakly
      ordered archs can benefit from more relaxed use of barriers when locking
      and unlocking, instead of regular full barrier semantics. While currently
      only arm64 supports such optimizations, updating corresponding locking
      primitives serves for other archs to immediately benefit as well, once the
      necessary machinery is implemented of course.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-3-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 63ab7bd0d450b726b88fa4b932f151b98cee2557
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:11 2015 -0700

      locking/asm-generic: Add _{relaxed|acquire|release}() variants for 
inc/dec atomics

      Similar to what we have for regular add/sub calls. For now, no actual arch
      implements them, so everyone falls back to the default atomics... iow,
      nothing changes. These will be used in future primitives.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-2-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 77792b11409c9270d98e604b4314b85ce886ac7d
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 12:38:07 2015 -0400

      regmap: Allow installing custom reg_update_bits function

      This commit allows installing a custom reg_update_bits function for cases 
where
      the hardware provides a mechanism to set or clear register bits without a
      read/modify/write cycle. Such is the case with the Microchip ENCX24J600.

      If a custom reg_update_bits function is provided, it will only be used 
against
      volatile registers.

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 82fc167c392a1700f9adbde639730ee8c8122474
  Merge: e3e72ab 049e6dd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 6 17:10:28 2015 +0200

      Merge tag 'v4.3-rc4' into locking/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5a4fd0368517bc5b5399ef958f6d30cbff492918
  Author: xiaofeng.yan <yanxiaofeng@xxxxxxxxxx>
  Date:   Wed Sep 23 14:55:59 2015 +0800

      sched/core: Remove a parameter in the migrate_task_rq() function

      The parameter "int next_cpu" in the following function is unused:

        migrate_task_rq(struct task_struct *p, int next_cpu)

      Remove it.

      Signed-off-by: xiaofeng.yan <yanxiaofeng@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442991360-31945-1-git-send-email-yanxiaofeng@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ce03e4137bb22fc560ad7a07cf4138ae2cd59f65
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Mon Oct 5 21:26:05 2015 +0800

      sched/core: Drop unlikely behind BUG_ON()

      (1) For !CONFIG_BUG cases, the bug call is a no-op, so we couldn't care
          less and the change is ok.

      (2) PPC and MIPS, which HAVE_ARCH_BUG_ON, do not rely on branch 
predictions
          as it seems to be pointless [1] and thus callers should not be trying 
to
          push an optimization in the first place.

      (3) For CONFIG_BUG and !HAVE_ARCH_BUG_ON cases, BUG_ON() contains an
          unlikely compiler flag already.

      Hence, we can drop unlikely behind BUG_ON().

        [1] http://lkml.iu.edu/hypermail/linux/kernel/1101.3/02289.html

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/6fa7125979f98bbeac26e268271769b6ca935c8d.1444051018.git.geliangtang@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1de64443d755f83af8ba8b558fded0c61afaef47
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 17:44:13 2015 +0200

      sched/core: Fix task and run queue sched_info::run_delay inconsistencies

      Mike Meyer reported the following bug:

      > During evaluation of some performance data, it was discovered thread
      > and run queue run_delay accounting data was inconsistent with the other
      > accounting data that was collected.  Further investigation found under
      > certain circumstances execution time was leaking into the task and
      > run queue accounting of run_delay.
      >
      > Consider the following sequence:
      >
      >     a. thread is running.
      >     b. thread moves beween cgroups, changes scheduling class or 
priority.
      >     c. thread sleeps OR
      >     d. thread involuntarily gives up cpu.
      >
      > a. implies:
      >
      >     thread->sched_info.last_queued = 0
      >
      > a. and b. results in the following:
      >
      >     1. dequeue_task(rq, thread)
      >
      >            sched_info_dequeued(rq, thread)
      >                delta = 0
      >
      >                sched_info_reset_dequeued(thread)
      >                    thread->sched_info.last_queued = 0
      >
      >                thread->sched_info.run_delay += delta
      >
      >     2. enqueue_task(rq, thread)
      >
      >            sched_info_queued(rq, thread)
      >
      >                /* thread is still on cpu at this point. */
      >                thread->sched_info.last_queued = task_rq(thread)->clock;
      >
      > c. results in:
      >
      >     dequeue_task(rq, thread)
      >
      >         sched_info_dequeued(rq, thread)
      >
      >             /* delta is execution time not run_delay. */
      >             delta = task_rq(thread)->clock - 
thread->sched_info.last_queued
      >
      >         sched_info_reset_dequeued(thread)
      >             thread->sched_info.last_queued = 0
      >
      >         thread->sched_info.run_delay += delta
      >
      >     Since thread was running between enqueue_task(rq, thread) and
      >     dequeue_task(rq, thread), the delta above is really execution
      >     time and not run_delay.
      >
      > d. results in:
      >
      >     __sched_info_switch(thread, next_thread)
      >
      >         sched_info_depart(rq, thread)
      >
      >             sched_info_queued(rq, thread)
      >
      >                 /* last_queued not updated due to being non-zero */
      >                 return
      >
      >     Since thread was running between enqueue_task(rq, thread) and
      >     __sched_info_switch(thread, next_thread), the execution time
      >     between enqueue_task(rq, thread) and
      >     __sched_info_switch(thread, next_thread) now will become
      >     associated with run_delay due to when last_queued was last updated.
      >

      This alternative patch solves the problem by not calling
      sched_info_{de,}queued() in {de,en}queue_task(). Therefore the
      sched_info state is preserved and things work as expected.

      By inlining the {de,en}queue_task() functions the new condition
      becomes (mostly) a compile-time constant and we'll not emit any new
      branch instructions.

      It even shrinks the code (due to inlining {en,de}queue_task()):

      $ size defconfig-build/kernel/sched/core.o 
defconfig-build/kernel/sched/core.o.orig
         text    data     bss     dec     hex filename
        64019   23378    2344   89741   15e8d 
defconfig-build/kernel/sched/core.o
        64149   23378    2344   89871   15f0f 
defconfig-build/kernel/sched/core.o.orig

      Reported-by: Mike Meyer <Mike.Meyer@xxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/20150930154413.GO3604@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b52da86e0ad58f096710977fcda856fd84da9233
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 07:48:25 2015 +0530

      sched/numa: Fix task_tick_fair() from disabling numa_balancing

      If static branch 'sched_numa_balancing' is enabled, it should kickstart
      NUMA balancing through task_tick_numa(). However the following commit:

        2a595721a1fa ("sched/numa: Convert sched_numa_balancing to a 
static_branch")

      erroneously disables this.

      Fix this anomaly by enabling task_tick_numa() when the static branch
      'sched_numa_balancing' is enabled.

      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443752305-27413-1-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e2bf1c4b17aff25f07e0d2952d8c1c66643f33fe
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:18:46 2015 +0200

      sched/core: Add preempt_count invariant check

      Ingo requested I keep my debug check for the preempt_count invariant.

      Requested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 499d79559ffe4b9c0c3031752f6a40abd532fb75
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:52:36 2015 +0200

      sched/core: More notrace annotations

      preempt_schedule_common() is marked notrace, but it does not use
      _notrace() preempt_count functions and __schedule() is also not marked
      notrace, which means that its perfectly possible to end up in the
      tracer from preempt_schedule_common().

      Steve says:

        | Yep, there's some history to this. This was originally the issue that
        | caused function tracing to go into infinite recursion. But now we have
        | preempt_schedule_notrace(), which is used by the function tracer, and
        | that function must not be traced till preemption is disabled.
        |
        | Now if function tracing is running and we take an interrupt when
        | NEED_RESCHED is set, it calls
        |
        |   preempt_schedule_common() (not traced)
        |
        | But then that calls preempt_disable() (traced)
        |
        | function tracer calls preempt_disable_notrace() followed by
        | preempt_enable_notrace() which will see NEED_RESCHED set, and it will
        | call preempt_schedule_notrace(), which stops the recursion, but
        | still calls __schedule() here, and that means when we return, we call
        | the __schedule() from preempt_schedule_common().
        |
        | That said, I prefer this patch. Preemption is disabled before calling
        | __schedule(), and we get rid of a one round recursion with the
        | scheduler.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e61bf1e43b6f8e687ce93e5d0ce85bca7e481600
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:11:35 2015 +0200

      sched/core: Kill PREEMPT_ACTIVE

      Its unused, kill the definition.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d87b7a33794f52226131f93cbc9db03274d9fecf
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:11:18 2015 +0200

      sched/core, sched/x86: Kill thread_info::saved_preempt_count

      With the introduction of the context switch preempt_count invariant,
      and the demise of PREEMPT_ACTIVE, its pointless to save/restore the
      per-cpu preemption count, it must always be 2.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit da7142e2ed735e1c1bef5a757dc55de35c65fbd6
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:11:45 2015 +0200

      sched/core: Simplify preempt_count tests

      Since we stopped setting PREEMPT_ACTIVE, there is no need to mask it
      out of preempt_count() tests.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1dc0fffc48af94513e621f95dff730ed4f7317ec
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 17:57:39 2015 +0200

      sched/core: Robustify preemption leak checks

      When we warn about a preempt_count leak; reset the preempt_count to
      the known good value such that the problem does not ripple forward.

      This is most important on x86 which has a per cpu preempt_count that is
      not saved/restored (after this series). So if you schedule with an
      invalid (!2*PREEMPT_DISABLE_OFFSET) preempt_count the next task is
      messed up too.

      Enforcing this invariant limits the borkage to just the one task.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3d8f74dd4ca1da8a1a464bbafcf679e40c2fc10f
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:09:19 2015 +0200

      sched/core: Stop setting PREEMPT_ACTIVE

      Now that nothing tests for PREEMPT_ACTIVE anymore, stop setting it.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c73464b1c8434ad4cbfd5369c3e724f3e8ffe5a4
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:06:56 2015 +0200

      sched/core: Fix trace_sched_switch()

      __trace_sched_switch_state() is the last remaining PREEMPT_ACTIVE
      user, move trace_sched_switch() from prepare_task_switch() to
      __schedule() and propagate the @preempt argument.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fc13aebab7d8f0d19d557c721a0f25cdf7ae905c
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:05:34 2015 +0200

      sched/core: Add preempt argument to __schedule()

      There is only a single PREEMPT_ACTIVE use in the regular __schedule()
      path and that is to circumvent the task->state check. Since the code
      setting PREEMPT_ACTIVE is the immediate caller of __schedule() we can
      replace this with a function argument.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 609ca066386b2e64d4c0b0f55da327654962a0c9
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 17:52:18 2015 +0200

      sched/core: Create preempt_count invariant

      Assuming units of PREEMPT_DISABLE_OFFSET for preempt_count() numbers.

      Now that TASK_DEAD no longer results in preempt_count() == 3 during
      scheduling, we will always call context_switch() with preempt_count()
      == 2.

      However, we don't always end up with preempt_count() == 2 in
      finish_task_switch() because new tasks get created with
      preempt_count() == 1.

      Create FORK_PREEMPT_COUNT and set it to 2 and use that in the right
      places. Note that we cannot use INIT_PREEMPT_COUNT as that serves
      another purpose (boot).

      After this, preempt_count() is invariant across the context switch,
      with exception of PREEMPT_ACTIVE.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b99def8b961448f5b9a550dddeeb718e3975e7a6
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:02:03 2015 +0200

      sched/core: Rework TASK_DEAD preemption exception

      TASK_DEAD is special in that the final schedule call from do_exit()
      must be done with preemption disabled.

      This means we end up scheduling with a preempt_count() higher than
      usual (3 instead of the 'expected' 2).

      Since future patches will want to rely on an invariant
      preempt_count() value during schedule, fix this up.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 87dcbc0610cb580c8eaf289f52aca3620af825f0
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 17:45:40 2015 +0200

      sched/core: Simplify INIT_PREEMPT_COUNT

      As per the following commit:

        d86ee4809d03 ("sched: optimize cond_resched()")

      we need PREEMPT_ACTIVE to avoid cond_resched() from working before
      the scheduler is set up.

      However, keeping preemption disabled should do the same thing
      already, making the PREEMPT_ACTIVE part entirely redundant.

      The only complication is !PREEMPT_COUNT kernels, where
      PREEMPT_DISABLED ends up being 0. Instead we use an unconditional
      PREEMPT_OFFSET to set preempt_count() even on !PREEMPT_COUNT
      kernels.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fe19159225d8516f3f57a5fe8f735c01684f0ddd
  Merge: c6e1e7b 95913d9
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 6 17:05:36 2015 +0200

      Merge branch 'sched/urgent' into sched/core, to pick up fixes before 
applying new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 95913d97914f44db2b81271c2e2ebd4d2ac2df83
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 14:45:09 2015 +0200

      sched/core: Fix TASK_DEAD race in finish_task_switch()

      So the problem this patch is trying to address is as follows:

              CPU0                            CPU1

              context_switch(A, B)
                                              ttwu(A)
                                                LOCK A->pi_lock
                                                A->on_cpu == 0
              finish_task_switch(A)
                prev_state = A->state  <-.
                WMB                      |
                A->on_cpu = 0;           |
                UNLOCK rq0->lock         |
                                         |    context_switch(C, A)
                                         `--  A->state = TASK_DEAD
                prev_state == TASK_DEAD
                  put_task_struct(A)
                                              context_switch(A, C)
                                              finish_task_switch(A)
                                                A->state == TASK_DEAD
                                                  put_task_struct(A)

      The argument being that the WMB will allow the load of A->state on CPU0
      to cross over and observe CPU1's store of A->state, which will then
      result in a double-drop and use-after-free.

      Now the comment states (and this was true once upon a long time ago)
      that we need to observe A->state while holding rq->lock because that
      will order us against the wakeup; however the wakeup will not in fact
      acquire (that) rq->lock; it takes A->pi_lock these days.

      We can obviously fix this by upgrading the WMB to an MB, but that is
      expensive, so we'd rather avoid that.

      The alternative this patch takes is: smp_store_release(&A->on_cpu, 0),
      which avoids the MB on some archs, but not important ones like ARM.

      Reported-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.1+
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: manfred@xxxxxxxxxxxxxxxx
      Cc: will.deacon@xxxxxxx
      Fixes: e4a52bcb9a18 ("sched: Remove rq->lock from the first half of 
ttwu()")
      Link: 
http://lkml.kernel.org/r/20150929124509.GG3816@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e79d5c0870eedce94e5f5a2ffab30511e48fa144
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Oct 6 09:38:45 2015 -0400

      drm/amdgpu: check before checking pci bridge registers

      Make sure we are not the root device before attempting to
      read the pcie bridge registers to check the pcie gen speeed.

      Fixes a crash when the device is passed through to a VM.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit d836ace65ee98d7079bc3c5afdbcc0e27dca20a3
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Sat Oct 3 13:03:47 2015 -0700

      ARM: orion: Fix DSA platform device after mvmdio conversion

      DSA expects the host_dev pointer to be the device structure associated
      with the MDIO bus controller driver. First commit breaking that was
      c3a07134e6aa ("mv643xx_eth: convert to use the Marvell Orion MDIO
      driver"), and then, it got completely under the radar for a while.

      Reported-by: Frans van de Wiel <fvdw@xxxxxxx>
      Fixes: c3a07134e6aa ("mv643xx_eth: convert to use the Marvell Orion MDIO 
driver")
      CC: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>

  commit 50887bd139b83ce4489ed865a04bf1be5559c4ad
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 04:19:54 2015 +0000

      dm: fix request-based dm error reporting

      end_clone_bio() is a endio callback for clone bio and should check
      and save the clone's bi_error for error reporting.  However,
      4246a0b63bd8 ("block: add a bi_error field to struct bio") changed
      the function to check the original bio's bi_error, which is 0.

      Without this fix, clone's error is ignored and reported to the
      original request as success.  Thus data corruption will be observed.

      Fixes: 4246a0b63bd8 ("block: add a bi_error field to struct bio")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit f6702681a0af186db8518793fbe46f45cce967dd
  Merge: 3ec20e2 98dd166
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:05:02 2015 +0100

      Merge tag 'for-linus-4.3b-rc4-tag' of 
git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip

      Pull xen bug fixes from David Vrabel:

       - Fix VM save performance regression with x86 PV guests

       - Make kexec work in x86 PVHVM guests (if Xen has the soft-reset ABI)

       - Other minor fixes.

      * tag 'for-linus-4.3b-rc4-tag' of 
git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip:
        x86/xen/p2m: hint at the last populated P2M entry
        x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when 
sanitizing map
        x86/xen: Support kexec/kdump in HVM guests by doing a soft reset
        xen/x86: Don't try to write syscall-related MSRs for PV guests
        xen: use correct type for HYPERVISOR_memory_op()

  commit 3ec20e2e618314a798c81a974455b0a47e2af435
  Merge: 3c68319 daad0bf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:59:36 2015 +0100

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

      Pull s390 fixes from Martin Schwidefsky:
       "Three bug fixes and an update to the default configuration"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:
        s390/defconfig: set SCSI_DH=y
        s390/vtime: correct scaled cputime of partially idle CPUs
        s390/boot/decompression: disable floating point in decompressor
        s390/numa: use correct type for node_to_cpumask_map

  commit 7d35199e15b82a4d1a20049153b03e6258ce79f7
  Author: NeilBrown <neilb@xxxxxxx>
  Date:   Fri May 8 10:16:23 2015 +1000

      BTRFS: support NFSv2 export

      The "fh_len" passed to ->fh_to_* is not guaranteed to be that same as
      that returned by encode_fh - it may be larger.

      With NFSv2, the filehandle is fixed length, so it may appear longer
      than expected and be zero-padded.

      So we must test that fh_len is at least some value, not exactly equal
      to it.

      Signed-off-by: NeilBrown <neilb@xxxxxxx>
      Acked-by: David Sterba <dsterba@xxxxxxx>

  commit e5fffbac4a49270e4976d71a0e054c0cf3ef4f8e
  Author: chandan <chandan@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 22:14:25 2015 +0530

      Btrfs: open_ctree: Fix possible memory leak

      After reading one of chunk or tree root tree's root node from disk, if the
      root node does not have EXTENT_BUFFER_UPTODATE flag set, we fail to 
release
      the memory used by the root node. Fix this.

      Signed-off-by: Chandan Rajendra <chandan@xxxxxxxxxxxxxxxxxx>

  commit 3c68319b28474055481824032e6730c28404116f
  Merge: 049e6dd 616a539
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:30:21 2015 +0100

      Merge branch 'for-next' of git://git.samba.org/sfrench/cifs-2.6

      Pull CIFS fixes from Steve French:
       "Two fixes for problems pointed out by automated tools.

        Thanks PaX/grsecurity team and Dan Carpenter (and the Smatch tool)"

      * 'for-next' of git://git.samba.org/sfrench/cifs-2.6:
        [CIFS] Update cifs version number
        [SMB3] Do not fall back to SMBWriteX in set_file_size error cases
        [SMB3] Missing null tcon check

  commit 21c4c073f14509d685ed219aa3c76362a7bfa0ac
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 06:25:43 2015 -0700

      Revert "regmap: Allow installing custom reg_update_bits function"

      This reverts commit 7741c373cf3ea1f5383fa97fb7a640a429d3dd7c.

  commit 6a27a6c3be95d382cd158c5705c1840be291f28f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 06:25:36 2015 -0700

      Revert "net: Microchip encx24j600 driver"

      This reverts commit 04fbfce7a222327b97ca165294ef19f0faa45960.

  commit c664bc6d946d253077f3a5d5ca6769492de59e04
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 06:25:29 2015 -0700

      Revert "net: encx24j600_exit() can be static"

      This reverts commit 9886ce2b9d4e5a8bb3d78d0f7eff3c0f1ed58d67.

  commit 98dd166ea3a3c3b57919e20d9b0d1237fcd0349d
  Author: David Vrabel <david.vrabel@xxxxxxxxxx>
  Date:   Mon Sep 7 17:14:08 2015 +0100

      x86/xen/p2m: hint at the last populated P2M entry

      With commit 633d6f17cd91ad5bf2370265946f716e42d388c6 (x86/xen: prepare
      p2m list for memory hotplug) the P2M may be sized to accomdate a much
      larger amount of memory than the domain currently has.

      When saving a domain, the toolstack must scan all the P2M looking for
      populated pages.  This results in a performance regression due to the
      unnecessary scanning.

      Instead of reporting (via shared_info) the maximum possible size of
      the P2M, hint at the last PFN which might be populated.  This hint is
      increased as new leaves are added to the P2M (in the expectation that
      they will be used for populated entries).

      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+

  commit 5a37b15378659168e1874463ab012f26dcbaf309
  Merge: b0d5811 56e86dd
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 14:31:53 2015 +0200

      Merge tag 'renesas-fixes-for-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas into fixes

      Merge "Renesas ARM Based SoC Fixes for v4.3" from Simon Horman

      * Add Add CPG/MSTP Clock Domain for sound on r8a779[01] SoCs.
        This allows sound to work once again.

      * tag 'renesas-fixes-for-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas:
        ARM: shmobile: r8a7791 dtsi: Add CPG/MSTP Clock Domain for sound
        ARM: shmobile: r8a7790 dtsi: Add CPG/MSTP Clock Domain for sound

  commit b0d58113e55dca8b95161be30e1a15703ecf9a2a
  Merge: c6722dd f594297
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 14:30:14 2015 +0200

      Merge tag 'sunxi-fixes-for-4.3' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mripard/linux into fixes

      Merge "Allwinner fixes for 4.3" from Maxime Ripard:

      Two patches, one that fixes one of the DT build, and the other raising the
      voltage of the lowest OPP of the A20 to remain within the SoC operating
      boundaries

      * tag 'sunxi-fixes-for-4.3' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mripard/linux:
        ARM: dts: Fix Makefile target for sun4i-a10-itead-iteaduino-plus
        ARM: dts: sunxi: Raise minimum CPU voltage for sun7i-a20 to meet SoC 
specifications

  commit c6722ddce0bdf16bfdd7e80dd5fef78e75eca535
  Merge: a73b4db 4776dbb
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 14:26:32 2015 +0200

      Merge tag 'samsung-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung into fixes

      Merge "Samsung fixes for v4.3" from Kukjin Kim:

      - fix invalid clock used for FIMD IOMMU
      - fix thermal boot issue smdk5250-smdk5250
      - fix S2R on exynos4412 trats2 boards
      - fix LEDs on exynos5422-odroidxu3-common
      - fix booting of all 8 cores on exynos542x

      * tag 'samsung-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung:
        ARM: dts: Fix wrong clock binding for sysmmu_fimd1_1 on exynos5420
        ARM: dts: Fix bootup thermal issue on smdk5250
        ARM: dts: add suspend opp to exynos4412
        ARM: dts: Fix LEDs on exynos5422-odroidxu3
        ARM: EXYNOS: reset Little cores when cpu is up

  commit 683b95e8071603b4e945cb26dcae0308457ec478
  Author: Peter Oh <poh@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:40 2015 +0300

      ath10k: use pre-allocated DMA buffer in Tx

      ath10k driver is using dma_pool_alloc per packet and dma_pool_free
      in coresponding at Tx completion.
      Use of pre-allocated DMA buffer in Tx will improve saving CPU resource
      by 5% while it consumes about 56KB memory more as trade off.

      Signed-off-by: Peter Oh <poh@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit bc27e8cddda69daa324318ffe3d2e1badad07775
  Author: Peter Oh <poh@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:39 2015 +0300

      ath10k: use Rx decap mode configured when driver registered

      ath10k is using Native WiFi mode as default mode for both of
      Tx and Rx path, but it could be changed when driver registers
      with a module parameter for specific purpose such as mesh.

      The Rx decap mode sent to firmware during WMI initialization should
      use the same mode that driver configured at its registration stage
      in case of using raw mode, so that host driver receives MAC frame
      header containing necessary fields such as QoS and Mesh Control
      and uses them in right way to make data traffic work.

      Signed-off-by: Peter Oh <poh@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 295426669cd68efc84657e6ee426499cfb54346e
  Author: Maharaja Kennadyrajan <c_mkenna@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:38 2015 +0300

      ath10k: implement debugfs interface for Transmit Power Control stats

      The Transmit Power Control (TPC) dump will show the power control values 
for
      each rate which makes it easier to debug calibration problems.

      Example usage:

      # cat /sys/kernel/debug/ieee80211/phy0/ath10k/tpc_stats
      TPC config for channel  5180  mode  10

      CTL             = 0x10 Reg. Domain              = 58
      Antenna Gain    = 1    Reg. Max Antenna Gain    = 0
      Power Limit     = 34   Reg. Max Power           = 34
      Num tx chains   = 3    Num supported rates      = 155

      **********CDD POWER TABLE*******

      No.  Preamble Rate_code tpc_valu1 tpc_value2 tpc_value3
      0       CCK     0x40       0            0       0
      1       CCk     0x41       0            0       0

      [...]

      154     HTCUP   0x 0       24           0       0
      **********STBC POWER TABLE******
      No.  Preamble Rate_code tpc_valu1 tpc_value2 tpc_value3
      0       CCK     0x40       0            0       0

      [...]

      154     HTCUP   0x 0       24           24      0
      **********TXBF POWER TABLE******

      is used to dump the tx power control stats.

      Signed-off-by: Maharaja Kennadyrajan <c_mkenna@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 3b8fc902e33e65dd859c0f974c0097b177eeb695
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:37 2015 +0300

      ath10k: add a_sle32_to_cpu()

      Copy a_sle32_to_cpu() from ath6kl so that we can easily handle signed 
__le32
      values. This is needed in struct wmi_pdev_tpc_config_event.

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 2a995088c5aec38db6ffbac96c404f75c7dd9d2c
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:37 2015 +0300

      ath10k: split an unnecessary long line

      from checkpatch:

      drivers/net/wireless/ath/ath10k/mac.c:1113: line over 90 characters

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 9a14969fa1674d2215d6d9f171ed323bd3ebb39d
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:36 2015 +0300

      ath10k: fix whitespace usage

      checkpatch found:

      drivers/net/wireless/ath/ath10k/core.c:574: Blank lines aren't necessary 
before a close brace '}'
      drivers/net/wireless/ath/ath10k/mac.c:4067: Missing a blank line after 
declarations
      drivers/net/wireless/ath/ath10k/mac.c:4083: Missing a blank line after 
declarations
      drivers/net/wireless/ath/ath10k/mac.c:4084: spaces required around that 
'>>=' (ctx:WxV)
      drivers/net/wireless/ath/ath10k/pci.c:1507: Missing a blank line after 
declarations

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 92438a2cdb5d152d152ca7c449b033c255b977b4
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:36 2015 +0300

      ath10k: remove void function return statements

      drivers/net/wireless/ath/ath10k/wmi.c:3023: void function return 
statements are not generally useful

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b9e284e515af75e72043bb802cfb52cd9bd04450
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:35 2015 +0300

      ath10k: brace style fixes

      drivers/net/wireless/ath/ath10k/htt_tx.c:457: braces {} are not necessary 
for single statement blocks
      drivers/net/wireless/ath/ath10k/htt_tx.c:545: braces {} are not necessary 
for single statement blocks
      drivers/net/wireless/ath/ath10k/mac.c:200: braces {} are not necessary 
for single statement blocks

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 617b0f4d4a69962e0e86604f889d6af9e8f4150d
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:35 2015 +0300

      ath10k: indentation fixes

      checkpatch found:

      drivers/net/wireless/ath/ath10k/core.c:513: Alignment should match open 
parenthesis
      drivers/net/wireless/ath/ath10k/core.c:1266: code indent should use tabs 
where possible
      drivers/net/wireless/ath/ath10k/core.c:1267: code indent should use tabs 
where possible
      drivers/net/wireless/ath/ath10k/core.c:1268: code indent should use tabs 
where possible
      drivers/net/wireless/ath/ath10k/core.c:1269: code indent should use tabs 
where possible
      drivers/net/wireless/ath/ath10k/mac.c:4659: Alignment should match open 
parenthesis
      drivers/net/wireless/ath/ath10k/mac.c:6271: Alignment should match open 
parenthesis
      drivers/net/wireless/ath/ath10k/pci.c:2260: Alignment should match open 
parenthesis
      drivers/net/wireless/ath/ath10k/wmi.c:3510: Alignment should match open 
parenthesis

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit be62e92a5b2b5960b494fc81ce27611240016821
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:34 2015 +0300

      ath10k: fix checkpatch warning about logical continuations

      checkpatch found:

      drivers/net/wireless/ath/ath9k/core.c:490: Logical continuations should 
be on the previous line

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit ff6afc8d0df0347901e862e622b1efaeb6f1fe5d
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Oct 2 18:07:09 2015 +0100

      MAINTAINERS: Remove wm97xx entry

      Neither myself or Liam is especially interested in this driver any more
      and the devices are already covered by the general ex-Wolfson entry so
      just remove this.

      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Acked-by: Liam Girdwood <liam.r.girdwood@xxxxxxxxxxxxxxx>

  commit da11f98fd018319f65af9c10174ccc829207d937
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 00:56:56 2015 +0100

      MIPS: Define ioremap_uc

      All architectures must now define ioremap_uc(), but MIPS currently
      only has ioremap_nocache().

      Fixes: 4c73e8926623 ("arch/*/io.h: Add ioremap_uc() to all architectures")
      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: Luis R. Rodriguez <mcgrof@xxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11263/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 22ca03a3ad63bb08d543af462b741b6bf2c329ed
  Merge: 6710f22 6b3600b
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Tue Oct 6 12:00:42 2015 +0100

      Merge remote-tracking branch 'regulator/fix/axp20x' into regulator-linus

  commit 6710f223433588af582c0e4dbecbca72a36c4594
  Merge: 049e6dd 0642312
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Tue Oct 6 12:00:38 2015 +0100

      Merge remote-tracking branch 'regulator/fix/core' into regulator-linus

  commit e2600460bc3aa14ca1df86318a327cbbabedf9a8
  Author: Andreas Dannenberg <dannenberg@xxxxxx>
  Date:   Mon Oct 5 15:00:14 2015 -0500

      ASoC: tas2552: fix dBscale-min declaration

      The minimum volume level for the TAS2552 (control register value 0x00)
      is -7dB however the driver declares it as -0.07dB.

      Running amixer before the patch reports:
      dBscale-min=-0.07dB,step=1.00dB,mute=0

      Running amixer with the patch applied reports:
      dBscale-min=-7.00dB,step=1.00dB,mute=0

      Signed-off-by: Andreas Dannenberg <dannenberg@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit d79e6801b1868ff65f4c956d782946c6221a4c1d
  Author: Philippe Bergheaud <felix@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:23:33 2015 +1000

      cxl: Workaround malformed pcie packets on some cards

      This works around a pcie host bridge defect on some cards, that can cause
      malformed Transaction Layer Packet (TLP) errors to be erroneously 
reported.

      The upper nibble of the vendor section PSL revision is used to distinguish
      between different cards. The affected ones have it set to 0.

      Signed-off-by: Philippe Bergheaud <felix@xxxxxxxxxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit e1a58320a38dfa72be48a0f1a3a92273663ba6db
  Author: Stephen Smalley <sds@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 12:55:20 2015 -0400

      x86/mm: Warn on W^X mappings

      Warn on any residual W+X mappings after setting NX
      if DEBUG_WX is enabled.  Introduce a separate
      X86_PTDUMP_CORE config that enables the code for
      dumping the page tables without enabling the debugfs
      interface, so that DEBUG_WX can be enabled without
      exposing the debugfs interface.  Switch EFI_PGT_DUMP
      to using X86_PTDUMP_CORE so that it also does not require
      enabling the debugfs interface.

      On success it prints this to the kernel log:

        x86/mm: Checked W+X mappings: passed, no W+X pages found.

      On failure it prints a warning and a count of the failed pages:

        ------------[ cut here ]------------
        WARNING: CPU: 1 PID: 1 at arch/x86/mm/dump_pagetables.c:226 
note_page+0x610/0x7b0()
        x86/mm: Found insecure W+X mapping at address 
ffffffff81755000/__stop___ex_table+0xfa8/0xabfa8
        [...]
        Call Trace:
         [<ffffffff81380a5f>] dump_stack+0x44/0x55
         [<ffffffff8109d3f2>] warn_slowpath_common+0x82/0xc0
         [<ffffffff8109d48c>] warn_slowpath_fmt+0x5c/0x80
         [<ffffffff8106cfc9>] ? note_page+0x5c9/0x7b0
         [<ffffffff8106d010>] note_page+0x610/0x7b0
         [<ffffffff8106d409>] ptdump_walk_pgd_level_core+0x259/0x3c0
         [<ffffffff8106d5a7>] ptdump_walk_pgd_level_checkwx+0x17/0x20
         [<ffffffff81063905>] mark_rodata_ro+0xf5/0x100
         [<ffffffff817415a0>] ? rest_init+0x80/0x80
         [<ffffffff817415bd>] kernel_init+0x1d/0xe0
         [<ffffffff8174cd1f>] ret_from_fork+0x3f/0x70
         [<ffffffff817415a0>] ? rest_init+0x80/0x80
        ---[ end trace a1f23a1e42a2ac76 ]---
        x86/mm: Checked W+X mappings: FAILED, 171 W+X pages found.

      Signed-off-by: Stephen Smalley <sds@xxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444064120-11450-1-git-send-email-sds@xxxxxxxxxxxxx
      [ Improved the Kconfig help text and made the new option default-y
        if CONFIG_DEBUG_RODATA=y, because it already found buggy mappings,
        so we really want people to have this on by default. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 38a413cbc2b2834683b21823d964bc2d2f0abb82
  Merge: 55696b1 9ffecb1
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 6 10:56:54 2015 +0200

      Merge tag 'v4.3-rc3' into x86/mm, to pick up fixes before applying new 
changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1c748dc2cbbe45d48572e395e11be677fbf7a28c
  Merge: e3b0ac1 27bf90b
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 6 09:04:10 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Switch the default callchain output mode to 'graph,0.5,caller', to 
make it
          look like the default for other tools, reducing the learning curve for
          people used to 'caller' based viewing. (Arnaldo Carvalho de Melo)

        - Implement column based horizontal scrolling in the hists browser 
(top, report),
          making it possible to use the TUI for things like 'perf mem report' 
where
          there are many more columns than can fit in a terminal. (Arnaldo 
Carvalho de Melo)

        - Support sorting by symbol_iaddr with perf.data files produced by
          'perf mem record'. (Don Zickus)

        - Display DATA_SRC sample type bit, i.e. when running 'perf evlist -v' 
the
          "DATA_SRC" wasn't appearing when set, fix it to look like: (Jiri Olsa)

            cpu/mem-loads/pp: ...SNIP... sample_type: 
IP|TID|TIME|ADDR|CPU|PERIOD|DATA_SRC

        - Introduce the 'P' event modifier, meaning 'max precision level, 
please', i.e.:

           $ perf record -e cycles:P usleep 1

          Is now similar to:

           $ perf record usleep 1

          Useful, for instance, when specifying multiple events. (Jiri Olsa)

        - Make 'perf -v' and 'perf -h' work. (Jiri Olsa)

        - Fail properly when pattern matching fails to find a tracepoint, i.e.
          '-e non:existent' was being correctly handled, with a proper error 
message
          about that not being a valid event, but '-e non:existent*' wasn't,
          fix it. (Jiri Olsa)

      Infrastructure changes:

        - Separate arch specific entries in 'perf test' and add an 'Intel CQM' 
one
          to be fun on x86 only. (Matt Fleming)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0a837fe4724713ef701e47d6bfab98a5efaff3eb
  Author: Peter Nørlund <pch@xxxxxxxxxxxx>
  Date:   Tue Oct 6 07:24:47 2015 +0200

      ipv4: Fix compilation errors in fib_rebalance

      This fixes

      net/built-in.o: In function `fib_rebalance':
      fib_semantics.c:(.text+0x9df14): undefined reference to `__divdi3'

      and

      net/built-in.o: In function `fib_rebalance':
      net/ipv4/fib_semantics.c:572: undefined reference to `__aeabi_ldivmod'

      Fixes: 0e884c78ee19 ("ipv4: L3 hash-based multipath")

      Signed-off-by: Peter Nørlund <pch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 855591d2f7d1ff7eb18b60ce2be494e3bfe27fb8
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Mon Oct 5 10:51:03 2015 -0500

      amd-xgbe: Check for successful buffer allocation before use

      The kasprintf function can return NULL if the allocation fails. Check for
      successful allocation before attempting to use the returned buffer.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d9a0540a79f87456907f2ce031f058cf745c5bff
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Sat Oct 3 13:13:13 2015 +0100

      Btrfs: fix deadlock when finalizing block group creation

      Josef ran into a deadlock while a transaction handle was finalizing the
      creation of its block groups, which produced the following trace:

        [260445.593112] fio             D ffff88022a9df468     0  8924   4518 
0x00000084
        [260445.593119]  ffff88022a9df468 ffffffff81c134c0 ffff880429693c00 
ffff88022a9df488
        [260445.593126]  ffff88022a9e0000 ffff8803490d7b00 ffff8803490d7b18 
ffff88022a9df4b0
        [260445.593132]  ffff8803490d7af8 ffff88022a9df488 ffffffff8175a437 
ffff8803490d7b00
        [260445.593137] Call Trace:
        [260445.593145]  [<ffffffff8175a437>] schedule+0x37/0x80
        [260445.593189]  [<ffffffffa0850f37>] btrfs_tree_lock+0xa7/0x1f0 [btrfs]
        [260445.593197]  [<ffffffff810db7c0>] ? prepare_to_wait_event+0xf0/0xf0
        [260445.593225]  [<ffffffffa07eac44>] btrfs_lock_root_node+0x34/0x50 
[btrfs]
        [260445.593253]  [<ffffffffa07eff6b>] btrfs_search_slot+0x88b/0xa00 
[btrfs]
        [260445.593295]  [<ffffffffa08389df>] ? free_extent_buffer+0x4f/0x90 
[btrfs]
        [260445.593324]  [<ffffffffa07f1a06>] 
btrfs_insert_empty_items+0x66/0xc0 [btrfs]
        [260445.593351]  [<ffffffffa07ea94a>] ? btrfs_alloc_path+0x1a/0x20 
[btrfs]
        [260445.593394]  [<ffffffffa08403b9>] 
btrfs_finish_chunk_alloc+0x1c9/0x570 [btrfs]
        [260445.593427]  [<ffffffffa08002ab>] 
btrfs_create_pending_block_groups+0x11b/0x200 [btrfs]
        [260445.593459]  [<ffffffffa0800964>] do_chunk_alloc+0x2a4/0x2e0 [btrfs]
        [260445.593491]  [<ffffffffa0803815>] find_free_extent+0xa55/0xd90 
[btrfs]
        [260445.593524]  [<ffffffffa0803c22>] btrfs_reserve_extent+0xd2/0x220 
[btrfs]
        [260445.593532]  [<ffffffff8119fe5d>] ? account_page_dirtied+0xdd/0x170
        [260445.593564]  [<ffffffffa0803e78>] 
btrfs_alloc_tree_block+0x108/0x4a0 [btrfs]
        [260445.593597]  [<ffffffffa080c9de>] ? btree_set_page_dirty+0xe/0x10 
[btrfs]
        [260445.593626]  [<ffffffffa07eb5cd>] __btrfs_cow_block+0x12d/0x5b0 
[btrfs]
        [260445.593654]  [<ffffffffa07ebbff>] btrfs_cow_block+0x11f/0x1c0 
[btrfs]
        [260445.593682]  [<ffffffffa07ef8c7>] btrfs_search_slot+0x1e7/0xa00 
[btrfs]
        [260445.593724]  [<ffffffffa08389df>] ? free_extent_buffer+0x4f/0x90 
[btrfs]
        [260445.593752]  [<ffffffffa07f1a06>] 
btrfs_insert_empty_items+0x66/0xc0 [btrfs]
        [260445.593830]  [<ffffffffa07ea94a>] ? btrfs_alloc_path+0x1a/0x20 
[btrfs]
        [260445.593905]  [<ffffffffa08403b9>] 
btrfs_finish_chunk_alloc+0x1c9/0x570 [btrfs]
        [260445.593946]  [<ffffffffa08002ab>] 
btrfs_create_pending_block_groups+0x11b/0x200 [btrfs]
        [260445.593990]  [<ffffffffa0815798>] 
btrfs_commit_transaction+0xa8/0xb40 [btrfs]
        [260445.594042]  [<ffffffffa085abcd>] ? btrfs_log_dentry_safe+0x6d/0x80 
[btrfs]
        [260445.594089]  [<ffffffffa082bc84>] btrfs_sync_file+0x294/0x350 
[btrfs]
        [260445.594115]  [<ffffffff8123e29b>] vfs_fsync_range+0x3b/0xa0
        [260445.594133]  [<ffffffff81023891>] ? 
syscall_trace_enter_phase1+0x131/0x180
        [260445.594149]  [<ffffffff8123e35d>] do_fsync+0x3d/0x70
        [260445.594169]  [<ffffffff81023bb8>] ? syscall_trace_leave+0xb8/0x110
        [260445.594187]  [<ffffffff8123e600>] SyS_fsync+0x10/0x20
        [260445.594204]  [<ffffffff8175de6e>] 
entry_SYSCALL_64_fastpath+0x12/0x71

      This happened because the same transaction handle created a large number
      of block groups and while finalizing their creation (inserting new items
      and updating existing items in the chunk and device trees) a new metadata
      extent had to be allocated and no free space was found in the current
      metadata block groups, which made find_free_extent() attempt to allocate
      a new block group via do_chunk_alloc(). However at do_chunk_alloc() we
      ended up allocating a new system chunk too and exceeded the threshold
      of 2Mb of reserved chunk bytes, which makes do_chunk_alloc() enter the
      final part of block group creation again (at
      btrfs_create_pending_block_groups()) and attempt to lock again the root
      of the chunk tree when it's already write locked by the same task.

      Similarly we can deadlock on extent tree nodes/leafs if while we are
      running delayed references we end up creating a new metadata block group
      in order to allocate a new node/leaf for the extent tree (as part of
      a CoW operation or growing the tree), as btrfs_create_pending_block_groups
      inserts items into the extent tree as well. In this case we get the
      following trace:

        [14242.773581] fio             D ffff880428ca3418     0  3615   3100 
0x00000084
        [14242.773588]  ffff880428ca3418 ffff88042d66b000 ffff88042a03c800 
ffff880428ca3438
        [14242.773594]  ffff880428ca4000 ffff8803e4b20190 ffff8803e4b201a8 
ffff880428ca3460
        [14242.773600]  ffff8803e4b20188 ffff880428ca3438 ffffffff8175a437 
ffff8803e4b20190
        [14242.773606] Call Trace:
        [14242.773613]  [<ffffffff8175a437>] schedule+0x37/0x80
        [14242.773656]  [<ffffffffa057ff07>] btrfs_tree_lock+0xa7/0x1f0 [btrfs]
        [14242.773664]  [<ffffffff810db7c0>] ? prepare_to_wait_event+0xf0/0xf0
        [14242.773692]  [<ffffffffa0519c44>] btrfs_lock_root_node+0x34/0x50 
[btrfs]
        [14242.773720]  [<ffffffffa051ef6b>] btrfs_search_slot+0x88b/0xa00 
[btrfs]
        [14242.773750]  [<ffffffffa0520a06>] btrfs_insert_empty_items+0x66/0xc0 
[btrfs]
        [14242.773758]  [<ffffffff811ef4a2>] ? kmem_cache_alloc+0x1d2/0x200
        [14242.773786]  [<ffffffffa0520ad1>] btrfs_insert_item+0x71/0xf0 [btrfs]
        [14242.773818]  [<ffffffffa052f292>] 
btrfs_create_pending_block_groups+0x102/0x200 [btrfs]
        [14242.773850]  [<ffffffffa052f96e>] do_chunk_alloc+0x2ae/0x2f0 [btrfs]
        [14242.773934]  [<ffffffffa0532825>] find_free_extent+0xa55/0xd90 
[btrfs]
        [14242.773998]  [<ffffffffa0532c22>] btrfs_reserve_extent+0xc2/0x1d0 
[btrfs]
        [14242.774041]  [<ffffffffa0532e38>] btrfs_alloc_tree_block+0x108/0x4a0 
[btrfs]
        [14242.774078]  [<ffffffffa051a5cd>] __btrfs_cow_block+0x12d/0x5b0 
[btrfs]
        [14242.774118]  [<ffffffffa051abff>] btrfs_cow_block+0x11f/0x1c0 [btrfs]
        [14242.774155]  [<ffffffffa051e8c7>] btrfs_search_slot+0x1e7/0xa00 
[btrfs]
        [14242.774194]  [<ffffffffa0528021>] ? 
__btrfs_free_extent.isra.70+0x2e1/0xcb0 [btrfs]
        [14242.774235]  [<ffffffffa0520a06>] btrfs_insert_empty_items+0x66/0xc0 
[btrfs]
        [14242.774274]  [<ffffffffa051994a>] ? btrfs_alloc_path+0x1a/0x20 
[btrfs]
        [14242.774318]  [<ffffffffa052c433>] 
__btrfs_run_delayed_refs+0xbb3/0x1020 [btrfs]
        [14242.774358]  [<ffffffffa052f404>] 
btrfs_run_delayed_refs.part.78+0x74/0x280 [btrfs]
        [14242.774391]  [<ffffffffa052f627>] btrfs_run_delayed_refs+0x17/0x20 
[btrfs]
        [14242.774432]  [<ffffffffa05be236>] commit_cowonly_roots+0x8d/0x2bd 
[btrfs]
        [14242.774474]  [<ffffffffa059d07f>] ? 
__btrfs_run_delayed_items+0x1cf/0x210 [btrfs]
        [14242.774516]  [<ffffffffa05adac3>] ? 
btrfs_qgroup_account_extents+0x83/0x130 [btrfs]
        [14242.774558]  [<ffffffffa0544c40>] 
btrfs_commit_transaction+0x590/0xb40 [btrfs]
        [14242.774599]  [<ffffffffa0589b9d>] ? btrfs_log_dentry_safe+0x6d/0x80 
[btrfs]
        [14242.774642]  [<ffffffffa055ac54>] btrfs_sync_file+0x294/0x350 [btrfs]
        [14242.774650]  [<ffffffff8123e29b>] vfs_fsync_range+0x3b/0xa0
        [14242.774657]  [<ffffffff81023891>] ? 
syscall_trace_enter_phase1+0x131/0x180
        [14242.774663]  [<ffffffff8123e35d>] do_fsync+0x3d/0x70
        [14242.774669]  [<ffffffff81023bb8>] ? syscall_trace_leave+0xb8/0x110
        [14242.774675]  [<ffffffff8123e600>] SyS_fsync+0x10/0x20
        [14242.774681]  [<ffffffff8175de6e>] entry_SYSCALL_64_fastpath+0x12/0x71

      Fix this by never recursing into the finalization phase of block group
      creation and making sure we never trigger the finalization of block group
      creation while running delayed references.

      Reported-by: Josef Bacik <jbacik@xxxxxx>
      Fixes: 00d80e342c0f ("Btrfs: fix quick exhaustion of the system array in 
the superblock")
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit 808f80b46790f27e145c72112189d6a3be2bc884
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Mon Sep 28 09:56:26 2015 +0100

      Btrfs: update fix for read corruption of compressed and shared extents

      My previous fix in commit 005efedf2c7d ("Btrfs: fix read corruption of
      compressed and shared extents") was effective only if the compressed
      extents cover a file range with a length that is not a multiple of 16
      pages. That's because the detection of when we reached a different range
      of the file that shares the same compressed extent as the previously
      processed range was done at extent_io.c:__do_contiguous_readpages(),
      which covers subranges with a length up to 16 pages, because
      extent_readpages() groups the pages in clusters no larger than 16 pages.
      So fix this by tracking the start of the previously processed file
      range's extent map at extent_readpages().

      The following test case for fstests reproduces the issue:

        seq=`basename $0`
        seqres=$RESULT_DIR/$seq
        echo "QA output created by $seq"
        tmp=/tmp/$$
        status=1        # failure is the default!
        trap "_cleanup; exit \$status" 0 1 2 3 15

        _cleanup()
        {
            rm -f $tmp.*
        }

        # get standard environment, filters and checks
        . ./common/rc
        . ./common/filter

        # real QA test starts here
        _need_to_be_root
        _supported_fs btrfs
        _supported_os Linux
        _require_scratch
        _require_cloner

        rm -f $seqres.full

        test_clone_and_read_compressed_extent()
        {
            local mount_opts=$1

            _scratch_mkfs >>$seqres.full 2>&1
            _scratch_mount $mount_opts

            # Create our test file with a single extent of 64Kb that is going to
            # be compressed no matter which compression algo is used (zlib/lzo).
            $XFS_IO_PROG -f -c "pwrite -S 0xaa 0K 64K" \
                $SCRATCH_MNT/foo | _filter_xfs_io

            # Now clone the compressed extent into an adjacent file offset.
            $CLONER_PROG -s 0 -d $((64 * 1024)) -l $((64 * 1024)) \
                $SCRATCH_MNT/foo $SCRATCH_MNT/foo

            echo "File digest before unmount:"
            md5sum $SCRATCH_MNT/foo | _filter_scratch

            # Remount the fs or clear the page cache to trigger the bug in
            # btrfs. Because the extent has an uncompressed length that is a
            # multiple of 16 pages, all the pages belonging to the second range
            # of the file (64K to 128K), which points to the same extent as the
            # first range (0K to 64K), had their contents full of zeroes instead
            # of the byte 0xaa. This was a bug exclusively in the read path of
            # compressed extents, the correct data was stored on disk, btrfs
            # just failed to fill in the pages correctly.
            _scratch_remount

            echo "File digest after remount:"
            # Must match the digest we got before.
            md5sum $SCRATCH_MNT/foo | _filter_scratch
        }

        echo -e "\nTesting with zlib compression..."
        test_clone_and_read_compressed_extent "-o compress=zlib"

        _scratch_unmount

        echo -e "\nTesting with lzo compression..."
        test_clone_and_read_compressed_extent "-o compress=lzo"

        status=0
        exit

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>
      Tested-by: Timofey Titovets <nefelim4ag@xxxxxxxxx>

  commit b786f16ac3c5d4f7a5fd136656b6a1301b29b73b
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Sat Sep 26 15:30:23 2015 +0100

      Btrfs: send, fix corner case for reference overwrite detection

      When the inode given to did_overwrite_ref() matches the current progress
      and has a reference that collides with the reference of other inode that
      has the same number as the current progress, we were always telling our
      caller that the inode's reference was overwritten, which is incorrect
      because the other inode might be a new inode (different generation number)
      in which case we must return false from did_overwrite_ref() so that its
      callers don't use an orphanized path for the inode (as it will never be
      orphanized, instead it will be unlinked and the new inode created later).

      The following test case for fstests reproduces the issue:

        seq=`basename $0`
        seqres=$RESULT_DIR/$seq
        echo "QA output created by $seq"

        tmp=/tmp/$$
        status=1        # failure is the default!
        trap "_cleanup; exit \$status" 0 1 2 3 15

        _cleanup()
        {
            rm -fr $send_files_dir
            rm -f $tmp.*
        }

        # get standard environment, filters and checks
        . ./common/rc
        . ./common/filter

        # real QA test starts here
        _supported_fs btrfs
        _supported_os Linux
        _require_scratch
        _need_to_be_root

        send_files_dir=$TEST_DIR/btrfs-test-$seq

        rm -f $seqres.full
        rm -fr $send_files_dir
        mkdir $send_files_dir

        _scratch_mkfs >>$seqres.full 2>&1
        _scratch_mount

        # Create our test file with a single extent of 64K.
        mkdir -p $SCRATCH_MNT/foo
        $XFS_IO_PROG -f -c "pwrite -S 0xaa 0 64K" $SCRATCH_MNT/foo/bar \
            | _filter_xfs_io

        _run_btrfs_util_prog subvolume snapshot -r $SCRATCH_MNT \
            $SCRATCH_MNT/mysnap1
        _run_btrfs_util_prog subvolume snapshot $SCRATCH_MNT \
            $SCRATCH_MNT/mysnap2

        echo "File digest before being replaced:"
        md5sum $SCRATCH_MNT/mysnap1/foo/bar | _filter_scratch

        # Remove the file and then create a new one in the same location with
        # the same name but with different content. This new file ends up
        # getting the same inode number as the previous one, because that inode
        # number was the highest inode number used by the snapshot's root and
        # therefore when attempting to find the a new inode number for the new
        # file, we end up reusing the same inode number. This happens because
        # currently btrfs uses the highest inode number summed by 1 for the
        # first inode created once a snapshot's root is loaded (done at
        # fs/btrfs/inode-map.c:btrfs_find_free_objectid in the linux kernel
        # tree).
        # Having these two different files in the snapshots with the same inode
        # number (but different generation numbers) caused the btrfs send code
        # to emit an incorrect path for the file when issuing an unlink
        # operation because it failed to realize they were different files.
        rm -f $SCRATCH_MNT/mysnap2/foo/bar
        $XFS_IO_PROG -f -c "pwrite -S 0xbb 0 96K" \
            $SCRATCH_MNT/mysnap2/foo/bar | _filter_xfs_io

        _run_btrfs_util_prog subvolume snapshot -r $SCRATCH_MNT/mysnap2 \
            $SCRATCH_MNT/mysnap2_ro

        _run_btrfs_util_prog send $SCRATCH_MNT/mysnap1 -f $send_files_dir/1.snap
        _run_btrfs_util_prog send -p $SCRATCH_MNT/mysnap1 \
            $SCRATCH_MNT/mysnap2_ro -f $send_files_dir/2.snap

        echo "File digest in the original filesystem after being replaced:"
        md5sum $SCRATCH_MNT/mysnap2_ro/foo/bar | _filter_scratch

        # Now recreate the filesystem by receiving both send streams and verify
        # we get the same file contents that the original filesystem had.
        _scratch_unmount
        _scratch_mkfs >>$seqres.full 2>&1
        _scratch_mount

        _run_btrfs_util_prog receive -vv $SCRATCH_MNT -f $send_files_dir/1.snap
        _run_btrfs_util_prog receive -vv $SCRATCH_MNT -f $send_files_dir/2.snap

        echo "File digest in the new filesystem:"
        # Must match the digest from the new file.
        md5sum $SCRATCH_MNT/mysnap2_ro/foo/bar | _filter_scratch

        status=0
        exit

      Reported-by: Martin Raiber <martin@xxxxxxxxxxxx>
      Fixes: 8b191a684968 ("Btrfs: incremental send, check if orphanized dir 
inode needs delayed rename")
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit 27bf90bf0690f55c3679bcc4c325823cf1cfd19d
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 21:31:17 2015 +0200

      perf tools: Fail properly in case pattern matching fails to find 
tracepoint

      Currently we dont fail properly when pattern matching fails to find any
      tracepoint.

      Current behaviour:

        $ perf record -e 'sched:krava*' sleep 1
        WARNING: event parser found nothinginvalid or unsupported event: 
'sched:krava*'
        Run 'perf list' for a list of valid events

        usage: perf record [<options>] [<command>]
           or: perf record [<options>] -- <command> [<options>]

      This patch change:

        $ perf record -e 'sched:krava*' sleep 1
        event syntax error: 'sched:krava*'
                             \___ unknown tracepoint

        Error:  File /sys/kernel/debug/tracing/events/sched/krava* not found.
        Hint:   Perhaps this kernel misses some CONFIG_ setting to enable this 
feature?.

        Run 'perf list' for a list of valid events

         usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

      Reported-by: Daniel Bristot de Oliveira <bristot@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444073477-3181-1-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c6c3c02dea4034431110923ffd8e296ebfbdbe1b
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Aug 11 17:22:43 2015 -0300

      perf hists browser: Implement horizontal scrolling

      Do it using the recently introduced ui_brower scrolling mode, setting
      ui_browser.columns to the number of sort columns and then, when
      rendering each line, skipping as many initial columns as the user
      pressed the right arrow.

      As the user presses the left arrow, the ui_browser code will remove the
      scrolling counter and the left scrolling takes place.

      The right arrow key was an alias for ENTER, so people used to press it
      may get a bit annoyed at first, sorry! Ditto for ESC and the left key.

      Callchains can be left as is or we can, when rendering the Symbol
      column, store the at what position on the screen it is and then
      using ui_browser__gotorc() to print it from there, i.e. the callchain
      would move around with the symbol.

      Leaving it as is, i.e. at a fixed position, close to the left, saves
      precious screen real state for it, so I'm inclined to leave it as is
      now.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ccqq9sabgfge5dwbqjwh71ij@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit faae6f690eecb82b6d9d9f2112f5b51ac37d4acb
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Aug 11 17:14:40 2015 -0300

      perf ui browser: Optional horizontal scrolling key binding

      If the classes derived from ui_browser want to do some sort of
      horizontal scrolling, they have just to set ui_browser->columns to
      the number of columns available.

      Those columns can be the number of characters on the screen, if what is
      desired is to scroll character by character, or the number of columns in
      a spreadsheet like table.

      This is what the hist_browser will do, skipping ui_browser->horiz_scroll
      columns when rendering each of its lines.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-q6a22bpmpgcr1awgzrmd4jrs@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit def02db0d662b0edd83f80e3c18f660fc414decb
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Oct 5 17:05:35 2015 -0300

      perf callchain: Switch default to 'graph,0.5,caller'

      Which is the most common default found in other similar tools.

      Requested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: https://www.youtube.com/watch?v=nXaxk27zwlk
      Link: http://lkml.kernel.org/n/tip-v8lq36aispvdwgxdmt9p9jd9@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 035827e9f2bd71a280f4eb58c65811d377ab2217
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Mon Oct 5 15:40:21 2015 +0100

      perf tests: Add Intel CQM test

      Peter reports that it's possible to trigger a WARN_ON_ONCE() in the
      Intel CQM code by combining a hardware event and an Intel CQM
      (software) event into a group. Unfortunately, the perf tools are not
      able to create this bundle and we need to manually construct a test
      case.

      For posterity, record Peter's proof of concept test case in tools/perf
      so that it presents a model for how we can perform architecture
      specific tests, or "arch tests", in perf in the future.

      The particular issue triggered in the test case is that when the
      counter for the hardware event overflows and triggers a PMI we'll read
      both the hardware event and the software event counters.
      Unfortunately, for CQM that involves performing an IPI to read the CQM
      event counters on all sockets, which in NMI context triggers the
      WARN_ON_ONCE().

      Reported-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kanaka Juvva <kanaka.d.juvva@xxxxxxxxx>
      Cc: Vikas Shivappa <vikas.shivappa@xxxxxxxxx>
      Cc: Vince Weaver <vince@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1437490509-15373-1-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/n/tip-3p4ra0u8vzm7m289a1m799kf@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d8b167f9d8af817073ee35cf904e2e527465dbc1
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Mon Oct 5 15:40:20 2015 +0100

      perf tests: Move x86 tests into arch directory

      Move out the x86-specific tests into tools/perf/arch/x86/tests and
      define an 'arch_tests' array, which is the list of tests that only apply
      to the build architecture.

      We can also now begin to get rid of some of the #ifdef code that is
      present in the generic perf tests.

      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kanaka Juvva <kanaka.d.juvva@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Vikas Shivappa <vikas.shivappa@xxxxxxxxx>
      Cc: Vince Weaver <vince@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-9s68h4ptg06ah0lgnjz55mqn@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 31b6753f95320260b160935d0e9c0b29f096ab57
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Mon Oct 5 15:40:19 2015 +0100

      perf tests: Add arch tests

      Tests that only make sense for some architectures currently live in
      the same place as the generic tests. Move out the x86-specific tests
      into tools/perf/arch/x86/tests and define an 'arch_tests' array, which
      is the list of tests that only apply to the build architecture.

      The main idea is to encourage developers to add arch tests to build
      out perf's test coverage, without dumping everything in
      tools/perf/tests.

      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kanaka Juvva <kanaka.d.juvva@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Vikas Shivappa <vikas.shivappa@xxxxxxxxx>
      Cc: Vince Weaver <vince@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-p4uc1c15ssbj8xj7ku5slpa6@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a1853e2c6f8ed488adcd84fb162c5b3f0b674d9b
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:09 2015 +0200

      perf tools: Handle -h and -v options

      Adding handling for '-h' and '-v' options to invoke help and version
      command respectively.

      Current behaviour is:

         $ perf -v
         Unknown option: -v

          Usage: perf [--version] [--help] [OPTIONS] COMMAND [ARGS]
         $ perf -h
         Unknown option: -h

          Usage: perf [--version] [--help] [OPTIONS] COMMAND [ARGS]

      New behaviour:

        $ perf -h

         usage: perf [--version] [--help] [OPTIONS] COMMAND [ARGS]

         The most commonly used perf commands are:
           annotate        Read perf.data (created by perf record) and display 
annotated code
           archive         Create archive with object files with build-ids 
found in perf.data file
           bench           General framework for benchmark suites
         ...

        $ perf -v
        perf version 4.3.rc3.gc99e32

      Updated man page.

      Requested-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-10-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b34b3bf0798633cc248b682f5b4f6509739ce234
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:08 2015 +0200

      perf tools: Setup proper width for symbol_iaddr field

      We need to properly initialize column width for symbol_iaddr field, so
      all symbols could fit in the column.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-9-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 28e6db205b3ed3f1d86a00c69b3304190377da5f
  Author: Don Zickus <dzickus@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:07 2015 +0200

      perf tools: Add support for sorting on the iaddr

      Sorting on 'symbol' gives to broad a resolution as it can cover a range
      of IP address.  Use the iaddr instead to get proper sorting on IP
      addresses.  Need to use the 'mem_sort' feature of perf record.

      New sort option is: symbol_iaddr, header label is 'Code Symbol'.

        $ perf mem report --stdio -F +symbol_iaddr
        # Overhead       Samples  Code Symbol              Local Weight
        # ........  ............  ........................ ............
        #
            54.08%             1  [k] nmi_handle           192
             4.51%             1  [k] finish_task_switch   16
             3.66%             1  [.] malloc               13
             3.10%             1  [.] __strcoll_l          11

      Signed-off-by: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-8-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ddd83c9717ef8204f17cc63d6dcb5053d472caee
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:06 2015 +0200

      perf tests: Add parsing test for 'P' modifier

      We cant test 'P' modifier gets properly parsed, the functionality test
      itself is beyond this suite.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-7-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7f94af7a489fada17d28cc60e8f4409ce216bd6d
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:05 2015 +0200

      perf tools: Introduce 'P' modifier to request max precision

      The 'P' will cause the event to get maximum possible detected precise
      level.

      Following record:
        $ perf record -e cycles:P ...

      will detect maximum precise level for 'cycles' event and use it.

      Commiter note:

      Testing it:

        $ perf record -e cycles:P usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.013 MB perf.data (9 samples) ]
        $ perf evlist
        cycles:P
        $ perf evlist -v
        cycles:P: size: 112, { sample_period, sample_freq }: 4000, sample_type:
        IP|TID|TIME|PERIOD, disabled: 1, inherit: 1, mmap: 1, comm: 1, freq: 1,
        enable_on_exec: 1, task: 1, precise_ip: 2, sample_id_all: 1, mmap2: 1,
        comm_exec: 1
        $

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-6-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 45cf6c33f95448752dd3d5531388429c3a5012d0
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:04 2015 +0200

      perf tools: Export perf_event_attr__set_max_precise_ip()

      It'll be used in following patch.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-5-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5ec4502d774699194952209ff3ebe65d2472e15a
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:03 2015 +0200

      perf annotate: Fix sizeof_sym_hist overflow issue

      The annotated_source::sizeof_sym_hist could easily overflow int size,
      resulting in crash in __symbol__inc_addr_samples.

      Changing its type int size_t as was probably intended from beginning
      based on the initialization code in symbol__alloc_hist.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 84422592e58f6f1ea03688fcf92143bbc095fa88
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:02 2015 +0200

      perf evlist: Display DATA_SRC sample type bit

      Adding DATA_SRC bit_name call to display sample_type properly.

         $ perf evlist -v
         cpu/mem-loads/pp: ...SNIP... sample_type: 
IP|TID|TIME|ADDR|CPU|PERIOD|DATA_SRC, ...

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ccb5597f9ba11b67b8aa8c6f4682675eceee0e21
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:01 2015 +0200

      tools lib api fs: No need to use PATH_MAX + 1

      Because there's no point, PATH_MAX is big enough.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 06766513232d1619ac84e87b1d839d3fcc23a540
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Thu Sep 10 21:20:57 2015 -0700

      RDS: IB: split mr pool to improve 8K messages performance

      8K message sizes are pretty important usecase for RDS current
      workloads so we make provison to have 8K mrs available from the pool.
      Based on number of SG's in the RDS message, we pick a pool to use.

      Also to make sure that we don't under utlise mrs when say 8k messages
      are dominating which could lead to 8k pull being exhausted, we fall-back
      to 1m pool till 8k pool recovers for use.

      This helps to at least push ~55 kB/s bidirectional data which
      is a nice improvement.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 41a4e9646229801624e38f7a1cc53033a0affdb1
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sat Sep 19 13:06:08 2015 -0400

      RDS: IB: use max_mr from HCA caps than max_fmr

      All HCA drivers seems to popullate max_mr caps and few of
      them do both max_mr and max_fmr.

      Hence update RDS code to make use of max_mr.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 67161e250a28de5cdafa99a3b659b1e2e269fd7e
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sat Sep 19 17:21:22 2015 -0400

      RDS: IB: mark rds_ib_fmr_wq static

      Fix below warning by marking rds_ib_fmr_wq static

      net/rds/ib_rdma.c:87:25: warning: symbol 'rds_ib_fmr_wq' was not 
declared. Should it be static?

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 26139dc1dbf79fd1ae1e2766a1f66b0728bd67b3
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Tue Sep 15 18:20:35 2015 -0700

      RDS: IB: use already available pool handle from ibmr

      rds_ib_mr already keeps the pool handle which it associates
      with. Lets use that instead of round about way of fetching
      it from rds_ib_device.

      No functional change.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 2e1d6b813ac146db1e33ebb9b90441012dde4952
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sun Sep 13 22:34:37 2015 -0700

      RDS: IB: fix the rds_ib_fmr_wq kick call

      RDS IB mr pool has its own workqueue 'rds_ib_fmr_wq', so we need
      to use queue_delayed_work() to kick the work. This was hurting
      the performance since pool maintenance was less often triggered
      from other path.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 9441c973e1e0e9885537a3a86020fe8e121e9a98
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sat Sep 19 14:01:09 2015 -0400

      RDS: IB: handle rds_ibdev release case instead of crashing the kernel

      Just in case we are still handling the QP receive completion while the
      rds_ibdev is released, drop the connection instead of crashing the kernel.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 0c28c04500cf956c82d542c199f5bddabd590af3
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sun Sep 6 02:18:51 2015 -0400

      RDS: IB: split send completion handling and do batch ack

      Similar to what we did with receive CQ completion handling, we split
      the transmit completion handler so that it lets us implement batched
      work completion handling.

      We re-use the cq_poll routine and makes use of RDS_IB_SEND_OP to
      identify the send vs receive completion event handler invocation.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit f4f943c958a2869b0601092857c1cf0e485d3ce8
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sun Sep 6 02:18:51 2015 -0400

      RDS: IB: ack more receive completions to improve performance

      For better performance, we split the receive completion IRQ handler. That
      lets us acknowledge several WCE events in one call. We also limit the WC
      to max 32 to avoid latency. Acknowledging several completions in one call
      instead of several calls each time will provide better performance since
      less mutual exclusion locks are being performed.

      In next patch, send completion is also split which re-uses the poll_cq()
      and hence the code is moved to ib_cm.c

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit db6526dcb51b054961a2d96ba43dec23e38818b3
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Sep 11 15:44:29 2015 -0700

      RDS: use rds_send_xmit() state instead of RDS_LL_SEND_FULL

      In Transport indepedent rds_sendmsg(), we shouldn't make decisions based
      on RDS_LL_SEND_FULL which is used to manage the ring for RDMA based
      transports. We can safely issue rds_send_xmit() and the using its
      return value take decision on deferred work. This will also fix
      the scenario where at times we are seeing connections stuck with
      the LL_SEND_FULL bit getting set and never cleared.

      We kick krdsd after any time we see -ENOMEM or -EAGAIN from the
      ring allocation code.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 4bebdd7a4d2960b2ff6c40b27156d041ea270765
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Thu Sep 10 11:57:14 2015 -0700

      RDS: defer the over_batch work to send worker

      Current process gives up if its send work over the batch limit.
      The work queue will get  kicked to finish off any other requests.
      This fixes remainder condition from commit 443be0e5affe ("RDS: make
      sure not to loop forever inside rds_send_xmit").

      The restart condition is only for the case where we reached to
      over_batch code for some other reason so just retrying again
      before giving up.

      While at it, make sure we use already available 'send_batch_count'
      parameter instead of magic value. The batch count threshold value
      of 1024 came via commit 443be0e5affe ("RDS: make sure not to loop
      forever inside rds_send_xmit"). The idea is to process as big a
      batch as we can but at the same time we don't hold other waiting
      processes for send. Hence back-off after the send_batch_count
      limit (1024) to avoid soft-lock ups.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit abffa6f3b1578d5991545f6998ca7ee70b830e94
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Wed Sep 30 19:23:12 2015 +0100

      arm64: convert patch_lock to raw lock

      When running kprobe test on arm64 rt kernel, it reports the below warning:

      root@qemu7:~# modprobe kprobe_example
      BUG: sleeping function called from invalid context at 
kernel/locking/rtmutex.c:917
      in_atomic(): 0, irqs_disabled(): 128, pid: 484, name: modprobe
      CPU: 0 PID: 484 Comm: modprobe Not tainted 4.1.6-rt5 #2
      Hardware name: linux,dummy-virt (DT)
      Call trace:
      [<ffffffc0000891b8>] dump_backtrace+0x0/0x128
      [<ffffffc000089300>] show_stack+0x20/0x30
      [<ffffffc00061dae8>] dump_stack+0x1c/0x28
      [<ffffffc0000bbad0>] ___might_sleep+0x120/0x198
      [<ffffffc0006223e8>] rt_spin_lock+0x28/0x40
      [<ffffffc000622b30>] __aarch64_insn_write+0x28/0x78
      [<ffffffc000622e48>] aarch64_insn_patch_text_nosync+0x18/0x48
      [<ffffffc000622ee8>] aarch64_insn_patch_text_cb+0x70/0xa0
      [<ffffffc000622f40>] aarch64_insn_patch_text_sync+0x28/0x48
      [<ffffffc0006236e0>] arch_arm_kprobe+0x38/0x48
      [<ffffffc00010e6f4>] arm_kprobe+0x34/0x50
      [<ffffffc000110374>] register_kprobe+0x4cc/0x5b8
      [<ffffffbffc002038>] kprobe_init+0x38/0x7c [kprobe_example]
      [<ffffffc000084240>] do_one_initcall+0x90/0x1b0
      [<ffffffc00061c498>] do_init_module+0x6c/0x1cc
      [<ffffffc0000fd0c0>] load_module+0x17f8/0x1db0
      [<ffffffc0000fd8cc>] SyS_finit_module+0xb4/0xc8

      Convert patch_lock to raw loc kto avoid this issue.

      Although the problem is found on rt kernel, the fix should be applicable 
to
      mainline kernel too.

      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 5edfcee5ed73eb9537987c4ddb6bf062b6943b73
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Fri Sep 25 08:42:00 2015 +0200

      mac80211: make ieee80211_new_mesh_header return unsigned

      The function returns always non-negative values.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a29a9a585b2840a205f085a34dfd65c75e86f7c3
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Mon Oct 5 11:50:46 2015 +0900

      netfilter: nfnetlink_log: allow to attach conntrack

      This patch enables to include the conntrack information together
      with the packet that is sent to user-space via NFLOG, then a
      user-space program can acquire NATed information by this NFULA_CT
      attribute.

      Including the conntrack information is optional, you can set it
      via NFULNL_CFG_F_CONNTRACK flag with the NFULA_CFG_FLAGS attribute
      like NFQUEUE.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 224a05975ebbbdf507c65043f8aba280ccb39e6e
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Mon Oct 5 11:49:56 2015 +0900

      netfilter: ctnetlink: add const qualifier to nfnl_hook.get_ct

      get_ct as is and will not update its skb argument, and users of
      nfnl_ct_hook is currently only nfqueue, we can add const qualifier.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>

  commit 83f3e94d3477d79e603a1cf4c3e0c14da0f02688
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Mon Oct 5 11:48:47 2015 +0900

      netfilter: Kconfig rename QUEUE_CT to GLUE_CT

      Conntrack information attaching infrastructure is now generic and
      update it's name to use `glue' in previous patch. This patch updates
      Kconfig symbol name and adding NF_CT_NETLINK dependency.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit a4b4766c3cebb4018167e06b863d8e95b7274757
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Mon Oct 5 11:47:13 2015 +0900

      netfilter: nfnetlink_queue: rename related to nfqueue attaching conntrack 
info

      The idea of this series of patch is to attach conntrack information to
      nflog like nfqueue has already done. nfqueue conntrack info attaching
      basis is generic, rename those names to generic one, glue.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 0647e708344f4bf8b9e3f1855361c597f93d084d
  Author: Flavio Leitner <fbl@xxxxxxxxxxxx>
  Date:   Wed Sep 30 10:23:50 2015 -0300

      netfilter: remove dead code

      Remove __nf_conntrack_find() from headers.

      Fixes: dcd93ed4cd1 ("netfilter: nf_conntrack: remove dead code")
      Signed-off-by: Flavio Leitner <fbl@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 569ba74a7ba69f46ce2950bf085b37fea2408385
  Author: Mark Salyzyn <salyzyn@xxxxxxxxxxx>
  Date:   Mon Sep 21 21:39:50 2015 +0100

      arm64: readahead: fault retry breaks mmap file read random detection

      This is the arm64 portion of commit 45cac65b0fcd ("readahead: fault
      retry breaks mmap file read random detection"), which was absent from
      the initial port and has since gone unnoticed. The original commit says:

      > .fault now can retry.  The retry can break state machine of .fault.  In
      > filemap_fault, if page is miss, ra->mmap_miss is increased.  In the 
second
      > try, since the page is in page cache now, ra->mmap_miss is decreased.  
And
      > these are done in one fault, so we can't detect random mmap file access.
      >
      > Add a new flag to indicate .fault is tried once.  In the second try, 
skip
      > ra->mmap_miss decreasing.  The filemap_fault state machine is ok with 
it.

      With this change, Mark reports that:

      > Random read improves by 250%, sequential read improves by 40%, and
      > random write by 400% to an eMMC device with dm crypto wrapped around it.

      Cc: Shaohua Li <shli@xxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Wu Fengguang <fengguang.wu@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Salyzyn <salyzyn@xxxxxxxxxxx>
      Signed-off-by: Riley Andrews <riandrews@xxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 95485fdc64b1067e0e88d8c7980eb57994ad450e
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Fri Sep 18 22:09:00 2015 +0100

      arm64: debug: Fix typo in debug-monitors.c

      Fix comment typo: s/handers/handlers/

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit b28b1e826f818c30ea732ba751bbecb202dd32a7
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Sun Oct 4 19:38:14 2015 +0200

      netfilter: nfnetlink_queue: use y2038 safe timestamp

      The __build_packet_message function fills a nfulnl_msg_packet_timestamp
      structure that uses 64-bit seconds and is therefore y2038 safe, but
      it uses an intermediate 'struct timespec' which is not.

      This trivially changes the code to use 'struct timespec64' instead,
      to correct the result on 32-bit architectures.

      This is a copy and paste of Arnd's original patch for nfnetlink_log.

      Suggested-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 2b5b1a01a77f0e24b77680fce5245a582cb96330
  Merge: 32f40c5 b59f2e3
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:25:54 2015 +0200

      Merge tag 'ipvs3-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next

      Simon Horman says:

      ====================
      Third Round of IPVS Updates for v4.4

      please consider this build fix from Eric Biederman which resolves
      a build problem introduced in is excellent work to cleanup IPVS which
      you recently pulled: its queued up for v4.4 so no need to worry
      about earlier kernel versions.

      I have another minor cleanup, to fix a build warning, pending.
      However, I wanted to send this one to you now as its hit nf-next,
      net-next and in turn next, and a slow trickle of bug reports are 
appearing.
      ====================

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 225db5762dc1a35b26850477ffa06e5cd0097243
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Mon Oct 5 16:55:09 2015 +0200

      ALSA: synth: Fix conflicting OSS device registration on AWE32

      When OSS emulation is loaded on ISA SB AWE32 chip, we get now kernel
      warnings like:
        WARNING: CPU: 0 PID: 2791 at fs/sysfs/dir.c:31 
sysfs_warn_dup+0x51/0x80()
        sysfs: cannot create duplicate filename 
'/devices/isa/sbawe.0/sound/card0/seq-oss-0-0'

      It's because both emux synth and opl3 drivers try to register their
      OSS device object with the same static index number 0.  This hasn't
      been a big problem until the recent rewrite of device management code
      (that exposes sysfs at the same time), but it's been an obvious bug.

      This patch works around it just by using a different index number of
      emux synth object.  There can be a more elegant way to fix, but it's
      enough for now, as this code won't be touched so often, in anyway.

      Reported-and-tested-by: Michael Shell <list1@xxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit f79683ded69aeb041ee9b814d7611f47b6a89881
  Merge: 1f9c6e1 b8402d8
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:22:54 2015 +0300

      Merge ath-next from ath.git

      Major changes in ath10k:

      * add spectral scan support for 10.4 firmware
      * add qca6164 support
      * implement mesh support using firmware raw mode

  commit 26d0c21db1fd1679fcf07863741c13ba5ce37a65
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 5 10:15:14 2015 -0400

      drm/amdgpu: fix num_crtc on CZ

      Hw only has 3 crtcs.  copy paste typo.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 83ffe99f52b8f269b31b21524adcd13b165f7703
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Fri Oct 2 14:56:34 2015 -0700

      openvswitch: Fix ovs_vport_get_stats()

      Not every device has dev->tstats set. So when OVS tries to calculate
      vport stats it causes kernel panic. Following patch fixes it by
      using standard API to get net-device stats.

      ---8<---
      Unable to handle kernel paging request at virtual address 766b4008
      Internal error: Oops: 96000005 [#1] PREEMPT SMP
      Modules linked in: vport_vxlan vxlan ip6_udp_tunnel udp_tunnel tun bridge 
stp llc openvswitch ipv6
      CPU: 7 PID: 1108 Comm: ovs-vswitchd Not tainted 4.3.0-rc3+ #82
      PC is at ovs_vport_get_stats+0x150/0x1f8 [openvswitch]
      <snip>
      Call trace:
       [<ffffffbffc0859f8>] ovs_vport_get_stats+0x150/0x1f8 [openvswitch]
       [<ffffffbffc07cdb0>] ovs_vport_cmd_fill_info+0x140/0x1e0 [openvswitch]
       [<ffffffbffc07cf0c>] ovs_vport_cmd_dump+0xbc/0x138 [openvswitch]
       [<ffffffc00045a5ac>] netlink_dump+0xb8/0x258
       [<ffffffc00045ace0>] __netlink_dump_start+0x120/0x178
       [<ffffffc00045dd9c>] genl_family_rcv_msg+0x2d4/0x308
       [<ffffffc00045de58>] genl_rcv_msg+0x88/0xc4
       [<ffffffc00045cf24>] netlink_rcv_skb+0xd4/0x100
       [<ffffffc00045dab0>] genl_rcv+0x30/0x48
       [<ffffffc00045c830>] netlink_unicast+0x154/0x200
       [<ffffffc00045cc9c>] netlink_sendmsg+0x308/0x364
       [<ffffffc00041e10c>] sock_sendmsg+0x14/0x2c
       [<ffffffc000420d58>] SyS_sendto+0xbc/0xf0
      Code: aa1603e1 f94037a4 aa1303e2 aa1703e0 (f9400465)

      Reported-by: Tomasz Sawicki <tomasz.sawicki@xxxxxxxxxxxxxxxxxxxxxxx>
      Fixes: 8c876639c98 ("openvswitch: Remove vport stats.")
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0cdf5640e4f6940bdbbefee4bb0adb7dffb185ec
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 18:42:00 2015 +0200

      ebpf: include perf_event only where really needed

      Commit ea317b267e9d ("bpf: Add new bpf map type to store the pointer
      to struct perf_event") added perf_event.h to the main eBPF header, so
      it gets included for all users. perf_event.h is actually only needed
      from array map side, so lets sanitize this a bit.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4560cdff03a76348ee5fae48e3c7914e4de2db5b
  Author: Nicolas Schichan <nschichan@xxxxxxxxxx>
  Date:   Fri Oct 2 17:06:47 2015 +0200

      ARM: net: support BPF_ALU | BPF_MOD instructions in the BPF JIT.

      For ARMv7 with UDIV instruction support, generate an UDIV instruction
      followed by an MLS instruction.

      For other ARM variants, generate code calling a C wrapper similar to
      the jit_udiv() function used for BPF_ALU | BPF_DIV instructions.

      Some performance numbers reported by the test_bpf module (the duration
      per filter run is reported in nanoseconds, between "jitted:<x>" and
      "PASS":

      ARMv7 QEMU nojit: test_bpf: #3 DIV_MOD_KX jited:0 2196 PASS
      ARMv7 QEMU jit:           test_bpf: #3 DIV_MOD_KX jited:1 104 PASS
      ARMv5 QEMU nojit: test_bpf: #3 DIV_MOD_KX jited:0 2176 PASS
      ARMv5 QEMU jit:           test_bpf: #3 DIV_MOD_KX jited:1 1104 PASS
      ARMv5 kirkwood nojit:     test_bpf: #3 DIV_MOD_KX jited:0 1103 PASS
      ARMv5 kirkwood jit:       test_bpf: #3 DIV_MOD_KX jited:1 311 PASS

      Signed-off-by: Nicolas Schichan <nschichan@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8690f47d6e76d4300eeb316ba4773f7de3da63f7
  Author: Nicolas Schichan <nschichan@xxxxxxxxxx>
  Date:   Fri Oct 2 15:39:12 2015 +0200

      ARM: net: make BPF_LD | BPF_IND instruction trigger r_X initialisation to 
0.

      Without this patch, if the only instructions using r_X are of the
      BPF_LD | BPF_IND type, r_X would not be reset to 0, using whatever
      value was there when entering the jited code. With this patch, r_X
      will be correctly marked as used so it will be reset to 0 in the
      prologue code.

      This fix also makes the test "LD_IND byte default X" pass in the
      test_bpf module when the ARM JIT is enabled.

      Signed-off-by: Nicolas Schichan <nschichan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit df7b6015421babdf0fe7c0061dcc0bddf8ebab09
  Merge: bab1899 6a57081
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 06:58:51 2015 -0700

      Merge branch 'asix-rx-mem-handling'

      Mark Craske says:

      ====================
      Improve ASIX RX memory allocation error handling

      The ASIX RX handler algorithm is weak on error handling.
      There is a design flaw in the ASIX RX handler algorithm because the
      implementation for handling RX Ethernet frames for the DUB-E100 C1 can
      have Ethernet frames spanning multiple URBs. This means that payload data
      from more than 1 URB is sometimes needed to fill the socket buffer with a
      complete Ethernet frame. When the URB with the start of an Ethernet frame
      is received then an attempt is made to allocate a socket buffer. If the
      memory allocation fails then the algorithm sets the buffer pointer member
      to NULL and the function exits (no crash yet). Subsequently, the RX hander
      is called again to process the next URB which assumes there is a socket
      buffer available and the kernel crashes when there is no buffer.

      This patchset implements an improvement to the RX handling algorithm to
      avoid a crash when no memory is available for the socket buffer.

      The patchset will apply cleanly to the net-next master branch but the
      created kernel has not been tested. The driver was tested on ARM kernels
      v3.8 and v3.14 for a commercial product.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6a570814cd430fa5ef4f278e8046dcf12ee63f13
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:08 2015 +0100

      asix: Continue processing URB if no RX netdev buffer

      Avoid a loss of synchronisation of the Ethernet Data header 32-bit
      word due to a failure to get a netdev socket buffer.

      The ASIX RX handling algorithm returned 0 upon a failure to get
      an allocation of a netdev socket buffer. This causes the URB
      processing to stop which potentially causes a loss of synchronisation
      with the Ethernet Data header 32-bit word. Therefore, subsequent
      processing of URBs may be rejected due to a loss of synchronisation.
      This may cause additional good Ethernet frames to be discarded
      along with outputting of synchronisation error messages.

      Implement a solution which checks whether a netdev socket buffer
      has been allocated before trying to copy the Ethernet frame into
      the netdev socket buffer. But continue to process the URB so that
      synchronisation is maintained. Therefore, only a single Ethernet
      frame is discarded when no netdev socket buffer is available.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3f30b158eba5c604b6e0870027eef5d19fc9271d
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:07 2015 +0100

      asix: On RX avoid creating bad Ethernet frames

      When RX Ethernet frames span multiple URB socket buffers,
      the data stream may suffer a discontinuity which will cause
      the current Ethernet frame in the netdev socket buffer
      to be incomplete. This frame needs to be discarded instead
      of appending unrelated data from the current URB socket buffer
      to the Ethernet frame in the netdev socket buffer. This avoids
      creating a corrupted Ethernet frame in the netdev socket buffer.

      A discontinuity can occur when the previous URB socket buffer
      held an incomplete Ethernet frame due to truncation or a
      URB socket buffer containing the end of the Ethernet frame
      was missing.

      Therefore, add a sanity test for when an Ethernet frame
      spans multiple URB socket buffers to check that the remaining
      bytes of the currently received Ethernet frame point to
      a good Data header 32-bit word of the next Ethernet
      frame. Upon error, reset the remaining bytes variable to
      zero and discard the current netdev socket buffer.
      Assume that the Data header is located at the start of
      the current socket buffer and attempt to process the next
      Ethernet frame from there. This avoids unnecessarily
      discarding a good URB socket buffer that contains a new
      Ethernet frame.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9a5ccd8e039eef53336e45d01c7d8a1acbd36b47
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:06 2015 +0100

      asix: Simplify asix_rx_fixup_internal() netdev alloc

      The code is checking that the Ethernet frame will fit into a
      netdev allocated socket buffer within the constraints of MTU size,
      Ethernet header length plus VLAN header length.

      The original code was checking rx->remaining each loop of the while
      loop that processes multiple Ethernet frames per URB and/or Ethernet
      frames that span across URBs. rx->remaining decreases per while loop
      so there is no point in potentially checking multiple times that the
      Ethernet frame (remaining part) will fit into the netdev socket buffer.

      The modification checks that the size of the Ethernet frame will fit
      the netdev socket buffer before allocating the netdev socket buffer.
      This avoids grabbing memory and then deciding that the Ethernet frame
      is too big and then freeing the memory.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3bfc69abf802f56901ffd83bb66b7dd7644ddcc3
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:05 2015 +0100

      asix: Tidy-up 32-bit header word synchronisation

      Tidy-up the Data header 32-bit word synchronisation logic in
      asix_rx_fixup_internal() by removing redundant logic tests.

      The code is looking at the following cases of the Data header
      32-bit word that is present before each Ethernet frame:

      a) all 32 bits of the Data header word are in the URB socket buffer
      b) first 16 bits of the Data header word are at the end of the URB
         socket buffer
      c) last 16 bits of the Data header word are at the start of the URB
         socket buffer eg. split_head = true

      Note that the lifetime of rx->split_head exists outside of the
      function call and is accessed per processing of each URB. Therefore,
      split_head being true acts on the next URB to be processed.

      To check for b) the offset will be 16 bits (2 bytes) from the end of
      the buffer then indicate split_head is true.
      To check for c) split_head must be true because the first 16 bits
      have been found.
      To check for a) else c)

      Note that the || logic of the old code included the state
      (skb->len - offset == sizeof(u16) && rx->split_head) which is not
      possible because the split_head cannot be true whilst checking for b).
      This is because the split_head indicates that the first 16 bits have
      been found and that is not possible whilst checking for the first 16
      bits. Therefore simplify the logic.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b0378f517fa1a32b5c8384248d2f8bf79c7c2ae
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:04 2015 +0100

      asix: Rename remaining and size for clarity

      The Data header synchronisation is easier to understand
      if the variables "remaining" and "size" are renamed.

      Therefore, the lifetime of the "remaining" variable exists
      outside of asix_rx_fixup_internal() and is used to indicate
      any remaining pending bytes of the Ethernet frame that need
      to be obtained from the next socket buffer. This allows an
      Ethernet frame to span across multiple socket buffers.

      "size" is now local to asix_rx_fixup_internal() and contains
      the size read from the Data header 32-bit word.

      Add "copy_length" to hold the number of the Ethernet frame
      bytes (maybe a part of a full frame) that are to be copied
      out of the socket buffer.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bab18991871545dfbd10c931eb0fe8f7637156a9
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:17:33 2015 +0200

      bpf, seccomp: prepare for upcoming criu support

      The current ongoing effort to dump existing cBPF seccomp filters back
      to user space requires to hold the pre-transformed instructions like
      we do in case of socket filters from sk_attach_filter() side, so they
      can be reloaded in original form at a later point in time by utilities
      such as criu.

      To prepare for this, simply extend the bpf_prog_create_from_user()
      API to hold a flag that tells whether we should store the original
      or not. Also, fanout filters could make use of that in future for
      things like diag. While fanout filters already use bpf_prog_destroy(),
      move seccomp over to them as well to handle original programs when
      present.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
      Cc: Pavel Emelyanov <xemul@xxxxxxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Tested-by: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8b7530b15c3332220a081035ab467c9359aff409
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 2 16:59:34 2015 -0400

      drm/amdgpu: restore the fbdev mode in lastclose

      restore the fbdev state if a drm app like X is killed.

      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 8c70e1cda04b966b50ddfefafbd0ea376ed8edd5
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 2 16:52:58 2015 -0400

      drm/radeon: restore the fbdev mode in lastclose

      restore the fbdev state if a drm app like X is killed.

      Tested-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 598c12d0ba6de9060f04999746eb1e015774044b
  Author: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 13:18:22 2015 +0300

      ovs: do not allocate memory from offline numa node

      When openvswitch tries allocate memory from offline numa node 0:
      stats = kmem_cache_alloc_node(flow_stats_cache, GFP_KERNEL | __GFP_ZERO, 
0)
      It catches VM_BUG_ON(nid < 0 || nid >= MAX_NUMNODES || !node_online(nid))
      [ replaced with VM_WARN_ON(!node_online(nid)) recently ] in linux/gfp.h
      This patch disables numa affinity in this case.

      Signed-off-by: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 93d08b6966cf730ea669d4d98f43627597077153
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 12:06:03 2015 +0200

      bpf: fix panic in SO_GET_FILTER with native ebpf programs

      When sockets have a native eBPF program attached through
      setsockopt(sk, SOL_SOCKET, SO_ATTACH_BPF, ...), and then try to
      dump these over getsockopt(sk, SOL_SOCKET, SO_GET_FILTER, ...),
      the following panic appears:

        [49904.178642] BUG: unable to handle kernel NULL pointer dereference at 
(null)
        [49904.178762] IP: [<ffffffff81610fd9>] sk_get_filter+0x39/0x90
        [49904.182000] PGD 86fc9067 PUD 531a1067 PMD 0
        [49904.185196] Oops: 0000 [#1] SMP
        [...]
        [49904.224677] Call Trace:
        [49904.226090]  [<ffffffff815e3d49>] sock_getsockopt+0x319/0x740
        [49904.227535]  [<ffffffff812f59e3>] ? sock_has_perm+0x63/0x70
        [49904.228953]  [<ffffffff815e2fc8>] ? release_sock+0x108/0x150
        [49904.230380]  [<ffffffff812f5a43>] ? 
selinux_socket_getsockopt+0x23/0x30
        [49904.231788]  [<ffffffff815dff36>] SyS_getsockopt+0xa6/0xc0
        [49904.233267]  [<ffffffff8171b9ae>] entry_SYSCALL_64_fastpath+0x12/0x71

      The underlying issue is the very same as in commit b382c0865600
      ("sock, diag: fix panic in sock_diag_put_filterinfo"), that is,
      native eBPF programs don't store an original program since this
      is only needed in cBPF ones.

      However, sk_get_filter() wasn't updated to test for this at the
      time when eBPF could be attached. Just throw an error to the user
      to indicate that eBPF cannot be dumped over this interface.
      That way, it can also be known that a program _is_ attached (as
      opposed to just return 0), and a different (future) method needs
      to be consulted for a dump.

      Fixes: 89aa075832b0 ("net: sock: allow eBPF programs to be attached to 
sockets")
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a15afd2eaceceff5be4c8b7166f01c1a68e9642
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Thu Oct 1 15:21:08 2015 -0700

      vrf: fix a kernel warning

      This fixes:

       tried to remove device ip6gre0 from (null)
       ------------[ cut here ]------------
       kernel BUG at net/core/dev.c:5219!
       invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC
       CPU: 3 PID: 161 Comm: kworker/u8:2 Not tainted 4.3.0-rc2+ #1142
       Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
       Workqueue: netns cleanup_net
       task: ffff8800d784a9c0 ti: ffff8800d74a4000 task.ti: ffff8800d74a4000
       RIP: 0010:[<ffffffff817f0797>]  [<ffffffff817f0797>] 
__netdev_adjacent_dev_remove+0x40/0xec
       RSP: 0018:ffff8800d74a7a98  EFLAGS: 00010282
       RAX: 000000000000002a RBX: 0000000000000000 RCX: 0000000000000000
       RDX: ffff88011adcf701 RSI: ffff88011adccbf8 RDI: ffff88011adccbf8
       RBP: ffff8800d74a7ab8 R08: 0000000000000001 R09: 0000000000000000
       R10: ffffffff81d190ff R11: 00000000ffffffff R12: ffff8800d599e7c0
       R13: 0000000000000000 R14: ffff8800d599e890 R15: ffffffff82385e00
       FS:  0000000000000000(0000) GS:ffff88011ac00000(0000) 
knlGS:0000000000000000
       CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
       CR2: 00007ffd6f003000 CR3: 000000000220c000 CR4: 00000000000006e0
       Stack:
        0000000000000000 ffff8800d599e7c0 0000000000000b00 ffff8800d599e8a0
        ffff8800d74a7ad8 ffffffff817f0861 0000000000000000 ffff8800d599e7c0
        ffff8800d74a7af8 ffffffff817f088f 0000000000000000 ffff8800d599e7c0
       Call Trace:
        [<ffffffff817f0861>] __netdev_adjacent_dev_unlink+0x1e/0x35
        [<ffffffff817f088f>] __netdev_adjacent_dev_unlink_neighbour+0x17/0x41
        [<ffffffff817f56e6>] netdev_upper_dev_unlink+0x6c/0x13d
        [<ffffffff81674a3d>] vrf_del_slave+0x26/0x7d
        [<ffffffff81674ac3>] vrf_device_event+0x2f/0x34
        [<ffffffff81098c40>] notifier_call_chain+0x75/0x9c
        [<ffffffff81098fa2>] raw_notifier_call_chain+0x14/0x16
        [<ffffffff817ee129>] call_netdevice_notifiers_info+0x52/0x59
        [<ffffffff817f179d>] call_netdevice_notifiers+0x13/0x15
        [<ffffffff817f6f18>] rollback_registered_many+0x14f/0x24f
        [<ffffffff817f70f2>] unregister_netdevice_many+0x19/0x64
        [<ffffffff819a2455>] ip6gre_exit_net+0x163/0x177
        [<ffffffff817eb019>] ops_exit_list+0x44/0x55
        [<ffffffff817ebcb7>] cleanup_net+0x193/0x226
        [<ffffffff81091e1c>] process_one_work+0x26c/0x4d8
        [<ffffffff81091d20>] ? process_one_work+0x170/0x4d8
        [<ffffffff81092296>] worker_thread+0x1df/0x2c2
        [<ffffffff810920b7>] ? process_scheduled_works+0x2f/0x2f
        [<ffffffff810920b7>] ? process_scheduled_works+0x2f/0x2f
        [<ffffffff81097a20>] kthread+0xd4/0xdc
        [<ffffffff810bc523>] ? trace_hardirqs_on_caller+0x17d/0x199
        [<ffffffff8109794c>] ? __kthread_parkme+0x83/0x83
        [<ffffffff81a5240f>] ret_from_fork+0x3f/0x70
        [<ffffffff8109794c>] ? __kthread_parkme+0x83/0x83

      Fixes: 93a7e7e837af ("net: Remove the now unused vrf_ptr")
      Cc: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 33db4125ec745426c3483d6817d8f7ea5324cd05
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Thu Oct 1 15:00:37 2015 -0700

      openvswitch: Rename LABEL->LABELS

      Conntrack LABELS (plural) are exposed by conntrack; rename the OVS name
      for these to be consistent with conntrack.

      Fixes: c2ac667 "openvswitch: Allow matching on conntrack label"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9193d60d363e4dff75ff6d43a48f22be26d59c7
  Author: Andrey Vagin <avagin@xxxxxxxxxx>
  Date:   Fri Oct 2 00:05:36 2015 +0300

      net/unix: fix logic about sk_peek_offset

      Now send with MSG_PEEK can return data from multiple SKBs.

      Unfortunately we take into account the peek offset for each skb,
      that is wrong. We need to apply the peek offset only once.

      In addition, the peek offset should be used only if MSG_PEEK is set.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx> (maintainer:NETWORKING
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx> (commit_signer:1/14=7%)
      Cc: Aaron Conole <aconole@xxxxxxxxxx>
      Fixes: 9f389e35674f ("af_unix: return data from multiple SKBs on recv() 
with MSG_PEEK flag")
      Signed-off-by: Andrey Vagin <avagin@xxxxxxxxxx>
      Tested-by: Aaron Conole <aconole@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 215c90afb9ea633026273d81ac9c9ece2b1acd58
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Thu Oct 1 11:37:43 2015 -0700

      act_mirred: always release tcf hash

      Align with other tc actions.

      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6bd00b850635abb0044e06101761533c8beba79c
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Thu Oct 1 11:37:42 2015 -0700

      act_mirred: fix a race condition on mirred_list

      After commit 1ce87720d456 ("net: sched: make cls_u32 lockless")
      we began to release tc actions in a RCU callback. However,
      mirred action relies on RTNL lock to protect the global
      mirred_list, therefore we could have a race condition
      between RCU callback and netdevice event, which caused
      a list corruption as reported by Vinson.

      Instead of relying on RTNL lock, introduce a spinlock to
      protect this list.

      Note, in non-bind case, it is still called with RTNL lock,
      therefore should disable BH too.

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: John Fastabend <john.fastabend@xxxxxxxxx>
      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0316d30ea3e66379cd30ed70a114bc282159bb4c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri May 22 13:41:07 2015 +0200

      iwlwifi: mvm: add minimal multi-RXQ infrastructure

      Since the new multi-queue capability depends on a new firmware API,
      we can already add some code for it. If the new API is present, a
      new opmode ops struct is used that handles the new rx_rss method.

      For now, only restructure the RX handling to distinguish between
      the two. Future patches will convert the new infrastructure to
      actually use the new RX descriptor layout.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit d3f555f493b037eb688adda6d8a682e9b69211ed
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 16 12:21:32 2015 +0200

      iwlwifi: size firmware flags memory correctly

      Instead of relying on a hard-coded constant of a maximum of 64 API and
      capability bits, add a new enum value after the others that will then
      always track the number of used bits in the API/capabilities. We thus
      no longer need to maintain the maximum number, and on 32-bit platforms
      even (currently) reduce the number of bits kept in memory.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit fe96cc73c9f405a0bdc90504048235dfd0384582
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 24 22:19:43 2015 +0200

      iwlwifi: mvm: make threshold temperatures unsigned

      There's no need to have negative threshold temperatures, so make
      them unsigned to avoid signedness warnings in debugfs.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 91fac940896b345d10e503ed7e1f54f85b3b9318
  Author: Moshe Harel <moshe.harel@xxxxxxxxx>
  Date:   Wed Sep 2 12:45:12 2015 +0300

      iwlwifi: nvm: add nvm phy_sku section to debugfs

      The only NVM section not captured in debugfs.

      Signed-off-by: Moshe Harel <moshe.harel@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit e6c21be665cab08325ee1f99e76497b5ffa924a9
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 24 22:15:02 2015 +0200

      iwlwifi: mvm: fix signedness warnings in ToF debugfs

      Using an int* instead of u32* as the kstrtou32() output argument
      obviously results in signedness warnings, change that.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 1191f646bb913feba4239a7ca45e5edb09324869
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Sat Sep 19 23:48:45 2015 +0300

      iwlwifi: mvm: rs: dynamically switch between 80MHz and 20MHz in some 
scenarios

      This is a tweak which has been shown to improve performance when
      moving away from the AP while working in 80Mhz.
      When RS decides to go down to 80MHz SISO MCS0 instead switch to 20MHz 
MCS4.
      Go back to 80MHz MCS1 if RS can sustain 20MHz MCS5.

      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 7c0ebd7870ce212d370a97d3d8ff5129edcc2323
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 22 12:28:42 2015 +0200

      iwlwifi: mvm: minor rx code cleanup

      Clean up variable initialisation slightly.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 5736b7eba362ee304335808325ad60e2249ac670
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 22 10:51:17 2015 +0200

      iwlwifi: remove IWL3165_UCODE_API_OK and _MIN

      As the 3165 device uses the same firmware as 7265-D and currently
      all 7000 series (including 3160/3165) use the same API versions
      remove IWL3165_UCODE_API_OK and _MIN. We might have to put them
      back if firmware support ever splits, but in that case might also
      have to add a different MODULE_FIRMWARE statement.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit ed21a384bbd2b011289dd1b5cab7eebc7ebeda11
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Mon Sep 21 20:03:22 2015 +0300

      iwlwifi: mvm: rs: fix success ratio comparison in rs_get_best_rate

      success_ratio is actually 128 * SR in percentage while
      IWL_MVM_RS_SR_NO_DECREASE is 85%. Fix this by using RS_PERCENT().
      This bug caused the if branch to be always executed. This in turn
      led to always selecting a rate, following a column switch, in which
      the expected throughput would exceed the best expected current throughput.
      In some scenarios where the success ratio isn't >85% such a rate
      could be too aggressive leading us to avoid the new column.
      This has the potential of causing sub optimal performance.

      Reported-by: Moshe Harel <moshe.harel@xxxxxxxxx>
      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 40ce5ed1e9d5c80819733c4fdc40a2b6c531d981
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Sat Sep 19 23:54:38 2015 +0300

      iwlwifi: mvm: rs: minor indentation fix

      Indentation was off a bit. Fix it.

      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit dfa1325a0865da0509f045ddc4c99b8653517f6b
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Sat Sep 19 23:46:32 2015 +0300

      iwlwifi: mvm: rs: remove overflowing debug message

      This message isn't very useful and creates clutter.
      Remove it.

      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit cc60c6e92907d7d1380353b46d7db9826a3622f2
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Sat Sep 19 23:37:45 2015 +0300

      iwlwifi: mvm: rs: improve rate debug messages

      Pretty print the rate full details to ease debugging.

      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit ceef91c89480dd18bb3ac51e91280a233d0ca41f
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 4 11:27:25 2015 +0200

      iwlwifi: mvm: stop using DEVICE_POWER_FLAGS_CAM_MSK

      The firmware has always treated these two bits to mean that
      powersave is enabled when POWER_SAVE_ENA is set and CAM is
      clear; it doesn't use them in any non-combined way.

      Therefore, it's pointless to send it two bits, and the API
      should be cleaned up. Prepare the driver by removing the CAM
      bit and using only POWER_SAVE_ENA to indicate whether PS is
      enabled or not.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 5c1156efebc6b76b4a7daec844c19d2ce1d7bb03
  Author: Liad Kaufman <liad.kaufman@xxxxxxxxx>
  Date:   Wed Jul 22 17:59:53 2015 +0300

      iwlwifi: mvm: support enabling a queue with a given ssn

      When enabling a queue, the default SSN is 0.

      Allow determining what that SSN should be, if required. This
      can happen, for example, if a queue gets reconfigured.

      Signed-off-by: Liad Kaufman <liad.kaufman@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 4ecafae9e56802575c3b0c45ecf3dedecd3fd9e3
  Author: Liad Kaufman <liad.kaufman@xxxxxxxxx>
  Date:   Tue Jul 14 13:36:18 2015 +0300

      iwlwifi: mvm: support using multiple ACs on single HW queue

      "DQA" is shorthand for "dynamic queue allocation", with the
      idea of allocating queues per-RA/TID on-demand rather than
      using shared queues statically allocated per vif. The goal
      of this is to enable future features (like GO PM) and to
      improve performance measurements of TX traffic.

      When RA/TID streams can't be neatly sorted into different AC
      queues, DQA allows sharing queues for the same RA. This means
      that DQA allows different ACs may reach the same HW queue.

      Update the code to allow such queue sharing by having a mapping
      between the HW queue and the mac80211 queues using it (as this
      could be more than one queue).

      Signed-off-by: Liad Kaufman <liad.kaufman@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 56882e6cab432508c79b350d7842af3abac9c7d3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri May 22 11:33:12 2015 +0200

      iwlwifi: transport: track number of allocated queues

      As the transport will decide how many queues (and MSI-X vectors)
      to allocate, add a field to indicate that to the op-mode so it
      can size/allocate its own data structures appropriately.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit a190430c5eeaff1b3a0cfc05d3572650b3bd3beb
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri May 22 10:52:26 2015 +0200

      iwlwifi: op-mode API: add rx_rss method

      Upcoming hardware will have the ability to do L3 hashing for RSS,
      directing data packets (and perhaps some associated metadata and
      management notifications) to different MSI-X vectors.

      In this case, it makes no sense to go through the full RX dispatch
      since it's already known that only a subset of the possibilities
      can come in, requiring a new receive method. In addition this must
      know which queue the packet was received on.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 1939089300cb4709dec2b268db649adfdefdb7bc
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 3 14:53:09 2015 +0200

      iwlwifi: mvm: remove PHY RX from handlers

      Treat PHY RX specially, since it's actually pretty frequent,
      doesn't need all the notication etc. code, and will have a
      different handler in future hardware.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 5ac15be8fa5193206f5c47172a63cf83bec91f66
  Author: Assaf Krauss <assaf.krauss@xxxxxxxxx>
  Date:   Wed Sep 16 11:47:14 2015 +0300

      iwlwifi: mvm: Improve debugfs tof robustness

      Return a proper error when wrong parameters are passed to debugfs
      tof_range_request.

      Signed-off-by: Assaf Krauss <assaf.krauss@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 9ef2b8befb5acf499ac60e2a18dfa3e41194ba6e
  Author: Gregory Greenman <gregory.greenman@xxxxxxxxx>
  Date:   Mon Jul 20 07:44:44 2015 +0300

      iwlwifi: mvm: ToF - fill bssid of responder configuration

      The command needs to have the AP interfaces BSSID (which corresponds
      to its address).

      Signed-off-by: Gregory Greenman <gregory.greenman@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 3e0fa50575dbc83e57ceee7c413ff9b4e09a9a80
  Author: Assaf Krauss <assaf.krauss@xxxxxxxxx>
  Date:   Wed Sep 16 11:44:55 2015 +0300

      iwlwifi: mvm: Fix tof debugfs formats (dec vs. hex)

      Make some input formats more natural, e.g. bandwidth and periods
      are more natural in decimal than in hexadecimal.

      Signed-off-by: Assaf Krauss <assaf.krauss@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit fec31ffffa6e05845ab13908d0ac0d5a10816836
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Oct 1 18:25:42 2015 -0700

      i40e: fix offload of GRE tunnels

      The driver still was not offloading TSO on GRE tunnels because
      it forgot to set the GSO_GRE flag, causing lots of retransmits.

      This fixes generic GRE traffic (like a tunnel added like below)
      whereas before it would get 1Gb/s or less, now on a 10G adapter
      it gets 8.7Gb/s.

      ip ad ad 11.1.0.2/24 dev ens2f0
      ip l set ens2f0 up
      ip link add gre2 type gretap remote 11.1.0.1 local 11.1.0.2 dev ens2f0
      ip l set gre2 up
      ip ad ad 192.168.124.2/24 dev gre2
      ping 192.168.124.1
      netperf -H 192.168.124.1

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d2dd52bf3f6dc5fa2587e79f0a46ade3d5951ddd
  Merge: 181a422 76d164f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 04:29:06 2015 -0700

      Merge tag 'wireless-drivers-for-davem-2015-10-01' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers

      Kalle Valo says:

      ====================
      pull-request: wireless-drivers 2015-10-01

      ath9k:

      * declare required extra tx headroom

      ath10k:

      * fix DMA related firmware crashes on multiple devices

      rt2800usb:

      * add usb ID 1b75:3070 for Airlive WT-2000USB

      b43:

      * probe bcma core (device) rev 0x15
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 78856ac0dd33036ae08a18b644e9fa40b30ee011
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Mon Oct 5 13:07:47 2015 +0200

      Revert "gpio-sysfs: Use gpio descriptor name instead of gpiochip names 
array"

      This reverts commit ddd5404007b8496f20ad2efe1147e102e6226634.

      We need to preserve only using this naming strategy for names
      coming from chip->names[], the descripor->name field is for the
      new interface.

  commit 181a4224acdfb993a21f987f8617b5c8d7bc654e
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Oct 1 16:25:43 2015 +0200

      ipv4: fix reply_dst leakage on arp reply

      There are cases when the created metadata reply is not used. Ensure the
      allocated memory is freed also in such cases.

      Fixes: 63d008a4e9ee ("ipv4: send arp replies to the correct tunnel")
      Reported-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dbf73d4a8bb8f4e1d1f3edd3be825692279e2ef3
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Wed Sep 30 12:26:23 2015 +0200

      iwlwifi: mvm: flush fw_dump_wk when mvm fails to start

      FW dump may be triggered when running init ucode, for example due to a
      sysassert. In this case fw_dump_wk may run after mvm is freed, resulting
      in a kernel panic.
      Fix it by flushing the work.

      Fixes: 01b988a708af ("iwlwifi: mvm: allow to collect debug data when 
restart is disabled")
      Cc: <stable@xxxxxxxxxxxxxxx> [3.18+]
      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 2306c704ce280c97a60d1f45333b822b40281dea
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 1 05:39:26 2015 -0700

      inet: fix race in reqsk_queue_unlink()

      reqsk_timer_handler() tests if icsk_accept_queue.listen_opt
      is NULL at its beginning.

      By the time it calls inet_csk_reqsk_queue_drop() and
      reqsk_queue_unlink(), listener might have been closed and
      inet_csk_listen_stop() had called reqsk_queue_yank_acceptq()
      which sets icsk_accept_queue.listen_opt to NULL

      We therefore need to correctly check listen_opt being NULL
      after holding syn_wait_lock for proper synchronization.

      Fixes: fa76ce7328b2 ("inet: get rid of central tcp/dccp listener timer")
      Fixes: b357a364c57c ("inet: fix possible panic in reqsk_queue_unlink()")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8695a144da9e500a5a60fa34c06694346ec1048f
  Author: Raanan Avargil <raanan.avargil@xxxxxxxxx>
  Date:   Thu Oct 1 04:48:53 2015 -0700

      tcp/dccp: fix old style declarations

      Iâ??m using the compilation flag -Werror=old-style-declaration, which
      requires that the â??inlineâ?? word would come at the beginning of the 
code
      line.

      $ make drivers/net/ethernet/intel/e1000e/e1000e.ko
      ...
      include/net/inet_timewait_sock.h:116:1: error: â??inlineâ?? is not at
      beginning of declaration [-Werror=old-style-declaration]
      static void inline inet_twsk_schedule(struct inet_timewait_sock *tw, int
      timeo)

      include/net/inet_timewait_sock.h:121:1: error: â??inlineâ?? is not at
      beginning of declaration [-Werror=old-style-declaration]
      static void inline inet_twsk_reschedule(struct inet_timewait_sock *tw,
      int timeo)

      Fixes: ed2e92394589 ("tcp/dccp: fix timewait races in timer handling")
      Signed-off-by: Raanan Avargil <raanan.avargil@xxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9886ce2b9d4e5a8bb3d78d0f7eff3c0f1ed58d67
  Author: kbuild test robot <lkp@xxxxxxxxx>
  Date:   Thu Oct 1 20:26:20 2015 +0800

      net: encx24j600_exit() can be static

      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04fbfce7a222327b97ca165294ef19f0faa45960
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 07:43:21 2015 -0400

      net: Microchip encx24j600 driver

      This ethernet driver supports the Micorchip enc424j600/626j600 Ethernet
      controller over a SPI bus interface. This driver makes use of the regmap 
API to
      optimize access to registers by caching registers where possible.

      Datasheet:
      http://ww1.microchip.com/downloads/en/DeviceDoc/39935b.pdf

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7741c373cf3ea1f5383fa97fb7a640a429d3dd7c
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 07:43:20 2015 -0400

      regmap: Allow installing custom reg_update_bits function

      This commit allows installing a custom reg_update_bits function for cases 
where
      the hardware provides a mechanism to set or clear register bits without a
      read/modify/write cycle. Such is the case with the Microchip ENCX24J600.

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1a3fe0b2b6778b7866e2b3f5c9a299d5e9bbd89c
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Wed Sep 30 11:19:55 2015 +0300

      iwlwifi: mvm: init card correctly on ctkill exit check

      During the CT-kill exit flow, the card is powered up and partially
      initialized to check if the temperature is already low enough.
      Unfortunately the init bails early because the CT-kill flag is set.
      Make the code bail early only for HW RF-kill, as was intended by the
      author. CT-kill is self-imposed and is not really RF-kill.

      Fixes: 31b8b343e019 ("iwlwifi: fix RFkill while calibrating")
      Cc: <stable@xxxxxxxxxxxxxxx> [3.18+]
      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit f08f625876476b6c4a87834dc86e3b927f4697d2
  Author: Luca Coelho <luciano.coelho@xxxxxxxxx>
  Date:   Tue Sep 22 09:44:39 2015 +0300

      iwlwifi: pci: add a few more PCI subvendor IDs for the 7265 series

      Add 3 new subdevice IDs for the 0x095A device ID and 2 for the 0x095B
      device ID.

      Cc: <stable@xxxxxxxxxxxxxxxx> [3.13+]
      Reported-by: Jeremy <jeremy.bomkamp@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit b5a48134f8af08f5243328f8a0b05fc5ae7cf343
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 22 10:47:27 2015 +0200

      iwlwifi: fix firmware filename for 3160

      The MODULE_FIRMWARE() for 3160 should be using the 7260 version as
      it's done in the device configuration struct instead of referencing
      IWL3160_UCODE_API_OK which doesn't even exist.

      Cc: <stable@xxxxxxxxxxxxxxx> [3.8+]
      Reported-by: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit e9cb0327b26dd7ba43a3b7a05b4b62219decf42d
  Author: Avraham Stern <avraham.stern@xxxxxxxxx>
  Date:   Mon Aug 31 11:08:27 2015 +0300

      iwlwifi: mvm: clear csa countdown when AP is stopped

      The csa_countdown flag was not cleared when the AP is stopped.
      As a result, if the AP was stopped after csa_countdown had started,
      all the folowing channel switch commands would fail.
      Fix that by clearing the csa_countdown flag when the AP is stopped.

      Cc: <stable@xxxxxxxxxxxxxxx> [3.17+]
      Signed-off-by: Avraham Stern <avraham.stern@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 937317c7c1097aa878a5000e3aab616eb5c590c0
  Author: Govindarajulu Varadarajan <_govind@xxxxxxx>
  Date:   Thu Oct 1 14:18:47 2015 +0530

      enic: do hang reset only in case of tx timeout

      The current code invokes hang reset in case of error interrupt. We should
      hang reset only in case of tx timeout. This because of the way hang reset
      is implemented in firmware. Hang reset takes more firmware resources than
      soft reset. Adaptor does not generate error interrupt in case of tx
      timeout.

      Hang reset only in case of tx timeout, in .ndo_tx_timeout. Do soft reset
      otherwise. Introduce deferred work, enic_tx_hang_reset, to do hang reset.

      Signed-off-by: Govindarajulu Varadarajan <_govind@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc809237e1f215141165f221ad729803d88bcbbe
  Author: Govindarajulu Varadarajan <_govind@xxxxxxx>
  Date:   Thu Oct 1 14:18:46 2015 +0530

      enic: handle spurious error interrupt

      Some of the enic adaptors are know to generate spurious interrupts. When
      error interrupt is generated, driver just resets the device. This patch
      resets the device only when an error is occurred.

      Signed-off-by: Govindarajulu Varadarajan <_govind@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2cf5eb3ab7bb7f2e3a70edcef236cd62c87db030
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 15 14:36:09 2015 +0200

      iwlwifi: mvm: fix D3 firmware PN programming

      The code to send the RX PN data (for each TID) to the firmware
      has a devastating bug: it overwrites the data for TID 0 with
      all the TID data, leaving the remaining TIDs zeroed. This will
      allow replays to actually be accepted by the firmware, which
      could allow waking up the system.

      Cc: <stable@xxxxxxxxxxxxxxx> [3.1+]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 5bd166872d8f99f156fac191299d24f828bb2348
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 15 14:36:09 2015 +0200

      iwlwifi: dvm: fix D3 firmware PN programming

      The code to send the RX PN data (for each TID) to the firmware
      has a devastating bug: it overwrites the data for TID 0 with
      all the TID data, leaving the remaining TIDs zeroed. This will
      allow replays to actually be accepted by the firmware, which
      could allow waking up the system.

      Cc: <stable@xxxxxxxxxxxxxxx> [3.1+]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 2905f5bb1cad66a37d142c4370d23d9e9632368e
  Merge: 40e1068 8541225
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:48:45 2015 -0700

      Merge branch 'cxgb4-next'

      Hariprasad Shenai says:

      ====================
      cxgb4: Trivial fixes for cxgb4

      Fixes the following issues
      Don't read non existent T4/T5/T6 adapter registers for ethtool dump.
      For T4, dont read mailbox control registers. Adds new devlog faility and
      report correct link speed for unsupported ones.

      This patch series has been created against net-next tree and includes
      patches on cxgb4 driver.

      We have included all the maintainers of respective drivers. Kindly review
      the change and let us know in case of any review comments.
      ====================

      Acked-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 85412255ef4fcccf52e0408d61cf8a75828a6800
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 1 13:48:48 2015 +0530

      cxgb4: Report correct link speed for unsupported ones

      When we get garbage from the firmware with weird Port Speeds,
      etc. we should emit a warning regarding unsupported speeds rather than
      use the bogus default of "10Mbps" which isn't even an option in the
      firmware Port Information message

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit da4976e17bff3bb7538090c36750b9875da67b5e
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 1 13:48:47 2015 +0530

      cxgb4: Adds a new Device Log Facility FW_DEVLOG_FACILITY_CF

      The firmware team added a new Device Log Facility FW_DEVLOG_FACILITY_CF,
      but the driver has been decoding Device Log messages with that Facility as
      "(NULL)", fixing it.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b3695540ba5d8cf032f30533d53786b31af271f5
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 1 13:48:46 2015 +0530

      cxgb4: For T4, don't read the Firmware Mailbox Control register

      T4 doesn't have the Shadow copy of the register which we can read without
      side effect. So don't read mbox control register for T4 adapter

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8119c018000bcc2d56e74f5459b7ff1902f96ff8
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 1 13:48:45 2015 +0530

      cxgb4 : Update T4/T5/T6 register ranges

      Update T4/T5/T6 adapter register ranges so that it doesn't read non
      existent registers when dumped using ethtool

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6645d5e441db9121793421d477255f4242b3dbf3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 15 09:58:53 2015 +0200

      iwlwifi: mvm: fix D3 CCMP TX PN assignment

      When going into/coming out of D3, the TX PN must be programmed into
      and restored from the firmware respectively. The restore was broken
      due to my previous commit to move PN assignment into the driver.
      Sending the PN to the firmware still worked since we now use the
      counter that's shared with mac80211, but accessing it through the
      mac80211 API makes no sense now.

      Fix this by reading/writing the counter directly. This actually
      simplifies the code since we don't need to round-trip through the
      key_seq structure.

      Fixes: ca8c0f4bede6 ("iwlwifi: mvm: move TX PN assignment for CCMP to the 
driver")
      Cc: <stable@xxxxxxxxxxxxxxx> [4.1+]
      Reported-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 33a8316d9cda4368e7cb477fff36c9ee35d4164e
  Author: Vladimir Zapolskiy <vz@xxxxxxxxx>
  Date:   Thu Oct 1 00:37:43 2015 +0300

      net: lpc_eth: fix warnings caused by enabling unprepared clock

      If common clock framework is configured, the driver generates warnings,
      which are fixed by this change:

          WARNING: CPU: 0 PID: 1 at linux/drivers/clk/clk.c:727 
clk_core_enable+0x2c/0xa4()
          Modules linked in:
          CPU: 0 PID: 1 Comm: swapper Not tainted 4.3.0-rc2+ #141
          Hardware name: LPC32XX SoC (Flattened Device Tree)
          Backtrace:
          [<>] (dump_backtrace) from [<>] (show_stack+0x18/0x1c)
          [<>] (show_stack) from [<>] (dump_stack+0x20/0x28)
          [<>] (dump_stack) from [<>] (warn_slowpath_common+0x90/0xb8)
          [<>] (warn_slowpath_common) from [<>] (warn_slowpath_null+0x24/0x2c)
          [<>] (warn_slowpath_null) from [<>] (clk_core_enable+0x2c/0xa4)
          [<>] (clk_core_enable) from [<>] (clk_enable+0x24/0x38)
          [<>] (clk_enable) from [<>] (lpc_eth_drv_probe+0xfc/0x99c)
          [<>] (lpc_eth_drv_probe) from [<>] (platform_drv_probe+0x50/0xa0)
          [<>] (platform_drv_probe) from [<>] (driver_probe_device+0x18c/0x408)
          [<>] (driver_probe_device) from [<>] (__driver_attach+0x70/0x94)
          [<>] (__driver_attach) from [<>] (bus_for_each_dev+0x74/0x98)
          [<>] (bus_for_each_dev) from [<>] (driver_attach+0x20/0x28)
          [<>] (driver_attach) from [<>] (bus_add_driver+0x11c/0x248)
          [<>] (bus_add_driver) from [<>] (driver_register+0xa4/0xe8)
          [<>] (driver_register) from [<>] 
(__platform_driver_register+0x50/0x64)
          [<>] (__platform_driver_register) from [<>] 
(lpc_eth_driver_init+0x18/0x20)
          [<>] (lpc_eth_driver_init) from [<>] (do_one_initcall+0x11c/0x1dc)
          [<>] (do_one_initcall) from [<>] (kernel_init_freeable+0x10c/0x1d4)
          [<>] (kernel_init_freeable) from [<>] (kernel_init+0x10/0xec)
          [<>] (kernel_init) from [<>] (ret_from_fork+0x14/0x24)

      Signed-off-by: Vladimir Zapolskiy <vz@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 40e106801e3b6629ec8026ab80985902d180502e
  Merge: 7e2832f b1842ff
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:39:31 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/net-next

      Eric W. Biederman says:

      ====================
      net: Pass net through ip fragmention

      This is the next installment of my work to pass struct net through the
      output path so the code does not need to guess how to figure out which
      network namespace it is in, and ultimately routes can have output
      devices in another network namespace.

      This round focuses on passing net through ip fragmentation which we seem
      to call from about everywhere.  That is the main ip output paths, the
      bridge netfilter code, and openvswitch.  This has to happend at once
      accross the tree as function pointers are involved.

      First some prep work is done, then ipv4 and ipv6 are converted and then
      temporary helper functions are removed.
      ====================

      Acked-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7e2832f17f9bec41643d420d55efd96b09d1fb45
  Merge: 393159e 76b29ef
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:34:59 2015 -0700

      Merge branch 'rds-perf'

      Sowmini Varadhan says:

      ====================
      RDS: RDS-TCP perf enhancements

      A 3-part patchset that (a) improves current RDS-TCP perf
      by 2X-3X and (b) refactors earlier robustness code for
      better observability/scaling.

      Patch 1 is an enhancment of earlier robustness fixes
      that had used separate sockets for client and server endpoints to
      resolve race conditions. It is possible to have an equivalent
      solution that does not use 2 sockets. The benefit of a
      single socket solution is that it results in more predictable
      and observable behavior for the underlying TCP pipe of an
      RDS connection

      Patches 2 and 3 are simple, straightforward perf bug fixes
      that align the RDS TCP socket with other parts of the kernel stack.

      v2: fix kbuild-test-robot warnings, comments from  Sergei Shtylov
          and Santosh Shilimkar.
      ====================

      Acked-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76b29ef120f5b845f862de08b92c7d2317b50907
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Wed Sep 30 16:54:09 2015 -0400

      RDS-TCP: Set up MSG_MORE and MSG_SENDPAGE_NOTLAST as appropriate in 
rds_tcp_xmit

      For the same reasons as commit 2f5338442425 ("tcp: allow splice() to
      build full TSO packets") and commit 35f9c09fe9c7 ("tcp: tcp_sendpages()
      should call tcp_push() once"), rds_tcp_xmit may have multiple pages to
      send, so use the MSG_MORE and MSG_SENDPAGE_NOTLAST as hints to
      tcp_sendpage()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1edd6a14d24f21b8b478970c63a243a08e2b55b0
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Wed Sep 30 16:54:08 2015 -0400

      RDS-TCP: Do not bloat sndbuf/rcvbuf in rds_tcp_tune

      Using the value of RDS_TCP_DEFAULT_BUFSIZE (128K)
      clobbers efficient use of TSO because it inflates the size_goal
      that is computed in tcp_sendmsg/tcp_sendpage and skews packet
      latency, and the default values for these parameters actually
      results in significantly better performance.

      In request-response tests using rds-stress with a packet size of
      100K with 16 threads (test parameters -q 100000 -a 256 -t16 -d16)
      between a single pair of IP addresses achieves a throughput of
      6-8 Gbps. Without this patch, throughput maxes at 2-3 Gbps under
      equivalent conditions on these platforms.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3b20fc389705a4c959adebc494578cb99bb8be9e
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Wed Sep 30 16:54:07 2015 -0400

      RDS: Use a single TCP socket for both send and receive.

      Commit f711a6ae062c ("net/rds: RDS-TCP: Always create a new rds_sock
      for an incoming connection.") modified rds-tcp so that an incoming SYN
      would ignore an existing "client" TCP connection which had the local
      port set to the transient port.  The motivation for ignoring the existing
      "client" connection in f711a6ae was to avoid race conditions and an
      endless duel of reconnect attempts triggered by a restart/abort of one
      of the nodes in the TCP connection.

      However, having separate sockets for active and passive sides
      is avoidable, and the simpler model of a single TCP socket for
      both send and receives of all RDS connections associated with
      that tcp socket makes for easier observability. We avoid the race
      conditions from f711a6ae by attempting reconnects in rds_conn_shutdown
      if, and only if, the (new) c_outgoing bit is set for RDS_TRANS_TCP.
      The c_outgoing bit is initialized in __rds_conn_create().

      A side-effect of re-using the client rds_connection for an incoming
      SYN is the potential of encountering duelling SYNs, i.e., we
      have an outgoing RDS_CONN_CONNECTING socket when we get the incoming
      SYN. The logic to arbitrate this criss-crossing SYN exchange in
      rds_tcp_accept_one() has been modified to emulate the BGP state
      machine: the smaller IP address should back off from the connection 
attempt.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6194bcf03e40bc6b6094f11289d87b605fb326d
  Author: David B. Robins <linux@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:20:04 2015 -0400

      net: usb: asix: Fix crash on skb alloc failure

      If asix_rx_fixup_internal() fails to allocate rx->ax_skb, it will return
      but not clear rx->size. rx points to driver private data. A later call
      assumes that nonzero size means ax_skb was allocated and passes a null
      ax_skb to skb_put. Changed allocation failure return to clear size first.

      Found testing board with AX88772B devices.

      Signed-off-by: David B. Robins <linux@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 393159e917242c39a5c07173914a0e2a2367ee69
  Merge: ac8cfc7 5078984
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:23:40 2015 -0700

      Merge branch 'xgbe-next'

      Tom Lendacky says:

      ====================
      amd-xgbe: AMD XGBE driver updates 2015-09-30

      The following patches are included in this driver update series:

      - Remove unneeded semi-colon
      - Follow the DT/ACPI precedence used by the device_ APIs
      - Add ethtool support for getting and setting the msglevel
      - Add ethtool support error and debug messages
      - Simplify the hardware FIFO assignment calculations
      - Add receive buffer unavailable statistic
      - Use the device workqueue instead of the system workqueue
      - Remove the use of a link state bit

      This patch series is based on net-next.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 50789845cfc37d5331b56e1a566ddc95aeac0a7d
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:53:22 2015 -0500

      amd-xgbe: Remove the XGBE_LINK state bit

      The XGBE_LINK bit is used just to determine whether to call the
      netif_carrier_on/off functions. Rather than define and use this bit,
      just call the functions. The netif_carrier_ok function can be used in
      place of checking the XGBE_LINK bit in the future.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit afb43e8a0af18fa959e9ef09abfa969c3c83f4ef
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:53:16 2015 -0500

      amd-xgbe: Use device workqueue instead of system workqueue

      The driver creates, flushes and destroys a device workqueue but queues
      work to the system workqueue. Switch from using the system workqueue to
      the device workqueue.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 72c9ac4e1f4faf1f4e7252319ab8af2517891ae5
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:53:10 2015 -0500

      amd-xgbe: Add receive buffer unavailable statistic

      Add a statistic that tracks how many times an interrupt is generated for
      a receive buffer not being available to the hardware which prevents the
      hardware from being able to DMA the received data.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9c439e4b730f0d519821527afd697e6af99a67ab
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:53:03 2015 -0500

      amd-xgbe: Simplify calculation and setting of queue fifos

      The calculation of the Tx and Rx fifo sizes can be calculated rather
      than hardcoded in a switch statement. Additionally, the per-queue fifo
      sizes can be calculated rather than hardcoded using if/else if statements
      that can possibly underutilize the available fifo area.

      Change the code to calculate the fifo sizes and the per-queue fifo sizes
      to simplify the code and make best use of the available fifo.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e5dd8b81107881f8928378a38f6e47aa2da62c37
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:52:57 2015 -0500

      amd-xgbe: Add ethtool error and debug messages

      Add error and dynamic debug messages to various ethtool functions in
      the driver while also removing the DBGPR debug print calls. Also, change
      the message level for some error messages from alert to err.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 349fb2d7008caa752919e394fb202545b5f72c67
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:52:51 2015 -0500

      amd-xgbe: Add ethtool support for setting the msglevel

      Provide the ethtool functions to support getting and setting the
      msglevel for the driver.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 47f2e6c27553d9a164bb0067f4c1f9bbba388c2e
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:52:45 2015 -0500

      amd-xgbe: Use proper DT / ACPI precedence checking

      Device tree presence takes precedence over ACPI in the device_* APIs.
      The amd-xgbe driver should follow the same precedence. Update the check
      on whether to use DT / ACPI to follow this.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3947d78a547845fa5a129a39ce0abac2352f7a3a
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:52:38 2015 -0500

      amd-xgbe: Remove an unneeded semicolon on a switch statement

      Remove an unneeded semicolon at the end of a switch statement block.

      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac8cfc7bb836835bd68c3ab9da242747e9df9542
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Sep 30 06:18:23 2015 -0700

      tcp: restore fastopen operations

      I accidentally cleared fastopenq.max_qlen in reqsk_queue_alloc()
      while max_qlen can be set before listen() is called,
      using TCP_FASTOPEN socket option for example.

      Fixes: 0536fcc039a8 ("tcp: prepare fastopen code for upcoming listener 
changes")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77946de51bd165d55306a47410dd6757d93bc394
  Merge: 0735573 3ef0a25
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:16:49 2015 -0700

      Merge branch 'net-y2038'

      Arnd Bergmann says:

      ====================
      net: assorted y2038 changes

      This is a set of changes for network drivers and core code to
      get rid of the use of time_t and derived data structures.

      I have a longer set of patches that enables me to build kernels
      with the time_t definition removed completely as a help to find
      y2038 overflow issues. This is the subset for networking that
      contains all code that has a reasonable way of fixing at the
      moment and that is either commonly used (in one of the defconfigs)
      or that blocks building a whole subsystem.

      Most of the patches in this series should be noncontroversial,
      but the last two that I marked [RFC] are a bit tricky and
      need input from people that are more familiar with the code than
      I am. All 12 patches are independent of one another and can
      be applied in any order, so feel free to pick all that look
      good.

      Patches that are not included here are:

       - disabling less common device drivers that I don't have a fix
         for yet, this includes
        drivers/net/ethernet/brocade/bna/bfa_ioc.c
        drivers/net/ethernet/qlogic/netxen/netxen_nic_hw.c
        drivers/net/ethernet/tile/tilegx.c
        drivers/net/hamradio/baycom_ser_fdx.c
        drivers/net/wireless/ath/ath10k/core.h
        drivers/net/wireless/ath/ath9k/
        drivers/net/wireless/ath/ath9k/
        drivers/net/wireless/atmel.c
        drivers/net/wireless/prism54/isl_38xx.c
        drivers/net/wireless/rt2x00/rt2x00debug.c
        drivers/net/wireless/rtlwifi/
        drivers/net/wireless/ti/wlcore/
        drivers/staging/ozwpan/
        net/atm/mpoa_caches.c
        net/atm/mpoa_proc.c
        net/dccp/probe.c
        net/ipv4/tcp_probe.c
        net/netfilter/nfnetlink_queue_core.c
        net/netfilter/nfnetlink_queue_core.c
        net/netfilter/xt_time.c
        net/openvswitch/flow.c
        net/sctp/probe.c
        net/sunrpc/auth_gss/
        net/sunrpc/svcauth_unix.c
        net/vmw_vsock/af_vsock.c
         We'll get there eventually, or we an add a dependency to ensure
         they are not built on 32-bit kernels that need to survive
         beyond 2038. Most of these should be really easy to fix.

       - recvmmsg/sendmmsg system calls: patches have been sent out
         as part of the syscall series, need a little more work and
         review

       - SIOCGSTAMP/SIOCGSTAMPNS/ ioctl calls: tricky, need to discuss
         with some folks at kernel summit

       - SO_RCVTIMEO/SO_SNDTIMEO/SO_TIMESTAMP/SO_TIMESTAMPNS socket
         opt: similar and related to the ioctl

       - mmapped packet socket: need to create v4 of the API, nontrivial

       - pktgen: sends 32-bit timestamps over network, need to find out
         if using unsigned stamps is good enough

       - af_rxpc: similar to pktgen, uses 32-bit times for deadlines

       - ppp ioctl: patch is being worked on, nontrivial but doable
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ef0a25bf9ef318615c810e24d244d55c09806d7
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:40 2015 +0200

      net: sctp: avoid incorrect time_t use

      We want to avoid using time_t in the kernel because of the y2038
      overflow problem. The use in sctp is not for storing seconds at
      all, but instead uses microseconds and is passed as 32-bit
      on all machines.

      This patch changes the type to u32, which better fits the use.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Neil Horman <nhorman@xxxxxxxxxxxxx>
      Cc: linux-sctp@xxxxxxxxxxxxxxx
      Acked-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3dd7669f1f13772d0a846dee58379399f163729c
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:39 2015 +0200

      ipv6: use ktime_t for internal timestamps

      The ipv6 mip6 implementation is one of only a few users of the
      skb_get_timestamp() function in the kernel, which is both unsafe
      on 32-bit architectures because of the 2038 overflow, and slightly
      less efficient than the skb_get_ktime() based approach.

      This converts the function call and the mip6_report_rate_limiter
      structure that stores the time stamp, eliminating all uses of
      timeval in the ipv6 code.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Alexey Kuznetsov <kuznet@xxxxxxxxxxxxx>
      Cc: James Morris <jmorris@xxxxxxxxx>
      Cc: Hideaki YOSHIFUJI <yoshfuji@xxxxxxxxxxxxxx>
      Cc: Patrick McHardy <kaber@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6389ecbc5f3ddc5860aab22bd7f7e1a8aeb3165
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:38 2015 +0200

      nfnetlink: use y2038 safe timestamp

      The __build_packet_message function fills a nfulnl_msg_packet_timestamp
      structure that uses 64-bit seconds and is therefore y2038 safe, but
      it uses an intermediate 'struct timespec' which is not.

      This trivially changes the code to use 'struct timespec64' instead,
      to correct the result on 32-bit architectures.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Cc: Patrick McHardy <kaber@xxxxxxxxx>
      Cc: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
      Cc: netfilter-devel@xxxxxxxxxxxxxxx
      Cc: coreteam@xxxxxxxxxxxxx
      Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70ba07b675b53782ad366ebc4d3a00eab9a06bc9
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 17:32:01 2015 +0200

      atm: remove 'struct zatm_t_hist'

      The zatm_t_hist structure is not used anywhere in the kernel, but is
      exported to user space. As we are trying to eliminate uses of time_t
      in the kernel for y2038 compatibility, the current definition triggers
      checking tools because it contains 'struct timeval'.

      As pointed out by Chas Williams, the only user of this structure was
      the ZATM_GETHIST ioctl command that has been removed a long time ago,
      and we can remove the structure as well without breaking any user
      space.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Chas Williams <3chas3@xxxxxxxxx>
      Cc: linux-atm-general@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 84b00607aeb8f139a11c93036e1c0ee03dde5634
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:36 2015 +0200

      mac80211: use ktime_get_seconds

      The mac80211 code uses ktime_get_ts to measure the connected time.
      As this uses monotonic time, it is y2038 safe on 32-bit systems,
      but we still want to deprecate the use of 'timespec' because most
      other users are broken.

      This changes the code to use ktime_get_seconds() instead, which
      avoids the timespec structure and is slightly more efficient.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
      Cc: linux-wireless@xxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52f4f91893955c359885d022b2142e2326f020a1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:35 2015 +0200

      mwifiex: avoid gettimeofday in ba_threshold setting

      mwifiex_get_random_ba_threshold() uses a complex homegrown implementation
      to generate a pseudo-random number from the current time as returned
      from do_gettimeofday().

      This currently requires two 32-bit divisions plus a couple of other
      computations that are eventually discarded as only eight bits of
      the microsecond portion are used at all.

      We could replace this with a call to get_random_bytes(), but that
      might drain the entropy pool too fast if this is called for each
      packet.

      Instead, this patch converts it to use ktime_get_ns(), which is a
      bit faster than do_gettimeofday(), and then uses a similar algorithm
      as before, but in a way that takes both the nanosecond and second
      portion into account for slightly-more-but-still-not-very-random
      pseudorandom number.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Cc: Nishant Sarmukadam <nishants@xxxxxxxxxxx>
      Cc: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
      Cc: linux-wireless@xxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e253fb74d66428597bd272b2614e8564b882b14c
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:34 2015 +0200

      mwifiex: use ktime_get_real for timestamping

      The mwifiex_11n_aggregate_pkt() function creates a ktime_t from
      a timeval returned by do_gettimeofday, which is slow and causes
      an overflow in 2038 on 32-bit architectures.

      This solves both problems by using the appropriate ktime_get_real()
      function.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Cc: Nishant Sarmukadam <nishants@xxxxxxxxxxx>
      Cc: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
      Cc: linux-wireless@xxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 40c9b0796d46523fffb93e46ed8c691456146743
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:33 2015 +0200

      net: igb: avoid using timespec

      We want to deprecate the use of 'struct timespec' on 32-bit
      architectures, as it is will overflow in 2038. The igb
      driver uses it to read the current time, and can simply
      be changed to use ktime_get_real_ts64() instead.

      Because of hardware limitations, there is still an overflow
      in year 2106, which we cannot really avoid, but this documents
      the overflow.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Cc: intel-wired-lan@xxxxxxxxxxxxxxxx
      Reviewed-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a6241551d20e982dba8fc6c88b0a021456ea7b4
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:32 2015 +0200

      net: stmmac: avoid using timespec

      We want to deprecate the use of 'struct timespec' on 32-bit
      architectures, as it is will overflow in 2038. The stmmac
      driver uses it to read the current time, and can simply
      be changed to use ktime_get_real_ts64() instead.

      Because of hardware limitations, there is still an overflow
      in year 2106, which we cannot really avoid, but this documents
      the overflow.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Giuseppe Cavallaro <peppe.cavallaro@xxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit be7ccdc36ba4815ca71b0ac6df898237a912b3ac
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:31 2015 +0200

      net: fec: avoid timespec use

      The fec_ptp_enable_pps uses an open-coded implementation of 
ns_to_timespec,
      which will be removed eventually as it is not y2038-safe on 32-bit
      architectures. Two more instances of the same code in this file were
      already converted to use the safe ns_to_timespec64 in commit 6630514fcee
      ("ptp: fec: use helpers for converting ns to timespec"), this changes
      the last one as well.

      The seconds portion here is actually unused and we could just remove the
      timespec variable, but using ns_to_timespec64 can still be better as the
      implementation can be hand-optimized in the future.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Cc: Fugang Duan <b38611@xxxxxxxxxxxxx>
      Cc: Luwei Zhou <b45643@xxxxxxxxxxxxx>
      Cc: Frank Li <Frank.Li@xxxxxxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74910ea49dd7878ff8b1847ef3a370ba64110bcc
  Merge: 9dc80a7 7253054
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:07:02 2015 -0700

      Merge tag 'linux-can-fixes-for-4.3-20150930' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can

      Marc Kleine-Budde says:

      ====================
      pull-request: can 2015-09-30

      this is a pull request of a single patch for 4.3.

      The patch is by Stephane Grosjean and add support for the peak OEM PCI 
card to
      the peak_pci driver by adding its device ID.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9dc80a74313d2741e053a650942818a86f234fc9
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Wed Sep 30 03:48:50 2015 -0700

      amd-xgbe: fix potential memory leak in xgbe-debugfs

      Added kfree() to avoid the memory leak when debugfs_create_dir() fails.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Acked-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e6740165b8f7f06d8caee0fceab3fb9d790a6fed
  Author: Guillaume Nault <g.nault@xxxxxxxxxxxx>
  Date:   Wed Sep 30 11:45:33 2015 +0200

      ppp: don't override sk->sk_state in pppoe_flush_dev()

      Since commit 2b018d57ff18 ("pppoe: drop PPPOX_ZOMBIEs in pppoe_release"),
      pppoe_release() calls dev_put(po->pppoe_dev) if sk is in the
      PPPOX_ZOMBIE state. But pppoe_flush_dev() can set sk->sk_state to
      PPPOX_ZOMBIE _and_ reset po->pppoe_dev to NULL. This leads to the
      following oops:

      [  570.140800] BUG: unable to handle kernel NULL pointer dereference at 
00000000000004e0
      [  570.142931] IP: [<ffffffffa018c701>] pppoe_release+0x50/0x101 [pppoe]
      [  570.144601] PGD 3d119067 PUD 3dbc1067 PMD 0
      [  570.144601] Oops: 0000 [#1] SMP
      [  570.144601] Modules linked in: l2tp_ppp l2tp_netlink l2tp_core 
ip6_udp_tunnel udp_tunnel pppoe pppox ppp_generic slhc loop crc32c_intel 
ghash_clmulni_intel jitterentropy_rng sha256_generic hmac drbg ansi_cprng 
aesni_intel aes_x86_64 ablk_helper cryptd lrw gf128mul glue_helper acpi_cpufreq 
evdev serio_raw processor button ext4 crc16 mbcache jbd2 virtio_net virtio_blk 
virtio_pci virtio_ring virtio
      [  570.144601] CPU: 1 PID: 15738 Comm: ppp-apitest Not tainted 4.2.0 #1
      [  570.144601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), 
BIOS Debian-1.8.2-1 04/01/2014
      [  570.144601] task: ffff88003d30d600 ti: ffff880036b60000 task.ti: 
ffff880036b60000
      [  570.144601] RIP: 0010:[<ffffffffa018c701>]  [<ffffffffa018c701>] 
pppoe_release+0x50/0x101 [pppoe]
      [  570.144601] RSP: 0018:ffff880036b63e08  EFLAGS: 00010202
      [  570.144601] RAX: 0000000000000000 RBX: ffff880034340000 RCX: 
0000000000000206
      [  570.144601] RDX: 0000000000000006 RSI: ffff88003d30dd20 RDI: 
ffff88003d30dd20
      [  570.144601] RBP: ffff880036b63e28 R08: 0000000000000001 R09: 
0000000000000000
      [  570.144601] R10: 00007ffee9b50420 R11: ffff880034340078 R12: 
ffff8800387ec780
      [  570.144601] R13: ffff8800387ec7b0 R14: ffff88003e222aa0 R15: 
ffff8800387ec7b0
      [  570.144601] FS:  00007f5672f48700(0000) GS:ffff88003fc80000(0000) 
knlGS:0000000000000000
      [  570.144601] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [  570.144601] CR2: 00000000000004e0 CR3: 0000000037f7e000 CR4: 
00000000000406a0
      [  570.144601] Stack:
      [  570.144601]  ffffffffa018f240 ffff8800387ec780 ffffffffa018f240 
ffff8800387ec7b0
      [  570.144601]  ffff880036b63e48 ffffffff812caabe ffff880039e4e000 
0000000000000008
      [  570.144601]  ffff880036b63e58 ffffffff812cabad ffff880036b63ea8 
ffffffff811347f5
      [  570.144601] Call Trace:
      [  570.144601]  [<ffffffff812caabe>] sock_release+0x1a/0x75
      [  570.144601]  [<ffffffff812cabad>] sock_close+0xd/0x11
      [  570.144601]  [<ffffffff811347f5>] __fput+0xff/0x1a5
      [  570.144601]  [<ffffffff811348cb>] ____fput+0x9/0xb
      [  570.144601]  [<ffffffff81056682>] task_work_run+0x66/0x90
      [  570.144601]  [<ffffffff8100189e>] prepare_exit_to_usermode+0x8c/0xa7
      [  570.144601]  [<ffffffff81001a26>] syscall_return_slowpath+0x16d/0x19b
      [  570.144601]  [<ffffffff813babb1>] int_ret_from_sys_call+0x25/0x9f
      [  570.144601] Code: 48 8b 83 c8 01 00 00 a8 01 74 12 48 89 df e8 8b 27 
14 e1 b8 f7 ff ff ff e9 b7 00 00 00 8a 43 12 a8 0b 74 1c 48 8b 83 a8 04 00 00 
<48> 8b 80 e0 04 00 00 65 ff 08 48 c7 83 a8 04 00 00 00 00 00 00
      [  570.144601] RIP  [<ffffffffa018c701>] pppoe_release+0x50/0x101 [pppoe]
      [  570.144601]  RSP <ffff880036b63e08>
      [  570.144601] CR2: 00000000000004e0
      [  570.200518] ---[ end trace 46956baf17349563 ]---

      pppoe_flush_dev() has no reason to override sk->sk_state with
      PPPOX_ZOMBIE. pppox_unbind_sock() already sets sk->sk_state to
      PPPOX_DEAD, which is the correct state given that sk is unbound and
      po->pppoe_dev is NULL.

      Fixes: 2b018d57ff18 ("pppoe: drop PPPOX_ZOMBIEs in pppoe_release")
      Tested-by: Oleksii Berezhniak <core@xxxxxxxxx>
      Signed-off-by: Guillaume Nault <g.nault@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 07355737a8badd951e6b72aa8609a2d6eed0a7e7
  Merge: 2472186 79a1315
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:00:26 2015 -0700

      Merge branch 'ipv4-multipath-hash'

      Peter Nørlund says:

      ====================
      ipv4: Hash-based multipath routing

      When the routing cache was removed in 3.6, the IPv4 multipath algorithm 
changed
      from more or less being destination-based into being quasi-random 
per-packet
      scheduling. This increases the risk of out-of-order packets and makes it
      impossible to use multipath together with anycast services.

      This patch series replaces the old implementation with flow-based load
      balancing based on a hash over the source and destination addresses.

      Distribution of the hash is done with thresholds as described in RFC 2992.
      This reduces the disruption when a path is added/remove when having more 
than
      two paths.

      To futher the chance of successful usage in conjuction with anycast, ICMP
      error packets are hashed over the inner IP addresses. This ensures that 
PMTU
      will work together with anycast or load-balancers such as IPVS.

      Port numbers are not considered since fragments could cause problems with
      anycast and IPVS. Relying on the DF-flag for TCP packets is also 
insufficient,
      since ICMP inspection effectively extracts information from the opposite
      flow which might have a different state of the DF-flag. This is also why 
the
      RSS hash is not used. These are typically based on the NDIS RSS spec which
      mandates TCP support.

      Measurements of the additional overhead of a two-path multipath
      (p_mkroute_input excl. __mkroute_input) on a Xeon X3550 (4 cores, 
2.66GHz):

      Original per-packet: ~394 cycles/packet
      L3 hash:              ~76 cycles/packet

      Changes in v5:
      - Fixed compilation error

      Changes in v4:
      - Functions take hash directly instead of func ptr
      - Added inline hash function
      - Added dummy macros to minimize ifdefs
      - Use upper 31 bits of hash instead of lower

      Changes in v3:
      - Multipath algorithm is no longer configurable (always L3)
      - Added random seed to hash
      - Moved ICMP inspection to isolated function
      - Ignore source quench packets (deprecated as per RFC 6633)

      Changes in v2:
      - Replaced 8-bit xor hash with 31-bit jenkins hash
      - Don't scale weights (since 31-bit)
      - Avoided unnecesary renaming of variables
      - Rely on DF-bit instead of fragment offset when checking for 
fragmentation
      - upper_bound is now inclusive to avoid overflow
      - Use a callback to postpone extracting flow information until necessary
      - Skipped ICMP inspection entirely with L4 hashing
      - Handle newly added sysctl ignore_routes_with_linkdown
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79a131592dbb81a2dba208622a2ffbfc53f28bc0
  Author: Peter Nørlund <pch@xxxxxxxxxxxx>
  Date:   Wed Sep 30 10:12:22 2015 +0200

      ipv4: ICMP packet inspection for multipath

      ICMP packets are inspected to let them route together with the flow they
      belong to, minimizing the chance that a problematic path will affect flows
      on other paths, and so that anycast environments can work with ECMP.

      Signed-off-by: Peter Nørlund <pch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0e884c78ee19e902f300ed147083c28a0c6302f0
  Author: Peter Nørlund <pch@xxxxxxxxxxxx>
  Date:   Wed Sep 30 10:12:21 2015 +0200

      ipv4: L3 hash-based multipath

      Replaces the per-packet multipath with a hash-based multipath using
      source and destination address.

      Signed-off-by: Peter Nørlund <pch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2472186f58ee1e4b9ca194245fef03931f6de90a
  Merge: 3e087ca a1a5344
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 02:46:26 2015 -0700

      Merge branch 'tcp-listener-fixes-and-improvement'

      Eric Dumazet says:

      ====================
      tcp: lockless listener fixes and improvement

      This fixes issues with TCP FastOpen vs lockless listeners,
      and SYNACK being attached to request sockets.

      Then, last patch brings performance improvement for
      syncookies generation and validation.

      Tested under a 4.3 Mpps SYNFLOOD attack, new perf profile looks
      like :
          12.11%  [kernel]  [k] sha_transform
           5.83%  [kernel]  [k] tcp_conn_request
           4.59%  [kernel]  [k] __inet_lookup_listener
           4.11%  [kernel]  [k] ipt_do_table
           3.91%  [kernel]  [k] tcp_make_synack
           3.05%  [kernel]  [k] fib_table_lookup
           2.74%  [kernel]  [k] sock_wfree
           2.66%  [kernel]  [k] memcpy_erms
           2.12%  [kernel]  [k] tcp_v4_rcv
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1a5344ddbe8fd3e080013b317ac9a664490cfdf
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:11 2015 -0700

      tcp: avoid two atomic ops for syncookies

      inet_reqsk_alloc() is used to allocate a temporary request
      in order to generate a SYNACK with a cookie. Then later,
      syncookie validation also uses a temporary request.

      These paths already took a reference on listener refcount,
      we can avoid a couple of atomic operations.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 004a5d0140ce1d05c1f5fce5df4baa2717a330e0
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:10 2015 -0700

      net: use sk_fullsock() in __netdev_pick_tx()

      SYN_RECV & TIMEWAIT sockets are not full blown, they do not have a
      sk_dst_cache pointer.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e7eadb4de9e645e1b34539dc4128240b1e5f71dc
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:09 2015 -0700

      ipv6: inet6_sk() should use sk_fullsock()

      SYN_RECV & TIMEWAIT sockets are not full blown, they do not have a pinet6
      pointer.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit caf3f2676aaad395903d24a54e22f8ac4bc4823d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:08 2015 -0700

      inet: ip_skb_dst_mtu() should use sk_fullsock()

      SYN_RECV & TIMEWAIT sockets are not full blown,
      do not even try to call ip_sk_use_pmtu() on them.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7656d842de93fd2d2de7b403062cad757cadf1df
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:07 2015 -0700

      tcp: fix fastopen races vs lockless listener

      There are multiple races that need fixes :

      1) skb_get() + queue skb + kfree_skb() is racy

      An accept() can be done on another cpu, data consumed immediately.
      tcp_recvmsg() uses __kfree_skb() as it is assumed all skb found in
      socket receive queue are private.

      Then the kfree_skb() in tcp_rcv_state_process() uses an already freed skb

      2) tcp_reqsk_record_syn() needs to be done before tcp_try_fastopen()
      for the same reasons.

      3) We want to send the SYNACK before queueing child into accept queue,
      otherwise we might reintroduce the ooo issue fixed in
      commit 7c85af881044 ("tcp: avoid reorders for TFO passive connections")

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 71a0a72456b48de972d7ed613b06a22a3aa9057f
  Author: Yousong Zhou <yszhou4tech@xxxxxxxxx>
  Date:   Sat Sep 26 13:41:43 2015 +0800

      MIPS: UAPI: Ignore __arch_swab{16,32,64} when using MIPS16

      Some GCC versions (e.g. 4.8.3) can incorrectly inline a function with
      MIPS32 instructions into another function with MIPS16 code [1], causing
      the assembler to genereate incorrect binary code or fail right away
      complaining about unrecognized opcode.

      In the case of __arch_swab{16,32}, when inlined by the compiler with
      flags `-mips32r2 -mips16 -Os', the assembler can fail with the following
      error.

          {standard input}:79: Error: unrecognized opcode `wsbh $2,$2'

      For performance concerns and to workaround the issue already existing in
      older compilers, just ignore these 2 functions when compiling with
      mips16 enabled.

       [1] Inlining nomips16 function into mips16 function can result in
           undefined builtins, 
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=55777

      Signed-off-by: Yousong Zhou <yszhou4tech@xxxxxxxxx>
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11241/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1bb3bf6226eedee453902e5cf8899ee548f43840
  Author: Yousong Zhou <yszhou4tech@xxxxxxxxx>
  Date:   Sat Sep 26 13:41:42 2015 +0800

      Revert "MIPS: UAPI: Fix unrecognized opcode WSBH/DSBH/DSHD when using 
MIPS16."

      This reverts commit e0d8b2ec532852d4b5aabcec3e7611848c32237d.

      For at least GCC 4.8.3, adding nomips16 function attribute still cannot
      prevent it from being inlined in mips16 context.  So revert it first in
      preparation for a better workaround.

       [1] Inlining nomips16 function into mips16 function can result in
           undefined builtins, 
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=55777

      Signed-off-by: Yousong Zhou <yszhou4tech@xxxxxxxxx>
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11240/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit bb7436093717d3ccaeaf28438be763b30a794ad8
  Author: Nicolas Iooss <nicolas.iooss_linux@xxxxxxx>
  Date:   Sat Sep 12 12:04:51 2015 +0200

      iwlwifi: mvm: fix tof.h header guard

      Commit ce7929186a39 ("iwlwifi: mvm: add basic Time of Flight (802.11mc
      FTM) support") created drivers/net/wireless/iwlwifi/mvm/tof.h with a
      broken header guard:

          #ifndef __tof
          #define __tof_h__

          ...

          #endif /* __tof_h__ */

      Use __tof_h__ in the first line.

      Signed-off-by: Nicolas Iooss <nicolas.iooss_linux@xxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit f82c83397beac5c829bfcb3ea6bb4bfdbac79209
  Author: Ilan Peer <ilan.peer@xxxxxxxxx>
  Date:   Thu Sep 10 12:54:38 2015 +0300

      iwlwifi: mvm: Correctly update MAC context on add/del station

      Commit "iwlwifi: mvm: don't ask beacons when AP vif and no
      assoc sta" directly called iwl_mvm_mac_ctxt_cmd_ap() to update the
      MAC context when adding/removing a station. However, this ignores
      the case that the vif is actually a P2P GO.

      Fix this by calling iwl_mvm_mac_ctxt_changed() that handles P2P GO
      case as well.

      Signed-off-by: Ilan Peer <ilan.peer@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 69191afef3c889992de643af7c318c9a8a1750c0
  Author: Liad Kaufman <liad.kaufman@xxxxxxxxx>
  Date:   Tue Sep 1 18:50:22 2015 +0300

      iwlwifi: mvm: fix default disabled aggs in sta

      For the ADD_STA command, when the flag for aggregation
      disabling is set, there is a bitmap indicated what TIDs
      are disabling aggregations and what aren't. Currently, by
      default, all TIDs allow for aggregations since the value
      we begin with is 0.

      Change this default value to 0xffff so all TIDs don't
      allow aggregations until explicitly turned on.

      Signed-off-by: Liad Kaufman <liad.kaufman@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit acf9de3dfb2c9c00d94c3d614980006947ed2b7f
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 4 20:54:35 2015 +0200

      iwlwifi: enable tracing by default

      Tracing, if disabled at runtime, has very low overhead with
      great returns on debugging. It therefore makes sense to have
      it enabled by default (if the kernel enables EVENT_TRACING).

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 7b9aebf0e507108daba3516f28cfd78fce80c176
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 8 17:03:20 2015 +0200

      MAINTAINERS: iwlwifi: update contact email

      The ilw@xxxxxxxxxxxxxxx address is being phased out, replace
      it with the new address.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit a6449126518d908f0d706cce85c9bf243342b7b0
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 1 14:15:17 2015 +0200

      iwlwifi: mvm: correct skip-over-DTIM implementation

      The formula used in D0i3 should also be used in D3, instead of
      the hardcoded value.

      Additionally, the formula is actually wrong - if the calculation
      yields 0 then 1 should be used instead of disabling entirely.
      Also need to add 1 since the firmware needs 3 to skip 2, etc.

      To make all this clearer, centralize the calculation into a
      single function.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit bb35dc14182c16e9646f6323cce25f3cfe3ba593
  Author: Moshe Harel <moshe.harel@xxxxxxxxx>
  Date:   Sun Sep 6 16:50:33 2015 +0300

      iwlwifi: nvm: force 1x1 antenna in Series 8000

      This is a workaround to an OTP bug. In Series 8000 1x1, the OTP
      0xA052 defines 2x2 antenna configuration. This workaround overrides
      the decision based on HW id and MIMO disabled bit which is correct
      in the OTP and set to disabled.

      Signed-off-by: Moshe Harel <moshe.harel@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 09eef3307e6d55afbdc4cebc8aeacbbb0a7337f6
  Author: Aviya Erenfeld <aviya.erenfeld@xxxxxxxxx>
  Date:   Tue Sep 1 19:34:38 2015 +0300

      iwlwifi: mvm: move DTS command and notification to new group

      Move the DTS measurement command and notification from short
      command header to the new PHY command group for firmware
      supporting the extended command headers.

      Signed-off-by: Aviya Erenfeld <aviya.erenfeld@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit f32517bf1ae0a2de72b3f27200233bd3ad65bfeb
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 14:20:28 2015 +0300

      gpio: pca953x: support ACPI devices found on Galileo Gen2

      This patch adds a support of the expandes found on Intel Galileo Gen2 
board.
      The platform information comes from ACPI.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c6664149af2939b8bbaef0711b3ca5469bed33fb
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 14:20:27 2015 +0300

      gpio: pca953x: store driver_data for future use

      Instead of using id->driver_data directly we copied it to the internal
      structure. This will help to adapt driver for ACPI use.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 22db3cbcf9f91eef848db0986869822b4bf27193
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:34:03 2015 +0200

      Bluetooth: Send transport open and close monitor events

      When the core starts or shuts down the actual HCI transport, send a new
      monitor event that indicates that this is happening. These new events
      correspond to HCI_DEV_OPEN and HCI_DEV_CLOSE events.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e9ca8bf157f2b45f8f670517c96da313083ee9b2
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:34:02 2015 +0200

      Bluetooth: Move handling of HCI_RUNNING flag into core

      Setting and clearing of HCI_RUNNING flag in each and every driver is
      just duplicating the same code all over the place. So instead of having
      the driver do it in their hdev->open and hdev->close callbacks, set it
      globally in the core transport handling.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 73d0d3c8671190ea982a8e79a7c79fbfe88f8f47
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:34:01 2015 +0200

      Bluetooth: Move HCI_RUNNING check into hci_send_frame

      In all callbacks for hdev->send the status of HCI_RUNNING is checked. So
      instead of repeating that code in every driver, move the check into the
      hci_send_frame function before calling hdev->send.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 4a3f95b7b62e50a1e42e42ba6571ec9e747f4861
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:34:00 2015 +0200

      Bluetooth: Introduce HCI_DEV_OPEN and HCI_DEV_CLOSE events

      When opening the HCI transport via hdev->open send HCI_DEV_OPEN event
      and when closing the HCI transport via hdev->close send HCI_DEV_CLOSE.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit ed1b28a48b6c4e206bd88f5758393261710566f2
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:33:59 2015 +0200

      Bluetooth: Limit userspace exposure of stack internal events

      The stack internal events that are exposed to userspace should be
      limited to HCI_DEV_REG, HCI_DEV_UNREG, HCI_DEV_UP and HCI_DEV_DOWN.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit b224d3ff717cc3af91a4ec74d863a176d79331af
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 3 12:01:08 2015 +0200

      Bluetooth: btbcm: Send HCI Reset before sending Apple specific commands

      The commit 7bee8b08c428 allows the Read Verbose Config Info to fail
      gracefully and not cause the controller setup to abort. It seems the
      reason that command failed in the first place was the missing HCI Reset
      to bring the controller in full Bluetooth mode.

      Apple Bluetooth controllers start out in HID mode and when in that mode
      the Read Verbose Config Info command is not allowed. Sending HCI Reset
      switches the controller into full HCI mode.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 8d2402605b85be860808961cd82fdc4bd8bc1704
  Author: Heiner Kallweit <hkallweit1@xxxxxxxxx>
  Date:   Wed Sep 30 23:52:36 2015 +0200

      gpio: generic: use error pointers

      Use the ERRPTR standard way to return an error code in a pointer
      thus simplifiying the code.

      Signed-off-by: Heiner Kallweit <hkallweit1@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 43960b4731d3450fe82105c40ee19d487622e427
  Author: Heiner Kallweit <hkallweit1@xxxxxxxxx>
  Date:   Wed Sep 30 23:51:08 2015 +0200

      gpio: generic: modernize remapping

      Replace devm_request_mem_region / devm_ioremap with devm_ioremap_resource.

      Signed-off-by: Heiner Kallweit <hkallweit1@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit cf3f2a2c8bae0db72233629c9da9d9f617b3f8af
  Author: Heiner Kallweit <hkallweit1@xxxxxxxxx>
  Date:   Wed Sep 30 23:50:20 2015 +0200

      gpio: generic: improve error handling in bgpio_map

      If bgpio_map returns NULL then err should always be set.

      Signed-off-by: Heiner Kallweit <hkallweit1@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 41ada9df7f340998e810dcda21a00da5f75c4147
  Author: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
  Date:   Mon Aug 24 10:18:38 2015 +0200

      mcb: Fix error handling in mcb_pci_probe()

      If a MCB PCI Carrier device is IO mapped insted of memory-mapped,
      the memory of the PCI device is still not unmapped.

      Also the patch adds deallocation of the bus
      if chameleon_parse_cells() fails.

      Found by Linux Driver Verification project (linuxtesting.org).

      Signed-off-by: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
      Signed-off-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 3e087caa23ef36370bfb925d3bbca78e8302d3ce
  Merge: 68d4e52 0f963b7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 4 16:46:14 2015 -0700

      Merge branch 'bridge-netlink'

      Nikolay Aleksandrov says:

      ====================
      bridge: complete netlink support

      This set completes the bridge device's netlink support and makes it
      possible to view and configure everything that can be configured via
      sysfs. I have tested all of these (setting and getting). There're a few
      longer line warnings about the br_get_size() ifla comments but I think we
      should have them to know what has been accounted for. I have used the 
sysfs
      interface as a guide of what and how to set. As usual I'll send the
      corresponding iproute2 patches later.
      The bridge port's netlink interface will be completed after this set gets
      applied in some form.

      This patch-set is on top of my last vlan cleanups set:
      http://www.spinics.net/lists/netdev/msg346005.html
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f963b7592ef9e054974b6672b86ec1edd84b4bc
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:47 2015 +0200

      bridge: netlink: add support for default_pvid

      Add IFLA_BR_VLAN_DEFAULT_PVID to allow setting/getting bridge's
      default_pvid via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 93870cc02a0af4392401713d14235accafc752bc
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:46 2015 +0200

      bridge: netlink: add support for netfilter tables config

      Add support to allow getting/setting netfilter tables settings.
      Currently these are IFLA_BR_NF_CALL_IPTABLES, IFLA_BR_NF_CALL_IP6TABLES
      and IFLA_BR_NF_CALL_ARPTABLES.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7e4df51eb35deedd3ba8d4db92a6c36fb7eff90a
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:45 2015 +0200

      bridge: netlink: add support for igmp's intervals

      Add support to set/get all of the igmp's configurable intervals via
      netlink. These currently are:
      IFLA_BR_MCAST_LAST_MEMBER_INTVL
      IFLA_BR_MCAST_MEMBERSHIP_INTVL
      IFLA_BR_MCAST_QUERIER_INTVL
      IFLA_BR_MCAST_QUERY_INTVL
      IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
      IFLA_BR_MCAST_STARTUP_QUERY_INTVL

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b89e6babad4b7ca7298ad863c6c83dc76b0abdef
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:44 2015 +0200

      bridge: netlink: add support for multicast_startup_query_count

      Add IFLA_BR_MCAST_STARTUP_QUERY_CNT to allow setting/getting
      br->multicast_startup_query_count via netlink. Also align the ifla
      comments.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79b859f573d6afa64e328cc7f50ad7a209e0c92d
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:43 2015 +0200

      bridge: netlink: add support for multicast_last_member_count

      Add IFLA_BR_MCAST_LAST_MEMBER_CNT to allow setting/getting
      br->multicast_last_member_count via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 858079fdae16421d4908722140346cfdddedf343
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:42 2015 +0200

      bridge: netlink: add support for igmp's hash_max

      Add IFLA_BR_MCAST_HASH_MAX to allow setting/getting br->hash_max via
      netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 431db3c050af0be72b3b01fa7484982f35cb268f
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:41 2015 +0200

      bridge: netlink: add support for igmp's hash_elasticity

      Add IFLA_BR_MCAST_HASH_ELASTICITY to allow setting/getting
      br->hash_elasticity via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba062d7cc6a09a8194eba975d5ee635378a55bfc
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:40 2015 +0200

      bridge: netlink: add support for multicast_querier

      Add IFLA_BR_MCAST_QUERIER to allow setting/getting br->multicast_querier
      via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 295141d9049bdf4fa316b325d2e2501b210dbe06
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:39 2015 +0200

      bridge: netlink: add support for multicast_query_use_ifaddr

      Add IFLA_BR_MCAST_QUERY_USE_IFADDR to allow setting/getting
      br->multicast_query_use_ifaddr via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 89126327f921bd278c72284d38428443bbef344f
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:38 2015 +0200

      bridge: netlink: add support for multicast_snooping

      Add IFLA_BR_MCAST_SNOOPING to allow enabling/disabling multicast
      snooping via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a9a6bc70f5f70b3835b081e401b469b88c7c8a3a
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:37 2015 +0200

      bridge: netlink: add support for multicast_router

      Add IFLA_BR_MCAST_ROUTER to allow setting and retrieving
      br->multicast_router when igmp snooping is enabled.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 150217c688217e549ef8a36ea4f6718977373765
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:36 2015 +0200

      bridge: netlink: add fdb flush

      Simple attribute that flushes the bridge's fdb.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 111189abc5c3f0ea6f516a6c3e8d8c3a2cf391d9
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:35 2015 +0200

      bridge: netlink: add group_addr support

      Add IFLA_BR_GROUP_ADDR attribute to allow setting and retrieving the
      group_addr via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d76bd14e0f759040efc8ce142dd6d1f9eca33d39
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:34 2015 +0200

      bridge: netlink: export all timers

      Export the following bridge timers (also exported via sysfs):
      IFLA_BR_HELLO_TIMER, IFLA_BR_TCN_TIMER, IFLA_BR_TOPOLOGY_CHANGE_TIMER,
      IFLA_BR_GC_TIMER via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ed4163098e3090bb7b51421bde977e355275a554
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:33 2015 +0200

      bridge: netlink: export topology_change and topology_change_detected

      Add IFLA_BR_TOPOLOGY_CHANGE and IFLA_BR_TOPOLOGY_CHANGE_DETECTED and
      export them via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 684dd248bee8c73eadb90706123bf1494d3218b8
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:32 2015 +0200

      bridge: netlink: export root path cost

      Add IFLA_BR_ROOT_PATH_COST and export it via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8762ba680fe8d41b444fc92f90ce7194b2b8303b
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:31 2015 +0200

      bridge: netlink: export root port

      Add IFLA_BR_ROOT_PORT and export it via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7599a2201fc71cdca16a92d350f14cce8730e03f
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:30 2015 +0200

      bridge: netlink: export bridge id

      Add IFLA_BR_BRIDGE_ID and export br->bridge_id via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5127c81f84de0dd643d5840a2c7de571bc6aceb3
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:29 2015 +0200

      bridge: netlink: export root id

      Add IFLA_BR_ROOT_ID and export br->designated_root via netlink. For this
      purpose add struct ifla_bridge_id that would represent struct bridge_id.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7910228b6bb35f3c8e0bc72a8d84c29616cb1b90
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:28 2015 +0200

      bridge: netlink: add group_fwd_mask support

      Add IFLA_BR_GROUP_FWD_MASK attribute to allow setting and retrieving the
      group_fwd_mask via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 68d4e5208291ac8bd7d47d992f353da31a2e1484
  Merge: e96f78a 6be144f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 4 16:43:56 2015 -0700

      Merge branch 'bridge-vlan'

      Nikolay Aleksandrov says:

      ====================
      bridge: vlan: cleanups & fixes (part 2)

      This is the second follow-up set with one fix (patch 01) and more cleanups
      (patches 02,03 and 04). These are minor compared to the previous ones and
      should be the last before taking on the optimization changes on the
      fast-path.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6be144f62f64c8a67e11b2f8b86c7bf390b87411
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:05:13 2015 +0200

      bridge: vlan: use br_vlan_should_use to simplify __vlan_add/del

      The checks that lead to num_vlans change are always what
      br_vlan_should_use checks for, namely if the vlan is only a context or
      not and depending on that it's either not counted or counted
      as a real/used vlan respectively.
      Also give better explanation in br_vlan_should_use's comment.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2ffdf508d278d48ccb928238846df352db21f4eb
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:05:12 2015 +0200

      bridge: vlan: drop master_flags from __vlan_add

      There's only one user now and we can include the flag directly.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8ed289fab843fbc9251aa2f5c3d416f09b5fc7e
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:05:11 2015 +0200

      bridge: vlan: use br_vlan_(get|put)_master to deal with refcounts

      Introduce br_vlan_(get|put)_master which take a reference (or create the
      master vlan first if it didn't exist) and drop a reference respectively.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 586c2b573ee4c2c4ba03e16318a16614ebf876f8
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:05:10 2015 +0200

      bridge: vlan: use rcu list for the ordered vlan list

      When I did the conversion to rhashtable I missed the required locking of
      one important user of the vlan list - br_get_link_af_size_filtered()
      which is called:
      br_ifinfo_notify() -> br_nlmsg_size() -> br_get_link_af_size_filtered()
      and the notifications can be sent without holding rtnl. Before this
      conversion the function relied on using rcu and since we already use rcu 
to
      destroy the vlans, we can simply migrate the list to use the rcu helpers.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7e1008048a97148d3aecae742f66fb2f944644c
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Sun Oct 4 22:44:12 2015 +0200

      ALSA: hda - Disable power_save_node for IDT 92HD73xx chips

      The recent widget power saving introduced some unavoidable click
      noises on old IDT 92HD73xx chips while it still seems working on the
      compatible new chips.  In the bugzilla, we tried lots of tests and
      workarounds, but they didn't help much.  So, let's disable the feature
      for these specific chips as the least (but safest) fix.

      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=104981
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 32f40c5fa730fa598e500dfbaab8aabc39c56f96
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 22:53:54 2015 +0100

      netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c

      Now that we have integrated the ct glue code into nfnetlink_queue without
      introducing dependencies with the conntrack code.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit b7bd1809e0784435791657502bc0d8280ad6f7ea
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 22:53:44 2015 +0100

      netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c

      The original intention was to avoid dependencies between nfnetlink_queue 
and
      conntrack without ifdef pollution. However, we can achieve this by moving 
the
      conntrack dependent code into ctnetlink and keep some glue code to access 
the
      nfq_ct indirection from nfqueue.

      After this patch, the nfq_ct indirection is always compiled in the 
netfilter
      core to avoid polluting nfqueue with ifdefs. Thus, if nf_conntrack is not
      compiled this results in only 8-bytes of memory waste in x86_64.

      This patch also adds ctnetlink_nfqueue_seqadj() to avoid that the nf_conn
      structure layout if exposed to nf_queue, which creates another dependency 
with
      nf_conntrack at compilation time.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit b1d562acc78f0af46de0dfe447410bc40bdb7ece
  Author: covici@xxxxxxxxxxxxxx <covici@xxxxxxxxxxxxxx>
  Date:   Wed May 20 05:44:11 2015 -0400

      staging: speakup: fix speakup-r regression

      Here is a patch to make speakup-r work again.

      It broke in 3.6 due to commit 4369c64c79a22b98d3b7eff9d089196cd878a10a
      "Input: Send events one packet at a time)

      The problem was that the fakekey.c routine to fake a down arrow no
      longer functioned properly and putting the input_sync fixed it.

      Fixes: 4369c64c79a22b98d3b7eff9d089196cd878a10a
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Acked-by: Samuel Thibault <samuel.thibault@xxxxxxxxxxxx>
      Signed-off-by: John Covici <covici@xxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8b581e4995288e8948f770f3e9fc568492cfd2dd
  Author: Julian Andres Klode <jak@xxxxxxxxxxxxx>
  Date:   Sun Sep 13 17:23:27 2015 +0200

      MAINTAINERS: Remove myself as nvec co-maintainer

      My device broke a long time ago, so I do not have any
      chance of testing things or any reason to continue
      maintaining it.

      Signed-off-by: Julian Andres Klode <jak@xxxxxxxxxxxxx>
      Signed-off-by: Marc Dietrich <marvin24@xxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 0c55627167870255158db1cde0d28366f91c8872
  Author: Jann Horn <jann@xxxxxxxxx>
  Date:   Sun Oct 4 19:29:12 2015 +0200

      drivers/tty: require read access for controlling terminal

      This is mostly a hardening fix, given that write-only access to other
      users' ttys is usually only given through setgid tty executables.

      Signed-off-by: Jann Horn <jann@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 3c5a0357fdb3a9116a48dbdb0abb91fd23fbff80
  Author: Mans Rullgard <mans@xxxxxxxxx>
  Date:   Fri Oct 2 17:50:31 2015 +0100

      serial: 8250: add uart_config entry for PORT_RT2880

      This adds an entry to the uart_config table for PORT_RT2880
      enabling rx/tx FIFOs.  The UART is actually a Palmchip BK-3103
      which is found in several devices from Alchemy/RMI, Ralink, and
      Sigma Designs.

      Signed-off-by: Mans Rullgard <mans@xxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit facd885c75067c2a88b72622dfb0fa4b9510da5e
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Thu Sep 17 17:17:10 2015 +0200

      tty: fix data race on tty_buffer.commit

      Race on buffer data happens when newly committed data is
      picked up by an old flush work in the following scenario:
      __tty_buffer_request_room does a plain write of tail->commit,
      no barriers were executed before that.
      At this point flush_to_ldisc reads this new value of commit,
      and reads buffer data, no barriers in between.
      The committed buffer data is not necessary visible to flush_to_ldisc.

      Similar bug happens when tty_schedule_flip commits data.

      Update commit with smp_store_release and read commit with
      smp_load_acquire, as it is commit that signals data readiness.
      This is orthogonal to the existing synchronization on tty_buffer.next,
      which is required to not dismiss a buffer with unconsumed data.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Reviewed-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 9e6b7cd7e77d4ca43b57c726d9bfa86d06e0567f
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Thu Sep 17 17:17:09 2015 +0200

      tty: fix data race in tty_buffer_flush

      tty_buffer_flush frees not acquired buffers.
      As the result, for example, read of b->size in tty_buffer_free
      can return garbage value which will lead to a huge buffer
      hanging in the freelist. This is just the benignest
      manifestation of freeing of a not acquired object.
      If the object is passed to kfree, heap can be corrupted.

      Acquire visibility over the buffer before freeing it.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Reviewed-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 7098296a362a96051fa120abf48f0095818b99cd
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Thu Sep 17 17:17:08 2015 +0200

      tty: fix data race in flush_to_ldisc

      flush_to_ldisc reads port->itty and checks that it is not NULL,
      concurrently release_tty sets port->itty to NULL. It is possible
      that flush_to_ldisc loads port->itty once, ensures that it is
      not NULL, but then reloads it again and uses. The second load
      can already return NULL, which will cause a crash.

      Use READ_ONCE to read port->itty.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Reviewed-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit e81107d4c6bd098878af9796b24edc8d4a9524fd
  Author: Kosuke Tatsukawa <tatsu@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 08:27:05 2015 +0000

      tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c

      My colleague ran into a program stall on a x86_64 server, where
      n_tty_read() was waiting for data even if there was data in the buffer
      in the pty.  kernel stack for the stuck process looks like below.
       #0 [ffff88303d107b58] __schedule at ffffffff815c4b20
       #1 [ffff88303d107bd0] schedule at ffffffff815c513e
       #2 [ffff88303d107bf0] schedule_timeout at ffffffff815c7818
       #3 [ffff88303d107ca0] wait_woken at ffffffff81096bd2
       #4 [ffff88303d107ce0] n_tty_read at ffffffff8136fa23
       #5 [ffff88303d107dd0] tty_read at ffffffff81368013
       #6 [ffff88303d107e20] __vfs_read at ffffffff811a3704
       #7 [ffff88303d107ec0] vfs_read at ffffffff811a3a57
       #8 [ffff88303d107f00] sys_read at ffffffff811a4306
       #9 [ffff88303d107f50] entry_SYSCALL_64_fastpath at ffffffff815c86d7

      There seems to be two problems causing this issue.

      First, in drivers/tty/n_tty.c, __receive_buf() stores the data and
      updates ldata->commit_head using smp_store_release() and then checks
      the wait queue using waitqueue_active().  However, since there is no
      memory barrier, __receive_buf() could return without calling
      wake_up_interactive_poll(), and at the same time, n_tty_read() could
      start to wait in wait_woken() as in the following chart.

              __receive_buf()                         n_tty_read()
      ------------------------------------------------------------------------
      if (waitqueue_active(&tty->read_wait))
      /* Memory operations issued after the
         RELEASE may be completed before the
         RELEASE operation has completed */
                                              add_wait_queue(&tty->read_wait, 
&wait);
                                              ...
                                              if (!input_available_p(tty, 0)) {
      smp_store_release(&ldata->commit_head,
                        ldata->read_head);
                                              ...
                                              timeout = wait_woken(&wait,
                                                TASK_INTERRUPTIBLE, timeout);
      ------------------------------------------------------------------------

      The second problem is that n_tty_read() also lacks a memory barrier
      call and could also cause __receive_buf() to return without calling
      wake_up_interactive_poll(), and n_tty_read() to wait in wait_woken()
      as in the chart below.

              __receive_buf()                         n_tty_read()
      ------------------------------------------------------------------------
                                              spin_lock_irqsave(&q->lock, 
flags);
                                              /* from add_wait_queue() */
                                              ...
                                              if (!input_available_p(tty, 0)) {
                                              /* Memory operations issued after 
the
                                                 RELEASE may be completed 
before the
                                                 RELEASE operation has 
completed */
      smp_store_release(&ldata->commit_head,
                        ldata->read_head);
      if (waitqueue_active(&tty->read_wait))
                                              __add_wait_queue(q, wait);
                                              
spin_unlock_irqrestore(&q->lock,flags);
                                              /* from add_wait_queue() */
                                              ...
                                              timeout = wait_woken(&wait,
                                                TASK_INTERRUPTIBLE, timeout);
      ------------------------------------------------------------------------

      There are also other places in drivers/tty/n_tty.c which have similar
      calls to waitqueue_active(), so instead of adding many memory barrier
      calls, this patch simply removes the call to waitqueue_active(),
      leaving just wake_up*() behind.

      This fixes both problems because, even though the memory access before
      or after the spinlocks in both wake_up*() and add_wait_queue() can
      sneak into the critical section, it cannot go past it and the critical
      section assures that they will be serialized (please see "INTER-CPU
      ACQUIRING BARRIER EFFECTS" in Documentation/memory-barriers.txt for a
      better explanation).  Moreover, the resulting code is much simpler.

      Latency measurement using a ping-pong test over a pty doesn't show any
      visible performance drop.

      Signed-off-by: Kosuke Tatsukawa <tatsu@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8f1bd8f2ad2358d6a88c115481ff3e69817d1bde
  Author: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
  Date:   Wed Sep 23 08:57:40 2015 +0200

      serial: atmel: fix error path of probe function

      If atmel_init_gpios fails the port has already been marked as busy (in
      line 2629), so this must be undone in the error path.

      This bug was introduced because I created the patch that finally
      became 722ccf416ac2 ("serial: atmel: fix error handling when
      mctrl_gpio_init fails") on top of 3.19 which didn't have commit
      6fbb9bdf0f3f ("tty/serial: at91: fix error handling in
      atmel_serial_probe()") yet.

      Signed-off-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Fixes: 722ccf416ac2 ("serial: atmel: fix error handling when 
mctrl_gpio_init fails")
      Acked-by: Nicolas Ferre <nicolas.ferre@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit c1a752ba2d6b8a52879c7ab637cff38359ea9827
  Author: Leon Yu <chianglungyu@xxxxxxxxx>
  Date:   Mon Sep 7 13:08:37 2015 +0000

      tty: don't leak cdev in tty_cdev_add()

      Commit a3a10ce3429e ("Avoid usb reset crashes by making tty_io cdevs truly
      dynamic") which mixes using cdev_alloc() and cdev_init() is problematic.
      Subsequent call to cdev_init() after cdev_alloc() sets kobj release method
      from cdev_dynamic_release() to cdev_default_release() and thus makes it
      impossible to free allocated cdev.

      This patch also consolidates error path of cdev_add() as cdev can also 
leak
      here if things went wrong.

      Signed-off-by: Leon Yu <chianglungyu@xxxxxxxxx>
      Fixes: a3a10ce3429e ("Avoid usb reset crashes by making tty_io cdevs 
truly dynamic")
      Acked-by: Richard Watts <rrw@xxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 0c727a42043f79db210cdde0366f9137b9c6bf5a
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Tue Aug 18 12:43:12 2015 -0300

      Revert "serial: imx: remove unbalanced clk_prepare"

      This reverts commit 9e7b399d6528eac33a6fbfceb2b92af209c3454d.

      Commit ("9e7b399d6528ea") causes the following warning and sometimes
      also hangs the system:

      ------------[ cut here ]------------
       WARNING: CPU: 0 PID: 0 at kernel/locking/mutex.c:868 
mutex_trylock+0x20c/0x22c()
       DEBUG_LOCKS_WARN_ON(in_interrupt())
       Modules linked in:
      CPU: 0 PID: 0 Comm: swapper/0 Not tainted 
4.2.0-rc7-next-20150818-00001-g14418a6 #4
      Hardware name: Freescale i.MX6 Quad/DualLite (Device Tree)
      Backtrace:
      [<80012f08>] (dump_backtrace) from [<800130a4>] (show_stack+0x18/0x1c)
      r6:00000364 r5:00000000 r4:00000000 r3:00000000
      [<8001308c>] (show_stack) from [<807902b8>] (dump_stack+0x88/0xa4)
      [<80790230>] (dump_stack) from [<8002a604>] 
(warn_slowpath_common+0x80/0xbc)
      r5:807945c4 r4:80ab3b50
      [<8002a584>] (warn_slowpath_common) from [<8002a6e4>] 
(warn_slowpath_fmt+0x38/0x40)
      r8:00000000 r7:8131100c r6:8054c3cc r5:8131300c r4:80b0a570
      [<8002a6b0>] (warn_slowpath_fmt) from [<807945c4>] 
(mutex_trylock+0x20c/0x22c)
      r3:8095d0d8 r2:8095ab28
      [<807943b8>] (mutex_trylock) from [<8054c3cc>] 
(clk_prepare_lock+0x14/0xf4)
      r7:8131100c r6:be3f0c80 r5:00000037 r4:be3f0c80
      [<8054c3b8>] (clk_prepare_lock) from [<8054dbfc>] (clk_prepare+0x18/0x30)
      r5:00000037 r4:be3f0c80
      [<8054dbe4>] (clk_prepare) from [<8036a600>] 
(imx_console_write+0x30/0x244)
      r4:812d0bc8 r3:8132b9a4

      To reproduce the problem we only need to let the board idle for something
      like 30 seconds.

      Tested on a imx6q-sabresd.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Reviewed-by: Eduardo Valentin <edubezval@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 049e6dde7e57f0054fdc49102e7ef4830c698b46
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 16:57:17 2015 +0100

      Linux 4.3-rc4

  commit 30c44659f4a3e7e1f9f47e895591b4b40bf62671
  Merge: 15ecf9a 30059d4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 16:31:13 2015 +0100

      Merge branch 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile

      Pull strscpy string copy function implementation from Chris Metcalf.

      Chris sent this during the merge window, but I waffled back and forth on
      the pull request, which is why it's going in only now.

      The new "strscpy()" function is definitely easier to use and more secure
      than either strncpy() or strlcpy(), both of which are horrible nasty
      interfaces that have serious and irredeemable problems.

      strncpy() has a useless return value, and doesn't NUL-terminate an
      overlong result.  To make matters worse, it pads a short result with
      zeroes, which is a performance disaster if you have big buffers.

      strlcpy(), by contrast, is a mis-designed "fix" for strlcpy(), lacking
      the insane NUL padding, but having a differently broken return value
      which returns the original length of the source string.  Which means
      that it will read characters past the count from the source buffer, and
      you have to trust the source to be properly terminated.  It also makes
      error handling fragile, since the test for overflow is unnecessarily
      subtle.

      strscpy() avoids both these problems, guaranteeing the NUL termination
      (but not excessive padding) if the destination size wasn't zero, and
      making the overflow condition very obvious by returning -E2BIG.  It also
      doesn't read past the size of the source, and can thus be used for
      untrusted source data too.

      So why did I waffle about this for so long?

      Every time we introduce a new-and-improved interface, people start doing
      these interminable series of trivial conversion patches.

      And every time that happens, somebody does some silly mistake, and the
      conversion patch to the improved interface actually makes things worse.
      Because the patch is mindnumbing and trivial, nobody has the attention
      span to look at it carefully, and it's usually done over large swatches
      of source code which means that not every conversion gets tested.

      So I'm pulling the strscpy() support because it *is* a better interface.
      But I will refuse to pull mindless conversion patches.  Use this in
      places where it makes sense, but don't do trivial patches to fix things
      that aren't actually known to be broken.

      * 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile:
        tile: use global strscpy() rather than private copy
        string: provide strscpy()
        Make asm/word-at-a-time.h available on all architectures

  commit 84dfe03ae2112b817d5221575d59ba616dc0c3e2
  Author: Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
  Date:   Mon Sep 21 11:45:32 2015 +0300

      mei: hbm: fix error in state check logic

      Use || instead && in state check.
      The latter is bogus and leads to following warning:

      drivers/misc/mei/hbm.c:1212:46: warning: logical â??andâ?? of mutually 
exclusive tests is always false [-Wlogical-op]

      Fixes: 70ef835c84b3 ("mei: support for dynamic clients")
      Reported-by: David Binderman <dcb314@xxxxxxxxxxx>
      Signed-off-by: Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
      Signed-off-by: Tomas Winkler <tomas.winkler@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit fb727077b04f768d0c79d9aa29e958262a9e3d9e
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:36:31 2015 +0100

      nvmem: sunxi: Check for memory allocation failure

      The sunxi_sid driver doesn't check for kmalloc return status before
      derefencing the returned pointer, which could lead to a NULL pointer
      dereference if kmalloc failed. Check for its return code to make sure it
      deosn't happen.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit ace22170655f61d82fff95e57d673bf847a32a03
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Sep 30 13:36:10 2015 +0100

      nvmem: core: Fix memory leak in nvmem_cell_write

      A tmp buffer is allocated if cell->bit_offset || cell->nbits.
      So the tmp buffer needs to be freed at the same condition to avoid leak.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit cbf854ab36870b931aeba4edd954015b7c3005a2
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Sep 30 13:35:15 2015 +0100

      nvmem: core: Handle shift bits in-place if cell->nbits is non-zero

      It's pointless to test (cell->bit_offset || cell->bit_offset).
      nvmem_shift_read_buffer_in_place() should be called when
      (cell->bit_offset || cell->nbits).

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 7c806883e143dc60439e6bdb3589700ebed1efaa
  Author: ZhengShunQian <zhengsq@xxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:33:56 2015 +0100

      nvmem: core: fix the out-of-range leak in read/write()

      The position to read/write must be less than max
      register size.

      Signed-off-by: ZhengShunQian <zhengsq@xxxxxxxxxxxxxx>
      Acked-by: Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
      Signed-off-by: Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 15ecf9a986e2678f5de36ead23b89235612fc03f
  Merge: 0d87708 da6fb7a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 11:47:28 2015 +0100

      Merge tag 'md/4.3-fixes' of git://neil.brown.name/md

      Pull md fixes from Neil Brown:
       "Assorted fixes for md in 4.3-rc.

        Two tagged for -stable, and one is really a cleanup to match and
        improve kmemcache interface.

      * tag 'md/4.3-fixes' of git://neil.brown.name/md:
        md/bitmap: don't pass -1 to bitmap_storage_alloc.
        md/raid1: Avoid raid1 resync getting stuck
        md: drop null test before destroy functions
        md: clear CHANGE_PENDING in readonly array
        md/raid0: apply base queue limits *before* disk_stack_limits
        md/raid5: don't index beyond end of array in need_this_block().
        raid5: update analysis state for failed stripe
        md: wait for pending superblock updates before switching to read-only

  commit 0d8770815f70cf41b69a82ede272b026dbb2df7d
  Merge: 3e519dd d218af7
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 11:41:58 2015 +0100

      Merge branch 'upstream' of 
git://git.linux-mips.org/pub/scm/ralf/upstream-linus

      Pull MIPS updates from Ralf Baechle:
       "This week's round of MIPS fixes:
         - Fix JZ4740 build
         - Fix fallback to GFP_DMA
         - FP seccomp in case of ENOSYS
         - Fix bootmem panic
         - A number of FP and CPS fixes
         - Wire up new syscalls
         - Make sure BPF assembler objects can properly be disassembled
         - Fix BPF assembler code for MIPS I"

      * 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus:
        MIPS: scall: Always run the seccomp syscall filters
        MIPS: Octeon: Fix kernel panic on startup from memory corruption
        MIPS: Fix R2300 FP context switch handling
        MIPS: Fix octeon FP context switch handling
        MIPS: BPF: Fix load delay slots.
        MIPS: BPF: Do all exports of symbols with FEXPORT().
        MIPS: Fix the build on jz4740 after removing the custom gpio.h
        MIPS: CPS: #ifdef on CONFIG_MIPS_MT_SMP rather than CONFIG_MIPS_MT
        MIPS: CPS: Don't include MT code in non-MT kernels.
        MIPS: CPS: Stop dangling delay slot from has_mt.
        MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
        MIPS: Wire up userfaultfd and membarrier syscalls.

  commit 3e519dde1e8a73e59b0eab52575a14a2986283b6
  Merge: 2cf3082 791c76d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 11:40:09 2015 +0100

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fixes from Thomas Gleixner:
       "This update contains:

         - Fix for a long standing race affecting /proc/irq/NNN

         - One line fix for ARM GICV3-ITS counting the wrong data

         - Warning silencing in ARM GICV3-ITS.  Another GCC trying to be
           overly clever issue"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqchip/gic-v3-its: Count additional LPIs for the aliased devices
        irqchip/gic-v3-its: Silence warning when its_lpi_alloc_chunks gets 
inlined
        genirq: Fix race in register_irq_proc()

  commit d218af78492a36a4ae607c08fedfb59258440314
  Author: Markos Chandras <markos.chandras@xxxxxxxxxx>
  Date:   Fri Sep 25 08:17:42 2015 +0100

      MIPS: scall: Always run the seccomp syscall filters

      The MIPS syscall handler code used to return -ENOSYS on invalid
      syscalls. Whilst this is expected, it caused problems for seccomp
      filters because the said filters never had the change to run since
      the code returned -ENOSYS before triggering them. This caused
      problems on the chromium testsuite for filters looking for invalid
      syscalls. This has now changed and the seccomp filters are always
      run even if the syscall is invalid. We return -ENOSYS once we
      return from the seccomp filters. Moreover, similar codepaths have
      been merged in the process which simplifies somewhat the overall
      syscall code.

      Signed-off-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11236/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 72194739f54607bbf8cfded159627a2015381557
  Author: Vincent Palatin <vpalatin@xxxxxxxxxxxx>
  Date:   Thu Oct 1 14:10:22 2015 -0700

      usb: Add device quirk for Logitech PTZ cameras

      Add a device quirk for the Logitech PTZ Pro Camera and its sibling the
      ConferenceCam CC3000e Camera.
      This fixes the failed camera enumeration on some boot, particularly on
      machines with fast CPU.

      Tested by connecting a Logitech PTZ Pro Camera to a machine with a
      Haswell Core i7-4600U CPU @ 2.10GHz, and doing thousands of reboot cycles
      while recording the kernel logs and taking camera picture after each boot.
      Before the patch, more than 7% of the boots show some enumeration transfer
      failures and in a few of them, the kernel is giving up before actually
      enumerating the webcam. After the patch, the enumeration has been correct
      on every reboot.

      Signed-off-by: Vincent Palatin <vpalatin@xxxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 1d5c47f555c5ae050fad22e4a99f88856cae5d05
  Author: Alexander Inyukhin <shurick@xxxxxxxxxxxxxx>
  Date:   Sat Sep 26 15:24:21 2015 +0300

      USB: chaoskey read offset bug

      Rng reads in chaoskey driver could return the same data under
      the certain conditions.

      Signed-off-by: Alexander Inyukhin <shurick@xxxxxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8484bf2981b3d006426ac052a3642c9ce1d8d980
  Author: Yao-Wen Mao <yaowen@xxxxxxxxxx>
  Date:   Mon Aug 31 14:24:09 2015 +0800

      USB: Add reset-resume quirk for two Plantronics usb headphones.

      These two headphones need a reset-resume quirk to properly resume to
      original volume level.

      Signed-off-by: Yao-Wen Mao <yaowen@xxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8552d85442dd814d733f67592627ea55f7cbfb01
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:51 2015 -0400

      i40evf: don't blow away MAC address

      Under certain circumstances, we can get an extra VF_RESOURCES message
      from the PF driver at runtime. When this happens, we need to parse it
      because our VSI may have changed out from underneath us, and that will
      affect our relationship with the PF driver.

      However, parsing the resources message also blows away our current MAC
      address in the hardware struct, usually with all zeros. When this
      happens, the next time the interface is opened, it will have no MAC
      address and will a) not work and b) complain.

      Fix this issue by restoring the current MAC address from the netdev
      struct after we parse the resource message.

      Change-ID: I6cd1b624fc20432f81dc901166c8de195b8e0e65
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 24408e7ae677cea4e44ce6869a1b803820839471
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:38 2015 -0400

      i40e/i40evf: grab the AQ spinlocks before clearing registers

      Make sure we have the spinlocks before we clear the ARQ and ASQ management
      registers.  Also, widen the locked portion and make a sanity check earlier
      in the send function to be sure we're working with safe register values.

      Change-ID: I34b56044b33461ed780f3d2de8d62826cdf933f9
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 126b63d9d3aa99a90381ed168a885989dd33cf15
  Author: Anjali Singhai <anjali.singhai@xxxxxxxxx>
  Date:   Mon Aug 24 13:26:53 2015 -0700

      i40e: Fix a memory leak in X722 rss config path

      In any case free the memory allocated before exiting.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 27ca2753500537b8f3f3aba43558d68e2e8439a1
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Aug 17 11:19:03 2015 +0800

      i40evf: Use numa_mem_id() to better support memoryless node

      Function i40e_clean_rx_irq() tries to reuse memory pages allocated
      from the nearest node. To better support memoryless node, use
      numa_mem_id() instead of numa_node_id() to get the nearest node with
      memory.

      This change should only affect performance.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8dc5562e4e2b8255d2ea5d472a7fa25d5aa20da4
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Aug 17 11:19:02 2015 +0800

      i40e: Use numa_mem_id() to better support memoryless node

      Function i40e_clean_rx_irq() tries to reuse memory pages allocated
      from the nearest node. To better support memoryless node, use
      numa_mem_id() instead of numa_node_id() to get the nearest node with
      memory.

      This change should only affect performance.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 616a5399b8f11a526cedcbaeb68bc0a1b08a3f43
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Sat Oct 3 16:54:17 2015 -0500

      [CIFS] Update cifs version number

      Update modinfo cifs.ko version number to 2.08

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>

  commit e96f78ab2703f3b0d512f6b469bc685d2ef20475
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sat Oct 3 06:27:28 2015 -0700

      tcp/dccp: add SLAB_DESTROY_BY_RCU flag for request sockets

      Before letting request sockets being put in TCP/DCCP regular
      ehash table, we need to add either :

      - SLAB_DESTROY_BY_RCU flag to their kmem_cache
      - add RCU grace period before freeing them.

      Since we carefully respected the SLAB_DESTROY_BY_RCU protocol
      like ESTABLISH and TIMEWAIT sockets, use it here.

      req_prot_init() being only used by TCP and DCCP, I did not add
      a new slab_flags into their rsk_prot, but reuse prot->slab_flags

      Since all reqsk_alloc() users are correctly dealing with a failure,
      add the __GFP_NOWARN flag to avoid traces under pressure.

      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d06f107bcd828a6c3ecd4a7d449d5d0c0dba0326
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Thu Oct 1 18:16:21 2015 +0200

      Bluetooth: btintel: Add iBT register access over HCI support

      Add regmap ibt to support Intel Bluetooth silicon register access
      over HCI. Intel BT/FM combo chip allows to read/write some registers
      (e.g. FM registers) via its HCI interface.

      Read/Write operations are performed via a HCI transaction composed of
      a HCI command (host->controller) followed by a HCI command complete
      event (controller->host). Read/Write Command opcodes can be specified
      to the regmap init function.
      We define data formats which are intel/vendor specific.

      Register Read/Write HCI command payload (Host):
      Field: | REG ADDR | MODE | DATA_LEN | DATA... |
      size:  |   32b    |  8b  |    8b    |  8b*    |

      Register Read HCI command complete event payload (Controller):
      Field: | CMD STATUS | REG ADDR | DATA... |
      size:  |     8b     |   32b    |  8b*    |

      Register Write HCI command complete event payload (Controller):
      Field: | CMD_STATUS |
      size:  |     8b     |

      Since this payload is HCI encapsulated, Little Endian byte order is
      used.

      Write/Read Example:

      If we write 0x0000002a at address 0x00008c04, with opcode_write 0xfc5d,
      The resulting transaction is (btmon trace):

      < HCI Command (0x3f|0x005d) plen 10 [hci0]
              04 8c 00 00 02 04 2a 00 00 00
      > HCI Event (0x0e) plen 4
            Unknown (0x3f|0x005d) ncmd 1
              00

      Then, if we read the same register with opcode_read 0xfc5e:

      < HCI Command (0x3f|0x005e) plen 6 [hci0]
              04 8c 00 00 02 04
      > HCI Event (0x0e) plen 12 [hci0]
            Unknown (0x3f|0x005e) ncmd 1
              00 04 8c 00 00 2a 00 00 00

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 9a431bd5a26ca7db8ab251a75e006aa8b145718e
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Jun 25 10:44:08 2015 +0100

      ARM: make highpte an expert option

      When highmem is enabled, there's little reason not to also enable
      highpte support as well.  Rather than leaving this to chance, make
      it an expert option, and default it to be enabled if highmem is
      enabled.  Add some help text to the option while we're here.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 63ce446c9b5787a94ed875bab20772e1a2b3092f
  Author: Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
  Date:   Sun Sep 13 03:30:11 2015 +0100

      ARM: 8433/1: add a VMSPLIT_3G_OPT config option

      Mimicking the same config option on x86, this allows for 1GB systems to
      have their RAM entirely mapped as low memory.

      Signed-off-by: Nicolas Pitre <nico@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 0768330d46435f324a0b4860c889057524af17c2
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Tue Sep 22 17:12:10 2015 +0100

      ARM: 8439/1: Fix backtrace generation when IPI is masked

      Currently on ARM when <SysRq-L> is triggered from an interrupt handler
      (e.g. a SysRq issued using UART or kbd) the main CPU will wedge for ten
      seconds with interrupts masked before issuing a backtrace for every CPU
      except itself.

      The new backtrace code introduced by commit 96f0e00378d4 ("ARM: add
      basic support for on-demand backtrace of other CPUs") does not work
      correctly when run from an interrupt handler because IPI_CPU_BACKTRACE
      is used to generate the backtrace on all CPUs but cannot preempt the
      current calling context.

      This can be fixed by detecting that the calling context cannot be
      preempted and issuing the backtrace directly in this case. Issuing
      directly leaves us without any pt_regs to pass to nmi_cpu_backtrace()
      so we also modify the generic code to call dump_stack() when its
      argument is NULL.

      Acked-by: Hillf Danton <hillf.zj@xxxxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 001bf455d20645190beb98ff4ee450dfea1b7eb2
  Author: Doug Anderson <armlinux@xxxxxxxxxxxxxx>
  Date:   Wed Sep 2 03:39:19 2015 +0100

      ARM: 8428/1: kgdb: Fix registers on sleeping tasks

      Dumping registers from other sleeping tasks in KGDB was totally
      failing for me.  All registers were reported as 0 in many cases.

      The code was using task_pt_regs(task) to try to get other thread
      registers.  This doesn't appear to be the right place to look.  From
      my tests, I saw non-zero values in this structure when we were looking
      at a kernel thread that had a userspace task associated with it, but
      it contained the register values from the userspace task.  So even in
      the cases where registers weren't reported as 0 we were still not
      showing the right thing.

      Instead of using task_pt_regs(task) let's use task_thread_info(task).
      This is the same place that is referred to when doing a dump of all
      sleeping task stacks (kdb_show_stack() -> show_stack() ->
      dump_backtrace() -> unwind_backtrace() -> thread_saved_sp()).

      As further evidence that this is the right thing to do, you can find
      the following comment in "gdbstub.c" right before it calls
      sleeping_thread_to_gdb_regs():
        Pull stuff saved during switch_to; nothing else is accessible (or
        even particularly relevant).  This should be enough for a stack
        trace.
      ...and if you look at switch_to() it only saves r4-r11, sp and lr.
      Those are the same registers that I'm getting out of the
      task_thread_info().

      With this change you can use "info thread" to see all tasks in the
      kernel and you can switch to other tasks and examine them in gdb.

      Signed-off-by: Doug Anderson <dianders@xxxxxxxxxxxx>
      Tested-by: Stephen Boyd <sboyd@xxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 7e31210349e9e03a9a4dff31ab5f2bc83e8e84f5
  Author: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
  Date:   Fri Aug 28 09:42:09 2015 +0100

      ARM: 8427/1: dma-mapping: add support for offset parameter in dma_mmap()

      IOMMU-based dma_mmap() implementation lacked proper support for offset
      parameter used in mmap call (it always assumed that mapping starts from
      offset zero). This patch adds support for offset parameter to IOMMU-based
      implementation.

      Signed-off-by: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx  # v3.6+
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 371f0f085f629fc0f66695f572373ca4445a67ad
  Author: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
  Date:   Fri Aug 28 09:41:39 2015 +0100

      ARM: 8426/1: dma-mapping: add missing range check in dma_mmap()

      dma_mmap() function in IOMMU-based dma-mapping implementation lacked
      a check for valid range of mmap parameters (offset and buffer size), what
      might have caused access beyond the allocated buffer. This patch fixes
      this issue.

      Signed-off-by: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx  # v3.6+
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit db695c0509d6ec9046ee5e4c520a19fa17d9fce2
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 19:34:28 2015 +0100

      ARM: remove user cmpxchg syscall

      Mark Brand reports that a NEEDS_SYSCALL_FOR_CMPXCHG enabled kernel would
      open a security hole in the ghost syscall used to implement cmpxchg, as
      it fails to validate the user pointer.

      However, in order for this option to be enabled, you'd need to be
      building a pre-ARMv6 kernel with SMP support.  There is only one system
      known which fits that, which is an early ARM SMP FPGA implementation
      based on the ARM926T.

      In any case, the Kconfig does not allow SMP to be enabled for pre-ARMv6
      systems.

      Moreover, even if NEEDS_SYSCALL_FOR_CMPXCHG were to be enabled, the
      kernel would not build as __ARM_NR_cmpxchg64 is not defined.

      The simple answer is to remove the buggy code.

      Reported-by: Mark Brand <markbrand@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 6f56a68d0bed16c13e9ec958cd28acbc2991d495
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Tue Sep 15 00:11:30 2015 +0100

      ARM: 8438/1: Add unwinding to __clear_user_std()

      Add unwinding annotations so that unwinding from this function
      works properly.

      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit b97b272e72ae07a04a664685c876439215bdeb74
  Author: Maninder Singh <maninder1.s@xxxxxxxxxxx>
  Date:   Mon Sep 14 15:59:26 2015 +0100

      ARM: 8436/1: hw_breakpoint: remove unnecessary header

      Header <asm/kdebug.h> is not needed for arm/hw_breakpoint.c, so remove
      the pointless #include.

      Signed-off-by: Maninder Singh <maninder1.s@xxxxxxxxxxx>
      Reviewed-by: Vaneet Narang <v.narang@xxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 63c27ae7981e5c28abfe97ca5f6ef92a5070ce7a
  Author: Felipe Balbi <balbi@xxxxxx>
  Date:   Fri Oct 2 20:33:36 2015 +0100

      ARM: 8434/2: Revert "7655/1: smp_twd: make twd_local_timer_of_register() 
no-op for nosmp"

      This reverts commit 904464b91eca8c665acea033489225af02eeb75a.

      The problem pointed out by commit 904464b91eca ("ARM: 7655/1:
      smp_twd: make twd_local_timer_of_register() no-op for nosmp")
      doesn't exist anymore.

      We can safely boot with nosmp and the warning won't show up.

      The other side benefit of this patch is that TWD has a chance
      to probe on single-core A9 systems such as AM437x which sport
      TWD.

      While at that, also drop SMP dependency from TWD's Kconfig entry.

      Cc: Shawn Guo <shawn.guo@xxxxxxxxxx>
      Cc: Dirk Behme <dirk.behme@xxxxxxxxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 2cf30826bbc6c940568be07e8fab0aee02165cf8
  Merge: 37cc7ab f4b4aae
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 10:53:05 2015 -0400

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Ingo Molnar:
       "Fixes all around the map: W+X kernel mapping fix, WCHAN fixes, two
        build failure fixes for corner case configs, x32 header fix and a
        speling fix"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/headers/uapi: Fix __BITS_PER_LONG value for x32 builds
        x86/mm: Set NX on gap between __ex_table and rodata
        x86/kexec: Fix kexec crash in syscall kexec_file_load()
        x86/process: Unify 32bit and 64bit implementations of get_wchan()
        x86/process: Add proper bound checks in 64bit get_wchan()
        x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels
        x86/hyperv: Fix the build in the !CONFIG_KEXEC_CORE case
        x86/cpufeatures: Correct spelling of the HWP_NOTIFY flag

  commit 37cc7ab1d2c317cc989b8aa0224cfc5f0478ccbd
  Merge: a758379 67dfae0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 10:51:41 2015 -0400

      Merge branch 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer fixes from Ingo Molnar:
       "An abs64() fix in the watchdog driver, and two clocksource driver
        NO_IRQ assumption fixes"

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        clocksource: Fix abs() usage w/ 64bit values
        clocksource/drivers/keystone: Fix bad NO_IRQ usage
        clocksource/drivers/rockchip: Fix bad NO_IRQ usage

  commit a758379b031f50b9def094aad071ef547a5cb335
  Merge: 14f97d9 0ce3cc0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 10:46:41 2015 -0400

      Merge branch 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull EFI fixes from Ingo Molnar:
       "Two EFI fixes: one for x86, one for ARM, fixing a boot crash bug that
        can trigger under newer EFI firmware"

      * 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        arm64/efi: Fix boot crash by not padding between EFI_MEMORY_RUNTIME 
regions
        x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at 
runtime, instead of top-down

  commit 14f97d9713283adfadf2193e287e21d079f72ee7
  Merge: 978ab6a ccf03d6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 10:39:31 2015 -0400

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Bunch of fixes all over the place, all pretty small: amdgpu, i915,
        exynos, one qxl and one vmwgfx.

        There is also a bunch of mst fixes, I left some cleanups in the series
        as I didn't think it was worth splitting up the tested series"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux: (37 commits)
        drm/dp/mst: add some defines for logical/physical ports
        drm/dp/mst: drop cancel work sync in the mstb destroy path (v2)
        drm/dp/mst: split connector registration into two parts (v2)
        drm/dp/mst: update the link_address_sent before sending the link 
address (v3)
        drm/dp/mst: fixup handling hotplug on port removal.
        drm/dp/mst: don't pass port into the path builder function
        drm/radeon: drop radeon_fb_helper_set_par
        drm: handle cursor_set2 in restore_fbdev_mode
        drm/exynos: Staticize local function in exynos_drm_gem.c
        drm/exynos: fimd: actually disable dp clock
        drm/exynos: dp: remove suspend/resume functions
        drm/qxl: recreate the primary surface when the bo is not primary
        drm/amdgpu: only print meaningful VM faults
        drm/amdgpu/cgs: remove import_gpu_mem
        drm/i915: Call non-locking version of drm_kms_helper_poll_enable(), v2
        drm: Add a non-locking version of drm_kms_helper_poll_enable(), v2
        drm/vmwgfx: Fix a command submission hang regression
        drm/exynos: remove unused mode_fixup() code
        drm/exynos: remove decon_mode_fixup()
        drm/exynos: remove fimd_mode_fixup()
        ...

  commit 4236e2a1ad679f3b57b23ba333f261b514814f4f
  Merge: 28117b0 9c70d7c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 05:16:50 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-30

      This series contains updates to i40e and i40evf only.

      Vasily Averin provides a couple of rtnl lock/unlock fixes for both i40e
      and i40evf.

      Shannon provides several updates and fixes, first fixes up a type clash
      in i40e_aq_rc_to_posix(), where the error codes are signed values, so we
      need to treat them as such.  Then fixes up a padding issue where an
      extra byte is added in i40e_aqc_get_cee_dcb_cfg_v1_resp to directly
      acknowledge the padding.  Updated i40e to keep debugfs register read
      and writes from accessing outside of the io-remapped space.  Added
      support and device id for another 20 GbE device.

      Jesse fixes the transmit hand workaround code for ARM that was causing
      Tx hangs to still occur occasionally when there really was no hang.  Then
      fixed the receive dropped counter to show up in netstat interface.
      Refactor the interrupt enable function since it was always making the
      caller add the base_vector from the VSI struct which is already passed
      to the function.  Fix kbuild warnings found in 0day build infrastructure
      by adding a harmless cast to a dev_info(), also fix 32 bit build
      warnings found by sparse.

      Greg fixed a configuration error that results if a port VLAN is set
      for a VF before the VF driver is loaded, so that when the VF driver is
      loaded the port VLAN is ignored.

      Mitch fixes the use of QOS field consistently in
      i40e_ndo_set_vf_port_vlan().  Modified the init timing of the driver
      to increase stability on load/unload and SR-IOV enable/disable cycles.

      Anjali updates i40e to not collect VEB stats if they are disabled in the
      hardware for performance reasons.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 28117b08e55a70322389c4366751b35a2bb9d393
  Merge: f8e1100 22d4df8
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 05:05:30 2015 -0700

      Merge branch 'ravb-r8a7795'

      Simon Horman says:

      ====================
      ravb: Add support for r8a7795 SoC

      please consider this series for net-next.
      It enhances the ravb driver to support the r8a7795 SoC.

      Changes:

      * Dropped RFC prefix
      * Details in changelog of individual patches

      Base:

      * net-next/master

      Availability:

      To aid review of this in conjunction with other EtherAVB changes
      the following branches are available in my renesas tree on kernel.org.

      * me/r8a7795-ravb-driver-v4: this series
      * me/r8a7795-ravb-pfc-v2: r8a7795 sh-pfc update for EthernetAVB
      * me/r8a7795-ravb-integration-v4: enable EthernetAVB on r8a7795
      * me/r8a7795-ravb-driver-and-integration-v4.runtime:
            the above three branches with their runtime dependencies
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 22d4df8ff3a3cc7251671d129a7185c66a929ddc
  Author: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
  Date:   Wed Sep 30 15:15:55 2015 +0900

      ravb: Add support for r8a7795 SoC

      This patch supports the r8a7795 SoC by:
      - Using two interrupts
        + One for E-MAC
        + One for everything else
        + Both can be handled by the existing common interrupt handler, which
          affords a simpler update to support the new SoC. In future some
          consideration may be given to implementing multiple interrupt handlers
      - Limiting the phy speed to 100Mbit/s for the new SoC;
        at this time it is not clear how this restriction may be lifted
        but I hope it will be possible as more information comes to light

      Signed-off-by: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
      [horms: reworked]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 619f3bd2e1f24dd6221e563e051c798844b83a93
  Author: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
  Date:   Wed Sep 30 15:15:54 2015 +0900

      ravb: Document binding for r8a7795 SoC

      This patch updates the ravb binding to support the r8a7795 SoC by:
      - Adding a compat string for the new hardware
      - Adding 25 named interrupts to binding for the new SoC;
        older SoCs continue to use a single multiplexed interrupt

      The example is also updated to reflect the r8a7795 as this is the
      more complex case.

      Based on work by Kazuya Mizuguchi and others.

      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e2dbb33ad9545de6859747b92556a74a81bed8f5
  Author: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
  Date:   Wed Sep 30 15:15:53 2015 +0900

      ravb: Provide dev parameter to DMA API

      This patch is in preparation for using this driver on arm64 where the
      implementation of __dma_alloc_coherent fails if a device parameter is not
      provided.

      Signed-off-by: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
      Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Signed-off-by: Masaru Nagai <masaru.nagai.vx@xxxxxxxxxxx>
      [horms: squashed into a single patch]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f3a6bd393c2c5d0e6b16624ba99a1c5fa07bdb0b
  Author: Simon Horman <horms+renesas@xxxxxxxxxxxx>
  Date:   Wed Sep 30 15:15:52 2015 +0900

      phylib: Add phy_set_max_speed helper

      Add a helper to allow ethernet drivers to limit the speed of a phy
      (that they are attached to).

      This mainly involves factoring out the business-end of
      of_set_phy_supported() and exporting a new symbol.

      This code seems to be open coded in several places, in several different
      variants.

      It is is envisaged that this will be used in situations where setting the
      "max-speed" property in DT is not appropriate, e.g. because the maximum
      speed is not a property of the phy hardware.

      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8e1100afc4f362e94c2d4a3231f16c77beb6d1b
  Merge: bd8762b 754f1e6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 05:02:50 2015 -0700

      Merge branch 'bpf-updates'

      Daniel Borkmann says:

      ====================
      BPF updates

      Some minor updates to {cls,act}_bpf to retrieve routing realms
      and to make skb->priority writable.

      Thanks!

      v1 -> v2:
       - Dropped preclassify patch for now from the series as the
         rest is pretty much independent of it
       - Rest unchanged, only rebased and already posted Acked-by's kept
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 754f1e6a36c9b42525de223ee1ba628dcafbad41
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 01:41:52 2015 +0200

      sched, bpf: make skb->priority writable

      {cls,act}_bpf can now set the skb->priority from an eBPF program based
      on various critera, so that for example classful qdiscs like multiq can
      update the skb's priority during enqueue time and further push it down
      into subsequent qdiscs.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c46646d0484f5d08e2bede9b45034ba5b8b489cc
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 01:41:51 2015 +0200

      sched, bpf: add helper for retrieving routing realms

      Using routing realms as part of the classifier is quite useful, it
      can be viewed as a tag for one or multiple routing entries (think of
      an analogy to net_cls cgroup for processes), set by user space routing
      daemons or via iproute2 as an indicator for traffic classifiers and
      later on processed in the eBPF program.

      Unlike actions, the classifier can inspect device flags and enable
      netif_keep_dst() if necessary. tc actions don't have that possibility,
      but in case people know what they are doing, it can be used from there
      as well (e.g. via devs that must keep dsts by design anyway).

      If a realm is set, the handler returns the non-zero realm. User space
      can set the full 32bit realm for the dst.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a91263d520246b63c63e75ddfb072ee6a853fe15
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 01:41:50 2015 +0200

      ebpf: migrate bpf_prog's flags to bitfield

      As we need to add further flags to the bpf_prog structure, lets migrate
      both bools to a bitfield representation. The size of the base structure
      (excluding insns) remains unchanged at 40 bytes.

      Add also tags for the kmemchecker, so that it doesn't throw false
      positives. Even in case gcc would generate suboptimal code, it's not
      being accessed in performance critical paths.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bd8762bec95ed81d5b81390ff23c5f83345cb536
  Merge: c3fc7ac 9e8f4a5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 04:49:48 2015 -0700

      Merge branch 'switchdev-obj'

      Jiri Pirko says:

      ====================
      switchdev: bring back switchdev_obj

      Second version of the patch extends to a patchset. Basically this patchset
      brings object structure back which disappeared with recent Vivien's 
patchset.
      Also it does a bit of naming changes in order to get the things in line.
      Also, object id is put back into object structure.
      Thanks to Scott and Vivien for review and suggestions.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e8f4a548ab4710002c23c94c4b1bbde91b5e335
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:46 2015 +0200

      switchdev: push object ID back to object structure

      Suggested-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 648b4a995a057187ddd77cdb181e6a0b24ab2959
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:45 2015 +0200

      switchdev: bring back switchdev_obj and use it as a generic object param

      Replace "void *obj" with a generic structure. Introduce couple of
      helpers along that.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52ba57cfdc4c90da3bf996dfbe0c5feb731eb477
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:44 2015 +0200

      switchdev: rename switchdev_obj_fdb to switchdev_obj_port_fdb

      Make the struct name in sync with object id name.

      Suggested-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f24f3095dcedaa4eb4719eee2bed738fe2ce4a0
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:43 2015 +0200

      switchdev: rename switchdev_obj_vlan to switchdev_obj_port_vlan

      Make the struct name in sync with object id name.

      Suggested-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f86839874a50c9ee2009567d2f312b1e1949e24
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:42 2015 +0200

      switchdev: rename SWITCHDEV_ATTR_* enum values to SWITCHDEV_ATTR_ID_*

      To be aligned with obj.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 57d80838dae55c1bc6ca629e471c84100513079a
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:41 2015 +0200

      switchdev: rename SWITCHDEV_OBJ_* enum values to SWITCHDEV_OBJ_ID_*

      Suggested-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dd2bdd7072de328bfb88e45d372371a1fa189e87
  Merge: 02899e7 f9fef61
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 13:39:40 2015 +0200

      Merge tag 'phy-for-4.3-rc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kishon/linux-phy into usb-linus

      Kishon writes:

      phy: for 4.3-rc

      *) Fix compiler error in qcom-ufs when it is built as module
      *) Power down rockchip-usb PHY during probe to save power consumption
      *) Fix module autoload for berlin-sata PHY driver

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit c3fc7ac9a0b978ee8538058743d21feef25f7b33
  Merge: f6d3125 e994b2f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 04:32:52 2015 -0700

      Merge branch 'tcp-lockless-listener'

      Eric Dumazet says:

      ====================
      tcp/dccp: lockless listener

      TCP listener refactoring : this is becoming interesting !

      This patch series takes the steps to use normal TCP/DCCP ehash
      table to store SYN_RECV requests, instead of the private per-listener
      hash table we had until now.

      SYNACK skb are now attached to their syn_recv request socket,
      so that we no longer heavily modify listener sk_wmem_alloc.

      listener lock is no longer held in fast path, including
      SYNCOOKIE mode.

      During my tests, my server was able to process 3,500,000
      SYN packets per second on one listener and still had available
      cpu cycles.

      That is about 2 to 3 order of magnitude what we had with older kernels.

      This effort started two years ago and I am pleased to reach expectations.

      We'll probably extend SO_REUSEPORT to add proper cpu/numa affinities,
      so that heavy duty TCP servers can get proper siloing thanks to 
multi-queues
      NIC.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e994b2f0fb9229aeff5eea9541320bd7b2ca8714
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:39 2015 -0700

      tcp: do not lock listener to process SYN packets

      Everything should now be ready to finally allow SYN
      packets processing without holding listener lock.

      Tested:

      3.5 Mpps SYNFLOOD. Plenty of cpu cycles available.

      Next bottleneck is the refcount taken on listener,
      that could be avoided if we remove SLAB_DESTROY_BY_RCU
      strict semantic for listeners, and use regular RCU.

          13.18%  [kernel]  [k] __inet_lookup_listener
           9.61%  [kernel]  [k] tcp_conn_request
           8.16%  [kernel]  [k] sha_transform
           5.30%  [kernel]  [k] inet_reqsk_alloc
           4.22%  [kernel]  [k] sock_put
           3.74%  [kernel]  [k] tcp_make_synack
           2.88%  [kernel]  [k] ipt_do_table
           2.56%  [kernel]  [k] memcpy_erms
           2.53%  [kernel]  [k] sock_wfree
           2.40%  [kernel]  [k] tcp_v4_rcv
           2.08%  [kernel]  [k] fib_table_lookup
           1.84%  [kernel]  [k] tcp_openreq_init_rwin

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 92d6f176fdcce1a9c22a59d754c924168fdf2ce4
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:38 2015 -0700

      tcp/dccp: add a reschedule point in inet_csk_listen_stop()

      If a listener with thousands of children in accept queue
      is dismantled, it can take a while to close all of them.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef547f2ac16bd9d77a780a0e7c70857e69e8f23f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:37 2015 -0700

      tcp: remove max_qlen_log

      This control variable was set at first listen(fd, backlog)
      call, but not updated if application tried to increase or decrease
      backlog. It made sense at the time listener had a non resizeable
      hash table.

      Also rounding to powers of two was not very friendly.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 10cbc8f179177c1a6d5f56a46ebddc8f602ce5ac
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:36 2015 -0700

      tcp/dccp: remove struct listen_sock

      It is enough to check listener sk_state, no need for an extra
      condition.

      max_qlen_log can be moved into struct request_sock_queue

      We can remove syn_wait_lock and the alignment it enforced.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca6fb06518836ef9b65dc0aac02ff97704d52a05
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:35 2015 -0700

      tcp: attach SYNACK messages to request sockets instead of listener

      If a listen backlog is very big (to avoid syncookies), then
      the listener sk->sk_wmem_alloc is the main source of false
      sharing, as we need to touch it twice per SYNACK re-transmit
      and TX completion.

      (One SYN packet takes listener lock once, but up to 6 SYNACK
      are generated)

      By attaching the skb to the request socket, we remove this
      source of contention.

      Tested:

       listen(fd, 10485760); // single listener (no SO_REUSEPORT)
       16 RX/TX queue NIC
       Sustain a SYNFLOOD attack of ~320,000 SYN per second,
       Sending ~1,400,000 SYNACK per second.
       Perf profiles now show listener spinlock being next bottleneck.

          20.29%  [kernel]  [k] queued_spin_lock_slowpath
          10.06%  [kernel]  [k] __inet_lookup_established
           5.12%  [kernel]  [k] reqsk_timer_handler
           3.22%  [kernel]  [k] get_next_timer_interrupt
           3.00%  [kernel]  [k] tcp_make_synack
           2.77%  [kernel]  [k] ipt_do_table
           2.70%  [kernel]  [k] run_timer_softirq
           2.50%  [kernel]  [k] ip_finish_output
           2.04%  [kernel]  [k] cascade

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1b33bc3e9e903f7293f7dfe80a875b2a5d0305aa
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:34 2015 -0700

      ipv6: remove obsolete inet6 functions

      inet6_csk_search_req() and inet6_csk_reqsk_queue_hash_add()
      no longer exist.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 81b496b31a4331415b6a644b485a329ec0b45155
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:33 2015 -0700

      tcp/dccp: shrink struct listen_sock

      We no longer use hash_rnd, nr_table_entries and syn_table[]

      For a listener with a backlog of 10 millions sockets, this
      saves 80 MBytes of vmalloced memory.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 079096f103faca2dd87342cca6f23d4b34da8871
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:32 2015 -0700

      tcp/dccp: install syn_recv requests into ehash table

      In this patch, we insert request sockets into TCP/DCCP
      regular ehash table (where ESTABLISHED and TIMEWAIT sockets
      are) instead of using the per listener hash table.

      ACK packets find SYN_RECV pseudo sockets without having
      to find and lock the listener.

      In nominal conditions, this halves pressure on listener lock.

      Note that this will allow for SO_REUSEPORT refinements,
      so that we can select a listener using cpu/numa affinities instead
      of the prior 'consistent hash', since only SYN packets will
      apply this selection logic.

      We will shrink listen_sock in the following patch to ease
      code review.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Ying Cai <ycai@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2feda34192a379f8b35a7c6c5826b2f23e884f32
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:31 2015 -0700

      tcp/dccp: remove inet_csk_reqsk_queue_added() timeout argument

      This is no longer used.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aa3a0c8ce651b5e16124866b0a10d1b90b9ef022
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:30 2015 -0700

      tcp: get_openreq[46]() changes

      When request sockets are no longer in a per listener hash table
      but on regular TCP ehash, we need to access listener uid
      through req->rsk_listener

      get_openreq6() also gets a const for its request socket argument.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9cfd08601f49a4536e4407286b5f07b24293e474
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:29 2015 -0700

      tcp: remove BUG_ON() in tcp_check_req()

      Once listener is lockless, its sk_state can change anytime.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba8e275a457397ab06f3567cf7bef0d78a43ae7e
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:28 2015 -0700

      tcp: cleanup tcp_v[46]_inbound_md5_hash()

      We'll soon have to call tcp_v[46]_inbound_md5_hash() twice.
      Also add const attribute to the socket, as it might be the
      unlocked listener for SYN packets.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b267cdd1075d28501b7c05c7aeb8466775505e8d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:27 2015 -0700

      tcp/dccp: init sk_prot and call sk_node_init() in reqsk_alloc()

      We plan to use generic functions to insert request sockets
      into ehash table.

      sk_prot needs to be set (to retrieve sk_prot->h.hashinfo)
      sk_node needs to be cleared.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 38cb52455c2c3e8b5751350a3fb32e43e82e129a
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:26 2015 -0700

      tcp: call sk_mark_napi_id() on the child, not the listener

      This fixes a typo : We want to store the NAPI id on child socket.
      Presumably nobody really uses busy polling, on short lived flows.

      Fixes: 3d97379a67486 ("tcp: move sk_mark_napi_id() at the right place")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8d2675f1e464aa5cedda63849adecffd8d33fead
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:25 2015 -0700

      tcp: move synflood_warned into struct request_sock_queue

      long term plan is to remove struct listen_sock when its hash
      table is no longer there.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aac065c50aba0c534a929aeb687eb68c58e523b8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:24 2015 -0700

      tcp: move qlen/young out of struct listen_sock

      qlen_inc & young_inc were protected by listener lock,
      while qlen_dec & young_dec were atomic fields.

      Everything needs to be atomic for upcoming lockless listener.

      Also move qlen/young in request_sock_queue as we'll get rid
      of struct listen_sock eventually.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fff1f3001cc58b5064a0f1154a7ac09b76f29c44
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:23 2015 -0700

      tcp: add a spinlock to protect struct request_sock_queue

      struct request_sock_queue fields are currently protected
      by the listener 'lock' (not a real spinlock)

      We need to add a private spinlock instead, so that softirq handlers
      creating children do not have to worry with backlog notion
      that the listener 'lock' carries.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 02899e7a95844ff1f12d2b4795906c7bf5aab276
  Merge: 9ffecb1 f5f6afa
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 13:22:56 2015 +0200

      Merge tag 'fixes-for-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-linus

      Felipe writes:

      usb: fixes for v4.3-rc4

      A memory leak fix for the BCD UDC driver, a build
      warning fix on Renesas and a new device ID for R-Car H3.

      Nothing major.

      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 90b3b37383fd083481655d5529686ca4eda4da2b
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 13:46:19 2015 +0200

      EDAC, ppc4xx_edac: Fix module autoload for OF platform driver

      This platform driver has an OF device ID table but the OF module alias
      information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Reviewed-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150917114619.GA13145@xxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit eda7d0f38aaf50dbb2a2de15e8db386c4f6f65fc
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Sat Aug 8 22:16:42 2015 +0300

      iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()

      "num_read" is in byte units but we are write u16s so we end up write
      twice as much as intended.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Cc: <Stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit 61fd56309165d4790f99462d893b099f0b07312a
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Wed Sep 2 21:02:58 2015 +0200

      iio: st_accel: fix interrupt handling on LIS3LV02

      This accelerometer accidentally either emits a DRDY signal or an
      IRQ signal. Accidentally I activated the IRQ signal as I thought
      it was analogous to the interrupt generator on other ST
      accelerometers. This was wrong. After this patch generic_buffer
      gives a nice stream of accelerometer readings.

      Fixes: 3acddf74f807778f "iio: st-sensors: add support for lis3lv02d 
accelerometer"
      Cc: Denis CIOCCA <denis.ciocca@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: <Stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit 7cc97d77ee8a90a6389b96a62472cddc02475ffc
  Author: Adam YH Lee <adam.yh.lee@xxxxxxxxx>
  Date:   Tue Aug 4 11:15:48 2015 -0700

      iio: adc: twl4030: Fix ADC[3:6] readings

      MADC[3:6] reads incorrect values without these two following changes:

      - enable the 3v1 bias regulator for ADC[3:6]
      - configure ADC[3:6] lines as input, not as USB

      Signed-off-by: Adam YH Lee <adam.yh.lee@xxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit e8ff581f7ac2bc3b8886094b7ca635dcc4d1b0e9
  Author: John Flatness <john@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 17:07:49 2015 -0400

      ALSA: hda - Apply SPDIF pin ctl to MacBookPro 12,1

      The MacBookPro 12,1 has the same setup as the 11 for controlling the
      status of the optical audio light. Simply apply the existing workaround
      to the subsystem ID for the 12,1.

      [sorted the fixup entry by tiwai]

      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=105401
      Signed-off-by: John Flatness <john@xxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit d05ea7da0e8f6df3c62cfee75538f347cb3d89ef
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:09:54 2015 -0700

      ALSA: hda: Add dock support for ThinkPad T550

      Much like all the other Lenovo laptops, add a quirk to make
      sound work with docking.

      Reported-and-tested-by: lacknerflo@xxxxxxxxx
      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 54328e64047a54b8fc2362c2e1f0fa16c90f739f
  Author: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
  Date:   Fri Oct 2 11:44:30 2015 -0500

      rtlwifi: rtl8821ae: Fix system lockups on boot

      In commit 1277fa2ab2f9 ("rtlwifi: Remove the clear interrupt routine from 
all
      drivers"), the code that cleared all interrupt enable bits before setting 
them
      was removed for all PCI drivers. This fixed an issue that caused TX to be
      blocked for 3-5 seconds. On some RTL8821AE units, this change causes soft
      lockups to occur on boot. For that reason, the portion of the earlier 
commit
      that applied to rtl8821ae is reverted. Kernels 4.1 and newer are affected.

      See http://marc.info/?l=linux-wireless&m=144373370103285&w=2 and
      https://bugzilla.opensuse.org/show_bug.cgi?id=944978 for two cases where
      this regression affected user systems. Note that this bug does not appear 
on
      any of the developer's setups. For those users whose systems are affected
      by the TX blockage, but do not lock up on boot, a module parameter is 
added
      to disable the interrupt clear

      Fixes: 1277fa2ab2f9 ("rtlwifi: Remove the clear interrupt routine from 
all drivers")
      Signed-off-by: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
      Cc: Stable <stable@xxxxxxxxxxxxxxx> [V4.1+]
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit e3b0ac1b7a8a590440a2030e7d10d48c59ab8a2a
  Merge: c2365b9 19afd10
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Oct 3 08:20:14 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

       - Do event name substring search as last resort in 'perf list'.
         (Arnaldo Carvalho de Melo)

         E.g.:

          # perf list clock

          List of pre-defined events (to be used in -e):

           cpu-clock                                          [Software event]
           task-clock                                         [Software event]

           uncore_cbox_0/clockticks/                          [Kernel PMU event]
           uncore_cbox_1/clockticks/                          [Kernel PMU event]

           kvm:kvm_pvclock_update                             [Tracepoint event]
           kvm:kvm_update_master_clock                        [Tracepoint event]
           power:clock_disable                                [Tracepoint event]
           power:clock_enable                                 [Tracepoint event]
           power:clock_set_rate                               [Tracepoint event]
           syscalls:sys_enter_clock_adjtime                   [Tracepoint event]
           syscalls:sys_enter_clock_getres                    [Tracepoint event]
           syscalls:sys_enter_clock_gettime                   [Tracepoint event]
           syscalls:sys_enter_clock_nanosleep                 [Tracepoint event]
           syscalls:sys_enter_clock_settime                   [Tracepoint event]
           syscalls:sys_exit_clock_adjtime                    [Tracepoint event]
           syscalls:sys_exit_clock_getres                     [Tracepoint event]
           syscalls:sys_exit_clock_gettime                    [Tracepoint event]
           syscalls:sys_exit_clock_nanosleep                  [Tracepoint event]
           syscalls:sys_exit_clock_settime                    [Tracepoint event]

       - Reduce min 'perf stat --interval-print/-I' to 10ms. (Kan Liang)

         perf stat --interval in action:

         # perf stat -e cycles -I 50 -a usleep $((200 * 1000))
         print interval < 100ms. The overhead percentage could be high in some 
cases. Please proceed with caution.
         #   time                    counts unit events
            0.050233636         48,240,396      cycles
            0.100557098         35,492,594      cycles
            0.150804687         39,295,112      cycles
            0.201032269         33,101,961      cycles
            0.201980732            786,379      cycles
        #

       - Allow for max_stack greater than PERF_MAX_STACK_DEPTH, as when
         synthesizing callchains from Intel PT data. (Adrian Hunter)

       - Allow probing on kmodules without DWARF. (Masami Hiramatsu)

       - Fix a segfault when processing a perf.data file with callchains using
         "perf report --call-graph none". (Namhyung Kim)

       - Fix unresolved COMMs in 'perf top' when -s comm is used. (Namhyung Kim)

       - Register idle thread in 'perf top'. (Namhyung Kim)

       - Change 'record.samples' type to unsigned long long, fixing output of
         number of samples in 32-bit architectures. (Yang Shi)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 21d19f87d483fbac66ca24863b8c8d52a7ab539d
  Author: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 05:02:28 2015 +0200

      NFC: nci: Use __nci_request for exported routines

      Since we do not know in which context drivers will call these
      routines, they should use the unlocked version of nci_request,
      i.e. __nci_request.
      It is up to drivers to know/decide if they need to take the
      req_lock mutex before calling those routines. When being called
      from the NCI setup routine there is no need to do so as ops->setup
      is called under req_lock.

      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 69c308e2bcc303ab3eebb9b554de598dd4597b75
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 21:07:18 2015 +0900

      pinctrl: pinconf-generic: add "input-schmitt" DT property

      PIN_CONFIG_INPUT_SCHMITT is defined in enum_pin_config_param,
      but the corresponding DT property is missing.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 3c4b23dd71ea6f68be9731b68877fbc05f4fb693
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 21:07:17 2015 +0900

      pinctrl: pinconf-generic: sort pin configuration params alphabetically

      Currently, the dt_params array in drivers/pinctrl/pinconf-generic.c
      is not sorted in the same order as the enum pin_config_param in
      include/linux/pinctrl/pinconf-generic.h.

      Sort enum pin_config_param, conf_items, dt_params, alphabetically
      for consistency.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 2db8aba860c70478f6af18c410a3e513a2d2f541
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Tue Sep 29 12:55:44 2015 +0200

      gpio: pca953x: Add TI TCA9539 support

      The TCA9539 is almost identical to the PCA9555 and software-compatible
      with this driver. It exposes 16 general purpose I/O pins in two 8-bit
      configurations.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 7474f23dd05713dacc5f22d309913c96bce1c92b
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Sep 26 22:18:20 2015 +0200

      gpio: max730x: eliminate double free

      The function __max730x_remove is called from the remove functions of
      drivers/gpio/gpio-max7300.c and drivers/gpio/gpio-max7301.c.  In both
      cases, the probe function allocates ts using devm_kzalloc.  Explicitly
      freeing such a value with kfree will cause a double free.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Reviewed-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 978ab6a009e6691375a0b6f8a44ebbb471a64b6d
  Merge: 5634347 62d7846
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 17:53:25 2015 -0400

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

      Pull input layer fixes from Dmitry Torokhov:
       "Fixes for two recent regressions (in Synaptics PS/2 and uinput
        drivers) and some more driver fixups"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
        Revert "Input: synaptics - fix handling of disabling gesture mode"
        Input: psmouse - fix data race in __ps2_command
        Input: elan_i2c - add all valid ic type for i2c/smbus
        Input: zhenhua - ensure we have BITREVERSE
        Input: omap4-keypad - fix memory leak
        Input: serio - fix blocking of parport
        Input: uinput - fix crash when using ABS events
        Input: elan_i2c - expand maximum product_id form 0xFF to 0xFFFF
        Input: elan_i2c - add ic type 0x03
        Input: elan_i2c - don't require known iap version
        Input: imx6ul_tsc - fix controller name
        Input: imx6ul_tsc - use the preferred method for kzalloc()
        Input: imx6ul_tsc - check for negative return value
        Input: imx6ul_tsc - propagate the errors
        Input: walkera0701 - fix abs() calculations on 64 bit values
        Input: mms114 - remove unneded semicolons
        Input: pm8941-pwrkey - remove unneded semicolon
        Input: fix typo in MT documentation
        Input: cyapa - fix address of Gen3 devices in device tree documentation

  commit 89092fb0701d3b4070ade6d0aa04640720f52fbd
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 28 11:41:13 2015 +0200

      pinctrl: at91-pio4: irq argument as been removed from irq flow handlers

      Irq argument as been removed from irq flow handlers so use the irq
      descriptor to retrieve data we need.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 3fd550c6b3cb364a0d3f0e4abf64618b998dc6b4
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 28 11:41:12 2015 +0200

      pinctrl: at91-pio4: use irq_set_handler_locked

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a169400b506e98bb90a92c7211f4bed751341750
  Author: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 11:11:09 2015 -0500

      pinctrl: freescale: imx: imx7d iomuxc-lpsr devicetree bindings

      Add iomuxc-lpsr devicetree bindings documentation
      Provide documentation context as well an example on
      pheriperals that could use pad from either iomuxc controller
      supported by iMX7D SoC

      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 978fd1d7265aee0d8be501f416017d029e6977a7
  Author: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 11:11:08 2015 -0500

      pinctrl: freescale: imx7d: support iomux lpsr controller

      iMX7D has two iomuxc controllers, iomuxc controller similar as
      previous iMX SoC generation and iomuxc-lpsr which provides low
      power state rentetion capabilities on gpios that are part of
      iomuxc-lpsr

      Add iomuxc-lpsr gpio group id's

      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 26d8cde5260b5d0236d50501b6ef1a444774b33b
  Author: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 16:06:00 2015 -0500

      pinctrl: freescale: imx: add shared input select reg support

      - Add shared input select register support
      - imx7d has two iomux controllers iomuxc and iomuxc-lpsr
        which share select_input register for daisy chain settings

      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e7b37a522aa92da5f47106aa07b6c1fc58bfd922
  Author: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 16:05:59 2015 -0500

      pinctrl: freescale: imx: allow mux_reg offset zero

      Allow mux_reg offset zero to be a valid pin_id, on imx7d
      mux_conf reg offset is zero for iomuxc-lspr controller

      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aa6555622cdf443f0b001352fdc3afb6e7bce20d
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Fri Oct 2 10:47:29 2015 +0300

      nl802154: Missing return in nl802154_add_llsec_key()

      There was a missing return here so it meant that often
      ieee802154_llsec_parse_key_id() was not called.

      Fixes: a26c5fd7622d ('nl802154: add support for security layer')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 67dfae0cd72fec5cd158b6e5fb1647b7dbe0834c
  Author: John Stultz <john.stultz@xxxxxxxxxx>
  Date:   Mon Sep 14 18:05:20 2015 -0700

      clocksource: Fix abs() usage w/ 64bit values

      This patch fixes one cases where abs() was being used with 64-bit
      nanosecond values, where the result may be capped at 32-bits.

      This potentially could cause watchdog false negatives on 32-bit
      systems, so this patch addresses the issue by using abs64().

      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Prarit Bhargava <prarit@xxxxxxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442279124-7309-2-git-send-email-john.stultz@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2b02ec79004388a8c65e227bc289ed891b5ac8c6
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 2 16:12:07 2015 -0400

      drm/radeon: add quirk for ASUS R7 370

      Bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=92260

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit fa022a9b65d2886486a022fd66b20c823cd76ad9
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Wed Sep 30 17:05:40 2015 -0400

      drm/amdgpu: add pm sysfs files late

      They were added relatively early in the driver init process
      which meant that in some cases the driver was not finished
      initializing before external tools tried to use them which
      could result in a crash depending on the timing.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 51a4726b04e880fdd9b4e0e58b13f70b0a68a7f5
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Wed Sep 30 16:45:52 2015 -0400

      drm/radeon: add pm sysfs files late

      They were added relatively early in the driver init process
      which meant that in some cases the driver was not finished
      initializing before external tools tried to use them which
      could result in a crash depending on the timing.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 450fa54cfd66e3dda6eda26256637ee8928af12a
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Fri Sep 25 12:28:03 2015 -0700

      gpio: omap: convert to use generic irq handler

      This patch converts TI OMAP GPIO driver to use generic irq handler
      instead of chained IRQ handler. This way OMAP GPIO driver will be
      compatible with RT kernel where it will be forced thread IRQ handler
      while in non-RT kernel it still will be executed in HW IRQ context.
      As part of this change the IRQ wakeup configuration is applied to
      GPIO Bank IRQ as it now will be under control of IRQ PM Core during
      suspend.

      There are also additional benefits:
       - on-RT kernel there will be no complains any more about PM runtime usage
         in atomic context  "BUG: sleeping function called from invalid 
context";
       - GPIO bank IRQs will appear in /proc/interrupts and its usage statistic
          will be  visible;
       - GPIO bank IRQs could be configured through IRQ proc_fs interface and,
         as result, could be a part of IRQ balancing process if needed;
       - GPIO bank IRQs will be under control of IRQ PM Core during
         suspend to RAM.

      Disadvantage:
       - additional runtime overhed as call chain till
         omap_gpio_irq_handler() will be longer now
       - necessity to use wa_lock in omap_gpio_irq_handler() to W/A warning
         in handle_irq_event_percpu()
         WARNING: CPU: 1 PID: 35 at kernel/irq/handle.c:149 
handle_irq_event_percpu+0x51c/0x638()

      This patch doesn't fully follows recommendations provided by Sebastian
      Andrzej Siewior [1], because It's required to go through and check all
      GPIO IRQ pin states as fast as possible and pass control to 
handle_level_irq
      or handle_edge_irq. handle_level_irq or handle_edge_irq will perform 
actions
      specific for IRQ triggering type and wakeup corresponding registered
      threaded IRQ handler (at least it's expected to be threaded).
      IRQs can be lost if handle_nested_irq() will be used, because excecution
      time of some pin specific GPIO IRQ handler can be very significant and
      require accessing ext. devices (I2C).

      Idea of such kind reworking was also discussed in [2].

      [1] http://www.spinics.net/lists/linux-omap/msg120665.html
      [2] http://www.spinics.net/lists/linux-omap/msg119516.html

      Tested-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: Austin Schuh <austin@xxxxxxxxxxxxxxxx>
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Acked-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 19afd10410957b1c808c2c49a88e6dd8b23aa894
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Oct 2 05:04:34 2015 -0400

      perf stat: Reduce min --interval-print to 10ms

      The --interval-print parameter was limited to 100ms. However, for
      example, 10ms is required to do sophisticated bandwidth analysis using
      uncore events.

      The test shows that the overhead of the system-wide uncore monitoring
      with 10ms interval is only ~2%. So this patch reduces the minimal
      interval-print allowd to 10ms.

      But 10ms may not work well for all cases. For example, when the
      cpus/threads number is very large, for system-wide core event monitoring
      the overhead could be high.

      To handle this issue, a warning will be displayed when the
      interval-print is set between 10ms to 100ms. So users can make a
      decision according to their specific cases.

       # perf stat -e uncore_imc_1/cas_count_read/ -a --interval-print 10 -- 
sleep 1

       print interval < 100ms. The overhead percentage could be high in some
       cases. Please proceed with caution.
       #           time             counts unit events
            0.010200451               0.10 MiB  uncore_imc_1/cas_count_read/
            0.020475117               0.02 MiB  uncore_imc_1/cas_count_read/
            0.030692800               0.01 MiB  uncore_imc_1/cas_count_read/
            0.040948161               0.02 MiB  uncore_imc_1/cas_count_read/
            0.051159564               0.00 MiB  uncore_imc_1/cas_count_read/

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443776674-42511-1-git-send-email-kan.liang@xxxxxxxxx
      [ Added warning about overhead when using sub 100ms intervals to the man 
page ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8dbb09570d16929fefd492410d60a918bc18ad5b
  Merge: 5e99b53 72c0217
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:49:33 2015 -0400

      Merge tag 'nfs-rdma-for-4.3-2' of 
git://git.linux-nfs.org/projects/anna/nfs-rdma

      NFS: NFSoRDMA bugfix

      Fixes a use-after-free bug.

      Signed-off-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>

  commit 5e99b532bb95f8e6bf39f4500f0caef070bac16d
  Author: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 13:14:37 2015 -0400

      nfs4: reset states to use open_stateid when returning delegation 
voluntarily

      When the client goes to return a delegation, it should always update any
      nfs4_state currently set up to use that delegation stateid to instead
      use the open stateid. It already does do this in some cases,
      particularly in the state recovery code, but not currently when the
      delegation is voluntarily returned (e.g. in advance of a RENAME).  This
      causes the client to try to continue using the delegation stateid after
      the DELEGRETURN, e.g. in LAYOUTGET.

      Set the nfs4_state back to using the open stateid in
      nfs4_open_delegation_recall, just before clearing the
      NFS_DELEGATED_STATE bit.

      Signed-off-by: Jeff Layton <jeff.layton@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit e92c1e0d40c50472f80820bd829645ce9fefd6c1
  Author: Benjamin Coddington <bcodding@xxxxxxxxxx>
  Date:   Thu Oct 1 09:17:33 2015 -0400

      NFSv4: Fix a nograce recovery hang

      Since commit 5cae02f42793130e1387f4ec09c4d07056ce9fa5 an OPEN_CONFIRM 
should
      have a privileged sequence in the recovery case to allow nograce recovery 
to
      proceed for NFSv4.0.

      Signed-off-by: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 72d79ff83c34d430a9f7f72c45717905762ef4d9
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:44:54 2015 -0400

      NFSv4.1: nfs4_opendata_check_deleg needs to handle 
NFS4_OPEN_CLAIM_DELEG_CUR_FH

      We need to warn against broken NFSv4.1 servers that try to hand out
      delegations in response to NFS4_OPEN_CLAIM_DELEG_CUR_FH.

      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 4a0954ef347de7409ddf8f8153d893827d3feba8
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:11:16 2015 -0400

      NFSv4: Don't try to reclaim unused state owners

      Currently, we don't test if the state owner is in use before we try to
      recover it. The problem is that if the refcount is zero, then the
      state owner will be waiting on the lru list for garbage collection.
      The expectation in that case is that if you bump the refcount, then
      you must also remove the state owner from the lru list. Otherwise
      the call to nfs4_put_state_owner will corrupt that list by trying
      to add our state owner a second time.

      Avoid the whole problem by just skipping state owners that hold no
      state.

      Reported-by: Andrew W Elble <aweits@xxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 8fa4592a14ebb3c22a21d846d1e4f65dab7d1a7c
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 18:38:27 2015 -0400

      NFS: Fix a write performance regression

      If all other conditions in nfs_can_extend_write() are met, and there
      are no locks, then we should be able to assume close-to-open semantics
      and the ability to extend our write to cover the whole page.

      With this patch, the xfstests generic/074 test completes in 242s instead
      of >1400s on my test rig.

      Fixes: bd61e0a9c852 ("locks: convert posix locks to file_lock_context")
      Cc: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 40f90271a835478e5910dc84f32b8e25885419a4
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 11:36:38 2015 -0400

      NFS: Fix up page writeback accounting

      Currently, we are crediting all the calls to nfs_writepages_callback()
      (i.e. the nfs_writepages() callback) to nfs_writepage(). Aside from
      being inconsistent with the behaviour of the equivalent readpage/readpages
      accounting, this also means that we cannot distinguish between bulk writes
      and single page writebacks (which confuses the 'nfsiostat -p' tool).

      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 9f065194e2a505bb6fd23946b410a0036e9de2ca
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Tue Sep 29 14:49:43 2015 -0700

      perf record: Change 'record.samples' type to unsigned long long

      When run "perf record -e", the number of samples showed up is wrong on 
some
      32 bit systems, i.e. powerpc and arm.

      For example, run the below commands on 32 bit powerpc:

        perf probe -x /lib/libc.so.6 malloc
        perf record -e probe_libc:malloc -a ls perf.data
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.036 MB perf.data 
(13829241621624967218 samples) ]

      Actually, "perf script" just shows 21 samples. The number of samples is 
also
      absurd since samples is long type, but it is printed as PRIu64.

      Build test ran on x86-64, x86, aarch64, arm, mips, ppc and ppc64.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Cc: linaro-kernel@xxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443563383-4064-1-git-send-email-yang.shi@xxxxxxxxxx
      [ Bumped the 'hits' var used together with record.samples to 'unsigned 
long long' too ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1a8ac29cbffc261f6d7c92e573878110a7dcbd94
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Fri Oct 2 21:58:32 2015 +0900

      perf probe: Allow probing on kmodules without dwarf

      Allow probing on kernel modules when 'perf' is built without debuginfo
      support.

      Currently perf-probe --module requires linking with libdw, but this
      doesn't make sense.

      E.g.
        ----
        # make NO_DWARF=1
        # ./perf probe -m pcspkr pcspkr_event%return
          Error: unknown switch `m'
        ----

      With this patch
        ----
        # ./perf probe -m pcspkr pcspkr_event%return
        Added new event:
          probe:pcspkr_event   (on pcspkr_event%return in pcspkr)

        You can now use it in all perf tools, such as:

                perf record -e probe:pcspkr_event -aR sleep 1
        ----

      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20151002125832.18617.78721.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5634347dee31373a8faf084f4cdbf6d5ea0b03a4
  Merge: b55a97e ee556d0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 14:54:16 2015 -0400

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Catalin Marinas:

       - Fix for transparent huge page change_protection() logic which was
         inadvertently changing a huge pmd page into a pmd table entry.

       - Function graph tracer panic fix caused by the return_to_handler code
         corrupting the multi-regs function return value (composite types).

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: ftrace: fix function_graph tracer panic
        arm64: Fix THP protection change logic

  commit b55a97e759c9e9efdce0470f520026383c514a13
  Merge: 83dc311 95bc06e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 14:51:46 2015 -0400

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k

      Pull m68k updates from Geert Uytterhoeven:
       "Summary:
         - Fix for accidental modification of arguments of syscall functions
         - Wire up new syscalls
         - Update defconfigs"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k:
        m68k/defconfig: Update defconfigs for v4.3-rc1
        m68k: Define asmlinkage_protect
        m68k: Wire up membarrier
        m68k: Wire up userfaultfd
        m68k: Wire up direct socket calls

  commit 791c76d58465a248cbd1ee422c8075cb90fa615f
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 16:44:06 2015 +0100

      irqchip/gic-v3-its: Count additional LPIs for the aliased devices

      When configuring the interrupt mapping for a new device, we
      iterate over all the possible aliases to account for their
      maximum MSI allocation. This was introduced by e8137f4f5088
      ("irqchip: gicv3-its: Iterate over PCI aliases to generate ITS 
configuration").

      Turns out that the code doing that is a bit braindead, and repeatedly
      accounts for the same device over and over.

      Fix this by counting the actual alias that is passed to us by the
      core code.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Alex Shi <alex.shi@xxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: David Daney <ddaney.cavm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443800646-8074-3-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c8415b9470727f70afce8607d4fe521789aa6c1c
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 16:44:05 2015 +0100

      irqchip/gic-v3-its: Silence warning when its_lpi_alloc_chunks gets inlined

      More agressive inlining in recent versions of GCC have uncovered
      a new set of warnings:

       drivers/irqchip/irq-gic-v3-its.c: In function its_msi_prepare:
        drivers/irqchip/irq-gic-v3-its.c:1148:26: warning: lpi_base may be used
          uninitialized in this function [-Wmaybe-uninitialized]
           dev->event_map.lpi_base = lpi_base;
                                ^
       drivers/irqchip/irq-gic-v3-its.c:1116:6: note: lpi_base was declared here
        int lpi_base;
              ^
       drivers/irqchip/irq-gic-v3-its.c:1149:25: warning: nr_lpis may be used
        uninitialized in this function [-Wmaybe-uninitialized]
         dev->event_map.nr_lpis = nr_lpis;
                                 ^
       drivers/irqchip/irq-gic-v3-its.c:1117:6: note: nr_lpis was declared here
        int nr_lpis;
              ^
      The warning is fairly benign (there is no code path that could
      actually use uninitialized variables), but let's silence it anyway
      by zeroing the variables on the error path.

      Reported-by: Alex Shi <alex.shi@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: David Daney <ddaney.cavm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443800646-8074-2-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 83dc311ce0b430ee8e37e62976e6753bfd022004
  Merge: 27728bf 7b09a1b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 14:46:15 2015 -0400

      Merge tag 'dmaengine-fix-4.3-rc4' of 
git://git.infradead.org/users/vkoul/slave-dma

      Pull dmaengine fixes from Vinod Koul:
       "This contains fixes spread throughout the drivers, and also fixes one
        more instance of privatecnt in dmaengine.

        Driver fixes summary:
         - bunch of pxa_dma fixes for reuse of descriptor issue, residue and
           no-requestor
         - odd fixes in xgene, idma, sun4i and zxdma
         - at_xdmac fixes for cleaning descriptor and block addr mode"

      * tag 'dmaengine-fix-4.3-rc4' of 
git://git.infradead.org/users/vkoul/slave-dma:
        dmaengine: pxa_dma: fix residue corner case
        dmaengine: pxa_dma: fix the no-requestor case
        dmaengine: zxdma: Fix off-by-one for testing valid pchan request
        dmaengine: at_xdmac: clean used descriptor
        dmaengine: at_xdmac: change block increment addressing mode
        dmaengine: dw: properly read DWC_PARAMS register
        dmaengine: xgene-dma: Fix overwritting DMA tx ring
        dmaengine: fix balance of privatecnt
        dmaengine: sun4i: fix unsafe list iteration
        dmaengine: idma64: improve residue estimation
        dmaengine: xgene-dma: fix handling xgene_dma_get_ring_size result
        dmaengine: pxa_dma: fix initial list move

  commit 27728bf04b99a0abc5c27343c06e18379f57c726
  Merge: 36f8daf 0bf6cd5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 14:40:57 2015 -0400

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull block fixes from Jens Axboe:
       "Another week, another round of fixes.

        These have been brewing for a bit and in various iterations, but I
        feel pretty comfortable about the quality of them.  They fix real
        issues.  The pull request is mostly blk-mq related, and the only one
        not fixing a real bug, is the tag iterator abstraction from Christoph.
        But it's pretty trivial, and we'll need it for another fix soon.

        Apart from the blk-mq fixes, there's an NVMe affinity fix from Keith,
        and a single fix for xen-blkback from Roger fixing failure to free
        requests on disconnect"

      * 'for-linus' of git://git.kernel.dk/linux-block:
        blk-mq: factor out a helper to iterate all tags for a request_queue
        blk-mq: fix racy updates of rq->errors
        blk-mq: fix deadlock when reading cpu_list
        blk-mq: avoid inserting requests before establishing new mapping
        blk-mq: fix q->mq_usage_counter access race
        blk-mq: Fix use after of free q->mq_map
        blk-mq: fix sysfs registration/unregistration race
        blk-mq: avoid setting hctx->tags->cpumask before allocation
        NVMe: Set affinity after allocating request queues
        xen/blkback: free requests on disconnection

  commit fa52ceabc2a3e70431a82bca2bc547a15eaf19df
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Oct 2 15:28:16 2015 -0300

      perf list: Honour 'event_glob' whem printing selectable PMUs

      Some PMUs, like the 'intel_bts' one can be used as an event name, i.e.:

        $ perf record -e intel_bts:// usleep 1

      Is a valid event name.

      But the code printing such PMUs was not honouring the 'event_glob'
      parameter, so the following line was always appearing:

        $ intel_bts//                                        [Kernel PMU event]

      Fix it:

        $ [acme@felicio linux]$ perf list data

        List of pre-defined events (to be used in -e):

          uncore_imc/data_reads/                             [Kernel PMU event]
          uncore_imc/data_writes/                            [Kernel PMU event]

        $

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ajb71858n7q7ao77b8pyy74w@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9f30a04d768f64280dc0c40b730746e82f298d88
  Merge: 9e294bf 7aba4f5
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:15:13 2015 -0700

      Merge branch 'for-4.3-rc/ti-clk-fixes' of 
https://github.com/t-kristo/linux-pm into clk-fixes

      Pull fixes from Tero Kristo:

      "A few TI clock driver fixes to pull against 4.3-rc"

      * 'for-4.3-rc/ti-clk-fixes' of https://github.com/t-kristo/linux-pm: (3 
commits)
        clk: ti: dflt: fix enable_reg validity check
        clk: ti: fix dual-registration of uart4_ick
        clk: ti: clk-7xx: Remove hardwired ABE clock configuration

  commit 62d78461447198b49383f20301aaa15fe97dfa4f
  Author: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
  Date:   Fri Oct 2 10:31:32 2015 -0700

      Revert "Input: synaptics - fix handling of disabling gesture mode"

      This reverts commit e51e38494a8ecc18650efb0c840600637891de2c: we
      actually do want the device to work in extended W mode, as this is the
      mode that allows us receiving multiple contact information.

      Cc: stable@xxxxxxxxxxxxxxx

  commit 66803dd9198cb57a4b7ed4a6846a63ab1d59a2e0
  Author: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 17:40:42 2015 +1300

      MIPS: Octeon: Fix kernel panic on startup from memory corruption

      During development it was found that a number of builds would panic
      during the kernel init process, more specifically in 'delayed_fput()'.
      The panic showed the kernel trying to access a memory address of
      '0xb7fdc00' while traversing the 'delayed_fput_list' structure.
      Comparing this memory address to the value of the pointer used on
      builds that did not panic confirmed that the pointer on crashing
      builds must have been corrupted at some stage earlier in the init
      process.

      By traversing the list earlier and earlier in the code it was found
      that 'plat_mem_setup()' was responsible for corrupting the list.
      Specifically the line:

          memory = cvmx_bootmem_phy_alloc(mem_alloc_size,
                        __pa_symbol(&__init_end), -1,
                        0x100000,
                        CVMX_BOOTMEM_FLAG_NO_LOCKING);

      Which would eventually call:

          cvmx_bootmem_phy_set_size(new_ent_addr,
                cvmx_bootmem_phy_get_size
                (ent_addr) -
                (desired_min_addr -
                        ent_addr));

      Where 'new_ent_addr'=0x4800000 (the address of 'delayed_fput_list')
      and the second argument (size)=0xb7fdc00 (the address causing the
      kernel panic). The job of this part of 'plat_mem_setup()' is to
      allocate chunks of memory for the kernel to use. At the start of
      each chunk of memory the size of the chunk is written, hence the
      value 0xb7fdc00 is written onto memory at 0x4800000, therefore the
      kernel panics when it goes back to access 'delayed_fput_list' later
      on in the initialisation process.

      On builds that were not crashing it was found that the compiler had
      placed 'delayed_fput_list' at 0x4800008, meaning it wasn't corrupted
      (but something else in memory was overwritten).

      As can be seen in the first function call above the code begins to
      allocate chunks of memory beginning from the symbol '__init_end'.
      The MIPS linker script (vmlinux.lds.S) however defines the .bss
      section to begin after '__init_end'. Therefore memory within the
      .bss section is allocated to the kernel to use (System.map shows
      'delayed_fput_list' and other kernel structures to be in .bss).

      To stop the kernel panic (and the .bss section being corrupted)
      memory should begin being allocated from the symbol '_end'.

      Signed-off-by: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
      Acked-by: David Daney <david.daney@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: aleksey.makarov@xxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11251/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 085c2f25d36ef4a69bb1dab933daee0692426f15
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Mon Sep 21 10:07:42 2015 -0700

      MIPS: Fix R2300 FP context switch handling

      Commit 1a3d59579b9f ("MIPS: Tidy up FPU context switching") removed FP
      context saving from the asm-written resume function in favour of reusing
      existing code to perform the same task. However it only removed the FP
      context saving code from the r4k_switch.S implementation of resume.
      Remove it from the r2300_switch.S implementation too in order to prevent
      attempting to save the FP context twice, which would likely lead to an
      exception from the second save because the FPU had already been disabled
      by the first save.

      This patch has only been build tested, using rbtx49xx_defconfig.

      Fixes: 1a3d59579b9f ("MIPS: Tidy up FPU context switching")
      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Manuel Lauss <manuel.lauss@xxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11167/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 0fa24340f7c88d2814547d8d24d5e3a1803009cc
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Mon Sep 21 10:07:41 2015 -0700

      MIPS: Fix octeon FP context switch handling

      Commit 1a3d59579b9f ("MIPS: Tidy up FPU context switching") removed FP
      context saving from the asm-written resume function in favour of reusing
      existing code to perform the same task. However it only removed the FP
      context saving code from the r4k_switch.S implementation of resume.
      Octeon uses its own implementation in octeon_switch.S, so remove FP
      context saving there too in order to prevent attempting to save context
      twice. That formerly led to an exception from the second save as follows
      because the FPU had already been disabled by the first save:

          do_cpu invoked from kernel context![#1]:
          CPU: 0 PID: 2 Comm: kthreadd Not tainted 4.3.0-rc2-dirty #2
          task: 800000041f84a008 ti: 800000041f864000 task.ti: 800000041f864000
          $ 0   : 0000000000000000 0000000010008ce1 0000000000100000 
ffffffffbfffffff
          $ 4   : 800000041f84a008 800000041f84ac08 800000041f84c000 
0000000000000004
          $ 8   : 0000000000000001 0000000000000000 0000000000000000 
0000000000000001
          $12   : 0000000010008ce3 0000000000119c60 0000000000000036 
800000041f864000
          $16   : 800000041f84ac08 800000000792ce80 800000041f84a008 
ffffffff81758b00
          $20   : 0000000000000000 ffffffff8175ae50 0000000000000000 
ffffffff8176c740
          $24   : 0000000000000006 ffffffff81170300
          $28   : 800000041f864000 800000041f867d90 0000000000000000 
ffffffff815f3fa0
          Hi    : 0000000000fa8257
          Lo    : ffffffffe15cfc00
          epc   : ffffffff8112821c resume+0x9c/0x200
          ra    : ffffffff815f3fa0 __schedule+0x3f0/0x7d8
          Status: 10008ce2        KX SX UX KERNEL EXL
          Cause : 1080002c (ExcCode 0b)
          PrId  : 000d0601 (Cavium Octeon+)
          Modules linked in:
          Process kthreadd (pid: 2, threadinfo=800000041f864000, 
task=800000041f84a008, tls=0000000000000000)
          Stack : ffffffff81604218 ffffffff815f7e08 800000041f84a008 
ffffffff811681b0
                    800000041f84a008 ffffffff817e9878 0000000000000000 
ffffffff81770000
                    ffffffff81768340 ffffffff81161398 0000000000000001 
0000000000000000
                    0000000000000000 ffffffff815f4424 0000000000000000 
ffffffff81161d68
                    ffffffff81161be8 0000000000000000 0000000000000000 
0000000000000000
                    0000000000000000 0000000000000000 0000000000000000 
ffffffff8111e16c
                    0000000000000000 0000000000000000 0000000000000000 
0000000000000000
                    0000000000000000 0000000000000000 0000000000000000 
0000000000000000
                    0000000000000000 0000000000000000 0000000000000000 
0000000000000000
                    0000000000000000 0000000000000000 0000000000000000 
0000000000000000
                    ...
          Call Trace:
          [<ffffffff8112821c>] resume+0x9c/0x200
          [<ffffffff815f3fa0>] __schedule+0x3f0/0x7d8
          [<ffffffff815f4424>] schedule+0x34/0x98
          [<ffffffff81161d68>] kthreadd+0x180/0x198
          [<ffffffff8111e16c>] ret_from_kernel_thread+0x14/0x1c

      Tested using cavium_octeon_defconfig on an EdgeRouter Lite.

      Fixes: 1a3d59579b9f ("MIPS: Tidy up FPU context switching")
      Reported-by: Aaro Koskinen <aaro.koskinen@xxxxxxxxx>
      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Aleksey Makarov <aleksey.makarov@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Chandrakala Chavva <cchavva@xxxxxxxxxxxxxxxxxx>
      Cc: David Daney <david.daney@xxxxxxxxxx>
      Cc: Leonid Rosenboim <lrosenboim@xxxxxxxxxxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11166/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 924eb475126fd6bc23c475ac742a69fc466c0b75
  Author: yitian <yitian.bu@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 22:43:17 2015 +0800

      ASoC: dwc: fix dma stop transferring issue

      Designware I2S uses tx empty and rx available signals as the DMA
      handshaking signals. during music playing, if XRUN occurs,
      i2s_stop() function will be executed and both tx and rx irq are
      masked, when music continues to be played, i2s_start() is executed
      but both tx and rx irq are not unmasked which cause I2S stop
      sending DMA handshaking signal to DMA controller, and it finally
      causes music playing will be stopped once XRUN occurs for the first
      time.

      [On list discussion suggests this may be partly a race condition on slow
      systems -- broonie]

      Signed-off-by: Yitian Bu <yitian.bu@xxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 042745ee53a0a7c1f5aff191a4a24213c6dcfb52
  Author: Mikulas Patocka <mpatocka@xxxxxxxxxx>
  Date:   Fri Oct 2 11:17:37 2015 -0400

      dm raid: fix round up of default region size

      Commit 3a0f9aaee028 ("dm raid: round region_size to power of two")
      intended to make sure that the default region size is a power of two.
      However, the logic in that commit is incorrect and sets the variable
      region_size to 0 or 1, depending on whether min_region_size is a power
      of two.

      Fix this logic, using roundup_pow_of_two(), so that region_size is
      properly rounded up to the next power of two.

      Signed-off-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Fixes: 3a0f9aaee028 ("dm raid: round region_size to power of two")
      Cc: stable@xxxxxxxxxxxxxxx # v3.8+
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit f6d3125fa3c2f55ddf7cf69365c41089de6cfae6
  Merge: 2dc6a03 36f8daf
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 07:21:25 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Conflicts:
        net/dsa/slave.c

      net/dsa/slave.c simply had overlapping changes.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d61e87ac53292a3138b4354b687558973686b6ca
  Merge: 9ffecb1 6d3cbfa
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Oct 2 15:23:42 2015 +0200

      Merge tag 'pull_req_4.3_rc4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mzx/devfreq into pm-devfreq

      Pull devfreq fixes for v4.3-rc5 from MyungJoo Ham.

      * tag 'pull_req_4.3_rc4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mzx/devfreq:
        PM / devfreq: fix double kfree
        PM / devfreq: Fix governor_store()

  commit aca82d1cbb49af34b69ecd4571a0fe48ad9247c1
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Fri Sep 25 12:28:02 2015 -0700

      gpio: omap: move pm runtime in irq_chip.irq_bus_lock/sync_unlock

      The PM runtime API can't be used in atomic contex on -RT even if
      it's configured as irqsafe. As result, below error report can
      be seen when PM runtime API called from IRQ chip's callbacks
      irq_startup/irq_shutdown/irq_set_type, because they are
      protected by RAW spinlock:

      BUG: sleeping function called from invalid context at 
kernel/locking/rtmutex.c:917
      in_atomic(): 1, irqs_disabled(): 128, pid: 96, name: insmod
      3 locks held by insmod/96:
       #0:  (&dev->mutex){......}, at: [<c04752c8>] __driver_attach+0x54/0xa0
       #1:  (&dev->mutex){......}, at: [<c04752d4>] __driver_attach+0x60/0xa0
       #2:  (class){......}, at: [<c00a408c>] __irq_get_desc_lock+0x60/0xa4
      irq event stamp: 1834
      hardirqs last  enabled at (1833): [<c06ab2a4>] 
_raw_spin_unlock_irqrestore+0x88/0x90
      hardirqs last disabled at (1834): [<c06ab068>] 
_raw_spin_lock_irqsave+0x2c/0x64
      softirqs last  enabled at (0): [<c003d220>] 
copy_process.part.52+0x410/0x19d8
      softirqs last disabled at (0): [<  (null)>]   (null)
      Preemption disabled at:[<  (null)>]   (null)

      CPU: 1 PID: 96 Comm: insmod Tainted: G        W  O    
4.1.3-rt3-00618-g57e2387-dirty #184
      Hardware name: Generic DRA74X (Flattened Device Tree)
      [<c00190f4>] (unwind_backtrace) from [<c0014734>] (show_stack+0x20/0x24)
      [<c0014734>] (show_stack) from [<c06a62ec>] (dump_stack+0x88/0xdc)
      [<c06a62ec>] (dump_stack) from [<c006ca44>] (___might_sleep+0x198/0x2a8)
      [<c006ca44>] (___might_sleep) from [<c06ab6d4>] (rt_spin_lock+0x30/0x70)
      [<c06ab6d4>] (rt_spin_lock) from [<c04815ac>] 
(__pm_runtime_resume+0x68/0xa4)
      [<c04815ac>] (__pm_runtime_resume) from [<c04123f4>] 
(omap_gpio_irq_type+0x188/0x1d8)
      [<c04123f4>] (omap_gpio_irq_type) from [<c00a64e4>] 
(__irq_set_trigger+0x68/0x130)
      [<c00a64e4>] (__irq_set_trigger) from [<c00a7bc4>] 
(irq_set_irq_type+0x44/0x6c)
      [<c00a7bc4>] (irq_set_irq_type) from [<c00abbf8>] 
(irq_create_of_mapping+0x120/0x174)
      [<c00abbf8>] (irq_create_of_mapping) from [<c0577b74>] 
(of_irq_get+0x48/0x58)
      [<c0577b74>] (of_irq_get) from [<c0540a14>] (i2c_device_probe+0x54/0x15c)
      [<c0540a14>] (i2c_device_probe) from [<c04750dc>] 
(driver_probe_device+0x184/0x2c8)
      [<c04750dc>] (driver_probe_device) from [<c0475310>] 
(__driver_attach+0x9c/0xa0)
      [<c0475310>] (__driver_attach) from [<c0473238>] 
(bus_for_each_dev+0x7c/0xb0)
      [<c0473238>] (bus_for_each_dev) from [<c0474af4>] 
(driver_attach+0x28/0x30)
      [<c0474af4>] (driver_attach) from [<c0474760>] 
(bus_add_driver+0x154/0x200)
      [<c0474760>] (bus_add_driver) from [<c0476348>] 
(driver_register+0x88/0x108)
      [<c0476348>] (driver_register) from [<c0541600>] 
(i2c_register_driver+0x3c/0x90)
      [<c0541600>] (i2c_register_driver) from [<bf003018>] 
(pcf857x_init+0x18/0x24 [gpio_pcf857x])
      [<bf003018>] (pcf857x_init [gpio_pcf857x]) from [<c000998c>] 
(do_one_initcall+0x128/0x1e8)
      [<c000998c>] (do_one_initcall) from [<c06a4220>] 
(do_init_module+0x6c/0x1bc)
      [<c06a4220>] (do_init_module) from [<c00dd0c8>] 
(load_module+0x18e8/0x21c4)
      [<c00dd0c8>] (load_module) from [<c00ddaa0>] (SyS_init_module+0xfc/0x158)
      [<c00ddaa0>] (SyS_init_module) from [<c000ff40>] 
(ret_fast_syscall+0x0/0x54)

      The IRQ chip interface defines only two callbacks which are executed in
      non-atomic contex - irq_bus_lock/irq_bus_sync_unlock, so lets move
      PM runtime calls there.

      Tested-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: Austin Schuh <austin@xxxxxxxxxxxxxxxx>
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Acked-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ee1635180a8437b8ea4ea2233fd3d3ab1ae95a49
  Author: Robin Gong <b38343@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:53:57 2015 -0500

      pinctrl: freescale: imx: fix system crash if enable two pinctl instances

      Fix system chrash caused by groups whose number is smaller than the number
      of groups of the last pinctl instance which is not initialized.

      iMX7D supports two iomux controllers (iomuxc-lpsr and iomuxc) on probing
      the second instance (iomuxc) the chrash below occurs.

      Uncompressing Linux... done, booting the kernel.
      [    0.000000] Booting Linux on physical CPU 0x0
      [    0.000000] Linux version 4.2.0-next-20150901-00006-gebfa43c 
(aalonso@bluefly)
      [    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7)
      [    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasin 
instruction cache
      [    0.000000] Machine model: Freescale i.MX7 SabreSD Board
      [    0.661012] [<802a6cb0>] (strcmp) from [<802cc80c>] 
(imx_dt_node_to_map+0x58/0x208)
      [    0.668879] [<802cc80c>] (imx_dt_node_to_map) from [<802cbe24>] 
(pinctrl_dt_to_map+0x174/0x2b0)
      [    0.677654] [<802cbe24>] (pinctrl_dt_to_map) from [<802c8f18>] 
(pinctrl_get+0x100/0x424)
      [    0.685878] [<802c8f18>] (pinctrl_get) from [<802c9510>] 
(pinctrl_register+0x26c/0x480)
      [    0.694104] [<802c9510>] (pinctrl_register) from [<802ccf3c>] 
(imx_pinctrl_probe+0x580/0x6e8)
      [    0.702706] [<802ccf3c>] (imx_pinctrl_probe) from [<80351b58>] 
(platform_drv_probe+0x44/0xa4)
      [    0.711455] [<80351b58>] (platform_drv_probe) from [<803503ec>] 
(driver_probe_device+0x174/0x2b4)
      [    0.720405] [<803503ec>] (driver_probe_device) from [<803505fc>] 
(__driver_attach+0x8c/0x90)
      [    0.728982] [<803505fc>] (__driver_attach) from [<8034e930>] 
(bus_for_each_dev+0x6c/0xa0)
      [    0.737381] [<8034e930>] (bus_for_each_dev) from [<8034fb88>] 
(bus_add_driver+0x148/0x1f0)
      [    0.745804] [<8034fb88>] (bus_add_driver) from [<80350c00>] 
(driver_register+0x78/0xf8)
      [    0.753880] [<80350c00>] (driver_register) from [<800097d0>] 
(do_one_initcall+0x8c/0x1d4)
      [    0.762282] [<800097d0>] (do_one_initcall) from [<80987dac>] 
(kernel_init_freeable+0x144/0x1e4)
      [    0.771061] [<80987dac>] (kernel_init_freeable) from [<806d9c7c>] 
(kernel_init+0x8/0xe8)
      [    0.779285] [<806d9c7c>] (kernel_init) from [<8000f628>] 
(ret_from_fork+0x14/0x2c)
      [    0.786981] Code: e3520000 e5e32001 1afffffb e12fff1e (e4d03001)

      Signed-off-by: Robin Gong <b38343@xxxxxxxxxxxxx>
      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 36f8dafe52b0d0726edd5102900e37192f1d3c65
  Merge: 8c25ab8 031277d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 08:03:04 2015 -0400

      Merge tag 'mmc-v4.3-rc3' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC fixes from Ulf Hansson:
       "Here are some mmc fixes intended for v4.3 rc4:

        MMC core:
         - Allow users of mmc_of_parse() to succeed when CONFIG_GPIOLIB is
           unset
         - Prevent infinite loop of re-tuning for CRC-errors for CMD19 and
           CMD21

         MMC host:
         - pxamci: Fix issues with card detect
         - sunxi: Fix clk-delay settings"

      * tag 'mmc-v4.3-rc3' of git://git.linaro.org/people/ulf.hansson/mmc:
        mmc: core: fix dead loop of mmc_retune
        mmc: pxamci: fix card detect with slot-gpio API
        mmc: sunxi: Fix clk-delay settings
        mmc: core: Don't return an error for CD/WP GPIOs when GPIOLIB is unset

  commit de4e882f3fbef586304837518c424787bdfca8b8
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Fri Sep 25 11:14:09 2015 +0200

      pinctrl: at91-pio4: add PM stuff

      Allow GPIOs to be configured as wakeup sources. When going to suspend,
      disable all GPIO irqs excepting the one configured as wakeup sources.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 8c25ab8b5a04a7c559aa8fd4cabe5fc4463b8ada
  Merge: bde17b9 15bbdec
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 07:59:29 2015 -0400

      Merge git://git.infradead.org/intel-iommu

      Pull IOVA fixes from David Woodhouse:
       "The main fix here is the first one, fixing the over-allocation of
         size-aligned requests.  The other patches simply make the existing
        IOVA code available to users other than the Intel VT-d driver, with no
        functional change.

        I concede the latter really *should* have been submitted during the
        merge window, but since it's basically risk-free and people are
        waiting to build on top of it and it's my fault I didn't get it in, I
        (and they) would be grateful if you'd take it"

      * git://git.infradead.org/intel-iommu:
        iommu: Make the iova library a module
        iommu: iova: Export symbols
        iommu: iova: Move iova cache management to the iova library
        iommu/iova: Avoid over-allocating when size-aligned

  commit 69d301fdd19635a39cb2b78e53fdd625b7a27924
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Sep 24 15:05:45 2015 -0700

      gpio: add DT bindings for existing consumer flags

      It is customary for GPIO controllers to support open drain/collector
      and open source/emitter configurations. Add standard GPIO line flags
      to account for this and augment the documentation to say that these
      are the most generic bindings.

      Several people approached me to add new flags to the lines, and this
      makes sense, but let's first bind up the most common cases before we
      start to add exotic stuff.

      Thanks to H. Nikolaus Schaller for ideas on how to encode single-ended
      wiring such as open drain/source and open collector/emitter.

      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit b8664924e8071b67b99f05b13e669e20104d7709
  Author: Diego Elio Pettenò <flameeyes@xxxxxxxxxxxx>
  Date:   Mon Sep 21 18:24:24 2015 +0200

      gpio: add GPIO support for IT87xx, replacing gpio-it8761e

      This patch adds support for the GPIOs found on the ITE super-I/O chips
      IT87xx.

      Signed-off-by: Diego Elio Pettenò <flameeyes@xxxxxxxxxxxx>
      Signed-off-by: Christophe Vu-Brugier <cvubrugier@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 48b5953ed826224a1332f2fd784d37d5f084ca9c
  Author: Dirk Behme <dirk.behme@xxxxxxxxx>
  Date:   Tue Aug 18 18:02:32 2015 +0200

      gpio: gpiolib: don't compare an unsigned for >= 0

      The parameter offset is an unsigned, so it makes no sense to compare
      it for >= 0. Fix the compiler warning regarding this by removing this
      comparison.

      As the macro GPIO_OFFSET_VALID is only used at this single place, simplify
      the code by dropping the macro completely and dropping the invert, too.

      No functional change.

      Signed-off-by: Dirk Behme <dirk.behme@xxxxxxxxx>
      Acked-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 633a5065939ae75a07bc37c110399a3faf065147
  Author: Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 16:59:01 2015 +0100

      gpio: arizona: add support for WM8998 and WM1814

      Signed-off-by: Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c75a37720480819291ebca0db7fab4e87c46f73d
  Author: Nicholas Krause <xerofoify@xxxxxxxxx>
  Date:   Wed Aug 26 17:52:19 2015 -0400

      gpio: Fix error checking in the function device_pca957x_init

      This fixes error checking in the function device_pca957x_init
      to properly check and return error code values from the calls
      to the function pca953x_write_regs if they fail as to properly
      signal callers when a error occurs due a failure when writing
      registers for this gpio based device.

      Signed-off-by: Nicholas Krause <xerofoify@xxxxxxxxx>
      Reviewed-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 49a5bd880cb63fba9f4589a89d68b8a255062a5f
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Tue Sep 1 11:38:02 2015 +0200

      gpio: ath79: Convert to the state container design pattern

      Turn the ath79 driver into a true driver supporting multiple
      instances. While at it also removed unneed includes and make use of
      the BIT() macro.

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9f3538280301bb953bf159d5ce9fc1f41482aa4c
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Fri Aug 28 14:48:56 2015 -0700

      gpio: msm: Remove unused driver

      Remove this driver now that Bjorn has introduced a pinctrl driver
      for msm8660 and the dts files have been updated with the pinctrl
      compatibles.

      Cc: Andy Gross <agross@xxxxxxxxxxxxxx>
      Reviewed-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit fa9795d1121e18a6ee2d0f8b2e837f51d63d4b00
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Aug 27 14:26:46 2015 +0200

      gpio: zynq: use container_of() to get state container

      The state container of the Zynq GPIO driver is sometimes
      extracted from the gpio_chip exploiting the fact that offsetof()
      the struct gpio_chip inside the struct zynq_gpio is 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct zynq_gpio in front of struct gpio_chip,
      things will break. Using proper container_of() avoids this
      problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Also replace some explicit container_of() calls with the helper
      function.

      Cc: Lars-Peter Clausen <lars@xxxxxxxxxx>
      Cc: Ezra Savard <ezra.savard@xxxxxxxxxx>
      Cc: Michal Simek <michal.simek@xxxxxxxxxx>
      Acked-by: Harini Katakam <harinik@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 2f930643c581f3fe45568f24a8aba93af46ff287
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Aug 27 14:13:46 2015 +0200

      gpio: vf610: use container_of() to get state container

      The state container of the vf610 GPIO driver is sometimes
      extracted from the gpio_chip exploiting the fact that offsetof()
      the struct gpio_chip inside the struct vf610_gpio_port is 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct vf610_gpio_port in front of struct gpio_chip,
      things will break. Using proper container_of() avoids this
      problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Also replace some explicit container_of() calls with the helper
      function.

      Acked-by: Stefan Agner <stefan@xxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 218f1f8b50aef5438fd95a4e3d64549bf9c459c3
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Aug 25 11:26:04 2015 +0200

      gpio: sx150x: use container_of() to get state container

      The state container of the sx150x GPIO driver is sometimes
      extracted from the gpio_chip exploiting the fact that offsetof()
      the struct gpio_chip inside the struct sx150x_chip is 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct sx150_chip in front of struct gpio_chip, things
      will break. Using proper container_of() avoids this problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Cc: Wei Chen <Wei.Chen@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 231d51b8a4d5b24e72112bbc73fdcc38759a26e3
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Aug 25 10:54:12 2015 +0200

      gpio: altera: use container_of() to get state container

      The state container of the Altera GPIO driver is extracted from
      the gpio_chip exploiting the fact that offsetof() the
      struct gpio_chip inside the struct of_mm_gpio_chip are both 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct altera_gpio_chip in front of
      struct of_mm_gpio_chip, things will break. Using proper
      container_of() avoids this problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Cc: Tien Hock Loh <thloh@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4843289e60e16bed00b7c3b910e67fb06214631a
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Aug 25 10:40:23 2015 +0200

      gpio: etraxfs: use container_of() to get state container

      The state container of the etraxfs GPIO driver is extracted from
      the gpio_chip exploiting the fact that offsetof() the
      struct gpio_chip inside the struct bgpio_chip are both 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct etraxfs_gpio_chip in front of
      struct bgpio_chip, things will break. Using proper container_of()
      avoids this problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Acked-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 1dbf7f299f90dc4b45e2322a3af843ad65e1501b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Sep 17 14:21:25 2015 +0200

      gpio: pl061: detail IRQ trigger handling

      I couldn't follow this code flow. Make it dirt simple to figure
      out what is going on and get proper debug prints. Warn if we
      set up an IRQ without any trigger. Should make no semantic
      difference.

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4730f33f0d822fd8d0f5d2229793a5df674fed5c
  Author: Vishnu Patekar <vishnupatekar0510@xxxxxxxxx>
  Date:   Tue Sep 22 23:38:55 2015 +0800

      pinctrl: sunxi: add allwinner A83T PIO controller support

      Allwinner A83T soc port controller has 8 ports.
      It has 3 IRQ banks namely PB, PG, PH.
      Pinmuxing are different for some pins as compared to
      sun8i A23 and A33.

      Signed-off-by: Vishnu Patekar <vishnupatekar0510@xxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e86c62066e7be8b9f5284842ca8347991dd02edf
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 21:26:47 2015 +0900

      pinctrl: uniphier: add SD card pinmux settings

      Add SD card pinmux settings for PH1-LD4, PH1-Pro4, PH1-sLD8,
      PH1-Pro5, ProXstream2, and PH1-LD6b SoCs.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit be2cbd4dbbe63cfb6888f6ce96f1ac87eddae513
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:31 2015 +0200

      pinctrl: samsung: Remove unneded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e44118997523cc62c893ba019a1fd3e0c43d6877
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:30 2015 +0200

      pinctrl: mediatek: Remove unneded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Hongzhou Yang <hongzhou.yang@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5c99c0ffa4ee284961a0214b171748df0edf16f4
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:29 2015 +0200

      pinctrl: sunxi: Remove unneeded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 14316c4ca9675ee086e3635b58340aaa7f6976e5
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:28 2015 +0200

      pinctrl: mxs: Remove unneded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 1978c5ec0f8310df856a4a725048635725b673fa
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:27 2015 +0200

      pinctrl: tz1090-pdc: Remove unneded semicolons

      They aren't needed and are just creating null statements so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 916888838441e13155495f4d7e812e3bb0f5b875
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:26 2015 +0200

      pinctrl: tz1090: Remove unneded semicolons

      They aren't needed and are just creating null statements so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit de7f8e3e6b1bb6e3e400bf675e4052fa3d927987
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 21:26:46 2015 +0900

      pinctrl: uniphier: fix input enable settings for PH1-sLD8

      Currently, input enable settings are missing from the PH1-sLD8
      pinctrl driver.  (All the entries in the pin table are set to
      UNIPHIER_PIN_IECTRL_NONE).

      Fill the table with correct values.

      Fixes: 95372f9dc892 ("pinctrl: UniPhier: add UniPhier PH1-sLD8 pinctrl 
driver")
      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9911a2d5e9d14e39692b751929a92cb5a1d9d0e0
  Author: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
  Date:   Wed Sep 23 16:35:09 2015 +0200

      pinctrl: imx25: ensure that a pin with id i is at position i in the info 
array

      The code in pinctrl-imx.c only works correctly if in the
      imx_pinctrl_soc_info passed to imx_pinctrl_probe we have:

        info->pins[i].number = i
        conf_reg(info->pins[i]) = 4 * i

      (which conf_reg(pin) being the offset of the pin's configuration
      register).

      When the imx25 specific part was introduced in b4a87c9b966f ("pinctrl:
      pinctrl-imx: add imx25 pinctrl driver") we had:

        info->pins[i].number = i + 1
        conf_reg(info->pins[i]) = 4 * i

      . Commit 34027ca2bbc6 ("pinctrl: imx25: fix numbering for pins") tried
      to fix that but made the situation:

        info->pins[i-1].number = i
        conf_reg(info->pins[i-1]) = 4 * i

      which is hardly better but fixed the error seen back then.

      So insert another reserved entry in the array to finally yield:

        info->pins[i].number = i
        conf_reg(info->pins[i]) = 4 * i

      Fixes: 34027ca2bbc6 ("pinctrl: imx25: fix numbering for pins")
      Signed-off-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d50a9e1b6de45db883f594cea0ecd1379fd3f669
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Sat Sep 19 17:56:44 2015 -0400

      pinctrl: sun5i: Fix a10s pwm1 pinctrl mapping

      The comment for PG14 mux setting 3 already correctly states that this
      muxes PG13 to pwm1, but the text ascociated with it said uart3, fix this.

      Note that we use "pwm" rather then "pwm1" to be consistent with pwm0
      where the mux setting is also simply called "pwm" and to be consistent
      with sun4i/sun7i which do the same.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4873867e5f2bd90faad861dd94865099fc3140f3
  Author: Yitian Bu <buyitian@xxxxxxxxx>
  Date:   Fri Oct 2 15:18:41 2015 +0800

      ASoC: dwc: correct irq clear method

      from Designware I2S datasheet, tx/rx XRUN irq is cleared by
      reading register TOR/ROR, rather than by writing into them.

      Signed-off-by: Yitian Bu <yitian.bu@xxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit ee556d00cf20012e889344a0adbbf809ab5015a3
  Author: Li Bin <huawei.libin@xxxxxxxxxx>
  Date:   Wed Sep 30 10:49:55 2015 +0800

      arm64: ftrace: fix function_graph tracer panic

      When function graph tracer is enabled, the following operation
      will trigger panic:

      mount -t debugfs nodev /sys/kernel
      echo next_tgid > /sys/kernel/tracing/set_ftrace_filter
      echo function_graph > /sys/kernel/tracing/current_tracer
      ls /proc/

      ------------[ cut here ]------------
      [  198.501417] Unable to handle kernel paging request at virtual address 
cb88537fdc8ba316
      [  198.506126] pgd = ffffffc008f79000
      [  198.509363] [cb88537fdc8ba316] *pgd=00000000488c6003, 
*pud=00000000488c6003, *pmd=0000000000000000
      [  198.517726] Internal error: Oops: 94000005 [#1] SMP
      [  198.518798] Modules linked in:
      [  198.520582] CPU: 1 PID: 1388 Comm: ls Tainted: G
      [  198.521800] Hardware name: linux,dummy-virt (DT)
      [  198.522852] task: ffffffc0fa9e8000 ti: ffffffc0f9ab0000 task.ti: 
ffffffc0f9ab0000
      [  198.524306] PC is at next_tgid+0x30/0x100
      [  198.525205] LR is at return_to_handler+0x0/0x20
      [  198.526090] pc : [<ffffffc0002a1070>] lr : [<ffffffc0000907c0>] 
pstate: 60000145
      [  198.527392] sp : ffffffc0f9ab3d40
      [  198.528084] x29: ffffffc0f9ab3d40 x28: ffffffc0f9ab0000
      [  198.529406] x27: ffffffc000d6a000 x26: ffffffc000b786e8
      [  198.530659] x25: ffffffc0002a1900 x24: ffffffc0faf16c00
      [  198.531942] x23: ffffffc0f9ab3ea0 x22: 0000000000000002
      [  198.533202] x21: ffffffc000d85050 x20: 0000000000000002
      [  198.534446] x19: 0000000000000002 x18: 0000000000000000
      [  198.535719] x17: 000000000049fa08 x16: ffffffc000242efc
      [  198.537030] x15: 0000007fa472b54c x14: ffffffffff000000
      [  198.538347] x13: ffffffc0fada84a0 x12: 0000000000000001
      [  198.539634] x11: ffffffc0f9ab3d70 x10: ffffffc0f9ab3d70
      [  198.540915] x9 : ffffffc0000907c0 x8 : ffffffc0f9ab3d40
      [  198.542215] x7 : 0000002e330f08f0 x6 : 0000000000000015
      [  198.543508] x5 : 0000000000000f08 x4 : ffffffc0f9835ec0
      [  198.544792] x3 : cb88537fdc8ba316 x2 : cb88537fdc8ba306
      [  198.546108] x1 : 0000000000000002 x0 : ffffffc000d85050
      [  198.547432]
      [  198.547920] Process ls (pid: 1388, stack limit = 0xffffffc0f9ab0020)
      [  198.549170] Stack: (0xffffffc0f9ab3d40 to 0xffffffc0f9ab4000)
      [  198.582568] Call trace:
      [  198.583313] [<ffffffc0002a1070>] next_tgid+0x30/0x100
      [  198.584359] [<ffffffc0000907bc>] ftrace_graph_caller+0x6c/0x70
      [  198.585503] [<ffffffc0000907bc>] ftrace_graph_caller+0x6c/0x70
      [  198.586574] [<ffffffc0000907bc>] ftrace_graph_caller+0x6c/0x70
      [  198.587660] [<ffffffc0000907bc>] ftrace_graph_caller+0x6c/0x70
      [  198.588896] Code: aa0003f5 2a0103f4 b4000102 91004043 (885f7c60)
      [  198.591092] ---[ end trace 6a346f8f20949ac8 ]---

      This is because when using function graph tracer, if the traced
      function return value is in multi regs ([x0-x7]), return_to_handler
      may corrupt them. So in return_to_handler, the parameter regs should
      be protected properly.

      Cc: <stable@xxxxxxxxxxxxxxx> # 3.18+
      Signed-off-by: Li Bin <huawei.libin@xxxxxxxxxx>
      Acked-by: AKASHI Takahiro <takahiro.akashi@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 12597e4539e60975d934ae42a33e765d1857bf04
  Merge: b4b05b9 819fd4b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 2 02:25:01 2015 -0700

      Merge branch 'sh-pfc-for-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/renesas-drivers into devel

  commit 819fd4bfcc84805c48291de511c917596e911ffa
  Author: Takeshi Kihara <takeshi.kihara.df@xxxxxxxxxxx>
  Date:   Tue Sep 15 14:49:15 2015 +0900

      pinctrl: sh-pfc: r8a7795: add EtherAVB support

      This patch adds EthernetAVB

      Based on a much lager patch by Takeshi Kihara which was
      originally posted by Kuninori Morimoto.

      Signed-off-by: Takeshi Kihara <takeshi.kihara.df@xxxxxxxxxxx>
      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      [horms: extracted from a larger patch;
              corrected swapped {MATCH,CAPTURE_A} pins]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 9b132ba3e31773ad9371f4a296c5a99ac483fb40
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Fri Sep 18 01:54:25 2015 +0000

      pinctrl: sh-pfc: r8a7795: add Audio SSI pin support

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit c33a7fe39975f64edbbbfafcaef268fb162d5d63
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Fri Sep 18 01:54:02 2015 +0000

      pinctrl: sh-pfc: r8a7795: add Audio clock pin support

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 2544ef72306a34344cc636272d8567f5682ca4fb
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Fri Sep 18 01:53:33 2015 +0000

      pinctrl: sh-pfc: r8a7795: add I2C pin support

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit ff8459a5061670960f944fcefc4b69af77e14739
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Sep 3 02:52:07 2015 +0000

      pinctrl: sh-pfc: r8a7795: add SCIFx support

      This patch adds SCIF0/1/2/3/4/5

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      [Morimoto-san: Updated]
      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 0b0ffc96dbe30fa9d966a6f8a9ce9f276fd4007f
  Author: Takeshi Kihara <takeshi.kihara.df@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:51:49 2015 +0000

      pinctrl: sh-pfc: Initial R8A7795 PFC support

      Add PFC base support for the R8A7795 SoC.

      Signed-off-by: Takeshi Kihara <takeshi.kihara.df@xxxxxxxxxxx>
      [Morimoto-san: updated]
      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 5451d09259d59e37430575676e3344cf41735b33
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:51:21 2015 +0000

      pinctrl: sh-pfc: remove unused PINMUX_IPSR_MODSEL_DATA()

      Now, all PINMUX_IPSR_MODSEL_DATA() are replased to PINMUX_IPSR_MSEL()
      Let's remove unused PINMUX_IPSR_MODSEL_DATA()

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 759151401c9dc2e929b34c8d7d863c78c8240496
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:50:58 2015 +0000

      pinctrl: sh-pfc: r8a7779: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit af5132dd12c5a1fab0c2500168dfed2cbf6179b6
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:50:38 2015 +0000

      pinctrl: sh-pfc: r8a7790: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 13ce3c39d0c45fe32398b90422c78f7a8a2b8970
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:50:16 2015 +0000

      pinctrl: sh-pfc: r8a7791: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit adedb87fb61f5a418a1aabdb989bc0f55895e44f
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:49:56 2015 +0000

      pinctrl: sh-pfc: r8a7794: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 3d8c120be3fc003c0a0a8dc5a0e77f2dbd20ee68
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:49:36 2015 +0000

      pinctrl: sh-pfc: sh7734: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 2b67bccb478773347717d21781cf2bfd6db5c9fd
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:49:14 2015 +0000

      pinctrl: sh-pfc: modify PINMUX_IPSR_MSEL() macro order

      The difference between PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA()
      are FN_xxx order, and PINMUX_IPSR_MSEL() is used only from r8a7778.
      Now it r8a7778 works correctly with PINMUX_IPSR_MODSEL_DATA() order.
      This means we can merge PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA().

      Current PFC driver is very difficult to read, because macro names are
      using different length. Especially PINMUX_IPSR_MODSEL_DATA() is well
      used macro

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can merge
      PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 4adeabd042422ceecd7605961d785c5c3edab9e1
  Author: Laurent Pinchart <laurent.pinchart+renesas@xxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 10:08:13 2015 +0300

      pinctrl: sh-pfc: Remove hardcoded IRQ numbers

      Now that all ARM-based Renesas SoCs use multiplatform kernels only the
      hardcoded IRQ numbers can be dropped as they're dynamically allocated.

      Signed-off-by: Laurent Pinchart 
<laurent.pinchart+renesas@xxxxxxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 90d066130f69533fb16b395be3de613903575e69
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Aug 27 22:07:23 2015 +0200

      pinctrl: sh-pfc: Get rid of CONFIG_ARCH_SHMOBILE_LEGACY

      Shmobile is all multiplatform these days, so get rid of the reference to
      CONFIG_ARCH_SHMOBILE_LEGACY.

      Move the legacy code to do the non-DT mapping between GPIOs and pins
      inside the existing #ifdef CONFIG_SUPERH section.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9e214614532a6bd7e90bdcdc778b041647cc4036
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Sep 10 14:17:03 2015 +0200

      pinctrl: sh-pfc: r8a7791/r8a7793: Correct SCIFB1_B SCK MOD_SEL value

      When using serial port SCIFB1_B, transmit works, but nothing is
      received.

      Receive fails because the SCIFB1_SCK_B settings configure the wrong
      value for the sel_scifb1 field in the Module Select Register (MOD_SEL),
      due to an ambiguity in the R-Car M2-W and M2-N datasheets.

      Tested on r8a7791/koelsch using pins 53 (TXD) and 72 (RXD) on EXIO
      Connector A.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 48a7b99d75b4f48fb001057a8390a839e70e7acc
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Wed Aug 26 19:53:58 2015 +0200

      pinctrl: sh-pfc: r8a7794: Remove bogus SCIF0 SCK pin data

      SCIF0 on R-Car E2 does not have an SCK pin.

      "SCIF_CLK" is the (H)SCIF baud rate generation clock pin, which is not
      yet supported.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 56f891b46d37e8c7b04db660d6e9ad05e586203c
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 15:55:19 2015 +0200

      pinctrl: sh-pfc: Confine legacy function GPIOs to SH

      Legacy function GPIOs are no longer used on ARM since commit
      a27c5cd1a08cc95c ("sh-pfc: sh73a0: Remove function GPIOs").
      Extract its setup code into a separate function, and make all function
      GPIO related code and data depend on CONFIG_SUPERH.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>

  commit 57106e5ca55bea70e3e296a3e7546aefe0d1dabe
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 15:55:18 2015 +0200

      pinctrl: sh-pfc: Remove empty gpio_function_free()

      gpio_chip.free() is optional, and can just be left unimplemented.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 18fab3995e8a6c4e3ffe2adced0ffa76eebdc989
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 15:55:17 2015 +0200

      pinctrl: sh-pfc: Stop calling gpiochip_add_pin_range() on DT platforms

      On platforms where the PFC/GPIO controller is instantiated from DT, the
      mapping between GPIOs and pins is set up using the "gpio-ranges"
      property in DT.

      Hence stop setting up the mapping from C code on DT platforms.
      This code is still used for SH or ARM-legacy platforms.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>

  commit 0c5d187828588dd1b36cb93b4481a8db467ef3e8
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 09:48:57 2015 +0200

      MIPS: BPF: Fix load delay slots.

      The entire bpf_jit_asm.S is written in noreorder mode because "we know
      better" according to a comment.  This also prevented the assembler from
      throwing in the required NOPs for MIPS I processors which have no
      load-use interlock, thus the load's consumer might end up using the
      old value of the register from prior to the load.

      Fixed by putting the assembler in reorder mode for just the affected
      load instructions.  This is not enough for gas to actually try to be
      clever by looking at the next instruction and inserting a nop only
      when needed but as the comment said "we know better", so getting gas
      to unconditionally emit a NOP is just right in this case and prevents
      adding further ifdefery.

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit f4b4aae1828855db761bf998ce37d3062b1d6446
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 01:40:43 2015 +0100

      x86/headers/uapi: Fix __BITS_PER_LONG value for x32 builds

      On x32, gcc predefines __x86_64__ but long is only 32-bit.  Use
      __ILP32__ to distinguish x32.

      Fixes this compiler error in perf:

        tools/include/asm-generic/bitops/__ffs.h: In function '__ffs':
        tools/include/asm-generic/bitops/__ffs.h:19:8: error: right shift count 
>= width of type [-Werror=shift-count-overflow]
          word >>= 32;
               ^

      This isn't sufficient to build perf for x32, though.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/1443660043.2730.15.camel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit da6fb7a9e5bd6f04f7e15070f630bdf1ea502841
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Oct 1 16:03:38 2015 +1000

      md/bitmap: don't pass -1 to bitmap_storage_alloc.

      Passing -1 to bitmap_storage_alloc() causes page->index to be set to
      -1, which is quite problematic.

      So only pass ->cluster_slot if mddev_is_clustered().

      Fixes: b97e92574c0b ("Use separate bitmaps for each nodes in the cluster")
      Cc: stable@xxxxxxxxxxxxxxx (v4.1+)
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit e8ff8bf09ff49733534ff3cee91bde030186055f
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Wed Sep 16 10:20:05 2015 -0400

      md/raid1: Avoid raid1 resync getting stuck

      close_sync() needs to set conf->next_resync to a large, but safe value
      below MaxSector and use it to determine whether or not to set
      start_next_window in wait_barrier()

      Solution suggested by Neil Brown.

      Reported-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Tested-by: Xiao Ni <xni@xxxxxxxxxx>
      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 644df1a85fc4b0c7a16800f55717261546f4e651
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:10 2015 +0200

      md: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit d4929add83ad4660b1824a9282ab5dd4d60140fa
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Fri Sep 18 10:20:12 2015 -0700

      md: clear CHANGE_PENDING in readonly array

      If faulty disks of an array are more than allowed degraded number, the
      array enters error handling. It will be marked as read-only with
      MD_CHANGE_PENDING/RECOVERY_NEEDED set. But currently recovery doesn't
      clear CHANGE_PENDING bit for read-only array.  If MD_CHANGE_PENDING is
      set for a raid5 array, all returned IO will be hold on a list till the
      bit is clear. But recovery nevery clears this bit, the IO is always in
      pending state and nevery finish. This has bad effects like upper layer
      can't get an IO error and the array can't be stopped.

      Fixes: c3cce6cda162 ("md/raid5: ensure device failure recorded before 
write request returns.")
      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 66eefe5de11db1e0d8f2edc3880d50e7c36a9d43
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Sep 24 15:47:47 2015 +1000

      md/raid0: apply base queue limits *before* disk_stack_limits

      Calling e.g. blk_queue_max_hw_sectors() after calls to
      disk_stack_limits() discards the settings determined by
      disk_stack_limits().
      So we need to make those calls first.

      Fixes: 199dc6ed5179 ("md/raid0: update queue parameter in a safer 
location.")
      Cc: stable@xxxxxxxxxxxxxxx (v2.6.35+ - please apply with 199dc6ed5179).
      Reported-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 36707bb2e7c6730d79d6cdc6d1475d3d7e94c518
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Sep 24 15:25:36 2015 +1000

      md/raid5: don't index beyond end of array in need_this_block().

      When need_this_block probably shouldn't be called when there
      are more than 2 failed devices, we really don't want it to try
      indexing beyond the end of the failed_num[] of fdev[] arrays.

      So limit the loops to at most 2 iterations.

      Reported-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxx>

  commit ebda780bce8d58ec0abab157397c9e099c41a05f
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Fri Sep 18 10:20:13 2015 -0700

      raid5: update analysis state for failed stripe

      handle_failed_stripe() makes the stripe fail, eg, all IO will return
      with a failure, but it doesn't update stripe_head_state. Later
      handle_stripe() has special handling for raid6 for handle_stripe_fill().
      That check before handle_stripe_fill() doesn't skip the failed stripe
      and we get a kernel crash in need_this_block.  This patch clear the
      analysis state to make sure no functions wrongly called after
      handle_failed_stripe()

      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 88724bfa68be792c1487d759e87568c36ac1a1cc
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Sep 24 14:00:51 2015 +1000

      md: wait for pending superblock updates before switching to read-only

      If a superblock update is pending, wait for it to complete before
      letting md_set_readonly() switch to readonly.
      Otherwise we might lose important information about a device having
      failed.

      For external arrays, waiting for superblock updates can wait on
      user-space, so in that case, just return an error.

      Reported-and-tested-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit ab76f7b4ab2397ffdd2f1eb07c55697d19991d10
  Author: Stephen Smalley <sds@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 09:04:22 2015 -0400

      x86/mm: Set NX on gap between __ex_table and rodata

      Unused space between the end of __ex_table and the start of
      rodata can be left W+x in the kernel page tables.  Extend the
      setting of the NX bit to cover this gap by starting from
      text_end rather than rodata_start.

        Before:
        ---[ High Kernel Mapping ]---
        0xffffffff80000000-0xffffffff81000000          16M                      
         pmd
        0xffffffff81000000-0xffffffff81600000           6M     ro         PSE   
  GLB x  pmd
        0xffffffff81600000-0xffffffff81754000        1360K     ro               
  GLB x  pte
        0xffffffff81754000-0xffffffff81800000         688K     RW               
  GLB x  pte
        0xffffffff81800000-0xffffffff81a00000           2M     ro         PSE   
  GLB NX pmd
        0xffffffff81a00000-0xffffffff81b3b000        1260K     ro               
  GLB NX pte
        0xffffffff81b3b000-0xffffffff82000000        4884K     RW               
  GLB NX pte
        0xffffffff82000000-0xffffffff82200000           2M     RW         PSE   
  GLB NX pmd
        0xffffffff82200000-0xffffffffa0000000         478M                      
         pmd

        After:
        ---[ High Kernel Mapping ]---
        0xffffffff80000000-0xffffffff81000000          16M                      
         pmd
        0xffffffff81000000-0xffffffff81600000           6M     ro         PSE   
  GLB x  pmd
        0xffffffff81600000-0xffffffff81754000        1360K     ro               
  GLB x  pte
        0xffffffff81754000-0xffffffff81800000         688K     RW               
  GLB NX pte
        0xffffffff81800000-0xffffffff81a00000           2M     ro         PSE   
  GLB NX pmd
        0xffffffff81a00000-0xffffffff81b3b000        1260K     ro               
  GLB NX pte
        0xffffffff81b3b000-0xffffffff82000000        4884K     RW               
  GLB NX pte
        0xffffffff82000000-0xffffffff82200000           2M     RW         PSE   
  GLB NX pmd
        0xffffffff82200000-0xffffffffa0000000         478M                      
         pmd

      Signed-off-by: Stephen Smalley <sds@xxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443704662-3138-1-git-send-email-sds@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e3c41e37b0f4b18cbd4dac76cbeece5a7558b909
  Author: Lee, Chun-Yi <joeyli.kernel@xxxxxxxxx>
  Date:   Tue Sep 29 20:58:57 2015 +0800

      x86/kexec: Fix kexec crash in syscall kexec_file_load()

      The original bug is a page fault crash that sometimes happens
      on big machines when preparing ELF headers:

          BUG: unable to handle kernel paging request at ffffc90613fc9000
          IP: [<ffffffff8103d645>] 
prepare_elf64_ram_headers_callback+0x165/0x260

      The bug is caused by us under-counting the number of memory ranges
      and subsequently not allocating enough ELF header space for them.
      The bug is typically masked on smaller systems, because the ELF header
      allocation is rounded up to the next page.

      This patch modifies the code in fill_up_crash_elf_data() by using
      walk_system_ram_res() instead of walk_system_ram_range() to correctly
      count the max number of crash memory ranges. That's because the
      walk_system_ram_range() filters out small memory regions that
      reside in the same page, but walk_system_ram_res() does not.

      Here's how I found the bug:

      After tracing prepare_elf64_headers() and 
prepare_elf64_ram_headers_callback(),
      the code uses walk_system_ram_res() to fill-in crash memory regions 
information
      to the program header, so it counts those small memory regions that
      reside in a page area.

      But, when the kernel was using walk_system_ram_range() in
      fill_up_crash_elf_data() to count the number of crash memory regions,
      it filters out small regions.

      I printed those small memory regions, for example:

        kexec: Get nr_ram ranges. vaddr=0xffff880077592258 paddr=0x77592258, 
sz=0xdc0

      Based on the code in walk_system_ram_range(), this memory region
      will be filtered out:

        pfn = (0x77592258 + 0x1000 - 1) >> 12 = 0x77593
        end_pfn = (0x77592258 + 0xfc0 -1 + 1) >> 12 = 0x77593
        end_pfn - pfn = 0x77593 - 0x77593 = 0  <=== if (end_pfn > pfn) is FALSE

      So, the max_nr_ranges that's counted by the kernel doesn't include
      small memory regions - causing us to under-allocate the required space.
      That causes the page fault crash that happens in a later code path
      when preparing ELF headers.

      This bug is not easy to reproduce on small machines that have few
      CPUs, because the allocated page aligned ELF buffer has more free
      space to cover those small memory regions' PT_LOAD headers.

      Signed-off-by: Lee, Chun-Yi <jlee@xxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Baoquan He <bhe@xxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Cc: Takashi Iwai <tiwai@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Cc: Vivek Goyal <vgoyal@xxxxxxxxxx>
      Cc: kexec@xxxxxxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: <stable@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443531537-29436-1-git-send-email-jlee@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7aba4f5201d1b7b3ddb0b03883d9edf69851ddad
  Author: Suman Anna <s-anna@xxxxxx>
  Date:   Tue Sep 29 17:37:47 2015 -0500

      clk: ti: dflt: fix enable_reg validity check

      The default clock enabling functions for TI clocks -
      omap2_dflt_clk_enable() and omap2_dflt_clk_disable() perform a
      NULL check for the enable_reg field of the clk_hw_omap structure.
      This enable_reg field however is merely a combination of the index
      of the master IP module, and the offset from the master IP module's
      base address. A value of 0 is perfectly valid, and the current error
      checking will fail in these cases. The issue was found when trying
      to enable the iva2_ck clock on OMAP3 platforms.

      So, switch the check to use IS_ERR. This correction is similar to the
      logic used in commit c807dbedb5e5 ("clk: ti: fix ti_clk_get_reg_addr
      error handling").

      Fixes: 9f37e90efaf0 ("clk: ti: dflt: move support for default gate 
clock..")
      Signed-off-by: Suman Anna <s-anna@xxxxxx>
      Signed-off-by: Tero Kristo <t-kristo@xxxxxx>

  commit 19e79687de22f23bcfb5e79cce3daba20af228d1
  Author: Ben Dooks <ben.dooks@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 15:01:08 2015 +0100

      clk: ti: fix dual-registration of uart4_ick

      On the OMAP AM3517 platform the uart4_ick gets registered
      twice, causing any power management to /dev/ttyO3 to fail
      when trying to wake the device up.

      This solves the following oops:

      [] Unhandled fault: external abort on non-linefetch (0x1028) at 0xfa09e008
      [] PC is at serial_omap_pm+0x48/0x15c
      [] LR is at _raw_spin_unlock_irqrestore+0x30/0x5c

      Fixes: aafd900cab87 ("CLK: TI: add omap3 clock init file")
      Cc: stable@xxxxxxxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: sboyd@xxxxxxxxxxxxxx
      Cc: linux-clk@xxxxxxxxxxxxxxx
      Cc: linux-omap@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ben Dooks <ben.dooks@xxxxxxxxxxxxxxx>
      Signed-off-by: Tero Kristo <t-kristo@xxxxxx>

  commit 4b3061b39132cba0c31b0eb767a9faeedf9437fc
  Author: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
  Date:   Mon Aug 24 10:35:02 2015 +0300

      clk: ti: clk-7xx: Remove hardwired ABE clock configuration

      The ABE related clocks should be configured via DT and not have it wired
      inside of the kernel.

      Fixes: a74c52def9ab ("clk: ti: clk-7xx: Correct ABE DPLL configuration")
      Signed-off-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Tero Kristo <t-kristo@xxxxxx>

  commit ccf03d6995fa4b784f5b987726ba98f4859bf326
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 1 16:28:25 2015 +1000

      drm/dp/mst: add some defines for logical/physical ports

      This just removes the magic number.

      Acked-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 274d83524895fe41ca8debae4eec60ede7252bb5
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Wed Sep 30 10:39:42 2015 +1000

      drm/dp/mst: drop cancel work sync in the mstb destroy path (v2)

      Since 9eb1e57f564d4e6e10991402726cc83fe0b9172f
      drm/dp/mst: make sure mst_primary mstb is valid in work function

      we validate the mstb structs in the work function, and doing
      that takes a reference. So we should never get here with the
      work function running using the mstb device, only if the work
      function hasn't run yet or is running for another mstb.

      So we don't need to sync the work here, this was causing
      lockdep spew as below.

      [  +0.000160] =============================================
      [  +0.000001] [ INFO: possible recursive locking detected ]
      [  +0.000002] 3.10.0-320.el7.rhel72.stable.backport.3.x86_64.debug #1 
Tainted: G        W      ------------
      [  +0.000001] ---------------------------------------------
      [  +0.000001] kworker/4:2/1262 is trying to acquire lock:
      [  +0.000001]  ((&mgr->work)){+.+.+.}, at: [<ffffffff810b29a5>] 
flush_work+0x5/0x2e0
      [  +0.000007]
      but task is already holding lock:
      [  +0.000001]  ((&mgr->work)){+.+.+.}, at: [<ffffffff810b57e4>] 
process_one_work+0x1b4/0x710
      [  +0.000004]
      other info that might help us debug this:
      [  +0.000001]  Possible unsafe locking scenario:

      [  +0.000002]        CPU0
      [  +0.000000]        ----
      [  +0.000001]   lock((&mgr->work));
      [  +0.000002]   lock((&mgr->work));
      [  +0.000001]
       *** DEADLOCK ***

      [  +0.000001]  May be due to missing lock nesting notation

      [  +0.000002] 2 locks held by kworker/4:2/1262:
      [  +0.000001]  #0:  (events_long){.+.+.+}, at: [<ffffffff810b57e4>] 
process_one_work+0x1b4/0x710
      [  +0.000004]  #1:  ((&mgr->work)){+.+.+.}, at: [<ffffffff810b57e4>] 
process_one_work+0x1b4/0x710
      [  +0.000003]
      stack backtrace:
      [  +0.000003] CPU: 4 PID: 1262 Comm: kworker/4:2 Tainted: G        W      
------------   3.10.0-320.el7.rhel72.stable.backport.3.x86_64.debug #1
      [  +0.000001] Hardware name: LENOVO 20EGS0R600/20EGS0R600, BIOS GNET71WW 
(2.19 ) 02/05/2015
      [  +0.000008] Workqueue: events_long drm_dp_mst_link_probe_work 
[drm_kms_helper]
      [  +0.000001]  ffffffff82c26c90 00000000a527b914 ffff88046399bae8 
ffffffff816fe04d
      [  +0.000004]  ffff88046399bb58 ffffffff8110f47f ffff880461438000 
0001009b840fc003
      [  +0.000002]  ffff880461438a98 0000000000000000 0000000804dc26e1 
ffffffff824a2c00
      [  +0.000003] Call Trace:
      [  +0.000004]  [<ffffffff816fe04d>] dump_stack+0x19/0x1b
      [  +0.000004]  [<ffffffff8110f47f>] __lock_acquire+0x115f/0x1250
      [  +0.000002]  [<ffffffff8110fd49>] lock_acquire+0x99/0x1e0
      [  +0.000002]  [<ffffffff810b29a5>] ? flush_work+0x5/0x2e0
      [  +0.000002]  [<ffffffff810b29ee>] flush_work+0x4e/0x2e0
      [  +0.000002]  [<ffffffff810b29a5>] ? flush_work+0x5/0x2e0
      [  +0.000004]  [<ffffffff81025905>] ? native_sched_clock+0x35/0x80
      [  +0.000002]  [<ffffffff81025959>] ? sched_clock+0x9/0x10
      [  +0.000002]  [<ffffffff810da1f5>] ? local_clock+0x25/0x30
      [  +0.000002]  [<ffffffff8110dca9>] ? mark_held_locks+0xb9/0x140
      [  +0.000003]  [<ffffffff810b4ed5>] ? __cancel_work_timer+0x95/0x160
      [  +0.000002]  [<ffffffff810b4ee8>] __cancel_work_timer+0xa8/0x160
      [  +0.000002]  [<ffffffff810b4fb0>] cancel_work_sync+0x10/0x20
      [  +0.000007]  [<ffffffffa0160d17>] 
drm_dp_destroy_mst_branch_device+0x27/0x120 [drm_kms_helper]
      [  +0.000006]  [<ffffffffa0163968>] drm_dp_mst_link_probe_work+0x78/0xa0 
[drm_kms_helper]
      [  +0.000002]  [<ffffffff810b5850>] process_one_work+0x220/0x710
      [  +0.000002]  [<ffffffff810b57e4>] ? process_one_work+0x1b4/0x710
      [  +0.000005]  [<ffffffff810b5e5b>] worker_thread+0x11b/0x3a0
      [  +0.000003]  [<ffffffff810b5d40>] ? process_one_work+0x710/0x710
      [  +0.000002]  [<ffffffff810beced>] kthread+0xed/0x100
      [  +0.000003]  [<ffffffff810bec00>] ? insert_kthread_work+0x80/0x80
      [  +0.000003]  [<ffffffff817121d8>] ret_from_fork+0x58/0x90

      v2: add flush_work.

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit d9515c5ec1a20c77d83471e634ad9bb12deb0eac
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Wed Sep 16 17:55:23 2015 +1000

      drm/dp/mst: split connector registration into two parts (v2)

      In order to cache the EDID properly for tiled displays, we
      need to retrieve it before we register the connector with
      userspace, otherwise userspace can call get resources
      and try and get the edid before we've even cached it.

      This fixes some problems when hotplugging mst monitors,
      with X/mutter running. As mutter seems to get 0 modes
      for one of the monitors in the tile.

      v2: fix warning in radeon
      handle tile setting in cached path rather than
      get edid path.

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 68d8c9fc91a0f63a2a10ccf7adf56f69125c11c1
  Author: Dave Airlie <airlied@xxxxxxxxx>
  Date:   Sun Sep 6 18:53:00 2015 +1000

      drm/dp/mst: update the link_address_sent before sending the link address 
(v3)

      Update the state before sending the msg to close it.

      v2: reset value if return indicates we haven't send the msg.
      v3: just clean the code up.
      Pointed out by Adam J Richter on

      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=91481

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit df4839fdc9b3c922586b945f062f38cbbda022bb
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Wed Sep 16 10:37:28 2015 +1000

      drm/dp/mst: fixup handling hotplug on port removal.

      output ports should always have a connector, unless
      in the rare case connector allocation fails in the
      driver.

      In this case we only need to teardown the pdt,
      and free the struct, and there is no need to
      send a hotplug msg.

      In the case were we add the port to the destroy
      list we need to send a hotplug if we destroy
      any connectors, so userspace knows to reprobe
      stuff.

      this patch also handles port->connector allocation
      failing which should be a rare event, but makes
      the code consistent.

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 1c960876be7cffd2798a9e2be090e0a5afaee895
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Wed Sep 16 11:04:49 2015 +1000

      drm/dp/mst: don't pass port into the path builder function

      This is unnecessary and it makes it easier to see what is needed
      from port.

      also add blank line to make things nicer.

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 0c6dadbe79c54818ed4c268297b663f0c4d1ef98
  Author: Alex Deucher <alexdeucher@xxxxxxxxx>
  Date:   Wed Sep 30 14:47:38 2015 -0400

      drm/radeon: drop radeon_fb_helper_set_par

      It was just a wrapper around drm_fb_helper_set_par that
      called cursor_set2 in addition.  Now that the core handles
      this, drop this radeon specific version.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 03f9abb28c3e10a1d0e08df8bca69e0606b23ea6
  Author: Alex Deucher <alexdeucher@xxxxxxxxx>
  Date:   Wed Sep 30 14:47:37 2015 -0400

      drm: handle cursor_set2 in restore_fbdev_mode

      If a driver uses the cursor_set2 crtc callback rather than
      cursor_set, use that.  This fixes the fbdev helper for drivers
      that use cursor_set2.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 646200a041203f440fb6fcf9cacd9efeda9de74c
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Mon Sep 28 17:21:07 2015 -0500

      [SMB3] Do not fall back to SMBWriteX in set_file_size error cases

      The error paths in set_file_size for cifs and smb3 are incorrect.

      In the unlikely event that a server did not support set file info
      of the file size, the code incorrectly falls back to trying SMBWriteX
      (note that only the original core SMB Write, used for example by DOS,
      can set the file size this way - this actually  does not work for the more
      recent SMBWriteX).  The idea was since the old DOS SMB Write could set
      the file size if you write zero bytes at that offset then use that if
      server rejects the normal set file info call.

      Fortunately the SMBWriteX will never be sent on the wire (except when
      file size is zero) since the length and offset fields were reversed
      in the two places in this function that call SMBWriteX causing
      the fall back path to return an error. It is also important to never call
      an SMB request from an SMB2/sMB3 session (which theoretically would
      be possible, and can cause a brief session drop, although the client
      recovers) so this should be fixed.  In practice this path does not happen
      with modern servers but the error fall back to SMBWriteX is clearly wrong.

      Removing the calls to SMBWriteX in the error paths in cifs_set_file_size

      Pointed out by PaX/grsecurity team

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>
      Reported-by: PaX Team <pageexec@xxxxxxxxxxx>
      CC: Emese Revfy <re.emese@xxxxxxxxx>
      CC: Brad Spengler <spender@xxxxxxxxxxxxxx>
      CC: Stable <stable@xxxxxxxxxxxxxxx>

  commit bde17b90dd9712cb61a7ab0c1ccd0f7f6aa57957
  Merge: 1bca100 676bd99
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 22:20:11 2015 -0400

      Merge branch 'akpm' (patches from Andrew)

      Merge misc fixes from Andrew Morton:
       "12 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        dmapool: fix overflow condition in pool_find_page()
        thermal: avoid division by zero in power allocator
        memcg: remove pcp_counter_lock
        kprobes: use _do_fork() in samples to make them work again
        drivers/input/joystick/Kconfig: zhenhua.c needs BITREVERSE
        memcg: make mem_cgroup_read_stat() unsigned
        memcg: fix dirty page migration
        dax: fix NULL pointer in __dax_pmd_fault()
        mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy 
a fault
        mm/slab: fix unexpected index mapping result of 
kmalloc_size(INDEX_NODE+1)
        userfaultfd: remove kernel header include from uapi header
        arch/x86/include/asm/efi.h: fix build failure

  commit 1bca1000fa71a1092947b4a51928abe80a3316d2
  Merge: 3deaa4f eb6d1c2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 22:06:40 2015 -0400

      Merge tag 'pm+acpi-4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull power management and ACPI fixes from Rafael Wysocki:
       "These are fixes mostly, for a few changes made in this cycle (the
        intel_idle driver, the OPP library, the ACPI EC driver, turbostat) and
        for some issues that have just been discovered (ACPI PCI IRQ
        management, PCI power management documentation, turbostat), with a
        couple of cleanups on top of them.

        Specifics:

         - intel_idle driver fixup for the recently added Skylake chips
           support (Len Brown).

         - Operating Performance Points (OPP) library fix related to the
           recently added support for new DT bindings and a fix for a typo in
           a comment (Viresh Kumar, Stephen Boyd).

         - ACPI EC driver fix for a recently introduced memory leak in an
           error code path (Lv Zheng).

         - ACPI PCI IRQ management fix for the issue where an ISA IRQ is
           shared with a PCI device which requires it to be configured in a
           different way and may cause an interrupt storm to happen as a
           result with an extra ACPI SCI IRQ handling simplification on top of
           it (Jiang Liu).

         - Update of the PCI power management documentation that became
           outdated and started to actively confuse the readers to make it
           actually reflect the code (Rafael J Wysocki).

         - turbostat fixes including an IVB Xeon regression fix (related to
           the --debug command line option), Skylake adjustment for the TSC
           running at a frequency that doesn't match the base one exactly, and
           a Knights Landing quirk to account for the fact that it only
           updates APERF and MPERF every 1024 clock cycles plus bumping up the
           turbostat version number (Len Brown, Hubert Chrzaniuk)"

      * tag 'pm+acpi-4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        tools/power turbosat: update version number
        tools/power turbostat: SKL: Adjust for TSC difference from base 
frequency
        tools/power turbostat: KNL workaround for %Busy and Avg_MHz
        tools/power turbostat: IVB Xeon: fix --debug regression
        ACPI / PCI: Remove duplicated penalty on SCI IRQ
        ACPI, PCI, irq: Do not share PCI IRQ with ISA IRQ
        ACPI / EC: Fix a memory leak issue in acpi_ec_query()
        PM / OPP: Fix typo modifcation -> modification
        PCI / PM: Update runtime PM documentation for PCI devices
        PM / OPP: of_property_count_u32_elems() can return errors
        intel_idle: Skylake Client Support - updated

  commit 6d3cbfa718eeedd70efb9eb04ce9b261b6fa5b7b
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Thu Oct 1 22:18:19 2015 +0800

      PM / devfreq: fix double kfree

      When device_register() fails, kfree(devfreq) is called already in
      devfreq_dev_release(), hence there is no need to call kfree(devfreq)
      in err_dev again.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 3deaa4f531506a12ac4860ccd83cb6cbcb15a7eb
  Merge: ccf70dd b84f787
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 21:55:35 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

      1) Fix regression in SKB partial checksum handling, from Pravin B
         Shalar.

      2) Fix VLAN inside of VXLAN handling in i40e driver, from Jesse
         Brandeburg.

      3) Cure softlockups during accept() in SCTP, from Karl Heiss.

      4) MSG_PEEK should return multiple SKBs worth of data in AF_UNIX, from
         Aaron Conole.

      5) IPV6 erroneously ignores output interface specifier in lookup key for
         route lookups, fix from David Ahern.

      6) In Marvell DSA driver, forward unknown frames to CPU port, from
         Andrew Lunn.

      7) Mission flow flag initializations in some code paths, from David
         Ahern.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net:
        net: Initialize flow flags in input path
        net: dsa: fix preparation of a port STP update
        testptp: Silence compiler warnings on ppc64
        net/mlx4: Handle return codes in mlx4_qp_attach_common
        dsa: mv88e6xxx: Enable forwarding for unknown to the CPU port
        skbuff: Fix skb checksum partial check.
        net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is set
        net sysfs: Print link speed as signed integer
        bna: fix error handling
        af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag
        af_unix: Convert the unix_sk macro to an inline function for type safety
        net: sctp: Don't use 64 kilobyte lookup table for four elements
        l2tp: protect tunnel->del_work by ref_count
        net/ibm/emac: bump version numbers for correct work with ethtool
        sctp: Prevent soft lockup when sctp_accept() is called during a timeout 
event
        sctp: Whitespace fix
        i40e/i40evf: check for stopped admin queue
        i40e: fix VLAN inside VXLAN
        r8169: fix handling rtl_readphy result
        net: hisilicon: fix handling platform_get_irq result

  commit 676bd99178cd962ed24ffdad222b7069d330a969
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Thu Oct 1 15:37:19 2015 -0700

      dmapool: fix overflow condition in pool_find_page()

      If a DMA pool lies at the very top of the dma_addr_t range (as may
      happen with an IOMMU involved), the calculated end address of the pool
      wraps around to zero, and page lookup always fails.

      Tweak the relevant calculation to be overflow-proof.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: Sumit Semwal <sumit.semwal@xxxxxxxxxx>
      Cc: Sakari Ailus <sakari.ailus@xxxxxx>
      Cc: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 44241628bb207ec211bebd156aaf69470d90c209
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Thu Oct 1 15:37:16 2015 -0700

      thermal: avoid division by zero in power allocator

      During boot I get a div by zero Oops regression starting in v4.3-rc3.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Reviewed-by: Javi Merino <javi.merino@xxxxxxx>
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Cc: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit ef510194cefe0cd369ef73419cd65b0a5bb4fb5b
  Author: Greg Thelen <gthelen@xxxxxxxxxx>
  Date:   Thu Oct 1 15:37:13 2015 -0700

      memcg: remove pcp_counter_lock

      Commit 733a572e66d2 ("memcg: make mem_cgroup_read_{stat|event}() iterate
      possible cpus instead of online") removed the last use of the per memcg
      pcp_counter_lock but forgot to remove the variable.

      Kill the vestigial variable.

      Signed-off-by: Greg Thelen <gthelen@xxxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Acked-by: Johannes Weiner <hannes@xxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 54aea4542980a3ed580426a81c5af799df4d610d
  Author: Petr Mladek <pmladek@xxxxxxxx>
  Date:   Thu Oct 1 15:37:11 2015 -0700

      kprobes: use _do_fork() in samples to make them work again

      Commit 3033f14ab78c ("clone: support passing tls argument via C rather
      than pt_regs magic") introduced _do_fork() that allowed to pass @tls
      parameter.

      The old do_fork() is defined only for architectures that are not ready
      to use this way and do not define HAVE_COPY_THREAD_TLS.

      Let's use _do_fork() in the kprobe examples to make them work again on
      all architectures.

      Signed-off-by: Petr Mladek <pmladek@xxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Thiago Macieira <thiago.macieira@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 09a59a9d57a9d6f49510c93304d6e105deb83b93
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:37:08 2015 -0700

      drivers/input/joystick/Kconfig: zhenhua.c needs BITREVERSE

      It uses bitrev8(), so it must ensure that lib/bitrev.o gets included in
      vmlinux.

      Cc: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Cc: yalin wang <yalin.wang2010@xxxxxxxxx>
      Cc: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 484ebb3b8c8b27dd2171696462a3116edb9ff801
  Author: Greg Thelen <gthelen@xxxxxxxxxx>
  Date:   Thu Oct 1 15:37:05 2015 -0700

      memcg: make mem_cgroup_read_stat() unsigned

      mem_cgroup_read_stat() returns a page count by summing per cpu page
      counters.  The summing is racy wrt.  updates, so a transient negative
      sum is possible.  Callers don't want negative values:

       - mem_cgroup_wb_stats() doesn't want negative nr_dirty or nr_writeback.
         This could confuse dirty throttling.

       - oom reports and memory.stat shouldn't show confusing negative usage.

       - tree_usage() already avoids negatives.

      Avoid returning negative page counts from mem_cgroup_read_stat() and
      convert it to unsigned.

      [akpm@xxxxxxxxxxxxxxxxxxxx: fix old typo while we're in there]
      Signed-off-by: Greg Thelen <gthelen@xxxxxxxxxx>
      Cc: Johannes Weiner <hannes@xxxxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>      [4.2+]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 0610c25daa3e76e38ad5a8fae683a89ff9f71798
  Author: Greg Thelen <gthelen@xxxxxxxxxx>
  Date:   Thu Oct 1 15:37:02 2015 -0700

      memcg: fix dirty page migration

      The problem starts with a file backed dirty page which is charged to a
      memcg.  Then page migration is used to move oldpage to newpage.

      Migration:
       - copies the oldpage's data to newpage
       - clears oldpage.PG_dirty
       - sets newpage.PG_dirty
       - uncharges oldpage from memcg
       - charges newpage to memcg

      Clearing oldpage.PG_dirty decrements the charged memcg's dirty page
      count.

      However, because newpage is not yet charged, setting newpage.PG_dirty
      does not increment the memcg's dirty page count.  After migration
      completes newpage.PG_dirty is eventually cleared, often in
      account_page_cleaned().  At this time newpage is charged to a memcg so
      the memcg's dirty page count is decremented which causes underflow
      because the count was not previously incremented by migration.  This
      underflow causes balance_dirty_pages() to see a very large unsigned
      number of dirty memcg pages which leads to aggressive throttling of
      buffered writes by processes in non root memcg.

      This issue:
       - can harm performance of non root memcg buffered writes.
       - can report too small (even negative) values in
         memory.stat[(total_)dirty] counters of all memcg, including the root.

      To avoid polluting migrate.c with #ifdef CONFIG_MEMCG checks, introduce
      page_memcg() and set_page_memcg() helpers.

      Test:
          0) setup and enter limited memcg
          mkdir /sys/fs/cgroup/test
          echo 1G > /sys/fs/cgroup/test/memory.limit_in_bytes
          echo $$ > /sys/fs/cgroup/test/cgroup.procs

          1) buffered writes baseline
          dd if=/dev/zero of=/data/tmp/foo bs=1M count=1k
          sync
          grep ^dirty /sys/fs/cgroup/test/memory.stat

          2) buffered writes with compaction antagonist to induce migration
          yes 1 > /proc/sys/vm/compact_memory &
          rm -rf /data/tmp/foo
          dd if=/dev/zero of=/data/tmp/foo bs=1M count=1k
          kill %
          sync
          grep ^dirty /sys/fs/cgroup/test/memory.stat

          3) buffered writes without antagonist, should match baseline
          rm -rf /data/tmp/foo
          dd if=/dev/zero of=/data/tmp/foo bs=1M count=1k
          sync
          grep ^dirty /sys/fs/cgroup/test/memory.stat

                             (speed, dirty residue)
                   unpatched                       patched
          1) 841 MB/s 0 dirty pages          886 MB/s 0 dirty pages
          2) 611 MB/s -33427456 dirty pages  793 MB/s 0 dirty pages
          3) 114 MB/s -33427456 dirty pages  891 MB/s 0 dirty pages

          Notice that unpatched baseline performance (1) fell after
          migration (3): 841 -> 114 MB/s.  In the patched kernel, post
          migration performance matches baseline.

      Fixes: c4843a7593a9 ("memcg: add per cgroup dirty page accounting")
      Signed-off-by: Greg Thelen <gthelen@xxxxxxxxxx>
      Reported-by: Dave Hansen <dave.hansen@xxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Acked-by: Johannes Weiner <hannes@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>      [4.2+]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8346c416d17bf5b4ea1508662959bb62e73fd6a5
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:36:59 2015 -0700

      dax: fix NULL pointer in __dax_pmd_fault()

      Commit 46c043ede471 ("mm: take i_mmap_lock in unmap_mapping_range() for
      DAX") moved some code in __dax_pmd_fault() that was responsible for
      zeroing newly allocated PMD pages.  The new location didn't properly set
      up 'kaddr', so when run this code resulted in a NULL pointer BUG.

      Fix this by getting the correct 'kaddr' via bdev_direct_access().

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Reported-by: Dan Williams <dan.j.williams@xxxxxxxxx>
      Reviewed-by: Dan Williams <dan.j.williams@xxxxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Matthew Wilcox <willy@xxxxxxxxxxxxxxx>
      Cc: "Kirill A. Shutemov" <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Dave Chinner <david@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 2f84a8990ebbe235c59716896e017c6b2ca1200f
  Author: Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:36:57 2015 -0700

      mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a 
fault

      SunDong reported the following on

        https://bugzilla.kernel.org/show_bug.cgi?id=103841

        I think I find a linux bug, I have the test cases is constructed. I
        can stable recurring problems in fedora22(4.0.4) kernel version,
        arch for x86_64.  I construct transparent huge page, when the parent
        and child process with MAP_SHARE, MAP_PRIVATE way to access the same
        huge page area, it has the opportunity to lead to huge page copy on
        write failure, and then it will munmap the child corresponding mmap
        area, but then the child mmap area with VM_MAYSHARE attributes, child
        process munmap this area can trigger VM_BUG_ON in set_vma_resv_flags
        functions (vma - > vm_flags & VM_MAYSHARE).

      There were a number of problems with the report (e.g.  it's hugetlbfs that
      triggers this, not transparent huge pages) but it was fundamentally
      correct in that a VM_BUG_ON in set_vma_resv_flags() can be triggered that
      looks like this

         vma ffff8804651fd0d0 start 00007fc474e00000 end 00007fc475e00000
         next ffff8804651fd018 prev ffff8804651fd188 mm ffff88046b1b1800
         prot 8000000000000027 anon_vma           (null) vm_ops ffffffff8182a7a0
         pgoff 0 file ffff88106bdb9800 private_data           (null)
         flags: 
0x84400fb(read|write|shared|mayread|maywrite|mayexec|mayshare|dontexpand|hugetlb)
         ------------
         kernel BUG at mm/hugetlb.c:462!
         SMP
         Modules linked in: xt_pkttype xt_LOG xt_limit [..]
         CPU: 38 PID: 26839 Comm: map Not tainted 4.0.4-default #1
         Hardware name: Dell Inc. PowerEdge R810/0TT6JF, BIOS 2.7.4 04/26/2012
         set_vma_resv_flags+0x2d/0x30

      The VM_BUG_ON is correct because private and shared mappings have
      different reservation accounting but the warning clearly shows that the
      VMA is shared.

      When a private COW fails to allocate a new page then only the process
      that created the VMA gets the page -- all the children unmap the page.
      If the children access that data in the future then they get killed.

      The problem is that the same file is mapped shared and private.  During
      the COW, the allocation fails, the VMAs are traversed to unmap the other
      private pages but a shared VMA is found and the bug is triggered.  This
      patch identifies such VMAs and skips them.

      Signed-off-by: Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx>
      Reported-by: SunDong <sund_sky@xxxxxxx>
      Reviewed-by: Michal Hocko <mhocko@xxxxxxxx>
      Cc: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Hugh Dickins <hughd@xxxxxxxxxx>
      Cc: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Reviewed-by: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 03a2d2a3eafe4015412cf4e9675ca0e2d9204074
  Author: Joonsoo Kim <js1304@xxxxxxxxx>
  Date:   Thu Oct 1 15:36:54 2015 -0700

      mm/slab: fix unexpected index mapping result of kmalloc_size(INDEX_NODE+1)

      Commit description is copied from the original post of this bug:

        http://comments.gmane.org/gmane.linux.kernel.mm/135349

      Kernels after v3.9 use kmalloc_size(INDEX_NODE + 1) to get the next
      larger cache size than the size index INDEX_NODE mapping.  In kernels
      3.9 and earlier we used malloc_sizes[INDEX_L3 + 1].cs_size.

      However, sometimes we can't get the right output we expected via
      kmalloc_size(INDEX_NODE + 1), causing a BUG().

      The mapping table in the latest kernel is like:
          index = {0,   1,  2 ,  3,  4,   5,   6,   n}
           size = {0,   96, 192, 8, 16,  32,  64,   2^n}
      The mapping table before 3.10 is like this:
          index = {0 , 1 , 2,   3,  4 ,  5 ,  6,   n}
          size  = {32, 64, 96, 128, 192, 256, 512, 2^(n+3)}

      The problem on my mips64 machine is as follows:

      (1) When configured DEBUG_SLAB && DEBUG_PAGEALLOC && DEBUG_LOCK_ALLOC
          && DEBUG_SPINLOCK, the sizeof(struct kmem_cache_node) will be "150",
          and the macro INDEX_NODE turns out to be "2": #define INDEX_NODE
          kmalloc_index(sizeof(struct kmem_cache_node))

      (2) Then the result of kmalloc_size(INDEX_NODE + 1) is 8.

      (3) Then "if(size >= kmalloc_size(INDEX_NODE + 1)" will lead to "size
          = PAGE_SIZE".

      (4) Then "if ((size >= (PAGE_SIZE >> 3))" test will be satisfied and
          "flags |= CFLGS_OFF_SLAB" will be covered.

      (5) if (flags & CFLGS_OFF_SLAB)" test will be satisfied and will go to
          "cachep->slabp_cache = kmalloc_slab(slab_size, 0u)", and the result
          here may be NULL while kernel bootup.

      (6) Finally,"BUG_ON(ZERO_OR_NULL_PTR(cachep->slabp_cache));" causes the
          BUG info as the following shows (may be only mips64 has this problem):

      This patch fixes the problem of kmalloc_size(INDEX_NODE + 1) and removes
      the BUG by adding 'size >= 256' check to guarantee that all necessary
      small sized slabs are initialized regardless sequence of slab size in
      mapping table.

      Fixes: e33660165c90 ("slab: Use common kmalloc_index/kmalloc_size...")
      Signed-off-by: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Reported-by: Liuhailong <liu.hailong6@xxxxxxxxxx>
      Acked-by: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 9ff42d10c3b3e26d9555878f31b9a2e5c24efa57
  Author: Andre Przywara <andre.przywara@xxxxxxx>
  Date:   Thu Oct 1 15:36:51 2015 -0700

      userfaultfd: remove kernel header include from uapi header

      As include/uapi/linux/userfaultfd.h is a user visible header file, it
      should not include kernel-exclusive header files.

      So trying to build the userfaultfd test program from the selftests
      directory fails, since it contains a reference to linux/compiler.h.  As
      it turns out, that header is not really needed there, so we can simply
      remove it to fix that issue.

      Signed-off-by: Andre Przywara <andre.przywara@xxxxxxx>
      Cc: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit a523841ee4e506fa1f05ff3a85b1e6d8176a3d4d
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Thu Oct 1 15:36:48 2015 -0700

      arch/x86/include/asm/efi.h: fix build failure

      With KMEMCHECK=y, KASAN=n:

        arch/x86/platform/efi/efi.c:673:3: error: implicit declaration of 
function `memcpy' [-Werror=implicit-function-declaration]
        arch/x86/platform/efi/efi_64.c:139:2: error: implicit declaration of 
function `memcpy' [-Werror=implicit-function-declaration]
        arch/x86/include/asm/desc.h:121:2: error: implicit declaration of 
function `memcpy' [-Werror=implicit-function-declaration]

      Don't #undef memcpy if KASAN=n.

      Fixes: 769a8089c1fd ("x86, efi, kasan: #undef memset/memcpy/memmove per 
arch")
      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Reported-by: Sedat Dilek <sedat.dilek@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 2dc6a0303b89de4c92b44f5278d61b6b6c9c20eb
  Merge: 4bf1b54 248234c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 18:24:12 2015 -0700

      Merge branch 'bridge_vlan_cleanups_fixes'

      Nikolay Aleksandrov says:

      ====================
      bridge: vlan: cleanups & fixes

      This is the first follow-up set, patch 01 reduces the default rhashtable
      size and the number of locks that can be allocated. Patch 02 and 04 fix
      possible null pointer dereferences due to the new ordering and
      initialization on port add/del, and patch 03 moves the "pvid" member in
      the net_bridge_vlan_group struct in order to simplify code (similar to how
      it was with the older struct). Patch 05 fixes adding a vlan on a port 
which
      is pvid and doesn't have a global context yet.
      Please review carefully, I think this is the first use of rhashtable's
      "locks_mul" member in the tree and I'd like to make sure it's correct.
      Another thing that needs special attention is the nbp_vlan_flush() move
      after the rx_handler unregister.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 248234ca029710fbad6423c48f98c2a6ea9582fb
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:55 2015 +0200

      bridge: vlan: don't pass flags when creating context only

      We should not pass the original flags when creating a context vlan only
      because they may contain some flags that change behaviour in the bridge.
      The new global context should be with minimal set of flags, so pass 0
      and let br_vlan_add() set the master flag only.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 263344e64c0a2ac0e409a1a3f27effb6d57b853e
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:54 2015 +0200

      bridge: vlan: fix possible null ptr derefs on port init and deinit

      When a new port is being added we need to make vlgrp available after
      rhashtable has been initialized and when removing a port we need to
      flush the vlans and free the resources after we're sure noone can use
      the port, i.e. after it's removed from the port list and synchronize_rcu
      is executed.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77751ee8aec3e1748e0d1471ccbfc008793e88a6
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:53 2015 +0200

      bridge: vlan: move pvid inside net_bridge_vlan_group

      One obvious way to converge more code (which was also used by the
      previous vlan code) is to move pvid inside net_bridge_vlan_group. This
      allows us to simplify some and remove other port-specific functions.
      Also gives us the ability to simply pass the vlan group and use all of the
      contained information.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 468e7944589c7f096bb4ea14db17980aa6c2766c
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:52 2015 +0200

      bridge: vlan: fix possible null vlgrp deref while registering new port

      While a new port is being initialized the rx_handler gets set, but the
      vlans get initialized later in br_add_if() and in that window if we
      receive a frame with a link-local address we can try to dereference
      p->vlgrp in:
      br_handle_frame() -> br_handle_local_finish() -> br_should_learn()

      Fix this by checking vlgrp before using it.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8af78b6487856d8a896ba15e9255b8e5fa91eb5f
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:51 2015 +0200

      bridge: vlan: adjust rhashtable initial size and hash locks size

      As Stephen pointed out the default initial size is more than we need, so
      let's start small (4 elements, thus nelem_hint = 3). Also limit the hash
      locks to the number of CPUs as we don't need any write-side scaling and
      this looks like the minimum.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec403b89e3152f93199b7b1813148bcdf6829311
  Merge: 62886a3 b94be97
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 2 10:47:29 2015 +1000

      Merge tag 'drm-intel-fixes-2015-10-01' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      a few i915 fixes for v4.3.

      * tag 'drm-intel-fixes-2015-10-01' of 
git://anongit.freedesktop.org/drm-intel:
        drm/i915: Call non-locking version of drm_kms_helper_poll_enable(), v2
        drm: Add a non-locking version of drm_kms_helper_poll_enable(), v2
        drm/i915: Consider HW CSB write pointer before resetting the sw read 
pointer
        drm/i915/skl: Don't call intel_prepare_ddi when encoder list isn't yet 
initialized.

  commit 62886a367b59d7740f9db89fd418ab3e450ab7c7
  Merge: 8e592ea 575f9c8
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 2 10:46:51 2015 +1000

      Merge tag 'vmwgfx-fixes-4.3-151001' of 
git://people.freedesktop.org/~thomash/linux into drm-fixes

      A single commit to fix a command submission hang regression.

      Pull request of 2015-10-01

      * tag 'vmwgfx-fixes-4.3-151001' of 
git://people.freedesktop.org/~thomash/linux:
        drm/vmwgfx: Fix a command submission hang regression

  commit 8e592eab0401bd70a8ba8534b903145855a7b703
  Merge: 5b63864 cda3742
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 2 10:46:18 2015 +1000

      Merge branch 'exynos-drm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos into drm-fixes

         This pull request includes regression fixups, build warnings, and
         trivial cleanups which mostly remove some codes not used anymore.

      * 'exynos-drm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos:
        drm/exynos: Staticize local function in exynos_drm_gem.c
        drm/exynos: fimd: actually disable dp clock
        drm/exynos: dp: remove suspend/resume functions
        drm/exynos: remove unused mode_fixup() code
        drm/exynos: remove decon_mode_fixup()
        drm/exynos: remove fimd_mode_fixup()
        drm/exynos: rotator: Clock control is unused if !PM
        drm/exynos: fimc: Clock control is unused if !PM
        drm/exynos: Suspend/resume is unused if !PM
        drm/exynos: create a fake mmap offset with gem creation
        drm/exynos: remove call to drm_gem_free_mmap_offset()
        drm/exynos: Remove useless EXPORT_SYMBOL_GPLs
        drm/exynos: cleanup line feed in exynos_drm_gem_get_ioctl
        drm/exynos: cleanup function calling written twice
        drm/exynos: staticize exynos_drm_gem_init()
        drm/exynos: remove unnecessary NULL assignment
        drm/exynos: fix missed calling of drm_prime_gem_destroy()
        drm/exynos: fix layering violation of address

  commit 5b6386419c4f78526afe1615668b6444d7b66fd7
  Merge: 8d0d940 3e4e380
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 2 10:35:22 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      radeon and amdgpu fixes for 4.3.
      - backlight s/r fixes
      - typo fix from Dan
      - vm debugging fix
      - remove import_gpu_mem after discussion with Daniel

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: only print meaningful VM faults
        drm/amdgpu/cgs: remove import_gpu_mem
        drm/amdgpu:  Restore LCD backlight level on resume
        drm/radeon: Restore LCD backlight level on resume (>= R5xx)
        drm/amdgpu: signedness bug in amdgpu_cs_parser_init()

  commit ccf70ddcbe9984cee406be2bacfedd5e4776919d
  Merge: 46c8217 d292242
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 16:43:25 2015 -0400

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM fixes from Paolo Bonzini:
       "(Relatively) a lot of reverts, mostly.

        Bugs have trickled in for a new feature in 4.2 (MTRR support in
        guests) so I'm reverting it all; let's not make this -rc period busier
        for KVM than it's been so far.  This covers the four reverts from me.

        The fifth patch is being reverted because Radim found a bug in the
        implementation of stable scheduler clock, *but* also managed to
        implement the feature entirely without hypervisor support.  So instead
        of fixing the hypervisor side we can remove it completely; 4.4 will
        get the new implementation"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS
        Update KVM homepage Url
        Revert "KVM: SVM: use NPT page attributes"
        Revert "KVM: svm: handle KVM_X86_QUIRK_CD_NW_CLEARED in svm_get_mt_mask"
        Revert "KVM: SVM: Sync g_pat with guest-written PAT value"
        Revert "KVM: x86: apply guest MTRR virtualization on host reserved 
pages"
        Revert "KVM: x86: zero kvmclock_offset when vcpu0 initializes kvmclock 
system MSR"

  commit 46c8217c4a54c17dd4c000ad804fa1e223a10578
  Merge: f97b870 2866196
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 16:38:52 2015 -0400

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull rdma fixes from Doug Ledford:
       - Fixes for mlx5 related issues
       - Fixes for ipoib multicast handling

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/ipoib: increase the max mcast backlog queue
        IB/ipoib: Make sendonly multicast joins create the mcast group
        IB/ipoib: Expire sendonly multicast joins
        IB/mlx5: Remove pa_lkey usages
        IB/mlx5: Remove support for IB_DEVICE_LOCAL_DMA_LKEY
        IB/iser: Add module parameter for always register memory
        xprtrdma: Replace global lkey with lkey local to PD

  commit eb6d1c287ae1f7221248d5be26a5b1560073c09e
  Merge: 01351eb e9a7bed e1a2d49 a9062dc
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Oct 1 22:30:47 2015 +0200

      Merge branches 'pm-cpuidle', 'pm-opp' and 'pm-tools'

      * pm-cpuidle:
        intel_idle: Skylake Client Support - updated

      * pm-opp:
        PM / OPP: Fix typo modifcation -> modification
        PM / OPP: of_property_count_u32_elems() can return errors

      * pm-tools:
        tools/power turbosat: update version number
        tools/power turbostat: SKL: Adjust for TSC difference from base 
frequency
        tools/power turbostat: KNL workaround for %Busy and Avg_MHz
        tools/power turbostat: IVB Xeon: fix --debug regression

  commit 01351eb23c5047895c14c91a898546c289a3c35c
  Merge: dd953d3 15b94fa
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Oct 1 22:30:35 2015 +0200

      Merge branch 'acpi-ec'

      * acpi-ec:
        ACPI / EC: Fix a memory leak issue in acpi_ec_query()

  commit dd953d318daad9a3c1f9a6bf31430bf40163051e
  Merge: 9ffecb1 a836006 d323efc
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Oct 1 22:30:12 2015 +0200

      Merge branches 'pm-pci' and 'acpi-pci'

      * pm-pci:
        PCI / PM: Update runtime PM documentation for PCI devices

      * acpi-pci:
        ACPI / PCI: Remove duplicated penalty on SCI IRQ
        ACPI, PCI, irq: Do not share PCI IRQ with ISA IRQ

  commit 1f744fd317dc55cadd7132c57c499e3117aea01d
  Author: Thomas Hebb <tommyhebb@xxxxxxxxx>
  Date:   Thu Oct 1 21:00:00 2015 +0200

      ARM: dts: berlin: change BG2Q's USB PHY compatible

      Currently, BG2Q shares a compatible with BG2. This is incorrect, since
      BG2 and BG2Q use different USB PLL dividers. In reality, BG2Q shares a
      divider with BG2CD. Change BG2Q's USB PHY compatible string to reflect
      that.

      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2.0-
      Signed-off-by: Thomas Hebb <tommyhebb@xxxxxxxxx>
      Signed-off-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>

  commit 1378889c563a2938d231203ed36c041af183b798
  Author: Paul Mackerras <paulus@xxxxxxxxxx>
  Date:   Sat Sep 26 10:19:15 2015 +1000

      scsi_dh: Use the correct module name when loading device handler

      This fixes a bug in recent kernels which results in failure to boot
      on systems that have multipath SCSI disks.  I observed this failure
      on a POWER8 server where all the disks are multipath SCSI disks.
      The symptoms are several messages like this on the console:

      [    3.018700] device-mapper: table: 253:0: multipath: error attaching 
hardware handler
      [    3.018828] device-mapper: ioctl: error adding target to table

      and the system does not find its disks, and therefore fails to boot.

      Bisection revealed that the bug was introduced in commit 566079c849cf,
      "dm-mpath, scsi_dh: request scsi_dh modules in scsi_dh, not dm-mpath".
      The specific reason for the failure is that where we previously loaded
      the "scsi_dh_alua" module, we are now trying to load the "alua" module,
      which doesn't exist.

      To fix this, we change the request_module call in scsi_dh_lookup()
      to prepend "scsi_dh_" to the name, just like the old code in
      drivers/md/dm-mpath.c:parse_hw_handler() used to do.

      [jejb: also fixes issue spotted by Sasha Levin that formatting
      characters could be passed in via sysfs and cause issues with
      request_module()]

      Fixes: 566079c849cf
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxxx>
      Cc: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 1a541b4e3cd6f5795022514114854b3e1345f24e
  Author: Steve Capper <steve.capper@xxxxxxxxxx>
  Date:   Thu Oct 1 13:06:07 2015 +0100

      arm64: Fix THP protection change logic

      6910fa1 ("arm64: enable PTE type bit in the mask for pte_modify") fixes
      a problem whereby a large block of PROT_NONE mapped memory is
      incorrectly mapped as block descriptors when mprotect is called.

      Unfortunately, a subtle bug was introduced by this fix to the THP logic.

      If one mmaps a large block of memory, then faults it such that it is
      collapsed into THPs; resulting calls to mprotect on this area of memory
      will lead to incorrect table descriptors being written instead of block
      descriptors. This is because pmd_modify calls pte_modify which is now
      allowed to modify the type of the page table entry.

      This patch reverts commit 6910fa16dbe142f6a0fd0fd7c249f9883ff7fc8a, and
      fixes the problem it was trying to address by adjusting PAGE_NONE to
      represent a table entry. Thus no change in pte type is required when
      moving from PROT_NONE to a different protection.

      Fixes: 6910fa16dbe1 ("arm64: enable PTE type bit in the mask for 
pte_modify")
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+
      Cc: Feng Kan <fkan@xxxxxxx>
      Reported-by: Ganapatrao Kulkarni <Ganapatrao.Kulkarni@xxxxxxxxxxxxxxxxxx>
      Tested-by: Ganapatrao Kulkarni <gkulkarni@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Steve Capper <steve.capper@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 090e2edb4171dae4872c4eaae972dd3ccf96d4a8
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:32 2015 +0200

      net: sfc: avoid using timespec

      The sfc driver internally uses a time format based on 32-bit (unsigned)
      seconds and 32-bit nanoseconds. This means it will overflow in 2106,
      but the value we pass into it is a signed 32-bit tv_sec that already
      overflows in 2038 to a negative value.

      This patch changes the logic to use the lower 32 bits of the timespec64
      tv_sec in efx_ptp_ns_to_s_ns, which will have the correct value beyond 
the overflow.
      While this does not change any of the register values, it lets us
      keep using the driver after we deprecate the use of the timespec type
      in the kernel.

      In the efx_ptp_process_times function, the change to use timespec64
      is similar, in that the tv_sec portion is ignored anyway and we only
      care about the nanosecond portion that remains unchanged.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit ade1bdffe90e59cd257cb9bd4f5abe4de5f14911
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:31 2015 +0200

      ntp/pps: use y2038 safe types in pps_event_time

      The pps_event_time uses two 'timespec' structures internally, which
      suffer from the y2038 problem. The uses of this structure are
      fairly self-contained in the pps code, so this replaces them all at
      once.

      Unfortunately, this includes the sfc ethernet driver aside from the
      pps subsystem, so we change that one as well. Both touch the
      same data structure, and there probably is no good way to split
      the patch into smaller units.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit 5fd96c421ff2c76ec441aa4139c3b87dfea93e3a
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:30 2015 +0200

      ntp: use timespec64 in sync_cmos_clock

      The sync_cmos_clock has one use of struct timespec, which we want to
      eventually replace with timespec64 or similar in the kernel. There
      is no way this one can overflow, but the conversion to timespec64
      is trivial and has no other dependencies.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit 071eee45b1650d53d21c636d344bdcebd4577ed2
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:29 2015 +0200

      ntp/pps: replace getnstime_raw_and_real with 64-bit version

      There is exactly one caller of getnstime_raw_and_real in the kernel,
      which is the pps_get_ts function. This changes the caller and
      the implementation to work on timespec64 types rather than timespec,
      to avoid the time_t overflow on 32-bit architectures.

      For consistency with the other new functions (ktime_get_seconds,
      ktime_get_real_*, ...), I'm renaming the function to
      ktime_get_raw_and_real_ts64.

      We still need to convert from the internal 64-bit type to 32 bit
      types in the caller, but this conversion is now pushed out from
      getnstime_raw_and_real to pps_get_ts. A follow-up patch changes
      the remaining pps code to completely avoid the conversion.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit 7ec88e4be461590b5a3817460c34603f76d9b3ae
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:28 2015 +0200

      ntp/pps: use timespec64 for hardpps()

      There is only one user of the hardpps function in the kernel, so
      it makes sense to atomically change it over to using 64-bit
      timestamps for y2038 safety. In the hardpps implementation,
      we also need to change the pps_normtime structure, which is
      similar to struct timespec and also requires a 64-bit
      seconds portion.

      This introduces two temporary variables in pps_kc_event() to
      do the conversion, they will be removed again in the next step,
      which seemed preferable to having a larger patch changing it
      all at the same time.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit b1842ffddf8941aee4fcd95594bf62d3dc2867cc
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:41:42 2015 -0500

      ipv6: Add missing newline to __xfrm6_output_finish

      Add a newline between variable declarations and the code.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 1b52e50f2a402a266f1ba2281f0a57e87637a047
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 14:26:54 2015 +0200

      mfd: max77843: Fix max77843_chg_init() return on error

      If i2c_new_dummy() fails in max77843_chg_init(), an PTR_ERR(NULL) is
      returned which is 0. So the function was wrongly returning a success
      value instead of an error code.

      Cc: stable@xxxxxxxxxxxxxxx # 4.1
      Fixes: c7f585fe46d8 ("mfd: max77843: Add max77843 MFD driver core driver")
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>

  commit 47b91923ea41288751e83a5b080576085a831333
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 11:32:47 2015 +0300

      mfd: intel-lpss: Fix build error when !CONFIG_PM_SLEEP

      Jim Davis reported the compilation error with a random configuration which
      apparently has CONFIG_PM=y and CONFIG_PM_SLEEP=n. With that conditions we 
have
      missed definition of INTEL_LPSS_SLEEP_PM_OPS macro. Add it here.

      Reported-by: Jim Davis <jim.epost@xxxxxxxxx>
      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>

  commit 9e7e2b0a6a005941a6854cdabae19c3d9e069dbe
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:54:53 2015 +0300

      genirq: Remove unused functions irqd_[set|clr]_chained_irq_inprogress()

      These two functions are not used anywhere in the kernel source tree so
      remove them.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443704093-36837-2-git-send-email-mika.westerberg@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 92068d17c20b218bf1e24505a3e08495476b0ebf
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:54:52 2015 +0300

      genirq: Fix typo in documentation of enumeration field name

      It should say IRQ_NESTED_THREAD instead of IRQ_NESTED_TRHEAD.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443704093-36837-1-git-send-email-mika.westerberg@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit dbc67409fa912ba063dfa956af0543af1258fc97
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 1 12:12:22 2015 -0300

      perf list: Do event name substring search as last resort when no events 
found

      Before:

        # perf list _alloc_ | head -10
        #

      After:

        # perf list _alloc_ | head -10
          ext4:ext4_alloc_da_blocks                          [Tracepoint event]
          ext4:ext4_get_implied_cluster_alloc_exit           [Tracepoint event]
          kmem:kmem_cache_alloc_node                         [Tracepoint event]
          kmem:mm_page_alloc_extfrag                         [Tracepoint event]
          kmem:mm_page_alloc_zone_locked                     [Tracepoint event]
          xen:xen_mmu_alloc_ptpage                           [Tracepoint event]
        #

      And it works for all types of events:

        # perf list br

        List of pre-defined events (to be used in -e):

          branch-instructions OR branches                    [Hardware event]
          branch-misses                                      [Hardware event]

          branch-load-misses                                 [Hardware cache 
event]
          branch-loads                                       [Hardware cache 
event]

          branch-instructions OR cpu/branch-instructions/    [Kernel PMU event]
          branch-misses OR cpu/branch-misses/                [Kernel PMU event]

          filelock:break_lease_block                         [Tracepoint event]
          filelock:break_lease_noblock                       [Tracepoint event]
          filelock:break_lease_unblock                       [Tracepoint event]
          syscalls:sys_enter_brk                             [Tracepoint event]
          syscalls:sys_exit_brk                              [Tracepoint event]

        #

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-qieivl18jdemoaghgndj36e6@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2a708cff93f1845b9239bc7d6310aef54e716c6a
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 08:31:51 2015 +0000

      dm: fix AB-BA deadlock in __dm_destroy()

      __dm_destroy() takes io_barrier SRCU lock (dm_get_live_table) and
      suspend_lock in reverse order.  Doing so can cause AB-BA deadlock:

        __dm_destroy                    dm_swap_table
        ---------------------------------------------------
                                        mutex_lock(suspend_lock)
        dm_get_live_table()
          srcu_read_lock(io_barrier)
                                        dm_sync_table()
                                          synchronize_srcu(io_barrier)
                                            .. waiting for dm_put_live_table()
        mutex_lock(suspend_lock)
          .. waiting for suspend_lock

      Fix this by taking the locks in proper order.

      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Fixes: ab7c7bb6f4ab ("dm: hold suspend_lock while suspending device 
during device deletion")
      Acked-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit a51e80d002b63bbdaff3229f3ebf4fbb53c75c33
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Thu Oct 1 22:26:44 2015 +0800

      irqchip/i8259: Convert to use irq_set_chained_handler_and_data

      Chained irq handlers usually set up handler data as well. We now have
      a function to set both under irq_desc->lock. Replace the two calls
      with one.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: http://lkml.kernel.org/r/1443709604.12993.0.camel@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit bebcb8dab6bac53b6a61a896db03781d1992cadb
  Merge: 26c21dd f1e0bb0
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 16:14:24 2015 +0200

      Merge branch 'irq/for-arm' into irq/core

      Bring in the change which we offered arm[64] folks to pull into their
      trees.

  commit 9196d9676fe790975fdb1fc03230629139c6ea8e
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Wed Sep 30 05:40:00 2015 -0700

      crypto: qat - remove unneeded variable

      Remove unneeded variable val_indx.
      Issue found by a static analyzer.

      Reported-by: Giovanni Cabiddu <giovanni.cabiddu@xxxxxxxxx>
      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit def14bfaf30d5d5a4a8fe5bf600ce09232e688c0
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Wed Sep 30 05:38:39 2015 -0700

      crypto: qat - add support for ctr(aes) and xts(aes)

      Add support for ctr and xts encryption modes.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ecdd6bed292fda02a3e3997307ac228edcab0b22
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Sun Sep 27 22:47:05 2015 +0800

      crypto: skcipher - blkcipher and ablkcipher should it be static

      Fixes the following sparse warnings:

       crypto/skcipher.c:94:5:
       warning: symbol 'crypto_init_skcipher_ops_blkcipher'
       was not declared. Should it be static?

       crypto/skcipher.c:185:5:
       warning: symbol 'crypto_init_skcipher_ops_ablkcipher'
       was not declared. Should it be static?

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 284a0f6e87b0721e1be8bca419893902d9cf577a
  Author: John Haxby <john.haxby@xxxxxxxxxx>
  Date:   Thu Sep 24 18:24:35 2015 +0100

      crypto: testmgr - Disable fips-allowed for authenc() and des() ciphers

      No authenc() ciphers are FIPS approved, nor is ecb(des).
      After the end of 2015, ansi_cprng will also be non-approved.

      Signed-off-by: John Haxby <john.haxby@xxxxxxxxxx>
      Acked-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 640eec52abbcb962804e8ff0c69e9802b0b726c0
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Sep 23 13:55:28 2015 +0200

      crypto: sahara - dma_map_sg can handle chained SG

      The sahara driver use two dma_map_sg path according to SG are chained
      or not.
      Since dma_map_sg can handle both case, clean the code with all
      references to sg chained.

      Thus removing the sahara_sha_unmap_sg function.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 13fb8fd7a81923f7a64b4e688fe0bdaf1ea26adf
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Sep 23 13:55:27 2015 +0200

      crypto: caam - dma_map_sg can handle chained SG

      The caam driver use two dma_map_sg path according to SG are chained
      or not.
      Since dma_map_sg can handle both case, clean the code with all
      references to sg chained.

      Thus removing dma_map_sg_chained, dma_unmap_sg_chained
      and __sg_count functions.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b8a011d41c988aeb9aa199eb80ccd5179b5940c1
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Sep 23 13:55:25 2015 +0200

      crypto: talitos - dma_map_sg can handle chained SG

      The talitos driver use two dma_map_sg path
      according to SG are chained or not.
      Since dma_map_sg can handle both case, clean the code with all
      references to sg chained.

      Thus removing talitos_map_sg, talitos_unmap_sg_chain
      and sg_count functions.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit be2cfac07619a8f97fe3aae39f095e9e33decd99
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Tue Sep 22 11:57:47 2015 -0700

      crypto: qat - remove empty functions and turn qat_uregister fn to void

      Some code cleanups after crypto API changes:
      - Change qat_algs_unregister to a void function to keep it consistent
        with qat_asym_algs_unregister.
      - Remove empty functions qat_algs_init & qat_algs_exit.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 1e16a8f11669c98a0adf5fb5f8522aebc1f69f71
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:45:44 2015 +0200

      MIPS: BPF: Do all exports of symbols with FEXPORT().

      FEXPORT also marks the symbol as code using .type symbol, @function.
      Without objdump -d will output only a hexdump for code following the
      affected symbols.

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d2922422c48df93f3edff7d872ee4f3191fefb08
  Author: Dirk Müller <dmueller@xxxxxxxx>
  Date:   Thu Oct 1 13:43:42 2015 +0200

      Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS

      The cpu feature flags are not ever going to change, so warning
      everytime can cause a lot of kernel log spam
      (in our case more than 10GB/hour).

      The warning seems to only occur when nested virtualization is
      enabled, so it's probably triggered by a KVM bug.  This is a
      sensible and safe change anyway, and the KVM bug fix might not
      be suitable for stable releases anyway.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dirk Mueller <dmueller@xxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 0edd453368c6b9cdb756bde2b6675bb0d5d0eb0a
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:48 2015 +0300

      perf callchain: Allow for max_stack greater than PERF_MAX_STACK_DEPTH

      Adjust the validation to allow for max_stack greater than
      PERF_MAX_STACK_DEPTH.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-18-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 208e7607459477432d3df52c32d4b961a96d4a94
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Sep 30 13:34:00 2015 +0900

      perf report: Fix a bug on "--call-graph none" option

      The patch f9db0d0f1b2c ("perf callchain: Allow disabling call graphs
      per event") added an ability to enable/disable callchain recording per
      event.  But it had a problem when the enablement setting is changed at
      'perf report' time using -g/--call-graph option.

      For example, the following scenario will get a segfault.

        $ perf record -ag sleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.500 MB perf.data (2555 samples) ]

        $ perf report -g none
        perf: Segmentation fault
        -------- backtrace --------
        perf[0x53a98a]
        /usr/lib/libc.so.6(+0x335af)[0x7f4e91df95af]

      This is because callchain_param.sort() callback was not set but it
      tried to call the function as it had the PERF_SAMPLE_CALLCHAIN bit.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Fixes: f9db0d0f1b2c ("perf callchain: Allow disabling call graphs per 
event")
      Link: 
http://lkml.kernel.org/r/1443587640-24242-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c53d138d41a7f33cf085762c64b4b61e8d223e1c
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Sep 30 10:45:26 2015 +0900

      perf top: Register idle thread

      The perf top didn't add the idle/swapper thread to the machine's thread
      list and its comm was displayed as ':0'.  Fix it.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443577526-3240-3-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4b37af595742977f1bdd8c0fd0f3e6e55b36e7b7
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Sep 30 10:45:25 2015 +0900

      perf top: Fix unresolved comm when -s comm is used

      The perf top uses 'dso,symbol' sort keys by default so it overlooked a
      problem in task's comm resolving.  When the sort key contains 'comm',
      some task's comm is not shown properly.  This is because the
      perf_top__mmap_read_idx() checks the cpumode value improperly.

      The cpumode value of non-sample events are 0 (PERF_RECORD_MISC_CPUMODE_
      UNKNOWN) so the events will be ignored by the switch statement.  This 
patch
      allows it for non-sample events.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443577526-3240-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e5bed564485b340d87f2d8945643a393e55b8225
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Sep 30 10:45:24 2015 +0900

      perf record: Allocate area for sample_id_hdr in a synthesized comm event

      A previous patch added a synthesized comm event for forked child process
      but it missed that the event should contain area for sample_id_hdr at
      the end.  It worked by accident since the perf_event union contains
      bigger event structs like mmap_events.

      This patch fixes it by dynamically allocating event struct including
      those area like in perf_event__synthesize_thread_map().

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443577526-3240-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f1e0bb0ad473a32d1b7e6d285ae9f7e47710bb5e
  Author: Yang Yingliang <yangyingliang@xxxxxxxxxx>
  Date:   Thu Sep 24 17:32:13 2015 +0800

      genirq: Introduce generic irq migration for cpu hotunplug

      ARM and ARM64 have almost identical code for migrating interrupts on
      cpu hotunplug. Provide a generic version which can be used by both.

      The new code addresses a shortcoming in the ARM[64] variants which
      fails to update the affinity change in some cases. The solution for
      this is to use the core function irq_do_set_affinity() instead of open
      coding it.

      [ tglx: Added copyright notice and license boilerplate. Rewrote
                subject and changelog. ]

      Signed-off-by: Yang Yingliang <yangyingliang@xxxxxxxxxx>
      Acked-by: Russell King - ARM Linux <linux@xxxxxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443087135-17044-2-git-send-email-yangyingliang@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 038161dea1eaeee80341134e2675b24656a71b59
  Author: Dirk Müller <dmueller@xxxxxxxx>
  Date:   Thu Oct 1 13:46:01 2015 +0200

      Update KVM homepage Url

      The old one appears to be a generic catch all page, which
      is unhelpful.

      Signed-off-by: Dirk Mueller <dmueller@xxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit f97b870eced0ec562f953d32eda03906c7dacad6
  Merge: 9522f47 7c7feb2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 07:57:27 2015 -0400

      Merge tag 'upstream-4.3-rc4' of git://git.infradead.org/linux-ubifs

      Pull UBI/UBIFS fixes from Richard Weinberger:
       "This contains three bug fixes for both UBI and UBIFS"

      * tag 'upstream-4.3-rc4' of git://git.infradead.org/linux-ubifs:
        UBI: return ENOSPC if no enough space available
        UBI: Validate data_size
        UBIFS: Kill unneeded locking in ubifs_init_security

  commit 9522f476d932eb23ebf8dbbc6b4e2f966f3fe911
  Merge: dd36d73 0266715
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 07:50:08 2015 -0400

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

      Pull key signing fixes from James Morris:
       "Keyrings and modsign fixes from David Howells"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:
        MODSIGN: Change from CMS to PKCS#7 signing if the openssl is too old
        X.509: Don't strip leading 00's from key ID when constructing key 
description
        KEYS: Remove unnecessary header #inclusions from extract-cert.c
        KEYS: Fix race between key destruction and finding a keyring by name

  commit 5f509239eccc9d118d3474a22e78b3da1ceefe02
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Oct 1 08:03:06 2015 +0200

      ieee802154: handle datagram variables as u16

      This reverts commit 9abc378c66e3d6f437eed77c1c534cbc183523f7
      ("ieee802154: 6lowpan: change datagram var types").

      The reason is that I forgot the IPv6 fragmentation here. Our MTU of
      lowpan interface is 1280 and skb->len should not above of that. If we
      reach a payload above 1280 in IPv6 header then we have a IPv6
      fragmentation above 802.15.4 6LoWPAN fragmentation. The type "u16" was
      fine, instead I added now a WARN_ON_ONCE if skb->len is above MTU which
      should never happen otherwise IPv6 on minimum MTU size is broken.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit fc07e76ac7ffa3afd621a1c3858a503386a14281
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 13:20:22 2015 +0200

      Revert "KVM: SVM: use NPT page attributes"

      This reverts commit 3c2e7f7de3240216042b61073803b61b9b3cfb22.
      Initializing the mapping from MTRR to PAT values was reported to
      fail nondeterministically, and it also caused extremely slow boot
      (due to caching getting disabled---bug 103321) with assigned devices.

      Reported-by: Markus Trippelsdorf <markus@xxxxxxxxxxxxxxx>
      Reported-by: Sebastian Schuette <dracon@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit bcf166a9942c3aabd8b752a7c38a49f57c54cfb8
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 13:19:55 2015 +0200

      Revert "KVM: svm: handle KVM_X86_QUIRK_CD_NW_CLEARED in svm_get_mt_mask"

      This reverts commit 5492830370171b6a4ede8a3bfba687a8d0f25fa5.
      It builds on the commit that is being reverted next.

      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 625422f60c55bbc368b8568ff925770b36bfc189
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 13:28:15 2015 +0200

      Revert "KVM: SVM: Sync g_pat with guest-written PAT value"

      This reverts commit e098223b789b4a618dacd79e5e0dad4a9d5018d1,
      which has a dependency on other commits being reverted.

      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 606decd67049217684e3cb5a54104d51ddd4ef35
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 13:12:47 2015 +0200

      Revert "KVM: x86: apply guest MTRR virtualization on host reserved pages"

      This reverts commit fd717f11015f673487ffc826e59b2bad69d20fe5.
      It was reported to cause Machine Check Exceptions (bug 104091).

      Reported-by: harn-solo@xxxxxx
      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit b2f73922d119686323f14fbbe46587f863852328
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 30 15:59:17 2015 +0200

      fs/proc, core/debug: Don't expose absolute kernel addresses via wchan

      So the /proc/PID/stat 'wchan' field (the 30th field, which contains
      the absolute kernel address of the kernel function a task is blocked in)
      leaks absolute kernel addresses to unprivileged user-space:

              seq_put_decimal_ull(m, ' ', wchan);

      The absolute address might also leak via /proc/PID/wchan as well, if
      KALLSYMS is turned off or if the symbol lookup fails for some reason:

      static int proc_pid_wchan(struct seq_file *m, struct pid_namespace *ns,
                                struct pid *pid, struct task_struct *task)
      {
              unsigned long wchan;
              char symname[KSYM_NAME_LEN];

              wchan = get_wchan(task);

              if (lookup_symbol_name(wchan, symname) < 0) {
                      if (!ptrace_may_access(task, PTRACE_MODE_READ))
                              return 0;
                      seq_printf(m, "%lu", wchan);
              } else {
                      seq_printf(m, "%s", symname);
              }

              return 0;
      }

      This isn't ideal, because for example it trivially leaks the KASLR offset
      to any local attacker:

        fomalhaut:~> printf "%016lx\n" $(cat /proc/$$/stat | cut -d' ' -f35)
        ffffffff8123b380

      Most real-life uses of wchan are symbolic:

        ps -eo pid:10,tid:10,wchan:30,comm

      and procps uses /proc/PID/wchan, not the absolute address in 
/proc/PID/stat:

        triton:~/tip> strace -f ps -eo pid:10,tid:10,wchan:30,comm 2>&1 | grep 
wchan | tail -1
        open("/proc/30833/wchan", O_RDONLY)     = 6

      There's one compatibility quirk here: procps relies on whether the
      absolute value is non-zero - and we can provide that functionality
      by outputing "0" or "1" depending on whether the task is blocked
      (whether there's a wchan address).

      These days there appears to be very little legitimate reason
      user-space would be interested in  the absolute address. The
      absolute address is mostly historic: from the days when we
      didn't have kallsyms and user-space procps had to do the
      decoding itself via the System.map.

      So this patch sets all numeric output to "0" or "1" and keeps only
      symbolic output, in /proc/PID/wchan.

      ( The absolute sleep address can generally still be profiled via
        perf, by tasks with sufficient privileges. )

      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Acked-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150930135917.GA3285@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0ce3cc008ec04258b6a6314b09f1a6012810881a
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Sep 25 23:02:19 2015 +0100

      arm64/efi: Fix boot crash by not padding between EFI_MEMORY_RUNTIME 
regions

      The new Properties Table feature introduced in UEFIv2.5 may
      split memory regions that cover PE/COFF memory images into
      separate code and data regions. Since these regions only differ
      in the type (runtime code vs runtime data) and the permission
      bits, but not in the memory type attributes (UC/WC/WT/WB), the
      spec does not require them to be aligned to 64 KB.

      Since the relative offset of PE/COFF .text and .data segments
      cannot be changed on the fly, this means that we can no longer
      pad out those regions to be mappable using 64 KB pages.
      Unfortunately, there is no annotation in the UEFI memory map
      that identifies data regions that were split off from a code
      region, so we must apply this logic to all adjacent runtime
      regions whose attributes only differ in the permission bits.

      So instead of rounding each memory region to 64 KB alignment at
      both ends, only round down regions that are not directly
      preceded by another runtime region with the same type
      attributes. Since the UEFI spec does not mandate that the memory
      map be sorted, this means we also need to sort it first.

      Note that this change will result in all EFI_MEMORY_RUNTIME
      regions whose start addresses are not aligned to the OS page
      size to be mapped with executable permissions (i.e., on kernels
      compiled with 64 KB pages). However, since these mappings are
      only active during the time that UEFI Runtime Services are being
      invoked, the window for abuse is rather small.

      Tested-by: Mark Salter <msalter@xxxxxxxxxx>
      Tested-by: Mark Rutland <mark.rutland@xxxxxxx> [UEFI 2.4 only]
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Mark Salter <msalter@xxxxxxxxxx>
      Reviewed-by: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.0+
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443218539-7610-3-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a5caa209ba9c29c6421292e7879d2387a2ef39c9
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Fri Sep 25 23:02:18 2015 +0100

      x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at 
runtime, instead of top-down

      Beginning with UEFI v2.5 EFI_PROPERTIES_TABLE was introduced
      that signals that the firmware PE/COFF loader supports splitting
      code and data sections of PE/COFF images into separate EFI
      memory map entries. This allows the kernel to map those regions
      with strict memory protections, e.g. EFI_MEMORY_RO for code,
      EFI_MEMORY_XP for data, etc.

      Unfortunately, an unwritten requirement of this new feature is
      that the regions need to be mapped with the same offsets
      relative to each other as observed in the EFI memory map. If
      this is not done crashes like this may occur,

        BUG: unable to handle kernel paging request at fffffffefe6086dd
        IP: [<fffffffefe6086dd>] 0xfffffffefe6086dd
        Call Trace:
         [<ffffffff8104c90e>] efi_call+0x7e/0x100
         [<ffffffff81602091>] ? virt_efi_set_variable+0x61/0x90
         [<ffffffff8104c583>] efi_delete_dummy_variable+0x63/0x70
         [<ffffffff81f4e4aa>] efi_enter_virtual_mode+0x383/0x392
         [<ffffffff81f37e1b>] start_kernel+0x38a/0x417
         [<ffffffff81f37495>] x86_64_start_reservations+0x2a/0x2c
         [<ffffffff81f37582>] x86_64_start_kernel+0xeb/0xef

      Here 0xfffffffefe6086dd refers to an address the firmware
      expects to be mapped but which the OS never claimed was mapped.
      The issue is that included in these regions are relative
      addresses to other regions which were emitted by the firmware
      toolchain before the "splitting" of sections occurred at
      runtime.

      Needless to say, we don't satisfy this unwritten requirement on
      x86_64 and instead map the EFI memory map entries in reverse
      order. The above crash is almost certainly triggerable with any
      kernel newer than v3.13 because that's when we rewrote the EFI
      runtime region mapping code, in commit d2f7cbe7b26a ("x86/efi:
      Runtime services virtual mapping"). For kernel versions before
      v3.13 things may work by pure luck depending on the
      fragmentation of the kernel virtual address space at the time we
      map the EFI regions.

      Instead of mapping the EFI memory map entries in reverse order,
      where entry N has a higher virtual address than entry N+1, map
      them in the same order as they appear in the EFI memory map to
      preserve this relative offset between regions.

      This patch has been kept as small as possible with the intention
      that it should be applied aggressively to stable and
      distribution kernels. It is very much a bugfix rather than
      support for a new feature, since when EFI_PROPERTIES_TABLE is
      enabled we must map things as outlined above to even boot - we
      have no way of asking the firmware not to split the code/data
      regions.

      In fact, this patch doesn't even make use of the more strict
      memory protections available in UEFI v2.5. That will come later.

      Suggested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reported-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chun-Yi <jlee@xxxxxxxx>
      Cc: Dave Young <dyoung@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: James Bottomley <JBottomley@xxxxxxxx>
      Cc: Lee, Chun-Yi <jlee@xxxxxxxx>
      Cc: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Jones <pjones@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443218539-7610-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 95c2b17534654829db428f11bcf4297c059a2a7e
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 12:23:56 2015 +0100

      genirq: Fix race in register_irq_proc()

      Per-IRQ directories in procfs are created only when a handler is first
      added to the irqdesc, not when the irqdesc is created.  In the case of
      a shared IRQ, multiple tasks can race to create a directory.  This
      race condition seems to have been present forever, but is easier to
      hit with async probing.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/1443266636.2004.2.camel@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2d1180e36905bf92892e265c662e5e597be01505
  Author: Rick Mann <rmann@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:24:53 2015 -0700

      ASoC: tlv320aic3x: Prevent writing reserved registers on tlv320aic3104 
CODECs

      The current code writes a set of registers that are reserved on the
      tlc320aic3104. The change skips those registers for that IC.

      Signed-off-by: Rick Mann <rmann@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 8c1a9d6323abf0fb1e5dad96cf3f1c783505ea5a
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Thu Oct 1 14:47:09 2015 +0800

      ASoC: rt5645: Correct the naming and setting of ADC Boost Volume Control

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 06423121d9eba0a56b9341cf82b88479017bce14
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Thu Oct 1 10:59:48 2015 +0100

      regulator: core: Handle probe deferral from DT when resolving supplies

      When resolving regulator-regulator supplies we ignore probe deferral
      returns from regulator_dev_lookup() (such as are generated for DT when
      we can see a supply is registered) and just fall back to the dummy
      regulator if there are full constraints (as is the case for DT).  This
      means that probe deferral is broken for DT systems, fix that by paying
      attention to -EPROBE_DEFER return codes like we do -ENODEV.

      A further patch will simplify this further, this is a minimal fix for
      the specific issue.

      Fixes: 9f7e25edb1575a6d2 (regulator: core: Handle full constraints 
systems when resolving supplies)
      Reported-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx>
      Tested-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonnie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit a7e705af524d165fe7bc303aee82225c66734885
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Thu Oct 1 10:55:29 2015 +0800

      x86/irq: Drop unlikely before IS_ERR_OR_NULL

      IS_ERR_OR_NULL already contain an unlikely compiler flag. Drop it.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/03d18502ed7ed417f136c091f417d2d88c147ec6.1443667610.git.geliangtang@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c2365b9388e8ec19305e3f449c1826e7493d156d
  Author: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
  Date:   Thu Oct 1 14:22:02 2015 +0530

      perf/x86/intel/uncore: Do not use macro DEFINE_PCI_DEVICE_TABLE()

      The DEFINE_PCI_DEVICE_TABLE() macro is deprecated. Use
      'struct pci_device_id' instead of DEFINE_PCI_DEVICE_TABLE(),
      with the goal of getting rid of this macro completely.

      This Coccinelle semantic patch performs this transformation:

        @@
        identifier a;
        declarer name DEFINE_PCI_DEVICE_TABLE;
        initializer i;
        @@
        - DEFINE_PCI_DEVICE_TABLE(a)
        + const struct pci_device_id a[] = i;

      Signed-off-by: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151001085201.GA16939@localhost
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit daad0bf1491e5321c76a6ba4ccf50a4991494aa8
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 18:30:06 2015 +0200

      s390/defconfig: set SCSI_DH=y

      Fix this warning:
      arch/s390/configs/performance_defconfig:380:warning: symbol value 'm' 
invalid for SCSI_DH

      Introduced via 086b91d052ebe4ead5d28021afe3bdfd70af15bf
      (scsi_dh: integrate into the core SCSI code)

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 0bf6cd5b9531bcc29c0a5e504b6ce2984c6fd8d8
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Sun Sep 27 21:01:51 2015 +0200

      blk-mq: factor out a helper to iterate all tags for a request_queue

      And replace the blk_mq_tag_busy_iter with it - the driver use has been
      replaced with a new helper a while ago, and internal to the block we
      only need the new version.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit f4829a9b7a61e159367350008a608b062c4f6840
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Sun Sep 27 21:01:50 2015 +0200

      blk-mq: fix racy updates of rq->errors

      blk_mq_complete_request may be a no-op if the request has already
      been completed by others means (e.g. a timeout or cancellation), but
      currently drivers have to set rq->errors before calling
      blk_mq_complete_request, which might leave us with the wrong error value.

      Add an error parameter to blk_mq_complete_request so that we can
      defer setting rq->errors until we known we won the race to complete the
      request.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit e98d6d6203552ebd1e80ac17de857547efa37fba
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:45 2015 +0300

      Bluetooth: hci_bcm: Do not test ACPI companion in bcm_acpi_probe()

      This device has always ACPI companion because driver supports only ACPI
      enumeration. Therefore there is no need to test it in bcm_acpi_probe() and
      we can pass it directly to acpi_dev_get_resources() (which will return
      -EINVAL in case of NULL argument is passed).

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4d1c4558028ff0b7dbc1e24c319f478658f0620d
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:44 2015 +0300

      Bluetooth: hci_bcm: Remove needless looking code

      Tree wide grep for "hci_bcm" doesn't reveal there is any code registering
      this platform device and "struct acpi_device_id" use for passing the
      platform data looks a debug/test code leftover to me.

      I'm assuming this driver effectively supports only ACPI enumeration and
      thus test for ACPI_HANDLE() and platform data can be removed.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5fbae60d43652edc005f1a690345ec7e290def8e
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:43 2015 +0300

      Bluetooth: hci_bcm: Remove needless acpi_match_device() call

      There is no need to call acpi_match_device() in driver's probe path and
      verify does it find a match to given ACPI _HIDs in .acpi_match_table as
      driver/platform/acpi core code has found the match prior calling the 
probe.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5be00284dc85dadd5241833fbca645c19baebebb
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:42 2015 +0300

      Bluetooth: hci_bcm: Handle possible error from acpi_dev_get_resources()

      Driver doesn't handle possible error from acpi_dev_get_resources(). Test 
it
      and return the error code in case of error.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 09dbf1b7847ca09afb4616021fdc928452511888
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:41 2015 +0300

      Bluetooth: hci_bcm: Add missing acpi_dev_free_resource_list()

      Caller of acpi_dev_get_resources() should free the constructed resource
      list by calling the acpi_dev_free_resource_list() in order to avoid memory
      leak.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5b235dc2647e4977b17b5c41d959d0f455831c3f
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Fri Sep 4 14:29:16 2015 +0200

      MIPS: Fix the build on jz4740 after removing the custom gpio.h

      Somehow the wrong version of the patch to remove the use of custom
      gpio.h on mips has been merged. This patch add the missing fixes for a
      build error on jz4740 because linux/gpio.h doesn't provide any machine
      specfics definitions anymore.

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Lars-Peter Clausen <lars@xxxxxxxxxx>
      Cc: Brian Norris <computersforpeace@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11089/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 4bc6a58fcbf63dc3da9870c41eeab1bd030bc585
  Merge: 9c17dbc 7f8d1ad
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 1 09:03:57 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes:

      User visible changes:

        - By default use the most precise "cycles" hw counter available, i.e.
          when the user doesn't specify any event, it will try using cycles:ppp,
          cycles:pp, etc. (Arnaldo Carvalho de Melo)

        - Remove blank lines, headers when piping output in 'perf list', so 
that it can
          be sanely used with 'wc -l', etc. (Arnaldo Carvalho de Melo)

        - Amend documentation about max_stack and synthesized callchains. 
(Adrian Hunter)

        - Fix 'perf probe -l' for probes added to kernel module functions. 
(Masami Hiramatsu)

      Build fixes:

        - Fix shadowed declarations that break the build on older distros. 
(Jiri Olsa)

        - Fix build break on powerpc due to sample_reg_masks. (Sukadev 
Bhattiprolu)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 95c632f4e4e6365a20397f4fd04dcf27aab02958
  Merge: 4ac86a6 7ba7805
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 1 09:02:11 2015 +0200

      Merge remote-tracking branch 'tglx/x86/urgent' into x86/urgent

      Pick up the WCHAN fixes from Thomas.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 23270e160dd5d240dbf73722c1df9ff3044d7bc9
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:28:52 2015 +0300

      Bluetooth: hci_intel: Cleanup the device probe code

      There is some unneeded code in "hci_intel" probing. First
      acpi_match_device() call is needless as driver/platform/acpi core code has
      already done the matching before calling the probe and the driver does not
      use the returned pointer to matching _HID other than checking is it NULL.

      Then tree wide grep for "hci_intel" doesn't reveal that there is any code
      registering this platform device so it looks this device is always backed
      with ACPI companion so also ACPI_HANDLE() test can be removed.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b59f2e31b8abda3d63c53ea7672a219639ded61b
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 28 10:23:27 2015 -0500

      ipvs: Don't protect ip_vs_addr_is_unicast with CONFIG_SYSCTL

      I arranged the code so that the compiler can remove the unecessary bits
      in ip_vs_leave when CONFIG_SYSCTL is unset, and removed an explicit
      CONFIG_SYSCTL.

      Unfortunately when rebasing my work on top of that of Alex Gartrell I
      missed the fact that the newly added function ip_vs_addr_is_unicast was
      surrounded by CONFIG_SYSCTL.

      So remove the now unnecessary CONFIG_SYSCTL guards around
      ip_vs_addr_is_unicast.  It is causing build failures today when
      CONFIG_SYSCTL is not selected and any self respecting compiler will
      notice that sysctl_cache_bypass is always false without CONFIG_SYSCTL
      and not include the logic from the function ip_vs_addr_is_unicast in
      the compiled code.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit cda374253f862bd0f43edda6935a48294fe8ed3e
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Thu Oct 1 14:21:40 2015 +0900

      drm/exynos: Staticize local function in exynos_drm_gem.c

      The exynos_drm_gem_mmap_buffer() is not used outside so make it static.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 3c79fb8c9424a24bf812b9a8cb4f19b781052b0b
  Author: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 18:40:54 2015 -0300

      drm/exynos: fimd: actually disable dp clock

      fimd_dp_clock_enable() was setting the always to enabled,
      this patch fix this to actually use the value that is set to 'val'.

      Reported-by: Emilio López <emilio.lopez@xxxxxxxxxxxxxxx>
      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 148ba09c465cc54d8e68f041bf9a30332b315c39
  Author: Inki Dae <inki.dae@xxxxxxxxxxx>
  Date:   Wed Sep 30 20:12:29 2015 +0900

      drm/exynos: dp: remove suspend/resume functions

      This patch removes unnecessary pm suspend/resume functions.

      All kms sub drivers will be controlled by top of Exynos drm driver
      and connector dpms so these sub drivers shouldn't have their own
      pm interfaces.

      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>
      Reviewed-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>

  commit 8d0d94015e96b8853c4f7f06eac3f269e1b3d866
  Author: Fabiano Fidêncio <fidencio@xxxxxxxxxx>
  Date:   Thu Sep 24 15:18:34 2015 +0200

      drm/qxl: recreate the primary surface when the bo is not primary

      When disabling/enabling a crtc the primary area must be updated
      independently of which crtc has been disabled/enabled.

      Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1264735

      Signed-off-by: Fabiano Fidêncio <fidencio@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 7b09a1bba4091a9d208481d7831682a1f3061ab9
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Wed Sep 30 19:42:15 2015 +0200

      dmaengine: pxa_dma: fix residue corner case

      A very tiny temporal window exists in the residue calculation where :
       - upon entering residue calculation, the transfer is ongoing
       - when reading the current transfer pointer, it just changed to
         the "finisher/linker" descriptor

      In this case, the residue returned is the whole transfer length instead
      of 0. Fix it.

      This appears almost in one extreme case, where the driver is used
      by older clients which inquire for residue in interrupt context, such
      as the smsc91x ethernet driver, in a tight loop :
        interrupt_handler()
          dmaengine_submit()
          do {
            dmaengine_tx_status()
          } while (residue > 0 || status != DMA_ERROR)

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit e87ffbdf06971a80ad2a11217200bdd936195af1
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Wed Sep 30 19:42:14 2015 +0200

      dmaengine: pxa_dma: fix the no-requestor case

      A very small number of devices don't use the flow control offered by
      requestor lines. In these specific cases, the pxa dma driver should be
      aware of that and not try to use a requestor line.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit aa3ee5f569fda51e54c224c0df60e187e9c5e582
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Sat Sep 26 17:15:47 2015 +0800

      dmaengine: zxdma: Fix off-by-one for testing valid pchan request

      The valid pchan range is 0 ~ d->dma_requests - 1.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Reviewed-by: Jun Nie <jun.nie@xxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 0be2136b67067617b36c70e525d7534108361e36
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Tue Sep 15 15:39:11 2015 +0200

      dmaengine: at_xdmac: clean used descriptor

      When putting back a descriptor to the free descs list, some fields are
      not set to 0, it can cause bugs if someone uses it without having this
      in mind.
      Descriptor are not put back one by one so it is easier to clean
      descriptors when we request them.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx #4.2
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit a1cf09031e641d3cceaca4a4dd20ef6a785bc9b3
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 15:36:00 2015 +0200

      dmaengine: at_xdmac: change block increment addressing mode

      The addressing mode we were using was not only incrementing the address at
      each microblock, but also at each data boundary, which was severely 
slowing
      the transfer, without any benefit since we were not using the data stride.

      Switch to the micro block increment only in order to get back to an
      acceptable performance level.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Fixes: 6007ccb57744 ("dmaengine: xdmac: Add interleaved transfer support")
      Cc: stable@xxxxxxxxxxxxxxx #4.2
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 5f81b95fe2a2de4ec51d46ffd04fa40dfc0cb26a
  Author: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
  Date:   Wed Sep 30 11:58:07 2015 +1000

      cxl: fix leak of ctx->mapping when releasing kernel API contexts

      When a context is created via the kernel API, ctx->mapping is allocated
      within the kernel and thus needs to be freed when the context is freed.
      reclaim_ctx() attempts to do this for contexts with the ctx->kernelapi 
flag
      set, but afu_release() (which can be called from the kernel API through
      cxl_fd_release()) sets ctx->mapping to NULL before calling
      cxl_context_free() to free the context.

      Add a check to afu_release() so that the mappings in contexts created via
      the kernel API are left alone so reclaim_ctx() can free them.

      Reported-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Fixes: 6f7f0b3df6d4 ("cxl: Add AFU virtual PHB and kernel API")
      Signed-off-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 52adee580d3c71a0dfabc3168597421981d68b86
  Author: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
  Date:   Wed Sep 30 11:58:06 2015 +1000

      cxl: fix leak of ctx->irq_bitmap when releasing context via kernel API

      At present, ctx->irq_bitmap is freed in afu_release_irqs(), which is 
called
      from afu_release() via cxl_context_detach().

      Move the freeing of ctx->irq_bitmap from afu_release_irqs() to
      reclaim_ctx() (called through cxl_context_free()) so it's freed when
      releasing a context via the kernel API (cxl_release_context()) or the
      userspace API (afu_release()).

      Reported-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Fixes: 6f7f0b3df6d4 ("cxl: Add AFU virtual PHB and kernel API")
      Signed-off-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 8dde152ea34860403c839598bdef3f07239eb25a
  Author: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
  Date:   Wed Sep 30 11:58:05 2015 +1000

      cxl: fix leak of IRQ names in cxl_free_afu_irqs()

      cxl_free_afu_irqs() doesn't free IRQ names when it releases an AFU's IRQ
      ranges. The userspace API equivalent in afu_release_irqs() calls
      afu_irq_name_free() to release the IRQ names.

      Call afu_irq_name_free() in cxl_free_afu_irqs() to release the IRQ names.
      Make afu_irq_name_free() non-static to allow this.

      Reported-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Fixes: 6f7f0b3df6d4 ("cxl: Add AFU virtual PHB and kernel API")
      Signed-off-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Signed-off-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 6ece90f9a13e2592cbd6634f74bcb306169b5ab6
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:10:05 2015 +0200

      netfilter: fix Kconfig dependencies for nf_dup_ipv{4,6}

      net/built-in.o: In function `nf_dup_ipv4': (.text+0xed24d): undefined 
reference to `nf_conntrack_untracked'
      net/built-in.o: In function `nf_dup_ipv4': (.text+0xed267): undefined 
reference to `nf_conntrack_untracked'
      net/built-in.o: In function `nf_dup_ipv6': (.text+0x158aef): undefined 
reference to `nf_conntrack_untracked'
      net/built-in.o: In function `nf_dup_ipv6': (.text+0x158b09): undefined 
reference to `nf_conntrack_untracked'

      Reported-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 7f8d1ade1b19f684ed3a7c4fb1dc5d347127b438
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 17:49:49 2015 -0300

      perf tools: By default use the most precise "cycles" hw counter available

      If the user doesn't specify any event, try the most precise "cycles"
      available, i.e. start by "cycles:ppp" and go on removing "p" till it
      works.

      E.g.

        $ perf record usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.017 MB perf.data (11 samples) ]
        $ perf evlist
        cycles:pp
        $ perf evlist -v
        cycles:pp: size: 112, { sample_period, sample_freq }: 4000, sample_type:
        IP|TID|TIME|PERIOD, disabled: 1, inherit: 1, mmap: 1, comm: 1, freq: 1,
        enable_on_exec: 1, task: 1, precise_ip: 2, sample_id_all: 1,
        exclude_guest: 1, mmap2: 1, comm_exec: 1
        $ grep 'model name' /proc/cpuinfo | head -1
        model name      : Intel(R) Core(TM) i7-3667U CPU @ 2.00GHz
        $

      When 'cycles' appears explicitely is specified this will not be tried,
      i.e. the user has full control of the level of precision to be used:

        $ perf record -e cycles usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.016 MB perf.data (9 samples) ]
        $ perf evlist
        cycles
        $ perf evlist -v
        cycles: size: 112, { sample_period, sample_freq }: 4000, sample_type:
        IP|TID|TIME|PERIOD, disabled: 1, inherit: 1, mmap: 1, comm: 1, freq: 1,
        enable_on_exec: 1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2:
        1, comm_exec: 1
        $

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: https://www.youtube.com/watch?v=nXaxk27zwlk
      Link: http://lkml.kernel.org/n/tip-b1ywebmt22pi78vjxau01wth@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dfc431cbdc3a3c0556f1cd462d724d107cc15a9e
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 17:13:26 2015 -0300

      perf list: Remove blank lines, headers when piping output

      So that one can, for instance, use it with wc -l:

        # perf list *:*write* | wc -l
        60

      Or to look for the "bio" tracepoints, without 'perf list' headers:

        # perf list *:*bio* | head
          block:block_bio_backmerge                          [Tracepoint event]
          block:block_bio_bounce                             [Tracepoint event]
          block:block_bio_complete                           [Tracepoint event]
          block:block_bio_frontmerge                         [Tracepoint event]
          block:block_bio_queue                              [Tracepoint event]
          block:block_bio_remap                              [Tracepoint event]
        #

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ts7sc0x8u4io4cifzkup4j44@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 6cca13bdf5a5d561a855259689874e0c7266eec3
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:37 2015 +0900

      perf probe: Improve error message when %return is on inlined function

      perf probe shows more precisely message when it finds given
      %return target function is inlined.

      Without this fix:
        ----
        # ./perf probe -V getname_flags%return
        Return probe must be on the head of a real function.
        Debuginfo analysis failed.
          Error: Failed to show vars.
        ----

      With this fix:
        ----
        # ./perf probe -V getname_flags%return
        Failed to find "getname_flags%return",
         because getname_flags is an inlined function and has no return point.
        Debuginfo analysis failed.
          Error: Failed to show vars.
        ----

      Suggested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164137.3733.55055.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 20f49859c785183d5296670a10dace454131274b
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:35 2015 +0900

      perf probe: Fix a segfault bug in debuginfo_cache

      perf probe --list will get a segfault if the first kprobe event is on a
      module and the second or latter one is on the kernel.

      e.g.
        ----
        # ./perf probe -q -m pcspkr pcspkr_event
        # ./perf probe -q vfs_read
        # ./perf probe -l
        Segmentation fault (core dumped)
        ----

      This is because the debuginfo_cache fails to handle NULL module name,
      which causes segfault on strcmp. (Note that strcmp("something", NULL)
      always causes segfault)

      To fix this debuginfo_cache__open always translates the NULL module name
      to "kernel" (this is correct, because NULL module name means opening the
      debuginfo for the kernel)

        ----
        # ./perf probe -l
          probe:pcspkr_event   (on pcspkr_event@drivers/input/misc/pcspkr.c
          in pcspkr)
          probe:vfs_read       (on vfs_read@ksrc/linux-3/fs/read_write.c)
        ----

      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164135.3733.23993.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9b239a12bc872f212cefbaee4d028c838abe6ff3
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:33 2015 +0900

      perf probe: Show correct source lines of probes on kmodules

      Perf probe always failed to find appropriate line numbers because of
      failing to find .text start address offset from debuginfo.

      e.g.
        ----
        # ./perf probe -m pcspkr pcspkr_event:5
        Added new events:
          probe:pcspkr_event   (on pcspkr_event:5 in pcspkr)
          probe:pcspkr_event_1 (on pcspkr_event:5 in pcspkr)

        You can now use it in all perf tools, such as:

                perf record -e probe:pcspkr_event_1 -aR sleep 1

        # ./perf probe -l
        Failed to find debug information for address ffffffffa031f006
        Failed to find debug information for address ffffffffa031f016
          probe:pcspkr_event   (on pcspkr_event+6 in pcspkr)
          probe:pcspkr_event_1 (on pcspkr_event+22 in pcspkr)
        ----

      This fixes the above issue as below.
      1. Get the relative address of the symbol in .text by using
         map->start.
      2. Adjust the address by adding the offset of .text section
         in the kernel module binary.

      With this fix, perf probe -l shows lines correctly.
        ----
        # ./perf probe -l
          probe:pcspkr_event   (on pcspkr_event:5@drivers/input/misc/pcspkr.c 
in pcspkr)
          probe:pcspkr_event_1 (on pcspkr_event:5@drivers/input/misc/pcspkr.c 
in pcspkr)
        ----

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164132.3733.24643.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9135949ddd9d0d8d73a2f441912508d25a4a82a2
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:28 2015 +0900

      perf probe: Begin and end libdwfl report session correctly

      Fix a trival bug about libdwfl usage of the report session, it should
      explicitly begin and end a report session around dwfl_report_offline().

      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164128.3733.59876.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 663b1151f2d674e2004c015cbe9995749033c49a
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:30 2015 +0900

      perf probe: Fix to remove dot suffix from second or latter events

      Fix to remove dot suffix (e.g. .const, .isra) from the second or latter
      events which has suffix numbers.

      Since the previous commit 35a23ff928b0 ("perf probe: Cut off the gcc
      optimization postfixes from function name") didn't care about the suffix
      numbered events, therefore we'll have an error when we add additional
      events on the same dot suffix functions.

      e.g.
        ----
        # ./perf probe -f -a get_sigframe.isra.2.constprop.3 \
         -a get_sigframe.isra.2.constprop.3
        Failed to write event: Invalid argument
          Error: Failed to add events.
        ----

      This fixes above issue as below:
        ----
        # ./perf probe -f -a get_sigframe.isra.2.constprop.3 \
         -a get_sigframe.isra.2.constprop.3
        Added new events:
          probe:get_sigframe   (on get_sigframe.isra.2.constprop.3)
          probe:get_sigframe_1 (on get_sigframe.isra.2.constprop.3)

        You can now use it in all perf tools, such as:

                perf record -e probe:get_sigframe_1 -aR sleep 1

        ----

      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164130.3733.26573.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f845086a8ed49e657a750f87f85966d75c8a9645
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 13:02:08 2015 -0300

      tools lib symbol: Introduce kallsyms2elf_type

      Map 't', 'T' (text, local, global), 'w' and 'W' (weak text, local,
      global) as STT_FUNC, and the rest as STT_OBJECT

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-sbwcixulpc5v1xuxn3xvm0nn@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8e947f1e84fd1588f66e5f2ea69c80647de72cd4
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 12:42:07 2015 -0300

      tools lib symbol: Rename kallsyms2elf_type to kallsyms2elf_binding

      It is about binding, not type, we have just a letter in kallsyms that
      should map both for the ELF type (STT_FUNC, etc) and to the ELF
      symbol binding (STB_WEAK, STB_GLOBAL, etc), so rename it now before
      introducing kallsyms2_elf_type()

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-uu5vj343ms1q2wm55690on6v@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a5e813c68649366aaa3f785772b00ea6ccad7b8d
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 11:54:04 2015 -0300

      perf machine: Add method for common kernel_map(FUNCTION) operation

      And it is also a step in the direction of killing the separation of data
      and text maps in map_groups.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-rrds86kb3wx5wk8v38v56gw8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 77e65977495cd6f6fcfacd8c16bdd9c8c18a1d72
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 11:08:58 2015 -0300

      perf machine: Use machine__kernel_map() thoroughly

      In places where we were using its open coded equivalent.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-khkdugcdoqy3tkszm3jdxgbe@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit eb56db54326f910348defbee2803ec0675a664b2
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 17:53:49 2015 -0400

      perf tools: Fix build break on powerpc due to sample_reg_masks

      The perf_regs.c file does not get built on Powerpc as CONFIG_PERF_REGS
      is false.  So the weak definition for 'sample_regs_masks' doesn't get
      picked up.

      Adding perf_regs.o to util/Build unconditionally, exposes a redefinition
      error for 'perf_reg_value()' function (due to the static inline version
      in util/perf_regs.h). So use #ifdef HAVE_PERF_REGS_SUPPORT' around that
      function.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Dominik Dingel <dingel@xxxxxxxxxxxxxxxxxx>
      Cc: Naveen N. Rao <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150930182836.GA27858@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 40862a7b793945c7080d1566ca3dc6249f3c6354
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 29 11:52:37 2015 +0300

      perf report: Amend documentation about max_stack and synthesized 
callchains

      The --max_stack option was added as an optimization to reduce processing 
time,
      so people specifying --max-stack might get a increased processing time if
      combined with synthesized callchains, but otherwise no real harm.

      A warning about setting both --max_stack and the synthesized callchains 
max
      depth seems like overkill.  Amend the documentation.

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: http://lkml.kernel.org/r/560A5155.4060105@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b7f9ff5654d53fa47e0b5ff20f834f3e7a611846
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 29 17:34:46 2015 -0300

      perf maps: Introduce maps__find_symbol_by_name()

      Out of map_groups__find_symbol_by_name(), so that we can turn this later
      one first into a call to maps__find_symbol_by_name(MAP__FUNCTION) +
      MAP__VARIABLE, and then to just one call, we'll merge MAP__FUNCTION with
      MAP__VARIABLE maps, to simplify the code.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-pvkar0jacqn92g148u9sqttt@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 272ed29a91aea4397c05157dea7210dd7e81557a
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Sep 29 17:05:31 2015 +0200

      perf tools: Fix shadowed declaration in parse-events.c

      The error variable breaks build on CentOS 6.7, due to a collision with a
      global error symbol:

          CC       util/parse-events.o
        cc1: warnings being treated as errors
        util/parse-events.c:419: error: declaration of â??errorâ?? shadows a 
global
        declaration
        util/util.h:135: error: shadowed declaration is here
        util/parse-events.c: In function â??add_tracepoint_multi_eventâ??:
        ...

      Using different argument names instead to fix it.

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: linux-tip-commits@xxxxxxxxxxxxxxx
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150929150531.GI27383@xxxxxxxxxxxxxxxx
      [ Fix one more case, at line 770 ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 45633a169571e81835ec53fe0c089dd20f3195f1
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Sep 29 16:53:12 2015 +0200

      tools: Fix shadowed declaration in err.h

      The error variable breaks build on CentOS 6.7, due to collision with
      global error symbol:

          CC       util/evlist.o
        cc1: warnings being treated as errors
        In file included from util/evlist.c:28:
        tools/include/linux/err.h: In function â??ERR_PTRâ??:
        tools/include/linux/err.h:34: error: declaration of â??errorâ?? shadows 
a global declaration
        util/util.h:135: error: shadowed declaration is here

      Using 'error_' name instead to fix it.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-i9mdgdbrgauy3fe76s9rd125@xxxxxxxxxxxxxx
      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      [ Use 'error_' instead of 'err' to, visually, not diverge too much from 
include/linux/err.h ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dae0f305d61b07933a129dfe975342f3177277d5
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Mon Sep 28 14:23:57 2015 +0200

      x86/signal: Deinline get_sigframe, save 240 bytes

      This function compiles to 277 bytes of machine code and has 4 callsites.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443443037-22077-4-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c368ef2866adbfc0e90fdecc09e3b3fe2cddcd14
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Mon Sep 28 14:23:56 2015 +0200

      x86: Deinline early_console_register, save 403 bytes

      This function compiles to 60 bytes of machine code.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443443037-22077-3-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e6e5f84092b1f3a8733c20e26838af4e21a4854f
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Mon Sep 28 14:23:55 2015 +0200

      x86/e820: Deinline e820_type_to_string, save 126 bytes

      This function compiles to 102 bytes of machine code. It has two
      callsites.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443443037-22077-2-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7ba78053aacb89998a052843e3c56983c31d57f0
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 08:38:23 2015 +0000

      x86/process: Unify 32bit and 64bit implementations of get_wchan()

      The stack layout and the functionality is identical. Use the 64bit
      version for all of x86.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Borislav Petkov <bp@xxxxxxxxx>
      Reviewed-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Cc: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150930083302.779694618@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit eddd3826a1a0190e5235703d1e666affa4d13b96
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 08:38:22 2015 +0000

      x86/process: Add proper bound checks in 64bit get_wchan()

      Dmitry Vyukov reported the following using trinity and the memory
      error detector AddressSanitizer
      
(https://code.google.com/p/address-sanitizer/wiki/AddressSanitizerForKernel).

      [ 124.575597] ERROR: AddressSanitizer: heap-buffer-overflow on
      address ffff88002e280000
      [ 124.576801] ffff88002e280000 is located 131938492886538 bytes to
      the left of 28857600-byte region [ffffffff81282e0a, ffffffff82e0830a)
      [ 124.578633] Accessed by thread T10915:
      [ 124.579295] inlined in describe_heap_address
      ./arch/x86/mm/asan/report.c:164
      [ 124.579295] #0 ffffffff810dd277 in asan_report_error
      ./arch/x86/mm/asan/report.c:278
      [ 124.580137] #1 ffffffff810dc6a0 in asan_check_region
      ./arch/x86/mm/asan/asan.c:37
      [ 124.581050] #2 ffffffff810dd423 in __tsan_read8 ??:0
      [ 124.581893] #3 ffffffff8107c093 in get_wchan
      ./arch/x86/kernel/process_64.c:444

      The address checks in the 64bit implementation of get_wchan() are
      wrong in several ways:

       - The lower bound of the stack is not the start of the stack
         page. It's the start of the stack page plus sizeof (struct
         thread_info)

       - The upper bound must be:

             top_of_stack - TOP_OF_KERNEL_STACK_PADDING - 2 * sizeof(unsigned 
long).

         The 2 * sizeof(unsigned long) is required because the stack pointer
         points at the frame pointer. The layout on the stack is: ... IP FP
         ... IP FP. So we need to make sure that both IP and FP are in the
         bounds.

      Fix the bound checks and get rid of the mix of numeric constants, u64
      and unsigned long. Making all unsigned long allows us to use the same
      function for 32bit as well.

      Use READ_ONCE() when accessing the stack. This does not prevent a
      concurrent wakeup of the task and the stack changing, but at least it
      avoids TOCTOU.

      Also check task state at the end of the loop. Again that does not
      prevent concurrent changes, but it avoids walking for nothing.

      Add proper comments while at it.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Based-on-patch-from: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Borislav Petkov <bp@xxxxxxxxx>
      Reviewed-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150930083302.694788319@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ca07e9f3cb929548feee8b16715983a4ed009eb6
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:30:27 2015 +0200

      regmap: debugfs: simplify regmap_reg_ranges_read_file() slightly

      By printing the newline character to entry, we can avoid accounting
      for it manually in several places.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 20991cdb26ffc51030223320a6dd266f4fc28fbd
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:30:26 2015 +0200

      regmap: debugfs: use memcpy instead of snprintf

      Since we know the length of entry and that there's room enough in the
      output buffer, using memcpy instead of snprintf is simpler and
      cheaper.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit e34dc490713f8d9dfbbb5bb56d966d90a9344131
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:30:25 2015 +0200

      regmap: debugfs: use snprintf return value in 
regmap_reg_ranges_read_file()

      Calling strlen() no less than three times on entry is silly. Since
      we're formatting into a buffer with plenty of room, there's no chance
      of truncation, so snprintf() has actually returned the value we want,
      meaning we don't even have to call strlen once.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 09907ca630047bbeaa96de0102df7a6cc3a966cd
  Merge: d786ad3 e02ae38
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 21:20:39 2015 +0200

      Merge branch 'x86/for-kvm' into x86/apic

      Pull in the apic change which is provided for kvm folks to pull into
      their tree.

  commit e02ae3871355194a61b03a07d96fd71e81d7eff9
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Sep 28 12:26:31 2015 +0200

      x86/x2apic: Make stub functions available even if !CONFIG_X86_LOCAL_APIC

      Some CONFIG_X86_X2APIC functions, especially x2apic_enabled(), are not
      declared if !CONFIG_X86_LOCAL_APIC.  However, the same stubs that work
      for !CONFIG_X86_X2APIC are okay even if there is no local APIC support
      at all.

      Avoid the introduction of #ifdefs by moving the x2apic declarations
      completely outside the CONFIG_X86_LOCAL_APIC block.  (Unfortunately,
      diff generation messes up the actual change that this patch makes).
      There is no semantic change because CONFIG_X86_X2APIC depends on
      CONFIG_X86_LOCAL_APIC.

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: Feng Wu <feng.wu@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443435991-35750-1-git-send-email-pbonzini@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d786ad32c305ca0f6be1924558866fe9f901e291
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Tue Sep 29 22:37:02 2015 +0200

      x86/apic: Deinline various functions

      __x2apic_disable: 178 bytes, 3 calls
      __x2apic_enable: 117 bytes, 3 calls
      __smp_spurious_interrupt: 110 bytes, 2 calls
      __smp_error_interrupt: 208 bytes, 2 calls

      Reduces code size by about 850 bytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443559022-23793-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 26c21dd9885a2d8a4f4d539917c4877ffd399286
  Author: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
  Date:   Wed Sep 30 12:03:07 2015 +0200

      irqchip/renesas-intc-irqpin: r8a7778 IRLM setup support

      Works the same as on r8a7779.

      Signed-off-by: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443607387-19147-1-git-send-email-geert+Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e256da84a04ea31c3c215997c847609af224e8f4
  Author: Gianluca Renzi <gianlucarenzi@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 21:33:41 2015 +0200

      ASoC: sgtl5000: fix wrong register MIC_BIAS_VOLTAGE setup on probe

      Signed-off-by: Gianluca Renzi <gianlucarenzi@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 57622aef86d21d459e937c72f578050ff4a91af5
  Author: Jiada Wang <jiada_wang@xxxxxxxxxx>
  Date:   Wed Sep 30 13:54:13 2015 +0900

      ASoC: wm8962: balance pm_runtime_enable

      pm_runtime_enable is called in probe to enable runtime PM
      for wm8962 codec, but pm_runtime_disable isn't called in remove
      callback, nor is called in error path if probe fails after runtime
      PM is enabled, this causes unbalanced pm_runtime_enable.

      This patch Adds pm_runtime_disable in remove callback and error path,
      to balance pm_runtime_enable.

      Signed-off-by: Jiada Wang <jiada_wang@xxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit dd36d7393d6310b0c1adefb22fba79c3cf8a577c
  Merge: d4e842b 3cef072
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:13:55 2015 -0400

      Merge git://www.linux-watchdog.org/linux-watchdog

      Pull watchdog fixes from Wim Van Sebroeck:
       "This fixes:

         - module autoload for 3 OF platform drivers
         - poweroff behaviour on bcm2835 watchdog device
         - I2C dependencies for iTCO_wdt.c"

      * git://www.linux-watchdog.org/linux-watchdog:
        watchdog: iTCO: Fix dependencies on I2C
        watchdog: bcm2835: Fix poweroff behaviour
        watchdog: Fix module autoload for OF platform driver

  commit d4e842be2b697eb61c8863fe4b080bf0688198a2
  Merge: 70c8a00 f491e70
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:11:42 2015 -0400

      Merge tag 'hwmon-for-linus-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging

      Pull hwmin fixes from Guenter Roeck:
       "Fix module autoload for various drivers"

      * tag 'hwmon-for-linus-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:
        hwmon: (pwm-fan) Fix module autoload for OF platform driver
        hwmon: (gpio-fan) Fix module autoload for OF platform driver
        hwmon: (abx500) Fix module autoload for OF platform driver

  commit 874bbfe600a660cba9c776b3957b1ce393151b76
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Wed Sep 30 09:05:30 2015 -0700

      workqueue: make sure delayed work run in local cpu

      My system keeps crashing with below message. vmstat_update() schedules a 
delayed
      work in current cpu and expects the work runs in the cpu.
      schedule_delayed_work() is expected to make delayed work run in local 
cpu. The
      problem is timer can be migrated with NO_HZ. __queue_work() queues work in
      timer handler, which could run in a different cpu other than where the 
delayed
      work is scheduled. The end result is the delayed work runs in different 
cpu.
      The patch makes __queue_delayed_work records local cpu earlier. Where the 
timer
      runs doesn't change where the work runs with the change.

      [   28.010131] ------------[ cut here ]------------
      [   28.010609] kernel BUG at ../mm/vmstat.c:1392!
      [   28.011099] invalid opcode: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
      [   28.011860] Modules linked in:
      [   28.012245] CPU: 0 PID: 289 Comm: kworker/0:3 Tainted: G        
W4.3.0-rc3+ #634
      [   28.013065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), 
BIOS 1.7.5-20140709_153802- 04/01/2014
      [   28.014160] Workqueue: events vmstat_update
      [   28.014571] task: ffff880117682580 ti: ffff8800ba428000 task.ti: 
ffff8800ba428000
      [   28.015445] RIP: 0010:[<ffffffff8115f921>]  
[<ffffffff8115f921>]vmstat_update+0x31/0x80
      [   28.016282] RSP: 0018:ffff8800ba42fd80  EFLAGS: 00010297
      [   28.016812] RAX: 0000000000000000 RBX: ffff88011a858dc0 
RCX:0000000000000000
      [   28.017585] RDX: ffff880117682580 RSI: ffffffff81f14d8c 
RDI:ffffffff81f4df8d
      [   28.018366] RBP: ffff8800ba42fd90 R08: 0000000000000001 
R09:0000000000000000
      [   28.019169] R10: 0000000000000000 R11: 0000000000000121 
R12:ffff8800baa9f640
      [   28.019947] R13: ffff88011a81e340 R14: ffff88011a823700 
R15:0000000000000000
      [   28.020071] FS:  0000000000000000(0000) 
GS:ffff88011a800000(0000)knlGS:0000000000000000
      [   28.020071] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
      [   28.020071] CR2: 00007ff6144b01d0 CR3: 00000000b8e93000 
CR4:00000000000006f0
      [   28.020071] Stack:
      [   28.020071]  ffff88011a858dc0 ffff8800baa9f640 
ffff8800ba42fe00ffffffff8106bd88
      [   28.020071]  ffffffff8106bd0b 0000000000000096 
0000000000000000ffffffff82f9b1e8
      [   28.020071]  ffffffff829f0b10 0000000000000000 
ffffffff81f18460ffff88011a81e340
      [   28.020071] Call Trace:
      [   28.020071]  [<ffffffff8106bd88>] process_one_work+0x1c8/0x540
      [   28.020071]  [<ffffffff8106bd0b>] ? process_one_work+0x14b/0x540
      [   28.020071]  [<ffffffff8106c214>] worker_thread+0x114/0x460
      [   28.020071]  [<ffffffff8106c100>] ? process_one_work+0x540/0x540
      [   28.020071]  [<ffffffff81071bf8>] kthread+0xf8/0x110
      [   28.020071]  [<ffffffff81071b00>] ?kthread_create_on_node+0x200/0x200
      [   28.020071]  [<ffffffff81a6522f>] ret_from_fork+0x3f/0x70
      [   28.020071]  [<ffffffff81071b00>] ?kthread_create_on_node+0x200/0x200

      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v2.6.31+

  commit 70c8a00a09076ca2683ef24356fad2e55f93a427
  Merge: b9a5322 7c4f1c6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:01:35 2015 -0400

      Merge branch 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RCU fixes from Ingo Molnar:
       "Two RCU fixes:

         - work around bug with recent GCC versions.

         - fix false positive lockdep splat"

      * 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        rcu: Suppress lockdep false positive for rcp->exp_funnel_mutex
        rcu: Change _wait_rcu_gp() to work around GCC bug 67055

  commit b9a532277938798b53178d5a66af6e2915cb27cf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 12:48:40 2015 -0400

      Initialize msg/shm IPC objects before doing ipc_addid()

      As reported by Dmitry Vyukov, we really shouldn't do ipc_addid() before
      having initialized the IPC object state.  Yes, we initialize the IPC
      object in a locked state, but with all the lockless RCU lookup work,
      that IPC object lock no longer means that the state cannot be seen.

      We already did this for the IPC semaphore code (see commit e8577d1f0329:
      "ipc/sem.c: fully initialize sem_array before making it visible") but we
      clearly forgot about msg and shm.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Manfred Spraul <manfred@xxxxxxxxxxxxxxxx>
      Cc: Davidlohr Bueso <dbueso@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3e4e3805643445b71b7ee1b84892e43d004e24e2
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Sep 10 15:00:39 2015 +0200

      drm/amdgpu: only print meaningful VM faults

      Port of radeon commit 9b7d786b900baf7c0d1a7e211570aef1cb27590f.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 2392eec65c493c3f49a1f23f4af713e3c68cf6f5
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Sep 29 10:35:45 2015 -0400

      drm/amdgpu/cgs: remove import_gpu_mem

      It was added for completeness, but we don't have any users
      for it yet.  Daniel noted that it may be racy. Remove it.

      Change-Id: I5f5546f8911a4f294008a62dc86a73f3face38d1
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 9b9acde7e887e057568cd077d9c3377d2cb9aa5b
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Tue Feb 11 19:34:25 2014 -0800

      RDS: Use per-bucket rw lock for bind hash-table

      One global lock protecting hash-tables with 1024 buckets isn't
      efficient and it shows up in a massive systems with truck
      loads of RDS sockets serving multiple databases. The
      perf data clearly highlights the contention on the rw
      lock in these massive workloads.

      When the contention gets worse, the code gets into a state where
      it decides to back off on the lock. So while it has disabled interrupts,
      it sits and backs off on this lock get. This causes the system to
      become sluggish and eventually all sorts of bad things happen.

      The simple fix is to move the lock into the hash bucket and
      use per-bucket lock to improve the scalability.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 28126959882d3ec4745f2ec800f3a1d74368b2fe
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Feb 3 11:08:50 2012 -0500

      RDS: fix rds_sock reference bug while doing bind

      One need to take rds socket reference while using it and release it
      once done with it. rds_add_bind() code path does not do that so
      lets fix it.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 8b0a6b461e2ccc95363e0547aa4f43ba2e02b096
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Feb 3 11:09:23 2012 -0500

      RDS: make socket bind/release locking scheme simple and more efficient

      RDS bind and release locking scheme is very inefficient. It
      uses RCU for maintaining the bind hash-table which is great but
      it also needs to hold spinlock for [add/remove]_bound(). So
      overall usecase, the hash-table concurrent speedup doesn't pay off.
      In fact blocking nature of synchronize_rcu() makes the RDS
      socket shutdown too slow which hurts RDS performance since
      connection shutdown and re-connect happens quite often to
      maintain the RC part of the protocol.

      So we make the locking scheme simpler and more efficient by
      replacing spin_locks with reader/writer locks and getting rid
      off rcu for bind hash-table.

      In subsequent patch, we also covert the global lock with per-bucket
      lock to reduce the global lock contention.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 59fe4606748f7016e9e02bbd26da185f8620661a
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Feb 3 11:09:23 2012 -0500

      RDS: use kfree_rcu in rds_ib_remove_ipaddr

      synchronize_rcu() slowing down un-necessarily the socket shutdown
      path. It is used just kfree() the ip addresses in rds_ib_remove_ipaddr()
      which is perfect usecase for kfree_rcu();

      So lets use that to gain some speedup.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit f5f6afa85aa82a8ee59072f2d09f2b381f24c871
  Author: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
  Date:   Tue Sep 29 18:21:19 2015 +0900

      usb: renesas_usbhs: Add support for R-Car H3

      This patch adds a compatible string to support for R-Car H3.

      Since the HS-USB controller of R-Car H3 is almost the same specification
      with R-Car Gen2 (these have 16 pipes and usb-dmac), this patch
      sets the "type" of renesas_usbhs_driver_param to USBHS_TYPE_RCAR_GEN2.

      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 9ae7ce00cc1353155b1914bfc40e8362efef7d1c
  Author: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
  Date:   Tue Sep 29 18:21:18 2015 +0900

      usb: renesas_usbhs: fix build warning if 64-bit architecture

      This patch fixes the following warning if 64-bit architecture environment:

      ./drivers/usb/renesas_usbhs/common.c:496:25: warning: cast from pointer 
to integer of different size [-Wpointer-to-int-cast]
        dparam->type = of_id ? (u32)of_id->data : 0;

      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 7022cfdfe07dcfccc294f04de5f75e0a37b16174
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sat Sep 26 15:01:06 2015 +0530

      usb: gadget: bdc: fix memory leak

      If dma_pool_alloc() fails we are jumping to fail and releasing all the
      bd_tables which have been added to the chain but we missed freeing this
      bd_table which was just allocated and still not added to the chain of
      bd_table.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 7a63076d9a31a6c2073da45021eeb4f89d2a8b56
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Wed Aug 5 15:42:38 2015 -0700

      MIPS: CPS: #ifdef on CONFIG_MIPS_MT_SMP rather than CONFIG_MIPS_MT

      The CONFIG_MIPS_MT symbol can be selected by CONFIG_MIPS_VPE_LOADER in
      addition to CONFIG_MIPS_MT_SMP. We only want MT code in the CPS SMP boot
      vector if we're using MT for SMP. Thus switch the config symbol we ifdef
      against to CONFIG_MIPS_MT_SMP.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.16+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/10867/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit a5b0f6db0e6cf6224e50f6585e9c8f0c2d38a8f8
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Wed Aug 5 15:42:37 2015 -0700

      MIPS: CPS: Don't include MT code in non-MT kernels.

      The MT-specific code in mips_cps_boot_vpes can safely be omitted from
      kernels which don't support MT, with the default VPE==0 case being used
      as it would be after the has_mt (Config3.MT) check failed at runtime.
      Discarding the code entirely will save us a few bytes & allow cleaner
      handling of MT ASE instructions by later patches.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.16+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/10866/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1e5fb282f8eda889776ee83f9214d5df9edaa26d
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Wed Aug 5 15:42:36 2015 -0700

      MIPS: CPS: Stop dangling delay slot from has_mt.

      The has_mt macro ended with a branch, leaving its callers with a delay
      slot that would be executed if Config3.MT is not set. However it would
      not be executed if Config3 (or earlier Config registers) don't exist
      which makes it somewhat inconsistent at best. Fill the delay slot in the
      macro & fix the mips_cps_boot_vpes caller appropriately.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.16+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/10865/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 53960059d56ecef67d4ddd546731623641a3d2d1
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Fri Mar 27 08:33:43 2015 +0000

      MIPS: dma-default: Fix 32-bit fall back to GFP_DMA

      If there is a DMA zone (usually 24bit = 16MB I believe), but no DMA32
      zone, as is the case for some 32-bit kernels, then massage_gfp_flags()
      will cause DMA memory allocated for devices with a 32..63-bit
      coherent_dma_mask to fall back to using __GFP_DMA, even though there may
      only be 32-bits of physical address available anyway.

      Correct that case to compare against a mask the size of phys_addr_t
      instead of always using a 64-bit mask.

      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Fixes: a2e715a86c6d ("MIPS: DMA: Fix computation of DMA flags from 
device's coherent_dma_mask.")
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: <stable@xxxxxxxxxxxxxxx> # 2.6.36+
      Patchwork: https://patchwork.linux-mips.org/patch/9610/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 72d38b19781de457def0a62dfaa50134fc6e15f0
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Sep 18 16:41:36 2015 +0200

      s390/vtime: correct scaled cputime of partially idle CPUs

      The calculation for the SMT scaling factor for a hardware thread
      which has been partially idle needs to disregard the cycles spent
      by the other threads of the core while the thread is idle.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 4a2fa2b8a861b095f6d495dc006e9d47df177594
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Wed Sep 30 13:02:05 2015 +0000

      Bluetooth: hci_h5: clean up hci_h5 code

      This patch fixes checkpatch warnings:
      - Comparison to NULL could be re-written
      - no space required after a cast

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b94be972538f4523f09243af7c726158f0bfae33
  Author: Egbert Eich <eich@xxxxxxx>
  Date:   Wed Sep 23 16:13:01 2015 +0200

      drm/i915: Call non-locking version of drm_kms_helper_poll_enable(), v2

      drm_kms_helper_poll_enable() is called from a context in
      intel_hpd_irq_storm_disable() where the the mode_config mutex is
      already locked.
      When this function was converted to lock this mutex in
      commit 8c4ccc4ab6f6 ("drm/probe-helper: Grab mode_config.mutex
      in poll_init/enable") a deadlock occurred.
      Call the newly implemented non-locking version of this function.

      Changes since v1:
      - use function name suffix '_locked' for the function that
        is to be called from a locked context.

      Signed-off-by: Egbert Eich <eich@xxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 239ede3c0213f152a1bab083af7d7bbb39e0d3d5
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Wed Sep 30 12:27:46 2015 +0000

      Bluetooth: btuart_cs: remove obsolete header

      Use <linux/io.h> instead of <asm/io.h>, fixes checkpatch
      Warning;

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4ad640e99e5e5514d623210bc937e665ffd8f43f
  Author: Egbert Eich <eich@xxxxxxx>
  Date:   Wed Sep 23 16:13:00 2015 +0200

      drm: Add a non-locking version of drm_kms_helper_poll_enable(), v2

      drm_kms_helper_poll_enable() was converted to lock the mode_config
      mutex in commit 8c4ccc4ab6f64e859d4ff8d7c02c2ed2e956e07f
      ("drm/probe-helper: Grab mode_config.mutex in poll_init/enable").

      This disregarded the cases where this function is called from a context
      where this mutex is already locked.

      Add a non-locking version as well.

      Changes since v1:
      - use function name suffix '_locked' for the function that
        is to be called from a locked context.

      Signed-off-by: Egbert Eich <eich@xxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 031277d4d33d33f0174fbb569ca8f68238175617
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Wed Sep 30 17:37:18 2015 +0800

      mmc: core: fix dead loop of mmc_retune

      When get a CRC error, start the mmc_retune, it will issue CMD19/CMD21
      to do tune, assume there were 10 clock phase need to try, phase 0 to
      phase 6 is ok, phase 7 to phase 9 is NG, we try it from 0 to 9, so
      the last CMD19/CMD21 will get CRC error, host->need_retune was set and
      cause mmc_retune was called, then dead loop of mmc_retune

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Fixes: bd11e8bd03ca ("mmc: core: Flag re-tuning is needed on CRC errors")
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 575f9c8604e0b4c7b36fb41fc5fd280a3c336906
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Tue Sep 29 07:49:56 2015 -0700

      drm/vmwgfx: Fix a command submission hang regression

      When we're out of command buffer space, we turn on the command buffer
      processed irq without re-checking for finished command buffers afterwards.
      This might lead to a missed irq and the command submission process waiting
      forever for space.

      Fix this by rerunning the command buffer submission handler whenever we're
      out of command space. This ensures both that we don't needlessly turn on
      the irq, and that if we decide to turn on the irq, we recheck for finished
      command buffers before going to sleep.

      Reported-and-tested-by: Bryan Li <ldexin@xxxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 9c70d7cebfec558e07a2ab0f2d5f5a80a821ecf5
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Aug 13 18:54:31 2015 -0700

      i40e: fix 32 bit build warnings

      Sparse found some issues with 32 bit compilation, which probably should
      at least work without warning.  Not only that, but the code was wrong.
      Thanks sparse!!

      And thanks to the kbuild robot zero day testing for finding this issue.

      $ make ARCH=i386 M=drivers/net/ethernet/intel/i40e C=2 
CF="-D__CHECK_ENDIAN__"
        CHECK   drivers/net/ethernet/intel/i40e/i40e_main.c
        include/linux/etherdevice.h:79:32: warning: restricted __be16 degrades 
to integer
        drivers/net/ethernet/intel/i40e/i40e_main.c:7565:17: warning: shift too 
big (32) for type unsigned long
        drivers/net/ethernet/intel/i40e/i40e_main.c:7565:17: warning: shift too 
big (42) for type unsigned long
        drivers/net/ethernet/intel/i40e/i40e_main.c:7565:17: warning: shift too 
big (39) for type unsigned long
        drivers/net/ethernet/intel/i40e/i40e_main.c:7565:17: warning: shift too 
big (40) for type unsigned long

      CC: kbuild-all@xxxxxx
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e88ae667ecccf104311ec1a34536bd1e8a0fe6f7
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Aug 13 18:54:26 2015 -0700

      i40e: fix kbuild warnings

      The 0day build infrastructure found some issues in i40e, this
      removes the warnings by adding a harmless cast to a dev_info.

      CC: kbuild-all@xxxxxx
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9b32b0b5dded7382c00595180bd5ce4f2f8c3d9b
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Aug 13 15:11:32 2015 -0700

      i40evf: tweak init timing

      This patch tweaks the init timing of the driver just a little bit to
      increase stability on load/unload and SR-IOV enable/disable cycles.

      First, run the init_task loop a little quicker in order to reduce
      overall init time.

      Second, stagger the start of the init task based on the device's
      PCIe function ID. This lessens the impact on the firmware when a
      whole bunch of VFs are initialized simultaneously, e.g. enabling
      SR-IOV without the VF driver blacklisted. For single VFs assigned
      to VMs this will have no effect as the function ID will always be 0.

      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e908f81562b1367ac3ab3d156db3dcbbe07479f6
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:42 2015 -0400

      i40e: warn on double free

      Down was requesting queue disables, but then exited immediately without
      waiting for the queues to actually disable. This could allow any
      function called after i40evf_down to run immediately, including
      i40evf_up, and causes a memory leak.

      This issue has been fixed in a recent refactor of the reset code, but
      add a couple WARN_ONs in the slow path to help us recognize if we
      reintroduce this issue or if we missed any cases.

      Change-ID: I27b6b5c9a79c1892f0ba453129f116bc32647dd0
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 7845548de7e4b49451f0eed77f690e579c428417
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:41 2015 -0400

      i40e: refactor interrupt enable

      The interrupt enable function was always making the caller add
      the base_vector from the VSI struct which is already passed to
      the function. Just collapse the math into the helper function.

      Change-ID: I54ef33aa7ceebc3231c3cc48f7b39fd0c3ff5806
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d1a8d275340470b89fa3a3f7c47433caf1286336
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:40 2015 -0400

      i40e: Strip VEB stats if they are disabled in HW

      Due to performance reasons, VEB stats have been disabled in the hw. This
      patch adds code to check for that condition before accumulating these
      stats.

      Change-ID: I7d805669476fedabb073790403703798ae5d878e
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 48a3b512e8c0703884dd1b3afd85a295ecd36b5f
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:39 2015 -0400

      i40e/i40evf: add new device id 1588

      Add new device id and support for another 20Gb device.

      Change-ID: Ib1b61e5bb6201d84953f97cade39a6e3369c2cf2
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 201991004da2c88e780ec58c93c960d0223c3687
  Author: Greg Rose <gregory.v.rose@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:38 2015 -0400

      i40e: Remove useless message

      Remove a useless message that blathers on whenever a vxlan port is 
deleted.

      Change-ID: If63fb8cf38e56cf433b68e498f11389de51919ba
      Signed-off-by: Greg Rose <gregory.v.rose@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2ac8b675d9466b397f94aa1ead575d39b71b5055
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:37 2015 -0400

      i40e: limit debugfs io ops

      Don't let the debugfs register read and write commands try to access
      outside of the ioremapped space.  While we're at it, remove the use of
      a misleading constant.

      Change-ID: Ifce2893e232c65c7a76c23532c658f298218a81b
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f7fc2f2eb11fe808df330df42a9429aa5b804388
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:36 2015 -0400

      i40e: use QOS field consistently

      In i40e_ndo_set_vf_port_vlan, we were using the QOS value
      inconsistently, sometimes shifting it, sometimes not. Do the shift-and-
      or operation correctly, once, and use the result consistently everywhere
      in the function.

      Change-ID: I46f062f3edc90a8a017ecec9137f4d1ab0ab9e41
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 96fc7a9cee671f10e14aaca44833696a71f1ebdb
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Wed Sep 30 14:24:31 2015 +0200

      MIPS: Wire up userfaultfd and membarrier syscalls.

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d8201e200a7474d391fd24ca811b0375e6694387
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:35 2015 -0400

      i40e: count drops in netstat interface

      The i40e rx_dropped counter was not showing up in netstat -i.
      Add the right counter to be updated with the stats.

      Change-ID: I4dd552e9995836099184f9d9a08e90edb591155f
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0deda86836e489fe43a33e8d899319bd0ed985a4
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:34 2015 -0400

      i40e/i40evf: fix Tx hang workaround code

      The arm writeback (arm_wb) code is used for kicking the Tx ring to
      make sure any pending work is completed even if interrupts are
      disabled. It was running when it didn't need to, and not clearing
      the ring->arm_wb state after it was set.  This caused Tx hangs
      to still occur occasionally when there really was no hang.
      Fix this by resetting the variable right after it was used.

      Change-ID: I7bf75d552ba9c4bd203d40615213861a24bb5594
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 17351401fec6df1e6032054cd3c2ea03ad917a92
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:32 2015 -0400

      i40e: fixup padding issue in get_cee_dcb_cfg_v1_resp

      The struct i40e_aqc_get_cee_dcb_cfg_v1_resp was originally defined with
      word boundary layout issues, which most compilers deal with by silently
      adding padding, making the actual struct larger than designed.
      This patch adds an extra byte in fields reserved3 and reserved4 to 
directly
      acknowledge that padding.

      Because the struct doesn't actually change in size or layout, this doesn't
      constitute a change in the API.

      Change-ID: I53fa4741b73fa255621232a85fba000b0e223015
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d9b68f8aba0ae3f9ab6c5dec4ae1052b7e26c53c
  Author: Greg Rose <gregory.v.rose@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:31 2015 -0400

      i40e: Fix a port VLAN configuration bug

      If a port VLAN is set for a given virtual function (VF) before the VF
      driver is loaded then a configuration error results in which the port
      VLAN is ignored when the VF driver is subsequently loaded.  This causes
      the VF's MAC/VLAN filters to not use the correct VLAN filter.  This
      patch ensures that the port VLAN filter is considered at the right time
      during configuration of the VF's MAC/VLAN filters.

      Change-ID: I28f404cbc21a4c6d70a7980b87c77f13f06685a4
      Signed-off-by: Greg Rose <gregory.v.rose@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1fa89a4b3b0b646ee9cb04eb890a3398eae0dc85
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:30 2015 -0400

      i40e/i40evf: fix up type clash in i40e_aq_rc_to_posix conversion

      The error code sent into i40e_aq_rc_to_posix() are signed values, so we
      really need to treat them as such.

      Change-ID: I3d1ae0ee9ae0b1b6f5fc424f8b8cc58b0ea93203
      Reported-by: Helin Zhang <helin.zhang@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4c4935a964e29da61390122f0a5c9f36e8ae081d
  Author: Vasily Averin <vvs@xxxxxxxxxxxxx>
  Date:   Wed Jul 8 15:04:26 2015 +0300

      i40e: rtnl_lock called twice in i40e_pci_error_resume()

      Signed-off-by: Vasily Averin <vvs@xxxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f2a1c3680c1d9e2a1f9e68ce13f1130e587d28cf
  Author: Vasily Averin <vvs@xxxxxxxxxxxxx>
  Date:   Tue Jul 7 18:53:38 2015 +0300

      i40evf: missing rtnl_unlock in i40evf_resume()

      Signed-off-by: Vasily Averin <vvs@xxxxxxxxxxxxx>
      Tested-by: Andrews Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1c64f147d3cc9bbafe091a7b335ea3ec700186f0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 30 10:20:11 2015 +0200

      ieee802154: 6lowpan: add tx/rx stats

      This patch adds support for increment transmit and receive stats. The
      meaning of these stats are IPv6 based, which shows the stats after
      running the 6lowpan adaptation layer (uncompression/compression,
      fragmentation handling) on receive and before the adaptation layer
      when transmit.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4bc8fbc95e0d831e5e3800ecc8a8d5acac79c9a8
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 30 10:20:10 2015 +0200

      ieee802154: 6lowpan: don't skip first dsn while fragmentation

      This patch fixes the data frame sequence numer (dsn) while 6lowpan
      fragmentation for frag1. Currently we create one 802.15.4 header at
      first, then check if it's match into one frame and at the end construct
      many fragments and calling wpan_dev_hard_header for each of them,
      inclusive for the first fragment. This will make the first generated
      header to garbage, instead we copying this header for frag1 instead of
      generate a new one which skips one dsn.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 72d53b116264d5e570f610b3971dae4721aa5c0f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 30 10:20:09 2015 +0200

      ieee802154: 6lowpan: change datagram var types

      This patch changes datagram size variable from u16 type to unsigned int.
      The reason is that an IPv6 header has an MAX_UIN16 payload length, but
      the datagram size is payload + IPv6 header length. This avoids overflows
      at some places.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5f2ebb3b59c81a461ffd4921d12e9f6e09c32945
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 19:59:48 2015 +0200

      mac802154: check on len instead mac_len

      This patch change the length check to len instead of mac_len for
      checking if the frame control field is available to dereference.
      We need to change it because I saw issues with af_packet raw sockets
      and the mrf24j40 which calls this functionality. The raw socket
      functionality doesn't set the mac_len but resets the skb_mac_header to
      skb->data which is still correct. The issue occur at mrf24j40 only,
      because the driver need to evaluate the fc fields.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b40988c438c2405a177ae54ff4baa08c720c296f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 12:36:26 2015 +0200

      ieee802154: change mtu size behaviour

      This patch changes the mtu size of 802.15.4 interfaces. The current
      setting is the meaning of the maximum transport unit with mac header,
      which is 127 bytes according 802.15.4. The linux meaning of the mtu size
      field is the maximum payload of a mac frame. Like in ethernet, which is
      1500 bytes.

      We have dynamic length of mac frames in 802.15.4, this is why we assume
      the minimum header length which is hard_header_len. This contains fc and
      sequence fields. These can evaluated by driver layer without additional
      checks. We currently don't support to set the FCS from userspace, so we
      need to subtract this from mtu size as well.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit d58a2fa903c18f97aac30cd3c4c8a378a2c647c4
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 09:00:26 2015 +0200

      mac802154: add comments for llsec issues

      While doing a little test with the llsec implementation I saw these
      issues. We should move decryption and encruption somewhere else,
      otherwise while capturing with wireshark the mac header shows secuirty
      fields but the payload is plaintext.

      A complete other issue is what doing with HardMAC drivers where the
      payload is always plaintext. I think we need a special handling then in
      userspace. We currently doesn't support any HardMAC transceivers, so we
      should fix the first issue for SoftMAC transceivers.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a26c5fd7622d4951425131d54a8c99f076fe2068
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 09:00:25 2015 +0200

      nl802154: add support for security layer

      This patch adds support for accessing mac802154 llsec implementation
      over nl802154. I added for a new Kconfig entry to provide this
      functionality CONFIG_IEEE802154_NL802154_EXPERIMENTAL. This interface is
      still in development. It provides to change security parameters and
      add/del/dump entries of security tables. Later we can add also a get to
      get an entry by unique identifier.

      Cc: Phoebe Buckheister <phoebe.buckheister@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1ee06ef1596dcc5858ea29ef9faf0f29e139dfcc
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 09:00:24 2015 +0200

      nl802154: use nla_get_le64 for get extended addr

      This patch uses the nla_get_le64 function instead of doing a force
      converting to le64.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c648a0138b8f79b6cb4bd092dfab761e4becb1c2
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 09:00:23 2015 +0200

      netlink: add nla_get for le32 and le64

      This patch adds missing inline wrappers for nla_get_le32 and
      nla_get_le64. The 802.15.4 MAC byteorder is little endian and we keep
      the byteorder for fields like address configuration in the same
      byteorder as it comes from the MAC layer.

      To provide these fields for nl802154 userspace applications, we need
      these inline wrappers for netlink.

      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 7253054e5d05233063c48f57ac02283bd35753d8
  Author: Stephane Grosjean <s.grosjean@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 12:42:35 2015 +0200

      can: peak_pci: add unused device id. in devices table

      While new PEAK_PCIE_OEM_ID has been defined since 3.17, no corresponding
      entry has been added in the peak_pci_tbl[] of the peak_pci CAN driver.

      This patch enables now users of the PCAN-PCI Express OEM card to run the
      peak_pci driver too.

      Signed-off-by: Stephane Grosjean <s.grosjean@xxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 6bea0f6d1c47b07be88dfd93f013ae05fcb3d8bf
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:57:03 2015 +0300

      dmaengine: dw: properly read DWC_PARAMS register

      In case we have less than maximum allowed channels (8) and 
autoconfiguration is
      enabled the DWC_PARAMS read is wrong because it uses different arithmetic 
to
      what is needed for channel priority setup.

      Re-do the caclulations properly. This now works on AVR32 board well.

      Fixes: fed2574b3c9f (dw_dmac: introduce software emulation of LLP 
transfers)
      Cc: yitian.bu@xxxxxxxxxxxxxx
      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 10d97d5869f9a50eb3142c7ee562ecc5b5b33f5b
  Author: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 17:59:19 2015 -0300

      drm/exynos: remove unused mode_fixup() code

      CRTC's mode_fixup() isn't used anymore in exynos, remove it.

      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 208d7ee3c89e5e94627aa33331b15dd4df814707
  Author: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 17:59:18 2015 -0300

      drm/exynos: remove decon_mode_fixup()

      The only thing mode_fixup was doing was set the adjusted_mode->vrefresh to
      60, but it already has the value of 60 when the decon_mode_fixup() is
      called. That means this call is actually pointless and can be removed.

      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 50bbfbffa5c894def440ce8157dfe53e60960d35
  Author: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 17:59:17 2015 -0300

      drm/exynos: remove fimd_mode_fixup()

      The only thing mode_fixup was doing was set the adjusted_mode->vrefresh to
      60, but it already has the value of 60 when the fimd_mode_fixup() is
      called. That means this call is actually pointless and can be removed.

      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit ee08b59d47d859ed0a11ab331a3fbc5ab3b56100
  Author: Rameshwar Prasad Sahu <rsahu@xxxxxxx>
  Date:   Wed Sep 16 13:33:23 2015 +0530

      dmaengine: xgene-dma: Fix overwritting DMA tx ring

      This patch fixes an over flow issue with the TX ring descriptor. Each
      descriptor is 32B in size and an operation requires 2 of these
      descriptors.

      Signed-off-by: Rameshwar Prasad Sahu <rsahu@xxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 214fc4e423ff38b41b60db2209cf49b4e9a7209b
  Author: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
  Date:   Thu Sep 24 12:03:35 2015 +0300

      dmaengine: fix balance of privatecnt

      dma_release_channel() decrements privatecnt counter and almost all 
dma_get*
      function increments it with the exception of dma_get_slave_channel().
      In most cases this does not cause issue since normally the channel is not
      requested and released, but if a driver requests DMA channel via
      dma_get_slave_channel() and releases the channel the privatecnt will be
      unbalanced and this will prevent for example getting channel for memcpy.

      Signed-off-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 85a82038b2744f87cb297f93ddecd04a8c2979bd
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Thu Sep 24 12:14:15 2015 +0200

      drm/exynos: rotator: Clock control is unused if !PM

      Protect the rotator_clk_crtl() function with an #ifdef CONFIG_PM guard
      to avoid "defined but not used" warnings.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Reviewed-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 641a2fef39369c27df887e82cd63aee3de93f511
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Thu Sep 24 12:14:14 2015 +0200

      drm/exynos: fimc: Clock control is unused if !PM

      Protect the fimc_clk_ctrl() function with an #ifdef CONFIG_PM guard to
      avoid "defined but not used" warnings.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Reviewed-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 7082947eff3b1ddbb5d320331c846a5a2fc88261
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Thu Sep 24 12:14:13 2015 +0200

      drm/exynos: Suspend/resume is unused if !PM

      Protect the suspend and resume callbacks with an #ifdef CONFIG_PM_SLEEP
      guard to avoid "defined but not used" warnings.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 48cf53f4343ae12ddc1c60dbe116161ecf7a2885
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Tue Jul 28 17:53:23 2015 +0900

      drm/exynos: create a fake mmap offset with gem creation

      Don't create a fake mmap offset in exynos_drm_gem_dumb_map_offset. If
      not, it will call drm_gem_create_mmap_offset whenever user requests
      DRM_IOCTL_MODE_MAP_DUMB ioctl.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 8755556fbbdd1a6af21a3c4d9ce8f451e999e457
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Fri Sep 25 18:10:32 2015 +0900

      drm/exynos: remove call to drm_gem_free_mmap_offset()

      The drm_gem_object_release() function already performs this cleanup,
      so there is no reason to do it explicitly.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit b9e71911f34616276399da3dc1abc47797be2396
  Author: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
  Date:   Wed Sep 9 12:55:25 2015 -0300

      drm/exynos: Remove useless EXPORT_SYMBOL_GPLs

      All the user of these functions are inside exynos-drm driver and
      you don't need to export the symbols for that case.

      Signed-off-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit b4cfd4ddfb555c8cda7b0aa55c0e37522f8e01e4
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:29:35 2015 +0900

      drm/exynos: cleanup line feed in exynos_drm_gem_get_ioctl

      The beginning of statement in function is next line of a brace.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 333e8e58b0bed137e940ac92c2af3f3aa4603504
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:29:34 2015 +0900

      drm/exynos: cleanup function calling written twice

      By if statment, some function callings are written twice. It needs
      several line feed by indentation in if statment. Make to one function
      calling from outside if statment.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit b319dc6a61518cc02ae21afb383901236009aab1
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:29:33 2015 +0900

      drm/exynos: staticize exynos_drm_gem_init()

      The exynos_drm_gem_init() is used only in exynos_drm_gem.c file. Make it
      static and don't export it.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 0269b1a17f8f887c02ae37affef884e1ffda3df6
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:29:32 2015 +0900

      drm/exynos: remove unnecessary NULL assignment

      They will be freed right or was freed already, so NULL assignment is
      unnecessary.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 7c93537a47e15e04064158ccdbe28f88ee61170c
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:14:54 2015 +0900

      drm/exynos: fix missed calling of drm_prime_gem_destroy()

      When obj->import_attach is existed, code calling drm_prime_gem_destroy()
      was removed from commit 67e93c808b48 ("drm/exynos: stop copying sg
      table"), and it's a fault.

      The drm_prime_gem_destroy() is cleanup function which GEM drivers need
      to call when they use drm_gem_prime_import() to import dma-bufs, so
      exynos-drm driver using drm_gem_prime_import() needs calling
      drm_prime_gem_destroy().

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 5e0fb1f9eb754eed8432392bfdc100ef295676cd
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:16:45 2015 +0900

      drm/exynos: fix layering violation of address

      There is no guarantee that DMA addresses are the same as physical
      addresses, but dma_to_pfn() knows how to convert a dma_addr_t to a PFN
      which can then be converted to a struct page.

      Suggested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 4d370b74e7ce175f26654fe2db49db342566cdc8
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sat Sep 26 14:22:10 2015 +0530

      fbdev: broadsheetfb: fix memory leak

      We have requested the firmware and it was loaded but we missed releasing
      it both on success and error.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 4ac86a6dcec1c3878de9747bf5a2aa4455be69e3
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Tue Sep 29 19:40:14 2015 +0300

      x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels

      With KMEMCHECK=y, KASAN=n we get this build failure:

        arch/x86/platform/efi/efi.c:673:3:    error: implicit declaration of 
function â??memcpyâ?? [-Werror=implicit-function-declaration]
        arch/x86/platform/efi/efi_64.c:139:2: error: implicit declaration of 
function â??memcpyâ?? [-Werror=implicit-function-declaration]
        arch/x86/include/asm/desc.h:121:2:    error: implicit declaration of 
function â??memcpyâ?? [-Werror=implicit-function-declaration]

      Don't #undef memcpy if KASAN=n.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Reported-by: Sedat Dilek <sedat.dilek@xxxxxxxxx>
      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 769a8089c1fd ("x86, efi, kasan: #undef memset/memcpy/memmove per 
arch")
      Link: 
http://lkml.kernel.org/r/1443544814-20122-1-git-send-email-ryabinin.a.a@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ccf79c238f1a06a801b4c4449b9bc8a42be2c7bc
  Merge: 1e03474 9ffecb1
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 30 09:29:27 2015 +0200

      Merge tag 'v4.3-rc3' into x86/urgent, before applying dependent fix

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 40482e64b0b84388561b00b880eeca7000f72d38
  Author: Emilio López <emilio@xxxxxxxxxxxxx>
  Date:   Sun Sep 13 17:15:53 2015 -0300

      dmaengine: sun4i: fix unsafe list iteration

      Currently, sun4i_dma_free_contract iterates over lists and frees memory
      as it goes through them, causing reads to recently freed memory to
      be performed. Fix this by using the safe version of the iterator, so
      freed memory is not referenced at all.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Emilio López <emilio@xxxxxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 184e16d79d38634cbb7b7c1cd3832caf89595c9a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 14 20:14:45 2015 -0500

      openvswitch: Remove ovs_vport_output_sk

      This was a compatibility function needed while the ipv4 and ipv6
      fragmentation code was being modified to pass a struct net through
      them.  Now that is complete this function has no more users so remove
      it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 75aec9df3a7895747a0d022b7c83a1dfb2adf942
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 14 13:46:16 2015 -0500

      bridge: Remove br_nf_push_frag_xmit_sk

      Now that this compatability function no longer has any callers remove it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 7d8c6e391575ee86c870b88635a163743fca9eac
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Jun 12 22:12:04 2015 -0500

      ipv6: Pass struct net through ip6_fragment

      Signed-off-by: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>

  commit 694869b3c5440e0d821583ec8811b6cb5d03742d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Jun 12 21:55:31 2015 -0500

      ipv4: Pass struct net through ip_fragment

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit c559cd3ad32ba729bb810283c5fc6838d2473c2e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 14 20:10:28 2015 -0500

      openvswitch: Pass net into ovs_fragment

      In preparation for the ipv4 and ipv6 fragmentation code taking a net
      parameter pass a struct net into ovs_fragment where the v4 and v6
      fragmentation code is called.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 188515fbc6b18e6bc6f2fa4629f1a77308197371
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 14 20:08:51 2015 -0500

      openvswitch: Pass net into ovs_vport_output

      When struct net starts being passed through the ipv4 and ipv6 fragment
      routines ovs_vport_output will need to take a net parameter.
      Prepare ovs_vport_output before that is needed and introduce
      ovs_vport_output_skk for the call sites that still need the old
      calling conventions.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 4776dbb3583d10969f991cc89da781884c15979d
  Merge: 1605b60 c7d2ecd
  Author: Kukjin Kim <kgene@xxxxxxxxxx>
  Date:   Wed Sep 30 15:42:39 2015 +0900

      Merge tag 'samsung-fixes-4.3' of http://github.com/krzk/linux into 
v4.3-samsung-fixes

      Fixes for Exynos (DT and mach code):
      1. Finally fix booting of all 8 cores on Exynos Octa (Exynos542x): all
         8 cores are booting and can be used. The fix, based on vendor
         code and bootloader behavior, is as for time being only
         for MCPM enabled path.
      2. Fix thermal boot issue on SMDK5250.
      3. Fix invalid clock used for FIMD IOMMU.

  commit 1e034743e918d195d339af340ae933727c072bce
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Wed Sep 23 12:02:57 2015 +0200

      x86/hyperv: Fix the build in the !CONFIG_KEXEC_CORE case

      Recent changes in the Hyper-V driver:

        b4370df2b1f5 ("Drivers: hv: vmbus: add special crash handler")

      broke the build when CONFIG_KEXEC_CORE is not set:

        arch/x86/built-in.o: In function `hv_machine_crash_shutdown':
        arch/x86/kernel/cpu/mshyperv.c:112: undefined reference to 
`native_machine_crash_shutdown'

      Decorate all kexec related code with #ifdef CONFIG_KEXEC_CORE.

      Reported-by: Jim Davis <jim.epost@xxxxxxxxx>
      Reported-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: devel@xxxxxxxxxxxxxxxxxxxxxx
      Cc: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Cc: Haiyang Zhang <haiyangz@xxxxxxxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443002577-25370-1-git-send-email-vkuznets@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 14a21e7ba8cf6eab968310c92ca19a00f13ce3d9
  Author: Tobias Jakobi <tjakobi@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 20:23:52 2015 +0200

      PM / devfreq: Fix governor_store()

      Writing the currently set governor into sysfs currently
      seems to fail.
      Fix this by setting the return code to zero before
      leaving governor_store().

      Signed-off-by: Tobias Jakobi <tjakobi@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit b84f78782052ee4516903e5d0566a5eee365b771
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 19:07:07 2015 -0700

      net: Initialize flow flags in input path

      The fib_table_lookup tracepoint found 2 places where the flowi4_flags is
      not initialized.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4bf1b54f9df7ced4869f7dfd0bdf5eb22aa98447
  Merge: b8d866a c1444c6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:46:21 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

      Pablo Neira Ayuso says:

      ====================
      Netfilter/IPVS updates for net-next

      The following pull request contains Netfilter/IPVS updates for net-next
      containing 90 patches from Eric Biederman.

      The main goal of this batch is to avoid recurrent lookups for the netns
      pointer, that happens over and over again in our Netfilter/IPVS code. The 
idea
      consists of passing netns pointer from the hook state to the relevant 
functions
      and objects where this may be needed.

      You can find more information on the IPVS updates from Simon Horman's 
commit
      merge message:

      c3456026adc0 ("Merge tag 'ipvs2-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next";).

      Exceptionally, this time, I'm not posting the patches again on netdev, 
Eric
      already Cc'ed this mailing list in the original submission. If you need 
me to
      make, just let me know.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 57a47532c4312159935c98b7f1cf0e62296b9171
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 14:17:54 2015 -0400

      net: dsa: fix preparation of a port STP update

      Because of the default 0 value of ret in dsa_slave_port_attr_set, a
      driver may return -EOPNOTSUPP from the commit phase of a STP state,
      which triggers a WARN() from switchdev.

      This happened on a 6185 switch which does not support hardware bridging.

      Fixes: 3563606258cf ("switchdev: convert STP update to switchdev attr 
set")
      Reported-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b8d866ac6aa45147b84f3f67b124b82bee675e9f
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:38:36 2015 -0400

      net: dsa: fix preparation of a port STP update

      Because of the default 0 value of ret in dsa_slave_port_attr_set, a
      driver may return -EOPNOTSUPP from the commit phase of a STP state,
      which triggers a WARN() from switchdev.

      This happened on a 6185 switch which does not support hardware bridging.

      Reported-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21fdd092acc7ebda0dfe682008592eb79c382707
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 09:32:03 2015 -0700

      net: Add support for filtering neigh dump by master device

      Add support for filtering neighbor dumps by master device by adding
      the NDA_MASTER attribute to the dump request. A new netlink flag,
      NLM_F_DUMP_FILTERED, is added to indicate the kernel supports the
      request and output is filtered as requested.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5172393522e4b2caf1af638076c3c0cd74313ae3
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 21:24:05 2015 -0700

      tcp: fix tcp_v6_md5_do_lookup prototype

      tcp_v6_md5_do_lookup() now takes a const socket, even if
      CONFIG_TCP_MD5SIG is not set.

      Fixes: b83e3deb974c ("tcp: md5: constify tcp_md5_do_lookup() socket 
argument")
      From: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eef50d466a47bb6a57f2e55a9415c716c463255b
  Merge: 79b0eb2 44bbcf5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:32:00 2015 -0700

      Merge branch 'switchdev-callback'

      Vivien Didelot says:

      ====================
      net: switchdev: use specific switchdev_obj_*

      This patchset changes switchdev add, del, dump operations from this:

          int     (*switchdev_port_obj_add)(struct net_device *dev,
                                            struct switchdev_obj *obj,
                                            struct switchdev_trans *trans);
          int     (*switchdev_port_obj_del)(struct net_device *dev,
                                            struct switchdev_obj *obj);
          int     (*switchdev_port_obj_dump)(struct net_device *dev,
                                            struct switchdev_obj *obj);

      to something similar to the notifier_call callback of a notifier_block:

          int     (*switchdev_port_obj_add)(struct net_device *dev,
                                            enum switchdev_obj_id id,
                                            const void *obj,
                                            struct switchdev_trans *trans);
          int     (*switchdev_port_obj_del)(struct net_device *dev,
                                            enum switchdev_obj_id id,
                                            const void *obj);
          int     (*switchdev_port_obj_dump)(struct net_device *dev,
                                             enum switchdev_obj_id id, void 
*obj,
                                             int (*cb)(void *obj));

      This allows the caller to pass and expect back a specific switchdev_obj_*
      structure (e.g. switchdev_obj_fdb) instead of the generic switchdev_obj 
one.

      This will simplify pushing the callback function down to the drivers.

      The first 3 patches get rid of the dev parameter of the dump callback, 
since it
      is not always neeeded (e.g. vlan_dump) and some drivers (such as DSA 
drivers)
      may not have easy access to it.

      Patches 4 and 5 implement the change in the switchdev operations and its 
users.

      Patch 6 extracts the inner switchdev_obj_* structures from switchdev_obj 
and
      removes this last one.

      v2: fix error spotted by kbuild (extra ';' inline 
switchdev_port_obj_dump).
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 44bbcf5c4a19a8be43ba35ca7e22310e171f022c
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:18 2015 -0400

      net: switchdev: extract struct switchdev_obj_*

      Now that switchdev and its drivers directly use specific switchdev_obj_*
      structures, move them out of the switchdev_obj union and get rif of this
      outer structure.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab06900230181b5a717b1e1a39c44e96f6292e71
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:17 2015 -0400

      net: switchdev: abstract object in add/del ops

      Similar to the notifier_call callback of a notifier_block, change the
      function signature of switchdev add and del operations to:

          int switchdev_port_obj_add/del(struct net_device *dev,
                                         enum switchdev_obj_id id, void *obj);

      This allows the caller to pass a specific switchdev_obj_* structure
      instead of the generic switchdev_obj one.

      Drivers implementation of these operations and switchdev have been
      changed accordingly.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 25f07adc473f05f850efc9414b9da3374563015f
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:16 2015 -0400

      net: switchdev: pass callback to dump operation

      Similar to the notifier_call callback of a notifier_block, change the
      function signature of switchdev dump operation to:

          int switchdev_port_obj_dump(struct net_device *dev,
                                      enum switchdev_obj_id id, void *obj,
                                      int (*cb)(void *obj));

      This allows the caller to pass and expect back a specific
      switchdev_obj_* structure instead of the generic switchdev_obj one.

      Drivers implementation of dump operation can now expect this specific
      structure and call the callback with it. Drivers have been changed
      accordingly.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03d5fb18626aff95426a380aef0d1c6904cac7c9
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:15 2015 -0400

      net: switchdev: remove dev from switchdev_obj cb

      The net_device associated to a dump operation does not have to be passed
      to the callback. switchdev stores it in a superset struct, if needed.

      Also some drivers (such as DSA drivers) may not have easy access to it.

      This will simplify pushing the callback function down to the drivers.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e02a06b2a7c6e8b43c60ed8e0181172231af13d7
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:14 2015 -0400

      net: switchdev: move dev in switchdev_fdb_dump

      The FDB dump callback requires the related net_device so move it to the
      struct switchdev_fdb_dump superset instead of using a callback param.

      With this done, it'll be simpler to change the dump function signature.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e23b002b23dfdcd12ca982fbc57dcb071a1fee62
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:13 2015 -0400

      net: switchdev: remove dev in port_vlan_dump_put

      The static switchdev_port_vlan_dump_put function does not need the
      net_device parameter, so remove it.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9ae6d4935e3df35a23bbbe531c6b9ff314e7fd0f
  Author: Thomas Huth <thuth@xxxxxxxxxx>
  Date:   Tue Sep 29 17:45:28 2015 +0200

      testptp: Silence compiler warnings on ppc64

      When compiling Documentation/ptp/testptp.c the following compiler
      warnings are printed out:

      Documentation/ptp/testptp.c: In function â??mainâ??:
      Documentation/ptp/testptp.c:367:11: warning: format â??%lldâ?? expects 
argument
          of type â??long long intâ??, but argument 3 has type â??__s64â?? 
[-Wformat=]
                 event.t.sec, event.t.nsec);
                 ^
      Documentation/ptp/testptp.c:505:5: warning: format â??%lldâ?? expects 
argument
          of type â??long long intâ??, but argument 2 has type â??__s64â?? 
[-Wformat=]
           (pct+2*i)->sec, (pct+2*i)->nsec);
           ^
      Documentation/ptp/testptp.c:507:5: warning: format â??%lldâ?? expects 
argument
          of type â??long long intâ??, but argument 2 has type â??__s64â?? 
[-Wformat=]
           (pct+2*i+1)->sec, (pct+2*i+1)->nsec);
           ^
      Documentation/ptp/testptp.c:509:5: warning: format â??%lldâ?? expects 
argument
          of type â??long long intâ??, but argument 2 has type â??__s64â?? 
[-Wformat=]
           (pct+2*i+2)->sec, (pct+2*i+2)->nsec);

      This happens because __s64 is by default defined as "long" on ppc64,
      not as "long long". However, to fix these warnings, it's possible to
      define the __SANE_USERSPACE_TYPES__ so that __s64 gets defined to
      "long long" on ppc64, too.

      Signed-off-by: Thomas Huth <thuth@xxxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 23860f103b53e764a3cbbf615d08f88362a28295
  Author: Robb Manes <rmanes@xxxxxxxxxx>
  Date:   Tue Sep 29 11:03:37 2015 -0400

      net/mlx4: Handle return codes in mlx4_qp_attach_common

      Both new_steering_entry() and existing_steering_entry() return values
      based on their success or failure, but currently they fall through
      silently.  This can make troubleshooting difficult, as we were unable
      to tell which one of these two functions returned errors or
      specifically what code was returned.  This patch remedies that
      situation by passing the return codes to err, which is returned by
      mlx4_qp_attach_common() itself.

      This also addresses a leak in the call to mlx4_bitmap_free() as well.

      Signed-off-by: Robb Manes <rmanes@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79b0eb2aadfefaecb34c84453bd44d3264c4c781
  Merge: 4905287 6153348
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:11:13 2015 -0700

      Merge branch 'm68k-netdev-modular'

      Geert Uytterhoeven says:

      ====================
      net: m68k: Allow modular build

      This patch series makes the remaining m68k Ethernet drivers modular.
      It's an alternative to the last 3 patches of Paul Gortmaker's series
      "[PATCH net-next 0/6] make non-modular code explicitly non-modular".

      Note that "[PATCH 5/5] net: macmace: Allow modular build" depends on
      "[PATCH 4/5] m68k/mac: Export Peripheral System Controller (PSC) base
      address to modules". Feel free to take the dependency through the netdev
      tree to avoid modular build breakage.

      This was compile-tested only (mac_defconfig + allmodconfig) due to lack
      of hardware.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6153348f5e0cc6e162918c20e05534981aa5504c
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:06 2015 +0200

      net: macmace: Allow modular build

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a77cdaaf2dbc69743bc22354f81bc4ec5e452d40
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:05 2015 +0200

      m68k/mac: Export Peripheral System Controller (PSC) base address to 
modules

      If CONFIG_MACMACE=m:

          ERROR: psc [drivers/net/ethernet/apple/macmace.ko] undefined!

      Add the missing export to fix this.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 18785040b088c0d90713606b57a8b1bd4834ec04
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:04 2015 +0200

      net: hplance: Allow modular build

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 93a82ca2f3c642becc3d824ba79be98084f76519
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:03 2015 +0200

      net: 7990: Export lance_poll() to modules

      If CONFIG_HPLANCE=m and CONFIG_NET_POLL_CONTROLLER=y:

          ERROR: "lance_poll" [drivers/net/ethernet/amd/hplance.ko] undefined!

      Add the missing export to fix this.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3a3a7f3b7fbd3c2f2ca2f2bf76363a1abbd5ba94
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:02 2015 +0200

      net: mac8390: Allow modular build

      The modular driver supports only one card, just like the built-in
      driver.

      Note that this limitation is a problem which affects all Nubus card
      drivers, because they have to do all their own bus matching, because
      Nubus still lacks the necessary driver model support.

      Suggested-by: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4905287138f60e86198620c72b570d3d265a71ea
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Tue Sep 29 01:53:48 2015 +0200

      dsa: mv88e6xxx: Fix unsigned/signed issue

      commit dea870242a9c ("dsa: mv88e6xxx: Allow speed/duplex of port to be
      configured") leads to the following static checker warning:

              drivers/net/dsa/mv88e6xxx.c:585 mv88e6xxx_adjust_link()
              warn: unsigned 'ret' is never less than zero.

      drivers/net/dsa/mv88e6xxx.c
         573  void mv88e6xxx_adjust_link(struct dsa_switch *ds, int port,
         574                             struct phy_device *phydev)
         575  {
         576          struct mv88e6xxx_priv_state *ps = ds_to_priv(ds);
         577          u32 ret, reg;
         578
         579          if (!phy_is_pseudo_fixed_link(phydev))
         580                  return;
         581
         582          mutex_lock(&ps->smi_mutex);
         583
         584          ret = _mv88e6xxx_reg_read(ds, REG_PORT(port), 
PORT_PCS_CTRL);
         585          if (ret < 0)

      Make ret an int, which is the return type for _mv88e6xxx_reg_read()

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c047a1f918af75e572a19ba0581c3e3e202ed698
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Tue Sep 29 01:50:56 2015 +0200

      dsa: mv88e6xxx: Enable forwarding for unknown to the CPU port

      Frames destined to an unknown address must be forwarded to the CPU
      port. Otherwise incoming ARP, dhcp leases, etc, do not work.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f82ff596c7a8917b21100117646c719017ce8fe4
  Merge: e6934f3 9478d12
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:41:10 2015 -0700

      Merge branch 'L3_master_device'

      David Ahern says:

      ====================
      net: L3 master device

      The VRF device is essentially a Layer 3 master device used to associate
      netdevices with a specific routing table and to influence FIB lookups
      via 'ip rules' and controlling the oif/iif used for the lookup.

      This series generalizes the VRF into L3 master device, l3mdev. Similar
      to switchdev it has a Kconfig option and separate set of operations
      in net_device allowing it to be completely compiled out if not wanted.
      The l3mdev methods rely on the 'master' aspect and use of
      netdev_master_upper_dev_get_rcu to retrieve the master device from a
      given netdevice if it is enslaved to an L3_MASTER.

      The VRF device is converted to use the l3mdev operations. At the end the
      vrf_ptr is no longer and removed, as are all direct references to VRF.
      The end result is a much simpler implementation for VRF.

      Thanks to Nikolay for suggestions (eg., use of the master linkage which
      is the key to making this work) and to Roopa, Andy and Shrijeet for
      early reviews.

      v3
      - added license header to l3mdev.c

      - export symbols in l3mdev.c for use with GPL modules

      - removed netdevice header from l3mdev.h (not needed) and fixed
        typo in comment

      v2
      - rebased to top of net-next
      - addressed Niks comments (checking master, removing extra lines, and
        flipping the order of patches 1 and 2)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9478d12d33ad12d29c5343ae7346b51bc1f4c5a9
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:18 2015 -0700

      net: Move netif_index_is_l3_master to l3mdev.h

      Change CONFIG dependency to CONFIG_NET_L3_MASTER_DEV as well.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec539514e56284b21c47468f23f7d01ff882f51b
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:17 2015 -0700

      net: Remove vrf header file

      Move remaining structs to VRF driver and delete the vrf header file.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 93a7e7e837af6846052481da974320c19ab82e5c
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:16 2015 -0700

      net: Remove the now unused vrf_ptr

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e1ed7058b3c79b085cf5b1529698a157499074c
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:15 2015 -0700

      net: Replace calls to vrf_dev_get_rth

      Replace calls to vrf_dev_get_rth with l3mdev_get_rtable.
      The check on the flow flags is handled in the l3mdev operation.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3236b0042ba6555b45d75b6be12922922e17d66e
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:14 2015 -0700

      net: Replace vrf_dev_table and friends

      Replace calls to vrf_dev_table and friends with l3mdev_fib_table
      and kin.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 385add906b6155e8bc64035ad56fb8ccfef925f7
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:13 2015 -0700

      net: Replace vrf_master_ifindex{, _rcu} with l3mdev equivalents

      Replace calls to vrf_master_ifindex_rcu and vrf_master_ifindex with either
      l3mdev_master_ifindex_rcu or l3mdev_master_ifindex.

      The pattern:
          oif = vrf_master_ifindex(dev) ? : dev->ifindex;
      is replaced with
          oif = l3mdev_fib_oif(dev);

      And remove the now unused vrf macros.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ee15ee5d94f5837260e7fa539ffd1b50952079c4
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:12 2015 -0700

      net: Add support for l3mdev ops to VRF driver

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1b69c6d0ae90b7f1a4f61d5c8209d5cb7a55f849
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:11 2015 -0700

      net: Introduce L3 Master device abstraction

      L3 master devices allow users of the abstraction to influence FIB lookups
      for enslaved devices. Current API provides a means for the master device
      to return a specific FIB table for an enslaved device, to return an
      rtable/custom dst and influence the OIF used for fib lookups.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 007979eaf94d1c888d8c7cf8a5250c2c6c9bd98e
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:10 2015 -0700

      net: Rename IFF_VRF_MASTER to IFF_L3MDEV_MASTER

      Rename IFF_VRF_MASTER to IFF_L3MDEV_MASTER and update the name of the
      netif_is_vrf and netif_index_is_vrf macros.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 178b2d09afc05a46f68b190c6594f3a429bc2385
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 16:18:12 2015 -0300

      ARM: dts: imx7d: Fix UART2 base address

      The UART2 memory space starts at address 0x30890000 (UART2_URXD).

      Fix it so that UART2 can be used.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Fixes: 949673450291 ("ARM: dts: add imx7d soc dtsi file")
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Shawn Guo <shawnguo@xxxxxxxxxx>

  commit 4fa9a3f6b616fd9f2555d9d0c04513a942750986
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Fri Sep 25 12:14:48 2015 +1000

      powerpc/ps3: Remove unused os_area_db_id_video_mode

      This struct is unused, which is now a build error with gcc 6:

        error: 'os_area_db_id_video_mode' defined but not used

      There doesn't seem to be any good reason to keep it around so remove it,
      it's in the history if anyone needs it.

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit e6934f3ec00b04234acb24a1a2c28af59763d3b5
  Merge: 4c7e622 0536fcc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 16:53:10 2015 -0700

      Merge branch 'listener-refactoring-preparations'

      Eric Dumazet says:

      ====================
      tcp: listener refactoring preparations

      This patch series makes changes to TCP/DCCP stacks so that
      we can switch listener code to lockless mode.

      This is done by marking const the listener socket in all
      appropriate paths.

      FastOpen code had to be changed to not dynamically allocate
      a very small structure to make code simpler for following changes.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0536fcc039a8926ec12ec587f41a83f7acafeb82
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:52 2015 -0700

      tcp: prepare fastopen code for upcoming listener changes

      While auditing TCP stack for upcoming 'lockless' listener changes,
      I found I had to change fastopen_init_queue() to properly init the object
      before publishing it.

      Otherwise an other cpu could try to lock the spinlock before it gets
      properly initialized.

      Instead of adding appropriate barriers, just remove dynamic memory
      allocations :
      - Structure is 28 bytes on 64bit arches. Using additional 8 bytes
        for holding a pointer seems overkill.
      - Two listeners can share same cache line and performance would suffer.

      If we really want to save few bytes, we would instead dynamically allocate
      whole struct request_sock_queue in the future.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2985aaac010ebd5e562ce1a22cc61acbb0e40cf2
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:51 2015 -0700

      tcp: constify tcp_syn_flood_action() socket argument

      tcp_syn_flood_action() will soon be called with unlocked socket.
      In order to avoid SYN flood warning being emitted multiple times,
      use xchg().
      Extend max_qlen_log and synflood_warned fields in struct listen_sock
      to u32

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f964629e3338d9e5a78c9b354380d5a1e2fa4617
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:50 2015 -0700

      tcp: constify tcp_v{4|6}_route_req() sock argument

      These functions do not change the listener socket.
      Goal is to make sure tcp_conn_request() is not messing with
      listener in a racy way.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3f684b4b1f1c86e3a6ac63389d1032e239fddd79
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:49 2015 -0700

      tcp: cookie_init_sequence() cleanups

      Some common IPv4/IPv6 code can be factorized.
      Also constify cookie_init_sequence() socket argument.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c27171e66d94f9121fc00e87407ca7103bb6649
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:48 2015 -0700

      tcp/dccp: constify syn_recv_sock() method sock argument

      We'll soon no longer hold listener socket lock, these
      functions do not modify the socket in any way.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c28c6f045945f53e842467bf0e86c5fac051643d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:47 2015 -0700

      tcp: constify tcp_create_openreq_child() socket argument

      This method does not touch the listener socket.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 54105f98f544ec5305bf1fad292ca454ad55ef67
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:46 2015 -0700

      dccp: constify dccp_create_openreq_child() sock argument

      socket no longer needs to be read/write

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 87e002b21aafccfe71faeec62f3543d30600a518
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:45 2015 -0700

      net: constify sk_gfp_atomic() sock argument

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1ce31c9e08997ea0fa62be0a7437f868be173f13
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:44 2015 -0700

      inet: constify __inet_inherit_port() sock argument

      socket is not touched, make it const.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2432c4fa5e3c4c06df6efe0c406b6f575829a7b
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:43 2015 -0700

      inet: constify inet_csk_route_child_sock() socket argument

      The socket points to the (shared) listener.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f76b33c32b1913dd8909d8509f2726b1661aa6b1
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:42 2015 -0700

      dccp: use inet6_csk_route_req() helper

      Before changing dccp_v6_request_recv_sock() sock argument
      to const, we need to get rid of security_sk_classify_flow(),
      and it seems doable by reusing inet6_csk_route_req() helper.

      We need to add a proto parameter to inet6_csk_route_req(),
      not assume it is TCP.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 72ab4a86f7a260d4c2a320b49662da107ce77a81
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:41 2015 -0700

      tcp: remove tcp_rcv_state_process() tcp_hdr argument

      Factorize code to get tcp header from skb. It makes no sense
      to duplicate code in callers.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bda07a64c09c44ced789dbb815c71854f0c59839
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:40 2015 -0700

      tcp: remove unused len argument from tcp_rcv_state_process()

      Once we realize tcp_rcv_synsent_state_process() does not use
      its 'len' argument and we get rid of it, then it becomes clear
      this argument is no longer used in tcp_rcv_state_process()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a00e74442bac5ad19a929d097370da7e07540ea6
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:39 2015 -0700

      tcp/dccp: constify send_synack and send_reset socket argument

      None of these functions need to change the socket, make it
      const.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 31b33dfb0a144469dd805514c9e63f4993729a48
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Mon Sep 28 17:24:25 2015 -0700

      skbuff: Fix skb checksum partial check.

      Earlier patch 6ae459bda tried to detect void ckecksum partial
      skb by comparing pull length to checksum offset. But it does
      not work for all cases since checksum-offset depends on
      updates to skb->data.

      Following patch fixes it by validating checksum start offset
      after skb-data pointer is updated. Negative value of checksum
      offset start means there is no need to checksum.

      Fixes: 6ae459bda ("skbuff: Fix skb checksum flag on skb pull")
      Reported-by: Andrew Vagin <avagin@xxxxxxxx>
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c7e622ddf07388d72e15b97a88d260a5a168e37
  Merge: 0f50c10 0d75396
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 16:27:47 2015 -0700

      Merge branch 'ipv4-routing-cleanups'

      Alexander Duyck says:

      ====================
      Minor IPv4 routing cleanups

      These patches just contain some minor cleanups to address a few minor
      issues.  The first and the third mostly just improve readability.  The
      second patch should improve the performance for multicast destination
      addresses that do not have a localhost source IP address by avoiding some
      unnecessary dereferences.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0d7539603bba77b72679d53e7d7eb84c16dd76d8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 11:10:44 2015 -0700

      net: Remove martian_source_keep_err goto label

      err is initialized to -EINVAL when it is declared. It is not reset until
      fib_lookup which is well after the 3 users of the martian_source jump. So
      resetting err to -EINVAL at martian_source label is not needed.

      Removing that line obviates the need for the martian_source_keep_err label
      so delete it.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 75fea73dce4ed7c1725f9f5c0adf5aecc8d0fcfd
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Mon Sep 28 11:10:38 2015 -0700

      net: Swap ordering of tests in ip_route_input_mc

      This patch just swaps the ordering of one of the conditional tests in
      ip_route_input_mc.  Specifically it swaps the testing for the source
      address to see if it is loopback, and the test to see if we allow a
      loopback source address.

      The reason for swapping these two tests is because it is much faster to
      test if an address is loopback than it is to dereference several pointers
      to get at the net structure to see if the use of loopback is allowed.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2094acbb714e24e464c810c2d8fa57493fcb25a6
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Mon Sep 28 11:10:31 2015 -0700

      net/ipv4: Pass proto as u8 instead of u16 in ip_check_mc_rcu

      This patch updates ip_check_mc_rcu so that protocol is passed as a u8
      instead of a u16.

      The motivation is just to avoid any unneeded type transitions since some
      systems will require an instruction to zero extend a u8 field to a u16.
      Also it makes it a bit more readable as to the fact that protocol is a u8
      so there are no byte ordering changes needed to pass it.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 218c1f76b8b25d6dc9d01443f071cb618e206b0c
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Tue Sep 29 15:54:58 2015 -0700

      Input: psmouse - fix data race in __ps2_command

      The data race happens on ps2dev->cmdcnt and ps2dev->cmdbuf contents.
      __ps2_command reads that data concurrently with the interrupt handler. As
      the result, for example, if a response arrives just after the timeout,
      __ps2_command can copy out garbage from ps2dev->cmdbuf but then see that
      ps2dev->cmdcnt is 0 and return success.

      Stop the interrupt handler with serio_pause_rx() before reading the
      results.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 741a11d9e4103a8e1c590ef1280143fe654e4e33
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 10:12:13 2015 -0700

      net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is set

      Wolfgang reported that IPv6 stack is ignoring oif in output route lookups:

          With ipv6, ip -6 route get always returns the specific route.

          $ ip -6 r
          2001:db8:e2::1 dev enp2s0  proto kernel  metric 256
          2001:db8:e2::/64 dev enp2s0  metric 1024
          2001:db8:e3::1 dev enp3s0  proto kernel  metric 256
          2001:db8:e3::/64 dev enp3s0  metric 1024
          fe80::/64 dev enp3s0  proto kernel  metric 256
          default via 2001:db8:e3::255 dev enp3s0  metric 1024

          $ ip -6 r get 2001:db8:e2::100
          2001:db8:e2::100 from :: dev enp2s0  src 2001:db8:e3::1  metric 0
              cache

          $ ip -6 r get 2001:db8:e2::100 oif enp3s0
          2001:db8:e2::100 from :: dev enp2s0  src 2001:db8:e3::1  metric 0
              cache

      The stack does consider the oif but a mismatch in rt6_device_match is not
      considered fatal because RT6_LOOKUP_F_IFACE is not set in the flags.

      Cc: Wolfgang Nothdurft <netdev@xxxxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f50c10d2683fd2b8a3908c779c5f29bcb3c2174
  Author: Liviu Dudau <Liviu.Dudau@xxxxxxx>
  Date:   Mon Sep 28 17:51:51 2015 +0100

      RESEND: [PATCH v3 net-next] sky2: use random address if EEPROM is bad

      On some embedded systems the EEPROM does not contain a valid MAC address.
      In that case it is better to fallback to a generated mac address and
      let init scripts fix the value later.

      Reported-by: Liviu Dudau <Liviu.Dudau@xxxxxxx>
      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      [Changed handcoded setup to use eth_hw_addr_random() and to save new 
address into HW]
      Signed-off-by: Liviu Dudau <Liviu.Dudau@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 822d54b9c2c18271239ad7d928f1e9c702676592
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Mon Sep 28 09:16:17 2015 -0700

      netpoll: Drop budget parameter from NAPI polling call hierarchy

      For some reason we were carrying the budget value around between the
      various calls to napi->poll.  If for example one of the drivers called had
      a bug in which it returned a non-zero value for work this could result in
      the budget value becoming negative.

      Rather than carry around a value of budget that is 0 or less we can 
instead
      just loop through and pass 0 to each napi->poll call.  If any driver
      returns a value for work done that is non-zero then we can report that
      driver and continue rather than allowing a bad actor to make the budget
      value negative and pass that negative value to napi->poll.

      Note, the only actual change here is that instead of letting budget become
      negative we are keeping it at 0 regardless of the value returned for work
      since it should not be possible for the polling routine to do any actual
      work with a budget of 0.  So if the polling routine returns a non-0 value
      we are just reporting it and continuing with a budget of 0 rather than
      letting that work value be subtracted from the budget of 0.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 75c261b51ba19f0791de608f0acfb94956f78c76
  Author: Alexander Stein <alexander.stein@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 15:05:33 2015 +0200

      net sysfs: Print link speed as signed integer

      Otherwise 4294967295 (MBit/s) (-1) will be printed when there is no link.
      Documentation/ABI/testing/sysfs-class-net does not state if this shall be
      signed or unsigned.
      Also remove the now unused variable fmt_udec.

      Signed-off-by: Alexander Stein <alexander.stein@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c52b1da538800a30f030eeb697366c23daf2ef3
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 28 10:49:48 2015 +0200

      bna: fix error handling

      Several functions can return negative value in case of error,
      so their return type should be fixed as well as type of variables
      to which this value is assigned.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3504bb639ec793c181de6e33a205fc8ca6cf32bf
  Merge: 2103d6b 9f389e3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 13:47:08 2015 -0700

      Merge branch 'af_unix_MSG_PEEK'

      Aaron Conole says:

      ====================
      af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag

      This patch set implements a bugfix for kernel.org bugzilla #12323, 
allowing
      MSG_PEEK to return all queued data on the unix domain socket, not just the
      data contained in a single SKB.

      This is the v3 version of this patch, which includes a suggested 
modification
      by Eric Dumazet to convert the unix_sk() conversion macro to a static 
inline
      function. These patches are independent and can be applied separately.

      This set was tested over a 24-hour period, utilizing a loop continually
      executing the bugzilla issue attached python code. It was instrumented 
with
      a pr_err_once() ([   13.798683] unix: went there at least one time).

      v2->v3:
       - Added Eric Dumazet's suggestion for #define to static inline
       - Fixed an issue calling unix_state_lock() with an invalid argument

      v3->v4:
       - Eliminated an XXX comment
       - Changed from goto unlock to explicit unix_state_unlock() and break
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f389e35674f5b086edd70ed524ca0f287259725
  Author: Aaron Conole <aconole@xxxxxxxxxx>
  Date:   Sat Sep 26 18:50:43 2015 -0400

      af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag

      AF_UNIX sockets now return multiple skbs from recv() when MSG_PEEK flag
      is set.

      This is referenced in kernel bugzilla #12323 @
      https://bugzilla.kernel.org/show_bug.cgi?id=12323

      As described both in the BZ and lkml thread @
      http://lkml.org/lkml/2008/1/8/444 calling recv() with MSG_PEEK on an
      AF_UNIX socket only reads a single skb, where the desired effect is
      to return as much skb data has been queued, until hitting the recv
      buffer size (whichever comes first).

      The modified MSG_PEEK path will now move to the next skb in the tree
      and jump to the again: label, rather than following the natural loop
      structure. This requires duplicating some of the loop head actions.

      This was tested using the python socketpair python code attached to
      the bugzilla issue.

      Signed-off-by: Aaron Conole <aconole@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4613012db1d911f80897f9446a49de817b2c4c47
  Author: Aaron Conole <aconole@xxxxxxxxxx>
  Date:   Sat Sep 26 18:50:42 2015 -0400

      af_unix: Convert the unix_sk macro to an inline function for type safety

      As suggested by Eric Dumazet this change replaces the
      #define with a static inline function to enjoy
      complaints by the compiler when misusing the API.

      Signed-off-by: Aaron Conole <aconole@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2594e9064a57634efc146ff4e89a5de562e05011
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 19:00:11 2015 +0200

      bridge: vlan: add per-vlan struct and move to rhashtables

      This patch changes the bridge vlan implementation to use rhashtables
      instead of bitmaps. The main motivation behind this change is that we
      need extensible per-vlan structures (both per-port and global) so more
      advanced features can be introduced and the vlan support can be
      extended. I've tried to break this up but the moment net_port_vlans is
      changed and the whole API goes away, thus this is a larger patch.
      A few short goals of this patch are:
      - Extensible per-vlan structs stored in rhashtables and a sorted list
      - Keep user-visible behaviour (compressed vlans etc)
      - Keep fastpath ingress/egress logic the same (optimizations to come
        later)

      Here's a brief list of some of the new features we'd like to introduce:
      - per-vlan counters
      - vlan ingress/egress mapping
      - per-vlan igmp configuration
      - vlan priorities
      - avoid fdb entries replication (e.g. local fdb scaling issues)

      The structure is kept single for both global and per-port entries so to
      avoid code duplication where possible and also because we'll soon 
introduce
      "port0 / aka bridge as port" which should simplify things further
      (thanks to Vlad for the suggestion!).

      Now we have per-vlan global rhashtable (bridge-wide) and per-vlan port
      rhashtable, if an entry is added to a port it'll get a pointer to its
      global context so it can be quickly accessed later. There's also a
      sorted vlan list which is used for stable walks and some user-visible
      behaviour such as the vlan ranges, also for error paths.
      VLANs are stored in a "vlan group" which currently contains the
      rhashtable, sorted vlan list and the number of "real" vlan entries.
      A good side-effect of this change is that it resembles how hw keeps
      per-vlan data.
      One important note after this change is that if a VLAN is being looked up
      in the bridge's rhashtable for filtering purposes (or to check if it's an
      existing usable entry, not just a global context) then the new helper
      br_vlan_should_use() needs to be used if the vlan is found. In case the
      lookup is done only with a port's vlan group, then this check can be
      skipped.

      Things tested so far:
      - basic vlan ingress/egress
      - pvids
      - untagged vlans
      - undef CONFIG_BRIDGE_VLAN_FILTERING
      - adding/deleting vlans in different scenarios (with/without global ctx,
        while transmitting traffic, in ranges etc)
      - loading/removing the module while having/adding/deleting vlans
      - extracting bridge vlan information (user ABI), compressed requests
      - adding/deleting fdbs on vlans
      - bridge mac change, promisc mode
      - default pvid change
      - kmemleak ON during the whole time

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74b3112e95073b351e3b0b9799795bc76f8415fa
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Sep 29 13:53:30 2015 -0400

      drm/amdgpu:  Restore LCD backlight level on resume

      Instead of only enabling the backlight (which seems to set it to max
      brightness), just re-set the current backlight level, which also takes
      care of enabling the backlight if necessary.

      Port of radeon commit:
      drm/radeon: Restore LCD backlight level on resume (>= R5xx)

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 191988e0bd3875526464e3a601edf29f2a3118ae
  Merge: 8a4683a f864288
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 11:51:41 2015 -0700

      Merge branch 'mvneta_percpu_irq'

      Gregory CLEMENT says:

      ====================
      net: mvneta: Switch to per-CPU irq and make rxq_def useful

      As stated in the first version: "this patchset reworks the Marvell
      neta driver in order to really support its per-CPU interrupts, instead
      of faking them as SPI, and allow the use of any RX queue instead of
      the hardcoded RX queue 0 that we have currently."

      Following the review which has been done, Maxime started adding the
      CPU hotplug support. I continued his work a few weeks ago and here is
      the result.

      Since the 1st version the main change is this CPU hotplug support, in
      order to validate it I powered up and down the CPUs while performing
      iperf. I ran the tests during hours: the kernel didn't crash and the
      network interfaces were still usable. Of course it impacted the
      performance, but continuously power down and up the CPUs is not
      something we usually do.

      I also reorganized the series, the 3 first patches should go through
      the irq subsystem, whereas the 4 others should go to the network
      subsystem.

      However, there is a runtime dependency between the two parts. Patch 5
      depend on the patch 3 to be able to use the percpu irq.

      Thanks,

      Gregory

      PS: Thanks to Willy who gave me some pointers on how to deal with the
      NAPI.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f864288544802ae68b20da293e1b861230852dba
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:38 2015 +0200

      net: mvneta: Statically assign queues to CPUs

      Since the switch to per-CPU interrupts, we lost the ability to set which
      CPU was going to receive our RX interrupt, which was now only the CPU on
      which the mvneta_open function was run.

      We can now assign our queues to their respective CPUs, and make sure only
      this CPU is going to handle our traffic.

      This also paves the road to be able to change that at runtime, and later 
on
      to support RSS.

      [gregory.clement@xxxxxxxxxxxxxxxxxx]: hardened the CPU hotplug support.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d893665728f3cc79f7719df50c4345d200bb293c
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:37 2015 +0200

      net: mvneta: Allow different queues

      The mvneta driver allows to change the default RX queue trough the rxq_def
      kernel parameter.

      However, the current code doesn't allow to have any value but 0. It is
      actively checked for in the driver's probe because the drivers makes a
      number of assumption and takes a number of shortcuts in order to just use
      that RX queue.

      Remove these limitations in order to be able to specify any available
      queue.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 12bb03b436dad56692e9a103ed26156156bef5d2
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:36 2015 +0200

      net: mvneta: Handle per-cpu interrupts

      Now that our interrupt controller is allowing us to use per-CPU 
interrupts,
      actually use it in the mvneta driver.

      This involves obviously reworking the driver to have a CPU-local NAPI
      structure, and report for incoming packet using that structure.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2502d0ef272da7058ef303b849a2c8dc324c2e2e
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:35 2015 +0200

      net: mvneta: Fix CPU_MAP registers initialisation

      The CPU_MAP register is duplicated for each CPUs at different addresses,
      each instance being at a different address.

      However, the code so far was using CONFIG_NR_CPUS to initialise the 
CPU_MAP
      registers for each registers, while the SoCs embed at most 4 CPUs.

      This is especially an issue with multi_v7_defconfig, where CONFIG_NR_CPUS
      is currently set to 16, resulting in writes to registers that are not
      CPU_MAP.

      Fixes: c5aff18204da ("net: mvneta: driver for Marvell Armada 370/XP 
network unit")
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.8+
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 080481f97f425f89440386d02201c1d014f9e0dc
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:34 2015 +0200

      irqchip: armada-370-xp: Rework per-cpu interrupts handling

      The MPIC driver currently has a list of interrupts to handle as per-cpu.

      Since the timer, fabric and neta interrupts were the only per-cpu
      interrupts in the system, we can now remove the switch and just check for
      the hardware irq number to determine whether a given interrupt is per-cpu
      or not.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aec2e2ad1786eb07814ae60988e0e306cd24a6cc
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:33 2015 +0200

      irq: Export per-cpu irq allocation and de-allocation functions

      Some drivers might use the per-cpu interrupts and still might be built as 
a
      module. Export request_percpu_irq an free_percpu_irq to these user, which
      also make it consistent with enable/disable_percpu_irq that were exported.

      Reported-by: Willy Tarreau <w@xxxxxx>
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1b7febd725a2cdfc8ac245b7b7437ce4b91aecb
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:32 2015 +0200

      genirq: Fix the documentation of request_percpu_irq

      The documentation of request_percpu_irq is confusing and suggest that the
      interrupt is not enabled at all, while it is actually enabled on the local
      CPU.

      Clarify that.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 99c221df33fbfa1b30e15dee879eb0a9ae1be353
  Author: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:42:37 2015 +0900

      irqchip/renesas-irqc: Move over to nested generic chip

      Convert the IRQC driver to rely on GENERIC_IRQ_CHIP and
      set IRQ_GC_INIT_NESTED_LOCK to enable nested locking.

      Signed-off-by: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
      Cc: jason@xxxxxxxxxxxxxx
      Cc: geert+renesas@xxxxxxxxx
      Cc: horms@xxxxxxxxxxxx
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150928094237.32552.83434.sendpatchset@little-apple
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e7dbe2da5e8e247c6e62a0894935d94d7153ed16
  Author: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:42:28 2015 +0900

      irqchip/renesas-irqc: Add r8a7795 INTC-EX DT documentation

      For some reason the name of the external interrupt controller
      has changed name with r8a7795, so use "intc-ex" instead of "irqc"
      as r8a7795 compat string to follow the friendly documentation.

      Signed-off-by: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
      Reviewed-by: horms@xxxxxxxxxxxx
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: jason@xxxxxxxxxxxxxx
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150928094228.32552.83336.sendpatchset@little-apple
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c1444c6357217cea405415b4c96491d4057b0746
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 16:52:51 2015 -0500

      bridge: Pass net into br_validate_ipv4 and br_validate_ipv6

      The network namespace is easiliy available in state->net so use it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 5f5d74d723146c5b97c7318b5851af15b30e3304
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:31 2015 -0500

      ipv6: Pass struct net into ip6_route_me_harder

      Don't make ip6_route_me_harder guess which network namespace
      it is routing in, pass the network namespace in.

      Signed-off-by: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit e45f50660ee5fd38a540afabb7c0f65d063db631
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:30 2015 -0500

      ipv4: Pass struct net into ip_route_me_harder

      Don't make ip_route_me_harder guess which network namespace
      it is routing in, pass the network namespace in.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6a1d689d9f2953975df937be020ae60fa10a73c1
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:29 2015 -0500

      netfilter: ipt_SYNPROXY: Pass snet into synproxy_send_tcp

      ip6t_SYNPROXY already does this and this is needed so that we have a
      struct net that can be passed down into ip_route_me_harder, so
      that ip_route_me_harder can stop guessing it's context.

      Along the way pass snet into synproxy_send_client_synack as this
      is the only caller of synprox_send_tcp that is not passed snet
      already.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit d815d90bbbc08777c0e3a36f57b97fc4a4fb3150
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:28 2015 -0500

      netfilter: Push struct net down into nf_afinfo.reroute

      The network namespace is needed when routing a packet.
      Stop making nf_afinfo.reroute guess which network namespace
      is the proper namespace to route the packet in.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 372892ec1151c895c7dec362f3246f089690cfc7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:27 2015 -0500

      ipv4: Push struct net down into nf_send_reset

      This is needed so struct net can be pushed down into
      ip_route_me_harder.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 4281f46ef839050d2ef60348f661eb463c21cc2e
  Author: Michel Dänzer <michel.daenzer@xxxxxxx>
  Date:   Mon Sep 28 18:16:31 2015 +0900

      drm/radeon: Restore LCD backlight level on resume (>= R5xx)

      Instead of only enabling the backlight (which seems to set it to max
      brightness), just re-set the current backlight level, which also takes
      care of enabling the backlight if necessary.

      Only the radeon_atom_encoder_dpms_dig part tested on a Kaveri laptop,
      the radeon_atom_encoder_dpms_avivo part is only compile tested.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 54313503f9a3c34a9e45aad7654976b7f50b9ae7
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Fri Sep 25 14:36:55 2015 +0300

      drm/amdgpu: signedness bug in amdgpu_cs_parser_init()

      The "i" variable should be signed or it leads to a crash in the error
      handling code.

      Fixes: 1d263474c441 ('drm/amdgpu: unwind properly in 
amdgpu_cs_parser_init()')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 60de074ba1e8f327db19bc33d8530131ac01695d
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:25 2015 +0900

      blk-mq: fix deadlock when reading cpu_list

      CPU hotplug handling for blk-mq (blk_mq_queue_reinit) acquires
      all_q_mutex in blk_mq_queue_reinit_notify() and then removes sysfs
      entries by blk_mq_sysfs_unregister().  Removing sysfs entry needs to
      be blocked until the active reference of the kernfs_node to be zero.

      On the other hand, reading blk_mq_hw_sysfs_cpu sysfs entry (e.g.
      /sys/block/nullb0/mq/0/cpu_list) acquires all_q_mutex in
      blk_mq_hw_sysfs_cpus_show().

      If these happen at the same time, a deadlock can happen.  Because one
      can wait for the active reference to be zero with holding all_q_mutex,
      and the other tries to acquire all_q_mutex with holding the active
      reference.

      The reason that all_q_mutex is acquired in blk_mq_hw_sysfs_cpus_show()
      is to avoid reading an imcomplete hctx->cpumask.  Since reading sysfs
      entry for blk-mq needs to acquire q->sysfs_lock, we can avoid deadlock
      and reading an imcomplete hctx->cpumask by protecting q->sysfs_lock
      while hctx->cpumask is being updated.

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 5778322e67ed34dc9f391a4a5cbcbb856071ceba
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:23 2015 +0900

      blk-mq: avoid inserting requests before establishing new mapping

      Notifier callbacks for CPU_ONLINE action can be run on the other CPU
      than the CPU which was just onlined.  So it is possible for the
      process running on the just onlined CPU to insert request and run
      hw queue before establishing new mapping which is done by
      blk_mq_queue_reinit_notify().

      This can cause a problem when the CPU has just been onlined first time
      since the request queue was initialized.  At this time ctx->index_hw
      for the CPU, which is the index in hctx->ctxs[] for this ctx, is still
      zero before blk_mq_queue_reinit_notify() is called by notifier
      callbacks for CPU_ONLINE action.

      For example, there is a single hw queue (hctx) and two CPU queues
      (ctx0 for CPU0, and ctx1 for CPU1).  Now CPU1 is just onlined and
      a request is inserted into ctx1->rq_list and set bit0 in pending
      bitmap as ctx1->index_hw is still zero.

      And then while running hw queue, flush_busy_ctxs() finds bit0 is set
      in pending bitmap and tries to retrieve requests in
      hctx->ctxs[0]->rq_list.  But htx->ctxs[0] is a pointer to ctx0, so the
      request in ctx1->rq_list is ignored.

      Fix it by ensuring that new mapping is established before onlined cpu
      starts running.

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Jens Axboe <axboe@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 0e6263682014d480b8d7b8c10287f4536066b54f
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:22 2015 +0900

      blk-mq: fix q->mq_usage_counter access race

      CPU hotplug handling for blk-mq (blk_mq_queue_reinit) accesses
      q->mq_usage_counter while freezing all request queues in all_q_list.
      On the other hand, q->mq_usage_counter is deinitialized in
      blk_mq_free_queue() before deleting the queue from all_q_list.

      So if CPU hotplug event occurs in the window, percpu_ref_kill() is
      called with q->mq_usage_counter which has already been marked dead,
      and it triggers warning.  Fix it by deleting the queue from all_q_list
      earlier than destroying q->mq_usage_counter.

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit a723bab3d7529133f71fc8a5e96f86e3639a0d13
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:21 2015 +0900

      blk-mq: Fix use after of free q->mq_map

      CPU hotplug handling for blk-mq (blk_mq_queue_reinit) updates
      q->mq_map by blk_mq_update_queue_map() for all request queues in
      all_q_list.  On the other hand, q->mq_map is released before deleting
      the queue from all_q_list.

      So if CPU hotplug event occurs in the window, invalid memory access
      can happen.  Fix it by releasing q->mq_map in blk_mq_release() to make
      it happen latter than removal from all_q_list.

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Suggested-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 4593fdbe7a2f44d5e64c627c715dd0bcec9bdf14
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:20 2015 +0900

      blk-mq: fix sysfs registration/unregistration race

      There is a race between cpu hotplug handling and adding/deleting
      gendisk for blk-mq, where both are trying to register and unregister
      the same sysfs entries.

      null_add_dev
          --> blk_mq_init_queue
              --> blk_mq_init_allocated_queue
                  --> add to 'all_q_list' (*)
          --> add_disk
              --> blk_register_queue
                  --> blk_mq_register_disk (++)

      null_del_dev
          --> del_gendisk
              --> blk_unregister_queue
                  --> blk_mq_unregister_disk (--)
          --> blk_cleanup_queue
              --> blk_mq_free_queue
                  --> del from 'all_q_list' (*)

      blk_mq_queue_reinit
          --> blk_mq_sysfs_unregister (-)
          --> blk_mq_sysfs_register (+)

      While the request queue is added to 'all_q_list' (*),
      blk_mq_queue_reinit() can be called for the queue anytime by CPU
      hotplug callback.  But blk_mq_sysfs_unregister (-) and
      blk_mq_sysfs_register (+) in blk_mq_queue_reinit must not be called
      before blk_mq_register_disk (++) and after blk_mq_unregister_disk (--)
      is finished.  Because '/sys/block/*/mq/' is not exists.

      There has already been BLK_MQ_F_SYSFS_UP flag in hctx->flags which can
      be used to track these sysfs stuff, but it is only fixing this issue
      partially.

      In order to fix it completely, we just need per-queue flag instead of
      per-hctx flag with appropriate locking.  So this introduces
      q->mq_sysfs_init_done which is properly protected with all_q_mutex.

      Also, we need to ensure that blk_mq_map_swqueue() is called with
      all_q_mutex is held.  Since hctx->nr_ctx is reset temporarily and
      updated in blk_mq_map_swqueue(), so we should avoid
      blk_mq_register_hctx() seeing the temporary hctx->nr_ctx value
      in CPU hotplug handling or adding/deleting gendisk .

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 1356aae08338f1c19ce1c67bf8c543a267688fc3
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:19 2015 +0900

      blk-mq: avoid setting hctx->tags->cpumask before allocation

      When unmapped hw queue is remapped after CPU topology is changed,
      hctx->tags->cpumask has to be set after hctx->tags is setup in
      blk_mq_map_swqueue(), otherwise it causes null pointer dereference.

      Fixes: f26cdc8536 ("blk-mq: Shared tag enhancements")
      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Cc: Keith Busch <keith.busch@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit c91aed9896946721bb30705ea2904edb3725dd61
  Author: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 16:46:06 2015 -0500

      svcrdma: handle rdma read with a non-zero initial page offset

      The server rdma_read_chunk_lcl() and rdma_read_chunk_frmr() functions
      were not taking into account the initial page_offset when determining
      the rdma read length.  This resulted in a read who's starting address
      and length exceeded the base/bounds of the frmr.

      The server gets an async error from the rdma device and kills the
      connection, and the client then reconnects and resends.  This repeats
      indefinitely, and the application hangs.

      Most work loads don't tickle this bug apparently, but one test hit it
      every time: building the linux kernel on a 16 core node with 'make -j
      16 O=/mnt/0' where /mnt/0 is a ramdisk mounted via NFSRDMA.

      This bug seems to only be tripped with devices having small fastreg page
      list depths.  I didn't see it with mlx4, for instance.

      Fixes: 0bf4828983df ('svcrdma: refactor marshalling logic')
      Signed-off-by: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
      Tested-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit b7b01d345b83602a42b6ff02cacb9d9ada5ecd0a
  Author: Benoît Thébaudeau <benoit@xxxxxxxxxxx>
  Date:   Tue Sep 29 17:59:14 2015 +0200

      ASoC: imx-ssi: Fix DAI hardware signal inversions

      SND_SOC_DAIFMT_{IB|NB}_{IF|NF} are defined as inverting or not BCLK or
      FRM relatively to what is standard for the specified DAI hardware audio
      format. Consequently, the absolute polarities of these signals cannot be
      derived only from these settings as this driver did. The format has to
      be taken into account too.

      This fixes inverted left/right channels in I²S mode.

      Signed-off-by: Benoît Thébaudeau <benoit@xxxxxxxxxxx>
      Acked-by: Nicolin Chen <nicoleotsuka@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit eb8d0ac4afd8b15ac88f8a50342b32774ff881ed
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Mon Sep 28 15:28:03 2015 +0200

      spi: sh-msiof: Match renesas,rx-fifo-size in DT bindings doc with driver

      Commit fe78d0b7691c0274 ("spi: sh-msiof: Fix FIFO size to 64 word from
      256 word") changed the default RX FIFO size on R-Car Gen2 SoCs in the
      driver code, but forgot to update the DT bindings documentation.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 6b3600b4ba0810c84437cf76556d9afbd55c1bfc
  Author: Chen-Yu Tsai <wens@xxxxxxxx>
  Date:   Sat Sep 26 21:21:12 2015 +0800

      regulator: axp20x: Fix enable bit indexes for DCDC4 and DCDC5

      The enable bit indexes for DCDC4 and DCDC5 regulators are off by 1.

      We haven't run into any problems with this since either the regulators
      aren't defined in the DT and aren't used, or all the DCDC regulators
      have the "always-on" property set, as they are almost always used
      for system critical loads.

      Signed-off-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit fb97d75b038659998257f7dd767d8229dce50b74
  Author: Gianluca Renzi <gianlucarenzi@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 21:33:42 2015 +0200

      ASoC: sgtl5000: fix error message output for MicBias voltage

      Cc: Liam Girdwood <lgirdwood@xxxxxxxxx>
      Cc: Takashi Iwai <tiwai@xxxxxxxx>
      Cc: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Cc: alsa-devel@xxxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Gianluca Renzi <gianlucarenzi@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 076cdcb12f784b2057f172b5caca641fafa67cdf
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 24 16:14:55 2015 +0200

      mac80211: use bool argument to ieee80211_send_nullfunc

      Instead of int with 0/1, use bool with false/true for the
      powersave argument to ieee80211_send_nullfunc().

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 90d13e8f5b3c2445f481be4a2012a1861337f718
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 24 16:13:07 2015 +0200

      mac80211: reduce indentation by inlining a check

      Instead of nesting two if statements, inline the second
      check into the first if statement and to indentation.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 50f36ae61a5b65ba4612a5d2aa696c8ac5b6c988
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Thu Sep 24 14:59:48 2015 +0200

      mac80211: fix tx sequence number assignment with software queue + 
fast-xmit

      When using software queueing, tx sequence number assignment happens at
      ieee80211_tx_dequeue time, so the fast-xmit codepath must not do that.

      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 44674d9c2267f454f38df7b2395939bfa911f92e
  Author: Ayala Beker <ayala.beker@xxxxxxxxx>
  Date:   Wed Sep 23 10:41:27 2015 +0200

      mac80211: advertise support for full station state in AP mode

      This enables adding stations in unauthenticated mode, just after
      receiving the first authentication frame; which in turn allows
      sending a negative authentication reply if the station cannot be
      added.

      In addition init rate control for unassociated station only when
      it becomes associated, prior to that low rates will be used.

      Signed-off-by: Ayala Beker <ayala.beker@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 47edb11b522561658fe719e56aa69a3c3098a3fe
  Author: Ayala Beker <ayala.beker@xxxxxxxxx>
  Date:   Mon Sep 21 15:49:53 2015 +0300

      cfg80211: allow changing station capabilities for unassociated stations

      Currently, cfg80211 rejects capability updates for existing entries
      and as a result it's impossible to update entries that were added
      unassociated, but that is necessary to go through the full station
      states from userspace, adding a station before authentication etc.

      Fix this by allowing updates to capabilities for stations that the
      driver (or mac80211) assigned unassociated state. Drivers setting
      the full station state support flag must use the new station type
      for proper operation.

      Signed-off-by: Ayala Beker <ayala.beker@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit d0a77c6569abe29d921148c45f598bc796084226
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 23 10:42:28 2015 +0200

      mac80211: allow writing TX PN in debugfs

      For certain tests, for example replay detection, it can be useful
      to be able to influence/set the PN used in outgoing packets. Make
      it possible to change the TX PN in debugfs.

      For now, this doesn't support TKIP since I haven't needed it, but
      there's no reason it couldn't be added if necessary.

      Note that this must be used very carefully: it could, for example,
      be used to make "valid replays" where the PN reuse happens on a
      different TID. This couldn't be done by an attacker since the TID
      is protected as part of the AAD.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 416eb9fc29469f036c85b412edf89774d6b34b0f
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Wed Sep 23 14:18:36 2015 +0200

      mac80211: Deinline drv_get/set/reset_tsf()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining these functions have sizes and callsite counts
      as follows:

      drv_get_tsf: 634 bytes, 6 calls
      drv_set_tsf: 626 bytes, 2 calls
      drv_reset_tsf: 617 bytes, 2 calls

      Total size reduction is about 4.2 kbytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 6db96838971eb4c8ae6285795188f391e97d47c3
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Wed Sep 23 14:18:35 2015 +0200

      mac80211: Deinline drv_ampdu_action()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining the function size is 755 bytes and there are
      6 callsites.

      Total size reduction is about 3.3 kbytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 42677ed33a8b6995e6af2ec15643840afcf1c48b
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Wed Sep 23 14:18:34 2015 +0200

      mac80211: Deinline drv_switch_vif_chanctx()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining the function size is 821 bytes and there are
      2 callsites, reducing code size by about 800 bytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      [adjust code-style a bit]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 0e5c371aa05522ac14e91ddee0522ad855e12d02
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 23 14:02:47 2015 +0200

      mac80211: improve __rate_control_send_low warning

      If there are no supported rates in the rate mask with the required
      flags, we warn, but it's not clear which part causes the warning.

      Add the relevant data to the warning to understand why it happens.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a0c391b1345cfaecfb24c3c07378d80f6168fb61
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 23 10:29:20 2015 +0200

      mac80211: minstrel[_ht]: remove non-ascii debugfs characters

      Replace the average symbol by "avg" to avoid being warned about the
      non-ASCII symbol all the time, line up the columns properly.

      (I changed my mind - the warnings are getting annoying)

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 27392719541c89595a5c03d49b599ddfe009e6b8
  Author: Eliad Peller <eliadx.peller@xxxxxxxxx>
  Date:   Mon Sep 21 15:50:26 2015 +0300

      mac80211: don't tear down aggregation on suspend in case of wowlan->any

      In case of "any" wowlan trigger, there is no reason to tear down
      aggregations, as we want the device to continue working normally.

      Similarly, there's no reason to tear down aggregations on resume,
      as they should have been torn down on suspend if needed.
      However, since the reconfiguration flow is shared with HW restart,
      tear down aggregations on reconfiguration when we are not resuming.

      To keep things working after non-wowlan suspend, keep clearing the
      WLAN_STA_BLOCK_BA flag.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 9f0e13546ef5773b7059b531a667ec47a5f897ee
  Author: Fu, Zhonghui <zhonghui.fu@xxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 10:40:14 2015 +0800

      net/wireless: enable wiphy device to suspend/resume asynchronously

      Now, PM core supports asynchronous suspend/resume mode for devices
      during system suspend/resume, and the power state transition of one
      device may be completed in separate kernel thread. PM core ensures
      all power state transition timing dependency between devices. This
      patch enables wiphy device to suspend/resume asynchronously. This can
      take advantage of multicore and improve system suspend/resume speed.

      Signed-off-by: Zhonghui Fu <zhonghui.fu@xxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 9aae296a6208188fb40da987efb6bcd92f4fb169
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 15:19:38 2015 +0200

      mac80211: Deinline drv_add/remove/change_interface()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining these functions have sizes and callsite counts
      as follows:

      drv_add_interface: 638 bytes, 5 calls
      drv_remove_interface: 611 bytes, 6 calls
      drv_change_interface: 658 bytes, 1 call

      Total size reduction is about 9 kbytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4fbd572c29bd184146e8adf52631db193c4e34b9
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 15:19:35 2015 +0200

      mac80211: Deinline drv_sta_rc_update()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining the function size is 706 bytes and there are
      2 callsites, reducing code size by about 700 bytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit b23dcd4aca1854cda520def01731ad035cae94d8
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 15:19:34 2015 +0200

      mac80211: Deinline drv_conf_tx()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining the function size is 785 bytes and there are
      7 callsites.

      Total size reduction is about 3.5 kbytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 35afa588624c4f9e19a0edfbb51769b59c90bb0d
  Author: Helmut Schaa <helmut.schaa@xxxxxxxxxxxxxx>
  Date:   Wed Sep 9 09:46:32 2015 +0200

      mac80211: Copy tx'ed beacons to monitor mode

      When debugging wireless powersave issues on the AP side it's quite helpful
      to see our own beacons that are transmitted by the hardware/driver. 
However,
      this is not that easy since beacons don't pass through the regular TX 
queues.

      Preferably drivers would call ieee80211_tx_status also for tx'ed beacons
      but that's not always possible. Hence, just send a copy of each beacon
      generated by ieee80211_beacon_get_tim to monitor devices when they are
      getting fetched by the driver.

      Also add a HW flag IEEE80211_HW_BEACON_TX_STATUS that can be used by
      drivers to indicate that they report TX status for beacons.

      Signed-off-by: Helmut Schaa <helmut.schaa@xxxxxxxxxxxxxx>
      (with a fix from Christian Lamparted rolled in)
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 499f3aa4323775d5320bdf7ccc26576c54a54169
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Fri Sep 18 16:27:07 2015 +0530

      iommu/vt-d: Fix memory leak in dmar_insert_one_dev_info()

      We are returning NULL if we are not able to attach the iommu
      to the domain but while returning we missed freeing info.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit fbef168fec837ae26c8725737cd4b49dc8a0f917
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Tue Sep 29 15:05:44 2015 +0200

      Bluetooth: Add hci_cmd_sync function

      Send a HCI command and wait for command complete event.
      This function serializes the requests by grabbing the req_lock.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit adc0b7fbf6fe9967505c0254d9535ec7288186ae
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Mon Sep 28 22:47:42 2015 +0200

      s390/boot/decompression: disable floating point in decompressor

      my gcc 5.1 used an ldgr instruction with a register != 0,2,4,6 for
      spilling/filling into a floating point register in our decompressor.

      This will cause an AFP-register data exception as the decompressor
      did not setup the additional floating point registers via cr0.
      That causes a program check loop that looked like a hang with
      one "Uncompressing Linux... " message (directly booted via kvm)
      or a loop of "Uncompressing Linux... " messages (when booted via
      zipl boot loader).

      The offending code in my build was

         48e400:       e3 c0 af ff ff 71       lay     %r12,-1(%r10)
      -->48e406:       b3 c1 00 1c             ldgr    %f1,%r12
         48e40a:       ec 6c 01 22 02 7f       clij    %r6,2,12,0x48e64e

      but gcc could do spilling into an fpr at any function. We can
      simply disable floating point support at that early stage.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Acked-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit bdf7344e14d826d0df438a55fc51146d179e198d
  Author: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
  Date:   Sun Sep 20 07:00:35 2015 -0700

      clocksource/drivers/keystone: Fix bad NO_IRQ usage

      The current code assumes the 'irq_of_parse_and_map' will return NO_IRQ in 
case
      of failure. Unfortunately, the NO_IRQ is not consistent across the 
different
      architectures and we must not rely on it.

      NO_IRQ is equal to '-1' on ARM and 'irq_of_parse_and_map' returns '0' in 
case
      of an error. Hence, the latter won't be detected and will lead to a crash.

      Fix this by just checking 'irq' is different from zero.

      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit ccc42592d436d021d17f86729d24806f30dbad25
  Author: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
  Date:   Sun Sep 20 07:00:10 2015 -0700

      clocksource/drivers/rockchip: Fix bad NO_IRQ usage

      The current code assumes the 'irq_of_parse_and_map' will return NO_IRQ in 
case
      of failure. Unfortunately, the NO_IRQ is not consistent across the 
different
      architectures and we must not rely on it.

      NO_IRQ is equal to '-1' on ARM and 'irq_of_parse_and_map' returns '0' in 
case
      of an error. Hence, the latter won't be detected and will lead to a crash.

      Fix this by just checking 'irq' is different from zero.

      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 6b7464b703e3147b54dcb1032dfa10244f5a4d56
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Sep 28 06:44:31 2015 -0500

      Documentation/EDAC: Add reference documents section for amd64_edac

      This section used to be in amd64_edac.h. Move it here as it is a more
      natural place to put all documentation-related info. Add links to the
      BKDGs while at it.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Cc: linux-doc@xxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443440671-2400-1-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 1a8bc7707edb7c90478012076beb9207ab67d8d1
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Sep 28 06:43:13 2015 -0500

      EDAC, amd64_edac: Update copyright and remove changelog

      Git provides us all the changelogs anyway. So trim the comments section
      here. Update the copyrights info while at it.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443440593-2316-3-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit da92110dfdfacfdb0e3be06040a14d96c23be5d0
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Sep 28 06:43:12 2015 -0500

      EDAC, amd64_edac: Extend scrub rate support to F15hM60h

      The scrub rate control register has moved to function 2 in PCI config
      space and is at a different offset on family 0x15, models 0x60 and
      later. The minimum recommended scrub rate has also changed. (Refer to
      D18F2x1c9_dct[1:0][DramScrub] in Fam15hM60h BKDG).

      Adjust set_scrub_rate() and get_scrub_rate() functions to accommodate
      this.

      Tested on F15hM60h, Fam15h, models 00h-0fh and Fam10h systems.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443440593-2316-2-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      [ Cleanup conditionals. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 7c7feb2ebfc9c0552c51f0c050db1d1a004faac5
  Author: shengyong <shengyong1@xxxxxxxxxx>
  Date:   Mon Sep 28 17:57:19 2015 +0000

      UBI: return ENOSPC if no enough space available

      UBI: attaching mtd1 to ubi0
      UBI: scanning is finished
      UBI error: init_volumes: not enough PEBs, required 706, available 686
      UBI error: ubi_wl_init: no enough physical eraseblocks (-20, need 1)
      UBI error: ubi_attach_mtd_dev: failed to attach mtd1, error -12 <= NOT 
ENOMEM
      UBI error: ubi_init: cannot attach mtd1

      If available PEBs are not enough when initializing volumes, return -ENOSPC
      directly. If available PEBs are not enough when initializing WL, return
      -ENOSPC instead of -ENOMEM.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Sheng Yong <shengyong1@xxxxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>
      Reviewed-by: David Gstir <david@xxxxxxxxxxxxx>

  commit 281fda27673f833a01d516658a64d22a32c8e072
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Tue Sep 22 23:58:07 2015 +0200

      UBI: Validate data_size

      Make sure that data_size is less than LEB size.
      Otherwise a handcrafted UBI image is able to trigger
      an out of bounds memory access in ubi_compare_lebs().

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Richard Weinberger <richard@xxxxxx>
      Reviewed-by: David Gstir <david@xxxxxxxxxxxxx>

  commit cf6f54e3f133229f02a90c04fe0ff9dd9d3264b4
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Wed Jul 8 11:46:36 2015 +0200

      UBIFS: Kill unneeded locking in ubifs_init_security

      Fixes the following lockdep splat:
      [    1.244527] =============================================
      [    1.245193] [ INFO: possible recursive locking detected ]
      [    1.245193] 4.2.0-rc1+ #37 Not tainted
      [    1.245193] ---------------------------------------------
      [    1.245193] cp/742 is trying to acquire lock:
      [    1.245193]  (&sb->s_type->i_mutex_key#9){+.+.+.}, at: 
[<ffffffff812b3f69>] ubifs_init_security+0x29/0xb0
      [    1.245193]
      [    1.245193] but task is already holding lock:
      [    1.245193]  (&sb->s_type->i_mutex_key#9){+.+.+.}, at: 
[<ffffffff81198e7f>] path_openat+0x3af/0x1280
      [    1.245193]
      [    1.245193] other info that might help us debug this:
      [    1.245193]  Possible unsafe locking scenario:
      [    1.245193]
      [    1.245193]        CPU0
      [    1.245193]        ----
      [    1.245193]   lock(&sb->s_type->i_mutex_key#9);
      [    1.245193]   lock(&sb->s_type->i_mutex_key#9);
      [    1.245193]
      [    1.245193]  *** DEADLOCK ***
      [    1.245193]
      [    1.245193]  May be due to missing lock nesting notation
      [    1.245193]
      [    1.245193] 2 locks held by cp/742:
      [    1.245193]  #0:  (sb_writers#5){.+.+.+}, at: [<ffffffff811ad37f>] 
mnt_want_write+0x1f/0x50
      [    1.245193]  #1:  (&sb->s_type->i_mutex_key#9){+.+.+.}, at: 
[<ffffffff81198e7f>] path_openat+0x3af/0x1280
      [    1.245193]
      [    1.245193] stack backtrace:
      [    1.245193] CPU: 2 PID: 742 Comm: cp Not tainted 4.2.0-rc1+ #37
      [    1.245193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), 
BIOS rel-1.7.5-0-ge51488c-20140816_022509-build35 04/01/2014
      [    1.245193]  ffffffff8252d530 ffff88007b023a38 ffffffff814f6f49 
ffffffff810b56c5
      [    1.245193]  ffff88007c30cc80 ffff88007b023af8 ffffffff810a150d 
ffff88007b023a68
      [    1.245193]  000000008101302a ffff880000000000 00000008f447e23f 
ffffffff8252d500
      [    1.245193] Call Trace:
      [    1.245193]  [<ffffffff814f6f49>] dump_stack+0x4c/0x65
      [    1.245193]  [<ffffffff810b56c5>] ? console_unlock+0x1c5/0x510
      [    1.245193]  [<ffffffff810a150d>] __lock_acquire+0x1a6d/0x1ea0
      [    1.245193]  [<ffffffff8109fa78>] ? __lock_is_held+0x58/0x80
      [    1.245193]  [<ffffffff810a1a93>] lock_acquire+0xd3/0x270
      [    1.245193]  [<ffffffff812b3f69>] ? ubifs_init_security+0x29/0xb0
      [    1.245193]  [<ffffffff814fc83b>] mutex_lock_nested+0x6b/0x3a0
      [    1.245193]  [<ffffffff812b3f69>] ? ubifs_init_security+0x29/0xb0
      [    1.245193]  [<ffffffff812b3f69>] ? ubifs_init_security+0x29/0xb0
      [    1.245193]  [<ffffffff812b3f69>] ubifs_init_security+0x29/0xb0
      [    1.245193]  [<ffffffff8128e286>] ubifs_create+0xa6/0x1f0
      [    1.245193]  [<ffffffff81198e7f>] ? path_openat+0x3af/0x1280
      [    1.245193]  [<ffffffff81195d15>] vfs_create+0x95/0xc0
      [    1.245193]  [<ffffffff8119929c>] path_openat+0x7cc/0x1280
      [    1.245193]  [<ffffffff8109ffe3>] ? __lock_acquire+0x543/0x1ea0
      [    1.245193]  [<ffffffff81088f20>] ? sched_clock_cpu+0x90/0xc0
      [    1.245193]  [<ffffffff81088c00>] ? calc_global_load_tick+0x60/0x90
      [    1.245193]  [<ffffffff81088f20>] ? sched_clock_cpu+0x90/0xc0
      [    1.245193]  [<ffffffff811a9cef>] ? __alloc_fd+0xaf/0x180
      [    1.245193]  [<ffffffff8119ac55>] do_filp_open+0x75/0xd0
      [    1.245193]  [<ffffffff814ffd86>] ? _raw_spin_unlock+0x26/0x40
      [    1.245193]  [<ffffffff811a9cef>] ? __alloc_fd+0xaf/0x180
      [    1.245193]  [<ffffffff81189bd9>] do_sys_open+0x129/0x200
      [    1.245193]  [<ffffffff81189cc9>] SyS_open+0x19/0x20
      [    1.245193]  [<ffffffff81500717>] entry_SYSCALL_64_fastpath+0x12/0x6f

      While the lockdep splat is a false positive, becuase path_openat holds 
i_mutex
      of the parent directory and ubifs_init_security() tries to acquire i_mutex
      of a new inode, it reveals that taking i_mutex in ubifs_init_security() is
      in vain because it is only being called in the inode allocation path
      and therefore nobody else can see the inode yet.

      Cc: stable@xxxxxxxxxxxxxxx # 3.20-
      Reported-and-tested-by: Boris Brezillon 
<boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Reviewed-and-tested-by: Dongsheng Yang <yangds.fnst@xxxxxxxxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>
      Signed-off-by: dedekind1@xxxxxxxxx

  commit 6b98f2bec580c0d8329c547d692ad6c9b927da3e
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:14:41 2015 +1000

      powerpc/configs: Re-enable CONFIG_SCSI_DH

      Commit 086b91d052eb ("scsi_dh: integrate into the core SCSI code")
      changed CONFIG_SCSI_DH from tristate to bool.

      Our defconfigs have CONFIG_SCSI_DH=m, which the kconfig machinery warns
      us is invalid, but instead of converting it to =y it leaves it unset.
      This means we loose the CONFIG_SCSI_DH code and everything that depends
      on it.

      So convert the values in the defconfigs to =y.

      Fixes: 086b91d052eb ("scsi_dh: integrate into the core SCSI code")
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit fd546ee6a7dc4b71ebc6d1205bf72ea3c1c7030a
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sat Sep 26 21:41:01 2015 +0200

      mmc: pxamci: fix card detect with slot-gpio API

      Move pxamci to mmc slot-gpio API to fix interrupt request.

      It fixes the case where the card detection is on a gpio expander, on I2C
      for example on zylonite board. In this case, the card detect netsted
      interrupt is called from a threaded interrupt. The request_irq() fails,
      because a hard irq cannot be a nested interrupt from a threaded
      interrupt (set __setup_irq()).

      This was tested on zylonite and mioa701 boards.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Cc: Petr Cvek <petr.cvek@xxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 51424b2860670ec20e1dd5177fe70ab4b6fd7a5b
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Wed Sep 23 22:06:48 2015 +0200

      mmc: sunxi: Fix clk-delay settings

      In recent allwinner kernel sources the mmc clk-delay settings have been
      slightly tweaked, and for sun9i they are completely different then what
      we are using.

      This commit brings us in sync with what allwinner does, fixing problems
      accessing sdcards on some A33 devices (and likely others).

      For pre sun9i hardware this makes the following changes:
      -At 400Khz change the sample delay from 7 to 0 (introduced in A31 sdk)
      -At 50 Mhz change the sample delay from 5 to 4 (introduced in A23 sdk)

      This also drops the clk-delay calculation for clocks > 50 MHz, we do
      not need this as we've: mmc->f_max = 50000000, and the delays in the
      old code were not correct (at 100 MHz the delay must be a multiple of 60,
      at 200 MHz a multiple of 120).

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 43934ece2ea72c1dd279c0b0478c1a036d5d77ee
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Mon Sep 14 12:18:55 2015 +0200

      mmc: core: Don't return an error for CD/WP GPIOs when GPIOLIB is unset

      When CONFIG_GPIOLIB is unset, its stubs will return -ENOSYS. That means
      when the mmc core parses DT for CD/WP GPIOs via mmc_of_parse(), -ENOSYS
      becomes propagated to the caller. Typically this means that the mmc host
      driver fails to probe.

      As the CD/WP GPIOs are already treated as optional, let's extend that to
      cover the case when CONFIG_GPIOLIB is unset.

      Reported-by: Michal Simek <michal.simek@xxxxxxxxxx>
      Fixes: 16b23787fc70 ("mmc: sdhci-of-arasan: Call OF parsing for MMC")
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Tested-by: Michal Simek <michal.simek@xxxxxxxxxx>
      Acked-by: Venu Byravarasu <vbyravarasu@xxxxxxxxxx>

  commit 4e077237cfb6ab13701d504060d3ae248b191e6e
  Author: Michael Rossberg <michael.rossberg@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 11:25:08 2015 +0200

      xfrm: Fix state threshold configuration from userspace

      Allow to change the replay threshold (XFRMA_REPLAY_THRESH) and expiry
      timer (XFRMA_ETIMER_THRESH) of a state without having to set other
      attributes like replay counter and byte lifetime. Changing these other
      values while traffic flows will break the state.

      Signed-off-by: Michael Rossberg <michael.rossberg@xxxxxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit c386578f1cdb4dac230395a951f88027f64346e3
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Tue Sep 29 11:40:49 2015 +0200

      xfrm: Let the flowcache handle its size by default.

      The xfrm flowcache size is limited by the flowcache limit
      (4096 * number of online cpus) and the xfrm garbage collector
      threshold (2 * 32768), whatever is reached first. This means
      that we can hit the garbage collector limit only on systems
      with more than 16 cpus. On such systems we simply refuse
      new allocations if we reach the limit, so new flows are dropped.
      On syslems with 16 or less cpus, we hit the flowcache limit.
      In this case, we shrink the flow cache instead of refusing new
      flows.

      We increase the xfrm garbage collector threshold to INT_MAX
      to get the same behaviour, independent of the number of cpus.

      The xfrm garbage collector threshold can still be set below
      the flowcache limit to reduce the memory usage of the flowcache.

      Tested-by: Dan Streetman <dan.streetman@xxxxxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit 0266715155379820c5c626e2cd4b8c91751036bc
  Merge: 3225031 283e8ba
  Author: James Morris <james.l.morris@xxxxxxxxxx>
  Date:   Tue Sep 29 19:19:09 2015 +1000

      Merge tag 'keys-fixes-20150925' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into for-linus

      Keyrings fixes from David Howells, for current Linus.

  commit 8ac2a1704a9f315d490ca1050b8fe8367644e675
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:39 2015 +0200

      irqchip/gicv3-its: Use new jump label API

      Use newly introduced jump label API.

      Make this a separate patch for easier backporting to older kernels of
      the errata patch set.

      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zygnier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-7-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 94100970743365a9f9e186520e77ef56c492058d
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:38 2015 +0200

      irqchip/gicv3-its: Workaround for Cavium ThunderX errata 22375, 24313

      This implements two gicv3-its errata workarounds for ThunderX. Both
      with small impact affecting only ITS table allocation.

       erratum 22375: only alloc 8MB table size
       erratum 24313: ignore memory access type

      The fixes are in ITS initialization and basically ignore memory access
      type and table size provided by the TYPER and BASER registers.

      Signed-off-by: Ganapatrao Kulkarni <gkulkarni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zygnier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-6-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 67510ccafb9d69e79079b5cd6c9959025bc02061
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:37 2015 +0200

      irqchip/gicv3-its: Add HW revision detection and configuration

      Some GIC revisions require an individual configuration to esp. add
      workarounds for HW bugs. This patch implements generic code to parse
      the hw revision provided by an IIDR register value and runs specific
      code if hw matches. A function is added that reads the IIDR registers
      for ITS (GITS_IIDR) and then goes through a list of init functions to
      be called for specific versions. Same could be done for GICV3
      (GICD_IIDR), but there are no users yet for it.

      The patch is needed to implement workarounds for HW errata in Cavium's
      ThunderX GICV3 ITS.

      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zygnier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-5-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c14e36733b8a63894db9ca0b486ce14299ef2fda
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:36 2015 +0200

      irqchip/gicv3-its: Read typer register outside the loop

      No need to read the typer register in the loop. Values do not change.

      This patch is basically a prerequisite for a follow-on patch that adds
      errata code for Cavium ThunderX. It moves the calculation of the
      number of id entries to the beginning of the function close to other
      setup values that are needed to allocate the its table. Now we have a
      central location to modify the setup parameters and the errata code
      can be implemented in a single block.

      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-4-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 6d4e11c5e2e8cd54a035ba395bf8ccfa7e22cfd8
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:35 2015 +0200

      irqchip/gicv3: Workaround for Cavium ThunderX erratum 23154

      This patch implements Cavium ThunderX erratum 23154.

      The gicv3 of ThunderX requires a modified version for reading the IAR
      status to ensure data synchronization. Since this is in the fast-path
      and called with each interrupt, runtime patching is used using jump
      label patching for smallest overhead (no-op). This is the same
      technique as used for tracepoints.

      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zygnier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-3-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 30f2136346cab91e1ffd9ee6370d76809f20487a
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:34 2015 +0200

      irqchip/gicv3-its: Add range check for number of allocated pages

      The number of pages for the its table may exceed the maximum of 256.
      Adding a range check and limitting the number to its maximum.

      Based on a patch from Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>.

      Signed-off-by: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-2-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1f9c6e1bc1ba5f8a10fcd6e99d170954d7c6d382
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Mon Sep 21 19:19:53 2015 +0300

      mwifiex: fix mwifiex_rdeeprom_read()

      There were several bugs here.

      1)  The done label was in the wrong place so we didn't copy any
          information out when there was no command given.

      2)  We were using PAGE_SIZE as the size of the buffer instead of
          "PAGE_SIZE - pos".

      3)  snprintf() returns the number of characters that would have been
          printed if there were enough space.  If there was not enough space
          (and we had fixed the memory corruption bug #2) then it would result
          in an information leak when we do simple_read_from_buffer().  I've
          changed it to use scnprintf() instead.

      I also removed the initialization at the start of the function, because
      I thought it made the code a little more clear.

      Fixes: 5e6e3a92b9a4 ('wireless: mwifiex: initial commit for Marvell 
mwifiex driver')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2b8fa9e870b7dd4ea30a0c72e3a134533552278f
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 15:44:25 2015 +0200

      airo: Implement netif_carrier_on/off

      Add calls to netif_carrier_on and netif_carrier_off

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 4a0f2ea79797642341020eae5918871db94fc769
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 15:44:24 2015 +0200

      airo: fix IW_AUTH_ALG_OPEN_SYSTEM

      IW_AUTH_ALG_OPEN_SYSTEM is ambiguous in set_auth for WEP as
      wpa_supplicant uses it for both no encryption and WEP open system.
      Cache the last mode set (only of these two) and use it here.

      This allows wpa_supplicant to work with unencrypted APs.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit cf75496b6fc2fd8dd74633b0f49f4fa3f58f36e1
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Sep 21 09:55:26 2015 +0200

      ssb: make ssb_pcmcia_switch_core static

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 264c7708c9ceabfd10c70f942bb2910976ca92ff
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Sep 21 09:47:20 2015 +0200

      ssb: drop declaration of non existing ssb_sdio_hardware_setup

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 7b1647bc1a44422ee9d67d4d2b5d3ab12d2c5bee
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Sep 21 09:47:19 2015 +0200

      ssb: make ssb_sdio_switch_core static

      It's used locally only.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 44f3fd2700eee30e03fe9da6258b73d53bc037c5
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Sep 21 09:47:18 2015 +0200

      ssb: unexport ssb_bus_pcibus_register

      It isn't used anywhere out of ssb code and we don't (plan to) build
      pcihost_wrapper.c as a separated module.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 69b5f4da26362912e7e56e48c8e1df7fde281e58
  Author: Hauke Mehrtens <hauke@xxxxxxxxxx>
  Date:   Sat Sep 19 14:43:50 2015 +0200

      bcma: add support for population subnodes also when build as module

      of_default_bus_match_table was not exported earlier, so it could only
      be accessed by code compiled into the kernel. A new function
      of_platform_default_populate() was added which uses
      of_default_bus_match_table and this function is also exported. This way
      it is possible to create a bus with the content of
      of_default_bus_match_table and we can remove the hacks from bcma.

      Signed-off-by: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit a32be01772525eba2001be23a570d9e31c58273d
  Author: Hauke Mehrtens <hauke@xxxxxxxxxx>
  Date:   Sat Sep 19 12:47:20 2015 +0200

      brcmfmac: include linux/atomic.h

      brcmfmac uses atomic_or() and other atomic_* functions, but does not
      include linux/atomic.h. This file gets included by some other header
      file so this normally does not cause problems.

      Signed-off-by: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Acked-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 29b93c0e3c3891e3ba6e38a71997bdad8a2aa457
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:19 2015 +0200

      brcmfmac: Accept events when TDLS is used in combination with p2p.

      TDLS events are mapped back to primary interface but when p2p is in
      use then this fails because the check was incorrect by checking
      bsscfg number. Which can be different when a p2p device has been
      created.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit cb8dc71f516a98908de7de9be381ef9b571742e2
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:18 2015 +0200

      brcmfmac: Fix TDLS setup by properly handling p2p noif.

      There is a workaround needed for p2p device setup which breaks tdls
      functionality. This patch fixes that by properly signalling fweh that
      p2p device setup is ongoing.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 55acca90da52b85299c033354e51ddaa7b73e019
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:17 2015 +0200

      brcmfmac: Add support for the BCM4365 and BCM4366 PCIE devices.

      This patch adds support for the BCM4365 and BCM4366 11ac Wave2
      PCIE devices.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit a2044d91d9d25a0e9e2abb43ca90cceee032f6ee
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:16 2015 +0200

      brcmfmac: Fix race condition bug when deleting p2p interface.

      When p2p device interface gets deleted by deinitialising discovery
      it will result in an event which removes the interface, but that is
      also done by delete p2p interface code. This results in race
      condition which sometimes results in lockup/crash. With this patch
      the delete device interface will wait for the event (with timeout)
      removing the possible race condition. Also on the stop device call
      from cfg80211 the deinitialisation of the discovery device should
      be avoided as it can result in a similar situation.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 8268c2011d255b547a9093977e728af5cf16d69e
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:15 2015 +0200

      brcmfmac: Add module parameter to disable features.

      For debugging purpose it is very handy to be able to disable
      features. It has happened a few times that new features turned
      out not always being properly detected for all devices/firmwares.
      Making it possible to disable the feature with a module parameter
      will make testing/debugging easier.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 35a3cbcc49b5422fbfe7d655952888a3d29b45ed
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:14 2015 +0200

      brcmfmac: Fix p2p bug for older firmwares.

      Some devices with older firmwares are reporting new p2p device
      interface with the wrong type. Accept this type to get p2p
      working for these devices.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit d1bb34c128f59c30b75b96ef60f5f00cdbe9ca0e
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:13 2015 +0200

      brcmfmac: Only handle p2p_stop_device if vif is valid

      In some situations it is possible that vif has been removed while
      cfg80211 invokes the p2p_stop_device handler. This will result in
      crash.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9831bcb987df4aff6a1d85975f1dda4c654f298d
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:12 2015 +0200

      brcmfmac: Deleting of p2p device is leaking memory.

      When a p2p device gets deleted, the memory for the vif is not being
      released. This is solved by reorganizing the cleanup path and
      properly freeing the memory.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 178e9ef9b6c619b1b3de354f21692a0ad1071116
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:11 2015 +0200

      brcmfmac: Workaround in change vif for wpa_supplicant support.

      Different wpa_supplicants have different behavior and expectations
      regarding the change_virtual_intf behavior. This patch implements
      a workaround for the different versions and possible brcmfmac
      configuration.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 43e55a2a1cf05afcc4b9d4fc214ccb4a53447cb1
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:10 2015 +0200

      brcmfmac: Make p2pon module param always available.

      p2pon module param is currently under define BRCMDBG. Though it is
      a needed option for older versions of the wpa_supplicant which do not
      support the P2P_DEVICE interface.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9f64df940cfe734156ec434807611e014278b359
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:09 2015 +0200

      brcmfmac: Fix bug in flowring management.

      The hash index stored in the flowrings is of type u16 but gets
      stored in u8. This can result in incorrect indexing and possibly
      result in crashes. This patch fixes the type.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ae7c03f68ee24e51f3ded9265715405df72812ba
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:08 2015 +0200

      brcmfmac: Inform p2p module about p2pon through API

      When the p2pon module param is used then p2p attach will initialize
      p2p device iface in the firmware, but it is doing that by checking
      data. It is cleaner to pass the p2pon information to p2p by API.
      This information is also needed for other patch.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 6ea696eb4e2646e8f2440e2090f3d165a21ff02f
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:07 2015 +0200

      brcmfmac: Only assign primary netdev to if2bss array.

      The if2bss allows for translation of ifidx to bssidx which has a 1:n
      relation. Therefor only the first (primary) netdev should be
      assigned in this array. This fixes the p2pon=1 module param usage.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 60dc35ef9ffdf8810b98cc09abb02378023818c2
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:06 2015 +0200

      brcmfmac: Fix set and get tx-power functions.

      Implementation of tx-power (get and set) related functions are
      still assuming mW interface. This is wrong as functions use dbm
      (or mbm) nowadays. As a result a tx power configuration could
      result in wrong power configuration.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit e3c92cb2eea395c9fbec7ceb678626565cbac0fe
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:05 2015 +0200

      brcmfmac: Add support for the BCM4350 PCIE device.

      This patch adds support fo the BRCM4350 2x2 11ac PCIE device.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2b5d348ee786dd875b3aa8536a97ff6f6421d018
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:04 2015 +0200

      brcmfmac: Fix exception handling.

      In some exception situations the ifp->vif was not properly assigned
      which could result in crash.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 735ab6bfc03878e6b41feb1f14da750a951854ad
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:18 2015 -0700

      mwifiex: complete usb tx data with multi endpoints

      This patch do the work to TX data with specific USB
      endpoint. At the same time, update data_sent flag
      according to multi port status. And is_port_ready
      API is added for BSS interface to check if current
      used usb data endpoint is available or not.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 7e4e5d2cd0817b91eb07c7abe297012bf76616ea
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:17 2015 -0700

      mwifiex: add usb multi endpoints resync support

      This patch add support for usb multi endpoints resync.
      Once multi channel event is received from firmware,
      update usb_mc_setp flag to block TX data until setup is over.
      And available data endpoint will be attached to BSS interface.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 308fe29ef24394e4db66d80c7a23e3e5640aca74
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:16 2015 -0700

      mwifiex: add usb tx data multi endpoints support

      This patch add support for USB interface to TX data
      with different endpoint. And previous TX information
      are saved in new designed structure.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2b0f997db43f01370503d88b5fbec9a350a7955f
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:15 2015 -0700

      mwifiex: add usb multi channel event process support

      This patch add multi channel event process for USB multi tx data 
endpoints.
      Driver receives firmware multi channel event only in case that new
      connection is setup or interface is disconnect. Different BSS interface
      need update used usb endpoint.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit d941444321f6b84bdd36d8d24eef10171c9ab981
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:14 2015 -0700

      mwifiex: move usb specific data_sent update to usb.c

      This patch move data_sent flag update to usb.c file.
      >From now all data_sent update cases only happened in specific file:
      sdio.c, usb.c, pcie.c. Outside ot these files, it is only allowed
      to check the value of data_ent.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit d22871db0172eba2bba2e7ff8373f682c9b001cd
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:13 2015 -0700

      mwifiex: fix tx data_sent issue for usb interface

      This patch fix missing tx data_sent flag update for usb interface.
      Except USB interface, data_sent flag has been updated in specific
      file such as sdio.c and pcie.c. So only USB interface type need check
      when TX data completed.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 17090beec26ea5bd064c67e2707151722d9d88d6
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:12 2015 -0700

      mwifiex: Suppress -ENOSR error for data traffic on USB

      We have preallocated buffer pool for Tx data. During high
      data traffic, all buffers are submitted to USB and driver needs
      to wait until one of the buffers get available for next Tx
      packet.

      "data: -ENOSR is returned" errors is expected in this case. Let's
      lower the priority of this message.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 70c5ad7e20c1426d14f6e722da0972b2c9163db7
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:11 2015 -0700

      mwifiex: correct paused tx data packet counter

      This patch fixes observed issues while updating counter for
      number of paused data packets in wmm queue when trying to
      delete packet or delete station entry.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 14d9c11c91a606fed65eaae2455423a23bb4ae59
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:10 2015 -0700

      mwifiex: avoid memsetting PCIe event buffer

      Preallocated PCIe buffer is being reused for all PCIe interface
      events. Physical address of the buffer is shared with firmware
      so that it can perform DMA on it. As event length is specified
      in the header, there should not be a problem if the buffer gets
      overwritten.
      We will save some cycles by avoiding memset everytime while
      submitting the buffer to firmware.

      Fixes: 2728cecdc7d6bf3d21(mwifiex: corrections in PCIe event skb)
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 17e524b1b60f4390d24a51d9524d1648cf5d1447
  Author: Aniket Nagarnaik <aniketn@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:09 2015 -0700

      mwifiex: fix NULL pointer dereference during hidden SSID scan

      This NULL pointer dereference is observed during suspend resume
      stress test. All pending commands are cancelled when system goes
      into suspend state. There a corner case in which host may receive
      response for last scan command after this and try to trigger extra
      active scan for hidden SSIDs.

      The issue is fixed by adding a NULL check to skip that extra scan.

      Fixes: 2375fa2b36feaf34 (mwifiex: fix unable to connect hidden SSID..)
      Cc: <stable@xxxxxxxxxxxxxxx> [v4.2+]
      Signed-off-by: Aniket Nagarnaik <aniketn@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2c3da961268ff7f4a6c958fee081c58aef2e5c1d
  Author: Aniket Nagarnaik <aniketn@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:08 2015 -0700

      mwifiex: don't always include ht/vht info in tdls confirm frame

      Current TDLS implementation always includes ht/vht information
      in tdls setup confirm frame which causes teardown by legacy
      peer station after TDLS handshake. We will inclue ht/vht
      capabilities in tdls setup confirm frame only if peer station
      supports it to fix this problem.

      Signed-off-by: Aniket Nagarnaik <aniketn@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 02421dd3f6af1b6becb6d9a690a2b70c73c03a7a
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:07 2015 -0700

      mwifiex: NULL check for cfg80211_inform_bss()

      cfg80211_inform_bss would return null in some cases, such as
      memory allocation failure.

      This patch adds sanity check for this case, to avoid possible
      issues when above corner case is hit.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9a9053c3420fcc5779319e4ea267c6dcbf8d7c04
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:06 2015 -0700

      mwifiex: fix driver init failure under memory pressure

      64k Tx and Rx buffers are allocated during driver initialization
      for SDIO level data aggregations. When host is under memory
      pressure situation, kzalloc() request for 64k may fail.

      We will try allocating 32k buffers and disable our rx single port
      aggreagation feature in this situation.

      If the allocation still fails, we will disable our sdio multport
      aggregation feature as well. In this way, we will transmit and
      receive packets one by one, thus reduce the demand for big
      memory.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit e3ad3d5b6ab2a9876773fe99d9d1866d3c1744ae
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:05 2015 -0700

      mwifiex: minor corrections in multiport aggregation code

      This patch includes below changes
      1) Check if multiport aggregation feature flag while doing rx
      length validation check.
      2) Reset buffer size variables when buffers are freed.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 0a252abb6ad75260353a28c08b904c2c9d258d2c
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:04 2015 -0700

      mwifiex: update amsdu tx packet time stamp

      This patch fixes the issue of delay time in A-MSDU tx packet.
      In generated new A-MSDU packet, the time stamp is initialized to zero.
      Choose the time of first MSDU packet as aggregated packet's time.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 65405c51bb2e9d2a348f5402443e31f82411aabb
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:03 2015 -0700

      mwifiex: fix typo in del_virtual_intf() function

      Interface counters should be incremented in add_virtual_intf()
      and decremented in del_virtual_intf() function. This patch
      corrects it.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 32677b25849f627aba27235f4cbf65663a0cc1a6
  Author: Guodong Xu <guodong.xu@xxxxxxxxxx>
  Date:   Fri Sep 18 20:37:27 2015 +0800

      wlcore: align reg_ch_conf_last[] to 64bit

      Align fields reg_ch_conf_last and reg_ch_conf_pending of
      struct wl1271{} to 64bit.

      Without this, on 64bit ARM, wlcore_set_pending_regdomain_ch() fails at
      the point it calls set_bit(ch_bit_idx, (long*)wl->reg_ch_conf_pending);
      Here is the error message while doing iw wlan0 scan or connect:

      [   10.666857] wlcore: IRQ work
      [   10.670046] wlcore: intr: 0x40 (fw_rx_counter = 1, drv_rx_counter = 0, 
tx_results_counter = 0)
      [   10.678697] wlcore: WL1271_ACX_INTR_DATA
      [   10.682810] Unhandled fault: alignment fault (0x96000021) at 
0xffffffc037a817f4
      [   10.690139] Internal error: : 96000021 [#1] PREEMPT SMP
      [   10.695366] Modules linked in:
      [   10.698437] CPU: 3 PID: 894 Comm: irq/60-wl18xx Tainted: G        W    
   4.2.0-rc6-linaro-hikey #2
      [   10.707501] Hardware name: HiKey Development Board (DT)
      [   10.712733] task: ffffffc03a9d1680 ti: ffffffc039e18000 task.ti: 
ffffffc039e18000
      [   10.720239] PC is at set_bit+0x14/0x30
      [   10.724002] LR is at wlcore_set_pending_regdomain_ch+0x40/0x4c

      Signed-off-by: Guodong Xu <guodong.xu@xxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9c17dbc6eb73bdd8a6aaea1baefd37ff78d86148
  Merge: 18ab2cd e637d17
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Sep 29 09:43:46 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

        - Accept a zero --itrace period, meaning "as often as possible".  In 
the case
          of Intel PT that is the same as a period of 1 and a unit of 
'instructions'
          (i.e.  --itrace=i1i). (Adrian Hunter)

        - Harmonize itrace's synthesized callchains with the existing 
--max-stack
          tool option. (Adrian Hunter)

        - Allow time to be displayed in nanoseconds in 'perf script'. (Adrian 
Hunter)

        - Fix potential infinite loop when handling Intel PT timestamps. 
(Adrian Hunter)

        - Slighly improve Intel PT debug logging. (Adrian Hunter)

        - Warn when AUX data has been lost, just like when processing 
PERF_RECORD_LOST.
          (Adrian Hunter)

        - Further document export-to-postgresql.py script. (Adrian Hunter)

        - Add option to synthesize branch stack from auxtrace data. (Adrian 
Hunter)

        - Use equivalent logic to avoid using dso->kernel. (Arnaldo Carvalho de 
Melo)

        - Show proper error messages when parsing bad terms for hw/sw events. 
(He Kuang)

        - Tracepoint event parsing improvements. (He Kuang)

        - Store tracing mountpoint for better error message. (Jiri Olsa)

        - Add fixdep to tools/build, bringing it closer to the kernel 
counterpart, from
          where it is being lifted. (Jiri Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 862a336c8302695cbac6d8d752ee9a2429487478
  Author: Jan Kaisrlik <kaisrja1@xxxxxxxxxxx>
  Date:   Thu Sep 17 14:03:46 2015 +0200

      ath9k: Add support for OCB mode

      The patch adds support for "outside the context of a BSS"(OCB) mode
      to ath9k driver and extends debugfs files by OCB ralated information.

      This patch was tested on AR9380-AL1A cards.

      Signed-off-by: Jan Kaisrlik <kaisrja1@xxxxxxxxxxx>
      Cc: Michal Sojka <sojkam1@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit c452d944bee09c8c2529d965f10999d80991402a
  Author: Hiroaki KAWAI <hiroaki.kawai@xxxxxxxxx>
  Date:   Thu Sep 10 18:04:45 2015 +0000

      carl9170: fix bad rssi reading

      Fix rssi calculation error which was introduced in otus to ar9170
      porting.

      Signed-off-by: Hiroaki KAWAI <hiroaki.kawai@xxxxxxxxx>
      Acked-by: Christian Lamparter <chunkeey@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 76ea6fdbeb2540ea8a06189b519175ee5616ab56
  Author: Geoff Levand <geoff@xxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:56:42 2015 -0700

      net/wireless/wl18xx: Add missing MODULE_FIRMWARE

      Fixes the output of 'modinfo --field firmware'.

      Signed-off-by: Geoff Levand <geoff@xxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 61d36370e24bb5d8f83481aa6f76fc05385c75c9
  Author: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 10:56:09 2015 +0800

      ath9k: enable hw manual peak calibration for QCA9561

      This patch fix https://lists.openwrt.org/pipermail/openwrt-devel/
      2015-August/034979.html. As the peak detect calibration is set
      incorrectly.

      Signed-off-by: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 36925e52c5ac9d10a553d1339e13a61bfbdd4ba4
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Mon Aug 31 10:46:45 2015 -0700

      mwifiex: Make mwifiex_dbg a function, reduce object size

      The mwifiex_dbg macro has two tests that could be consolidated
      into a function reducing overall object size ~10KB (~4%).

      So convert the macro into a function.

      $ size drivers/net/wireless/mwifiex/built-in.o* (x86-64 defconfig)
         text      data     bss     dec     hex filename
       233102      8628    4809  246539   3c30b 
drivers/net/wireless/mwifiex/built-in.o.new
       243949      8628    4809  257386   3ed6a 
drivers/net/wireless/mwifiex/built-in.o.old

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 07fe2e38c7fd19dc6a5468d0661fc75586ce9ca4
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Aug 27 16:14:06 2015 +0200

      brcmfmac: Reset PCIE devices after recognition.

      When PCIE type devices are being FW reloaded without being properly
      reset then the device ends up in a locked state, requiring the
      device to be completely powered down. This patch adds a reset
      through watchdog at the moment the device (cores) has been
      recognized. This will solve warm reboot issues.

      Cc: Rafal Milecki <zajec5@xxxxxxxxx>
      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 95ef12394a4d002c7ed3bcbed224f3391792a02b
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:04 2015 +0200

      brcmfmac: introduce brcmf_net_detach() function

      In case of error during brcmf_bus_start() the network interfaces were
      freed using free_netdev(). However, the interfaces may have additional
      memory allocated which is not freed. The netdev has destructor set to
      brcmf_cfg80211_free_netdev() which frees the additional memory if
      allocated and call free_netdev(). The brcmf_net_detach() either calls
      brcmf_cfg80211_free_netdev() directly or uses unregister_netdev() when
      struct net_device::reg_state indicates the netdev was registered.

      Reported-by: Daniel (Deognyoun) Kim <dekim@xxxxxxxxxxxx>
      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit c67d41ba6ff3a4be9aecb9df202e05e149832df5
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:03 2015 +0200

      brcmfmac: change prototype for brcmf_fws_hdrpull()

      Instead of passing ifidx and drvr just pass struct brcmf_if pointer
      which holds both parameters.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 03cca20a6ee15b25487b4992eda2c3bf08d1f1c1
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:02 2015 +0200

      brcmfmac: remove ifidx parameter from brcmf_fws_txstatus_suppressed()

      The brcmf_fws_txstatus_suppressed() function prototype specifies an
      ifidx parameter which is not used within the function implementation.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9d6c1dc4f9136227b39faf98ae46d0228fe1fa19
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:01 2015 +0200

      brcmfmac: add dedicated debug level for firmware console logging

      Both PCIe and SDIO devices have the possibility to log the firmware
      console output in kernel log. For PCIe it is logged when PCIE debug
      level is enabled. For SDIO it is logged when user specifies a non-zero
      console interval through debugfs. This patch tries to make it a
      bit more consistent. The firmware console output is only logged when
      FWCON debug level is enabled.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Pontus Fuchs <pontusf@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 291da87b69109924e6ee526606a783668d2232e0
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:00 2015 +0200

      brcmfmac: add mapping for interface index to bsscfg index

      Because the P2P Device interface in firmware uses the same interface
      index as the primary interface we use the bsscfg index as index in the
      struct brcmf_pub::iflist. However, in the data path we get the interface
      index and not the bsscfg index. So we need a mapping of interface index
      to bsscfg index, which can be determined upon handle adding the interface.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 054e68add65972af20dbf0848e25c80828c5cd60
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:59 2015 +0200

      brcmfmac: pass struct brcmf_if instance in brcmf_txfinalize()

      Most call sites of brcmf_txfinalize already have struct brcmf_if
      instance so pass that to brcmf_txfinalize() as the function
      needs it anyway.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 46f3b6ee483898095906023e1ba3af2bddc38af9
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:58 2015 +0200

      brcmfmac: use brcmf_get_ifp() to map ifidx to struct brcmf_if instance

      The knowledge on how to map the interface index to a struct brcmf_if
      instance is in brcmf_get_ifp() so use that function when only the
      interface index is known instead of accessing brcmf_pub::iflist
      directly.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ddddfed2f9d8422fd5bb5080aa95e478832c0130
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:57 2015 +0200

      brcmfmac: correct detection of p2pdev interface event

      The p2pdev interface is setup in firmware resulting in a interface
      event. This event has role and no-if flag. When role is p2p client
      and no-if flag is set it indicates that this is the p2pdev interface.
      This info is used in handling the event and adding interface in the
      driver.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 1c626cf472fce757a69a4c70f038867907b5b808
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:56 2015 +0200

      brcmfmac: only call brcmf_cfg80211_detach() when attach was successful

      In brcmf_bus_start() the function brcmf_cfg80211_attach() is called which
      may fail. If this happens we should not call brcmf_cfg80211_detach() in
      the failure path as it will result in NULL pointer dereference:

        brcmf_fweh_activate_events: Set event_msgs error (-5)
        brcmf_bus_start: failed: -5
        brcmf_sdio_firmware_callback: dongle is not responding
        BUG: unable to handle kernel NULL pointer dereference at 
0000000000000068
        IP: [<ffffffff811e8f08>] kernfs_find_ns+0x18/0xd0
        PGD 0
        Oops: 0000 [#1] SMP
        Modules linked in: brcmfmac(O) brcmutil(O) cfg80211 auth_rpcgss
        CPU: 1 PID: 45 Comm: kworker/1:1 Tainted: G           O
        Hardware name: Dell Inc. Latitude E6410/07XJP9, BIOS A07 02/15/2011
        Workqueue: events request_firmware_work_func
        task: ffff880036c09ac0 ti: ffff880036dd4000 task.ti: ffff880036dd4000
        RIP: 0010:[<ffffffff811e8f08>]  [<ffffffff811e8f08>] 
kernfs_find_ns+0x18/0xd0
        RSP: 0018:ffff880036dd7a28  EFLAGS: 00010246
        RAX: ffff880036c09ac0 RBX: 0000000000000000 RCX: 000000007fffffff
        RDX: 0000000000000000 RSI: ffffffff816578b9 RDI: 0000000000000000
        RBP: ffff880036dd7a48 R08: 0000000000000000 R09: ffff880036c0b340
        R10: 00000000000002ec R11: ffff880036dd7b08 R12: ffffffff816578b9
        R13: 0000000000000000 R14: ffffffff816578b9 R15: ffff8800c6c87000
        FS:  0000000000000000(0000) GS:ffff88012bc40000(0000) 
knlGS:0000000000000000
        CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
        CR2: 0000000000000068 CR3: 0000000001a0b000 CR4: 00000000000006e0
        Stack:
         0000000000000000 ffffffff816578b9 0000000000000000 ffff8800c0d003c8
         ffff880036dd7a78 ffffffff811e8ff5 0000000ffffffff1 ffffffff81a9b060
         ffff8800c789f880 ffff8800c0d00000 ffff880036dd7a98 ffffffff811ebe0d
        Call Trace:
         [<ffffffff811e8ff5>] kernfs_find_and_get_ns+0x35/0x60
         [<ffffffff811ebe0d>] sysfs_unmerge_group+0x1d/0x60
         [<ffffffff81404ef2>] dpm_sysfs_remove+0x22/0x60
         [<ffffffff813f9db9>] device_del+0x49/0x240
         [<ffffffff815da768>] rfkill_unregister+0x58/0xc0
         [<ffffffffa06bd91b>] wiphy_unregister+0xab/0x2f0 [cfg80211]
         [<ffffffffa0742fe3>] brcmf_cfg80211_detach+0x23/0x50 [brcmfmac]
         [<ffffffffa074d986>] brcmf_detach+0x86/0xe0 [brcmfmac]
         [<ffffffffa0757de8>] brcmf_sdio_remove+0x48/0x120 [brcmfmac]
         [<ffffffffa0758ed9>] brcmf_sdiod_remove+0x29/0xd0 [brcmfmac]
         [<ffffffffa0759031>] brcmf_ops_sdio_remove+0xb1/0x110 [brcmfmac]
         [<ffffffffa001c267>] sdio_bus_remove+0x37/0x100 [mmc_core]
         [<ffffffff813fe026>] __device_release_driver+0x96/0x130
         [<ffffffff813fe0e3>] device_release_driver+0x23/0x30
         [<ffffffffa0754bc8>] brcmf_sdio_firmware_callback+0x2a8/0x5d0 
[brcmfmac]
         [<ffffffffa074deaf>] brcmf_fw_request_nvram_done+0x15f/0x5e0 [brcmfmac]
         [<ffffffff8140142f>] ? devres_add+0x3f/0x50
         [<ffffffff810642b5>] ? usermodehelper_read_unlock+0x15/0x20
         [<ffffffff81400000>] ? platform_match+0x70/0xa0
         [<ffffffff8140f400>] request_firmware_work_func+0x30/0x60
         [<ffffffff8106828c>] process_one_work+0x14c/0x3d0
         [<ffffffff8106862a>] worker_thread+0x11a/0x450
         [<ffffffff81068510>] ? process_one_work+0x3d0/0x3d0
         [<ffffffff8106d692>] kthread+0xd2/0xf0
         [<ffffffff8106d5c0>] ? kthread_create_on_node+0x180/0x180
         [<ffffffff815ed35f>] ret_from_fork+0x3f/0x70
         [<ffffffff8106d5c0>] ? kthread_create_on_node+0x180/0x180
        Code: e9 40 fe ff ff 48 89 d8 eb 87 66 0f 1f 84 00 00 00 00 00 66 66 66 
66
        90 55 48 89 e5 41 56 49 89 f6 41 55 49 89 d5 31 d2 41 54 53 <0f> b7
        47 68 48 8b 5f 48 66 c1 e8 05 83 e0 01 4d 85 ed 0f b6 c8
        RIP  [<ffffffff811e8f08>] kernfs_find_ns+0x18/0xd0
         RSP <ffff880036dd7a28>
        CR2: 0000000000000068
        ---[ end trace 87d6ec0d3fe46740 ]---

      Reported-by: Daniel (Deognyoun) Kim <dekim@xxxxxxxxxxxx>
      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ee6e3a3414a48425211f9292b8bfc4524c666c41
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:55 2015 +0200

      brcmfmac: change parameters for brcmf_remove_interface()

      Just pass the interface to be removed, ie. the struct brcmf_if instance.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 796cfb65e3ed01a9b08e3a0b93e34120c54bbbd2
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:54 2015 +0200

      brcmfmac: make brcmf_proto_hdrpull() return struct brcmf_if instance

      Avoid spreading the ifidx in the driver, but have it return the
      struct brcmf_if instance.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 75effb03ee8e4c9d4bbc909118ce5444b047dfde
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:53 2015 +0200

      brcmfmac: consolidate ifp lookup in driver core

      In rx path the firmware provide an interface index which is used to
      map to a struct brcmf_if instance. However, this involves some trick
      that is done in two places. This is changed by having driver core
      providing brcmf_get_ifp() function.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit c7d2ecd9f64c351cb4d551f1f472d0fc09c3cae8
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 23 16:41:55 2015 +0900

      ARM: dts: Fix wrong clock binding for sysmmu_fimd1_1 on exynos5420

      The sysmmu_fimd1_1 should bind the clock CLK_SMMU_FIMD1M1, not the clock
      CLK_SMMU_FIMD1M0. CLK_SMMU_FIMD1M0 is a clock for the sysmmu_fimd1_0.

      This wrong clock binding causes the problem that is blocked in iommu_map
      function when IOMMU is enabled and exynos-drm driver tries to allocate
      buffer via DMA mapping API on Odroid-XU3 board.

      Fixes: b70045167815 ("ARM: dts: add sysmmu nodes for exynos5420")
      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Reviewed-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>

  commit f404e7a730c59f58bc1e9a3142cfdf7ec2d29f3d
  Author: Yadwinder Singh Brar <yadi.brar01@xxxxxxxxx>
  Date:   Sun Aug 23 13:59:48 2015 +0900

      ARM: dts: Fix bootup thermal issue on smdk5250

      With default config on smdk5250 latest tree throws below message:

      [    2.226049] thermal thermal_zone0: critical temperature reached(224 
C),shutting down
      [    2.227840] reboot: Failed to start orderly shutdown: forcing the issue

      and hangs randomly because it reads wrong temperature value.

      I can't figure out any direct relation between LDO10 and TMU from board
      schematics which I have. So making LDO10 always-on to fix issue for now.

      Signed-off-by: Yadwinder Singh Brar <yadi.brar01@xxxxxxxxx>
      [pankaj.dubey: resubmitted after rebasing to latest kgene tree]
      Signed-off-by: Pankaj Dubey <pankaj.dubey@xxxxxxxxxxx>
      Tested-by: Pankaj Dubey <pankaj.dubey@xxxxxxxxxxx>
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>

  commit 2103d6b818fcdae15ffa04cf385f770e6c3892c3
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Mon Sep 28 14:34:04 2015 +0200

      net: sctp: Don't use 64 kilobyte lookup table for four elements

      Seemingly innocuous sctp_trans_state_to_prio_map[] array
      is way bigger than it looks, since
      "[SCTP_UNKNOWN] = 2" expands into "[0xffff] = 2" !

      This patch replaces it with switch() statement.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: Vlad Yasevich <vyasevich@xxxxxxxxx>
      CC: Neil Horman <nhorman@xxxxxxxxxxxxx>
      CC: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
      CC: linux-sctp@xxxxxxxxxxxxxxx
      CC: netdev@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
      Acked-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8a4683a5e06efda7e1f327213678d4dcafc0d894
  Author: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
  Date:   Mon Sep 28 12:47:14 2015 +0200

      net: help compiler generate better code in eth_get_headlen

      Noticed that the compiler (gcc version 4.8.5 20150623 (Red Hat 4.8.5-4) 
(GCC))
      generated suboptimal assembler code in eth_get_headlen().

      This early return coding style is usually not an issue, on super scalar 
CPUs,
      but the compiler choose to put the return statement after this very 
unlikely
      branch, thus creating larger jump down to the likely code path.

      Performance wise, I could measure slightly less L1-icache-load-misses
      and less branch-misses, and an improvement of 1 nanosec with an 
IP-forwarding
      use-case with 257 bytes packets with ixgbe (CPU i7-4790K @ 4.00GHz).

      Signed-off-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 06a15f51cf3618e32a73871ee6a547ef7fd902b5
  Author: Alexander Couzens <lynxis@xxxxxxx>
  Date:   Mon Sep 28 11:32:42 2015 +0200

      l2tp: protect tunnel->del_work by ref_count

      There is a small chance that tunnel_free() is called before 
tunnel->del_work scheduled
      resulting in a zero pointer dereference.

      Signed-off-by: Alexander Couzens <lynxis@xxxxxxx>
      Acked-by: James Chapman <jchapman@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d2e1339f40db753286ca0a92c92a847e08c5d2de
  Author: Bendik Rønning Opstad <bro.devel@xxxxxxxxx>
  Date:   Wed Sep 23 18:49:53 2015 +0200

      tcp: Fix CWV being too strict on thin streams

      Application limited streams such as thin streams, that transmit small
      amounts of payload in relatively few packets per RTT, can be prevented
      from growing the CWND when in congestion avoidance. This leads to
      increased sojourn times for data segments in streams that often transmit
      time-dependent data.

      Currently, a connection is considered CWND limited only after having
      successfully transmitted at least one packet with new data, while at the
      same time failing to transmit some unsent data from the output queue
      because the CWND is full. Applications that produce small amounts of
      data may be left in a state where it is never considered to be CWND
      limited, because all unsent data is successfully transmitted each time
      an incoming ACK opens up for more data to be transmitted in the send
      window.

      Fix by always testing whether the CWND is fully used after successful
      packet transmissions, such that a connection is considered CWND limited
      whenever the CWND has been filled. This is the correct behavior as
      specified in RFC2861 (section 3.1).

      Cc: Andreas Petlund <apetlund@xxxxxxxxx>
      Cc: Carsten Griwodz <griff@xxxxxxxxx>
      Cc: Jonas Markussen <jonassm@xxxxxxxxxx>
      Cc: Kenneth Klette Jonassen <kennetkl@xxxxxxxxxx>
      Cc: Mads Johannessen <madsjoh@xxxxxxxxxx>
      Signed-off-by: Bendik Rønning Opstad <bro.devel+kernel@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Tested-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Tested-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5e2a5ebc3f94027d0f2ffd33d3f3adbc856775d3
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Mon Sep 28 10:26:53 2015 +0530

      cxgb4: Add HW timesptamp support for RX

      Adds support for ethtool get time stamp ioctl, which is used by
      tcpdump to get the supported time stamp types

      eg: tcpdump -i eth5 -J
      Time stamp types for eth5 (use option -j to set):
        host (Host)
        adapter_unsynced (Adapter, not synced with system time)

      Adds support for adapter unsynced mode, by adding SIOCSHWTSTAMP support
      in driver.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e4600d69ffc7c0ce9759532e2c10056bf1c0a1a7
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Sun Sep 27 15:22:44 2015 +0800

      net: Fix Hisilicon Network Subsystem Support Compilation

      This patch fixes the compilation error with arm allmodconfig, this error
      generated due to unavailability of readq() on 32-bit platform which was
      found during net-next daily compilation. In the same time, fix all the
      hns drivers compilation warnings.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: zhaungyuzeng <Yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: kenneth Lee <liguozhu@xxxxxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1273bc573ab13b9c76053fe0403dca7d8acffa78
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sat Sep 26 20:49:20 2015 +0200

      net: irda: pxaficp_ir: dmaengine conversion

      Convert pxaficp_ir to dmaengine. As pxa architecture is shifting from
      raw DMA registers access to pxa_dma dmaengine driver, convert this
      driver to dmaengine.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Tested-by: Petr Cvek <petr.cvek@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 89fa57244aa170bb344cdb5be35afdeefc219fbd
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sat Sep 26 20:49:19 2015 +0200

      net: irda: pxaficp_ir: convert to readl and writel

      Convert the pxa IRDA driver to readl and writel primitives, and remove
      another set of direct registers access. This leaves only the DMA
      registers access, which will be dealt with dmaengine conversion.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Tested-by: Petr Cvek <petr.cvek@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit be01891e4606bc6aaa2b12fbade1aca8eb467a16
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sat Sep 26 20:49:18 2015 +0200

      net: irda: pxaficp_ir: use sched_clock() for time management

      Instead of using directly the OS timer through direct register access,
      use the standard sched_clock(), which will end up in OSCR reading
      anyway.

      This is a first step for direct access register removal and machine
      specific code removal from this driver.

      This commit changes the behavior, as previously the minimum turnaround
      time was counted in 76ns steps, while with this patch it is counted in
      microsecond steps. The strictly equal formula would have been :
            while ((sched_clock() - si->last_clk) * 76 < mtt)

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b40f709a1b3100a1a9dbd824303c68757f2e25e
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:31:32 2015 -0300

      net: fec: Remove unneeded FEATURES_NEED_QUIESCE definition

      There is no need to have FEATURES_NEED_QUIESCE defined as we
      can simply use NETIF_F_RXCSUM instead as done in other parts
      of the driver.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 17fb0b2b90568182bc969cbe0d76fa07079267e4
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 15:22:54 2015 -0600

      net: Remove redundant oif checks in rt6_device_match

      The oif has already been checked that it is non-zero; the 2 additional
      checks on oif within that if (oif) {...} block are redundant.

      CC: YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 49d28b5642444d82bd23b9333785480d265420d1
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 21:13:48 2015 +0000

      lan78xx: Return 0 when lan78xx_suspend() has no error.

      lan78xx_suspend() may return non-zero from lan78xx_write_reg() in some 
scenario.
      Fix to return 0 when lan78xx_suspend() has no error.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 661dfc65f7981481ba2e31aaa702371e82336e56
  Author: Ivan Mikhaylov <ivan@xxxxxxxxxx>
  Date:   Fri Sep 25 11:52:27 2015 +0400

      net/ibm/emac: bump version numbers for correct work with ethtool

      The size of the MAC register dump used to be the size specified by the
      reg property in the device tree.  Userland has no good way of finding
      out that size, and it was not specified consistently for each MAC type,
      so ethtool would end up printing junk at the end of the register dump
      if the device tree didn't match the size it assumed.

      Using the new version numbers indicates unambiguously that the size of
      the MAC register dump is dependent only on the MAC type.

      Fixes: 5369c71f7ca2 ("net/ibm/emac: fix size of emac dump memory areas")
      Signed-off-by: Ivan Mikhaylov <ivan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 366f02d873575ccbcdc5f6d90698dbbe4f80f134
  Merge: 4de61ba 171bb2c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 22:19:56 2015 -0700

      Merge branch 'mlx5-next'

      Or Gerlitz says:

      ====================
      Mellanox mlx5 driver update

      Bunch of changes from the team, while warming engines for the
      upcoming SRIOV support.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 171bb2c560f45c0427ca3776a4c8f4e26e559400
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:16 2015 +0300

      net/mlx5_core: Update health syndromes

      Update new health monitored syndromes and their descriptions.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 78ccb25861d76a8fc5c678d762180e6918834200
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:15 2015 +0300

      net/mlx5_core: Fix wrong name in struct

      The name refers to syndrome so uset ext_synd instread of ext_sync.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a31208b1e11df334d443ec8cace7636150bb8ce2
  Author: Majd Dibbiny <majd@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:14 2015 +0300

      net/mlx5_core: New init and exit flow for mlx5_core

      In the new flow, we separate the pci initialization and teardown from the
      initialization and teardown of the other resources.

      init_one calls mlx5_pci_init that handles the pci resources 
initialization.
      It then calls mlx5_load_one to initialize the remainder of the resources.

      When removing a device, remove_one is invoked. However, now remove_one
      calls mlx5_unload_one to free all the resources except the pci resources.
      When mlx5_unload_one returns, mlx5_pci_close is called to free the pci
      resources.

      The above separation will allow us to implement the pci error handlers and
      suspend and resume callbacks.

      Signed-off-by: Majd Dibbiny <majd@xxxxxxxxxxxx>
      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a8ffe63e60dde2f2f05fa92dad48f6106d62f9a3
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:13 2015 +0300

      net/mlx5_core: Fix notification of page supplement error

      Some errors did not result with notifying firmware that the page request
      could not be fulfilled. Fix this and put the notification logic into a
      separate function.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit be87544de8df2b1eb34bcb5e32691287d96f9ec4
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:12 2015 +0300

      net/mlx5_core: Fix async commands return code

      In case of async command completion, the error code returned should take
      into account the command completion status.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6c3dbd2d722a6010010ad99a6890a56178385bb8
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:11 2015 +0300

      net/mlx5_core: Remove redundant "err" variable usage

      Cosmetic change.
      Do not use the an err variable just to assign and return it.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 97909302f9739c4c5664bc6fc19237ec19d53c02
  Author: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:10 2015 +0300

      net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands

      Used the output mailbox format for input mailbox.

      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 343b29f308d0a9c12579feec9d244ffc53ae99c3
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:09 2015 +0300

      net/mlx5e: Priv state flag not rolled-back upon netdev open error

      The private mlx5 state flag that indicates that the netdev is
      opened is set at the beginning of the netdev open flow.
      In case an error occured later in the mlx5 netdev open flow, this
      flag was not cleared, remaining set although the actual set is
      closed.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4de61ba234c0d5834bfec1cbe180008b9d2e1827
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Fri Sep 25 08:45:43 2015 +0200

      tools: bpf_jit_disasm: make get_last_jit_image return unsigned

      The function returns always non-negative values.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7c85af8810448d8ef59331be51e482413b5f503d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Sep 24 17:16:05 2015 -0700

      tcp: avoid reorders for TFO passive connections

      We found that a TCP Fast Open passive connection was vulnerable
      to reorders, as the exchange might look like

      [1] C -> S S <FO ...> <request>
      [2] S -> C S. ack request <options>
      [3] S -> C . <answer>

      packets [2] and [3] can be generated at almost the same time.

      If C receives the 3rd packet before the 2nd, it will drop it as
      the socket is in SYN_SENT state and expects a SYNACK.

      S will have to retransmit the answer.

      Current OOO avoidance in linux is defeated because SYNACK
      packets are attached to the LISTEN socket, while DATA packets
      are attached to the children. They might be sent by different cpus,
      and different TX queues might be selected.

      It turns out that for TFO, we created a child, which is a
      full blown socket in TCP_SYN_RECV state, and we simply can attach
      the SYNACK packet to this socket.

      This means that at the time tcp_sendmsg() pushes DATA packet,
      skb->ooo_okay will be set iff the SYNACK packet had been sent
      and TX completed.

      This removes the reorder source at the host level.

      We also removed the export of tcp_try_fastopen(), as it is no
      longer called from IPv6.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 51359bfc5b7111cada4d10e71b4dcdd1085e1a8f
  Merge: 43ae93a 635682a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 21:03:40 2015 -0700

      Merge branch 'sctp-accept-deadlock'

      Karl Heiss says:

      ====================
      sctp: Fix SCTP deadlock

      These patches fix a deadlock during accept() of an SCTP connection.

      The first patch fixes whitespace issues.

      The second patch actually fixes the deadlock race.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 635682a14427d241bab7bbdeebb48a7d7b91638e
  Author: Karl Heiss <kheiss@xxxxxxxxx>
  Date:   Thu Sep 24 12:15:07 2015 -0400

      sctp: Prevent soft lockup when sctp_accept() is called during a timeout 
event

      A case can occur when sctp_accept() is called by the user during
      a heartbeat timeout event after the 4-way handshake.  Since
      sctp_assoc_migrate() changes both assoc->base.sk and assoc->ep, the
      bh_sock_lock in sctp_generate_heartbeat_event() will be taken with
      the listening socket but released with the new association socket.
      The result is a deadlock on any future attempts to take the listening
      socket lock.

      Note that this race can occur with other SCTP timeouts that take
      the bh_lock_sock() in the event sctp_accept() is called.

       BUG: soft lockup - CPU#9 stuck for 67s! [swapper:0]
       ...
       RIP: 0010:[<ffffffff8152d48e>]  [<ffffffff8152d48e>] _spin_lock+0x1e/0x30
       RSP: 0018:ffff880028323b20  EFLAGS: 00000206
       RAX: 0000000000000002 RBX: ffff880028323b20 RCX: 0000000000000000
       RDX: 0000000000000000 RSI: ffff880028323be0 RDI: ffff8804632c4b48
       RBP: ffffffff8100bb93 R08: 0000000000000000 R09: 0000000000000000
       R10: ffff880610662280 R11: 0000000000000100 R12: ffff880028323aa0
       R13: ffff8804383c3880 R14: ffff880028323a90 R15: ffffffff81534225
       FS:  0000000000000000(0000) GS:ffff880028320000(0000) 
knlGS:0000000000000000
       CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
       CR2: 00000000006df528 CR3: 0000000001a85000 CR4: 00000000000006e0
       DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
       DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
       Process swapper (pid: 0, threadinfo ffff880616b70000, task 
ffff880616b6cab0)
       Stack:
       ffff880028323c40 ffffffffa01c2582 ffff880614cfb020 0000000000000000
       <d> 0100000000000000 00000014383a6c44 ffff8804383c3880 ffff880614e93c00
       <d> ffff880614e93c00 0000000000000000 ffff8804632c4b00 ffff8804383c38b8
       Call Trace:
       <IRQ>
       [<ffffffffa01c2582>] ? sctp_rcv+0x492/0xa10 [sctp]
       [<ffffffff8148c559>] ? nf_iterate+0x69/0xb0
       [<ffffffff814974a0>] ? ip_local_deliver_finish+0x0/0x2d0
       [<ffffffff8148c716>] ? nf_hook_slow+0x76/0x120
       [<ffffffff814974a0>] ? ip_local_deliver_finish+0x0/0x2d0
       [<ffffffff8149757d>] ? ip_local_deliver_finish+0xdd/0x2d0
       [<ffffffff81497808>] ? ip_local_deliver+0x98/0xa0
       [<ffffffff81496ccd>] ? ip_rcv_finish+0x12d/0x440
       [<ffffffff81497255>] ? ip_rcv+0x275/0x350
       [<ffffffff8145cfeb>] ? __netif_receive_skb+0x4ab/0x750
       ...

      With lockdep debugging:

       =====================================
       [ BUG: bad unlock balance detected! ]
       -------------------------------------
       CslRx/12087 is trying to release lock (slock-AF_INET) at:
       [<ffffffffa01bcae0>] sctp_generate_timeout_event+0x40/0xe0 [sctp]
       but there are no more locks to release!

       other info that might help us debug this:
       2 locks held by CslRx/12087:
       #0:  (&asoc->timers[i]){+.-...}, at: [<ffffffff8108ce1f>] 
run_timer_softirq+0x16f/0x3e0
       #1:  (slock-AF_INET){+.-...}, at: [<ffffffffa01bcac3>] 
sctp_generate_timeout_event+0x23/0xe0 [sctp]

      Ensure the socket taken is also the same one that is released by
      saving a copy of the socket before entering the timeout event
      critical section.

      Signed-off-by: Karl Heiss <kheiss@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f05940e61845951517eda02a28ccc091888aaab9
  Author: Karl Heiss <kheiss@xxxxxxxxx>
  Date:   Thu Sep 24 12:15:06 2015 -0400

      sctp: Whitespace fix

      Fix indentation in sctp_generate_heartbeat_event.

      Signed-off-by: Karl Heiss <kheiss@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 43ae93a93e8c95c5e6389dc8e11704712b1ab2e9
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 17:31:26 2015 -0700

      i40e/i40evf: check for stopped admin queue

      It's possible that while we are waiting for the spinlock, another
      entity (that owns the spinlock) has shut down the admin queue.
      If we then attempt to use the queue, we will panic.

      Add a check for this condition on the receive side. This matches
      an existing check on the send queue side.

      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c4bbac3913c0d649898a0d767728a585869a7d7d
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 11:21:48 2015 -0700

      i40e: fix VLAN inside VXLAN

      Previously to this patch, the hardware was removing
      VLAN tags from the inner header of VXLAN packets.  The
      hardware configuration can be changed to leave the
      packet alone since that is what the linux stack
      expects for this type of VLAN in VXLAN packet.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eae93fe4ff88ec0979a00c440a1aa63f92c8f367
  Merge: 34c2d9f cbfe360
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 20:56:02 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-28

      This series contains updates to i40e, i40evf and igb to resolve issues
      seen and reported by Red Hat.

      Kiran moves i40e_get_head() in preparation for the refactor of the Tx
      timeout logic, so that it can be used in other areas of the driver.
      Refactored the driver timeout logic by issuing a writeback request via
      a software interrupt to the hardware the first time the driver detects
      a hang.  This was due to the driver being too aggressive in resetting a
      hung queue.

      Shannon adds the GRE protocol to the transmit checksum encoding.

      Anjali fixes an issue of forcing writeback too often, which caused us to
      not benefit from NAPI.  We now disable force writeback in the clean
      routine for X710 and XL710 adapters.  The X722 adapters do not enable
      interrupt to force a writeback and benefit from WB_ON_ITR and so force
      WB is left enabled for those adapters.  Fixed a possible deadlock issue
      where sync_vsi_filters() can be called directly under RTNL or through
      the timer subtask without RTNL.  So update the flow to see if we are
      already under RTNL before trying to grab it.

      Stefan Assmann provides a fix for igb where SR-IOV was not getting
      enabled properly and we ran into a NULL pointer if the max_vfs module
      parameter is specified.  This is prevented by setting the
      IGB_FLAG_HAS_MSIX bit before calling igb_probe_vfs().

      v2: added "i40e: Fix for recursive RTNL lock during PROMISC change" patch
          to the series, as it resolves another issues seen and reported by
          Red Hat.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cbfe360a1541a32e9e28f8f8ac925d2b7979d767
  Author: Stefan Assmann <sassmann@xxxxxxxxx>
  Date:   Thu Sep 17 14:46:10 2015 +0200

      igb: assume MSI-X interrupts during initialization

      In igb_sw_init() the sequence of calls was changed from
      igb_init_queue_configuration()
      igb_init_interrupt_scheme()
      igb_probe_vfs()
      to
      igb_probe_vfs()
      igb_init_queue_configuration()
      igb_init_interrupt_scheme()

      This results in adapter->flags not having the IGB_FLAG_HAS_MSIX bit set
      during igb_probe_vfs()->igb_enable_sriov(). Therefore SR-IOV does not
      get enabled properly and we run into a NULL pointer if the max_vfs
      module parameter is specified (adapter->vf_data does not get allocated,
      crash on accessing the structure).

      [    7.419348] BUG: unable to handle kernel NULL pointer dereference at 
0000000000000048
      [    7.419367] IP: [<ffffffffa02161c6>] igb_reset+0xe6/0x5d0 [igb]
      [    7.419370] PGD 0
      [    7.419373] Oops: 0002 [#1] SMP
      [    7.419381] Modules linked in: ahci(+) libahci igb(+) i40e(+) vxlan 
ip6_udp_tunnel udp_tunnel megaraid_sas(+) ixgbe(+) mdio
      [    7.419385] CPU: 0 PID: 4 Comm: kworker/0:0 Not tainted 4.2.0+ #153
      [    7.419387] Hardware name: Dell Inc. PowerEdge R720/0C4Y3R, BIOS 1.6.0 
03/07/2013
      [...]
      [    7.419431] Call Trace:
      [    7.419442]  [<ffffffffa0217236>] igb_probe+0x8b6/0x1340 [igb]
      [    7.419447]  [<ffffffff814c7f15>] local_pci_probe+0x45/0xa0

      Prevent this by setting the IGB_FLAG_HAS_MSIX bit before calling
      igb_probe_vfs(). The real interrupt capabilities will be checked during
      igb_init_interrupt_scheme() so this is safe to do.

      Signed-off-by: Stefan Assmann <sassmann@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 56e86dd4bbeb66a7ad67e20fa045c6f51b4da571
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Aug 20 01:25:20 2015 +0000

      ARM: shmobile: r8a7791 dtsi: Add CPG/MSTP Clock Domain for sound

      797a0626e08c ("ARM: shmobile: r8a7791 dtsi: Add CPG/MSTP Clock Domain")
      added CPG/MSTP clock-cells domain support, but it was missing sound
      support. This patch adds it.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Tested-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      [horms: updated commit id referred to in changelog]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit 6507c4efd2ca4a3dccedbc5b4724f9faabf97fca
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Aug 20 01:24:44 2015 +0000

      ARM: shmobile: r8a7790 dtsi: Add CPG/MSTP Clock Domain for sound

      484adb005886 ("ARM: shmobile: r8a7790 dtsi: Add CPG/MSTP Clock Domain")
      added CPG/MSTP clock-cells domain support, but it was missing sound
      support. This patch adds it.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Tested-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      [horms: Updated commit id referred to in changelog]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit 30e2561b95295258890b4e0366ce867e04d34a97
  Author: Anjali Singhai <anjali.singhai@xxxxxxxxx>
  Date:   Mon Sep 28 13:37:12 2015 -0700

      i40e: Fix for recursive RTNL lock during PROMISC change

      The sync_vsi_filters function can be called directly under RTNL
      or through the timer subtask without one. This was causing a deadlock.

      If sync_vsi_filters is called from a thread which held the lock,
      and in another thread the PROMISC setting got changed we would
      be executing the PROMISC change in the thread which already held
      the lock alongside the other filter update. The PROMISC change
      requires a reset if we are on a VEB, which requires it to be called
      under RTNL.

      Earlier the driver would call reset for PROMISC change without
      checking if we were already under RTNL and would try to grab it
      causing a deadlock. This patch changes the flow to see if we are
      already under RTNL before trying to grab it.

      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Signed-off-by: Kiran Patil <kiran.patil@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5804474311912c1b80601a1afee052e8df962cd4
  Author: Anjali Singhai <anjali.singhai@xxxxxxxxx>
  Date:   Fri Sep 25 18:26:13 2015 -0700

      i40e: Fix RS bit update in Tx path and disable force WB workaround

      This patch fixes the issue of forcing WB too often causing us to not
      benefit from NAPI.

      Without this patch we were forcing WB/arming interrupt too often taking
      away the benefits of NAPI and causing a performance impact.

      With this patch we disable force WB in the clean routine for X710
      and XL710 adapters. X722 adapters do not enable interrupt to force
      a WB and benefit from WB_ON_ITR and hence force WB is left enabled
      for those adapters.
      For XL710 and X710 adapters if we have less than 4 packets pending
      a software Interrupt triggered from service task will force a WB.

      This patch also changes the conditions for setting RS bit as described
      in code comments. This optimizes when the HW does a tail bump and when
      it does a WB. It also optimizes when we do a wmb.

      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c1d1791dc8b2a13c316a4e163552804361a786a4
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Sep 25 19:26:04 2015 +0000

      i40e: add GRE tunnel type to csum encoding

      Make sure the Tx checksum encoder knows about GRE protocol and sets the
      descriptor flag appropriately.

      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit b03a8c1f4c0c6f95f5addaf4a13dd3aa118c3c1a
  Author: Kiran Patil <kiran.patil@xxxxxxxxx>
  Date:   Thu Sep 24 18:13:15 2015 -0400

      i40e/i40evf: refactor tx timeout logic

      This patch modifies the driver timeout logic by issuing a writeback
      request via a software interrupt to the hardware the first time the
      driver detects a hang. The driver was too aggressive in resetting a hung
      queue, so back that off by removing logic to down the netdevice after
      too many hangs, and move the function to the service task.

      Change-ID: Ife100b9d124cd08cbdb81ab659008c1b9abbedea
      Signed-off-by: Kiran Patil <kiran.patil@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1e6d6f8c1b07a5874444c3a403eb24427e8b39d3
  Author: Kiran Patil <kiran.patil@xxxxxxxxx>
  Date:   Thu Sep 24 15:43:02 2015 -0400

      i40e: Move i40e_get_head into header file

      i40e_get_head needs to be called in multiple files in a further patch,
      prepare by moving the function into a header file.

      Signed-off-by: Kiran Patil <kiran.patil@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 22ef28b43f2c70edf5618918a49cbda84795c0a5
  Author: duson <dusonlin@xxxxxxxxxx>
  Date:   Mon Sep 28 17:17:01 2015 -0700

      Input: elan_i2c - add all valid ic type for i2c/smbus

      Signed-off-by: Duson Lin <dusonlin@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit d3b367bc26ea2e07a83fe73f0ccbddd729cb1f9a
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 16:38:07 2015 -0700

      Input: zhenhua - ensure we have BITREVERSE

      It uses bitrev8(), so it must ensure that lib/bitrev.o gets included in
      vmlinux.

      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit a73b4db2a23f0bf9f98b0cb59fb1b8da26959be3
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Sep 28 15:57:24 2015 +0100

      arm-cci500: Don't enable PMU driver by default

      Disable building CCI-500 PMU driver by default.

      Reported-by: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Punit Agrawal <punit.agrawal@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: arm@xxxxxxxxxx
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit cb311494bbf08c531c4d019513f0999ea2a251f2
  Merge: 9ffecb1 0af8221
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Mon Sep 28 16:30:19 2015 -0700

      Merge tag 'imx-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux into fixes

      The i.MX fixes for 4.3:
       - One fix for i.MX6 Rex Pro board to remove a duplicated pinctrl entry
         which causes error for USB pinctrl setup.
       - Fix MC34708 PMIC interrupt level for imx53-qsrb board.

      * tag 'imx-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux:
        ARM: dts: fix usb pin control for imx-rex dts
        ARM: imx53: qsrb: fix PMIC interrupt level
        ARM: imx53: include IRQ dt-bindings header

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit d79bdc7f004404204a6ac07785f8d6717070ecdb
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Mon Sep 28 15:59:22 2015 -0700

      Input: omap4-keypad - fix memory leak

      If omap4_keypad_parse_dt() fails we returned the error code but we
      missed releasing keypad_data.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit e637d17757a10732fa5d573c18f20b3cd4d31245
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Mon Sep 28 03:52:16 2015 +0000

      perf tools: Enable event_config terms to tracepoint events

      This patch enables config terms for tracepoint perf events. Valid terms
      for tracepoint events are 'call-graph' and 'stack-size', so we can use
      different callgraph settings for each event and eliminate unnecessary
      overhead.

      Here is an example for using different call-graph config for each
      tracepoint.

        $ perf record -e syscalls:sys_enter_write/call-graph=fp/
                      -e syscalls:sys_exit_write/call-graph=no/
                      dd if=/dev/zero of=test bs=4k count=10

        $ perf report --stdio

        #
        # Total Lost Samples: 0
        #
        # Samples: 13  of event 'syscalls:sys_enter_write'
        # Event count (approx.): 13
        #
        # Children      Self  Command  Shared Object       Symbol
        # ........  ........  .......  ..................  
......................
        #
            76.92%    76.92%  dd       libpthread-2.20.so  [.] __write_nocancel
                         |
                         ---__write_nocancel

            23.08%    23.08%  dd       libc-2.20.so        [.] write
                         |
                         ---write
                            |
                            |--33.33%-- 0x2031342820736574
                            |
                            |--33.33%-- 0xa6e69207364726f
                            |
                             --33.33%-- 0x34202c7320393039
        ...

        # Samples: 13  of event 'syscalls:sys_exit_write'
        # Event count (approx.): 13
        #
        # Children      Self  Command  Shared Object       Symbol
        # ........  ........  .......  ..................  
......................
        #
            76.92%    76.92%  dd       libpthread-2.20.so  [.] __write_nocancel
            23.08%    23.08%  dd       libc-2.20.so        [.] write
             7.69%     0.00%  dd       [unknown]           [.] 
0x0a6e69207364726f
             7.69%     0.00%  dd       [unknown]           [.] 
0x2031342820736574
             7.69%     0.00%  dd       [unknown]           [.] 
0x34202c7320393039

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1443412336-120050-4-git-send-email-hekuang@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 865582c3f48e12b7ab9e260161868313e4a37f44
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Mon Sep 28 03:52:15 2015 +0000

      perf tools: Adds the tracepoint name parsing support

      Adds rules for parsing tracepoint names. Change rules of tracepoint which
      derives from PE_NAMEs into tracepoint names directly, so adding more rules
      based on tracepoint names will be easier.

      Changes v2-v3:
         - Change __event_legacy_tracepoint label in bison file to 
tracepoint_name
         - Fix formats error.

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1443412336-120050-3-git-send-email-hekuang@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ffeb883e5662e94b14948078e85812261277ad67
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Mon Sep 28 03:52:14 2015 +0000

      perf tools: Show proper error message for wrong terms of hw/sw events

      Show proper error message and show valid terms when wrong config terms
      is specified for hw/sw type perf events.

      This patch makes the original error format function formats_error_string()
      more generic, which only outputs the static config terms for hw/sw perf
      events, and prepends pmu formats for pmu events.

      Before this patch:

        $ perf record -e 'cpu-clock/freqx=200/' -a sleep 1
        invalid or unsupported event: 'cpu-clock/freqx=200/'
        Run 'perf list' for a list of valid events

         usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events

      After this patch:

        $ perf record -e 'cpu-clock/freqx=200/' -a sleep 1
        event syntax error: 'cpu-clock/freqx=200/'
                                       \___ unknown term

        valid terms: 
config,config1,config2,name,period,freq,branch_type,time,call-graph,stack-size

        Run 'perf list' for a list of valid events

         usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1443412336-120050-2-git-send-email-hekuang@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0b8891a8e62cb537b65ebc55cfbbb4ec22333c44
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Mon Sep 28 03:52:13 2015 +0000

      perf tools: Adds the config_term callback for different type events

      Currently, function config_term() is used for checking config terms of
      all types of events, while unknown terms is not reported as an error
      because pmu events have valid terms in sysfs.

      But this is wrong when unknown terms are specificed to hw/sw events.
      This patch Adds the config_term callback so we can use separate check
      routines for each type of events.

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1443412336-120050-1-git-send-email-hekuang@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ba11ba65e02836c475427ae199adfc2d8cc4a900
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:56 2015 +0300

      perf intel-pt: Add mispred-all config option to aid use with autofdo

      autofdo incorrectly expects branch flags to include either mispred or
      predicted.  In fact mispred = predicted = 0 is valid and means the flags
      are not supported, which they aren't by Intel PT.

      To make autofdo work, add a config option which will cause Intel PT
      decoder to set the mispred flag on all branches.

      Below is an example of using Intel PT with autofdo.  The example is
      also added to the Intel PT documentation.  It requires autofdo
      (https://github.com/google/autofdo) and gcc version 5.  The bubble
      sort example is from the AutoFDO tutorial 
(https://gcc.gnu.org/wiki/AutoFDO/Tutorial)
      amended to take the number of elements as a parameter.

        $ gcc-5 -O3 sort.c -o sort_optimized
        $ ./sort_optimized 30000
        Bubble sorting array of 30000 elements
        2254 ms

        $ cat ~/.perfconfig
        [intel-pt]
                mispred-all

        $ perf record -e intel_pt//u ./sort 3000
        Bubble sorting array of 3000 elements
        58 ms
        [ perf record: Woken up 2 times to write data ]
        [ perf record: Captured and wrote 3.939 MB perf.data ]
        $ perf inject -i perf.data -o inj --itrace=i100usle --strip
        $ ./create_gcov --binary=./sort --profile=inj --gcov=sort.gcov 
-gcov_version=1
        $ gcc-5 -O3 -fauto-profile=sort.gcov sort.c -o sort_autofdo
        $ ./sort_autofdo 30000
        Bubble sorting array of 30000 elements
        2155 ms

      Note there is currently no advantage to using Intel PT instead of LBR,
      but that may change in the future if greater use is made of the data.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-26-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f56fb9864c501dc85ebe40af5bf925dd07d990c0
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:55 2015 +0300

      perf inject: Add --strip option to strip out non-synthesized events

      Add a new option --strip which is used with --itrace to strip out
      non-synthesized events.  This results in a perf.data file that is
      simpler for external tools to parse.  In particular, this can be used to
      prepare a perf.data file for consumption by autofdo.

      A subsequent patch makes a change to Intel PT also to enable use with
      autofdo and gives an example of that use.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-25-git-send-email-adrian.hunter@xxxxxxxxx
      [ Made it use perf_evlist__remove() + perf_evsel__delete() ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 73117308f953afb60a1383725b7d5372feeb2433
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:54 2015 +0300

      perf inject: Remove more aux-related stuff when processing instruction 
traces

      perf inject can process instruction traces (using the --itrace option)
      which removes aux-related events and replaces them with the requested
      synthesized events.

      However there are still some leftovers, namely PERF_RECORD_ITRACE_START
      events and the original evsel (selected event) e.g. intel_pt//

      For the sake of completeness, remove them too.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-24-git-send-email-adrian.hunter@xxxxxxxxx
      [ Made it use perf_evlist__remove() + perf_evsel__delete() ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4768230ad57d4e4fc6d36c44e98e0062c89b0dc0
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:53 2015 +0300

      perf evlist: Add perf_evlist__remove()

      Add a counterpart to perf_evlist__add() that does the opposite and
      deletes the evsel.

      This will be used by perf inject to remove unwanted evsels.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-23-git-send-email-adrian.hunter@xxxxxxxxx
      [ Renamed it from perf_evlist__del() to perf_evlist__remove() and removed 
the perf_evsel__delete() call ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dddcf6abbf5946f9ec1183dd2099cede6dbe12fc
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:52 2015 +0300

      perf evlist: Add perf_evlist__id2evsel_strict()

      perf_evlist__id2evsel_strict() is the same as perf_evlist__id2evsel()
      except that it ensures that the id must match.

      This will be used by perf inject to find a specific evsel that is to be
      deleted, hence the need to match exactly.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-22-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3c5b645faee7afbd417f6127694adbd26778a9eb
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:51 2015 +0300

      perf script: Make scripting_max_stack value allow for synthesized 
callchains

      perf script has a setting to set the maximum stack depth when processing
      callchains.  The setting defaults to the hard-coded maximum definition
      PERF_MAX_STACK_DEPTH which is 127.

      It is possible, when processing instruction traces, to synthesize
      callchains.  Synthesized callchains do not have the kernel size
      limitation and are whatever size the user requests, although validation
      presently prevents the user requested a value greater that 1024.  The
      default value is 16.

      To allow for synthesized callchains, make the scripting_max_stack value
      at least the same size as the synthesized callchain size.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-21-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 44cbe7295c3808977159f500a5bcdebf12a7db5f
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:50 2015 +0300

      perf scripting python: Allow for max_stack greater than 
PERF_MAX_STACK_DEPTH

      Use the scripting_max_stack value to allow for values greater than
      PERF_MAX_STACK_DEPTH.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-20-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 03cd1fed2b8730271d3a8dbabd87989abddc33c4
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:49 2015 +0300

      perf script: Add a setting for maximum stack depth

      Add a setting for maximum stack depth in preparation for allowing for
      synthesized callchains.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-19-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 96b40f3c05f36e061fd4dde920b9e9c795a88b69
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:47 2015 +0300

      perf hists: Allow for max_stack greater than PERF_MAX_STACK_DEPTH

      Use the max_stack value instead of PERF_MAX_STACK_DEPTH so that
      arbitrary-sized callchains can be supported.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-17-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 188bb5e2ce112463428994f91291e5df6fc05521
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:46 2015 +0300

      perf report: Make max_stack value allow for synthesized callchains

      perf report has an option (--max-stack) to set the maximum stack depth
      when processing callchains.  The option defaults to the hard-coded
      maximum definition PERF_MAX_STACK_DEPTH which is 127.  The intention of
      the option is to allow the user to reduce the processing time by
      reducing the amount of the callchain that is processed.

      It is also possible, when processing instruction traces, to synthesize
      callchains.  Synthesized callchains do not have the kernel size
      limitation and are whatever size the user requests, although validation
      presently prevents the user requested a value greater that 1024.  The
      default value is 16.

      To allow for synthesized callchains, make the max_stack value at least
      the same size as the synthesized callchain size.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-16-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f14445ee72c59f32aa5cbf4d0f0330a5f62a752d
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:45 2015 +0300

      perf intel-pt: Support generating branch stack

      Add support for generating branch stack context for PT samples.  The
      decoder reports a configurable number of branches as branch context for
      each sample. Internally it keeps track of them by using a simple sliding
      window.  We also flush the last branch buffer on each sample to avoid
      overlapping intervals.

      This is useful for:

      - Reporting accurate basic block edge frequencies through the perf
        report branch view
      - Using with --branch-history to get the wider context of samples
      - Other users of LBRs

      Also the Documentation is updated.

      Examples:

        Record with Intel PT:

                perf record -e intel_pt//u ls

        Branch stacks are used by default if synthesized so:

                perf report --itrace=ile

        is the same as:

                perf report --itrace=ile -b

        Branch history can be requested also:

                perf report --itrace=igle --branch-history

      Based-on-patch-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-15-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 385e33063fb963f5cccb0a37fe539319b6481fa5
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:44 2015 +0300

      perf intel-pt: Move branch filter logic

      intel_pt_synth_branch_sample() skips synthesizing if the branch does not
      match the branch filter.  That logic was sitting in the middle of the
      function but is more efficiently placed at the start of the function, so
      move it.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-14-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 051a01b9a2c1c1ef3049973a43d9ed4ddcc946f3
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:43 2015 +0300

      perf inject: Set branch stack feature flag when synthesizing branch stacks

      The branch stack feature flag is set by 'perf record' when recording
      data that contains branch stacks.  Consequently, when 'perf inject'
      synthesizes branch stacks, the feature flag should be set also.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-13-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f86225db3aa0e394915af45eea1c3cca6f3e2dba
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:42 2015 +0300

      perf report: Skip events with null branch stacks

      A non-synthesized event might not have a branch stack if branch stacks
      have been synthesized (using itrace options).

      An example of that is when Intel PT records sched_switch events for
      decoding purposes.  Those sched_switch events do not have branch stacks
      even though the Intel PT decoder may be synthesizing other events that
      do due to the itrace options.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-12-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fb9fab66e6e3ee737e521c899684c6d684b24a22
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:41 2015 +0300

      perf report: Also do default setup for synthesized branch stacks

      The 'perf report' tool will default to displaying branch stacks (-b
      option) if they are present.  Make that also happen for synthesized
      branch stacks.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-11-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c7eced63f2f67bd06ceb2269062416db9d81d29d
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:40 2015 +0300

      perf report: Adjust sample type validation for synthesized branch stacks

      perf report looks at event sample types to determine if branch stacks
      have been sampled.  Adjust the validation to know about instruction
      tracing options.

      This change allows the use of the -b option which otherwise would
      complain with an error like:

        Error:
        Selected -b but no branch data. Did you call perf record without -b?
        # To display the perf.data header info,
        # please use --header/--header-only options.
        #

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-10-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 601897b54c7ed492a89b262dccd7c6f7faf12b30
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:39 2015 +0300

      perf auxtrace: Add option to synthesize branch stacks on samples

      Add AUX area tracing option 'l' to synthesize branch stacks on samples
      just like sample type PERF_SAMPLE_BRANCH_STACK.  This is taken into use
      by Intel PT in a subsequent patch.

      Based-on-patch-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-9-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 35ca01c117da9b8e5b60204f730cdde414735596
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:38 2015 +0300

      perf tools: Add more documentation to export-to-postgresql.py script

      Add some comments to the script and some 'views' to the created database
      that better illustrate the database structure and how it can be used.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-8-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a38f48e300f9dac30a9b2d2ce958c8dbd7def351
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:37 2015 +0300

      perf session: Warn when AUX data has been lost

      By default 'perf record' will postprocess the perf.data file to
      determine build-ids.  When that happens, the number of lost perf events
      is displayed.

      Make that also happen for AUX events.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-7-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 83e1986032dfcd3f9e9fc0d06e11d9153edae19b
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:36 2015 +0300

      perf script: Allow time to be displayed in nanoseconds

      Add option --ns to display time to 9 decimal places.  That is useful in
      some cases, for example when using Intel PT cycle accurate mode.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-6-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 116f349c5bf8c7aec4047dd6e06c310354b46e4f
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:35 2015 +0300

      perf intel-pt: Make logging slightly more efficient

      Logging is only used for debugging. Use macros to save calling into the
      functions only to return immediately when logging is not enabled.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-5-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9992c2d50a73f442653968a98a9e5f3bf4e769e9
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:34 2015 +0300

      perf intel-pt: Fix potential loop forever

      TSC packets contain only 7 bytes of TSC.  The 8th byte is assumed to
      change so infrequently that its value can be inferred.  However the
      logic must cater for a 7 byte wraparound, which it does by adding 1 to
      the top byte.

      The existing code was doing that with a while loop even though the
      addition should only need to be done once.  That logic won't work (will
      loop forever) if TSC wraps around at the 8th byte.  Theoretically that
      would take at least 10 years, unless something else went wrong.

      And what else could go wrong.  Well, if the chunks of trace data are
      processed out of order, it will make it look like the 7-byte TSC has
      gone backwards (i.e. wrapped).  If that happens 256 times then stuck in
      the while loop it will be.

      Fix that by getting rid of the unnecessary while loop.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-4-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d062ac16f53d1a24047bcc9eded5514a71c363b8
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:33 2015 +0300

      perf report: Fix sample type validation for synthesized callchains

      Processing instruction tracing data (e.g. Intel PT) can synthesize
      callchains e.g.

        $ perf record -e intel_pt//u uname
        $ perf report --stdio --itrace=ige

      However perf report's callgraph option gets extra validation, so:

        $ perf report --stdio --itrace=ige -gflat
        Error:
        Selected -g or --branch-history but no callchain data. Did
        you call 'perf record' without -g?
        # To display the perf.data header info,
        # please use --header/--header-only options.
        #

      Fix the validation to know about instruction tracing options so
      above command works.

      A side-effect of the change is that the default option to
      accumulate the callchain of child functions comes into force.
      To get the previous behaviour the --no-children option can be
      used e.g.

             $ perf report --stdio --itrace=ige -gflat --no-children

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e1791347b5d57d13326cf0114df1a3f3b1c4ca24
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:32 2015 +0300

      perf auxtrace: Fix 'instructions' period of zero

      Instruction tracing options (i.e. --itrace) include an option for
      sampling instructions at an arbitrary period. e.g.

        --itrace=i10us

      means make an 'instructions' sample for every 10us of trace.

      Currently the logic does not distinguish between a period of
      zero and no period being specified at all, so it gets treated
      as the default period which is 100000.  That doesn't really
      make sense.

      Fix it so that zero period is accepted and treated as meaning
      "as often as possible".

      In the case of Intel PT that is the same as a period of 1 and
      a unit of 'instructions' (i.e. --itrace=i1i).

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-2-git-send-email-adrian.hunter@xxxxxxxxx
      [ Add a few lines describing this in the Documentation/intel-pt.txt file ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7c422f5572667fef0db38d2046ecce69dcf0afc8
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:34:02 2015 +0200

      tools build: Build fixdep helper from perf and basic libs

      Adding the fixdep target into the Makefile.include to ease up building of
      fixdep helper, that needs to be built before we dive in to the build 
itself.
      The user can invoke the fixdep target to build the helper.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-8-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 324c824ade1cad094a21e6177b9aa7977146feeb
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:34:01 2015 +0200

      perf tools: Rename the 'single_dep' target to 'prepare'

      And use the new 'prepare' target for the $(PERF_IN) target.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-7-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9fb81323eb3085b6a47fe81d78541958ae7eaea3
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:34:00 2015 +0200

      tools build: Make the fixdep helper part of the build process

      Making the fixdep helper to be invoked within dep-cmd.

      Each user of the build framework needs to make sure fixdep exists before
      executing the build itself.

      If the build doesn't find fixdep, it falls back to the old style
      dependency tracking.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-6-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 275e2d95591e2714d6b541d4e26959381d6b2705
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:33:59 2015 +0200

      tools build: Move dependency copy into function

      So it's easier to add more functionality in the following commit.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-5-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9f7ef9854e800bc3bab3d9a527e8f8f960eec1a6
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:33:58 2015 +0200

      tools build: Add fixdep dependency helper

      For dependency tracking we currently use targets that fall out of the
      gcc -MD command. We store this info in the .cmd file and include as
      makefile during the build.

      This format put object as target and all the c and header files as
      dependencies, like:

        util/abspath.o: util/abspath.c /usr/include/stdc-predef.h util/cache.h \
         /usr/include/bits/wordsize.h /usr/include/gnu/stubs.h \
         ...

      If any of those dependency header files (krava.h below) is removed the
      build fails on:

        make[1]: *** No rule to make target 'krava.h', needed by 'inc.o'.  Stop.

      This patch adds fixdep helper, that is used by kbuild to alter the shape
      of the object dependencies like:

        source_util/abspath.o := util/abspath.c

        deps_util/abspath.o := \
          /usr/include/stdc-predef.h \
          util/cache.h \
          ...

        util/abspath.o: $(deps_util/abspath.o)

        $(deps_util/abspath.o):

      With this format the header removal won't make the build fail, because
      it'll be picked up by the last empty target defined for each header.

      As previously mentioned the fixdep tool is taken from kbuild. It's not
      complete backport, only the part that alters the standard dependency
      info was taken, the part that adds the CONFIG_* dependency logic will be
      probably taken later on.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Kai Germaschewski <kai.germaschewski@xxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0c00c3fb4e4a6ff714b7ad864f58e0fb33b3534c
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:33:57 2015 +0200

      tools build: Add test for missing include

      The current build framework fails to cope with header file removal. The
      reason is that the removed header file stays in the .cmd file target
      rule and forces the build to fail.

      This issue is fixed and explained in the following patches.

      Adding a new build test that simulates header removal.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ab6201d09b1840c7ffcd6606c1d3dae68b8b3048
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:33:56 2015 +0200

      tools build: Add Makefile.include

      To ease up build framework code setup for users.

      More shared code will be added in the following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dc240c5dc2a02e335c5bcb50ad3a1274818c8609
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sat Sep 19 16:47:07 2015 +0200

      tools lib api fs: Store tracing mountpoint for better error message

      Storing the actual tracing path mountpoint to display correct
      error message hint ('Hint:' line). The error hint rediscovers
      mountpoints, but it could be different from what we actually
      used in tracing path.

      Before we'd display debugfs mount even though tracefs was used:
        $ perf record -e sched:sched_krava ls
        event syntax error: 'sched:sched_krava'
                             \___ can't access trace events

        Error:  No permissions to read 
/sys/kernel/debug/tracing/events/sched/sched_krava
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug'
        ...

      After this change, correct mountpoint is displayed:
        $ perf record -e sched:sched_krava ls
        event syntax error: 'sched:sched_krava'
                             \___ can't access trace events

        Error:  No permissions to read 
/sys/kernel/debug/tracing/events/sched/sched_krava
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug/tracing'
        ...

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442674027-19427-1-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ab9c2bdc8947482057b81258c0128952763661cb
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 23 15:45:20 2015 -0300

      perf tools: Use __map__is_kernel() when synthesizing kernel module mmap 
records

      Equivalent and removes one more case of using dso->kernel.

        # perf record -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.768 MB perf.data (30 samples) ]

      Before:

        [root@zoo ~]# perf script --show-task --show-mmap | head -3
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: 
[0xffffffff81000000(0x1f000000) @ 0xffffffff81000000]: x [kernel.kallsyms]_text
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: [0xffffffffa0000000(0xa000) 
@ 0]: x /lib/modules/4.3.0-rc1+/kernel/drivers/acpi/video.ko
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: [0xffffffffa000a000(0x5000) 
@ 0]: x /lib/modules/4.3.0-rc1+/kernel/drivers/i2c/algos/i2c-algo-bit.ko
        #

        # perf script --show-task --show-mmap | head -3
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: 
[0xffffffff81000000(0x1f000000) @ 0xffffffff81000000]: x [kernel.kallsyms]_text
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: [0xffffffffa0000000(0xa000) 
@ 0]: x /lib/modules/4.3.0-rc1+/kernel/drivers/acpi/video.ko
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: [0xffffffffa000a000(0x5000) 
@ 0]: x /lib/modules/4.3.0-rc1+/kernel/drivers/i2c/algos/i2c-algo-bit.ko
        #

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-b65xe578dwq22mzmmj5y94wr@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 045b80dd03403b8e61a29460987c231317ebfbd4
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 23 15:38:55 2015 -0300

      perf hists browser: Use the map to determine if a DSO is being used as a 
kernel

      The map is what should say if an ELF (or some other format) image is
      being used for some particular purpose, as a kernel, host or guest.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-zufousvfar0710p4qj71c32d@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit cfc5acd4c80b875d2f739d6a93562034aee5563f
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 23 15:15:54 2015 -0300

      perf top: Filter symbols based on __map__is_kernel(map)

      Instead of using dso->kernel, this is equivalent at the moment,
      and helps in reducing the accesses to dso->kernel.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-1pc2v63iphtifovw3bv0bo1v@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 64c98e7f49100b637cd20a6c63508caed6bbba7a
  Author: Malcolm Crossley <malcolm.crossley@xxxxxxxxxx>
  Date:   Mon Sep 28 11:36:52 2015 +0100

      x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing 
map

      Sanitizing the e820 map may produce extra E820 entries which would result 
in
      the topmost E820 entries being removed. The removed entries would 
typically
      include the top E820 usable RAM region and thus result in the domain 
having
      signicantly less RAM available to it.

      Fix by allowing sanitize_e820_map to use the full size of the allocated 
E820
      array.

      Signed-off-by: Malcolm Crossley <malcolm.crossley@xxxxxxxxxx>
      Reviewed-by: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>

  commit 3225031fbeb1e32b269a82eccd815128267a4bfe
  Merge: 097f70b 3a48d13
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 12:27:18 2015 -0400

      Merge branch 'stable' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile

      Pull arch/tile bugfix from Chris Metcalf:
       "This fixes a bug in 'make allmodconfig'"

      * 'stable' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile:
        tile: fix build failure

  commit 3a48d13d76c0088a988a2e4f5b4d94872bdf58f3
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Mon Sep 7 20:06:57 2015 +0530

      tile: fix build failure

      When building with allmodconfig the build was failing with the error:

      arch/tile/kernel/usb.c:70:1: warning: data definition has no type or 
storage class [enabled by default]
      arch/tile/kernel/usb.c:70:1: error: type defaults to 'int' in declaration 
of 'arch_initcall' [-Werror=implicit-int]
      arch/tile/kernel/usb.c:70:1: warning: parameter names (without types) in 
function declaration [enabled by default]
      arch/tile/kernel/usb.c:63:19: warning: 'tilegx_usb_init' defined but not 
used [-Wunused-function]

      Include linux/module.h to resolve the build failure.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 72c021738252dde5849d575a650239d6404930ee
  Author: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 12:24:23 2015 -0500

      xprtrdma: disconnect and flush cqs before freeing buffers

      Otherwise a FRMR completion can cause a touch-after-free crash.

      In xprt_rdma_destroy(), call rpcrdma_buffer_destroy() only after calling
      rpcrdma_ep_destroy().

      In rpcrdma_ep_destroy(), disconnect the cm_id first which should flush the
      qp, then drain the cqs, then destroy the qp, and finally destroy the cqs.

      Signed-off-by: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
      Tested-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Signed-off-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>

  commit d0c9c93019e9b61f21ac22a5c23749873adc0038
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 24 13:59:27 2015 -0600

      EDAC: Don't allow empty DIMM labels

      Updating dimm_label to an empty string does not make much sense. Change
      the sysfs dimm_label store operation to fail a request when an input
      string is empty.

      Suggested-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: elliott@xxxxxxx
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/1443124767.25474.172.camel@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit dfc53c5e73f8b73abf920241e45eab87335ae742
  Author: Michel Thierry <michel.thierry@xxxxxxxxx>
  Date:   Mon Sep 28 13:25:12 2015 +0100

      drm/i915: Consider HW CSB write pointer before resetting the sw read 
pointer

      A previous commit resets the Context Status Buffer (CSB) read pointer in
      ring init
          commit c0a03a2e4c4e ("drm/i915: Reset CSB read pointer in ring init")

      This is generally correct, but this pointer is not reset after
      suspend/resume in some platforms (cht). In this case, the driver should
      read the register value instead of resetting the sw read counter to 0.
      Otherwise we process old events, leading to unwanted pre-emptions or
      something worse.

      But in other platforms (bdw) and also during GPU reset or power up, the
      CSBWP is reset to 0x7 (an invalid number), and in this case the read
      pointer should be set to 5 (the interrupt code will increment this
      counter one more time, and will start reading from CSB[0]).

      v2: When the CSB registers are reset, the read pointer needs to be set
      to 5, otherwise the first write (CSB[0]) won't be read (Mika).
      Replace magic numbers with GEN8_CSB_ENTRIES (6) and GEN8_CSB_PTR_MASK
      (0x07).

      Cc: Mika Kuoppala <mika.kuoppala@xxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.0+
      Signed-off-by: Lei Shen <lei.shen@xxxxxxxxx>
      Signed-off-by: Deepak S <deepak.s@xxxxxxxxx>
      Signed-off-by: Michel Thierry <michel.thierry@xxxxxxxxx>
      Reviewed-by: Mika Kuoppala <mika.kuoppala@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 0b34a166f291d255755be46e43ed5497cdd194f2
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Fri Sep 25 11:59:52 2015 +0200

      x86/xen: Support kexec/kdump in HVM guests by doing a soft reset

      Currently there is a number of issues preventing PVHVM Xen guests from
      doing successful kexec/kdump:

        - Bound event channels.
        - Registered vcpu_info.
        - PIRQ/emuirq mappings.
        - shared_info frame after XENMAPSPACE_shared_info operation.
        - Active grant mappings.

      Basically, newly booted kernel stumbles upon already set up Xen
      interfaces and there is no way to reestablish them. In Xen-4.7 a new
      feature called 'soft reset' is coming. A guest performing kexec/kdump
      operation is supposed to call SCHEDOP_shutdown hypercall with
      SHUTDOWN_soft_reset reason before jumping to new kernel. Hypervisor
      (with some help from toolstack) will do full domain cleanup (but
      keeping its memory and vCPU contexts intact) returning the guest to
      the state it had when it was first booted and thus allowing it to
      start over.

      Doing SHUTDOWN_soft_reset on Xen hypervisors which don't support it is
      probably OK as by default all unknown shutdown reasons cause domain
      destroy with a message in toolstack log: 'Unknown shutdown reason code
      5. Destroying domain.'  which gives a clue to what the problem is and
      eliminates false expectations.

      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>

  commit 2ecf91b6d8b0ee8ef38aa7ea2a0fe0cd57b6ca50
  Author: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
  Date:   Mon Sep 21 09:09:28 2015 -0400

      xen/x86: Don't try to write syscall-related MSRs for PV guests

      For PV guests these registers are set up by hypervisor and thus
      should not be written by the guest. The comment in xen_write_msr_safe()
      says so but we still write the MSRs, causing the hypervisor to
      print a warning.

      Signed-off-by: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>

  commit 24f775a6605a8ffc697c0767fc7ea85656ddb958
  Author: Juergen Gross <jgross@xxxxxxxx>
  Date:   Fri Sep 4 14:50:33 2015 +0200

      xen: use correct type for HYPERVISOR_memory_op()

      HYPERVISOR_memory_op() is defined to return an "int" value. This is
      wrong, as the Xen hypervisor will return "long".

      The sub-function XENMEM_maximum_reservation returns the maximum
      number of pages for the current domain. An int will overflow for a
      domain configured with 8TB of memory or more.

      Correct this by using the correct type.

      Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>

  commit 868e87ccda2461cafd4a0d39f1486eb8f4a9a6f9
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 10:31:50 2015 +0100

      ARM: make RiscPC depend on MMU

      RiscPC fails to build if MMU is disabled:

      arch/arm/mach-rpc/ecard.c: In function 'ecard_init_pgtables':
      arch/arm/mach-rpc/ecard.c:229:2: error: implicit declaration of function 
'pgd_offset' [-Werror=implicit-function-declaration]

      arrange for RiscPC to depend on MMU.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 9bac175d8ed0b1dd3d3611c0713666b724eeace3
  Author: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
  Date:   Fri Sep 18 17:54:30 2015 +0200

      Revert "KVM: x86: zero kvmclock_offset when vcpu0 initializes kvmclock 
system MSR"

      Shifting pvclock_vcpu_time_info.system_time on write to KVM system time
      MSR is a change of ABI.  Probably only 2.6.16 based SLES 10 breaks due
      to its custom enhancements to kvmclock, but KVM never declared the MSR
      only for one-shot initialization.  (Doc says that only one write is
      needed.)

      This reverts commit b7e60c5aedd2b63f16ef06fde4f81ca032211bc5.
      And adds a note to the definition of PVCLOCK_COUNTS_FROM_ZERO.

      Signed-off-by: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
      Acked-by: Marcelo Tosatti <mtosatti@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit a913718812d5998b3af2b6d6b5f0be4a09caebb1
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Mon Sep 28 08:03:24 2015 +0000

      Bluetooth: hci_qca: Changed unsigned long to bool

      'retransmit' being set in HCI_IBS_TX_WAKING case, using bool would be
      efficient. Initialize local bool to false.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 3cef072d3bbd4344823545e50d8cb240a6d4635d
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Fri Sep 11 06:28:08 2015 -0700

      watchdog: iTCO: Fix dependencies on I2C

      If I2C is built as module, the iTCO watchdog driver must be built as 
module
      as well. I2C_I801 must only be selected if I2C is configured.

      This fixes the following build errors, seen if I2C=m and ITCO_WDT=y.

      i2c-i801.c:(.text+0x2bf055): undefined reference to `i2c_del_adapter'
      i2c-i801.c:(.text+0x2c13e0): undefined reference to `i2c_add_adapter'
      i2c-i801.c:(.text+0x2c17bd): undefined reference to `i2c_new_device'

      Fixes: 2a7a0e9bf7b3 ("watchdog: iTCO_wdt: Add support for TCO on Intel 
Sunrisepoint")
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Wim Van Sebroeck <wim@xxxxxxxxx>

  commit 898e6861ff7cfc9f539b57859a27fbd1fe4298ae
  Author: Noralf Trønnes <noralf@xxxxxxxxxxx>
  Date:   Wed Jun 17 16:04:04 2015 +0200

      watchdog: bcm2835: Fix poweroff behaviour

      Currently poweroff/halt results in a reboot on the Raspberry Pi.
      The firmware uses the RSTS register to know which partiton to
      boot from. The partiton value is spread into bits
      0, 2, 4, 6, 8, 10. Partiton 63 is a special partition used by
      the firmware to indicate halt.

      The firmware made this change in 19 Aug 2013 and was matched
      by the downstream commit:
      Changes for new NOOBS multi partition booting from gsh

      Signed-off-by: Noralf Trønnes <noralf@xxxxxxxxxxx>
      Tested-by: Stephen Warren <swarren@xxxxxxxxxxxxx>
      Acked-by: Stephen Warren <swarren@xxxxxxxxxxxxx>
      Reviewed-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Wim Van Sebroeck <wim@xxxxxxxxx>

  commit c73318f43d3967e3ce810665d9c74a7d238d24d1
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 13:06:09 2015 +0200

      watchdog: Fix module autoload for OF platform driver

      These platform drivers have a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Reviewed-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Wim Van Sebroeck <wim@xxxxxxxxx>

  commit 6e06780a98f149f131d46c1108d4ae27f05a9357
  Author: Ashok Raj <ashok.raj@xxxxxxxxx>
  Date:   Mon Sep 28 09:21:43 2015 +0200

      x86/mce: Don't clear shared banks on Intel when offlining CPUs

      It is not safe to clear global MCi_CTL banks during CPU offline
      or suspend/resume operations. These MSRs are either
      thread-scoped (meaning private to a thread), or core-scoped
      (private to threads in that core only), or with a socket scope:
      visible and controllable from all threads in the socket.

      When we offline a single CPU, clearing those MCi_CTL bits will
      stop signaling for all the shared, i.e., socket-wide resources,
      such as LLC, iMC, etc.

      In addition, it might be possible to compromise the integrity of
      an Intel Secure Guard eXtentions (SGX) system if the attacker
      has control of the host system and is able to inject errors
      which would be otherwise ignored when MCi_CTL bits are cleared.

      Hence on SGX enabled systems, if MCi_CTL is cleared, SGX gets
      disabled.

      Tested-by: Serge Ayoun <serge.ayoun@xxxxxxxxx>
      Signed-off-by: Ashok Raj <ashok.raj@xxxxxxxxx>
      [ Cleanup text. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441391390-16985-1-git-send-email-ashok.raj@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0d44975d1e2791f6df2b84b182f49d815ba3c9e0
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Sat Sep 26 14:47:17 2015 +0200

      x86/kgdb: Replace bool_int_array[NR_CPUS] with bitmap

      Straigntforward conversion from:

          int was_in_debug_nmi[NR_CPUS]

      to:

          DECLARE_BITMAP(was_in_debug_nmi, NR_CPUS)

      Saves about 2 kbytes in BSS for NR_CPUS=512.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jason Wessel <jason.wessel@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443271638-2568-1-git-send-email-dvlasenk@xxxxxxxxxx
      [ Tidied up the code a bit. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit bc5f2ab11ca6dda4a4826e7e78d5365d7c3e1569
  Author: Rodrigo Vivi <rodrigo.vivi@xxxxxxxxx>
  Date:   Wed Sep 23 11:32:36 2015 -0700

      drm/i915/skl: Don't call intel_prepare_ddi when encoder list isn't yet 
initialized.

      In case something goes wrong with power well initialization we were 
calling
      intel_prepare_ddi during boot while encoder list isnt't initilized.

      [    9.618747] i915 0000:00:02.0: Invalid ROM contents
      [    9.631446] [drm] failed to find VBIOS tables
      [    9.720036] BUG: unable to handle kernel NULL pointer dereference at 
00000000
      00000058
      [    9.721986] IP: [<ffffffffa014eb72>] ddi_get_encoder_port+0x82/0x190 
[i915]
      [    9.723736] PGD 0
      [    9.724286] Oops: 0000 [#1] PREEMPT SMP
      [    9.725386] Modules linked in: intel_powerclamp snd_hda_intel(+) 
coretemp crc
      32c_intel snd_hda_codec snd_hda_core serio_raw snd_pcm snd_timer i915(+) 
parport
      _pc parport pinctrl_sunrisepoint pinctrl_intel nfsd nfs_acl
      [    9.730635] CPU: 0 PID: 497 Comm: systemd-udevd Not tainted 
4.3.0-rc2-eywa-10
      967-g72de2cfd-dirty #2
      [    9.732785] Hardware name: Intel Corporation Cannonlake Client 
platform/Skyla
      ke DT DDR4 RVP8, BIOS CNLSE2R1.R00.X021.B00.1508040310 08/04/2015
      [    9.735785] task: ffff88008a704700 ti: ffff88016a1ac000 task.ti: 
ffff88016a1a
      c000
      [    9.737584] RIP: 0010:[<ffffffffa014eb72>]  [<ffffffffa014eb72>] 
ddi_get_enco
      der_port+0x82/0x190 [i915]
      [    9.739934] RSP: 0000:ffff88016a1af710  EFLAGS: 00010296
      [    9.741184] RAX: 000000000000004e RBX: ffff88008a9edc98 RCX: 
0000000000000001
      [    9.742934] RDX: 000000000000004e RSI: ffffffff81fc1e82 RDI: 
00000000ffffffff
      [    9.744634] RBP: ffff88016a1af730 R08: 0000000000000000 R09: 
0000000000000578
      [    9.746333] R10: 0000000000001065 R11: 0000000000000578 R12: 
fffffffffffffff8
      [    9.748033] R13: ffff88016a1af7a8 R14: ffff88016a1af794 R15: 
0000000000000000
      [    9.749733] FS:  00007eff2e1e07c0(0000) GS:ffff88016fc00000(0000) 
knlGS:00000
      00000000000
      [    9.751683] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [    9.753083] CR2: 0000000000000058 CR3: 000000016922b000 CR4: 
00000000003406f0
      [    9.754782] Stack:
      [    9.755332]  ffff88008a9edc98 ffff88008a9ed800 ffffffffa01d07b0 
00000000fffb9
      09e
      [    9.757232]  ffff88016a1af7d8 ffffffffa0154ea7 0000000000000246 
ffff88016a370
      080
      [    9.759182]  ffff88016a370080 ffff88008a9ed800 0000000000000246 
ffff88008a9ed
      c98
      [    9.761132] Call Trace:
      [    9.761782]  [<ffffffffa0154ea7>] intel_prepare_ddi+0x67/0x860 [i915]
      [    9.763332]  [<ffffffff81a56996>] ? 
_raw_spin_unlock_irqrestore+0x26/0x40
      [    9.765031]  [<ffffffffa00fad01>] ? gen9_read32+0x141/0x360 [i915]
      [    9.766531]  [<ffffffffa00b43e1>] skl_set_power_well+0x431/0xa80 [i915]
      [    9.768181]  [<ffffffffa00b4a63>] skl_power_well_enable+0x13/0x20 
[i915]
      [    9.769781]  [<ffffffffa00b2188>] intel_power_well_enable+0x28/0x50 
[i915]
      [    9.771481]  [<ffffffffa00b4d52>] intel_display_power_get+0x92/0xc0 
[i915]
      [    9.773180]  [<ffffffffa00b4fcb>] 
intel_display_set_init_power+0x3b/0x40 [i91
      5]
      [    9.774980]  [<ffffffffa00b5170>] 
intel_power_domains_init_hw+0x120/0x520 [i9
      15]
      [    9.776780]  [<ffffffffa0194c61>] i915_driver_load+0xb21/0xf40 [i915]

      So let's protect this case.

      My first attempt was to remove the intel_prepare_ddi, but Daniel had 
pointed out
      this is really needed to restore those registers values. And Imre pointed 
out
      that this case was without the flag protection and this was actually 
where things
      were going bad. So I've just checked and this indeed solves my issue.

      The regressing intel_prepare_ddi call was added in

      commit 1d2b9526a790d55b7ae870934a74937081f62de2
      Author: Damien Lespiau <damien.lespiau@xxxxxxxxx>
      Date:   Fri Mar 6 18:50:53 2015 +0000

          drm/i915/skl: Restore the DDI translation tables when enabling PW1

      Cc: Imre Deak <imre.deak@xxxxxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Rodrigo Vivi <rodrigo.vivi@xxxxxxxxx>
      Reviewed-by: Imre Deak <imre.deak@xxxxxxxxx>
      [Jani: regression reference]
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 95bc06ef049b808a067327bd8490b608b47e3870
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Sun Sep 13 11:24:02 2015 +0200

      m68k/defconfig: Update defconfigs for v4.3-rc1

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>

  commit 8474ba74193d302e8340dddd1e16c85cc4b98caf
  Author: Andreas Schwab <schwab@xxxxxxxxxxxxxx>
  Date:   Wed Sep 23 23:12:09 2015 +0200

      m68k: Define asmlinkage_protect

      Make sure the compiler does not modify arguments of syscall functions.
      This can happen if the compiler generates a tailcall to another
      function.  For example, without asmlinkage_protect sys_openat is compiled
      into this function:

      sys_openat:
        clr.l %d0
        move.w 18(%sp),%d0
        move.l %d0,16(%sp)
        jbra do_sys_open

      Note how the fourth argument is modified in place, modifying the register
      %d4 that gets restored from this stack slot when the function returns to
      user-space.  The caller may expect the register to be unmodified across
      system calls.

      Signed-off-by: Andreas Schwab <schwab@xxxxxxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 7f843dab134b7ce8804b67cca2271267d3a0213d
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Sun Sep 13 11:49:13 2015 +0200

      m68k: Wire up membarrier

      $ ./membarrier_test
      membarrier MEMBARRIER_CMD_QUERY syscall available.
      membarrier: MEMBARRIER_CMD_SHARED success.
      membarrier: tests done!
      $

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Greg Ungerer <gerg@xxxxxxxxxxx>

  commit b92858f2be96f49c483436e851a4667543ab5768
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Sun Sep 6 12:01:40 2015 +0200

      m68k: Wire up userfaultfd

      $ ./userfaultfd 10 99
      nr_pages: 2560, nr_pages_per_cpu: 2560
      bounces: 98, mode: racing, userfaults: 1121
      bounces: 97, mode: rnd, userfaults: 977
      bounces: 96, mode:, userfaults: 1119
      bounces: 95, mode: rnd racing ver poll, userfaults: 1040
      bounces: 94, mode: racing ver poll, userfaults: 1022
      bounces: 93, mode: rnd ver poll, userfaults: 946
      bounces: 92, mode: ver poll, userfaults: 1115
      bounces: 91, mode: rnd racing poll, userfaults: 977
      bounces: 90, mode: racing poll, userfaults: 899
      bounces: 89, mode: rnd poll, userfaults: 881
      bounces: 88, mode: poll, userfaults: 1069
      bounces: 87, mode: rnd racing ver, userfaults: 1114
      bounces: 86, mode: racing ver, userfaults: 1109
      bounces: 85, mode: rnd ver, userfaults: 1165
      bounces: 84, mode: ver, userfaults: 1107
      bounces: 83, mode: rnd racing, userfaults: 1134
      bounces: 82, mode: racing, userfaults: 1105
      bounces: 81, mode: rnd, userfaults: 1323
      bounces: 80, mode:, userfaults: 1103
      bounces: 79, mode: rnd racing ver poll, userfaults: 909
      bounces: 78, mode: racing ver poll, userfaults: 1095
      bounces: 77, mode: rnd ver poll, userfaults: 951
      bounces: 76, mode: ver poll, userfaults: 1099
      bounces: 75, mode: rnd racing poll, userfaults: 1035
      bounces: 74, mode: racing poll, userfaults: 1097
      bounces: 73, mode: rnd poll, userfaults: 1159
      bounces: 72, mode: poll, userfaults: 1042
      bounces: 71, mode: rnd racing ver, userfaults: 848
      bounces: 70, mode: racing ver, userfaults: 1093
      bounces: 69, mode: rnd ver, userfaults: 892
      bounces: 68, mode: ver, userfaults: 1091
      bounces: 67, mode: rnd racing, userfaults: 1219
      bounces: 66, mode: racing, userfaults: 1089
      bounces: 65, mode: rnd, userfaults: 988
      bounces: 64, mode:, userfaults: 1087
      bounces: 63, mode: rnd racing ver poll, userfaults: 882
      bounces: 62, mode: racing ver poll, userfaults: 984
      bounces: 61, mode: rnd ver poll, userfaults: 701
      bounces: 60, mode: ver poll, userfaults: 1071
      bounces: 59, mode: rnd racing poll, userfaults: 1137
      bounces: 58, mode: racing poll, userfaults: 1032
      bounces: 57, mode: rnd poll, userfaults: 911
      bounces: 56, mode: poll, userfaults: 1079
      bounces: 55, mode: rnd racing ver, userfaults: 1106
      bounces: 54, mode: racing ver, userfaults: 1077
      bounces: 53, mode: rnd ver, userfaults: 886
      bounces: 52, mode: ver, userfaults: 1075
      bounces: 51, mode: rnd racing, userfaults: 1101
      bounces: 50, mode: racing, userfaults: 1073
      bounces: 49, mode: rnd, userfaults: 1070
      bounces: 48, mode:, userfaults: 1071
      bounces: 47, mode: rnd racing ver poll, userfaults: 1077
      bounces: 46, mode: racing ver poll, userfaults: 910
      bounces: 45, mode: rnd ver poll, userfaults: 1063
      bounces: 44, mode: ver poll, userfaults: 1028
      bounces: 43, mode: rnd racing poll, userfaults: 1043
      bounces: 42, mode: racing poll, userfaults: 1065
      bounces: 41, mode: rnd poll, userfaults: 912
      bounces: 40, mode: poll, userfaults: 1063
      bounces: 39, mode: rnd racing ver, userfaults: 880
      bounces: 38, mode: racing ver, userfaults: 1061
      bounces: 37, mode: rnd ver, userfaults: 1144
      bounces: 36, mode: ver, userfaults: 1059
      bounces: 35, mode: rnd racing, userfaults: 967
      bounces: 34, mode: racing, userfaults: 1057
      bounces: 33, mode: rnd, userfaults: 1076
      bounces: 32, mode:, userfaults: 1055
      bounces: 31, mode: rnd racing ver poll, userfaults: 997
      bounces: 30, mode: racing ver poll, userfaults: 1053
      bounces: 29, mode: rnd ver poll, userfaults: 968
      bounces: 28, mode: ver poll, userfaults: 978
      bounces: 27, mode: rnd racing poll, userfaults: 1008
      bounces: 26, mode: racing poll, userfaults: 1049
      bounces: 25, mode: rnd poll, userfaults: 900
      bounces: 24, mode: poll, userfaults: 1047
      bounces: 23, mode: rnd racing ver, userfaults: 988
      bounces: 22, mode: racing ver, userfaults: 1045
      bounces: 21, mode: rnd ver, userfaults: 1027
      bounces: 20, mode: ver, userfaults: 1043
      bounces: 19, mode: rnd racing, userfaults: 1017
      bounces: 18, mode: racing, userfaults: 1041
      bounces: 17, mode: rnd, userfaults: 979
      bounces: 16, mode:, userfaults: 1039
      bounces: 15, mode: rnd racing ver poll, userfaults: 1134
      bounces: 14, mode: racing ver poll, userfaults: 1037
      bounces: 13, mode: rnd ver poll, userfaults: 1046
      bounces: 12, mode: ver poll, userfaults: 1035
      bounces: 11, mode: rnd racing poll, userfaults: 1060
      bounces: 10, mode: racing poll, userfaults: 1033
      bounces: 9, mode: rnd poll, userfaults: 1003
      bounces: 8, mode: poll, userfaults: 929
      bounces: 7, mode: rnd racing ver, userfaults: 964
      bounces: 6, mode: racing ver, userfaults: 1029
      bounces: 5, mode: rnd ver, userfaults: 1053
      bounces: 4, mode: ver, userfaults: 1027
      bounces: 3, mode: rnd racing, userfaults: 863
      bounces: 2, mode: racing, userfaults: 1025
      bounces: 1, mode: rnd, userfaults: 1043
      bounces: 0, mode:, userfaults: 950

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Greg Ungerer <gerg@xxxxxxxxxxx>

  commit 5b3f33eb408ad06acf59b09fe0550bf3756e320a
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Sun Sep 6 11:59:27 2015 +0200

      m68k: Wire up direct socket calls

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Greg Ungerer <gerg@xxxxxxxxxxx>

  commit 18ab2cd3ee9d52dc64c5ae984146a261a328c4e8
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Sun Sep 27 23:25:50 2015 +0800

      perf/core, perf/x86: Change needlessly global functions and a variable to 
static

      Fixes various sparse warnings.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/70c14234da1bed6e3e67b9c419e2d5e376ab4f32.1443367286.git.geliangtang@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6afc0c269c3d20cde05515b00ede00e91fee0be5
  Merge: 968d712 097f70b
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Sep 28 08:06:57 2015 +0200

      Merge branch 'linus' into perf/core, to pick up fixes before applying new 
changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7c4f1c694bf84eac538bee3e411aed10ae617d46
  Merge: 9ffecb1 19a5ecd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Sep 28 08:03:52 2015 +0200

      Merge branch 'for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu into core/urgent

      Pull RCU fixes from Paul E. McKenney, for two regressions
      introduced in this merge window:

        - Fix bug with recent GCCs.
        - Fix false positive lockdep splat.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 34c2d9fb0498c066afbe610b15e18995fd8be792
  Author: Ian Wilson <iwilson@xxxxxxxxxxx>
  Date:   Thu Sep 24 11:20:11 2015 -0700

      bridge: Allow forward delay to be cfgd when STP enabled

      Allow bridge forward delay to be configured when Spanning Tree is enabled.

      Signed-off-by: Ian Wilson <iwilson@xxxxxxxxxxx>
      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1a5e251996e1b602f2ddc9261ee9de0ca1875bfa
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sun Sep 27 17:13:55 2015 -0700

      Input: serio - fix blocking of parport

      If parkbd_allocate_serio() fails to allocate memory we are releasing the
      parport but we missed unregistering the device. As a result this device
      with exclusive access to that parport remains registered. And no other
      device will be able to use that parport even though this driver has
      failed to load.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit e5a5d92d9dc36055b971d79e408e345f5ce88701
  Author: Eric Benard <eric@xxxxxxxxxx>
  Date:   Wed Sep 23 17:07:28 2015 +0200

      mxc_nand: fix copy_spare

      it was broken by 35d5d20efad8a04c8c002c7f31241dff973977a6
      "mtd: mxc_nand: cleanup copy_spare function"

      else we get the following error :
      [   22.709507] ubi0: attaching mtd3
      [   23.613470] ubi0: scanning is finished
      [   23.617278] ubi0: empty MTD device detected
      [   23.623219] Unhandled fault: imprecise external abort (0x1c06) at 
0x9e62f0ec
      [   23.630291] pgd = 9df80000
      [   23.633005] [9e62f0ec] *pgd=8e60041e(bad)
      [   23.637064] Internal error: : 1c06 [#1] SMP ARM
      [   23.641605] Modules linked in:
      [   23.644687] CPU: 0 PID: 99 Comm: ubiattach Not tainted 4.2.0-dirty #22
      [   23.651222] Hardware name: Freescale i.MX53 (Device Tree Support)
      [   23.657322] task: 9e687300 ti: 9dcfc000 task.ti: 9dcfc000
      [   23.662744] PC is at memcpy16_toio+0x4c/0x74
      [   23.667026] LR is at mxc_nand_command+0x484/0x640
      [   23.671739] pc : [<803f9c08>]    lr : [<803faeb0>]    psr: 60000013
      [   23.671739] sp : 9dcfdb10  ip : 9e62f0ea  fp : 9dcfdb1c
      [   23.683222] r10: a09c1000  r9 : 0000001a  r8 : ffffffff
      [   23.688453] r7 : ffffffff  r6 : 9e674810  r5 : 9e674810  r4 : 000000b6
      [   23.694985] r3 : a09c16a4  r2 : a09c16a4  r1 : a09c16a4  r0 : 0000ffff
      [   23.701521] Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  
Segment user
      [   23.708662] Control: 10c5387d  Table: 8df80019  DAC: 00000015
      [   23.714413] Process ubiattach (pid: 99, stack limit = 0x9dcfc210)
      [   23.720514] Stack: (0x9dcfdb10 to 0x9dcfe000)
      [   23.724881] db00:                                     9dcfdb6c 
9dcfdb20 803faeb0 803f9bc8
      [   23.733069] db20: 803f227c 803f9b74 ffffffff 9e674810 9e674810 
9e674810 00000040 9e62f010
      [   23.741255] db40: 803faa2c 9e674b40 9e674810 803faa2c 00000400 
803faa2c 00000000 9df42800
      [   23.749441] db60: 9dcfdb9c 9dcfdb70 803f2024 803faa38 9e4201cc 
00000000 803f0a78 9e674b40
      [   23.757627] db80: 803f1f80 9e674810 00000400 00000400 9dcfdc14 
9dcfdba0 803f3bd8 803f1f8c
      [   23.765814] dba0: 9e4201cc 00000000 00000580 00000000 00000000 
800718c0 0000007f 00001000
      [   23.774000] dbc0: 9df42800 000000e0 00000000 00000000 9e4201cc 
00000000 00000000 00000000
      [   23.782186] dbe0: 00000580 00000580 00000000 9e674810 9dcfdc20 
9dcfdce8 9df42800 00580000
      [   23.790372] dc00: 00000000 00000400 9dcfdc6c 9dcfdc18 803f3f94 
803f39a4 9dcfdc20 00000000
      [   23.798558] dc20: 00000000 00000400 00000000 00000000 00000000 
00000000 9df42800 00000000
      [   23.806744] dc40: 9dcfdd0c 00580000 00000000 00000400 00000000 
9df42800 9dee1000 9d802000
      [   23.814930] dc60: 9dcfdc94 9dcfdc70 803eb63c 803f3f38 00000400 
9dcfdce8 9df42800 dead4ead
      [   23.823116] dc80: 803eb5f4 00000000 9dcfdcc4 9dcfdc98 803e82ac 
803eb600 00000400 9dcfdce8
      [   23.831301] dca0: 9df42800 00000400 9dee0000 00000000 00000400 
00000000 9dcfdd1c 9dcfdcc8
      [   23.839488] dcc0: 80406048 803e8230 00000400 9dcfdce8 9df42800 
9dcfdc78 00000008 00000000
      [   23.847673] dce0: 00000000 00000000 00000000 00000004 00000000 
9df42800 9dee0000 00000000
      [   23.855859] dd00: 9d802030 00000000 9dc8b214 9d802000 9dcfdd44 
9dcfdd20 804066cc 80405f50
      [   23.864047] dd20: 00000400 9dc8b200 9d802030 9df42800 9dee0000 
9dc8b200 9dcfdd84 9dcfdd48
      [   23.872233] dd40: 8040a544 804065ac 9e401c80 000080d0 9dcfdd84 
00000001 800fc828 9df42400
      [   23.880418] dd60: 00000000 00000080 9dc8b200 9dc8b200 9dc8b200 
9dee0000 9dcfdddc 9dcfdd88
      [   23.888605] dd80: 803fb560 8040a440 9dcfddc4 9dcfdd98 800f1428 
9dee1000 a0acf000 00000000
      [   23.896792] dda0: 00000000 ffffffff 00000006 00000000 9dee0000 
9dee0000 00005600 00000080
      [   23.904979] ddc0: 9dc8b200 a0acf000 9dc8b200 8112514c 9dcfde24 
9dcfdde0 803fc08c 803fb4f0
      [   23.913165] dde0: 9e401c80 00000013 9dcfde04 9dcfddf8 8006bbf8 
8006ba00 9dcfde24 00000000
      [   23.921351] de00: 9dee0000 00000065 9dee0000 00000001 9dc8b200 
8112514c 9dcfde84 9dcfde28
      [   23.929538] de20: 8040afa0 803fb948 ffffffff 00000000 9dc8b214 
9dcfde40 800f1428 800f11dc
      [   23.937724] de40: 9dc8b21c 9dc8b20c 9dc8b204 9dee1000 9dc8b214 
8069bb60 fffff000 fffff000
      [   23.945911] de60: 9e7b5400 00000000 9dee0000 9dee1000 00001000 
9e7b5400 9dcfdecc 9dcfde88
      [   23.954097] de80: 803ff1bc 8040a630 9dcfdea4 9dcfde98 00000800 
00000800 9dcfdecc 9dcfdea8
      [   23.962284] dea0: 803e8f6c 00000000 7e87ab70 9e7b5400 80113e30 
00000003 9dcfc000 00000000
      [   23.970470] dec0: 9dcfdf04 9dcfded0 804008cc 803feb98 ffffffff 
00000003 00000000 00000000
      [   23.978656] dee0: 00000000 00000000 9e7cb000 9dc193e0 7e87ab70 
9dd92140 9dcfdf7c 9dcfdf08
      [   23.986842] df00: 80113b5c 8040080c 800fbed8 8006bbf0 9e7cb000 
00000003 9e7cb000 9dd92140
      [   23.995029] df20: 9dc193e0 9dd92148 9dcfdf4c 9dcfdf38 8011022c 
800fbe78 8000f9cc 9e687300
      [   24.003216] df40: 9dcfdf6c 9dcfdf50 8011f798 8007ffe8 7e87ab70 
9dd92140 00000003 9dd92140
      [   24.011402] df60: 40186f40 7e87ab70 9dcfc000 00000000 9dcfdfa4 
9dcfdf80 80113e30 8011373c
      [   24.019588] df80: 7e87ab70 7e87ab70 7e87aea9 00000036 8000fb84 
9dcfc000 00000000 9dcfdfa8
      [   24.027775] dfa0: 8000f9a0 80113e00 7e87ab70 7e87ab70 00000003 
40186f40 7e87ab70 00000000
      [   24.035962] dfc0: 7e87ab70 7e87ab70 7e87aea9 00000036 00000000 
00000000 76fd1f70 00000000
      [   24.044148] dfe0: 76f80f8c 7e87ab28 00009810 76f80fc4 60000010 
00000003 00000000 00000000
      [   24.052328] Backtrace:
      [   24.054806] [<803f9bbc>] (memcpy16_toio) from [<803faeb0>] 
(mxc_nand_command+0x484/0x640)
      [   24.062996] [<803faa2c>] (mxc_nand_command) from [<803f2024>] 
(nand_write_page+0xa4/0x154)
      [   24.071264]  r10:9df42800 r9:00000000 r8:803faa2c r7:00000400 
r6:803faa2c r5:9e674810
      [   24.079180]  r4:9e674b40
      [   24.081738] [<803f1f80>] (nand_write_page) from [<803f3bd8>] 
(nand_do_write_ops+0x240/0x444)
      [   24.090180]  r8:00000400 r7:00000400 r6:9e674810 r5:803f1f80 
r4:9e674b40
      [   24.096970] [<803f3998>] (nand_do_write_ops) from [<803f3f94>] 
(nand_write+0x68/0x88)
      [   24.104804]  r10:00000400 r9:00000000 r8:00580000 r7:9df42800 
r6:9dcfdce8 r5:9dcfdc20
      [   24.112719]  r4:9e674810
      [   24.115287] [<803f3f2c>] (nand_write) from [<803eb63c>] 
(part_write+0x48/0x50)
      [   24.122514]  r10:9d802000 r9:9dee1000 r8:9df42800 r7:00000000 
r6:00000400 r5:00000000
      [   24.130429]  r4:00580000
      [   24.132989] [<803eb5f4>] (part_write) from [<803e82ac>] 
(mtd_write+0x88/0xa0)
      [   24.140129]  r5:00000000 r4:803eb5f4
      [   24.143748] [<803e8224>] (mtd_write) from [<80406048>] 
(ubi_io_write+0x104/0x65c)
      [   24.151235]  r7:00000000 r6:00000400 r5:00000000 r4:9dee0000
      [   24.156968] [<80405f44>] (ubi_io_write) from [<804066cc>] 
(ubi_io_write_ec_hdr+0x12c/0x190)
      [   24.165323]  r10:9d802000 r9:9dc8b214 r8:00000000 r7:9d802030 
r6:00000000 r5:9dee0000
      [   24.173239]  r4:9df42800
      [   24.175798] [<804065a0>] (ubi_io_write_ec_hdr) from [<8040a544>] 
(ubi_early_get_peb+0x110/0x1f0)
      [   24.184587]  r6:9dc8b200 r5:9dee0000 r4:9df42800
      [   24.189262] [<8040a434>] (ubi_early_get_peb) from [<803fb560>] 
(create_vtbl+0x7c/0x238)
      [   24.197271]  r10:9dee0000 r9:9dc8b200 r8:9dc8b200 r7:9dc8b200 
r6:00000080 r5:00000000
      [   24.205187]  r4:9df42400
      [   24.207746] [<803fb4e4>] (create_vtbl) from [<803fc08c>] 
(ubi_read_volume_table+0x750/0xa64)
      [   24.216187]  r10:8112514c r9:9dc8b200 r8:a0acf000 r7:9dc8b200 
r6:00000080 r5:00005600
      [   24.224103]  r4:9dee0000
      [   24.226662] [<803fb93c>] (ubi_read_volume_table) from [<8040afa0>] 
(ubi_attach+0x97c/0x152c)
      [   24.235103]  r10:8112514c r9:9dc8b200 r8:00000001 r7:9dee0000 
r6:00000065 r5:9dee0000
      [   24.243018]  r4:00000000
      [   24.245579] [<8040a624>] (ubi_attach) from [<803ff1bc>] 
(ubi_attach_mtd_dev+0x630/0xbac)
      [   24.253673]  r10:9e7b5400 r9:00001000 r8:9dee1000 r7:9dee0000 
r6:00000000 r5:9e7b5400
      [   24.261588]  r4:fffff000
      [   24.264148] [<803feb8c>] (ubi_attach_mtd_dev) from [<804008cc>] 
(ctrl_cdev_ioctl+0xcc/0x1cc)
      [   24.272589]  r10:00000000 r9:9dcfc000 r8:00000003 r7:80113e30 
r6:9e7b5400 r5:7e87ab70
      [   24.280505]  r4:00000000
      [   24.283070] [<80400800>] (ctrl_cdev_ioctl) from [<80113b5c>] 
(do_vfs_ioctl+0x42c/0x6c4)
      [   24.291077]  r6:9dd92140 r5:7e87ab70 r4:9dc193e0
      [   24.295753] [<80113730>] (do_vfs_ioctl) from [<80113e30>] 
(SyS_ioctl+0x3c/0x64)
      [   24.303066]  r10:00000000 r9:9dcfc000 r8:7e87ab70 r7:40186f40 
r6:9dd92140 r5:00000003
      [   24.310981]  r4:9dd92140
      [   24.313549] [<80113df4>] (SyS_ioctl) from [<8000f9a0>] 
(ret_fast_syscall+0x0/0x54)
      [   24.321123]  r9:9dcfc000 r8:8000fb84 r7:00000036 r6:7e87aea9 
r5:7e87ab70 r4:7e87ab70
      [   24.328957] Code: e1c300b0 e1510002 e1a03001 1afffff9 (e89da800)
      [   24.335066] ---[ end trace ab1cb17887f21bbb ]---
      [   24.340249] Unhandled fault: imprecise external abort (0x1c06) at 
0x7ee8bcf0
      [   24.347310] pgd = 9df3c000
      [   24.350023] [7ee8bcf0] *pgd=8dcbf831, *pte=8eb3334f, *ppte=8eb3383f
      Segmentation fault

      Fixes: 35d5d20efad8 ("mtd: mxc_nand: cleanup copy_spare function")
      Signed-off-by: Eric Bénard <eric@xxxxxxxxxx>
      Reviewed-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Reviewed-by: Baruch Siach <baruch@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>

  commit 097f70b3c4d84ffccca15195bdfde3a37c0a7c0f
  Merge: e3be426 e060f6e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 18:22:34 2015 -0400

      Merge branch 'upstream' of 
git://git.linux-mips.org/pub/scm/ralf/upstream-linus

      Pull MIPS fixes from Ralf Baechle:
       - Properly setup irq handling for ATH79 platforms
       - Fix bootmem mapstart calculation for contiguous maps
       - Handle little endian and older CPUs correct in BPF
       - Fix console for Fulong 2E systems
       - Handle FTLB correctly on R6 CPUs
       - Fixes for CM, GIC and MAAR support code

      * 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus:
        MIPS: Initialise MAARs on secondary CPUs
        MIPS: print MAAR configuration during boot
        MIPS: mm: compile maar_init unconditionally
        irqchip: mips-gic: Fix pending & mask reads for MIPS64 with 32b GIC.
        irqchip: mips-gic: Convert CPU numbers to VP IDs.
        MIPS: CM: Provide a function to map from CPU to VP ID.
        MIPS: Fix FTLB detection for R6
        MIPS: cpu-features: Add cpu_has_ftlb
        MIPS: ATH79: Add irq chip ar7240-misc-intc
        MIPS: ATH79: Set missing irq ack handler for ar7100-misc-intc irq chip
        MIPS: BPF: Fix build on pre-R2 little endian CPUs
        MIPS: BPF: Avoid unreachable code on little endian
        MIPS: bootmem: Fix mapstart calculation for contiguous maps
        MIPS: Fix console output for Fulong2e system

  commit e3be4266d3488cbbaddf7fcc661f4473db341e46
  Merge: 73f479b 2530e39
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 12:51:39 2015 -0400

      Merge branch 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf fixes from Thomas Gleixner:
       "Another pile of fixes for perf:

         - Plug overflows and races in the core code

         - Sanitize the flow of the perf syscall so we error out before
           handling the more complex and hard to undo setups

         - Improve and fix Broadwell and Skylake hardware support

         - Revert a fix which broke what it tried to fix in perf tools

         - A couple of smaller fixes in various places of perf tools"

      * 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        perf tools: Fix copying of /proc/kcore
        perf intel-pt: Remove no_force_psb from documentation
        perf probe: Use existing routine to look for a kernel module by 
dso->short_name
        perf/x86: Change test_aperfmperf() and test_intel() to static
        tools lib traceevent: Fix string handling in heterogeneous arch 
environments
        perf record: Avoid infinite loop at buildid processing with no samples
        perf: Fix races in computing the header sizes
        perf: Fix u16 overflows
        perf: Restructure perf syscall point of no return
        perf/x86/intel: Fix Skylake FRONTEND MSR extrareg mask
        perf/x86/intel/pebs: Add PEBS frontend profiling for Skylake
        perf/x86/intel: Make the CYCLE_ACTIVITY.* constraint on Broadwell more 
specific
        perf tools: Bool functions shouldn't return -1
        tools build: Add test for presence of __get_cpuid() gcc builtin
        tools build: Add test for presence of numa_num_possible_cpus() in 
libnuma
        Revert "perf symbols: Fix mismatched declarations for elf_getphdrnum"
        perf stat: Fix per-pkg event reporting bug

  commit 73f479b243fe71a0fa82d21a21ac25d8932b88d5
  Merge: fc11a9c de9b8f5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 12:50:27 2015 -0400

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fix from Thomas Gleixner:
       "A single bug fix for the scheduler to prevent dequeueing of the idle
        task when setting the cpus allowed mask"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched: Fix crash trying to dequeue/enqueue the idle thread

  commit fc11a9c5dad78d2c9e8a4b7d4b386bff724d9ec3
  Merge: 9ffecb1 21199f2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 12:47:20 2015 -0400

      Merge branch 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull locking fix from Thomas Gleixner:
       "A single bugfix for lockdep to preserve the pinning counter when
        rebuilding the lock stack"

      * 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        locking/lockdep: Fix hlock->pin_count reset on lock stack rebuilds

  commit a9062dcec3697db5bdf064311ad097c469fd87ec
  Merge: 9ffecb1 af71b98
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Sun Sep 27 15:25:22 2015 +0200

      Merge branch 'turbostat' of 
https://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux into pm-tools

      Pull turbostat updates for v4.3 from Len Brown.

      * 'turbostat' of 
https://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux:
        tools/power turbosat: update version number
        tools/power turbostat: SKL: Adjust for TSC difference from base 
frequency
        tools/power turbostat: KNL workaround for %Busy and Avg_MHz
        tools/power turbostat: IVB Xeon: fix --debug regression

  commit e9a7bed40cbc09eee4b7a15509726a44565805be
  Merge: 9ffecb1 135919a
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Sun Sep 27 15:24:27 2015 +0200

      Merge branch 'cpuidle' of 
https://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux into pm-cpuidle

      Pull an intel_idle update for v4.3 from Len Brown.

      * 'cpuidle' of https://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux:
        intel_idle: Skylake Client Support - updated

  commit b8402d827fbb288f4ecee585e151bab5a81b3c58
  Author: Janusz Dziedzic <janusz.dziedzic@xxxxxxxxx>
  Date:   Thu Sep 17 08:17:33 2015 +0200

      ath10k: fix MSI-X registering for qca99x0

      In case of qca99x0 and MSI-X supported/enabled we
      failed during interrupts registering with message:

      ath10k_pci 0000:04:00.0: failed to request MSI-X ce irq 50: -22

      Issue/fix was reproduced/tested using Dell Latitude E6430 laptop.

      Signed-off-by: Janusz Dziedzic <janusz.dziedzic@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit bd4a41e6dee43b5b00876e37d42abffa298d63fe
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 13:19:00 2015 +0530

      ath10k: fix ldpc param for fixed rate

      ldpc is not configured for fixed rates. This blocks auto rate vs fixed
      rate performance comparison. Since firmware is considering ldpc vdev
      param for fixed rate selection, it has to be configured to enable ldpc
      for fixed rates.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 44acedb00b6d4b56ddab04362ccfa133b0d3b013
  Author: Peter Oh <poh@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:29:08 2015 +0300

      ath: use PRI value given by spec for fixed PRI

      PRI value is used as divider when DFS detector analyzes candidate
      radar pulses.
      If PRI deviation is big from its origin PRI, DFS detector could miss
      valid radar reports since HW often misses detecting radar pulses and
      causes long interval value of pulses.

      For instance from practical results, if runtime PRI is calculated as
      1431 for fixed PRI value of 1428 and delta timestamp logs 15719,
      the modular remainder will be 1409 and the delta between the remainder
      and runtime PRI is 22 that is bigger than PRI tolerance which is 16.
      As a result this radar report will be ignored even though it's valid.

      By using spec defined PRI for fixed PRI, we can correct this error.

      Signed-off-by: Peter Oh <poh@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b0b252278082787eec54098556566d4d68b8126c
  Author: Peter Oh <poh@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:29:07 2015 +0300

      ath: fix incorrect PPB on JAPAN chirp radar

      The number of pulses per burst on Japan chirp radar is
      between 1 and 3. The previous value, 20, is representing
      number of bursts, but since current DFS detector is using
      pulse detection other than bursts, use the pulse number
      for correct radar detection.
      Also using the highest number helps to avoid false detection.

      Signed-off-by: Peter Oh <poh@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit e060f6ed281669b6d2f22d8dafd664b532386918
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Fri Sep 25 08:59:38 2015 -0700

      MIPS: Initialise MAARs on secondary CPUs

      MAARs should be initialised on each CPU (or rather, core) in the system
      in order to achieve consistent behaviour & performance. Previously they
      have only been initialised on the boot CPU which leads to performance
      problems if tasks are later scheduled on a secondary CPU, particularly
      if those tasks make use of unaligned vector accesses where some CPUs
      don't handle any cases in hardware for non-speculative memory regions.
      Fix this by recording the MAAR configuration from the boot CPU and
      applying it to secondary CPUs as part of their bringup.

      Reported-by: Doug Gilmore <doug.gilmore@xxxxxxxxxx>
      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Hemmo Nieminen <hemmo.nieminen@xxxxxx>
      Cc: Alex Smith <alex.smith@xxxxxxxxxx>
      Cc: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11239/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 651ca7f4dab77f07fdac9cfb68bcab6bd2b7f827
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Fri Sep 25 08:59:37 2015 -0700

      MIPS: print MAAR configuration during boot

      Verifying that the MAAR configuration is as expected is useful when
      debugging the performance of a system. Print out the memory regions
      configured via MAAR along with their attributes.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11238/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit def3ab5d0a0fe53026c2495b054dcc46cf923dac
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Fri Sep 25 08:59:36 2015 -0700

      MIPS: mm: compile maar_init unconditionally

      maar_init was previously only compiled when CONFIG_NEED_MULTIPLE_NODES
      was not set, which has been fine since it is only called from the
      standard implementation of mem_init which has the same condition. In
      preparation for calling it from the SMP startup code on secondary CPUs,
      move maar_init outside of the #ifndef such that it is always compiled.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11237/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d77d5ac9c9b5abf45aeb6e12930fab832e5c81d1
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:29:11 2015 -0700

      irqchip: mips-gic: Fix pending & mask reads for MIPS64 with 32b GIC.

      gic_handle_shared_int reads the GIC interrupt pending & mask registers
      directly into a bitmap, which is defined as an array of unsigned longs.
      The GIC pending registers may be 32 bits wide if the CM is older than
      CM3, regardless of the bit width of the CPU, but for MIPS64 kernels
      the unsigned longs in the bitmap will be 64 bits wide. In this case we
      need to perform 2 x 32 bit reads per 64 bit unsigned long in order to
      avoid missing interrupts.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11213/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit ab41f6c8620a6e65df4ee19d284c97efdd3d9b63
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:29:10 2015 -0700

      irqchip: mips-gic: Convert CPU numbers to VP IDs.

      Make use of the mips_cm_vp_id function to convert from Linux CPU numbers
      to the VP IDs used by hardware, which are not identical in all systems.
      Without doing so we map interrupts to incorrect VP(E)s.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11212/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 7573b94e08aeb5b814e2f277210bdcdf21a83869
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:29:09 2015 -0700

      MIPS: CM: Provide a function to map from CPU to VP ID.

      The VP ID of a given CPU may not match up with the CPU number used by
      Linux. For example, if the width of the VP part of the VP ID is wider
      than log2(number of VPs per core) and the system has multiple cores then
      this will be the case. Alternatively, if a pre-r6 system implements the
      MT ASE with multiple VPEs per core and Linux is built without support
      for the MT ASE then the numbers won't match up either. Provide a
      function to convert from CPU number to VP ID.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11211/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 9ffecb10283508260936b96022d4ee43a7798b4c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 07:50:08 2015 -0400

      Linux 4.3-rc3

  commit 162e6df47c4f80c87cb617ec473eca015df454ca
  Merge: 5a6bdf0 83c133c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:51:42 2015 -0400

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Thomas Gleixner:
       "Two bugfixes from Andy addressing at least some of the subtle NMI
        related wreckage which has been reported by Sasha Levin"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/nmi/64: Fix a paravirt stack-clobbering bug in the NMI code
        x86/paravirt: Replace the paravirt nop with a bona fide empty function

  commit 5a6bdf06bbd022db25d9935273b409c337c48a6b
  Merge: c905929 d32dc9a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:50:23 2015 -0400

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fix from Thomass Gleixner:
       "A bugfix for the atmel aic5 irq chip driver which caches the wrong
        data and thereby breaking resume"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqchip/atmel-aic5: Use per chip mask caches in mask/unmask()

  commit c905929ac9b94061b2c8226c5e47a26d30ed7ea1
  Merge: 685b5f1 274e91b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:48:48 2015 -0400

      Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM fixes from Russell King:
       "Just two fixes: wire up the new system calls added during the last
        merge window, and fix another user access site"

      * 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm:
        ARM: alignment: fix alignment handling for uaccess changes
        ARM: wire up new syscalls

  commit 685b5f1de6405bf87e38fed7c893a1de0a8d3218
  Merge: 69ea8b8 e46fc90
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:45:18 2015 -0400

      Merge tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Olof Johansson:
       "Our first real batch of fixes this release cycle.  Nothing really
        concerning, and diffstat is a bit inflated due to some DT contents
        moving around on STi platforms.

        There's a collection of them here:

         - A fixup for a build breakage that hits on arm64 allmodconfig in
           QCOM SCM firmware drivers
         - MMC fixes for OMAP that had quite a bit of breakage this merge
           window.
         - Misc build/warning fixes on PXA and OMAP
         - A couple of minor fixes for Beagleboard X15 which is now starting
           to see a few more users in the wild"

      * tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (31 commits)
        ARM: sti: dt: adapt DT to fix probe/bind issues in DRM driver
        ARM: dts: fix omap2+ address translation for pbias
        firmware: qcom: scm: Add function stubs for ARM64
        ARM: dts: am57xx-beagle-x15: use palmas-usb for USB2
        ARM: omap2plus_defconfig: enable GPIO_PCA953X
        ARM: dts: omap5-uevm.dts: fix i2c5 pinctrl offsets
        ARM: OMAP2+: AM43XX: Enable autoidle for clks in am43xx_init_late
        ARM: dts: am57xx-beagle-x15: Update Phy supplies
        ARM: pxa: balloon3: Fix build error
        ARM: dts: Fixup model name for HP t410 dts
        ARM: dts: DRA7: fix a typo in ethernet
        ARM: omap2plus_defconfig: make PCF857x built-in
        ARM: dts: Use ti,pbias compatible string for pbias
        ARM: OMAP5: Cleanup options for SoC only build
        ARM: DRA7: Select missing options for SoC only build
        ARM: OMAP2+: board-generic: Remove stale of_irq macros
        ARM: OMAP4+: PM: erratum is used by OMAP5 and DRA7 as well
        ARM: dts: omap3-igep: Move eth IRQ pinmux to IGEPv2 common dtsi
        ARM: dts: am57xx-beagle-x15: Add wakeup irq for mcp79410
        ARM: dts: am335x-phycore-som: Fix mpu voltage
        ...

  commit 69ea8b857782ea56d9db01e2f57f9067abd3f013
  Merge: d8cc397 8862714
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:42:54 2015 -0400

      Merge branch 'for-next' of git://git.samba.org/sfrench/cifs-2.6

      Pull CIFS fixes from Steve French:
       "Four fixes from testing at the recent SMB3 Plugfest including two
        important authentication ones (one fixes authentication problems to
        some popular servers when clock times differ more than two hours
        between systems, the other fixes Kerberos authentication for SMB3)"

      * 'for-next' of git://git.samba.org/sfrench/cifs-2.6:
        fix encryption error checks on mount
        [SMB3] Fix sec=krb5 on smb3 mounts
        cifs: use server timestamp for ntlmv2 authentication
        disabling oplocks/leases via module parm enable_oplocks broken for SMB3

  commit 72521ea07c0af37b8cb21228368128191c3f1a58
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:00:24 2015 +0200

      r8169: fix handling rtl_readphy result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f26bf06beae70175eda91e893190784bd1bcc7c0
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:00:15 2015 +0200

      net: hisilicon: fix handling platform_get_irq result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f3504372963fb65d2386f8a2210a557d7cc01d9
  Merge: 8b7a704 b1be00a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Sep 26 22:40:56 2015 -0700

      Merge branch 'vxlan-ipv4-ipv6'

      Jiri Benc says:

      ====================
      vxlan: support both IPv4 and IPv6 sockets

      Note: this needs net merged into net-next in order to apply.

      It's currently not easy enough to work with metadata based vxlan tunnels. 
In
      particular, it's necessary to create separate network interfaces for IPv4
      and IPv6 tunneling. Assigning an IPv6 address to an IPv4 interface is
      allowed yet won't do what's expected. With route based tunneling, one has 
to
      pay attention to use the vxlan interface opened with the correct family.
      Other users of this (openvswitch) would need to always create two vxlan
      interfaces.

      Furthermore, there's no sane API for creating an IPv6 vxlan metadata based
      interface.

      This patchset simplifies this by opening both IPv4 and IPv6 socket if the
      vxlan interface has the metadata flag (IFLA_VXLAN_COLLECT_METADATA) set.
      Assignment of addresses etc. works as expected after this.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b1be00a6c39fda2ec380e168d7bcf96fb8c9da42
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 24 13:50:02 2015 +0200

      vxlan: support both IPv4 and IPv6 sockets in a single vxlan device

      For metadata based vxlan interface, open both IPv4 and IPv6 socket. This 
is
      much more user friendly: it's not necessary to create two vxlan interfaces
      and pay attention to using the right one in routing rules.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 205f356d165033443793a97a668a203a79a8723a
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 24 13:50:01 2015 +0200

      vxlan: make vxlan_sock_add and vxlan_sock_release complementary

      Make vxlan_sock_add both alloc the socket and attach it to vxlan_dev. Let
      vxlan_sock_release accept vxlan_dev as its parameter instead of 
vxlan_sock.

      This makes vxlan_sock_add and vxlan_sock release complementary. It reduces
      code duplication in the next patch.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8b7a7048220f86547db31de0abe1ea6dd2cfa892
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 11:38:22 2015 +0100

      8139cp: Fix GSO MSS handling

      When fixing the TSO support I noticed we just mask ->gso_size with the
      MSSMask value and don't care about the consequences.

      Provide a .ndo_features_check() method which drops the NETIF_F_TSO
      feature for any skb which would exceed the maximum, and thus forces it
      to be segmented by software.

      Then we can stop the masking in cp_start_xmit(), and just WARN if the
      maximum is exceeded, which should now never happen.

      Finally, Francois Romieu noticed that we didn't even have the right
      value for MSSMask anyway; it should be 0x7ff (11 bits) not 0xfff.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5a58f227790faded5a3ef6075f3ddd65093e0f86
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:46:09 2015 +0100

      8139cp: Enable offload features by default

      I fixed TSO. Hardware checksum and scatter/gather also appear to be
      working correctly both on real hardware and in QEMU's emulation.

      Let's enable them by default and see if anyone screams...

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e46fc90ec2612ef7578c6e3e28ad477a116e24da
  Merge: b8ba826 385877c
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Sat Sep 26 22:23:26 2015 -0700

      Merge tag 'pxa-fixes-v4.3' of https://github.com/rjarzmik/linux into fixes

      ARM: pxa: fixes for v4.3

      These fixes are mainly regression fixes triggered by irq changes,
      common clock framework introduction and sound side-effect of
      other platforms.

      * tag 'pxa-fixes-v4.3' of https://github.com/rjarzmik/linux:
        ARM: pxa: balloon3: Fix build error
        ARM: pxa: ssp: Fix build error by removing originally incorrect DT 
binding
        ARM: pxa: fix DFI bus lockups on startup

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit b8ba826f8d9587fe830d29a0d03abb5b1e0a76e5
  Merge: fe5b275 9a5e3f2
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Sat Sep 26 22:22:31 2015 -0700

      Merge tag 'omap-for-v4.3/fixes-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Fixes for omaps for v4.3-rc cycle:

      - Two more patches to fix most of the MMC regressions with the
        PBIAS regulator changes. At least two MMC driver related issues
        still seems to remain for omap3 legacy booting and omap4 duovero.
        Note that the dts changes depend on a recent regulator fix, and
        are based on the regulator commit now in mainline kernel

      - Enable autoidle for am43xx clocks to prevent clocks from staying
        always on

      - Fix i2c5 pinctrl offsets for omap5-uevm

      - Enable PCA953X as that's needed for HDMI to work on omap5

      - Update phy supplies for beagle x15 beta board

      - Use palmas-usb for on beagle x15 to start using the related
        driver that recently got merged

      * tag 'omap-for-v4.3/fixes-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        ARM: dts: fix omap2+ address translation for pbias
        ARM: dts: am57xx-beagle-x15: use palmas-usb for USB2
        ARM: omap2plus_defconfig: enable GPIO_PCA953X
        ARM: dts: omap5-uevm.dts: fix i2c5 pinctrl offsets
        ARM: OMAP2+: AM43XX: Enable autoidle for clks in am43xx_init_late
        ARM: dts: am57xx-beagle-x15: Update Phy supplies
        regulator: pbias: program pbias register offset in pbias driver
        ARM: omap2plus_defconfig: Enable MUSB DMA support
        ARM: DRA752: Add ID detect for ES2.0
        ARM: OMAP3: vc: fix 'or' always true warning
        ARM: OMAP2+: Fix booting if no timer parent clock is available
        ARM: OMAP2+: omap-device: fix race deferred probe of omap_hsmmc vs 
omap_device_late_init

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit d8cc3972b2178f9fe532306330f76bf51cb0d8bd
  Merge: c91d707 09185e2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 21:05:23 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fixes from Herbert Xu:
       "This fixes the following issues:

         - check the return value of platform_get_irq as signed int in xgene.

         - skip adf_dev_restore on virtual functions in qat.

         - fix double-free with backlogged requests in marvell_cesa"

      * git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        hwrng: xgene - fix handling platform_get_irq
        crypto: qat - VF should never trigger SBR on PH
        crypto: marvell - properly handle CRYPTO_TFM_REQ_MAY_BACKLOG-flagged 
requests

  commit c91d7072952993f96896c2fc9868f55924e7ba6c
  Merge: bcba282 673681ca
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 21:02:42 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending

      Pull SCSI target fixes from Nicholas Bellinger:
       "This includes a iser-target series from Jenny + Sagi @ Mellanox that
        addresses the few remaining active I/O shutdown bugs, along with a
        patch to support zero-copy for immediate data payloads that gives a
        nice performance improvement for small block WRITEs.

        Also included are some recent >= v4.2 regression bug-fixes.  The most
        notable is a RCU conversion regression for SPC-3 PR registrations, and
        recent removal of obsolete RFC-3720 markers that introduced a login
        regression bug with MSFT iSCSI initiators.

        Thanks to everyone who has been testing + reporting bugs for v4.x"

      * git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending:
        iscsi-target: Avoid OFMarker + IFMarker negotiation
        target: Make TCM_WRITE_PROTECT failure honor D_SENSE bit
        target: Fix target_sense_desc_format NULL pointer dereference
        target: Propigate backend read-only to core_tpg_add_lun
        target: Fix PR registration + APTPL RCU conversion regression
        iser-target: Skip data copy if all the command data comes as immediate
        iser-target: Change the recv buffers posting logic
        iser-target: Fix pending connections handling in target stack shutdown 
sequnce
        iser-target: Remove np_ prefix from isert_np members
        iser-target: Remove unused variables
        iser-target: Put the reference on commands waiting for unsol data
        iser-target: remove command with state ISTATE_REMOVE

  commit bcba282ab399eec1c8b8dcb49c43a33813971913
  Merge: fb740f9 b473197
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 21:00:28 2015 -0400

      Merge tag 'usb-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

      Pull USB fixes from Greg KH:
       "Here are some USB driver fixes for 4.3-rc3.

        There's the usual assortment of new device ids, combined with xhci and
        gadget driver fixes.  Full details in the shortlog.  All of these have
        been in linux-next with no reported problems"

      * tag 'usb-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (34 commits)
        MAINTAINERS: remove amd5536udc USB gadget driver maintainer
        USB: whiteheat: fix potential null-deref at probe
        xhci: init command timeout timer earlier to avoid deleting it 
uninitialized
        xhci: change xhci 1.0 only restrictions to support xhci 1.1
        usb: xhci: exit early in xhci_setup_device() if we're halted or dying
        usb: xhci: stop everything on the first call to xhci_stop
        usb: xhci: Clear XHCI_STATE_DYING on start
        usb: xhci: lock mutex on xhci_stop
        xhci: Move xhci_pme_quirk() behind #ifdef CONFIG_PM
        xhci: give command abortion one more chance before killing xhci
        usb: Use the USB_SS_MULT() macro to get the burst multiplier.
        usb: dwc3: gadget: Fix BUG in RT config
        usb: musb: fix cppi channel teardown for isoch transfer
        usb: phy: isp1301: Export I2C module alias information
        usb: gadget: drop null test before destroy functions
        usb: gadget: dummy_hcd: in transfer(), return data sent, not limit
        usb: gadget: dummy_hcd: fix rescan logic for transfer
        usb: gadget: dummy_hcd: fix unneeded else-if condition
        usb: gadget: dummy_hcd: emulate sending zlp in packet logic
        usb: musb: dsps: fix polling in device-only mode
        ...

  commit fb740f9bab3b3c049d6207b148e45de05163b6e5
  Merge: b11e7b8 f7a7651
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 20:58:38 2015 -0400

      Merge tag 'tty-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

      Pull serial driver fix from Greg KH:
       "Here is one serial driver fix for 4.3-rc3 that resolves a module
        loading issue due to splitting up of the 8250 driver into smaller
        pieces.  It's been in linux-next with no reported problems"

      * tag 'tty-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:
        tty: serial: Add missing module license for 8250_base.ko

  commit b11e7b81bf94f633ae44f12a3d2e198277781952
  Merge: 7c1efea 74c600e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 20:56:50 2015 -0400

      Merge tag 'staging-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

      Pull staging driver fixes from Greg KH:
       "Here are some tiny staging driver and documentation fixes for 4.3-rc3.

        All of these resolve reported issues that people have found and have
        been in the linux-next tree for a while with no problems"

      * tag 'staging-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
        MAINTAINERS: Update email address for Martyn Welch
        staging: ion: fix corruption of ion_import_dma_buf
        staging: dgap: Remove myself from the MAINTAINERS file
        staging: most: Add dependency to HAS_IOMEM
        staging: unisys: remove reference of visorutil
        staging: unisys: visornic: handle error return from device registration
        staging: unisys: stop device registration before visorbus registration
        staging: unisys: visorbus: Unregister driver on error
        staging: unisys: visornic: Fix receive bytes statistics
        staging: unisys: unregister netdev when create debugfs fails
        staging: fbtft: replace master->setup() with spi_setup()
        staging: fbtft: fix 9-bit SPI support detection
        staging/lustre: change Lustre URLs and mailing list
        staging/android: Update ION TODO per LPC discussion
        Staging: most: MOST and MOSTCORE should depend on HAS_DMA
        staging: most: fix HDM_USB dependencies and build errors

  commit 7c1efeae6d7d7b1ba10453e35ee4c2de1d814c2b
  Merge: 64b796e 2110d70
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 20:54:53 2015 -0400

      Merge tag 'driver-core-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

      Pull driver core fix from Greg KH:
       "Here is one driver core fix for 4.3-rc3 that resolves a reported oops"

      * tag 'driver-core-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core:
        cpu/cacheinfo: Fix teardown path

  commit 64b796e23172850cab313e2e411b58fd391eec95
  Merge: 518a7cb 5031403
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 20:53:15 2015 -0400

      Merge tag 'char-misc-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

      Pull char/misc driver fixes from Greg KH:
       "Here's some tiny char and misc driver fixes that resolve some reported
        errors for 4.3-rc3.

        All of these have been in linux-next with no problems for a while"

      * tag 'char-misc-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:
        extcon: Fix attached value returned by is_extcon_changed
        Drivers: hv: vmbus: fix init_vp_index() for reloading hv_netvsc
        mei: fix debugfs files leak on error path
        thunderbolt: Allow loading of module on recent Apple MacBooks with 
thunderbolt 2 controller

  commit 4963ed48f2c20196d51a447ee87dc2815584fee4
  Merge: 4d54d86 518a7cb
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Sep 26 16:08:27 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Conflicts:
        net/ipv4/arp.c

      The net/ipv4/arp.c conflict was one commit adding a new
      local variable while another commit was deleting one.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f6c5b079cb37f01463a643182815c00aa5263f2
  Merge: e904cf6 7c014e3
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Sat Sep 26 21:25:18 2015 +0300

      Merge tag 'iwlwifi-next-for-kalle-2015-09-21' of 
git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

      * some debugfs improvements;
      * fix signedness in beacon statistics;
      * deinline some functions to reduce size when device tracing is enabled;
      * filter beacons out in AP mode when no stations are associated;
      * deprecate firmwares version -12;
      * fix a runtime PM vs. legacy suspend race;
      * one-liner fix for a ToF bug;
      * clean-ups in the rx code;
      * small debugging improvement;
      * fix WoWLAN with new firmware versions;

  commit 76d164f582150fd0259ec0fcbc485470bcd8033e
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Thu Sep 17 14:29:07 2015 +0300

      ath10k: fix DMA related firmware crashes on multiple devices

      Some platforms really don't like DMA bursts of 256 bytes, and this
      causes the firmware to crash when sending beacons.
      Also, changing this based on the firmware version does not seem to make
      much sense, so use 128 bytes for all versions.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit c6ea46c6d3df06599daddbf3311744f3130e186c
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Wed Sep 9 07:16:42 2015 +0200

      b43: probe bcma core (device) rev 0x15

      OpenWrt user reported b43 doesn't probe wireless core on SoC BCM5356A1:
      [    0.000000] bcma: bus0: Found chip with id 0x5356, rev 0x01 and 
package 0x04
      it is because this chip uses different 802.11 core revison than others:
      [    0.000000] bcma: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 
0x812, rev 0x15, class 0x0)

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 910367e374b97fad6ae31f74198ca537e2f3cfe5
  Author: Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
  Date:   Mon Aug 31 10:55:05 2015 +0200

      rt2800usb: add usb ID 1b75:3070 for Airlive WT-2000USB

      Brand: Airlive (Ovislink Corp.)
      Name: Turbo-G USB Adaptor
      Model: WT-2000USB
      USB ID: 1b75:3070

      Reported-and-tested-by: Michael Coates <michlinux@xxxxxxxxxxx>
      Signed-off-by: Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 029cd0370241641eb70235d205aa0b90c84dce44
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:59:46 2015 +0200

      ath9k: declare required extra tx headroom

      ath9k inserts padding between the 802.11 header and the data area (to
      align it). Since it didn't declare this extra required headroom, this
      led to some nasty issues like randomly dropped packets in some setups.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ff9f84b7d79ddccab4c293c9d3e289f95ae594f7
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Sat Sep 26 09:48:58 2015 -0500

      [SMB3] Missing null tcon check

      Pointed out by Dan Carpenter via smatch code analysis tool

      CC: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>

  commit af71b980c0d20586cc331b617c47094a8ec7e1db
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Sat Sep 26 09:49:55 2015 -0400

      tools/power turbosat: update version number

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit 518a7cb6980cd640c7f979d29021ad870f60d7d7
  Merge: d4a748a bdb06cb
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 06:01:33 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

       1) When we run a tap on netlink sockets, we have to copy mmap'd SKBs
          instead of cloning them.  From Daniel Borkmann.

       2) When converting classical BPF into eBPF, fix the setting of the
          source reg to BPF_REG_X.  From Tycho Andersen.

       3) Fix igmpv3/mldv2 report parsing in the bridge multicast code, from
          Linus Lussing.

       4) Fix dst refcounting for ipv6 tunnels, from Martin KaFai Lau.

       5) Set NLM_F_REPLACE flag properly when replacing ipv6 routes, from
          Roopa Prabhu.

       6) Add some new cxgb4 PCI device IDs, from Hariprasad Shenai.

       7) Fix headroom tests and SKB leaks in ipv6 fragmentation code, from
          Florian Westphal.

       8) Check DMA mapping errors in bna driver, from Ivan Vecera.

       9) Several 8139cp bug fixes (dev_kfree_skb_any in interrupt context,
          misclearing of interrupt status in TX timeout handler, etc.) from
          David Woodhouse.

      10) In tipc, reset SKB header pointer after skb_linearize(), from Erik
          Hugne.

      11) Fix autobind races et al. in netlink code, from Herbert Xu with
          help from Tejun Heo and others.

      12) Missing SET_NETDEV_DEV in sunvnet driver, from Sowmini Varadhan.

      13) Fix various races in timewait timer and reqsk_queue_hadh_req, from
          Eric Dumazet.

      14) Fix array overruns in mac80211, from Johannes Berg and Dan
          Carpenter.

      15) Fix data race in rhashtable_rehash_one(), from Dmitriy Vyukov.

      16) Fix race between poll_one_napi and napi_disable, from Neil Horman.

      17) Fix byte order in geneve tunnel port config, from John W Linville.

      18) Fix handling of ARP replies over lightweight tunnels, from Jiri
          Benc.

      19) We can loop when fib rule dumps cross multiple SKBs, fix from Wilson
          Kok and Roopa Prabhu.

      20) Several reference count handling bug fixes in the PHY/MDIO layer
          from Russel King.

      21) Fix lockdep splat in ppp_dev_uninit(), from Guillaume Nault.

      22) Fix crash in icmp_route_lookup(), from David Ahern.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (116 commits)
        net: Fix panic in icmp_route_lookup
        net: update docbook comment for __mdiobus_register()
        ppp: fix lockdep splat in ppp_dev_uninit()
        net: via/Kconfig: GENERIC_PCI_IOMAP required if PCI not selected
        phy: marvell: add link partner advertised modes
        net: fix net_device refcounting
        phy: add phy_device_remove()
        phy: fixed-phy: properly validate phy in fixed_phy_update_state()
        net: fix phy refcounting in a bunch of drivers
        of_mdio: fix MDIO phy device refcounting
        phy: add proper phy struct device refcounting
        phy: fix mdiobus module safety
        net: dsa: fix of_mdio_find_bus() device refcount leak
        phy: fix of_mdio_find_bus() device refcount leak
        ip6_tunnel: Reduce log level in ip6_tnl_err() to debug
        ip6_gre: Reduce log level in ip6gre_err() to debug
        fib_rules: fix fib rule dumps across multiple skbs
        bnx2x: byte swap rss_key to comply to Toeplitz specs
        net: revert "net_sched: move tp->root allocation into fw_init()"
        lwtunnel: remove source and destination UDP port config option
        ...

  commit 2530e39947d80901e8c56f1c1950437eb9f48354
  Merge: 7e5560a b5cabbc
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 26 08:15:52 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

        - Fix copying of /proc/kcore made to the ~/.debug/ DSO cache to allow 
using
          objdump with kcore files. (Adrian Hunter)

        - Fix adding perf probes in kernel module functions. (Arnaldo Carvalho 
de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a2b7b74945dbfe5d734eafe8aa52f9f1f8bc6931
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Sat Sep 26 00:12:38 2015 -0400

      tools/power turbostat: SKL: Adjust for TSC difference from base frequency

      On a Skylake with 1500MHz base frequency,
      the TSC runs at 1512MHz.

      This is because the TSC is no longer in the n*100 MHz BCLK domain,
      but is now in the m*24MHz crystal clock domain. (24 MHz * 63 = 1512 MHz)

      This adds error to several calculations in turbostat,
      unless the TSC sample sizes are adjusted for this difference.

      Note that calculations in the time domain are immune
      from this issue, as the timing sub-system has already
      calibrated the TSC against a known wall clock.

      AVG_MHz = APERF_delta/measurement_interval

        need no adjustment.  APERF_delta is in the BCLK domain,
        and measurement_interval is in the time domain.

      TSC_MHz  =  TSC_delta/measurement_interval

        needs no adjustment -- as we really do want to report
        the actual measured TSC delta here, and measurement_interval
        is in the accurate time domain.

      %Busy = MPERF_delta/TSC_delta

        needs adjustment to use TSC_BCLK_DOMAIN_delta.
        TSC_BCLK_DOMAIN_delta = TSC_delta * base_hz / tsc_hz

      Bzy_MHz = TSC_delta/APERF_delta/MPERF_delta/measurement_interval

        need adjustment as above.

      No other metrics in turbostat need to be adjusted.

      Before:

           CPU Avg_MHz   %Busy Bzy_MHz TSC_MHz
             -     550   24.84    2216    1512
             0    2191   98.73    2219    1514
             2       0    0.01    2130    1512
             1       9    0.43    2016    1512
             3       2    0.08    2016    1512

      After:

           CPU Avg_MHz   %Busy Bzy_MHz TSC_MHz
             -     550   25.05    2198    1512
             0    2190   99.62    2199    1512
             2       0    0.01    2152    1512
             1       9    0.46    2000    1512
             3       2    0.10    2000    1512

      Note that in this example, the "Before" Bzy_MHz
      was reported as exceeding the 2200 max turbo rate.
      Also, even a pinned spin loop would not be reported
      as over 99% busy.

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit b2b34dfe4d9aa4c468fc363b3b666974783ed1f9
  Author: Hubert Chrzaniuk <hubert.chrzaniuk@xxxxxxxxx>
  Date:   Mon Sep 14 13:31:00 2015 +0200

      tools/power turbostat: KNL workaround for %Busy and Avg_MHz

      KNL increments APERF and MPERF every 1024 clocks.
      This is compliant with the architecture specification,
      which requires that only the ratio of APERF/MPERF need be valid.

      However, turbostat takes advantage of the fact that these
      two MSRs increment every un-halted clock
      at the actual and base frequency:

      AVG_MHz = APERF_delta/measurement_interval

      %Busy = MPERF_delta/TSC_delta

      This quirk is needed for these calculations to also work on KNL,
      which would otherwise show a value 1024x smaller than expected.

      Signed-off-by: Hubert Chrzaniuk <hubert.chrzaniuk@xxxxxxxxx>
      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit 756357b8e4b072fd5ee86421f794e071a348802b
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Fri Sep 25 21:12:39 2015 -0400

      tools/power turbostat: IVB Xeon: fix --debug regression

      Staring in Linux-4.3-rc1,
      commit 6fb3143b561c ("tools/power turbostat: dump CONFIG_TDP")
      touches MSR 0x648, which is not supported on IVB-Xeon.
      This results in "turbostat --debug" exiting on those systems:

      turbostat: /dev/cpu/2/msr offset 0x648 read failed: Input/output error

      Remove IVB-Xeon from the list of machines supporting with that MSR.

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit bdb06cbf77cb01911694cc9076ffa8196b7b9b61
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:31:29 2015 -0600

      net: Fix panic in icmp_route_lookup

      Andrey reported a panic:

      [ 7249.865507] BUG: unable to handle kernel pointer dereference at 
000000b4
      [ 7249.865559] IP: [<c16afeca>] icmp_route_lookup+0xaa/0x320
      [ 7249.865598] *pdpt = 0000000030f7f001 *pde = 0000000000000000
      [ 7249.865637] Oops: 0000 [#1]
      ...
      [ 7249.866811] CPU: 0 PID: 0 Comm: swapper/0 Not tainted
      4.3.0-999-generic #201509220155
      [ 7249.866876] Hardware name: MSI MS-7250/MS-7250, BIOS 080014  08/02/2006
      [ 7249.866916] task: c1a5ab00 ti: c1a52000 task.ti: c1a52000
      [ 7249.866949] EIP: 0060:[<c16afeca>] EFLAGS: 00210246 CPU: 0
      [ 7249.866981] EIP is at icmp_route_lookup+0xaa/0x320
      [ 7249.867012] EAX: 00000000 EBX: f483ba48 ECX: 00000000 EDX: f2e18a00
      [ 7249.867045] ESI: 000000c0 EDI: f483ba70 EBP: f483b9ec ESP: f483b974
      [ 7249.867077]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
      [ 7249.867108] CR0: 8005003b CR2: 000000b4 CR3: 36ee07c0 CR4: 000006f0
      [ 7249.867141] Stack:
      [ 7249.867165]  320310ee 00000000 00000042 320310ee 00000000 c1aeca00
      f3920240 f0c69180
      [ 7249.867268]  f483ba04 f855058b a89b66cd f483ba44 f8962f4b 00000000
      e659266c f483ba54
      [ 7249.867361]  8004753c f483ba5c f8962f4b f2031140 000003c1 ffbd8fa0
      c16b0e00 00000064
      [ 7249.867448] Call Trace:
      [ 7249.867494]  [<f855058b>] ? e1000_xmit_frame+0x87b/0xdc0 [e1000e]
      [ 7249.867534]  [<f8962f4b>] ? tcp_in_window+0xeb/0xb10 [nf_conntrack]
      [ 7249.867576]  [<f8962f4b>] ? tcp_in_window+0xeb/0xb10 [nf_conntrack]
      [ 7249.867615]  [<c16b0e00>] ? icmp_send+0xa0/0x380
      [ 7249.867648]  [<c16b102f>] icmp_send+0x2cf/0x380
      [ 7249.867681]  [<f89c8126>] nf_send_unreach+0xa6/0xc0 [nf_reject_ipv4]
      [ 7249.867714]  [<f89cd0da>] reject_tg+0x7a/0x9f [ipt_REJECT]
      [ 7249.867746]  [<f88c29a7>] ipt_do_table+0x317/0x70c [ip_tables]
      [ 7249.867780]  [<f895e0a6>] ? __nf_conntrack_find_get+0x166/0x3b0
      [nf_conntrack]
      [ 7249.867838]  [<f895eea8>] ? nf_conntrack_in+0x398/0x600 [nf_conntrack]
      [ 7249.867889]  [<f84c0035>] iptable_filter_hook+0x35/0x80 
[iptable_filter]
      [ 7249.867933]  [<c16776a1>] nf_iterate+0x71/0x80
      [ 7249.867970]  [<c1677715>] nf_hook_slow+0x65/0xc0
      [ 7249.868002]  [<c1681811>] __ip_local_out_sk+0xc1/0xd0
      [ 7249.868034]  [<c1680f30>] ? ip_forward_options+0x1a0/0x1a0
      [ 7249.868066]  [<c1681836>] ip_local_out_sk+0x16/0x30
      [ 7249.868097]  [<c1684054>] ip_send_skb+0x14/0x80
      [ 7249.868129]  [<c16840f4>] ip_push_pending_frames+0x34/0x40
      [ 7249.868163]  [<c16844a2>] ip_send_unicast_reply+0x282/0x310
      [ 7249.868196]  [<c16a0863>] tcp_v4_send_reset+0x1b3/0x380
      [ 7249.868227]  [<c16a1b63>] tcp_v4_rcv+0x323/0x990
      [ 7249.868257]  [<c16776a1>] ? nf_iterate+0x71/0x80
      [ 7249.868289]  [<c167dc2b>] ip_local_deliver_finish+0x8b/0x230
      [ 7249.868322]  [<c167df4c>] ip_local_deliver+0x4c/0xa0
      [ 7249.868353]  [<c167dba0>] ? ip_rcv_finish+0x390/0x390
      [ 7249.868384]  [<c167d88c>] ip_rcv_finish+0x7c/0x390
      [ 7249.868415]  [<c167e280>] ip_rcv+0x2e0/0x420
      ...

      Prior to the VRF change the oif was not set in the flow struct, so the
      VRF support should really have only added the vrf_master_ifindex lookup.

      Fixes: 613d09b30f8b ("net: Use VRF device index for lookups on TX")
      Cc: Andrey Melnikov <temnota.am@xxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 59f069789c98678710ed30a4be0daa3546ec82c7
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:56:56 2015 +0100

      net: update docbook comment for __mdiobus_register()

      Update the docbook comment for __mdiobus_register() to include the new
      module owner argument.  This resolves a warning found by the 0-day
      builder.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b4731977243c1ae9cfd8b3971ffc15425b7d7545
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 20:45:27 2015 -0700

      MAINTAINERS: remove amd5536udc USB gadget driver maintainer

      Thomas can no longer work on the driver, so he asked me to mark the
      MAINTAINER entry as "Orphan" with the hope that someone else would
      someday pick it up.

      Cc: Thomas Dahlmann <dahlmann.thomas@xxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 2866196f294954ce9fa226825c8c1eaa64c7da8a
  Author: Doug Ledford <dledford@xxxxxxxxxx>
  Date:   Fri Sep 25 22:30:24 2015 -0400

      IB/ipoib: increase the max mcast backlog queue

      When performing sendonly joins, we queue the packets that trigger
      the join until the join completes.  This may take on the order of
      hundreds of milliseconds.  It is easy to have many more than three
      packets come in during that time.  Expand the maximum queue depth
      in order to try and prevent dropped packets during the time it
      takes to join the multicast group.

      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit d323efc786910bcc0c8f8b9f97780c70544ac4df
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:02:46 2015 +0800

      ACPI / PCI: Remove duplicated penalty on SCI IRQ

      Now we have dedicated interface acpi_penalize_sci_irq() to penalize
      ISA IRQ used by ACPI SCI, so remove duplicated code to penalize ACPI SCI
      in acpi_irq_penalty_init().

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 5ebc76035303016ec41bb752bec156ea9fde7c34
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:02:45 2015 +0800

      ACPI, PCI, irq: Do not share PCI IRQ with ISA IRQ

      Avoid IRQs occupied by ISA IRQs when allocating IRQs for PCI link devices,
      otherwise it may cause interrupt storm due to incompatible pin attributes.

      This issue was triggered on a KVM virtual machine, which
       1) uses IRQ9 for SCI in high level mode.
       2) defines an PCI interrupt link device (LNKS) with IRQ9 as the only
          possible irq.
       3) has an PCI device referring to link device LNKS.
      So it causes interrupt storm when enabling the PCI device because PCI IRQ
      works in low level mode.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 15b94fa32a422f4b97dc34e4b7060ec83d10bee5
  Author: Lv Zheng <lv.zheng@xxxxxxxxx>
  Date:   Thu Sep 24 14:54:40 2015 +0800

      ACPI / EC: Fix a memory leak issue in acpi_ec_query()

      When query handler is not found, "result" is actually stil 0, and
      "struct acpi_ec_query" is not NULL, so the deletion code of
      "struct acpi_ec_query" at the end of the function cannot be invoked.
      As a consequence, memory leak can be observed.

      The issue is introduced by this commit:
        Commit: 02b771b64b73226052d6e731a0987db3b47281e9
        Subject: ACPI / EC: Fix an issue caused by the serialized _Qxx

      This patch fixes such memory leakage.

      Fixes: 02b771b64b73 (ACPI / EC: Fix an issue caused by the serialized 
_Qxx evaluations)
      Signed-off-by: Lv Zheng <lv.zheng@xxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit d4a748a10e50d95992ae67677f1a1a13e2d6ed47
  Merge: 03e8f64 9badce0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 16:20:55 2015 -0700

      Merge branch 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup

      Pull another cgroup fix from Tejun Heo:
       "The cgroup writeback support got inadvertently enabled for traditional
        hierarchies revealing two regressions which are currently being worked
        on.  It shouldn't have been enabled on traditional hierarchies, so
        disable it on them.  This is enough to make the regressions go away
        for people who aren't experimenting with cgroup"

      * 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup:
        cgroup, writeback: don't enable cgroup writeback on traditional 
hierarchies

  commit e1a2d49cd5ef551c51be95cc037033e9e582b0cd
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Thu Sep 24 12:28:44 2015 -0700

      PM / OPP: Fix typo modifcation -> modification

      Reported-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 4d54d86546f62c7c4a0fe3b36a64c5e3b98ce1a9
  Merge: 6ea29da 1b70e97
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 13:00:40 2015 -0700

      Merge branch 'listener-sock-const'

      Eric Dumazet says:

      ====================
      dccp/tcp: constify listener sock

      Another patch bomb to prepare lockless TCP/DCCP LISTEN handling.

      SYNACK retransmits are built and sent without listener socket
      being locked. Soon, initial SYNACK packets will have same property.

      This series makes sure we did not something wrong with this model,
      by adding a const qualifier in all the paths taken from synack building
      and transmit, for IPv4/IPv6 and TCP/dccp.

      The only potential problem was the rewrite of ecn bits for connections
      with DCTCP as congestion module, but this was a very minor one.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1b70e977cef6ce7e7411c9bbec21f9adc8e29097
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:24 2015 -0700

      inet: constify inet_rtx_syn_ack() sock argument

      SYNACK packets are sent on behalf on unlocked listeners
      or fastopen sockets. Mark socket as const to catch future changes
      that might break the assumption.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ea3bea3a1d38aab1542176b2ff11a99ce3db9656
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:23 2015 -0700

      tcp/dccp: constify rtx_synack() and friends

      This is done to make sure we do not change listener socket
      while sending SYNACK packets while socket lock is not held.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 802885fc0400d0166a6b65d1844b61696aecbb10
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:22 2015 -0700

      dccp: constify dccp_make_response() socket argument

      Like tcp_make_synack() the only time we might change the socket is
      when calling sock_wmalloc(), which is using atomic operation to
      update sk->sk_wmem_alloc

      Also use MAX_DCCP_HEADER as both IPv4/IPv6 use this value for max_header.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f935dbedc49a5044ebff08b47eef35a2f2bbe92
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:21 2015 -0700

      tcp: constify tcp_v{4|6}_send_synack() socket argument

      This documents fact that listener lock might not be held
      at the time SYNACK are sent.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1c1e9d2b67897316770fc8a2e1acdd9f2787838d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:20 2015 -0700

      ipv6: constify ip6_xmit() sock argument

      This is to document that socket lock might not be held at this point.

      skb_set_owner_w() and ipv6_local_error() are using proper atomic ops
      or spinlocks, so we promote the socket to non const when calling them.

      netfilter hooks should never assume socket lock is held,
      we also promote the socket to non const.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5d062de7f8ea1ca7c635957ff1144fba815ba34c
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:19 2015 -0700

      tcp: constify tcp_make_synack() socket argument

      listener socket is not locked when tcp_make_synack() is called.

      We better make sure no field is written.

      There is one exception : Since SYNACK packets are attached to the listener
      at this moment (or SYN_RECV child in case of Fast Open),
      sock_wmalloc() needs to update sk->sk_wmem_alloc, but this is done using
      atomic operations so this is safe.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ac705b1805863b1899e85f641bb265f9e6e9d99
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:18 2015 -0700

      tcp: remove tcp_ecn_make_synack() socket argument

      SYNACK packets might be sent without holding socket lock.

      For DCTCP/ECN sake, we should call INET_ECN_xmit() while
      socket lock is owned, and only when we init/change congestion control.

      This also fixies a bug if congestion module is changed from
      dctcp to another one on a listener : we now clear ECN bits
      properly.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 37bfbdda0b036a3720924e04c0171d9038159c2c
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:17 2015 -0700

      tcp: remove tcp_synack_options() socket argument

      We do not use the socket in this function.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cfe673b0ae4754ffc051482f4a948b67ddbeec10
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:16 2015 -0700

      ip: constify ip_build_and_send_pkt() socket argument

      This function is used to build and send SYNACK packets,
      possibly on behalf of unlocked listener socket.

      Make sure we did not miss a write by making this socket const.

      We no longer can use ip_select_ident() and have to either
      set iph->id to 0 or directly call __ip_select_ident()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b83e3deb974ca2c11e21256fe602e517afb83247
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:15 2015 -0700

      tcp: md5: constify tcp_md5_do_lookup() socket argument

      When TCP new listener is done, these functions will be called
      without socket lock being held. Make sure they don't change
      anything.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e3f5d727d60939c890a6e86944da52b3a1625ce
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:14 2015 -0700

      inet: constify ip_dont_fragment() arguments

      ip_dont_fragment() can accept const socket and dst

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 30d50c61df94bc8d7700272ea09a716e0af8b58b
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:13 2015 -0700

      ipv6: constify inet6_csk_route_req() socket argument

      socket is not modified, make it const so that callers can
      do the same if they need.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3aef934f4d4b97532c333d9c1f5f73fb80aeb459
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:12 2015 -0700

      ipv6: constify ip6_dst_lookup_{flow|tail}() sock arguments

      ip6_dst_lookup_flow() and ip6_dst_lookup_tail() do not touch
      socket, lets add a const qualifier.

      This will permit the same change in inet6_csk_route_req()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e5895bc600ccba1fde4ea0741813f9c33b5b4021
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:11 2015 -0700

      inet: constify inet_csk_route_req() socket argument

      This is used by TCP listener core, and listener socket shall
      not be modified by inet_csk_route_req().

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6f9c961546699ff8bc5e1c1c52200616867ec68a
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:10 2015 -0700

      inet: constify ip_route_output_flow() socket argument

      Very soon, TCP stack might call inet_csk_route_req(), which
      calls inet_csk_route_req() with an unlocked listener socket,
      so we need to make sure ip_route_output_flow() is not trying to
      change any field from its socket argument.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b1964b5fce389a5660139ca39c25ff294da07b4f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:09 2015 -0700

      tcp: constify tcp_openreq_init_rwin()

      Soon, listener socket wont be locked when tcp_openreq_init_rwin()
      is called. We need to read socket fields once, as their value
      could change under us.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b40cf18ef7961b6d67732e234780586590510ce1
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:08 2015 -0700

      tcp: constify listener socket in tcp_v[46]_init_req()

      Soon, listener socket spinlock will no longer be held,
      add const arguments to tcp_v[46]_init_req() to make clear these
      functions can not mess socket fields.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f438c6138ac5739ce16c8db04689e438d65dfe6
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 25 09:03:14 2015 +0000

      Bluetooth: btmrvl: Comparison to NULL re-written

      NOT NULL comparison modified to be readable, reported
      by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 58a89ecaca53736aa465170530acea4f8be34ab4
  Author: Guillaume Nault <g.nault@xxxxxxxxxxxx>
  Date:   Thu Sep 24 12:54:01 2015 +0200

      ppp: fix lockdep splat in ppp_dev_uninit()

      ppp_dev_uninit() locks all_ppp_mutex while under rtnl mutex protection.
      ppp_create_interface() must then lock these mutexes in that same order
      to avoid possible deadlock.

      [  120.880011] ======================================================
      [  120.880011] [ INFO: possible circular locking dependency detected ]
      [  120.880011] 4.2.0 #1 Not tainted
      [  120.880011] -------------------------------------------------------
      [  120.880011] ppp-apitest/15827 is trying to acquire lock:
      [  120.880011]  (&pn->all_ppp_mutex){+.+.+.}, at: [<ffffffffa0145f56>] 
ppp_dev_uninit+0x64/0xb0 [ppp_generic]
      [  120.880011]
      [  120.880011] but task is already holding lock:
      [  120.880011]  (rtnl_mutex){+.+.+.}, at: [<ffffffff812e4255>] 
rtnl_lock+0x12/0x14
      [  120.880011]
      [  120.880011] which lock already depends on the new lock.
      [  120.880011]
      [  120.880011]
      [  120.880011] the existing dependency chain (in reverse order) is:
      [  120.880011]
      [  120.880011] -> #1 (rtnl_mutex){+.+.+.}:
      [  120.880011]        [<ffffffff81073a6f>] lock_acquire+0xcf/0x10e
      [  120.880011]        [<ffffffff813ab18a>] mutex_lock_nested+0x56/0x341
      [  120.880011]        [<ffffffff812e4255>] rtnl_lock+0x12/0x14
      [  120.880011]        [<ffffffff812d9d94>] register_netdev+0x11/0x27
      [  120.880011]        [<ffffffffa0147b17>] ppp_ioctl+0x289/0xc98 
[ppp_generic]
      [  120.880011]        [<ffffffff8113b367>] do_vfs_ioctl+0x4ea/0x532
      [  120.880011]        [<ffffffff8113b3fd>] SyS_ioctl+0x4e/0x7d
      [  120.880011]        [<ffffffff813ad7d7>] 
entry_SYSCALL_64_fastpath+0x12/0x6f
      [  120.880011]
      [  120.880011] -> #0 (&pn->all_ppp_mutex){+.+.+.}:
      [  120.880011]        [<ffffffff8107334e>] __lock_acquire+0xb07/0xe76
      [  120.880011]        [<ffffffff81073a6f>] lock_acquire+0xcf/0x10e
      [  120.880011]        [<ffffffff813ab18a>] mutex_lock_nested+0x56/0x341
      [  120.880011]        [<ffffffffa0145f56>] ppp_dev_uninit+0x64/0xb0 
[ppp_generic]
      [  120.880011]        [<ffffffff812d5263>] 
rollback_registered_many+0x19e/0x252
      [  120.880011]        [<ffffffff812d5381>] rollback_registered+0x29/0x38
      [  120.880011]        [<ffffffff812d53fa>] 
unregister_netdevice_queue+0x6a/0x77
      [  120.880011]        [<ffffffffa0146a94>] ppp_release+0x42/0x79 
[ppp_generic]
      [  120.880011]        [<ffffffff8112d9f6>] __fput+0xec/0x192
      [  120.880011]        [<ffffffff8112dacc>] ____fput+0x9/0xb
      [  120.880011]        [<ffffffff8105447a>] task_work_run+0x66/0x80
      [  120.880011]        [<ffffffff81001801>] 
prepare_exit_to_usermode+0x8c/0xa7
      [  120.880011]        [<ffffffff81001900>] 
syscall_return_slowpath+0xe4/0x104
      [  120.880011]        [<ffffffff813ad931>] int_ret_from_sys_call+0x25/0x9f
      [  120.880011]
      [  120.880011] other info that might help us debug this:
      [  120.880011]
      [  120.880011]  Possible unsafe locking scenario:
      [  120.880011]
      [  120.880011]        CPU0                    CPU1
      [  120.880011]        ----                    ----
      [  120.880011]   lock(rtnl_mutex);
      [  120.880011]                                lock(&pn->all_ppp_mutex);
      [  120.880011]                                lock(rtnl_mutex);
      [  120.880011]   lock(&pn->all_ppp_mutex);
      [  120.880011]
      [  120.880011]  *** DEADLOCK ***

      Fixes: 8cb775bc0a34 ("ppp: fix device unregistration upon netns deletion")
      Reported-by: Sedat Dilek <sedat.dilek@xxxxxxxxx>
      Tested-by: Sedat Dilek <sedat.dilek@xxxxxxxxx>
      Signed-off-by: Guillaume Nault <g.nault@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21343ac21ec7d871e94e98e288f3398a4207d9c0
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 24 15:46:53 2015 +0530

      net: via/Kconfig: GENERIC_PCI_IOMAP required if PCI not selected

      The builds of allmodconfig of avr32 is failing with:

      drivers/net/ethernet/via/via-rhine.c:1098:2: error: implicit declaration
      of function 'pci_iomap' [-Werror=implicit-function-declaration]
      drivers/net/ethernet/via/via-rhine.c:1119:2: error: implicit declaration
      of function 'pci_iounmap' [-Werror=implicit-function-declaration]

      The generic empty pci_iomap and pci_iounmap is used only if CONFIG_PCI
      is not defined and CONFIG_GENERIC_PCI_IOMAP is defined.

      Add GENERIC_PCI_IOMAP in the dependency list for VIA_RHINE as we are
      getting build failure when CONFIG_PCI and CONFIG_GENERIC_PCI_IOMAP both
      are not defined.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ea29da1d04f56e167ec8cc5ed15e927997d9d67
  Author: Michal KubeÄ?ek <mkubecek@xxxxxxx>
  Date:   Thu Sep 24 10:59:05 2015 +0200

      net: remove unused argument of __netdev_find_adj()

      The __netdev_find_adj() helper does not use its first argument, only the
      device to find and list to walk through.

      Signed-off-by: Michal Kubecek <mkubecek@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 119e359c6f2254b3b0724f951e786f19405d2299
  Merge: f37db85 008aa6a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 12:27:23 2015 -0700

      Merge branch 'l2tp-module-autoloading'

      Stephen Hemminger says:

      ====================
      l2tp: module autoloading

      With L2TP it was necessary to manually load modules
      which is a nuisance and not required with other tunneling
      protocols. This set of patches adds the aliases and module
      load hook to get rid of the necessity of modprobing.
      ====================

      Acked-By: James Chapman <jchapman@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 008aa6a4faac36fe623ff5a1ba753dc9b0d8102e
  Author: stephen hemminger <stephen@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:33:36 2015 -0700

      l2tp: remove references to modprobe in documentation

      No longer need explicit modprobe's and update to use ip instead
      of deprecated ifconfig command.

      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 163c2e252fa658ac26edda78d2a9e3939f7d10e5
  Author: stephen hemminger <stephen@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:33:35 2015 -0700

      l2tp: auto load IP modules

      When creating a IP encapsulated tunnel the necessary l2tp module
      should be loaded. It already works for UDP encapsulation, it just
      doesn't work for direct IP encap.

      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f1f39f91102733bcde2462c6a138f636ee541ea8
  Author: stephen hemminger <stephen@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:33:34 2015 -0700

      l2tp: auto load type modules

      It should not be necessary to do explicit module loading when
      configuring L2TP. Modules should be loaded as needed instead
      (as is done already with netlink and other tunnel types).

      This patch adds a new module alias type and code to load
      the sub module on demand.

      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f37db85d0c1eb6e4e8460cf7a13cfba42bfc2cb0
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Wed Sep 23 18:19:58 2015 -0700

      net: dsa: Set a "dsa" device_type

      Provide a device_type information for slave network devices created by
      DSA, this is useful for user-space application to easily locate/search
      for devices of a specific kind.

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 357cd64c18404309aabefb82019b12773de31a12
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 00:07:17 2015 +0100

      phy: marvell: add link partner advertised modes

      Read the standard link partner advertisment registers and store it in
      phydev->lp_advertising, so ethtool can report this information to
      userspace via ethtool.  Zero it as per genphy if autonegotiation is
      disabled.  Tested with a Marvell 88E1512 PHY.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03e8f644868f147e021e8660346890e731c2e435
  Merge: 101688f 2b9dbef
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 12:08:41 2015 -0700

      Merge branch 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes from Chris Mason:
       "This is an assorted set I've been queuing up:

        Jeff Mahoney tracked down a tricky one where we ended up starting IO
        on the wrong mapping for special files in btrfs_evict_inode.  A few
        people reported this one on the list.

        Filipe found (and provided a test for) a difficult bug in reading
        compressed extents, and Josef fixed up some quota record keeping with
        snapshot deletion.  Chandan killed off an accounting bug during DIO
        that lead to WARN_ONs as we freed inodes"

      * 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        Btrfs: keep dropped roots in cache until transaction commit
        Btrfs: Direct I/O: Fix space accounting
        btrfs: skip waiting on ordered range for special files
        Btrfs: fix read corruption of compressed and shared extents
        Btrfs: remove unnecessary locking of cleaner_mutex to avoid deadlock
        Btrfs: don't initialize a space info as full to prevent ENOSPC

  commit c3852ab0e606212de523c1fb1e15adbf9f431619
  Author: Doug Ledford <dledford@xxxxxxxxxx>
  Date:   Fri Sep 25 14:35:01 2015 -0400

      IB/ipoib: Make sendonly multicast joins create the mcast group

      Since IPoIB should, as much as possible, emulate how multicast
      sends work on Ethernet for regular TCP/IP apps, there should be
      no requirement to subscribe to a multicast group before your
      sends are properly sent.  However, due to the difference in how
      multicast is handled on InfiniBand, we must join the appropriate
      multicast group before we can send to it.  Previously we tried
      not to trigger the auto-create feature of the subnet manager when
      doing this because we didn't have tracking of these sendonly
      groups and the auto-creation might never get undone.  The previous
      patch added timing to these sendonly joins and allows us to
      leave them after a reasonable idle expiration time.  So supply
      all of the information needed to auto-create group.

      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit bd99b2e05c4df2a428e5c9dd338289089d0e26df
  Author: Christoph Lameter <cl@xxxxxxxxx>
  Date:   Thu Sep 24 12:00:05 2015 -0500

      IB/ipoib: Expire sendonly multicast joins

      On neighbor expiration, check to see if the neighbor was actually a
      sendonly multicast join, and if so, leave the multicast group as we
      expire the neighbor.

      Signed-off-by: Christoph Lameter <cl@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 101688f534fd322520678a184fdfedc7a21741fc
  Merge: ddff42e 500d701
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:33:52 2015 -0700

      Merge tag 'nfs-for-4.3-2' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs

      Pull NFS client bugfixes from Trond Myklebust:
       "Highlights include:

        Stable patches:
         - fix v4.2 SEEK on files over 2 gigs
         - Fix a layout segment reference leak when pNFS I/O falls back to 
inband I/O.
         - Fix recovery of recalled read delegations

        Bugfixes:
         - Fix a case where NFSv4 fails to send CLOSE after a server reboot
         - Fix sunrpc to wait for connections to complete before retrying
         - Fix sunrpc races between transport connect/disconnect and shutdown
         - Fix an infinite loop when layoutget fail with BAD_STATEID
         - nfs/filelayout: Fix NULL reference caused by double freeing of 
fh_array
         - Fix a bogus WARN_ON_ONCE() in O_DIRECT when layout 
commit_through_mds is set
         - Fix layoutreturn/close ordering issues"

      * tag 'nfs-for-4.3-2' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs:
        NFS41: make close wait for layoutreturn
        NFS: Skip checking ds_cinfo.buckets when lseg's commit_through_mds is 
set
        NFSv4.x/pnfs: Don't try to recover stateids twice in layoutget
        NFSv4: Recovery of recalled read delegations is broken
        NFS: Fix an infinite loop when layoutget fail with BAD_STATEID
        NFS: Do cleanup before resetting pageio read/write to mds
        SUNRPC: xs_sock_mark_closed() does not need to trigger socket autoclose
        SUNRPC: Lock the transport layer on shutdown
        nfs/filelayout: Fix NULL reference caused by double freeing of fh_array
        SUNRPC: Ensure that we wait for connections to complete before retrying
        SUNRPC: drop null test before destroy functions
        nfs: fix v4.2 SEEK on files over 2 gigs
        SUNRPC: Fix races between socket connection and destroy code
        nfs: fix pg_test page count calculation
        Failing to send a CLOSE if file is opened WRONLY and server reboots on 
a 4.x mount

  commit ddff42e5926bc0fcfcbc7d035cdbc325c36351bc
  Merge: 966966a 7f57d80
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:25:30 2015 -0700

      Merge tag 'sound-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

      Pull sound fixes from Takashi Iwai:
       "This ended up with a larger set of fixes than wished, unfortunately.

        As diffstat shows, the majority of changes are for various ASoC
        drivers (Realtek, Wolfson codec drivers, etc), in addition to a couple
        of HD-audio regression fixes.  All these are reasonably small and
        nothing to scare much"

      * tag 'sound-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound: (29 commits)
        ALSA: hda - Disable power_save_node for Thinkpads
        ALSA: hda/tegra - async probe for avoiding module loading deadlock
        ASoC: rt5645: Prevent the pop sound in case of playback and the jack is 
plugging
        ASoC: rt5645: Increase the delay time to remove the pop sound
        ASoC: rt5645: Use the type SOC_DAPM_SINGLE_AUTODISABLE to prevent the 
weird sound in runtime of power up
        ASoC: pxa: pxa2xx-ac97: fix dma requestor lines
        MAINTAINERS: Update website and git repo for Wolfson Microelectronics
        ASoC: fsl_ssi: Fix checking of dai format for AC97 mode
        ASoC: wm0010: fix error path
        ASoC: wm0010: fix memory leak
        ASoC: wm8960: correct the max register value of mic boost pga
        ASoC: wm8962: remove 64k sample rate support
        ASoC: davinci-mcasp: Fix devm_kasprintf format string
        ASoC: fix broken pxa SoC support
        ASoC: davinci-mcasp: Set .symmetric_rates = 1 in snd_soc_dai_driver
        ASoC: au1x: psc-i2s: Fix unused variable 'ret' warning
        ASoC: SPEAr: Make SND_SPEAR_SOC select SND_SOC_GENERIC_DMAENGINE_PCM
        ASoC: mediatek: Increase periods_min in capture
        ASoC: davinci-mcasp: Revise the FIFO threshold calculation
        ASoC: wm8960: correct gain value for input PGA and add microphone PGA
        ...

  commit 966966a630d936310ebb0f9bfe9e23a662d00454
  Merge: b6d980f de24c18
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:16:53 2015 -0700

      Merge tag 'pci-v4.3-fixes-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci

      Pull PCI fixes from Bjorn Helgaas:
       "These are fixes for things we merged for v4.3 (VPD, MSI, and bridge
        window management), and a new Renesas R8A7794 SoC device ID.

        Details:

        Resource management:
         - Revert pci_read_bridge_bases() unification (Bjorn Helgaas)
         - Clear IORESOURCE_UNSET when clipping a bridge window (Bjorn
           Helgaas)

        MSI:
         - Fix MSI IRQ domains for VFs on virtual buses (Alex Williamson)

        Renesas R-Car host bridge driver:
         - Add R8A7794 support (Sergei Shtylyov)

        Miscellaneous:
         - Fix devfn for VPD access through function 0 (Alex Williamson)
         - Use function 0 VPD only for identical functions (Alex Williamson)"

      * tag 'pci-v4.3-fixes-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci:
        PCI: rcar: Add R8A7794 support
        PCI: Use function 0 VPD for identical functions, regular VPD for others
        PCI: Fix devfn for VPD access through function 0
        PCI/MSI: Fix MSI IRQ domains for VFs on virtual buses
        PCI: Clear IORESOURCE_UNSET when clipping a bridge window
        PCI: Revert "PCI: Call pci_read_bridge_bases() from core instead of 
arch code"

  commit 8494cdea2223b66491df1264619e2205b4487913
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:00:10 2015 +0200

      spi: davinci: fix handling platform_get_irq result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit b6d980f49342cbf823ef72fee8a572e43d43bcf8
  Merge: 57cb635 920552b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 10:51:40 2015 -0700

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM fixes from Paolo Bonzini:
       "AMD fixes for bugs introduced in the 4.2 merge window, and a few PPC
        bug fixes too"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        KVM: disable halt_poll_ns as default for s390x
        KVM: x86: fix off-by-one in reserved bits check
        KVM: x86: use correct page table format to check nested page table 
reserved bits
        KVM: svm: do not call kvm_set_cr0 from init_vmcb
        KVM: x86: trap AMD MSRs for the TSeg base and mask
        KVM: PPC: Book3S: Take the kvm->srcu lock in 
kvmppc_h_logical_ci_load/store()
        KVM: PPC: Book3S HV: Pass the correct trap argument to 
kvmhv_commence_exit
        KVM: PPC: Book3S HV: Fix handling of interrupted VCPUs
        kvm: svm: reset mmu on VCPU reset

  commit 438470b84c119f4910ebf1fdd26738c8d9881b24
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 24 13:06:04 2015 -0600

      EDAC: Fix sysfs dimm_label store operation

      Sysfs "dimm_label" and "chX_dimm_label" nodes have the following issues
      in their store operation:

       1) A newline-terminated input string causes redundant newlines:

        # echo "test" > /sys/bus/mc0/devices/dimm0/dimm_label
        # cat  /sys/bus/mc0/devices/dimm0/dimm_label
        test

        #  od -bc /sys/bus/mc0/devices/dimm0/dimm_label
        0000000 164 145 163 164 012 012
                  t   e   s   t  \n  \n
        0000006

       2) The original label string (31 characters) cannot be stored due to
          an improper size check:

        # echo "CPU_SrcID#0_Ha#0_Chan#0_DIMM#0" > 
/sys/bus/mc0/devices/dimm0/dimm_label
        # cat /sys/bus/mc0/devices/dimm0/dimm_label

        # od -bc /sys/bus/mc0/devices/dimm0/dimm_label
         0000000 012 012
                  \n  \n
         0000002

       3) An input string longer than the buffer size results a wrong label
          info as it allows a retry with the remaining string:

        # echo "CPU_SrcID#0_Ha#0_Chan#0_DIMM#0_TEST" > 
/sys/bus/mc0/devices/dimm0/dimm_label
        # cat  /sys/bus/mc0/devices/dimm0/dimm_label
        _TEST

      Fix these issues by making the following changes:
       1) Replace a newline character at the end by setting a null. It also
          assures that the string is null-terminated in the label buffer.
       2) Check the label buffer size with 'sizeof(dimm->label)'.
       3) Fail a request if its string exceeds the label buffer size.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Acked-by: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Robert Elliott <elliott@xxxxxxx>
      Link: http://lkml.kernel.org/r/1443121564.25474.160.camel@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 1ea62c59c80090dd4621911e1b7853c379da5fd7
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Tue Sep 22 08:58:02 2015 -0600

      EDAC: Fix sysfs dimm_label show operation

      After

        7d375bffa524 ("sb_edac: Fix support for systems with two home agents 
per socket")

      sysfs "dimm_label" and "chX_dimm_label" show their label string without a
      newline "\n" at the end.

        [root@orange ~]# cat /sys/bus/mc0/devices/dimm0/dimm_label
        CPU_SrcID#0_Ha#0_Chan#0_DIMM#0[root@orange ~]#

        [root@orange ~]# cat 
/sys/devices/system/edac/mc/mc0/csrow0/ch0_dimm_label
        CPU_SrcID#0_Ha#0_Chan#0_DIMM#0[root@orange ~]#

      The label strings now have 31 characters, which are the same as
      EDAC_MC_LABEL_LEN. Since the snprintf()s in channel_dimm_label_show()
      and dimmdev_label_show() limit the whole length by EDAC_MC_LABEL_LEN,
      the newline in the format "%s\n" is ignored.

        [root@orange ~]# od -bc /sys/bus/mc0/devices/dimm0/dimm_label
        0000000 103 120 125 137 123 162 143 111 104 043 060 137 110 141 043 060
                  C   P   U   _   S   r   c   I   D   #   0   _   H   a   #   0
        0000020 137 103 150 141 156 043 060 137 104 111 115 115 043 060 000
                  _   C   h   a   n   #   0   _   D   I   M   M   #   0  \0
        0000037

      Fix it by using 'sizeof(dimm->label) + 1' as the whole length in the
      snprintf()s in channel_dimm_label_show() and dimmdev_label_show().

      Reported-by: Robert Elliott <elliott@xxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Acked-by: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442933883-21587-2-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 57cb635c5cb6eea54af02aea5edd003b6b2715a7
  Merge: ced255c d6eb71a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 10:11:26 2015 -0700

      Merge tag 'powerpc-4.3-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixes from Michael Ellerman:
       - Wire up sys_membarrier()
       - cxl: Fix lockdep warning while creating afu_err_buff from Vaibhav

      * tag 'powerpc-4.3-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        cxl: Fix lockdep warning while creating afu_err_buff attribute
        powerpc: Wire up sys_membarrier()

  commit 536b5603e7a3c75c7d2e0c1c56980690909b12d3
  Merge: 6ff33f3 b4fe8ba
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Sep 25 10:01:09 2015 -0700

      Merge tag 'ib-mfd-regmap-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd into regmap-irq-hdr

      Immutable branch between MFD and Regmap due for v4.3

  commit b4b05b9af35e4ba8aee4fc8fcfc4175c7feb3544
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sat Aug 29 01:25:01 2015 +0200

      pinctrl: mediatek: Consistently use the BIT() macro

      The mediatek pinctrl driver uses the BIT() macro instead of open
      coding 1 << n in all but one place. Replace this occurrence with
      the BIT() macro for consistency.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Matthias Brugger <matthias.bgg@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e74679b38c9417c1c524081121cdcdb36f82264d
  Author: Lars-Peter Clausen <lars@xxxxxxxxxx>
  Date:   Fri Sep 25 11:07:04 2015 +0200

      ASoC: db1200: Fix DAI link format for db1300 and db1550

      Commit b4508d0f95fa ("ASoC: db1200: Use static DAI format setup") switched
      the db1200 driver over to using static DAI format setup instead of a
      callback function. But the commit only added the dai_fmt field to one of
      the three DAI links in the driver. This breaks audio on db1300 and db1550.

      Add the two missing dai_fmt settings to fix the issue.

      Fixes: b4508d0f95fa ("ASoC: db1200: Use static DAI format setup")
      Reported-by: Manuel Lauss <manuel.lauss@xxxxxxxxx>
      Tested-by: Manuel Lauss <manuel.lauss@xxxxxxxxx>
      Signed-off-by: Lars-Peter Clausen <lars@xxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit c5ce767088a5ab7a051006c7c1f6e2c2ab9f460d
  Author: Xing Zheng <zhengxing@xxxxxxxxxxxxxx>
  Date:   Fri Aug 28 13:46:47 2015 +0800

      pinctrl: rockchip: add support for the rk3036

      Many parts of pinctrl rk3036 are similar to rk2928's.

      Signed-off-by: Xing Zheng <zhengxing@xxxxxxxxxxxxxx>
      Reviewed-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 283e8ba2dfde54f8f27d7d0f459a07de79a39d55
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 25 16:31:46 2015 +0100

      MODSIGN: Change from CMS to PKCS#7 signing if the openssl is too old

      The sign-file.c program actually uses CMS rather than PKCS#7 to sign a 
file
      since that allows the target X.509 certificate to be specified by
      subjectKeyId rather than by issuer + serialNumber.

      However, older versions of the OpenSSL crypto library (such as may be 
found
      in CentOS 5.11) don't support CMS.  Assume everything prior to
      OpenSSL-1.0.0 doesn't support CMS and switch to using PKCS#7 in that case.

      Further, the pre-1.0.0 OpenSSL only supports PKCS#7 signing with SHA1, so
      give an error from the sign-file script if the caller requests anything
      other than SHA1.

      The compiler gives the following error with an OpenSSL crypto library
      that's too old:

        HOSTCC  scripts/sign-file
      scripts/sign-file.c:23:25: fatal error: openssl/cms.h: No such file or 
directory
       #include <openssl/cms.h>

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Acked-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit e7c87bef7de2417b219d4dbfe8d33a0098a8df54
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 25 16:31:46 2015 +0100

      X.509: Don't strip leading 00's from key ID when constructing key 
description

      Don't strip leading zeros from the crypto key ID when using it to 
construct
      the struct key description as the signature in kernels up to and including
      4.2 matched this aspect of the key.  This means that 1 in 256 keys won't
      actually match if their key ID begins with 00.

      The key ID is stored in the module signature as binary and so must be
      converted to text in order to invoke request_key() - but it isn't stripped
      at this point.

      Something like this is likely to be observed in dmesg when the key is 
loaded:

      [    1.572423] Loaded X.509 cert 'Build time autogenerated kernel
          key: 62a7c3d2da278be024da4af8652c071f3fea33'

      followed by this when we try and use it:

        [    1.646153] Request for unknown module key 'Build time autogenerated
          kernel key: 0062a7c3d2da278be024da4af8652c071f3fea33' err -11

      The 'Loaded' line should show an extra '00' on the front of the hex 
string.

      This problem should not affect 4.3-rc1 and onwards because there the key
      should be matched on one of its auxiliary identities rather than the key
      struct's description string.

      Reported-by: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Reported-by: Andy Whitcroft <apw@xxxxxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>

  commit 292c6091353475d94e2cfb49c29906e88ee967ba
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 25 16:31:45 2015 +0100

      KEYS: Remove unnecessary header #inclusions from extract-cert.c

      Remove headers #included unnecessarily from extract-cert.c lest they cause
      compilation of the tool to fail against an older OpenSSL library.

      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Acked-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit 94c4554ba07adbdde396748ee7ae01e86cf2d8d7
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 25 16:30:08 2015 +0100

      KEYS: Fix race between key destruction and finding a keyring by name

      There appears to be a race between:

       (1) key_gc_unused_keys() which frees key->security and then calls
           keyring_destroy() to unlink the name from the name list

       (2) find_keyring_by_name() which calls key_permission(), thus accessing
           key->security, on a key before checking to see whether the key usage 
is 0
           (ie. the key is dead and might be cleaned up).

      Fix this by calling ->destroy() before cleaning up the core key data -
      including key->security.

      Reported-by: Petr Matousek <pmatouse@xxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>

  commit 81fb5e26a9d05674c048803a20cb8f08a1b1c9b8
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:34:24 2015 +0300

      IB/mlx5: Remove pa_lkey usages

      Since mlx5 driver cannot rely on registration using the
      reserved lkey (global_dma_lkey) it used to allocate a private
      physical address lkey for each allocated pd.
      Commit 96249d70dd70 ("IB/core: Guarantee that a local_dma_lkey
      is available") just does it in the core layer so we can go ahead
      and use that.

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit c6790aa9f4fdc26b1246ba36da2fd749663beb65
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:34:23 2015 +0300

      IB/mlx5: Remove support for IB_DEVICE_LOCAL_DMA_LKEY

      Commit 96249d70dd70 ("IB/core: Guarantee that a local_dma_lkey
      is available") allows ULPs that make use of the local dma key to keep
      working as before by allocating a DMA MR with local permissions and
      converted these consumers to use the MR associated with the PD
      rather then device->local_dma_lkey.

      ConnectIB has some known issues with memory registration
      using the local_dma_lkey (SEND, RDMA, RECV seems to work ok).

      Thus don't expose support for it (remove device->local_dma_lkey
      setting), and take advantage of the above commit such that no regression
      is introduced to working systems.

      The local_dma_lkey support will be restored in CX4 depending on FW
      capability query.

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3cffd930171518821595839c5ce7036894ef0d74
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:34:22 2015 +0300

      IB/iser: Add module parameter for always register memory

      This module parameter forces memory registration even for
      a continuous memory region. It is true by default as sending
      an all-physical rkey with remote permissions might be insecure.

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit bb6c96d72879fe1f674a804eb95b891def4ace61
  Author: Chuck Lever <chuck.lever@xxxxxxxxxx>
  Date:   Thu Sep 24 10:34:21 2015 +0300

      xprtrdma: Replace global lkey with lkey local to PD

      The core API has changed so that devices that do not have a global
      DMA lkey automatically create an mr, per-PD, and make that lkey
      available. The global DMA lkey interface is going away in favor of
      the per-PD DMA lkey.

      The per-PD DMA lkey is always available. Convert xprtrdma to use the
      device's per-PD DMA lkey for regbufs, no matter which memory
      registration scheme is in use.

      Signed-off-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: linux-nfs <linux-nfs@xxxxxxxxxxxxxxx>
      Acked-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 310b7cec8ea32dcd4e9978423717ce78dd89d45d
  Merge: e116a64 1f93e4a
  Author: Doug Ledford <dledford@xxxxxxxxxx>
  Date:   Fri Sep 25 10:46:07 2015 -0400

      Merge tag 'v4.3-rc2' into k.o/for-4.3-v1

      Linux 4.3-rc2

  commit 05bd7762faac386c224b159607fdaf65e5760672
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 25 09:05:04 2015 +0000

      Bluetooth: btuart_cs: Comparison to NULL re-written

      NOT NULL comparison modified to be readable, reported
      by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 7a1dc788e5c754685e3491c637875d8368bea42d
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 25 09:02:18 2015 +0000

      Bluetooth: bt3c_cs: Comparison to NULL re-written

      NOT NULL comparison modified to be readable, reported
      by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b5cabbcbd157a4bf5a92dfc85134999a3b55342d
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Thu Sep 24 13:05:22 2015 +0300

      perf tools: Fix copying of /proc/kcore

      A copy of /proc/kcore containing the kernel text can be made to the
      buildid cache. e.g.

        perf buildid-cache -v -k /proc/kcore

      To workaround objdump limitations, a copy is also made when annotating
      against /proc/kcore.

      The copying process stops working from libelf about v1.62 onwards (the
      problem was found with v1.63).

      The cause is that a call to gelf_getphdr() in kcore__add_phdr() fails
      because additional validation has been added to gelf_getphdr().

      The use of gelf_getphdr() is a misguided attempt to get default
      initialization of the Gelf_Phdr structure.  That should not be
      necessary because every member of the Gelf_Phdr structure is
      subsequently assigned.  So just remove the call to gelf_getphdr().

      Similarly, a call to gelf_getehdr() in gelf_kcore__init() can be
      removed also.

      Committer notes:

      Note to stable@xxxxxxxxxx, from Adrian in the cover letter for this
      patchkit:

      The "Fix copying of /proc/kcore" problem goes back to v3.13 if you think
      it is important enough for stable.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443089122-19082-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 043cba96915b9728b9d52c04954de5d1ce61be32
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Wed Sep 23 17:41:01 2015 -0700

      arm64, EDAC: Add L3/SoC DT subnodes to the APM X-Gene SoC EDAC node

      Add L3/SoC DT subnodes to the APM X-Gene SoC EDAC node.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Duc Dang <dhdang@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Iyappan Subramanian <isubramanian@xxxxxxx>
      Cc: jcm@xxxxxxxxxx
      Cc: Keyur Chudgar <kchudgar@xxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: mchehab@xxxxxxxxxxxxxxx
      Cc: patches@xxxxxxx
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Rameshwar Prasad Sahu <rsahu@xxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Tanmay Inamdar <tinamdar@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Y Vo <yvo@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443055261-8613-5-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 597ee40722bf05195f91a41e88e15b79bdab152c
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Thu Sep 24 13:05:21 2015 +0300

      perf intel-pt: Remove no_force_psb from documentation

      no_force_psb was dropped as a late change to the kernel driver.
      Consequently, remove it from the documentation.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443089122-19082-2-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f864b79ba247b0735d7423ca62d9ac5bdce74eac
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Wed Sep 23 17:41:00 2015 -0700

      EDAC, xgene: Add SoC support

      Add support for the SoC component.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: ijc+devicetree@xxxxxxxxxxxxxx
      Cc: jcm@xxxxxxxxxx
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: mark.rutland@xxxxxxx
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: patches@xxxxxxx
      Cc: robh+dt@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443055261-8613-4-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 266fa2b22294909ddf6e7d2f8acfe07adf9fd978
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 24 11:24:18 2015 -0300

      perf probe: Use existing routine to look for a kernel module by 
dso->short_name

      We have map_groups__find_by_name() to look at the list of modules that
      are in place for a given machine, so use it instead of traversing the
      machine dso list, which also includes DSOs for userspace.

      When merging the user and kernel DSO lists a bug was introduced where
      'perf probe' stopped being able to add probes to modules using its short
      name:

        # perf probe -m usbnet --add usbnet_start_xmit
        usbnet_start_xmit is out of .text, skip it.
          Error: Failed to add events.
        #

      With this fix it works again:

        # perf probe -m usbnet --add usbnet_start_xmit
        Added new event:
          probe:usbnet_start_xmit (on usbnet_start_xmit in usbnet)

        You can now use it in all perf tools, such as:

                perf record -e probe:usbnet_start_xmit -aR sleep 1
        #

      Reported-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Fixes: 3d39ac538629 ("perf machine: No need to have two DSOs lists")
      Link: http://lkml.kernel.org/r/20150924015008.GE1897@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9bc1c0c0ec14dcdb6df2c7a39dbaecb383a46681
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Thu Sep 24 10:38:07 2015 -0700

      EDAC, xgene: Fix possible sprintf() overflow issue

      Replace sprintf() with snprintf() to avoid possible string array
      overflow.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: ijc+devicetree@xxxxxxxxxxxxxx
      Cc: jcm@xxxxxxxxxx
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: mark.rutland@xxxxxxx
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: patches@xxxxxxx
      Cc: robh+dt@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443116287-11752-1-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 9347473c7d8218c795b5a73d8d94aa53657d9e29
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Wed Sep 23 17:40:59 2015 -0700

      EDAC, xgene: Add L3 support

      Add EDAC support for the L3 component.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: ijc+devicetree@xxxxxxxxxxxxxx
      Cc: jcm@xxxxxxxxxx
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: mark.rutland@xxxxxxx
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: patches@xxxxxxx
      Cc: robh+dt@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443055261-8613-3-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 3498355eec32cc8307655890916741e8a3419182
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Wed Sep 23 17:40:58 2015 -0700

      EDAC, Documentation: Update X-Gene EDAC binding for L3/SoC subnodes

      Update documentation for the APM X-Gene SoC EDAC DTS binding for L3/SoC
      subnodes.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: jcm@xxxxxxxxxx
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: mchehab@xxxxxxxxxxxxxxx
      Cc: patches@xxxxxxx
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443055261-8613-2-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit f9fef6181a9590261c296be9e2a19b6aa3c13ba7
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 18:21:49 2015 +0200

      phy: berlin-sata: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit 08db7e5cbfc0ec3fa4f6ed483dc663afeae7ce16
  Author: huang lin <hl@xxxxxxxxxxxxxx>
  Date:   Fri Jul 17 15:29:25 2015 +0800

      phy: rockchip-usb: power down phy when rockchip phy probe

      rockchip phy are enable when soc reset, to save power consumption,
      we disable it when probe, and enable each phy when it use

      Signed-off-by: huang lin <hl@xxxxxxxxxxxxxx>
      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit 65d49b3d7068525117f8e1458f0496732d02fe15
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Sep 2 11:32:17 2015 +0300

      phy: qcom-ufs: fix build error when the component is built as a module

      Export the following functions in order to avoid build errors
      when the component PHY_QCOM_UFS is compiled as a module:

      ERROR: "ufs_qcom_phy_disable_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_enable_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_is_pcs_ready"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_disable_iface_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_start_serdes"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_calibrate_phy"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_enable_dev_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_set_tx_lane_enable"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_disable_dev_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_save_controller_version"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_enable_iface_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      make[1]: *** [__modpost] Error 1

      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit 920552b213e3dc832a874b4e7ba29ecddbab31bc
  Author: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 12:34:53 2015 +0200

      KVM: disable halt_poll_ns as default for s390x

      We observed some performance degradation on s390x with dynamic
      halt polling. Until we can provide a proper fix, let's enable
      halt_poll_ns as default only for supported architectures.

      Architectures are now free to set their own halt_poll_ns
      default value.

      Signed-off-by: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 58c95070da3a504fbeca7939435bbb062cb96ea3
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Sep 22 10:15:59 2015 +0200

      KVM: x86: fix off-by-one in reserved bits check

      29ecd6601904 ("KVM: x86: avoid uninitialized variable warning",
      2015-09-06) introduced a not-so-subtle problem, which probably
      escaped review because it was not part of the patch context.

      Before the patch, leaf was always equal to iterator.level.  After,
      it is equal to iterator.level - 1 in the call to is_shadow_zero_bits_set,
      and when is_shadow_zero_bits_set does another "-1" the check on
      reserved bits becomes incorrect.  Using "iterator.level" in the call
      fixes this call trace:

      WARNING: CPU: 2 PID: 17000 at arch/x86/kvm/mmu.c:3385 
handle_mmio_page_fault.part.93+0x1a/0x20 [kvm]()
      Modules linked in: tun sha256_ssse3 sha256_generic drbg binfmt_misc ipv6 
vfat fat fuse dm_crypt dm_mod kvm_amd kvm crc32_pclmul aesni_intel aes_x86_64 
lrw gf128mul glue_helper ablk_helper cryptd fam15h_power amd64_edac_mod k10temp 
edac_core amdkfd amd_iommu_v2 radeon acpi_cpufreq
      [...]
      Call Trace:
        dump_stack+0x4e/0x84
        warn_slowpath_common+0x95/0xe0
        warn_slowpath_null+0x1a/0x20
        handle_mmio_page_fault.part.93+0x1a/0x20 [kvm]
        tdp_page_fault+0x231/0x290 [kvm]
        ? emulator_pio_in_out+0x6e/0xf0 [kvm]
        kvm_mmu_page_fault+0x36/0x240 [kvm]
        ? svm_set_cr0+0x95/0xc0 [kvm_amd]
        pf_interception+0xde/0x1d0 [kvm_amd]
        handle_exit+0x181/0xa70 [kvm_amd]
        ? kvm_arch_vcpu_ioctl_run+0x68b/0x1730 [kvm]
        kvm_arch_vcpu_ioctl_run+0x6f6/0x1730 [kvm]
        ? kvm_arch_vcpu_ioctl_run+0x68b/0x1730 [kvm]
        ? preempt_count_sub+0x9b/0xf0
        ? mutex_lock_killable_nested+0x26f/0x490
        ? preempt_count_sub+0x9b/0xf0
        kvm_vcpu_ioctl+0x358/0x710 [kvm]
        ? __fget+0x5/0x210
        ? __fget+0x101/0x210
        do_vfs_ioctl+0x2f4/0x560
        ? __fget_light+0x29/0x90
        SyS_ioctl+0x4c/0x90
        entry_SYSCALL_64_fastpath+0x16/0x73
      ---[ end trace 37901c8686d84de6 ]---

      Reported-by: Borislav Petkov <bp@xxxxxxxxx>
      Tested-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 6fec21449a62702a582cecbb0b351363e039c95e
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Sep 22 23:02:14 2015 +0200

      KVM: x86: use correct page table format to check nested page table 
reserved bits

      Intel CPUID on AMD host or vice versa is a weird case, but it can
      happen.  Handle it by checking the host CPU vendor instead of the
      guest's in reset_tdp_shadow_zero_bits_mask.  For speed, the
      check uses the fact that Intel EPT has an X (executable) bit while
      AMD NPT has NX.

      Reported-by: Borislav Petkov <bp@xxxxxxxxx>
      Tested-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 79a8059d244e99454e474902e4325ee9b50e9178
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Sep 21 07:46:55 2015 +0200

      KVM: svm: do not call kvm_set_cr0 from init_vmcb

      kvm_set_cr0 may want to call kvm_zap_gfn_range and thus access the
      memslots array (SRCU protected).  Using a mini SRCU critical section
      is ugly, and adding it to kvm_arch_vcpu_create doesn't work because
      the VMX vcpu_create callback calls synchronize_srcu.

      Fixes this lockdep splat:

      ===============================
      [ INFO: suspicious RCU usage. ]
      4.3.0-rc1+ #1 Not tainted
      -------------------------------
      include/linux/kvm_host.h:488 suspicious rcu_dereference_check() usage!

      other info that might help us debug this:
      rcu_scheduler_active = 1, debug_locks = 0
      1 lock held by qemu-system-i38/17000:
       #0:  (&(&kvm->mmu_lock)->rlock){+.+...}, at: 
kvm_zap_gfn_range+0x24/0x1a0 [kvm]

      [...]
      Call Trace:
       dump_stack+0x4e/0x84
       lockdep_rcu_suspicious+0xfd/0x130
       kvm_zap_gfn_range+0x188/0x1a0 [kvm]
       kvm_set_cr0+0xde/0x1e0 [kvm]
       init_vmcb+0x760/0xad0 [kvm_amd]
       svm_create_vcpu+0x197/0x250 [kvm_amd]
       kvm_arch_vcpu_create+0x47/0x70 [kvm]
       kvm_vm_ioctl+0x302/0x7e0 [kvm]
       ? __lock_is_held+0x51/0x70
       ? __fget+0x101/0x210
       do_vfs_ioctl+0x2f4/0x560
       ? __fget_light+0x29/0x90
       SyS_ioctl+0x4c/0x90
       entry_SYSCALL_64_fastpath+0x16/0x73

      Reported-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 54b5b34eded2f068e8db181dec78be07b288dcfc
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 25 07:59:18 2015 +0000

      Bluetooth: bluecard: Comparison to NULL could be re-written

      replaced 'not null' comparison that is readable, reported by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0b101e62afe626ecae60173f92f1e0ec72151653
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Thu Sep 24 14:02:29 2015 +0200

      x86/asm: Force inlining of cpu_relax()

      On x86, cpu_relax() simply calls rep_nop(), which generates one
      instruction, PAUSE (aka REP NOP).

      With this config:

        http://busybox.net/~vda/kernel_config_OPTIMIZE_INLINING_and_Os

      gcc-4.7.2 does not always inline rep_nop(): it generates several
      copies of this:

        <rep_nop> (16 copies, 194 calls):
             55                      push   %rbp
             48 89 e5                mov    %rsp,%rbp
             f3 90                   pause
             5d                      pop    %rbp
             c3                      retq

      See: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=66122

      This patch fixes this via s/inline/__always_inline/
      on rep_nop() and cpu_relax().

      ( Forcing inlining only on rep_nop() causes GCC to
        deinline cpu_relax(), with almost no change in generated code).

            text     data      bss       dec     hex filename
        88118971 19905208 36421632 144445811 89c1173 vmlinux.before
        88118139 19905208 36421632 144444979 89c0e33 vmlinux

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443096149-27291-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7e5560a5648ab2bce7199c73b9c2a51b846f5541
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Thu Sep 24 04:48:53 2015 -0700

      perf/x86: Change test_aperfmperf() and test_intel() to static

      Fixes the following sparse warnings:

       arch/x86/kernel/cpu/perf_event_msr.c:13:6: warning: symbol
       'test_aperfmperf' was not declared. Should it be static?

       arch/x86/kernel/cpu/perf_event_msr.c:18:6: warning: symbol
       'test_intel' was not declared. Should it be static?

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/4588e8ab09638458f2451af572827108be3b4a36.1443123796.git.geliangtang@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3f2c5085ed99b6ad233cf77009c2f4f898b2f7c8
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Tue Sep 1 15:41:06 2015 -0700

      x86/sched/64: Don't save flags on context switch (reinstated)

      This reinstates the following commit:

        2c7577a75837 ("sched/x86_64: Don't save flags on context switch")

      which was reverted in:

        512255a2ad2c ("Revert 'sched/x86_64: Don't save flags on context 
switch'")

      Historically, Linux has always saved and restored EFLAGS across
      context switches.  As far as I know, the only reason to do this
      is because of the NT flag.  In particular, if something calls
      switch_to() with the NT flag set, then we don't want to leak the
      NT flag into a different task that might try to IRET and fail
      because NT is set.

      Before this commit:

        8c7aa698baca ("x86_64, entry: Filter RFLAGS.NT on entry from userspace")

      we could run system call bodies with NT set.  This would be a DoS or 
possibly
      privilege escalation hole if scheduling in such a system call would leak
      NT into a different task.

      Importantly, we don't need to worry about NT being set while
      preemptible or across page faults.  The only way we can schedule
      due to preemption or a page fault is in an interrupt entry that
      nests inside the SYSENTER prologue.  The CPU will clear NT when
      entering through an interrupt gate, so we won't schedule with NT
      set.

      The only other interesting flags are IOPL and AC.  Allowing
      switch_to() to change IOPL has no effect, as the value loaded
      during kernel execution doesn't matter at all except between a
      SYSENTER entry and the subsequent PUSHF, and anythign that
      interrupts in that window will restore IOPL on return.

      If we call __switch_to() with AC set, we have bigger problems.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/d4440fdc2a89247bffb7c003d2a9a2952bd46827.1441146105.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9c9ab385bc6c3f0787f742d5e9baf04063d9697a
  Merge: 93f13a9 bcee19f
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 25 09:28:58 2015 +0200

      Merge branch 'linus' into x86/asm, to refresh the tree before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 673681cafa99776e334c3e61cafa2cf115950c32
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 22:32:14 2015 -0700

      iscsi-target: Avoid OFMarker + IFMarker negotiation

      This patch fixes a v4.2+ regression introduced by commit c04a6091
      that removed support for obsolete sync-and-steering markers usage
      as originally defined in RFC-3720.

      The regression would involve attempting to send OFMarker=No +
      IFMarker=No keys during opertional negotiation login phase,
      including when initiators did not actually propose these keys.

      The result for MSFT iSCSI initiators would be random junk in
      TCP stream after the last successful login request was been sent
      signaling the move to full feature phase (FFP) operation.

      To address this bug, go ahead and avoid negotiating these keys
      by default unless the initiator explicitly proposes them, but
      still respond to them with 'No' if they are proposed.

      Reported-by: Dragan MilivojeviÄ? <galileo@xxxxxxxxxxx>
      Bisected-by: Christophe Vu-Brugier <cvubrugier@xxxxxxxxxxx>
      Tested-by: Christophe Vu-Brugier <cvubrugier@xxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit 8fa3a867486f85df66eba8c4df85804d3309c6ad
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 20:23:53 2015 -0700

      target: Make TCM_WRITE_PROTECT failure honor D_SENSE bit

      This patch changes transport_lookup_cmd_lun() to obtain
      se_lun->lun_ref + se_cmd->se_device rcu_dereference during
      TCM_WRITE_PROTECT -> CHECK_CONDITION failure status.

      Do this to ensure the active control D_SENSE mode page bit
      is being honored.

      Reported-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Reviewed-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit f3bb467ff64b2598d023b3a07592748fa7768b6a
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 23:07:45 2015 -0700

      target: Fix target_sense_desc_format NULL pointer dereference

      This patch allows target_sense_desc_format() to be called without a
      valid se_device pointer, which can occur during an early exception
      ahead of transport_lookup_cmd_lun() setting up se_cmd->se_device.

      This addresses a v4.3-rc1 specific NULL pointer dereference
      regression introduced by commit 4e4937e8.

      Cc: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Cc: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit eeeb9522231118138be418ff527dc8c9050f4707
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 17:27:35 2015 -0700

      target: Propigate backend read-only to core_tpg_add_lun

      This patch adds a DF_READ_ONLY flag that is used by IBLOCK to
      signal when a backend has been set to read-only mode, in order
      to propigate read-only status up to core_tpg_add_lun() for all
      future LUN fabric exports.

      With this is place, existing emulation for reporting read-only
      in spc_emulate_modesense() and normal transport_lookup_cmd_lun()
      TCM_WRITE_PROTECTED status checking just works as expected.

      Reported-by: Joeue Deng <joeue404@xxxxxxxxx>
      Reported-by: Andy Grover <agrover@xxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit 3ccd6e83df8a0d4a664edeecc453c4fa046395fb
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 02:30:46 2015 -0700

      target: Fix PR registration + APTPL RCU conversion regression

      This patch fixes a v4.2+ regression introduced by commit 79dc9c9e86
      where lookup of t10_pr_registration->pr_reg_deve and associated
      ->pr_kref get was missing from __core_scsi3_do_alloc_registration(),
      which is responsible for setting DEF_PR_REG_ACTIVE.

      This would result in REGISTER operations completing successfully,
      but subsequent core_scsi3_pr_seq_non_holder() checking would fail
      with !DEF_PR_REG_ACTIVE -> RESERVATION CONFLICT status.

      Update __core_scsi3_add_registration() to drop ->pr_kref reference
      after registration and any optional ALL_TG_PT=1 processing has
      completed.  Update core_scsi3_decode_spec_i_port() to release
      the new parent local_pr_reg->pr_kref as well.

      Also, update __core_scsi3_check_aptpl_registration() to perform
      the same target_nacl_find_deve() lookup + ->pr_kref get, now that
      __core_scsi3_add_registration() expects to drop the reference.

      Finally, since there are cases when se_dev_entry->se_lun_acl can
      still be dereferenced in core_scsi3_lunacl_undepend_item() while
      holding ->pr_kref, go ahead and move explicit rcu_assign_pointer()
      NULL assignments within core_disable_device_list_for_node() until
      after orig->pr_comp finishes.

      Reported-by: Scott L. Lykens <scott@xxxxxxxxxx>
      Tested-by: Scott L. Lykens <scott@xxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Cc: Hannes Reinecke <hare@xxxxxxx>
      Cc: Lee Duncan <lduncan@xxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2+
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit b626ef0128d254d33ee43c51d68f577bbec370ac
  Merge: 17a10c9 9861f72
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 23:04:53 2015 -0700

      Merge branch 'phy-mdio-refcnt'

      Russell King says:

      ====================
      Phy, mdiobus, and netdev struct device fixes

      The third version of this series fixes the build error which David
      identified, and drops the broken changes for the Cavium Thunger BGX
      ethernet driver as this driver requires some complex changes to
      resolve the leakage - and this is best done by people who can test
      the driver.

      Compared to v2, the only patch which has changed is patch 6
        "net: fix phy refcounting in a bunch of drivers"

      I _think_ I've been able to build-test all the drivers touched by
      that patch to some degree now, though several of them needed the
      Kconfig hacked to allow it (not all had || COMPILE_TEST clause on
      their dependencies.)

      Previous cover letters below:

      This is the second version of the series, with the comments David had
      on the first patch fixed up.  Original series description with updated
      diffstat below.

      While looking at the DSA code, I noticed we have a
      of_find_net_device_by_node(), and it looks like users of that are
      similarly buggy - it looks like net/dsa/dsa.c is the only user.  Fix
      that too.

      Hi,

      While looking at the phy code, I identified a number of weaknesses
      where refcounting on device structures was being leaked, where
      modules could be removed while in-use, and where the fixed-phy could
      end up having unintended consequences caused by incorrect calls to
      fixed_phy_update_state().

      This patch series resolves those issues, some of which were discovered
      with testing on an Armada 388 board.  Not all patches are fully tested,
      particularly the one which touches several network drivers.

      When resolving the struct device refcounting problems, several different
      solutions were considered before settling on the implementation here -
      one of the considerations was to avoid touching many network drivers.
      The solution here is:

        phy_attach*() - takes a refcount
        phy_detach*() - drops the phy_attach refcount

      Provided drivers always attach and detach their phys, which they should
      already be doing, this should change nothing, even if they leak a 
refcount.

        of_phy_find_device() and of_* functions which use that take
        a refcount.  Arrange for this refcount to be dropped once
        the phy is attached.

      This is the reason why the previous change is important - we can't drop
      this refcount taken by of_phy_find_device() until something else holds
      a reference on the device.  This resolves the leaked refcount caused by
      using of_phy_connect() or of_phy_attach().

      Even without the above changes, these drivers are leaking by calling
      of_phy_find_device().  These drivers are addressed by adding the
      appropriate release of that refcount.

      The mdiobus code also suffered from the same kind of leak, but thankfully
      this only happened in one place - the mdio-mux code.

      I also found that the try_module_get() in the phy layer code was utterly
      useless: phydev->dev.driver was guaranteed to always be NULL, so
      try_module_get() was always being called with a NULL argument.  I proved
      this with my SFP code, which declares its own MDIO bus - the module use
      count was never incremented irrespective of how I set the MDIO bus up.
      This allowed the MDIO bus code to be removed from the kernel while there
      were still PHYs attached to it.

      One other bug was discovered: while using in-band-status with mvneta, it
      was found that if a real phy is attached with in-band-status enabled,
      and another ethernet interface is using the fixed-phy infrastructure, the
      interface using the fixed-phy infrastructure is configured according to
      the other interface using the in-band-status - which is caused by the
      fixed-phy code not verifying that the phy_device passed in is actually
      a fixed-phy device, rather than a real MDIO phy.

      Lastly, having mdio_bus reversing phy_device_register() internals seems
      like a layering violation - it's trivial to move that code to the phy
      device layer.
      ====================

      Tested-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9861f72074c77a8a065622c1be7e9c4277e600eb
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:33 2015 +0100

      net: fix net_device refcounting

      of_find_net_device_by_node() uses class_find_device() internally to
      lookup the corresponding network device.  class_find_device() returns
      a reference to the embedded struct device, with its refcount
      incremented.

      Add a comment to the definition in net/core/net-sysfs.c indicating the
      need to drop this refcount, and fix the DSA code to drop this refcount
      when the OF-generated platform data is cleaned up and freed.  Also
      arrange for the ref to be dropped when handling errors.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 38737e490d4ea91660d3cec83ef88c4e6d360ae4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:28 2015 +0100

      phy: add phy_device_remove()

      Add a phy_device_remove() function to complement phy_device_register(),
      which undoes the effects of phy_device_register() by removing the phy
      device from visibility, but not freeing it.

      This allows these details to be moved out of the mdio bus code into
      the phy code where this action belongs.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d618bf2bfd2a095644c852ebea16f5a981f9d875
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:23 2015 +0100

      phy: fixed-phy: properly validate phy in fixed_phy_update_state()

      Validate that the phy_device passed into fixed_phy_update_state() is a
      fixed-phy device before walking the list of phys for a fixed phy at the
      same address.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04d53b20fe44afe635b3d4438b437f7a12927e9a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:18 2015 +0100

      net: fix phy refcounting in a bunch of drivers

      of_phy_find_device() increments the phy struct device refcount, which
      we need to properly balance.  Add code to network drivers using this
      function to ensure that the struct device refcount is correctly
      balanced.

      For xgene, looking back in the history, we should be able to use
      of_phy_connect() with a zero flags argument for the DT case as this is
      how the driver used to operate prior to de7b5b3d790a ("net: eth: xgene:
      change APM X-Gene SoC platform ethernet to support ACPI").

      This leaves the Cavium Thunder BGX unfixed; fixing this driver is a
      complicated task, one which the maintainers need to be involved with.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f018ae7a8c576345d56a0cd40d86c0574a2eb360
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:13 2015 +0100

      of_mdio: fix MDIO phy device refcounting

      bus_find_device() is defined as:

       * This is similar to the bus_for_each_dev() function above, but it
       * returns a reference to a device that is 'found' for later use, as
       * determined by the @match callback.

      and it does indeed return a reference-counted pointer to the device:

              while ((dev = next_device(&i)))
                      if (match(dev, data) && get_device(dev))
                                              ^^^^^^^^^^^^^^^
                              break;
              klist_iter_exit(&i);
              return dev;

      What that means is that when we're done with the struct device, we must
      drop that reference.  Neither of_phy_connect() nor of_phy_attach() did
      this when phy_connect_direct() or phy_attach_direct() failed.

      With our previous patch, phy_connect_direct() and phy_attach_direct()
      take a new refcount on the phy device when successful, so we can drop
      our local reference immediatley after these functions, whether or not
      they succeeded.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7322967bc1bd97ac9c49ecea19e5a1f681ca27ee
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:08 2015 +0100

      phy: add proper phy struct device refcounting

      Take a refcount on the phy struct device when the phy device is attached
      to a network device, and drop it after it's detached.  This ensures that
      a refcount is held on the phy device while the device is being used by
      a network device, thereby preventing the phy_device from being
      unexpectedly kfree()'d by phy_device_release().

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3e3aaf649416988ca8be4ad2c52dc24d8be7b46e
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:02 2015 +0100

      phy: fix mdiobus module safety

      Re-implement the mdiobus module refcounting to ensure that we actually
      ensure that the mdiobus module code does not go away while we might call
      into it.

      The old scheme using bus->dev.driver was buggy, because bus->dev is a
      class device which never has a struct device_driver associated with it,
      and hence the associated code trying to obtain a refcount did nothing
      useful.

      Instead, take the approach that other subsystems do: pass the module
      when calling mdiobus_register(), and record that in the mii_bus struct.
      When we need to increment the module use count in the phy code, use
      this stored pointer.  When the phy is deteched, drop the module
      refcount, remembering that the phy device might go away at that point.

      This doesn't stop the mii_bus going away while there are in-use phys -
      it merely stops the underlying code vanishing.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e496ae690b2faff751e1849fb97b060615e21f28
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:35:57 2015 +0100

      net: dsa: fix of_mdio_find_bus() device refcount leak

      Current users of of_mdio_find_bus() leak a struct device refcount, as
      they fail to clean up the reference obtained inside class_find_device().

      Fix the DSA code to properly refcount the returned MDIO bus by:
      1. taking a reference on the struct device whenever we assign it to
         pd->chip[x].host_dev.
      2. dropping the reference when we overwrite the existing reference.
      3. dropping the reference when we free the data structure.
      4. dropping the initial reference we obtained after setting up the
         platform data structure, or on failure.

      In step 2 above, where we obtain a new MDIO bus, there is no need to
      take a reference on it as we would only have to drop it immediately
      after assignment again, iow:

        put_device(cd->host_dev);       /* drop original assignment ref */
        cd->host_dev = get_device(&mdio_bus_switch->dev); /* get our ref */
        put_device(&mdio_bus_switch->dev); /* drop of_mdio_find_bus ref */

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a136442131443d929d2d8d243157824de4dfbae8
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:35:52 2015 +0100

      phy: fix of_mdio_find_bus() device refcount leak

      of_mdio_find_bus() leaks a struct device refcount, caused by using
      class_find_device() and not realising that the device reference has
      its refcount incremented:

       * Note, you will need to drop the reference with put_device() after use.
      ...
              while ((dev = class_dev_iter_next(&iter))) {
                      if (match(dev, data)) {
                              get_device(dev);
                              break;
                      }

      Update the comment, and arrange for the phy code to drop this refcount
      when disposing of a reference to it.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4110b282059c6ddefe874b718756bbc3bc2db515
  Merge: aee2f54 f623ab7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 22:59:23 2015 -0700

      Merge branch 'switchdev-transaction-item-queue'

      Jiri Pirko says:

      ====================
      switchdev: transaction item queue and cleanup
      ====================

      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f623ab7f51b1bfb523c9cd492747392abf3c4421
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:49 2015 +0200

      switchdev: reduce transaction phase enum down to a boolean

      Now, since we have only 2 values for transaction phase, just use bool.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79a62eb22a5fa4ee5e1f21af5e1f19f493dac5e0
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:48 2015 +0200

      dsa: use prepare/commit switchdev transaction helpers

      The enum is going to disappear, use the helpers instead.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f6467cf229a0e8a7580401b07de2a76e4c8618d
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:47 2015 +0200

      switchdev: remove "ABORT" transaction phase

      No longer used by drivers, as transaction queue with item destructors
      takes care of abort phase internally in switchdev code. So kill it.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2b8a61a6fd5fdd161ae16e4f76bfb09d6de95ddd
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:46 2015 +0200

      switchdev: remove "NONE" transaction phase

      Shouldn't have been there in the first place. Now it is unused, kill it.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac3dbc68a4a74e74f4604207d01456d075394a64
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:45 2015 +0200

      rocker: use switchdev transaction queue for allocated memory

      Benefit from previously introduced transaction item queue infrastructure
      and remove rocker specific transaction memory management.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76c6f945cc8ec92918ab5459eaa0958dedbfbcfe
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:44 2015 +0200

      rocker: push struct switchdev_trans down through rocker code

      There will be needed to have switchdev_trans available down in the call
      chain, so propagate it instead of trans phase enum. This enum will be
      removed anyway. Also, use prepare/commit phase check helpers to get
      information about current phase of transaction.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8bdb427206f077cdb567bf34da2e7212ecb2603c
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:43 2015 +0200

      switchdev: add switchdev_trans_ph_prepare/commit helpers

      Add helpers which should be used int attr_set/obj_add switchdev ops to
      check the phase of transaction.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8db83486e316ff50f97961a82b614985645508e
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:42 2015 +0200

      switchdev: move transaction phase enum under transaction structure

      Before it disappears completely, move transaction phase enum under
      transaction structure and make attr/obj structures a bit cleaner.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7ea6eb3f56f45cf4babae8b9a7421868e5005f17
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:41 2015 +0200

      switchdev: introduce transaction item queue for attr_set and obj_add

      Now, the memory allocation in prepare/commit state is done separatelly
      in each driver (rocker). Introduce the similar mechanism in generic
      switchdev code, in form of queue. That can be used not only for memory
      allocations, but also for different items. Abort item destruction
      is handled as well.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 69f5df491e0becb75d2d795add7481a35218d657
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:40 2015 +0200

      switchdev: rename "trans" to "trans_ph".

      This is temporary, name "trans" will be used for something else and
      "trans_ph" will eventually disappear.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ced255c0c5fb9ab52c9465982f23b1c14005ef8b
  Merge: 4401555 97584d1
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:14:26 2015 -0700

      Merge branch 'next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux

      Pull thermal management fixes from Zhang Rui:

       - Power allocator governor changes to allow binding on thermal zones
         with missing power estimates information.  From Javi Merino.

       - Add compile test flags on thermal drivers that allow it without
         producing compilation errors.  From Eduardo Valentin.

       - Fixes around memory allocation on cpu_cooling.  From Javi Merino.

       - Fix on db8500 cpufreq code to allow autoload.  From Luis de
         Bethencourt.

       - Maintainer entries for cpu cooling device

      * 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux:
        thermal: power_allocator: exit early if there are no cooling devices
        thermal: power_allocator: don't require tzp to be present for the 
thermal zone
        thermal: power_allocator: relax the requirement of two passive trip 
points
        thermal: power_allocator: relax the requirement of a sustainable_power 
in tzp
        thermal: Add a function to get the minimum power
        thermal: cpu_cooling: free power table on error or when unregistering
        thermal: cpu_cooling: don't call kcalloc() under rcu_read_lock
        thermal: db8500_cpufreq_cooling: Fix module autoload for OF platform 
driver
        thermal: cpu_cooling: Add MAINTAINERS entry
        thermal: ti-soc: Kconfig fix to avoid menu showing wrongly
        thermal: ti-soc: allow compile test
        thermal: qcom_spmi: allow compile test
        thermal: exynos: allow compile test
        thermal: armada: allow compile test
        thermal: dove: allow compile test
        thermal: kirkwood: allow compile test
        thermal: rockchip: allow compile test
        thermal: spear: allow compile test
        thermal: hisi: allow compile test
        thermal: Fix thermal_zone_of_sensor_register to match documentation

  commit 0b23a1ece9be2c3e04c3b8d3594a1ada1fa1ae50
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 11:55:36 2015 +0300

      dmaengine: idma64: improve residue estimation

      The residue calculation may provide a wrong estimation when the transfer 
is
      started. There are possible scenarios we have to separate:

        1) the transfer is not started yet; residue is equal to the total
           length;

        2) the transfer is just started (first chunk is ongoing); residue is
           equal to the total length without already transfered bytes;

        3) the transfer is ongoing and we already sent few chunks of data;
           residue is equal to the total length without fully transfered chunks
           and already sent bytes.

      Mistakenly the calculation in cases 2) and 3) was done in the similar way 
and
      the result is equal to -bytes that have been transfered, i.e. quite big 
since
      size_t type can't keep negative values.

      Rewrite the calculation algorithm to be one pass and have a correct 
result.

      Besides above in case user asks for a status of the active DMA descriptor
      without pausing an ongoing transfer the residue will be estimated based 
on the
      register value, though it's still racy. Since the transfer is active the 
value
      is continuously being changed. Here we have to read two registers at a 
time. To
      minimize an error make those reads close to each other.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit c1492b4c541e3a382b60f1b5879cd3c4d246ad31
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:00:17 2015 +0200

      dmaengine: xgene-dma: fix handling xgene_dma_get_ring_size result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit aebf5a67db8dbacbc624b9c652b81f5460b15eff
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Mon Sep 21 11:06:32 2015 +0200

      dmaengine: pxa_dma: fix initial list move

      Since the commit to have an allocated list of virtual descriptors was
      reverted, the pxa_dma driver is broken, as it assumes the descriptor is
      placed on the allocated list upon allocation.

      Fix the issue in pxa_dma by making an allocated virtual descriptor a
      singleton.

      Fixes: 8c8fe97b2b8a ("Revert "dmaengine: virt-dma: don't always free 
descriptor upon completion"")
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit a8360062ccfb4b891d3013d0e55826c8bcb02bfb
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Sep 18 03:08:40 2015 +0200

      PCI / PM: Update runtime PM documentation for PCI devices

      Section 3.2 "Device Runtime Power Management" of pci.txt has become
      outdated, so update it to correctly reflect the current code flow.

      Also update the comment in local_pci_probe() to document the fact
      that pm_runtime_put_noidle() is not the only runtime PM helper
      function that can be used to decrement the device's runtime PM
      usage counter in .probe().

      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Acked-by: Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>

  commit 4401555a98601a3de7cc876ceeac1d5d09f617e6
  Merge: cc8b8fa a13f18f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 17:46:38 2015 -0700

      Merge tag 'devicetree-fixes-for-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux

      Pull DeviceTree fixes from Rob Herring:
       - Silence bogus warning for of_irq_parse_pci
       - Fix typo in ARM idle-states binding doc and dts files
       - Various minor binding documentation updates

      * tag 'devicetree-fixes-for-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux:
        Documentation: arm: Fix typo in the idle-states bindings examples
        gpio: mention in DT binding doc that <name>-gpio is deprecated
        of_pci_irq: Silence bogus "of_irq_parse_pci() failed ..." messages.
        devicetree: bindings: Extend the bma180 bindings with bma250 info
        of: thermal: Mark cooling-*-level properties optional
        of: thermal: Fix inconsitency between cooling-*-state and 
cooling-*-level
        Docs: dt: add #msi-cells to GICv3 ITS binding
        of: add vendor prefix for Socionext Inc.

  commit 680168a58a9315e1301f4ebb062244470d4919b0
  Author: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
  Date:   Tue Sep 22 09:35:31 2015 -0700

      PM / OPP: of_property_count_u32_elems() can return errors

      of_property_count_u32_elems() will never return 0, but a -ve error value
      of a positive count. And so the current !count check is wrong.

      Also, a missing "opp-microvolt" property isn't a problem and so we need
      to do of_find_property() separately to confirm that.

      Fixes: 274659029c9d (PM / OPP: Add support to parse "operating-points-v2" 
bindings)
      Signed-off-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Reviewed-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit fe5b2756c1acbfc2d9df380523ef6320e69bb166
  Merge: 79a313f a797451
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Thu Sep 24 16:51:43 2015 -0700

      Merge tag 'v4.3-rockchip32-dtsfixes1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip into fixes

      Add the ddc-i2c-bus reference to the veyron hdmi nodes,
      so that they can read the edid of connected displays.

      * tag 'v4.3-rockchip32-dtsfixes1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip:
        ARM: dts: Add ddc i2c reference to veyron

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit 79a313f5a587eae14a0f96df5d819c2fe266e3e9
  Author: Benjamin Gaignard <benjamin.gaignard@xxxxxxxxxx>
  Date:   Wed Sep 23 21:48:03 2015 +0200

      ARM: sti: dt: adapt DT to fix probe/bind issues in DRM driver

      STI drm drivers probe and bind using component framework was incorrect.
      In addition to drivers fix DT update is needed to make all sub-components
      become childs of sti-display-subsystem.

      Signed-off-by: Benjamin Gaignard <benjamin.gaignard@xxxxxxxxxx>
      Signed-off-by: Maxime Coquelin <maxime.coquelin@xxxxxx>
      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit bc13b23323b6a6c710ba2c7125866554e8bee84b
  Merge: 54c3cf6 50b956f
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Thu Sep 24 16:48:43 2015 -0700

      Merge tag 'qcom-fixes-for-4.3-rc1' of 
git://codeaurora.org/quic/kernel/agross-msm into fixes

      Qualcomm fixes for v4.3-rc1

      * Add SCM function call stubs on ARM64

      * tag 'qcom-fixes-for-4.3-rc1' of 
git://codeaurora.org/quic/kernel/agross-msm:
        firmware: qcom: scm: Add function stubs for ARM64

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit c3456026adc0b22baae75e2617f370866d98b8ce
  Merge: aee2f54 57781c1
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 01:37:21 2015 +0200

      Merge tag 'ipvs2-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next

      Simon Horman says:

      ====================
      Second Round of IPVS Updates for v4.4

      please consider these bug fixes and extensive clean-ups of IPVS
      from Eric Biederman for v4.4.

      His excellent description of the changes, which is part of an even larger
      set of clean-up work, is as follows:

        I am gradually working my way through the netfilter stack passing struct
        down into the netfilter hooks and from the netfilter hooks and from 
there
        down into the functions that actually care.  This removes the need for
        netfilter functions to guess how to figure out how to compute which
        network namespace they are in and instead provides a simple and reliable
        method to do so.

        The cleanups stand on their own but this is part of a larger effort to
        have routes with an output device that is not in the current network
        namespace.

        The IPVS code has been a bit more of a challenge than most.  Just 
passing
        struct net through to where it is needed did not feel clean to me.  The
        practical issue is that the ipvs code in most places actually wants
        struct netns_ipvs and not struct net.

        So as part of this process I have turned the relationship between struct
        net and the structs netns_ipvs, ip_vs_conn_param, ip_vs_conn, and
        ip_vs_service inside out.  I have modified the ipvs functions to take a
        struct netns_ipvs not a struct net.  The net is code with fewer
        conversions from one type of structure to another.  I did wind up adding
        a struct netns_ipvs parameter to quite a few functions that did not have
        it before so I could pass the structure down from the netfilter hooks to
        where it is actually needed to avoid guessing.

        I have broken up the work in a bunch of small patches so there is at
        least a chance and reviewing that each step I took is correct.  The
        series compiles at each step so bisecting it should not be a problem if
        something weird comes up.

        The first two changes in this series are actually bug fixes.  The first
        is a compile fix for a bug in sctp that came in, in the last round of
        ipvs changes merged into nf-next.  The second fixes an older bug where 
in
        pathological circumstances the wrong network namespace could be used 
when
        a proc file is written to.

        The rest of the patchset is a bunch of boring changes getting pushing
        struct netns_ipvs (and by extension ipvs->net) where it needs to be.
        Either by replacing struct net pointers or adding new struct netns_ipvs
        pointers.  With a handful of other minor cleanups (like removing
        skb_net).

      I have decided include the bug fixes in this pull request. Patch one
      relates to a bug that was added to nf-next recently and is thus not
      applicable to nf . Patch two could arguably be promoted to a fix for v4.3
      and stable though it does not appear to be severe enough to warrant that
      course of action; let me know if you would like me to reconsider.
      ====================

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 9a5e3f27d1b8ca349b79e8b5fe1874eeeedb6f45
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Fri Sep 4 17:38:24 2015 +0530

      ARM: dts: fix omap2+ address translation for pbias

      "ARM: dts: <omap2/omap4/omap5/dra7>: add minimal l4 bus
      layout with control module support" moved pbias_regulator dt node
      from being a child node of ocp to be the child node of
      'syscon'. Since 'syscon' doesn't have the 'ranges' property,
      address translation fails while trying to convert the address
      to resource. Fix it here by populating 'ranges' property in
      syscon dt node.

      Fixes: 72b10ac00eb1 ("ARM: dts: omap24xx: add minimal l4 bus
      layout with control module support")

      Fixes: 7415b0b4c645 ("ARM: dts: omap4: add minimal l4 bus layout
      with control module support")

      Fixes: ed8509edddeb ("ARM: dts: omap5: add minimal l4 bus
      layout with control module support")

      Fixes: d919501feffa ("ARM: dts: dra7: add minimal l4 bus
      layout with control module support")

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      [tony@xxxxxxxxxxx: fixed omap3 pbias to work]
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 4bbc2bc1a4e81c1a3522b3bd9d43fffd2eca8c9e
  Merge: 84ad1ba b9c9364
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:23:20 2015 -0700

      Merge commit 'b8c93646fd5c' into omap-for-v4.3/fixes

  commit 17a10c9215b39a5ea8faeb241759c1aee6553919
  Author: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:01:47 2015 +1200

      ip6_tunnel: Reduce log level in ip6_tnl_err() to debug

      Currently error log messages in ip6_tnl_err are printed at 'warn'
      level. This is different to other tunnel types which don't print
      any messages. These log messages don't provide any information that
      couldn't be deduced with networking tools. Also it can be annoying
      to have one end of the tunnel go down and have the logs fill with
      pointless messages such as "Path to destination invalid or inactive!".

      This patch reduces the log level of these messages to 'dbg' level to
      bring the visible behaviour into line with other tunnel types.

      Signed-off-by: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a13f18f59d2646754cda3662a9e215ff43e7a7d5
  Author: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
  Date:   Thu Sep 24 15:53:56 2015 +0100

      Documentation: arm: Fix typo in the idle-states bindings examples

      The idle-states bindings mandate that the entry-method string
      in the idle-states node must be "psci" for ARM v8 64-bit systems,
      but the examples in the bindings report a wrong entry-method string.
      Owing to this typo, some dts in the kernel wrongly defined the
      entry-method property, since they likely cut and pasted the example
      definition without paying attention to the bindings definitions.

      This patch fixes the typo in the DT idle states bindings examples and
      respective dts in the kernel so that the bindings and related dts
      files are made compliant.

      Signed-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: Howard Chen <howard.chen@xxxxxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit e7ae65ced7dd71aa3dc29bda7a94ac82d9ea7751
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 14:57:25 2015 +0200

      gpio: mention in DT binding doc that <name>-gpio is deprecated

      The gpiolib supports parsing DT properties of the form <name>-gpio but it
      was only added for compatibility with older DT bindings that got it wrong
      and should not be used in newer bindings.

      The commit that added support for this was:

      dd34c37aa3e8 ("gpio: of: Allow -gpio suffix for property names")

      but didn't update the documentation to explain this so it's been a source
      of confusion. So let's make this clear in the GPIO DT binding doc.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit aee2f545f0a12399cc6bbe134d69b8994582b694
  Merge: d8ed625 21dd560
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:39:09 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-23

      This series contains updates to ixgbe only.

      Mark provides all the changes in this series, first clears the destination
      location for I2C data initially so that the received data will not be
      corrupted by previous attempts.  Then reduced the pauses/delays in the
      PHY detection when no SFP is present by reducing the number of retires,
      once an SFP is detected, the "normal" number of retries in PHY detection
      will be used.  Added support for X55EM_x SFP+ dual-speed, and fixed 1G and
      10G link stability for X550EM_x by configuring the CS4227 correctly by
      moving code to ixgbe_setup_mac_link_sfp_x550em().  Added functionality to
      reset CS4227, since on some platforms the CS4227 does not initialize
      properly.  Next reduces the SFP polling rate, due to when an SFP is not
      present, the I2C timeouts that result are very costly.  So prevent the
      SFP polling from being done more than once every two seconds.  Added
      support for I2C bus MUX.  Fixed the setting of RDRXCTL register which
      should fall through X540 and 82599, not 82598.  In addition, added small
      packet padding support in X550 by setting RDRXCTL.PSP when the driver is
      in SRIOV mode.  Fixed a known hardware issue where the PCI transactions
      pending bit sticks high when there are pending transactions, so
      workaround the issue by wait and then continue with our reset flow.
      Added a new device ID for X550EM device with SFPs.  Provided a fix with
      the DCA setup, which was suggested by Alex Duyck <aduyck@xxxxxxxxxxxx>,
      by making it so that we always set the relaxed ordering bits related to
      the DCA registers even if DCA is not enbaled.  Then moves the
      configuration out of the ixgbe_down() and into ixgbe_configure() before
      enabling the transmit and receive rings.  This ensures that DCA is
      configured correctly before starting the processing of packets.
      Fixed VM-to-VM loopback mode which requires that FCRTH be set, but
      the datasheets did not specify what the value should be.  It has now
      been determined that the correct value should be RXPBSIZE - (24*1024).
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc8b8faea417bd264d23fa5d017da52b75bbdf94
  Merge: bfbaa60 fd03420
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:37:06 2015 -0700

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Most of the GPU drivers people were at XDC last week, so I didn't get
        much to send, so I let it rollover until this week.

        Also Alex was away for 3 weeks so amdgpu/radeon got a bit more stuff
        than usual in one go.

        I've been trying to figure out some 4.2 issues with i915 still (that
        are fixed in 4.3, but bisecting ends up in a merge commit).  Hopefully
        next week I or i915 people can work that out"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux: (46 commits)
        drm: Allow also control clients to check the drm version
        drm/vmwgfx: Fix uninitialized return in vmw_kms_helper_dirty()
        drm/vmwgfx: Fix uninitialized return in vmw_cotable_unbind()
        drm/layerscape: fix handling fsl_dcu_drm_plane_index result
        drm/mgag200: Fix driver_load error handling
        drm/mgag200: Fix error handling paths in fbdev driver
        drm/qxl: only report first monitor as connected if we have no state
        drm/radeon: add quirk for MSI R7 370
        drm/amdgpu: Sprinkle drm_modeset_lock_all to appease locking checks
        drm/radeon: Sprinkle drm_modeset_lock_all to appease locking checks
        drm/amdgpu: sync ce and me with SWITCH_BUFFER(2)
        drm/amdgpu: integer overflow in amdgpu_mode_dumb_create()
        drm/amdgpu: info leak in amdgpu_gem_metadata_ioctl()
        drm/amdgpu: integer overflow in amdgpu_info_ioctl()
        drm/amdgpu: unwind properly in amdgpu_cs_parser_init()
        drm/amdgpu: Fix max_vblank_count value for current display engines
        drm/amdgpu: use kmemdup rather than duplicating its implementation
        drm/amdgpu: fix UVD suspend and resume for VI APU
        drm/amdgpu: fix the UVD suspend sequence order
        drm/amdgpu: make UVD handle checking more strict
        ...

  commit deccbe80be947fa89bca18510699893c38856f38
  Merge: a46496c babc305e2
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:36:20 2015 -0700

      Merge tag 'mac80211-for-davem-2015-09-22' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211

      Johannes Berg says:

      ====================
      Just two small fixes:
       * VHT MCS mask array overrun, reported by Dan Carpenter
       * reset CQM history to always get a notification, from Sara Sharon
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a46496ce38eeb401344d5623c1960dbf2f1769be
  Author: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 16:58:31 2015 +1200

      ip6_gre: Reduce log level in ip6gre_err() to debug

      Currently error log messages in ip6gre_err are printed at 'warn'
      level. This is different to most other tunnel types which don't
      print any messages. These log messages don't provide any information
      that couldn't be deduced with networking tools. Also it can be annoying
      to have one end of the tunnel go down and have the logs fill with
      pointless messages such as "Path to destination invalid or inactive!".

      This patch reduces the log level of these messages to 'dbg' level to
      bring the visible behaviour into line with other tunnel types.

      Signed-off-by: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 41fc014332d91ee90c32840bf161f9685b7fbf2b
  Author: Wilson Kok <wkok@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 21:40:22 2015 -0700

      fib_rules: fix fib rule dumps across multiple skbs

      dump_rules returns skb length and not error.
      But when family == AF_UNSPEC, the caller of dump_rules
      assumes that it returns an error. Hence, when family == AF_UNSPEC,
      we continue trying to dump on -EMSGSIZE errors resulting in
      incorrect dump idx carried between skbs belonging to the same dump.
      This results in fib rule dump always only dumping rules that fit
      into the first skb.

      This patch fixes dump_rules to return error so that we exit correctly
      and idx is correctly maintained between skbs that are part of the
      same dump.

      Signed-off-by: Wilson Kok <wkok@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit de24c18c0faca5ebd618e1cb87f5489745e40475
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 12 02:06:09 2015 +0300

      PCI: rcar: Add R8A7794 support

      Add Renesas R8A7794 SoC support to the Renesas R-Car gen2 PCI driver.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <helgaas@xxxxxxxxxx>
      Acked-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit da2d03ea27f6ed9d2005a67b20dd021ddacf1e4d
  Author: Alex Williamson <alex.williamson@xxxxxxxxxx>
  Date:   Tue Sep 15 22:24:46 2015 -0600

      PCI: Use function 0 VPD for identical functions, regular VPD for others

      932c435caba8 ("PCI: Add dev_flags bit to access VPD through function 0")
      added PCI_DEV_FLAGS_VPD_REF_F0.  Previously, we set the flag on every
      non-zero function of quirked devices.  If a function turned out to be
      different from function 0, i.e., it had a different class, vendor ID, or
      device ID, the flag remained set but we didn't make VPD accessible at all.

      Flip this around so we only set PCI_DEV_FLAGS_VPD_REF_F0 for functions 
that
      are identical to function 0, and allow regular VPD access for any other
      functions.

      [bhelgaas: changelog, stable tag]
      Fixes: 932c435caba8 ("PCI: Add dev_flags bit to access VPD through 
function 0")
      Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <helgaas@xxxxxxxxxx>
      Acked-by: Myron Stowe <myron.stowe@xxxxxxxxxx>
      Acked-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx

  commit 9d9240756e63dd87d6cbf5da8b98ceb8f8192b55
  Author: Alex Williamson <alex.williamson@xxxxxxxxxx>
  Date:   Tue Sep 15 11:17:21 2015 -0600

      PCI: Fix devfn for VPD access through function 0

      Commit 932c435caba8 ("PCI: Add dev_flags bit to access VPD through 
function
      0") passes PCI_SLOT(devfn) for the devfn parameter of pci_get_slot().
      Generally this works because we're fairly well guaranteed that a PCIe
      device is at slot address 0, but for the general case, including
      conventional PCI, it's incorrect.  We need to get the slot and then 
convert
      it back into a devfn.

      Fixes: 932c435caba8 ("PCI: Add dev_flags bit to access VPD through 
function 0")
      Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <helgaas@xxxxxxxxxx>
      Acked-by: Myron Stowe <myron.stowe@xxxxxxxxxx>
      Acked-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx

  commit 38ea72bdb65df2f40ec77b2c9d1413e7f5e34465
  Author: Alex Williamson <alex.williamson@xxxxxxxxxx>
  Date:   Fri Sep 18 15:08:54 2015 -0600

      PCI/MSI: Fix MSI IRQ domains for VFs on virtual buses

      SR-IOV creates a virtual bus where bus->self is NULL.  When we add VFs and
      scan for an MSI domain, pci_set_bus_msi_domain() dereferences bus->self,
      which causes a kernel NULL pointer dereference oops.

      Scan up to the parent bus until we find a real bridge where we can get the
      MSI domain.

      [bhelgaas: changelog]
      Fixes: 44aa0c657e3e ("PCI/MSI: Add hooks to populate the msi_domain 
field")
      Tested-by: Joerg Roedel <joro@xxxxxxxxxx>
      Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <helgaas@xxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit d8ed625044cdede8661324074aaad7459a1e3c7a
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 22 20:44:17 2015 -0700

      tcp: factorize sk_txhash init

      Neal suggested to move sk_txhash init into tcp_create_openreq_child(),
      called both from IPv4 and IPv6.

      This opportunity was missed in commit 58d607d3e52f ("tcp: provide
      skb->hash to synack packets")

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d682d2bdc30650a5c7ce9908ab83ab674b658744
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 22 17:04:58 2015 -0700

      bnx2x: byte swap rss_key to comply to Toeplitz specs

      After a good amount of debugging, I found bnx2x was byte swaping
      the 40 bytes of rss_key.

      If we byte swap the key, then bnx2x generates hashes matching
      MSDN specs as documented in (Verifying the RSS Hash Calculation)

      https://msdn.microsoft.com/en-us/library/windows/hardware/ff571021%
      28v=vs.85%29.aspx

      It is mostly a non issue, unless we want to mix different NIC
      in a host, and want consistent hashing among all of them, ie
      if they all use the boot time generated rss key, or if some application
      is choosing specific tuple(s) so that incoming traffic lands into known
      rx queue(s).

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d8aecb10115497f6cdf841df8c88ebb3ba25fa28
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Tue Sep 22 17:01:11 2015 -0700

      net: revert "net_sched: move tp->root allocation into fw_init()"

      fw filter uses tp->root==NULL to check if it is the old method,
      so it doesn't need allocation at all in this case. This patch
      reverts the offending commit and adds some comments for old
      method to make it obvious.

      Fixes: 33f8b9ecdb15 ("net_sched: move tp->root allocation into fw_init()")
      Reported-by: Akshat Kakkar <akshat.1984@xxxxxxxxx>
      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bfbaa60d186d81207e61e7f4337fa442860aef72
  Merge: d5fc4f5 012572d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 14:31:40 2015 -0700

      Merge branch 'akpm' (patches from Andrew)

      Merge misc fixes from Andrew Morton:
       "15 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        ocfs2/dlm: fix deadlock when dispatch assert master
        membarrier: clean up selftest
        vmscan: fix sane_reclaim helper for legacy memcg
        lib/iommu-common.c: do not try to deref a null iommu->lazy_flush() 
pointer when n < pool->hint
        x86, efi, kasan: #undef memset/memcpy/memmove per arch
        mm: migrate: hugetlb: putback destination hugepage to active list
        mm, dax: VMA with vm_ops->pfn_mkwrite wants to be write-notified
        userfaultfd: register uapi generic syscall (aarch64)
        userfaultfd: selftest: don't error out if pthread_mutex_t isn't 
identical
        userfaultfd: selftest: return an error if BOUNCE_VERIFY fails
        userfaultfd: selftest: avoid my_bcmp false positives with powerpc
        userfaultfd: selftest: only warn if __NR_userfaultfd is undefined
        userfaultfd: selftest: headers fixup
        userfaultfd: selftests: vm: pick up sanitized kernel headers
        userfaultfd: revert "userfaultfd: waitqueue: add nr wake parameter to 
__wake_up_locked_key"

  commit 8fe79c60a2932b8c8e1a55ac6847467dcd41af0e
  Merge: d5b8d64 b194f30c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 14:31:37 2015 -0700

      Merge branch 'lwt_arp'

      Jiri Benc says:

      ====================
      lwtunnel: make it really work, for IPv4

      One of the selling points of lwtunnel was the ability to specify the 
tunnel
      destination using routes. However, this doesn't really work currently, as
      ARP and ndisc replies are not handled correctly. ARP and ndisc replies 
won't
      have tunnel metadata attached, thus they will be sent out with the default
      parameters or not sent at all, either way never reaching the requester.

      Most of the egress tunnel parameters can be inferred from the ingress
      metada. The only and important exception is UDP ports. This patchset 
infers
      the egress data from the ingress data and disallow settings of UDP ports 
in
      tunnel routes. If there's a need for different UDP ports, a new interface
      needs to be created for each port combination. Note that it's still 
possible
      to specify the UDP ports to use, it just needs to be done while creating 
the
      vxlan/geneve interface.

      This covers only ARPs. IPv6 ndisc has the same problem but is harder to
      solve, as there's already dst attached to outgoing skbs. Ideas to solve 
this
      are welcome.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b194f30c61efb0767a98f47a64530baa8b731670
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Tue Sep 22 18:12:12 2015 +0200

      lwtunnel: remove source and destination UDP port config option

      The UDP tunnel config is asymmetric wrt. to the ports used. The source and
      destination ports from one direction of the tunnel are not related to the
      ports of the other direction. We need to be able to respond to ARP 
requests
      using the correct ports without involving routing.

      As the consequence, UDP ports need to be fixed property of the tunnel
      interface and cannot be set per route. Remove the ability to set ports per
      route. This is still okay to do, as no kernel has been released with these
      attributes yet.

      Note that the ability to specify source and destination ports is preserved
      for other users of the lwtunnel API which don't use routes for tunnel key
      specification (like openvswitch).

      If in the future we rework ARP handling to allow port specification, the
      attributes can be added back.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 63d008a4e9ee86614ca5671b7f3ba447df007190
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Tue Sep 22 18:12:11 2015 +0200

      ipv4: send arp replies to the correct tunnel

      When using ip lwtunnels, the additional data for xmit (basically, the 
actual
      tunnel to use) are carried in ip_tunnel_info either in dst->lwtstate or in
      metadata dst. When replying to ARP requests, we need to send the reply to
      the same tunnel the request came from. This means we need to construct
      proper metadata dst for ARP replies.

      We could perform another route lookup to get a dst entry with the correct
      lwtstate. However, this won't always ensure that the outgoing tunnel is 
the
      same as the incoming one, and it won't work anyway for IPv4 duplicate
      address detection.

      The only thing to do is to "reverse" the ip_tunnel_info.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 729bf329c79684327a55c33cdf21222543a1e5f1
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Wed Sep 23 09:20:55 2015 +0200

      net: axinet: Use of_property_read_u32 instead of open-coding it

      Use of_property_read_u32 instead of of_get_property with return value
      checks and endianness conversion.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Reviewed-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e734a42f046104f798195042e5a4d4b357f0b3fb
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Wed Sep 23 09:20:02 2015 +0200

      net: ll_temac: Use of_property_read_u32 instead of open-coding it

      Use of_property_read_u32 to read the "clock-frequency" property instead
      of using of_get_property with return value checks.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Reviewed-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d5b8d6404395641987db76e28334cae4cef771ae
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Mon Sep 21 16:47:09 2015 +0100

      net: gianfar: remove misuse of IRQF_NO_SUSPEND flag

      The device is set as wakeup capable using proper wakeup API but the
      driver misuses IRQF_NO_SUSPEND to set the interrupt as wakeup source
      which is incorrect.

      This patch removes the use of IRQF_NO_SUSPEND flags replacing it with
      enable_irq_wake instead.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Cc: Kevin Hao <haokexin@xxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Acked-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ae459bdaaeebc632b16e54dcbabb490c6931d61
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Tue Sep 22 12:57:53 2015 -0700

      skbuff: Fix skb checksum flag on skb pull

      VXLAN device can receive skb with checksum partial. But the checksum
      offset could be in outer header which is pulled on receive. This results
      in negative checksum offset for the skb. Such skb can cause the assert
      failure in skb_checksum_help(). Following patch fixes the bug by setting
      checksum-none while pulling outer header.

      Following is the kernel panic msg from old kernel hitting the bug.

      ------------[ cut here ]------------
      kernel BUG at net/core/dev.c:1906!
      RIP: 0010:[<ffffffff81518034>] skb_checksum_help+0x144/0x150
      Call Trace:
      <IRQ>
      [<ffffffffa0164c28>] queue_userspace_packet+0x408/0x470 [openvswitch]
      [<ffffffffa016614d>] ovs_dp_upcall+0x5d/0x60 [openvswitch]
      [<ffffffffa0166236>] ovs_dp_process_packet_with_key+0xe6/0x100 
[openvswitch]
      [<ffffffffa016629b>] ovs_dp_process_received_packet+0x4b/0x80 
[openvswitch]
      [<ffffffffa016c51a>] ovs_vport_receive+0x2a/0x30 [openvswitch]
      [<ffffffffa0171383>] vxlan_rcv+0x53/0x60 [openvswitch]
      [<ffffffffa01734cb>] vxlan_udp_encap_recv+0x8b/0xf0 [openvswitch]
      [<ffffffff8157addc>] udp_queue_rcv_skb+0x2dc/0x3b0
      [<ffffffff8157b56f>] __udp4_lib_rcv+0x1cf/0x6c0
      [<ffffffff8157ba7a>] udp_rcv+0x1a/0x20
      [<ffffffff8154fdbd>] ip_local_deliver_finish+0xdd/0x280
      [<ffffffff81550128>] ip_local_deliver+0x88/0x90
      [<ffffffff8154fa7d>] ip_rcv_finish+0x10d/0x370
      [<ffffffff81550365>] ip_rcv+0x235/0x300
      [<ffffffff8151ba1d>] __netif_receive_skb+0x55d/0x620
      [<ffffffff8151c360>] netif_receive_skb+0x80/0x90
      [<ffffffff81459935>] virtnet_poll+0x555/0x6f0
      [<ffffffff8151cd04>] net_rx_action+0x134/0x290
      [<ffffffff810683d8>] __do_softirq+0xa8/0x210
      [<ffffffff8162fe6c>] call_softirq+0x1c/0x30
      [<ffffffff810161a5>] do_softirq+0x65/0xa0
      [<ffffffff810687be>] irq_exit+0x8e/0xb0
      [<ffffffff81630733>] do_IRQ+0x63/0xe0
      [<ffffffff81625f2e>] common_interrupt+0x6e/0x6e

      Reported-by: Anupam Chanda <achanda@xxxxxxxxxx>
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd03420b5624617a708fb9b13634b41b37c22cfa
  Merge: 0a3579e cd67d22
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Sep 25 06:52:37 2015 +1000

      Merge tag 'drm-intel-fixes-2015-09-24' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      a few drm/i915 fixes, including a fix to the recent regression
      reported by Sedat Dilek

      * tag 'drm-intel-fixes-2015-09-24' of 
git://anongit.freedesktop.org/drm-intel:
        drm/i915/bios: handle MIPI Sequence Block v3+ gracefully
        drm/i915: Add primary plane to mask if it's visible
        drm/i915: workaround bad DSL readout v3
        drm/i915: fix kernel-doc warnings in intel_audio.c

  commit 9badce000e2ce68ba74838a3cd356dde58221c2f
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Wed Sep 23 17:07:29 2015 -0400

      cgroup, writeback: don't enable cgroup writeback on traditional 
hierarchies

      inode_cgwb_enabled() gates cgroup writeback support.  If it returns
      true, each inode is attached to the corresponding memory domain which
      gets mapped to io domain.  It currently only tests whether the
      filesystem and bdi support cgroup writeback; however, cgroup writeback
      support doesn't work on traditional hierarchies and thus it should
      also test whether memcg and iocg are on the default hierarchy.

      This caused traditional hierarchy setups to hit the cgroup writeback
      path inadvertently and ended up creating separate writeback domains
      for each memcg and mapping them all to the root iocg uncovering a
      couple issues in the cgroup writeback path.

      cgroup writeback was never meant to be enabled on traditional
      hierarchies.  Make inode_cgwb_enabled() test whether both memcg and
      iocg are on the default hierarchy.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: Artem Bityutskiy <dedekind1@xxxxxxxxx>
      Reported-by: Dexuan Cui <decui@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/g/1443012552.19983.209.camel@xxxxxxxxx
      Link: 
http://lkml.kernel.org/g/f30d4a6aa8a546ff88f73021d026a453@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

  commit 38cf595b195552276e1cf1826434e05782de4be8
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Tue Sep 22 18:57:13 2015 +0200

      ipv6: remove unused neigh parameter from ndisc functions

      Since commit 12fd84f4383b1 ("ipv6: Remove unused neigh argument for
      icmp6_dst_alloc() and its callers."), the neigh parameter of ndisc_send_na
      and ndisc_send_ns is unused.

      CC: YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>
      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 92c14d9b5ee86fd6cf136c01b6a87353522aebdd
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Tue Sep 22 18:56:43 2015 +0200

      genetlink: simplify genl_notify

      The genl_notify function has too many arguments for no real reason - all
      callers use genl_info to get them anyway. Just pass the genl_info down to
      genl_notify.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit da314c9923fed553a007785a901fd395b7eb6c19
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 11:38:56 2015 +0800

      netlink: Replace rhash_portid with bound

      On Mon, Sep 21, 2015 at 02:20:22PM -0400, Tejun Heo wrote:
      >
      > store_release and load_acquire are different from the usual memory
      > barriers and can't be paired this way.  You have to pair store_release
      > and load_acquire.  Besides, it isn't a particularly good idea to

      OK I've decided to drop the acquire/release helpers as they don't
      help us at all and simply pessimises the code by using full memory
      barriers (on some architectures) where only a write or read barrier
      is needed.

      > depend on memory barriers embedded in other data structures like the
      > above.  Here, especially, rhashtable_insert() would have write barrier
      > *before* the entry is hashed not necessarily *after*, which means that
      > in the above case, a socket which appears to have set bound to a
      > reader might not visible when the reader tries to look up the socket
      > on the hashtable.

      But you are right we do need an explicit write barrier here to
      ensure that the hashing is visible.

      > There's no reason to be overly smart here.  This isn't a crazy hot
      > path, write barriers tend to be very cheap, store_release more so.
      > Please just do smp_store_release() and note what it's paired with.

      It's not about being overly smart.  It's about actually understanding
      what's going on with the code.  I've seen too many instances of
      people simply sprinkling synchronisation primitives around without
      any knowledge of what is happening underneath, which is just a recipe
      for creating hard-to-debug races.

      > > @@ -1539,7 +1546,7 @@ static int netlink_bind(struct socket *sock, 
struct sockaddr *addr,
      > >               }
      > >       }
      > >
      > > -     if (!nlk->portid) {
      > > +     if (!nlk->bound) {
      >
      > I don't think you can skip load_acquire here just because this is the
      > second deref of the variable.  That doesn't change anything.  Race
      > condition could still happen between the first and second tests and
      > skipping the second would lead to the same kind of bug.

      The reason this one is OK is because we do not use nlk->portid or
      try to get nlk from the hash table before we return to user-space.

      However, there is a real bug here that none of these acquire/release
      helpers discovered.  The two bound tests here used to be a single
      one.  Now that they are separate it is entirely possible for another
      thread to come in the middle and bind the socket.  So we need to
      repeat the portid check in order to maintain consistency.

      > > @@ -1587,7 +1594,7 @@ static int netlink_connect(struct socket *sock, 
struct sockaddr *addr,
      > >           !netlink_allowed(sock, NL_CFG_F_NONROOT_SEND))
      > >               return -EPERM;
      > >
      > > -     if (!nlk->portid)
      > > +     if (!nlk->bound)
      >
      > Don't we need load_acquire here too?  Is this path holding a lock
      > which makes that unnecessary?

      Ditto.

      ---8<---
      The commit 1f770c0a09da855a2b51af6d19de97fb955eca85 ("netlink:
      Fix autobind race condition that leads to zero port ID") created
      some new races that can occur due to inconcsistencies between the
      two port IDs.

      Tejun is right that a barrier is unavoidable.  Therefore I am
      reverting to the original patch that used a boolean to indicate
      that a user netlink socket has been bound.

      Barriers have been added where necessary to ensure that a valid
      portid and the hashed socket is visible.

      I have also changed netlink_insert to only return EBUSY if the
      socket is bound to a portid different to the requested one.  This
      combined with only reading nlk->bound once in netlink_bind fixes
      a race where two threads that bind the socket at the same time
      with different port IDs may both succeed.

      Fixes: 1f770c0a09da ("netlink: Fix autobind race condition that leads to 
zero port ID")
      Reported-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Nacked-by: Tejun Heo <tj@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7f57d803ee03730d570dc59a9e3e4842b58dd5cc
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Thu Sep 24 17:36:51 2015 +0200

      ALSA: hda - Disable power_save_node for Thinkpads

      Lenovo Thinkpads with recent Realtek codecs seem suffering from click
      noises at power transition since the introduction of widget power
      saving in 4.1 kernel.  Although this might be solved by some delays in
      appropriate points, as a quick workaround, just disable the
      power_save_node feature for now.  The gain it gives is relatively
      small, and this makes the situation back to pre 4.1 time.

      This patch ended up with a bit more code changes than usual because
      the existing fixup for Thinkpads is highly chained.  Instead of adding
      yet another chain, combine a few of them into a single fixup entry, as
      a gratis cleanup.

      Bugzilla: https://bugzilla.suse.com/show_bug.cgi?id=943982
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 1ce3cbe2ab4074ca5196e74a45665a2cd87bbdb1
  Merge: 8351044 ed14ee0
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Thu Sep 24 20:48:01 2015 +0200

      Merge tag 'asoc-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

      ASoC: Fixes for v4.3

      A disappointingly large set of fixes, though none of them very big and
      very widely spread over many different drivers.  Nothing especially
      stands out, it's mostly all device specific and relatively minor.

  commit c2d5ecfaeafdedfb997a466c654c7029c511f43d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Sep 24 09:37:11 2015 +0200

      mac802154: iface: assume big endian for af_packet

      The callback "create" and "parse" from header_ops are called from
      netdev core upper-layer functionality, like af_packet. These callbacks
      assumes big endian for addresses and we should not introduce a special
      byteordering handling for ieee802154 over af_packet in userspace.

      We have an identical issue with setting the mac address which also
      assumes big endian byteordering.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f856f21dbcd162a53e30987a91d75d5ab54a7f80
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Sep 24 09:37:10 2015 +0200

      ieee802154: remove unnecessary includes

      This patch removes some unnecessary includes from ieee802154 header,
      which was introduced by commit b609fb54adfa ("ieee802154: add helpers for
      frame control checks").

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit d5fc4f555d7d29f9c868e7505e08bcd7676bc943
  Merge: bbad822 711e020
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 11:40:58 2015 -0700

      Merge tag 'spi-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi

      Pull spi fixes from Mark Brown:
       "A disappointingly large collection of fixes for SPI issues, though
        almost all in drivers (and there mainly the newly added Mediatek
        driver) and the core fixes are documentation and error handling.

        The driver fixes are all of the usual 'important if you see them'
        variety"

      * tag 'spi-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:
        spi: xtensa-xtfpga: fix register endianness
        spi: meson: Fix module autoload for OF platform driver
        spi: mediatek: fix wrong error return value on probe
        spi: fix kernel-doc warnings in spi.h
        spi: spidev: fix possible NULL dereference
        spi: atmel: remove warning when !CONFIG_PM_SLEEP
        spi: bcm2835: BUG: fix wrong use of PAGE_MASK
        spi: mediatek: fix spi cs polarity error
        spi: Fix documentation of spi_alloc_master()
        spi: spi-pxa2xx: Check status register to determine if SSSR_TINT is 
disabled
        spi: Mediatek: Document devicetree bindings update for spi bus
        spi: mediatek: fix spi clock usage error
        spi: mediatek: remove clk_disable_unprepare()

  commit 2900ea609616c2651dec65312beeb2a6e536bc50
  Author: Seth Jennings <sjenning@xxxxxxxxxx>
  Date:   Wed Aug 5 13:16:01 2015 -0500

      EDAC, sb_edac: Fix TAD presence check for sbridge_mci_bind_devs()

      In commit

        7d375bffa524 ("sb_edac: Fix support for systems with two home agents 
per socket")

      NUM_CHANNELS was changed to 8 and the channel space was renumerated to
      handle EN, EP, and EX configurations.

      The *_mci_bind_devs() functions - except for sbridge_mci_bind_devs() -
      got a new device presence check in the form of saw_chan_mask. However,
      sbridge_mci_bind_devs() still uses the NUM_CHANNELS for loop.

      With the increase in NUM_CHANNELS, this loop fails at index 4 since
      SB only has 4 TADs.  This results in the following error on SB machines:

        EDAC sbridge: Some needed devices are missing
        EDAC sbridge: Couldn't find mci handler
        EDAC sbridge: Couldn't find mci handle

      This patch adapts the saw_chan_mask logic for sbridge_mci_bind_devs() as
      well.

      After this patch:

        EDAC MC0: Giving out device to module sbridge_edac.c controller Sandy 
Bridge Socket#0: DEV 0000:3f:0e.0 (POLLED)
        EDAC MC1: Giving out device to module sbridge_edac.c controller Sandy 
Bridge Socket#1: DEV 0000:7f:0e.0 (POLLED)

      Signed-off-by: Seth Jennings <sjenning@xxxxxxxxxx>
      Acked-by: Aristeu Rozanski <aris@xxxxxxxxxx>
      Acked-by: Tony Luck <tony.luck@xxxxxxxxx>
      Tested-by: Borislav Petkov <bp@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438798561-10180-1-git-send-email-sjenning@xxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit eb24d061f4b80338672b7d38ee6331896f0a7710
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Sep 24 19:40:33 2015 +0200

      mrf24j40: remove trailing semicolon

      This patch removes a trailing semicolon which was introduced by commit
      d3f1bc3 ("mrf24j40: add cca mode support") and reported by kbuild test
      robot.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit bbad8220c6ce21edf2144f997e5ba476f5117b33
  Merge: 5146c8e 16651fc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 11:10:03 2015 -0700

      Merge tag 'regulator-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator

      Pull regulator fixes from Mark Brown:
       "A collection of fixes that came in since I tagged the merge window
        pull request for v4.3:

         - Error handling fixes in the core

         - Fixes to a couple of TI drivers for device specific issues

         - Several fixes for module autoloading"

      * tag 'regulator-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:
        regulator: vexpress: Fix module autoload for OF platform driver
        regulator: gpio: Fix module autoload for OF platform driver
        regulator: anatop: Fix module autoload for OF platform driver
        regulator: core: Correct return value check in regulator_resolve_supply
        regulator: tps65218: Fix missing zero typo
        regulator: pbias: program pbias register offset in pbias driver
        regulator: core: fix possible NULL dereference

  commit 5146c8e4dfce5e6c671791b39d5f3c04bbd08715
  Merge: bcee19f 586b286
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 11:04:22 2015 -0700

      Merge tag 'dm-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull device mapper fixes from Mike Snitzer:
       "Two stable@ fixes:

         - DM thinp fix to properly advertise discard support as disabled for
           thin devices backed by a thin-pool with discard support disabled.

         - DM crypt fix to prevent the creation of bios that violate the
           underlying block device's max_segments limits.  This fixes a
           relatively long-standing NCQ SSD corruption issue reported against
           dm-crypt ever since the dm-crypt cpu parallelization patches were
           merged back in 4.0"

      * tag 'dm-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm crypt: constrain crypt device's max_segment_size to PAGE_SIZE
        dm thin: disable discard support for thin devices if pool's is disabled

  commit f881bab038c9667deab19a85d8666029cbfa6f2c
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Wed Sep 23 16:20:43 2015 -0700

      gpio: keep the GPIO line names internal

      This refactors the changes to the GPIO line naming mechanism to
      not have so widespread effects, instead we conclude the patch series
      by having created a name attribute in the GPIO descriptor, that need
      not be globally unique, and it will be initialized from the old
      .names array in struct gpio_chip if it exists, then used in the legacy
      sysfs code like the array was used previously.

      The associated changes to name lines from the device tree are
      controversial and need to stand alone from this. Resulting changes:

      1. Remove the export and the header for the gpio_name_to_desc() as so
      far the only use is inside gpiolib.c. Staticize gpio_name_to_desc()
      and move it above the only function using it.

      2. Only print a warning if there are two GPIO lines with the same name.
      The reason is to preserve current behaviour: before the previous
      changes to the naming mechanism this would not reject probing the
      driver, instead the error would occur when trying to export the line
      in sysfs, so restore this behaviour, but print a friendly warning
      if names collide.

      Cc: Johan Hovold <johan@xxxxxxxxxx>
      Cc: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ced433e2a4a0f11362c149daf802157ffb65ee20
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:11:02 2015 +0200

      gpiolib: Add gpio name information to /sys/kernel/debug/gpio

      Add some information about gpio names to the debugfs gpio file. name and
      label of a GPIO are then displayed next to each other. This way it is
      easy to see what the real name of GPIO is and what the driver requested
      it for.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      [Dropped unsolicited sysfs ABI patch hunk]
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ddd5404007b8496f20ad2efe1147e102e6226634
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:11:01 2015 +0200

      gpio-sysfs: Use gpio descriptor name instead of gpiochip names array

      The name is now stored in the gpio descriptor as well, for example to
      allow to store names from DT. This patch changes the sysfs gpio files
      to use the gpio descriptor name.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5f3ca7329b049b40667a190ddf14b69afdb91576
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:11:00 2015 +0200

      gpiolib: Use GPIO name from names array for gpio descriptor

      This patch adds GPIO names to the GPIO descriptors when initializing the
      gpiochip. It also introduces a check whether any of the new names will
      conflict with an existing GPIO name.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c0017ed71966a19ec40c7bc900d4338ddfbc4105
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:10:59 2015 +0200

      gpio: Introduce gpio descriptor 'name'

      The latest gpio hogging mechanism assigns each gpio a 'line-name' in the
      devicetree. The 'name' field is different from the 'label' field.
      'label' is only used for requested GPIOs to describe its current use by
      driver or userspace.

      The 'name' field describes the GPIO itself, not the use. This is most
      likely identical to the label in the schematic on the GPIO line and
      should help to find this particular GPIO.

      This is equivalent to the gpiochip->names array. However names should be
      stored in the GPIO descriptor. We will use gpiochip->names in the future
      only as initializer for the GPIO descriptors for drivers that assign
      GPIO names hardcoded. All other GPIO names will be parsed from DT and
      directly assigned to the GPIO descriptor.

      This patch adds a helper function to find gpio descriptors by name
      instead of gpio number.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit fd7337fdb9bce420033c28af4c07b73e34e692c1
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:10:58 2015 +0200

      gpiolib-of: Rename gpio_hog functions to be generic

      The gpio hogging functions are currently only used for gpio-hogging. But
      these functions are widely generic ones which parse gpio device nodes in
      the DT.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit b4fe8ba7a310da6a2b99e3abe67c7815198cde49
  Author: Qipeng Zha <qipeng.zha@xxxxxxxxx>
  Date:   Tue Sep 15 00:39:17 2015 +0800

      regmap: Add generic macro to define regmap_irq

      Add REGMAP_IRQ_REG macro in regmap.h to define regmap_irq
      structure easily for other driver module.

      Signed-off-by: Qipeng Zha <qipeng.zha@xxxxxxxxx>
      Acked-by: Mark Brown <broonie@xxxxxxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>

  commit f7418bc10d8402798ee3add5ef0ed5f33266a2bb
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Thu Sep 24 14:59:49 2015 +0200

      mac80211: fix handling of PS filtering with fast-xmit

      Fixes dropped packets in the tx path in case a non-PS station triggers
      the tx filter.

      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit e88ab30d3669f08e94e66e7f926713be93af97fc
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:11 2015 +0200

      Bluetooth: hci_bcm: Add suspend/resume runtime PM functions

      Adds autosuspend runtime functionality to BCM UART driver.
      Autosuspend is enabled at end of bcm_setup.

      bcm_device_lock is used for system sleep functions as they can be
      called at any time.
      bcm_device_lock is not held for runtime suspend functions as this
      is only enabled as long as platform device is opened.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 7649faff1cfe4f76dabf78cd53d659d39f65b3c1
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:10 2015 +0200

      Bluetooth: Remove useless rx_lock spinlock

      rx_lock spinlock is only used in hci_uart_tty_receive() which is the
      receive_buf ldisc callback.

      hci_uart_tty_receive() is protected from re-entrance by its only
      caller (flush_to_ldisc() in drivers/tty/tty_buffer.c) which held a
      mutex (buf->lock) for this section.
      This lock allows "safe use of the line discipline's receive_buf()
      method by excluding the buffer work and any pending flush from using
      the flip buffer." (comments from tty_buffer_lock_exclusive() in
      drivers/tty/tty_buffer.c)

      So, no need to double protect this resource with rx_lock.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b7a622a249736b36c0bf4c3f986ed431281d5e98
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:09 2015 +0200

      Bluetooth: hci_bcm: Prepare PM runtime support

      Change some CONFIG_PM_SLEEP to CONFIG_PM as hu and is_suspended parameters
      will be used during PM runtime callbacks.

      Add bcm_suspend_device() and bcm_resume_device() which performs link
      management for PM callbacks.
      These functions will be used for runtime management.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5cebdfea32b89911d4540440c1c2854a1a3d591e
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:08 2015 +0200

      Bluetooth: hci_bcm: Fix IRQ polarity for T100

      ACPI table for BCM2E39 of T100TA is not correct.
      Set correct irq_polarity for this device.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 594b31ea7dc6101519deee1b31483fce2e1a7414
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:07 2015 +0200

      Bluetooth: Add BT_WARN and bt_dev_warn logging macros

      Add warning logging macros to bluetooth subsystem logs.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0af822110871400908d5b6f83a8908c45f881d8f
  Author: Felipe F. Tonello <eu@xxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 18:40:32 2015 +0100

      ARM: dts: fix usb pin control for imx-rex dts

      This fixes a duplicated pin control causing this error:

      imx6q-pinctrl 20e0000.iomuxc: pin MX6Q_PAD_GPIO_1 already
      requested by regulators:regulator@2; cannot claim for 2184000.usb
      imx6q-pinctrl 20e0000.iomuxc: pin-137 (2184000.usb) status -22
      imx6q-pinctrl 20e0000.iomuxc: could not request pin 137
      (MX6Q_PAD_GPIO_1) from group usbotggrp  on device 20e0000.iomuxc
      imx_usb 2184000.usb: Error applying setting, reverse things
      back
      imx6q-pinctrl 20e0000.iomuxc: pin MX6Q_PAD_EIM_D31 already
      requested by regulators:regulator@1; cannot claim for 2184200.usb
      imx6q-pinctrl 20e0000.iomuxc: pin-52 (2184200.usb) status -22
      imx6q-pinctrl 20e0000.iomuxc: could not request pin 52 (MX6Q_PAD_EIM_D31)
      from group usbh1grp  on device 20e0000.iomuxc
      imx_usb 2184200.usb: Error applying setting, reverse things
      back

      Signed-off-by: Felipe F. Tonello <eu@xxxxxxxxxxxxxxxxx>
      Fixes: e2047e33f2bd ("ARM: dts: add initial Rex Pro board support")
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Shawn Guo <shawnguo@xxxxxxxxxx>

  commit 83510441bc08bee201c0ded9d81da6dfd008d69a
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Thu Sep 24 11:00:18 2015 +0200

      ALSA: hda/tegra - async probe for avoiding module loading deadlock

      The Tegra HD-audio controller driver causes deadlocks when loaded as a
      module since the driver invokes request_module() at binding with the
      codec driver.  This patch works around it by deferring the probe in a
      work like Intel HD-audio controller driver does.  Although hovering
      the codec probe stuff into udev would be a better solution, it may
      cause other regressions, so let's try this band-aid fix until the more
      proper solution gets landed.

      Reported-by: Thierry Reding <treding@xxxxxxxxxx>
      Tested-by: Thierry Reding <treding@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 4bdb4629867babb7a3d93548aa69a4ef07fc36c0
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:12:34 2015 +0200

      OMAPDSS: panel-sony-acx565akm: Export OF module alias information

      Drivers needs to export the OF id table and this be built into
      the module or udev won't have the necessary information to autoload
      the driver module when the device is registered via OF.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit ad38cc5f6d4f2c74ed69e2c017691e428549b2bd
  Author: Vladimir Zapolskiy <vladimir_zapolskiy@xxxxxxxxxx>
  Date:   Tue Sep 15 16:12:33 2015 +0300

      fbdev: omap2: connector-dvi: use of_get_i2c_adapter_by_node interface

      This change is needed to properly lock I2C bus driver, which serves DDC.

      Prior to this change i2c_put_adapter() is misused, which may lead to
      an overflow over zero of I2C bus driver user counter.

      Signed-off-by: Vladimir Zapolskiy <vladimir_zapolskiy@xxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 23aa4db78aa7da994ae12d85acf7413ba2517946
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 21:37:26 2015 +0200

      tridentfb: Fix set_lwidth on TGUI9440 and CYBER9320

      According to X.Org driver, chips older than TGUI9660 have only 1 width bit
      in AddColReg. Touching the 2nd one causes I2C/DDC to fail on TGUI9440.

      Set only 1 bit of width in AddColReg on TGUI9440 and CYBER9320.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 7f2ea957c1152a7b57c22af2ae603bf66965c06e
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 21:37:25 2015 +0200

      tridentfb: fix hang on Blade3D with CONFIG_CC_OPTIMIZE_FOR_SIZE

      When the kernel is compiled with -Os (CONFIG_CC_OPTIMIZE_FOR_SIZE), 
tridentfb
      hangs the machine upon load with Blade3D cards unless acceleration is 
disabled.

      This is caused by memcpy() which copies data byte-by-byte (rep movsb) when
      compiled with -Os. The card does not like that - it requires 32-bit 
access.

      Use iowrite_32() instead.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Krzysztof Helt <krzysztof.h1@xxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 8e9191ac7b29a250b2baab7069ea9cc614c5133c
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 20:46:09 2015 +0200

      video: fbdev: mb862xx: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit d4eb6dee471250661a5183a7336b18c85990e26d
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Thu Sep 24 12:38:22 2015 +0200

      ext4: Update EXT4_USE_FOR_EXT2 description

      Configuration option EXT4_USE_FOR_EXT2 has no effect on ext3 support.
      Support for ext3 is always included now.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Fixes: c290ea01ab ("fs: Remove ext3 filesystem driver")
      Cc: Jan Kara <jack@xxxxxxx>
      Cc: Theodore Ts'o <tytso@xxxxxxx>
      Cc: Andreas Dilger <adilger.kernel@xxxxxxxxx>
      Signed-off-by: Jan Kara <jack@xxxxxxxx>

  commit 274e91b81ed22957b510ad2988359584eea95dae
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 11:06:30 2015 +0100

      ARM: alignment: fix alignment handling for uaccess changes

      Jonathan Liu reports that the recent addition of CPU_SW_DOMAIN_PAN
      causes wpa_supplicant to die due to the following kernel oops:

      Unhandled fault: page domain fault (0x81b) at 0x001017a2
      pgd = ee1b8000
      [001017a2] *pgd=6ebee831, *pte=6c35475f, *ppte=6c354c7f
      Internal error: : 81b [#1] SMP ARM
      Modules linked in: rt2800usb rt2x00usb rt2800librt2x00lib crc_ccitt 
mac80211
      CPU: 1 PID: 202 Comm: wpa_supplicant Not tainted 4.3.0-rc2 #1
      Hardware name: Allwinner sun7i (A20) Family
      task: ec872f80 ti: ee364000 task.ti: ee364000
      PC is at do_alignment_ldmstm+0x1d4/0x238
      LR is at 0x0
      pc : [<c001d1d8>]    lr : [<00000000>]    psr: 600c0113
      sp : ee365e18  ip : 00000000  fp : 00000002
      r10: 001017a2  r9 : 00000002  r8 : 001017aa
      r7 : ee365fb0  r6 : e8820018  r5 : 001017a2  r4 : 00000003
      r3 : d49e30e0  r2 : 00000000  r1 : ee365fbc  r0 : 00000000
      Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none[   
34.393106] Control: 10c5387d  Table: 6e1b806a  DAC: 00000051
      Process wpa_supplicant (pid: 202, stack limit = 0xee364210)
      Stack: (0xee365e18 to 0xee366000)
      ...
      [<c001d1d8>] (do_alignment_ldmstm) from [<c001d510>] 
(do_alignment+0x1f0/0x904)
      [<c001d510>] (do_alignment) from [<c00092a0>] (do_DataAbort+0x38/0xb4)
      [<c00092a0>] (do_DataAbort) from [<c0013d7c>] (__dabt_usr+0x3c/0x40)
      Exception stack(0xee365fb0 to 0xee365ff8)
      5fa0:                                     00000000 56c728c0 001017a2 
d49e30e0
      5fc0: 775448d2 597d4e74 00200800 7a9e1625 00802001 00000021 b6deec84 
00000100
      5fe0: 08020200 be9f4f20 0c0b0d0a b6d9b3e0 600c0010 ffffffff
      Code: e1a0a005 e1a0000c 1affffe8 e5913000 (e4ea3001)
      ---[ end trace 0acd3882fcfdf9dd ]---

      This is caused by the alignment handler not being fixed up for the
      uaccess changes, and userspace issuing an unaligned LDM instruction.
      So, fix the problem by adding the necessary fixups.

      Reported-by: Jonathan Liu <net147@xxxxxxxxx>
      Tested-by: Jonathan Liu <net147@xxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit e03dc19ba9c7ebc48cedc9cb797fa42dff302565
  Author: Jason Jin <Jason.Jin@xxxxxxxxxxxxx>
  Date:   Fri Aug 14 13:54:09 2015 +0800

      video: fbdev: fsl: Fix the sleep function for FSL DIU module

      For deep sleep, the diu module will power off, when wake up
      from the deep sleep, the registers need to be reinitialized.

      Signed-off-by: Jason Jin <Jason.Jin@xxxxxxxxxxxxx>
      Signed-off-by: Wang Dongsheng <dongsheng.wang@xxxxxxxxxxxxx>
      Acked-by: Timur Tabi <timur@xxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 0a3579e39dd0412b3ff932e32ae7a22a604200f0
  Merge: e4b35f9 30c6466
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Sep 24 18:36:04 2015 +1000

      Merge tag 'vmwgfx-fixes-4.3-150924' of 
git://people.freedesktop.org/~thomash/linux into drm-fixes

      Pull request of 2015-09-24

      Vmwgfx fixes for 4.3:
       - A couple of uninitialized variable fixes by Christian Engelmayer
       - A TTM fix for a bug that causes problems with the new vmwgfx device 
init
       - A vmwgfx refcounting fix
       - A vmwgfx iomem caching fix
       - A DRM change to allow also control clients to read the drm driver 
version.

      * tag 'vmwgfx-fixes-4.3-150924' of 
git://people.freedesktop.org/~thomash/linux:
        drm: Allow also control clients to check the drm version
        drm/vmwgfx: Fix uninitialized return in vmw_kms_helper_dirty()
        drm/vmwgfx: Fix uninitialized return in vmw_cotable_unbind()
        drm/vmwgfx: Only build on X86
        drm/ttm: Fix memory space allocation v2
        drm/vmwgfx: Map the fifo as cached
        drm/vmwgfx: Fix up user_dmabuf refcounting

  commit 30c64664f110f76064e364cb5dd385edc3751ba5
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Tue Sep 15 01:11:42 2015 -0700

      drm: Allow also control clients to check the drm version

      This should be harmless.
      Vmware will, due to old infrastructure reasons, be using a privileged
      control client to supply GUI layout information rather than obtaining
      it from the device. That control client will be needing access to DRM
      version information.

      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Brian Paul <brianp@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>
      Acked-by: David Herrmann <dh.herrmann@xxxxxxxxx>

  commit f3b8c0caca02001565cb14b845bf90f59dea8213
  Author: Christian Engelmayer <cengelma@xxxxxx>
  Date:   Sat Sep 19 00:32:24 2015 +0200

      drm/vmwgfx: Fix uninitialized return in vmw_kms_helper_dirty()

      Function vmw_kms_helper_dirty() uses the uninitialized variable ret as
      return value. Make the result deterministic and directly return as the
      variable is unused anyway. Detected by Coverity CID 1324255.

      Signed-off-by: Christian Engelmayer <cengelma@xxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>
      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>

  commit 158ecc39185b885420e5136b803b29be2bbec7fb
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Wed Sep 23 12:49:01 2015 +0200

      x86/fpu: Fixup uninitialized feature_name warning

      Hand in &feature_name to cpu_has_xfeatures() as it is supposed
      to. Fixes an uninitialized warning.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: brgerst@xxxxxxxxx
      Cc: dvlasenk@xxxxxxxxxx
      Cc: fenghua.yu@xxxxxxxxx
      Cc: luto@xxxxxxxxxxxxxx
      Cc: tim.c.chen@xxxxxxxxxxxxxxx
      Fixes: d91cab78133d ("x86/fpu: Rename XSAVE macros")
      Link: http://lkml.kernel.org/r/20150923104901.GA3538@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 49558b471369e790650df8706b5608fee27af42c
  Author: Christian Engelmayer <cengelma@xxxxxx>
  Date:   Sat Sep 19 00:31:10 2015 +0200

      drm/vmwgfx: Fix uninitialized return in vmw_cotable_unbind()

      Function vmw_cotable_unbind() uses the uninitialized variable ret as
      return value. Make the result deterministic and directly return as
      the variable is unused anyway. Detected by Coverity CID 1324256.

      Signed-off-by: Christian Engelmayer <cengelma@xxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>
      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>

  commit 21dd560162d4bbf98cc81b303bfa19740ae5b964
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Tue Aug 11 13:11:58 2015 -0700

      ixgbe: Advance version to 4.2.1

      With the addition of X550em_x SFP+ support, the driver is now
      functionally equivalent to what will be the 4.2.1 driver when
      released, so change the version to match.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c5846ba44500293d290eb2a31bd344565f237ad3
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:27:56 2015 -0700

      ixgbe: X540 thermal warning interrupt not a GPI

      The X540 thermal interrupt (IXGBE_EIMS_TS) is not an SDP, so it
      doesn't need to be enabled in ixgbe_setup_gpie(). In fact the
      value is simply not for the GPIE register at all.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bc1fc64fd2d9093496e5b04c6d94d26bfa629c9c
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:27:51 2015 -0700

      ixgbe: Fix FCRTH value in VM-to-VM loopback mode

      The 82599 and X540 datasheets require that FCRTH be "set" for Tx
      switching (VM-to-VM loopback) but it did not previously specify what
      the value should be set to. It has now been determined that
      the correct value is RXPBSIZE - (24*1024).

      This setting is also required for later devices.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3507a9b8c9d1684b5095c97f587ee46184e590da
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:27:46 2015 -0700

      ixgbe: Only clear adapter_stopped if ixgbe_setup_fc succeeded

      A logic error here results in the adapter_stopped flag only being
      cleared when ixgbe_setup_fc returns an error. Correct the logic.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9de7605ea2389d5ab86d6fbb3f1a11b87665a35c
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:27:41 2015 -0700

      ixgbe: Correct several flaws with with DCA setup

      This change does two things. First, it makes it so that we always
      set the relaxed ordering bits related to the DCA registers even if
      DCA is not enabled. Second, it moves the configuration out of the
      ixgbe_down function and into the ixgbe_configure function before
      enabling the Rx and Tx rings. This ensures that DCA is configured
      correctly before starting to process packets.

      Thanks to Alex Duyck for this fix.

      CC: Alex Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 018d7146eee1942f27675bdabf9b43586bfaef72
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:19:19 2015 -0700

      ixgbe: Add new X550EM SFP+ device ID

      Add new device ID for X550EM device with SFPs.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 7fc151035487916b266257c2e7b8b6cb2a5cd04f
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:19:14 2015 -0700

      ixgbe: Update ixgbe_disable_pcie_master flow for X550*

      This patch skips the PCI transactions pending check in
      ixgbe_disable_pcie_master. This is done to addresses a known HW
      issue where the PCI transactions pending bit sticks high when there
      are pending transactions. HW engineering instructed to workaround
      this issue by wait and then continue with our reset flow.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 88627148400e37b4bff197285d348fc05c9de013
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Tue Sep 22 03:16:27 2015 -0500

      fix encryption error checks on mount

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>

  commit f961ddae164a5288a62146aae191da7bc1ecedb4
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:19:09 2015 -0700

      ixgbe: Add small packet padding support for X550

      This patch sets RDRXCTL.PSP when the driver is in SRIOV mode which
      enables padding of small packets.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ceb1b0b9b4d1089e9f2731a314689ae17784c861
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Thu Sep 24 00:52:37 2015 -0500

      [SMB3] Fix sec=krb5 on smb3 mounts

      Kerberos, which is very important for security, was only enabled for
      CIFS not SMB2/SMB3 mounts (e.g. vers=3.0)

      Patch based on the information detailed in
      http://thread.gmane.org/gmane.linux.kernel.cifs/10081/focus=10307
      to enable Kerberized SMB2/SMB3

      a) SMB2_negotiate: enable/use decode_negTokenInit in SMB2_negotiate
      b) SMB2_sess_setup: handle Kerberos sectype and replicate Kerberos
         SMB1 processing done in sess_auth_kerberos

      Signed-off-by: Noel Power <noel.power@xxxxxxxx>
      Signed-off-by: Jim McDonough <jmcd@xxxxxxxxx>
      CC: Stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>

  commit 052a1a724338bbf4721f8b4d7de8486701fc37cb
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:19:04 2015 -0700

      ixgbe: Correct setting of RDRXCTL register for X550* devices

      Setting the X550* RDRXCTL register should fall through into X540
      and 82599, not 82598.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5967fe225686bcae17352de172573964a15b17d5
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:59 2015 -0700

      ixgbe: Correct error path in semaphore handling

      The timeout path is supposed to release the semaphore, so do that.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 449e21a92411ba35bfa68b4464aa7dbd1f705d28
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:53 2015 -0700

      ixgbe: Add I2C bus mux support

      Take control of an I2C mux that selects which SFP is attached to
      the I2C bus. The control of the mux is captured in the taking and
      releasing of the related semaphore. Because only port 1 can control
      the mux, port 1 always leaves the mux set to select port 0.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 58e7cd24d474c87763387f606e403012f562760b
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:48 2015 -0700

      ixgbe: Limit SFP polling rate

      Reduce the frequency of polling for SFP modules. Because the
      service task sometimes runs at high rates, we can poll for
      SFPs too often. When an SFP is not present, the I2C timeouts
      that result are very costly. So, prevent SFP polling from
      being done more than once every two seconds. To reduce latency,
      the poll time is cleared in a couple of cases to permit the
      next service task execution to poll the SFP module.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 69eec0c2fa8781a6abae96af1f11069e1965cbfe
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:43 2015 -0700

      ixgbe: Allow SFP+ on more than 82598 and 82599

      Since SFP+ can be used with some X550 devices, permit them to be
      detected.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 542b6eecf4c3640f15a84ff89525131d421e7c8c
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:38 2015 -0700

      ixgbe: Add logic to reset CS4227 when needed

      On some hardware platforms, the CS4227 does not initialize properly.
      Detect those cases and reset it appropriately.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e23f33367882450c66f7de8805b98ce7665a7ba9
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:33 2015 -0700

      ixgbe: Fix 1G and 10G link stability for X550EM_x SFP+

      Configures the CS4227 correctly for both 1G and 10G operation,
      by moving the code to ixgbe_setup_mac_link_sfp_x550em(). It
      needs to be in this function because we need both the module
      type and the speed, and this is the only function in the init
      flow that knows the speed. In contrast,
      ixgbe_setup_sfp_modules_X550em() does not know the speed, so we
      can't do anything useful here. This is a fundamental difference
      from the previous flow, and is due to the way the CS4227 is
      implemented.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6d373a1bbb99bdfb9ce820aec9ae5f2e02c8891f
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:28 2015 -0700

      ixgbe: Add X550EM_x dual-speed SFP+ support

      This patch adds X550EM_x SFP+ dual-speed support. 82599 fiber link
      code was moved from ixgbe_82599.c to ixgbe_common.c for use by
      X550EM. SFP MAC link code is added to x550EM.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 56f6ed1ce13b0cb85ae9537f839df7c4ba1f5369
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:22 2015 -0700

      ixgbe: Allow reduced delays during SFP detection

      Reduce the number of retries during PHY detection. This reduces
      pauses when no SFP is present. Once an SFP is detected, the normal
      retry count will be used.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6ee8c9a70d65ee37251465348501a067138050d7
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:17 2015 -0700

      ixgbe: Clear I2C destination location

      Clear the destination location for I2C data initially so that
      the received data will not be affected by previous attempts.
      This could have returned wrong data in certain retry sequences.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 57781c1ceead5a3c1cd3ae11834226ef1de21cb5
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:03:01 2015 -0500

      ipvs: Pass ipvs into ip_vs_gather_frags

      This will be needed later when the network namespace guessing is
      removed from ip_defrag.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 9cfdd75b7c049895317aebb0e27f8112e7e31593
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:03:00 2015 -0500

      ipvs: Remove skb_sknet

      This function adds no real value and it obscures what the code is doing.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7c6c21ee94452081a5219667851d2084a45c5009
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:59 2015 -0500

      ipvs: Remove skb_net

      This hack has no more users so remove it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7d1f88eca0ae7228bdbd971f060603b3a1270693
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:58 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_protocol_net_(init|cleanup)

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 69f390934b26154573fc7c360645ced8b0c7871a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:57 2015 -0500

      ipvs: Remove net argument from ip_vs_tcp_conn_listen

      The argument is unnecessary and in practice confusing,
      and has caused the callers to do all manner of silly things.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit a43d1a6b97433f7774436307708516ee06592c54
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:56 2015 -0500

      ipvs: Pass ipvs through ip_vs_route_me_harder into sysctl_snat_reroute

      This removes the need to use the hack skb_net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7b5f689a2c25fbae66683071e895e444658b0eef
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:55 2015 -0500

      ipvs: Pass ipvs into ip_vs_out_icmp and ip_vs_out_icmp_v6

      This removes the need to compute ipvs with the hack 
"net_ipvs(skb_net(skb))"

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6f2bcea9917d85ff78b3a497e4a96b77b7bc2dd0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:54 2015 -0500

      ipvs: Pass ipvs into ip_vs_in_icmp and ip_vs_in_icmp_v6

      With ipvs passed into ip_vs_in_icmp and ip_vs_in_icmp_v6
      they no longer need to call the hack that is skb_net.

      Additionally ipvs_in_icmp no longer needs to call dev_net(skb->dev)
      and can use the ipvs->net instead.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6e385bb3efdbfaf09b564b93b2a834006802de84
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:53 2015 -0500

      ipvs: Pass ipvs into ip_vs_in

      Derive ipvs from state->net in the callers of ip_vs_in and pass it
      into ip_vs_out.  Removing the need to use the hack skb_net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1b75097dd7a2680d2e209fe452b6fab01a511fb1
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:52 2015 -0500

      ipvs: Pass ipvs into ip_vs_out

      Derive ipvs from state->net in the callers of ip_vs_out and pass it
      into ip_vs_out.  Removing the need to use the hack skb_net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 2300f0451e5fa5016330a5f7878db2ca0858b836
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:51 2015 -0500

      ipvs: Pass ipvs not net into sysctl_nat_icmp_send

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 51efbcbbb29708f8b588fda6cca42d26710f14fd
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:50 2015 -0500

      ipvs: Simplify ipvs and net access in ip_vs_leave

      Stop using the hack skb_net(skb) to compute the network namespace.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 570329487437d4531eb806accdf98726923367ae
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:49 2015 -0500

      ipvs: Wrap sysctl_cache_bypass and remove ifdefs in ip_vs_leave

      With sysctl_cache_bypass now a compile time constant the compiler can
      figue out that it can elimiate all of the code that depends on
      sysctl_cache_bypass being true.

      Also remove the duplicate computation of net previously necessitated
      by #ifdef CONFIG_SYSCTL

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7c08d78e6f122039ab98edf74c3c7b4b15c9fa1d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:48 2015 -0500

      ipvs: Better derivation of ipvs in ip_vs_in_stats and ip_vs_out_stats

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 20868a40d0a6d88467d95fb0e5b0448e6a0c83a0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:47 2015 -0500

      ipvs: Pass ipvs into ensure_mtu_is adequate

      This allows two different ways for computing/guessing net to be
      removed from ensure_mtu_is_adequate.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit f5745f8ae6bd1ac5e59031b2e3e91fcbf4b30c5b
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:46 2015 -0500

      ipvs: Pass ipvs into __ip_vs_get_out_rt_v6

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ecfe87b884dc0ed352b783ad2d7787a5883c60ea
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:45 2015 -0500

      ipvs: Pass ipvs into __ip_vs_get_out_rt

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 361c3f529332b28408ba7f8e8a4fa3ac23c855ff
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:44 2015 -0500

      ipvs: Better derivation of ipvs in ip_vs_tunnel_xmit

      Don't use "net_ipvs(skb_net(skb))" as skb_net is a bad hack.  Instead
      use cp->ipvs and ipvs->net for the net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d8f44c335a1111d647f41e9fa6ae65b18db112e4
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:43 2015 -0500

      ipvs: Pass ipvs into .conn_schedule and ip_vs_try_to_schedule

      This moves the hack "net_ipvs(skb_net(skb))" up one level where it
      will be easier to remove.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 2f3edc6a5bb2a570f491e8e8a4a16526aff3675b
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:42 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_conn_net_init and 
ip_vs_conn_net_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d889717aaf15475e2bfba76320ecd1e8290f6bc8
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:41 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_conn_net_flush

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 754b81a35710e02ffada4d80095318a3e57acd48
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:40 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_conn_hashkey

      Use the address of struct netns_ipvs in the hash not the address of
      struct net.  Both addresses are equally valid candidates and by using
      the address of struct netns_ipvs there becomes no need deal with
      struct net in this part of the code.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0cf705c8c2e8333aff5b472cfff13f9542620500
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:39 2015 -0500

      ipvs: Pass ipvs into conn_out_get

      Move the hack of relying on "net_ipvs(skb_net(skb))" to derive the
      ipvs up a layer.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ab161976421585812bcdab6592852b1b5b7dec1f
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:38 2015 -0500

      ipvs: Pass ipvs into .conn_in_get and ip_vs_conn_in_get_proto

      Stop relying on "net_ipvs(skb_net(skb))" to derive the ipvs as
      skb_net is a hack.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit f5099dd4d98a8cc4ef1003378a4812597cfba4c6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:37 2015 -0500

      ipvs: Pass ipvs into ip_vs_conn_fill_param_proto

      Move the ugly hack net_ipvs(skb_net(skb)) up a layer in the call stack
      so it is easier to remove.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1281a9c2d181a932ae2f59f5711ae087a58f1c13
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:36 2015 -0500

      ipvs: Pass ipvs not net into init_netns and exit_netns

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit c70bd6800abf1fe78d5fca2146f91831e94324d1
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:35 2015 -0500

      ipvs: Pass ipvs not net into [un]register_ip_vs_proto_netns

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b5dd212cc147603372d39dbe52480d687c98da7d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:34 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_app_net_init and ip_vs_app_net_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 09858708e68c7d9900e631e1e6e91a882e59518d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:33 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_app_inc_release

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 9f8128a56ef241753ea038e92948fe13beacf59f
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:32 2015 -0500

      ipvs: Pass ipvs not net to register_ip_vs_app and unregister_ip_vs_app

      Also move the tests for net_ipvs being NULL into __ip_vs_ftp_init
      and __ip_vs_ftp_exit.  The only places where they possibly make
      sense.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3250dc9c52045dd3f38297d1e189cc147a8db884
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:31 2015 -0500

      ipvs: Pass ipvs not net to register_ip_vs_app_inc

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit a080ce38a0b9746ef61af93c0cc300d9131bc8c8
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:30 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_app_inc_new

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 19648918fbf245ab2dda8c7842c9a83fd412ac35
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:29 2015 -0500

      ipvs: Pass ipvs not net into register_app and unregister_app

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit a4dd0360c623e5beac011f3674ff7e13b35b5b05
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:28 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_estimator_net_init and 
ip_vs_estimator_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 70a131a2c815935ecb3b5fa5cb53e6244823d5ff
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:27 2015 -0500

      ipvs: Pass ipvs not net to estimation_timer

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3d99376689ee40d4e88c90d26588268a4fccb383
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:26 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_control_net_(init|cleanup)

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 8b8237a5814d96e2740e9f74ca37688b46625314
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:25 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_control_net_(init|cleanup)_sysctl

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 423b55954de222380a6b63c5b6ae7b6686e98e63
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:24 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_random_drop_entry

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0f34d54bf48892f23e2abef2f9fd8d0237db4623
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:23 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_start_estimator aned ip_vs_stop_estimator

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit cacd1e60f1f2fb863b2272b8557c4fb0d3bc69e9
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:22 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_set_config

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ebea1f7c0b8c0bb02045c87e4b548a31fc5612a6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:21 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_sync_net_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 802cb43703d080bd6269578bf6747189b654cc24
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:20 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_sync_net_init

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1fc12004d2fdb31c1b5db58d51a19bc145f6fcf7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:19 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_proc_sync_conn

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 4f30665bac73cba452fe49f97c51e663b9fec34c
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:18 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_proc_conn

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b61a8c1a40c2a9417eb6f710cce54353d195c9c7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:17 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_sync_conn

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 72e9481e28e4f982b91a58ebce86d27b395d8789
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:16 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_sync_conn_v0

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7d537f3ab7694709981498c37233a0874d18c639
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:15 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_process_message

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 37b68e6ded49c0b7e7434a4ecd17c5553e576b4d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:14 2015 -0500

      ipvs: Store ipvs not net in struct ip_vs_sync_thread_data

      In practice struct netns_ipvs is as meaningful as struct net and more
      useful as it holds the ipvs specific data.  So store a pointer to
      struct netns_ipvs.

      Update the accesses of tinfo->net to access tinfo->ipvs->net instead.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit fd124e2f8bb2ff94a1547a8f1d9741e7ffef1bbb
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:13 2015 -0500

      ipvs: Pass ipvs not net to make_receive_sock

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 68c76b6aa0e02b727e931cd9ce7d969e94a8e845
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:12 2015 -0500

      ipvs: Pass ipvs not net to make_send_sock

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b3cf3cbfb57c273cf9f88230416fcc5b97287862
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:11 2015 -0500

      ipvs: Pass ipvs not net to stop_sync_thread

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6ac121d710697cee894d6981b804583b0a66ed38
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:10 2015 -0500

      ipvs: Pass ipvs not net to start_sync_thread

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit df04ffb766a6eca2805d77e4f38beb7a9764c384
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:09 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_del_daemon

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d8443c5f2b6524bbad465073330f6dba458f8871
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:08 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_new_daemon

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 34c2f5146c6567843b6507aaedd794725ba91496
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:07 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_find_service

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 613fb830b75d6cd0f41f8365d031d10346ac637d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:06 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_parse_service

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit af5403419d1c14bdae11eee55083a0ae308c6ecf
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:05 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_get_timeouts

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 08fff4c3576451cdb33bf1606c90a27c222aae73
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:04 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_get_dest_entries

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b2876b7773f3dbd3989d6e1dbeb2cbe879d84fbd
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:03 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_get_service_entries

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit f1faa1e7495445444c3227f698dacee50176ace0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:02 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_set_timeout

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 18d6ade63c8d796c272e2b4922d649cf108d7980
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:01 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_proto_data_get

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit a47b4300801978745bca9fd08d848b9024eed797
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:00 2015 -0500

      ipvs: Cache ipvs in ip_vs_in_icmp and ip_vs_in_icmp_v6

      Storte the value of net_ipvs in a variable named ipvs so that when
      there are more users struct netns_ipvs in ip_vs_in_cmp and
      ip_vs_in_icmp_v6 they won't need to compute the value again.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit c60856c687d601e908950289f5b3917253e98cb6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:59 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_zero_all

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 56d2169b7734f9b5cb2a4e66887ce6dc33d53632
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:58 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_service_net_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ef7c599d91172d388463c61da6d47d5bb002ca4d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:57 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_flush

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 5060bd8307fcfbd405c6038228e8927e593b2008
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:56 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_add_service

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit cd58278bd4a409af4619bb1d7dc4d80dc3017a50
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:55 2015 -0500

      ipvs: Cache ipvs in ip_vs_genl_set_cmd

      Compute ipvs early in ip_vs_genl_set_cmd and use the cached value to
      access ipvs->sync_state.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 8e743f1b455d40dd34dd76a234e3a01427a7d123
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:54 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_dest_trash_expire

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 79ac82e0aaff327383beb860150fb2a85aa7b743
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:53 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_del_dest

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6c0e14f507364d6a87bb7ce349ba2d97c2ea9480
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:52 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_trash_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit dc2add6f2e35916afd6ffcd7819a06ce9b28063d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:51 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_find_dest

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 48aed1b029597d5f33316b1e978392fe30814f8d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:50 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_has_real_service

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0a4fd6ce92460ec325f7e56813645e4308da170e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:49 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_service_find

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit bb2e2a8c957fd1ae323b84d8a1c3268233669f83
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:48 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_service_find

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ba61f39034dc296990fa2dd7a9c2720f49beee1e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:47 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_svc_hashkey

      Use the address of ipvs not the address of net when computing the
      hash value.  This removes an unncessary dependency on struct net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1ed8b947806155c1898c1af7c664aff1690ca22e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:46 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_svc_fwm_find

      ipvs is what the code actually wants to use.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit f6510b245e0b32b67d836b2ff5c0b132a58a8cbe
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:45 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_svc_fwm_hashkey

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3109d2f2d1fe068f1cc3b1f74f5022ab4aef52a7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:44 2015 -0500

      ipvs: Store ipvs not net in struct ip_vs_service

      In practice struct netns_ipvs is as meaningful as struct net and more
      useful as it holds the ipvs specific data.  So store a pointer to
      struct netns_ipvs.

      Update the accesses of param->net to access param->ipvs->net instead.

      In functions where we are searching for an svc and filtering by net
      filter by ipvs instead.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 19913dec1bc1d1aa5afe26db858507d4c3042665
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:43 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_fill_conn

      ipvs is what is actually desired so change the parameter and the modify
      the callers to pass struct netns_ipvs.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit e64e2b460cedadf93d05a23e9ad397cc0386568c
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:42 2015 -0500

      ipvs: Store ipvs not net in struct ip_vs_conn_param

      In practice struct netns_ipvs is as meaningful as struct net and more
      useful as it holds the ipvs specific data.  So store a pointer to
      struct netns_ipvs.

      Update the accesses of param->net to access param->ipvs->net instead.

      When lookup up struct ip_vs_conn in a hash table replace comparisons
      of cp->net with comparisons of cp->ipvs which is possible
      now that ipvs is present in ip_vs_conn_param.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 58dbc6f2604a2cbff9e6ec144d1bb9d000a1a1ec
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:41 2015 -0500

      ipvs: Store ipvs not net in struct ip_vs_conn

      In practice struct netns_ipvs is as meaningful as struct net and more
      useful as it holds the ipvs specific data.  So store a pointer to
      struct netns_ipvs.

      Update the accesses of conn->net to access conn->ipvs->net instead.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d484fc38124bc198b9285c80d709c9e4ee032085
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:40 2015 -0500

      ipvs: Use state->net in the ipvs forward functions

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 717e917ddfa8db628041490eb44bce5815e947fd
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:39 2015 -0500

      ipvs: Don't use current in proc_do_defense_mode

      Instead store ipvs in extra2 so that proc_do_defense_mode can easily
      find the ipvs that it's value is associated with.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1daea8ed16ae3f949eb82893cd8656f3f08125eb
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:38 2015 -0500

      ipvs: Hoist computation of ipvs earlier in sctp_conn_schedule

      The addition of sysctl_sloppy_sctp in sctp_conn_schedule resulted
      in a use of ipvs before it was computed.  Hoist the computation of
      ipvs earlier to avoid this problem.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7bbe33ff1896d225588b37c574c0d80dbc63c657
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 13:09:32 2015 -0400

      geneve: use network byte order for destination port config parameter

      This is primarily for consistancy with vxlan and other tunnels which
      use network byte order for similar parameters.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 06e60e5912c0373b15143cc52e4a11fafeaafff3
  Author: Max Filippov <jcmvbkbc@xxxxxxxxx>
  Date:   Tue Sep 22 14:27:16 2015 +0300

      net/ethoc: support big-endian register layout

      Signed-off-by: Max Filippov <jcmvbkbc@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e4b35f952be9f5706b22e38c1925b7ac49080d72
  Merge: 14d11b8 e786547
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Sep 24 08:13:34 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      radeon and amdgpu fixes for 4.3.  It's a bit bigger than usual since
      it's 3 weeks worth of fixes since I was on vacation, then at XDC.
      - lots of stability fixes
      - suspend and resume fixes
      - GPU scheduler fixes
      - Misc other fixes

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux: (31 
commits)
        drm/radeon: add quirk for MSI R7 370
        drm/amdgpu: Sprinkle drm_modeset_lock_all to appease locking checks
        drm/radeon: Sprinkle drm_modeset_lock_all to appease locking checks
        drm/amdgpu: sync ce and me with SWITCH_BUFFER(2)
        drm/amdgpu: integer overflow in amdgpu_mode_dumb_create()
        drm/amdgpu: info leak in amdgpu_gem_metadata_ioctl()
        drm/amdgpu: integer overflow in amdgpu_info_ioctl()
        drm/amdgpu: unwind properly in amdgpu_cs_parser_init()
        drm/amdgpu: Fix max_vblank_count value for current display engines
        drm/amdgpu: use kmemdup rather than duplicating its implementation
        drm/amdgpu: fix UVD suspend and resume for VI APU
        drm/amdgpu: fix the UVD suspend sequence order
        drm/amdgpu: make UVD handle checking more strict
        drm/amdgpu: Disable UVD PG
        drm/amdgpu: more scheduler cleanups v2
        drm/amdgpu: cleanup fence queue init v2
        drm/amdgpu: rename fence->scheduler to sched v2
        drm/amdgpu: cleanup entity init
        drm/amdgpu: refine the scheduler job type conversion
        drm/amdgpu: refine the job naming for amdgpu_job and amdgpu_sched_job
        ...

  commit 14d11b8dca17f6dedf4b62d7391b9b294e3414ff
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:47 2015 +0200

      drm/layerscape: fix handling fsl_dcu_drm_plane_index result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 728f86607d47f7d2d24d61fd30852faa66ca5aa9
  Author: Archit Taneja <architt@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:30:55 2015 +0530

      drm/mgag200: Fix driver_load error handling

      mgag200_driver_load's error path just calls the drm driver's
      driver_unload op. It isn't safe to call this because it doesn't handle
      things well if driver_load fails somewhere mid way.

      Replace the call to mgag200_driver_unload with a more finegrained
      error handling path.

      Link: http://lkml.kernel.org/r/55F6E68D.8070800@xxxxxxxxxxxxxx
      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: Dave Airlie <airlied@xxxxxxxxx>
      Cc: David Airlie <airlied@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dri-devel <dri-devel@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Archit Taneja <architt@xxxxxxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit aec9e12953e777f62acdab069656ebd9bcb6c9ba
  Author: Archit Taneja <architt@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:30:54 2015 +0530

      drm/mgag200: Fix error handling paths in fbdev driver

      Set up error handling in mgag200_fbdev_init and mgag200fb_create such that
      they release the things they allocate, rather than relying on someone
      calling mga_fbdev_destroy.

      Based on a patch by Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>

      Link: http://lkml.kernel.org/r/55F6E68D.8070800@xxxxxxxxxxxxxx
      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: Dave Airlie <airlied@xxxxxxxxx>
      Cc: David Airlie <airlied@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dri-devel <dri-devel@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Archit Taneja <architt@xxxxxxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 69e5d3f893e19613486f300fd6e631810338aa4b
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Mon Sep 14 10:28:34 2015 +1000

      drm/qxl: only report first monitor as connected if we have no state

      If the server isn't new enough to give us state, report the first
      monitor as always connected, otherwise believe the server side.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 1bb6aa56bb388ac4f7dba226aa55142fa8c65361
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Sep 22 10:57:04 2015 +0200

      net: davinci_emac: Add support for fixed-link PHY

      In case the DaVinci Emac is directly connected to a
      non-mdio PHY/device, it should be possible to provide
      a fixed link configuration in the DT.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Tested-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b6bd9b5448a9362e3ca33b21f1461baa5500520f
  Author: Shrikrishna Khare <skhare@xxxxxxxxxx>
  Date:   Mon Sep 21 20:01:29 2015 -0700

      Driver: Vmxnet3: Extend register dump support

      Signed-off-by: Shrikrishna Khare <skhare@xxxxxxxxxx>
      Signed-off-by: Bhavesh Davda <bhavesh@xxxxxxxxxx>
      Acked-by: Srividya Murali <smurali@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6015a6c137e5bb5c0484ebe546540f88d690cfd5
  Merge: 16cfbae 25b1029
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:52:02 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-22

      This series contains updates to e1000, e1000e, igbvf, ixgbe, ixgbevf and
      fm10k.

      Jacob provides several updates for fm10k, which cleans up comments and
      most notably a fix for a corner case issue with the PF/VF mailbox code.
      The issue being fm10k_mbx_reset_work clears various states about the
      mailbox, but does not clear the Tx FIFO head/tail pointers.  We also
      are not able to simply clear these pointers, as we would drop
      untransmitted messages without error.  Also adds support for extra debug
      statistics, which provides the ability to see what the PF thinks the
      VF mailboxes look like.

      Don adds support for SFP+ in X550 and support for SCTP flow director
      filters SCTP mask.

      Francois Romieu dusts off the e1000 driver and removes some dead calls
      to e1000_init_eeprom_params().

      Toshiaki Makita provides three patches to enable TSO for stacked VLAN's
      on e1000e, igbvf and ixgbevf.

      Mark provides the first of several ixgbe updates.  First updates the
      driver to accept SFP not present error for all devices, since an SFP
      can still be inserted.  Adds support for SFP insertion interrupt on
      X550EM devices with SPFs.  Adds I2C combined operations on X550EM
      (not X550) devices.  Moved the setting of lan_id to before any I2C
      eeprom access.  Lastly, set the bit bang mode in the hardware when
      performing bit banding I2C operations on X550.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 41b976414c88016e2c9d9b2f6667ee67a998d388
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:45:31 2015 +0100

      8139cp: Dump contents of descriptor ring on TX timeout

      We are seeing unexplained TX timeouts under heavy load. Let's try to get
      a better idea of what's going on.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7f4c685633e2df9ba10d49a31dda13715745db37
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:45:16 2015 +0100

      8139cp: Fix DMA unmapping of transmitted buffers

      The low 16 bits of the 'opts1' field in the TX descriptor are supposed
      to still contain the buffer length when the descriptor is handed back to
      us. In practice, at least on my hardware, they don't. So stash the
      original value of the opts1 field and get the length to unmap from
      there.

      There are other ways we could have worked out the length, but I actually
      want a stash of the opts1 field anyway so that I can dump it alongside
      the contents of the descriptor ring when we suffer a TX timeout.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a5aeee0b79fa99d8e04c98dd4e87d4f52aa497b
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:44:57 2015 +0100

      8139cp: Reduce duplicate csum/tso code in cp_start_xmit()

      We calculate the value of the opts1 descriptor field in three different
      places. With two different behaviours when given an invalid packet to
      be checksummed â?? none of them correct. Sort that out.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a3b804043f490aeec57d8ca5baccdd35e6250857
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:44:38 2015 +0100

      8139cp: Fix TSO/scatter-gather descriptor setup

      When sending a TSO frame in multiple buffers, we were neglecting to set
      the first descriptor up in TSO mode.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 26b0bad6ac3a0167792dc4ffb276c29bc597d239
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:44:06 2015 +0100

      8139cp: Fix tx_queued debug message to print correct slot numbers

      After a certain amount of staring at the debug output of this driver, I
      realised it was lying to me.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aaa0062ecf4877a26dea66bee1039c6eaf906c94
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:43:41 2015 +0100

      8139cp: Do not re-enable RX interrupts in cp_tx_timeout()

      If an RX interrupt was already received but NAPI has not yet run when
      the RX timeout happens, we end up in cp_tx_timeout() with RX interrupts
      already disabled. Blindly re-enabling them will cause an IRQ storm.

      (This is made particularly horrid by the fact that cp_interrupt() always
      returns that it's handled the interrupt, even when it hasn't actually
      done anything. If it didn't do that, the core IRQ code would have
      detected the storm and handled it, I'd have had a clear smoking gun
      backtrace instead of just a spontaneously resetting router, and I'd have
      at *least* two days of my life back. Changing the return value of
      cp_interrupt() will be argued about under separate cover.)

      Unconditionally leave RX interrupts disabled after the reset, and
      schedule NAPI to check the receive ring and re-enable them.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3c6cb3acee6a2350c79df29e1cfb56ad1c9a3e9e
  Merge: d3869ef 8ceaf36
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:37:38 2015 -0700

      Merge branch 'netcp-fixes'

      Murali Karicheri says:

      ====================
      net: netcp: a set of bug fixes

      This patch series fixes a set of issues in netcp driver seen during 
internal
      testing of the driver. While at it, do some clean up as well.

      The fixes are tested on K2HK, K2L and K2E EVMs and the boot up logs can be
      seen at

       http://pastebin.ubuntu.com/12533100/
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ceaf361ffd131e835aef1e6cdb1d5ba70702617
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:11 2015 -0400

      net: netcp: fix deadlock reported by lockup detector

      A deadlock trace is seen in netcp driver with lockup detector enabled.
      The trace log is provided below for reference. This patch fixes the
      bug by removing the usage of netcp_modules_lock within ndo_ops functions.
      ndo_{open/close/ioctl)() is already called with rtnl_lock held. So there
      is no need to hold another mutex for serialization across processes on
      multiple cores.  So remove use of netcp_modules_lock mutex from these
      ndo ops functions.

      ndo_set_rx_mode() shouldn't be using a mutex as it is called from atomic
      context. In the case of ndo_set_rx_mode(), there can be call to this API
      without rtnl_lock held from an atomic context. As the underlying modules
      are expected to add address to a hardware table, it is to be protected
      across concurrent updates and hence a spin lock is used to synchronize
      the access. Same with ndo_vlan_rx_add_vid() & ndo_vlan_rx_kill_vid().

      Probably the netcp_modules_lock is used to protect the module not being
      removed as part of rmmod. Currently this is not fully implemented and
      assumes the interface is brought down before doing rmmod of modules.
      The support for rmmmod while interface is up is expected in a future
      patch set when additional modules such as pa, qos are added. For now
      all of the tests such as if up/down, reboot, iperf works fine with this
      patch applied.

      Deadlock trace seen with lockup detector enabled is shown below for
      reference.

      [   16.863014] ======================================================
      [   16.869183] [ INFO: possible circular locking dependency detected ]
      [   16.875441] 4.1.6-01265-gfb1e101 #1 Tainted: G        W
      [   16.881176] -------------------------------------------------------
      [   16.887432] ifconfig/1662 is trying to acquire lock:
      [   16.892386]  (netcp_modules_lock){+.+.+.}, at: [<c03e8110>]
      netcp_ndo_open+0x168/0x518
      [   16.900321]
      [   16.900321] but task is already holding lock:
      [   16.906144]  (rtnl_mutex){+.+.+.}, at: [<c053a418>] 
devinet_ioctl+0xf8/0x7e4
      [   16.913206]
      [   16.913206] which lock already depends on the new lock.
      [   16.913206]
      [   16.921372]
      [   16.921372] the existing dependency chain (in reverse order) is:
      [   16.928844]
      -> #1 (rtnl_mutex){+.+.+.}:
      [   16.932865]        [<c06023f0>] mutex_lock_nested+0x68/0x4a8
      [   16.938521]        [<c04c5758>] register_netdev+0xc/0x24
      [   16.943831]        [<c03e65c0>] netcp_module_probe+0x214/0x2ec
      [   16.949660]        [<c03e8a54>] netcp_register_module+0xd4/0x140
      [   16.955663]        [<c089654c>] keystone_gbe_init+0x10/0x28
      [   16.961233]        [<c000977c>] do_one_initcall+0xb8/0x1f8
      [   16.966714]        [<c0867e04>] kernel_init_freeable+0x148/0x1e8
      [   16.972720]        [<c05f9994>] kernel_init+0xc/0xe8
      [   16.977682]        [<c0010038>] ret_from_fork+0x14/0x3c
      [   16.982905]
      -> #0 (netcp_modules_lock){+.+.+.}:
      [   16.987619]        [<c006eab0>] lock_acquire+0x118/0x320
      [   16.992928]        [<c06023f0>] mutex_lock_nested+0x68/0x4a8
      [   16.998582]        [<c03e8110>] netcp_ndo_open+0x168/0x518
      [   17.004064]        [<c04c48f0>] __dev_open+0xa8/0x10c
      [   17.009112]        [<c04c4b74>] __dev_change_flags+0x94/0x144
      [   17.014853]        [<c04c4c3c>] dev_change_flags+0x18/0x48
      [   17.020334]        [<c053a9fc>] devinet_ioctl+0x6dc/0x7e4
      [   17.025729]        [<c04a59ec>] sock_ioctl+0x1d0/0x2a8
      [   17.030865]        [<c0142844>] do_vfs_ioctl+0x41c/0x688
      [   17.036173]        [<c0142ae4>] SyS_ioctl+0x34/0x5c
      [   17.041046]        [<c000ff60>] ret_fast_syscall+0x0/0x54
      [   17.046441]
      [   17.046441] other info that might help us debug this:
      [   17.046441]
      [   17.054434]  Possible unsafe locking scenario:
      [   17.054434]
      [   17.060343]        CPU0                    CPU1
      [   17.064862]        ----                    ----
      [   17.069381]   lock(rtnl_mutex);
      [   17.072522]                                lock(netcp_modules_lock);
      [   17.078875]                                lock(rtnl_mutex);
      [   17.084532]   lock(netcp_modules_lock);
      [   17.088366]
      [   17.088366]  *** DEADLOCK ***
      [   17.088366]
      [   17.094279] 1 lock held by ifconfig/1662:
      [   17.098278]  #0:  (rtnl_mutex){+.+.+.}, at: [<c053a418>]
      devinet_ioctl+0xf8/0x7e4
      [   17.105774]
      [   17.105774] stack backtrace:
      [   17.110124] CPU: 1 PID: 1662 Comm: ifconfig Tainted: G        W
      4.1.6-01265-gfb1e101 #1
      [   17.118637] Hardware name: Keystone
      [   17.122123] [<c00178e4>] (unwind_backtrace) from [<c0013cbc>]
      (show_stack+0x10/0x14)
      [   17.129862] [<c0013cbc>] (show_stack) from [<c05ff450>]
      (dump_stack+0x84/0xc4)
      [   17.137079] [<c05ff450>] (dump_stack) from [<c0068e34>]
      (print_circular_bug+0x210/0x330)
      [   17.145161] [<c0068e34>] (print_circular_bug) from [<c006ab7c>]
      (validate_chain.isra.35+0xf98/0x13ac)
      [   17.154372] [<c006ab7c>] (validate_chain.isra.35) from [<c006da60>]
      (__lock_acquire+0x52c/0xcc0)
      [   17.163149] [<c006da60>] (__lock_acquire) from [<c006eab0>]
      (lock_acquire+0x118/0x320)
      [   17.171058] [<c006eab0>] (lock_acquire) from [<c06023f0>]
      (mutex_lock_nested+0x68/0x4a8)
      [   17.179140] [<c06023f0>] (mutex_lock_nested) from [<c03e8110>]
      (netcp_ndo_open+0x168/0x518)
      [   17.187484] [<c03e8110>] (netcp_ndo_open) from [<c04c48f0>]
      (__dev_open+0xa8/0x10c)
      [   17.195133] [<c04c48f0>] (__dev_open) from [<c04c4b74>]
      (__dev_change_flags+0x94/0x144)
      [   17.203129] [<c04c4b74>] (__dev_change_flags) from [<c04c4c3c>]
      (dev_change_flags+0x18/0x48)
      [   17.211560] [<c04c4c3c>] (dev_change_flags) from [<c053a9fc>]
      (devinet_ioctl+0x6dc/0x7e4)
      [   17.219729] [<c053a9fc>] (devinet_ioctl) from [<c04a59ec>]
      (sock_ioctl+0x1d0/0x2a8)
      [   17.227378] [<c04a59ec>] (sock_ioctl) from [<c0142844>]
      (do_vfs_ioctl+0x41c/0x688)
      [   17.234939] [<c0142844>] (do_vfs_ioctl) from [<c0142ae4>]
      (SyS_ioctl+0x34/0x5c)
      [   17.242242] [<c0142ae4>] (SyS_ioctl) from [<c000ff60>]
      (ret_fast_syscall+0x0/0x54)
      [   17.258855] netcp-1.0 2620110.netcp eth0: Link is Up - 1Gbps/Full - 
flow
      control off
      [   17.271282] BUG: sleeping function called from invalid context at
      kernel/locking/mutex.c:616
      [   17.279712] in_atomic(): 1, irqs_disabled(): 0, pid: 1662, name: 
ifconfig
      [   17.286500] INFO: lockdep is turned off.
      [   17.290413] Preemption disabled at:[<  (null)>]   (null)
      [   17.295728]
      [   17.297214] CPU: 1 PID: 1662 Comm: ifconfig Tainted: G        W
      4.1.6-01265-gfb1e101 #1
      [   17.305735] Hardware name: Keystone
      [   17.309223] [<c00178e4>] (unwind_backtrace) from [<c0013cbc>]
      (show_stack+0x10/0x14)
      [   17.316970] [<c0013cbc>] (show_stack) from [<c05ff450>]
      (dump_stack+0x84/0xc4)
      [   17.324194] [<c05ff450>] (dump_stack) from [<c06023b0>]
      (mutex_lock_nested+0x28/0x4a8)
      [   17.332112] [<c06023b0>] (mutex_lock_nested) from [<c03e9840>]
      (netcp_set_rx_mode+0x160/0x210)
      [   17.340724] [<c03e9840>] (netcp_set_rx_mode) from [<c04c483c>]
      (dev_set_rx_mode+0x1c/0x28)
      [   17.348982] [<c04c483c>] (dev_set_rx_mode) from [<c04c490c>]
      (__dev_open+0xc4/0x10c)
      [   17.356724] [<c04c490c>] (__dev_open) from [<c04c4b74>]
      (__dev_change_flags+0x94/0x144)
      [   17.364729] [<c04c4b74>] (__dev_change_flags) from [<c04c4c3c>]
      (dev_change_flags+0x18/0x48)
      [   17.373166] [<c04c4c3c>] (dev_change_flags) from [<c053a9fc>]
      (devinet_ioctl+0x6dc/0x7e4)
      [   17.381344] [<c053a9fc>] (devinet_ioctl) from [<c04a59ec>]
      (sock_ioctl+0x1d0/0x2a8)
      [   17.388994] [<c04a59ec>] (sock_ioctl) from [<c0142844>]
      (do_vfs_ioctl+0x41c/0x688)
      [   17.396563] [<c0142844>] (do_vfs_ioctl) from [<c0142ae4>]
      (SyS_ioctl+0x34/0x5c)
      [   17.403873] [<c0142ae4>] (SyS_ioctl) from [<c000ff60>]
      (ret_fast_syscall+0x0/0x54)
      [   17.413772] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
      udhcpc (v1.20.2) started
      Sending discover...
      [   18.690666] netcp-1.0 2620110.netcp eth0: Link is Up - 1Gbps/Full - 
flow
      control off
      Sending discover...
      [   22.250972] netcp-1.0 2620110.netcp eth0: Link is Up - 1Gbps/Full - 
flow
      control off
      [   22.258721] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
      [   22.265458] BUG: sleeping function called from invalid context at
      kernel/locking/mutex.c:616
      [   22.273896] in_atomic(): 1, irqs_disabled(): 0, pid: 342, name: 
kworker/1:1
      [   22.280854] INFO: lockdep is turned off.
      [   22.284767] Preemption disabled at:[<  (null)>]   (null)
      [   22.290074]
      [   22.291568] CPU: 1 PID: 342 Comm: kworker/1:1 Tainted: G        W
      4.1.6-01265-gfb1e101 #1
      [   22.300255] Hardware name: Keystone
      [   22.303750] Workqueue: ipv6_addrconf addrconf_dad_work
      [   22.308895] [<c00178e4>] (unwind_backtrace) from [<c0013cbc>]
      (show_stack+0x10/0x14)
      [   22.316643] [<c0013cbc>] (show_stack) from [<c05ff450>]
      (dump_stack+0x84/0xc4)
      [   22.323867] [<c05ff450>] (dump_stack) from [<c06023b0>]
      (mutex_lock_nested+0x28/0x4a8)
      [   22.331786] [<c06023b0>] (mutex_lock_nested) from [<c03e9840>]
      (netcp_set_rx_mode+0x160/0x210)
      [   22.340394] [<c03e9840>] (netcp_set_rx_mode) from [<c04c9d18>]
      (__dev_mc_add+0x54/0x68)
      [   22.348401] [<c04c9d18>] (__dev_mc_add) from [<c05ab358>]
      (igmp6_group_added+0x168/0x1b4)
      [   22.356580] [<c05ab358>] (igmp6_group_added) from [<c05ad2cc>]
      (ipv6_dev_mc_inc+0x4f0/0x5a8)
      [   22.365019] [<c05ad2cc>] (ipv6_dev_mc_inc) from [<c058f0d0>]
      (addrconf_dad_work+0x21c/0x33c)
      [   22.373460] [<c058f0d0>] (addrconf_dad_work) from [<c0042850>]
      (process_one_work+0x214/0x8d0)
      [   22.381986] [<c0042850>] (process_one_work) from [<c0042f54>]
      (worker_thread+0x48/0x4bc)
      [   22.390071] [<c0042f54>] (worker_thread) from [<c004868c>]
      (kthread+0xf0/0x108)
      [   22.397381] [<c004868c>] (kthread) from [<c0010038>]

      Trace related to incorrect usage of mutex inside ndo_set_rx_mode

      [   24.086066] BUG: sleeping function called from invalid context at
      kernel/locking/mutex.c:616
      [   24.094506] in_atomic(): 1, irqs_disabled(): 0, pid: 1682, name: 
ifconfig
      [   24.101291] INFO: lockdep is turned off.
      [   24.105203] Preemption disabled at:[<  (null)>]   (null)
      [   24.110511]
      [   24.112005] CPU: 2 PID: 1682 Comm: ifconfig Tainted: G        W
      4.1.6-01265-gfb1e101 #1
      [   24.120518] Hardware name: Keystone
      [   24.124018] [<c00178e4>] (unwind_backtrace) from [<c0013cbc>]
      (show_stack+0x10/0x14)
      [   24.131772] [<c0013cbc>] (show_stack) from [<c05ff450>]
      (dump_stack+0x84/0xc4)
      [   24.138989] [<c05ff450>] (dump_stack) from [<c06023b0>]
      (mutex_lock_nested+0x28/0x4a8)
      [   24.146908] [<c06023b0>] (mutex_lock_nested) from [<c03e9840>]
      (netcp_set_rx_mode+0x160/0x210)
      [   24.155523] [<c03e9840>] (netcp_set_rx_mode) from [<c04c483c>]
      (dev_set_rx_mode+0x1c/0x28)
      [   24.163787] [<c04c483c>] (dev_set_rx_mode) from [<c04c490c>]
      (__dev_open+0xc4/0x10c)
      [   24.171531] [<c04c490c>] (__dev_open) from [<c04c4b74>]
      (__dev_change_flags+0x94/0x144)
      [   24.179528] [<c04c4b74>] (__dev_change_flags) from [<c04c4c3c>]
      (dev_change_flags+0x18/0x48)
      [   24.187966] [<c04c4c3c>] (dev_change_flags) from [<c053a9fc>]
      (devinet_ioctl+0x6dc/0x7e4)
      [   24.196145] [<c053a9fc>] (devinet_ioctl) from [<c04a59ec>]
      (sock_ioctl+0x1d0/0x2a8)
      [   24.203803] [<c04a59ec>] (sock_ioctl) from [<c0142844>]
      (do_vfs_ioctl+0x41c/0x688)
      [   24.211373] [<c0142844>] (do_vfs_ioctl) from [<c0142ae4>]
      (SyS_ioctl+0x34/0x5c)
      [   24.218676] [<c0142ae4>] (SyS_ioctl) from [<c000ff60>]
      (ret_fast_syscall+0x0/0x54)
      [   24.227156] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 99f8ef5dc6546ac28cc7a03ff8301bc72fe5527e
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:10 2015 -0400

      net: netcp: allocate buffers to desc before re-enable interrupt

      Currently netcp_rxpool_refill() that refill descriptors and attached
      buffers to fdq while interrupt is enabled as part of NAPI poll. Doing
      it while interrupt is disabled could be beneficial as hardware will
      not be starved when CPU is busy with processing interrupt.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 915c5857874fc211874de1363e88f902e581e6eb
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:09 2015 -0400

      net: netcp: check for interface handle in netcp_module_probe()

      Currently netcp_module_probe() doesn't check the return value of
      of_parse_phandle() that points to the interface data for the
      module and then pass the node ptr to the module which is incorrect.
      Check for return value and free the intf_modpriv if there is error.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e558b1fbf5f43da83f91a31e595a6d65e663b100
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:08 2015 -0400

      net: netcp: add error check to netcp_allocate_rx_buf()

      Currently, if netcp_allocate_rx_buf() fails due no descriptors
      in the rx free descriptor queue, inside the netcp_rxpool_refill() function
      the iterative loop to fill buffers doesn't terminate right away. So modify
      the netcp_allocate_rx_buf() to return an error code and use it break the
      loop when there is error.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 736532a0705ffc27c14f712fa2758a7f8b15e8b4
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:07 2015 -0400

      net: netcp: move netcp_register_interface() to after attach module

      The netcp interface is not fully initialized before attach the module
      to the interface. For example, the tx pipe/rx pipe is initialized
      in ethss module as part of attach(). So until this is complete, the
      interface can't be registered.  So move registration of interface to
      net device outside the current loop that attaches the modules to the
      interface.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 156e3c21f89655f099228577005a6c656b3ceb3d
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:06 2015 -0400

      net: netcp: remove dead code from the driver

      netcp_core is the first driver that will get initialized and the modules
      (ethss, pa etc) will then get initialized. So the code at the end of
      netcp_probe() that iterate over the modules is a dead code as the module
      list will be always be empty. So remove this code.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8c85151ddec66f78fbf997e35be005a322fbb9c9
  Author: WingMan Kwok <w-kwok2@xxxxxx>
  Date:   Wed Sep 23 13:37:05 2015 -0400

      net: netcp: ethss: fix error in calling sgmii api with incorrect offset

      On K2HK, sgmii module registers of slave 0 and 1 are mem
      mapped to one contiguous block, while those of slave 2
      and 3 are mapped to another contiguous block.  However,
      on K2E and K2L, sgmii module registers of all slaves are
      mem mapped to one contiguous block.  SGMII APIs expect
      slave 0 sgmii base when API is invoked for slave 0 and 1,
      and slave 2 sgmii base when invoked for other slaves.
      Before this patch, slave 0 sgmii base is always passed to
      sgmii API for K2E regardless which slave is the API invoked
      for.  This patch fixes the problem.

      Signed-off-by: WingMan Kwok <w-kwok2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 16cfbae160c46eadf0105892b676c365b051bfc2
  Merge: 34ea90e 45ffda7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:35:59 2015 -0700

      Merge branch 'bridge_external_fdb_aging'

      Scott Feldman says:

      ====================
      bridge: don't age out externally added FDB entries

      v3: Per davem review: add del_timer_sync on rocker port remove.

      v2: Per Jiri review comment: add BR_DEFAULT_AGEING_TIME to defines

      Siva originally proposed skipping externally added FDB entries in the 
bridge's
      FDB garbage collection func, and moving the ageing of externally added 
entries
      to the port driver/device.  This broke rocker, since rocker didn't have a
      hardware (or software) mechanism for ageing out its learned FDB entries.

      This patchset reintroduces Siva's bridge driver patch to skip externally 
added
      entries and adds support in rocker so rocker can age out its own entries.
      Rocker does this using a software timer similar to the bridge's FDB 
garbage
      collection timer.  Other switchdev devices/drivers can use this software 
timer
      method or program the device to nofity aged-out entries to the driver.

      Updated switchdev.txt documentation to reflect current state-of-the-art.  
This
      removes one more XXX todo comment in switchdev.txt.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 45ffda75e145ed7a2b40f6a5de35431d7e62d1f0
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:20 2015 -0700

      switchdev: update documentation on FDB ageing_time

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dcd45e06496ca586db35949d1d92d48aab8a0a00
  Author: Siva Mannem <siva.mannem.lnx@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:19 2015 -0700

      bridge: don't age externally added FDB entries

      Signed-off-by: Siva Mannem <siva.mannem.lnx@xxxxxxxxx>
      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Acked-by: Premkumar Jonnala <pjonnala@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52fe3e2d51d27c0e68b2bea29dea0b64af2c665e
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:18 2015 -0700

      rocker: add FDB cleanup timer

      Add a timer to each rocker switch to do FDB entry cleanup by ageing out
      expired entries.  The timer scheduling algo is copied from the bridge
      driver, for the most part, to keep the firing of the timer to a minimum.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e7335703e33e7787333872a31e0f4491f9d76cac
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:17 2015 -0700

      rocker: adding port ageing_time for ageing out FDB entries

      Follow-up patcheset will allow user to change ageing_time, but for now
      just hard-code it to a fixed value (the same value used as the default
      for the bridge driver).

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a79e88d9fbbe2e3ecb9d883fb59dca7468d42d79
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:16 2015 -0700

      bridge: define some min/max/default ageing time constants

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c660496c95af93f3461c06d46fd33c0719625db
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:15 2015 -0700

      rocker: store rocker_port in fdb key rather than pport

      We'll need more info from rocker_port than just pport when we age out fdb
      entries, so store rocker_port rather than pport in each fdb entry.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a471be41f2bfe4ee3a4b38b0e5af17d0abfd3aa6
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:14 2015 -0700

      rocker: track when FDB entry is touched.

      The entry is touched once when created, and touched again for each update.
      The touched time is used to calculate FDB entry age.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3869efe7a8a2298516d9af4f91487cf486ca945
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 19:45:08 2015 +0100

      Fix AF_PACKET ABI breakage in 4.2

      Commit 7d82410950aa ("virtio: add explicit big-endian support to memory
      accessors") accidentally changed the virtio_net header used by
      AF_PACKET with PACKET_VNET_HDR from host-endian to big-endian.

      Since virtio_legacy_is_little_endian() is a very long identifier,
      define a vio_le macro and use that throughout the code instead of the
      hard-coded 'false' for little-endian.

      This restores the ABI to match 4.1 and earlier kernels, and makes my
      test program work again.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2d8bff12699abc3a9bf886bb0b79f44d94d81496
  Author: Neil Horman <nhorman@xxxxxxxxxx>
  Date:   Wed Sep 23 14:57:58 2015 -0400

      netpoll: Close race condition between poll_one_napi and napi_disable

      Drivers might call napi_disable while not holding the napi instance 
poll_lock.
      In those instances, its possible for a race condition to exist between
      poll_one_napi and napi_disable.  That is to say, poll_one_napi only tests 
the
      NAPI_STATE_SCHED bit to see if there is work to do during a poll, and as 
such
      the following may happen:

      CPU0                              CPU1
      ndo_tx_timeout                    napi_poll_dev
       napi_disable                      poll_one_napi
        test_and_set_bit (ret 0)
                                  test_bit (ret 1)
         reset adapter             napi_poll_routine

      If the adapter gets a tx timeout without a napi instance scheduled, its 
possible
      for the adapter to think it has exclusive access to the hardware  (as the 
napi
      instance is now scheduled via the napi_disable call), while the netpoll 
code
      thinks there is simply work to do.  The result is parallel hardware access
      leading to corrupt data structures in the driver, and a crash.

      Additionaly, there is another, more critical race between netpoll and
      napi_disable.  The disabled napi state is actually identical to the 
scheduled
      state for a given napi instance.  The implication being that, if a napi 
instance
      is disabled, a netconsole instance would see the napi state of the device 
as
      having been scheduled, and poll it, likely while the driver was dong 
something
      requiring exclusive access.  In the case above, its fairly clear that not 
having
      the rings in a state ready to be polled will cause any number of crashes.

      The fix should be pretty easy.  netpoll uses its own bit to indicate that 
that
      the napi instance is in a state of being serviced by netpoll 
(NAPI_STATE_NPSVC).
      We can just gate disabling on that bit as well as the sched bit.  That 
should
      prevent netpoll from conducting a napi poll if we convert its set bit to a
      test_and_set_bit operation to provide mutual exclusion

      Change notes:
      V2)
        Remove a trailing whtiespace
        Resubmit with proper subject prefix

      V3)
        Clean up spacing nits

      Signed-off-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: jmaxwell@xxxxxxxxxx
      Tested-by: jmaxwell@xxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34ea90ef725405a0b431843b775fb9f4021da6ae
  Merge: e1ffc0c 5cf8ca0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:29:02 2015 -0700

      Merge branch 'cls_bpf-next'

      Daniel Borkmann says:

      ====================
      Minor cls_bpf updates

      Some minor updates resp. follow-ups on cls_bpf, please see
      individual patches for details. Will follow with the iproute2
      patch after this series.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5cf8ca0e473df01c9b78894d6e62afa2e1d1166f
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:56:48 2015 +0200

      cls_bpf: further limit exec opcodes subset

      Jamal suggested to further limit the currently allowed subset of opcodes
      that may be used by a direct action return code as the intention is not
      to replace the full action engine, but rather to have a minimal set that
      can be used in the fast-path on things like ingress for some features
      that cls_bpf supports.

      Classifiers can, of course, still be chained together that have direct
      action mode with those that have a full exec pass. For more complex
      scenarios that go beyond this minimal set here, the full tcf_exts_exec()
      path must be used.

      Suggested-by: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef146fa40cc3af1dcb13688f41cc06a9c0deb01c
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:56:47 2015 +0200

      cls_bpf: make binding to classid optional

      The binding to a particular classid was so far always mandatory for
      cls_bpf, but it doesn't need to be. Therefore, lift this restriction
      as similarly done in other classifiers.

      Only a couple of qdiscs make use of class from the tcf_result, others
      don't strictly care, so let the user choose his needs (those that read
      out class can handle situations where it could be NULL).

      An explicit check for tcf_unbind_filter() is also not needed here, as
      the previous r->class was 0, so the xchg() will return that and
      therefore a callback to the qdisc's unbind_tcf() is skipped.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bf007d1c75aceb4e8a407f325d42ee9958049a31
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:56:46 2015 +0200

      cls_bpf: also dump TCA_BPF_FLAGS

      In commit 43388da42a49 ("cls_bpf: introduce integrated actions") we
      have added TCA_BPF_FLAGS. We can also retrieve this information from
      the prog, dump it back to user space as well. It's useful in tc when
      displaying/dumping filter info.

      Also, remove tp from cls_bpf_prog_from_efd(), came in as a conflict
      from a rebase and it's unused here (later work may add it along with
      a real user).

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e1ffc0cd2c2698d272121fb85fcb012994c4112c
  Merge: 927ab1d 834c952
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:27:24 2015 -0700

      Merge tag 'arcnet-cleanup-v4.3-rc2' of 
git://git.pengutronix.de/git/mgr/linux

      Michael Grzeschik says:

      ====================
      ARCNET: refactoring and cleanup

      This series cleans up the code in drivers/net/arcnet
      and include/uapi/linux/if_arcnet.h . It doesn't change
      the runtime behaviour of the code. Its only purpose
      is to improve the code maintenance and readability.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 927ab1d764565aec36ace1d017fa14c1e84f2769
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 22:20:15 2015 +0200

      sched, bpf: let stack handle !IFF_UP devs on bpf_clone_redirect

      Similarly as already the case in bpf_redirect()/skb_do_redirect()
      pair, let the stack deal with devs that are !IFF_UP.

      dev_forward_skb() as well as dev_queue_xmit() will free the skb
      and increment drop counter internally in such cases, so we can
      spare the condition in bpf_clone_redirect().

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 675ee231d960af2af3606b4480324e26797eb010
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Sep 23 14:00:21 2015 -0700

      tcp: add proper TS val into RST packets

      RST packets sent on behalf of TCP connections with TS option (RFC 7323
      TCP timestamps) have incorrect TS val (set to 0), but correct TS ecr.

      A > B: Flags [S], seq 0, win 65535, options [mss 1000,nop,nop,TS val 100
      ecr 0], length 0
      B > A: Flags [S.], seq 2444755794, ack 1, win 28960, options [mss
      1460,nop,nop,TS val 7264344 ecr 100], length 0
      A > B: Flags [.], ack 1, win 65535, options [nop,nop,TS val 110 ecr
      7264344], length 0

      B > A: Flags [R.], seq 1, ack 1, win 28960, options [nop,nop,TS val 0
      ecr 110], length 0

      We need to call skb_mstamp_get() to get proper TS val,
      derived from skb->skb_mstamp

      Note that RFC 1323 was advocating to not send TS option in RST segment,
      but RFC 7323 recommends the opposite :

        Once TSopt has been successfully negotiated, that is both <SYN> and
        <SYN,ACK> contain TSopt, the TSopt MUST be sent in every non-<RST>
        segment for the duration of the connection, and SHOULD be sent in an
        <RST> segment (see Section 5.2 for details)

      Note this RFC recommends to send TS val = 0, but we believe it is
      premature : We do not know if all TCP stacks are properly
      handling the receive side :

         When an <RST> segment is
         received, it MUST NOT be subjected to the PAWS check by verifying an
         acceptable value in SEG.TSval, and information from the Timestamps
         option MUST NOT be used to update connection state information.
         SEG.TSecr MAY be used to provide stricter <RST> acceptance checks.

      In 5 years, if/when all TCP stack are RFC 7323 ready, we might consider
      to decide to send TS val = 0, if it buys something.

      Fixes: 7faee5c0d514 ("tcp: remove TCP_SKB_CB(skb)->when")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e78654799135a788a941bacad3452fbd7083e518
  Author: Maxim Sheviakov <mrader3940@xxxxxxxxx>
  Date:   Wed Sep 23 17:10:51 2015 -0400

      drm/radeon: add quirk for MSI R7 370

      Just adds the quirk for MSI R7 370 Armor 2X
      Bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=91294

      Signed-off-by: Maxim Sheviakov <mrader3940@xxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 4c7fbc39b1d58d9f4113ef962743a67bcdfe6be2
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Wed Sep 23 14:32:06 2015 -0400

      drm/amdgpu: Sprinkle drm_modeset_lock_all to appease locking checks

      In

      commit 7a3f3d6667f5f9ffd1517f6b21d64bbf5312042c
      Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Date:   Thu Jul 9 23:44:28 2015 +0200

          drm: Check locking in drm_for_each_connector

      I added locking checks to drm_for_each_connector but failed that
      through drm_helper_connector_dpms -> drm_helper_choose_encoder_dpms
      it's used in a few more places in the amdgpu resume/suspend code.

      Fix them up.

      Note that we could use the connector iterator macros in there too, but
      that's for the future.

      Port of radeon commit:
      drm/radeon: Sprinkle drm_modeset_lock_all to appease locking checks

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 6adaed5bfe4f6f0a0e027e87d5dd80bd9834d5f0
  Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
  Date:   Wed Sep 23 20:26:45 2015 +0200

      drm/radeon: Sprinkle drm_modeset_lock_all to appease locking checks

      In

      commit 7a3f3d6667f5f9ffd1517f6b21d64bbf5312042c
      Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Date:   Thu Jul 9 23:44:28 2015 +0200

          drm: Check locking in drm_for_each_connector

      I added locking checks to drm_for_each_connector but failed that
      through drm_helper_connector_dpms -> drm_helper_choose_encoder_dpms
      it's used in a few more places in the radeon resume/suspend code.

      Fix them up.

      Note that we could use the connector iterator macros in there too, but
      that's for the future.

      Reported-and-tested-by: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Alex Deucher <alexdeucher@xxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 5c3422b0b135b46c8dca9c1d909c1ae84f3561bd
  Author: monk.liu <monk.liu@xxxxxxx>
  Date:   Wed Sep 23 13:49:58 2015 +0800

      drm/amdgpu: sync ce and me with SWITCH_BUFFER(2)

      we used to adopt wait_reg_mem to let CE wait before DE finish page
      updating, but from Tonga+, CE doesn't support wait_reg_mem package so
      this logic no longer works.

      so here is another approach to do same thing:
      Insert two of SWITCH_BUFFER at both front and end of vm_flush can
      guarantee that CE not go further to process IB_const before vm_flush
      done.

      Insert two of SWITCH_BUFFER also works on CI, so remove legency method
      to sync CE and ME

      v2:
      Insert double SWITCH_BUFFER at front of vm flush as well.

      Signed-off-by: monk.liu <monk.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit 54ef0b5461c071050c61e501af5544842d61f40a
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 23 14:00:59 2015 +0300

      drm/amdgpu: integer overflow in amdgpu_mode_dumb_create()

      args->size is a u64.  arg->pitch and args->height are u32.  The
      multiplication will overflow instead of using the high 32 bits as
      intended.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 0913eab648e4fb30ddca8882e707d0fcf5b237c6
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 23 14:00:35 2015 +0300

      drm/amdgpu: info leak in amdgpu_gem_metadata_ioctl()

      There is no limit on args->data.data_size_bytes so we could read beyond
      the end of the args->data.data[] array.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reported-by: Ilja Van Sprundel <ivansprundel@xxxxxxxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 0d2edd3791bb172a59d708d5c94330bbd6050f97
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 23 14:00:12 2015 +0300

      drm/amdgpu: integer overflow in amdgpu_info_ioctl()

      The "alloc_size" calculation can overflow leading to memory corruption.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reported-by: Ilja Van Sprundel <ivansprundel@xxxxxxxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 1d263474c4416efb6d0feca98fe6d462b0d28f56
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 23 13:59:28 2015 +0300

      drm/amdgpu: unwind properly in amdgpu_cs_parser_init()

      The amdgpu_cs_parser_init() function doesn't clean up after itself but
      instead the caller uses a free everything function amdgpu_cs_parser_fini()
      on failure.  This style of error handling is often buggy.  In this
      example, we call "drm_free_large(parser->chunks[i].kdata);" when it is
      an unintialized pointer or when "parser->chunks" is NULL.

      I fixed this bug by adding unwind code so that it frees everything that
      it allocates.

      I also mode some other very minor changes:
      1) Renamed "r" to "ret".
      2) Moved the chunk_array allocation to the start of the function.
      3) Removed some initializers which are no longer needed.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reported-by: Ilja Van Sprundel <ivansprundel@xxxxxxxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 5a6adfa20b622a273205e33b20c12332aa7eb724
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Sep 22 10:06:45 2015 -0400

      drm/amdgpu: Fix max_vblank_count value for current display engines

      The value was much too low, which could cause the userspace visible
      vblank counter to move backwards when the hardware counter wrapped
      around.

      Ported from radeon commit:
      b0b9bb4dd51f396dcf843831905f729e74b0c8c0

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 71affda522bb0f43e205cf4f000e2c50261c01a6
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 17:34:39 2015 -0400

      drm/amdgpu: use kmemdup rather than duplicating its implementation

      The patch was generated using fixed coccinelle semantic patch
      scripts/coccinelle/api/memdup.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2014320

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 1f4452105ce39786be13b4636251377a30d1286a
  Author: Leo Liu <leo.liu@xxxxxxx>
  Date:   Fri Sep 11 17:09:57 2015 -0400

      drm/amdgpu: fix UVD suspend and resume for VI APU

      User space passed the same handle before suspend and after resume,
      so we have remove the session and handle destroy, and keep the
      firmware untouched.

      Signed-off-by: Leo Liu <leo.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2bd188d0167227932be3cf5b033c0e600b01291f
  Author: Leo Liu <leo.liu@xxxxxxx>
  Date:   Fri Sep 11 14:22:18 2015 -0400

      drm/amdgpu: fix the UVD suspend sequence order

      Fixes suspend issues with UVD.

      Signed-off-by: Leo Liu <leo.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 5146419e6feb99cfbc8dbf005dd2f62603e15efb
  Author: Leo Liu <leo.liu@xxxxxxx>
  Date:   Tue Sep 15 10:38:38 2015 -0400

      drm/amdgpu: make UVD handle checking more strict

      Invalid messages can crash the hw otherwise

      Ported from radeon commit a1b403da70e038ca6c6c6fe434d1d873546873a3

      Signed-off-by: Leo Liu <leo.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 1ee4478a26cf55c8f8a6219d7e99f2b48959394d
  Author: Leo Liu <leo.liu@xxxxxxx>
  Date:   Thu Sep 10 13:41:38 2015 -0400

      drm/amdgpu: Disable UVD PG

      This causes problems with multiple suspend/resume cycles.

      Signed-off-by: Leo Liu <leo.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 4f839a243d3b0d8b1a14f4778a87ec4d8ddbf15f
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Tue Sep 8 20:22:31 2015 +0200

      drm/amdgpu: more scheduler cleanups v2

      Embed the scheduler into the ring structure instead of allocating it.
      Use the ring name directly instead of the id.

      v2: rebased, whitespace cleanup

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>

  commit 5ec92a7692872d656cffe010920fb49c4f51d75f
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Sep 7 18:43:02 2015 +0200

      drm/amdgpu: cleanup fence queue init v2

      Move the fence related stuff into amdgpu_fence.c

      v2: rework commit message, cause this is actually not a bug

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>

  commit 9b398fa5c24eb05fc60fafd8543cc03e9170f054
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Sep 7 18:16:49 2015 +0200

      drm/amdgpu: rename fence->scheduler to sched v2

      Just to be consistent with the other members.

      v2: rename the ring member as well.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx> (v1)
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>

  commit 0f75aee75112934bcaf42410df5c51d7194b5896
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Sep 7 18:07:14 2015 +0200

      drm/amdgpu: cleanup entity init

      Reorder the fields and properly return the kfifo_alloc error code.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>

  commit a6db8a33e164ae72fb5429ab637e8cfee057a722
  Author: Junwei Zhang <Jerry.Zhang@xxxxxxx>
  Date:   Wed Sep 9 09:21:19 2015 +0800

      drm/amdgpu: refine the scheduler job type conversion

      Use container_of rather than casting.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: David Zhou <david1.zhou@xxxxxxx>
      Signed-off-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>

  commit 4c7eb91cae88fd2aa101750d6825b4176f85ffb2
  Author: Junwei Zhang <Jerry.Zhang@xxxxxxx>
  Date:   Wed Sep 9 09:05:55 2015 +0800

      drm/amdgpu: refine the job naming for amdgpu_job and amdgpu_sched_job

      Use consistent naming across functions.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: David Zhou <david1.zhou@xxxxxxx>
      Signed-off-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>

  commit bf60efd353f68e5dec1a177b5cbe4da07c819569
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Fri Sep 4 10:47:56 2015 +0200

      drm/amdgpu: use only one reservation object for each VM v2

      Reduces the locking and fencing overhead.

      v2: add comment why we need the duplicates list in the GEM op.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit a5b750583eb4af69da1e659c7684b6d370b2ae97
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Sep 3 16:40:39 2015 +0200

      drm/amdgpu: validate duplicates in the CS as well

      This allows for multiple BOs to have the same reservation object.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 72d7668b5ba5180b651e8a07dd6ed62e4e26f207
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Sep 3 17:34:59 2015 +0200

      drm/amdgpu: export reservation_object from dmabuf to ttm (v2)

      Adds an extra argument to amdgpu_bo_create, which is only used in 
amdgpu_prime.c.

      Port of radeon commit 831b6966a60fe72d85ae3576056b4e4e0775b112.

      v2: fix up kfd.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit b7d698d7fd7d132c6ebe56d230584f2cae6c94ee
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Sep 7 12:32:09 2015 +0200

      drm/amdgpu: fix overflow on 32bit systems

      mem->start is a long, so this can overflow on 32bit systems.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 1886d1a9caed20f457dd69a926c7f8b54c2d5f48
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Aug 31 17:28:28 2015 +0200

      drm/amdgpu: remove process_job callback from the scheduler

      Just free the resources immediately after submitting the job.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit 258f3f99d514172aa5a9df15e6d6ebe33aad2f55
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Aug 31 17:02:52 2015 +0200

      drm/amdgpu: move scheduler fence callback into fence v2

      And call the processed callback directly after submitting the job.

      v2: split adding error handling into separate patch.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit 27439fcac03632f2b1fd85268dc61af828c77e7b
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Wed Sep 2 12:03:06 2015 +0200

      drm/amdgpu: signal scheduler fence when hw submission fails v3

      Otherwise the resource blocked by it will never be reclaimed.

      v2: add DRM_ERROR.
      v3: fix typo in commit message

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit 353da3c520b47272b9e3ddbc70b81be285c0b933
  Author: Chunming Zhou <david1.zhou@xxxxxxx>
  Date:   Mon Sep 7 16:06:53 2015 +0800

      drm/amdgpu: add tracepoint for scheduler (v2)

      track sched job status like the length of job queue and hw job queue.

      v2: fix build after rebase

      Signed-off-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit 20a85ff846ffed84fba8637abbb6b1c96436c0ac
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Sat Sep 5 11:59:50 2015 +0200

      drm/amdgpu: use write confirm for vm_flush()

      Make sure the CP waits for the write to be confirmed before
      invalidating.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 22c01cc48301f6974868bd4a7b03e29883da1103
  Author: Anatoli Antonovitch <anatoli.antonovitch@xxxxxxx>
  Date:   Thu Sep 3 11:13:31 2015 -0400

      drm/amdgpu: execution barrier after fence v2

      Insert wait for reg mem after EOP to fix potential issue with vm context 
switch

      v2: move wait to vm_flush() use equal instead of greater than.

      Signed-off-by: Anatoli Antonovitch <anatoli.antonovitch@xxxxxxx>
      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 3daea9e3d3ecd217a63f35e63f18ea7138f2ae17
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Sat Sep 5 11:12:27 2015 +0200

      drm/amdgpu: add option to disable semaphores

      Provide module parameter to enable/disable them. Still
      enabled by default.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 644d0e6569582872e448b1d39b9338d5e4021faa
  Author: Tom Herbert <tom@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:13:35 2015 -0700

      ipv6 Use get_hash_from_flowi6 for rt6 hash

      In rt6_info_hash_nhsfn replace the custom hashing over flowi6 that is
      using xor with a call to common function get_hash_from_flowi6.

      Signed-off-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bda4e0fb3126aca15586d165b5a15a37edc0a984
  Author: Keith Busch <keith.busch@xxxxxxxxx>
  Date:   Thu Sep 3 08:18:17 2015 -0600

      NVMe: Set affinity after allocating request queues

      The asynchronous namespace scanning caused affinity hints to be set before
      its tagset initialized, so there was no cpu mask to set the hint. This
      patch moves the affinity hint setting to after namespaces are scanned.

      Reported-by: �경� <ks0204.kim@xxxxxxxxxxx>
      Signed-off-by: Keith Busch <keith.busch@xxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit cbb4be652d374f64661137756b8f357a1827d6a4
  Author: Johan Hovold <johan@xxxxxxxxxx>
  Date:   Wed Sep 23 11:41:42 2015 -0700

      USB: whiteheat: fix potential null-deref at probe

      Fix potential null-pointer dereference at probe by making sure that the
      required endpoints are present.

      The whiteheat driver assumes there are at least five pairs of bulk
      endpoints, of which the final pair is used for the "command port". An
      attempt to bind to an interface with fewer bulk endpoints would
      currently lead to an oops.

      Fixes CVE-2015-5257.

      Reported-by: Moein Ghasemzadeh <moein@xxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit ed14ee0eea8b6808025356cecc87a8007885263f
  Merge: d86a2fe 8524bb0 ee92cfb
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:12 2015 -0700

      Merge remote-tracking branches 'asoc/fix/wm8960' and 'asoc/fix/wm8962' 
into asoc-linus

  commit d86a2fe4dc97cbbad04f5db941d9a1bb82e22b5f
  Merge: 312e0bc e4fba9b 921e546 8811191 4261786 3a0e27d f072f91
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:08 2015 -0700

      Merge remote-tracking branches 'asoc/fix/mtk', 'asoc/fix/psc', 
'asoc/fix/pxa', 'asoc/fix/spear', 'asoc/fix/sti' and 'asoc/fix/wm0010' into 
asoc-linus

  commit 312e0bce7f2d7fcf57f38f6e229a82eb4e0c2af4
  Merge: fcffa0d ab1fffe d76f419 6bd3c6f 5b64c17 f1ec5ec f0e03db
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:03 2015 -0700

      Merge remote-tracking branches 'asoc/fix/davinci', 'asoc/fix/doc', 
'asoc/fix/fsl-card', 'asoc/fix/fsl-ssi', 'asoc/fix/intel' and 
'asoc/fix/maintainers' into asoc-linus

  commit fcffa0dbb6c9144d07011531860da2f1e8a8b7cd
  Merge: 5ee84ba fce97b4
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:02 2015 -0700

      Merge remote-tracking branch 'asoc/fix/rt5645' into asoc-linus

  commit 5ee84ba8c7f5a5dd1934459acfec6108b5285940
  Merge: 1f93e4a 75881df
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:00 2015 -0700

      Merge remote-tracking branch 'asoc/fix/dapm' into asoc-linus

  commit fce97b4d70ad632dd9c6058622492501377bbaaa
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Wed Sep 23 14:35:30 2015 +0800

      ASoC: rt5645: Prevent the pop sound in case of playback and the jack is 
plugging

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 4f4794124e0421b080a0f1f5f1207636ba55eb85
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Wed Sep 23 14:35:29 2015 +0800

      ASoC: rt5645: Increase the delay time to remove the pop sound

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 21cb13e72b02dbbb5a02477d4dd46bc2bc1cfd08
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Wed Sep 23 14:35:28 2015 +0800

      ASoC: rt5645: Use the type SOC_DAPM_SINGLE_AUTODISABLE to prevent the 
weird sound in runtime of power up

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 50b956f3d85cdea130866f33613416431d60f396
  Author: Andy Gross <agross@xxxxxxxxxxxxxx>
  Date:   Fri Sep 11 16:01:16 2015 -0500

      firmware: qcom: scm: Add function stubs for ARM64

      This patch adds stubs for the SCM functions exposed in the QCOM SCM API.

      Signed-off-by: Andy Gross <agross@xxxxxxxxxxxxxx>
      Acked-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>

  commit adbe734b2ae5517b8659997909677687b963d73c
  Merge: bcee19f f929d42
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Wed Sep 23 10:59:44 2015 -0600

      Merge branch 'stable/for-jens-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen into for-linus

      Konrad writes:

      It has one fix that should go in and also be put in stable tree (I've
      added the CC already).

      It is a fix for a memory leak that can exposed via using UEFI
      xen-blkfront driver.

  commit f929d42ceb18a8acfd47e0e7b7d90b5d49bd9258
  Author: Roger Pau Monne <roger.pau@xxxxxxxxxx>
  Date:   Fri Sep 4 12:08:07 2015 +0200

      xen/blkback: free requests on disconnection

      This is due to  commit 86839c56dee28c315a4c19b7bfee450ccd84cd25
      "xen/block: add multi-page ring support"

      When using an guest under UEFI - after the domain is destroyed
      the following warning comes from blkback.

      ------------[ cut here ]------------
      WARNING: CPU: 2 PID: 95 at
      /home/julien/works/linux/drivers/block/xen-blkback/xenbus.c:274
      xen_blkif_deferred_free+0x1f4/0x1f8()
      Modules linked in:
      CPU: 2 PID: 95 Comm: kworker/2:1 Tainted: G        W       4.2.0 #85
      Hardware name: APM X-Gene Mustang board (DT)
      Workqueue: events xen_blkif_deferred_free
      Call trace:
      [<ffff8000000890a8>] dump_backtrace+0x0/0x124
      [<ffff8000000891dc>] show_stack+0x10/0x1c
      [<ffff8000007653bc>] dump_stack+0x78/0x98
      [<ffff800000097e88>] warn_slowpath_common+0x9c/0xd4
      [<ffff800000097f80>] warn_slowpath_null+0x14/0x20
      [<ffff800000557a0c>] xen_blkif_deferred_free+0x1f0/0x1f8
      [<ffff8000000ad020>] process_one_work+0x160/0x3b4
      [<ffff8000000ad3b4>] worker_thread+0x140/0x494
      [<ffff8000000b2e34>] kthread+0xd8/0xf0
      ---[ end trace 6f859b7883c88cdd ]---

      Request allocation has been moved to connect_ring, which is called every
      time blkback connects to the frontend (this can happen multiple times 
during
      a blkback instance life cycle). On the other hand, request freeing has not
      been moved, so it's only called when destroying the backend instance. Due 
to
      this mismatch, blkback can allocate the request pool multiple times, 
without
      freeing it.

      In order to fix it, move the freeing of requests to xen_blkif_disconnect 
to
      restore the symmetry between request allocation and freeing.

      Reported-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Signed-off-by: Roger Pau Monné <roger.pau@xxxxxxxxxx>
      Tested-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: David Vrabel <david.vrabel@xxxxxxxxxx>
      Cc: xen-devel@xxxxxxxxxxxxxxxxxxxx
      CC: stable@xxxxxxxxxxxxxxx # 4.2
      Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>

  commit 58a9c251c9a1a2f2154e40a9fe7bb81857761b24
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Wed Sep 16 15:53:29 2015 -0500

      EDAC, ghes_edac: Remove redundant memory_type array

      We already have edac_mem_types[] that enumerates the different kinds of
      memory. So, use that and remove the redundant memory_type[] array here.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442436811-23382-2-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit cd67d226ebd909d239d2c6e5a6abd6e2a338d1cd
  Author: Jani Nikula <jani.nikula@xxxxxxxxx>
  Date:   Thu Sep 17 16:42:07 2015 +0300

      drm/i915/bios: handle MIPI Sequence Block v3+ gracefully

      The VBT MIPI Sequence Block version 3 has forward incompatible changes:

      First, the block size in the header has been specified reserved, and the
      actual size is a separate 32-bit value within the block. The current
      find_section() function to will only look at the size in the block
      header, and, depending on what's in that now reserved size field,
      continue looking for other sections in the wrong place.

      Fix this by taking the new block size field into account. This will
      ensure that the lookups for other sections will work properly, as long
      as the new 32-bit size does not go beyond the opregion VBT mailbox size.

      Second, the contents of the block have been completely
      changed. Gracefully refuse parsing the yet unknown data version.

      Cc: Deepak M <m.deepak@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Deepak M <m.deepak@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 500d701f336b2771d34e46da7875a4782515a652
  Author: Peng Tao <tao.peng@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 11:35:22 2015 +0800

      NFS41: make close wait for layoutreturn

      If we send a layoutreturn asynchronously before close, the close
      might reach server first and layoutreturn would fail with BADSTATEID
      because there is nothing keeping the layout stateid alive.

      Also do not pretend sending layoutreturn if we are not.

      Signed-off-by: Peng Tao <tao.peng@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit d6eb71a6d2eda21c8cd7a4dcd6207a0d94eb6ae7
  Author: Vaibhav Jain <vaibhav@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 08:37:59 2015 +0530

      cxl: Fix lockdep warning while creating afu_err_buff attribute

      Presently a lockdep warning is reported during creation of afu_err_buff
      bin_attribute for the afu. This is caused due to the variable attr.key
      not pointing to a static class key, hence the function lockdep_init_map
      reports this warning:

       BUG: key <some-address> not in .data!

      The patch fixes this issue by calling sysfs_attr_init on the
      attr_eb.attr structure before populating it with the afu_err_buff file
      details. This will populate the attr.key variable with a static class
      key so that lockdep_init_map stops complaining about the lockdep key not
      being static.

      Reported-by: Daniel Axtens <dja@xxxxxxxxxx>
      Signed-off-by: Vaibhav Jain <vaibhav@xxxxxxxxxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Reviewed-by: Daniel Axtens <dja@xxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 721a09f7393de6c28a07516dccd654c6e995944a
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 14:28:54 2015 +0200

      drm/i915: Add primary plane to mask if it's visible

      This fixes the warnings like

      "plane A assertion failure, should be disabled but not"

      that on the initial modeset during boot. This can happen if
      the primary plane is enabled by the firmware, but inheriting
      it fails because the DMAR is active or for other reasons.

      Most likely caused by

      commit 36750f284b3a4f19b304fda1bb7d6e9e1275ea8d
      Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Date:   Mon Jun 1 12:49:54 2015 +0200

          drm/i915: update plane state during init

      Reported-by: Andreas Reis <andreas.reis@xxxxxxxxx>
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=91429
      Reported-and-tested-by: Emil Renner Berthing <kernel@xxxxxxxx>
      Tested-by: Andreas Reis <andreas.reis@xxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 09bd1b4f814870ffa3496aca9e41938ec3ed2884
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 13:13:46 2015 +0200

      EDAC, xgene: Convert to debugfs wrappers

      Drop CONFIG_EDAC_DEBUG ifdeffery too, while at it.

      Tested-by: Loc Ho <lho@xxxxxxx>
      Cc: linux-edac@xxxxxxxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 834c952a1177721f2c0e779e3ca856b79ce27310
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Apr 22 11:47:43 2015 +0200

      arcnet: capmode: remove extra function

      This patch cleans the capmode protocol module. It removes the obsolete
      function arcnet_cap_init and replaces printk with pr_info.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit abc23ec927f217f1cc698e36d300ef80e935e805
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Apr 22 11:11:58 2015 +0200

      arcnet: arc-rawmode: reorder module functions

      This patch moves the module_init and module_exit patches to
      the end of the file. It also replaces the printk with pr_info.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit c6e1e7b5b7f031910850ddaf7bfa65ba3b4843ea
  Author: Juergen Gross <jgross@xxxxxxxx>
  Date:   Tue Sep 22 12:48:59 2015 +0200

      sched/core: Make 'sched_domain_topology' declaration static

      The 'sched_domain_topology' variable is only used within 
kernel/sched/core.c.
      Make it static.

      Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442918939-9907-1-git-send-email-jgross@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a7adb91b13c104e5ad950fbe1795aa2722f2ea0a
  Author: Kristen Carlson Accardi <kristen@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 10:51:36 2015 -0700

      x86/cpufeatures: Correct spelling of the HWP_NOTIFY flag

      Because noitification just isn't right.

      Signed-off-by: Kristen Carlson Accardi <kristen@xxxxxxxxxxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442944296-11737-1-git-send-email-kristen@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e3e72ab80a3fac0b88e07d358a2c75724ccd66b4
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 13:22:52 2015 +0200

      atomic: Implement atomic_read_ctrl()

      Provide atomic_read_ctrl() to mirror READ_ONCE_CTRL(), such that we can
      more conveniently use atomics in control dependencies.

      Since we can assume atomic_read() implies a READ_ONCE(), we must only
      emit an extra smp_read_barrier_depends() in order to upgrade to
      READ_ONCE_CTRL() semantics.

      Requested-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: oleg@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/20150918115637.GM3604@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 62e8a3258bda118f24ff462fe04cfbe75b8189b5
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 11:13:10 2015 +0200

      atomic, arch: Audit atomic_{read,set}()

      This patch makes sure that atomic_{read,set}() are at least
      {READ,WRITE}_ONCE().

      We already had the 'requirement' that atomic_read() should use
      ACCESS_ONCE(), and most archs had this, but a few were lacking.
      All are now converted to use READ_ONCE().

      And, by a symmetry and general paranoia argument, upgrade atomic_set()
      to use WRITE_ONCE().

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: james.hogan@xxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: oleg@xxxxxxxxxx
      Cc: will.deacon@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 90fe65148ea76988d8d5acbf3e578aa74129a490
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 15:04:59 2015 +0200

      atomic: Add atomic_long_t bitops

      When adding the atomic bitops, I seem to have forgotten about
      atomic_long_t, fix this.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4bbffe718fe1bfae6176a6fb783c1576b69338e5
  Merge: ac742d3 21199f2
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 23 09:52:03 2015 +0200

      Merge branch 'locking/urgent' into locking/core, to pick up fixes before 
applying new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 269b26a5ef2b10bf15f66524fa47d81c1b4dc1a1
  Author: Juri Lelli <juri.lelli@xxxxxxx>
  Date:   Wed Sep 2 11:01:36 2015 +0100

      sched/rt: Make (do_)balance_runtime() return void

      The return value of (do_)balance_runtime() is not consumed by anybody.
      Make them return void.

      Signed-off-by: Juri Lelli <juri.lelli@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441188096-23021-5-git-send-email-juri.lelli@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f52405757e4e9bddd868d6b8ca501d58f292969f
  Author: Juri Lelli <juri.lelli@xxxxxxx>
  Date:   Wed Sep 2 11:01:35 2015 +0100

      sched/deadline, locking/rtmutex: Fix open coded check in 
rt_mutex_waiter_less()

      rt_mutex_waiter_less() check of task deadlines is open coded. Since this
      is subject to wraparound bugs, make it use the correct helper.

      Reported-by: Luca Abeni <luca.abeni@xxxxxxxx>
      Signed-off-by: Juri Lelli <juri.lelli@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441188096-23021-4-git-send-email-juri.lelli@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2726d6ce389788c7fe724961a6e1bfe569560088
  Author: Juri Lelli <juri.lelli@xxxxxxx>
  Date:   Wed Sep 2 11:01:34 2015 +0100

      sched/deadline: Unify dl_time_before() usage

      Move dl_time_before() static definition in include/linux/sched/deadline.h
      so that it can be used by different parties without being re-defined.

      Reported-by: Luca Abeni <luca.abeni@xxxxxxxx>
      Signed-off-by: Juri Lelli <juri.lelli@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441188096-23021-3-git-send-email-juri.lelli@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 21199f27b430576552b26210b3194a363d7f05cd
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 16:10:40 2015 +0200

      locking/lockdep: Fix hlock->pin_count reset on lock stack rebuilds

      Various people reported hitting the "unpinning an unpinned lock"
      warning. As it turns out there are 2 places where we take a lock out
      of the middle of a stack, and in those cases it would fail to preserve
      the pin_count when rebuilding the lock stack.

      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Reported-by: Tim Spriggs <tspriggs@xxxxxxxxx>
      Tested-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: davej@xxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/20150916141040.GA11639@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 968d712a2565121b269e1037a1517916a9769423
  Merge: b572727 e803cf9
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 23 09:42:58 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Fix a segfault in 'perf probe' when removing uprobe events. (Masami 
Hiramatsu)

        - Synthesize COMM event for workloads started from the command line in 
'perf
          record' so that we can have the pid->comm mapping before we get the 
real
          PERF_RECORD_COMM switching from perf to the workload. (Namhyung Kim)

        - Fix build tools/vm/ due to removal of tools/lib/api/fs/debugfs.h.
          (Arnaldo Carvalho de Melo)

      Infrastructure changes:

        - Fix the make tarball targets by including the recently added err.h 
header in
          the perf MANIFEST file. (Jiri Olsa)

        - Don't assume that the event parser returns a non empty evlist. (Wang 
Nan)

        - Add way to disambiguate feature detection state files, needed to use
          tools/build feature detection for multiple components in a single O= 
output
          dir, which will be the case with tools/perf/ and tools/lib/bpf/.
          (Arnaldo Carvalho de Melo)

        - Fixup FEATURE_{TESTS,DISPLAY} inversion in tools/lib/bpf/. (Arnaldo 
Carvalho de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b5727270ecd807f75a8d5d1450cec39495fc794a
  Merge: 96f3eda d0d0313
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 23 09:42:11 2015 +0200

      Merge branch 'perf/urgent' into perf/core to pick up fixes before pulling 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d0d0313c2ae4bc220c4ed96ce340860a4e74a2e9
  Merge: f73e22a c2e4b24
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 23 09:41:09 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

        - Fix libtraceevent string handling in heterogeneous arch environments. 
(Kapileshwar Singh)

        - Avoid infinite loop at buildid processing with no samples in 'perf 
record'. (Mark Rutland)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 22be9cd9f22a4b2acc5fe6666ca23206ebe4d495
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Sep 22 14:21:16 2015 +0200

      s390/numa: use correct type for node_to_cpumask_map

      With CONFIG_CPUMASK_OFFSTACK=y cpumask_var_t is a pointer to a CPU mask.
      Replace the incorrect type for node_to_cpumask_map with cpumask_t.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 41b578fb0e8b930f2470d3f673b0fa279e77a7b8
  Author: Jesse Barnes <jbarnes@xxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 12:15:54 2015 -0700

      drm/i915: workaround bad DSL readout v3

      On HSW at least (still testing other platforms, but should be harmless
      elsewhere), the DSL reg reads back as 0 when read around vblank start
      time.  This ends up confusing the atomic start/end checking code, since
      it causes the update to appear as if it crossed a frame count boundary.
      Avoid the problem by making sure we don't return scanline_offset from
      the get_crtc_scanline function.  In moving the code there, I add to add
      an additional delay since it could be called and have a legitimate 0
      result for some time (depending on the pixel clock).

      v2: move hsw dsl read hack to get_crtc_scanline (Ville)
      v3: use break instead of goto (Ville)
          update comment with workaround details (Ville)

      References: https://bugs.freedesktop.org/show_bug.cgi?id=91579
      Signed-off-by: Jesse Barnes <jbarnes@xxxxxxxxxxxxxxxx>
      Reviewed-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 84286f191a01f198ccfc15759d01320e3847accd
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Apr 15 11:43:57 2015 +0200

      arcnet: com20020: replace magic numbers with readable macros

      This patch replaces all magic numbers in the driver with
      proper named macros. For the case of XTOcfg and STARTIOcmd
      it introduces the new macros.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 54a84c61823e2069da2c7ad91518ff7625129ce5
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Fri Mar 20 15:22:02 2015 +0100

      arcnet: reformat structs to C99 format

      This patch changes the macro definitions to match the C99
      formating. This improves the readability.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 4b0dad83c53b4a6a29be47dc3acc8623be36e7dd
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:14 2015 -0700

      arcnet: Remove unused arcnet_<I/O>w macros

      The word length macros are unused.  Remove them.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 8e0f295ea5e712ca30db08a4e3c496e914ee7fef
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:13 2015 -0700

      arcnet: Add com9026.h to standardize COM9026_REG_<foo>

      Deduplicate the COM9026 registers.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit e15b03625ce1aa5ca4ab782e034af7d5b56e1b19
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:12 2015 -0700

      arcnet: Remove function pointer macro indirections

      It's clearer to use function pointer calls directly instead of the
      macro indirections of ARCRESET, ACOMMAND, ASTATUS, and AINTMASK.

      Remove the now unused macros too.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit a11a5442d108357d44d34407ce2ed9d77ab424a0
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:11 2015 -0700

      arcnet: com90xx: Use arcnet_readb/writeb routines

      Simplify and make consistent the current uses of readb/writeb
      by using the newly introduced arcnet_<I/O> equivalents.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 4e2f9f1b1ff68e86871594f7321c851c4a147ea4
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:10 2015 -0700

      arcnet: arc-rimi: Use arcnet_<I/O> routines

      Simplify and make consistent the current uses of readb/writeb
      by using the newly introduced arcnet_<I/O> equivalents.

      o Add new #defines for register offsets
      o Remove old #defines that included the ioaddr
      o Remove obfuscating macros by expanding them in-place where appropriate

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 9c76aa55110a48c0db1eab4c998a5b94d9f0f852
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:09 2015 -0700

      arcnet: arcdevice.h: Add arcnet_readb and arcnet_writeb

      Use the same indirection as the other arcnet_<I/O> macros.
      Neither of these new macros add the BUS_ALIGN use for 8 bit devices
      on 16 bit busses.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 09dfbcd5d178f8e03b5a29c9f3411687ec388c91
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:08 2015 -0700

      arcnet: com90xx: Use arcnet_<I/O> routines

      Simplify and make consistent the current uses of inb/outb
      by using the newly introduced arcnet_<I/O> equivalents.

      o Add new #defines for register offsets
      o Remove old #defines that included the ioaddr
      o Remove obfuscating macros by expanding them in-place where appropriate

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit f0b9c27c0c933a6545ea57d4edbc56a4db435c84
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:07 2015 -0700

      arcnet: com90io: Use arcnet_<I/O> routines

      Simplify and make consistent the current uses of inb/outb
      by using the newly introduced arcnet_<I/O> equivalents.

      o Add new #defines for register offsets
      o Remove old #defines that included the ioaddr
      o Remove obfuscating macros by expanding them in-place where appropriate

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 0fec65130b9f11a73d74f47025491f97f82ba070
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:06 2015 -0700

      arcnet: com20020: Use arcnet_<I/O> routines

      Simplify and make consistent the current uses of inb/outb
      by using the newly introduced arcnet_<I/O> equivalents.

      o Add new #defines for register offsets
        There is an register offset, 8, that is unnamed and used as-is.
      o Remove old #defines that included the ioaddr
      o Remove obfuscating macros by expanding them in-place where appropriate
      o Create static inline com20020_set_subaddress for the SET_SUBADR macro

      There is an unused arcnet config entry CONFIGSA100_CT6001 which added a
      special #define BUS_ALIGN which was introduced but never used in fullhist 
git
      tree commit 22cfce4b82b0 ("[ARCNET]: Fixes.") in Nov 2004 for Linux 
v2.6.10.

      This BUS_ALIGN #define tries to allow 8 bit devices to work on a 16 bit
      bus by aligning addresses to 16 bit boundaries.

      Move this currently unused CONFIG_SA1100_CT6001 BUS_ALIGN macro from
      com20020.h to arcdevice.h.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit e5fcfc1f8d3cfaf432a93d39df3e5d7718c58848
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:05 2015 -0700

      arcnet: Add arcnet_<I/O> macros

      arcnet uses an I/O scheme which can align I/O addresses to word boundaries
      on different architectures.

      Add arcnet specific macros which can hide this alignment calculation.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 4e299b922c44d242ac855805aee94d938b06944f
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:04 2015 -0700

      arcnet: Make a char * array const char * const

      Might as well be specific about the use of this array.

      Add a commment questioning the indexing too.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 26c6d281688e8bb8154fa78c60e551d024f5d0b8
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:03 2015 -0700

      arcnet: Move files out of include/linux

      These #include files don't need to be in the include/linux directory
      as they can be local to drivers/net/arcnet/

      Move them and update the #include statements.

      Update the MAINTAINERS file pattern by deleting arcdevice from the
      NETWORKING block as arcnet is currently unmaintained.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit d6d7d3ed56e3bfe7fd34108dbe23f0610e3d8621
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:02 2015 -0700

      arcnet: Wrap some long lines

      Just neatening.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 83df99b50f901cb7c72cf132a83f43bbaeb01362
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:01 2015 -0700

      arcnet: Convert arcnet_dump_skb macro to static inline

      Make sure the arguments are tested appropriately when not using
      this function.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit d8101e7bec352b7b6a154ec2e428d01bddb7e5b4
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:00 2015 -0700

      arcnet: Remove pointer comparisons to NULL

      Use direct tests of pointer instead.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 97464eddf9fdbe02abfc44676949e07708cf557f
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:59 2015 -0700

      arcnet: Remove assignments from ifs

      Move the assignment above the if like general kernel style.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 5628d98fc5e99e29f2a480d4a7b1faba94a0d422
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:58 2015 -0700

      arcnet: Remove unnecessary OOM messages

      Alloc failures have generic stack dumps so these are redundant.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 811eafc02e16996674848d7d057909624fb0cc31
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:57 2015 -0700

      arcnet: Move EXPORT_SYMBOL after declarations

      Use the normal kernel style for EXPORT_SYMBOL.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 05a24b234b9dda3720208b74503f2cf1d05774ee
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:56 2015 -0700

      arcnet: Convert printk to pr_<level>

      Use the more current logging style.

      Remove #define VERSION, use pr_info normally.
      Add pr_fmt with "arcnet:" prefixes and KBUILD_MODNAME.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit a34c0932c3b2f28542825ffc5280d562c49ad42d
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:55 2015 -0700

      arcnet: Convert BUGMSG and BUGMSG2 to arc_prink and arc_cont

      These macros don't actually represent BUG uses but are more commonly
      used as logging macros, so use a more kernel style macro.

      Convert the BUGMSG from a netdev_ like use to actually use netdev_<level>.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 72aeea4841c037b9b3abf65859673cbd7b6664a9
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:54 2015 -0700

      arcnet: Expand odd BUGLVL macro with if and uses

      Don't hide what should be obvious.

      Make the macro a simple test instead of using if and test.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit d77510f3436e0db9b5e72fa8159ce26c3ac88d2d
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:53 2015 -0700

      arcnet: Neaten BUGMSG macro defines

      These macros are actually printk and pr_cont uses with a flag.

      Add a new BUGLVL_TEST macro which is just the "should use" test
      and not an odd "if (<foo>)" macro to simplify uses in a new patch.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit f2f0a16bf89a1bbf2f774e060de85ffbd8fff162
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:52 2015 -0700

      arcnet: Use network block comment style

      Conformity can be useful.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 5e7ef9134ce1b8ae8d686ce08b9746b32535964d
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:51 2015 -0700

      arcnet: Use include/linux path for asm

      Use the preferred kernel include path for asm paths.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 3b4e55510f3151cd906cd221f6fba5cb56b8cfed
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:50 2015 -0700

      arcnet: Coalesce string fragments

      Using coalesced strings helps grep for specific messages.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 7f5e760c1b269044a4ba1b269263beca80ae2741
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:49 2015 -0700

      arcnet: Use normal kernel brace style

      Move braces normal kernel locations.
      Add missing braces.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 01a1d5ac4e1a5890fd6c0d0ae900e1b6e4f851d6
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:48 2015 -0700

      arcnet: Add and remove blank lines

      Use a more current kernel line style.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit cb334648a10c7fa6f0f163c22602f4dc1c6d56b4
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:47 2015 -0700

      arcnet: Use normal kernel spacing style

      Standardized spacing is easier to read.

      git diff -w shows no differences.
      objdiff shows no differences.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 37587fadff8ce8f40a6952f0383c571a89b29d1d
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Thu Jul 30 13:22:43 2015 -0700

      arcnet: fix indentation of if_arcnet.h

      Standardized spacing is easier to read.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit ef34cc3428a716f86ee72aa5a37fa6c0025e4363
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 09:38:13 2015 +0800

      x86/numachip: Fix timer build conflict

      Fix Numachip build conflict from:
      ce2e572 x86/numachip: Introduce Numachip2 timer mechanisms

      drivers/built-in.o:(.discard+0x1b): multiple definition of 
`__pcpu_unique_cpu_ced'
      arch/x86/built-in.o:(.discard+0xa0da): first defined here

      Ensure cpu_ced is unique by prefixing with 'numachip2'.

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Cc: <tipbuild@xxxxxxxxx>
      Cc: <kbuild-all@xxxxxx>
      Cc: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e803cf97a4f90d31bcc2c9a1ea20fe9cdc12b2f9
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Tue Sep 22 09:24:55 2015 +0900

      perf record: Synthesize COMM event for a command line workload

      When perf creates a new child to profile, the events are enabled on
      exec().  And in this case, it doesn't synthesize any event for the
      child since they'll be generated during exec().  But there's an window
      between the enabling and the event generation.

      It used to be overcome since samples are only in kernel (so we always
      have the map) and the comm is overridden by a later COMM event.
      However it won't work if events are processed and displayed before the
      COMM event overrides like in 'perf script'.  This leads to those early
      samples (like native_write_msr_safe) not having a comm but pid (like
      ':15328').

      So it needs to synthesize COMM event for the child explicitly before
      enabling so that it can have a correct comm.  But at this time, the
      comm will be "perf" since it's not exec-ed yet.

      Committer note:

      Before this patch:

        # perf record usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.017 MB perf.data (7 samples) ]
        # perf script --show-task-events
          :4429  4429 27909.079372:          1 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
          :4429  4429 27909.079375:          1 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
          :4429  4429 27909.079376:         10 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
          :4429  4429 27909.079377:        223 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
          :4429  4429 27909.079378:       6571 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
         usleep  4429 27909.079380: PERF_RECORD_COMM exec: usleep:4429/4429
         usleep  4429 27909.079381:     185403 cycles:  ffffffff810a72d3 
flush_signal_handlers (/lib/modules/4.
         usleep  4429 27909.079444:    2241110 cycles:      7fc575355be3 
_dl_start (/usr/lib64/ld-2.20.so)
         usleep  4429 27909.079875: PERF_RECORD_EXIT(4429:4429):(4429:4429)

      After:

        # perf record usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.017 MB perf.data (7 samples) ]
        # perf script --show-task
           perf     0     0.000000: PERF_RECORD_COMM: perf:8446/8446
           perf  8446 30154.038944:          1 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
           perf  8446 30154.038948:          1 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
           perf  8446 30154.038949:          9 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
           perf  8446 30154.038950:        230 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
           perf  8446 30154.038951:       6772 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
         usleep  8446 30154.038952: PERF_RECORD_COMM exec: usleep:8446/8446
         usleep  8446 30154.038954:     196923 cycles:  ffffffff81766440 
_raw_spin_lock (/lib/modules/4.3.0-rc1
         usleep  8446 30154.039021:    2292130 cycles:      7f609a173dc4 memcpy 
(/usr/lib64/ld-2.20.so)
         usleep  8446 30154.039349: PERF_RECORD_EXIT(8446:8446):(8446:8446)
        #

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442881495-2928-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f6489bc2d402c0db84aa64f13b864d17f7eecb07
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 22 13:13:04 2015 -0300

      tools vm: Fix build due to removal of tools/lib/api/fs/debugfs.h

      There were some changes in how this debugfs mounting helper is
      implemented/exported and we forgot to check if there were other users
      besides perf, fix it.

      Need to do a make -C tools/ everytime we do changes to
      tools/{lib,include} and other places where we're moving things from
      tools/perf/ to be used by other tools/ living code.

      Fixed:

        $ make -C tools/vm
        make: Entering directory '/home/git/linux/tools/vm'
        make -C ../lib/api
        make[1]: Entering directory '/home/git/linux/tools/lib/api'
          CC       fd/array.o
          LD       fd/libapi-in.o
          CC       fs/fs.o
          CC       fs/tracing_path.o
          LD       fs/libapi-in.o
          CC       cpu.o
          LD       libapi-in.o
          AR       libapi.a
        make[1]: Leaving directory '/home/git/linux/tools/lib/api'
        gcc -Wall -Wextra -I../lib/ -o page-types page-types.c 
../lib/api/libapi.a
        make: Leaving directory '/home/git/linux/tools/vm'
        $

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Tested-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Fixes: 60a1133a5b39 ("tools lib api fs: Remove debugfs, tracefs and 
findfs objects")
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fbd03513bf36c4e5c2942f436f05c8eb99a3cc9e
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Sep 22 11:28:14 2015 +0200

      net: dsa: Fix Marvell Egress Trailer check

      The Marvell Egress rx trailer check must be fixed to
      correctly detect bad bits in the third byte of the
      Eggress trailer as described in the Table 28 of the
      88E6060 datasheet.
      The current code incorrectly omits to check the third
      byte and checks the fourth byte twice.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Acked-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7def0f952eccdd0edb3c504f4dab35ee0d3aba1f
  Author: Dmitriy Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Tue Sep 22 10:51:52 2015 +0200

      lib: fix data race in rhashtable_rehash_one

      rhashtable_rehash_one() uses complex logic to update entry->next field,
      after INIT_RHT_NULLS_HEAD and NULLS_MARKER expansion:

      entry->next = 1 | ((base + off) << 1)

      This can be compiled along the lines of:

      entry->next = base + off
      entry->next <<= 1
      entry->next |= 1

      Which will break concurrent readers.

      NULLS value recomputation is not needed here, so just remove
      the complex logic.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 23eedbc2435ddd226717603c4f3c8efec7bdbb4d
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Tue Sep 22 09:29:49 2015 +0200

      ch9200: Convert to use module_usb_driver

      Converts the ch9200 driver to use the module_usb_driver() macro which
      makes the code smaller and a bit simpler.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Acked-by: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ae5f2fb1d51fa128a460bcfbe3c56d7ab8bf6a43
  Author: Jesse Gross <jesse@xxxxxxxxxx>
  Date:   Mon Sep 21 20:21:20 2015 -0700

      openvswitch: Zero flows on allocation.

      When support for megaflows was introduced, OVS needed to start
      installing flows with a mask applied to them. Since masking is an
      expensive operation, OVS also had an optimization that would only
      take the parts of the flow keys that were covered by a non-zero
      mask. The values stored in the remaining pieces should not matter
      because they are masked out.

      While this works fine for the purposes of matching (which must always
      look at the mask), serialization to netlink can be problematic. Since
      the flow and the mask are serialized separately, the uninitialized
      portions of the flow can be encoded with whatever values happen to be
      present.

      In terms of functionality, this has little effect since these fields
      will be masked out by definition. However, it leaks kernel memory to
      userspace, which is a potential security vulnerability. It is also
      possible that other code paths could look at the masked key and get
      uninitialized data, although this does not currently appear to be an
      issue in practice.

      This removes the mask optimization for flows that are being installed.
      This was always intended to be the case as the mask optimizations were
      really targetting per-packet flow operations.

      Fixes: 03f0d916 ("openvswitch: Mega flow implementation")
      Signed-off-by: Jesse Gross <jesse@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 53adc9e83028d9e35b6408231ebaf62a94a16e4d
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 21:42:59 2015 +0100

      net: dsa: actually force the speed on the CPU port

      Commit 54d792f257c6 ("net: dsa: Centralise global and port setup
      code into mv88e6xxx.") merged in the 4.2 merge window broke the link
      speed forcing for the CPU port of Marvell DSA switches.  The original
      code was:

              /* MAC Forcing register: don't force link, speed, duplex
               * or flow control state to any particular values on physical
               * ports, but force the CPU port and all DSA ports to 1000 Mb/s
               * full duplex.
               */
              if (dsa_is_cpu_port(ds, p) || ds->dsa_port_mask & (1 << p))
                      REG_WRITE(addr, 0x01, 0x003e);
              else
                      REG_WRITE(addr, 0x01, 0x0003);

      but the new code does a read-modify-write:

                      reg = _mv88e6xxx_reg_read(ds, REG_PORT(port), 
PORT_PCS_CTRL);
                      if (dsa_is_cpu_port(ds, port) ||
                          ds->dsa_port_mask & (1 << port)) {
                              reg |= PORT_PCS_CTRL_FORCE_LINK |
                                      PORT_PCS_CTRL_LINK_UP |
                                      PORT_PCS_CTRL_DUPLEX_FULL |
                                      PORT_PCS_CTRL_FORCE_DUPLEX;
                              if (mv88e6xxx_6065_family(ds))
                                      reg |= PORT_PCS_CTRL_100;
                              else
                                      reg |= PORT_PCS_CTRL_1000;

      The link speed in the PCS control register is a two bit field.  Forcing
      the link speed in this way doesn't ensure that the bit field is set to
      the correct value - on the hardware I have here, the speed bitfield
      remains set to 0x03, resulting in the speed not being forced to gigabit.

      We must clear both bits before forcing the link speed.

      Fixes: 54d792f257c6 ("net: dsa: Centralise global and port setup code 
into mv88e6xxx.")
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 08399efc631960c827cebcfe83ad7ed54ebc012b
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 10:29:09 2015 -0400

      geneve: ensure ECN info is handled properly in all tx/rx paths

      Partially due to a pre-exising "thinko", the new metadata-based tx/rx
      paths were handling ECN propagation differently than the traditional
      tx/rx paths.  This patch removes the "thinko" (involving multiple
      ip_hdr assignments) on the rx path and corrects the ECN handling on
      both the rx and tx paths.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 227b9e8708b14a8a26ef67bbbe19b13626df4a35
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:59 2015 +0200

      usbnet: remove invalid check

      skb->len is always non-negative.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7e724da64491b20257d46f100bcc6d6214c37b70
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:55 2015 +0200

      rndis_wlan: fix checking for default value

      Thresholds uses -1 to indicate that default value should be used.
      Since thresholds are unsigned sign checking makes no sense.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e79dd09b605f42d85d1a5605ad0fe96b970695e9
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:54 2015 +0200

      orinoco: fix checking for default value

      Thresholds uses -1 to indicate that default value should be used.
      Since thresholds are unsigned sign checking makes no sense.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc7514985919238ef7ce94e80f0d0ad87193de47
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:53 2015 +0200

      mwifiex: fix comparison expression

      To avoid underflows signed variables should be used in expression.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Acked-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 94926121692381247090b35ec68aed124260f05e
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:52 2015 +0200

      net: brcm80211: fix range check

      Unsigned minus constant is still unsigned so checking its sign makes no
      sense.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 23c2412d6296b4719c2c60054af00062174dd464
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:51 2015 +0200

      net: stmmac: fix type of entry variable

      Variable can store negative values.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7d2fa71048b85c29a3265a6ed3fae3a568aae49e
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:50 2015 +0200

      net/ibm/emac: fix type of phy_mode

      phy_mode can be negative.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f89642fa10bb6ec02feaa8e3d1d62df671d0207
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:49 2015 +0200

      isdn: hisax: fix frame calculation

      Difference of unsigned values is also unsigned so it does not make
      sense to check its sign.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 25b1029789f98f945a03a2d04662a94b357aacb9
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:12 2015 -0700

      ixgbe: Enable bit-banging mode on X550

      Set the bit banging mode in the hardware when performing bit banging
      I2C operations on X550. Also control the output enable on both the
      clock and data lines.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit da4ea4baf77c9e45c53671e465043ffaf26fd45d
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:07 2015 -0700

      ixgbe: Set lan_id before first I2C eeprom access

      The lan_id is being set after a previous I2C eeprom access which
      makes no sense because it needs to be set before any access. Move
      the setting to before the access.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bb5ce9a5cb6e915a2b284a8785686716823679d1
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:02 2015 -0700

      ixgbe: Provide unlocked I2C methods

      Most I2C accesses take and release semaphores for each access. Now
      there is a reason to perform multiple I2C operations under the same
      holding of the semaphore, so provide unlocked I2C methods for that
      purpose.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4f9e3a3de0e2fbc49c036322cb2ee656ea8b93fc
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:17:57 2015 -0700

      ixgbe: Provide I2C combined on X550EM

      Provide I2C combined operations on X550EM, not X550 devices.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit cbd45ec7aae9a20835d1a64c7a1910eb5dcec57b
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:17:51 2015 -0700

      ixgbe: Add X550EM support for SFP insertion interrupt

      Add support for the SFP insertion interrupt on X550EM devices with
      SFPs.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 29a8dca1997f880563e53e9ba0fcb50b03bd23af
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:17:46 2015 -0700

      ixgbe: Accept SFP not present errors on all devices

      When an SFP not present error is returned by the reset_hw method,
      accept it and go on, since an SFP can still be inserted. Previously
      it was only accepted for 82598 devices.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0f90300f4fd30968a4d40fe47a9043be9912cb31
  Author: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
  Date:   Thu Aug 6 17:57:31 2015 +0900

      ixgbevf: Enables TSO for stacked VLAN

      Setting ndo_features_check to passthru_features_check allows the driver
      to skip the check for multiple tagged TSO packets and enables stacked
      VLAN TSO.
      Tested with 82599ES.

      Signed-off-by: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f2701b185e05d0897a47f6a14da40a068b0644ff
  Author: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
  Date:   Thu Aug 6 17:57:29 2015 +0900

      e1000e: Enable TSO for stacked VLAN

      Setting ndo_features_check to passthru_features_check allows the driver
      to skip the check for multiple tagged TSO packets and enables stacked
      VLAN TSO.
      Tested with I217-LM.

      Signed-off-by: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
      Tested-by: Aaron Brown <aaron.f.brown@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 213246d3fade6772e07138597bca0bdf9fbe754d
  Author: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
  Date:   Thu Aug 6 17:57:28 2015 +0900

      igbvf: Enable TSO for stacked VLAN

      Setting ndo_features_check to passthru_features_check allows the driver
      to skip the check for multiple tagged TSO packets and enables stacked
      VLAN TSO.
      Tested with I350.

      Signed-off-by: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
      Tested-by: Aaron Brown <aaron.f.brown@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 307723255a05242ab252dd7047d4970ab60c7dfd
  Author: Francois Romieu <romieu@xxxxxxxxxxxxx>
  Date:   Thu Aug 6 00:52:37 2015 +0200

      e1000: remove dead e1000_init_eeprom_params calls

      The device probe method e1000_probe calls e1000_init_eeprom_params
      itself so there's no reason to call it again from e1000_do_write_eeprom
      or e1000_do_read_eeprom.

      The sentence above assumes that e1000_init_eeprom_params is effective.
      e1000_init_eeprom_params depends mostly on hw->mac_type and e1000_probe
      bails out early if it can't set mac_type (see e1000_init_hw_struct, then
      e1000_set_mac_type), qed.

      Btw, if effective, the removed paths would had been deadlock prone when
      e1000_eeprom_spi was set:
      -> e1000_write_eeprom (takes e1000_eeprom_lock)
         -> e1000_do_write_eeprom
            -> e1000_init_eeprom_params
               -> e1000_read_eeprom (takes e1000_eeprom_lock)

      (same narrative with e1000_read_eeprom -> e1000_do_read_eeprom etc.)

      As a final note, the candidate deadlock above can't happen in e1000_probe
      due to the way eeprom->word_size is set / tested.

      Signed-off-by: Francois Romieu <romieu@xxxxxxxxxxxxx>
      Tested-by: Aaron Brown <aaron.f.brown@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 80043f3bf5bdb187566620a8f183c15b94e961cb
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jul 1 17:38:36 2015 -0700

      fm10k: add support for extra debug statistics

      Add a private ethtool flag to enable display of these statistics, which
      are generally less useful. However, sometimes it can be useful for
      debugging purposes. The most useful portion is the ability to see what
      the PF thinks the VF mailboxes look like.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 15aa49cb99c128e1484b6373382e264588067cab
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Fri Jun 26 08:54:07 2015 -0700

      fm10k: TRIVIAL remove unnecessary comma

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit afadfd224f53106e4fd52f3b6885a93431a5a6f5
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Fri Jun 26 08:54:06 2015 -0700

      fm10k: create "correct" header for the remote end on connect

      When we connect to the mailbox, we insert a fake disconnect header so
      that the code does not see an invalid header and thus instantly error
      every time we bring up the mailbox. However, we incorrectly record the
      tail and head from the local perspective. Since the remote end shouldn't
      have anything for us, add a "create_fake_disconnect_hdr" function which
      inverts the TAIL and HEAD fields. This enables us to connect without any
      errors of either TAIL or HEAD incorrectness, and prevents creating
      extraneous error messages. This is necessary now since mbx_reset_work
      does not actually reset the Tx FIFO head and tail pointers, thus head
      and tail might not be equivalent on a reconnect.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4b09728e9d34170c375f41d9b454f067ce39591f
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Thu Jun 25 14:43:43 2015 -0700

      fm10k: drop transmitted messages in Tx FIFO as part of reset_work

      This patch fixes a corner case issue with the PF/VF mailbox code.
      Currently, fm10k_mbx_reset_work clears various state about the mailbox.
      However, it does not clear the Tx FIFO head/tail pointers. We can't
      simply clear these pointers as we unintentionally drop untransmitted
      messages without error.

      Doing nothing results in a possible phantom re-transmission of messages,
      since we leave tx.head and tx.tail intact, but clear the tx_pulled and
      tail_len values. This means that the PF could continuously re-send a
      message which triggers a reset in the VF. Upon reset, the VF will
      re-receive the same message after a reconnect.

      If we reset the tx.head and tx.tail pointers completely, we end up
      dropping some messages that were pending before connect. This results in
      missing LPORT_MSG_READY bits, and VFs will end up reporting no link.

      However, we can resolve both issues by simply incrementing head to
      account for the already transmitted messages, before we reset tx_pulled.
      We do this via the same logic as fm10k_mbx_head_pull.

      We account for the tail_len which includes all data not yet transmitted,
      once we account for the acked data which means re-reading the HEAD
      variable from the message header. Then, we drop messages until we've
      dropped more than the new tx_pulled value. At this point, resetting
      tail_len and tx_pulled, but not tx.head and tx.tail will result in
      prevention of the phantom message. It also prevents us from dropping
      untransmitted messages upon attempting to Tx into a connect or
      disconnect header.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5532408b48834bd762ed53c22aabed5dae0748d6
  Author: Don Skidmore <donald.c.skidmore@xxxxxxxxx>
  Date:   Wed Jun 24 17:03:30 2015 -0400

      ixgbe: Add fdir support for SCTP on X550

      X550 has HW support for SCTP flow director filters SCTP mask. This
      patch adds it like we do for UDP and TCP.

      Signed-off-by: Donald C Skidmore <donald.c.skidmore@xxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a023bbd0b1a3716397d8d54ba5b95e09b8e27699
  Author: Don Skidmore <donald.c.skidmore@xxxxxxxxx>
  Date:   Wed Jun 24 16:38:53 2015 -0400

      ixgbe: Add SFP+ detection for X550 hardware

      This patch is part of the future enablement of X550 SFP+ support.  This
      HW uses different SDP so the interrupts need to be set up accordingly.

      Signed-off-by: Donald C Skidmore <donald.c.skidmore@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8427672abdc9e405f86755fad5a035511a5b1534
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:52 2015 -0700

      fm10k: remove comment about rtnl_lock around mbx operations

      This comment is no longer true due to a couple of mailbox locking
      refactors, and we now don't actually do any rtnl protected operations
      directly in the mailbox path. Remove this comment as it is factually
      incorrect and confusing.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 012572d4fc2e4ddd5c8ec8614d51414ec6cae02a
  Author: Joseph Qi <joseph.qi@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:20 2015 -0700

      ocfs2/dlm: fix deadlock when dispatch assert master

      The order of the following three spinlocks should be:
      dlm_domain_lock < dlm_ctxt->spinlock < dlm_lock_resource->spinlock

      But dlm_dispatch_assert_master() is called while holding
      dlm_ctxt->spinlock and dlm_lock_resource->spinlock, and then it calls
      dlm_grab() which will take dlm_domain_lock.

      Once another thread (for example, dlm_query_join_handler) has already
      taken dlm_domain_lock, and tries to take dlm_ctxt->spinlock deadlock
      happens.

      Signed-off-by: Joseph Qi <joseph.qi@xxxxxxxxxx>
      Cc: Joel Becker <jlbec@xxxxxxxxxxxx>
      Cc: Mark Fasheh <mfasheh@xxxxxxxx>
      Cc: "Junxiao Bi" <junxiao.bi@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 7a07b503bf249986a1eeef0351d66cac0d8bf721
  Author: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
  Date:   Tue Sep 22 14:59:20 2015 -0700

      membarrier: clean up selftest

      We don't need to specify an explicit rule in the Makefile, the implicit
      one will do the same.  The "__EXPORTED_HEADERS__" define is not needed,
      because we build the test against the installed kernel headers, not the
      in-tree kernel headers.  Re-use "$(TEST_PROGS)" in the clean target
      rather than spelling the executable name twice.  Include <unistd.h>
      rather than the rather specific <asm-generic/unistd.h>.  Include
      <syscall.h> rather than <sys/syscall.h>.  In both cases, the former
      header is located in a standard location and includes the latter.

      Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Pranith Kumar <bobby.prani@xxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d5028f9f7d8de5c375c52b98976b6f310e73398f
  Author: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 14:59:20 2015 -0700

      vmscan: fix sane_reclaim helper for legacy memcg

      The sane_reclaim() helper is supposed to return false for memcg reclaim
      if the legacy hierarchy is used, because the latter lacks dirty
      throttling mechanism, and so it did before it was accidentally broken by
      commit 33398cf2f360c ("memcg: export struct mem_cgroup").  Fix it.

      Fixes: 33398cf2f360c ("memcg: export struct mem_cgroup")
      Signed-off-by: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
      Acked-by: Tejun Heo <tj@xxxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Cc: Johannes Weiner <hannes@xxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d046b770c9fc36ccb19c27afdb8322220108cbc7
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:20 2015 -0700

      lib/iommu-common.c: do not try to deref a null iommu->lazy_flush() 
pointer when n < pool->hint

      The check for invoking iommu->lazy_flush() from iommu_tbl_range_alloc()
      has to be refactored so that we only call ->lazy_flush() if it is
      non-null.

      I had a sparc kernel that was crashing when I was trying to process some
      very large perf.data files- the crash happens when the scsi driver calls
      into dma_4v_map_sg and thus the iommu_tbl_range_alloc().

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 769a8089c1fd2fe94c13e66fe6e03d7820953ee3
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Tue Sep 22 14:59:17 2015 -0700

      x86, efi, kasan: #undef memset/memcpy/memmove per arch

      In not-instrumented code KASAN replaces instrumented memset/memcpy/memmove
      with not-instrumented analogues __memset/__memcpy/__memove.

      However, on x86 the EFI stub is not linked with the kernel.  It uses
      not-instrumented mem*() functions from arch/x86/boot/compressed/string.c

      So we don't replace them with __mem*() variants in EFI stub.

      On ARM64 the EFI stub is linked with the kernel, so we should replace
      mem*() functions with __mem*(), because the EFI stub runs before KASAN
      sets up early shadow.

      So let's move these #undef mem* into arch's asm/efi.h which is also
      included by the EFI stub.

      Also, this will fix the warning in 32-bit build reported by kbuild test
      robot:

        efi-stub-helper.c:599:2: warning: implicit declaration of function 
'memcpy'

      [akpm@xxxxxxxxxxxxxxxxxxxx: use 80 cols in comment]
      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3aaa76e125c1dd58c9b599baa8c6021896874c12
  Author: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 14:59:14 2015 -0700

      mm: migrate: hugetlb: putback destination hugepage to active list

      Since commit bcc54222309c ("mm: hugetlb: introduce page_huge_active")
      each hugetlb page maintains its active flag to avoid a race condition
      betwe= en multiple calls of isolate_huge_page(), but current kernel
      doesn't set the f= lag on a hugepage allocated by migration because the
      proper putback routine isn= 't called.  This means that users could
      still encounter the race referred to by bcc54222309c in this special
      case, so this patch fixes it.

      Fixes: bcc54222309c ("mm: hugetlb: introduce page_huge_active")
      Signed-off-by: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
      Cc: Michal Hocko <mhocko@xxxxxxx>
      Cc: Andi Kleen <andi@xxxxxxxxxxxxxx>
      Cc: Hugh Dickins <hughd@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>  [4.1.x]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8a04446ab0cf4f35d9f583cd6adcbf7c534e4995
  Author: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 14:59:12 2015 -0700

      mm, dax: VMA with vm_ops->pfn_mkwrite wants to be write-notified

      For VM_PFNMAP and VM_MIXEDMAP we use vm_ops->pfn_mkwrite instead of
      vm_ops->page_mkwrite to notify abort write access.  This means we want
      vma->vm_page_prot to be write-protected if the VMA provides this vm_ops.

      A theoretical scenario that will cause these missed events is:

        On writable mapping with vm_ops->pfn_mkwrite, but without
        vm_ops->page_mkwrite: read fault followed by write access to the pfn.
        Writable pte will be set up on read fault and write fault will not be
        generated.

      I found it examining Dave's complaint on generic/080:

        http://lkml.kernel.org/g/20150831233803.GO3902@dastard

      Although I don't think it's the reason.

      It shouldn't be a problem for ext2/ext4 as they provide both pfn_mkwrite
      and page_mkwrite.

      [akpm@xxxxxxxxxxxxxxxxxxxx: add local vm_ops to avoid 80-cols mess]
      Signed-off-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Yigal Korman <yigal@xxxxxxxxxxxxx>
      Acked-by: Boaz Harrosh <boaz@xxxxxxxxxxxxx>
      Cc: Matthew Wilcox <matthew.r.wilcox@xxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxx>
      Cc: Dave Chinner <david@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 09f7298100ea9767324298ab0c7979f6d7463183
  Author: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:09 2015 -0700

      userfaultfd: register uapi generic syscall (aarch64)

      Add the userfaultfd syscalls to uapi asm-generic, it was tested with
      postcopy live migration on aarch64 with both 4k and 64k pagesize
      kernels.

      Signed-off-by: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Cc: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 5dd01be14565df814408327971775f36e55bf5e3
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:06 2015 -0700

      userfaultfd: selftest: don't error out if pthread_mutex_t isn't identical

      On ppc big endian this check fails, the mutex doesn't necessarily need
      to be identical for all pages after pthread_mutex_lock/unlock cycles.
      The count verification (outside of the pthread_mutex_t structure)
      suffices and that is retained.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit a5932bf5737f0b5caf6deaa92b062e4fe66cf5b2
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:03 2015 -0700

      userfaultfd: selftest: return an error if BOUNCE_VERIFY fails

      This will report the error in the exit code, in addition of the fprintf.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 1f5fee2cf232f9fac05b65f21107d2cf3c32092c
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:00 2015 -0700

      userfaultfd: selftest: avoid my_bcmp false positives with powerpc

      Keep a non-zero placeholder after the count, for the my_bcmp comparison
      of the page against the zeropage.  The lockless increment between 255 to
      256 against a lockless my_bcmp could otherwise return false positives on
      ppc32le.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Tested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 56ed8f169e225dce1f9e40f6eee2e2dabe7d06fc
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Tue Sep 22 14:58:58 2015 -0700

      userfaultfd: selftest: only warn if __NR_userfaultfd is undefined

      If __NR_userfaultfd is not yet defined by the arch, warn but still build
      and run the userfaultfd selftest successfully.

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 67f6a029b2ccf3399783a0ff2f812666f290d94f
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:58:55 2015 -0700

      userfaultfd: selftest: headers fixup

      Depend on "make headers_install" to create proper headers to include and
      provide syscall numbers.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d0a871141d07929b559f5eae9c3fc4b63d16866b
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Tue Sep 22 14:58:52 2015 -0700

      userfaultfd: selftests: vm: pick up sanitized kernel headers

      Add the usr/include subdirectory of the top-level tree to the include
      path, and make sure to include headers without relative paths to make
      sure the sanitized headers get picked up.  Otherwise the compiler will
      not be able to find the linux/compiler.h header included by the non-
      sanitized include/uapi/linux/userfaultfd.h.

      While at it, make sure to only hardcode the syscall numbers on x86 and
      PowerPC if they haven't been properly picked up from the headers.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit ac5be6b47e8bd25b62bed2c82cda7398999f59e9
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:58:49 2015 -0700

      userfaultfd: revert "userfaultfd: waitqueue: add nr wake parameter to 
__wake_up_locked_key"

      This reverts commit 51360155eccb907ff8635bd10fc7de876408c2e0 and adapts
      fs/userfaultfd.c to use the old version of that function.

      It didn't look robust to call __wake_up_common with "nr == 1" when we
      absolutely require wakeall semantics, but we've full control of what we
      insert in the two waitqueue heads of the blocked userfaults.  No
      exclusive waitqueue risks to be inserted into those two waitqueue heads
      so we can as well stick to "nr == 1" of the old code and we can rely
      purely on the fact no waitqueue inserted in one of the two waitqueue
      heads we must enforce as wakeall, has wait->flags WQ_FLAG_EXCLUSIVE set.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 834e465bba38f2768747bccb5f00e951e72d2bf5
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Tue Sep 22 06:54:47 2015 +0800

      NFS: Skip checking ds_cinfo.buckets when lseg's commit_through_mds is set

      When lseg's commit_through_mds is set, pnfs client always WARN once
      in nfs_direct_select_verf after checking ds_cinfo.nbuckets.

      nfs should use the DS verf except commit_through_mds is set for
      layout segment where nbuckets is zero.

      [17844.666094] ------------[ cut here ]------------
      [17844.667071] WARNING: CPU: 0 PID: 21758 at 
/root/source/linux-pnfs/fs/nfs/direct.c:174 nfs_direct_select_verf+0x5a/0x70 
[nfs]()
      [17844.668650] Modules linked in: nfs_layout_nfsv41_files(OE) nfsv4(OE) 
nfs(OE) fscache(E) nfsd(OE) xfs libcrc32c btrfs ppdev coretemp crct10dif_pclmul 
auth_rpcgss crc32_pclmul crc32c_intel nfs_acl ghash_clmulni_intel lockd 
vmw_balloon xor vmw_vmci grace raid6_pq shpchp sunrpc parport_pc i2c_piix4 
parport vmwgfx drm_kms_helper ttm drm serio_raw mptspi e1000 scsi_transport_spi 
mptscsih mptbase ata_generic pata_acpi [last unloaded: fscache]
      [17844.686676] CPU: 0 PID: 21758 Comm: kworker/0:1 Tainted: G        W  
OE   4.3.0-rc1-pnfs+ #245
      [17844.687352] Hardware name: VMware, Inc. VMware Virtual Platform/440BX 
Desktop Reference Platform, BIOS 6.00 05/20/2014
      [17844.698502] Workqueue: nfsiod rpc_async_release [sunrpc]
      [17844.699212]  0000000000000009 0000000043e58010 ffff8800454fbc10 
ffffffff813680c4
      [17844.699990]  ffff8800454fbc48 ffffffff8108b49d ffff88004eb20000 
ffff88004eb20000
      [17844.700844]  ffff880062e26000 0000000000000000 0000000000000001 
ffff8800454fbc58
      [17844.701637] Call Trace:
      [17844.725252]  [<ffffffff813680c4>] dump_stack+0x19/0x25
      [17844.732693]  [<ffffffff8108b49d>] warn_slowpath_common+0x7d/0xb0
      [17844.733855]  [<ffffffff8108b5da>] warn_slowpath_null+0x1a/0x20
      [17844.735015]  [<ffffffffa04a27ca>] nfs_direct_select_verf+0x5a/0x70 
[nfs]
      [17844.735999]  [<ffffffffa04a2b83>] nfs_direct_set_hdr_verf+0x23/0x90 
[nfs]
      [17844.736846]  [<ffffffffa04a2e17>] 
nfs_direct_write_completion+0x227/0x260 [nfs]
      [17844.737782]  [<ffffffffa04a433c>] nfs_pgio_release+0x1c/0x20 [nfs]
      [17844.738597]  [<ffffffffa0502df3>] pnfs_generic_rw_release+0x23/0x30 
[nfsv4]
      [17844.739486]  [<ffffffffa01cbbea>] rpc_free_task+0x2a/0x70 [sunrpc]
      [17844.740326]  [<ffffffffa01cbcd5>] rpc_async_release+0x15/0x20 [sunrpc]
      [17844.741173]  [<ffffffff810a387c>] process_one_work+0x21c/0x4c0
      [17844.741984]  [<ffffffff810a37cd>] ? process_one_work+0x16d/0x4c0
      [17844.742837]  [<ffffffff810a3b6a>] worker_thread+0x4a/0x440
      [17844.743639]  [<ffffffff810a3b20>] ? process_one_work+0x4c0/0x4c0
      [17844.744399]  [<ffffffff810a3b20>] ? process_one_work+0x4c0/0x4c0
      [17844.745176]  [<ffffffff810a8d75>] kthread+0xf5/0x110
      [17844.745927]  [<ffffffff810a8c80>] ? kthread_create_on_node+0x240/0x240
      [17844.747105]  [<ffffffff8172ce1f>] ret_from_fork+0x3f/0x70
      [17844.747856]  [<ffffffff810a8c80>] ? kthread_create_on_node+0x240/0x240
      [17844.748642] ---[ end trace 336a2845d42b83f0 ]---

      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit b838b39e930aa1cfd099ea82ac40ed6d6413af26
  Author: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
  Date:   Tue Sep 22 17:03:54 2015 -0500

      PCI: Clear IORESOURCE_UNSET when clipping a bridge window

      c770cb4cb505 ("PCI: Mark invalid BARs as unassigned") sets 
IORESOURCE_UNSET
      if we fail to claim a resource.  If we tried to claim a bridge window,
      failed, clipped the window, and tried to claim the clipped window, we
      failed again because of IORESOURCE_UNSET:

        pci_bus 0000:00: root bus resource [mem 0xc0000000-0xffffffff window]
        pci 0000:00:01.0: can't claim BAR 15 [mem 0xbdf00000-0xddefffff 64bit 
pref]: no compatible bridge window
        pci 0000:00:01.0: [mem size 0x20000000 64bit pref] clipped to [mem size 
0x1df00000 64bit pref]
        pci 0000:00:01.0:   bridge window [mem size 0x1df00000 64bit pref]
        pci 0000:00:01.0: can't claim BAR 15 [mem size 0x1df00000 64bit pref]: 
no address assigned

      The 00:01.0 window started as [mem 0xbdf00000-0xddefffff 64bit pref].  
That
      starts before the host bridge window [mem 0xc0000000-0xffffffff window], 
so
      we clipped the 00:01.0 window to [mem 0xc0000000-0xddefffff 64bit pref].
      But we left it marked IORESOURCE_UNSET, so the second claim failed when it
      should have succeeded.

      This means downstream devices will also fail for lack of resources, e.g.,
      in the bugzilla below,

        radeon 0000:01:00.0: Fatal error during GPU init

      Clear IORESOURCE_UNSET when we clip a bridge window.  Also clear
      IORESOURCE_UNSET in our copy of the unclipped window so we can see exactly
      what the original window was and how it now fits inside the upstream
      window.

      Fixes: c770cb4cb505 ("PCI: Mark invalid BARs as unassigned")
      Link: https://bugzilla.kernel.org/show_bug.cgi?id=85491#c47
      Based-on-patch-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Based-on-patch-by: Yinghai Lu <yinghai@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Reviewed-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Acked-by: Yinghai Lu <yinghai@xxxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx        # v4.1+

  commit 8811191fdf7ed02ee07cb8469428158572d355a2
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Tue Sep 22 21:20:22 2015 +0200

      ASoC: pxa: pxa2xx-ac97: fix dma requestor lines

      PCM receive and transmit DMA requestor lines were reverted, breaking the
      PCM playback interface for PXA platforms using the sound/soc/ variant
      instead of the sound/arm variant.

      The commit below shows the inversion in the requestor lines.

      Fixes: d65a14587a9b ("ASoC: pxa: use snd_dmaengine_dai_dma_data")
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 83c133cf11fb0e68a51681447e372489f052d40e
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Sun Sep 20 16:32:05 2015 -0700

      x86/nmi/64: Fix a paravirt stack-clobbering bug in the NMI code

      The NMI entry code that switches to the normal kernel stack needs to
      be very careful not to clobber any extra stack slots on the NMI
      stack.  The code is fine under the assumption that SWAPGS is just a
      normal instruction, but that assumption isn't really true.  Use
      SWAPGS_UNSAFE_STACK instead.

      This is part of a fix for some random crashes that Sasha saw.

      Fixes: 9b6e6a8334d5 ("x86/nmi/64: Switch stacks on userspace NMI entry")
      Reported-and-tested-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/974bc40edffdb5c2950a5c4977f821a446b76178.1442791737.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit fc57a7c68020dcf954428869eafd934c0ab1536f
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Sun Sep 20 16:32:04 2015 -0700

      x86/paravirt: Replace the paravirt nop with a bona fide empty function

      PARAVIRT_ADJUST_EXCEPTION_FRAME generates this code (using nmi as an
      example, trimmed for readability):

          ff 15 00 00 00 00       callq  *0x0(%rip)        # 2796 <nmi+0x6>
                    2792: R_X86_64_PC32     pv_irq_ops+0x2c

      That's a call through a function pointer to regular C function that
      does nothing on native boots, but that function isn't protected
      against kprobes, isn't marked notrace, and is certainly not
      guaranteed to preserve any registers if the compiler is feeling
      perverse.  This is bad news for a CLBR_NONE operation.

      Of course, if everything works correctly, once paravirt ops are
      patched, it gets nopped out, but what if we hit this code before
      paravirt ops are patched in?  This can potentially cause breakage
      that is very difficult to debug.

      A more subtle failure is possible here, too: if _paravirt_nop uses
      the stack at all (even just to push RBP), it will overwrite the "NMI
      executing" variable if it's called in the NMI prologue.

      The Xen case, perhaps surprisingly, is fine, because it's already
      written in asm.

      Fix all of the cases that default to paravirt_nop (including
      adjust_exception_frame) with a big hammer: replace paravirt_nop with
      an asm function that is just a ret instruction.

      The Xen case may have other problems, so document them.

      This is part of a fix for some random crashes that Sasha saw.

      Reported-and-tested-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/8f5d2ba295f9d73751c33d97fda03e0495d9ade0.1442791737.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ce2e572cfe7b2fc3f0e9da4aa7bc61a2c2c51fc7
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 18:02:25 2015 +0800

      x86/numachip: Introduce Numachip2 timer mechanisms

      Add 1GHz 64-bit Numachip2 clocksource timer support for accurate
      system-wide timekeeping, as core TSCs are unsynchronised.

      Additionally, add a per-core clockevent mechanism that interrupts via the
      platform IPI vector after a programmed period.

      [ tglx: Taking it through x86 due to dependencies ]

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Acked-by: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442829745-29311-1-git-send-email-daniel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ad03a9c25d258641556c7198e26fd882c741987a
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 01:02:01 2015 +0800

      x86/numachip: Add Numachip IPI optimisations

      When sending IPIs, first check if the non-local part of the source and
      destination APIC IDs match; if so, send via the local APIC for efficiency.

      Secondly, since the AMD BIOS-kernel developer guide states IPI delivery
      will occur invarient of prior deliver status, avoid polling the delivery
      status bit for efficiency.

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Acked-by: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442768522-19217-3-git-send-email-daniel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d9d4dee6cedfa17e5eedcba242dca3091bf73bc3
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 01:02:00 2015 +0800

      x86/numachip: Add Numachip2 APIC support

      Introduce support for Numachip2 remote interrupts via detecting the right
      ACPI SRAT signature.

      Access is performed via a fixed mapping in the x86 physical address space.

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Acked-by: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442768522-19217-2-git-send-email-daniel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit db1003a719d75cebe5843a7906c02c29bec9922c
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 01:01:59 2015 +0800

      x86/numachip: Cleanup Numachip support

      Drop unused code and includes in Numachip header files and APIC driver.

      Additionally, use the 'numachip1' prefix on Numachip1-specific functions;
      this prepares for adding Numachip2 support in later patches.

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Acked-by: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442768522-19217-1-git-send-email-daniel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 98ce94c8df762d413b3ecb849e2b966b21606d04
  Author: Peter Seiderer <ps.report@xxxxxxx>
  Date:   Thu Sep 17 21:40:12 2015 +0200

      cifs: use server timestamp for ntlmv2 authentication

      Linux cifs mount with ntlmssp against an Mac OS X (Yosemite
      10.10.5) share fails in case the clocks differ more than +/-2h:

      digest-service: digest-request: od failed with 2 proto=ntlmv2
      digest-service: digest-request: kdc failed with -1561745592 proto=ntlmv2

      Fix this by (re-)using the given server timestamp for the
      ntlmv2 authentication (as Windows 7 does).

      A related problem was also reported earlier by Namjae Jaen (see below):

      Windows machine has extended security feature which refuse to allow
      authentication when there is time difference between server time and
      client time when ntlmv2 negotiation is used. This problem is prevalent
      in embedded enviornment where system time is set to default 1970.

      Modern servers send the server timestamp in the TargetInfo Av_Pair
      structure in the challenge message [see MS-NLMP 2.2.2.1]
      In [MS-NLMP 3.1.5.1.2] it is explicitly mentioned that the client must
      use the server provided timestamp if present OR current time if it is
      not

      Reported-by: Namjae Jeon <namjae.jeon@xxxxxxxxxxx>
      Signed-off-by: Peter Seiderer <ps.report@xxxxxxx>
      Signed-off-by: Steve French <smfrench@xxxxxxxxx>
      CC: Stable <stable@xxxxxxxxxxxxxxx>

  commit e0ddde9d44e37fbc21ce893553094ecf1a633ab5
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Tue Sep 22 09:29:38 2015 -0500

      disabling oplocks/leases via module parm enable_oplocks broken for SMB3

      leases (oplocks) were always requested for SMB2/SMB3 even when oplocks
      disabled in the cifs.ko module.

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>
      Reviewed-by: Chandrika Srinivasan <chandrika.srinivasan@xxxxxxxxxx>
      CC: Stable <stable@xxxxxxxxxxxxxxx>

  commit 99cb99aa055a72d3880d8a95a71034c4d64bcf9a
  Merge: 97170ea 0a031ac5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 13:11:43 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

      Pablo Neira Ayuso says:

      ====================
      Netfilter/IPVS updates for net-next

      The following patchset contains Netfilter/IPVS updates for your net-next 
tree
      in this 4.4 development cycle, they are:

      1) Schedule ICMP traffic to IPVS instances, this introduces a new 
schedule_icmp
         proc knob to enable/disable it. By default is off to retain the old
         behaviour. Patchset from Alex Gartrell.

      I'm also including what Alex originally said for the record:

      "The configuration of ipvs at Facebook is relatively straightforward.  All
      ipvs instances bgp advertise a set of VIPs and the network prefers the
      nearest one or uses ECMP in the event of a tie.  For the uninitiated, ECMP
      deterministically and statelessly load balances by hashing the packet
      (usually a 5-tuple of protocol, saddr, daddr, sport, and dport) and using
      that number as an index (basic hash table type logic).

      The problem is that ICMP packets (which contain really important
      information like whether or not an MTU has been exceeded) will get a
      different hash value and may end up at a different ipvs instance.  With no
      information about where to route these packets, they are dropped, creating
      ICMP black holes and breaking Path MTU discovery.  Suddenly, my mom's
      pictures can't load and I'm fielding midday calls that I want nothing to 
do
      with.

      To address this, this patch set introduces the ability to schedule icmp
      packets which is gated by a sysctl net.ipv4.vs.schedule_icmp.  If set to 
0,
      the old behavior is maintained -- otherwise ICMP packets are scheduled."

      2) Add another proc entry to ignore tunneled packets to avoid routing 
loops
         from IPVS, also from Alex.

      3) Fifteen patches from Eric Biederman to:

      * Stop passing nf_hook_ops as parameter to the hook and use the state hook
        object instead all around the netfilter code, so only the private data
        pointer is passed to the registered hook function.

      * Now that we've got state->net, propagate the netns pointer to netfilter 
hook
        clients to avoid its computation over and over again. A good example of 
how
        this has been simplified is the former TEE target (now nf_dup 
infrastructure)
        since it has killed the ugly pick_net() function.

      There's another round of netns updates from Eric Biederman making the 
line. To
      avoid the patchbomb again to almost all the networking mailing list (that 
is 84
      patches) I'd suggest we send you a pull request with no patches or let me 
know
      if you prefer a better way.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b6a7175bfe570857a85b5570857e7555eff2c3a
  Merge: 3afb112 3eb4ee6
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Sep 22 22:01:46 2015 +0200

      Merge branch 'kvm-ppc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc into kvm-master

  commit 55696b1f664e52b3036f21631f9c2247b667f587
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:24 2015 -0600

      x86/mm: Fix no-change case in try_preserve_large_page()

      try_preserve_large_page() checks if new_prot is the same as
      old_prot.  If so, it simply sets do_split to 0, and returns
      with no-operation.  However, old_prot is set as a 4KB pgprot
      value while new_prot is a large page pgprot value.

      Now that old_prot is initially set from p?d_pgprot() as a
      large page pgprot value, fix it by not overwriting old_prot
      with a 4KB pgprot value.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-12-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d551aaa2f7e1387fa66093ce9914c2e91f283a50
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:23 2015 -0600

      x86/mm: Fix __split_large_page() to handle large PAT bit

      __split_large_page() is called from __change_page_attr() to change
      the mapping attribute by splitting a given large page into smaller
      pages.  This function uses pte_pfn() and pte_pgprot() for PUD/PMD,
      which do not handle the large PAT bit properly.

      Fix __split_large_page() by using the corresponding pud/pmd pfn/
      pgprot interfaces.

      Also remove '#ifdef CONFIG_X86_64', which is not necessary.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-11-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 3a19109efbfa7d887996a74257556a46e00525c2
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:22 2015 -0600

      x86/mm: Fix try_preserve_large_page() to handle large PAT bit

      try_preserve_large_page() is called from __change_page_attr() to
      change the mapping attribute of a given large page.  This function
      uses pte_pfn() and pte_pgprot() for PUD/PMD, which do not handle
      the large PAT bit properly.

      Fix try_preserve_large_page() by using the corresponding pud/pmd
      prot/pfn interfaces.

      Also remove '#ifdef CONFIG_X86_64', which is not necessary.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-10-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit daf3e35c5888e8bd6a2f5ed15ed392b2df362ecf
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:21 2015 -0600

      x86/mm: Fix gup_huge_p?d() to handle large PAT bit

      gup_huge_pud() and gup_huge_pmd() cast *pud and *pmd to *pte,
      and use pte_xxx() interfaces to obtain the flags and PFN.
      However, the pte_xxx() interface does not handle the large
      PAT bit properly for PUD/PMD.

      Fix gup_huge_pud() and gup_huge_pmd() to use pud_xxx() and
      pmd_xxx() interfaces according to their type.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-9-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 34437e67a6727885bdf6cbfd8441b1ac43a1ee65
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:20 2015 -0600

      x86/mm: Fix slow_virt_to_phys() to handle large PAT bit

      slow_virt_to_phys() calls lookup_address() to obtain *pte and
      its level.  It then calls pte_pfn() to obtain a physical address
      for any level.  However, this physical address is not correct
      when the large PAT bit is set because pte_pfn() does not mask
      the large PAT bit properly for PUD/PMD.

      Fix slow_virt_to_phys() to use pud_pfn() and pmd_pfn() for 1GB
      and 2MB mapping levels.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-8-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit da25e628c4c231a281b1c1de3168a36ab9bfe473
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:19 2015 -0600

      x86/mm: Fix page table dump to show PAT bit

      /sys/kernel/debug/kernel_page_tables does not show the PAT bit for
      PUD/PMD mappings.  This is because walk_pud_level(), walk_pmd_level()
      and note_page() mask the flags with PTE_FLAGS_MASK, which does not
      cover their PAT bit, _PAGE_PAT_LARGE.

      Fix it by replacing the use of PTE_FLAGS_MASK with p?d_flags(),
      which masks the flags properly.

      Also change to show the PAT bit as "PAT" to be consistent with
      other bits.

      Reported-by: Robert Elliott <elliott@xxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-7-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit bbac8c6deadab921f4b7d00ce675ffa4f358ec7f
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:18 2015 -0600

      x86/asm: Add pud_pgprot() and pmd_pgprot()

      pte_pgprot() returns a pgprot_t value by calling pte_flags().  Now
      that pud_flags() and pmd_flags() work specifically for the pud/pmd
      levels, define pud_pgprot() and pmd_pgprot() for PUD/PMD.

      Also update pte_pgprot() to remove the unnecessary mask with
      PTE_FLAGS_MASK as pte_flags() takes care of it.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-6-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f70abb0fc3da1b2945c92751ccda2744081bf2b7
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:17 2015 -0600

      x86/asm: Fix pud/pmd interfaces to handle large PAT bit

      Now that we have pud/pmd mask interfaces, which handle pfn & flags
      mask properly for the large PAT bit.

      Fix pud/pmd pfn & flags interfaces by replacing PTE_PFN_MASK and
      PTE_FLAGS_MASK with the pud/pmd mask interfaces.

      Suggested-by: Juergen Gross <jgross@xxxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-5-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 4be4c1fb9a754b100466ebaec50f825be0b2050b
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:16 2015 -0600

      x86/asm: Add pud/pmd mask interfaces to handle large PAT bit

      The PAT bit gets relocated to bit 12 when PUD and PMD mappings are
      used.  This bit 12, however, is not covered by PTE_FLAGS_MASK, which
      is used for masking pfn and flags for all levels.

      Add pud/pmd mask interfaces to handle pfn and flags properly by using
      P?D_PAGE_MASK when PUD/PMD mappings are used, i.e. PSE bit is set.

      Suggested-by: Juergen Gross <jgross@xxxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-4-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 832102671855f73962e7a04fdafd48b9385ea5c6
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:15 2015 -0600

      x86/asm: Move PUD_PAGE macros to page_types.h

      PUD_SHIFT is defined according to a given kernel configuration, which
      allows it be commonly used by any x86 kernels.  However, PUD_PAGE_SIZE
      and PUD_PAGE_MASK, which are set from PUD_SHIFT, are defined in
      page_64_types.h, which can be used by 64-bit kernel only.

      Move PUD_PAGE_SIZE and PUD_PAGE_MASK to page_types.h so that they can
      be used by any x86 kernels as well.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-3-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit fb535ccb30845fe0b7bd09caa37a838985b72ff9
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:14 2015 -0600

      x86/vdso32: Define PGTABLE_LEVELS to 32bit VDSO

      In case of CONFIG_X86_64, vdso32/vclock_gettime.c fakes a 32-bit
      non-PAE kernel configuration by re-defining it to CONFIG_X86_32.
      However, it does not re-define CONFIG_PGTABLE_LEVELS leaving it
      as 4 levels.

      This mismatch leads <asm/pgtable_type.h> to NOT include <asm-generic/
      pgtable-nopud.h> and <asm-generic/pgtable-nopmd.h>, which will cause
      compile errors when a later patch enhances <asm/pgtable_type.h> to
      use PUD_SHIFT and PMD_SHIFT.  These -nopud & -nopmd headers define
      these SHIFTs for the 32-bit non-PAE kernel.

      Fix it by re-defining CONFIG_PGTABLE_LEVELS to 2 levels.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-2-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 43d104db596977a8fddc1e71245859a7fe85a658
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Thu Sep 17 17:49:21 2015 +0100

      MIPS: Fix FTLB detection for R6

      R6 removed the Config4.MMUExtDef field, with the low 16 bits only
      allowed to contain FTLB fields, and commit e87569cd6c57 ("MIPS:
      cpu-probe: Fix VTLB/FTLB configuration for R6") updated the probing of
      this field to assume an FTLB is always present for R6.

      However the FTLB may still be absent. The presence of those fields is
      actually specified by the MMU type in the Config.MT field, so use that
      (the new cpu_has_ftlb) to determine whether the FTLB is actually
      present.

      Fixes: e87569cd6c57 ("MIPS: cpu-probe: Fix VTLB/FTLB configuration for 
R6")
      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11160/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 2f6f31363cb7890784458d7805140687b4de5b59
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Thu Sep 17 17:49:20 2015 +0100

      MIPS: cpu-features: Add cpu_has_ftlb

      Add cpu_has_ftlb, which specifies that an FTLB is present in addition to
      the VTLB, probed based on whether Config.MT == 4 (rather than 1 for
      standard JTLB).

      This is necessary since MIPS release 6 removes Config4.MMUExtDef, so the
      presence of the FTLB fields in Config4 must be determined from Config.MT
      instead.

      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11159/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 2b9dbef272b63c561aab0a5be34fd428f7b710f5
  Author: Josef Bacik <jbacik@xxxxxx>
  Date:   Tue Sep 15 10:07:04 2015 -0400

      Btrfs: keep dropped roots in cache until transaction commit

      When dropping a snapshot we need to account for the qgroup changes.  If 
we drop
      the snapshot in all one go then the backref code will fail to find blocks 
from
      the snapshot we dropped since it won't be able to find the root in the fs 
root
      cache.  This can lead to us failing to find refs from other roots that 
pointed
      at blocks in the now deleted root.  To handle this we need to not remove 
the fs
      roots from the cache until after we process the qgroup operations.  Do 
this by
      adding dropped roots to a list on the transaction, and letting the 
transaction
      remove the roots at the same time it drops the commit roots.  This will 
keep all
      of the backref searching code in sync properly, and fixes a problem Mark 
was
      seeing with snapshot delete and qgroups.  Thanks,

      Signed-off-by: Josef Bacik <jbacik@xxxxxx>
      Tested-by: Holger Hoffstätte <holger.hoffstaette@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 19446da415e0f01d56364b700fe984cda78bca50
  Author: Alexander Couzens <lynxis@xxxxxxx>
  Date:   Sat Sep 19 06:26:20 2015 +0200

      MIPS: ATH79: Add irq chip ar7240-misc-intc

      The ar7240 misc irq chip use ack handler
      instead of ack_mask handler. All new ath79 chips use
      the ar7240 misc irq chip

      Signed-off-by: Alexander Couzens <lynxis@xxxxxxx>
      Acked-by: Alban Bedel <albeu@xxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11164/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 84dedd71cf3bc61cc65ca43a48f7252344a1bb68
  Author: Alexander Couzens <lynxis@xxxxxxx>
  Date:   Sat Sep 19 06:26:19 2015 +0200

      MIPS: ATH79: Set missing irq ack handler for ar7100-misc-intc irq chip

      The irq ack handler was forgotten while introducing OF support.
      Only ar71xx and ar933x based devices require it.

      Signed-off-by: Alexander Couzens <lynxis@xxxxxxx>
      Acked-by: Alban Bedel <albeu@xxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11163/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit b259e51f2e29390518021f9b8df55a3de42f371b
  Author: Aurelien Jarno <aurelien@xxxxxxxxxxx>
  Date:   Sat Sep 5 18:46:57 2015 +0200

      MIPS: BPF: Fix build on pre-R2 little endian CPUs

      The rotr, seh and wsbh instructions have been introduced with the R2
      ISA. Thus the current BPF code fails to build on pre-R2 little endian
      CPUs:

          CC      arch/mips/net/bpf_jit.o
          AS      arch/mips/net/bpf_jit_asm.o
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S: Assembler messages:
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:67: Error: opcode 
not supported on this processor: mips32 (mips32) `wsbh $8,$19'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:68: Error: opcode 
not supported on this processor: mips32 (mips32) `rotr $19,$8,16'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:83: Error: opcode 
not supported on this processor: mips32 (mips32) `wsbh $8,$19'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:84: Error: opcode 
not supported on this processor: mips32 (mips32) `seh $19,$8'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:151: Error: opcode 
not supported on this processor: mips32 (mips32) `wsbh $8,$12'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:153: Error: opcode 
not supported on this processor: mips32 (mips32) `rotr $19,$8,16'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:164: Error: opcode 
not supported on this processor: mips32 (mips32) `wsbh $19,$12'
        /home/aurel32/linux-4.2/scripts/Makefile.build:294: recipe for target 
'arch/mips/net/bpf_jit_asm.o' failed

      Fix that by providing equivalent code for these CPUs.

      Signed-off-by: Aurelien Jarno <aurelien@xxxxxxxxxxx>
      Reviewed-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11098/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit faa9724a674e5e52316bb0d173aed16bd17d536c
  Author: Aurelien Jarno <aurelien@xxxxxxxxxxx>
  Date:   Sat Sep 5 18:46:56 2015 +0200

      MIPS: BPF: Avoid unreachable code on little endian

      On little endian, avoid generating the big endian version of the code
      by using #else in addition to #ifdef #endif. Also fix one alignment
      issue wrt delay slot.

      Signed-off-by: Aurelien Jarno <aurelien@xxxxxxxxxxx>
      Reviewed-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11097/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 9e294bf88a583825a413df408b9fe9e658fb93ac
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Fri Aug 28 13:49:35 2015 +0200

      clk: samsung: fix cpu clock's flags checking

      CLK_CPU_HAS_DIV1 and CLK_CPU_NEEDS_DEBUG_ALT_DIV masks were
      incorrectly used as a bit numbers.  Fix it.

      Tested on Exynos4210 based Origen board and on Exynos5250 based
      Arndale board.

      Cc: Tomasz Figa <tomasz.figa@xxxxxxxxx>
      Cc: Michael Turquette <mturquette@xxxxxxxxxxxx>
      Cc: Thomas Abraham <thomas.ab@xxxxxxxxxxx>
      Fixes: ddeac8d96 ("clk: samsung: add infrastructure to register cpu 
clocks")
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Reviewed-by: Javier Martinez Canillas <javier@xxxxxxxxxxxx>
      Acked-by: Sylwester Nawrocki <s.nawrocki@xxxxxxxxxxx>
      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 711e020cae9cd105d81a783686cb8c8059c08b2c
  Merge: 5132361 dd85ebf b0b4855
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Tue Sep 22 09:48:41 2015 -0700

      Merge remote-tracking branches 'spi/fix/spidev' and 'spi/fix/xtfpga' into 
spi-linus

  commit 5132361cd97ed21863fb48bb8e4a0e6203a4269a
  Merge: 1f93e4a d630526 2a3fffd 0243ed4 e26d15f c9e97b3 6583d20 02bc933
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Tue Sep 22 09:48:34 2015 -0700

      Merge remote-tracking branches 'spi/fix/atmel', 'spi/fix/bcm2835', 
'spi/fix/doc', 'spi/fix/mediatek', 'spi/fix/meson', 'spi/fix/mtk' and 
'spi/fix/pxa2xx' into spi-linus

  commit 1c27df1c0a82b938d8073a60243ff62eff8056b5
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Fri Sep 18 16:12:56 2015 +0100

      iommu/arm-smmu: Use correct address mask for CMD_TLBI_S2_IPA

      Stage-2 TLBI by IPA takes a 48-bit address field, as opposed to the
      64-bit field used by the VA-based invalidation commands.

      This patch re-jigs the SMMUv3 command construction code so that the
      address field is correctly masked.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit f0c453dbcce7767cd868deb809ba68083c93954e
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Thu Aug 20 12:12:32 2015 +0100

      iommu/arm-smmu: Ensure IAS is set correctly for AArch32-capable SMMUs

      AArch32-capable SMMU implementations have a minimum IAS of 40 bits, so
      ensure that is reflected in the stage-2 page table configuration.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit ffcb6d1686ceb4a6b50776fb2597ab0e4dd79040
  Author: Robin Murphy <Robin.Murphy@xxxxxxx>
  Date:   Thu Sep 17 17:42:16 2015 +0100

      iommu/io-pgtable-arm: Don't use dma_to_phys()

      In checking whether DMA addresses differ from physical addresses, using
      dma_to_phys() is actually the wrong thing to do, since it may hide any
      DMA offset, which is precisely one of the things we are checking for.
      Simply casting between the two address types, whilst ugly, is in fact
      the appropriate course of action. Further care (and ugliness) is also
      necessary in the comparison to avoid truncation if phys_addr_t and
      dma_addr_t differ in size.

      We can also reject any device with a fixed DMA offset up-front at page
      table creation, leaving the allocation-time check for the more subtle
      cases like bounce buffering due to an incorrect DMA mask.

      Furthermore, we can then fix the hackish KConfig dependency so that
      architectures without a dma_to_phys() implementation may still
      COMPILE_TEST (or even use!) the code. The true dependency is on the
      DMA API, so use the appropriate symbol for that.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      [will: folded in selftest fix from Yong Wu]
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit f0e03dbd2d61d991bdd2d76b4e84681fe3077176
  Author: Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 15:30:33 2015 +0100

      MAINTAINERS: Update website and git repo for Wolfson Microelectronics

      Support for Wolfson Microelectronics devices is now part of Cirrus Logic
      and the relevant parts of the old opensource.wolfsonmicro.com site have
      moved to the Cirrus Logic GitHub area.

      This patch updates the website and git repo links, and also removes an
      obsolete website link for the voltage and current drivers.

      Signed-off-by: Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit b0b4855099e301c8603ea37da9a0103a96c2e0b1
  Author: Max Filippov <jcmvbkbc@xxxxxxxxx>
  Date:   Tue Sep 22 14:32:03 2015 +0300

      spi: xtensa-xtfpga: fix register endianness

      XTFPGA SPI controller has native endian registers.
      Fix register acessors so that they work in big-endian configurations.

      Signed-off-by: Max Filippov <jcmvbkbc@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 52019e406c24a98ba8c8f731c1236ff0ac3de96a
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 12:36:15 2015 +0200

      EDAC, i5100: Convert to debugfs wrappers

      This driver creates its debugfs hierarchy under the toplevel debugfs dir
      - see i5100_init() - so make it use edac_debugfs_create_dir_at( , NULL)
      because we're not breaking userspace. Oh well.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit bba3b31e440a9c16da013a5f07066b8092a16c87
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 12:27:29 2015 +0200

      EDAC, altera: Convert to debugfs wrappers

      Use the EDAC-specific wrappers. Drop CONFIG_EDAC_DEBUG ifdeffery.

      Cc: Thor Thayer <tthayer@xxxxxxxxxxxxxxxxxxxxx>
      Cc: <linux-edac@xxxxxxxxxxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 4397bcb4fa1dd285a2c6d583d1f1cbc6bd423f97
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 12:16:05 2015 +0200

      EDAC: Add debugfs wrappers

      Later patches will convert EDAC users to those.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit f7a7651fcd40a2bf29357ffeaee176fb159bcddb
  Author: Jonathan McDowell <noodles@xxxxxxxx>
  Date:   Mon Sep 21 21:23:47 2015 +0100

      tty: serial: Add missing module license for 8250_base.ko

      The split of the 8250 driver into a 8250_base/8250.ko resulted in a
      lack of a license for the 8250_base.ko module. This caused the module
      to fail to load and the kernel to be tainted. Add the appropriate
      MODULE_LICENSE to 8250_port.c, which is always compiled into
      8250_base.ko

      Signed-off-by: Jonathan McDowell <noodles@xxxxxxxx>
      Reported-by: Mikael Pettersson <mikpelinux@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 50314035d6b1e9e07753162dd3be8df81b998086
  Merge: ca1c4b7 f4513b0
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 08:56:13 2015 -0700

      Merge tag 'extcon-fixes-for-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/chanwoo/extcon into 
char-misc-linus

      Chanwoo writes:

      Update extcon for v4.3-rc3

      This patches fix the following one issue:
      - Fix bug of the is_extcon_changed() which check whether specific cable is
        attached or detached.

  commit 88d3426942d748b90b051b7ef2d5d765f5f3054c
  Author: Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx>
  Date:   Thu Sep 3 08:36:35 2015 +0200

      MIPS: bootmem: Fix mapstart calculation for contiguous maps

      Commit a6335fa1 fixed the case with gap between initrd and next usable 
PFN zone,
      but broken the case when initrd is combined with usable memory into one 
region
      (in add_memory_region()). Restore the fixup initially brought in by 
f9a7febd.

      ---- error message ----
      Unpacking initramfs...
      Initramfs unpacking failed: junk in compressed archive
      BUG: Bad page state in process swapper  pfn:00261
      page:81004c20 count:0 mapcount:-127 mapping:  (null) index:0x2
      flags: 0x0()
      page dumped because: nonzero mapcount
      CPU: 0 PID: 1 Comm: swapper Not tainted 4.2.0+ #1782
      -----------------------

      Signed-off-by: Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx>
      Reported-by: Tony Wu <tung7970@xxxxxxxxx>
      Tested-by: Tony Wu <tung7970@xxxxxxxxx>
      Cc: David Daney <david.daney@xxxxxxxxxx>
      Cc: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Cc: Huacai Chen <chenhc@xxxxxxxxxx>
      Cc: Joe Perches <joe@xxxxxxxxxxx>
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11086/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit fc2ca674470bbfe11d72a20a3f19fd3dc43bfca0
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Aug 30 21:19:58 2015 -0700

      MIPS: Fix console output for Fulong2e system

      Commit 3adeb2566b9b ("MIPS: Loongson: Improve LEFI firmware interface")
      made the number of UARTs dynamic if LEFI_FIRMWARE_INTERFACE is configured.
      Unfortunately, it did not initialize the number of UARTs if
      LEFI_FIRMWARE_INTERFACE is not configured. As a result, the Fulong2e
      system has no console.

      Fixes: 3adeb2566b9b ("MIPS: Loongson: Improve LEFI firmware interface")
      Acked-by: Huacai Chen <chenhc@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Tested-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11076/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit c2e4b24ff848bb180f9b9cd873a38327cd219ad2
  Author: Kapileshwar Singh <kapileshwar.singh@xxxxxxx>
  Date:   Tue Sep 22 14:22:03 2015 +0100

      tools lib traceevent: Fix string handling in heterogeneous arch 
environments

      When a trace recorded on a 32-bit device is processed with a 64-bit
      binary, the higher 32-bits of the address need to ignored.

      The lack of this results in the output of the 64-bit pointer
      value to the trace as the 32-bit address lookup fails in find_printk().

      Before:

        burn-1778  [003]   548.600305: bputs:   0xc0046db2s: 2cec5c058d98c

      After:

        burn-1778  [003]   548.600305: bputs:   0xc0046db2s: RT throttling 
activated

      The problem occurs in PRINT_FIELD when the field is recognized as a
      pointer to a string (of the type const char *)

      Heterogeneous architectures cases below can arise and should be handled:

      * Traces recorded using 32-bit addresses processed on a 64-bit machine
      * Traces recorded using 64-bit addresses processed on a 32-bit machine

      Reported-by: Juri Lelli <juri.lelli@xxxxxxx>
      Signed-off-by: Kapileshwar Singh <kapileshwar.singh@xxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Javi Merino <javi.merino@xxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442928123-13824-1-git-send-email-kapileshwar.singh@xxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ac742d37180bee83bc433be087b66a17af2883b9
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 23:36:40 2015 +0200

      futex: Force hot variables into a single cache line

      futex_hash() references two global variables: the base pointer
      futex_queues and the size of the array futex_hashsize. The latter is
      marked __read_mostly, while the former is not, so they are likely to
      end up very far from each other. This means that futex_hash() is
      likely to encounter two cache misses.

      We could mark futex_queues as __read_mostly as well, but that doesn't
      guarantee they'll end up next to each other (and even if they do, they
      may still end up in different cache lines). So put the two variables
      in a small singleton struct with sufficient alignment and mark that as
      __read_mostly.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Cc: Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441834601-13633-1-git-send-email-linux@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 71f64340fc0eadd06036d0db9a511b6d726add1d
  Author: Huang Shijie <shijie.huang@xxxxxxx>
  Date:   Wed Sep 2 10:24:55 2015 +0800

      genirq: Remove the second parameter from handle_irq_event_percpu()

      Actually, we always use the first irq action of the @desc->action
      chain, so remove the second parameter from handle_irq_event_percpu()
      which makes the code more tidy.

      Signed-off-by: Huang Shijie <shijie.huang@xxxxxxx>
      Reviewed-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: peterz@xxxxxxxxxxxxx
      Cc: marc.zyngier@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441160695-19809-1-git-send-email-shijie.huang@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b55a3bb8650ddb096624175c55176d7fdbcad4ae
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 21 15:46:06 2015 +0200

      irqchip/atmel-aic5: Simplify base chip selection

      Use irq_get_domain_generic_chip() to select the base chip.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Acked-by: Nicholas Ferre <nicolas.ferre@xxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <sasha.levin@xxxxxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: <Wenyou.Yang@xxxxxxxxx>
      Cc: <jason@xxxxxxxxxxxxxx>
      Cc: <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442843173-2390-3-git-send-email-ludovic.desroches@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 414a431ad6217a03e561fcb199048141db3fc024
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 21 15:46:05 2015 +0200

      irqchip/atmel-aic5: Use explicit variable name for the base chip

      To avoid errors, use an explicit variable name when accessing the 'base'
      generic chip.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Acked-by: Nicholas Ferre <nicolas.ferre@xxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <sasha.levin@xxxxxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: <Wenyou.Yang@xxxxxxxxx>
      Cc: <jason@xxxxxxxxxxxxxx>
      Cc: <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442843173-2390-2-git-send-email-ludovic.desroches@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f94f87ab1a04629699ec1e2408dae8f3acee5dc4
  Merge: afbbd23 d32dc9a
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 15:56:46 2015 +0200

      Merge branch 'irq/urgent' into irq/core

      Get the urgent bugfix for aic5 as further patches depend on it.

  commit d32dc9aa10c739363c775baf4499416b2e0dc11f
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 21 15:46:04 2015 +0200

      irqchip/atmel-aic5: Use per chip mask caches in mask/unmask()

      When masking/unmasking interrupts, mask_cache is updated and used later
      for suspend/resume. Unfortunately, it always was the mask_cache
      associated with the first irq chip which was updated. So when performing
      resume, only irqs 0-31 could be enabled.

      Fixes: b1479ebb7720 ("irqchip: atmel-aic: Add atmel AIC/AIC5 drivers")
      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Cc: <sasha.levin@xxxxxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: <nicolas.ferre@xxxxxxxxx>
      Cc: <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <Wenyou.Yang@xxxxxxxxx>
      Cc: <jason@xxxxxxxxxxxxxx>
      Cc: <marc.zyngier@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx #3.18
      Link: 
http://lkml.kernel.org/r/1442843173-2390-1-git-send-email-ludovic.desroches@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 96d8bf75da12df17f2c861043158dad2dabfe491
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 21 16:35:43 2015 +0200

      perf tools: Add include/err.h into MANIFEST

      Otherwise the tarpkg is incomplete (tarpkg tests fails).

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: 01ca9fd41d6f ("tools: Add err.h with ERR_PTR PTR_ERR interface")
      Link: 
http://lkml.kernel.org/r/1442846143-8556-1-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 65f041bee7838e2a91dbbc0a917d9291adbb3484
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Sep 21 17:25:27 2015 -0300

      tools lib bpf: Use FEATURE_USER to allow building in the same dir as perf

      When building tools/lib/bpf as part of the tools/perf/ build process,
      which will happend when we introduce a patch wiring that up, we end up
      stomping on the feature detection caching mechanism, that uses a file in
      the output directory (O=) that is shared by libbpf and perf to check if
      something changed from one build to another that requires redoing the
      feature detection process.

      By using the recently introduced FEATURE_USER tools/build/ knob, we can
      avoid that:

      Before, every make invokation would run the feature detection:

        $ make O=/tmp/build/perf -C tools/perf
        make: Entering directory '/home/git/linux/tools/perf'
        Auto-detecting system features:
        ...                         dwarf: [ on  ]
        ...                         glibc: [ on  ]
        <SNIP>
        ...                     get_cpuid: [ on  ]
        ...                           bpf: [ on  ]

          GEN      perf-archive
          GEN      perf-with-kcore

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...                           bpf: [ on  ]
        <SNIP>

      After:

        $ make O=/tmp/build/perf -C tools/perf
        make: Entering directory '/home/git/linux/tools/perf'
          BUILD:   Doing 'make -j4' parallel build
        make: Leaving directory '/home/git/linux/tools/perf'
        $

      Because we now have two different feature detection state files:

        $ ls -la /tmp/build/perf/FEATURE-DUMP*
        -rw-rw-r--. 1 acme acme 338 Sep 21 17:25 /tmp/build/perf/FEATURE-DUMP
        -rw-rw-r--. 1 acme acme  33 Sep 21 17:25 
/tmp/build/perf/FEATURE-DUMP.libbpf
        $

      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Fixes: 1b76c13e4b36 ("bpf tools: Introduce 'bpf' library and add bpf 
feature check")
      Link: http://lkml.kernel.org/n/tip-s6ev9wfqy7pvvs58emys2g90@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 13e96db61c1c32cd4c8102a95129bb7677cc746d
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Sep 21 12:24:47 2015 -0300

      tools build: Allow setting the feature detection user

      We will use the tools/build/ autodetection in the eBPF patchkit
      and it is currently sharing the output directory with perf, that
      also uses the feature detection logic.

      As we keep state in the output directory, so that we can avoid running
      all the tests again, we need to have different filenames for the files
      used in this state, allow doing that via the FEATURE_USER variable, to
      be set alongside the existing FEATURE_{TEST,DISPLAY} variables.

      v2: Fix comment describing the FEATURE_DUMP filename to make sure where
          it is created, precisely at $(OUTPUT)FEATURE-DUMP$(FEATURE_USER).
          Pointed out by Jiri.

      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: http://lkml.kernel.org/n/tip-fdbev0vrn3x6idqc3ajbnvcb@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 20517cd9c5930c9ef580082d23073842e92249ad
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Sep 21 17:00:27 2015 -0300

      tools lib bpf: Fix up FEATURE_{TESTS,DISPLAY} usage

      When libbpf was introduced it wrongly asked for the "libelf" and "bpf"
      feature tests to be performed (via FEATURE_TESTS), while asking that
      "libbpf", "libelf-mmap", "libelf-getphdrnum" and "bpf" to have the
      result of its respective tests to be displayed (via FEATURE_DISPLAY).

      Due to another recently bug fixed in the tools/build/ infrastructure
      ("tools build: Fixup feature detection display function name") the
      results for the entries in the FEATURE_DISPLAY, for this case, were
      appearing as all succeeding, when two of them (the ones only on the
      DISPLAY) were not even being performed.

      Before:

        $ make -C tools/lib/bpf/
        make: Entering directory '/home/git/linux/tools/lib/bpf'
        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...             libelf-getphdrnum: [ OFF ]
        ...                   libelf-mmap: [ OFF ]
        ...                           bpf: [ on  ]
        <SNIP>

      After, with FEATURE_TESTS == FEATURE_DISPLAY:

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...             libelf-getphdrnum: [ on  ]
        ...                   libelf-mmap: [ on  ]
        ...                           bpf: [ on  ]
        <SNIP>

      I just inverted, so that it tests the four features but displays just
      the libelf and mmap ones, to make it more compact. So it becomes:

        $ make -C tools/lib/bpf/
        make: Entering directory '/home/git/linux/tools/lib/bpf'

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...                           bpf: [ on  ]

      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Fixes: 1b76c13e4b36 ("bpf tools: Introduce 'bpf' library and add bpf 
feature check")
      Link: http://lkml.kernel.org/n/tip-y4bd59e6j9rzzojiyeqrg2jq@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 6076e2a47cccfb3d48a8d165853c0b799c563df7
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Sep 21 11:49:51 2015 -0300

      tools build: Fixup feature detection display function name

      Cut'n'paste mistake, it should eval the name of the function
      defined right next to it, in the next line, fix it.

      Before:

        $ make -C tools/lib/bpf/
        make: Entering directory '/home/git/linux/tools/lib/bpf'

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...             libelf-getphdrnum: [ on  ]
        ...                   libelf-mmap: [ on  ]
        ...                           bpf: [ on  ]
        <SNIP>

      After:

        $ make -C tools/lib/bpf/
        make: Entering directory '/home/git/linux/tools/lib/bpf'

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...             libelf-getphdrnum: [ OFF ]
        ...                   libelf-mmap: [ OFF ]
        ...                           bpf: [ on  ]
        <SNIP>

      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Fixes: 58d4f00ff13f ("perf build: Fix feature_check name clash")
      Link: http://lkml.kernel.org/n/tip-dzu1c4sruukgfq5d5b1c4r30@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3ed769bdb2a2484fd7f9f7f3047413053aacbe21
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Fri Sep 18 15:54:23 2015 +0200

      timers: Fix data race in timer_stats_account_timer()

      timer_stats_account_timer() reads timer->start_site, then checks it
      for NULL and then re-reads it again, while
      timer_stats_timer_clear_start_info() can concurrently reset
      timer->start_site to NULL. This should not lead to crashes, but can
      double number of entries in timer stats as start_site is used during
      comparison, the doubled entries will have unuseful NULL start_site.

      Read timer->start_site only once in timer_stats_account_timer().

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: andreyknvl@xxxxxxxxxx
      Cc: glider@xxxxxxxxxx
      Cc: kcc@xxxxxxxxxx
      Cc: ktsan@xxxxxxxxxxxxxxxx
      Cc: john.stultz@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442584463-69553-1-git-send-email-dvyukov@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit babc305e21ea3811d98b67437299360904ac1b6a
  Author: Sara Sharon <sara.sharon@xxxxxxxxx>
  Date:   Mon Sep 21 15:47:40 2015 +0300

      mac80211: reset CQM history upon reconfiguration

      The current behavior of notifying CQM events is inconsistent:
      Upon first configuration there is a cqm event with the current
      status according to threshold configured, regardless of signal
      stability.
      When there is reconfiguration no event is sent unless there is
      a significant change to the signal level according to the new
      configuration.

      Since the current reconfiguration behavior might cause missing
      CQM events in case the current signal did not change but is on
      the other side of the new threshold, fix that by resetting the
      stored signal level upon reconfiguration.

      Signed-off-by: Sara Sharon <sara.sharon@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 5359d112dcb081fd7a5f2de287fa995f6ba0800c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Mon Sep 14 13:56:17 2015 +0200

      Revert "mac80211: add pointer for driver use to key"

      This reverts commit f9a060f4b2003eb7350762e60dfc576447e44bad.

      No driver has turned up needing this functionality, and I've just
      implemented the functionality I wanted this for in a different
      way. Thus, remove it again, until somebody shows up with a need
      for having it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4dc792b8f098ab6327033fc97ba40163a2cd5fcc
  Author: Helmut Schaa <helmut.schaa@xxxxxxxxxxxxxx>
  Date:   Wed Sep 2 13:23:30 2015 +0200

      mac80211: Split sending tx'ed frames to monitor interfaces into its own 
function

      This allows ieee80211_tx_monitor to be used directly for sending 802.11 
frames
      to all monitor interfaces.

      Signed-off-by: Helmut Schaa <helmut.schaa@xxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit d55d0d598e6610bbfcc1f2ecd6e8af669b94783b
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Aug 31 22:59:38 2015 +0200

      nl80211: put current TX power in interface info

      Many drivers implement reading current TX power (using either cfg80211
      or ieee80211 op) but userspace can't get it using nl80211. Right now the
      only way to access it is to call some wext ioctl.
      Let's put TX power in interface info reply (callback is wdev specific)
      just like we do with current channel.
      To be consistent (e.g. NL80211_CMD_SET_WIPHY) let's use mBm as na unit.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 0edd5faeb07bfd3ec5402f9467e4c169dcd131e8
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 28 14:31:48 2015 +0200

      wireless: mark element IDs 8 and 9 reserved

      These were never used in the tree, and are marked as reserved
      in the IEEE 802.11 documentation (ANA).

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 338c17ae311e6b5a439573a4043fd2d9237cd1d5
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 28 10:52:54 2015 +0200

      mac80211: use DECLARE_EWMA for ave_beacon_signal

      It doesn't seem problematic to change the weight for the average
      beacon signal from 3 to 4, so use DECLARE_EWMA. This also makes
      the code easier to maintain since bugs like the one fixed in the
      previous patch can't happen as easily.

      With a fix from Avraham Stern to invert the sign since EMWA uses
      unsigned values only.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 8ec6d97871f37e4743678ea4a455bd59580aa0f4
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 28 10:52:53 2015 +0200

      mac80211: fix driver RSSI event calculations

      The ifmgd->ave_beacon_signal value cannot be taken as is for
      comparisons, it must be divided by since it's represented
      like that for better accuracy of the EWMA calculations. This
      would lead to invalid driver RSSI events. Fix the used value.

      Fixes: 615f7b9bb1f8 ("mac80211: add driver RSSI threshold events")
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 8e0d7fe07c3f8c2a5e3b5bdbfdf09de4da2e2dd4
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 28 10:52:52 2015 +0200

      mac80211: remove last_beacon/ave_beacon debugfs files

      These file aren't really useful:
       - if per beacon data is required then you need to use
         radiotap or similar anyway, debugfs won't help much
       - average beacon signal is reported in station info in
         nl80211 and can be looked up with iw

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit c85fb53c4fa6521352028c40ce096a808aabd389
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Thu Aug 27 09:00:18 2015 -0400

      mac80211: implement VHT support for mesh

      Implement the basics required for supporting very high throughput
      with mesh: include VHT information elements in beacons, probe
      responses, and peering action frames, and check for compatible VHT
      configurations when peering.

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit f020ae40b0c969d3fd3b320d0a05e62d5553ff72
  Author: Chun-Yeow Yeoh <yeohchunyeow@xxxxxxxxx>
  Date:   Fri Sep 4 10:58:05 2015 +0800

      mac80211: zero center freq segment 2 in VHT oper IE

      Clear the Channel Center Frequency Segment 2 in VHT operation
      IEs to avoid sending non-zero values if the SKB wasn't zeroed
      before adding the VHT operation IE.

      Signed-off-by: Chun-Yeow Yeoh <yeohchunyeow@xxxxxxxxx>
      [change commit message a bit - not necessarily just mesh related]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 99e7ca44bb910f0cbfda5d9008e8517df0ebc939
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Sat Aug 15 22:39:51 2015 +0300

      mac80211: allow the driver to advertise A-MSDU within A-MPDU Rx support

      Drivers may be interested in receiving A-MSDU within A-MDPU.
      Not all the devices may be able to do so, make it configurable.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 46cad4b7a131a215159d889fa88d0dc71d581908
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Sat Aug 15 22:39:54 2015 +0300

      mac80211: remove direct probe step before authentication

      The direct probe step before authentication was done mostly for
      two reasons:
       1) the BSS data could be stale
       2) the beacon might not have included all IEs

      The concern (1) doesn't really seem to be relevant any more as
      we time out BSS information after about 30 seconds, and in fact
      the original patch only did the direct probe if the data was
      older than the BSS timeout to begin with. This condition got
      (likely inadvertedly) removed later though.

      Analysing this in more detail shows that since we mostly use
      data from the association response, the only real reason for
      needing the probe response was that the code validates the WMM
      parameters, and those are optional in beacons. As the previous
      patches removed that behaviour, we can now remove the direct
      probe step entirely.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit e3abc8ff0fc18b3925fd5d5c5fbd1613856f4e7c
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Sun Aug 16 11:13:22 2015 +0300

      mac80211: allow to transmit A-MSDU within A-MPDU

      Advertise the capability to send A-MSDU within A-MPDU
      in the AddBA request sent by mac80211. Let the driver
      know about the peer's capabilities.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 1b09b5568e5f46c6dfb781d7c1dfad431a6d8ec1
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sat Aug 15 22:39:50 2015 +0300

      mac80211: introduce per vif frame registration API

      Currently the cfg80211's frame registration api receives wdev, however
      mac80211 assumes per device filter configuration and ignores wdev.
      Per device filtering is too wasteful, especially for multi-channel
      devices.
      Introduce new per vif frame registration API and use it for probe
      request registrations in ieee80211_mgmt_frame_register()
      Also call directly to ieee80211_configure_filter instead of using a work
      since it is now allowed to sleep in ieee80211_mgmt_frame_register.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 7bdbe400d1b2aac116513f90b75969ad2365fba6
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Sat Aug 15 22:39:49 2015 +0300

      nl80211: support vendor dumpit commands

      In order to transfer many items in vendor commands, support the
      dumpit netlink method for them.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit dd55ab59b6234c73522dc533757e89e6a77c2c38
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sat Aug 15 22:39:48 2015 +0300

      mac80211: TDLS: check reg with IR-relax on chandef upgrade

      When checking if a TDLS chandef can be upgraded, IR-relaxation can be
      taken into account to allow more channels.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 82c0cc90d6268a3cd3ee058257d2146188326452
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sat Aug 15 22:39:46 2015 +0300

      mac80211: debugfs: add file to disallow TDLS wider-bw

      Sometimes we are interested in testing TDLS performance in a specific
      width setting. Add the ability to disable the wider-band feature, thereby
      allowing the TDLS channel width to be controlled by the BSS width.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit fc58c47ef1ace65c5c1c94f2e96578e7b04aad64
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sat Aug 15 22:04:01 2015 +0300

      mac80211: process skb_queue while scanning in HW

      Queued frames aren't processed during scan, which results in an inability
      to complete the BA session establishment until the scan ends. Since we
      can't tx frames until the BA agreement setup is complete, it might result
      in a very large latency during scan.
      Fix this by allowing to process queued skbs while scanning in HW. This
      should be ok since the devices which support hw scan should be able
      to handle tx/rx while scanning.
      During SW scan, mac80211 drops any txed frames besides probes and NDPs,
      so it is still needed to delay processing of the queued frames till the
      SW scan is done.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 8de1c63ba1ccfa8225505e60b405537c2c72673c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 21 14:13:06 2015 +0200

      wireless: make __freq_reg_info static

      As pointed out by sparse, this symbol should be static, make it so.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 2df1b131b54f431877a6665139dac805ba5ce1a5
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 21 14:07:13 2015 +0200

      mac80211: fix VHT MCS mask array overrun

      The HT MCS mask has 9 bytes, the VHT one only has 8 streams.
      Split the loops to handle this correctly.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 571af55a31d3652ac1f758f116835a76d0335661
  Author: Zhen Lei <thunder.leizhen@xxxxxxxxxx>
  Date:   Tue Aug 25 14:42:53 2015 +0800

      time: Fix spelling in comments

      Signed-off-by: Zhen Lei <thunder.leizhen@xxxxxxxxxx>
      Cc: Hanjun Guo <guohanjun@xxxxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tianhong Ding <dingtianhong@xxxxxxxxxx>
      Cc: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Cc: Xinwei Hu <huxinwei@xxxxxxxxxx>
      Cc: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1440484973-13892-1-git-send-email-thunder.leizhen@xxxxxxxxxx
      [ Fixed yet another typo in one of the sentences fixed. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit afbbd23381767aec5717ce07736f3a165ef724cd
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Mon Sep 14 22:06:44 2015 +0200

      irqchip/gic: Document optional Clock and Power Domain properties

      Depending on the GIC variant, the GIC module has one or more clock
      inputs. Document the optional "clocks" and "clock-names" properties,
      and their possible values, based on the Technical Reference Manuals.
      optional.

      Add the optional "power-domains" property.

      This will allow to describe in DT the relationship between the GIC and
      the Clock and/or Power Domain topology on SoCs where this is relevant
      and needed for proper operation.

      Note: As the current GIC driver doesn't support Runtime PM yet, PM
      Domain constraints must be handled elsewhere in e.g. platform code.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442261204-30931-3-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 8709b9eb37f07193e39ae4f8f8cb59aaed9eae2e
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Mon Sep 14 22:06:43 2015 +0200

      irqchip/gic: Add arm,pl390 support

      Add support for the PrimeCell® Generic Interrupt Controller (PL390) to
      the GIC DT bindings and driver.

      Currently the GIC driver treats this GIC variant the same as other GIC
      variants, but there are differences in hardware topology (e.g. clock
      inputs).

      Sort the list of compatible values while we're at it.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442261204-30931-2-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2a1d3ab8986d1b2f598ffc42351d94166fa0f022
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 11:01:10 2015 +0200

      genirq: Handle force threading of irqs with primary and thread handler

      Force threading of interrupts does not really deal with interrupts
      which are requested with a primary and a threaded handler. The current
      policy is to leave them alone and let the primary handler run in
      interrupt context, but we set the ONESHOT flag for those interrupts as
      well.

      Kohji Okuno debugged a problem with the SDHCI driver where the
      interrupt thread waits for a hardware interrupt to trigger, which can't
      work well because the hardware interrupt is masked due to the ONESHOT
      flag being set. He proposed to set the ONESHOT flag only if the
      interrupt does not provide a thread handler.

      Though that does not work either because these interrupts can be
      shared. So the other interrupt would rightfully get the ONESHOT flag
      set and therefor the same situation would happen again.

      To deal with this proper, we need to force thread the primary handler
      of such interrupts as well. That means that the primary interrupt
      handler is treated as any other primary interrupt handler which is not
      marked IRQF_NO_THREAD. The threaded handler becomes a separate thread
      so the SDHCI flow logic can be handled gracefully.

      The same issue was reported against 4.1-rt.

      Reported-and-tested-by: Kohji Okuno <okuno.kohji@xxxxxxxxxxxxxxxx>
      Reported-By: Michal Smucr <msmucr@xxxxxxxxx>
      Reported-and-tested-by: Nathan Sullivan <nathan.sullivan@xxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/alpine.DEB.2.11.1509211058080.5606@nanos
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7ac8bf9bc9ba82aea763ef30671a34c6a2a39922
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 11:56:04 2015 +0200

      EDAC: Carve out debugfs functionality

      ... into a separate compilation unit and drop a couple of
      CONFIG_EDAC_DEBUG ifdefferies. Rename edac_create_debug_nodes() to
      edac_create_debugfs_nodes(), while at it.

      No functionality change.

      Cc: <linux-edac@xxxxxxxxxxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit f0ef67485f5918794143b7a85d60c1a52bc690ec
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Mon Sep 21 03:06:42 2015 -0700

      Bluetooth: btmrvl: add sd8997 chipset support

      This patch adds support for Marvell's new chipset SD8997.
      Register offsets and supported feature flags are updated.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 53d6cfa581405d0aa47a5b9ceb027bc157fddebc
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Mon Sep 21 03:06:41 2015 -0700

      Bluetooth: btmrvl: remove extra space in cast

      Coding style fix, extra spaces are removed to make casting
      consistent.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 7d840545e5b933028e7423b127459d0d5e5e04fb
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:43 2015 +0200

      mrf24j40: replace magic numbers

      This patch replaces some magic numbers with defines for register bits,
      mask and shifts.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit afaf7fdedb6cc484b4eccf48227632c7d81dcf5a
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:42 2015 +0200

      mrf24j40: change irq trigger type behaviour

      This patch changes the irq trigger type value while calling
      devm_request_irq by using IRQF_TRIGGER_LOW when no irq type was given.
      Additional we add support for change the irq polarity while hw init if
      high level or low level triggered irq type are given.

      For rising edge triggered irq's the mrf24j40 can't deal with that, this
      races at position of tx completion irq, while the irq is disabled we
      readout the irq status registers. This will resets the irq line so other
      irq's can occur. Wile readout the irq status register the irq is still
      disabled and edge triggered interrupts will be ignored.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 8ba40417401ce771769d847900f08c978bb61632
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:41 2015 +0200

      mrf24j40: add promiscuous mode support

      This patch adds support for promiscuous mode by setting promiscuous (no
      frame filtering), disable automatic ack handling and not filtering
      frames where the crc is invalid.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 00250f78896bc52fd4606c4de7e3fb174e702123
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:40 2015 +0200

      mrf24j40: add tx power support

      This patch supports setting of transmit power for the mrf24j40ma
      transceiver only. The mrf24j40mc has some amplifier to change the
      transmit power, I am currently not sure how the mapping for this
      amplifier looks like.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e33a0f96ac518d4c7ffcf98d2f030e6e23fab6b3
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:39 2015 +0200

      mrf24j40: add cca ed level support

      This patch supports handling to set the cca energy detection level for
      the mrf24j40 transceiver.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f1d781272231dc4d1cdfdce13ad3e6f3f96b7ec0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:38 2015 +0200

      mrf24j40: add cca mode support

      This patch supports cca mode handling for mrf24j40.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 2323cf38f949439bc4ac4252cf1d91d1297cce92
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:37 2015 +0200

      mrf24j40: add csma params support

      This patch adds supports to change the CSMA parameters. The datasheet
      doesn't say anything about max_be value. Seems not configurable and we
      assume the 802.15.4 default. But this value must exists because there is
      a min_be value.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 374416112bb0f83c5b4d8bb3fbb157fbe0b2814b
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:36 2015 +0200

      mrf24j40: async interrupt handling

      This patch removes the threaded irq handling and do a hardirq instead.
      We need to switch to spi_async for this step for getting the irq status
      register.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c91a301162899ee100c1eab397958cb9aef50d0c
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:35 2015 +0200

      mrf24j40: rework rx handling to async rx handling

      This patch prepares that we can do the receive handling inside interrupt
      context by using spi_async. This is necessary for introduce a
      non-threaded irq handling.

      Also we drop the bit setting for "RXDECINV" at register "BBREG1", we do
      a driectly full write of register "BBREG1", because it contains the bit
      RXDECINV only.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6844a0e4debd67c9bcf6a8fed3c7f9c24413c349
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:34 2015 +0200

      mrf24j40: rework tx handling to async tx handling

      This patch reworks the current transmit API to spi_async handling. We
      removed the error handling check, because mac802154 has no chance to
      report it. Also the transmit timeout handling can't be handled by xmit
      async handling, for this usecase we need to implement the netdev
      watchdog. These are all unlikely cases which we drop now and should be
      provided by netdev watchdog.

      We also drop the bit setting for TXNACKREQ at register TXNCON, this is
      not necessary. The TXNCON register should set only once for each frame,
      previous settings doesn't matter.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 79750ac4257763ff595a8b2cdc7ba580f0b0c8e0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:33 2015 +0200

      ieee802154: add helpers for frame control checks

      This patch introduce two static inline functions. The first to get the
      frame control field from an sk_buff. The second is for checking on the
      acknowledgment request bit on the frame control field. Later we can
      introduce more functions to check on the frame control fields.

      These will deprecate the current behaviour which requires a
      host-byteorder conversion and manually bit handling.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ab40ff7508d2f54ed03b99523493c46250649c52
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:32 2015 +0200

      mrf24j40: change to frame delivery with crc

      This patch changes the frame delivery to mac802154 with crc. This is
      useful for monitor interface types which deliver the crc to userspace.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 42c7148e06661ae0ca1bb511e1b98878b5f522f8
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:31 2015 +0200

      mrf24j40: use regmap for register access

      This patch uses the regmap functions for transceiver register settings
      where it's possible. This means everything except the hotpaths like
      receive/transmit handling.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b0156792001b7a19bc115dcc32aebb9b9a0b6a01
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:30 2015 +0200

      mrf24j40: add regmap support

      This patch introduce regmap support for short and long address space of
      mrf24j40. It's only possible to use regmap_read/write/update_bits for
      long address range. This is because I added lowlevel bus operation
      because the write operation need to set the 12th bit to mark a register
      write, but regmap only supports to set bits for register write access in
      the first byte. We use other regmap register functions than
      read/write/update_bits, so this should be fine.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 554b49493b89b068643b7360334b40d5f5ca8ff2
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:29 2015 +0200

      mrf24j40: add more register defines

      For supporting regmap, this patch will add more register defines to
      prepare a full register dump by regmap debugfs.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit d344c91280326469e5f9c5a3b1b92ef0d1c5d25f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:28 2015 +0200

      mrf24j40: add random extended addr generation

      The mrf24j40 has no source to get a permanent extended address. This
      patch will add a random generated permanent extended address source.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 766928fbf8c989f65184c3ed0d48fd3004213c46
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:27 2015 +0200

      mrf24j40: add default channel setting

      Per default mrf24j40 has the channel 11 after reset. This patch adds the
      right phy default value for the channel setting.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 2e6fd648b6b87e6a2289c875c6067acc3bd88b3e
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:26 2015 +0200

      mrf24j40: add device-tree support

      This patch adds devicetree support to mrf24j40 with proper devicetree
      compatible strings.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 78aedb6bfa43f43dacd8fc7b06452a87d33e3886
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:25 2015 +0200

      mrf24j40: remove spi settings overwrite

      This patch removes spi settings while mrf24j40 probing. These settings
      cannot be overwrite while device probing where spi controller should be
      already configured. These settings need to be setup by device tree or
      platform data.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a339e1849b9504b6e9631777e41ea2a240e58621
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:24 2015 +0200

      mrf24j40: calling ieee802154_register_hw at last

      The function ieee802154_register_hw should always called at last.
      Currently we do hardware init and such things after register hardware
      into the subsystem. It could be that the subsystem already call driver
      operations while running hardware init.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b2cfdf3c6720b9b77758ef229401f28f48c3372b
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:23 2015 +0200

      mrf24j40: use ieee802154_alloc_hw for private data

      This patch removes the own private dataroom allocation by calling
      devm_kzalloc for devrec and assign this pointer to "devrec->hw->priv".
      Instead we using like all other drivers ieee802154_alloc_hw and give the
      size for the private driver dataroom at the first argument.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c9f883f6fe66ff08ea968494709f4c0b28bc619a
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:22 2015 +0200

      mrf24j40: cleanup define identation

      This patch replaces the spaces after define by a tab.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 57c1bc7ea8a4857070722c23ce98e01f256c9306
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 09:37:54 2015 +0200

      at86rf230: support edge triggered irq

      This patch adds support for edge triggered irq types. We remove the
      locking for irq resources by enable/disable irq and allocate directly
      some heap buffer at isr. We have still a enable/disable irq path but
      this is for level-triggered irq's which need to be disabled until
      spi_async clear the irq line.

      There is usually a little race condition between "irq line cleared" and
      "enable_irq". When in this time a edge triggered irq arrived, we will
      not recognize this interrupt. This case can't happend at at86rf230. The
      reason is that we unmask TRX_END irq's only which indicates a transmit
      or receive completion, which depends on the current state.

      On Transmit:

      TRX_END arrived and transceiver is in TX_ARET_ON state again, in this
      state no other TRX_END can happen until we leave the state.

      On Receive:

      This is protected with the RX_SAFE_MODE bit which leaves the transceiver
      in RX_AACK_BUSY until we readed the framebuffer. In this state no other
      TRX_END can happen.

      Tested with RPi where I first detected issues between edge/level irq's.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 02c7b6922899621aa8e8babe27fca7b6b2e497b0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:44 2015 +0200

      mac802154: tx: add warning if MTU exceeds

      Sending over AF_PACKET RAW sockets we can sending frames which exceeds
      MTU size. To handling it correct we need to change things in AF_PACKET
      which knows on RAW sockets an additional FCS is set by hardware or
      mac802154 transmit functionality.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 87a93e4eceb495f93e3f37b100334d2641765b6c
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:43 2015 +0200

      ieee802154: change needed headroom/tailroom

      This patch cleanups needed_headroom, needed_tailroom and hard_header_len
      fields for wpan and lowpan interfaces.

      For wpan interfaces the worst case mac header len should be part of
      needed_headroom, currently this is set as hard_header_len, but
      hard_header_len should be set to the minimum header length which xmit
      call assumes and this is the minimum frame length of 802.15.4.
      The hard_header_len value will check inside send callbacl of AF_PACKET
      raw sockets.

      For lowpan interfaces, if fragmentation isn't needed the skb will
      call dev_hard_header for 802154 layer and queue it afterwards. This
      happens without new skb allocation, so we need the same headroom and
      tailroom lengths like 802154 inside 802154 6lowpan layer. At least we
      assume as minimum header length an ipv6 header size.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 838b83d63d2909f9136f3030dc4fffa8230c31da
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:42 2015 +0200

      ieee802154: introduce wpan_dev_header_ops

      The current header_ops callback structure of net device are used mostly
      from 802.15.4 upper-layers. Because this callback structure is a very
      generic one, which is also used by e.g. DGRAM AF_PACKET sockets, we
      can't make this callback structure 802.15.4 specific which is currently
      is.

      I saw the smallest "constraint" for calling this callback with
      dev_hard_header/dev_parse_header by AF_PACKET which assign a 8 byte
      array for address void pointers. Currently 802.15.4 specific protocols
      like af802154 and 6LoWPAN will assign the "struct ieee802154_addr" as
      these parameters which is greater than 8 bytes. The current callback
      implementation for header_ops.create assumes always a complete
      "struct ieee802154_addr" which AF_PACKET can't never handled and is
      greater than 8 bytes.

      For that reason we introduce now a "generic" create/parse header_ops
      callback which allows handling with intra-pan extended addresses only.
      This allows a small use-case with AF_PACKET to send "somehow" a valid
      dataframe over DGRAM.

      To keeping the current dev_hard_header behaviour we introduce a similar
      callback structure "wpan_dev_header_ops" which contains 802.15.4 specific
      upper-layer header creation functionality, which can be called by
      wpan_dev_hard_header.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a1da67b8117ddbe88c770b48b5b1527393b8c9c0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:41 2015 +0200

      ieee802154: header_ops: fix frame control setting

      Sometimes upper-layer protocols wants to generate a new mac header by
      filling "struct ieee802154_hdr" only. These upper-layers sets for the
      address settings the source and dest fields, but not the fc fields for
      indicate the source and dest address mode. This patch changes the
      "ieee802154_hdr_push" function so the fc address fields are set
      according the source and dest fields of "struct ieee802154_hdr".

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit cdd38b219eec2e1b83c0a02d89d372f9656648eb
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:40 2015 +0200

      mac802154: llsec: fix device deletion from list

      This patch adds a missing list_del when a device description will be
      deleted.

      Cc: Phoebe Buckheister <phoebe.buckheister@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 475b9eacc5543eea922431bb8ac4ec761de0e415
  Author: Nachiket Kukade <kukaden@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:40:40 2015 -0700

      Bluetooth: btmrvl: fix firmware dump issue

      First firmware dump attempt from user works fine, but firmware goes
      into bad state after this. Subsequent attempts fails.

      As required by the firmware dump implementation, this change writes
      FW_DUMP_READ_DONE value to dump ctrl register to address this issue.

      Signed-off-by: Nachiket Kukade <kukaden@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6ff0966052c46efb53980b8a1add2e7b49c9f560
  Author: Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
  Date:   Sun Sep 13 03:25:26 2015 +0100

      ARM: 8432/1: move VMALLOC_END from 0xff000000 to 0xff800000

      There is a 12MB unused region in our memory map between the vmalloc and
      fixmap areas. This became unused with commit e9da6e9905e6, confirmed
      with commit 64d3b6a3f480.

      We also have a 8MB guard area before the vmalloc area.  With the default
      240MB vmalloc area size and the current VMALLOC_END definition, that
      means the end of low memory ends up at 0xef800000 which is unfortunate
      for 768MB machines where 8MB of RAM is lost to himem.

      Let's move VMALLOC_END to 0xff800000 so the guard area won't chop the
      top of the 768MB low memory area while keeping the default vmalloc area
      size unchanged and still preserving a gap between the vmalloc and fixmap
      areas.

      Signed-off-by: Nicolas Pitre <nico@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 803e3dbcb4cf80c898faccf01875f6ff6e5e76fd
  Author: Sergey Dyasly <dserrg@xxxxxxxxx>
  Date:   Wed Sep 9 16:27:18 2015 +0100

      ARM: 8430/1: use default ioremap alignment for SMP or LPAE

      16MB alignment for ioremap mappings was added by commit a069c896d0d6 
("[ARM]
      3705/1: add supersection support to ioremap()") in order to support 
supersection
      mappings. But __arm_ioremap_pfn_caller uses section and supersection 
mappings
      only in !SMP && !LPAE case. There is no need for such big alignment if 
either
      SMP or LPAE is enabled.

      After this change, ioremap will use default maximum alignment of 128 
pages.

      Link: 
https://lkml.kernel.org/g/1419328813-2211-1-git-send-email-d.safonov@xxxxxxxxxxxxxxxxxxx

      Cc: Guan Xuetao <gxt@xxxxxxxxxxxxxxx>
      Cc: Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
      Cc: James Bottomley <JBottomley@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Arnd Bergmann <arnd.bergmann@xxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Dmitry Safonov <d.safonov@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sergey Dyasly <s.dyasly@xxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit f460b6abdeeafd30c3ee737c843be17b1ceb38e5
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Aug 26 07:49:12 2015 +0100

      ARM: 8423/1: add const qualifier to smp_operations member in structures

      The core framework does not modify smp_operations structures.
      To clarify it, this commit adds 'const' qualifier to the 'ops'
      member of struct of_cpu_method and the 'smp' member of struct
      machine_desc.

      This change allows each SoC code to add 'const' qualifier to its
      smp_operation structure.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 4caa9dda388f34f957a9eb52b9f5ef1a8c975c7b
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Aug 26 07:49:11 2015 +0100

      ARM: 8424/1: add const qualifier to the argument of smp_set_ops()

      This function just copies '*ops' to 'smp_ops', so the given
      structure '*ops' is not modified at all.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit bbeb9209515989ff47802d4e5d5702178c8e42c4
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Tue Aug 25 13:52:09 2015 +0100

      ARM: 8422/1: enable imprecise aborts during early kernel startup

      This patch adds imprecise abort enable/disable macros and uses them to
      enable imprecise aborts early when starting the kernel.

      This helps in tracking down the real cause for such imprecise abort, as
      they are handled as soon as they occur. Until now those aborts would
      only be enabled when entering the userspace and as a consequence crash
      the first userspace process if any abort had been raised during kernel
      startup.

      Signed-off-by: Fabrice Gasnier <fabrice.gasnier@xxxxxx>
      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 208473c1f3ac3eccec097021eec3890f5e20fcc7
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:13:44 2015 +0100

      ARM: wire up new syscalls

      Wire up the new userfaultfd and membarrier syscalls for ARM.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit cc8e4fc0c3b5e8340bc8358990515d116a3c274c
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:46:17 2015 +0300

      xhci: init command timeout timer earlier to avoid deleting it 
uninitialized

      Don't check if timer is running with a timer_pending() before
      deleting it with del_timer_sync(), this defies the whole point of
      the sync part and can cause a possible race.

      Instead we just want to make sure the timer is initialized early enough
      before we have a chance to delete it.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Reported-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit dca7794539eff04b786fb6907186989e5eaaa9c2
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:46:16 2015 +0300

      xhci: change xhci 1.0 only restrictions to support xhci 1.1

      Some changes between xhci 0.96 and xhci 1.0 specifications forced us to
      check the hci version in code, some of these checks were implemented as
      hci_version == 1.0, which will not work with new xhci 1.1 controllers.

      xhci 1.1 behaves similar to xhci 1.0 in these cases, so change these
      checks to hci_version >= 1.0

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 448116bfa856d3c076fa7178ed96661a008a5d45
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 17:46:15 2015 +0300

      usb: xhci: exit early in xhci_setup_device() if we're halted or dying

      During quick plug/removal of OTG adapter during dual-role testing
      it can happen that xhci_alloc_device() is called for the newly
      detected device after the DRD library has called xhci_stop to
      remove the HCD.

      If that is the case, just fail early to prevent the following warning.

      [  154.732649] hub 4-0:1.0: USB hub found
      [  154.742204] hub 4-0:1.0: 1 port detected
      [  154.824458] hub 3-0:1.0: state 7 ports 1 chg 0002 evt 0000
      [  154.854609] hub 4-0:1.0: state 7 ports 1 chg 0000 evt 0000
      [  154.944430] usb 3-1: new high-speed USB device number 2 using xhci-hcd
      [  154.951009] xhci-hcd xhci-hcd.0.auto: xhci_setup_device
      [  155.038191] xhci-hcd xhci-hcd.0.auto: remove, state 4
      [  155.043315] usb usb4: USB disconnect, device number 1
      [  155.055270] xhci-hcd xhci-hcd.0.auto: xhci_stop
      [  155.060094] xhci-hcd xhci-hcd.0.auto: USB bus 4 deregistered
      [  155.066576] xhci-hcd xhci-hcd.0.auto: remove, state 1
      [  155.071710] usb usb3: USB disconnect, device number 1
      [  155.077124] xhci-hcd xhci-hcd.0.auto: xhci_setup_device
      [  155.082389] ------------[ cut here ]------------
      [  155.087690] WARNING: CPU: 0 PID: 72 at drivers/usb/host/xhci.c:3800 
xhci_setup_device+0x410/0x484 [xhci_hcd]()
      [  155.097861] Modules linked in: sd_mod usb_storage scsi_mod usb_f_ss_lb 
g_zero libcomposite ipv6 xhci_plat_hcd xhci_hcd usbcore dwc3 udc_core evdev 
ti_am335x_adc joydev kfifo_buf industrialio snd_soc_simple_cc
      [  155.146734] CPU: 0 PID: 72 Comm: kworker/0:3 Tainted: G        W       
4.1.4-00834-gcd9380b-dirty #50
      [  155.156073] Hardware name: Generic AM43 (Flattened Device Tree)
      [  155.162117] Workqueue: usb_hub_wq hub_event [usbcore]
      [  155.167249] Backtrace:
      [  155.169751] [<c0012af0>] (dump_backtrace) from [<c0012c8c>] 
(show_stack+0x18/0x1c)
      [  155.177390]  r6:c089d4a4 r5:ffffffff r4:00000000 r3:ee46c000
      [  155.183137] [<c0012c74>] (show_stack) from [<c05f7c14>] 
(dump_stack+0x84/0xd0)
      [  155.190446] [<c05f7b90>] (dump_stack) from [<c00439ac>] 
(warn_slowpath_common+0x80/0xbc)
      [  155.198605]  r7:00000009 r6:00000ed8 r5:bf27eb70 r4:00000000
      [  155.204348] [<c004392c>] (warn_slowpath_common) from [<c0043a0c>] 
(warn_slowpath_null+0x24/0x2c)
      [  155.213202]  r8:ee49f000 r7:ee7c0004 r6:00000000 r5:ee7c0158 
r4:ee7c0000
      [  155.220051] [<c00439e8>] (warn_slowpath_null) from [<bf27eb70>] 
(xhci_setup_device+0x410/0x484 [xhci_hcd])
      [  155.229816] [<bf27e760>] (xhci_setup_device [xhci_hcd]) from 
[<bf27ec10>] (xhci_address_device+0x14/0x18 [xhci_hcd])
      [  155.240415]  r10:ee598200 r9:00000001 r8:00000002 r7:00000001 
r6:00000003 r5:00000002
      [  155.248363]  r4:ee49f000
      [  155.250978] [<bf27ebfc>] (xhci_address_device [xhci_hcd]) from 
[<bf20cb94>] (hub_port_init+0x1b8/0xa9c [usbcore])
      [  155.261403] [<bf20c9dc>] (hub_port_init [usbcore]) from [<bf2101e0>] 
(hub_event+0x738/0x1020 [usbcore])
      [  155.270874]  r10:ee598200 r9:ee7c0000 r8:ee7c0038 r7:ee518800 
r6:ee49f000 r5:00000001
      [  155.278822]  r4:00000000
      [  155.281426] [<bf20faa8>] (hub_event [usbcore]) from [<c005754c>] 
(process_one_work+0x128/0x340)
      [  155.290196]  r10:00000000 r9:00000003 r8:00000000 r7:fedfa000 
r6:eeec5400 r5:ee598314
      [  155.298151]  r4:ee434380
      [  155.300718] [<c0057424>] (process_one_work) from [<c00578f8>] 
(worker_thread+0x158/0x49c)
      [  155.308963]  r10:ee434380 r9:00000003 r8:eeec5400 r7:00000008 
r6:ee434398 r5:eeec5400
      [  155.316913]  r4:eeec5414
      [  155.319482] [<c00577a0>] (worker_thread) from [<c005cc40>] 
(kthread+0xdc/0xf8)
      [  155.326765]  r10:00000000 r9:00000000 r8:00000000 r7:c00577a0 
r6:ee434380 r5:ee4441c0
      [  155.334713]  r4:00000000 r3:00000000
      [  155.338341] [<c005cb64>] (kthread) from [<c000fc08>] 
(ret_from_fork+0x14/0x2c)
      [  155.345626]  r7:00000000 r6:00000000 r5:c005cb64 r4:ee4441c0
      [  155.356108] ---[ end trace a58d34c223b190e6 ]---
      [  155.360783] xhci-hcd xhci-hcd.0.auto: Virt dev invalid for slot_id 0x1!
      [  155.574404] xhci-hcd xhci-hcd.0.auto: xhci_setup_device
      [  155.579667] ------------[ cut here ]------------

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8c24d6d7b09deee3036ddc4f2b81b53b28c8f877
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 17:46:14 2015 +0300

      usb: xhci: stop everything on the first call to xhci_stop

      xhci_stop will be called twice, once for the shared hcd
      and again for the primary hcd.

      We stop the XHCI controller in any case so clean up
      everything on the first call else we can timeout
      waiting for pending requests to complete.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit e5bfeab0ad515b4f6df39fe716603e9dc6d3dfd0
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 17:46:13 2015 +0300

      usb: xhci: Clear XHCI_STATE_DYING on start

      For whatever reason if XHCI died in the previous instant
      then it will never recover on the next xhci_start unless we
      clear the DYING flag.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 85ac90f8953a58f6a057b727bc9db97721e3fb8e
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 17:46:12 2015 +0300

      usb: xhci: lock mutex on xhci_stop

      Else it races with xhci_setup_device

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 2b7627b73e81e5d23d5ae1490fe8e690af86e053
  Author: Tomer Barletz <barletz@xxxxxxxxx>
  Date:   Mon Sep 21 17:46:11 2015 +0300

      xhci: Move xhci_pme_quirk() behind #ifdef CONFIG_PM

      xhci_pme_quirk() is only used when CONFIG_PM is defined.
      Compiling a kernel without PM complains about this function

      [reworded commit message -Mathias]
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomer Barletz <barletz@xxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit a6809ffd1687b3a8c192960e69add559b9d32649
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:46:10 2015 +0300

      xhci: give command abortion one more chance before killing xhci

      We want to give the command abortion an additional try to stop
      the command ring before we completely hose xhci.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Tested-by: Vincent Pelletier <plr.vincent@xxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit ff30cbc8da425754e8ab96904db1d295bd034f27
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:46:09 2015 +0300

      usb: Use the USB_SS_MULT() macro to get the burst multiplier.

      Bits 1:0 of the bmAttributes are used for the burst multiplier.
      The rest of the bits used to be reserved (zero), but USB3.1 takes bit 7
      into use.

      Use the existing USB_SS_MULT() macro instead to make sure the mult value
      and hence max packet calculations are correct for USB3.1 devices.

      Note that burst multiplier in bmAttributes is zero based and that
      the USB_SS_MULT() macro adds one.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 01f4fd2a4f741057aaa5ba5ac3b09a42c9ada028
  Merge: ea93465 a66c275b
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 22:21:31 2015 -0700

      Merge tag 'fixes-for-v4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-linus

      Felipe writes:

      usb: fixes for v4.3-rc3

      Here's the second pull request for current -rc cycle.

      A few fixes on dummy_hcd which have been around for
      longer than they should be.

      MUSB got a couple fixes, the most important of which
      is a fix to DMA channel teardown on AM335x devices.

      And DWC3 got a minor fix for when using RT-enabled
      kernels.

  commit 97170ea1823bf00cf6ed0f503129e9053a66c53a
  Author: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 20:41:44 2015 -0700

      drivers/net/ieee802154/at86rf230.c: seq_printf() now returns NULL

      Signed-off-by: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Cc: Alexander Aring <alex.aring@xxxxxxxxx>
      Cc: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Cc: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bcee19f424a0d8c26ecf2607b73c690802658b29
  Merge: ac2fc4b 0c98625
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 18:26:54 2015 -0700

      Merge branch 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup

      Pull cgroup fixes from Tejun Heo:
       "The threadgroup locking changes which went in during 4.2 devel cycle
        added write locking of a percpu_rwsem in cgroup task migration path;
        unfortunately, that involved expedited rcu syncing which turned out to
        be too slow and heavy for certain workloads.  The patchset which is
        dependent on this one didn't get committed during that devel cycle, so
        these two patches can be reverted safely.

        Oleg reworked percpu_rwsem for 4.4 so that the writer path is a lot
        lighter.  The reported issue goes away with Oleg's reworked
        percpu_rwsem and I'll reapply these patches on the for-4.4 branch so
        that they can land together with Oleg's changes"

      * 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup:
        Revert "sched, cgroup: replace signal_struct->group_rwsem with a global 
percpu_rwsem"
        Revert "cgroup: simplify threadgroup locking"

  commit 35736c8165ba666b1a5f07a57f838d8ce1ac3c67
  Merge: 607cba1 cec4284
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:21:47 2015 -0700

      Merge branch 'cpsw-macid-no-of'

      Mugunthan V N says:

      ====================
      Add support for reading macid when DT macid not found

      Did a boot test on dra7-evm [1] and am437x-gp-evm [2].
      Pushed a branch [3] for others to test the patch.

      [1]: http://pastebin.ubuntu.com/12513420/
      [2]: http://pastebin.ubuntu.com/12513428/
      [3]: git://git.ti.com/~mugunthanvnm/ti-linux-kernel/linux.git 
cpsw-macid-read-support
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cec42849162c79a2677d7ec29c20e72fb9ca5666
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 21 15:56:53 2015 +0530

      arm: dts: am4372: add syscon phandle to cpsw node

      There are 2 MACIDs stored in the control module of the am4372.
      These are read by the cpsw driver if no valid MACID was found
      in the devicetree.

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a084e13e795aca7c18f39304c0c76579b4364655
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 21 15:56:52 2015 +0530

      arm: dts: dra7: add syscon phandle to cpsw node

      There are 2 MACIDs stored in the control module of the dra7.
      These are read by the cpsw driver if no valid MACID was found
      in the devicetree.

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d230a11abc97e118365b12a472ff758d867c4bac
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 21 15:56:51 2015 +0530

      drivers: net: cpsw-common: add support for reading mac address for dra7 
and am437x platforms

      Adding support for reading mac address using syscon driver for
      dra7 and am437x platforms

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b6745f6e4e63f23fd5bf46ea2745783be13a0960
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 21 15:56:50 2015 +0530

      drivers: net: cpsw: davinci_emac: move reading mac id to common file

      Moving mac address reading from ethernet driver to common
      file for better maintenance and for code reusable.

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 607cba1554cbdfd8d9f4a645f235e1dc909ba33f
  Merge: 852bcaf 6fa7da2
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:15:03 2015 -0700

      Merge tag 'linux-can-next-for-4.4-20150921' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next

      Marc Kleine-Budde says:

      ====================
      pull-request: can-next 2015-09-17

      this is a pull request of 8 patches for net-next/master.

      All 8 patches are by me and cleanup the flexcan driver.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e375ccda31ccc73b087134e263c48d2114534f4
  Author: Boris BREZILLON <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 18:14:43 2015 +0200

      mtd: nand: sunxi: fix sunxi_nand_chips_cleanup()

      The sunxi_nand_chips_cleanup() function is missing a call to list_del()
      which generates a double free error.

      Reported-by: Priit Laes <plaes@xxxxxxxxx>
      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.19+
      Fixes: 1fef62c1423b ("mtd: nand: add sunxi NAND flash controller support")
      Tested-by: Priit Laes <plaes@xxxxxxxxx>
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>

  commit 29c6852602e259d2c1882f320b29d5c3fec0de04
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sat Sep 19 09:48:04 2015 -0700

      inet: fix races in reqsk_queue_hash_req()

      Before allowing lockless LISTEN processing, we need to make
      sure to arm the SYN_RECV timer before the req socket is visible
      in hash tables.

      Also, req->rsk_hash should be written before we set rsk_refcnt
      to a non zero value.

      Fixes: fa76ce7328b2 ("inet: get rid of central tcp/dccp listener timer")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Ying Cai <ycai@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ed2e923945892a8372ab70d2f61d364b0b6d9054
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sat Sep 19 09:08:34 2015 -0700

      tcp/dccp: fix timewait races in timer handling

      When creating a timewait socket, we need to arm the timer before
      allowing other cpus to find it. The signal allowing cpus to find
      the socket is setting tw_refcnt to non zero value.

      As we set tw_refcnt in __inet_twsk_hashdance(), we therefore need to
      call inet_twsk_schedule() first.

      This also means we need to remove tw_refcnt changes from
      inet_twsk_schedule() and let the caller handle it.

      Note that because we use mod_timer_pinned(), we have the guarantee
      the timer wont expire before we set tw_refcnt as we run in BH context.

      To make things more readable I introduced inet_twsk_reschedule() helper.

      When rearming the timer, we can use mod_timer_pending() to make sure
      we do not rearm a canceled timer.

      Note: This bug can possibly trigger if packets of a flow can hit
      multiple cpus. This does not normally happen, unless flow steering
      is broken somehow. This explains this bug was spotted ~5 months after
      its introduction.

      A similar fix is needed for SYN_RECV sockets in reqsk_queue_hash_req(),
      but will be provided in a separate patch for proper tracking.

      Fixes: 789f558cfb36 ("tcp/dccp: get rid of central timewait timer")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Ying Cai <ycai@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c5d283acc997a1bd7bc37cddcf7d284521cffff
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Fri Sep 18 17:47:55 2015 -0400

      sunvnet: Invoke SET_NETDEV_DEV() to set up the vdev in vnet_new()

      `ls /sys/devices/channel-devices/vnet-port-0-0/net' is missing without
      this change, and applications like NetworkManager are looking in
      sysfs for the information.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 852bcafb99247abb3a2876625a3adf684c42e015
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Fri Sep 18 14:16:53 2015 -0700

      net: bcmgenet: Remove duplicate test for tx_coalesce_usecs_high

      We were checking twice for ec->tx_coalesce_usecs_high, remove the
      duplicate test.

      Reported-by: Julia Lawall <julia.lawall@xxxxxxx>
      Reported-by: kbuild-all@xxxxxx
      Fixes: 2f9130709d2c19 ("net: bcmgenet: Implement TX coalescing control 
knobs")
      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5eb8f289ac3020a9abad1c3c532ceca83284b6ed
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 16:20:32 2015 -0400

      geneve: remove vlan-related feature assignment

      The code handling vlan tag insertion was dropped in commit 371bd1061d29
      ("geneve: Consolidate Geneve functionality in single module.").  Now we
      need to drop the related vlan feature bits in the netdev structure.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9b9958229638245b5709f27c76c199a465f1496
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Sep 18 11:40:33 2015 -0700

      tcp: send loss probe after 1s if no RTT available

      This patch makes TLP to use 1 sec timer by default when RTT is
      not available due to SYN/ACK retransmission or SYN cookies.

      Prior to this change, the lack of RTT prevents TLP so the first
      data packets sent can only be recovered by fast recovery or RTO.
      If the fast recovery fails to trigger the RTO is 3 second when
      SYN/ACK is retransmitted. With this patch we can trigger fast
      recovery in 1sec instead.

      Note that we need to check Fast Open more properly. A Fast Open
      connection could be (accepted then) closed before it receives
      the final ACK of 3WHS so the state is FIN_WAIT_1. Without the
      new check, TLP will retransmit FIN instead of SYN/ACK.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Nandita Dukkipati <nanditad@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f1c28ae74bb1a34d36fca2db5161611d58b3148
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Sep 18 11:36:14 2015 -0700

      tcp: usec resolution SYN/ACK RTT

      Currently SYN/ACK RTT is measured in jiffies. For LAN the SYN/ACK
      RTT is often measured as 0ms or sometimes 1ms, which would affect
      RTT estimation and min RTT samping used by some congestion control.

      This patch improves SYN/ACK RTT to be usec resolution if platform
      supports it. While the timestamping of SYN/ACK is done in request
      sock, the RTT measurement is carefully arranged to avoid storing
      another u64 timestamp in tcp_sock.

      For regular handshake w/o SYNACK retransmission, the RTT is sampled
      right after the child socket is created and right before the request
      sock is released (tcp_check_req() in tcp_minisocks.c)

      For Fast Open the child socket is already created when SYN/ACK was
      sent, the RTT is sampled in tcp_rcv_state_process() after processing
      the final ACK an right before the request socket is released.

      If the SYN/ACK was retransmistted or SYN-cookie was used, we rely
      on TCP timestamps to measure the RTT. The sample is taken at the
      same place in tcp_rcv_state_process() after the timestamp values
      are validated in tcp_validate_incoming(). Note that we do not store
      TS echo value in request_sock for SYN-cookies, because the value
      is already stored in tp->rx_opt used by tcp_ack_update_rtt().

      One side benefit is that the RTT measurement now happens before
      initializing congestion control (of the passive side). Therefore
      the congestion control can use the SYN/ACK RTT.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4a476bd6d1d923922ec950ddc4c27b279f6901eb
  Author: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 02:25:38 2015 -0700

      usbnet: New driver for QinHeng CH9200 devices

      There's a bunch of cheap USB 10/100 devices based on QinHeng chipsets. The
      vendor driver supports the CH9100 and CH9200 devices, but the majority of
      the code is of the if (ch9100) {} else {} form, with the most significant
      difference being that CH9200 provides a real MII interface but CH9100 
fakes
      one with a bunch of global variables and magic commands. I don't have a
      CH9100, so it's probably better if someone who does provides an 
independent
      driver for it. In any case, this is a lightly cleaned up version of the
      vendor driver with all the CH9100 code dropped.

      Signed-off-by: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f8d0bbb00f120ae0de79de6952132ea5c5028bb
  Merge: a11d558 1ccb141
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 16:11:21 2015 -0700

      Merge branch 'phy-of-autoload'

      Luis de Bethencourt says:

      ====================
      net: phy: Fix module autoload for OF platform drivers

      These patches add the missing MODULE_DEVICE_TABLE() for OF to export
      the information so modules have the correct aliases built-in and
      autoloading works correctly.

      A longer explanation by Javier Canillas can be found here:
      https://lkml.org/lkml/2015/7/30/519
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1ccb141e31d0dc4c1234b0886cdc8b4399112c59
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 18:16:29 2015 +0200

      net: phy: mdio-gpio: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2f90a3070690ad80c38d650e91b96b5dcbdfe2fd
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 18:16:12 2015 +0200

      net: phy: mdio-bcm-unimac: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a11d5585edc626106d060dde447467677d220485
  Merge: 1f770c0 ebd8ebf
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 16:09:11 2015 -0700

      Merge branch 'net-of-autoload'

      Luis de Bethencourt says:

      ====================
      net: Fix module autoload for OF platform drivers

      These patches add the missing MODULE_DEVICE_TABLE() for OF to export
      the information so modules have the correct aliases built-in and
      autoloading works correctly.

      A longer explanation by Javier Canillas can be found here:
      https://lkml.org/lkml/2015/7/30/519
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebd8ebf078879973d0e8d2642253c091c23bd7d2
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:56:21 2015 +0200

      net: moxa: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 23860063706f2037008fb423820cdbd0dcd558bb
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:55:27 2015 +0200

      net: gianfar_ptp: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e8048e5595bedb1f4b20597d059d6877a710f12d
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:55:02 2015 +0200

      net: bcmgenet: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 46d5a3431f2dbb2392b501be9b9f9c2ca17737d8
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:54:30 2015 +0200

      net: systemport: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7d778fa74a88e7b5a09ba498d66bd67a7dc7df0
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:54:00 2015 +0200

      net: arc: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21fe8af40024c49af37124bc7b19c5836d25695e
  Merge: 5dcd246 91e60eb
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 16:03:05 2015 -0700

      Merge branch 's390-next'

      Ursula Braun says:

      ====================
      s390: qeth and iucv patches

      here is version 2 of some s390 related qeth patches for net-next. The 
patch by
      Thomas Richter adds a new feature to the qeth layer2 code; the remaining
      patches are minor improvements.
      Version 2 of patch 4 uses the desired indentation in function declarations
      and definitions spanning multiple lines in almost all cases. Thomas run 
into a
      conflict with the maximum number of columns once. Thus you will still see 
one
      function definition using an earlier column before the opening 
paranthesis.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 91e60eb60bdf078fc58b8d2fd1ac12f3c09bb893
  Author: Ursula Braun <ursula.braun@xxxxxxxxxx>
  Date:   Fri Sep 18 16:06:52 2015 +0200

      s390/iucv: do not use arrays as argument

      The iucv code uses arrays as arguments. Even though this does not
      really cause a problem, it could be misleading, since the compiler
      turns array arguments into just a pointer argument. To be more
      precise this patch changes the array arguments into pointers.

      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d7def2a12386dbf56443016114c187df50e3442
  Author: Thomas Richter <tmricht@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 16:06:51 2015 +0200

      qeth: add layer 2 RX/TX checksum offloading

      Checksum offloading for send and receive is already
      supported for layer 3 (IP layer). This patch
      adds support for RX and TX hardware checksum offloading
      for layer 2 (MAC layer). The hardware calculates the checksum
      for IP UDP and TCP packets.

      This patch moves the hardware checksum offloading setup
      to the set of common functions in qeth_core_main.c.
      Layer 2 and layer 3 now simply call the same common functions.

      Also note that TX checksum offloading is always enabled.
      The device driver relies on the TCP/IP stack to make use of
      this feature.

      Signed-off-by: Thomas Richter <tmricht@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Reviewed-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 239ff408ddd8fa7a19c53ed247daec855ff11ea2
  Author: Ursula Braun <ursula.braun@xxxxxxxxxx>
  Date:   Fri Sep 18 16:06:50 2015 +0200

      qeth: move OSA portname into deprecated status

      An OSA-Express port name was required to identify a shared OSA port.
      All operating system instances that shared the port had to use the
      same port name. This requirement no longer applies.

      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 248046ba074dc3cbba4f771f08da8b430662d8ac
  Author: Lakhvich Dmitriy <ldmitriy@xxxxxxxxxx>
  Date:   Fri Sep 18 16:06:49 2015 +0200

      qeth: no write permission for readonly sysattr

      User is not allowed to write into bridge_state sysfs file.
      Fixed attribute not mislead the user

      Signed-off-by: Lakhvich Dmitriy <ldmitriy@xxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Reported-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Reviewed-by: Thomas Richter <tmricht@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9846e70b9bcd9ec11f82a47df159d1b1dfb02eee
  Author: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
  Date:   Fri Sep 18 16:06:48 2015 +0200

      qeth: remove extraneous length from %pM format

      Length specifier in the %pM format is not supported (at least, not
      documented). Remove it, and also an extraneous '&' for the array.

      Signed-off-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Suggested-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5dcd2461073a43b2aa48ab5cfc135ba182667794
  Merge: a1ef48e 6818375
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 16:00:44 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-09-18

      Here's the first bluetooth-next pull request for the 4.4 kernel:

       - ieee802154 cleanups & fixes
       - debugfs support for the at86rf230 driver
       - Support for quirky (seemingly counterfeit) CSR Bluetooth controllers
       - Power management and device config improvements for Intel controllers
       - Fix for devices with incorrect advertising data length
       - Fix for closing HCI user channel socket

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 16651fc2f30dfe14dcdd59cf0ccb4e1ccdba4dc7
  Merge: 4e2e986 d702ffd 2f9481e b9c9364 0f1d08d 7209fee
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Sep 21 14:16:09 2015 -0700

      Merge remote-tracking branches 'regulator/fix/anatop', 
'regulator/fix/gpio', 'regulator/fix/pbias', 'regulator/fix/tpx65218' and 
'regulator/fix/vexpress' into regulator-linus

  commit 4e2e986473f708be46bd00007621f97178bd7047
  Merge: 1f93e4a 23c3f31
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Sep 21 14:15:58 2015 -0700

      Merge remote-tracking branch 'regulator/fix/core' into regulator-linus

  commit 854f736364c659046f066a98fed2fdb10a39577a
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Sun Sep 6 07:13:17 2015 +0000

      perf tools: Don't assume that the parser returns non empty evsel list

      Don't blindly retrieve and use a last element in the lists returned by
      parse_events__scanner(), as it may have collected no entries, i.e.
      return an empty list.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441523623-152703-2-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0fb18553478dee5b3d8dc0af4f99a5288e81142f
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Wed Sep 16 21:52:42 2015 +0900

      perf probe: Fix a segfault when removing uprobe events

      Fix a segfault bug and a small mistake in perf probe -d.

      Since the "ulist" in perf_del_probe_events is never initialized,
      strlist__add(ulist, *) always causes a segfault when removing
      uprobe events by perf probe -d.

      Also, the "str" local variable is never released if fail to
      allocate the "klist". This fixes it too.

      This has been introduced by the commit e607f1426b58 ("perf probe:
      Print deleted events in cmd_probe()").

      Reported-by: Milian Wolff <milian.wolff@xxxxxxxx>
      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150916125241.4446.44805.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 50745b0a7f46f68574cd2b9ae24566bf026e7ebd
  Author: chandan <chandan@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 21:10:13 2015 +0530

      Btrfs: Direct I/O: Fix space accounting

      The following call trace is seen when generic/095 test is executed,

      WARNING: CPU: 3 PID: 2769 at 
/home/chandan/code/repos/linux/fs/btrfs/inode.c:8967 
btrfs_destroy_inode+0x284/0x2a0()
      Modules linked in:
      CPU: 3 PID: 2769 Comm: umount Not tainted 4.2.0-rc5+ #31
      Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 
1.7.5-20150306_163512-brownie 04/01/2014
       ffffffff81c08150 ffff8802ec9cbce8 ffffffff81984058 ffff8802ffd8feb0
       0000000000000000 ffff8802ec9cbd28 ffffffff81050385 ffff8802ec9cbd38
       ffff8802d12f8588 ffff8802d12f8588 ffff8802f15ab000 ffff8800bb96c0b0
      Call Trace:
       [<ffffffff81984058>] dump_stack+0x45/0x57
       [<ffffffff81050385>] warn_slowpath_common+0x85/0xc0
       [<ffffffff81050465>] warn_slowpath_null+0x15/0x20
       [<ffffffff81340294>] btrfs_destroy_inode+0x284/0x2a0
       [<ffffffff8117ce07>] destroy_inode+0x37/0x60
       [<ffffffff8117cf39>] evict+0x109/0x170
       [<ffffffff8117cfd5>] dispose_list+0x35/0x50
       [<ffffffff8117dd3a>] evict_inodes+0xaa/0x100
       [<ffffffff81165667>] generic_shutdown_super+0x47/0xf0
       [<ffffffff81165951>] kill_anon_super+0x11/0x20
       [<ffffffff81302093>] btrfs_kill_super+0x13/0x110
       [<ffffffff81165c99>] deactivate_locked_super+0x39/0x70
       [<ffffffff811660cf>] deactivate_super+0x5f/0x70
       [<ffffffff81180e1e>] cleanup_mnt+0x3e/0x90
       [<ffffffff81180ebd>] __cleanup_mnt+0xd/0x10
       [<ffffffff81069c06>] task_work_run+0x96/0xb0
       [<ffffffff81003a3d>] do_notify_resume+0x3d/0x50
       [<ffffffff8198cbc2>] int_signal+0x12/0x17

      This means that the inode had non-zero "outstanding extents" during
      eviction. This occurs because, during direct I/O a task which successfully
      used up its reserved data space would set BTRFS_INODE_DIO_READY bit and 
does
      not clear the bit after finishing the DIO write. A future DIO write could
      actually fail and the unused reserve space won't be freed because of the
      previously set BTRFS_INODE_DIO_READY bit.

      Clearing the BTRFS_INODE_DIO_READY bit in btrfs_direct_IO() caused the
      following issue,
      
|-----------------------------------+-------------------------------------|
      | Task A                            | Task B                              
|
      
|-----------------------------------+-------------------------------------|
      | Start direct i/o write on inode X.|                                     
|
      | reserve space                     |                                     
|
      | Allocate ordered extent           |                                     
|
      | release reserved space            |                                     
|
      | Set BTRFS_INODE_DIO_READY bit.    |                                     
|
      |                                   | splice()                            
|
      |                                   | Transfer data from pipe buffer to   
|
      |                                   | destination file.                   
|
      |                                   | - kmap(pipe buffer page)            
|
      |                                   | - Start direct i/o write on         
|
      |                                   |   inode X.                          
|
      |                                   |   - reserve space                   
|
      |                                   |   - dio_refill_pages()              
|
      |                                   |     - sdio->blocks_available == 0   
|
      |                                   |     - Since a kernel address is     
|
      |                                   |       being passed instead of a     
|
      |                                   |       user space address,           
|
      |                                   |       iov_iter_get_pages() returns  
|
      |                                   |       -EFAULT.                      
|
      |                                   |   - Since BTRFS_INODE_DIO_READY is  
|
      |                                   |     set, we don't release reserved  
|
      |                                   |     space.                          
|
      |                                   |   - Clear BTRFS_INODE_DIO_READY 
bit.|
      | -EIOCBQUEUED is returned.         |                                     
|
      
|-----------------------------------+-------------------------------------|

      Hence this commit introduces "struct btrfs_dio_data" to track the usage of
      reserved data space. The remaining unused "reserve space" can now be freed
      reliably.

      Signed-off-by: Chandan Rajendra <chandan@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Liu Bo <bo.li.liu@xxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 03a0e8a7c5ea29b5c4e72dfd64900b47a8fb6f2d
  Author: Boris BREZILLON <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:41:03 2015 +0200

      mtd: nand: sunxi: fix OOB handling in ->write_xxx() functions

      The USER_DATA register cannot be accessed using byte accessors on A13
      SoCs, thus triggering a bug when using memcpy_toio on this register.
      Declare an helper macros to convert an OOB buffer into a suitable
      USER_DATA value and vice-versa.

      This patch also fixes an error in the oob_required logic (some OOB data
      are not written even if the user required it) by removing the
      oob_required condition, which is perfectly valid since the core already
      fill ->oob_poi with FFs when oob_required is false.

      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.19+
      Fixes: 1fef62c1423b ("mtd: nand: add sunxi NAND flash controller support")
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>

  commit a66c275b3d5d8467d770dabd30927f5d5e857294
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 11:08:36 2015 +0300

      usb: dwc3: gadget: Fix BUG in RT config

      Using spin_lock() in hard irq handler is pointless
      and causes a BUG() in RT (real-time) configuration
      so get rid of it.

      The reason it's pointless is because the driver is
      basically accessing register which is, anyways,
      atomic.

      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit b431ba8803666e56c1d178a421b3cbc36e8d3d33
  Author: Bin Liu <b-liu@xxxxxx>
  Date:   Mon Aug 24 15:28:37 2015 -0500

      usb: musb: fix cppi channel teardown for isoch transfer

      After a few iterations of start/stop UVC camera streaming, the streaming
      stops.

      This patch adds 250us delay in the cppi channel abort path to let cppi
      drain properly.

      Using 50us delay seems to be too aggressive, some webcams are still
      broken. 250us is the original value used in TI 3.2 kernel.

      Signed-off-by: Bin Liu <b-liu@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 8fb7ab504381b8ce4f443129e102a713bd76dfe2
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sat Sep 12 10:54:26 2015 +0200

      usb: phy: isp1301: Export I2C module alias information

      The I2C core always reports the MODALIAS uevent as "i2c:<client name"
      regardless if the device was registered using OF or platform code so
      So the driver needs to export the I2C table and this be built into
      the module or udev won't have the necessary information to auto load
      the module when the device is added.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 51b91b7e6c1516c7d3ea70acc91aac9b32ae3e72
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:09 2015 +0200

      usb: gadget: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 9a9ce1dfaef9aa15980cec22b806b39a65a9467e
  Author: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
  Date:   Tue Sep 15 16:55:32 2015 +0200

      usb: gadget: dummy_hcd: in transfer(), return data sent, not limit

      dummy_timer uses transfer() to update transfer limit. However,
      limit passed to dummy_timer changes depending on transfer type,
      so the actual limit is overwritten.

      This can cause unpredictably slow / fast bulk transfers when
      coupled with control / interrupt transfers.

      Fix by returning actual amount of data sent in transfer() and
      substracting from total.

      Signed-off-by: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit e42bd6a54b97e2a39b5004deac66a0fcd6ebbe75
  Author: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
  Date:   Tue Sep 15 16:55:31 2015 +0200

      usb: gadget: dummy_hcd: fix rescan logic for transfer

      transfer() schedules a rescan for transfers larger than
      maxpacket, which is wrong for transfers that are multiples
      of maxpacket.

      Rewrite to fix and clarify packet multiple / remainder
      transfer logic.

      Signed-off-by: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 5dda5be9d501084e8a6242e6dbeb8eea1daf01c8
  Author: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
  Date:   Tue Sep 15 16:55:30 2015 +0200

      usb: gadget: dummy_hcd: fix unneeded else-if condition

      We already know at this point that to_host is false.

      Signed-off-by: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 21c3ee93867694e8c7382ff77b4645b50d3233e9
  Author: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
  Date:   Tue Sep 15 16:55:29 2015 +0200

      usb: gadget: dummy_hcd: emulate sending zlp in packet logic

      currently, when a zlp flag is set and an urb/usb_request
      buffer is filled without a short packet, transfer() leaves
      its status at -EINPROGRESS and does not rescan for short
      packet.

      In a scenario where ep.maxpacket bytes are copied,
      URB_ZERO_PACKET is set, urb buffer is filled and usb_request
      buffer is not, transfer() returns with an urb with
      -EINPROGRESS status, which dummy_hcd treats as incomplete
      transfer.

      Check for zlp and rescan appropriately.

      Signed-off-by: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit b8239dcc03afbd0886c1d9b91ba8fee7c6c9a6cb
  Author: Bin Liu <b-liu@xxxxxx>
  Date:   Wed Sep 16 14:49:28 2015 -0500

      usb: musb: dsps: fix polling in device-only mode

      Fix the regression caused by commit ad78c918602 ("usb: musb: dsps: just
      start polling already") which causes polling the ID pin status even in
      device-only mode.

      Fixes: ad78c918602c ("usb: musb: dsps: just start polling already")
      Signed-off-by: Bin Liu <b-liu@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit cf261fd1a444e87894c2ed8f481606ead7916fab
  Author: Sylvain Rochet <sylvain.rochet@xxxxxxxxxxxx>
  Date:   Fri Sep 18 16:58:28 2015 +0200

      usb: gadget: atmel_usba_udc: add ep capabilities support on device tree 
binding

      The recently added endpoint capabilities flags verification breaks Atmel
      USBA because the endpoint configuration was only added when the driver
      is bound using the legacy pdata interface.

      Convert endpoint configuration to new capabilities model when driver is
      bound to a device tree as well.

      Signed-off-by: Sylvain Rochet <sylvain.rochet@xxxxxxxxxxxx>
      Fixes: 47bef3865115 ("usb: gadget: atmel_usba_udc: add ep capabilities 
support")
      Signed-off-by: Nicolas Ferre <nicolas.ferre@xxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit ac2fc4b9d5b7d8e4878c6f04f947d42707f782ef
  Merge: 90a835f cbc41d0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 12:02:27 2015 -0700

      Merge tag 'renesas-sh-drivers-for-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas

      Pull SH drivers updates from Simon Horman:
       "I am sending this change after v4.3-rc1 has been released as it
        depends on SoC changes which are present in that rc release.

        Summary:

         - disable PM runtime for multi-platform ARM with genpd

         - disable legacy default PM Domain on emev2"

      * tag 'renesas-sh-drivers-for-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas:
        drivers: sh: Disable PM runtime for multi-platform ARM with genpd
        drivers: sh: Disable legacy default PM Domain on emev2

  commit f6c804b08ca5e04f309e88b7e8823ef8b9d054e5
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Wed Sep 16 17:37:00 2015 +0200

      ARM: at91/dt: sama5d2: add pio controller node

      Add pio4 controller node to enable pinmux and gpio.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 33d3690cf5c24261af69b5d415ae5403ee386e1f
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Wed Sep 16 17:36:59 2015 +0200

      MAINTAINERS: Add an entry for pinctrl-at91-pio4

      Add an entry for the Atmel PIO4 controller driver.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 56d794222474edef1cae2bc97732a717ab41003a
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Wed Sep 16 17:36:58 2015 +0200

      pinctrl: dt-binding: Add DT binding documentation for Atmel PIO4

      Add documentation for the Atmel PIO4 controller introduced with SAMA5D2
      chip family.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Acked-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 776180848b574c9c01217fa958f10843ffce584f
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Wed Sep 16 17:36:57 2015 +0200

      pinctrl: introduce driver for Atmel PIO4 controller

      Add a pinctrl/gpio driver for Atmel PIO4 controller available on SAMA5D2
      chip family.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 90a835f5d19217ad1e174e40ef35d0acf3357828
  Merge: b7f76ea 977108f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 09:53:30 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

      Pull s390 fixes from Martin Schwidefsky:
       "A couple of system call updates.  The two new system calls userfaultfd
        and membarrier have been added, as well as the 17 direct calls for the
        multiplexed socket system calls.

        In addition the system call compat wrappers have been flagged as
        notrace functions and a few wrappers could be removed.

        And bug fixes for the vector register handling, cpu_mf, suspend/resume,
        compat signals, SMT cputime accounting and the zfcp dumper"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:
        s390: wire up separate socketcalls system calls
        s390/compat: remove superfluous compat wrappers
        s390/compat: do not trace compat wrapper functions
        s390/s390x: allocate sys_membarrier system call number
        s390/configs//zfcpdump_defconfig: Remove CONFIG_MEMSTICK
        s390: wire up userfaultfd system call
        s390/vtime: correct scaled cputime for SMT
        s390/cpum_cf: Corrected return code for unauthorized counter sets
        s390/compat: correct uc_sigmask of the compat signal frame
        s390: fix floating point register corruption
        s390/hibernate: fix save and restore of vector registers

  commit 72d4736253af74147b1fa68145b2f4c61d1f37e1
  Author: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
  Date:   Sat Sep 19 11:22:57 2015 -0700

      Input: uinput - fix crash when using ABS events

      Commit b6d30968d86c45a7bb599eaca13ff048d3fa576c (Input: uinput - switch to
      using for_each_set_bit()) switched driver to use for_each_set_bit().
      However during initial write of the uinput structure that contains min/max
      data for all possible axes none of them are reflected in dev->absbit yet
      and so we were skipping over all of them and were not allocating absinfo
      memory which caused crash later when driver tried to sens EV_ABS events:

      <1>[   15.064330] BUG: unable to handle kernel NULL pointer dereference 
at 0000000000000024
      <1>[   15.064336] IP: [<ffffffff8163f142>] input_handle_event+0x232/0x4e0
      <4>[   15.064343] PGD 0
      <4>[   15.064345] Oops: 0000 [#1] SMP

      Fixes: b6d30968d86c45a7bb599eaca13ff048d3fa576c
      Cc: stable@xxxxxxxxxxxxxxx
      Reported-by: Stephen Chandler Paul <cpaul@xxxxxxxxxx>
      Tested-by: Stephen Chandler Paul <cpaul@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit ed75a14eb554995c522a3b861d4c86a7eddb2ad7
  Author: Duson Lin <dusonlin@xxxxxxxxxx>
  Date:   Mon Sep 21 09:26:46 2015 -0700

      Input: elan_i2c - expand maximum product_id form 0xFF to 0xFFFF

      In order to support more projects in the future, we expand the
      maximum product_id value form 0xFF to 0xFFFF.

      Signed-off by: Duson Lin <dusonlin@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit c84333a1c55a2d3329e8b472f59e9d1ccf5ddc1b
  Author: Duson Lin <dusonlin@xxxxxxxxxx>
  Date:   Mon Sep 21 09:24:46 2015 -0700

      Input: elan_i2c - add ic type 0x03

      The 0x03 is valid 3000 serial ic type too.

      Signed-off-by: Duson Lin <dusonlin@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 9d7b03f863f2fc8bd80e83d3a2d7e521094d290e
  Author: Daniel Drake <drake@xxxxxxxxxxxx>
  Date:   Sat Sep 19 09:49:45 2015 -0700

      Input: elan_i2c - don't require known iap version

      The Asus X456UA has an ELAN1000 touchpad with IAP version 0xe.  This is
      unknown to elan_get_fwinfo() so driver probe fails and I am left with an
      unusable touchpad.

      However, the fwinfo is not required for general driver usage, it is only
      needed if the user decides to upload new firmware.

      Adjust the driver so that we do not abort probe when we encounter
      unexpected IAP version, but rather warn user that firmware update feature
      of the driver will not work.

      Signed-off-by: Daniel Drake <drake@xxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 7c014e35a018187462f2cd6c85259e080663ba2d
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Sep 6 14:17:17 2015 +0300

      iwlwifi: mvm: add debug print for d0i3 exit indication

      In order to verify d0i3 flow, add debug print to indicate
      d0i3 exit was completed (right after tx was re-enabled),
      along with the wakeup reasons.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 183edd8484fd375d0f6d5e73b071c21b17243424
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Tue Sep 1 14:16:00 2015 +0300

      iwlwifi: mvm: configure wowlan configuration only if connected

      Recent fw version added assert to make sure wowlan configuration
      is configured only when a station is connected.

      Change the driver behavior to pass this configuration only
      if we indeed have ap station id (i.e. connected).

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit ee6dbb29377f6055093cccefc0cd0ac2670b12b3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 2 14:53:39 2015 +0200

      iwlwifi: mvm: move RX API into its own file

      The RX API is currently mixed up into the general fw-api.h
      file, but we're going to need to extend it significantly in
      the future, so move it to its own file.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 2df5328e7853e33155312970036f05c27c189b71
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 2 14:47:16 2015 +0200

      iwlwifi: mvm: remove some unused defines from RX API

      Remove some unused values from the RX API; these were used
      with older firmware API that didn't have the RX energy API,
      support for which was removed a long time ago.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit abfd794c59c7cbfe31a5d1471e5868d4dbd74205
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 2 12:26:45 2015 +0200

      iwlwifi: mvm: remove pointless cfg_phy_cnt length check

      Since the driver can never configure the data here, this field
      will always be reported as 0 by the firmware. Even if this was
      not the case, however, it wouldn't matter since the extra data
      would be added beyond the end of the phy_info structure we use
      in the driver, so wouldn't harm anything in this code either.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 7f89a58efc0a18ec4a6eb7fdcf9ab73d426ce11f
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 2 11:51:23 2015 +0200

      iwlwifi: mvm: remove useless debug message from RX

      This message is useless - it's in the good case that always
      happens so enabling it doesn't really help. Just remove it.
      There are other ways to debug this (e.g. tracing) so there's
      no need to add a message in the bad case.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit da583fdfececf69571d3b8fafed278310592eec1
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Aug 26 15:55:04 2015 +0200

      iwlwifi: mvm: make sure AP is operating for ToF

      It's possible for an AP interface to be UP but not actually
      operating (i.e. not beaconing etc.) - in this case it can't
      actually do ToF, so check for it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 38d5f66f062a65bfc436013135a817e53037ccca
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 14:03:02 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_STATS_V10 TLV flag

      This flag is set in all supported firmwares.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 9d43fa4b4a0e46881d7d4fb3bc689a17d2f72257
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:57:37 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_ASYNC_DTM TLV flag

      This flag is set in all supported firmwares.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit eb991c5ec18ba41bfa2c206c22bceae94f6f3c15
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:55:11 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_SINGLE_SCAN_EBS TLV flag

      All the supported firmwares have this flag set.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 4d31eed13f2a2234e86aa178918e129b6e33a9ee
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:52:54 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_TX_POWER_DEV TLV flag

      All the supported firmwares use the new API.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 89ced540eb3527669bac0a3239a408fb1129f0dc
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:50:59 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_HDC_PHASE_0 TLV flag

      All the supported firwmares support the new API.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 97bce7e0b58dfc7d159ded329f57961868fb060b
  Author: Nicolas Iooss <nicolas.iooss_linux@xxxxxxx>
  Date:   Sun Sep 20 16:42:36 2015 +0200

      crypto: crc32c-pclmul - use .rodata instead of .rotata

      Module crc32c-intel uses a special read-only data section named .rotata.
      This section is defined for K_table, and its name seems to be a spelling
      mistake for .rodata.

      Fixes: 473946e674eb ("crypto: crc32c-pclmul - Shrink K_table to 32-bit 
words")
      Signed-off-by: Nicolas Iooss <nicolas.iooss_linux@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d23afa1abc54b5b7cb7c65f451378b5c0820bfe6
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Sep 18 14:57:11 2015 +0200

      crypto: sahara - replace sahara_sg_length with sg_nents_for_len

      The sahara_sg_length function of the sahara driver is the same
      as sg_nents_for_len from lib/scatterlist.c

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 76804eb846a413cd761f63ad6cdca1c8ca337678
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Sep 18 14:57:10 2015 +0200

      crypto: amcc - replace get_sg_count by sg_nents_for_len

      The get_sg_count function of amcc is the same as sg_nents_for_len from
      lib/scatterlist.c

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 1f6d79d7e011ff0b85feaecf0aed0b3949eaa1f2
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Sep 18 14:57:09 2015 +0200

      crypto: bfin_crc - replace sg_count by sg_nents

      The sg_count function in bfin_crc.c is the same function as sg_nents.
      Remove the duplicate code and use sg_nents() instead.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 09185e2756a83763bcbfe51b308b85979f0de027
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:42 2015 +0200

      hwrng: xgene - fix handling platform_get_irq

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 17762c5acee2f1f065291d2a74ebea4d0168063b
  Author: Conor McLoughlin <conor.mcloughlin@xxxxxxxxx>
  Date:   Fri Sep 18 08:59:47 2015 -0700

      crypto: qat - VF should never trigger SBR on PH

      Don't allow to trigger SBR from a VF running in VMM context.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Conor McLoughlin <conor.mcloughlin@xxxxxxxxx>
      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit cfcd2271a9076a9891014bc8e18d4fd48acccffe
  Author: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:25:36 2015 +0200

      crypto: marvell - properly handle CRYPTO_TFM_REQ_MAY_BACKLOG-flagged 
requests

      The mv_cesa_queue_req() function calls crypto_enqueue_request() to
      enqueue a request. In the normal case (i.e the queue isn't full), this
      function returns -EINPROGRESS. The current Marvell CESA crypto driver
      takes this into account and cleans up the request only if an error
      occured, i.e if the return value is not -EINPROGRESS.

      Unfortunately this causes problems with
      CRYPTO_TFM_REQ_MAY_BACKLOG-flagged requests. When such a request is
      passed to crypto_enqueue_request() and the queue is full,
      crypto_enqueue_request() will return -EBUSY, but will keep the request
      enqueued nonetheless. This situation was not properly handled by the
      Marvell CESA driver, which was anyway cleaning up the request in such
      a situation. When later on the request was taken out of the backlog
      and actually processed, a kernel crash occured due to the internal
      driver data structures for this structure having been cleaned up.

      To avoid this situation, this commit adds a
      mv_cesa_req_needs_cleanup() helper function which indicates if the
      request needs to be cleaned up or not after a call to
      crypto_enqueue_request(). This helper allows to do the cleanup only in
      the appropriate cases, and all call sites of mv_cesa_queue_req() are
      fixed to use this new helper function.

      Reported-by: Vincent Donnefort <vdonnefort@xxxxxxxxx>
      Fixes: db509a45339fd ("crypto: marvell/cesa - add TDMA support")
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2+
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Tested-by: Vincent Donnefort <vdonnefort@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit be6ec98ddb6749bba0fc7f67bd2f89a2396805de
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 16:35:53 2015 -0700

      crypto: x86/sha - Restructure x86 sha512 glue code to expose all the 
available sha512 transforms

      Restructure the x86 sha512 glue code so we will expose sha512 transforms
      based on SSSE3, AVX or AVX2 as separate individual drivers when cpu
      provides support. This will make it easy for alternative algorithms to
      be used if desired and makes the code cleaner and easier to maintain.

      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5dda42fc89f26fb3b6312076b17feda8c397d2b8
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 16:35:23 2015 -0700

      crypto: x86/sha - Restructure x86 sha256 glue code to expose all the 
available sha256 transforms

      Restructure the x86 sha256 glue code so we will expose sha256 transforms
      based on SSSE3, AVX, AVX2 or SHA-NI extension as separate individual
      drivers when cpu provides such support. This will make it easy for
      alternative algorithms to be used if desired and makes the code cleaner
      and easier to maintain.

      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 85c66ecd6f2144c075044292359e179b20af1f2d
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 16:34:53 2015 -0700

      crypto: x86/sha - Restructure x86 sha1 glue code to expose all the 
available sha1 transforms

      Restructure the x86 sha1 glue code so we will expose sha1 transforms based
      on SSSE3, AVX, AVX2 or SHA-NI extension as separate individual drivers
      when cpu provides such support. This will make it easy for alternative
      algorithms to be used if desired and makes the code cleaner and easier
      to maintain.

      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e38b6b7fcfd11fb83dcac54a33cbca3739c45a09
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:27:26 2015 -0700

      crypto: x86/sha - Add build support for Intel SHA Extensions optimized 
SHA1 and SHA256

      This patch provides the configuration and build support to
      include and build the optimized SHA1 and SHA256 update transforms
      for the kernel's crypto library.

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 95fca7df0b4964fbe3fe159e3d6e681e6b5b7a53
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:27:20 2015 -0700

      crypto: x86/sha - glue code for Intel SHA extensions optimized SHA1 & 
SHA256

      This patch adds the glue code to detect and utilize the Intel SHA
      extensions optimized SHA1 and SHA256 update transforms when available.

      This code has been tested on Broxton for functionality.

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 600a2334e83d22e5c3f7ff2581f545bfc354d206
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:27:13 2015 -0700

      crypto: x86/sha - Intel SHA Extensions optimized SHA256 transform function

      This patch includes the Intel SHA Extensions optimized implementation
      of SHA-256 update function. This function has been tested on Broxton
      platform and measured a speed up of 3.6x over the SSSE3 implementiation
      for 4K blocks.

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c356a7e975a25e8867961c1b7a4a965d506f0a04
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:26:59 2015 -0700

      crypto: x86/sha - Intel SHA Extensions optimized SHA1 transform function

      This patch includes the Intel SHA Extensions optimized implementation
      of SHA-1 update function. This function has been tested on Broxton
      platform and measured a speed up of 3.6x over the SSSE3 implementiation
      for 4K blocks.

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b8e31bf3083106e8530d6d5786e23b365b49b11b
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:57 2015 +0100

      MAINTAINERS: Add ST's Random Number Generator to the ST entry

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ba25d8b4011bc496afff65b2f28136aa141d7d6b
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:56 2015 +0100

      ARM: STi: STiH407: Enable the 2 HW Random Number Generators for STiH4{07, 
10}

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 4a4da53c408c9e1e545b60d2b07635d08a949c99
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:55 2015 +0100

      hwrng: st - Add support for ST's HW Random Number Generator

      Signed-off-by: Pankaj Dev <pankaj.dev@xxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Acked-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b4a5407ea82869bf947c8a1176984f80c30e25a6
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:54 2015 +0100

      hwrng: st - Provide DT bindings for ST's Random Number Generator

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d9a53b01404fa602117220e98bb6c9b2b63f1e7f
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:53 2015 +0100

      hwrng: core - Simplify RNG switching from sysfs

      If we attempt to use sysfs to change the current RNG in the usual
      way i.e. issuing something like:

      `echo 8a8a000.rng > /sys/devices/virtual/misc/hw_random/rng_current`

      ... it will fail because the code doesn't currently take the '\n'
      into consideration.  Well, now it does.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Acked-by: Peter Korsgaard <peter@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit cb2c316b22d89072643d2685ef0eb883cae8a9de
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:52 2015 +0100

      hwrng: Kconfig - Fix device node name reference /dev/hw_random => 
/dev/hwrng

      In April 2009, commit d405640 ("Driver Core: misc: add node name support
      for misc devices.") inadvertently changed the device node name from
      /dev/hw_random to /dev/hwrng.  Since 6 years has passed since the change
      it seems unpractical to change it back, as this node name is probably
      considered ABI by now.  So instead, we'll just change the Kconfig help
      to match the current situation.

      NB: It looks like rng-tools have already been updated.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Acked-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e9e23158f2f5a0992f27d367aa1f11ba12b0b54c
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:51 2015 +0100

      hwrng: doc - Fix device node name reference /dev/hw_random => /dev/hwrng

      In April 2009, commit d405640 ("Driver Core: misc: add node name support
      for misc devices.") inadvertently changed the device node name from
      /dev/hw_random to /dev/hwrng.  Since 6 years has passed since the change
      it seems unpractical to change it back, as this node name is probably
      considered ABI by now.  So instead, we'll just change the documentation
      to match the current situation.

      NB: It looks like rng-tools have already been updated.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Acked-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 4dd17c9c8a30c8d8cd1c9d4b94f08aca4b038d3e
  Author: sudip <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 17 13:12:51 2015 +0530

      crypto: asymmetric_keys - remove always false comparison

      hour, min and sec are unsigned int and they can never be less than zero.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 3cc43a0a5cea4fe2a2107e77500d6032b9bcafde
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Wed Sep 16 05:33:06 2015 -0700

      crypto: qat - Add load balancing across devices

      Load balancing of crypto instances only used a single device.
      There was no problem with that on PF, but since there is only
      one or two instance per VF we need to loadbalance across devices.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 859e58055a36e7a4948df614e3c5d872ef153f36
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:54:53 2015 -0300

      crypto: caam - Remove unused JUMP_TYPE_MASK definition

      Commit a1efb01feca597b ("jump_label, locking/static_keys: Rename
      JUMP_LABEL_TYPE_* and related helpers to the static_key* pattern")
      introduced the definition of JUMP_TYPE_MASK in
      include/linux/jump_label.h causing the following name collision:

      In file included from drivers/crypto/caam/desc_constr.h:7:0,
                       from drivers/crypto/caam/ctrl.c:15:
      drivers/crypto/caam/desc.h:1495:0: warning: "JUMP_TYPE_MASK" redefined
       #define JUMP_TYPE_MASK  (0x03 << JUMP_TYPE_SHIFT)
       ^
      In file included from include/linux/module.h:19:0,
                       from drivers/crypto/caam/compat.h:9,
                       from drivers/crypto/caam/ctrl.c:11:
      include/linux/jump_label.h:131:0: note: this is the location of the 
previous definition
       #define JUMP_TYPE_MASK 1UL

      As JUMP_TYPE_MASK definition in desc.h is never used, we can safely remove
      it to avoid the name collision.

      Reported-by: Olof's autobuilder <build@xxxxxxxxx>
      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Reviewed-by: Horia Geant? <horia.geanta@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5f8741d1bfa42b7e5443f2d2035de37bd5b73978
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 18:41:33 2015 +0200

      hwrng: Fix module autoload for OF platform drivers

      This platform drivers have a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 05db0ad8656376e341db6120758d04c247c9cf2f
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Sat Sep 12 20:19:53 2015 -0300

      hwrng: mxc-rnga - Use the preferred format for kzalloc

      According to Documentation/CodingStyle:

      "The preferred form for passing a size of a struct is the following:

        p = kmalloc(sizeof(*p), ...);"

      ,so do as suggested.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit eeb322540987d42a480cf8516fb88cda46347882
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Sat Sep 12 20:19:52 2015 -0300

      hwrng: mxc-rnga - Remove unnecessary dev_info message

      There is no need to print a message simply saying that a kernel
      driver has been registered, so remove it.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c09e2cc69441ef5d99d31aa83f7d2b6239e5b9a7
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Sat Sep 12 20:19:51 2015 -0300

      hwrng: mxc-rnga - Remove uneeded initialization

      There is no need to pre-initialize variable 'err' as this
      initial value will be overwritten later on.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 1bf2138e9806ea436933d5a803547833f9524c8f
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Sat Sep 12 20:19:50 2015 -0300

      hwrng: mxc-rnga - Remove unneeded goto label

      We can simplify the code by returning the error code immediately
      instead of jumping to a goto label.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 6c5de9871a4d43bba179c6a862eeb53b5232f996
  Author: John Griffin <john.griffin@xxxxxxxxx>
  Date:   Fri Sep 11 12:26:00 2015 -0700

      crypto: qat - don't check for iommu

      In some cases we don't want iommu to be enabled but still we want to 
enable VFs.

      Signed-off-by: John Griffin <john.griffin@xxxxxxxxx>
      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 04b7d704c6160fa4e8eeffc8540575fb15142f7f
  Author: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
  Date:   Thu Sep 10 11:32:26 2015 +0530

      hwrng: octeon - Use devm_hwrng_register

      Use resource managed function devm_hwrng_register instead of
      hwrng_register to make the error-path simpler. Also, remove
      octeon_rng_remove as it is now redundant.

      Signed-off-by: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit a2712e6c75f1e95b7c31830c19191e8fa367c15a
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Wed Sep 2 12:05:18 2015 -0300

      crypto: mxs-dcp - Allow MXS_DCP to be used on MX6SL

      MX6SL has the same DCP crypto block as in MX23/MX28, so allow it to be
      built for ARCH_MXC.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 53ed2d4e56c0e4749e3481475d3520275d9e67a5
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 18:44:49 2015 +0200

      crypto: ux500 - Fix module autoload for OF platform drivers

      These platform drivers have a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c3abc0f3b606a984f864452292c423f01e57c656
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 18:44:03 2015 +0200

      crypto: picoxcell - Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 3dc1597b6b0a8d17fc56d93b5e9cf859fe681727
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 18:43:24 2015 +0200

      crypto: amcc - Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f074f7b103a915edb1edf833f96a902adeb374cf
  Author: Horia Geant? <horia.geanta@xxxxxxxxxxxxx>
  Date:   Thu Aug 27 18:38:36 2015 +0300

      crypto: tcrypt - avoid mapping from module image addresses

      The output buffer in test_ahash_speed will point to an address located
      within the tcrypt module image.
      This causes problems when trying to DMA map the buffer.
      For e.g. on ARM-based LS1021A, a page fault occurs within the
      DMA API when trying to access the struct page returned by
      virt_to_page(output):

      insmod tcrypt.ko mode=403

      testing speed of async sha1 (sha1-caam)
      test  0 (   16 byte blocks,   16 bytes per update,   1 updates):
      Unable to handle kernel paging request at virtual address f07e9080
      pgd = e58d0e00
      [f07e9080] *pgd=80000080007003, *pmd=00000000
      Internal error: Oops: 206 [#1] SMP THUMB2
      Modules linked in: tcrypt(+)
      CPU: 1 PID: 1119 Comm: insmod Not tainted 4.2.0-rc1-256134-gbf433416e675 
#1
      Hardware name: Freescale LS1021A
      task: ea063900 ti: e5a34000 task.ti: e5a34000
      PC is at dma_cache_maint_page+0x38/0xd0
      LR is at __dma_page_cpu_to_dev+0x15/0x64
      pc : [<800155a0>]    lr : [<8001564d>]    psr: 000f0033
      sp : e5a35ca0  ip : 8063df00  fp : f07e9080
      r10: 00000cd0  r9 : 8063df00  r8 : 805a2f04
      r7 : 0017f804  r6 : 00000002  r5 : ee7f9000  r4 : 00000014
      r3 : 80612d40  r2 : 01ff0080  r1 : 00000380  r0 : ee7f9000
      Flags: nzcv  IRQs on  FIQs on  Mode SVC_32  ISA Thumb  Segment user
      Control: 70c5387d  Table: e58d0e00  DAC: 9b7ede70
      Process insmod (pid: 1119, stack limit = 0xe5a34210)
      Stack: (0xe5a35ca0 to 0xe5a36000)
      [...]
      [<800155a0>] (dma_cache_maint_page) from [<8001564d>] 
(__dma_page_cpu_to_dev+0x15/0x64)
      [<8001564d>] (__dma_page_cpu_to_dev) from [<800156eb>] 
(arm_dma_map_page+0x1f/0x44)
      [<800156eb>] (arm_dma_map_page) from [<802935e3>] 
(ahash_digest+0x35f/0x510)
      [<802935e3>] (ahash_digest) from [<7f800d03>] 
(test_ahash_speed.constprop.6+0x24a/0x4e4 [tcrypt])
      [<7f800d03>] (test_ahash_speed.constprop.6 [tcrypt]) from [<7f802fd5>] 
(do_test+0x1898/0x2058 [tcrypt])
      [<7f802fd5>] (do_test [tcrypt]) from [<7f80802f>] 
(tcrypt_mod_init+0x2e/0x63 [tcrypt])
      [<7f80802f>] (tcrypt_mod_init [tcrypt]) from [<80009517>] 
(do_one_initcall+0xb3/0x134)
      [<80009517>] (do_one_initcall) from [<80351ec7>] 
(do_init_module+0x3b/0x13c)
      [<80351ec7>] (do_init_module) from [<8005cc3f>] (load_module+0x97b/0x9dc)
      [<8005cc3f>] (load_module) from [<8005cd8d>] (SyS_finit_module+0x35/0x3e)
      [<8005cd8d>] (SyS_finit_module) from [<8000d101>] 
(ret_fast_syscall+0x1/0x4c)
      Code: 1aba 0152 eb00 0b02 (5882) 0f92

      addr2line -f -i -e vmlinux 800155a0
      page_zonenum
      include/linux/mm.h:728
      page_zone
      include/linux/mm.h:881
      dma_cache_maint_page
      arch/arm/mm/dma-mapping.c:822

      Signed-off-by: Horia Geant? <horia.geanta@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 93f13a9f96771a064c716364aebc6e283b186eb8
  Author: Borislav Petkov <bp@xxxxxxxxx>
  Date:   Mon Sep 21 09:48:29 2015 +0200

      x86/entry/vsyscall: Fix undefined symbol warning

      Commit:

        3dc33bd30f3e1 ("x86/entry/vsyscall: Add CONFIG to control default")

      did the ifdef/elif thing but GCC doesn't like that:

        arch/x86/entry/vsyscall/vsyscall_64.c:44:7: warning: 
"CONFIG_LEGACY_VSYSCALL_NONE" is not defined [-Wundef]
         #elif CONFIG_LEGACY_VSYSCALL_NONE
               ^

      Use defined() instead.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150921074829.GA3550@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 793b8bf9ca17aee3b995c095058e6c4e7bd72e02
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 21:21:50 2015 +1000

      powerpc: Wire up sys_membarrier()

      The selftest passes on 64-bit LE & BE, and 32-bit.

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 95d0be61286bcc3fc987043fe3a9553adca02919
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Tue Sep 15 06:04:36 2015 -0700

      drm/i915: fix kernel-doc warnings in intel_audio.c

      Fix the following 'make htmldocs' warnings:

        .//drivers/gpu/drm/i915/intel_audio.c:439: warning: No description 
found for parameter 'intel_encoder'
        .//drivers/gpu/drm/i915/intel_audio.c:439: warning: Excess function 
parameter 'encoder' description in 'intel_audio_codec_disable'
        .//drivers/gpu/drm/i915/intel_audio.c:439: warning: No description 
found for parameter 'intel_encoder'
        .//drivers/gpu/drm/i915/intel_audio.c:439: warning: Excess function 
parameter 'encoder' description in 'intel_audio_codec_disable'

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 6fa7da249269a6146ce456c43098901c81c8afdf
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Thu Aug 27 14:24:48 2015 +0200

      can: flexcan: enable interrupts atomically at the end of 
flexcan_chip_start()

      This patch defers the writing of the interrupts bits of the CTRL register 
order
      to enables all interrupts atomically at the the of the 
flexcan_chip_start()
      function.

      Suggested-by: Torsten Lang <torsten.lang@xxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 1ba763d1d4bda61bfb9b8e5154e6cf39a3e2d0e6
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Tue Aug 25 10:39:19 2015 +0200

      can: flexcan: give member of flexcan_priv holding mailboxes a sensible 
name

      This patch gives the member of flexcan_priv holding mailboxes a sensible 
name,
      by renaming from "cantxfg" to "mb":

          struct flexcan_priv::cantxfg -> struct flexcan_priv::mb

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 89af8746dea940c66f414866eed2a964a348dc09
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Fri May 8 09:32:58 2015 +0200

      can: flexcan: use pointer to struct regs instead of void pointer for mmio 
address space

      This patch renames the pointer to the mmio address space from "base" to 
"regs"
      and changes the type from "void __iomem *" to "struct flexcan_regs 
__iomem *".

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit f377bff0235708ded5f94e581855d6bd678cd2d1
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Fri May 8 15:22:36 2015 +0200

      can: flexcan: rename feature into quirks

      This patch renames the "features" member of struct flexcan_devtype_data to
      "quirks". The corresponding defines are renamed too, to reflect what they
      actually do.

          FLEXCAN_HAS_V10_FEATURES      -> FLEXCAN_QUIRK_DISABLE_RXFG
          FLEXCAN_HAS_BROKEN_ERR_STATE  -> FLEXCAN_QUIRK_BROKEN_ERR_STATE
          FLEXCAN_HAS_MECR_FEATURES     -> FLEXCAN_QUIRK_DISABLE_MECR

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 749de6fce2dd67b40f4118bf694be37f9093c3f5
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Mon Aug 31 21:32:34 2015 +0200

      can: flexcan: flexcan_chip_start(): cleanup writing of reg_mcr

      This patch changes the order the individual bits of the mcr register in
      flexcan_chip_start() are or'ed together to match the datasheet. The inline
      documentation is adjusted accordingly.

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 8c411745dd6ddbe745ee25cd1f6db856e920e7fa
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Sat May 9 18:25:05 2015 +0200

      can: flexcan: remove unused header files

      This patch removes unused header files from the flexcan driver.

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 2785968cd122b22b289db565b7438f2200984044
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Sat May 9 17:47:52 2015 +0200

      can: headers: make header files self contained

      This patch adds the missing #include-s to the dev.h and led.h, so that 
they can
      be used without including further header files.

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 0012e5c9315c33fe8d62cb8cb87a95484d7761c1
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Thu Aug 6 14:53:57 2015 +0200

      can: flexcan: cleanup coding style and fix typos

      This patch fixes up the coding style to make checkpatch happier. Some 
typos are
      also fixed.

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit f4513b065f7dbd37224226ef6e44b09eff742776
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Mon Aug 24 00:35:36 2015 +0200

      extcon: Fix attached value returned by is_extcon_changed

      is_extcon_changed should only check the idx-th bit of new, not
      the entirety of new when setting attached.

      This fixes extcon sending notifications that a cable was inserted when
      it gets removed while another cable is still connected.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>

  commit 1f770c0a09da855a2b51af6d19de97fb955eca85
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:16:50 2015 +0800

      netlink: Fix autobind race condition that leads to zero port ID

      The commit c0bb07df7d981e4091432754e30c9c720e2c0c78 ("netlink:
      Reset portid after netlink_insert failure") introduced a race
      condition where if two threads try to autobind the same socket
      one of them may end up with a zero port ID.  This led to kernel
      deadlocks that were observed by multiple people.

      This patch reverts that commit and instead fixes it by introducing
      a separte rhash_portid variable so that the real portid is only set
      after the socket has been successfully hashed.

      Fixes: c0bb07df7d98 ("netlink: Reset portid after netlink_insert failure")
      Reported-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca1c4b745779e20711322b3338f3a942a3c1224a
  Author: Dexuan Cui <decui@xxxxxxxxxxxxx>
  Date:   Thu Aug 13 17:07:03 2015 -0700

      Drivers: hv: vmbus: fix init_vp_index() for reloading hv_netvsc

      This fixes the recent commit 3b71107d73b16074afa7658f3f0fcf837aabfe24:
      Drivers: hv: vmbus: Further improve CPU affiliation logic

      Without the fix, reloading hv_netvsc hangs the guest.

      Signed-off-by: Dexuan Cui <decui@xxxxxxxxxxxxx>
      Signed-off-by: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 5964db08767fb93376c0a0ddcf975fec1c0d1bd9
  Author: Tomas Winkler <tomas.winkler@xxxxxxxxx>
  Date:   Mon Aug 24 15:27:37 2015 +0300

      mei: fix debugfs files leak on error path

      if dbgfs_dir is not set then debugfs_remove_recursive
      is not called on the error path

      Signed-off-by: Tomas Winkler <tomas.winkler@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 3ea79249e81e5ed051f2e6480cbde896d99046e8
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Fri Sep 18 13:41:09 2015 +0300

      macvtap: fix TUNSETSNDBUF values > 64k

      Upon TUNSETSNDBUF,  macvtap reads the requested sndbuf size into
      a local variable u.
      commit 39ec7de7092b ("macvtap: fix uninitialized access on
      TUNSETIFF") changed its type to u16 (which is the right thing to
      do for all other macvtap ioctls), breaking all values > 64k.

      The value of TUNSETSNDBUF is actually a signed 32 bit integer, so
      the right thing to do is to read it into an int.

      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Fixes: 39ec7de7092b ("macvtap: fix uninitialized access on TUNSETIFF")
      Reported-by: Mark A. Peloquin
      Bisected-by: Matthew Rosato <mjrosato@xxxxxxxxxxxxxxxxxx>
      Reported-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Tested-by:  Matthew Rosato <mjrosato@xxxxxxxxxxxxxxxxxx>
      Acked-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3afb1121800128aae9f5722e50097fcf1a9d4d88
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Fri Sep 18 17:33:04 2015 +0200

      KVM: x86: trap AMD MSRs for the TSeg base and mask

      These have roughly the same purpose as the SMRR, which we do not need
      to implement in KVM.  However, Linux accesses MSR_K8_TSEG_ADDR at
      boot, which causes problems when running a Xen dom0 under KVM.
      Just return 0, meaning that processor protection of SMRAM is not
      in effect.

      Reported-by: M A Young <m.a.young@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Acked-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 83cf9a2521b0934a5f9d04082c9bb4f554fddcd4
  Author: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
  Date:   Fri Sep 18 11:47:41 2015 +0200

      ip6tunnel: make rx/tx bytes counters consistent

      Like the previous patch, which fixes ipv4 tunnels, here is the ipv6 part.

      Before the patch, the external ipv6 header + gre header were included on
      tx.

      After the patch:
      $ ping -c1 192.168.6.121 ; ip -s l ls dev ip6gre1
      PING 192.168.6.121 (192.168.6.121) 56(84) bytes of data.
      64 bytes from 192.168.6.121: icmp_req=1 ttl=64 time=1.92 ms

      --- 192.168.6.121 ping statistics ---
      1 packets transmitted, 1 received, 0% packet loss, time 0ms
      rtt min/avg/max/mdev = 1.923/1.923/1.923/0.000 ms
      7: ip6gre1@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1440 qdisc noqueue 
state UNKNOWN mode DEFAULT group default
          link/gre6 20:01:06:60:30:08:c1:c3:00:00:00:00:00:00:01:23 peer 
20:01:06:60:30:08:c1:c3:00:00:00:00:00:00:01:21
          RX: bytes  packets  errors  dropped overrun mcast
          84         1        0       0       0       0
          TX: bytes  packets  errors  dropped carrier collsns
          84         1        0       0       0       0
      $ ping -c1 192.168.1.121 ; ip -s l ls dev ip6tnl1
      PING 192.168.1.121 (192.168.1.121) 56(84) bytes of data.
      64 bytes from 192.168.1.121: icmp_req=1 ttl=64 time=2.28 ms

      --- 192.168.1.121 ping statistics ---
      1 packets transmitted, 1 received, 0% packet loss, time 0ms
      rtt min/avg/max/mdev = 2.288/2.288/2.288/0.000 ms
      8: ip6tnl1@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1452 qdisc noqueue 
state UNKNOWN mode DEFAULT group default
          link/tunnel6 2001:660:3008:c1c3::123 peer 2001:660:3008:c1c3::121
          RX: bytes  packets  errors  dropped overrun mcast
          84         1        0       0       0       0
          TX: bytes  packets  errors  dropped carrier collsns
          84         1        0       0       0       0

      Signed-off-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bc22a0e2ea03b75b51a1f722f93821744b5b5ff1
  Author: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
  Date:   Fri Sep 18 11:47:40 2015 +0200

      iptunnel: make rx/tx bytes counters consistent

      This was already done a long time ago in
      commit 64194c31a0b6 ("inet: Make tunnel RX/TX byte counters more 
consistent")
      but tx path was broken (at least since 3.10).

      Before the patch the gre header was included on tx.

      After the patch:
      $ ping -c1 192.168.0.121 ; ip -s l ls dev gre1
      PING 192.168.0.121 (192.168.0.121) 56(84) bytes of data.
      64 bytes from 192.168.0.121: icmp_req=1 ttl=64 time=2.95 ms

      --- 192.168.0.121 ping statistics ---
      1 packets transmitted, 1 received, 0% packet loss, time 0ms
      rtt min/avg/max/mdev = 2.955/2.955/2.955/0.000 ms
      7: gre1@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1468 qdisc noqueue 
state UNKNOWN mode DEFAULT group default
          link/gre 10.16.0.249 peer 10.16.0.121
          RX: bytes  packets  errors  dropped overrun mcast
          84         1        0       0       0       0
          TX: bytes  packets  errors  dropped carrier collsns
          84         1        0       0       0       0

      Reported-by: Julien Meunier <julien.meunier@xxxxxxxxx>
      Signed-off-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac813744930d2af82d887ce1e51bcdb23a6c6805
  Merge: 4e3ae00 ad5001c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 22:32:20 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf

      Pablo Neira Ayuso says:

      ====================
      Netfilter fixes for net

      The following patch contains Netfilter fixes for your net tree, they are:

      1) nf_log_unregister() should only set to NULL the logger that is being
         unregistered, instead of everything else. Patch from Florian Westphal.

      2) Fix a crash when accessing physoutdev from PREROUTING in br_netfilter.
         This is partially reverting the patch to shrink nf_bridge_info to 32 
bytes.
         Also from Florian.

      3) Use existing match/target extensions in the internal nft_compat 
extension
         lists when the extension is family unspecific (ie. NFPROTO_UNSPEC).

      4) Wait for rcu grace period before leaving nf_log_unregister().
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e3ae00100945d39e1f83b7c0179a114ccf55759
  Author: Erik Hugne <erik.hugne@xxxxxxxxxxxx>
  Date:   Fri Sep 18 10:46:31 2015 +0200

      tipc: reinitialize pointer after skb linearize

      The msg pointer into header may change after skb linearization.
      We must reinitialize it after calling skb_linearize to prevent
      operating on a freed or invalid pointer.

      Signed-off-by: Erik Hugne <erik.hugne@xxxxxxxxxxxx>
      Reported-by: Tamás Végh <tamas.vegh@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aab0c0e62ec4af224d1b6b40fca65055d403400b
  Author: Kevin Hao <haokexin@xxxxxxxxx>
  Date:   Fri Sep 18 15:42:30 2015 +0800

      Revert "net/phy: Add Vitesse 8641 phy ID"

      This reverts commit 1298267b548a78840bd4b3e030993ff8747ca5e6.

      That commit claim that the Vitesse VSC8641 is compatible with Vitesse
      82xx. But this is not true. It seems that all the registers used
      in Vitesse phy driver are not compatible between 8641 and 82xx.
      It does cause malfunction of the Ethernet on p1010rdb-pa board.
      So we definitely need a rework in order to support the 8641 phy
      in this driver.

      Signed-off-by: Kevin Hao <haokexin@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1ef48e1e8843e2f6be631b8cf1c21b24579b9d6
  Merge: eaf9a99 f91638a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 22:26:58 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-17

      This series contains updates to i40e and i40evf.

      Shannon provides updates to i40e and i40evf to resolve an issue with the
      nvmupdate utility.  First renames a variable name to reduce confusion and
      to differentiate it from the actual user variable.  Then added the ability
      to save the admin queue write back descriptor if a caller supplies a
      buffer for it to be saved into.  Added a new GetStatus command so that
      the NVM update tool can query the current status instead of doing fake
      write requests to probe for readiness.  Added wait states to the NVM
      update state machine to signify when waiting for an update operation to
      finish, whether we are in the middle of a set of write operations, or we
      are now idle but waiting.  Then added a facility to run admin queue
      commands through the NVM update utility in order to allow the update
      tools to interact with the firmware and do special commands needed for
      updates and configuration changes.  Also added a facility to recover the
      result of a previously run admin queue command.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7a8a8e75d505147358b225173e890ada43a267e2
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 00:21:54 2015 +0100

      8139cp: Call __cp_set_rx_mode() from cp_tx_timeout()

      Unless we reset the RX config, on real hardware I don't seem to receive
      any packets after a TX timeout.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fc27bd115b334e3ebdc682a42a47c3aea2566dcc
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 00:19:08 2015 +0100

      8139cp: Use dev_kfree_skb_any() instead of dev_kfree_skb() in 
cp_clean_rings()

      This can be called from cp_tx_timeout() with interrupts disabled.
      Spotted by Francois Romieu <romieu@xxxxxxxxxxxxx>

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eaf9a992b75a0363f15e2d5f40e3ba820098c856
  Merge: 22a3f9a 0738eff
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 21:58:23 2015 -0700

      Merge tag 'linux-can-next-for-4.4-20150917' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next

      Marc Kleine-Budde says:

      ====================
      pull-request: can-next 2015-09-17

      this is a pull request of two patches for net-next/master.

      Gerhard Bertelsmann adds support for the CAN controller found on the
      Allwinner A10/A20 SoC.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 22a3f9a2043be28cde6d272e786874ba0d6afe15
  Author: Ksenija Stanojevic <ksenija.stanojevic@xxxxxxxxx>
  Date:   Thu Sep 17 18:12:53 2015 +0200

      rxrpc: Replace get_seconds with ktime_get_seconds

      Replace time_t type and get_seconds function which are not y2038 safe
      on 32-bit systems. Function ktime_get_seconds use monotonic instead of
      real time and therefore will not cause overflow.

      Signed-off-by: Ksenija Stanojevic <ksenija.stanojevic@xxxxxxxxx>
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0315e382704817b279e5693dca8ab9d89aa20b3f
  Author: Nikola Forró <nforro@xxxxxxxxxx>
  Date:   Thu Sep 17 16:01:32 2015 +0200

      net: Fix behaviour of unreachable, blackhole and prohibit routes

      Man page of ip-route(8) says following about route types:

        unreachable - these destinations are unreachable.  Packets are disâ??
        carded and the ICMP message host unreachable is generated.  The local
        senders get an EHOSTUNREACH error.

        blackhole - these destinations are unreachable.  Packets are disâ??
        carded silently.  The local senders get an EINVAL error.

        prohibit - these destinations are unreachable.  Packets are discarded
        and the ICMP message communication administratively prohibited is
        generated.  The local senders get an EACCES error.

      In the inet6 address family, this was correct, except the local senders
      got ENETUNREACH error instead of EHOSTUNREACH in case of unreachable 
route.
      In the inet address family, all three route types generated ICMP message
      net unreachable, and the local senders got ENETUNREACH error.

      In both address families all three route types now behave consistently
      with documentation.

      Signed-off-by: Nikola Forró <nforro@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 62e3b1d01c4ebbf11702a27e0c749d27195ba043
  Merge: 812494d b5996f1
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 21:42:58 2015 -0700

      Merge branch 'hsilicon-net-subsys'

      huangdaode says:

      ====================
      net: Hisilicon Network Subsystem support

      This is V2 of Hisilicon Network Subsystem(HNS) patchesets taking care
      about LKML comments.

      Please find out the changes from the change logs.
      This patchset is rebased on mainline kernel Linux 4.3-rc1 branch.

      [PATCH v2 1/5] Device Tree Binding Documentation
      [PATCH v2 2/5] Merge MDIO Module
      [PATCH v2 3/5] Hisilicon Network Acceleration Engine Framework
      [PATCH v2 4/5] Distributed System Area Fabric Module
      [PATCH v2 5/5] Basic Ethernet Driver Module

      Changes from V1:
      1. Remove "inline" in C file (according to LKML comment, same in below).
      2. Fix a bug about class_find_device.
      3. Change the DTS pattern on hnae, restruct it to compatible with Hi1610 
soc.
      4. Unified hip04_mdio and hip05_mdio into hns_mdio, which is more usaul 
for
         later SOCs.

      V1 Patches Reference: https://lkml.org/lkml/2015/8/14/165
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b5996f11ea5496d0445078f47d22c987888ed467
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:50 2015 +0800

      net: add Hisilicon Network Subsystem basic ethernet support

      This is to add basic ethernet support for HNS. It is one of the way to
      use the HNS acceleration engine. But most of the decoding/encoding
      capability of the AE cannot be used in this way.

      This submit contains the basic feature as a ethernet driver. More will
      be added later.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 511e6bc071db1484d1a3d1d0bd4c244cf33910ff
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:49 2015 +0800

      net: add Hisilicon Network Subsystem DSAF support

      DSAF, namely Distributed System Area Fabric, is one of the HNS
      acceleration engine implementation. This patch add DSAF driver to the
      system.

      hns_ae_adapt: the adaptor for registering the driver to HNAE framework
      hns_dsaf_mac: MAC cover interface for GE and XGE
      hns_dsaf_gmac: GE (10/100/1000G Ethernet) MAC function
      hns_dsaf_xgmac: XGE (10000+G Ethernet) MAC function
      hns_dsaf_main: the platform device driver for the whole hardware
      hns_dsaf_misc: some misc helper function, such as LED support
      hns_dsaf_ppe: packet process engine function
      hns_dsaf_rcb: ring buffer function

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6fe6611ff275522a4e4c0359e2f46cdd07780d2f
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:48 2015 +0800

      net: add Hisilicon Network Subsystem hnae framework support

      HNAE (Hisilicon Network Acceleration Engine) is a framework to provide a
      unified ring buffer interface for Hisilicon Network Acceleration
      Engines.

      With the interface, upper layer can work as ethernet driver, ODP driver
      or other service driver on purpose.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b904d39406a61c056c3fe1b45867f0161827ef1
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:47 2015 +0800

      net: add Hisilicon Network Subsystem MDIO support

      The MDIO support for Hisilicon Network Subsystem. It is used in Hislicon
      hip04, hip05 and Hi1610 SoC to control the external PHY

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fc7e37c6b2704fb0360f7ecf747d5d3012ef9632
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:46 2015 +0800

      net: add Hisilicon Network Subsystem support (config and documents)

      The Hisilicon Network Subsystem is a long term evolution IP which is
      supposed to be used in Hisilicon ICT SoC. The IP, which is called hns
      for short, is a TCP/IP acceleration engine, which can directly decode
      TCP/IP stream and distribute them to different ring buffers.

      HNS can be configured to work on different mode for different scenario.
      This patch make use only some of the mode to make it as standard
      ethernet NIC. The other mode will be added soon.

      The whole function has 4 kernel sub-modules:

      hnae: the HNS acceleration engine framework. It provides a abstract
      interface between the engine and the upper layers which make use of the
      engine by ring buffer.

      hns_enet_drv: a standard ethernet driver that base on the ring buffer.

      hns_dsaf: one of the implementation of HNS acceleration engine, which is
      applied on Hililicon hip05, Hi1610 and other later-on SoCs

      hns_mdio: the mdio control to the PHY, used by acceleration engine

      This submit add basic config and documents

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 812494d9a0cacf77e0a538be18183c7b471812aa
  Author: chas williams <3chas3@xxxxxxxxx>
  Date:   Wed Sep 16 16:28:25 2015 -0400

      xen-netfront: always set num queues if possible

      If netfront connects with two (or more) queues and then reconnects with
      only one queue it fails to delete or rewrite the multi-queue-num-queues
      key and netback will try to use the wrong number of queues.

      Always write the num-queues field if the backend has multi-queue support.

      Signed-off-by: Chas Williams <3chas3@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba5ca7848be05db6235aeb703586b821aa00e381
  Author: Ivan Vecera <ivecera@xxxxxxxxxx>
  Date:   Wed Sep 16 15:27:43 2015 +0200

      bna: check for dma mapping errors

      Check for DMA mapping errors, recover from them and register them in
      ethtool stats like other errors.

      Cc: Rasesh Mody <rasesh.mody@xxxxxxxxxx>
      Signed-off-by: Ivan Vecera <ivecera@xxxxxxxxxx>
      Acked-by: Rasesh Mody <rasesh.mody@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b74c458906fc4a62f932ee8bb801d29baf15fec
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 15:16:57 2015 -0700

      rcu: Make ->cpu_no_qs be a union for aggregate OR

      This commit converts the rcu_data structure's ->cpu_no_qs field
      to a union.  The bytewise side of this union allows individual access
      to indications as to whether this CPU needs to find a quiescent state
      for a normal (.norm) and/or expedited (.exp) grace period.  The setwise
      side of the union allows testing whether or not a quiescent state is
      needed at all, for either type of grace period.

      For now, only .norm is used.  A later commit will introduce the expedited
      usage.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 0d43eb34f9aabcddf41c99b7af2d0ced33e9a3cc
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 14:17:29 2015 -0700

      rcu: Invert passed_quiesce and rename to cpu_no_qs

      This commit inverts the sense of the rcu_data structure's ->passed_quiesce
      field and renames it to ->cpu_no_qs.  This will allow a later commit to
      use an "aggregate OR" operation to test expedited as well as normal grace
      periods without added overhead.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 97c668b8e983b722e2ed765b98b05f644aff1b13
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 11:31:51 2015 -0700

      rcu: Rename qs_pending to core_needs_qs

      An upcoming commit needs to invert the sense of the ->passed_quiesce
      rcu_data structure field, so this commit is taking this opportunity
      to clarify things a bit by renaming ->qs_pending to ->core_needs_qs.

      So if !rdp->core_needs_qs, then this CPU need not concern itself with
      quiescent states, in particular, it need not acquire its leaf rcu_node
      structure's ->lock to check.  Otherwise, it needs to report the next
      quiescent state.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit bce5fa12aad148e15efd9bc0015dc4898b6e723b
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Aug 5 16:03:54 2015 -0700

      rcu: Move synchronize_sched_expedited() to combining tree

      Currently, synchronize_sched_expedited() uses a single global counter
      to track the number of remaining context switches that the current
      expedited grace period must wait on.  This is problematic on large
      systems, where the resulting memory contention can be pathological.
      This commit therefore makes synchronize_sched_expedited() instead use
      the combining tree in the same manner as synchronize_rcu_expedited(),
      keeping memory contention down to a dull roar.

      This commit creates a temporary function sync_sched_exp_select_cpus()
      that is very similar to sync_rcu_exp_select_cpus().  A later commit
      will consolidate these two functions, which becomes possible when
      synchronize_sched_expedited() switches from stop_one_cpu_nowait() to
      smp_call_function_single().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 8203d6d0ee784cfb2ebf89053f7fe399abc867d7
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Aug 2 13:53:17 2015 -0700

      rcu: Use single-stage IPI algorithm for RCU expedited grace period

      The current preemptible-RCU expedited grace-period algorithm invokes
      synchronize_sched_expedited() to enqueue all tasks currently running
      in a preemptible-RCU read-side critical section, then waits for all the
      ->blkd_tasks lists to drain.  This works, but results in both an IPI and
      a double context switch even on CPUs that do not happen to be running
      in a preemptible RCU read-side critical section.

      This commit implements a new algorithm that causes less OS jitter.
      This new algorithm IPIs all online CPUs that are not idle (from an
      RCU perspective), but refrains from self-IPIs.  If a CPU receiving
      this IPI is not in a preemptible RCU read-side critical section (or
      is just now exiting one), it pushes quiescence up the rcu_node tree,
      otherwise, it sets a flag that will be handled by the upcoming outermost
      rcu_read_unlock(), which will then push quiescence up the tree.

      The expedited grace period must of course wait on any pre-existing blocked
      readers, and newly blocked readers must be queued carefully based on
      the state of both the normal and the expedited grace periods.  This
      new queueing approach also avoids the need to update boost state,
      courtesy of the fact that blocked tasks are no longer ever migrated to
      the root rcu_node structure.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit b9585e940a0d78770cda8f9aebf81b17b4d19e6d
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Jul 31 16:04:45 2015 -0700

      rcu: Consolidate tree setup for synchronize_rcu_expedited()

      This commit replaces sync_rcu_preempt_exp_init1(() and
      sync_rcu_preempt_exp_init2() with sync_exp_reset_tree_hotplug()
      and sync_exp_reset_tree(), which will also be used by
      synchronize_sched_expedited(), and sync_rcu_exp_select_nodes(), which
      contains code specific to synchronize_rcu_expedited().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 7922cd0e562cb2b8da2c8a0afda2e1c9bb4a94e2
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Jul 31 13:34:32 2015 -0700

      rcu: Move rcu_report_exp_rnp() to allow consolidation

      This is a nearly pure code-movement commit, moving rcu_report_exp_rnp(),
      sync_rcu_preempt_exp_done(), and rcu_preempted_readers_exp() so
      that later commits can make synchronize_sched_expedited() use them.
      The non-code-movement portion of this commit tags rcu_report_exp_rnp()
      as __maybe_unused to avoid build errors when CONFIG_PREEMPT=n.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit f4ecea309d3e17ba5e90082308125ad23bd5701b
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Jul 29 17:28:11 2015 -0700

      rcu: Use rsp->expedited_wq instead of sync_rcu_preempt_exp_wq

      Now that there is an ->expedited_wq waitqueue in each rcu_state structure,
      there is no need for the sync_rcu_preempt_exp_wq global variable.  This
      commit therefore substitutes ->expedited_wq for sync_rcu_preempt_exp_wq.
      It also initializes ->expedited_wq only once at boot instead of at the
      start of each expedited grace period.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 19a5ecde086a6a5287978b12ae948fa691b197b7
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 20 21:01:22 2015 -0700

      rcu: Suppress lockdep false positive for rcp->exp_funnel_mutex

      In kernels built with CONFIG_PREEMPT=y, synchronize_rcu_expedited()
      invokes synchronize_sched_expedited() while holding RCU-preempt's
      root rcu_node structure's ->exp_funnel_mutex, which is acquired after
      the rcu_data structure's ->exp_funnel_mutex.  The first thing that
      synchronize_sched_expedited() will do is acquire RCU-sched's rcu_data
      structure's ->exp_funnel_mutex.   There is no danger of an actual deadlock
      because the locking order is always from RCU-preempt's expedited mutexes
      to those of RCU-sched.  Unfortunately, lockdep considers both rcu_data
      structures' ->exp_funnel_mutex to be in the same lock class and therefore
      reports a deadlock cycle.

      This commit silences this false positive by placing RCU-sched's rcu_data
      structures' ->exp_funnel_mutex locks into their own lock class.

      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 66e8c57da6bf6b847a48a5a6fda59512f733ed78
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Tue Aug 25 20:45:18 2015 +0200

      rcu: Change _wait_rcu_gp() to work around GCC bug 67055

      Code like this in inline functions confuses some recent versions of gcc:

        const int n = const-expr;
        whatever_t array[n];

      For more details, see:

        https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67055#c13

      This compiler bug results in the following failure after 114b7fd4b (rcu:
      Create rcu_sync infrastructure):

        In file included from include/linux/rcupdate.h:429:0,
                          from include/linux/rcu_sync.h:5,
                          from kernel/rcu/sync.c:1:
        include/linux/rcutiny.h: In function 'rcu_barrier_sched':
        include/linux/rcutiny.h:55:20: internal compiler error: Segmentation 
fault
          static inline void rcu_barrier_sched(void)

      This commit therefore eliminates the constant local variable in favor of
      direct use of the expression.

      Reported-and-tested-by: Mark Salter <msalter@xxxxxxxxxx>
      Reported-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 2259f960b3a9b1020dccbf948c97311ce586db1b
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 20 13:30:30 2015 -0400

      NFSv4.x/pnfs: Don't try to recover stateids twice in layoutget

      If the current open or layout stateid doesn't match the stateid used
      in the layoutget RPC call, then don't try to recover it.

      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 24311f884189d42d40354a6f38ca218eb9aeb811
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 20 10:50:17 2015 -0400

      NFSv4: Recovery of recalled read delegations is broken

      When a read delegation is being recalled, and we're reclaiming the
      cached opens, we need to make sure that we only reclaim read-only
      modes.
      A previous attempt to do this, relied on retrieving the delegation
      type from the nfs4_opendata structure. Unfortunately, as Kinglong
      pointed out, this field can only be set when performing reboot recovery.

      Furthermore, if we call nfs4_open_recover(), then we end up clobbering
      the state->flags for all modes that we're not recovering...

      The fix is to have the delegation recall code pass this information
      to the recovery call, and then refactor the recovery code so that
      nfs4_open_delegation_recall() does not need to call nfs4_open_recover().

      Reported-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Fixes: 39f897fdbd46 ("NFSv4: When returning a delegation, don't...")
      Tested-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Cc: NeilBrown <neilb@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit f491e70ccffa5d19aa51c958909320fa1f3905ed
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 18:09:55 2015 +0200

      hwmon: (pwm-fan) Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit fe5152882a45a2545d44d39fe29badc8e4f66ad3
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 18:09:28 2015 +0200

      hwmon: (gpio-fan) Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 3245acbce952cda75b2fafa8e40452ef0c4756c1
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 18:09:11 2015 +0200

      hwmon: (abx500) Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit b7f76ea2ef6739ee484a165ffbac98deb855d3d3
  Author: Jann Horn <jann@xxxxxxxxx>
  Date:   Fri Sep 18 23:41:23 2015 +0200

      security: fix typo in security_task_prctl

      Signed-off-by: Jann Horn <jann@xxxxxxxxx>
      Reviewed-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3eb4ee68254235e4f47bc0410538fcdaede39589
  Author: Thomas Huth <thuth@xxxxxxxxxx>
  Date:   Fri Sep 18 08:57:28 2015 +0200

      KVM: PPC: Book3S: Take the kvm->srcu lock in 
kvmppc_h_logical_ci_load/store()

      Access to the kvm->buses (like with the kvm_io_bus_read() and -write()
      functions) has to be protected via the kvm->srcu lock.
      The kvmppc_h_logical_ci_load() and -store() functions are missing
      this lock so far, so let's add it there, too.
      This fixes the problem that the kernel reports "suspicious RCU usage"
      when lock debugging is enabled.

      Cc: stable@xxxxxxxxxxxxxxx # v4.1+
      Fixes: 99342cf8044420eebdf9297ca03a14cb6a7085a1
      Signed-off-by: Thomas Huth <thuth@xxxxxxxxxx>
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>

  commit 7e022e717f54897e396504306d0c9b61452adf4e
  Author: Gautham R. Shenoy <ego@xxxxxxxxxxxxxxxxxx>
  Date:   Thu May 21 13:57:04 2015 +0530

      KVM: PPC: Book3S HV: Pass the correct trap argument to kvmhv_commence_exit

      In guest_exit_cont we call kvmhv_commence_exit which expects the trap
      number as the argument. However r3 doesn't contain the trap number at
      this point and as a result we would be calling the function with a
      spurious trap number.

      Fix this by copying r12 into r3 before calling kvmhv_commence_exit as
      r12 contains the trap number.

      Cc: stable@xxxxxxxxxxxxxxx # v4.1+
      Fixes: eddb60fb1443
      Signed-off-by: Gautham R. Shenoy <ego@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>

  commit 5fc3e64f941197d5b77abccbe0144b25c2c36f2f
  Author: Paul Mackerras <paulus@xxxxxxxxx>
  Date:   Fri Sep 18 13:13:44 2015 +1000

      KVM: PPC: Book3S HV: Fix handling of interrupted VCPUs

      This fixes a bug which results in stale vcore pointers being left in
      the per-cpu preempted vcore lists when a VM is destroyed.  The result
      of the stale vcore pointers is usually either a crash or a lockup
      inside collect_piggybacks() when another VM is run.  A typical
      lockup message looks like:

      [  472.161074] NMI watchdog: BUG: soft lockup - CPU#24 stuck for 22s! 
[qemu-system-ppc:7039]
      [  472.161204] Modules linked in: kvm_hv kvm_pr kvm xt_CHECKSUM 
ipt_MASQUERADE nf_nat_masquerade_ipv4 tun ip6t_rpfilter ip6t_REJECT 
nf_reject_ipv6 xt_conntrack ebtable_nat ebtable_broute bridge stp llc 
ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 
nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter 
ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat 
nf_conntrack iptable_mangle iptable_security iptable_raw ses enclosure shpchp 
rtc_opal i2c_opal powernv_rng binfmt_misc dm_service_time scsi_dh_alua radeon 
i2c_algo_bit drm_kms_helper ttm drm tg3 ptp pps_core cxgb3 ipr i2c_core mdio 
dm_multipath [last unloaded: kvm_hv]
      [  472.162111] CPU: 24 PID: 7039 Comm: qemu-system-ppc Not tainted 
4.2.0-kvm+ #49
      [  472.162187] task: c000001e38512750 ti: c000001e41bfc000 task.ti: 
c000001e41bfc000
      [  472.162262] NIP: c00000000096b094 LR: c00000000096b08c CTR: 
c000000000111130
      [  472.162337] REGS: c000001e41bff520 TRAP: 0901   Not tainted  
(4.2.0-kvm+)
      [  472.162399] MSR: 9000000100009033 <SF,HV,EE,ME,IR,DR,RI,LE>  CR: 
24848844  XER: 00000000
      [  472.162588] CFAR: c00000000096b0ac SOFTE: 1
      GPR00: c000000000111170 c000001e41bff7a0 c00000000127df00 0000000000000001
      GPR04: 0000000000000003 0000000000000001 0000000000000000 0000000000874821
      GPR08: c000001e41bff8e0 0000000000000001 0000000000000000 d00000000efde740
      GPR12: c000000000111130 c00000000fdae400
      [  472.163053] NIP [c00000000096b094] _raw_spin_lock_irqsave+0xa4/0x130
      [  472.163117] LR [c00000000096b08c] _raw_spin_lock_irqsave+0x9c/0x130
      [  472.163179] Call Trace:
      [  472.163206] [c000001e41bff7a0] [c000001e41bff7f0] 0xc000001e41bff7f0 
(unreliable)
      [  472.163295] [c000001e41bff7e0] [c000000000111170] __wake_up+0x40/0x90
      [  472.163375] [c000001e41bff830] [d00000000efd6fc0] 
kvmppc_run_core+0x1240/0x1950 [kvm_hv]
      [  472.163465] [c000001e41bffa30] [d00000000efd8510] 
kvmppc_vcpu_run_hv+0x5a0/0xd90 [kvm_hv]
      [  472.163559] [c000001e41bffb70] [d00000000e9318a4] 
kvmppc_vcpu_run+0x44/0x60 [kvm]
      [  472.163653] [c000001e41bffba0] [d00000000e92e674] 
kvm_arch_vcpu_ioctl_run+0x64/0x170 [kvm]
      [  472.163745] [c000001e41bffbe0] [d00000000e9263a8] 
kvm_vcpu_ioctl+0x538/0x7b0 [kvm]
      [  472.163834] [c000001e41bffd40] [c0000000002d0f50] 
do_vfs_ioctl+0x480/0x7c0
      [  472.163910] [c000001e41bffde0] [c0000000002d1364] SyS_ioctl+0xd4/0xf0
      [  472.163986] [c000001e41bffe30] [c000000000009260] system_call+0x38/0xd0
      [  472.164060] Instruction dump:
      [  472.164098] ebc1fff0 ebe1fff8 7c0803a6 4e800020 60000000 60000000 
60420000 8bad02e2
      [  472.164224] 7fc3f378 4b6a57c1 60000000 7c210b78 <e92d0000> 89290009 
792affe3 40820070

      The bug is that kvmppc_run_vcpu does not correctly handle the case
      where a vcpu task receives a signal while its guest vcpu is executing
      in the guest as a result of being piggy-backed onto the execution of
      another vcore.  In that case we need to wait for the vcpu to finish
      executing inside the guest, and then remove this vcore from the
      preempted vcores list.  That way, we avoid leaving this vcpu's vcore
      on the preempted vcores list when the vcpu gets interrupted.

      Fixes: ec2571650826
      Reported-by: Thomas Huth <thuth@xxxxxxxxxx>
      Tested-by: Thomas Huth <thuth@xxxxxxxxxx>
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>

  commit a42fb351ca1f340f8307468be765e3f77ddedda9
  Author: Knuth Posern <knuth@xxxxxxxxxx>
  Date:   Sun Sep 20 21:25:22 2015 +0200

      thunderbolt: Allow loading of module on recent Apple MacBooks with 
thunderbolt 2 controller

      The pci device ids listed in the thunderbolt driver are to restrictive,
      which prevents the driver from being loaded on recent Apple MacBooks
      using a thunderbolt 2 controller. In particular this prevented any
      hot-plugging functionality for thunderbolt based ethernet dongles
      (i.e. Apples thunderbolt gigabit ethernet broadcom tg3 based dongle
      Model A1433 EMC 2590).

      Changing the subvendor and subdevice to PCI_ANY_ID the thunderbolt driver
      loads and binds to the pci device 07:00.0 System peripheral:
      Intel Corporation Device 156c which is the thunderbolt 2 controller on
      the MacBookPro12,1.

      Successfully tested on MacBookPro12,1. With the patch the thunderbolt
      module gets now loaded on boot. And it provides hot-plugging support both
      for a cold-plugged and a warm-plugged ethernet dongle.

      Signed-off-by: Andreas Noever <andreas.noever@xxxxxxxxx>
      Acked-by: Knuth Posern <knuth@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 1f93e4a96c9109378204c147b3eec0d0e8100fde
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 20 14:32:34 2015 -0700

      Linux 4.3-rc2

  commit 8714d46dc5b95a6a898ec8f1e67237c7995adfc6
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Sun Sep 20 23:04:22 2015 +0800

      NFS: Fix an infinite loop when layoutget fail with BAD_STATEID

      If layouget fail with BAD_STATEID, restart should not using the old 
stateid.
      But, nfs client choose the layout stateid at first, and then the open 
stateid.

      To avoid the infinite loop of using bad stateid for layoutget,
      this patch sets the layout flag'ss NFS_LAYOUT_INVALID_STID bit to
      skip choosing the bad layout stateid.

      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 6f29b9bba7b08c6b1d6f2cc4cf750b342fc1946c
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Sun Sep 20 23:03:28 2015 +0800

      NFS: Do cleanup before resetting pageio read/write to mds

      There is a reference leak of layout segment after resetting
      pageio read/write to mds.

      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.0+
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit e4877d64f00964d86a6e4a023011cccc73899018
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 20:23:34 2015 +0200

      x86/fpu/math-emu: Add support for FISTTP instructions

      These FPU instructions were added in SSE3-enabled CPUs.

      Run-tested by booting with "no387 nofxsr" and running test
      program:

        [RUN]   Testing fisttp instructions
        [OK]    fisttp

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442600614-28428-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a58e2ecd019d9ffb9f1813faf6151716fdecbae5
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Sun Sep 20 16:03:10 2015 +0200

      x86/fpu/math-emu, selftests: Add test for FISTTP instructions

        $ ./test_FISTTP_32
        [RUN]   Testing fisttp instructions
        [OK]    fisttp

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442757790-27233-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3dc33bd30f3e1c1bcaaafa3482737694debf0f0b
  Author: Kees Cook <keescook@xxxxxxxxxxxx>
  Date:   Wed Aug 12 17:55:19 2015 -0700

      x86/entry/vsyscall: Add CONFIG to control default

      Most modern systems can run with vsyscall=none. In an effort to
      provide a way for build-time defaults to lack legacy settings,
      this adds a new CONFIG to select the type of vsyscall mapping to
      use, similar to the existing "vsyscall" command line parameter.

      Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Acked-by: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150813005519.GA11696@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9a9d8642d03a7512f78cbe7ed6a2011fad3cbca3
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 16:53:30 2015 +0200

      x86/fpu/math-emu: Add support for FCMOVcc insns

      Run-tested by booting with "no387 nofxsr" and running test
      program:

        [RUN]   Testing fcmovCC instructions
        [OK]    fcmovCC

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442588010-20055-3-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b8e4a910e576961009a87d07f6b7eff67c5c2e34
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 16:53:29 2015 +0200

      x86/fpu/math-emu: Add support for F[U]COMI[P] insns

      Run-tested by booting with "no387 nofxsr" and running test
      program:

        [RUN]   Testing f[u]comi[p] instructions

        [OK]    f[u]comi[p]

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442588010-20055-2-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4aef363e48177d451b4d263c69dd2c86437e988b
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 16:53:28 2015 +0200

      x86/fpu/math-emu: Remove define layer for undocumented opcodes

      No code changes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442588010-20055-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 57ca6897cd134efd8914cc230f602abad431c7db
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Thu Sep 17 15:02:13 2015 +0200

      x86/fpu/math-emu, selftests: Add tests for FCMOV and FCOMI insns

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442494933-13798-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 97584d1838b7e2545c3b10aacef3327fcaa9531b
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:54 2015 +0100

      thermal: power_allocator: exit early if there are no cooling devices

      Don't waste cycles in the power allocator governor's throttle function
      if there are no cooling devices and exit early.

      This commit doesn't change any functionality, but should provide better
      performance for the odd case of a thermal zone with trip points but
      without cooling devices.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 99bc7215bc60f6cd414cf1b85cd9d52cc596cccb
  Merge: 30ec568 7ae85dc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 21:05:02 2015 -0700

      Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM fixes from Russell King:
       "Three fixes and a resulting cleanup for -rc2:

         - Andre Przywara reported that he was seeing a warning with the new
           cast inside DMA_ERROR_CODE's definition, and fixed the incorrect
           use.

         - Doug Anderson noticed that kgdb causes a "scheduling while atomic"
           bug.

         - OMAP5 folk noticed that their Thumb-2 compiled X servers crashed
           when enabling support to cover ARMv6 CPUs due to a kernel bug
           leaking some conditional context into the signal handler"

      * 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm:
        ARM: 8425/1: kgdb: Don't try to stop the machine when setting 
breakpoints
        ARM: 8437/1: dma-mapping: fix build warning with new DMA_ERROR_CODE 
definition
        ARM: get rid of needless #if in signal handling code
        ARM: fix Thumb2 signal handling when ARMv6 is enabled

  commit 30ec56824897fc70f668dcb302f08cc9080eadfa
  Merge: 009884f ae78581
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:57:45 2015 -0700

      Merge tag 'linux-kselftest-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest

      Pull kselftest fixes from Shuah Khan:
       "This update contains 7 fixes for problems ranging from build failurs
        to incorrect error reporting"

      * tag 'linux-kselftest-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest:
        selftests: exec: revert to default emit rule
        selftests: change install command to rsync
        selftests: mqueue: simplify the Makefile
        selftests: mqueue: allow extra cflags
        selftests: rename jump label to static_keys
        selftests/seccomp: add support for s390
        seltests/zram: fix syntax error

  commit 009884f384dcc71909f2b861c317da7242979f31
  Merge: d590b2d 0f40314
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:41:31 2015 -0700

      Merge tag 'pm+acpi-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull power management and ACPI updates from Rafael Wysocki:
       "Included are: a somewhat late devfreq update which however is mostly
        fixes and cleanups with one new thing only (the PPMUv2 support on
        Exynos5433), an ACPI cpufreq driver fixup and two ACPI core cleanups
        related to preprocessor directives.

        Specifics:

         - Fix a memory allocation size in the devfreq core (Xiaolong Ye).

         - Fix a mistake in the exynos-ppmu DT binding (Javier Martinez
           Canillas).

         - Add support for PPMUv2 ((Platform Performance Monitoring Unit
           version 2.0) on the Exynos5433 SoCs (Chanwoo Choi).

         - Fix a type casting bug in the Exynos PPMU code (MyungJoo Ham).

         - Assorted devfreq code cleanups and optimizations (Javi Merino,
           MyungJoo Ham, Viresh Kumar).

         - Fix up the ACPI cpufreq driver to use a more lightweight way to get
           to its private data in the ->get() callback (Rafael J Wysocki).

         - Fix a CONFIG_ prefix bug in one of the ACPI drivers and make the
           ACPI subsystem use IS_ENABLED() instead of #ifdefs in function
           bodies (Sudeep Holla)"

      * tag 'pm+acpi-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        cpufreq: acpi-cpufreq: Use cpufreq_cpu_get_raw() in ->get()
        ACPI: Eliminate CONFIG_.*{, _MODULE} #ifdef in favor of IS_ENABLED()
        ACPI: int340x_thermal: add missing CONFIG_ prefix
        PM / devfreq: Fix incorrect type issue.
        PM / devfreq: tegra: Update governor to use devfreq_update_stats()
        PM / devfreq: comments for get_dev_status usage updated
        PM / devfreq: drop comment about thermal setting max_freq
        PM / devfreq: cache the last call to get_dev_status()
        PM / devfreq: Drop unlikely before IS_ERR(_OR_NULL)
        PM / devfreq: exynos-ppmu: bit-wise operation bugfix.
        PM / devfreq: exynos-ppmu: Update documentation to support PPMUv2
        PM / devfreq: exynos-ppmu: Add the support of PPMUv2 for Exynos5433
        PM / devfreq: event: Remove incorrect property in exynos-ppmu DT binding

  commit d590b2d4bf61ab8d9ccaae033063eabe15699f9e
  Merge: e6827ba d34e210
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:17:40 2015 -0700

      Merge tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux

      Pull clk fixes from Stephen Boyd:
       "A few driver fixes for tegra, rockchip, and st SoCs and a two-liner in
        the framework to avoid oops when get_parent ops return out of range
        values on tegra platforms"

      * tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:
        drivers: clk: st: Rename st_pll3200c32_407_c0_x into st_pll3200c32_cx_x
        clk: check for invalid parent index of orphans in __clk_init()
        clk: tegra: dfll: Properly protect OPP list
        clk: rockchip: add critical clock for rk3368

  commit e6827bafd6b56fa25ec380840fe6f47e9a213fbe
  Merge: dc847d5 2338f73
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:10:30 2015 -0700

      Merge tag 'led-fixes-for-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds

      Pull LED fixes from Jacek Anaszewski:
       - fix module autoload for six OF platform drivers (aat1290, bcm6328,
         bcm6358, ktd2692, max77693, ns2)
       - aat1290: add missing static modifier
       - ipaq-micro: add missing LEDS_CLASS dependency
       - lp55xx: correct Kconfig dependecy for f/w user helper

      * tag 'led-fixes-for-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds:
        leds:lp55xx: Correct Kconfig dependency for f/w user helper
        leds: leds-ipaq-micro: Add LEDS_CLASS dependency
        leds: aat1290: add 'static' modifier to init_mm_current_scale
        leds: leds-ns2: Fix module autoload for OF platform driver
        leds: max77693: Fix module autoload for OF platform driver
        leds: ktd2692: Fix module autoload for OF platform driver
        leds: bcm6358: Fix module autoload for OF platform driver
        leds: bcm6328: Fix module autoload for OF platform driver
        leds: aat1290: Fix module autoload for OF platform driver

  commit dc847d5b4aa852c41b56c21bdc759fee13cc8f68
  Merge: 2673ee5 e116a64
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:04:11 2015 -0700

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull rdma fixes from Doug Ledford:
       "The new hfi1 driver in staging/rdma has had a number of fixup patches
        since being added to the tree.  This is the first batch of those fixes"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/hfi: Properly set permissions for user device files
        IB/hfi1: mask vs shift confusion
        IB/hfi1: clean up some defines
        IB/hfi1: info leak in get_ctxt_info()
        IB/hfi1: fix a locking bug
        IB/hfi1: checking for NULL instead of IS_ERR
        IB/hfi1: fix sdma_descq_cnt parameter parsing
        IB/hfi1: fix copy_to/from_user() error handling
        IB/hfi1: fix pstateinfo from returning improperly byteswapped value

  commit 2673ee565f10e0f2fdcf61f7a715e6b4ac2497dc
  Merge: 133bb59 ae4f976
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 19:13:03 2015 -0700

      Merge branch 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

      Pull libnvdimm fixes from Dan Williams:

       - a boot regression (since v4.2) fix for some ARM configurations from
         Tyler

       - regression (since v4.1) fixes for mkfs.xfs on a DAX enabled device
         from Jeff.  These are tagged for -stable.

       - a pair of locking fixes from Axel that are hidden from lockdep since
         they involve device_lock().  The "btt" one is tagged for -stable, the
         other only applies to the new "pfn" mechanism in v4.3.

       - a fix for the pmem ->rw_page() path to use wmb_pmem() from Ross.

      * 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        mm: fix type cast in __pfn_to_phys()
        pmem: add proper fencing to pmem_rw_page()
        libnvdimm: pfn_devs: Fix locking in namespace_store
        libnvdimm: btt_devs: Fix locking in namespace_store
        blockdev: don't set S_DAX for misaligned partitions
        dax: fix O_DIRECT I/O to the last block of a blockdev

  commit 133bb59585140747fd3938002670cb395f40dc76
  Merge: 590dca3 9945187
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 18:57:09 2015 -0700

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull block updates from Jens Axboe:
       "This is a bit bigger than it should be, but I could (did) not want to
        send it off last week due to both wanting extra testing, and expecting
        a fix for the bounce regression as well.  In any case, this contains:

         - Fix for the blk-merge.c compilation warning on gcc 5.x from me.

         - A set of back/front SG gap merge fixes, from me and from Sagi.
           This ensures that we honor SG gapping for integrity payloads as
           well.

         - Two small fixes for null_blk from Matias, fixing a leak and a
           capacity propagation issue.

         - A blkcg fix from Tejun, fixing a NULL dereference.

         - A fast clone optimization from Ming, fixing a performance
           regression since the arbitrarily sized bio's were introduced.

         - Also from Ming, a regression fix for bouncing IOs"

      * 'for-linus' of git://git.kernel.dk/linux-block:
        block: fix bounce_end_io
        block: blk-merge: fast-clone bio when splitting rw bios
        block: blkg_destroy_all() should clear q->root_blkg and ->root_rl.blkg
        block: Copy a user iovec if it includes gaps
        block: Refuse adding appending a gapped integrity page to a bio
        block: Refuse request/bio merges with gaps in the integrity payload
        block: Check for gaps on front and back merges
        null_blk: fix wrong capacity when bs is not 512 bytes
        null_blk: fix memory leak on cleanup
        block: fix bogus compiler warnings in blk-merge.c

  commit 590dca3a71875461e8fea3013af74386945191b2
  Author: Chris Mason <clm@xxxxxx>
  Date:   Fri Sep 18 13:35:08 2015 -0400

      fs-writeback: unplug before cond_resched in writeback_sb_inodes

      Commit 505a666ee3fc ("writeback: plug writeback in wb_writeback() and
      writeback_inodes_wb()") has us holding a plug during writeback_sb_inodes,
      which increases the merge rate when relatively contiguous small files
      are written by the filesystem.  It helps both on flash and spindles.

      For an fs_mark workload creating 4K files in parallel across 8 drives,
      this commit improves performance ~9% more by unplugging before calling
      cond_resched().  cond_resched() doesn't trigger an implicit unplug, so
      explicitly getting the IO down to the device before scheduling reduces
      latencies for anyone waiting on clean pages.

      It also cuts down on how often we use kblockd to unplug, which means
      less work bouncing from one workqueue to another.

      Many more details about how we got here:

        https://lkml.org/lkml/2015/9/11/570

      Signed-off-by: Chris Mason <clm@xxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 4b0ab51db32eba0f48b7618254742f143364a28d
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 09:52:07 2015 -0400

      SUNRPC: xs_sock_mark_closed() does not need to trigger socket autoclose

      Under all conditions, it should be quite sufficient just to mark
      the socket as disconnected. It will then be closed by the
      transport shutdown or reconnect code.

      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 79234c3db6842a3de03817211d891e0c2878f756
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 15:53:24 2015 -0400

      SUNRPC: Lock the transport layer on shutdown

      Avoid all races with the connect/disconnect handlers by taking the
      transport lock.

      Reported-by:"Suzuki K. Poulose" <suzuki.poulose@xxxxxxx>
      Acked-by: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 002801fc5372ecb725f0d7939f88ca752ce1d499
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:37:55 2015 -0700

      Input: imx6ul_tsc - fix controller name

      We should better write "Touchscreen".

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 5eab3cf3e48cf658f3432e8ba31436d5a4f6a219
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:37:31 2015 -0700

      Input: imx6ul_tsc - use the preferred method for kzalloc()

      According to Documentation/CodingStyle:

      "The preferred form for passing a size of a struct is the following:

        p = kmalloc(sizeof(*p), ...);"

      so do as suggested.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 3905de62b2624a4574776b3b7ddfa97758b75edc
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:37:08 2015 -0700

      Input: imx6ul_tsc - check for negative return value

      We should check for negative values returned by platform_get_irq().

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 6cc527b05847984990a09ef028b2f670bbc72c46
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:36:35 2015 -0700

      Input: imx6ul_tsc - propagate the errors

      imx6ul_adc_init() may fail in two cases, so we should better
      propagate the errors and make sure that the callers of
      this function also check and propagate the errors accordingly.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 46b018fa95003f8159f5fcf9b8cd89acaea34e31
  Author: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
  Date:   Sat Sep 5 10:19:38 2015 -0700

      Input: walkera0701 - fix abs() calculations on 64 bit values

      abs() function can not be used with 64 bit values, so let's switch to
      abs64(). From include/linux/kernel.h:

      /*
       * abs() handles unsigned and signed longs, ints, shorts and chars.
       * For all input types abs() returns a signed long.
       * abs() should not be used for 64-bit types (s64, u64, long long)
       * - use abs64() for those.
       */

      Reported-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 86a39bffc4e94f80527c14fe00a3acb432910ef3
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:38:39 2015 -0700

      Input: mms114 - remove unneded semicolons

      They aren't needed and are just creating null statements so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit b9ab471b71900ca8a670ecf4f1cc65b626953655
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:38:31 2015 -0700

      Input: pm8941-pwrkey - remove unneded semicolon

      It's not needed and is just creating a null statement so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit b1452723cf23c908eed2bf6baf0c23943eb0e8bf
  Author: Daniel Martin <daniel.martin@xxxxxxxxxxx>
  Date:   Sat Sep 19 11:27:19 2015 -0700

      Input: fix typo in MT documentation

      Section "Event Computation" had this:
          ...
          ABS_MT_TOOL_X := C_X
          ABS_MT_TOOL_X := C_Y

      Replace the second ABS_MT_TOOL_X with ABS_MT_TOOL_Y.

      Signed-off-by: Daniel Martin <consume.noise@xxxxxxxxx>
      Acked-by: Benjamin Tissoires <benjamin.tissoires@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit b0379d7aa415249ce1dab8dd2554f8845d6822ab
  Author: Dudley Du <dudl@xxxxxxxxxxx>
  Date:   Sat Sep 19 10:39:32 2015 -0700

      Input: cyapa - fix address of Gen3 devices in device tree documentation

      All of the Gen3 touchpads are fixed with I2C address 0x67, so correct the
      reg value description from 0x24 to 0x67.

      Signed-off-by: Dudley Du <dudl@xxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 5b64c173cdea21105eb4794487b3d593f0a2e6c3
  Author: Adam Thomson <Adam.Thomson.Opensource@xxxxxxxxxxx>
  Date:   Wed Sep 16 10:13:19 2015 +0100

      ASoC: fsl_ssi: Fix checking of dai format for AC97 mode

      Current code incorrectly treats dai format for AC97 as bit mask
      whereas it's actually an integer value. This causes DAI formats
      other than AC97 (e.g. DSP_B) to trigger AC97 related code,
      which is incorrect and breaks functionality. This patch fixes
      the code to correctly compare values to determine AC97 or not.

      Signed-off-by: Adam Thomson <Adam.Thomson.Opensource@xxxxxxxxxxx>
      Acked-by: Timur Tabi <timur@xxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit f072f91aa7517386344476813ca0799e08fd0c35
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Fri Sep 18 16:02:21 2015 +0530

      ASoC: wm0010: fix error path

      Fix the error path so that we can free the allocated memory on the error
      path instead of releasing them individually on each error.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 2ace47be5a315def8f493ca77aa59c077ade30a1
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Fri Sep 18 16:02:20 2015 +0530

      ASoC: wm0010: fix memory leak

      We have requested for the firmware but we have missed releasing it both
      on success and on error path.
      While checking the code it turned out that the requested firmware is not
      even used. More over the same firmware is being loaded by
      wm0010_stage2_load().

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit c9e97b3cb2b80deb94c092a2022a6d385b838d84
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:42:17 2015 +0200

      spi: meson: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 7209fee89f435b69051bb6bffe7f191336ac2a5e
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:09:51 2015 +0200

      regulator: vexpress: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 2f9481e7dc0d3aacbaa07701f3ee2527f5d48301
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:09:24 2015 +0200

      regulator: gpio: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit d702ffd4d1df73b9c620af1654af42ff5b8d5c09
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:09:07 2015 +0200

      regulator: anatop: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 8524bb0c7ac688a3cd6ba12dae6104c54d0566b9
  Author: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:19:43 2015 +0800

      ASoC: wm8960: correct the max register value of mic boost pga

      the max register value of mic boost pga should be 3.

      Signed-off-by: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit ee92cfb030c16ddb01f6543968f13bcb61ed9da5
  Author: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:19:25 2015 +0800

      ASoC: wm8962: remove 64k sample rate support

      wm8962 can't support 64k sample rate. When playing a 64KHz wave file,
      'Unsupported rate 64000Hz' will be prompted.

      Signed-off-by: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 9ae3109d1d9ff367e0d0efa7073cc078edb9a372
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Sat Sep 19 07:31:47 2015 -0700

      regmap: debugfs: Remove scratch buffer for register length calculation

      Now we no longer use the scratch buffer for register length calculation
      there is no need for callers to supply one.

      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 176fc2d5770a0990eebff903ba680d2edd32e718
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Sat Sep 19 07:12:34 2015 -0700

      regmap: debugfs: Don't bother actually printing when calculating max 
length

      The in kernel snprintf() will conveniently return the actual length of
      the printed string even if not given an output beffer at all so just do
      that rather than relying on the user to pass in a suitable buffer,
      ensuring that we don't need to worry if the buffer was truncated due to
      the size of the buffer passed in.

      Reported-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit b763ec17ac762470eec5be8ebcc43e4f8b2c2b82
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Sat Sep 19 07:00:18 2015 -0700

      regmap: debugfs: Ensure we don't underflow when printing access masks

      If a read is attempted which is smaller than the line length then we may
      underflow the subtraction we're doing with the unsigned size_t type so
      move some of the calculation to be additions on the right hand side
      instead in order to avoid this.

      Reported-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit ae4f976968896f8f41b3a7aa21be6146492211e5
  Author: Tyler Baker <tyler.baker@xxxxxxxxxx>
  Date:   Sat Sep 19 03:58:10 2015 -0400

      mm: fix type cast in __pfn_to_phys()

      The various definitions of __pfn_to_phys() have been consolidated to
      use a generic macro in include/asm-generic/memory_model.h. This hit
      mainline in the form of 012dcef3f058 "mm: move __phys_to_pfn and
      __pfn_to_phys to asm/generic/memory_model.h". When the generic macro
      was implemented the type cast to phys_addr_t was dropped which caused
      boot regressions on ARM platforms with more than 4GB of memory and
      LPAE enabled.

      It was suggested to use PFN_PHYS() defined in include/linux/pfn.h
      as provides the correct logic and avoids further duplication.

      Reported-by: kernelci.org bot <bot@xxxxxxxxxxxx>
      Suggested-by: Dan Williams <dan.j.williams@xxxxxxxxx>
      Signed-off-by: Tyler Baker <tyler.baker@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 0f40314b81b765c26202cde33523e35809adbe9b
  Merge: 7dc1d36 bcb2b0b
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Sep 18 23:07:46 2015 +0200

      Merge branch 'acpi-bus'

      * acpi-bus:
        ACPI: Eliminate CONFIG_.*{, _MODULE} #ifdef in favor of IS_ENABLED()
        ACPI: int340x_thermal: add missing CONFIG_ prefix

  commit 7dc1d36e8ef8f78f9dadf0476081f3c7ff7f79be
  Merge: 6ff33f3 1f0bd44 4184a8f
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Sep 18 23:05:28 2015 +0200

      Merge branches 'pm-cpufreq' and 'pm-devfreq'

      * pm-cpufreq:
        cpufreq: acpi-cpufreq: Use cpufreq_cpu_get_raw() in ->get()

      * pm-devfreq:
        PM / devfreq: Fix incorrect type issue.
        PM / devfreq: tegra: Update governor to use devfreq_update_stats()
        PM / devfreq: comments for get_dev_status usage updated
        PM / devfreq: drop comment about thermal setting max_freq
        PM / devfreq: cache the last call to get_dev_status()
        PM / devfreq: Drop unlikely before IS_ERR(_OR_NULL)
        PM / devfreq: exynos-ppmu: bit-wise operation bugfix.
        PM / devfreq: exynos-ppmu: Update documentation to support PPMUv2
        PM / devfreq: exynos-ppmu: Add the support of PPMUv2 for Exynos5433
        PM / devfreq: event: Remove incorrect property in exynos-ppmu DT binding

  commit 0a031ac5c00d091ce1f7007f22d5881620bf0a7e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:08 2015 -0500

      netfilter: Use nf_ct_net instead of dev_net(out) in nf_nat_masquerade_ipv6

      Use nf_ct_net(ct) instead of guessing that the netdevice out can
      reliably report the network namespace the conntrack operation is
      happening in.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit c7af6483b9f7f3eaba01b2e62d3d8a70cd89bdaf
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:07 2015 -0500

      netfilter: Pass net into nf_xfrm_me_harder

      Instead of calling dev_net on a likley looking network device
      pass state->net into nf_xfrm_me_harder.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 06198b34a3e09e06d9aecaa3727e0d37206cea77
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:06 2015 -0500

      netfilter: Pass priv instead of nf_hook_ops to netfilter hooks

      Only pass the void *priv parameter out of the nf_hook_ops.  That is
      all any of the functions are interested now, and by limiting what is
      passed it becomes simpler to change implementation details.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 176971b33859135d8dbda9b79e16cb1cf615eb92
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:05 2015 -0500

      ipvs: Read hooknum from state rather than ops->hooknum

      This should be more cache efficient as state is more likely to be in
      core, and the netfilter core will stop passing in ops soon.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit a31f1adc0948930fba9ab5a111ccd735a5d864c6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:04 2015 -0500

      netfilter: nf_conntrack: Add a struct net parameter to l4_pkt_to_tuple

      As gre does not have the srckey in the packet gre_pkt_to_tuple
      needs to perform a lookup in it's per network namespace tables.

      Pass in the proper network namespace to all pkt_to_tuple
      implementations to ensure gre (and any similar protocols) can get this
      right.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit a4ffe319ae72034e3f3332698a2fd83b6f063b18
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:03 2015 -0500

      act_connmark: Remember the struct net instead of guessing it.

      Stop guessing the struct net instead of remember it.  Guessing is just
      silly and will be problematic in the future when I implement routes
      between network namespaces.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 206e8c00752fbe9cc463184236ac64b2a532cda5
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:02 2015 -0500

      netfilter: Pass net to nf_dup_ipv4 and nf_dup_ipv6

      This allows them to stop guessing the network namespace with pick_net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 88182a0e0c665cbd2f01af743c7f88e494924246
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:01 2015 -0500

      netfilter: nf_tables: Use pkt->net instead of computing net from the 
passed net_devices

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 46448d0093ba18a212e314fd9ea029e740baa476
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:00 2015 -0500

      netfilter: nf_tables: Pass struct net in nft_pktinfo

      nft_pktinfo is passed on the stack so this does not bloat any in core
      data structures.

      By centrally computing this information this makes maintence of the code
      simpler, and understading of the code easier.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 686c9b50809dc80cba7c2e9f809471ab40bae735
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:59 2015 -0500

      netfilter: x_tables: Use par->net instead of computing from the passed 
net devices

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 156c196f6038610770588a708b9e0f7df2ead74a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:58 2015 -0500

      netfilter: x_tables: Pass struct net in xt_action_param

      As xt_action_param lives on the stack this does not bloat any
      persistent data structures.

      This is a first step in making netfilter code that needs to know
      which network namespace it is executing in simpler.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6aa187f21ca2d8ade791f01fd8fab908b1f27673
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:57 2015 -0500

      netfilter: nf_tables: kill nft_pktinfo.ops

      - Add nft_pktinfo.pf to replace ops->pf
      - Add nft_pktinfo.hook to replace ops->hooknum

      This simplifies the code, makes it more readable, and likely reduces
      cache line misses.  Maintainability is enhanced as the details of
      nft_hook_ops are of no concern to the recpients of nft_pktinfo.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 082a758f042e1c1eb241bfc2308ddc2b4ef6840d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:56 2015 -0500

      inet netfilter: Prefer state->hook to ops->hooknum

      The values of nf_hook_state.hook and nf_hook_ops.hooknum must be the
      same by definition.

      We are more likely to access the fields in nf_hook_state over the
      fields in nf_hook_ops so with a little luck this results in
      fewer cache line misses, and slightly more consistent code.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6cb8ff3f1a535b1d8eb5ea318932513d08eb3da7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:55 2015 -0500

      inet netfilter: Remove hook from ip6t_do_table, arp_do_table, ipt_do_table

      The values of ops->hooknum and state->hook are guaraneted to be equal
      making the hook argument to ip6t_do_table, arp_do_table, and
      ipt_do_table is unnecessary. Remove the unnecessary hook argument.

      In the callers use state->hook instead of ops->hooknum for clarity and
      to reduce the number of cachelines the callers touch.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 97b59c3a91d5ee4777658ff2136d1fdf13bd23d0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:54 2015 -0500

      netfilter: ebtables: Simplify the arguments to ebt_do_table

      Nearly everything thing of interest to ebt_do_table is already present
      in nf_hook_state.  Simplify ebt_do_table by just passing in the skb,
      nf_hook_state, and the table.  This make the code easier to read and
      maintenance easier.

      To support this create an nf_hook_state on the stack in ebt_broute
      (the only caller without a nf_hook_state already available).  This new
      nf_hook_state adds no new computations to ebt_broute, but does use a
      few more bytes of stack.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 36aea585a1103b8c2a1de04637b8a4326b92c254
  Merge: 47bbbb3 4e47809
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 21:03:32 2015 +0200

      Merge tag 'ipvs-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next

      Simon Horman says:

      ====================
      IPVS Updates for v4.4

      please consider these IPVS Updates for v4.4.

      The updates include the following from Alex Gartrell:
      * Scheduling of ICMP
      * Sysctl to ignore tunneled packets; and hence some packet-looping 
scenarios
      ====================

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit ea9346514e77951e194f6db0205866f8478753f4
  Merge: 74a0939 8315b77
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 09:56:08 2015 -0700

      Merge tag 'usb-ci-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/peter.chen/usb into usb-linus

      Peter writes:

      USB Chipidea fixes for v4.3-rc2

      - Fix the stall implementation
      - Fix device mode transfer at zynq platform
      - other small fixes

  commit 00ade1f553e3b947cd26228392ee47d6f0f550e1
  Merge: 3ae8394 ad2aa04
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 09:28:20 2015 -0700

      Merge tag 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost

      Pull virtio fixes and cleanups from Michael Tsirkin:
       "This fixes the virtio-test tool, and improves the error handling for
        virtio-ccw"

      * tag 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost:
        virtio/s390: handle failures of READ_VQ_CONF ccw
        tools/virtio: propagate V=X to kernel build
        vhost: move features to core
        tools/virtio: fix build after 4.2 changes

  commit 3ae839454e77cdc87d499a4bfd0932dec5763b55
  Merge: fadb97b 00cc163
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 09:23:08 2015 -0700

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM fixes from Paolo Bonzini:
       "Mostly stable material, a lot of ARM fixes"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm: (22 
commits)
        sched: access local runqueue directly in single_task_running
        arm/arm64: KVM: Remove 'config KVM_ARM_MAX_VCPUS'
        arm64: KVM: Remove all traces of the ThumbEE registers
        arm: KVM: Disable virtual timer even if the guest is not using it
        arm64: KVM: Disable virtual timer even if the guest is not using it
        arm/arm64: KVM: vgic: Check for !irqchip_in_kernel() when mapping 
resources
        KVM: s390: Replace incorrect atomic_or with atomic_andnot
        arm: KVM: Fix incorrect device to IPA mapping
        arm64: KVM: Fix user access for debug registers
        KVM: vmx: fix VPID is 0000H in non-root operation
        KVM: add halt_attempted_poll to VCPU stats
        kvm: fix zero length mmio searching
        kvm: fix double free for fast mmio eventfd
        kvm: factor out core eventfd assign/deassign logic
        kvm: don't try to register to KVM_FAST_MMIO_BUS for non mmio eventfd
        KVM: make the declaration of functions within 80 characters
        KVM: arm64: add workaround for Cortex-A57 erratum #852523
        KVM: fix polling for guest halt continued even if disable it
        arm/arm64: KVM: Fix PSCI affinity info return value for non valid cores
        arm64: KVM: set {v,}TCR_EL2 RES1 bits
        ...

  commit 381c02f6d8ccad8ed574630f879c40fb59715124
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Wed Sep 16 18:18:49 2015 +0100

      perf record: Avoid infinite loop at buildid processing with no samples

      If a session contains no events, we can get stuck in an infinite loop in
      __perf_session__process_events, with a non-zero file_size and 
data_offset, but
      a zero data_size.

      In this case, we can mmap the entirety of the file (consisting of the 
file and
      attribute headers), and fetch_mmaped_event will correctly refuse to read 
any
      (unmapped and non-existent) event headers. This causes
      __perf_session__process_events to unmap the file and retry with the exact 
same
      parameters, getting stuck in an infinite loop.

      This has been observed to result in an exit-time hang when counting
      rare/unschedulable events with perf record, and can be triggered 
artificially
      with the script below:

        ----
        #!/bin/sh
        printf "REPRO: launching perf\n";
        ./perf record -e software/config=9/ sleep 1 &
        PERF_PID=$!;
        sleep 0.002;
        kill -2 $PERF_PID;
        printf "REPRO: waiting for perf (%d) to exit...\n" "$PERF_PID";
        wait $PERF_PID;
        printf "REPRO: perf exited\n";
        ----

      To avoid this, have __perf_session__process_events bail out early when
      the file has no data (i.e. it has no events).

      Commiter note:

      I only managed to reproduce this when setting
      /proc/sys/kernel/kptr_restrict to '1' and changing the code to
      purposefully not process any samples and no synthesized samples, i.e.
      kptr_restrict prevents 'record' from synthesizing the kernel mmaps for
      vmlinux + modules and since it is a workload started from perf, we don't
      synthesize mmap/comm records for existing threads.

      Adrian Hunter managed to reproduce it in his environment tho.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Tested-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442423929-12253-1-git-send-email-mark.rutland@xxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e116a64fab650aed3d7b9b4db0b59c07f361bc9f
  Author: Ira Weiny <ira.weiny@xxxxxxxxx>
  Date:   Thu Sep 17 13:47:49 2015 -0400

      IB/hfi: Properly set permissions for user device files

      Some of the device files are required to be user accessible for PSM while
      most should remain accessible only by root.

      Add a parameter to hfi1_cdev_init which controls if the user should have 
access
      to this device which places it in a different class with the appropriate
      devnode callback.

      In addition set the devnode call back for the existing class to be a bit 
more
      explicit for those permissions.

      Finally remove the unnecessary null check before class_destroy

      Tested-by: Donald Dutile <ddutile@xxxxxxxxxx>
      Signed-off-by: Haralanov, Mitko (mitko.haralanov@xxxxxxxxx)
      Signed-off-by: Ira Weiny <ira.weiny@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 7d630467d7c454d801d72b58f242c373a64e39ed
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 19:03:45 2015 +0300

      IB/hfi1: mask vs shift confusion

      We are shifting by the _MASK macros instead of the _SHIFT ones.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3f2686a2665b4d06753b602fe394b5d87bc7f279
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 19:02:54 2015 +0300

      IB/hfi1: clean up some defines

      I added spaces around operators so it matches kernel style because
      normally "-1ULL" is a number and " - 1" is a subtract operation.  Also
      removed some superflous "ULL" types so "1ULL" becomes "1".

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit ebe6b2e8bc2cd06a330b3f9be8a4fa3ff44ab026
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 09:42:25 2015 +0300

      IB/hfi1: info leak in get_ctxt_info()

      The cinfo struct has a hole after the last struct member so we need to
      zero it out.  Otherwise we disclose some uninitialized stack data.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 951842b0540d2ed49ae29ba968adc496baf46556
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 09:22:51 2015 +0300

      IB/hfi1: fix a locking bug

      mutex_trylock() returns zero on failure, not EBUSY.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 50b19729ced72cfa8bb1c44fed9203f395f13991
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 09:22:20 2015 +0300

      IB/hfi1: checking for NULL instead of IS_ERR

      __get_txreq() returns an ERR_PTR() but this checks for NULL so it would
      oops on failure.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit aeef010a0f63ad0a6f993d3da30753e9a8a39ec5
  Author: Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
  Date:   Tue Sep 15 10:19:27 2015 -0400

      IB/hfi1: fix sdma_descq_cnt parameter parsing

      The boolean tests should have been or-ed.

      Reported-by: David Binderman <dcb314@xxxxxxxxxxx>
      Reviewed-by: Jubin John <jubin.john@xxxxxxxxx>
      Signed-off-by: Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit e1df0068a24ba56673183cc3bd392d8bc301d423
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Tue Sep 15 13:35:25 2015 +0300

      IB/hfi1: fix copy_to/from_user() error handling

      copy_to/from_user() returns the number of bytes which we were not able
      to copy.  It doesn't return an error code.

      Also a couple places had a printk() on error and I removed that because
      people can take advantage of it to fill /var/log/messages with spam.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit aadfc3b2042d69a6b4b8d719d4221b988d7f31a5
  Author: Ira Weiny <ira.weiny@xxxxxxxxx>
  Date:   Wed Sep 9 01:28:21 2015 -0400

      IB/hfi1: fix pstateinfo from returning improperly byteswapped value

      Byteswap link_width_downgrade_*_active values before sending on the wire. 
 In
      addition properly define the Port State Info structure.

      Reviewed-by: Dennis Dalessandro <dennis.dalessandro@xxxxxxxxx>
      Reviewed-by: Christian Gomez <christian.gomez@xxxxxxxxx>
      Signed-off-by: Rimmer, Todd <todd.rimmer@xxxxxxxxx>
      Signed-off-by: Ira Weiny <ira.weiny@xxxxxxxxx>
      Acked-by: Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit ab1fffe3a73c694d698645451ba61255ec4ba5e6
  Author: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
  Date:   Fri Sep 18 15:02:50 2015 +0300

      ASoC: davinci-mcasp: Fix devm_kasprintf format string

      The '\n' at the end of the format string is not needed. It adds an extra
      line break when doing
      cat /proc/interrupts

      Signed-off-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit fadb97b089563da69ba326f9fea6399d071462b2
  Merge: 09784fb ae80a2f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 08:11:42 2015 -0700

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq updates from Thomas Gleixner:
       "This is a rather large update post rc1 due to the final steps of
        cleanups and API changes which had to wait for the preparatory patches
        to hit your tree.

         - Regression fixes for ARM GIC irqchips

         - Regression fixes and lockdep anotations for renesas irq chips

         - The leftovers of the cleanup and preparatory patches which have
           been ignored by maintainers

         - Final conversions of the newly merged users of obsolete APIs

         - Final removal of obsolete APIs

         - Final removal of ARM artifacts which had been introduced during the
           conversion of ARM to the generic interrupt code.

         - Final split of the irq_data into chip specific and common data to
           reflect the needs of hierarchical irq domains.

         - Treewide removal of the first argument of interrupt flow handlers,
           i.e. the irq number, which is not used by the majority of handlers
           and simple to retrieve from the other argument the irq descriptor.

         - A few comment updates and build warning fixes"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (40 commits)
        arm64: Remove ununsed set_irq_flags
        ARM: Remove ununsed set_irq_flags
        sh: Kill off set_irq_flags usage
        irqchip: Kill off set_irq_flags usage
        gpu/drm: Kill off set_irq_flags usage
        genirq: Remove irq argument from irq flow handlers
        genirq: Move field 'msi_desc' from irq_data into irq_common_data
        genirq: Move field 'affinity' from irq_data into irq_common_data
        genirq: Move field 'handler_data' from irq_data into irq_common_data
        genirq: Move field 'node' from irq_data into irq_common_data
        irqchip/gic-v3: Use IRQD_FORWARDED_TO_VCPU flag
        irqchip/gic: Use IRQD_FORWARDED_TO_VCPU flag
        genirq: Provide IRQD_FORWARDED_TO_VCPU status flag
        genirq: Simplify irq_data_to_desc()
        genirq: Remove __irq_set_handler_locked()
        pinctrl/pistachio: Use irq_set_handler_locked
        gpio: vf610: Use irq_set_handler_locked
        powerpc/mpc8xx: Use irq_set_handler_locked()
        powerpc/ipic: Use irq_set_handler_locked()
        powerpc/cpm2: Use irq_set_handler_locked()
        ...

  commit 09784fb8ef79f5c5adb9c1b4d0df000354e476e7
  Merge: f240bdd 590f078
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 08:06:28 2015 -0700

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fix from Thomas Gleixner:
       "A single regression fix for the x86 dma allocator which got wreckaged
        in the merge window"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/pci/dma: Fix gfp flags for coherent DMA memory allocation

  commit f240bdd2a5b7d523ecced64c855ee2c1499f2854
  Merge: a7d5c18 400c47d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 08:01:06 2015 -0700

      Merge tag 'powerpc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixes from Michael Ellerman:

       - Fix 32-bit TCE table init in kdump kernel from Nish

       - Fix kdump with non-power-of-2 crashkernel= from Nish

       - Abort cxl_pci_enable_device_hook() if PCI channel is offline from
         Andrew

       - Fix to release DRC when configure_connector() fails from Bharata

       - Wire up sys_userfaultfd()

       - Fix race condition in tearing down MSI interrupts from Paul

       - Fix unbalanced pci_dev_get() in cxl_probe() from Daniel

       - Fix cxl build failure due to -Wunused-variable gcc behaviour change
         from Ian

       - Tell the toolchain to use ABI v2 when building an LE boot wrapper
         from Benh

       - Fix THP to recompute hash value after a failed update from Aneesh

       - 32-bit memcpy/memset: only use dcbz once cache is enabled from
         Christophe

      * tag 'powerpc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc32: memset: only use dcbz once cache is enabled
        powerpc32: memcpy: only use dcbz once cache is enabled
        powerpc/mm: Recompute hash value after a failed update
        powerpc/boot: Specify ABI v2 when building an LE boot wrapper
        cxl: Fix build failure due to -Wunused-variable behaviour change
        cxl: Fix unbalanced pci_dev_get in cxl_probe
        powerpc/MSI: Fix race condition in tearing down MSI interrupts
        powerpc: Wire up sys_userfaultfd()
        powerpc/pseries: Release DRC when configure_connector fails
        cxl: abort cxl_pci_enable_device_hook() if PCI channel is offline
        powerpc/powernv/pci-ioda: fix kdump with non-power-of-2 crashkernel=
        powerpc/powernv/pci-ioda: fix 32-bit TCE table init in kdump kernel

  commit ebae871a509d3c24b32ff67af2671dadffc58770
  Author: Igor Mammedov <imammedo@xxxxxxxxxx>
  Date:   Fri Sep 18 15:39:05 2015 +0200

      kvm: svm: reset mmu on VCPU reset

      When INIT/SIPI sequence is sent to VCPU which before that
      was in use by OS, VMRUN might fail with:

       KVM: entry failed, hardware error 0xffffffff
       EAX=00000000 EBX=00000000 ECX=00000000 EDX=000006d3
       ESI=00000000 EDI=00000000 EBP=00000000 ESP=00000000
       EIP=00000000 EFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
       ES =0000 00000000 0000ffff 00009300
       CS =9a00 0009a000 0000ffff 00009a00
       [...]
       CR0=60000010 CR2=b6f3e000 CR3=01942000 CR4=000007e0
       [...]
       EFER=0000000000000000

      with corresponding SVM error:
       KVM: FAILED VMRUN WITH VMCB:
       [...]
       cpl:            0                efer:         0000000000001000
       cr0:            0000000080010010 cr2:          00007fd7fe85bf90
       cr3:            0000000187d0c000 cr4:          0000000000000020
       [...]

      What happens is that VCPU state right after offlinig:
      CR0: 0x80050033  EFER: 0xd01  CR4: 0x7e0
        -> long mode with CR3 pointing to longmode page tables

      and when VCPU gets INIT/SIPI following transition happens
      CR0: 0 -> 0x60000010 EFER: 0x0  CR4: 0x7e0
        -> paging disabled with stale CR3

      However SVM under the hood puts VCPU in Paged Real Mode*
      which effectively translates CR0 0x60000010 -> 80010010 after

         svm_vcpu_reset()
             -> init_vmcb()
                 -> kvm_set_cr0()
                     -> svm_set_cr0()

      but from  kvm_set_cr0() perspective CR0: 0 -> 0x60000010
      only caching bits are changed and
      commit d81135a57aa6
       ("KVM: x86: do not reset mmu if CR0.CD and CR0.NW are changed")'
      regressed svm_vcpu_reset() which relied on MMU being reset.

      As result VMRUN after svm_vcpu_reset() tries to run
      VCPU in Paged Real Mode with stale MMU context (longmode page tables),
      which causes some AMD CPUs** to bail out with VMEXIT_INVALID.

      Fix issue by unconditionally resetting MMU context
      at init_vmcb() time.

        * AMD64 Architecture Programmer�s Manual,
            Volume 2: System Programming, rev: 3.25
              15.19 Paged Real Mode
        ** Opteron 1216

      Signed-off-by: Igor Mammedov <imammedo@xxxxxxxxxx>
      Fixes: d81135a57aa6
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 00cc1633816de8c95f337608a1ea64e228faf771
  Author: Dominik Dingel <dingel@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 11:27:45 2015 +0200

      sched: access local runqueue directly in single_task_running

      Commit 2ee507c47293 ("sched: Add function single_task_running to let a 
task
      check if it is the only task running on a cpu") referenced the current
      runqueue with the smp_processor_id.  When CONFIG_DEBUG_PREEMPT is enabled,
      that is only allowed if preemption is disabled or the currrent task is
      bound to the local cpu (e.g. kernel worker).

      With commit f78195129963 ("kvm: add halt_poll_ns module parameter") KVM
      calls single_task_running. If CONFIG_DEBUG_PREEMPT is enabled that
      generates a lot of kernel messages.

      To avoid adding preemption in that cases, as it would limit the 
usefulness,
      we change single_task_running to access directly the cpu local runqueue.

      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Suggested-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Acked-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: 2ee507c472939db4b146d545352b8a7c79ef47f8
      Signed-off-by: Dominik Dingel <dingel@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 977108f89c989b1eeb5c8d938e1e71913391eb5f
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Sep 17 18:30:36 2015 +0200

      s390: wire up separate socketcalls system calls

      As discussed on linux-arch all architectures should wire up the separate
      system calls that are hidden behind the socketcall multiplexer system 
call.

      It's just a couple more system calls and gives us a very small performance
      improvement.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 7681df456f97f21fb70f184702696d644e273d73
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Sep 17 18:30:35 2015 +0200

      s390/compat: remove superfluous compat wrappers

      A couple of compat wrapper functions are simply trampolines to the real
      system call. This happened because the compat wrapper defines will only
      sign and zero extend system call parameters which are of different size
      on s390/s390x (longs and pointers).
      All other parameters will be correctly sign and zero extended by the
      normal system call wrappers.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit a55b2ae78cfecaa5ce0384c05211606372b9496c
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Sep 17 18:30:34 2015 +0200

      s390/compat: do not trace compat wrapper functions

      Add notrace to the compat wrapper define to disable tracing of compat
      wrapper functions. These are supposed to be very small and more or less
      just a trampoline to the real system call.

      Also fix indentation.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 6818375e974aa8659c3d2b1bf4b660a2a7929077
  Author: Szymon Janc <ext.szymon.janc@xxxxxxxxx>
  Date:   Wed Sep 16 20:21:54 2015 +0200

      Bluetooth: Fix reporting incorrect EIR in device found mgmt event

      Some remote devices (ie Gigaset G-Tag) misbehave with ADV data length.
      This can lead to incorrect EIR format in device found event when
      ADV_DATA and SCAN_RSP are merged (terminator field before SCAN_RSP
      part).

      Fix this by inspecting ADV_DATA and correct its length if terminator
      is found.

      > HCI Event: LE Meta Event (0x3e) plen 42              [hci0] 32.172182
            LE Advertising Report (0x02)
              Num reports: 1
              Event type: Connectable undirected - ADV_IND (0x00)
              Address type: Public (0x00)
              Address: 7C:2F:80:94:97:5A (Gigaset Communications GmbH)
              Data length: 30
              Flags: 0x06
                LE General Discoverable Mode
                BR/EDR Not Supported
              Company: Gigaset Communications GmbH (384)
                Data: 021512348094975abbc5
              16-bit Service UUIDs (partial): 1 entry
                Battery Service (0x180f)
              RSSI: -65 dBm (0xbf)
      > HCI Event: LE Meta Event (0x3e) plen 27              [hci0] 32.172191
            LE Advertising Report (0x02)
              Num reports: 1
              Event type: Scan response - SCAN_RSP (0x04)
              Address type: Public (0x00)
              Address: 7C:2F:80:94:97:5A (Gigaset Communications GmbH)
              Data length: 15
              Name (complete): Gigaset G-tag
              RSSI: -59 dBm (0xc5)

      Note "Data length: 30" in ADV_DATA which results in 9 extra zero bytes
      after Battery Service UUID. Terminator field present in the middle of
      EIR in Device Found event resulted in userspace stop parsing EIR and
      skipping device name.

      @ Device Found: 7C:2F:80:94:97:5A (1) rssi -59 flags 0x0000
            02 01 06 0d ff 80 01 02 15 12 34 80 94 97 5a bb  ..........4...Z.
            c5 03 02 0f 18 00 00 00 00 00 00 00 00 00 0e 09  ................
            47 69 67 61 73 65 74 20 47 2d 74 61 67           Gigaset G-tag

      With this fix EIR with merged ADV_DATA and SCAN_RSP in device found
      event is properly formatted:

      @ Device Found: 7C:2F:80:94:97:5A (1) rssi -59 flags 0x0000
            02 01 06 0d ff 80 01 02 15 12 34 80 94 97 5a bb  ..........4...Z.
            c5 03 02 0f 18 0e 09 47 69 67 61 73 65 74 20 47  .......Gigaset G
            2d 74 61 67                                      -tag

      Signed-off-by: Szymon Janc <ext.szymon.janc@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e781b7f7fcc141d69f63d4eef70d249549dfaeda
  Author: Szymon Janc <ext.szymon.janc@xxxxxxxxx>
  Date:   Wed Sep 16 20:21:53 2015 +0200

      Bluetooth: Add BT_ERR_RATELIMITED

      This patch adds ratelimited version of the BT_ERR macro.

      Signed-off-by: Szymon Janc <ext.szymon.janc@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c25be94f2870bf75552a41ad8b15f756e19ffb1d
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Wed Sep 16 20:23:29 2015 +0200

      x86/asm/entry/32, selftests: Add 'test_syscall_vdso' test

      This new test checks that all x86 registers are preserved across
      32-bit syscalls. It tests syscalls through VDSO (if available)
      and through INT 0x80, normally and under ptrace.

      If kernel is a 64-bit one, high registers (r8..r15) are poisoned
      before the syscall is called and are checked afterwards.

      They must be either preserved, or cleared to zero (but r11 is
      special); r12..15 must be preserved for INT 0x80.

      EFLAGS is checked for changes too, but change there is not
      considered to be a bug (paravirt kernels do not preserve
      arithmetic flags).

      Run-tested on 64-bit kernel:

        $ ./test_syscall_vdso_32
        [RUN]   Executing 6-argument 32-bit syscall via VDSO
        [OK]    Arguments are preserved across syscall
        [NOTE]  R11 has changed:0000000000200ed7 - assuming clobbered by
        SYSRET insn [OK]        R8..R15 did not leak kernel data
        [RUN]   Executing 6-argument 32-bit syscall via INT 80
        [OK]    Arguments are preserved across syscall
        [OK]    R8..R15 did not leak kernel data
        [RUN]   Running tests under ptrace
        [RUN]   Executing 6-argument 32-bit syscall via VDSO
        [OK]    Arguments are preserved across syscall
        [OK]    R8..R15 did not leak kernel data
        [RUN]   Executing 6-argument 32-bit syscall via INT 80
        [OK]    Arguments are preserved across syscall
        [OK]    R8..R15 did not leak kernel data

      On 32-bit paravirt kernel:

        $ ./test_syscall_vdso_32
        [NOTE]  Not a 64-bit kernel, won't test R8..R15 leaks
        [RUN]   Executing 6-argument 32-bit syscall via VDSO
        [WARN]  Flags before=0000000000200ed7 id 0 00 o d i s z 0 a 0 p 1 c
        [WARN]  Flags  after=0000000000200246 id 0 00 i z 0 0 p 1
        [WARN]  Flags change=0000000000000c91 0 00 o d s 0 a 0 0 c
        [OK]    Arguments are preserved across syscall
        [RUN]   Executing 6-argument 32-bit syscall via INT 80
        [OK]    Arguments are preserved across syscall
        [RUN]   Running tests under ptrace
        [RUN]   Executing 6-argument 32-bit syscall via VDSO
        [OK]    Arguments are preserved across syscall
        [RUN]   Executing 6-argument 32-bit syscall via INT 80
        [OK]    Arguments are preserved across syscall

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Acked-by: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Will Drewry <wad@xxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442427809-2027-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e904cf6fe23022cde4e0ea9d41601411a315a3dc
  Author: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
  Date:   Sun Sep 6 13:09:01 2015 +0200

      ath9k_htc: introduce support for different fw versions

      Current kernel support only one fw name with theoretically only one
      fw version located in â??firmware/htc_[9271|7010].fwâ??. Which is ok so 
far we
      have only one fw version (1.3). After we realised new fw 1.4, we faced
      compatibility problem which was decided to solve by firmware name and
      location:
      - new firmware is located now in
        firmware/ath9k_htc/htc_[9271|7010]-1.4.0.fw
      - old version 1.3 should be on old place, so old kernel have no issues
        with it.
      - new kernels including this patch should be able to try different
        supported (min..max) fw version.
      - new kernel should be able to support old fw location too. At least for
        now.

      At same time this patch will add new module option which should allow user
      to play with development  fw version without replacing stable one. If user
      will set â??ath9k_htc use_dev_fw=1â?? module will try to find
      firmware/ath9k_htc/htc_[9271|7010]-1.dev.0.fw first and if it fails, use
      stable version: for example...1.4.0.fw.

      Signed-off-by: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 93edc8bd7750ff3cae088bfca453ea73dc9004a4
  Author: Waiman Long <Waiman.Long@xxxxxxx>
  Date:   Fri Sep 11 14:37:34 2015 -0400

      locking/pvqspinlock: Kick the PV CPU unconditionally when _Q_SLOW_VAL

      If _Q_SLOW_VAL has been set, the vCPU state must have been vcpu_hashed.
      The extra check at the end of __pv_queued_spin_unlock() is unnecessary
      and can be removed.

      Signed-off-by: Waiman Long <Waiman.Long@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Douglas Hatch <doug.hatch@xxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Scott J Norton <scott.norton@xxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441996658-62854-3-git-send-email-Waiman.Long@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c55a6ffa6285e29f874ed403979472631ec70bff
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Mon Sep 14 00:37:24 2015 -0700

      locking/osq: Relax atomic semantics

      ... by using acquire/release for ops around the lock->tail. As such,
      weakly ordered archs can benefit from more relaxed use of barriers
      when issuing atomics.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Waiman Long <Waiman.Long@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442216244-4409-3-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6e1e5196975fb7ecc501b3fe1075b77aea2b7839
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Mon Sep 14 00:37:22 2015 -0700

      locking/qrwlock: Rename ->lock to ->wait_lock

      ... trivial, but reads a little nicer when we name our
      actual primitive 'lock'.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Waiman Long <Waiman.Long@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442216244-4409-1-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e58cdf585a38412f9f56c512d20e8e12637d9892
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Wed Sep 9 16:46:38 2015 -0700

      locking/Documentation/lockstat: Fix typo - lokcing -> locking

      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Kosina <trivial@xxxxxxxxxx>
      Cc: Jonathan Corbet <corbet@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441842398-25063-1-git-send-email-sboyd@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d6a367853b4340768a917a9e67127231cfd97218
  Merge: 8456799 a7d5c18
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 18 09:25:12 2015 +0200

      Merge branch 'linus' into locking/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 96f3eda67fcf2598e9d2794398e0e7ab35138ea6
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Mon Sep 14 10:14:07 2015 -0400

      perf/x86/intel: Fix static checker warning in lbr enable

      Commit deb27519bf1f ("perf/x86/intel: Fix LBR callstack issue caused
      by FREEZE_LBRS_ON_PMI") leads to the following Smatch complaint:

         warn: variable dereferenced before check 'cpuc->lbr_sel' (see line 154)

      Fix the warning.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: deb27519bf1f ("perf/x86/intel: Fix LBR callstack issue caused by 
FREEZE_LBRS_ON_PMI")
      Link: 
http://lkml.kernel.org/r/1442240047-48149-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 02386c356af0ce5bbee11ed9b23c312ca60298f0
  Merge: d71b0ad f73e22a
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 18 09:24:01 2015 +0200

      Merge branch 'perf/urgent' into perf/core, to pick up fixes before 
applying new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 79a89f92cbe31ba6bc50caf211a7ac4d97d0f35f
  Author: Leo Yan <leo.yan@xxxxxxxxxx>
  Date:   Tue Sep 15 18:56:45 2015 +0800

      sched/fair: Remove unnecessary parameter for group_classify()

      The group_classify() function does not use the "env" parameter, so remove 
it.
      Also unify code to always use group_classify() to calculate group's
      load type.

      Signed-off-by: Leo Yan <leo.yan@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442314605-14838-1-git-send-email-leo.yan@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 84fb5a182d39221b89f205365386df243135d622
  Author: Leo Yan <leo.yan@xxxxxxxxxx>
  Date:   Tue Sep 15 18:57:37 2015 +0800

      sched/fair: Polish comments for LOAD_AVG_MAX

      Macro LOAD_AVG_MAX is defined far away from the precompuated tables
      for decay calculation in code; So explicitly comments for this.

      Also fix one typo: s/LOAD_MAX_AVG/LOAD_AVG_MAX.

      Signed-off-by: Leo Yan <leo.yan@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442314657-14949-1-git-send-email-leo.yan@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4620f8c1fda2af4ccbd11e194e2dd785f7d7f279
  Author: Rik van Riel <riel@xxxxxxxxxx>
  Date:   Fri Sep 11 09:00:27 2015 -0400

      sched/numa: Limit the amount of virtual memory scanned in task_numa_work()

      Currently task_numa_work() scans up to numa_balancing_scan_size_mb worth
      of memory per invocation, but only counts memory areas that have at
      least one PTE that is still present and not marked for numa hint faulting.

      It will skip over arbitarily large amounts of memory that are either
      unused, full of swap ptes, or full of PTEs that were already marked
      for NUMA hint faults but have not been faulted on yet.

      This can cause excessive amounts of CPU use, due to there being
      essentially no upper limit on the scan rate of very large processes
      that are not yet in a phase where they are actively accessing old
      memory pages (eg. they are still initializing their data).

      Avoid that problem by placing an upper limit on the amount of virtual
      memory that task_numa_work() scans in each invocation. This can be a
      higher limit than "pages", to ensure the task still skips over unused
      areas fairly quickly.

      While we are here, also fix the "nr_pte_updates" logic, so it only
      counts page ranges with ptes in them.

      Reported-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Reported-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Signed-off-by: Rik van Riel <riel@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Mel Gorman <mgorman@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150911090027.4a7987bd@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 20f9cd2acb1d74a8bf4b4087267f586e6ecdbc03
  Author: Henrik Austad <henrik@xxxxxxxxx>
  Date:   Wed Sep 9 17:00:41 2015 +0200

      sched/core: Make policy-testing consistent

      Most of the policy-tests are done via the <class>_policy() helpers with
      the notable exception of idle. A new wrapper for valid_policy() has also
      been added to improve readability  in set_load_weight().

      This commit does not change the logical behavior of the scheduler core.

      Signed-off-by: Henrik Austad <henrik@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441810841-4756-1-git-send-email-henrik@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0c6a5b4319928b769ba81eff45bd679737a29ba1
  Merge: 006cdf0 a7d5c18
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 18 09:22:55 2015 +0200

      Merge branch 'linus' into sched/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f73e22ab450140830005581c2c7ec389791a1b8d
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 20:48:22 2015 +0200

      perf: Fix races in computing the header sizes

      There are two races with the current code:

       - Another event can join the group and compute a larger header_size
         concurrently, if the smaller store wins we'll have an incorrect
         header_size set.

       - We compute the header_size after the event becomes active,
         therefore its possible to use the size before its computed.

      Remedy the first by moving the computation inside the ctx::mutex lock,
      and the second by placing it _before_ perf_install_in_context().

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a723968c0ed36db676478c3d26078f13484fe01c
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 19:06:33 2015 +0200

      perf: Fix u16 overflows

      Vince reported that its possible to overflow the various size fields
      and get weird stuff if you stick too many events in a group.

      Put a lid on this by requiring the fixed record size not exceed 16k.
      This is still a fair amount of events (silly amount really) and leaves
      plenty room for callchains and stack dwarves while also avoiding
      overflowing the u16 variables.

      Reported-by: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f55fc2a57cc9ca3b1bb4fb8eb25b6e1989e5b993
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 19:06:33 2015 +0200

      perf: Restructure perf syscall point of no return

      The exclusive_event_installable() stuff only works because its
      exclusive with the grouping bits.

      Rework the code such that there is a sane place to error out before we
      go do things we cannot undo.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dfe1f3cb312624928052413928d88b0ee3492216
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 14:54:00 2015 -0700

      perf/x86/intel: Fix Skylake FRONTEND MSR extrareg mask

      Stephane pointed out that the extrareg mask was one bit too short.
      The bubble width field was truncated by one bit. Fix that here.
      Also add some extra comments on the reserved bits inside the event
      select code.

      Reported-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441835640-21347-3-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d0dc8494cd6904f8ad035d9ad97f313948f35d0c
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 14:53:59 2015 -0700

      perf/x86/intel/pebs: Add PEBS frontend profiling for Skylake

      Skylake has a new FRONTEND_LATENCY PEBS event to accurately profile
      frontend problems (like ITLB or decoding issues).

      The new event is configured through a separate MSR, which selects
      a range of sub events.

      Define the extra MSR as a extra reg and export support for it
      through sysfs.  To avoid duplicating the existing
      tables use a new function to add new entries to existing tables.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1435707205-6676-4-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5e176213a6b2bc5146820c79542d37290434a3c4
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 14:47:02 2015 -0700

      perf/x86/intel: Make the CYCLE_ACTIVITY.* constraint on Broadwell more 
specific

      The counter constraint for CYCLE_ACTIVITY.* on Broadwell covered
      all CYCLE_ACTIVITY.* sub events, and forced them on counter 2.
      But actually only one sub event (umask 8) needs to be on counter 2,
      all others do not have any constraint.

      Only force that subevent. This fixes groups with multiple
      CYCLE_ACTIVITY.* events, for example:

        % perf stat -x, -e '{cpu/event=0xa3,umask=0x6,cmask=6/,\
        cpu/event=0xa2,umask=0x8/,\
        cpu/event=0xa3,umask=0x4,cmask=4/,cpu/event=0xb1,umask=0x1,cmask=1/}' 
true
        122150,,cpu/event=0xa3,umask=0x6,cmask=6/,846486,100.00
        16483,,cpu/event=0xa2,umask=0x8/,846486,100.00
        252280,,cpu/event=0xa3,umask=0x4,cmask=4/,846486,100.00
        233604,,cpu/event=0xb1,umask=0x1,cmask=1/,846486,100.00
        %

      Without this patch the third result would be <unsupported>

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442267222-16464-1-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit de9b8f5dcbd94bfb1d249907a635f1fb1968e19c
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Aug 13 23:09:29 2015 +0200

      sched: Fix crash trying to dequeue/enqueue the idle thread

      Sasha reports that his virtual machine tries to schedule the idle
      thread since commit 6c37067e2786 ("sched: Change the
      sched_class::set_cpus_allowed() calling context").

      Hit trace shows this happening from idle_thread_get()->init_idle(),
      which is the _second_ init_idle() invocation on that task_struct, the
      first being done through idle_init()->fork_idle(). (this code is
      insane...)

      Because we call init_idle() twice in a row, its ->sched_class ==
      &idle_sched_class and ->on_rq = TASK_ON_RQ_QUEUED. This means
      do_set_cpus_allowed() think we're queued and will call dequeue_task(),
      which is implemented with BUG() for the idle class, seeing how
      dequeueing the idle task is a daft thing.

      Aside of the whole insanity of calling init_idle() _twice_, change the
      code to call set_cpus_allowed_common() instead as this is 'obviously'
      before the idle task gets ran etc..

      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Tested-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 6c37067e2786 ("sched: Change the sched_class::set_cpus_allowed() 
calling context")
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a6f83f00ad4b4e8a6c1cd14db495f40cf5ea7586
  Merge: a7d5c18 bf64456
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 18 07:41:56 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - When handling perf_event_open() returning EBUSY and not being able to 
opendir
          the procfs mount point we would tell the user that the oprofile 
daemon was
          found by returning -1 on as the return for a bool function, oops, fix 
it,
          found with Coccinelle. (Peter Senna Tschudin).

        - Fix per-pkg event reporting bug in 'perf stat'. (Stephane Eranian)

      Developer visible changes:

        - Fix missing prototype for function provided when it isn't present in 
the
          libelf present, fixing the build on RHEL/CentOS 5.1 systems, for 
instance.
          (Arnaldo Carvalho de Melo)

        - Detect if the gcc and libnuma have the features needed to avoid 
requiring
          the use of NO_LIBNUMA and/or NO_AUXTRACE to build on older systems.
          (Arnaldo Carvalho de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 47bbbb30b4331ec58a74a66a044341f0114b02b3
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Sep 17 16:37:13 2015 -0700

      sch_dsmark: improve memory locality

      Memory placement in sch_dsmark is silly : Better place mask/value
      in the same cache line.

      Also, we can embed small arrays in the first cache line and
      remove a potential cache miss.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2e7204d180f8efc80f27959ca9cf16fa17f67db
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Sep 17 08:38:00 2015 -0700

      tcp_cubic: do not set epoch_start in the future

      Tracking idle time in bictcp_cwnd_event() is imprecise, as epoch_start
      is normally set at ACK processing time, not at send time.

      Doing a proper fix would need to add an additional state variable,
      and does not seem worth the trouble, given CUBIC bug has been there
      forever before Jana noticed it.

      Let's simply not set epoch_start in the future, otherwise
      bictcp_update() could overflow and CUBIC would again
      grow cwnd too fast.

      This was detected thanks to a packetdrill test Neal wrote that was flaky
      before applying this fix.

      Fixes: 30927520dbae ("tcp_cubic: better follow cubic curve after idle 
period")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Cc: Jana Iyengar <jri@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit adb094e5e7285385770eb7a7c122bfc663c5e174
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 23:21:21 2015 +0900

      fjes: fix off-by-one error at fjes_hw_update_zone_task()

      Dan Carpenter reported off-by-one error of fjes at
      http://www.mail-archive.com/netdev@xxxxxxxxxxxxxxx/msg77520.html

      Actually this is a bug.
      ep_shm_info[epidx].{es_status, zone} should be update
      inside for loop.

      This patch fixes this bug.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6cf35642147103195f126d13bdc1d4c32c7c6666
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:28:31 2015 +0200

      MAINTAINERS: remove bouncing email address for qlcnic

      I got this automated message from <shahed.shaikh@xxxxxxxxxx> when 
submitting
      a qlcnic patch:

      > Shahed Shaikh is no longer with QLogic. If you require assistance please
      > contact Ariel Elior Ariel.Elior@xxxxxxxxxx

      There's no point in having a bouncing address in MAINTAINERS.

      CC: Dept-GELinuxNICDev@xxxxxxxxxx
      CC: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1bdc0b109bfa3697a9f6b71f7fed995e08a0d683
  Merge: c38f6ac ac7eccd
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 22:32:16 2015 -0700

      Merge branch 'vxlan-fixes'

      Jiri Benc says:

      ====================
      vxlan fixes

      This fixes various issues with vxlan related to IPv6.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac7eccd4d48fcc70d9fd6e4d10657bcde0a73f9f
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:14 2015 +0200

      bnx2x: track vxlan port count

      The callback for adding vxlan port can be called with the same port for
      both IPv4 and IPv6. Do not disable the offloading when the same port for
      both protocols is added and later one of them removed.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1e5b311ab2cc3baf73cdff066ab39c7466bf166b
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:13 2015 +0200

      be2net: allow offloading with the same port for IPv4 and IPv6

      The callback for adding vxlan port can be called with the same port for 
both
      IPv4 and IPv6. Do not disable the offloading if this occurs.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 378fddc281072a10b621341b9f78c902303a8fe7
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:12 2015 +0200

      qlcnic: track vxlan port count

      The callback for adding vxlan port can be called with the same port for
      both IPv4 and IPv6. Do not disable the offloading when the same port for
      both protocols is added and later one of them removed.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 057ba29bbe85e9587635e3128b26fa30fe849af9
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:11 2015 +0200

      vxlan: reject IPv6 addresses if IPv6 is not configured

      When IPv6 address is set without IPv6 configured, the vxlan socket is 
mostly
      treated as an IPv4 one but various lookus in fdb etc. still take the
      AF_INET6 into account. This creates incosistencies with weird 
consequences.

      Just reject IPv6 addresses in such case.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9dc2ad1008c9f91f55ec6c89ec0f8639dfc91596
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:10 2015 +0200

      vxlan: set needed headroom correctly

      vxlan_setup is called when allocating the net_device, i.e. way before
      vxlan_newlink (or vxlan_dev_configure) is called. This means
      vxlan->default_dst is actually unset in vxlan_setup and the condition that
      sets needed_headroom always takes the else branch.

      Set the needed_headrom at the point when we have the information about
      the address family available.

      Fixes: e4c7ed415387c ("vxlan: add ipv6 support")
      Fixes: 2853af6a2ea1a ("vxlan: use dev->needed_headroom instead of 
dev->hard_header_len")
      CC: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c38f6ac74c99801360705d97244ff222ae18dc97
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 15:26:16 2015 +0200

      MAINTAINERS: add arcnet and take maintainership

      Add entry for arcnet to MAINTAINERS file and add myself as the
      maintainer of the subsystem.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
      Cc: davem@xxxxxxxxxxxxx
      Cc: joe@xxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 980137a20317055451a73547cf07be4ddea039ee
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 15:18:34 2015 +0200

      ARCNET: fix hard_header_len limit

      For arcnet the bare minimum header only contains the 4 bytes to
      specify source, dest and offset (1, 1 and 2 bytes respectively).
      The corresponding struct is struct arc_hardware.

      The struct archdr contains additionally a union of possible soft
      headers. When doing $insertusecasehere packets might well
      include short (or even no?) soft headers.

      For this reason only use arc_hardware instead of archdr to
      determine the hard_header_len for an arcnet device.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1dbb2413cbfa7db7a337081af1f4119996522156
  Merge: 34f5b00 d8949aa
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 22:25:51 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth

      Johan Hedberg says:

      ====================
      pull request: bluetooth 2015-09-17

      Here's one important patch for the 4.3-rc series that fixes an issue
      with Bluetooth LE encryption failing because of a too early check for
      the SMP context.

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 25354001d0f84f91201cb743aa52b7cac5fe4f9c
  Merge: 9110fe4 4a29645
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 22:17:14 2015 -0700

      Merge branch 'bcmgenet-irq-coalesce'

      Florian Fainelli says:

      ====================
      net: bcmgenet: Interrupt coalescing

      This patch series adds support for interrupt coalescing for GENET
      adapters.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4a29645bfe6c20f06f041109ca578a0b4156f29a
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Wed Sep 16 16:47:40 2015 -0700

      net: bcmgenet: Implement RX coalescing control knobs

      Add support for the ethtool rx-frames coalescing parameter which allows
      defining the number of RX interrupts per frames received. The RDMA
      engine supports a configurable timeout with a resolution of
      approximately 8.192 us.

      We can no longer enable the BDONE/PDONE interrupts as those would
      fire for each packet/buffer received, which would defeat the MBDONE
      interrupt purpose. The MBDONE interrupt is guaranteed to correspond to a
      PDONE/BDONE interrupt when the threshold is set to 1.

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2f9130709d2c19e2eef336bda0fb0c807cbc1f64
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Wed Sep 16 16:47:39 2015 -0700

      net: bcmgenet: Implement TX coalescing control knobs

      Configuring the ethtool tx-frames property, which translates into N
      packets before a TX interrupt is the simplest configuration scheme
      because it requires no locking neither at the softare nor hardware
      level, and is completely indepedent from the link speed. Since ethtool
      does not allow per-tx queue coalescing parameters, we apply the same
      setting to any transmit queue.

      We can no longer enable the BDONE/PDONE interrupts as those would fire
      for each packet/buffer received, which would defeat the MBDONE interrupt
      purpose. The MBDONE interrupt is guaranteed to correspond to a
      PDONE/BDONE interrupt when the threshold is set to 1, but offers
      interrupt coalescing when the value is > 1.

      Since the HW is configured to generate an interrupt when the ring
      becomes emtpy, we have to deny any timeout/timer settings coming from
      user-space to indicate we can only generate an interrupt very <N>
      packets.

      While we are at it, fix the DMA_INTR_THRESHOLD_MASK value which was off
      by one bit (0xff vs. 0x1ff).

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9110fe4a17743e5f416f7fbe01a2a83cffd807d6
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:41:19 2015 +0000

      lan78xx: Remove not defined MAC_CR_GMII_EN_ bit from MAC_CR.

      Remove not defined MAC_CR_GMII_EN_ bit from MAC_CR.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 758c5c1174343a134031ff817c19c732b3729747
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:41:14 2015 +0000

      lan78xx: Create lan78xx_get_mdix_status() and lan78xx_set_mdix_status() 
for MDIX control.

      Create lan78xx_get_mdix_status() and lan78xx_set_mdix_status() for MDIX 
control.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bdfba55e0d541a9547d737573ae11db7ed72e2bb
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:41:07 2015 +0000

      lan78xx: Remove phy defines in lan78xx.h and use defines in 
include/linux/microchipphy.h

      Remove phy defines in lan78xx.h and use defines in 
include/linux/microchipphy.h.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce85e13ad6ef47ddcd34684889dc38a9901868ef
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:40:54 2015 +0000

      lan78xx: Update to use phylib instead of mii_if_info.

      Update to use phylib instead of mii_if_info.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 05fe68c008daaa641531f3cb44c567f04bf19ef7
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:40:47 2015 +0000

      lan78xx: Add PHYLIB and MICROCHIP_PHY as default config.

      Add PHYLIB and MICROCHIP_PHY as default configuration for lan78xx.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6c595b03b1087f9f18a809ee7ce1a79c746037d5
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:40:39 2015 +0000

      lan78xx: Check device ready bit (PMT_CTL_READY_) after reset the PHY

      Check device ready bit (PMT_CTL_READY_) after reset the PHY.
      Device may not be ready even if PHY_RST_ is cleared depends on 
configuration.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34f5b0066435ffb793049b84fafd29fa195bcf90
  Author: Sasha Levin <sasha.levin@xxxxxxxxxx>
  Date:   Wed Sep 16 15:30:21 2015 -0400

      atm: deal with setting entry before mkip was called

      If we didn't call ATMARP_MKIP before ATMARP_ENCAP the VCC descriptor is
      non-existant and we'll end up dereferencing a NULL ptr:

      [1033173.491930] kasan: GPF could be caused by NULL-ptr deref or user 
memory accessirq event stamp: 123386
      [1033173.493678] general protection fault: 0000 [#1] PREEMPT SMP 
DEBUG_PAGEALLOC KASAN
      [1033173.493689] Modules linked in:
      [1033173.493697] CPU: 9 PID: 23815 Comm: trinity-c64 Not tainted 
4.2.0-next-20150911-sasha-00043-g353d875-dirty #2545
      [1033173.493706] task: ffff8800630c4000 ti: ffff880063110000 task.ti: 
ffff880063110000
      [1033173.493823] RIP: clip_ioctl (net/atm/clip.c:320 net/atm/clip.c:689)
      [1033173.493826] RSP: 0018:ffff880063117a88  EFLAGS: 00010203
      [1033173.493828] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 
000000000000000c
      [1033173.493830] RDX: 0000000000000002 RSI: ffffffffb3f10720 RDI: 
0000000000000014
      [1033173.493832] RBP: ffff880063117b80 R08: ffff88047574d9a4 R09: 
0000000000000000
      [1033173.493834] R10: 0000000000000000 R11: 0000000000000000 R12: 
1ffff1000c622f53
      [1033173.493836] R13: ffff8800cb905500 R14: ffff8808d6da2000 R15: 
00000000fffffdfd
      [1033173.493840] FS:  00007fa56b92d700(0000) GS:ffff880478000000(0000) 
knlGS:0000000000000000
      [1033173.493843] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
      [1033173.493845] CR2: 0000000000000000 CR3: 00000000630e8000 CR4: 
00000000000006a0
      [1033173.493855] Stack:
      [1033173.493862]  ffffffffb0b60444 000000000000eaea 0000000041b58ab3 
ffffffffb3c3ce32
      [1033173.493867]  ffffffffb0b6f3e0 ffffffffb0b60444 ffffffffb5ea2e50 
1ffff1000c622f5e
      [1033173.493873]  ffff8800630c4cd8 00000000000ee09a ffffffffb3ec4888 
ffffffffb5ea2de8
      [1033173.493874] Call Trace:
      [1033173.494108] do_vcc_ioctl (net/atm/ioctl.c:170)
      [1033173.494113] vcc_ioctl (net/atm/ioctl.c:189)
      [1033173.494116] svc_ioctl (net/atm/svc.c:605)
      [1033173.494200] sock_do_ioctl (net/socket.c:874)
      [1033173.494204] sock_ioctl (net/socket.c:958)
      [1033173.494244] do_vfs_ioctl (fs/ioctl.c:43 fs/ioctl.c:607)
      [1033173.494290] SyS_ioctl (fs/ioctl.c:622 fs/ioctl.c:613)
      [1033173.494295] entry_SYSCALL_64_fastpath (arch/x86/entry/entry_64.S:186)
      [1033173.494362] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 50 09 00 00 49 8b 
9e 60 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 14 48 89 fa 48 c1 ea 03 
<0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 14 09 00
      All code

      ========
         0:   fa                      cli
         1:   48 c1 ea 03             shr    $0x3,%rdx
         5:   80 3c 02 00             cmpb   $0x0,(%rdx,%rax,1)
         9:   0f 85 50 09 00 00       jne    0x95f
         f:   49 8b 9e 60 06 00 00    mov    0x660(%r14),%rbx
        16:   48 b8 00 00 00 00 00    movabs $0xdffffc0000000000,%rax
        1d:   fc ff df
        20:   48 8d 7b 14             lea    0x14(%rbx),%rdi
        24:   48 89 fa                mov    %rdi,%rdx
        27:   48 c1 ea 03             shr    $0x3,%rdx
        2b:*  0f b6 04 02             movzbl (%rdx,%rax,1),%eax               
<-- trapping instruction
        2f:   48 89 fa                mov    %rdi,%rdx
        32:   83 e2 07                and    $0x7,%edx
        35:   38 d0                   cmp    %dl,%al
        37:   7f 08                   jg     0x41
        39:   84 c0                   test   %al,%al
        3b:   0f 85 14 09 00 00       jne    0x955

      Code starting with the faulting instruction
      ===========================================
         0:   0f b6 04 02             movzbl (%rdx,%rax,1),%eax
         4:   48 89 fa                mov    %rdi,%rdx
         7:   83 e2 07                and    $0x7,%edx
         a:   38 d0                   cmp    %dl,%al
         c:   7f 08                   jg     0x16
         e:   84 c0                   test   %al,%al
        10:   0f 85 14 09 00 00       jne    0x92a
      [1033173.494366] RIP clip_ioctl (net/atm/clip.c:320 net/atm/clip.c:689)
      [1033173.494368]  RSP <ffff880063117a88>

      Signed-off-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a7d5c189719846889c029c34e24e166a465368fa
  Merge: a8f1558 8a1513b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 21:41:02 2015 -0700

      Merge tag 'platform-drivers-x86-v4.3-2' of 
git://git.infradead.org/users/dvhart/linux-platform-drivers-x86

      Pull x86 platform driver fixes from Darren Hart:
       "Fix an issue introduced by the previous major toshiba rework.  Add a
        quirk.  Workaround a few platform specific firmware items.  One
        cleanup to wmi I inadvertently dropped from a previous pull request.

        Details:

        hp-wmi:
         - limit hotkey enable

        toshiba_acpi:
         - Fix hotkeys registration on some toshiba models
         - Fix USB Sleep and Music always disabled

        wmi:
         - Remove private %pUL implementation

        asus-nb-wmi:
         - Add wapf=4 quirk for X456UA/X456UF"

      * tag 'platform-drivers-x86-v4.3-2' of 
git://git.infradead.org/users/dvhart/linux-platform-drivers-x86:
        hp-wmi: limit hotkey enable
        toshiba_acpi: Fix hotkeys registration on some toshiba models
        toshiba_acpi: Fix USB Sleep and Music always disabled
        wmi: Remove private %pUL implementation
        asus-nb-wmi: Add wapf=4 quirk for X456UA/X456UF

  commit 1d325d217c7f190a42fb620ead20bb240fc16af0
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Wed Sep 16 17:26:14 2015 +0200

      ipv6: ip6_fragment: fix headroom tests and skb leak

      David Woodhouse reports skb_under_panic when we try to push ethernet
      header to fragmented ipv6 skbs:

       skbuff: skb_under_panic: text:c1277f1e len:1294 put:14 head:dec98000
       data:dec97ffc tail:0xdec9850a end:0xdec98f40 dev:br-lan
      [..]
      ip6_finish_output2+0x196/0x4da

      David further debugged this:
        [..] offending fragments were arriving here with skb_headroom(skb)==10.
        Which is reasonable, being the Solos ADSL card's header of 8 bytes
        followed by 2 bytes of PPP frame type.

      The problem is that if netfilter ipv6 defragmentation is used, skb_cow()
      in ip6_forward will only see reassembled skb.

      Therefore, headroom is overestimated by 8 bytes (we pulled fragment
      header) and we don't check the skbs in the frag_list either.

      We can't do these checks in netfilter defrag since outdev isn't known yet.

      Furthermore, existing tests in ip6_fragment did not consider the fragment
      or ipv6 header size when checking headroom of the fraglist skbs.

      While at it, also fix a skb leak on memory allocation -- ip6_fragment
      must consume the skb.

      I tested this e1000 driver hacked to not allocate additional headroom
      (we end up in slowpath, since LL_RESERVED_SPACE is 16).

      If 2 bytes of headroom are allocated, fastpath is taken (14 byte
      ethernet header was pulled, so 16 byte headroom available in all
      fragments).

      Reported-by: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
      Diagnosed-by: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Tested-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bde6f9ded1bd37ff27a042dcb968e104d92b02c1
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:16:39 2015 -0600

      net: Initialize table in fib result

      Sergey, Richard and Fabio reported an oops in ip_route_input_noref. e.g., 
from Richard:

      [    0.877040] BUG: unable to handle kernel NULL pointer dereference at 
0000000000000056
      [    0.877597] IP: [<ffffffff8155b5e2>] ip_route_input_noref+0x1a2/0xb00
      [    0.877597] PGD 3fa14067 PUD 3fa6e067 PMD 0
      [    0.877597] Oops: 0000 [#1] SMP
      [    0.877597] Modules linked in: virtio_net virtio_pci virtio_ring virtio
      [    0.877597] CPU: 1 PID: 119 Comm: ifconfig Not tainted 4.2.0+ #1
      [    0.877597] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
      [    0.877597] task: ffff88003fab0bc0 ti: ffff88003faa8000 task.ti: 
ffff88003faa8000
      [    0.877597] RIP: 0010:[<ffffffff8155b5e2>]  [<ffffffff8155b5e2>] 
ip_route_input_noref+0x1a2/0xb00
      [    0.877597] RSP: 0018:ffff88003ed03ba0  EFLAGS: 00010202
      [    0.877597] RAX: 0000000000000046 RBX: 00000000ffffff8f RCX: 
0000000000000020
      [    0.877597] RDX: ffff88003fab50b8 RSI: 0000000000000200 RDI: 
ffffffff8152b4b8
      [    0.877597] RBP: ffff88003ed03c50 R08: 0000000000000000 R09: 
0000000000000000
      [    0.877597] R10: 0000000000000000 R11: 0000000000000000 R12: 
ffff88003fab6f00
      [    0.877597] R13: ffff88003fab5000 R14: 0000000000000000 R15: 
ffffffff81cb5600
      [    0.877597] FS:  00007f6de5751700(0000) GS:ffff88003ed00000(0000) 
knlGS:0000000000000000
      [    0.877597] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [    0.877597] CR2: 0000000000000056 CR3: 000000003fa6d000 CR4: 
00000000000006e0
      [    0.877597] Stack:
      [    0.877597]  0000000000000000 0000000000000046 ffff88003fffa600 
ffff88003ed03be0
      [    0.877597]  ffff88003f9e2c00 697da8c0017da8c0 ffff880000000000 
000000000007fd00
      [    0.877597]  0000000000000000 0000000000000046 0000000000000000 
0000000400000000
      [    0.877597] Call Trace:
      [    0.877597]  <IRQ>
      [    0.877597]  [<ffffffff812bfa1f>] ? cpumask_next_and+0x2f/0x40
      [    0.877597]  [<ffffffff8158e13c>] arp_process+0x39c/0x690
      [    0.877597]  [<ffffffff8158e57e>] arp_rcv+0x13e/0x170
      [    0.877597]  [<ffffffff8151feec>] __netif_receive_skb_core+0x60c/0xa00
      [    0.877597]  [<ffffffff81515795>] ? __build_skb+0x25/0x100
      [    0.877597]  [<ffffffff81515795>] ? __build_skb+0x25/0x100
      [    0.877597]  [<ffffffff81521ff6>] __netif_receive_skb+0x16/0x70
      [    0.877597]  [<ffffffff81522078>] netif_receive_skb_internal+0x28/0x90
      [    0.877597]  [<ffffffff8152288f>] napi_gro_receive+0x7f/0xd0
      [    0.877597]  [<ffffffffa0017906>] virtnet_receive+0x256/0x910 
[virtio_net]
      [    0.877597]  [<ffffffffa0017fd8>] virtnet_poll+0x18/0x80 [virtio_net]
      [    0.877597]  [<ffffffff815234cd>] net_rx_action+0x1dd/0x2f0
      [    0.877597]  [<ffffffff81053228>] __do_softirq+0x98/0x260
      [    0.877597]  [<ffffffff8164969c>] do_softirq_own_stack+0x1c/0x30

      The root cause is use of res.table uninitialized.

      Thanks to Nikolay for noticing the uninitialized use amongst the maze of
      gotos.

      As Nikolay pointed out the second initialization is not required to fix
      the oops, but rather to fix a related problem where a valid lookup should
      be invalidated before creating the rth entry.

      Fixes: b7503e0cdb5d ("net: Add FIB table id to rtable")
      Reported-by: Sergey Senozhatsky <sergey.senozhatsky.work@xxxxxxxxx>
      Reported-by: Richard Alpe <richard.alpe@xxxxxxxxxxxx>
      Reported-by: Fabio Estevam <festevam@xxxxxxxxx>
      Tested-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Tested-by: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce816eb064c82ab96276969971a561db78e66164
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:35:00 2015 +0100

      solos-pci: Increase headroom on received packets

      A comment in include/linux/skbuff.h says that:

       * Various parts of the networking layer expect at least 32 bytes of
       * headroom, you should not reduce this.

      This was demonstrated by a panic when handling fragmented IPv6 packets:
      http://marc.info/?l=linux-netdev&m=144236093519172&w=2

      It's not entirely clear if that comment is still valid â?? and if it is,
      perhaps netif_rx() ought to be enforcing it with a warning.

      But either way, it is rather stupid from a performance point of view
      for us to be receiving packets into a buffer which doesn't have enough
      room to prepend an Ethernet header â?? it means that *every* incoming
      packet is going to be need to be reallocated. So let's fix that.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 88c796640eac36209efabe5e42b7b47dee58603e
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:11:22 2015 +0200

      net: ks8851: Export OF module alias information

      Drivers needs to export the OF id table and this be built into
      the module or udev won't have the necessary information to autoload
      the driver module when the device is registered via OF.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a8f155855842f04273666192d3767fa9b94aaa58
  Merge: 8e64a73 28c553d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 21:16:47 2015 -0700

      Merge branch 'akpm' (patches from Andrew)

      Merge misc fixes from ANdrew Morton:
       "8 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        revert "mm: make sure all file VMAs have ->vm_ops set"
        MAINTAINERS: update LTP mailing list
        userfaultfd: add missing mmput() in error path
        lib/string_helpers.c: fix infinite loop in string_get_size()
        alpha: lib: export __delay
        alpha: io: define ioremap_uc
        kasan: fix last shadow judgement in memory_is_poisoned_16()
        zram: fix possible use after free in zcomp_create()

  commit 28c553d0aa0acf02e18f9e008661491a4b996595
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:02:00 2015 -0700

      revert "mm: make sure all file VMAs have ->vm_ops set"

      Revert commit 6dc296e7df4c "mm: make sure all file VMAs have ->vm_ops
      set".

      Will Deacon reports that it "causes some mmap regressions in LTP, which
      appears to use a MAP_PRIVATE mmap of /dev/zero as a way to get anonymous
      pages in some of its tests (specifically mmap10 [1])".

      William Shuman reports Oracle crashes.

      So revert the patch while we work out what to do.

      Reported-by: William Shuman <wshuman3@xxxxxxxxx>
      Reported-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 0526109a24eb07984f9e79852767300c8b8144de
  Author: Cyril Hrubis <chrubis@xxxxxxx>
  Date:   Thu Sep 17 16:01:57 2015 -0700

      MAINTAINERS: update LTP mailing list

      [akpm@xxxxxxxxxxxxxxxxxxxx: Wanlong Gao has moved]
      Signed-off-by: Cyril Hrubis <chrubis@xxxxxxx>
      Cc: Jan Stancek <jstancek@xxxxxxxxxx>
      Cc: Stanislav Kholmanskikh <stanislav.kholmanskikh@xxxxxxxxxx>
      Cc: Alexey Kodanev <alexey.kodanev@xxxxxxxxxx>
      Cc: Wanlong Gao <wanlong.gao@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit c03e946fdd653c4a23e242aca83da7e9838f5b00
  Author: Eric Biggers <ebiggers3@xxxxxxxxx>
  Date:   Thu Sep 17 16:01:54 2015 -0700

      userfaultfd: add missing mmput() in error path

      This fixes a memleak if anon_inode_getfile() fails in userfaultfd().

      Signed-off-by: Eric Biggers <ebiggers3@xxxxxxxxx>
      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 62bef58a55dfa8ada2a22b2496c6340468ecd98a
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Thu Sep 17 16:01:51 2015 -0700

      lib/string_helpers.c: fix infinite loop in string_get_size()

      Some string_get_size() calls (e.g.:
       string_get_size(1, 512, STRING_UNITS_10, ..., ...)
       string_get_size(15, 64, STRING_UNITS_10, ..., ...)
      ) result in an infinite loop. The problem is that if size is equal to
      divisor[units]/blk_size and is smaller than divisor[units] we'll end
      up with size == 0 when we start doing sf_cap calculations:

      For string_get_size(1, 512, STRING_UNITS_10, ..., ...) case:
         ...
         remainder = do_div(size, divisor[units]); -> size is 0, remainder is 1
         remainder *= blk_size; -> remainder is 512
         ...
         size *= blk_size; -> size is still 0
         size += remainder / divisor[units]; -> size is still 0

      The caller causing the issue is sd_read_capacity(), the problem was
      noticed on Hyper-V, such weird size was reported by host when scanning
      collides with device removal.  This is probably a separate issue worth
      fixing, this patch is intended to prevent the library routine from
      infinite looping.

      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Acked-by: James Bottomley <JBottomley@xxxxxxxx>
      Cc: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Cc: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Cc: "K. Y. Srinivasan" <kys@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 14b97deddf8ddecce9f35165b667c55c73e14638
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 17 16:01:49 2015 -0700

      alpha: lib: export __delay

      __delay was not exported as a result while building with allmodconfig we
      were getting build error of undefined symbol.  __delay is being used by:
      drivers/net/phy/mdio-octeon.c

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Cc: Richard Henderson <rth@xxxxxxxxxxx>
      Cc: Ivan Kokshaysky <ink@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matt Turner <mattst88@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 969560d2afca76823cf97ec4f5c0fb7833e18553
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 17 16:01:46 2015 -0700

      alpha: io: define ioremap_uc

      ioremap_uc was not defined and as a result while building with
      allmodconfig were getting build error of: implicit declaration of
      function 'ioremap_uc'.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Cc: Richard Henderson <rth@xxxxxxxxxxx>
      Cc: Ivan Kokshaysky <ink@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matt Turner <mattst88@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8d77a6d18ae9ccfd5eee1cc551ee4ac27fd41464
  Author: Xishi Qiu <qiuxishi@xxxxxxxxxx>
  Date:   Thu Sep 17 16:01:43 2015 -0700

      kasan: fix last shadow judgement in memory_is_poisoned_16()

      The shadow which correspond 16 bytes memory may span 2 or 3 bytes.  If
      the memory is aligned on 8, then the shadow takes only 2 bytes.  So we
      check "shadow_first_bytes" is enough, and need not to call
      "memory_is_poisoned_1(addr + 15);".  But the code "if
      (likely(!last_byte))" is wrong judgement.

      e.g.  addr=0, so last_byte = 15 & KASAN_SHADOW_MASK = 7, then the code
      will continue to call "memory_is_poisoned_1(addr + 15);"

      Signed-off-by: Xishi Qiu <qiuxishi@xxxxxxxxxx>
      Acked-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Cc: Andrey Konovalov <adech.fo@xxxxxxxxx>
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Michal Marek <mmarek@xxxxxxx>
      Cc: <zhongjiang@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3aaf14da807a4e9931a37f21e4251abb8a67021b
  Author: Luis Henriques <luis.henriques@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:01:40 2015 -0700

      zram: fix possible use after free in zcomp_create()

      zcomp_create() verifies the success of zcomp_strm_{multi,single}_create()
      through comp->stream, which can potentially be pointing to memory that
      was freed if these functions returned an error.

      While at it, replace a 'ERR_PTR(-ENOMEM)' by a more generic
      'ERR_PTR(error)' as in the future zcomp_strm_{multi,siggle}_create()
      could return other error codes.  Function documentation updated
      accordingly.

      Fixes: beca3ec71fe5 ("zram: add multi stream functionality")
      Signed-off-by: Luis Henriques <luis.henriques@xxxxxxxxxxxxx>
      Acked-by: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
      Acked-by: Minchan Kim <minchan@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 41a9802fd87316ac736182e2debc579e987c8311
  Merge: f6c5333 27b29f6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 21:09:07 2015 -0700

      Merge branch 'bpf_avoid_clone'

      Alexei Starovoitov says:

      ====================
      bpf: performance improvements

      v1->v2: dropped redundant iff_up check in patch 2

      At plumbers we discussed different options on how to get rid of skb_clone
      from bpf_clone_redirect(), the patch 2 implements the best option.
      Patch 1 adds 'integrated exts' to cls_bpf to improve performance by
      combining simple actions into bpf classifier.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 27b29f63058d26c6c1742f1993338280d5a41dc6
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Sep 15 23:05:43 2015 -0700

      bpf: add bpf_redirect() helper

      Existing bpf_clone_redirect() helper clones skb before redirecting
      it to RX or TX of destination netdev.
      Introduce bpf_redirect() helper that does that without cloning.

      Benchmarked with two hosts using 10G ixgbe NICs.
      One host is doing line rate pktgen.
      Another host is configured as:
      $ tc qdisc add dev $dev ingress
      $ tc filter add dev $dev root pref 10 u32 match u32 0 0 flowid 1:2 \
         action bpf run object-file tcbpf1_kern.o section clone_redirect_xmit 
drop
      so it receives the packet on $dev and immediately xmits it on $dev + 1
      The section 'clone_redirect_xmit' in tcbpf1_kern.o file has the program
      that does bpf_clone_redirect() and performance is 2.0 Mpps

      $ tc filter add dev $dev root pref 10 u32 match u32 0 0 flowid 1:2 \
         action bpf run object-file tcbpf1_kern.o section redirect_xmit drop
      which is using bpf_redirect() - 2.4 Mpps

      and using cls_bpf with integrated actions as:
      $ tc filter add dev $dev root pref 10 \
        bpf run object-file tcbpf1_kern.o section redirect_xmit integ_act 
classid 1
      performance is 2.5 Mpps

      To summarize:
      u32+act_bpf using clone_redirect - 2.0 Mpps
      u32+act_bpf using redirect - 2.4 Mpps
      cls_bpf using redirect - 2.5 Mpps

      For comparison linux bridge in this setup is doing 2.1 Mpps
      and ixgbe rx + drop in ip_rcv - 7.8 Mpps

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: John Fastabend <john.r.fastabend@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 045efa82ff563cd4e656ca1c2e354fa5bf6bbda4
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 23:05:42 2015 -0700

      cls_bpf: introduce integrated actions

      Often cls_bpf classifier is used with single action drop attached.
      Optimize this use case and let cls_bpf return both classid and action.
      For backwards compatibility reasons enable this feature under
      TCA_BPF_FLAG_ACT_DIRECT flag.

      Then more interesting programs like the following are easier to write:
      int cls_bpf_prog(struct __sk_buff *skb)
      {
        /* classify arp, ip, ipv6 into different traffic classes
         * and drop all other packets
         */
        switch (skb->protocol) {
        case htons(ETH_P_ARP):
          skb->tc_classid = 1;
          break;
        case htons(ETH_P_IP):
          skb->tc_classid = 2;
          break;
        case htons(ETH_P_IPV6):
          skb->tc_classid = 3;
          break;
        default:
          return TC_ACT_SHOT;
        }

        return TC_ACT_OK;
      }

      Joint work with Daniel Borkmann.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4671fc6d47e0a0108fe24a4d830347d6a6ef4aa7
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 15 18:29:47 2015 -0700

      net/mlx4_en: really allow to change RSS key

      When changing rss key, we do not want to overwrite user provided key
      by the one provided by netdev_rss_key_fill(), which is the host random
      key generated at boot time.

      Fixes: 947cbb0ac242 ("net/mlx4_en: Support for configurable RSS hash 
function")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Eyal Perry <eyalpe@xxxxxxxxxxxx>
      CC: Amir Vadai <amirv@xxxxxxxxxxxx>
      Acked-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6c53334d6c6ac7088c2e7e70ff2941bfb33f52e
  Author: Junwei Zhang <martinbj2008@xxxxxxxxx>
  Date:   Fri Sep 18 00:00:05 2015 -0400

      net: only check perm protocol when register proto

      The permanent protocol nodes are at the head of the list,
      So only need check all these nodes.

      No matter the new node is permanent or not,
      insert the new node after the last permanent protocol node,

      If the new node conflicts with existing permanent node,
      return error.

      Signed-off-by: Martin Zhang <martinbj2008@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4b1b865e4e97e336316f30e32af36d71e98bdabc
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 15 15:24:28 2015 -0700

      bonding: use l4 hash if available

      If skb carries a l4 hash, no need to perform a flow dissection.

      Performance is slightly better :

      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.39012e+06
      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.39393e+06
      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.39988e+06

      After patch :

      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.43579e+06
      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.44304e+06
      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.44312e+06

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Cc: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 58d607d3e52f2b15902f58a1161da9fb3b0f6d47
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 15 15:24:20 2015 -0700

      tcp: provide skb->hash to synack packets

      In commit b73c3d0e4f0e ("net: Save TX flow hash in sock and set in skbuf
      on xmit"), Tom provided a l4 hash to most outgoing TCP packets.

      We'd like to provide one as well for SYNACK packets, so that all packets
      of a given flow share same txhash, to later enable bonding driver to
      also use skb->hash to perform slave selection.

      Note that a SYNACK retransmit shuffles the tx hash, as Tom did
      in commit 265f94ff54d62 ("net: Recompute sk_txhash on negative routing
      advice") for established sockets.

      This has nice effect making TCP flows resilient to some kind of black
      holes, even at connection establish phase.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Cc: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Acked-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8a1513b49321e503fd6c8b6793e3b1f9a8a3285b
  Author: Kyle Evans <kvans32@xxxxxxxxx>
  Date:   Fri Sep 11 10:40:17 2015 -0500

      hp-wmi: limit hotkey enable

      Do not write initialize magic on systems that do not have
      feature query 0xb. Fixes Bug #82451.

      Redefine FEATURE_QUERY to align with 0xb and FEATURE2 with 0xd
      for code clearity.

      Add a new test function, hp_wmi_bios_2008_later() & simplify
      hp_wmi_bios_2009_later(), which fixes a bug in cases where
      an improper value is returned. Probably also fixes Bug #69131.

      Add missing __init tag.

      Signed-off-by: Kyle Evans <kvans32@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit f91638af0ef7cf85c204e3ebc853a35a99992e93
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Fri Aug 28 17:56:01 2015 -0400

      i40e/i40evf: Bump i40e to 1.3.21 and i40evf to 1.3.13

      Bump.

      Change-ID: If7ce84218361defa209142d1d8c6f69d48c2d7ad
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit b72dc7b19398b238698fbc5954a3c3de6cbc815d
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:51 2015 -0400

      i40e/i40evf: add get AQ result command to nvmupdate utility

      Add a facility to recover the result of a previously run AQ command.

      Change-ID: I21afec2c20c1a5e6ba60c7fbfcbedfff78c10e45
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e4c83c20f87fe1d3da6b3a7ecaf40ae8717c7842
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:50 2015 -0400

      i40e/i40evf: add exec_aq command to nvmupdate utility

      Add a facility to run AQ commands through the nvmupdate utility in order
      to allow the update tools to interact with the FW and do special
      commands needed for updates and configuration changes.

      Change-ID: I5c41523e4055b37f8e4ee479f7a0574368f4a588
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2f1b5bc844a7c13a3ec997a7ce029f27403adc57
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:49 2015 -0400

      i40e/i40evf: add wait states to NVM state machine

      This adds wait states to the NVM update state machine to signify when
      waiting for an update operation to finish, whether we're in the middle
      of a set of Write operations, or we're now idle but waiting.

      Change-ID: Iabe91d6579ef6a2ea560647e374035656211ab43
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0af8e9db2ce93d17c25a0ff0a044dfebf66ea5af
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:48 2015 -0400

      i40e/i40evf: add GetStatus command for nvmupdate

      This adds a new GetStatus command so that the NVM update tool can query
      the current status instead of doing fake write requests to probe for
      readiness.

      Change-ID: I671ec6ccd4dfc9dbac3a03b964589d693fda5cd8
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6b5c1b89c37791d89eac5f276cc095acf4f8ab6b
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:47 2015 -0400

      i40e/i40evf: add handling of writeback descriptor

      If the writeback descriptor buffer was previously created, this gives it
      to the AQ command request to be used to save the results.

      Change-ID: I8c8a1af81e6ebed6d0a15ed31697fe1a6c4e3708
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 87db27a9e21fdeb20f77a024b30b406915e083d6
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:42 2015 -0400

      i40e/i40evf: save aq writeback for future inspection

      Add the ability to save the AdminQ write back descriptor if a
      caller supplies a buffer for it to be saved into.

      Change-ID: I3d1301d26360b39a2d66dc8569e851f54133a3af
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 79afe839ab1a5e1e9232845f430d5c500e956e8d
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:33 2015 -0400

      i40e: rename variable to prevent clash of understanding

      This code returns something that becomes the errno value from ethtool and
      passes around a pointer to an errno variable.  This patch changes the name
      slightly to differentiate it from the actual user errno variable.

      Change-ID: Idaa37845c069e66f4cea072e90f471bb2142454d
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bbe8373138a1fe92160a18418e7298b4c0128ff1
  Merge: a2f23e0 be10de0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 17:18:38 2015 -0700

      Merge branch 'nf_hook_netns'

      Eric W. Biederman says:

      ====================
      Passing net through the netfilter hooks

      My primary goal with this patchset and it's follow ups is to cleanup the
      network routing paths so that we do not look at the output device to
      derive the network namespace.  My plan is to pass the network namespace
      of the transmitting socket through the output path, to replace code that
      looks at the output network device today.  Once that is done we can have
      routes with output devices outside of the current network namespace.
      Which should allow reception and transmission of packets in network
      namespaces to be as fast as normal packet reception and transmission
      with early demux disabled, because it will same code path.

      Once skb_dst(skb)->dev is a little better under control I think it will
      also be possible to use rcu to cleanup the ancient hack that sets
      dst->dev to loopback_dev when a network device is removed.

      The work to get there is a series of code cleanups.  I am starting with
      passing net into the netfilter hooks and into the functions that are
      called after the netfilter hooks.  This removes from netfilter the
      need to guess which network namespace it is working on.

      To get there I perform a series of minor prep patches so the big changes
      at the end are possible to audit without getting lost in the noise.  In
      particular I have a lot of patches computing net into a local variable
      and then using it through out the function.

      So this patchset encompases removing dead code, sorting out the _sk
      functions that were added last time someone pushed a prototype change
      through the post netfilter functions.  Cleaning up individual functions
      use of the network namespace.  Passing net into the netfilter hooks.
      Passing net into the post netfilter functions.  Using state->net in
      the netfilter code where it is available and trivially usable.

      Pablo, Dave I don't know whose tree this makes more sense to go
      through.  I am assuming at least initially Pablos as netfilter is
      involved.  From what I have seen there will be a lot of back and forth
      between the netfilter code paths and the routing code paths.

      The patches are also available (against 4.3-rc1) at:
      git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/net-next.git master
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit be10de0a322ded7701a4dcce4a0ba83b3bbf42e5
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Thu Sep 17 17:21:31 2015 -0500

      netfilter: Add blank lines in callers of netfilter hooks

      In code review it was noticed that I had failed to add some blank lines
      in places where they are customarily used.  Taking a second look at the
      code I have to agree blank lines would be nice so I have added them
      here.

      Reported-by:  Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c4b51f0054ce85c0ec578ab818f0631834573eb
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:18 2015 -0500

      netfilter: Pass net into okfn

      This is immediately motivated by the bridge code that chains functions 
that
      call into netfilter.  Without passing net into the okfns the bridge code 
would
      need to guess about the best expression for the network namespace to 
process
      packets in.

      As net is frequently one of the first things computed in continuation 
functions
      after netfilter has done it's job passing in the desired network 
namespace is in
      many cases a code simplification.

      To support this change the function dst_output_okfn is introduced to
      simplify passing dst_output as an okfn.  For the moment dst_output_okfn
      just silently drops the struct net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9dff2c966a0a79a4222553a851f17e679fc28a43
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:17 2015 -0500

      netfilter: Use nf_hook_state.net

      Instead of saying "net = dev_net(state->in?state->in:state->out)"
      just say "state->net".  As that information is now availabe,
      much less confusing and much less error prone.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 29a26a56803855a79dbd028cd61abee56237d6e5
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:16 2015 -0500

      netfilter: Pass struct net into the netfilter hooks

      Pass a network namespace parameter into the netfilter hooks.  At the
      call site of the netfilter hooks the path a packet is taking through
      the network stack is well known which allows the network namespace to
      be easily and reliabily.

      This allows the replacement of magic code like
      "dev_net(state->in?:state->out)" that appears at the start of most
      netfilter hooks with "state->net".

      In almost all cases the network namespace passed in is derived
      from the first network device passed in, guaranteeing those
      paths will not see any changes in practice.

      The exceptions are:
      xfrm/xfrm_output.c:xfrm_output_resume()         xs_net(skb_dst(skb)->xfrm)
      ipvs/ip_vs_xmit.c:ip_vs_nat_send_or_cont()      ip_vs_conn_net(cp)
      ipvs/ip_vs_xmit.c:ip_vs_send_or_cont()          ip_vs_conn_net(cp)
      ipv4/raw.c:raw_send_hdrinc()                    sock_net(sk)
      ipv6/ip6_output.c:ip6_xmit()                      sock_net(sk)
      ipv6/ndisc.c:ndisc_send_skb()                   dev_net(skb->dev) not 
dev_net(dst->dev)
      ipv6/raw.c:raw6_send_hdrinc()                   sock_net(sk)
      br_netfilter_hooks.c:br_nf_pre_routing_finish() dev_net(skb->dev) before 
skb->dev is set to nf_bridge->physindev

      In all cases these exceptions seem to be a better expression for the
      network namespace the packet is being processed in then the historic
      "dev_net(in?in:out)".  I am documenting them in case something odd
      pops up and someone starts trying to track down what happened.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04eb44890e5bb3cc855e5c0f18a05eb7311364b7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:15 2015 -0500

      bridge: Add br_netif_receive_skb remove netif_receive_skb_sk

      netif_receive_skb_sk is only called once in the bridge code, replace
      it with a bridge specific function that calls netif_receive_skb.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f2d74cf88c625bfa723c5ffb79885c852ee1f46b
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:14 2015 -0500

      bridge: Cache net in br_nf_pre_routing_finish

      This is prep work for passing net to the netfilter hooks.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6532948b2e7b75895c1264967342ae61dc97b4a6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:13 2015 -0500

      bridge: Pass net into br_nf_push_frag_xmit

      When struct net starts being passed through the ipv4 and ipv6 fragment
      routines br_nf_push_frag_xmit will need to take a net parameter.
      Prepare br_nf_push_frag_xmit before that is needed and introduce
      br_nf_push_frag_xmit_sk for the call sites that still need the old
      calling conventions.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8d4df0b9300a2623559a8f616a152312454cada1
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:12 2015 -0500

      bridge: Pass net into br_nf_ip_fragment

      This is a prep work for passing struct net through ip_do_fragment and
      later the netfilter okfn.   Doing this independently makes the later
      code changes clearer.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit adb28c9d3371c845c7a28bfd4fb163aca0d0dc37
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:11 2015 -0500

      ipv6: Compute net once in raw6_send_hdrinc

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 19a0644ca31c7e22abdb4058ea013f1f7abf7327
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:10 2015 -0500

      ipv6: Cache net in ip6_output

      Keep net in a local variable so I can use it in NF_HOOK_COND
      when I pass struct net to all of the netfilter hooks.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 78126c41907e999979635855b6b1b24aa46f53d8
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:09 2015 -0500

      ipv6: Only compute net once in ip6_finish_output2

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9865249fd19d1416f70aa73ac7f214cbee4f6b51
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:08 2015 -0500

      ipv6: Don't recompute net in ip6_rcv

      Avoid silly redundant code

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2b4aa3cec4873005a0d5155395b34641584b3a4e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:07 2015 -0500

      net: Remove dev_queue_xmit_sk

      A function with weird arguments that it will never use to accomdate a
      netfilter callback prototype is absolutely in the core of the
      networking stack.  Frankly it does not make sense and it causes a lot
      of confusion as to why arguments that are never used are being passed
      to the function.

      As I am preparing to make a second change to arguments to the okfn even
      the names stops making sense.

      As I have removed the two callers of this function remove this confusion
      from the networking stack.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f19c578df80ad2e6b2bd9af63aa0af4bcc7470e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:06 2015 -0500

      bridge: Introduce br_send_bpdu_finish

      The function dev_queue_xmit_skb_sk is unncessary and very confusing.
      Introduce br_send_bpdu_finish to remove the need for 
dev_queue_xmit_skb_sk,
      and have br_send_bpdu_finish call dev_queue_xmit.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9e4306fd87c6ff08c9a94212d84a23c16395843
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:05 2015 -0500

      arp: Introduce arp_xmit_finish

      The function dev_queue_xmit_skb_sk is unncessary and very confusing.
      Introduce arp_xmit_finish to remove the need for dev_queue_xmit_skb_sk,
      and have arp_xmit_finish call dev_queue_xmit.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 244ba779855c2ccbb843444c2dce952ca8c1a78e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:04 2015 -0500

      ipv6: Only compute net once in ip6mr_forward2_finish

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 758ccac8e7419ae746bcda807919a547ed9cdaad
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:03 2015 -0500

      ipv4: Only compute net once in ipmr_forward_finish

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 38184b3b073bf588d809d3b2fb7370264357c289
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:02 2015 -0500

      ipv4: Only compute net once in ip_rcv_finish

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ba1bf42920b778c8c884e694e8e2aa6486c2b31
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:01 2015 -0500

      ipv4: Only compute net once in ip_finish_output2

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9479b0af489c836cc0d04b01ee5a7d48d79d3d51
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:00 2015 -0500

      ipv4: Explicitly compute net in ip_fragment

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 26a949dbd5595b987bf199be4442136e9288a93e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:59 2015 -0500

      ipv4: Only compute net once in ip_do_fragment

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc4c851e4b41d668075d7cb6c71e3725bc5d4662
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:58 2015 -0500

      ipv4: Don't recompute net in ipmr_queue_xmit

      Calling dev_net(dev) for is just silly.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 88f5cc245849df73c353f7bb46e9e5749469f6d3
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:57 2015 -0500

      ipv4: Remember the net in ip_output and ip_mc_output

      This is a prepatory patch to passing net int the netfilter hooks,
      where net will be used again.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e707766ce0ca65084b60a275a7c1a9863207cfa6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:56 2015 -0500

      ipv4: Compute net once in ip_rcv

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8e1ac7912700914e4d6d129d38ecbcff8e4f4c4
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:55 2015 -0500

      ipv4: Compute net once in ip_forward_finish

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fcad0ac2da05d5ed443acee7abd69e24e69037ca
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:54 2015 -0500

      ipv4: Compute net once in ip_forward

      Compute struct net from the input device in ip_forward before it is
      used.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5a70649e0dae02ba5090540fffce667d2300bc5a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:53 2015 -0500

      net: Merge dst_output and dst_output_sk

      Add a sock paramter to dst_output making dst_output_sk superfluous.
      Add a skb->sk parameter to all of the callers of dst_output
      Have the callers of dst_output_sk call dst_output.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a6568b2425daffc7b21ae63b6601b57ae14b5cb8
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:52 2015 -0500

      xfrm: Remove unused afinfo method init_dst

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7a7735044e1eab1415697b3139e758d24a600099
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:51 2015 -0500

      netfilter: Pass net to nf_hook_thresh

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b11b1f652dccde707d568f4012b01a8ec5bd5f57
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:50 2015 -0500

      netfilter: Store net in nf_hook_state

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fb884253a919148677c5bf347ffb62c539370440
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:49 2015 -0500

      netfilter: Remove !CONFIG_NETFITLER definition of nf_hook_thresh

      The !CONFIG_NETFILTER definition of nf_hook_thresh calls okfn when
      the CONFIG_NETFITLER defintion does not, making it buggy.

      As the !CONFIG_NETFILTER defintion of nf_hook_thresh is not used remove
      it rather than fix it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2f23e08b0861bd17109c1add000c4125a6c2dbc
  Merge: c4047f5 9adbac5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:50:36 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-15

      This series contains updates to ixgbe and fm10k.

      Don fixes a ixgbe issue by adding checks for systems that do not have
      SFP's to avoid incorrectly acting on interrupts that are falsely
      interpreted as SFP events.

      Alex Williamson adds a fix for ixgbe to disable SR-IOV prior to
      unregistering the netdev to avoid issues with guest OS's which do not
      support hot-unplug or their hot-unplug is broken.

      Alex Duyck update the lowest limit for adaptive interrupt interrupt
      moderation to about 12K interrupts per second for ixgbe.  This change
      increases the performance for ixgbe.  Also fixed up fm10k to remove
      the optimization that assumed that all fragments would be limited to
      page size, since that assumption is incorrect as the TCP allocator can
      provide up to a 32K page fragment.  Updated fm10k to add the MAC
      address to the list of values recorded on driver load.  Fixes fm10k
      so that we only trigger the data path reset if the fabric is ready to
      handle traffic to avoid triggering the reset unless the switch API is
      ready for us.

      Jacob updates the fm10k driver to disable the service task during
      suspend and re-enable it after we resume. If we don't do this, the
      device could be UP when you suspend and come back from resume as
      DOWN.  Also update fm10k to prevent the removal of default VID rules,
       and correctly remove the stack layers information of the VLAN, but then
      return to forwarding that VID as untagged frames.  If we deleted the VID
      rules here, we would begin dropping traffic due to VLAN membership
      violations.  Fixed fm10k to use pcie_get_minimum_link(), which is useful
      in cases where we connect to a slot at Gen3, but the slot is behind a bus
      which is only connected at Gen2.  Updated fm10k to update the netdev
      permanent address during reinit instead of up to enable users to
      immediately see the new MAC address on the VF even if the device is not
      up.  Adds the creation of VLAN interfaces on a device, even while the
      device is down for fm10k.  Fixed an issue where we request the incorrect
      MAC/VLAN combinations, and prevents us from accidentally reporting some
      frames as VLAN tagged.  Provided a couple of trivial fixes for fm10k
      to fix code style and typos in code comments.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 58189ca7b27411c3dc9a5cb9eeee0906da684c59
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 15:10:50 2015 -0700

      net: Fix vti use case with oif in dst lookups

      Steffen reported that the recent change to add oif to dst lookups breaks
      the VTI use case. The problem is that with the oif set in the flow struct
      the comparison to the nh_oif is triggered. Fix by splitting the
      FLOWI_FLAG_VRFSRC into 2 flags -- one that triggers the vrf device cache
      bypass (FLOWI_FLAG_VRFSRC) and another telling the lookup to not compare
      nh oif (FLOWI_FLAG_SKIP_NH_OIF).

      Fixes: 42a7b32b73d6 ("xfrm: Add oif to dst lookups")

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c4047f533f3cb1c57e82ad02f3aa7054406df648
  Author: Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxx>
  Date:   Tue Sep 15 18:28:00 2015 -0300

      net-sysfs: get_netdev_queue_index() cleanup

      Redo commit ed1acc8cd8c22efa919da8d300bab646e01c2dce.

      Commit 822b3b2ebfff8e9b3d006086c527738a7ca00cd0 ("net: Add max rate tx 
queue
      attribute") moved get_netdev_queue_index around, but kept the old version.
      Probably because of a reuse of the original patch from before Eric's 
change to
      that function.

      Remove one inline keyword, and no need for a loop to find
      an index into a table.

      Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxx>
      Fixes: 822b3b2ebfff ("net: Add max rate tx queue attribute")
      Acked-by:  Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Acked-by: John Fastabend <john.r.fastabend@xxxxxxxxx>
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d828755eae637c6ca39e30702e98abaf34cac146
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Tue Sep 15 17:20:09 2015 +0530

      cxgb4: add device ID for few T5 adapters

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2e64126bb0fb581b55e52e51ec451ebb0d6769c8
  Author: Phil Sutter <phil@xxxxxx>
  Date:   Tue Sep 15 10:33:07 2015 +0200

      net: qdisc: enhance default_qdisc documentation

      Aside from some lingual cleanup, point out which interfaces are not or
      partly covered by this setting.

      Signed-off-by: Phil Sutter <phil@xxxxxx>
      Acked-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 562d897d15a6e2bab3cc9b4c172286b612834fe8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 10:50:14 2015 -0600

      net: Add documentation for VRF device

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc5706056baa3002b844ff240a1cc2199a978795
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Sep 14 11:14:50 2015 -0700

      openvswitch: Fix IPv6 exthdr handling with ct helpers.

      Static code analysis reveals the following bug:

              net/openvswitch/conntrack.c:281 ovs_ct_helper()
              warn: unsigned 'protoff' is never less than zero.

      This signedness bug breaks error handling for IPv6 extension headers when
      using conntrack helpers. Fix the error by using a local signed variable.

      Fixes:  cae3a2627520: "openvswitch: Allow attaching helpers to ct
      action"
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ec0c97959abff33a42db9081c22132bcff5b4f2
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Mon Sep 14 20:12:21 2015 +0800

      nfs/filelayout: Fix NULL reference caused by double freeing of fh_array

      If filelayout_decode_layout fail, _filelayout_free_lseg will causes
      a double freeing of fh_array.

      [ 1179.279800] BUG: unable to handle kernel NULL pointer dereference at   
        (null)
      [ 1179.280198] IP: [<ffffffffa027222d>] 
filelayout_free_fh_array.isra.11+0x1d/0x70 [nfs_layout_nfsv41_files]
      [ 1179.281010] PGD 0
      [ 1179.281443] Oops: 0000 [#1]
      [ 1179.281831] Modules linked in: nfs_layout_nfsv41_files(OE) nfsv4(OE) 
nfs(OE) fscache(E) xfs libcrc32c coretemp nfsd crct10dif_pclmul ppdev 
crc32_pclmul crc32c_intel auth_rpcgss ghash_clmulni_intel nfs_acl lockd 
vmw_balloon grace sunrpc parport_pc vmw_vmci parport shpchp i2c_piix4 vmwgfx 
drm_kms_helper ttm drm serio_raw mptspi scsi_transport_spi mptscsih e1000 
mptbase ata_generic pata_acpi [last unloaded: fscache]
      [ 1179.283891] CPU: 0 PID: 13336 Comm: cat Tainted: G           OE   
4.3.0-rc1-pnfs+ #244
      [ 1179.284323] Hardware name: VMware, Inc. VMware Virtual Platform/440BX 
Desktop Reference Platform, BIOS 6.00 05/20/2014
      [ 1179.285206] task: ffff8800501d48c0 ti: ffff88003e3c4000 task.ti: 
ffff88003e3c4000
      [ 1179.285668] RIP: 0010:[<ffffffffa027222d>]  [<ffffffffa027222d>] 
filelayout_free_fh_array.isra.11+0x1d/0x70 [nfs_layout_nfsv41_files]
      [ 1179.286612] RSP: 0018:ffff88003e3c77f8  EFLAGS: 00010202
      [ 1179.287092] RAX: 0000000000000000 RBX: ffff88001fe78900 RCX: 
0000000000000000
      [ 1179.287731] RDX: ffffea0000f40760 RSI: ffff88001fe789c8 RDI: 
ffff88001fe789c0
      [ 1179.288383] RBP: ffff88003e3c7810 R08: ffffea0000f40760 R09: 
0000000000000000
      [ 1179.289170] R10: 0000000000000000 R11: 0000000000000001 R12: 
ffff88001fe789c8
      [ 1179.289959] R13: ffff88001fe789c0 R14: ffff88004ec05a80 R15: 
ffff88004f935b88
      [ 1179.290791] FS:  00007f4e66bb5700(0000) GS:ffffffff81c29000(0000) 
knlGS:0000000000000000
      [ 1179.291580] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [ 1179.292209] CR2: 0000000000000000 CR3: 00000000203f8000 CR4: 
00000000001406f0
      [ 1179.292731] Stack:
      [ 1179.293195]  ffff88001fe78900 00000000000000d0 ffff88001fe78178 
ffff88003e3c7868
      [ 1179.293676]  ffffffffa0272737 0000000000000001 0000000000000001 
ffff88001fe78800
      [ 1179.294151]  00000000614fffce ffffffff81727671 ffff88001fe78100 
ffff88001fe78100
      [ 1179.294623] Call Trace:
      [ 1179.295092]  [<ffffffffa0272737>] filelayout_alloc_lseg+0xa7/0x2d0 
[nfs_layout_nfsv41_files]
      [ 1179.295625]  [<ffffffff81727671>] ? out_of_line_wait_on_bit+0x81/0xb0
      [ 1179.296133]  [<ffffffffa040407e>] pnfs_layout_process+0xae/0x320 
[nfsv4]
      [ 1179.296632]  [<ffffffffa03e0a01>] nfs4_proc_layoutget+0x2b1/0x360 
[nfsv4]
      [ 1179.297134]  [<ffffffffa0402983>] pnfs_update_layout+0x853/0xb30 
[nfsv4]
      [ 1179.297632]  [<ffffffffa039db24>] ? nfs_get_lock_context+0x74/0x170 
[nfs]
      [ 1179.298158]  [<ffffffffa0271807>] filelayout_pg_init_read+0x37/0x50 
[nfs_layout_nfsv41_files]
      [ 1179.298834]  [<ffffffffa03a72d9>] __nfs_pageio_add_request+0x119/0x460 
[nfs]
      [ 1179.299385]  [<ffffffffa03a6bd7>] ? 
nfs_create_request.part.9+0x37/0x2e0 [nfs]
      [ 1179.299872]  [<ffffffffa03a7cc3>] nfs_pageio_add_request+0xa3/0x1b0 
[nfs]
      [ 1179.300362]  [<ffffffffa03a8635>] readpage_async_filler+0x85/0x260 
[nfs]
      [ 1179.300907]  [<ffffffff81180cb1>] read_cache_pages+0x91/0xd0
      [ 1179.301391]  [<ffffffffa03a85b0>] ? nfs_read_completion+0x220/0x220 
[nfs]
      [ 1179.301867]  [<ffffffffa03a8dc8>] nfs_readpages+0x128/0x200 [nfs]
      [ 1179.302330]  [<ffffffff81180ef3>] __do_page_cache_readahead+0x203/0x280
      [ 1179.302784]  [<ffffffff81180dc8>] ? 
__do_page_cache_readahead+0xd8/0x280
      [ 1179.303413]  [<ffffffff81181116>] ondemand_readahead+0x1a6/0x2f0
      [ 1179.303855]  [<ffffffff81181371>] page_cache_sync_readahead+0x31/0x50
      [ 1179.304286]  [<ffffffff811750a6>] generic_file_read_iter+0x4a6/0x5c0
      [ 1179.304711]  [<ffffffffa03a0316>] ? 
__nfs_revalidate_mapping+0x1f6/0x240 [nfs]
      [ 1179.305132]  [<ffffffffa039ccf2>] nfs_file_read+0x52/0xa0 [nfs]
      [ 1179.305540]  [<ffffffff811e343c>] __vfs_read+0xcc/0x100
      [ 1179.305936]  [<ffffffff811e3d15>] vfs_read+0x85/0x130
      [ 1179.306326]  [<ffffffff811e4a98>] SyS_read+0x58/0xd0
      [ 1179.306708]  [<ffffffff8172caaf>] entry_SYSCALL_64_fastpath+0x12/0x76
      [ 1179.307094] Code: c4 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 
00 00 55 48 89 e5 41 55 41 54 53 8b 07 49 89 f4 85 c0 74 47 48 8b 06 49 89 fd 
<48> 8b 38 48 85 ff 74 22 31 db eb 0c 48 63 d3 48 8b 3c d0 48 85
      [ 1179.308357] RIP  [<ffffffffa027222d>] 
filelayout_free_fh_array.isra.11+0x1d/0x70 [nfs_layout_nfsv41_files]
      [ 1179.309177]  RSP <ffff88003e3c77f8>
      [ 1179.309582] CR2: 0000000000000000

      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 0fdea1e8a2853f79d39b8555cc9de16a7e0ab26f
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:43:17 2015 -0400

      SUNRPC: Ensure that we wait for connections to complete before retrying

      Commit 718ba5b87343, moved the responsibility for unlocking the socket to
      xs_tcp_setup_socket, meaning that the socket will be unlocked before we
      know that it has finished trying to connect. The following patch is based 
on
      an initial patch by Russell King to ensure that we delay clearing the
      XPRT_CONNECTING flag until we either know that we failed to initiate
      a connection attempt, or the connection attempt itself failed.

      Fixes: 718ba5b87343 ("SUNRPC: Add helpers to prevent socket create from 
racing")
      Reported-by: Russell King <linux@xxxxxxxxxxxxxxxx>
      Reported-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Tested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Tested-by: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 37a1d3611c126fd9782ce5235791f898f053e763
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 10:18:33 2015 -0700

      ipv6: include NLM_F_REPLACE in route replace notifications

      This patch adds NLM_F_REPLACE flag to ipv6 route replace notifications.
      This makes nlm_flags in ipv6 replace notifications consistent
      with ipv4.

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Reviewed-by: Michal Kubecek <mkubecek@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c9e69c8c58eb8671e9f6cee728088e4c5abc9115
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Fri Aug 7 09:59:14 2015 +0200

      arch/x86/intel-mid: Use kmemdup rather than duplicating its implementation

      The patch was generated using fixed coccinelle semantic patch
      scripts/coccinelle/api/memdup.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2014320

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Cc: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438934377-4922-9-git-send-email-a.hajda@xxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 74c600e36455af85c593702670f38709ca1951ce
  Author: Martyn Welch <martyn@xxxxxxxxxxxx>
  Date:   Thu Sep 17 20:38:47 2015 +0100

      MAINTAINERS: Update email address for Martyn Welch

      I have recently left GE and the email address listed for me in the
      maintainers file is no longer valid. Updating email address.

      Signed-off-by: Martyn Welch <martyn@xxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 0738eff14d817a02ab082c392c96a1613006f158
  Author: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 13:21:22 2015 +0200

      can: Allwinner A10/A20 CAN Controller support - Kernel module

      Kernel module for Allwinner A10/A20 CAN controller.

      Signed-off-by: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 4366bd4fa8c46b61ec0a7d564bd978cfa882692b
  Author: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 13:21:19 2015 +0200

      can: Allwinner A10/A20 CAN Controller support - Devicetree bindings

      Devicetree bindings for Allwinner A10/A20 CAN controller.

      Signed-off-by: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit d24c8f24ea897ae89738b865a41b0a5d70137c46
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Thu Sep 10 21:26:04 2015 +0200

      net: smc91x: convert pxa dma to dmaengine

      Convert the dma transfers to be dmaengine based, now pxa has a dmaengine
      slave driver. This makes this driver a bit more PXA agnostic.

      The driver was tested on pxa27x (mainstone) and pxa310 (zylonite),
      ie. only pxa platforms.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 17a9618e984234fda167ea5e07eae6f4f2ea2186
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:07 2015 +0200

      SUNRPC: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 306a5549355966e480e0dcacdc6b9321d153e0c0
  Author: J. Bruce Fields <bfields@xxxxxxxxxx>
  Date:   Wed Sep 16 17:21:27 2015 -0400

      nfs: fix v4.2 SEEK on files over 2 gigs

      We're incorrectly assigning a loff_t return to an int.  If SEEK_HOLE or
      SEEK_DATA returns an offset over 2^31 then the application will see a
      weird lseek() result (usually -EIO).

      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: bdcc2cd14e4e "NFSv4.2: handle NFS-specific llseek errors"
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>
      Reviewed-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 03c78827db35be20ffa71cb5ccd2cedb192f95d6
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 10:42:27 2015 -0400

      SUNRPC: Fix races between socket connection and destroy code

      When we're destroying the socket transport, we need to ensure that
      we cancel any existing delayed connection attempts, and order them
      w.r.t. the call to xs_close().

      Reported-by:"Suzuki K. Poulose" <suzuki.poulose@xxxxxxx>
      Acked-by: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 048883e0b934d9a5103d40e209cb14b7f33d2933
  Author: Peng Tao <tao.peng@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 11:14:06 2015 +0800

      nfs: fix pg_test page count calculation

      We really want sizeof(struct page *) instead. Otherwise we limit
      maximum IO size to 64 pages rather than 512 pages on a 64bit system.

      Fixes 2e11f829(nfs: cap request size to fit a kmalloced page array).

      Cc: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Peng Tao <tao.peng@xxxxxxxxxxxxxxx>
      Fixes: 2e11f8296d22 ("nfs: cap request size to fit a kmalloced page 
array")
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit a41cbe86df3afbc82311a1640e20858c0cd7e065
  Author: Olga Kornievskaia <aglo@xxxxxxxxx>
  Date:   Mon Sep 14 19:54:36 2015 -0400

      Failing to send a CLOSE if file is opened WRONLY and server reboots on a 
4.x mount

      A test case is as the description says:
      open(foobar, O_WRONLY);
      sleep()  --> reboot the server
      close(foobar)

      The bug is because in nfs4state.c in nfs4_reclaim_open_state() a few
      line before going to restart, there is
      clear_bit(NFS4CLNT_RECLAIM_NOGRACE, &state->flags).

      NFS4CLNT_RECLAIM_NOGRACE is a flag for the client states not open
      owner states. Value of NFS4CLNT_RECLAIM_NOGRACE is 4 which is the
      value of NFS_O_WRONLY_STATE in nfs4_state->flags. So clearing it wipes
      out state and when we go to close it, â??call_closeâ?? doesnâ??t get set 
as
      state flag is not set and CLOSE doesnâ??t go on the wire.

      Signed-off-by: Olga Kornievskaia <aglo@xxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit c8aa33a7114704f3f5a359893a8e1de9ea2940a5
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Wed Sep 9 15:57:59 2015 -0700

      of_pci_irq: Silence bogus "of_irq_parse_pci() failed ..." messages.

      It is perfectly legitimate for a PCI device to have an
      PCI_INTERRUPT_PIN value of zero.  This happens if the device doesn't
      use interrupts, or on PCIe devices, where only MSI/MSI-X are
      supported.

      Silence the annoying "of_irq_parse_pci() failed with rc=-19" error
      messages by moving the printing code into of_irq_parse_pci(), and only
      emitting the message for cases where PCI_INTERRUPT_PIN == 0 is not the
      cause for an early exit.

      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 31b47ae3f18b31d86f553198e624b3b38f6397a2
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Sat Sep 12 12:52:49 2015 +0200

      devicetree: bindings: Extend the bma180 bindings with bma250 info

      The bma180 / bma250 accelerometers share a driver (at least under Linux),
      so it makes sense to also have their bindings info in a single .txt.

      This commit extends the bma180 bindings with bma250 bindings, specifically
      it specifies how the 2 seperate interrupts the bma250 has must be listed
      in devicetree. The existing bma180 driver is already fully compatible
      with the specified bindings.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 9fa04fbeb78eab6f3817e444644348c46c7e2370
  Author: Punit Agrawal <punit.agrawal@xxxxxxx>
  Date:   Tue Sep 8 12:20:49 2015 +0100

      of: thermal: Mark cooling-*-level properties optional

      The cooling-{min,max}-level properties are marked as optional in
      Documentation/devicetree/bindings/cpufreq/cpufreq-dt.txt and the usage
      in various device tree matches this, i.e., some cooling device in the
      device trees provide these properties while others do not.

      Make the bindings in
      Documentation/devicetree/bindings/thermal/thermal.txt consistent with
      the cpufreq-dt bindings by marking the cooling-*-level properties as
      optional.

      Signed-off-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit eb168b70dea54578a45119fcdb3b48ad5d75fed9
  Author: Punit Agrawal <punit.agrawal@xxxxxxx>
  Date:   Tue Sep 8 12:20:48 2015 +0100

      of: thermal: Fix inconsitency between cooling-*-state and cooling-*-level

      The device trees in the kernel as well as the binding description in
      Documentation/devicetree/bindings/cpufreq/cpufreq-dt.txt use the
      cooling-{min,max}-level property.

      Fix the inconsistency with the binding description in
      Documentation/devicetree/bindings/thermal/thermal.txt by changing
      cooling-*-state properties to cooling-*-level.

      Signed-off-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit dc4dae00d82fedcd7a632f786f9f76c1f7f929a5
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Sep 7 10:49:03 2015 +0100

      Docs: dt: add #msi-cells to GICv3 ITS binding

      The GICv3 ITS uses sideband master identification data (known as a
      DeviceID) to identify which master wrote to a doorbell, and this data is
      used to determine how to react in response to the write.

      Commit 1e6db000482fa65a ("irqchip/gicv3-its: Add platform MSI support")
      added support per this binding, but failed to update the documentation.
      This patch fixes the documentation.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 8e64a7331702b7888ccf84b2b9ff46ab8e167c7f
  Merge: 2e5735f 335c258
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 12:32:40 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fixes from Sage Weil:
       "These are both fixes to the new and improved keepalive2 behavior"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        libceph: advertise support for keepalive2
        libceph: don't access invalid memory in keepalive2 path

  commit 2e5735f4c377377cb738270024083f74ee058877
  Merge: d109c4b e11fc21
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 12:25:42 2015 -0700

      Merge tag 'for-v4.3-rc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sre/linux-power-supply

      Pull power supply fixes from Sebastian Reichel:
       "twl4030-charger fixes"

      * tag 'for-v4.3-rc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sre/linux-power-supply:
        twl4030_charger: fix another compile error
        Revert "twl4030_charger: correctly handle -EPROBE_DEFER from 
devm_usb_get_phy_by_node"

  commit d7ba2a024cf19261b34825f89d30ceef9a5ff864
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Jul 29 18:45:33 2015 +0900

      of: add vendor prefix for Socionext Inc.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit d34e210ed3a28050441f15228fd5ed929028d9cd
  Author: Gabriel Fernandez <gabriel.fernandez@xxxxxxxxxx>
  Date:   Wed Sep 16 09:42:59 2015 +0200

      drivers: clk: st: Rename st_pll3200c32_407_c0_x into st_pll3200c32_cx_x

      Use a generic name for this kind of PLL

      Correction in dts files are already done here:
      commit 5eb26c605909 ("ARM: STi: DT: Rename st_pll3200c32_407_c0_x into 
st_pll3200c32_cx_x")

      Signed-off-by: Gabriel Fernandez <gabriel.fernandez@xxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit bf6445631c6f00882b25516a174d5073ce0c6f81
  Author: Peter Senna Tschudin <peter.senna@xxxxxxxxx>
  Date:   Thu Sep 17 12:08:53 2015 +0200

      perf tools: Bool functions shouldn't return -1

      Returning a negative value for a boolean function seem to have the
      undesired effect of returning true. Replace -1 by false in a
      bool-returning function.

      The diff of the .s file before and after the change (for x86_64):

        3907c3907
        <       movl    $1, %ebx
        ---
        >       xorl    %ebx, %ebx

      while if -1 is replaced by true, the diff is empty.

      This issue was found by the following Coccinelle semantic patch:

        <smpl>
        @@
        identifier f;
        constant C;
        typedef bool;
        @@
        bool f (...){
        <+...
        * return -C;
        ...+>
        }
        </smpl>

      Signed-off-by: Peter Senna Tschudin <peter.senna@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Milos Vyletel <milos@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442484533-19742-1-git-send-email-peter.senna@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d109c4bb4513b8a63d56117f683901492093bfa9
  Merge: 42dc2a3 df057cc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 11:28:17 2015 -0700

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Will Deacon:
       "This addresses some problems with filesystem writeback due to the
        recently merged hardware DBM patches, which caused us to treat some
        read-only pages as dirty.

        There are also some other, less significant fixes that are described
        in the summary below:

        A mixture of fixes for regressions introduced during the merge window,
        some longer standing problems that we spotted and a couple of hardware
        errata.  The main changes are:

         - Fix fallout from the h/w DBM patches, causing filesystem writeback
           issues on both v8 and v8.1 CPUs

         - Workaround for Cortex-A53 erratum #843419 in the module loader

         - Fix for long-standing issue with compat big-endian signal handlers
           using the saved floating point state"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: errata: add module build workaround for erratum #843419
        arm64: compat: fix vfp save/restore across signal handlers in big-endian
        arm64: cpu hotplug: ensure we mask out CPU_TASKS_FROZEN in notifiers
        arm64: head.S: initialise mdcr_el2 in el2_setup
        arm64: enable generic idle loop
        arm64: pgtable: use a single bit for PTE_WRITE regardless of DBM
        arm64: Fix pte_modify() to preserve the hardware dirty information
        arm64: Fix the pte_hw_dirty() check when AF/DBM is enabled
        arm64: dma-mapping: check whether cma area is initialized or not

  commit 42dc2a3048247109b0a5ee6345226cbd3e4f6410
  Merge: 1345df2 03da3ff
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 11:01:34 2015 -0700

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Ingo Molnar:
       - misc fixes all around the map
       - block non-root vm86(old) if mmap_min_addr != 0
       - two small debuggability improvements
       - removal of obsolete paravirt op

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/platform: Fix Geode LX timekeeping in the generic x86 build
        x86/apic: Serialize LVTT and TSC_DEADLINE writes
        x86/ioapic: Force affinity setting in setup_ioapic_dest()
        x86/paravirt: Remove the unused pv_time_ops::get_tsc_khz method
        x86/ldt: Fix small LDT allocation for Xen
        x86/vm86: Fix the misleading CONFIG_VM86 Kconfig help text
        x86/cpu: Print family/model/stepping in hex
        x86/vm86: Block non-root vm86(old) if mmap_min_addr != 0
        x86/alternatives: Make optimize_nops() interrupt safe and synced
        x86/mm/srat: Print non-volatile flag in SRAT
        x86/cpufeatures: Enable cpuid for Intel SHA extensions

  commit 1345df21ac542daa9d8613f89a3f0b5f32d636f8
  Merge: c2ea72f eef7635
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 10:55:25 2015 -0700

      Merge branch 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer fixes from Ingo Molnar:
       "A fix for an abs()/abs64() bug that caused too slow NTP convergence on
        32-bit kernels, plus a removal of an obsolete clockevents driver
        facility after all users got converted during the merge window"

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        clockevents: Remove unused set_mode() callback
        time: Fix timekeeping_freqadjust()'s incorrect use of abs() instead of 
abs64()

  commit c2ea72fd869145130969d6b07273c479cf2a22f5
  Merge: a706797 5473e0c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 10:49:42 2015 -0700

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fixes from Ingo Molnar:
       "A migrate_tasks() locking fix, and a late-coming nohz change plus a
        nohz debug check"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched: 'Annotate' migrate_tasks()
        nohz: Assert existing housekeepers when nohz full enabled
        nohz: Affine unpinned timers to housekeepers

  commit 23c3f310e897837aeb8ffe8700b803cb58e7b35d
  Author: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:50:20 2015 +0100

      regulator: core: Correct return value check in regulator_resolve_supply

      The ret pointer passed to regulator_dev_lookup is only filled with a
      valid error code if regulator_dev_lookup returned NULL. Currently
      regulator_resolve_supply checks this ret value before it checks if a
      regulator was returned, this can result in valid regulator lookups being
      ignored.

      Fixes: 6261b06de565 ("regulator: Defer lookup of supply to regulator_get")
      Signed-off-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit a706797febf4ff60ad61f855a01707be9fc3cf4c
  Merge: 9786cff f6cf87f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 10:37:46 2015 -0700

      Merge branch 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf fixes from Ingo MOlnar:
       "Mostly tooling fixes, but also two x86 PMU driver fixes"

      * 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        perf tests: Fix software clock events test setting maps
        perf tests: Fix task exit test setting maps
        perf evlist: Fix create_syswide_maps() not propagating maps
        perf evlist: Fix add() not propagating maps
        perf evlist: Factor out a function to propagate maps for a single evsel
        perf evlist: Make create_maps() use set_maps()
        perf evlist: Make set_maps() more resilient
        perf evsel: Add own_cpus member
        perf evlist: Fix missing thread_map__put in propagate_maps()
        perf evlist: Fix splice_list_tail() not setting evlist
        perf evlist: Add has_user_cpus member
        perf evlist: Remove redundant validation from propagate_maps()
        perf evlist: Simplify set_maps() logic
        perf evlist: Simplify propagate_maps() logic
        perf top: Fix segfault pressing -> with no hist entries
        perf header: Fixup reading of HEADER_NRCPUS feature
        perf/x86/intel: Fix constraint access
        perf/x86/intel/bts: Set event->hw.itrace_started in pmu::start to match 
the new logic
        perf tools: Fix use of wrong event when processing exit events
        perf tools: Fix parse_events_add_pmu caller

  commit 335c25858218e76ef47f92ecb9d22e919d36140d
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Mon Sep 14 12:44:22 2015 +0300

      libceph: advertise support for keepalive2

      We are the client, but advertise keepalive2 anyway - for consistency,
      if nothing else.  In the future the server might want to know whether
      its clients support keepalive2.

      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Yan, Zheng <zyan@xxxxxxxxxx>

  commit 7f61f545657281a3a1b0faf68993165ebdecc51b
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Mon Sep 14 16:01:05 2015 +0300

      libceph: don't access invalid memory in keepalive2 path

      This

          struct ceph_timespec ceph_ts;
          ...
          con_out_kvec_add(con, sizeof(ceph_ts), &ceph_ts);

      wraps ceph_ts into a kvec and adds it to con->out_kvec array, yet
      ceph_ts becomes invalid on return from prepare_write_keepalive().  As
      a result, we send out bogus keepalive2 stamps.  Fix this by encoding
      into a ceph_timespec member, similar to how acks are read and written.

      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Yan, Zheng <zyan@xxxxxxxxxx>

  commit 74a093918b2296bed7136a7830821d45d3d5cb1a
  Merge: aa1471a 19ab6bc
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 09:39:39 2015 -0700

      Merge tag 'usb-serial-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial into usb-linus

      Johan writes:

      USB-serial fixes for v4.3-rc2

      Just some new ZTE device IDs.

      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>

  commit b0063dbfb031a7c728ed0d9533257e8329292cf1
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 17 12:54:30 2015 -0300

      tools build: Add test for presence of __get_cpuid() gcc builtin

      The auxtrace code needed by Intel PT uses the __get_cpuid() gcc builtin,
      that is not present in old systems, breaking the build.

      Add a test to check for that builtin and disable AUXTRACE in those
      systems.

        [acme@rhel5 linux]$  make NO_LIBPERL=1 -C tools/perf O=/tmp/build/perf 
install-bin
        make: Entering directory `/home/acme/git/linux/tools/perf'
          BUILD:   Doing 'make -j2' parallel build

        Auto-detecting system features:
        <SNIP>
        ...                          lzma: [ on  ]
        ...                     get_cpuid: [ OFF ]
        <SNIP>
        config/Makefile:630: Your gcc lacks the __get_cpuid() builtin, disables 
support for auxtrace/Intel PT, please install a newer gcc
          MKDIR    /tmp/build/perf/util/
        <SNIP>

      This fixes the build on old systems such as RHEL/CentOS 5.11.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: "Naveen N. Rao" <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Victor Kamensky <victor.kamensky@xxxxxxxxxx>
      Cc: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-d4puslul0jltoodzpx9r4sje@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f8ac8606fd3cd72183de8eec2b151ff05040c70f
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 17 12:20:28 2015 -0300

      tools build: Add test for presence of numa_num_possible_cpus() in libnuma

      The existing numa test checks only if numa.h and numa_available() are
      present, but that can be satisfied with an old libnuma that is not
      enough for the 'perf bench numa' entry, so add a test to check for that:

        [acme@rhel5 linux]$  make NO_AUXTRACE=1 NO_LIBPERL=1 -C tools/perf 
O=/tmp/build/perf install-bin
        make: Entering directory `/home/acme/git/linux/tools/perf'
          BUILD:   Doing 'make -j2' parallel build

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...                       libnuma: [ on  ]
        ...        numa_num_possible_cpus: [ OFF ]
        ...                       libperl: [ on  ]

        <SNIP>
        config/Makefile:577: Old numa library found, disables 'perf bench numa 
mem' benchmark, please install numactl-devel/libnuma-devel/libnuma-dev >= 2.0.8
          INSTALL  binaries
        <SNIP>

      This fixes the build on old systems such as RHEL/CentOS 5.11.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: "Naveen N. Rao" <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Victor Kamensky <victor.kamensky@xxxxxxxxxx>
      Cc: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-zqriqkezppi2de2iyjin1tnc@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 179f36dde3cec0f9f05a757b68f6a58e4edbcc95
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 17 11:30:20 2015 -0300

      Revert "perf symbols: Fix mismatched declarations for elf_getphdrnum"

      This reverts commit f785f2357673d520a0b7b468973cdd197f336494.

      We have a test to check if elf_getphdrnum() is present, so, if it fails,
      we'll get:

        [acme@rhel5 linux]$ cat 
/tmp/build/perf/feature/test-libelf-getphdrnum.make.output
        cc1: warnings being treated as errors
        test-libelf-getphdrnum.c: In function â??mainâ??:
        test-libelf-getphdrnum.c:7: warning: implicit declaration of function 
â??elf_getphdrnumâ??
        [acme@rhel5 linux]$

      And this block will not be compiled:

        #ifndef HAVE_ELF_GETPHDRNUM_SUPPORT
        static int elf_getphdrnum(Elf *elf, size_t *dst)
        ...
        #endif

      So, if elf_getphdrnum() is being defined somewhere, there is a problem
      with the test that is not detecting that function, go fix it.

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: "Naveen N. Rao" <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Victor Kamensky <victor.kamensky@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-qn459fal6acvcvm50i8zxx9k@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 994518799930fc363d47cb7cf0d1abed1790bf16
  Author: Ming Lei <ming.lei@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 00:06:28 2015 +0800

      block: fix bounce_end_io

      When bio bounce is involved, one new bio and its biovecs are
      cloned from the comming bio, which can be one fast-cloned bio
      from upper layer(such as dm).

      So it is obviously wrong to assume the start index of the coming(
      original) bio's io vector is zero, which can be any value between
      0 and (bi_max_vecs - 1), especially in case of bio split.

      This patch fixes Fedora's booting oops on i386, often with the
      following kernel log together:

      > [    9.026738] systemd[1]: Switching root.
      > [    9.036467] systemd-journald[149]: Received SIGTERM from PID 1
      > (systemd).
      > [    9.082262] BUG: Bad page state in process kworker/u5:1  pfn:372ac
      > [    9.083989] page:f3d32ae0 count:0 mapcount:0 mapping:f2252178
      > index:0x16a
      > [    9.085755] flags: 0x40020021(locked|lru|mappedtodisk)
      > [    9.087284] page dumped because: page still charged to cgroup
      > [    9.088772] bad because of flags:
      > [    9.089731] flags: 0x21(locked|lru)
      > [    9.090818] page->mem_cgroup:f2c3e400

      Reported-by: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Tested-by: Adam Williamson <awilliam@xxxxxxxxxx>
      Cc: Ming Lin <mlin@xxxxxxxxxx>
      Cc: Mike Snitzer <snitzer@xxxxxxxxxx>
      Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 52cc6eead9095e2faf2ec7afc013aa3af1f01ac5
  Author: Ming Lei <ming.lei@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 09:58:38 2015 -0600

      block: blk-merge: fast-clone bio when splitting rw bios

      biovecs has become immutable since v3.13, so it isn't necessary
      to allocate biovecs for the new cloned bios, then we can save
      one extra biovecs allocation/copy, and the allocation is often
      not fixed-length and a bit more expensive.

      For example, if the 'max_sectors_kb' of null blk's queue is set
      as 16(32 sectors) via sysfs just for making more splits, this patch
      can increase throught about ~70% in the sequential read test over
      null_blk(direct io, bs: 1M).

      Cc: Christoph Hellwig <hch@xxxxxxxxxxxxx>
      Cc: Kent Overstreet <kent.overstreet@xxxxxxxxx>
      Cc: Ming Lin <ming.l@xxxxxxxxxxxxxxx>
      Cc: Dongsu Park <dpark@xxxxxxxxxx>
      Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxxxxx>

      This fixes a performance regression introduced by commit 54efd50bfd,
      and allows us to take full advantage of the fact that we have immutable
      bio_vecs. Hand applied, as it rejected violently with commit
      5014c311baa2.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit ba8fe0f85e15d047686caf8a42463b592c63c98c
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:52:21 2015 -0600

      pmem: add proper fencing to pmem_rw_page()

      pmem_rw_page() needs to call wmb_pmem() on writes to make sure that the
      newly written data is durable.  This flow was added to pmem_rw_bytes()
      and pmem_make_request() with this commit:

      commit 61031952f4c8 ("arch, x86: pmem api for ensuring durability of
        persistent memory updates")

      ...the pmem_rw_page() path was missed.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 4ca8b57a0af145f4e791f21dbca6ad789da9ee8b
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Sep 16 21:25:38 2015 +0800

      libnvdimm: pfn_devs: Fix locking in namespace_store

      Always take device_lock() before nvdimm_bus_lock() to prevent deadlock.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 9786cff38a31c452e32fd2f9a479dd7d19d91712
  Merge: 1b3dfde 1975dbc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 08:45:23 2015 -0700

      Merge branch 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull locking fixes from Ingo Molnar:
       "Spinlock performance regression fix, plus documentation fixes"

      * 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        locking/static_keys: Fix up the static keys documentation
        locking/qspinlock/x86: Only emit the test-and-set fallback when 
building guest support
        locking/qspinlock/x86: Fix performance regression under unaccelerated 
VMs
        locking/static_keys: Fix a silly typo

  commit 1b3dfde386b7c72b8f5430dc40eee538eb40c948
  Merge: 7271484 31409c9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 08:44:27 2015 -0700

      Merge branch 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RCU fix from Ingo Molnar:
       "Fix a false positive warning"

      * 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition

  commit 4be9c1fc3df9c3b03c9bde8aec5e44fc73996a3f
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Sep 16 21:24:47 2015 +0800

      libnvdimm: btt_devs: Fix locking in namespace_store

      Always take device_lock() before nvdimm_bus_lock() to prevent deadlock.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit efe4d36a75d4dfd1a9c161b2bbf9b90beb4d9648
  Merge: 9bf9fde ef74891
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Sep 17 16:51:59 2015 +0200

      Merge tag 'kvm-arm-for-4.3-rc2-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into kvm-master

      Second set of KVM/ARM changes for 4.3-rc2

      - Workaround for a Cortex-A57 erratum
      - Bug fix for the debugging infrastructure
      - Fix for 32bit guests with more than 4GB of address space
        on a 32bit host
      - A number of fixes for the (unusual) case when we don't use
        the in-kernel GIC emulation
      - Removal of ThumbEE handling on arm64, since these have been
        dropped from the architecture before anyone actually ever
        built a CPU
      - Remove the KVM_ARM_MAX_VCPUS limitation which has become
        fairly pointless

  commit 52f5664a87474894e7da44f3b778dbe4e4c740b7
  Author: Ariel Nahum <arieln@xxxxxxxxxxxx>
  Date:   Thu Sep 3 19:49:55 2015 +0300

      libiscsi: Fix iscsi_check_transport_timeouts possible infinite loop

      Connection last_ping is not being updated when iscsi_send_nopout fails.
      Not updating the last_ping will cause firing a timer to a past time
      (last_ping + ping_tmo < current_time) which triggers an infinite loop of
      iscsi_check_transport_timeouts() and hogs the cpu.

      Fix this issue by checking the return value of iscsi_send_nopout.
      If it fails set the next_timeout to one second later.

      Signed-off-by: Ariel Nahum <arieln@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Reviewed-by: Mike Christie <michaelc@xxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 590f07874e8e3c83729b919312c65aea2533c8cf
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 07:38:36 2015 +0000

      x86/pci/dma: Fix gfp flags for coherent DMA memory allocation

      Commit 6894258eda2f reversed the order of gfp_flags adjustment in
      dma_alloc_attrs() for x86 [arch/x86/kernel/pci-dma.c] As a result,
      relevant flags set by dma_alloc_coherent_gfp_flags() are just
      discarded and cause coherent DMA memory allocation failure on some
      devices.

      Fixes: 6894258eda2f ("dma-mapping: consolidate 
dma_{alloc,free}_{attrs,coherent}")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Tested-by: Tony Luck <tony.luck@xxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Link: 
http://lkml.kernel.org/r/20150914073834.GA13077@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 6fa92e2bcf6390e64895b12761e851c452d87bd8
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 9 15:41:52 2015 +0800

      staging: ion: fix corruption of ion_import_dma_buf

      we found this issue but still exit in lastest kernel. Simply
      keep ion_handle_create under mutex_lock to avoid this race.

      WARNING: CPU: 2 PID: 2648 at drivers/staging/android/ion/ion.c:512 
ion_handle_add+0xb4/0xc0()
      ion_handle_add: buffer already found.
      Modules linked in: iwlmvm iwlwifi mac80211 cfg80211 compat
      CPU: 2 PID: 2648 Comm: TimedEventQueue Tainted: G        W    3.14.0 #7
       00000000 00000000 9a3efd2c 80faf273 9a3efd6c 9a3efd5c 80935dc9 811d7fd3
       9a3efd88 00000a58 812208a0 00000200 80e128d4 80e128d4 8d4ae00c a8cd8600
       a8cd8094 9a3efd74 80935e0e 00000009 9a3efd6c 811d7fd3 9a3efd88 9a3efd9c
      Call Trace:
        [<80faf273>] dump_stack+0x48/0x69
        [<80935dc9>] warn_slowpath_common+0x79/0x90
        [<80e128d4>] ? ion_handle_add+0xb4/0xc0
        [<80e128d4>] ? ion_handle_add+0xb4/0xc0
        [<80935e0e>] warn_slowpath_fmt+0x2e/0x30
        [<80e128d4>] ion_handle_add+0xb4/0xc0
        [<80e144cc>] ion_import_dma_buf+0x8c/0x110
        [<80c517c4>] reg_init+0x364/0x7d0
        [<80993363>] ? futex_wait+0x123/0x210
        [<80992e0e>] ? get_futex_key+0x16e/0x1e0
        [<8099308f>] ? futex_wake+0x5f/0x120
        [<80c51e19>] vpu_service_ioctl+0x1e9/0x500
        [<80994aec>] ? do_futex+0xec/0x8e0
        [<80971080>] ? prepare_to_wait_event+0xc0/0xc0
        [<80c51c30>] ? reg_init+0x7d0/0x7d0
        [<80a22562>] do_vfs_ioctl+0x2d2/0x4c0
        [<80b198ad>] ? inode_has_perm.isra.41+0x2d/0x40
        [<80b199cf>] ? file_has_perm+0x7f/0x90
        [<80b1a5f7>] ? selinux_file_ioctl+0x47/0xf0
        [<80a227a8>] SyS_ioctl+0x58/0x80
        [<80fb45e8>] syscall_call+0x7/0x7
        [<80fb0000>] ? mmc_do_calc_max_discard+0xab/0xe4

      Fixes: 83271f626 ("ion: hold reference to handle...")
      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Reviewed-by: Laura Abbott <labbott@xxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx> # 3.14+
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 989e503c929d82f34a3cae51e98cbc2745e7472c
  Author: Mark Hounschell <markh@xxxxxxxxxx>
  Date:   Tue Sep 15 08:56:10 2015 -0400

      staging: dgap: Remove myself from the MAINTAINERS file

      Removes myself from the MAINTAINERS file for the dgap driver.
      There appears to be no way to get the firmware files required
      by the dgap driver into the linux-firmware tree. The dgap
      driver is useless wihtout this firmware. This product is
      considered an obsolete product by Digi. They will not respond
      to an inquiry concerning it or its firmware.

      Signed-off-by: Mark Hounschell <markh@xxxxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 981473c74c0930190aa4651efebb9bb1f784416e
  Author: Christian Gromm <christian.gromm@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 17:33:35 2015 +0200

      staging: most: Add dependency to HAS_IOMEM

      This patch prevents the module hdm_dim2 from breaking the build in case
      HAS_IOMEM is not configured.

      Reported-by: <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Christian Gromm <christian.gromm@xxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit f5ab93fa5e79bacd83f0866ad5c3950eee279b66
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 16 22:16:38 2015 +0530

      staging: unisys: remove reference of visorutil

      commit 53490b545cb0 ("staging: unisys: move periodic_work.c into the 
visorbus directory")
      has removed the visorutil directory but missed removing the reference in
      the Makefile.

      Fixes: 53490b545cb0 ("staging: unisys: move periodic_work.c into the 
visorbus directory")
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 2110d70c5e58326a10e93cfefdc0b3686e2ada12
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Sat Aug 8 10:46:02 2015 +0200

      cpu/cacheinfo: Fix teardown path

      Philip Müller reported a hang when booting 32-bit 4.1 kernel on an AMD
      box. A fragment of the splat was enough to pinpoint the issue:

        task: f58e0000 ti: f58e8000 task.ti: f58e800
        EIP: 0060:[<c135a903>] EFLAGS: 00010206 CPU: 0
        EIP is at free_cache_attributes+0x83/0xd0
        EAX: 00000001 EBX: f589d46c ECX: 00000090 EDX: 360c2000
        ESI: 00000000 EDI: c1724a80 EBP: f58e9ec0 ESP: f58e9ea0
         DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
        CR0: 8005003b CR2: 000000ac CR3: 01731000 CR4: 000006d0

      cache_shared_cpu_map_setup() did check sibling CPUs cacheinfo descriptor
      while the respective teardown path cache_shared_cpu_map_remove() didn't.
      Fix that.

      >From tglx's version: to be on the safe side, move the cacheinfo
      descriptor check to free_cache_attributes(), thus cleaning up the
      hotplug path a little and making this even more robust.

      Reported-and-tested-by: Philip Müller <philm@xxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1
      Cc: Andre Przywara <andre.przywara@xxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: manjaro-dev@xxxxxxxxxxx
      Cc: Philip Müller <philm@xxxxxxxxxxx>
      Link: https://lkml.kernel.org/r/55B47BB8.6080202@xxxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit ef748917b529847277f07c98c55e1c0ce416449f
  Author: Ming Lei <ming.lei@xxxxxxxxxxxxx>
  Date:   Wed Sep 2 14:31:21 2015 +0800

      arm/arm64: KVM: Remove 'config KVM_ARM_MAX_VCPUS'

      This patch removes config option of KVM_ARM_MAX_VCPUS,
      and like other ARCHs, just choose the maximum allowed
      value from hardware, and follows the reasons:

      1) from distribution view, the option has to be
      defined as the max allowed value because it need to
      meet all kinds of virtulization applications and
      need to support most of SoCs;

      2) using a bigger value doesn't introduce extra memory
      consumption, and the help text in Kconfig isn't accurate
      because kvm_vpu structure isn't allocated until request
      of creating VCPU is sent from QEMU;

      3) the main effect is that the field of vcpus[] in 'struct kvm'
      becomes a bit bigger(sizeof(void *) per vcpu) and need more cache
      lines to hold the structure, but 'struct kvm' is one generic struct,
      and it has worked well on other ARCHs already in this way. Also,
      the world switch frequecy is often low, for example, it is ~2000
      when running kernel building load in VM from APM xgene KVM host,
      so the effect is very small, and the difference can't be observed
      in my test at all.

      Cc: Dann Frazier <dann.frazier@xxxxxxxxxxxxx>
      Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxxxxx>
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 34c3faa353db8f5d3ce9966cf854d5643c64c4db
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Sep 15 17:15:33 2015 +0100

      arm64: KVM: Remove all traces of the ThumbEE registers

      Although the ThumbEE registers and traps were present in earlier
      versions of the v8 architecture, it was retrospectively removed and so
      we can do the same.

      Whilst this breaks migrating a guest started on a previous version of
      the kernel, it is much better to kill these (non existent) registers
      as soon as possible.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      [maz: added commend about migration]
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 688bc577ac42ae3d07c889a1f0a72f0b23763d58
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 16 16:18:59 2015 +0100

      arm: KVM: Disable virtual timer even if the guest is not using it

      When running a guest with the architected timer disabled (with QEMU and
      the kernel_irqchip=off option, for example), it is important to make
      sure the timer gets turned off. Otherwise, the guest may try to
      enable it anyway, leading to a screaming HW interrupt.

      The fix is to unconditionally turn off the virtual timer on guest
      exit.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit c4cbba9fa078f55d9f6d081dbb4aec7cf969e7c7
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 16 16:18:59 2015 +0100

      arm64: KVM: Disable virtual timer even if the guest is not using it

      When running a guest with the architected timer disabled (with QEMU and
      the kernel_irqchip=off option, for example), it is important to make
      sure the timer gets turned off. Otherwise, the guest may try to
      enable it anyway, leading to a screaming HW interrupt.

      The fix is to unconditionally turn off the virtual timer on guest
      exit.

      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 96d4ee8aaa3cfbfadf137904f3696a9a84fab2d3
  Author: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
  Date:   Mon Sep 7 12:15:56 2015 -0400

      s390/s390x: allocate sys_membarrier system call number

      Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      CC: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      CC: linux-api@xxxxxxxxxxxxxxx
      CC: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      CC: linux-s390@xxxxxxxxxxxxxxx
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 3dc636b2dafbf05b86decc2a55989c3261ffd116
  Author: Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 18:09:20 2015 +0200

      s390/configs//zfcpdump_defconfig: Remove CONFIG_MEMSTICK

      This config option is completely irrelevant for zfcpdump and
      unfortunately causes a kernel panic on recent kernels in
      "mspro_block_init()/driver_register()".

      Signed-off-by: Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 022435713c0391020b55706c5b80fa1be44ba321
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Wed Sep 9 09:39:58 2015 +0200

      s390: wire up userfaultfd system call

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 61cc37906b45534fcc2bea03c17e135ec010b624
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Sep 10 11:18:20 2015 +0200

      s390/vtime: correct scaled cputime for SMT

      The scaled cputime is supposed to be derived from the normal per-thread
      cputime by dividing it with the average thread density in the last 
interval.

      The calculation of the scaling values for the average thread density is
      incorrect. The current, incorrect calculation:

          Ci = cycle count with i active threads
          T = unscaled cputime, sT = scaled cputime
          sT = T * (C1 + C2 + ... + Cn) / (1*C1 + 2*C2 + ... + n*Cn)

      The calculation happens to yield the correct numbers for the simple cases
      with only one Ci value not zero. But for cases with multiple Ci values not
      zero it fails. E.g. on a SMT-2 system with one thread active half the time
      and two threads active for the other half of the time it fails, the 
scaling
      factor should be 3/4 but the formula gives 2/3.

      The correct formula is

          sT = T * (C1/1 + C2/2 + ... + Cn/n) / (C1 + C2 + ... + Cn)

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 58f8e9da33eb0104f5bee3e8b3ca44e1583c78b9
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 10:52:42 2015 +0200

      s390/cpum_cf: Corrected return code for unauthorized counter sets

      Previously, the cpum_cf PMU returned -EPERM if a counter is requested and
      the counter set to which the counter belongs is not authorized.  According
      to the perf_event_open() system call manual, an error code of EPERM 
indicates
      an unsupported exclude setting or CAP_SYS_ADMIN is missing.

      Use ENOENT to indicate that particular counters are not available when the
      counter set which contains the counter is not authorized.  For generic 
events,
      this might trigger a fall back, for example, to a software event.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8d4bd0ed0439dfc780aab801a085961925ed6838
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Sep 8 15:25:39 2015 +0200

      s390/compat: correct uc_sigmask of the compat signal frame

      The uc_sigmask in the ucontext structure is an array of words to keep
      the 64 signal bits (or 1024 if you ask glibc but the kernel sigset_t
      only has 64 bits).

      For 64 bit the sigset_t contains a single 8 byte word, but for 31 bit
      there are two 4 byte words. The compat signal handler code uses a
      simple copy of the 64 bit sigset_t to the 31 bit compat_sigset_t.
      As s390 is a big-endian architecture this is incorrect, the two words
      in the 31 bit sigset_t array need to be swapped.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Reported-by: Stefan Liebler <stli@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 9380cf5a884e237fc0e2571d5adf0b43bb4412c8
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Wed Sep 9 13:15:00 2015 +0200

      s390: fix floating point register corruption

      The critical section cleanup code misses to add the offset of the
      thread_struct to the task address.
      Therefore, if the critical section code gets executed, it may corrupt
      the task struct or restore the contents of the floating point registers
      from the wrong memory location.
      Fixes d0164ee20d "s390/kernel: remove save_fpu_regs() parameter and use
      __LC_CURRENT instead".

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Reviewed-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 88d64253785936d75323c74e7126d180e26de560
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Sep 8 13:59:08 2015 +0200

      s390/hibernate: fix save and restore of vector registers

      The swsusp_arch_suspend()/swsusp_arch_resume() functions currently only
      save and restore the floating point registers. If the task that started
      the hibernation process is using vector registers they can get lost.
      To fix this just call save_fpu_regs in swsusp_arch_suspend(), the restore
      will happen automatically on return to user space.

      Reported-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ad5001cc7cdf9aaee5eb213fdee657e4a3c94776
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 13:37:00 2015 +0200

      netfilter: nf_log: wait for rcu grace after logger unregistration

      The nf_log_unregister() function needs to call synchronize_rcu() to make 
sure
      that the objects are not dereferenced anymore on module removal.

      Fixes: 5962815a6a56 ("netfilter: nf_log: use an array of loggers instead 
of list")
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit ce26d8137bc5c5b8371f91646bda969ed7f8b398
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Tue Sep 15 12:19:45 2015 +0000

      Bluetooth: hci_qca: Coding style clean up

      Cleanup patch to fix spaces required reported by checkpatch

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 10bd9731cc7257a6f53c0a208003414d872d627e
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 11 15:02:36 2015 +0000

      Bluetooth: bt3c_cs: clean up obsolete functions

      simple_strtoul is obsolete, use kstrtoul instead reported by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 8f9d02f470f48416444ac3a1eacecdd0f743f1a7
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Thu Sep 10 17:07:00 2015 +0100

      Bluetooth: Remove SCO fragments on connection close

      SCO packet reassembler may have a fragment of SCO packet, from
      previous connection, cached and not removed when SCO connection
      is ended. Packets from new SCO connection are then going to be
      attached to that fragment, creating an invalid SCO packets.

      Controllers like Intel's WilkinsPeak are always fragmenting
      SCO packet into 3 parts (#1, #2, #3). Packet #1 contains
      SCO header and audio data, others just audio data. if there is
      a fragment cached from previous connection, i.e. #1, first
      SCO packet from new connection is going to be attached to it
      creating packet consisting of fragments #1-#1-#2. This will
      be forwarded to upper layers. After that, fragment #3 is going
      to be used as a starting point for another SCO packet.
      It does not contain a SCO header, but the code expects it,
      casts a SCO header structure on it, and reads whatever audio
      data happens to be there as SCO packet length and handle.
      From that point on, we are assembling random data into SCO
      packets. Usually it recovers quickly as initial audio data
      contains mostly zeros (muted stream), but setups of over
      4 seconds were observed.
      Issue manifests itself by printing on the console:
      Bluetooth: hci0 SCO packet for unknown connection handle 48
      Bluetooth: hci0 SCO packet for unknown connection handle 2560
      Bluetooth: hci0 SCO packet for unknown connection handle 12288
      It may also show random handles if audio data was non-zeroed.
      Hcidump shows SCO packets with random length and handles.

      Few messages with handle 0 at connection creation are OK
      for some controllers (like WilkinsPeak), as there are SCO packets
      with zeroed handle at the beginning (possible controller bug).
      Few of such messages at connection end, with a handle looking
      sane (around 256, 512, 768 ...) is also OK, as these are last
      SCO packets that were assembled and sent up, before connection
      was ended, but were not handled in time.

      This issue may still manifest itself on WilkinsPeak as it sometimes,
      at SCO connection creation, does not send third fragment of first
      SCO packet (#1-#2-#1-#2-#3...). This is a firmware bug and this
      patch does not address it.

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f755247379912f1b855f05cb44e3e2b11abdee11
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 9 21:04:15 2015 +0200

      Bluetooth: hci_intel: Enable IRQ wake capability

      We need to explicitly enable the IRQ wakeup mode to let the controller
      wake the system from sleep states (like suspend-to-ram).
      PM suspend/resume callbacks now call the generic intel device PM
      functions after enabling/disabling IRQ wake.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 30e945fb28a66bbbc00859540f79d08e76dec2e2
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 9 19:08:02 2015 +0200

      Bluetooth: hci_intel: Give priority to LPM packets

      Change the way to insert LPM packets into the txq.
      Use skb_queue_head instead of skb_queue_tail to always prioritise LPM
      packets over potential tx queue content.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 9def9afde77a298bfc6ad84a6c5a9e9523aa8bab
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Sat Sep 5 12:27:59 2015 +0200

      atusb: add handling for different chipnames

      This patch supports handling for printout different chipnames between
      atusb and rzusb. The rzusb contains an at86rf230 and atusb an at86rf231
      transceiver.

      Cc: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c5080d42db1d5d5c57274bb4235d0e50fd3a3a6d
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Sep 4 17:08:18 2015 +0200

      Bluetooth: Fix typo in smp_ah comment for hash function

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6cc4396c8829cb65e0cf182c8a13ce6b2ac66a88
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 15:35:44 2015 +0200

      Bluetooth: hci_bcm: Add wake-up capability

      Retrieve the Interruption used by BCM device, which can be declared
      as Interruption or GpioInt in the ACPI table.
      Retrieve IRQ polarity from the ACPI table to use it for host_wake_active
      parameter of Setup Sleep vendor specific command.
      Configure BCM device to wake-up the host.
      Enable IRQ wake while suspended.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e924d3d65aeef31733a84d16e3fe72531b0494b4
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Fri Sep 4 17:54:36 2015 +0200

      Bluetooth: btusb: Use btintel_load_ddc_config for device config

      btintel_load_ddc_config is now part of btintel.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1cfbabdd11b32b6312a239a80583bbc09e1c3461
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Fri Sep 4 17:54:35 2015 +0200

      Bluetooth: hci_intel: Add Device configuration

      Apply DDC parameters once controller is in operational mode.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 145f2368c5fd7962e37315ccc092670743019d08
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Fri Sep 4 17:54:34 2015 +0200

      Bluetooth: btintel: Add Device Configuration support

      btintel_load_ddc_config retrieves the ddc file and sends its content
      via DDC commands (opcode 0xfc8b).

      The ddc file should contain one or more DDC structures.
      A DDC structure is composed of the folowing fields:
      field: | DDC LEN |    DDC ID    |   DDC VALUE   |
      size:  | 1 byte  |    2 bytes   |  DDC LEN - 2  |

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a9cb0fe4895cae95b49934af6fdcc54aa04e723d
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Fri Sep 4 17:39:25 2015 +0200

      Bluetooth: hci_intel: Fix warnings due to unused lpm functions

      intel_lpm_suspend/resume are only used in case of CONFIG_PM.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0eee53cdd985772284a14b21088e7677aeca45f9
  Author: Vincent Stehlé <vincent.stehle@xxxxxxxxxxx>
  Date:   Thu Sep 3 23:08:45 2015 +0200

      Bluetooth: btintel: fix warning

      Fix compilation the following compilation warning, which happens when
      CONFIG_BT_INTEL is not set:

        drivers/bluetooth/btintel.h:98:13: warning: â??btintel_version_infoâ??
        defined but not used [-Wunused-function]
         static void btintel_version_info(struct hci_dev *hdev,
                                          struct intel_version *ver)
                     ^

      Signed-off-by: Vincent Stehlé <vincent.stehle@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit bfe08a875a8903c0abb1ef5d57722252d14ede2e
  Author: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 16:31:35 2015 +0200

      ieee802154: af_ieee802154: fix typo in comment.

      Signed-off-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Acked-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 29cd5ddc45d66ce41632a76bb4dc2ae37b88b9e6
  Author: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 16:31:34 2015 +0200

      ieee802154: docs: fix project name to linux-wpan as well as some typos

      Signed-off-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Acked-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5c3c4736370961a121994cffd87f4dddc95ea8f2
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Aug 27 21:49:20 2015 +0200

      at86rf230: detailed edge triggered irq warning

      This patch introduce a more detailed information why edge triggered
      irq's are currently not recommended. It could be that rising/falling
      edge detection can happen while the irq is disabled.

      Suggested-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 493bc90a96839ffde5e6216c62c025d2f9e6efc3
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Aug 27 21:49:19 2015 +0200

      at86rf230: add debugfs support

      This patch introduce debugfs support for collect trac status stats. To
      clear the stats ifdown the interface of at86rf230 and start the
      interface again.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ed4a26b0995baf10807ebb3f18fba3db2c6539fc
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Aug 27 21:49:18 2015 +0200

      at86rf230: interrupt tx with force trx_off

      To abort a TX_ARET_BUSY state it's recommended to switch into TRX_OFF
      state by doing STATE_TRX_FORCE_OFF. This patch will do always a TRX_OFF
      state change when the transceiver stucks in any state. From TRX_OFF we
      can switch to the states which are also possible by TX_ON state.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 346ce4bbddfd40aa62b899db8982c728ed3d42a5
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Aug 27 21:49:17 2015 +0200

      at86rf230: change trac status check behaviour

      When transmit is done, indicated by trx_end irq, we do first a force
      state change to TX_ON and then checking the trac status, if the trac
      status is unequal zero we do a state change to TRX_OFF.

      This patch changes to the following behaviour, we first check on trac
      status after trx_end occurs and then doing a normal change to TX_ON
      without do the state change to TRX_OFF when trac status is unequal zero.

      The reasons are that the datasheet doesn't described when the trac
      status register is cleared, we should doing to evaluate the trac status
      at first. The reason to remove the TRX_OFF change if the trac status is
      unequal to zero and it was force is the following paragraph inside The
      at86rf2xx datasheets:

      "Using FORCE_PLL_ON to interrupt an TX_ARET transaction, it is
       recommended to check register bits [7:5] of register address 0x32 for
       value 0. If this value is different, TRX_CMD sequence FORCE_TRX_OFF shall
       be used immediately followed by TRX_CMD sequence PLL_ON. This performs a
       state transition to PLL_ON."

      The meaning is here "to interrupt an TX_ARET transaction" in case of
      trx_end interrupt the "TX_ARET transaction" is already done and we don't
      interrupt the "TX_ARET transaction" by doing the change to TX_ON (PLL_ON)
      here. Additional I changed the force change to normal TX_ON which seems to
      work here.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a1d8d9a57c3389dc95698ad44284c13330235691
  Author: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 14:54:19 2015 +0200

      ieee802154: 6lowpan: use correct ESC value for dispatch

      The ESC dispatch value has some history and it originally was 0x7f in 
rfc4944
      (see section-5.1). With the release of rfc6282 this value got part of the
      LOWPAN_IPHC range and was no longer available for ESC. Instead 0x40 was 
used
      as replacement (see section-2 in rfc6282).

      We have been checking the dispatch byte in an order where IPHC would 
always be
      evaluated before ESC and thus we would never reach the ESC check as the 
IPHC
      range already covers this value.

      Signed-off-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Acked-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 776857a87ccf1ae3095d9e16fbc8a0f9d1daac7e
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 20:05:42 2015 +0200

      ieee802154: 6lowpan: fix drop return value

      This patch changes the return value of lowpan packet receive handler to
      the correct NET_RX_DROP instead RX_DROP.

      This issue was detected by sparse and reported from Marcel:
      net/ieee802154/6lowpan/rx.c:329:32:    expected int
      net/ieee802154/6lowpan/rx.c:329:32:    got restricted lowpan_rx_result ...

      Reported-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 187625e18498ff0f3738a059778a8578171f06c8
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:31 2015 +0200

      ieee802154: 6lowpan: remove tx full-size calc workaround

      This patch removes a workaround for datagram_size calculation while
      doing fragmentation on transmit.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0c4349687fb6de660b24d3498d12e068f0320425
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:30 2015 +0200

      ieee802154: 6lowpan: remove packet type to host

      This patch remove the packet_type to host and leave the mac pkt_type.
      By running 'grep -r "pkt_type" net/ipv6', the IPv6 stack will evaluate
      this value for PACKET_BROADCAST. Instead of overwriting this value we
      will leave the mac value there which is broadcasts if the mac frame was
      a broadcast frame.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 54552d03023cfd485cedf8d7471d1554139d58aa
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:29 2015 +0200

      ieee802154: 6lowpan: check on valid 802.15.4 frame

      This patch adds frame control checks to check if the received frame is
      something which could contain a 6LoWPAN packet.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c6fdbba3eadd5af695c1290c59fe917ce8d9295f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:28 2015 +0200

      ieee802154: 6lowpan: add check for reserved dispatch

      This patch adds checks for reserved dispatch value. When we have a
      reserved dispatch value we should drop the skb immediately.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ad663600e1a8e2db1c4343bae73836f793ff4e08
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:27 2015 +0200

      ieee802154: 6lowpan: add handler for all dispatch values

      This patch adds dummy handlers for all known IEEE 802.15.4 dispatch
      values which prints a warning that we don't support these dispatches
      right now. Also we add a warning to the RX_CONTINUE case inside of
      lowpan_rx_handlers_result which should now never happend.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit faf7d36e5ecd16ab090c82d14bff31f7ab2f70e6
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:26 2015 +0200

      ieee802154: 6lowpan: add generic lowpan header check

      This patch introduce an earlier check if a 6LoWPAN frame can be valid.
      This contains at first for checking if the header contains a dispatch
      byte and isn't the nalp dispatch value, which means it isn't a 6LoWPAN
      packet. Also we add a check if we can derference the dispatch value by
      checking if skb->len is unequal zero.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 72a5e6bb5120d6464c9e7855c5a22555ede819dc
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:25 2015 +0200

      ieee820154: 6lowpan: dispatch evaluation rework

      This patch complete reworks the evaluation of 6lowpan dispatch value by
      introducing a receive handler mechanism for each dispatch value.

      A list of changes:

       - Doing uncompression on-the-fly when FRAG1 is received, this require
         some special handling for 802.15.4 lltype in generic 6lowpan branch
         for setting the payload length correct.
       - Fix dispatch mask for fragmentation.
       - Add IPv6 dispatch evaluation for FRAG1.
       - Add skb_unshare for dispatch which might manipulate the skb data
         buffer.

      Cc: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f801cf40243d8f81ac05aa7466d9d8b1e676ee7c
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:24 2015 +0200

      ieee802154: 6lowpan: earlier skb->dev switch

      We should change the skb->dev pointer earlier to the lowpan interface
      Sometimes we call iphc_decompress which also use some netdev printout
      functionality. This patch will change that the correct interface will be
      displayed in this case, which should be the lowpan interface.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 742c3afe53c5d16fa62632c34f8e2273766d3052
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:23 2015 +0200

      ieee802154: 6lowpan: trivial checks at first

      This patch moves some trivial checks at first before calling
      skb_share_check which could do some memcpy if the buffer is shared.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ad23d5b9da399c0ecbe58e16c6603c3fcdcafdbd
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:22 2015 +0200

      ieee802154: 6lowpan: cleanup pull of iphc bytes

      This patch cleanups the pull of the iphc bytes. We don't need to check
      if the skb->len contains two bytes, this will be checked by
      lowpan_fetch_skb_u8.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 989d433dca558fda85e592fc675af2a59af88858
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:21 2015 +0200

      ieee802154: 6lowpan: change if lowpan dev is running

      We don't need to check if the wpan interface is running because the
      lowpan_rcv is the packet layer receive handler for the wpan interface.

      Instead doing a check if wpan interface is running we should check if
      the lowpan interface is running before starting 6lowpan adaptation layer.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 348a882ea745039295e721ef00f1b46307fb1c88
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:20 2015 +0200

      ieee802154: 6lowpan: remove EXPORT_SYMBOL

      This function is used internally inside of ieee802154 6lowpan module
      only and not outside of any other module. We don't need to export this
      function then.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 56aeaddfbc874123c88e5b058b068ce8fca71dcd
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:19 2015 +0200

      ieee802154: 6lowpan: remove set to zero

      Internal mechanism by calling netdev_alloc which use kzalloc already
      sets these variables to zero. This patch cleanup the setup of net_device.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 2c88b5283f60d09d41b9fe03351c0d2e8eef904f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:18 2015 +0200

      ieee802154: 6lowpan: remove check on null

      This patch removes one check on null which should be already done by
      checking before for ARPHRD_IEEE802154. All ARPHRD_IEEE802154 and
      ARPHRD_IEEE802154_MONITOR should have wdev->ieee802154_ptr, where
      ARPHRD_IEEE802154 is currently a node interface only.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 90997af7e9dc47cb12afd4170ee0d3541fb09400
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:17 2015 +0200

      ieee802154: 6lowpan: register packet layer while open

      This patch moves the open count handling while doing open of a lowpan
      interface. We need the packet handler register at first when one lowpan
      interface is up. There exists a small case when all lowpan interfaces
      are down and the 802154 packet layer is still registered. To reduce some
      overhead we will register the packet layer when the first lowpan
      interface comes up and unregister when the last interface will become 
down.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f4606583fd8dcf15a07060dbd45a3e369144a934
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:16 2015 +0200

      ieee802154: 6lowpan: change dev vars to wdev and ldev

      Inside the IEEE 802.15.4 6LoWPAN subsystem we use two interfaces which
      are wpan and lowpan interfaces. Instead of using always the variable
      name "dev" for both we rename the "dev" variable to wdev which means the
      wpan net_device and ldev which means a lowpan net_device. This avoids
      confusing and always looking back to see which net_device is meant by
      the variable name "dev".

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 517a5460a93d641e2beb362d4066f9861f108e2f
  Author: Kieran Bingham <kieranbingham@xxxxxxxxx>
  Date:   Wed Sep 2 13:51:10 2015 +0100

      Bluetooth: btmrvl: skb resource leak, and double free.

      if btmrvl_tx_pkt() is called, and the branch
        if (skb_headroom(skb) < BTM_HEADER_LEN)
      evaluates positive, a new skb is allocated via skb_realloc_headroom.

      The original skb is stored in a tmp variable, before being free'd.
      However on success, the new skb, is not free'd, nor is it
      returned to the caller which will then double-free the original skb.

      This issue exists from the original driver submission in
       commit: #132ff4e5fa8dfb71a7d99902f88043113947e972

      If this code path had been alive, it would have been noted from the
      double-free causing a panic.

      All skb's here should be allocated through bt_skb_alloc which
      adds 8 bytes as headroom, which is plenty against the 4 bytes
      pushed on by this driver.

      This code path is dead, and buggy at the same time, so the cleanest
      approach is to remove the affected branch.

      Reported by coverity (CID 113422)

      Signed-off-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6b3cc1db68ac83647d37f7d16f0261621eda24aa
  Author: Simon Fels <simon.fels@xxxxxxxxxxxxx>
  Date:   Wed Sep 2 12:10:12 2015 +0200

      Bluetooth: close HCI device when user channel socket gets closed

      With 9380f9eacfbbee701daa416edd6625efcd3e29e1 the order of unsetting
      the HCI_USER_CHANNEL flag of the HCI device was reverted to ensure
      the device is first closed before making it available again.

      Due to hci_dev_close checking for HCI_USER_CHANNEL being set on the
      device it was never really closed and was kept opened. We're now
      calling hci_dev_do_close directly to make sure the device is correctly
      closed and we keep the correct order to unset the flag on our device
      object.

      Signed-off-by: Simon Fels <simon.fels@xxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1b1975749f856946f716180ca94db52fb1ae3500
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 2 12:04:14 2015 +0200

      Bluetooth: hci_intel: Show error in case of invalid LPM packet size

      Don't hide this packet size error.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 74cdad37cd2410c5cec2160d031e04577948aff0
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 2 12:04:13 2015 +0200

      Bluetooth: hci_intel: Add runtime PM support

      Implement runtime PM suspend/resume callbacks.
      If LPM supported, controller is put into supsend after a delay of
      inactivity (1s). Inactivity is based on LPM idle notification and
      host TX traffic.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit aa6802df09fe324c2c19d75ab1a9a001cd7e4d4a
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 2 12:04:12 2015 +0200

      Bluetooth: hci_intel: Add PM support

      Add PM suspend/resume callbacks which call lpm_suspend/resume.
      Add LPM ack in threaded IRQ handler to notify the controller that
      resume is complete.
      Protect hci_uart against concurrent removing during suspend/resume.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 894365468ed4a569ece9de03abbf13f1af3042b8
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 2 12:04:11 2015 +0200

      Bluetooth: hci_intel: Implement LPM suspend/resume

      Add LPM PM suspend/resume/host_wake LPM functions.
      A LPM transaction is composed with a LPM request and ack/response.
      Host can send a LPM suspend/resume request to the controller which
      should respond with a LPM ack.
      If resume is requested by the controller (irq), host has to send a LPM
      ack once resumed.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 65ad07c9e5f3935a06517c007e90d2b2ef4829ac
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 12:13:36 2015 +0200

      Bluetooth: hci_bcm: Use bt_dev logging helpers

      Replace BT_ logging calls by the new bt_dev ones.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit bb3ea16a44c648cd5ebcf3cc88dd522f432063ab
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 12:13:35 2015 +0200

      Bluetooth: hci_bcm: Replace spinlock by mutex

      Replace spinlock by mutex to be able to use bcm_device_lock in
      sleepable context like devm_request_threaded_irq or upcomming PM support.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f81b001a3e1c7ac42ba734de8d136a14ccb087c0
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Aug 30 23:05:32 2015 +0200

      Bluetooth: hci_qca: Fix a few tab vs spaces issues

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 67c8bde04d8587a57112993d1342c62b851b0756
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Mon Aug 31 18:34:31 2015 +0200

      Bluetooth: hci_intel: Replace spinlock with mutex

      Replace the device_intel list spinlock with a mutex.
      devm_request_threaded_irq is not atomic and upcomming PM support should
      be simpler.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f44e78a5fc5b103e4d7b04480365a128ca9184ee
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Mon Aug 31 18:34:30 2015 +0200

      Bluetooth: hci_intel: Use bt_dev logging helpers

      Replace BT_ logging calls by the new bt_dev ones.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b98469f4be5f606339233fe2da9586e2a7067ffe
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Sat Aug 29 13:38:19 2015 +0200

      Bluetooth: hci_intel: Introduce LPM support

      Enable controller Low-Power-Mode if we have a pdev to manage host
      wake-up. Once LPM is enabled, controller notifies its TX status via
      a vendor specific packet (tx_idle/tx_active).
      tx_active means that there is more data upcoming from controller.
      tx_idle means that controller can be put in suspended state.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 765ea3abd116fc6dc5f67d73fcd7010a7a88f3cc
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Sat Aug 29 13:38:18 2015 +0200

      Bluetooth: hci_intel: Retrieve host-wake IRQ

      An IRQ can be retrieved from the pdev resources. This irq will be used
      in case of LPM suspend mode to wake-up the host and resume the link.
      This resource can be declared as a GPIO-Interrupt which requires to be
      converted into IRQ.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6f558b70fb39fc8272fc513ecf191b3ad87d867b
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Sun Aug 30 18:16:55 2015 +0200

      Bluetooth: Add bt_dev logging macros

      Add specific bluetooth device logging macros since hci device name is
      repeatedly referred in bluetooth subsystem logs.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6cafcd959599d91d0fa4615feae7f1e7ab407c4b
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Sun Aug 30 21:47:21 2015 +0300

      Bluetooth: btusb: Detect new kind of counterfeit CSR controllers

      Controllers claiming to be CSR with LMP subversion 0x0c5c don't
      actually seem to be authentic CSR controllers. They also don't have
      their USB bcdDevice value matching the LMP subversion like all other
      CSR controllers:

      HCI:

      > HCI Event: Command Complete (0x0e) plen 12
            Read Local Version Information (0x04|0x0001) ncmd 1
              Status: Success (0x00)
              HCI version: Bluetooth 2.0 (0x03) - Revision 3164 (0x0c5c)
              LMP version: Bluetooth 2.0 (0x03) - Subversion 3164 (0x0c5c)
              Manufacturer: Cambridge Silicon Radio (10)

      USB:

      T: Bus=04 Lev=01 Prnt=01 Port=01 Cnt=01 Dev#= 3 Spd=12 MxCh= 0
      D: Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=16 #Cfgs= 1
      P: Vendor=0a12 ProdID=0001 Rev= 1.34
      C:* #Ifs= 2 Cfg#= 1 Atr=80 MxPwr=100mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=81(I) Atr=03(Int.) MxPS= 16 Ivl=1ms
      E: Ad=82(I) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      E: Ad=02(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      I: If#= 1 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      I: If#= 1 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 17 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 17 Ivl=1ms

      These controllers also have the HCI_Read_Stored_Link_Key command
      broken so it's important the right quirk is set for them.

      Reported-and-tested-by: Rhobison Alves Pereira <rhobison@xxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e81be90bdafa48389028249c357a4efcd0fdce53
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Sun Aug 30 21:47:20 2015 +0300

      Bluetooth: Use BROKEN_STORED_LINK_KEY quirk for HCI_Read_Stored_Link_Key

      Some counterfeit CSR controllers also have broken behavior with the
      HCI_Read_Stored_Link_Key command:

      < HCI Command: Read Stored Link Key (0x03|0x000d) plen 7
              Address: 00:00:00:00:00:00 (OUI 00-00-00)
              Read all: 0x01
      > HCI Event: Command Complete (0x0e) plen 8
            Read Stored Link Key (0x03|0x000d) ncmd 1
              Status: Unsupported Feature or Parameter Value (0x11)
              Max num keys: 0
              Num keys: 0

      Extend the existing HCI_QUIRK_BROKEN_STORED_LINK_KEY to be also used
      for this HCI command.

      Reported-and-tested-by: Rhobison Alves Pereira <rhobison@xxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5af82fa66a7ee8dfc29fadb487a02e2ef14ea965
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 11:34:37 2015 +0300

      ath10k: add ATH10K_FW_FEATURE_RAW_MODE_SUPPORT to 
ath10k_core_fw_feature_str[]

      This was missed in the original commit adding the flag and ath10k only 
printed "bit10":

      ath10k_pci 0000:02:00.0: qca988x hw2.0 (0x4100016c, 0x043202ff) fw 
10.2.4.70.6-2 api 3
      htt-ver 2.1 wmi-op 5 htt-op 2 cal otp max-sta 128 raw 0 hwcrypto 1 
features no-p2p,bit10

      Also add a build test to avoid this happening again.

      Fixes: ccec9038c721 ("ath10k: enable raw encap mode and software crypto 
engine")
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 9713e3de801eb9c2dd2221ba8c1dddd5bc7ba360
  Author: Michal Kazior <michal.kazior@xxxxxxxxx>
  Date:   Thu Sep 3 10:44:52 2015 +0200

      ath10k: handle IEEE80211_CHANCTX_CHANGE_WIDTH properly

      Vdevs associated with a given chanctx should be
      restarted if the bandwidth changes. Otherwise
      traffic may cease.

      This is known to fix STA CSA with bandwidths wider
      than 20MHz.

      Signed-off-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7be6d1b7625ab20e1dfde07a0c6dc77784efbb48
  Author: Michal Kazior <michal.kazior@xxxxxxxxx>
  Date:   Thu Sep 3 10:44:51 2015 +0200

      ath10k: split switch_vif_chanctx guts

      This is necessary to make vdev restarting logic
      reusable later.

      Signed-off-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 634349bae0b2a23f71cabbdb770d35fffc1aad8c
  Author: Michal Kazior <michal.kazior@xxxxxxxxx>
  Date:   Thu Sep 3 10:43:45 2015 +0200

      ath10k: move hw_scan worker queuing

      The remain_on_channel callback needs different
      timeout. Calling ieee80211_queue_work() with a
      shorter delay after calling it with a longer delay
      will not change the timer. This caused the
      offchannel timeout worker to not trigger in time
      and caused the device to stay on channel longer
      then expected. This could cause some problems and
      was be easily reproduced with `iw offchannel`
      command.

      Signed-off-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit df057cc7b4fa59e9b55f07ffdb6c62bf02e99a00
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Mar 17 12:15:02 2015 +0000

      arm64: errata: add module build workaround for erratum #843419

      Cortex-A53 processors <= r0p4 are affected by erratum #843419 which can
      lead to a memory access using an incorrect address in certain sequences
      headed by an ADRP instruction.

      There is a linker fix to generate veneers for ADRP instructions, but
      this doesn't work for kernel modules which are built as unlinked ELF
      objects.

      This patch adds a new config option for the erratum which, when enabled,
      builds kernel modules with the mcmodel=large flag. This uses absolute
      addressing for all kernel symbols, thereby removing the use of ADRP as
      a PC-relative form of addressing. The ADRP relocs are removed from the
      module loader so that we fail to load any potentially affected modules.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit bdec97a855ef1e239f130f7a11584721c9a1bf04
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Sep 15 12:07:06 2015 +0100

      arm64: compat: fix vfp save/restore across signal handlers in big-endian

      When saving/restoring the VFP registers from a compat (AArch32)
      signal frame, we rely on the compat registers forming a prefix of the
      native register file and therefore make use of copy_{to,from}_user to
      transfer between the native fpsimd_state and the compat_vfp_sigframe.

      Unfortunately, this doesn't work so well in a big-endian environment.
      Our fpsimd save/restore code operates directly on 128-bit quantities
      (Q registers) whereas the compat_vfp_sigframe represents the registers
      as an array of 64-bit (D) registers. The architecture packs the compat D
      registers into the Q registers, with the least significant bytes holding
      the lower register. Consequently, we need to swap the 64-bit halves when
      converting between these two representations on a big-endian machine.

      This patch replaces the __copy_{to,from}_user invocations in our
      compat VFP signal handling code with explicit __put_user loops that
      operate on 64-bit values and swap them accordingly.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit e56d82a116176f7af9d642b560abbbd3a2b68013
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Fri Sep 11 15:31:24 2015 +0100

      arm64: cpu hotplug: ensure we mask out CPU_TASKS_FROZEN in notifiers

      We have a couple of CPU hotplug notifiers for resetting the CPU debug
      state to a sane value when a CPU comes online.

      This patch ensures that we mask out CPU_TASKS_FROZEN so that we don't
      miss any online events occuring due to suspend/resume.

      Acked-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit b6c7bafa7d4b1398cce93e4af0a48603919fa933
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 12:47:36 2015 -0400

      ath10k: implement mesh support

      Add support for mesh to ath10k.  We simply use an AP virtual interface
      in the firmware in order to enable beaconing without TSF adoption, and
      use the raw (802.11) transmit mode.

      Due to firmware limitations, the firmware must operate in raw
      (non-native 802.11) mode.  As this is configured at firmware init time,
      a new "rawmode" modparam is added, and mesh interfaces are available
      only if rawmode=true.  The firmware must advertise support for rawmode;
      tested successfully with firmware 10.2.4.70.6-2.

      When the module is loaded with (newly implemented) modparam rawmode=1, it
      will enable operating an open mesh STA via something like the following:

          ip link set wlan0 down
          iw dev wlan0 set type mp
          ip link set wlan0 up
          iw dev wlan0 set freq 5745 80 5775
          iw dev wlan0 mesh join mesh-vht

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit bc76c28719d4333248a516fd4d469ab741b44b63
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 12:47:35 2015 -0400

      ath10k: check for encryption before adding MIC_LEN

      In the case of raw mode without nohwcrypt parameter, we
      should still make sure the frame is protected before
      adding MIC_LEN to avoid skb_under_panic errors.

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0d031c8995bcc065f9c5778069f2131f7d92d4d5
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 12:47:34 2015 -0400

      ath10k: enable monitor when OTHER_BSS requested

      By default, ath10k restricts received frames to those matching BSSID.
      When other BSS frames are requested (e.g. in mesh mode), add an internal
      monitor device so those frames are not filtered.

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a650fdd9427f1f5236f83d2d8137bea9b452fa53
  Author: Guo Zeng <Guo.Zeng@xxxxxxx>
  Date:   Thu Sep 17 05:23:21 2015 +0000

      regmap: irq: add ack_invert flag for chips using cleared bits as ack

      An user will be CSR SiRFSoC ARM chips.

      Signed-off-by: Guo Zeng <Guo.Zeng@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 7b7d1968e4c8d8392e8e63906d45d0bcad079037
  Author: Guo Zeng <Guo.Zeng@xxxxxxx>
  Date:   Thu Sep 17 05:23:20 2015 +0000

      regmap: irq: add support for chips who have separate unmask registers

      Some chips have separate unmask registers from mask registers for
      some consideration of concurrency SMP write performance. And this
      patch adds a flag for it.

      An user will be CSR SiRFSoC ARM chips.

      Signed-off-by: Guo Zeng <Guo.Zeng@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit d8949aad3eab5d396f4fefcd581773bf07b9a79e
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Sep 4 12:22:46 2015 +0300

      Bluetooth: Delay check for conn->smp in smp_conn_security()

      There are several actions that smp_conn_security() might make that do
      not require a valid SMP context (conn->smp pointer). One of these
      actions is to encrypt the link with an existing LTK. If the SMP
      context wasn't initialized properly we should still allow the
      independent actions to be done, i.e. the check for the context should
      only be done at the last possible moment.

      Reported-by: Chuck Ebbert <cebbert.lkml@xxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.0+

  commit b07bb761cf6a333b2108cdbe4ffee66407189bb1
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Wed Sep 16 08:38:08 2015 -0700

      drm/vmwgfx: Only build on X86

      ioremap_cache() is currently not available on some architectures.

      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>

  commit 2338f73d407d5abe2036d92716ba25ef5279c3d2
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Mon Sep 7 14:25:01 2015 +0200

      leds:lp55xx: Correct Kconfig dependency for f/w user helper

      The commit [b67893206fc0: leds:lp55xx: fix firmware loading error]
      tries to address the firmware file handling with user helper, but it
      sets a wrong Kconfig CONFIG_FW_LOADER_USER_HELPER_FALLBACK.  Since the
      wrong option was enabled, the system got a regression -- it suffers
      from the unexpected long delays for non-present firmware files.

      This patch corrects the Kconfig dependency to the right one,
      CONFIG_FW_LOADER_USER_HELPER.  This doesn't change the fallback
      behavior but only enables UMH when needed.

      Bugzilla: https://bugzilla.opensuse.org/show_bug.cgi?id=944661
      Fixes: b67893206fc0 ('leds:lp55xx: fix firmware loading error')
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2+
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 35bfe456be3ae1e11dd63e83096c95d0c6429c51
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Mon Sep 7 17:06:05 2015 +0200

      leds: leds-ipaq-micro: Add LEDS_CLASS dependency

      Fix missing Kconfig LEDS_CLASS dependency.

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 305c324f43a2601cbeb894c17b68c8a8f3c13387
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Fri Sep 4 12:27:09 2015 +0200

      leds: aat1290: add 'static' modifier to init_mm_current_scale

      Function init_mm_current_scale is used only locally. Make it static then.

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 98f9cc7ffcf2cb5b695208a4cd4927bb41c550f3
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:36:59 2015 +0200

      leds: leds-ns2: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit e3df661ff3243ce4d1719c212ee88521e0e7811b
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:36:41 2015 +0200

      leds: max77693: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 3682c7bdf5065b99638c56adc1be1507ed5c0f0e
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:36:15 2015 +0200

      leds: ktd2692: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 01736f07cad613937db13f7483b04e8f2af81883
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:35:55 2015 +0200

      leds: bcm6358: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 6528ca19c1c8d4756b534a1ce9df4c3849f9dd04
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:35:38 2015 +0200

      leds: bcm6328: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 93a51aa406f61985d12b60f9860f949b4bf7e43d
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:35:07 2015 +0200

      leds: aat1290: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit aa1471a301f4c0a5988ebcafc8954990335dcf2c
  Merge: 6ff33f3 762982d
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 21:33:13 2015 -0700

      Merge tag 'fixes-for-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-linus

      Felipe writes:

      usb: fixes for v4.3-rc2

      First series of fixes for v4.3-rc cycle. The major points are
      a fix to a regression which would let gadget driver disable
      an endpoint that's already disabled and a fix to MUSB to make
      sure IRQs are masked when we're going to suspend and unmasked
      on resume.

      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 4e478098ac0ac1b6ef9a70fcdc2ec8b93f1b59a1
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Mon Sep 14 23:23:05 2015 -0700

      ipvs: add sysctl to ignore tunneled packets

      This is a way to avoid nasty routing loops when multiple ipvs instances 
can
      forward to eachother.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit e1ffceb078c6bc8a674077b29aee0926bbb54131
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Wed Aug 19 15:19:47 2015 +0200

      ARM: imx53: qsrb: fix PMIC interrupt level

      The MC34708 PMIC interrupt level is active high, but was set to
      active low in the devicetree, probably as a result of a copy and
      paste error from the QSB board.

      This caused IRQ storms and led to the kernel disabling the PMIC
      interrupt.

      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Signed-off-by: Shawn Guo <shawnguo@xxxxxxxxxx>

  commit 34adba711750b1a0eee100dda1d7fb6cfc55608f
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Wed Aug 19 15:19:46 2015 +0200

      ARM: imx53: include IRQ dt-bindings header

      Allows to use the more meaningful IRQ flag defines instead of
      the raw values.

      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Signed-off-by: Shawn Guo <shawnguo@xxxxxxxxxx>

  commit 400c47d81ca383fc87d5a3937b234e23e26909fb
  Author: LEROY Christophe <christophe.leroy@xxxxxx>
  Date:   Wed Sep 16 12:04:53 2015 +0200

      powerpc32: memset: only use dcbz once cache is enabled

      memset() uses instruction dcbz to speed up clearing by not wasting time
      loading cache line with data that will be overwritten.
      Some platform like mpc52xx do no have cache active at startup and
      can therefore not use memset(). Allthough no part of the code
      explicitly uses memset(), GCC may make calls to it.

      This patch modifies memset() such that at startup, memset()
      unconditionally skip the optimised bloc that uses dcbz instruction.

      Once the initial MMU is set up, in machine_init() we patch memset()
      by replacing this inconditional jump by a NOP

      Tested-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Christophe Leroy <christophe.leroy@xxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 1cd03890ea64795e53f17a94928cca22495acb2a
  Author: LEROY Christophe <christophe.leroy@xxxxxx>
  Date:   Wed Sep 16 12:04:51 2015 +0200

      powerpc32: memcpy: only use dcbz once cache is enabled

      memcpy() uses instruction dcbz to speed up copy by not wasting time
      loading cache line with data that will be overwritten.
      Some platform like mpc52xx do no have cache active at startup and
      can therefore not use memcpy(). Allthough no part of the code
      explicitly uses memcpy(), GCC makes calls to it.

      This patch modifies memcpy() such that at startup, memcpy()
      unconditionally jumps to generic_memcpy() which doesn't use
      the dcbz instruction.

      Once the initial MMU is set up, in machine_init() we patch memcpy()
      by replacing this inconditional jump by a NOP

      Reported-by: Michal Sojka <sojkam1@xxxxxxxxxxx>
      Tested-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Christophe Leroy <christophe.leroy@xxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 84ad1bab0eebd2e2b2dd3c3db7b88cade22a6de1
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Jul 27 16:10:17 2015 +0300

      ARM: dts: am57xx-beagle-x15: use palmas-usb for USB2

      The VBUS line of USB2 is connected to VBUS detect logic on
      the PMIC. Use the palmas-usb driver to report VBUS events
      to the USB driver.

      As the palmas-usb driver supports GPIO based ID reporting
      provide the GPIO for ID pin as well.

      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit f4746176f95a0d06f07ea83191375d374611e170
  Author: Grazvydas Ignotas <notasas@xxxxxxxxx>
  Date:   Wed Sep 16 01:36:20 2015 +0300

      ARM: omap2plus_defconfig: enable GPIO_PCA953X

      This enables tca6424a GPIO expander driver that in turn enables
      TPD12S015 HDMI ESD protection and level shifter on OMAP5 uevm.
      In other words, it makes HDMI work on OMAP5 uevm.

      Signed-off-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 1dbdad75074d16c3e3005180f81a01cdc04a7872
  Author: Grazvydas Ignotas <notasas@xxxxxxxxx>
  Date:   Wed Sep 16 01:34:31 2015 +0300

      ARM: dts: omap5-uevm.dts: fix i2c5 pinctrl offsets

      The i2c5 pinctrl offsets are wrong. If the bootloader doesn't set the
      pins up, communication with tca6424a doesn't work (controller timeouts)
      and it is not possible to enable HDMI.

      Fixes: 9be495c42609 ("ARM: dts: omap5-evm: Add I2c pinctrl data")
      Signed-off-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 08224a7d410699abce42674ee15a7cf37d54f340
  Author: Dave Gerlach <d-gerlach@xxxxxx>
  Date:   Tue Sep 15 14:47:34 2015 -0500

      ARM: OMAP2+: AM43XX: Enable autoidle for clks in am43xx_init_late

      Add omap2_clk_enable_autoidle_all to am43xx_init_late otherwise the call
      to omap2_clk_disable_autoidle_all in am43xx_init_early may cause some
      clocks to always stay active and prevent low power mode transitions.

      Signed-off-by: Dave Gerlach <d-gerlach@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 5005296e7408c055a02fc8be9f62218cb4b52b13
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Thu Sep 3 14:23:45 2015 -0500

      ARM: dts: am57xx-beagle-x15: Update Phy supplies

      Originally, all the SoC PHY rails were supplied by LDO3. However, as a
      result of characterization, it was determined that this posed a risk in
      extreme load  conditions. Hence the PHY rails are split between two
      different LDOs. Update the related node as a result

      LDO3/VDDA_1V8_PHYA supplies vdda_usb1, vdda_usb2, vdda_sata, vdda_usb3
      LDO4/VDDA_1V8_PHYB supplies vdda_pcie1, vdda_pcie0, vdda_hdmi, vdda_pcie

      NOTE: We break compatibility with pre-production boards with this change
      since, the PMIC LDO4 is disabled at OTP level.

      The new configuration is the plan of record and all pre-production
      boards are supposed to be replaced with the latest boards matching the
      mentioned configuration.

      Some very few 10 something boards have been created and
      stopped production till the latest modifications were done (PMIC USB
      interrupt, LDO4 etc) - and all of those boards are now getting
      scrapped.. If there are any (as per tracking information, there should
      not be any), TI should be contacted to have them replaced.

      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      [tony@xxxxxxxxxxx: updated commit about these being TI internal protos]
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 7ae85dc7687c7e7119053d83d02c560ea217b772
  Author: Doug Anderson <armlinux@xxxxxxxxxxxxxx>
  Date:   Wed Aug 26 18:26:49 2015 +0100

      ARM: 8425/1: kgdb: Don't try to stop the machine when setting breakpoints

      In (23a4e40 arm: kgdb: Handle read-only text / modules) we moved to
      using patch_text() to set breakpoints so that we could handle the case
      when we had CONFIG_DEBUG_RODATA.  That patch used patch_text().
      Unfortunately, patch_text() assumes that we're not in atomic context
      when it runs since it needs to grab a mutex and also wait for other
      CPUs to stop (which it does with a completion).

      This would result in a stack crawl if you had
      CONFIG_DEBUG_ATOMIC_SLEEP and tried to set a breakpoint in kgdb.  The
      crawl looked something like:

       BUG: scheduling while atomic: swapper/0/0/0x00010007
       CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.2.0-rc7-00133-geb63b34 #1073
       Hardware name: Rockchip (Device Tree)
        (unwind_backtrace) from [<c00133d4>] (show_stack+0x20/0x24)
        (show_stack) from [<c05400e8>] (dump_stack+0x84/0xb8)
        (dump_stack) from [<c004913c>] (__schedule_bug+0x54/0x6c)
        (__schedule_bug) from [<c054065c>] (__schedule+0x80/0x668)
        (__schedule) from [<c0540cfc>] (schedule+0xb8/0xd4)
        (schedule) from [<c0543a3c>] (schedule_timeout+0x2c/0x234)
        (schedule_timeout) from [<c05417c0>] (wait_for_common+0xf4/0x188)
        (wait_for_common) from [<c0541874>] (wait_for_completion+0x20/0x24)
        (wait_for_completion) from [<c00a0104>] (__stop_cpus+0x58/0x70)
        (__stop_cpus) from [<c00a0580>] (stop_cpus+0x3c/0x54)
        (stop_cpus) from [<c00a06c4>] (__stop_machine+0xcc/0xe8)
        (__stop_machine) from [<c00a0714>] (stop_machine+0x34/0x44)
        (stop_machine) from [<c00173e8>] (patch_text+0x28/0x34)
        (patch_text) from [<c001733c>] (kgdb_arch_set_breakpoint+0x40/0x4c)
        (kgdb_arch_set_breakpoint) from [<c00a0d68>] 
(kgdb_validate_break_address+0x2c/0x60)
        (kgdb_validate_break_address) from [<c00a0e90>] 
(dbg_set_sw_break+0x1c/0xdc)
        (dbg_set_sw_break) from [<c00a2e88>] (gdb_serial_stub+0x9c4/0xba4)
        (gdb_serial_stub) from [<c00a11cc>] (kgdb_cpu_enter+0x1f8/0x60c)
        (kgdb_cpu_enter) from [<c00a18cc>] (kgdb_handle_exception+0x19c/0x1d0)
        (kgdb_handle_exception) from [<c0016f7c>] 
(kgdb_compiled_brk_fn+0x30/0x3c)
        (kgdb_compiled_brk_fn) from [<c00091a4>] (do_undefinstr+0x1a4/0x20c)
        (do_undefinstr) from [<c001400c>] (__und_svc_finish+0x0/0x34)

      It turns out that when we're in kgdb all the CPUs are stopped anyway
      so there's no reason we should be calling patch_text().  We can
      instead directly call __patch_text() which assumes that CPUs have
      already been stopped.

      Fixes: 23a4e4050ba9 ("arm: kgdb: Handle read-only text / modules")
      Reported-by: Aapo Vienamo <avienamo@xxxxxxxxxx>
      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Reviewed-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 90cde5584a34e210850728bebee4c6fb1a7124ba
  Author: Andre Przywara <andre.przywara@xxxxxxx>
  Date:   Mon Sep 14 17:49:02 2015 +0100

      ARM: 8437/1: dma-mapping: fix build warning with new DMA_ERROR_CODE 
definition

      Commit 96231b2686b5: ("ARM: 8419/1: dma-mapping: harmonize definition
      of DMA_ERROR_CODE") changed the definition of DMA_ERROR_CODE to use
      dma_addr_t, which makes the compiler barf on assigning this to an
      "int" variable on ARM with LPAE enabled:
      *************
      In file included from /src/linux/include/linux/dma-mapping.h:86:0,
                       from /src/linux/arch/arm/mm/dma-mapping.c:21:
      /src/linux/arch/arm/mm/dma-mapping.c: In function 
'__iommu_create_mapping':
      /src/linux/arch/arm/include/asm/dma-mapping.h:16:24: warning:
      overflow in implicit constant conversion [-Woverflow]
       #define DMA_ERROR_CODE (~(dma_addr_t)0x0)
                              ^
      /src/linux/arch/arm/mm/dma-mapping.c:1252:15: note: in expansion of
      macro DMA_ERROR_CODE'
        int i, ret = DMA_ERROR_CODE;
                     ^
      *************

      Remove the actually unneeded initialization of "ret" in
      __iommu_create_mapping() and move the variable declaration inside the
      for-loop to make the scope of this variable more clear.

      Signed-off-by: Andre Przywara <andre.przywara@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 12fc7306e6ffae4e86680892f2286063d7d6eae7
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:08:49 2015 +0100

      ARM: get rid of needless #if in signal handling code

      Remove the #if statement which caused trouble for kernels that support
      both ARMv6 and ARMv7.  Older architectures do not implement these bits,
      so it should be safe to always clear them.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 1605b60ad064c7019db8ade07f0b7bdc8c197b93
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Thu Sep 17 07:46:28 2015 +0900

      ARM: dts: add suspend opp to exynos4412

      Mark 800MHz OPP as a suspend opp for Exynos4412 based
      boards so effectively cpufreq-dt driver behavior w.r.t.
      suspend frequency matches what the old exynos-cpufreq
      driver has been doing.

      This patch fixes suspend/resume support on Exynos4412 based
      Trats2 board and reboot hang on Exynos4412 based Odroid U3
      board.

      Cc: Thomas Abraham <thomas.ab@xxxxxxxxxxx>
      Cc: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: Tobias Jakobi <tjakobi@xxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Acked-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit a68371632b86d682992185ecf97316700a5a0f14
  Author: Krzysztof Kozlowski <k.kozlowski.k@xxxxxxxxx>
  Date:   Wed Sep 16 08:37:02 2015 +0900

      ARM: dts: Fix LEDs on exynos5422-odroidxu3

      The LEDs on Odroid XU3 family boards could not properly probe
      because PWM outputs were reduced only to PWM for fan. Fix it
      for Odroid XU3 and XU3-Lite boards by switching to usage of
      all 4 outputs (although the PWM for MIPI probably is redundant
      because board does not have MIPI connector available).

      This fixes warnings on dmesg:
      [    4.838712] samsung-pwm 12dd0000.pwm: tried to request PWM channel 1 
without output
      [    4.838725] leds_pwm pwmleds: unable to request PWM for green:mmc0: -22
      [    4.838767] leds_pwm: probe of pwmleds failed with error -22

      Fixes: b685d540cc26 ("ARM: dts: Add pwm-fan node for 
exynos5422-odroidxu3")
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski.k@xxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit 9054a31d603ea82c6ed4914170a8708812a16324
  Author: Mans Rullgard <mans@xxxxxxxxx>
  Date:   Sun Feb 15 12:33:49 2015 +0000

      clk: check for invalid parent index of orphans in __clk_init()

      If a mux clock is initialised (by hardware or firmware) with an
      invalid parent, its ->get_parent() can return an out of range
      index.  For example, the generic mux clock attempts to return
      -EINVAL, which due to the u8 return type ends up a rather large
      number.  Using this index with the parent_names[] array results
      in an invalid pointer and (usually) a crash in the following
      strcmp().

      This patch adds a check for the parent index being in range,
      ignoring clocks reporting invalid values.

      Signed-off-by: Mans Rullgard <mans@xxxxxxxxx>
      Tested-by: Rhyland Klein <rklein@xxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit e1595d89ae8180e0d3815cc75336ac3484de0aa0
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Thu Sep 10 15:55:21 2015 +0200

      clk: tegra: dfll: Properly protect OPP list

      The OPP list needs to be protected against concurrent accesses. Using
      simple RCU read locks does the trick and gets rid of the following
      lockdep warning:

        ===============================
        [ INFO: suspicious RCU usage. ]
        4.2.0-next-20150908 #1 Not tainted
        -------------------------------
        drivers/base/power/opp.c:460 Missing rcu_read_lock() or 
dev_opp_list_lock protection!

        other info that might help us debug this:

        rcu_scheduler_active = 1, debug_locks = 0
        4 locks held by kworker/u8:0/6:
         #0:  ("%s""deferwq"){++++.+}, at: [<c0040d8c>] 
process_one_work+0x118/0x4bc
         #1:  (deferred_probe_work){+.+.+.}, at: [<c0040d8c>] 
process_one_work+0x118/0x4bc
         #2:  (&dev->mutex){......}, at: [<c03b8194>] __device_attach+0x20/0x118
         #3:  (prepare_lock){+.+...}, at: [<c054bc08>] 
clk_prepare_lock+0x10/0xf8

        stack backtrace:
        CPU: 2 PID: 6 Comm: kworker/u8:0 Not tainted 4.2.0-next-20150908 #1
        Hardware name: NVIDIA Tegra SoC (Flattened Device Tree)
        Workqueue: deferwq deferred_probe_work_func
        [<c001802c>] (unwind_backtrace) from [<c00135a4>] (show_stack+0x10/0x14)
        [<c00135a4>] (show_stack) from [<c02a8418>] (dump_stack+0x94/0xd4)
        [<c02a8418>] (dump_stack) from [<c03c6f6c>] 
(dev_pm_opp_find_freq_ceil+0x108/0x114)
        [<c03c6f6c>] (dev_pm_opp_find_freq_ceil) from [<c0551a3c>] 
(dfll_calculate_rate_request+0xb8/0x170)
        [<c0551a3c>] (dfll_calculate_rate_request) from [<c0551b10>] 
(dfll_clk_round_rate+0x1c/0x2c)
        [<c0551b10>] (dfll_clk_round_rate) from [<c054de2c>] 
(clk_calc_new_rates+0x1b8/0x228)
        [<c054de2c>] (clk_calc_new_rates) from [<c054e44c>] 
(clk_core_set_rate_nolock+0x44/0xac)
        [<c054e44c>] (clk_core_set_rate_nolock) from [<c054e4d8>] 
(clk_set_rate+0x24/0x34)
        [<c054e4d8>] (clk_set_rate) from [<c0512460>] 
(tegra124_cpufreq_probe+0x120/0x230)
        [<c0512460>] (tegra124_cpufreq_probe) from [<c03b9cbc>] 
(platform_drv_probe+0x44/0xac)
        [<c03b9cbc>] (platform_drv_probe) from [<c03b84c8>] 
(driver_probe_device+0x218/0x304)
        [<c03b84c8>] (driver_probe_device) from [<c03b69b0>] 
(bus_for_each_drv+0x60/0x94)
        [<c03b69b0>] (bus_for_each_drv) from [<c03b8228>] 
(__device_attach+0xb4/0x118)
        ata1: SATA link down (SStatus 0 SControl 300)
        [<c03b8228>] (__device_attach) from [<c03b77c8>] 
(bus_probe_device+0x88/0x90)
        [<c03b77c8>] (bus_probe_device) from [<c03b7be8>] 
(deferred_probe_work_func+0x58/0x8c)
        [<c03b7be8>] (deferred_probe_work_func) from [<c0040dfc>] 
(process_one_work+0x188/0x4bc)
        [<c0040dfc>] (process_one_work) from [<c004117c>] 
(worker_thread+0x4c/0x4f4)
        [<c004117c>] (worker_thread) from [<c0047230>] (kthread+0xe4/0xf8)
        [<c0047230>] (kthread) from [<c000f7d0>] (ret_from_fork+0x14/0x24)

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Fixes: c4fe70ada40f ("clk: tegra: Add closed loop support for the DFLL")
      [vince.h@xxxxxxxxxx: Unlock rcu on error path]
      Signed-off-by: Vince Hsu <vince.h@xxxxxxxxxx>
      [sboyd@xxxxxxxxxxxxxx: Dropped second hunk that nested the rcu
      read lock unnecessarily]
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 02d8dabc50f94353075f2f62b1047c1306e8bf92
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Thu Sep 3 15:23:40 2015 +0200

      perf stat: Fix per-pkg event reporting bug

      Per-pkg events need to be captured once per processor socket. The code
      in check_per_pkg() ensures only one value per processor package is used.
      However there is a problem with this function in case the first CPU of
      the package does not measure anything for the per-pkg event, but other
      CPUs do.

      Consider the following:

        $ create cgroup FOO; echo $$ >FOO/tasks; taskset -c 1 noploop &
        $ perf stat -a -I 1000 -e intel_cqm/llc_occupancy/ -G FOO sleep 100
          1.00000 <not counted> Bytes intel_cqm/llc_occupancy/  FOO

      The reason for this is that CPU0 in the cgroup has nothing running on it.
      Yet check_per_plg() will mark socket0 as processed and no other event
      value will be considered for the socket.

      This patch fixes the problem by having check_per_pkg() only consider
      events which actually ran.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441286620-10117-1-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0f1d08dd6aaf7e9dd1039dce910c1f8ff58ee8c1
  Author: Andrew F. Davis <afd@xxxxxx>
  Date:   Tue Sep 15 15:34:22 2015 -0500

      regulator: tps65218: Fix missing zero typo

      Add missing zero to value. This will be needed when range checking
      is implemented.

      Signed-off-by: Andrew F. Davis <afd@xxxxxx>
      Acked-by: Dan Murphy <dmurphy@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 3c8f7710c1c44fb650bc29b6ef78ed8b60cfaa28
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Tue Sep 15 20:51:31 2015 +0200

      ASoC: fix broken pxa SoC support

      The previous fix of pxa library support, which was introduced to fix the
      library dependency, broke the previous SoC behavior, where a machine
      code binding pxa2xx-ac97 with a coded relied on :
       - sound/soc/pxa/pxa2xx-ac97.c
       - sound/soc/codecs/XXX.c

      For example, the mioa701_wm9713.c machine code is currently broken. The
      "select ARM" statement wrongly selects the soc/arm/pxa2xx-ac97 for
      compilation, as per an unfortunate fate SND_PXA2XX_AC97 is both declared
      in sound/arm/Kconfig and sound/soc/pxa/Kconfig.

      Fix this by ensuring that SND_PXA2XX_SOC correctly triggers the correct
      pxa2xx-ac97 compilation.

      Fixes: 846172dfe33c ("ASoC: fix SND_PXA2XX_LIB Kconfig warning")
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit e26d15f735f570a1178c3bba4d85e6f58e098fdd
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 14:46:45 2015 +0200

      spi: mediatek: fix wrong error return value on probe

      Commit adcbcfea15d62 ("spi: mediatek: fix spi clock usage error")
      added a new sel_clk but introduced bugs in the error paths since
      the wrong struct clk pointers are passed to PTR_ERR().

      Fixes: adcbcfea15d62 ("spi: mediatek: fix spi clock usage error")
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 0243ed44ad4a25dbd2e92ad97e5e12a1a6c72d6c
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Tue Sep 15 04:59:21 2015 -0700

      spi: fix kernel-doc warnings in spi.h

      Fix the following 'make htmldocs' warnings:

        .//include/linux/spi/spi.h:71: warning: No description found for 
parameter 'lock'
        .//include/linux/spi/spi.h:71: warning: Excess 
struct/union/enum/typedef member 'clock' description in 'spi_statistics'

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 92243b6fc8fcb16bf401b055f7a0ba79f70a4115
  Merge: a394d63 6ff33f3
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 16 20:44:25 2015 +0100

      Merge tag 'v4.3-rc1' into spi-fix-doc

      Linux 4.3-rc1

  commit 385877c01361401113c101ef5a80a9f0998e072b
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 1 09:52:21 2015 +0800

      ARM: pxa: balloon3: Fix build error

      irq_data_get_chip() function does not exist, call irq_desc_get_chip()
      instead.

      Fixes: 9ec97561aa6d ("ARM/pxa: Prepare balloon3_irq_handler for irq 
argument removal")
      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>

  commit 37d2dbcdcca88e392009d7cbe8617d5af0ebcb32
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:32:41 2015 -0700

      net: fix cdc-phonet.c dependency and build error

      Fix build error caused by missing Kconfig dependency:

      ERROR: "cdc_parse_cdc_header" [drivers/net/usb/cdc-phonet.ko] undefined!

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2f58514cfb374d5368c9da945f1765cd48eb0da
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Wed Aug 5 11:53:57 2015 +0100

      arm/arm64: KVM: vgic: Check for !irqchip_in_kernel() when mapping 
resources

      Until b26e5fdac43c ("arm/arm64: KVM: introduce per-VM ops"),
      kvm_vgic_map_resources() used to include a check on irqchip_in_kernel(),
      and vgic_v2_map_resources() still has it.

      But now vm_ops are not initialized until we call kvm_vgic_create().
      Therefore kvm_vgic_map_resources() can being called without a VGIC,
      and we die because vm_ops.map_resources is NULL.

      Fixing this restores QEMU's kernel-irqchip=off option to a working state,
      allowing to use GIC emulation in userspace.

      Fixes: b26e5fdac43c ("arm/arm64: KVM: introduce per-VM ops")
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      [maz: reworked commit message]
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 54c3cf65aefd5e49e58201adb3dc7595c4b3ad9f
  Merge: 6ff33f3 60fdcb8
  Author: Kevin Hilman <khilman@xxxxxxxxxx>
  Date:   Wed Sep 16 09:27:24 2015 -0700

      Merge tag 'omap-for-v4.3/fixes-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Merge "omap fixes against v4.3-rc1" from Tony Lindgren:

      Fixes for omaps against v4.3-rc1:

      - Fix long time regression on beagle for tfp410 pin muxing

      - Fix dm814x control base address typo and related Ethernet
        phy configuration

      - Fix igepv2 Ethernet pinmuxing as only some boards have it

      - Fix pbias regulator compatible values as a pending regulator
        fix needs those for MMC1 to work properly

      - Fix beagle-x15 MMC1 regulator and make pcf857x built-in

      - Fix omap5 and dra7 Kconfig options when built as the only
        SoCs selected

      - Fix PM errata for omap5 and dra7 as they too need it

      - Fix phycore mpu voltage

      Also included are a few cosmetic fixes:

      - Remove unused of_irq macros

      - Fix dra7 ethernet name

      * tag 'omap-for-v4.3/fixes-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        ARM: dts: Fixup model name for HP t410 dts
        ARM: dts: DRA7: fix a typo in ethernet
        ARM: omap2plus_defconfig: make PCF857x built-in
        ARM: dts: Use ti,pbias compatible string for pbias
        ARM: OMAP5: Cleanup options for SoC only build
        ARM: DRA7: Select missing options for SoC only build
        ARM: OMAP2+: board-generic: Remove stale of_irq macros
        ARM: OMAP4+: PM: erratum is used by OMAP5 and DRA7 as well
        ARM: dts: omap3-igep: Move eth IRQ pinmux to IGEPv2 common dtsi
        ARM: dts: am57xx-beagle-x15: Add wakeup irq for mcp79410
        ARM: dts: am335x-phycore-som: Fix mpu voltage
        ARM: dts: am57xx-beagle-x15: Fix regulator populated in MMC1 dt node
        ARM: dts: Fix dm814x control base to properly initialize Ethernet PHY
        ARM: dts: omap3-beagle: make i2c3, ddc and tfp410 gpio work again

  commit 72714841b705a5b9bccf37ee85a62352bee3a3ef
  Merge: 3025510 447e9a4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 09:16:20 2015 -0700

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull rdma driver move from Doug Ledford:
       "This is a move only, no functional changes.

        I tried to get it in prior to the rc1 release, but we were waiting on
        IBM to get back to us that they were OK with the deprecation and
        eventual removal of this driver.  That OK didn't materialize until
        last week, so integration and testing time pushed us beyond the rc1
        release.

        Summary:

         - Move ehca driver to staging/rdma and schedule for deletion"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/ehca: Deprecate driver, move to staging, schedule deletion

  commit 0c986253b939cc14c69d4adbe2b4121bdf4aa220
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Wed Sep 16 11:51:12 2015 -0400

      Revert "sched, cgroup: replace signal_struct->group_rwsem with a global 
percpu_rwsem"

      This reverts commit d59cfc09c32a2ae31f1c3bc2983a0cd79afb3f14.

      d59cfc09c32a ("sched, cgroup: replace signal_struct->group_rwsem with
      a global percpu_rwsem") and b5ba75b5fc0e ("cgroup: simplify
      threadgroup locking") changed how cgroup synchronizes against task
      fork and exits so that it uses global percpu_rwsem instead of
      per-process rwsem; unfortunately, the write [un]lock paths of
      percpu_rwsem always involve synchronize_rcu_expedited() which turned
      out to be too expensive.

      Improvements for percpu_rwsem are scheduled to be merged in the coming
      v4.4-rc1 merge window which alleviates this issue.  For now, revert
      the two commits to restore per-process rwsem.  They will be re-applied
      for the v4.4-rc1 merge window.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Link: http://lkml.kernel.org/g/55F8097A.7000206@xxxxxxxxxx
      Reported-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+

  commit f9f9e7b776142fb1c0782cade004cc8e0147a199
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Wed Sep 16 11:51:12 2015 -0400

      Revert "cgroup: simplify threadgroup locking"

      This reverts commit b5ba75b5fc0e8404e2c50cb68f39bb6a53fc916f.

      d59cfc09c32a ("sched, cgroup: replace signal_struct->group_rwsem with
      a global percpu_rwsem") and b5ba75b5fc0e ("cgroup: simplify
      threadgroup locking") changed how cgroup synchronizes against task
      fork and exits so that it uses global percpu_rwsem instead of
      per-process rwsem; unfortunately, the write [un]lock paths of
      percpu_rwsem always involve synchronize_rcu_expedited() which turned
      out to be too expensive.

      Improvements for percpu_rwsem are scheduled to be merged in the coming
      v4.4-rc1 merge window which alleviates this issue.  For now, revert
      the two commits to restore per-process rwsem.  They will be re-applied
      for the v4.4-rc1 merge window.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Link: http://lkml.kernel.org/g/55F8097A.7000206@xxxxxxxxxx
      Reported-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+

  commit 30255100d7c253c82b596a0768235d5865eee2cf
  Merge: 9efeaaf cd1faefa
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 08:49:41 2015 -0700

      Merge tag 'hwmon-for-linus-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging

      Pull hwmon fixes from Guenter Roeck:
       "Two patches for the nct6775 driver: add support for NCT6793D, and fix
        swapped registers"

      * tag 'hwmon-for-linus-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:
        hwmon: (nct6775) Add support for NCT6793D
        hwmon: (nct6775) Swap STEP_UP_TIME and STEP_DOWN_TIME registers for 
most chips

  commit 9efeaaf9a0c1a27c2be8b2d37c73142555702a4f
  Merge: d1291eb fa84b52
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 08:07:04 2015 -0700

      Merge tag 'pinctrl-v4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl

      Pull pin control fixes from Linus Walleij:
       "This is a first set of pin control fixes for the v4.3 series.  Nothing
        special to say, business as usual.

         - Some IS_ERR() fixes from Julia Lawall.  I always wanted the
           compiler to catch these but error pointers by nailing them as an
           err pointer intrinsic type or something seem to be a "no can do".
           In any case, cocinelle is obviously up to the task, better than
           bugs staying around.

         - Better error handling for NULL GPIO chips.

         - Fix a compile error from the big irq desc refactoring.  I'm
           surprised the fallout wasn't bigger than this"

      * tag 'pinctrl-v4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:
        pinctrl: samsung: s3c24xx: fix syntax error
        pinctrl: core: Warn about NULL gpio_chip in 
pinctrl_ready_for_gpio_range()
        pinctrl: join lines that can be a single line within 80 columns
        pinctrl: digicolor: convert null test to IS_ERR test
        pinctrl: qcom: ssbi: convert null test to IS_ERR test

  commit 9bf9fde2c98ba8362ea1d41d8bd8b32a23776e67
  Author: Jason J. Herne <jjherne@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 09:13:50 2015 -0400

      KVM: s390: Replace incorrect atomic_or with atomic_andnot

      The offending commit accidentally replaces an atomic_clear with an
      atomic_or instead of an atomic_andnot in kvm_s390_vcpu_request_handled.
      The symptom is that kvm guests on s390 hang on startup.
      This patch simply replaces the incorrect atomic_or with atomic_andnot

      Fixes: 805de8f43c20 (atomic: Replace atomic_{set,clear}_mask() usage)
      Signed-off-by: Jason J. Herne <jjherne@xxxxxxxxxxxxxxxxxx>
      Acked-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Acked-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit d1291ebd85770299857b355160864cd1a9f6e5e9
  Merge: aa57e0b 46d4f7c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 07:58:58 2015 -0700

      Merge tag 'gpio-v4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio

      Pull GPIO fixes from Linus Walleij:
       "This is the first round of GPIO fixes for v4.3.  Quite a lot of
        patches, but the influx of new stuff in the merge window was equally
        big, so I'm not surprised.

         - Return value checks and thus nicer errorpath for two drivers.

         - Make GPIO_RCAR arch neutral.

         - Propagate errors from GPIO chip ->get() vtable call.  It turned out
           these can actually fail sometimes, especially on slowpath
           controllers doing I2C traffic and similar.

         - Update documentation to be in sync with the massive changes in the
           v4.3 merge window, phew.

         - Handle deferred probe properly in the OMAP driver.

         - Get rid of surplus MODULE_ALIAS() from sx150x"

      * tag 'gpio-v4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio:
        gpio: omap: Fix GPIO numbering for deferred probe
        Documentation: gpio: Explain that <function>-gpio is also supported
        gpio: omap: Fix gpiochip_add() handling for deferred probe
        gpio: sx150x: Remove unnecessary MODULE_ALIAS()
        Documentation: gpio: board: describe the con_id parameter
        Documentation: gpio: board: add flags parameter to gpiod_get*() 
functions
        gpio: Propagate errors from chip->get()
        gpio: rcar: GPIO_RCAR doesn't relate to ARM
        gpio: mxs: need to check return value of irq_alloc_generic_chip
        gpio: mxc: need to check return value of irq_alloc_generic_chip

  commit ae80a2f2d142b97ec68434313f0263256916683d
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:25 2015 -0500

      arm64: Remove ununsed set_irq_flags

      Now that all users of set_irq_flags and custom flags are converted to
      genirq functions, the ARM specific set_irq_flags can be removed.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit eb811129ed9ea50ef2dfe8a83ddde6a16d1eb8d4
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:24 2015 -0500

      ARM: Remove ununsed set_irq_flags

      Now that all users of set_irq_flags and custom flags are converted to
      genirq functions, the ARM specific set_irq_flags can be removed.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Tested-by: Kevin Hilman <khilman@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 3e15135b98ecaa0228eb5dad42be7516cac38aa0
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:23 2015 -0500

      sh: Kill off set_irq_flags usage

      set_irq_flags is ARM specific with custom flags which have genirq
      equivalents. Convert drivers to use the genirq interfaces directly, so we
      can kill off set_irq_flags. The translation of flags is as follows:

      IRQF_VALID -> !IRQ_NOREQUEST
      IRQF_PROBE -> !IRQ_NOPROBE
      IRQF_NOAUTOEN -> IRQ_NOAUTOEN

      For IRQs managed by an irqdomain, the irqdomain core code handles clearing
      and setting IRQ_NOREQUEST already, so there is no need to do this in
      .map() functions and we can simply remove the set_irq_flags calls. Some
      users also modify IRQ_NOPROBE and this has been maintained although it
      is not clear that is really needed. There appears to be a great deal of
      blind copy and paste of this code.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Simon Horman <horms@xxxxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-sh@xxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1440889285-5637-4-git-send-email-robh@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d17cab4451df1f25f3a46369e0aaeaa18390fa6b
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:22 2015 -0500

      irqchip: Kill off set_irq_flags usage

      set_irq_flags is ARM specific with custom flags which have genirq
      equivalents. Convert drivers to use the genirq interfaces directly, so we
      can kill off set_irq_flags. The translation of flags is as follows:

      IRQF_VALID -> !IRQ_NOREQUEST
      IRQF_PROBE -> !IRQ_NOPROBE
      IRQF_NOAUTOEN -> IRQ_NOAUTOEN

      For IRQs managed by an irqdomain, the irqdomain core code handles clearing
      and setting IRQ_NOREQUEST already, so there is no need to do this in
      .map() functions and we can simply remove the set_irq_flags calls. Some
      users also modify IRQ_NOPROBE and this has been maintained although it
      is not clear that is really needed. There appears to be a great deal of
      blind copy and paste of this code.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kukjin Kim <kgene@xxxxxxxxxx>
      Cc: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Cc: Stephen Warren <swarren@xxxxxxxxxxxxx>
      Cc: Lee Jones <lee@xxxxxxxxxx>
      Cc: Alexander Shiyan <shc_work@xxxxxxx>
      Cc: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Cc: linux-rpi-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-samsung-soc@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440889285-5637-3-git-send-email-robh@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ca0141de743dc7760fdfeb9210b82dadf6d9b221
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:21 2015 -0500

      gpu/drm: Kill off set_irq_flags usage

      set_irq_flags is ARM specific with custom flags which have genirq
      equivalents. Convert drivers to use the genirq interfaces directly, so we
      can kill off set_irq_flags. The translation of flags is as follows:

      IRQF_VALID -> !IRQ_NOREQUEST
      IRQF_PROBE -> !IRQ_NOPROBE
      IRQF_NOAUTOEN -> IRQ_NOAUTOEN

      For IRQs managed by an irqdomain, the irqdomain core code handles clearing
      and setting IRQ_NOREQUEST already, so there is no need to do this in
      .map() functions and we can simply remove the set_irq_flags calls. Some
      users also modify IRQ_NOPROBE and this has been maintained although it
      is not clear that is really needed. There appears to be a great deal of
      blind copy and paste of this code.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: David Airlie <airlied@xxxxxxxx>
      Cc: dri-devel@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit aa57e0b281453334267e836d15cfdb933f6d6f97
  Merge: 865ca08 84cba17
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 07:53:33 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fixes from Herbert Xu:
       "This fixes the following issues:

         - The selftest overreads the IV test vector.

        - Fix potential infinite loop in sunxi-ss driver.

         - Fix powerpc build failure when VMX is set without VSX"

      * git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: testmgr - don't copy from source IV too much
        crypto: sunxi-ss - Fix a possible driver hang with ciphers
        crypto: vmx - VMX crypto should depend on CONFIG_VSX

  commit 03da3ff1cfcd7774c8780d2547ba0d995f7dc03d
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:10:03 2015 +0100

      x86/platform: Fix Geode LX timekeeping in the generic x86 build

      In 2007, commit 07190a08eef36 ("Mark TSC on GeodeLX reliable")
      bypassed verification of the TSC on Geode LX. However, this code
      (now in the check_system_tsc_reliable() function in
      arch/x86/kernel/tsc.c) was only present if CONFIG_MGEODE_LX was
      set.

      OpenWRT has recently started building its generic Geode target
      for Geode GX, not LX, to include support for additional
      platforms. This broke the timekeeping on LX-based devices,
      because the TSC wasn't marked as reliable:
      https://dev.openwrt.org/ticket/20531

      By adding a runtime check on is_geode_lx(), we can also include
      the fix if CONFIG_MGEODEGX1 or CONFIG_X86_GENERIC are set, thus
      fixing the problem.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Cc: Andres Salomon <dilinger@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Marcelo Tosatti <marcelo@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/1442409003.131189.87.camel@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ca09f02f122b2ecb0f5ddfc5fd47b29ed657d4fd
  Author: Marek Majtyka <marek.majtyka@xxxxxxxxx>
  Date:   Wed Sep 16 12:04:55 2015 +0200

      arm: KVM: Fix incorrect device to IPA mapping

      A critical bug has been found in device memory stage1 translation for
      VMs with more then 4GB of address space. Once vm_pgoff size is smaller
      then pa (which is true for LPAE case, u32 and u64 respectively) some
      more significant bits of pa may be lost as a shift operation is performed
      on u32 and later cast onto u64.

      Example: vm_pgoff(u32)=0x00210030, PAGE_SHIFT=12
              expected pa(u64):   0x0000002010030000
              produced pa(u64):   0x0000000010030000

      The fix is to change the order of operations (casting first onto 
phys_addr_t
      and then shifting).

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      [maz: fixed changelog and patch formatting]
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Marek Majtyka <marek.majtyka@xxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 1713e5aa05fff3951e747548b373bd2c81be4e7a
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 16 10:54:37 2015 +0100

      arm64: KVM: Fix user access for debug registers

      When setting the debug register from userspace, make sure that
      copy_from_user() is called with its parameters in the expected
      order. It otherwise doesn't do what you think.

      Fixes: 84e690bfbed1 ("KVM: arm64: introduce vcpu->arch.debug_ptr")
      Reported-by: Peter Maydell <peter.maydell@xxxxxxxxxx>
      Cc: Alex Bennée <alex.bennee@xxxxxxxxxx>
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit bd0b9ac405e1794d72533c3d487aa65b6b955a0c
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:42:37 2015 +0200

      genirq: Remove irq argument from irq flow handlers

      Most interrupt flow handlers do not use the irq argument. Those few
      which use it can retrieve the irq number from the irq descriptor.

      Remove the argument.

      Search and replace was done with coccinelle and some extra helper
      scripts around it. Thanks to Julia for her help!

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>

  commit b237721c5d95082a803c0be686f56d2dd1de995b
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Jun 1 16:05:43 2015 +0800

      genirq: Move field 'msi_desc' from irq_data into irq_common_data

      MSI descriptors are per-irq instead of per irqchip, so move it into
      struct irq_common_data.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1433145945-789-35-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 9df872faa7e1619e9278bec00ceaed2236533530
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Wed Jun 3 11:47:50 2015 +0800

      genirq: Move field 'affinity' from irq_data into irq_common_data

      Irq affinity mask is per-irq instead of per irqchip, so move it into
      struct irq_common_data.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1433303281-27688-1-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit af7080e040d223b5e7d0a8de28f7cea24ef017c4
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Jun 1 16:05:21 2015 +0800

      genirq: Move field 'handler_data' from irq_data into irq_common_data

      Handler data (handler_data) is per-irq instead of per irqchip, so move
      it into struct irq_common_data.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1433145945-789-13-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 449e9cae58b06be1293858ec8e5d8cb728238baa
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Jun 1 16:05:16 2015 +0800

      genirq: Move field 'node' from irq_data into irq_common_data

      NUMA node information is per-irq instead of per-irqchip, so move it into
      struct irq_common_data. Also use CONFIG_NUMA to guard 
irq_common_data.node.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1433145945-789-8-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 4df7f54d16ebe9c37631182de84c4347f0e44db3
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:19:16 2015 +0200

      irqchip/gic-v3: Use IRQD_FORWARDED_TO_VCPU flag

      Get rid of the handler_data abuse.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 714665351cc718e01f0ce34ef5325932d56d8b4e
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:37:36 2015 +0200

      irqchip/gic: Use IRQD_FORWARDED_TO_VCPU flag

      Get rid of the handler_data abuse.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit fc5697126aa074c289df5e8baae28e115963023f
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:33:42 2015 +0200

      genirq: Provide IRQD_FORWARDED_TO_VCPU status flag

      Provide a irq data flag to mark an irq forwarded to a VCPU along with
      the accessor functions.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 755d119a6204974b2005a98549a48a75a7f5010b
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:37:12 2015 +0200

      genirq: Simplify irq_data_to_desc()

      Avoid the lookup of irq_desc and use the same mechanism for
      hierarchical and flat irqdomains.

      Based-on-a-patch-from: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 123236ccacc933daac3b39c5eb1f0011c70d41d8
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:54:23 2015 +0200

      genirq: Remove __irq_set_handler_locked()

      All users converted to irq_set_handler_locked()

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7c51173adde2ec520348812214704313f5b36f75
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:52:53 2015 +0200

      pinctrl/pistachio: Use irq_set_handler_locked

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor. Search and replacement was done with coccinelle:

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: linux-gpio@xxxxxxxxxxxxxxx

  commit a7147db0f5184954687546d430aed65cce483ffa
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:51:00 2015 +0200

      gpio: vf610: Use irq_set_handler_locked

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor. Search and replacement was done with coccinelle:

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: linux-gpio@xxxxxxxxxxxxxxx

  commit 9ca86b204b3c874e6ada28309f607e3aa74d60a9
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Jun 23 15:52:36 2015 +0200

      powerpc/mpc8xx: Use irq_set_handler_locked()

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Search and replacement was done with coccinelle:

      @@
      struct irq_data *d;
      expression E1;
      @@

      -__irq_set_handler_locked(d->irq, E1);
      +irq_set_handler_locked(d, E1);

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 9758a7b0e5fdd5a08bcc73540bb3b98d59295a6d
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Jun 23 15:52:34 2015 +0200

      powerpc/ipic: Use irq_set_handler_locked()

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Search and replacement was done with coccinelle:

      @@
      struct irq_data *d;
      expression E1;
      @@

      -__irq_set_handler_locked(d->irq, E1);
      +irq_set_handler_locked(d, E1);

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Anton Blanchard <anton@xxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit e9e879a3d6cecc4258294c674627045da648fab0
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Jun 23 15:52:32 2015 +0200

      powerpc/cpm2: Use irq_set_handler_locked()

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Search and replacement was done with coccinelle:

      @@
      struct irq_data *d;
      expression E1;
      @@

      -__irq_set_handler_locked(d->irq, E1);
      +irq_set_handler_locked(d, E1);

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 6b83bd941479e99f6890ed4b5c54cb1f43c7146f
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Jun 23 15:52:31 2015 +0200

      powerpc/mpc52xx: Use irq_set_handler_locked()

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Search and replacement was done with coccinelle:

      @@
      struct irq_data *d;
      expression E1;
      @@

      -__irq_set_handler_locked(d->irq, E1);
      +irq_set_handler_locked(d, E1);

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Anatolij Gustschin <agust@xxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 04bb92e4b4cf06a66889d37b892b78f926faa9d4
  Author: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
  Date:   Wed Sep 16 19:31:11 2015 +0800

      KVM: vmx: fix VPID is 0000H in non-root operation

      Reference SDM 28.1:

      The current VPID is 0000H in the following situations:
      - Outside VMX operation. (This includes operation in system-management
        mode under the default treatment of SMIs and SMM with VMX operation;
        see Section 34.14.)
      - In VMX root operation.
      - In VMX non-root operation when the â??enable VPIDâ?? VM-execution 
control
        is 0.

      The VPID should never be 0000H in non-root operation when "enable VPID"
      VM-execution control is 1. However, commit 34a1cd60 ("kvm: x86: vmx:
      move some vmx setting from vmx_init() to hardware_setup()") remove the
      codes which reserve 0000H for VMX root operation.

      This patch fix it by again reserving 0000H for VMX root operation.

      Cc: stable@xxxxxxxxxxxxxxx # 3.19+
      Fixes: 34a1cd60d17f62c1f077c1478a6c2ca8c3d17af4
      Reported-by: Wincy Van <fanwenyi0529@xxxxxxxxx>
      Signed-off-by: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 36b35d5d807b7e57aff7d08e63de8b17731ee211
  Author: Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:30:08 2015 +0530

      powerpc/mm: Recompute hash value after a failed update

      If we had secondary hash flag set, we ended up modifying hash value in
      the updatepp code path. Hence with a failed updatepp we will be using
      a wrong hash value for the following hash insert. Fix this by
      recomputing hash before insert.

      Without this patch we can end up with using wrong slot number in linux
      pte. That can result in us missing an hash pte update or invalidate
      which can cause memory corruption or even machine check.

      Fixes: 6d492ecc6489 ("powerpc/THP: Add code to handle HPTE faults for 
hugepages")
      Cc: stable@xxxxxxxxxxxxxxx # v3.11+
      Signed-off-by: Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 655471f54c2e395ba29ae4156ba0f49928177cc1
  Author: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 11:24:17 2015 +1000

      powerpc/boot: Specify ABI v2 when building an LE boot wrapper

      The kernel does it, not the boot wrapper, which breaks with some
      cross compilers that still default to ABI v1.

      Fixes: 147c05168fc8 ("powerpc/boot: Add support for 64bit little endian 
wrapper")
      Cc: stable@xxxxxxxxxxxxxxx # v3.16+
      Signed-off-by: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit e902e14549e04c040fb6e15785efd35f810a223a
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:36:04 2015 +0200

      genirq: Remove __irq_set_chip_handler_name_locked()

      All users converted to irq_set_chip_handler_name_locked()

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b9a5ec33e32069a2f8af09d46266091602902bf4
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:32:40 2015 +0200

      pinctrl: sunxi: Use irq_set_chip_handler_name_locked()

      __irq_set_chip_handler_name_locked() is about to be replaced. Use
      irq_set_chip_handler_name_locked() instead.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: linux-gpio@xxxxxxxxxxxxxxx

  commit 62bea5bff486644ecf363fe8a1a2f6f32c614a49
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Sep 15 18:27:57 2015 +0200

      KVM: add halt_attempted_poll to VCPU stats

      This new statistic can help diagnosing VCPUs that, for any reason,
      trigger bad behavior of halt_poll_ns autotuning.

      For example, say halt_poll_ns = 480000, and wakeups are spaced exactly
      like 479us, 481us, 479us, 481us. Then KVM always fails polling and wastes
      10+20+40+80+160+320+480 = 1110 microseconds out of every
      479+481+479+481+479+481+479 = 3359 microseconds. The VCPU then
      is consuming about 30% more CPU than it would use without
      polling.  This would show as an abnormally high number of
      attempted polling compared to the successful polls.

      Acked-by: Christian Borntraeger <borntraeger@xxxxxxxxxx<
      Reviewed-by: David Matlack <dmatlack@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit ad2aa04218de9bd734d593adb0ac59854ec0cb68
  Author: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 16:35:08 2015 +0200

      virtio/s390: handle failures of READ_VQ_CONF ccw

      In virtio_ccw_read_vq_conf() the return value of ccw_io_helper()
      was not checked.
      If the configuration could not be read properly, we'd wrongly assume a
      queue size of 0.

      Let's propagate any I/O error to virtio_ccw_setup_vq() so it may
      properly fail.

      Signed-off-by: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>

  commit fd2e8d4300c56f9660679d629c449118e14c00cd
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Wed Sep 9 22:26:25 2015 +0300

      tools/virtio: propagate V=X to kernel build

      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>

  commit 4e9fa50c6ccbebef0c4a4aae84090badf81359e6
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Wed Sep 9 22:24:56 2015 +0300

      vhost: move features to core

      virtio 1 and any layout are core features, move them
      there. This fixes vhost test.

      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>

  commit 9b55613f42e8d40d5c9ccb8970bde6af4764b2ab
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 16:44:02 2015 +0100

      ARM: fix Thumb2 signal handling when ARMv6 is enabled

      When a kernel is built covering ARMv6 to ARMv7, we omit to clear the
      IT state when entering a signal handler.  This can cause the first
      few instructions to be conditionally executed depending on the parent
      context.

      In any case, the original test for >= ARMv7 is broken - ARMv6 can have
      Thumb-2 support as well, and an ARMv6T2 specific build would omit this
      code too.

      Relax the test back to ARMv6 or greater.  This results in us always
      clearing the IT state bits in the PSR, even on CPUs where these bits
      are reserved.  However, they're reserved for the IT state, so this
      should cause no harm.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: d71e1352e240 ("Clear the IT state when invoking a Thumb-2 signal 
handler")
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
      Tested-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit d71b0ad8d30922ccdd0705318237e6890b4ec1b6
  Merge: a4d7109 f6cf87f
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 16 09:19:56 2015 +0200

      Merge branch 'perf/urgent' into perf/core, to resolve a conflict

      Conflicts:
        tools/perf/ui/browsers/hists.c

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a4d71093e759b7cfe0babbc6ae89c8130532f6ad
  Merge: 9059b28 bbbe6bf
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 16 09:12:07 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

      - Enhance the error reporting of tracepoint event parsing, e.g.:

          $ oldperf record -e sched:sched_switc usleep 1
          event syntax error: 'sched:sched_switc'
                               \___ unknown tracepoint
          Run 'perf list' for a list of valid events

        Now we get the much nicer:

          $ perf record -e sched:sched_switc ls
          event syntax error: 'sched:sched_switc'
                               \___ can't access trace events

          Error: No permissions to read 
/sys/kernel/debug/tracing/events/sched/sched_switc
          Hint:  Try 'sudo mount -o remount,mode=755 /sys/kernel/debug'

        And after we have those mount point permissions fixed:

          $ perf record -e sched:sched_switc ls
          event syntax error: 'sched:sched_switc'
                               \___ unknown tracepoint

          Error: File /sys/kernel/debug/tracing/events/sched/sched_switc not 
found.
          Hint:  Perhaps this kernel misses some CONFIG_ setting to enable this 
feature?.

        Now its just a matter of using what git uses to suggest alternatives 
when we
        make a typo, i.e. that it is just an 'h' missing :-)

        I.e. basically now the event parsing routing uses the strerror_open()
        routines introduced by and used in 'perf trace' work. (Jiri Olsa)

      Infrastructure changes:

      - Export init/exit_probe_symbol_maps() from 'perf probe' for use in eBPF.
        (Namhyung Kim)

      - Free perf_probe_event in cleanup_perf_probe_events(). (Namhyung Kim)

      - regs_query_register_offset() infrastructure + implementation for x86.
        First user will be the perf/eBPF code. (Wang Nan)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f6cf87f748ff9480f97ff9c5caf6d6faacf52aa1
  Merge: 91a4dc9 c5e6bd2
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 16 09:06:54 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

      - Fix segfault pressing -> in 'perf top' with no hist entries. (Wang Nan)

         E.g:
        perf top -e page-faults --pid 11400 # 11400 generates no page-fault

      - Fix propagation of thread and cpu maps, that got broken when doing 
incomplete
        changes to better support events with a PMU cpu mask, leading to Intel 
PT to
        fail with an error like:

          $ perf record -e intel_pt//u uname
          Error: The sys_perf_event_open() syscall returned with
                    22 (Invalid argument) for event (sched:sched_switch).

        Because intel_pt adds that sched:sched_switch evsel to the evlist after 
the
        thread/cpu maps were propagated to the evsels, fix it. (Adrian Hunter)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8315b77d72c5f0b18ceb513303d845e73166133c
  Author: Li Jun <jun.li@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:46:32 2015 +0800

      usb: chipidea: imx: fix a typo for imx6sx

      Use imx6sx instead of imx6sl's platform flags for imx6sx.

      Fixes: e14db48dfcf3 ("usb: chipidea: imx: add runtime power management 
support")
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Li Jun <jun.li@xxxxxxxxxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit b84ee0d7f375ed7840c7c110d46eac24cf94b2a2
  Author: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:10:16 2015 +1000

      cdc: add header guards

      Signed-off-by: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f0bd44e937468446d080b98b5669844744c24a1
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Wed Sep 16 02:17:49 2015 +0200

      cpufreq: acpi-cpufreq: Use cpufreq_cpu_get_raw() in ->get()

      cpufreq_cpu_get() called by get_cur_freq_on_cpu() is overkill,
      because the ->get() callback is always invoked in a context in
      which all of the conditions checked by cpufreq_cpu_get() are
      guaranteed to be satisfied.

      Use cpufreq_cpu_get_raw() instead of it and drop the
      corresponding cpufreq_cpu_put() from get_cur_freq_on_cpu().

      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>

  commit f0b2e563bc419df7c1b3d2f494574c25125f6aed
  Author: Jeff Moyer <jmoyer@xxxxxxxxxx>
  Date:   Fri Aug 14 16:15:32 2015 -0400

      blockdev: don't set S_DAX for misaligned partitions

      The dax code doesn't currently support misaligned partitions,
      so disable O_DIRECT via dax until such time as that support
      materializes.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Suggested-by: Boaz Harrosh <boaz@xxxxxxxxxxxxx>
      Signed-off-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit e94f5a2285fc94202a9efb2c687481f29b64132c
  Author: Jeff Moyer <jmoyer@xxxxxxxxxx>
  Date:   Fri Aug 14 16:15:31 2015 -0400

      dax: fix O_DIRECT I/O to the last block of a blockdev

      commit bbab37ddc20b (block: Add support for DAX reads/writes to
      block devices) caused a regression in mkfs.xfs.  That utility
      sets the block size of the device to the logical block size
      using the BLKBSZSET ioctl, and then issues a single sector read
      from the last sector of the device.  This results in the dax_io
      code trying to do a page-sized read from 512 bytes from the end
      of the device.  The result is -ERANGE being returned to userspace.

      The fix is to align the block to the page size before calling
      get_block.

      Thanks to willy for simplifying my original patch.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Tested-by:  Linda Knippers <linda.knippers@xxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 9adbac599a71bc25a2617850ffcaa4388dc5c20d
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:50 2015 -0700

      fm10k: fix iov_msg_mac_vlan_pf VID checks

      The VF will send a message to request multicast addresses with the
      default VID. In the current code, if the PF has statically assigned a
      VLAN to a VF, then the VF will not get the multicast addresses. Fix up
      all of the various VLAN messages to use identical checks (since each
      check was different). Also use set as a variable, so that it simplifies
      our check for whether VLAN matches the pf_vid.

      The new logic will allow set of a VLAN if it is zero, automatically
      converting to the default VID. Otherwise it will allow setting the PF
      VID, or any VLAN if PF has not statically assigned a VLAN. This is
      consistent behavior, and allows VF to request either 0 or the
      default_vid without silently failing.

      Note that we need the check for zero since VFs might not get the default
      VID message in time to actually request non-zero VLANs.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ac98100359e098d03dbd98783ca4becaf2ea7ec3
  Author: Alexander Duyck <alexander.duyck@xxxxxxxxxx>
  Date:   Wed Jun 24 13:34:49 2015 -0700

      fm10k: Only trigger data path reset if fabric is up

      This change makes it so that we only trigger the data path reset if the
      fabric is ready to handle traffic.  The general idea is to avoid
      triggering the reset unless the switch API is ready for us.  Otherwise
      we can just postpone the reset until we receive a switch ready
      notification.

      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 95f4f8da644256d8c0ff5bab2c93ba33d2a42cd8
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:48 2015 -0700

      fm10k: re-enable VF after a full reset on detection of a Malicious event

      Modify behavior of Malicious Driver Detection events. Presently, the
      hardware disables the VF queues and re-assigns them to the PF. This
      causes the VF in question to continuously Tx hang, because it assumes
      that it can transmit over the queues in question. For transient events,
      this results in continuous logging of malicious events.

      New behavior is to reset the LPORT and VF state, so that the VF will
      have to reset and re-enable itself. This does mean that malicious VFs
      will possibly be able to continue and attempt malicious events again.
      However, it is expected that system administrators will step in and
      manually remove or disable the VF in question.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5c2d642fd0cf0f4f7396dfd3754bc03f6e50e359
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:47 2015 -0700

      fm10k: TRIVIAL fix typo in fm10k_netdev.c

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e71c9318428fb16de808b497e0229994010d32a1
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:46 2015 -0700

      fm10k: send traffic on default VID to VLAN device if we have one

      This patch ensures that VLAN traffic on the default VID will go to the
      corresponding VLAN device if it exists. To do this, mask the rx_ring VID
      if we have an active VLAN on that VID.

      For this to work correctly, we need to update fm10k_process_skb_fields
      to correctly mask off the VLAN_PRIO_MASK bits and compare them
      separately, otherwise we incorrectly compare the priority bits with the
      cleared flag. This also happens to fix a related bug where having
      priority bits set causes us to incorrectly classify traffic.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6fbc6b358b3f63e701d15e9d330a3b0dbb03f802
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:44 2015 -0700

      fm10k: TRIVIAL fix up ordering of __always_unused and style

      Fix some style issues in debugfs code, and correct ordering of void and
      __always_unused. Technically, the order does not matter, but preferred
      style is to put the macro between the type and name.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 855c40fc31ca2392845558235f7e92e406936fbe
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:41 2015 -0700

      fm10k: remove is_slot_appropriate

      This function is no longer used now that we have updated fm10k_slot_warn
      functionality.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit b655a5c735867c1a80e7ceaa1f1c45d1dd34909f
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Fri Jun 19 10:56:10 2015 -0700

      fm10k: don't store sw_vid at reset

      If we store the sw_vid at reset of PF, then we accidentally prevent the
      VF from receiving the message to update its default VID. This only
      occurs if the VF is created before the PF has come up, which is the
      standard way of creating VFs when using the module parameter.

      This fixes an issue where we request the incorrect MAC/VLAN
      combinations, and prevents us from accidentally reporting some frames as
      VLAN tagged.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3f0bdb2e2ce7db7425856686d9ccd8fd0ddf9bf0
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Fri Jun 19 10:56:09 2015 -0700

      fm10k: allow creation of VLAN interfaces even while down

      We re-sync upon going up, so there is little reason to worry about not
      syncing immediately with switch. This prevents an error that occurs if
      you add a VLAN interface while down.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0ff36676a3778d0655933ace201fca7c11b4e8b5
  Author: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
  Date:   Thu Jun 18 19:41:10 2015 -0700

      fm10k: Report MAC address on driver load

      This change adds the MAC address to the list of values recorded on driver
      load.  The MAC address represents the serial number of the unit and allows
      us to track the value should a card be replaced in a system.

      The log message should now be similar in output to that of ixgbe.

      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit aae072e363bed4e91c00d57f753c799276ddb161
  Author: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
  Date:   Tue Jun 16 11:47:12 2015 -0700

      fm10k: Don't assume page fragments are page size

      This change pulls out the optimization that assumed that all fragments
      would be limited to page size.  That hasn't been the case for some time 
now
      and to assume this is incorrect as the TCP allocator can provide up to a
      32K page fragment.

      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Acked-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bdc7f5902d22e7297b8f0d7a8d6ed8429cdba636
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:56 2015 -0700

      fm10k: update netdev perm_addr during reinit, instead of at up

      Update the netdev permanent address during fm10k_reinit enables the user
      to immediately see the new MAC address on the VF even if the device
      isn't up. The previous code required that the device by opened before
      changes would appear.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 106c07a49506359f7663770ef33f4997d68316c1
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:55 2015 -0700

      fm10k: update fm10k_slot_warn to use pcie_get_minimum link

      This is useful in cases where we connect to a slot at Gen3, but the slot
      is behind a bus which only connected at Gen2. This generally only
      happens when a PCIe switch is in the sequence of devices, and can be
      very confusing when you see slow performance with no obvious cause.

      I am aware this patch has a few lines that break 80 characters, but
      there does not seem to be a readable way to format them to less than 80
      characters. Suggestions welcome.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 56f0569e3ab741d3c5cebc4b4c882b471df53738
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:53 2015 -0700

      fm10k: only prevent removal of default VID rules

      This allows us to correctly add a VLAN even if it matches our default
      VID. However, we don't want to remove the VID rules once that VLAN is
      deleted. Correctly remove the stack layers information of the VLAN, but
      then return to forwarding that VID as untagged frames. If we deleted the
      VID rules here, we would begin dropping traffic due to VLAN membership
      violations.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e40296628bec7400f529927eef4bc87cb425a22a
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:51 2015 -0700

      fm10k: disable service task during suspend

      The service task reads some registers as part of its normal routine,
      even while the interface is down. Normally this is ok. However, during
      suspend we have disabled the PCI device. Due to this, registers will
      read in the same way as a surprise-remove event. Disable the service
      task while we suspend, and re-enable it after we resume. If we don't do
      this, the device could be UP when you suspend and come back from resume
      as closed (since fm10k closes the device when it gets a surprise
      remove).

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8ac34f10a5ea4c7b6f57dfd52b0693a2b67d9ac4
  Author: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
  Date:   Thu Jul 30 15:19:28 2015 -0700

      ixgbe: Limit lowest interrupt rate for adaptive interrupt moderation to 
12K

      This patch updates the lowest limit for adaptive interrupt interrupt
      moderation to roughly 12K interrupts per second.

      The way I came about reaching 12K as the desired interrupt rate is by
      testing with UDP flows.  Specifically I had a simple test that ran a
      netperf UDP_STREAM test at varying sizes.  What I found was as the packet
      sizes increased the performance fell steadily behind until we were only
      able to receive at ~4Gb/s with a message size of 65507.  A bit of digging
      found that we were dropping packets for the socket in the network stack,
      and looking at things further what I found was I could solve it by 
increasing
      the interrupt rate, or increasing the rmem_default/rmem_max.  What I 
found was
      that when the interrupt coalescing resulted in more data being processed
      per interrupt than could be stored in the socket buffer we started losing
      packets and the performance dropped.  So I reached 12K based on the
      following math.

      rmem_default = 212992
      skb->truesize = 2994
      212992 / 2994 = 71.14 packets to fill the buffer

      packet rate at 1514 packet size is 812744pps
      71.14 / 812744 = 87.9us to fill socket buffer

      From there it was just a matter of choosing the interrupt rate and
      providing a bit of wiggle room which is why I decided to go with 12K
      interrupts per second as that uses a value of 84us.

      The data below is based on VM to VM over a direct assigned ixgbe 
interface.
      The test run was:
        netperf -H <ip> -t UDP_STREAM"

      Socket  Message  Elapsed      Messages                   CPU      Service
      Size    Size     Time         Okay Errors   Throughput   Util     Demand
      bytes   bytes    secs            #      #   10^6bits/sec % SS     us/KB
      Before:
      212992   65507   60.00     1100662      0     9613.4     10.89    0.557
      212992           60.00      473474            4135.4     11.27    0.576

      After:
      212992   65507   60.00     1100413      0     9611.2     10.73    0.549
      212992           60.00      974132            8508.3     11.69    0.598

      Using bare metal the data is similar but not as dramatic as the throughput
      increases from about 8.5Gb/s to 9.5Gb/s.

      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6b010e9b1f0a406d1d35202a694fa724a559bf77
  Author: Alex Williamson <alex.williamson@xxxxxxxxxx>
  Date:   Wed Jul 29 14:38:21 2015 -0600

      ixgbe: Teardown SR-IOV before unregister_netdev()

      When the .remove() callback for a PF is called, SR-IOV support for the
      device is disabled, which requires unbinding and removing the VFs.
      The VFs may be in-use either by the host kernel or userspace, such as
      assigned to a VM through vfio-pci.  In this latter case, the VFs may
      be removed either by shutting down the VM or hot-unplugging the
      devices from the VM.  Unfortunately in the case of a Windows 2012 R2
      guest, hot-unplug is broken due to the ordering of the PF driver
      teardown.  Disabling SR-IOV prior to unregister_netdev() avoids this
      issue.

      Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx>
      Acked-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4ccc650cc845476885f73660b2e6335852f0f75c
  Author: Don Skidmore <donald.c.skidmore@xxxxxxxxx>
  Date:   Wed Sep 2 13:47:54 2015 -0700

      ixgbe: fix issue with SFP events with new X550 devices

      Add checks for systems that don't have SFP's to avoid incorrectly
      acting on interrupts that are falsely interpreted as SFP events.
      This also includes a modified check generating the EICR mask to be
      more forward-looking.

      Signed-off-by: Don Skidmore <donald.c.skidmore@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 20471ed4d403a5f4de6aa0c10cd1e446f7f2b3c7
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:27 2015 +0200

      dccp: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@
      expression x;
      @@

      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);

      @@
      expression x;
      @@

      -if (x != NULL) {
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
        x = NULL;
      -}
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit adf78edac09f9640cd9676571586c4be46fb527c
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:18 2015 +0200

      net: core: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL) {
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
        x = NULL;
      -}
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 58d29e3ce903dcafacee9e355225d64922325cf0
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:03 2015 +0200

      atm: he: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 982b527004826b40de1e821b123c70f05b41496c
  Author: Jesse Gross <jesse@xxxxxxxxxx>
  Date:   Fri Sep 11 18:38:28 2015 -0700

      openvswitch: Fix mask generation for nested attributes.

      Masks were added to OVS flows in a way that was backwards compatible
      with userspace programs that did not generate masks. As a result, it is
      possible that we may receive flows that do not have a mask and we need
      to synthesize one.

      Generating a mask requires iterating over attributes and descending into
      nested attributes. For each level we need to know the size to generate the
      correct mask. We do this with a linked table of attribute types.

      Although the logic to handle these nested attributes was there in concept,
      there are a number of bugs in practice. Examples include incomplete links
      between tables, variable length attributes being treated as nested and
      missing sanity checks.

      Signed-off-by: Jesse Gross <jesse@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 865ca084fdc68cd9b658da4b098008278da8fed3
  Author: Luck, Tony <tony.luck@xxxxxxxxx>
  Date:   Tue Sep 15 13:50:18 2015 -0700

      ia64: Enable userfaultfd and membarrier system calls

      Signed-off-by: Tony Luck <tony.luck@xxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 9fd60088ffed7573c2d409ddc63a2150a5edd5d8
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:26 2015 +0300

      iser-target: Skip data copy if all the command data comes as immediate

      Given that supporting zcopy immediate data for all IOs requires
      iser driver to use its own buffer allocations, we settle with
      avoiding data copy for IOs with data length of up to 8K (which
      is more latency sensitive anyway).

      This trims IO write latency by up to 3us and increase IOPs
      by up to 40% by saving CPU time doing sg_copy_from_buffer
      (8K IO size is the obvious winner here).

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit 4366b19ca5eb15e63d6640565ade135cf06be91a
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:25 2015 +0300

      iser-target: Change the recv buffers posting logic

      iser target batches post recv operations to avoid
      the overhead of acquiring the recv queue lock and
      posting a HW doorbell for each command.

      We change it to be per command in order to support
      zcopy immediate data for IOs that fits in the 8K
      transfer boundary (in the next patch).

      (Fix minor patch fuzz due to ib_mr removal - nab)

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit bd3792205aaeb79b994338af2e5499fa503d79c7
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:24 2015 +0300

      iser-target: Fix pending connections handling in target stack shutdown 
sequnce

      Instead of handing a connection to the iscsi stack
      for processing right after accepting (rdma_accept) we only hand
      the connection to the iscsi core after we reached to a connected
      state (ESTABLISHED CM event). This will prevent two error scenrios:

      1. race between rdma connection teardown and iscsi login sequence
         reported by Nic in: (ce9a9fc20a78a "iser-target: Fix REJECT CM event
         use-after-free OOPs")

      2. target stack shutdown sequence race with constant login attempts by
         multiple initiators.

      We address this by maintaining two queues at the isert_np level:
      - accepted: connections that were accepted but have not reached
        connected state (might get rejected, unreachable or error).
      - pending: connections in connected state, but have yet to handed
        to the iscsi core for login processing. iser connections are promoted
        to the pending queue only from the accepted queue.

      This way the iscsi core now will only handle functional iser connections
      and once we shutdown the target stack, we look for any stales that
      got left behind so we can safely release them.

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.10+
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit ed8cb0a4378c0e7035db047987fe0e7309020ab5
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:23 2015 +0300

      iser-target: Remove np_ prefix from isert_np members

      These are always referenced from np-> so no need
      for the prefix.

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit f27dfa1f0eb91494577a395e6b8a9aac2832e9cf
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:22 2015 +0300

      iser-target: Remove unused variables

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit 3e03c4b01da3e6a5f3081eb0aa252490fe83e352
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:21 2015 +0300

      iser-target: Put the reference on commands waiting for unsol data

      The iscsi target core teardown sequence calls wait_conn for
      all active commands to finish gracefully by:
      - move the queue-pair to error state
      - drain all the completions
      - wait for the core to finish handling all session commands

      However, when tearing down a session while there are sequenced
      commands that are still waiting for unsolicited data outs, we can
      block forever as these are missing an extra reference put.

      We basically need the equivalent of iscsit_free_queue_reqs_for_conn()
      which is called after wait_conn has returned. Address this by an
      explicit walk on conn_cmd_list and put the extra reference.

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.10+
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit a4c15cd957cbd728f685645de7a150df5912591a
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:20 2015 +0300

      iser-target: remove command with state ISTATE_REMOVE

      As documented in iscsit_sequence_cmd:
      /*
       * Existing callers for iscsit_sequence_cmd() will silently
       * ignore commands with CMDSN_LOWER_THAN_EXP, so force this
       * return for CMDSN_MAXCMDSN_OVERRUN as well..
       */

      We need to silently finish a command when it's in ISTATE_REMOVE.
      This fixes an teardown hang we were seeing where a mis-behaved
      initiator (triggered by allocation error injections) sent us a
      cmdsn which was lower than expected.

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.10+
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit d5566fd72ec1924958fcfd48b65c022c8f7eae64
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Fri Sep 11 16:48:48 2015 -0400

      rtnetlink: RTEXT_FILTER_SKIP_STATS support to avoid dumping inet/inet6 
stats

      Many commonly used functions like getifaddrs() invoke RTM_GETLINK
      to dump the interface information, and do not need the
      the AF_INET6 statististics that are always returned by default
      from rtnl_fill_ifinfo().

      Computing the statistics can be an expensive operation that impacts
      scaling, so it is desirable to avoid this if the information is
      not needed.

      This patch adds a the RTEXT_FILTER_SKIP_STATS extended info flag that
      can be passed with netlink_request() to avoid statistics computation
      for the ifinfo path.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 892aa01df2ad67237f213c8f9d9b491e908aa910
  Author: Sjoerd Simons <sjoerd.simons@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 22:25:48 2015 +0200

      net: stmmac: Use msleep rather then udelay for reset delay

      The reset delays used for stmmac are in the order of 10ms to 1 second,
      which is far too long for udelay usage, so switch to using msleep.

      Practically this fixes the PHY not being reliably detected in some cases
      as udelay wouldn't actually delay for long enough to let the phy
      reliably be reset.

      Signed-off-by: Sjoerd Simons <sjoerd.simons@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d64f69b0373a7d0bcec8b5da7712977518a8f42b
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 14:44:29 2015 -0700

      rtnetlink: catch -EOPNOTSUPP errors from ndo_bridge_getlink

      problem reported:
        kernel 4.1.3
        ------------
        # bridge vlan
        port    vlan ids
        eth0     1 PVID Egress Untagged
                90
                91
                92
                93
                94
                95
                96
                97
                98
                99
                100

        vmbr0    1 PVID Egress Untagged
                94

        kernel 4.2
        -----------
        # bridge vlan
        port    vlan ids

      ndo_bridge_getlink can return -EOPNOTSUPP when an interfaces
      ndo_bridge_getlink op is set to switchdev_port_bridge_getlink
      and CONFIG_SWITCHDEV is not defined. This today can happen to
      bond, rocker and team devices. This patch adds -EOPNOTSUPP
      checks after calls to ndo_bridge_getlink.

      Fixes: 85fdb956726ff2a ("switchdev: cut over to new 
switchdev_port_bridge_getlink")
      Reported-by: Alexandre DERUMIER <aderumier@xxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit daf158d0d544cec80b7b30deff8cfc59a6e17610
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Tue Sep 15 22:41:21 2015 +0200

      net: mvneta: fix DMA buffer unmapping in mvneta_rx()

      This patch fixes a regression introduced by the commit a84e32894191
      ("net: mvneta: fix refilling for Rx DMA buffers"). Due to this commit
      the newly allocated Rx buffers are DMA-unmapped in place of those passed
      to the networking stack. Obviously, this causes data corruptions.

      This patch fixes the issue by ensuring that the right Rx buffers are
      DMA-unmapped.

      Reported-by: Oren Laskin <oren@xxxxxxxxxx>
      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Fixes: a84e32894191 ("net: mvneta: fix refilling for Rx DMA buffers")
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.8+
      Tested-by: Oren Laskin <oren@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 244b7f4324895e7c796cc94e8a8f70288ed20bdc
  Merge: e8684c8 70da5b5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 14:53:46 2015 -0700

      Merge branch 'ip6tunnel_dst'

      Martin KaFai Lau says:

      ====================
      ipv6: Fix dst_entry refcnt bugs in ip6_tunnel

      v4:
      - Fix a compilation error in patch 5 when CONFIG_LOCKDEP is turned on and
        re-test it

      v3:
      - Merge a 'if else if' test in patch 4
      - Use rcu_dereference_protected in patch 5 to fix a sparse check when
        CONFIG_SPARSE_RCU_POINTER is enabled

      v2:
      - Add patch 4 and 5 to remove the spinlock

      v1:
      This patch series is to fix the dst refcnt bugs in ip6_tunnel.

      Patch 1 and 2 are the prep works.  Patch 3 is the fix.

      I can reproduce the bug by adding and removing the ip6gre tunnel
      while running a super_netperf TCP_CRR test.  I get the following
      trace by adding WARN_ON_ONCE(newrefcnt < 0) to dst_release():

      [  312.760432] ------------[ cut here ]------------
      [  312.774664] WARNING: CPU: 2 PID: 10263 at net/core/dst.c:288 
dst_release+0xf3/0x100()
      [  312.776041] Modules linked in: k10temp coretemp hwmon ip6_gre 
ip6_tunnel tunnel6 ipmi_devintf ipmi_ms\
      ghandler ip6table_filter ip6_tables xt_NFLOG nfnetlink_log nfnetlink 
xt_comment xt_statistic iptable_fil\
      ter ip_tables x_tables nfsv3 nfs_acl nfs fscache lockd grace mptctl 
netconsole autofs4 rpcsec_gss_krb5 a\
      uth_rpcgss oid_registry sunrpc ipv6 dm_mod loop iTCO_wdt 
iTCO_vendor_support serio_raw rtc_cmos pcspkr i\
      2c_i801 i2c_core lpc_ich mfd_core ehci_pci ehci_hcd e1000e mlx4_en ptp 
pps_core vxlan udp_tunnel ip6_udp\
      _tunnel mlx4_core sg button ext3 jbd mpt2sas raid_class
      [  312.785302] CPU: 2 PID: 10263 Comm: netperf Not tainted 
4.2.0-rc8-00046-g4db9b63-dirty #15
      [  312.791695] Hardware name: Quanta Freedom /Windmill-EP, BIOS F03_3B04 
09/12/2013
      [  312.792965]  ffffffff819dca2c ffff8811dfbdf6f8 ffffffff816537de 
ffff88123788fdb8
      [  312.794263]  0000000000000000 ffff8811dfbdf738 ffffffff81052646 
ffff8811dfbdf768
      [  312.795593]  ffff881203a98180 00000000ffffffff ffff88242927a000 
ffff88120a2532e0
      [  312.796946] Call Trace:
      [  312.797380]  [<ffffffff816537de>] dump_stack+0x45/0x57
      [  312.798288]  [<ffffffff81052646>] warn_slowpath_common+0x86/0xc0
      [  312.799699]  [<ffffffff8105273a>] warn_slowpath_null+0x1a/0x20
      [  312.800852]  [<ffffffff8159f9b3>] dst_release+0xf3/0x100
      [  312.801834]  [<ffffffffa03f1308>] ip6_tnl_dst_store+0x48/0x70 
[ip6_tunnel]
      [  312.803738]  [<ffffffffa03fd0b6>] ip6gre_xmit2+0x536/0x720 [ip6_gre]
      [  312.804774]  [<ffffffffa03fd40a>] ip6gre_tunnel_xmit+0x16a/0x410 
[ip6_gre]
      [  312.805986]  [<ffffffff8159934b>] dev_hard_start_xmit+0x23b/0x390
      [  312.808810]  [<ffffffff815a2f5f>] ? neigh_destroy+0xef/0x140
      [  312.809843]  [<ffffffff81599a6c>] __dev_queue_xmit+0x48c/0x4f0
      [  312.813931]  [<ffffffff81599ae3>] dev_queue_xmit_sk+0x13/0x20
      [  312.814993]  [<ffffffff815a0832>] neigh_direct_output+0x12/0x20
      [  312.817448]  [<ffffffffa021d633>] ip6_finish_output2+0x183/0x460 [ipv6]
      [  312.818762]  [<ffffffff81306fc5>] ? find_next_bit+0x15/0x20
      [  312.819671]  [<ffffffffa021fd79>] ip6_finish_output+0x89/0xe0 [ipv6]
      [  312.820720]  [<ffffffffa021fe14>] ip6_output+0x44/0xe0 [ipv6]
      [  312.821762]  [<ffffffff815c8809>] ? nf_hook_slow+0x69/0xc0
      [  312.823123]  [<ffffffffa021d232>] ip6_xmit+0x242/0x4c0 [ipv6]
      [  312.824073]  [<ffffffffa021c9f0>] ? ac6_proc_exit+0x20/0x20 [ipv6]
      [  312.825116]  [<ffffffffa024c751>] inet6_csk_xmit+0x61/0xa0 [ipv6]
      [  312.826127]  [<ffffffff815eb590>] tcp_transmit_skb+0x4f0/0x9b0
      [  312.827441]  [<ffffffff815ed267>] tcp_connect+0x637/0x7a0
      [  312.828327]  [<ffffffffa0245906>] tcp_v6_connect+0x2d6/0x550 [ipv6]
      [  312.829581]  [<ffffffff81606f05>] __inet_stream_connect+0x95/0x2f0
      [  312.830600]  [<ffffffff810ae13a>] ? hrtimer_try_to_cancel+0x1a/0xf0
      [  312.833456]  [<ffffffff812fba19>] ? timerqueue_add+0x59/0xb0
      [  312.834407]  [<ffffffff81607198>] inet_stream_connect+0x38/0x50
      [  312.835886]  [<ffffffff8157cb17>] SYSC_connect+0xb7/0xf0
      [  312.840035]  [<ffffffff810af6d3>] ? do_setitimer+0x1b3/0x200
      [  312.840983]  [<ffffffff810af75a>] ? alarm_setitimer+0x3a/0x70
      [  312.841941]  [<ffffffff8157d7ae>] SyS_connect+0xe/0x10
      [  312.842818]  [<ffffffff81659297>] entry_SYSCALL_64_fastpath+0x12/0x6a
      [  312.844206] ---[ end trace 43f3ecd86c3b1313 ]---
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70da5b5c532f0ec8aa76b4f46158da5f010f34b3
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:09 2015 -0700

      ipv6: Replace spinlock with seqlock and rcu in ip6_tunnel

      This patch uses a seqlock to ensure consistency between idst->dst and
      idst->cookie.  It also makes dst freeing from fib tree to undergo a
      rcu grace period.

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e3d5be7368107f0c27a1f8126d79b01a47e9567
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:08 2015 -0700

      ipv6: Avoid double dst_free

      It is a prep work to get dst freeing from fib tree undergo
      a rcu grace period.

      The following is a common paradigm:
      if (ip6_del_rt(rt))
        dst_free(rt)

      which means, if rt cannot be deleted from the fib tree, dst_free(rt) now.
      1. We don't know the ip6_del_rt(rt) failure is because it
         was not managed by fib tree (e.g. DST_NOCACHE) or it had already been
         removed from the fib tree.
      2. If rt had been managed by the fib tree, ip6_del_rt(rt) failure means
         dst_free(rt) has been called already.  A second
         dst_free(rt) is not always obviously safe.  The rt may have
         been destroyed already.
      3. If rt is a DST_NOCACHE, dst_free(rt) should not be called.
      4. It is a stopper to make dst freeing from fib tree undergo a
         rcu grace period.

      This patch is to use a DST_NOCACHE flag to indicate a rt is
      not managed by the fib tree.

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cdf3464e6c6bd764277cbbe992cd12da735b92fb
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:07 2015 -0700

      ipv6: Fix dst_entry refcnt bugs in ip6_tunnel

      Problems in the current dst_entry cache in the ip6_tunnel:

      1. ip6_tnl_dst_set is racy.  There is no lock to protect it:
         - One major problem is that the dst refcnt gets messed up. F.e.
           the same dst_cache can be released multiple times and then
           triggering the infamous dst refcnt < 0 warning message.
         - Another issue is the inconsistency between dst_cache and
           dst_cookie.

         It can be reproduced by adding and removing the ip6gre tunnel
         while running a super_netperf TCP_CRR test.

      2. ip6_tnl_dst_get does not take the dst refcnt before returning
         the dst.

      This patch:
      1. Create a percpu dst_entry cache in ip6_tnl
      2. Use a spinlock to protect the dst_cache operations
      3. ip6_tnl_dst_get always takes the dst refcnt before returning

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f230d1e891ba1da5953460516960894154f265db
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:06 2015 -0700

      ipv6: Rename the dst_cache helper functions in ip6_tunnel

      It is a prep work to fix the dst_entry refcnt bugs in
      ip6_tunnel.

      This patch rename:
      1. ip6_tnl_dst_check() to ip6_tnl_dst_get() to better
         reflect that it will take a dst refcnt in the next patch.
      2. ip6_tnl_dst_store() to ip6_tnl_dst_set() to have a more
         conventional name matching with ip6_tnl_dst_get().

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a3c119d392d7d7c68865fe76f5732ca9b8164d68
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:05 2015 -0700

      ipv6: Refactor common ip6gre_tunnel_init codes

      It is a prep work to fix the dst_entry refcnt bugs in ip6_tunnel.

      This patch refactors some common init codes used by both
      ip6gre_tunnel_init and ip6gre_tap_init.

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 09a77a885233e2a20dac2635a79c83ccf50a26a1
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 16:03:36 2015 +0100

      modsign: Fix GPL/OpenSSL licence incompatibility

      The GPL does not permit us to link against the OpenSSL library. Use
      LGPL for sign-file and extract-file instead.

      [ The whole "openssl isn't compatible with gpl" is really just
        fear-mongering, but there's no reason not to make modsign LGPL, so
        nobody cares.  - Linus ]

      Reported-by: Julian Andres Klode <jak@xxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Reviewed-by: Julian Andres Klode <jak@xxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit ad1e7b97b3adb91d46f3adb70a7867a50fc274cf
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:25:03 2015 -0700

      cdc: Fix build warning.

         In file included from drivers/usb/gadget/function/u_serial.h:16:0,
                          from drivers/usb/gadget/function/f_acm.c:23:
      >> include/linux/usb/cdc.h:47:5: warning: 'struct usb_interface' declared 
inside parameter list
              int buflen);
              ^
      >> include/linux/usb/cdc.h:47:5: warning: its scope is only this 
definition or declaration, which is probably not what you want

      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8b711d6db5c78a6d1969fb0fccb93daa7df53762
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Wed Sep 9 17:40:56 2015 -0700

      mv643xx_eth: Neaten mv643xx_eth_program_multicast_filter

      The code around the allocation and loops are a bit obfuscated.

      Neaten it by using:

      o kcalloc with decimal count and sizeof(u32)
      o Decimal loop indexing and i++ not i += 4
      o A promiscuous block using a similar style
        to the multicast block
      o Remove unnecessary variables

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 29feb66a9afbe69d3aeb2550f2e0ea20d4782ead
  Merge: 7b6ee48 e63c7a0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:47:47 2015 -0700

      Merge branch 'xgene-2nd-10gbe-port'

      Iyappan Subramanian says:

      ====================
      driver: net: xgene: Enable 2nd 10GbE port on APM X-Gene SoC

      This patch adds support for 2nd 10GbE on APM X-Gene SoC
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e63c7a0979f28bb13e06b981765dd514c01c075b
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Tue Sep 8 15:50:27 2015 -0700

      dtb: xgene: Add 2nd 10GbE node

      Adding the second 10GbE dt node for APM X-Gene SoC device tree

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 149e9ab495a4ba50fc6b52cb9b2710566adcf56e
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Tue Sep 8 15:50:26 2015 -0700

      driver: net: xgene: Add support for 2nd 10GbE port

      Adding support for the second 10GbE port on APM X-Gene SoC

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b6ee48d3f4d432bfa6c9c9662fbdbd97681240e
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:42 2015 +0200

      cdc-phonet: use common parser

      This moves cdc-phonet to the common parser for CDC users
      to reduce code duplication.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8492ed45aa5dbb5c4f0786f90ff12d8511615505
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:41 2015 +0200

      qmi-wwan: use common parser

      This moves qmi-wwan to the common parser for CDC user
      to reduce code duplication.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 823bd3433424aa959499e6fd8f2da842430a8d42
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:40 2015 +0200

      cdc-ether: switch to common CDC parser

      This patch uses the common parser to parse extra CDC
      headers in order to reduce code duplication.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77b0a099674ac1c43b631445d8d50453e4805b29
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:39 2015 +0200

      cdc-ncm: use common parser

      This moves cdc-ncm to the common parser for CDC user
      to reduce code duplication.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c40a2c8817e42273a4627c48c884b805475a733f
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:38 2015 +0200

      CDC: common parser for extra headers

      CDC drivers all implement their own parser for the extra headers.
      This patch fixes the code duplication introducing a single common
      parser in usbnet.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d147ccbfc35d7d45c87fb0c767e6e40c316aa32
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 7 15:16:44 2015 +0530

      drivers: net: cpsw: Add support to drive gpios for ethernet to be 
functional

      In DRA72x EVM, by default slave 1 is connected to the onboard
      phy, but slave 2 pins are also muxed with video input module
      which is controlled by pcf857x gpio and currently to select slave
      0 to connect to phy gpio hogging is used, but with
      omap2plus_defconfig the pcf857x gpio is built as module. So when
      using NFS on DRA72x EVM, board doesn't boot as gpio hogging do
      not set proper gpio state to connect slave 0 to phy as it is
      built as module and you do not see any errors for not setting
      gpio and just mentions dhcp reply not got.

      To solve this issue, introducing "mode-gpios" in DT when gpio
      based muxing is required. This will throw a warning when gpio
      get fails and returns probe defer. When gpio-pcf857x module is
      installed, cpsw probes again and ethernet becomes functional.
      Verified this on DRA72x with pcf as module and ramdisk.

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e75f3c39d33360075d6543529d40b5299f92622
  Merge: c36ba66 2b8157b
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:04:22 2015 -0700

      Merge branch 'dsa-mv88e6xxx-ATU'

      Vivien Didelot says:

      ====================
      net: dsa: mv88e6xxx: improve ATU move operations

      This patchset completes the set of available Address Translation Unit
      operations.

      These Marvell switches have 4 operations to flush or (re)move, all or
      only non-static MAC addresses, from the entire set of databases or from
      just a particular one.

      The first 3 patches introduce a generic _mv88e6xxx_atu_flush_move
      function. The 4 remaining patches update a few FID operations in the
      driver on setup, when a port join or leave a VLAN, or change state.

      This is a step forward improving the hardware bridging support in DSA
      and 88E6352-compatible switches.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2b8157b1c20bdac0e0b856b2cb1499c7f18f2b07
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:16 2015 -0400

      net: dsa: mv88e6xxx: remove all MACs when disabling a port

      When we're moving a port from Learning or Forwarding state to Disabled
      or Blocking or Listening state, remove all non-static MAC addresses
      mapped to this port in the entire set of databases, not only one.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f4d55d2869d86bd5dc59ff28109f7fefedc325d
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:15 2015 -0400

      net: dsa: mv88e6xxx: remove addresses when a port leaves a VLAN

      Add a new _mv88e6xxx_atu_move function to prepare the ATU data register
      for the move operation. The ports vector will contain the source port
      and destination port of the Move operation. If the destination port is
      0xF, the MAC addresses mapped to the source port are removed for the
      address database(s).

      Then add a _mv88e6xxx_atu_remove wrapper to remove the MAC addresses
      from a VLAN database that are mapped to a given port, when it leaves it.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7c400018c003d221a2db1ce46a5b88d7a37add1c
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:14 2015 -0400

      net: dsa: mv88e6xxx: flush all addresses when adding a VLAN

      When choosing an address database for a new VLAN, flush every entries,
      not only the non-static ones.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c161d0a5edf35dfbb18e859825355791dd6fb2cc
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:13 2015 -0400

      net: dsa: mv88e6xxx: flush ATU on initial setup

      Purge all MAC addresses from the entire set of address databases when
      the driver initializes the device.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7fb5e755153d7b40dd321f7c766dbd4e76c66711
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:12 2015 -0400

      net: dsa: mv88e6xxx: rework ATU Flush operation

      These Marvell switches have 4 operations to flush or (re)move, all or
      only non-static MAC addresses, from the entire set of databases or from
      just a particular one.

      The value of the EntryState bits will determine if the operation is
      either a Flush (0x0) or a Move (0xF).

      When moving entries from one port to another, entries will be removed if
      the destination port is 0xF.

      This patch renames these operations for consistency, add a new generic
      _mv88e6xxx_atu_flush_move function, and change _mv88e6xxx_flush_fid to
      use it.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 37705b731500b0ce9fb4ead21a7cdfc241a401fe
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:11 2015 -0400

      net: dsa: mv88e6xxx: extract ATU data write access

      Other ATU commands need to write the ATU data register. To ease the
      introduction of such commands, extract the ATU data write access from
      _mv88e6xxx_atu_load to its own function.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70cc99d10ca17b8688575d2579e5a2f6c4fa6f29
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:10 2015 -0400

      net: dsa: mv88e6xxx: extract FID write from ATU command

      Not every ATU commands apply to an FID, thus remove the FID writing from
      mv88e6xxx_atu_cmd and write it explicitly where needed, in order to ease
      introduction of such commands.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c36ba6603a1154ac617d023bbcc062a12afb258b
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 13:58:36 2015 -0700

      net: Allow user to get table id from route lookup

      rt_fill_info which is called for 'route get' requests hardcodes the
      table id as RT_TABLE_MAIN which is not correct when multiple tables
      are used. Use the newly added table id in the rtable to send back
      the correct table similar to what is done for IPv6.

      To maintain current ABI a new request flag, RTM_F_LOOKUP_TABLE, is
      added to indicate the actual table is wanted versus the hardcoded
      response.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b7503e0cdb5dbec5d201aa69d8888c14679b5ae8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 13:58:35 2015 -0700

      net: Add FIB table id to rtable

      Add the FIB table id to rtable to make the information available for
      IPv4 as it is for IPv6.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d08c4f355403840fad98d9918db51a7113f38ee8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 13:58:34 2015 -0700

      net: Refactor rtable initialization

      All callers to rt_dst_alloc have nearly the same initialization following
      a successful allocation. Consolidate it into rt_dst_alloc.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 237865f195f6b10e4724ce49eeb3972641da882a
  Author: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
  Date:   Tue Sep 15 13:18:04 2015 -0500

      PCI: Revert "PCI: Call pci_read_bridge_bases() from core instead of arch 
code"

      Revert dff22d2054b5 ("PCI: Call pci_read_bridge_bases() from core instead
      of arch code").

      Reading PCI bridge windows is not arch-specific in itself, but there is 
PCI
      core code that doesn't work correctly if we read them too early.  For
      example, Hannes found this case on an ARM Freescale i.mx6 board:

        pci_bus 0000:00: root bus resource [mem 0x01000000-0x01efffff]
        pci 0000:00:00.0: PCI bridge to [bus 01-ff]
        pci 0000:00:00.0: BAR 8: no space for [mem size 0x01000000] (mem window)
        pci 0000:01:00.0: BAR 2: failed to assign [mem size 0x00200000]
        pci 0000:01:00.0: BAR 1: failed to assign [mem size 0x00004000]
        pci 0000:01:00.0: BAR 0: failed to assign [mem size 0x00000100]

      The 00:00.0 mem window needs to be at least 3MB: the 01:00.0 device needs
      0x204100 of space, and mem windows are megabyte-aligned.

      Bus sizing can increase a bridge window size, but never *decrease* it (see
      d65245c3297a ("PCI: don't shrink bridge resources")).  Prior to
      dff22d2054b5, ARM didn't read bridge windows at all, so the "original 
size"
      was zero, and we assigned a 3MB window.

      After dff22d2054b5, we read the bridge windows before sizing the bus.  The
      firmware programmed a 16MB window (size 0x01000000) in 00:00.0, and since
      we never decrease the size, we kept 16MB even though we only needed 3MB.
      But 16MB doesn't fit in the host bridge aperture, so we failed to assign
      space for the window and the downstream devices.

      I think this is a defect in the PCI core: we shouldn't rely on the 
firmware
      to assign sensible windows.

      Ray reported a similar problem, also on ARM, with Broadcom iProc.

      Issues like this are too hard to fix right now, so revert dff22d2054b5.

      Reported-by: Hannes <oe5hpm@xxxxxxxxx>
      Reported-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/CAAa04yFQEUJm7Jj1qMT57-LG7ZGtnhNDBe=PpSRa70Mj+XhW-A@xxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/55F75BB8.4070405@xxxxxxxxxxxx
      Signed-off-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Acked-by: Yinghai Lu <yinghai@xxxxxxxxxx>
      Acked-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>

  commit 6584d84c3e504c76ad291cc2e381bbeed59798ab
  Author: Huang Shijie <shijie.huang@xxxxxxx>
  Date:   Tue Sep 1 10:35:50 2015 +0800

      genirq: Update the comment for generic_handle_irq_desc

      __do_IRQ() was removed by commit 1c77ff2 "genirq: Remove __do_IRQ",
      but the comment referring to __do_IRQ() was left.

      Update the comment for generic_handle_irq_desc().

      Signed-off-by: Huang Shijie <shijie.huang@xxxxxxx>
      Cc: jiang.liu@xxxxxxxxxxxxxxx
      Cc: peterz@xxxxxxxxxxxxx
      Cc: rafael.j.wysocki@xxxxxxxxx
      Cc: jason@xxxxxxxxxxxxxx
      Cc: marc.zyngier@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441074950-3893-1-git-send-email-shijie.huang@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 3829c664b1eec243f2a355829efa40f0f414de8d
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:47:24 2015 +0200

      genirq: Remove stale comment

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 4cd7863ecb90010533c178fba6ecc84d5529b402
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Sep 8 19:00:36 2015 +0200

      irqchip/renesas-irqc: Propagate wake-up settings to parent

      The renesas-irqc interrupt controller is cascaded to the GIC, but its
      driver doesn't propagate wake-up settings to the parent interrupt
      controller.

      Since commit aec89ef72ba6c944 ("irqchip/gic: Enable SKIP_SET_WAKE and
      MASK_ON_SUSPEND"), the GIC driver masks interrupts during suspend, and
      wake-up through gpio-keys now fails on r8a73a4/ape6evm.

      Fix this by propagating wake-up settings to the parent interrupt
      controller. There's no need to handle irq_set_irq_wake() failures, as
      the renesas-irqc interrupt controller is always cascaded to a GIC, and
      the GIC driver always sets SKIP_SET_WAKE since the aforementioned
      commit.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Sudeep Holla <sudeep.holla@xxxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441731636-17610-3-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f4e209cdc7a00f934007f40cf885471799073b0d
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Sep 8 19:00:35 2015 +0200

      irqchip/renesas-intc-irqpin: Propagate wake-up settings to parent

      The renesas-intc-irqpin interrupt controller is cascaded to the GIC, but
      its driver doesn't propagate wake-up settings to the parent interrupt
      controller.

      Since commit aec89ef72ba6c944 ("irqchip/gic: Enable SKIP_SET_WAKE and
      MASK_ON_SUSPEND"), the GIC driver masks interrupts during suspend, and
      wake-up through gpio-keys now fails on r8a7740/armadillo and
      sh73a0/kzm9g.

      Fix this by propagating wake-up settings to the parent interrupt
      controller. There's no need to handle irq_set_irq_wake() failures, as
      the renesas-intc-irqpin interrupt controller is always cascaded to a
      GIC, and the GIC driver always sets SKIP_SET_WAKE since the
      aforementioned commit.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Sudeep Holla <sudeep.holla@xxxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441731636-17610-2-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 769b5cf78e6c653c2f513649ee6c4e7a06723872
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Wed Sep 9 13:42:54 2015 +0200

      irqchip/renesas-intc-irqpin: Use a separate lockdep class

      The renesas-intc-irqpin interrupt controller is cascaded to the GIC.
      Hence when propagating wake-up settings to its parent interrupt
      controller, the following lockdep warning is printed:

          =============================================
          [ INFO: possible recursive locking detected ]
          4.2.0-armadillo-10725-g50fcd7643c034198 #781 Not tainted
          ---------------------------------------------
          s2ram/1179 is trying to acquire lock:
          (&irq_desc_lock_class){-.-...}, at: [<c005bb54>] 
__irq_get_desc_lock+0x78/0x94

          but task is already holding lock:
          (&irq_desc_lock_class){-.-...}, at: [<c005bb54>] 
__irq_get_desc_lock+0x78/0x94

          other info that might help us debug this:
          Possible unsafe locking scenario:

          CPU0
          ----
           lock(&irq_desc_lock_class);
           lock(&irq_desc_lock_class);

          *** DEADLOCK ***

          May be due to missing lock nesting notation

          7 locks held by s2ram/1179:
          #0:  (sb_writers#7){.+.+.+}, at: [<c00c9708>] 
__sb_start_write+0x64/0xb8
          #1:  (&of->mutex){+.+.+.}, at: [<c0125a00>] 
kernfs_fop_write+0x78/0x1a0
          #2:  (s_active#23){.+.+.+}, at: [<c0125a08>] 
kernfs_fop_write+0x80/0x1a0
          #3:  (autosleep_lock){+.+.+.}, at: [<c0058244>] 
pm_autosleep_lock+0x18/0x20
          #4:  (pm_mutex){+.+.+.}, at: [<c0057e50>] pm_suspend+0x54/0x248
          #5:  (&dev->mutex){......}, at: [<c0243a20>] 
__device_suspend+0xdc/0x240
          #6:  (&irq_desc_lock_class){-.-...}, at: [<c005bb54>] 
__irq_get_desc_lock+0x78/0x94

          stack backtrace:
          CPU: 0 PID: 1179 Comm: s2ram Not tainted 
4.2.0-armadillo-10725-g50fcd7643c034198

          Hardware name: Generic R8A7740 (Flattened Device Tree)
          [<c00129f4>] (dump_backtrace) from [<c0012bec>] (show_stack+0x18/0x1c)
          [<c0012bd4>] (show_stack) from [<c03f5d94>] (dump_stack+0x20/0x28)
          [<c03f5d74>] (dump_stack) from [<c00514d4>] 
(__lock_acquire+0x67c/0x1b88)
          [<c0050e58>] (__lock_acquire) from [<c0052df8>] 
(lock_acquire+0x9c/0xbc)
          [<c0052d5c>] (lock_acquire) from [<c03fb068>] 
(_raw_spin_lock_irqsave+0x44/0x58)
          [<c03fb024>] (_raw_spin_lock_irqsave) from [<c005bb54>] 
(__irq_get_desc_lock+0x78/0x94
          [<c005badc>] (__irq_get_desc_lock) from [<c005c3d8>] 
(irq_set_irq_wake+0x28/0x100)
          [<c005c3b0>] (irq_set_irq_wake) from [<c01e50d0>] 
(intc_irqpin_irq_set_wake+0x24/0x4c)
          [<c01e50ac>] (intc_irqpin_irq_set_wake) from [<c005c17c>] 
(set_irq_wake_real+0x3c/0x50
          [<c005c140>] (set_irq_wake_real) from [<c005c414>] 
(irq_set_irq_wake+0x64/0x100)
          [<c005c3b0>] (irq_set_irq_wake) from [<c02a19b4>] 
(gpio_keys_suspend+0x60/0xa0)
          [<c02a1954>] (gpio_keys_suspend) from [<c023b750>] 
(platform_pm_suspend+0x3c/0x5c)

      Avoid this false positive by using a separate lockdep class for INTC
      External IRQ Pin interrupts.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441798974-25716-3-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b1370658804510f6a1c0517a8ff1c9534d371edd
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Wed Sep 9 13:42:53 2015 +0200

      irqchip/renesas-irqc: Use a separate lockdep class

      The renesas-irqc interrupt controller is cascaded to the GIC. Hence when
      propagating wake-up settings to its parent interrupt controller, the
      following lockdep warning is printed:

          =============================================
          [ INFO: possible recursive locking detected ]
          4.2.0-ape6evm-10725-g50fcd7643c034198 #280 Not tainted
          ---------------------------------------------
          s2ram/1072 is trying to acquire lock:
          (&irq_desc_lock_class){-.-...}, at: [<c008d3fc>] 
__irq_get_desc_lock+0x58/0x98

          but task is already holding lock:
          (&irq_desc_lock_class){-.-...}, at: [<c008d3fc>] 
__irq_get_desc_lock+0x58/0x98

          other info that might help us debug this:
          Possible unsafe locking scenario:

          CPU0
          ----
           lock(&irq_desc_lock_class);
           lock(&irq_desc_lock_class);

          *** DEADLOCK ***

          May be due to missing lock nesting notation

          6 locks held by s2ram/1072:
          #0:  (sb_writers#7){.+.+.+}, at: [<c012eb14>] 
__sb_start_write+0xa0/0xa8
          #1:  (&of->mutex){+.+.+.}, at: [<c019396c>] 
kernfs_fop_write+0x4c/0x1bc
          #2:  (s_active#24){.+.+.+}, at: [<c0193974>] 
kernfs_fop_write+0x54/0x1bc
          #3:  (pm_mutex){+.+.+.}, at: [<c008213c>] pm_suspend+0x10c/0x510
          #4:  (&dev->mutex){......}, at: [<c02af3c4>] 
__device_suspend+0xdc/0x2cc
          #5:  (&irq_desc_lock_class){-.-...}, at: [<c008d3fc>] 
__irq_get_desc_lock+0x58/0x98

          stack backtrace:
          CPU: 0 PID: 1072 Comm: s2ram Not tainted 
4.2.0-ape6evm-10725-g50fcd7643c034198 #280
          Hardware name: Generic R8A73A4 (Flattened Device Tree)
          [<c0018078>] (unwind_backtrace) from [<c00144f0>] 
(show_stack+0x10/0x14)
          [<c00144f0>] (show_stack) from [<c0451f14>] (dump_stack+0x88/0x98)
          [<c0451f14>] (dump_stack) from [<c007b29c>] 
(__lock_acquire+0x15cc/0x20e4)
          [<c007b29c>] (__lock_acquire) from [<c007c6e0>] 
(lock_acquire+0xac/0x12c)
          [<c007c6e0>] (lock_acquire) from [<c0457c00>] 
(_raw_spin_lock_irqsave+0x40/0x54)
          [<c0457c00>] (_raw_spin_lock_irqsave) from [<c008d3fc>] 
(__irq_get_desc_lock+0x58/0x98)
          [<c008d3fc>] (__irq_get_desc_lock) from [<c008ebbc>] 
(irq_set_irq_wake+0x20/0xf8)
          [<c008ebbc>] (irq_set_irq_wake) from [<c0260770>] 
(irqc_irq_set_wake+0x20/0x4c)
          [<c0260770>] (irqc_irq_set_wake) from [<c008ec28>] 
(irq_set_irq_wake+0x8c/0xf8)
          [<c008ec28>] (irq_set_irq_wake) from [<c02cb8c0>] 
(gpio_keys_suspend+0x74/0xc0)
          [<c02cb8c0>] (gpio_keys_suspend) from [<c02ae8cc>] 
(dpm_run_callback+0x54/0x124)

      Avoid this false positive by using a separate lockdep class for IRQC
      interrupts.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441798974-25716-2-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 157add60cb35913b8a848a3d7e6456b8ed134796
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Sun Sep 13 12:14:33 2015 +0100

      irqchip/GICv2m: Fix GICv2m build warning on 32 bits

      After GICv2m was enabled for 32-bit ARM kernel, a warning popped up:

      drivers/irqchip/irq-gic-v2m.c: In function gicv2m_compose_msi_msg:
      drivers/irqchip/irq-gic-v2m.c:100:2: warning: right shift count >= width
      of type [enabled by default]
        msg->address_hi = (u32) (addr >> 32);
        ^

      This patch fixes it by using proper macros for splitting up the value.

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Stuart Yoder <stuart.yoder@xxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442142873-20213-4-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 5a9a8915c8888b615521b17d70a4342187eae60b
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Sun Sep 13 12:14:32 2015 +0100

      irqchip/gic-v3-its: Add missing cache flushes

      When the ITS is configured for non-cacheable transactions, make sure
      that the allocated, zeroed memory is flushed to the Point of
      Coherency, allowing the ITS to observe the zeros instead of random
      garbage (or even get its own data overwritten by zeros being evicted
      from the cache...).

      Fixes: 241a386c7dbb "irqchip: gicv3-its: Use non-cacheable accesses when 
no shareability"
      Reported-and-tested-by: Stuart Yoder <stuart.yoder@xxxxxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442142873-20213-3-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 12e14066f4835f5ee1ca795f0309415b54c067a9
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Sun Sep 13 12:14:31 2015 +0100

      irqchip/GIC: Add workaround for aliased GIC400

      The GICv2 architecture mandates that the two 4kB GIC regions are
      contiguous, and on two separate physical pages (so that access to
      the second page can be trapped by a hypervisor). This doesn't work
      very well when PAGE_SIZE is 64kB.

      A relatively common hack^Wway to work around this is to alias each
      4kB region over its own 64kB page. Of course in this case, the base
      address you want to use is not really the begining of the region,
      but base + 60kB (so that you get a contiguous 8kB region over two
      distinct pages).

      Normally, this would be described in DT with a new property, but
      some HW is already out there, and the firmware makes sure that
      it will override whatever you put in the GIC node. Duh. And of course,
      said firmware source code is not available, despite being based
      on u-boot.

      The workaround is to detect the case where the CPU interface size
      is set to 128kB, and verify the aliasing by checking that the ID
      register for GIC400 (which is the only GIC wired this way so far)
      is the same at base and base + 0xF000. In this case, we update
      the GIC base address and let it roll.

      And if you feel slightly sick by looking at this, rest assured that
      I do too...

      Reported-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Stuart Yoder <stuart.yoder@xxxxxxxxxxxxx>
      Cc: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442142873-20213-2-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e4084a16bbe07957811c75dfb7c9bf25c5862ba0
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Sun Sep 13 13:37:03 2015 +0100

      platform-msi: Do not cache msi_desc in handler_data

      The current implementation of platform MSI caches the msi_desc
      pointer in irq_data::handler_data. This is a bit silly, as
      we also have irq_data::msi_desc, which is perfectly valid.

      Remove the useless assignment and simplify the whole flow.

      Reported-by: Ma Jun <majun258@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442147824-20971-1-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit dc2ec62f75fd9be78d07b3b453aeb0d201ead419
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:34:05 2015 +0200

      net/mlx4_en: Use access helper irq_data_get_affinity_mask()

      This is a preparatory patch for moving irq_data struct members. Search
      and replace was done with coccinelle

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Amir Vadai <amirv@xxxxxxxxxxxx>

  commit da92b4eb7e2ec9866f14a0c8f453788e8052dee7
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Jun 1 16:05:33 2015 +0800

      powerpc, irq: Use access helper irq_data_get_affinity_mask()

      Use access helper irq_data_get_affinity_mask() so we can move the
      affinity mask to irq_common_data.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1433145945-789-25-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 8f4216c7d28976f7ec1b2bcbfa0a9f787133c45e
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Tue Sep 15 14:41:57 2015 +0800

      kvm: fix zero length mmio searching

      Currently, if we had a zero length mmio eventfd assigned on
      KVM_MMIO_BUS. It will never be found by kvm_io_bus_cmp() since it
      always compares the kvm_io_range() with the length that guest
      wrote. This will cause e.g for vhost, kick will be trapped by qemu
      userspace instead of vhost. Fixing this by using zero length if an
      iodevice is zero length.

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit eefd6b06b17c5478e7c24bea6f64beaa2c431ca6
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Tue Sep 15 14:41:56 2015 +0800

      kvm: fix double free for fast mmio eventfd

      We register wildcard mmio eventfd on two buses, once for KVM_MMIO_BUS
      and once on KVM_FAST_MMIO_BUS but with a single iodev
      instance. This will lead to an issue: kvm_io_bus_destroy() knows
      nothing about the devices on two buses pointing to a single dev. Which
      will lead to double free[1] during exit. Fix this by allocating two
      instances of iodevs then registering one on KVM_MMIO_BUS and another
      on KVM_FAST_MMIO_BUS.

      CPU: 1 PID: 2894 Comm: qemu-system-x86 Not tainted 3.19.0-26-generic 
#28-Ubuntu
      Hardware name: LENOVO 2356BG6/2356BG6, BIOS G7ET96WW (2.56 ) 09/12/2013
      task: ffff88009ae0c4b0 ti: ffff88020e7f0000 task.ti: ffff88020e7f0000
      RIP: 0010:[<ffffffffc07e25d8>]  [<ffffffffc07e25d8>] 
ioeventfd_release+0x28/0x60 [kvm]
      RSP: 0018:ffff88020e7f3bc8  EFLAGS: 00010292
      RAX: dead000000200200 RBX: ffff8801ec19c900 RCX: 000000018200016d
      RDX: ffff8801ec19cf80 RSI: ffffea0008bf1d40 RDI: ffff8801ec19c900
      RBP: ffff88020e7f3bd8 R08: 000000002fc75a01 R09: 000000018200016d
      R10: ffffffffc07df6ae R11: ffff88022fc75a98 R12: ffff88021e7cc000
      R13: ffff88021e7cca48 R14: ffff88021e7cca50 R15: ffff8801ec19c880
      FS:  00007fc1ee3e6700(0000) GS:ffff88023e240000(0000) 
knlGS:0000000000000000
      CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      CR2: 00007f8f389d8000 CR3: 000000023dc13000 CR4: 00000000001427e0
      Stack:
      ffff88021e7cc000 0000000000000000 ffff88020e7f3be8 ffffffffc07e2622
      ffff88020e7f3c38 ffffffffc07df69a ffff880232524160 ffff88020e792d80
       0000000000000000 ffff880219b78c00 0000000000000008 ffff8802321686a8
      Call Trace:
      [<ffffffffc07e2622>] ioeventfd_destructor+0x12/0x20 [kvm]
      [<ffffffffc07df69a>] kvm_put_kvm+0xca/0x210 [kvm]
      [<ffffffffc07df818>] kvm_vcpu_release+0x18/0x20 [kvm]
      [<ffffffff811f69f7>] __fput+0xe7/0x250
      [<ffffffff811f6bae>] ____fput+0xe/0x10
      [<ffffffff81093f04>] task_work_run+0xd4/0xf0
      [<ffffffff81079358>] do_exit+0x368/0xa50
      [<ffffffff81082c8f>] ? recalc_sigpending+0x1f/0x60
      [<ffffffff81079ad5>] do_group_exit+0x45/0xb0
      [<ffffffff81085c71>] get_signal+0x291/0x750
      [<ffffffff810144d8>] do_signal+0x28/0xab0
      [<ffffffff810f3a3b>] ? do_futex+0xdb/0x5d0
      [<ffffffff810b7028>] ? __wake_up_locked_key+0x18/0x20
      [<ffffffff810f3fa6>] ? SyS_futex+0x76/0x170
      [<ffffffff81014fc9>] do_notify_resume+0x69/0xb0
      [<ffffffff817cb9af>] int_signal+0x12/0x17
      Code: 5d c3 90 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb 48 83 ec 08 48 8b 
7f 20 e8 06 d6 a5 c0 48 8b 43 08 48 8b 13 48 89 df 48 89 42 08 <48> 89 10 48 b8 
00 01 10 00 00
       RIP  [<ffffffffc07e25d8>] ioeventfd_release+0x28/0x60 [kvm]
       RSP <ffff88020e7f3bc8>

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 85da11ca587c8eb73993a1b503052391a73586f9
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Tue Sep 15 14:41:55 2015 +0800

      kvm: factor out core eventfd assign/deassign logic

      This patch factors out core eventfd assign/deassign logic and leaves
      the argument checking and bus index selection to callers.

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 8453fecbecae26edb3f278627376caab05d9a88d
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Tue Sep 15 14:41:54 2015 +0800

      kvm: don't try to register to KVM_FAST_MMIO_BUS for non mmio eventfd

      We only want zero length mmio eventfd to be registered on
      KVM_FAST_MMIO_BUS. So check this explicitly when arg->len is zero to
      make sure this.

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit d10bcd473301888f957ec4b6b12aa3621be78d59
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Sep 2 18:49:28 2015 +0100

      arm64: head.S: initialise mdcr_el2 in el2_setup

      When entering the kernel at EL2, we fail to initialise the MDCR_EL2
      register which controls debug access and PMU capabilities at EL1.

      This patch ensures that the register is initialised so that all traps
      are disabled and all the PMU counters are available to the host. When a
      guest is scheduled, KVM takes care to configure trapping appropriately.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 2314ee4d444e28d4670ff80c84df68c25887decb
  Author: Leo Yan <leo.yan@xxxxxxxxxx>
  Date:   Fri Aug 21 04:40:22 2015 +0100

      arm64: enable generic idle loop

      Enable generic idle loop for ARM64, so can support for hlt/nohlt
      command line options to override default idle loop behavior.

      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Leo Yan <leo.yan@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit c5e6bd2ed3e81df443e4ae11e95ed71ff77bf9e5
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:59:02 2015 +0300

      perf tests: Fix software clock events test setting maps

      The test titled "Test software clock events have valid period values"
      was setting cpu/thread maps directly.  Make it use the proper function
      perf_evlist__set_maps() especially now that it also propagates the maps.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-15-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2998272275fc31fc3d478ef9c95e7eaef67dafa3
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:59:01 2015 +0300

      perf tests: Fix task exit test setting maps

      The test titled "Test number of exit event of a simple workload" was
      setting cpu/thread maps directly.  Make it use the proper function
      perf_evlist__set_maps() especially now that it also propagates the maps.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-14-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8c0498b6891d7ca5c379c6283de7fc7fe8eebe5c
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:59:00 2015 +0300

      perf evlist: Fix create_syswide_maps() not propagating maps

      Fix it by making it call perf_evlist__set_maps() instead of setting the
      maps itself.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-13-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 44c42d71c659527c81bf169808959c9339116d85
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:59 2015 +0300

      perf evlist: Fix add() not propagating maps

      If evsels are added after maps are created, then they won't have any
      maps propagated to them.  Fix that.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-12-git-send-email-adrian.hunter@xxxxxxxxx
      [ Moved the moving of propagate_maps() to the patch before, so that this
        one does _just_ the one lile fix calling in add()]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit adc0c3e87b0e1baeccabe09b6dba738f17d0e91d
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:58 2015 +0300

      perf evlist: Factor out a function to propagate maps for a single evsel

      Subsequent fixes will need a function that just propagates maps for a
      single evsel so factor it out.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-11-git-send-email-adrian.hunter@xxxxxxxxx
      [ Moved them to before perf_evlist__add() to avoid having to move it in 
the next patch ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 74bfd2b25de354feb4484c553dce4fe8d9c3b60b
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:57 2015 +0300

      perf evlist: Make create_maps() use set_maps()

      Since there is a function to set maps, perf_evlist__create_maps() should
      use it.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-10-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 934e0f2053ce299893ca48a411bf7fdc8ac6254f
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:56 2015 +0300

      perf evlist: Make set_maps() more resilient

      Make perf_evlist__set_maps() more resilient by allowing for the
      possibility that one or another of the maps isn't being changed and
      therefore should not be "put".

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-9-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fce4d296b405b03fba033a55017348bf55b10db6
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:55 2015 +0300

      perf evsel: Add own_cpus member

      perf_evlist__propagate_maps() cannot easily tell if an evsel has its own
      cpu map.  To make that simpler, keep a copy of the PMU cpu map and
      adjust the propagation logic accordingly.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-8-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b278c364b35ae940b05f6a9edf8061fc886cd09e
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:54 2015 +0300

      perf evlist: Fix missing thread_map__put in propagate_maps()

      perf_evlist__propagate_maps() incorrectly assumes evsel->threads is NULL
      before reassigning it, but it won't be NULL when perf_evlist__set_maps()
      is used to set different (or NULL) maps.  Thus thread_map__put must be
      used, which works even if evsel->threads is NULL.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-7-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f114d6eff76d20b521d8716e969e71b1f56f82b5
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:53 2015 +0300

      perf evlist: Fix splice_list_tail() not setting evlist

      Commit d49e46950772 ("perf evsel: Add a backpointer to the evlist a
      evsel is in") updated perf_evlist__add() but not
      perf_evlist__splice_list_tail().

      This illustrates that it is better if perf_evlist__splice_list_tail()
      calls perf_evlist__add() instead of duplicating the logic, so do that.
      This will also simplify a subsequent fix for propagating maps.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-6-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ec9a77a7e3346a05b1287597982d0dd09dd1c3bd
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:52 2015 +0300

      perf evlist: Add has_user_cpus member

      Subsequent patches will need to call perf_evlist__propagate_maps without
      reference to a "target".  Add evlist->has_user_cpus to record whether
      the user has specified which cpus to target (and therefore whether that
      list of cpus should override the default settings for a selected event
      i.e. the cpu maps should be propagated)

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-5-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d5bc056e73841d4bc941474a342ef9b6a207ac84
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:51 2015 +0300

      perf evlist: Remove redundant validation from propagate_maps()

      The validation checks that the values that were just assigned, got
      assigned i.e. the error can't ever happen.  Subsequent patches will call
      this code in places where errors are not being returned.  Changing those
      code paths to return this non-existent error is counter-productive, so
      just remove it.

      That in turn results in perf_evlist__set_maps not needing to return an
      error, but callers aren't checking it either, so remove that too.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-4-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 725e06b2e2754fbff61521fa76fee51cee5bcb5f
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:50 2015 +0300

      perf evlist: Simplify set_maps() logic

      Don't need to check for NULL when "putting" evlist->maps and
      evlist->threads because the "put" functions already do that.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a69b09e2342a9c144b0291b9aeb849ab7d5843bf
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:49 2015 +0300

      perf evlist: Simplify propagate_maps() logic

      If evsel->cpus is to be reassigned then the current value must be "put",
      which works even if it is NULL.  Simplify the current logic by moving
      the "put" next to the assignment.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-2-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit bbbe6bf6037d77816c4a19aaf35f4cecf662b49a
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Sun Sep 6 07:13:35 2015 +0000

      perf tools: Introduce regs_query_register_offset() for x86

      regs_query_register_offset() is a helper function which converts
      register name like "%rax" to offset of a register in 'struct pt_regs',
      which is required by BPF prologue generator. Since the function is
      identical, try to reuse the code in arch/x86/kernel/ptrace.c.

      Comment inside dwarf-regs.c list the differences between this
      implementation and kernel code.

      get_arch_regstr() switches to regoffset_table and the old string table
      is dropped.

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441523623-152703-20-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 63ab024a5b6f295ca17a293ad81b7c728f49a89a
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Mon Sep 14 23:02:49 2015 -0300

      perf tools: regs_query_register_offset() infrastructure

      regs_query_register_offset() is a helper function which converts
      register name like "%rax" to offset of a register in 'struct pt_regs',
      which is required by BPF prologue generator.

      PERF_HAVE_ARCH_REGS_QUERY_REGISTER_OFFSET indicates an architecture
      supports converting name of a register to its offset in 'struct
      pt_regs'.

      HAVE_ARCH_REGS_QUERY_REGISTER_OFFSET is introduced as the corresponding
      CFLAGS of PERF_HAVE_ARCH_REGS_QUERY_REGISTER_OFFSET.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441523623-152703-19-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      [ Extracted from eBPF patches ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 196581717d85f59365dc9303685cd5b1cdf106a3
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:07 2015 +0200

      perf tools: Enhance parsing events tracepoint error output

      Enhancing parsing events tracepoint error output. Adding
      more verbose output when the tracepoint is not found or
      the tracing event path cannot be access.

        $ sudo perf record -e sched:sched_krava ls
        event syntax error: 'sched:sched_krava'
                             \___ unknown tracepoint

        Error:  File 
/sys/kernel/debug/tracing//tracing/events/sched/sched_krava not found.
        Hint:   Perhaps this kernel misses some CONFIG_ setting to enable this 
feature?.

        Run 'perf list' for a list of valid events
        ...

        $ perf record -e sched:sched_krava ls
        event syntax error: 'sched:sched_krava'
                             \___ can't access trace events

        Error:  No permissions to read 
/sys/kernel/debug/tracing//tracing/events/sched/sched_krava
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug'

        Run 'perf list' for a list of valid events
        ...

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-6-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8dd2a1317eba2c207632dcb19adb7cb746861652
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:06 2015 +0200

      perf evsel: Propagate error info from tp_format

      Propagate error info from tp_format via ERR_PTR to get it all the way
      down to the parse-event.c tracepoint adding routines. Following
      functions now return pointer with encoded error:

        - tp_format
        - trace_event__tp_format
        - perf_evsel__newtp_idx
        - perf_evsel__newtp

      This affects several other places in perf, that cannot use pointer check
      anymore, but must utilize the err.h interface, when getting error
      information from above functions list.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-5-git-send-email-jolsa@xxxxxxxxxx
      [ Add two missing ERR_PTR() and one IS_ERR() ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e2f9f8ea6a54e252e3a94a5c2321f673b5b97360
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:05 2015 +0200

      perf tools: Propagate error info for the tracepoint parsing

      Pass 'struct parse_events_error *error' to the parse-event.c tracepoint
      adding path. It will be filled with error data in following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Reviewed-by: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 01ca9fd41d6f2ad796a6b109b5253e06b6ae6dc7
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:03 2015 +0200

      tools: Add err.h with ERR_PTR PTR_ERR interface

      Adding part of the kernel's <linux/err.h> interface:

        inline void * __must_check ERR_PTR(long error);
        inline long   __must_check PTR_ERR(__force const void *ptr);
        inline bool   __must_check IS_ERR(__force const void *ptr);

      It will be used to propagate error through pointers in following
      patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Reviewed-by: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9bae1e8c3fe5359ce17309b894f54667fd563e98
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Sep 10 11:27:05 2015 +0900

      perf probe: Export init/exit_probe_symbol_maps()

      The init/exit_symbols_maps() functions are to setup and cleanup
      necessary info for probe events.  But they need to be called from out of
      the probe code now, so this patch exports them.

      However the names are too generic, so change them to have 'probe'. :)

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441852026-28974-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a43aac299c3abc09eff856039f5b72166b780d35
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Sep 10 11:27:04 2015 +0900

      perf probe: Free perf_probe_event in cleanup_perf_probe_events()

      The cleanup_perf_probe_events() frees all resources related to a perf
      probe event.  However it only freed resources in trace probe events, not
      perf probe events.  So call clear_perf_probe_event() too.

      Reported-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441852026-28974-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2cd55c68c0a49a75433b15c7dbd1991fef81e662
  Author: Ian Munsie <imunsie@xxxxxxxxxxx>
  Date:   Tue Sep 15 15:48:34 2015 +1000

      cxl: Fix build failure due to -Wunused-variable behaviour change

      A recent change in gcc caused this build failure:

      
/var/lib/jenkins/workspace/gcc_kernel_build/linux/drivers/misc/cxl/cxl.h:72:27:
      error: â??CXL_PSL_DLCNTLâ?? defined but not used 
[-Werror=unused-const-variable]
       static const cxl_p1_reg_t CXL_PSL_DLCNTL  = {0x0060};

      Because of this gcc commit:

      Commit 1bca8cbd0c68366f07277f98ce6963e10c2aa617 by mark
      PR28901 -Wunused-variable ignores unused const initialised variables in C
      12 years ago it was decided that -Wunused-variable shouldn't warn about
      static const variables because some code used const static char rcsid[]
      strings which were never used but wanted in the code anyway. But as the
      bug points out this hides some real bugs. These days the usage of
      rcsids is not very popular anymore. So this patch changes the default
      to warn about unused static const variables in C with
      -Wunused-variable. And it adds a new option -Wno-unused-const-variable
      to turn this warning off. For C++ this new warning is off by default,
      since const variables can be used as #defines in C++. New testcases for
      the new defaults in C and C++ are included testing the new warning and
      suppressing it with an unused attribute or using
      -Wno-unused-const-variable. gcc/ChangeLog

      The cxl driver uses static consts in place of #defines in some cases
      for type safety, so this change causes the driver to fail to build on
      new copilers as these constants are not all used in every file that
      imports the header. Suppress the warning for this driver to return to
      the old behaviour of -Wunused-variable.

      Reported-by: Anton Blanchard <anton@xxxxxxxxxxx>
      Signed-off-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 2925c2fdf1e0eb642482f5b30577e9435aaa8edb
  Author: Daniel Axtens <dja@xxxxxxxxxx>
  Date:   Tue Sep 15 15:04:07 2015 +1000

      cxl: Fix unbalanced pci_dev_get in cxl_probe

      Currently the first thing we do in cxl_probe is to grab a reference
      on the pci device. Later on, we call device_register on our adapter.
      In our remove path, we call device_unregister, but we never call
      pci_dev_put. We therefore leak the device every time we do a
      reflash.

      device_register/unregister is sufficient to hold the reference.
      Therefore, drop the call to pci_dev_get.

      Here's why this is safe.
      The proposed cxl_probe(pdev) calls cxl_adapter_init:
          a) init calls cxl_adapter_alloc, which creates a struct cxl,
             conventionally called adapter. This struct contains a
             device entry, adapter->dev.

          b) init calls cxl_configure_adapter, where we set
             adapter->dev.parent = &dev->dev (here dev is the pci dev)

      So at this point, the cxl adapter's device's parent is the PCI
      device that I want to be refcounted properly.

          c) init calls cxl_register_adapter
             *) cxl_register_adapter calls device_register(&adapter->dev)

      So now we're in device_register, where dev is the adapter device, and
      we want to know if the PCI device is safe after we return.

      device_register(&adapter->dev) calls device_initialize() and then
      device_add().

      device_add() does a get_device(). device_add() also explicitly grabs
      the device's parent, and calls get_device() on it:

               parent = get_device(dev->parent);

      So therefore, device_register() takes a lock on the parent PCI dev,
      which is what pci_dev_get() was guarding. pci_dev_get() can therefore
      be safely removed.

      Fixes: f204e0b8cedd ("cxl: Driver code for powernv PCIe based cards for 
userspace access")
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Daniel Axtens <dja@xxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit c1ceb5fff01c0357de0386f87a620a4636ca68d1
  Author: Nathan Sullivan <nathan.sullivan@xxxxxx>
  Date:   Mon Aug 31 09:49:52 2015 -0500

      Documentation: bindings: add doc for zynq USB

      Document the binding for the zynq specific chipidea UDC binding.

      Signed-off-by: Nathan Sullivan <nathan.sullivan@xxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit 84bc70f94d81f1d3107dbcdafc1b193169e82131
  Author: Nathan Sullivan <nathan.sullivan@xxxxxx>
  Date:   Mon Aug 31 09:49:51 2015 -0500

      usb: chipidea: add xilinx zynq platform data

      Due to having hardware tx buffers less than 512 bytes in size, streaming
      must be enabled on the Zynq for the udc to work at all.  Add platform data
      specific to the Zynq udc, which does not set the CI_HDRC_DISABLE_STREAMING
      flag.

      Based on a patch by the same name from the Xilinx vendor tree.

      Signed-off-by: Nathan Sullivan <nathan.sullivan@xxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit 56ffa1d154c7e12af16273f0cdc42690dd05caf5
  Author: Peter Chen <peter.chen@xxxxxxxxxxxxx>
  Date:   Mon Aug 24 14:10:07 2015 +0800

      usb: chipidea: udc: using the correct stall implementation

      According to spec, there are functional and protocol stalls.

      For functional stall, it is for bulk and interrupt endpoints,
      below are cases for it:
      - Host sends SET_FEATURE request for Set-Halt, the udc driver
      needs to set stall, and return true unconditionally.
      - The gadget driver may call usb_ep_set_halt to stall certain
      endpoints, if there is a transfer in pending, the udc driver
      should not set stall, and return -EAGAIN accordingly.
      These two kinds of stall need to be cleared by host using CLEAR_FEATURE
      request (Clear-Halt).

      For protocol stall, it is for control endpoint, this stall will
      be set if the control request has failed. This stall will be
      cleared by next setup request (hardware will do it).

      It fixed usbtest (drivers/usb/misc/usbtest.c) Test 13 "set/clear halt"
      test failure, meanwhile, this change has been verified by
      USB2 CV Compliance Test and MSC Tests.

      Cc: <stable@xxxxxxxxxxxxxxx> #3.10+
      Cc: Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
      Cc: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit e30f3963f2c3c03119d71f1804bdb94ccd33580b
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Mon Sep 14 01:24:41 2015 -0700

      drm/ttm: Fix memory space allocation v2

      In the event that TTM doesn't find a compatible memory type for the
      driver's first placement choice (placement without eviction), TTM
      returns -EINVAL without trying the driver's second choice.
      This causes problems on vmwgfx when VRAM is disabled before first modeset
      and during VT switches when fbdev is not enabled.

      Fix this by also trying the driver's second choice before returning
      -EINVAL.

      v2: Also check that man->use_type is true for the driver's second choice.
      Fixes a bug where disallowed memory types could be used.

      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Brian Paul <brianp@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 9059b284caecb628fac826c2c5cc8ee85708eec1
  Merge: 8f3e568 92d424a
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Sep 15 08:50:59 2015 +0200

      Merge tag 'perf-core-for-mingo-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Add 'socket' sort entry, to sort by the processor socket in
          'perf top' and 'perf report'. (Kan Liang)

        - Introduce --socket-filter to 'perf report', for filtering by processor
          socket. (Kan Liang)

        - Add new "Zoom into Processor Socket" operation in the perf hists 
browser,
          used in 'perf top' and 'perf report'. (Kan Liang)

        - Fix the 'CPU' hist browser column width calculation. (Arnaldo 
Carvalho de Melo)

      Infrastructure changes:

        - 'perf test' fixes for the object code reading entry. (Jan Stancek)

        - Add processor socket and cpu topology 'perf test' entries. (Kan Liang)

        - Introduce more sysfs__read_TYPE() helpers. (Arnaldo Carvalho de Melo)

        - Group cpu information reading functions in tools/lib/api/cpu.[ch],
          starting with cpu__get_max_freq() from a patchkit by Kan Liang.
          (Arnaldo Carvalho de Melo)

        - Retrieve the MSR PMU type from a perf.data file header and store it
          in struct perf_env. (Kan Liang)

        - Add tools/include into CTAGS file list. (Jiri Olsa)

        - Add iterator function for perf tests. (Matt Fleming)

        - Switch to tracing_patch interface. (Jiri Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 73477bbb09e7022063d1737c7322ad2e08968c23
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Thu Aug 27 20:15:28 2015 +0200

      x86/fpu/math-emu: Remove !NO_UNDOC_CODE

      We always want to support all FPU opcodes, including
      undocumented ones. That define was fully justified ~20 years ago
      but not today. Let's not complicate the code with it.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1440699330-1305-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1975dbc276c6ab62230cf4f9df5ddc9ff0e0e473
  Author: Jonathan Corbet <corbet@xxxxxxx>
  Date:   Mon Sep 14 17:11:05 2015 -0600

      locking/static_keys: Fix up the static keys documentation

      Fix a few small mistakes in the static key documentation and
      delete an unneeded sentence.

      Suggested-by: Jason Baron <jbaron@xxxxxxxxxx>
      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150914171105.511e1e21@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a30e577c96f59b1e1678ea5462432b09bf7d5cbc
  Author: Jeff Mahoney <jeffm@xxxxxxxx>
  Date:   Fri Sep 11 21:44:17 2015 -0400

      btrfs: skip waiting on ordered range for special files

      In btrfs_evict_inode, we properly truncate the page cache for evicted
      inodes but then we call btrfs_wait_ordered_range for every inode as well.
      It's the right thing to do for regular files but results in incorrect
      behavior for device inodes for block devices.

      filemap_fdatawrite_range gets called with inode->i_mapping which gets
      resolved to the block device inode before getting passed to
      wbc_attach_fdatawrite_inode and ultimately to inode_to_bdi.  What happens
      next depends on whether there's an open file handle associated with the
      inode.  If there is, we write to the block device, which is unexpected
      behavior.  If there isn't, we through normally and inode->i_data is used.
      We can also end up racing against open/close which can result in crashes
      when i_mapping points to a block device inode that has been closed.

      Since there can't be any page cache associated with special file inodes,
      it's safe to skip the btrfs_wait_ordered_range call entirely and avoid
      the problem.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=100911
      Tested-by: Christoph Biedl <linux-kernel.bfrz@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jeff Mahoney <jeffm@xxxxxxxx>
      Reviewed-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit bcb2b0b2bae2de744223c68521cd51c57feb486c
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Mon Sep 14 16:01:55 2015 +0100

      ACPI: Eliminate CONFIG_.*{, _MODULE} #ifdef in favor of IS_ENABLED()

      This commit removes all CONFIG_.*{,_MODULE} in ACPI code, replacing it
      with IS_ENABLED().

      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit cf3a51059efd653aa38667db799e85d77231af9d
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Mon Sep 14 16:01:54 2015 +0100

      ACPI: int340x_thermal: add missing CONFIG_ prefix

      This patch adds the missing CONFIG_ prefix to INTEL_SOC_DTS_THERMAL
      macros.

      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 005efedf2c7d0a270ffbe28d8997b03844f3e3e7
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Mon Sep 14 09:09:31 2015 +0100

      Btrfs: fix read corruption of compressed and shared extents

      If a file has a range pointing to a compressed extent, followed by
      another range that points to the same compressed extent and a read
      operation attempts to read both ranges (either completely or part of
      them), the pages that correspond to the second range are incorrectly
      filled with zeroes.

      Consider the following example:

        File layout
        [0 - 8K]                      [8K - 24K]
            |                             |
            |                             |
         points to extent X,         points to extent X,
         offset 4K, length of 8K     offset 0, length 16K

        [extent X, compressed length = 4K uncompressed length = 16K]

      If a readpages() call spans the 2 ranges, a single bio to read the extent
      is submitted - extent_io.c:submit_extent_page() would only create a new
      bio to cover the second range pointing to the extent if the extent it
      points to had a different logical address than the extent associated with
      the first range. This has a consequence of the compressed read end io
      handler (compression.c:end_compressed_bio_read()) finish once the extent
      is decompressed into the pages covering the first range, leaving the
      remaining pages (belonging to the second range) filled with zeroes (done
      by compression.c:btrfs_clear_biovec_end()).

      So fix this by submitting the current bio whenever we find a range
      pointing to a compressed extent that was preceded by a range with a
      different extent map. This is the simplest solution for this corner
      case. Making the end io callback populate both ranges (or more, if we
      have multiple pointing to the same extent) is a much more complex
      solution since each bio is tightly coupled with a single extent map and
      the extent maps associated to the ranges pointing to the shared extent
      can have different offsets and lengths.

      The following test case for fstests triggers the issue:

        seq=`basename $0`
        seqres=$RESULT_DIR/$seq
        echo "QA output created by $seq"
        tmp=/tmp/$$
        status=1        # failure is the default!
        trap "_cleanup; exit \$status" 0 1 2 3 15

        _cleanup()
        {
            rm -f $tmp.*
        }

        # get standard environment, filters and checks
        . ./common/rc
        . ./common/filter

        # real QA test starts here
        _need_to_be_root
        _supported_fs btrfs
        _supported_os Linux
        _require_scratch
        _require_cloner

        rm -f $seqres.full

        test_clone_and_read_compressed_extent()
        {
            local mount_opts=$1

            _scratch_mkfs >>$seqres.full 2>&1
            _scratch_mount $mount_opts

            # Create a test file with a single extent that is compressed (the
            # data we write into it is highly compressible no matter which
            # compression algorithm is used, zlib or lzo).
            $XFS_IO_PROG -f -c "pwrite -S 0xaa 0K 4K"        \
                            -c "pwrite -S 0xbb 4K 8K"        \
                            -c "pwrite -S 0xcc 12K 4K"       \
                            $SCRATCH_MNT/foo | _filter_xfs_io

            # Now clone our extent into an adjacent offset.
            $CLONER_PROG -s $((4 * 1024)) -d $((16 * 1024)) -l $((8 * 1024)) \
                $SCRATCH_MNT/foo $SCRATCH_MNT/foo

            # Same as before but for this file we clone the extent into a lower
            # file offset.
            $XFS_IO_PROG -f -c "pwrite -S 0xaa 8K 4K"         \
                            -c "pwrite -S 0xbb 12K 8K"        \
                            -c "pwrite -S 0xcc 20K 4K"        \
                            $SCRATCH_MNT/bar | _filter_xfs_io

            $CLONER_PROG -s $((12 * 1024)) -d 0 -l $((8 * 1024)) \
                $SCRATCH_MNT/bar $SCRATCH_MNT/bar

            echo "File digests before unmounting filesystem:"
            md5sum $SCRATCH_MNT/foo | _filter_scratch
            md5sum $SCRATCH_MNT/bar | _filter_scratch

            # Evicting the inode or clearing the page cache before reading
            # again the file would also trigger the bug - reads were returning
            # all bytes in the range corresponding to the second reference to
            # the extent with a value of 0, but the correct data was persisted
            # (it was a bug exclusively in the read path). The issue happened
            # only if the same readpages() call targeted pages belonging to the
            # first and second ranges that point to the same compressed extent.
            _scratch_remount

            echo "File digests after mounting filesystem again:"
            # Must match the same digests we got before.
            md5sum $SCRATCH_MNT/foo | _filter_scratch
            md5sum $SCRATCH_MNT/bar | _filter_scratch
        }

        echo -e "\nTesting with zlib compression..."
        test_clone_and_read_compressed_extent "-o compress=zlib"

        _scratch_unmount

        echo -e "\nTesting with lzo compression..."
        test_clone_and_read_compressed_extent "-o compress=lzo"

        status=0
        exit

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>
      Reviewed-by: Qu Wenruo<quwenruo@xxxxxxxxxxxxxx>
      Reviewed-by: Liu Bo <bo.li.liu@xxxxxxxxxx>

  commit d25ed277fbd4c20247286fda2014ae6a2b88316b
  Merge: 9c488de 3bba75a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 16:58:35 2015 -0700

      Merge tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux

      Pull clk fixes from Stephen Boyd:
       "A couple build fixes for drivers introduced in the merge window and a
        handful of patches to add more critical clocks on rockchip SoCs that
        are affected by newly introduced gpio clock handling"

      * tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:
        clk: rockchip: Add pclk_peri to critical clocks on RK3066/RK3188
        clk: rockchip: add pclk_cpu to the list of rk3188 critical clocks
        clk: rockchip: handle critical clocks after registering all clocks
        clk: Hi6220: separately build stub clock driver
        clk: h8s2678: Fix compile error

  commit 4184a8fc57a43faa2625988cc87031db77af9d98
  Merge: 6ff33f3 5f25f066
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Tue Sep 15 01:29:43 2015 +0200

      Merge branch 'for-rafael' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mzx/devfreq into pm-devfreq

      Pull devfreq updates for v4.3 from MyungJoo Ham.

      * 'for-rafael' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mzx/devfreq:
        PM / devfreq: Fix incorrect type issue.
        PM / devfreq: tegra: Update governor to use devfreq_update_stats()
        PM / devfreq: comments for get_dev_status usage updated
        PM / devfreq: drop comment about thermal setting max_freq
        PM / devfreq: cache the last call to get_dev_status()
        PM / devfreq: Drop unlikely before IS_ERR(_OR_NULL)
        PM / devfreq: exynos-ppmu: bit-wise operation bugfix.
        PM / devfreq: exynos-ppmu: Update documentation to support PPMUv2
        PM / devfreq: exynos-ppmu: Add the support of PPMUv2 for Exynos5433
        PM / devfreq: event: Remove incorrect property in exynos-ppmu DT binding

      Conflicts:
        drivers/devfreq/event/exynos-ppmu.c

  commit ae7858180510d6fd0dfaf66d209bc6103db1678f
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:29 2015 +0800

      selftests: exec: revert to default emit rule

      With the previous patch, the installation method change from install
      to rsync. There is no need to create subdir during test, the
      default EMIT_TESTS is enough.

      This patch essentially revert commit 84cbd9e4 ("selftests/exec: do not
      install subdir as it is already created").

      Suggested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit 900d65ee11aae3a23cb963f484b65eb3e269dd9c
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:28 2015 +0800

      selftests: change install command to rsync

      The command of install could not handle the special files in exec
      testcases, change the default rule to rsync to fix this.

      The installation is unchanged after this commit.

      Suggested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit b11054b959cf921a646b64983bc35193c1597739
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:27 2015 +0800

      selftests: mqueue: simplify the Makefile

      Use make's implict rule for building simple C programs.

      Suggested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit cc19ada7340b5ed87a94ea381ff7ade6a053b2f3
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:26 2015 +0800

      selftests: mqueue: allow extra cflags

      Change from = to += in order to allows the user to pass whatever
      CFLAGS they wish(E.g. pass the proper headers and librareis
      (popt.h and libpopt.so) in cross-compiling)

      Suggested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit 1087d019176df7e406387de3fe76129c74d24081
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:25 2015 +0800

      selftests: rename jump label to static_keys

      Commit 2bf9e0ab08c6 ("locking/static_keys: Provide a selftest")
      renamed jump_label directory to static_keys and failed to update
      the Makefile, causing the selftests build to fail.

      This commit fixes it by updating the Makefile with the new name
      and also moves the entry into the correct position to keep the
      list alphabetically sorted.

      Fixes: 2bf9e0ab08c6 ("locking/static_keys: Provide a selftest")
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Acked-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit b623c4daadb5a4bfaef62783085b95bd9ba5a77c
  Author: Kees Cook <keescook@xxxxxxxxxxxx>
  Date:   Fri Aug 21 11:22:35 2015 -0700

      selftests/seccomp: add support for s390

      This adds support for s390 to the seccomp selftests. Some improvements
      were made to enhance the accuracy of failure reporting, and additional
      tests were added to validate assumptions about the currently traced
      syscall. Also adds early asserts for running on older kernels to avoid
      noise when the seccomp syscall is not implemented.

      Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit 7ef7cc9fdf9853b3027c55b9481991695ad5e5b2
  Author: Zhang Zhen <zhenzhang.zhang@xxxxxxxxxx>
  Date:   Mon Sep 14 12:13:27 2015 +0800

      seltests/zram: fix syntax error

      Not all shells define a variable UID. This is a bash and zsh feature only.
      In other shells, the UID variable is not defined, so here test command
      expands to [ != 0 ] which is a syntax error.

      Without this patch:
      root@HGH1000007090:/opt/work/linux/tools/testing/selftests/zram# sh 
zram.sh
      zram.sh: 8: [: !=: unexpected operator
      zram.sh : No zram.ko module or /dev/zram0 device file not found
      zram.sh : CONFIG_ZRAM is not set

      With this patch:
      root@HGH1000007090:/opt/work/linux/tools/testing/selftests/zram# sh 
./zram.sh
      zram.sh : No zram.ko module or /dev/zram0 device file not found
      zram.sh : CONFIG_ZRAM is not set

      Signed-off-by: Zhang Zhen <zhenzhang.zhang@xxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit 7168e947291f0ead07e5638b4599fb7845288b69
  Merge: 21b430d 60fdcb8
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Mon Sep 14 13:42:11 2015 -0700

      Merge branch 'fixes-rc1' into omap-for-v4.3/fixes

  commit 60fdcb8863d9b4a8b6c6b367886fadb50d4c0b07
  Author: Nicolas Chauvet <kwizart@xxxxxxxxx>
  Date:   Thu Sep 3 17:34:40 2015 +0200

      ARM: dts: Fixup model name for HP t410 dts

      This fix the model name for the device.
      Whole string taken from the HP support center web page

      Signed-off-by: Nicolas Chauvet <kwizart@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit c263a5b8120523b736ed4641657075f2024e75b7
  Author: Vishal Mahaveer <vishalm@xxxxxx>
  Date:   Tue Aug 25 13:57:49 2015 -0500

      ARM: dts: DRA7: fix a typo in ethernet

      Register address in name of the node is wrong

      Signed-off-by: Vishal Mahaveer <vishalm@xxxxxx>
      Acked-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 3ab74b89c4d50e6d29d3ace2d400a8a3f1e6de3f
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Wed Aug 5 19:13:49 2015 +0530

      ARM: omap2plus_defconfig: make PCF857x built-in

      One of the lines from PCF857x is connected to the vdd line of MMC1
      in DRA74x and DRA72x EVMs and is modelled as a regulator. If PCF857x
      is not made as built-in, the regulator_get in omap_hsmmc fails making
      it difficult to use MMC1 as rootfs.

      Make PCF857x built-in.

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      Signed-off-by: Sekhar Nori <nsekhar@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 737f146fe0dd1353f5e2c6153fedd81f48b5cd65
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Fri Sep 4 17:30:25 2015 +0530

      ARM: dts: Use ti,pbias compatible string for pbias

      Use platform specific compatible strings instead of the common
      "ti,pbias-omap" compatible string.

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 380528f742796e1244e931c51e77c9ed664f566c
  Author: Heiko Stübner <heiko@xxxxxxxxx>
  Date:   Sun Sep 13 13:20:36 2015 +0200

      clk: rockchip: add critical clock for rk3368

      Again a result of the gpio-clock-liberation the rk3368 needs the
      pclk_pd_pmu marked as critical, to boot successfully.

      Reported-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Tested-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 9c488de24f7264f08d341024bffdd637b4d04c96
  Merge: 57e6bbc eda2116
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 12:49:15 2015 -0700

      Merge branch 'for-next' of git://git.samba.org/sfrench/cifs-2.6

      Pull CIFS fixes from Steve French:
       "Two small cifs fixes"

      * 'for-next' of git://git.samba.org/sfrench/cifs-2.6:
        [CIFS] mount option sec=none not displayed properly in /proc/mounts
        CIFS: fix type confusion in copy offload ioctl

  commit 57e6bbcb4beb4c87aa93e78a1db08fdaab9ee65f
  Merge: 6ff33f3 c2172ce
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 12:24:10 2015 -0700

      Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM fixes from Russell King:
       "A number of fixes for the merge window, fixing a number of cases
        missed when testing the uaccess code, particularly cases which only
        show up with certain compiler versions"

      * 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm:
        ARM: 8431/1: fix alignement of __bug_table section entries
        arm/xen: Enable user access to the kernel before issuing a privcmd call
        ARM: domains: add memory dependencies to get_domain/set_domain
        ARM: domains: thread_info.h no longer needs asm/domains.h
        ARM: uaccess: fix undefined instruction on ARMv7M/noMMU
        ARM: uaccess: remove unneeded uaccess_save_and_disable macro
        ARM: swpan: fix nwfpe for uaccess changes
        ARM: 8429/1: disable GCC SRA optimization

  commit d8f8004ec7048fb2faa6967ab51259b5603562fb
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Wed Sep 9 16:18:14 2015 -0500

      ARM: OMAP5: Cleanup options for SoC only build

      OMAP5 SoC has Cortex-A15 which does not use TWD timer. It uses
      ARCH_TIMER instead, clean up unwanted configuration and enable
      OMAP_INTERCONNECT and OPP which is necessary for expected functionality
      on the SoC.

      Reported-by: Carlos Hernandez <ceh@xxxxxx>
      Reported-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit d2e104c63a81e64574a6af9806f2a5d5a48248d9
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Wed Sep 9 16:18:13 2015 -0500

      ARM: DRA7: Select missing options for SoC only build

      DRA7 does use OPP, uses OMAP interconnect and also does require SCU.
      These are missing in the SoC only build of DRA7 breaking various PM
      features in DRA7 only build.

      Reported-by: Carlos Hernandez <ceh@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit a3b7470951ab49e5592d20c2bcfe5ee675221591
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Wed Sep 9 16:18:12 2015 -0500

      ARM: OMAP2+: board-generic: Remove stale of_irq macros

      When commit c4082d499fa2 ("ARM: omap2+: board-generic: clean up the
      irq data from board file") cleaned up the direct usage of gic_of_init
      and omap_intc_of_init, it failed to clean up the macros properly.

      Since these macros are no longer used, lets just remove them.

      Fixes: c4082d499fa2 ("ARM: omap2+: board-generic: clean up the irq data 
from board file")
      Reported-by: Carlos Hernandez <ceh@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 6d785c963a660b0279c43a2b1cd9b1c89ce5514b
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Wed Sep 9 16:18:11 2015 -0500

      ARM: OMAP4+: PM: erratum is used by OMAP5 and DRA7 as well

      OMAP5 and DRA7 reuse the same pm44xx_erratum variable so, enable the
      same, else PM features such as Suspend to ram is broken in a SoC only
      build configuration.

      Reported-by: Carlos Hernandez <ceh@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit d34cf0d56658ff040c707313b4a71e86a767cbc2
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 18:24:18 2015 +0200

      ARM: dts: omap3-igep: Move eth IRQ pinmux to IGEPv2 common dtsi

      Only the IGEPv2 boards have a LAN9221i chip connected to the GPMC
      so the pinmux configuration for the GPIO connected to the IRQ line
      of the LAN chip should not be defined in the IGEP common dtsi but
      in the one common to the IGEPv2 boards.

      While there, use the OMAP3_CORE1_IOPAD() macro for the padconf reg.

      Suggested-by: Ladislav Michl <ladis@xxxxxxxxxxxxxx>
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Enric Balletbo i Serra <enric.balletbo@xxxxxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit c22c7f3e667bece46efe97780ab2df3af700aea0
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Thu Sep 3 14:24:00 2015 -0500

      ARM: dts: am57xx-beagle-x15: Add wakeup irq for mcp79410

      With the support in the generic PM framework for wakeirq and capability
      added to the rtc-ds1307 driver to support this, we can now define the
      optional wakeup irq to allow the RTC to wakeup the system from low power
      modes as part of suspend.

      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 259c0c04acde19d6286def1661ed22d0fb3b05b9
  Author: Teresa Remmet <t.remmet@xxxxxxxxx>
  Date:   Thu Sep 3 14:00:06 2015 +0200

      ARM: dts: am335x-phycore-som: Fix mpu voltage

      Fix the mpu voltage as it is set too low for the silicon
      revision 2.1.

      Signed-off-by: Teresa Remmet <t.remmet@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 423fe5f3c35ff0f374d5452eb2db93a28bf6b9e2
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Wed Jul 29 16:39:42 2015 +0530

      ARM: dts: am57xx-beagle-x15: Fix regulator populated in MMC1 dt node

      For beagle x15, both the vdd and io lines are connected to the
      same regulator (ldo1_reg). However vmmc_aux is populated to vdd_3v3.
      Remove it.

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      Acked-by: Nishanth Menon <nm@xxxxxx>
      [tony@xxxxxxxxxxx: updated to apply]
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 87ee15ec26000c6edc10e63c415bee1239e042c8
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Mon Sep 14 07:07:28 2015 -0700

      ARM: dts: Fix dm814x control base to properly initialize Ethernet PHY

      Looks like I made a typo on the control base, all the 81xx
      SoCs have it at 0x48140000 base. We've just gotten away with
      the typo as the Ethernet phy was configured by the bootloader
      on my test system and we're not yet using the pinctrl.

      In addition to fixing the contol base, we need to also use the
      right Ethernet phy flags to initialize it. And we are still
      missing the PLL driver for dm814x and only relying on the
      divider and mux clocks.

      Fixes: f3d953ea3721 ("ARM: dts: Add minimal dm814x support")
      Cc: Matthijs van Duin <matthijsvanduin@xxxxxxxxx>
      Cc: Nicolas Chauvet <kwizart@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 3a2fa775bd1d0579113666c1a2e37654a34018a0
  Author: Carl Frederik Werner <frederik@xxxxxxx>
  Date:   Wed Sep 2 10:07:57 2015 +0900

      ARM: dts: omap3-beagle: make i2c3, ddc and tfp410 gpio work again

      Let's fix pinmux address of gpio 170 used by tfp410 powerdown-gpio.

      According to the OMAP35x Technical Reference Manual
        CONTROL_PADCONF_I2C3_SDA[15:0]  0x480021C4 mode0: i2c3_sda
        CONTROL_PADCONF_I2C3_SDA[31:16] 0x480021C4 mode4: gpio_170
      the pinmux address of gpio 170 must be 0x480021C6.

      The former wrong address broke i2c3 (used by hdmi ddc), resulting in
      kernel message:
        omap_i2c 48060000.i2c: controller timed out

      Fixes: 8cecf52befd7 ("ARM: omap3-beagle.dts: add display information")
      Cc: stable@xxxxxxxxxxxxxxx # v3.15+
      Signed-off-by: Carl Frederik Werner <frederik@xxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit df5c79e982b38eec1d184668d66f9ce0c426e2a1
  Merge: f17b329 721b51f
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Sep 14 19:53:39 2015 +0100

      Merge branch 'fix/rt5645' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into asoc-fix-rt5645

  commit b4a21fc275e99fc63c77b30da92ee497f8a7bdb6
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Fri Sep 11 16:37:05 2015 -0700

      regmap: Allocate buffers with GFP_ATOMIC when fast_io == true

      If a regmap is using fast_io, allocate the scratch buffer in
      regmap_bulk_write() with GFP_ATOMIC instead of GFP_KERNEL.
      Otherwise we may schedule while atomic.

      Reported-by: Abhijeet Dharmapurikar <adharmap@xxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 295c3405a8bbd69ee8c8eb6580f30b0b8739b33a
  Author: Jyri Sarha <jsarha@xxxxxx>
  Date:   Wed Sep 9 21:27:42 2015 +0300

      ASoC: davinci-mcasp: Set .symmetric_rates = 1 in snd_soc_dai_driver

      The TX and RX direction share the same bit clock and frame sync, so
      the samplerate must be the same to both directions.

      Signed-off-by: Jyri Sarha <jsarha@xxxxxx>
      Acked-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit bd315aab8a3ab1bc7074774b89a5d8ec7c1ff7ab
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Mon Sep 14 10:23:55 2015 +0000

      perf top: Fix segfault pressing -> with no hist entries

      'perf top' segfaults with following operation:

       # perf top -e page-faults -p 11400 # 11400 never generates page-fault

      Then on the resulting empty interface, press right key:

        # ./perf top -e page-faults -p 11400
        perf: Segmentation fault
        -------- backtrace --------
        ./perf[0x535428]
        /lib64/libc.so.6(+0x3545f)[0x7f0dd360745f]
        ./perf[0x531d46]
        ./perf(perf_evlist__tui_browse_hists+0x96)[0x5340d6]
        ./perf[0x44ba2f]
        /lib64/libpthread.so.0(+0x81d0)[0x7f0dd49dc1d0]
        /lib64/libc.so.6(clone+0x6c)[0x7f0dd36b90dc]

      The bug resides in perf_evsel__hists_browse() that, in the above
      circumstance browser->selection can be NULL, but code after
      skip_annotation doesn't consider it.

      This patch fix it by checking browser->selection before fetching
      browser->selection->map.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1442226235-117265-1-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 921e54680aefe52f28d9ce9485edb1bfef4b92a8
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 1 14:50:15 2015 +0800

      ASoC: au1x: psc-i2s: Fix unused variable 'ret' warning

      Fix below build warning:
      sound/soc/au1x/psc-i2s.c: In function 'au1xpsc_i2s_drvprobe':
      sound/soc/au1x/psc-i2s.c:299:6: warning: unused variable 'ret' 
[-Wunused-variable]

      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Acked-by: Manuel Lauss <manuel.lauss@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 42617869bf095c650e67aad4001cab4224e7fa98
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 1 12:31:24 2015 +0800

      ASoC: SPEAr: Make SND_SPEAR_SOC select SND_SOC_GENERIC_DMAENGINE_PCM

      devm_snd_dmaengine_pcm_register() is guarded by
      CONFIG_SND_SOC_GENERIC_DMAENGINE_PCM.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit e4fba9b5be12d577d2e2c19fdca6b0744c3f271e
  Author: Koro Chen <koro.chen@xxxxxxxxxxxx>
  Date:   Mon Sep 14 14:51:17 2015 +0800

      ASoC: mediatek: Increase periods_min in capture

      In capture, there is chance that hw_ptr reported at IRQ is
      a little smaller than period_size due to internal AFE buffer.
      In the case of ping-pong buffer:

      |xxxxxxxxxxxxxxxxxxxxxxxxxxxx--|-----------------------------|
                                  hw_ptr < period_size

      This available buffer will not be read since its size is smaller than
      avail_min (which is period_size by default), and read thread continues
      to sleep. If the next hw_ptr is just a little larger than buffer_size,
      overrun occurs. One more period can hold the possible unread buffer.

      Signed-off-by: Koro Chen <koro.chen@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 81523aac01a7f68af2576800c8623edfb6323017
  Author: Wei Yang <weiyang@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 14:12:53 2015 +0800

      KVM: make the declaration of functions within 80 characters

      After 'commit 0b8ba4a2b658 ("KVM: fix checkpatch.pl errors in
      kvm/coalesced_mmio.h")', the declaration of the two function will exceed 
80
      characters.

      This patch reduces the TAPs to make each line in 80 characters.

      Signed-off-by: Wei Yang <weiyang@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 5d7c631d926b59aa16f3c56eaeb83f1036c81dc7
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Thu Jul 30 16:24:43 2015 -0700

      x86/apic: Serialize LVTT and TSC_DEADLINE writes

      The APIC LVTT register is MMIO mapped but the TSC_DEADLINE register is an
      MSR. The write to the TSC_DEADLINE MSR is not serializing, so it's not
      guaranteed that the write to LVTT has reached the APIC before the
      TSC_DEADLINE MSR is written. In such a case the write to the MSR is
      ignored and as a consequence the local timer interrupt never fires.

      The SDM decribes this issue for xAPIC and x2APIC modes. The
      serialization methods recommended by the SDM differ.

      xAPIC:
       "1. Memory-mapped write to LVT Timer Register, setting bits 18:17 to 10b.
        2. WRMSR to the IA32_TSC_DEADLINE MSR a value much larger than current 
time-stamp counter.
        3. If RDMSR of the IA32_TSC_DEADLINE MSR returns zero, go to step 2.
        4. WRMSR to the IA32_TSC_DEADLINE MSR the desired deadline."

      x2APIC:
       "To allow for efficient access to the APIC registers in x2APIC mode,
        the serializing semantics of WRMSR are relaxed when writing to the
        APIC registers. Thus, system software should not use 'WRMSR to APIC
        registers in x2APIC mode' as a serializing instruction. Read and write
        accesses to the APIC registers will occur in program order. A WRMSR to
        an APIC register may complete before all preceding stores are globally
        visible; software can prevent this by inserting a serializing
        instruction, an SFENCE, or an MFENCE before the WRMSR."

      The xAPIC method is to just wait for the memory mapped write to hit
      the LVTT by checking whether the MSR write has reached the hardware.
      There is no reason why a proper MFENCE after the memory mapped write would
      not do the same. Andi Kleen confirmed that MFENCE is sufficient for the
      xAPIC case as well.

      Issue MFENCE before writing to the TSC_DEADLINE MSR. This can be done
      unconditionally as all CPUs which have TSC_DEADLINE also have MFENCE
      support.

      [ tglx: Massaged the changelog ]

      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Reviewed-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: <Kernel-team@xxxxxx>
      Cc: <lenb@xxxxxxxxxx>
      Cc: <fenghua.yu@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx #v3.7+
      Link: 
http://lkml.kernel.org/r/20150909041352.GA2059853@xxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 723831927e8813b5b336d383174f686ad708bf10
  Author: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
  Date:   Mon Sep 14 16:06:48 2015 +0300

      ASoC: davinci-mcasp: Revise the FIFO threshold calculation

      The FIFO threshold for McASP should be <=[tx/rx]numevt so the initial 
value
      for the refining should meet this requirement as well.

      Signed-off-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 4857c91f0d195f05908fff296ba1ec5fca87066c
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 12:00:55 2015 +0200

      x86/ioapic: Force affinity setting in setup_ioapic_dest()

      The recent ioapic cleanups changed the affinity setting in
      setup_ioapic_dest() from a direct write to the hardware to the delayed
      affinity setup via irq_set_affinity().

      That results in a warning from chained_irq_exit():
      WARNING: CPU: 0 PID: 5 at kernel/irq/migration.c:32 irq_move_masked_irq
      [<ffffffff810a0a88>] irq_move_masked_irq+0xb8/0xc0
      [<ffffffff8103c161>] ioapic_ack_level+0x111/0x130
      [<ffffffff812bbfe8>] intel_gpio_irq_handler+0x148/0x1c0

      The reason is that irq_set_affinity() does not write directly to the
      hardware. It marks the affinity setting as pending and executes it
      from the next interrupt. The chained handler infrastructure does not
      take the irq descriptor lock for performance reasons because such a
      chained interrupt is not visible to any interfaces. So the delayed
      affinity setting triggers the warning in irq_move_masked_irq().

      Restore the old behaviour by calling the set_affinity function of the
      ioapic chip in setup_ioapic_dest(). This is safe as none of the
      interrupts can be on the fly at this point.

      Fixes: aa5cb97f14a2 'x86/irq: Remove x86_io_apic_ops.set_affinity and 
related interfaces'
      Reported-and-tested-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: jarkko.nikula@xxxxxxxxxxxxxxx

  commit ba378ca9c04a5fc1b2cf0f0274a9d02eb3d1bad9
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 18:04:09 2015 +0200

      netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC

      Fix lookup of existing match/target structures in the corresponding list
      by skipping the family check if NFPROTO_UNSPEC is used.

      This is resulting in the allocation and insertion of one match/target
      structure for each use of them. So this not only bloats memory
      consumption but also severely affects the time to reload the ruleset
      from the iptables-compat utility.

      After this patch, iptables-compat-restore and iptables-compat take
      almost the same time to reload large rulesets.

      Fixes: 0ca743a55991 ("netfilter: nf_tables: add compatibility layer for 
x_tables")
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 63cdbc06b357dcb3a7104a421ee4a4550d7fadfd
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Mon Sep 14 17:06:27 2015 +0200

      netfilter: bridge: fix routing of bridge frames with call-iptables=1

      We can't re-use the physoutdev storage area.

      1.  When using NFQUEUE in PREROUTING, we attempt to bump a bogus
      refcnt since nf_bridge->physoutdev is garbage (ipv4/ipv6 address)

      2. for same reason, we crash in physdev match in FORWARD or later if
      skb is routed instead of bridged.

      This increases nf_bridge_info to 40 bytes, but we have no other choice.

      Fixes: 72b1e5e4cac7 ("netfilter: bridge: reduce nf_bridge_info to 32 
bytes again")
      Reported-by: Sander Eikelenboom <linux@xxxxxxxxxxxxxx>
      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 586b286b110e94eb31840ac5afc0c24e0881fe34
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Wed Sep 9 21:34:51 2015 -0400

      dm crypt: constrain crypt device's max_segment_size to PAGE_SIZE

      Setting the dm-crypt device's max_segment_size to PAGE_SIZE is an
      unfortunate constraint that is required to avoid the potential for
      exceeding dm-crypt's underlying device's max_segments limits -- due to
      crypt_alloc_buffer() possibly allocating pages for the encryption bio
      that are not as physically contiguous as the original bio.

      It is interesting to note that this problem was already fixed back in
      2007 via commit 91e106259 ("dm crypt: use bio_add_page").  But Linux 4.0
      commit cf2f1abfb ("dm crypt: don't allocate pages for a partial
      request") regressed dm-crypt back to _not_ using bio_add_page().  But
      given dm-crypt's cpu parallelization changes all depend on commit
      cf2f1abfb's abandoning of the more complex io fragments processing that
      dm-crypt previously had we cannot easily go back to using
      bio_add_page().

      So all said the cleanest way to resolve this issue is to fix dm-crypt to
      properly constrain the original bios entering dm-crypt so the encryption
      bios that dm-crypt generates from the original bios are always
      compatible with the underlying device's max_segments queue limits.

      It should be noted that technically Linux 4.3 does _not_ need this fix
      because of the block core's new late bio-splitting capability.  But, it
      is reasoned, there is little to be gained by having the block core split
      the encrypted bio that is composed of PAGE_SIZE segments.  That said, in
      the future we may revert this change.

      Fixes: cf2f1abfb ("dm crypt: don't allocate pages for a partial request")
      Fixes: https://bugzilla.kernel.org/show_bug.cgi?id=104421
      Suggested-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.0+

  commit 92d424ae898e0d04ac34263aa33e40acc1e1f3d1
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:46 2015 -0400

      perf test: Add entry for hists socket filter

      Add test case for hists socket filter.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-5-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 84734b06b63093cd44533f4caa43d4452fb11ec3
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:45 2015 -0400

      perf hists browser: Zoom in/out for processor socket

      Currently, users can zoom in/out for threads and dso in 'perf top' and
      'perf report'.

      This patch extends it for the processor sockets.

      'S' is the short key to zoom into current Processor Socket.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-4-git-send-email-kan.liang@xxxxxxxxx
      [ - Made it elide the Socket column when zooming into it,
          just like with the other zoom ops;
        - Make it use browser->pstack, to unzoom level by level;
        - Rename 'socket' variables to 'socket_id' to make it build on
          older systems where it shadows a global glibc declaration ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 21394d948a0c7c451d4a4d68afed9a06c4969636
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:44 2015 -0400

      perf report: Introduce --socket-filter option

      Introduce --socket-filter option for 'perf report' to only show entries
      for a processor socket that match this filter.

        $ perf report --socket-filter 1 --stdio
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        # Total Lost Samples: 0
        #
        # Samples: 752  of event 'cycles'
        # Event count (approx.): 350995599
        # Processor Socket: 1
        #
        # Overhead  Command    Shared Object     Symbol
        # ........  .........  ................  
.................................
        #
            97.02%  test       test              [.] plusB_c
             0.97%  test       test              [.] plusA_c
             0.23%  swapper    [kernel.vmlinux]  [k] acpi_idle_do_entry
             0.09%  rcu_sched  [kernel.vmlinux]  [k] 
dyntick_save_progress_counter
             0.01%  swapper    [kernel.vmlinux]  [k] task_waking_fair
             0.00%  swapper    [kernel.vmlinux]  [k] run_timer_softirq

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-3-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2e7ea3ab8282f6bb1d211d8af760a734c055f493
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:43 2015 -0400

      perf tools: Introduce new sort type "socket" for the processor socket

      This patch enable perf report to sort by processor socket:

        $ perf report --stdio --sort socket,comm,dso,symbol
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        # Total Lost Samples: 0
        #
        # Samples: 686  of event 'cycles'
        # Event count (approx.): 349215462
        #
        # Overhead SOCKET Command Shared Object    Symbol
        # ........ ...... ....... ................ ............................
        #
          97.05%    000   test    test             [.] plusB_c
           0.98%    000   test    test             [.] plusA_c
           0.93%    001   perf    [kernel.vmlinux] [k] smp_call_function_single
           0.19%    001   perf    [kernel.vmlinux] [k] page_fault
           0.19%    001   swapper [kernel.vmlinux] [k] pm_qos_request
           0.16%    000   test    [kernel.vmlinux] [k] add_mm_counter_fast

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-2-git-send-email-kan.liang@xxxxxxxxx
      [ Fix col calc, un-allcapsify col header & read the topology when not 
using perf.data ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0c4c4debb0adda4c18c158d95031dc2b9f637869
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:42 2015 -0400

      perf tools: Add processor socket info to hist_entry and addr_location

      This information will come from perf.data files of from the current
      system, cached when needed, such as when the 'socket' sort order gets
      introduced.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-1-git-send-email-kan.liang@xxxxxxxxx
      [ Don't blindly use env->cpu[al.cpu].socket_id & use machine->env, fixes 
by Jiri & Arnaldo ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4cde998d205894705b534878122631142a3eefe4
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 9 12:25:00 2015 -0300

      perf machine: Add pointer to sample's environment

      The 'struct machine' represents the machine where the samples were/are
      being collected, and we also have a 'struct perf_env' with extra details
      about such machine, that we were collecting at 'perf.data' creation time
      but we also needed when no perf.data file is being used, such as in
      'perf top'.

      So, get those structs closer together, as they provide a bigger picture
      of the sample's environment.

      In 'perf session', when the file argument is NULL, we can assume that
      the tool is sampling the running machine, so point machine->env to
      the global put in place in previous patches, while set it to the
      perf_header.env one when reading from a file.

      This paves the way for machine->env to be used in
      perf_event__preprocess_sample to populate addr_location.socket.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-2ajotl0khscutm68exictoy9@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit aa36ddd7afbb0a3db216c1391e28cd6d80ed1706
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 9 10:37:01 2015 -0300

      perf env: Introduce read_cpu_topology_map() method

      Out of the code to write the cpu topology map in the perf.data file
      header.

      Now if one needs the CPU topology map for the running machine, one needs
      to call perf_env__read_cpu_topology_map(perf_env) and the info will be
      stored in perf_env.cpu.

      For now we're using a global perf_env variable, that will have its
      contents freed after we run a builtin.

      v2: Check perf_env__read_cpu_topology_map() return in
          write_cpu_topology() (Kan Liang)

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441828225-667-5-git-send-email-acme@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5d8cf721cb13be92e96f22846e5bcd31040d4d0b
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Sep 11 10:49:45 2015 -0300

      perf cpu_map: Use sysfs__read_int in get_{core,socket}_id()

      We have the tools/lib/ sysfs__read_int() for that, avoid code
      duplication.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-fqg6vt5ku72pbf54ljg6tmoy@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 09f6acf2eacad3a0f9a4b9f77e0b021f0cb45780
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 10 12:20:14 2015 -0300

      tools lib api cpu: Introduce cpu.[ch] to obtain cpu related information

      E.g.:

       $ ./cpu__get_max_freq
       3200000

      It does that, as Kan's patch does, by looking at these files:

        $ cat /sys/devices/system/cpu/online
        0-3
        $ ./sysfs__read_ull
        devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq=3200000
        $

      I.e. find out the first online CPU, then read its cpufreq info.

      But do it in tools/lib/api/, so that other tools/ living code can use
      it, not just perf.

      Based-on-a-patch-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-915v4cvxqplaub8qco66b9mv@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2d729f6a8ac3edbf68de7239fab96c9736946af5
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 10 11:58:50 2015 -0300

      tools lib api fs: Introduce sysfs__read_{int,ull}()

      To read either an int or an unsigned long long value from the given
      file.

      E.g.:

        $ cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        3200000
        $ ./sysfs__read_ull
        devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq=3200000
        $

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-4a12m4d5k8m4qgc1vguocvei@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e0838e029f4f6f271d6172b18f5473558ebdea1b
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Thu Sep 10 11:03:05 2015 -0300

      perf env: Read msr pmu type from header

      Get msr pmu type when processing pmu_mappings

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-3ngei63gepydwxhvytl2wx89@xxxxxxxxxxxxxx
      [ Fixed it up wrt moving perf_env from header.h ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b60114067c656be572f0ca4030c3a2c560e7255c
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:04 2015 +0200

      perf tools: Add tools/include into tags directories

      Adding tools/include into tags directories, to have include definitions
      reachable via tags/cscope.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8168caded331a19302593a591f070136cb3a31c8
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 9 12:38:17 2015 -0300

      perf evsel: Remove forward declaration of 'struct perf_evlist'

      We have no use for it in evsel.h.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-um03yjrgyi3bj1hzqiqs4dsu@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a4978eca684a3b471f3da862f427e419283e93a3
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 9 12:14:00 2015 -0300

      perf hists browser: Fixup the "cpu" column width calculation

      Since we were not setting it to at least 3 chars ('CPU'), it was being
      reset to zero when recalculating the columns width when refreshing the
      screen, in 'perf top'. Fix it.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-iqcdnkkqm6sew06x01fbijmy@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b699869285c4f6949f281ea57ac35ea9b9c6f467
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 8 16:58:20 2015 -0300

      perf env: Adopt perf_header__set_cmdline

      Move this from two globals to perf_env global, that eventually will
      be just perf_header->env or something else, to ease the refactoring
      series, leave it as a global and go on reading more of its fields,
      not as part of the header writing process but as a perf_env init one
      that will be used for perf.data-less situations.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-2j78tdf8zn1ci0y6ji15bifj@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit eebd0bfca5cb83f6e1ef0d872a16d45af0422114
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 8 15:52:20 2015 -0300

      perf env: Rename some leftovers from rename to perf_env

      In ce80d3bef9ff ("perf tools: Rename perf_session_env to perf_env") we
      forgot to rename a few functions to the "perf_env" prefix, do it now.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-b3ui3z6ock89z1814pu2er98@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f0ce888c064e07c73a103822f2ad8e77649fd107
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 8 13:30:00 2015 -0300

      perf env: Move perf_env out of header.h and session.c into separate object

      Since it can be used separately from 'perf_session' and 'perf_header',
      move it to separate include file and object, next csets will try to move
      a perf_env__init() routine.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ff2rw99tsn670y1b6gxbwdsi@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e8210cefb7e1ec0760a6fe581ad0727a2dcf8dd1
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Sat Sep 5 20:02:20 2015 +0100

      perf tests: Introduce iterator function for tests

      In preparation for introducing more arrays of tests, e.g. "arch tests"
      (architecture-specific tests), abstract the code to iterate over the
      list of tests into a helper function.

      This way, code that uses a 'struct test' doesn't need to worry about how
      the tests are grouped together and changes to the list of tests doesn't
      require changes to the code using it.

      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Andi Kleen <andi@xxxxxxxxxxxxxx>
      Cc: Kanaka Juvva <kanaka.d.juvva@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Vikas Shivappa <vikas.shivappa@xxxxxxxxx>
      Cc: Vince Weaver <vince@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441479742-15402-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c84974ed9fb672930929e0d20ea3c366635a54aa
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 04:58:31 2015 -0400

      perf test: Add entry to test cpu topology

      This patch test cpu core_id and socket_id which are stored in perf_env.

      Commiter note:

        # perf test topo
        40: Test topology in session: Ok

        # perf test -v topo
        40: Test topology in session:
        --- start ---
        test child forked, pid 31767
        templ file: /tmp/perf-test-VTZ1PL
        CPU 0, core 0, socket 0
        CPU 1, core 1, socket 0
        CPU 2, core 0, socket 0
        CPU 3, core 1, socket 0
        test child finished with 0
        ---- end ----
        Test topology in session: Ok
        #

      Based-on-a-patch-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441357111-64522-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fbf99625b88fd8808bf2b80efac453d63cae08e8
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:45 2015 +0200

      perf tools: Switch to tracing_path interface on appropriate places

      Using tracing_path interface on several places, that more or less
      copy the functionality of tracing_path interface.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-16-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 60a1133a5b39738671eff1e4d77bedc1ee3fa528
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:44 2015 +0200

      tools lib api fs: Remove debugfs, tracefs and findfs objects

      We have all the functionality in fs.c, let's remove unneeded
      objects.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-15-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4605eab3487dc818b1f3cbee2cd139cca3564be7
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:43 2015 +0200

      tools lib api fs: Replace debugfs/tracefs objects interface with fs.c

      Switching to the fs.c related filesystem framework.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-14-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4f234f06d608635a1cff936131285a91af213b37
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:36 2015 +0200

      tools lib api fs: Make tracing_path_strerror_open message generic

      Making tracing_path__strerror_open_tp message generic by mentioning both
      debugfs/tracefs words in error message plus the tracing_path instead of
      debugfs_mountpoint.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-7-git-send-email-jolsa@xxxxxxxxxx
      [ Add comment for the ENOENT case out of this patch discussion thread ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fd405cf6cfddd300377bd5fd9b93d2ff66fbc32d
  Author: Jan Stancek <jstancek@xxxxxxxxxx>
  Date:   Wed Sep 2 10:19:17 2015 +0200

      perf tests: Print objdump/dso buffers if they don't match

      Signed-off-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Corey Ashford <cjashfor@xxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/d0f42f786bc0e965918e0f422df25617a12a4021.1441181335.git.jstancek@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit edfdb7eab0fe5f98f2951598dc679b71bdb3e16b
  Author: Jan Stancek <jstancek@xxxxxxxxxx>
  Date:   Wed Sep 2 10:19:16 2015 +0200

      perf tests: Stop reading if objdump output crossed sections

      objdump output can span across multiple sections:

        Disassembly of section .text:
          0000000000000008 <crc32c+0x8>:
             8:       48 89 e5                mov    %rsp,%rbp
             b:       53                      push   %rbx
             c:       8b 01                   mov    (%rcx),%eax
          <snip>
            6b:       90                      nop

        Disassembly of section .init.text:
          0000000000000008 <init_module+0x8>:
             8:       00 00                   add    %al,(%rax)
             a:       00 00                   add    %al,(%rax)
             c:       48 89 e5

      Stop further reading if an address starts going backwards, assuming we
      crossed sections.

      Signed-off-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Corey Ashford <cjashfor@xxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/9d1ea95e5f9884fdff1be6f761a2feabef37412c.1441181335.git.jstancek@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 06f679c18fcf414cc8462938466f8361315f18cb
  Author: Jan Stancek <jstancek@xxxxxxxxxx>
  Date:   Thu Sep 3 13:23:32 2015 +0200

      perf tests: Make objdump disassemble zero blocks

      Add -z parameter to avoid skipping zero blocks:

       ffffffff816704fe <sysret_check+0x4b>:
       ffffffff816704fe:  7b 34         jnp ffffffff81670534 
<sysret_signal+0x1c>
             ...
       ffffffff81670501 <sysret_careful>:
       ffffffff81670501:  0f ba e2 03   bt  $0x3,%edx
       ffffffff81670505:  73 11         jae ffffffff81670518 <sysret_signal>

      Signed-off-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Corey Ashford <cjashfor@xxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/130c6267fbdb9af506633a9efa06f3269ff5bd2c.1441275982.git.jstancek@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 729a7ed103ae1b04a5c87a5855885e0973161da4
  Author: Jan Stancek <jstancek@xxxxxxxxxx>
  Date:   Wed Sep 2 10:19:14 2015 +0200

      perf tests: Take into account address of each objdump line

      objdump output can contain repeated bytes. At the moment test reads all
      output sequentially, assuming each address is represented in output only
      once:

        ffffffff8164efb3 <retint_swapgs+0x9>:
        ffffffff8164efb3:  c1 5d 00 eb        rcrl   $0xeb,0x0(%rbp)
        ffffffff8164efb7:  00 4c 8b 5c        add    %cl,0x5c(%rbx,%rcx,4)

        ffffffff8164efb8 <restore_c_regs_and_iret>:
        ffffffff8164efb8:  4c 8b 5c 24 30     mov    0x30(%rsp),%r11
        ffffffff8164efbd:  4c 8b 54 24 38     mov    0x38(%rsp),%r10

      Store objdump output to buffer according to offset calculated from
      address on each line.

      Signed-off-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Corey Ashford <cjashfor@xxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/ad13289a55d6350f7717757c7e32c2d4286402bd.1441181335.git.jstancek@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 43297dda0a51e4ffed0888ce727c218cfb7474b6
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Mon Sep 14 16:06:03 2015 +0100

      KVM: arm64: add workaround for Cortex-A57 erratum #852523

      When restoring the system register state for an AArch32 guest at EL2,
      writes to DACR32_EL2 may not be correctly synchronised by Cortex-A57,
      which can lead to the guest effectively running with junk in the DACR
      and running into unexpected domain faults.

      This patch works around the issue by re-ordering our restoration of the
      AArch32 register aliases so that they happen before the AArch64 system
      registers. Ensuring that the registers are restored in this order
      guarantees that they will be correctly synchronised by the core.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 762982db33b23029e98c844611e2e8beeb75bc0d
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Thu Aug 13 13:28:42 2015 +0300

      usb: phy: phy-generic: Fix reset behaviour on legacy boot

      The gpio-desc migration done in v4.0 caused a regression
      with legacy boots due to reversed reset logic.
      e.g. omap3-beagle USB host breaks on legacy boot.

      Request the reset GPIO with GPIOF_ACTIVE_LOW flag so that
      it matches the driver logic and pin behaviour.

      Fixes: e9f2cefb0cdc ("usb: phy: generic: migrate to gpio_desc")
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+
      Tested-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 523d5daf86e5e8b540bdc91e090197b5665f0519
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 27 17:45:37 2015 +0200

      usb: musb: ux500: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 6fc6f4b87cb32fcd0bf5e5bce434301958a3b624
  Author: Pascal Huerst <pascal.huerst@xxxxxxxxx>
  Date:   Thu Sep 3 10:50:58 2015 +0200

      usb: musb: Disable interrupts on suspend, enable them on resume

      In certain situations, an interrupt triggers on resume, before 
musb_start()
      has been called. This has been observed to cause enumeration issues after
      suspend/resume cycles with AM335x.

      Signed-off-by: Pascal Huerst <pascal.huerst@xxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 6527cc27761a124de8c08e6488ce17fdcc74dbba
  Author: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
  Date:   Sun Sep 6 01:11:51 2015 +0300

      usb: gadget: amd5536udc: fix error handling in udc_pci_probe()

      If a failure happens early in udc_pci_probe(), error handling code
      just kfree(dev) and returns. The patch adds proper resource
      deallocations in udc_pci_probe() itself,
      since udc_pci_remove() is not suitabe to be called so early
      in initialization process.

      By the way, iounmap(dev->regs) is replaced by iounmap(dev->virt_addr)
      in udc_pci_remove() for clarity.

      Found by Linux Driver Verification project (linuxtesting.org).

      Signed-off-by: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 88ccdbd5fc59ce8c69261a20746ca2533be7e358
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 10:37:39 2015 -0700

      usb: phy: fix phy-qcom-8x16-usb build

      Fix build errors that happen when USB_QCOM_8X16_PHY=y and EXTCON=m:

      drivers/built-in.o: In function `phy_8x16_init':
      phy-qcom-8x16-usb.c:(.text+0x86ef4): undefined reference to 
`extcon_get_cable_state'
      drivers/built-in.o: In function `phy_8x16_probe':
      phy-qcom-8x16-usb.c:(.text+0x870bf): undefined reference to 
`extcon_get_edev_by_phandle'
      phy-qcom-8x16-usb.c:(.text+0x87133): undefined reference to 
`extcon_register_interest'
      phy-qcom-8x16-usb.c:(.text+0x87151): undefined reference to 
`extcon_unregister_interest'
      drivers/built-in.o: In function `phy_8x16_remove':
      phy-qcom-8x16-usb.c:(.text+0x872ec): undefined reference to 
`extcon_unregister_interest'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 40af177efc9385af15c49a40976f71e58e6af418
  Author: Bin Liu <b-liu@xxxxxx>
  Date:   Mon Sep 14 09:12:34 2015 -0500

      usb: musb: ensure in peripheral mode when checking session

      The change ensures otg is not in a A- state when checking for VBUS in
      peripheral mode.

      musb_start() where VBUS checking is in can be called in many situations.
      One example is in babble recovery routine, in which otg is transitioning
      from A-HOST to A-WAIT-BCON, but VBUS discharge takes time, so
      musb->is_active could be set to 1 due to this improper checking, then it
      causes musb_bus_suspend() failed which leads to warning log message
      flooding.

      Signed-off-by: Bin Liu <b-liu@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 51256484c033a6d57d71aa8f788c24e5dc82348a
  Merge: edb9272 0c06729
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Sep 14 17:07:35 2015 +0200

      Merge tag 'kvm-arm-for-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into kvm-master

      KVM/ARM changes for 4.3-rc2

      - Fix timer interrupt injection after the rework
        that went in during the merge window
      - Reset the timer to zero on reboot
      - Make sure the TCR_EL2 RES1 bits are really set to 1
      - Fix a PSCI affinity bug for non-existing vcpus

  commit edb9272f35d8bc97c86101a13f67d0ba16f3eecc
  Author: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:38:51 2015 +0800

      KVM: fix polling for guest halt continued even if disable it

      If there is already some polling ongoing, it's impossible to disable the
      polling, since as soon as somebody sets halt_poll_ns to 0, polling will
      never stop, as grow and shrink are only handled if halt_poll_ns is != 0.

      This patch fix it by reset vcpu->halt_poll_ns in order to stop polling
      when polling is disabled.

      Reported-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit e2ae0692bf6f71c8b841889b655d0dc08413e4e3
  Author: Felipe Balbi <balbi@xxxxxx>
  Date:   Tue Aug 25 12:07:45 2015 -0500

      usb: dwc3: omap: enable irqs lately

      If we enable IRQs before requesting our
      extcon device, we might fall into a situation
      where and IRQ fires before we're ready to
      handle it.

      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit e4c1b1ba7f663fd77204201eef83baf58e2e5777
  Author: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
  Date:   Fri Aug 21 11:01:29 2015 +0200

      usb: gadget: fix possible regression introduced with ep->claimed

      This patch fixes possible regression introduced by
      patch reworking endpoint claiming mechanism. It restores
      setring ep->driver_data to NULL in usb_ep_autoconfig_reset(),
      which was removed by patch commit cc476b42a39d.

      Fixes: cc476b42a39d ("usb: gadget: encapsulate endpoint
        claiming mechanism")
      Reported-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit f5cbb182586ea36c6ad0e90e3534d18a5e9af094
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:53 2015 +0100

      thermal: power_allocator: don't require tzp to be present for the thermal 
zone

      Thermal zones created using thermal_zone_device_create() may not have
      tzp.  As the governor gets its parameters from there, allocate it while
      the governor is bound to the thermal zone so that it can operate in it.
      In this case, tzp is freed when the thermal zone switches to another
      governor.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 8b7b390f805f09ff252351468a79ebabde1ab55a
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:52 2015 +0100

      thermal: power_allocator: relax the requirement of two passive trip points

      The power allocator governor currently requires that the thermal zone
      has at least two passive trip points.  If there aren't, the governor
      refuses to bind to the thermal zone.

      This commit relaxes that requirement.  Now the governor will bind to all
      thermal zones regardless of how many trip points they have.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit e055bb0f9a6e5c09bedf41c2a5b881edbd7f2ed0
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:51 2015 +0100

      thermal: power_allocator: relax the requirement of a sustainable_power in 
tzp

      The power allocator governor currently requires that a sustainable power
      is passed as part of the thermal zone's thermal zone parameters.  If
      that parameter is not provided, it doesn't register with the thermal
      zone.

      While this parameter is strongly recommended for optimal performance, it
      doesn't need to be mandatory.  Relax the requirement and allow the
      governor to bind to thermal zones that don't provide it by estimating it
      from the cooling devices' power model.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit c973c3bcec3752455c4d7545edd42935cd7942d9
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:50 2015 +0100

      thermal: Add a function to get the minimum power

      The thermal core already has a function to get the maximum power of a
      cooling device: power_actor_get_max_power().  Add a function to get the
      minimum power of a cooling device.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit d0a9964e98731c708500a2e712f28f9d39183647
  Author: Mike Travis <travis@xxxxxxx>
  Date:   Sat Sep 12 21:51:10 2015 -0500

      x86/platform/uv: Implement simple dump failover if kdump fails

      The ability to trigger a kdump using the system NMI command
      was added by

          commit 12ba6c990fab ("x86/UV: Add kdump to UV NMI handler")
          Author: Mike Travis <travis@xxxxxxx>
          Date:   Mon Sep 23 16:25:03 2013 -0500

      This is useful because when kdump is working the information
      gathered is more informative than the original per CPU stack
      traces or "dump" option.  However a number of things can go
      wrong with kdump and then the stack traces are more useful than
      nothing.

      The two most common reasons for kdump to not be available are:

        1) if a problem occurs during boot before the kdump service is
           started, or
        2) the kdump daemon failed to start.

      In either case the call to crash_kexec() returns unexpectedly.

      When this happens uv_nmi_kdump() also sets the
      uv_nmi_kexec_failed flag which causes the slave CPU's to also
      return to the NMI handler. Upon this unexpected return to the
      NMI handler, the NMI handler will revert to the "dump" action
      which uses show_regs() to obtain a process trace dump for all
      the CPU's.

      Other minor changes:
          The "dump" action now generates both the show_regs() stack trace
          and show instruction pointer information.  Whereas the "ips"
          action only shows instruction pointers for non-idle CPU's.  This
          is more like an abbreviated "ps" display.

          Change printk(KERN_DEFAULT...) --> pr_info()

      Signed-off-by: Mike Travis <travis@xxxxxxx>
      Signed-off-by: George Beshers <gbeshers@xxxxxxx>
      Cc: Alex Thorlton <athorlton@xxxxxxx>
      Cc: Dimitri Sivanich <sivanich@xxxxxxx>
      Cc: Hedi Berriche <hedi@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Russ Anderson <rja@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 205ee117d4dc4a11ac3bd9638bb9b2e839f4de9a
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Wed Sep 9 02:57:21 2015 +0200

      netfilter: nf_log: don't zap all loggers on unregister

      like nf_log_unset, nf_log_unregister must not reset the list of loggers.
      Otherwise, a call to nf_log_unregister() will render loggers of other nf
      protocols unusable:

      iptables -A INPUT -j LOG
      modprobe nf_log_arp ; rmmod nf_log_arp
      iptables -A INPUT -j LOG
      iptables: No chain/target/match by that name

      Fixes: 30e0c6a6be ("netfilter: nf_log: prepare net namespace support for 
loggers")
      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit cda34fc774d114afe98515a21c2063a803f922bc
  Author: Juergen Gross <jgross@xxxxxxxx>
  Date:   Mon Sep 14 12:42:23 2015 +0200

      x86/paravirt: Remove the unused pv_time_ops::get_tsc_khz method

      It's not used anywhere.

      Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
      Acked-by: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: akataria@xxxxxxxxxx
      Cc: chrisw@xxxxxxxxxxxx
      Cc: jeremy@xxxxxxxx
      Cc: virtualization@xxxxxxxxxxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442227343-403-1-git-send-email-jgross@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit bf950040a53da35522e38066d9eb6ab7a1c9d136
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Fri Sep 11 18:22:02 2015 +0100

      arm64: pgtable: use a single bit for PTE_WRITE regardless of DBM

      Depending on CONFIG_ARM64_HW_AFDBM, we use either bit 57 or 51 of the
      pte to represent PTE_WRITE. Given that bit 51 is reserved prior to
      ARMv8.1, we can just use that bit regardless of the config option. That
      also matches what happens if a kernel configured with ARM64_HW_AFDBM=y
      is run on a CPU without the DBM functionality.

      Cc: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 62d96c71d248834af2891293dc23cc344ae2ec36
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Fri Sep 11 18:22:01 2015 +0100

      arm64: Fix pte_modify() to preserve the hardware dirty information

      The pte_modify() function with hardware AF/DBM enabled must transfer the
      hardware dirty information to the software PTE_DIRTY bit. However, it
      was setting this bit in newprot and the mask does not cover such bit.
      This patch sets PTE_DIRTY on the original pte which will be preserved in
      the returned value.

      Fixes: 2f4b829c625e ("arm64: Add support for hardware updates of the 
access and dirty pte bits")
      Cc: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit b847415ce96efef819534b230d84695b1bc6d36b
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Fri Sep 11 18:22:00 2015 +0100

      arm64: Fix the pte_hw_dirty() check when AF/DBM is enabled

      Commit 2f4b829c625e ("arm64: Add support for hardware updates of the
      access and dirty pte bits") introduced support for handling hardware
      updates of the access flag and dirty status. The PTE is automatically
      dirtied in hardware (if supported) by clearing the PTE_RDONLY bit when
      the PTE_DBM/PTE_WRITE bit is set. The pte_hw_dirty() macro was added to
      detect a hardware dirtied pte. The pte_dirty() macro checks for both
      software PTE_DIRTY and pte_hw_dirty().

      Functions like pte_modify() clear the PTE_RDONLY bit since it is meant
      to be set in set_pte_at() when written to memory. In such cases,
      pte_hw_dirty() would return true even though such pte is clean. This
      patch changes pte_hw_dirty() to test the PTE_DBM/PTE_WRITE bit together
      with PTE_RDONLY.

      Fixes: 2f4b829c625e ("arm64: Add support for hardware updates of the 
access and dirty pte bits")
      Reported-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit ba9cc453c400049f632d4eb2f2835e2f96654ddc
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Sep 11 08:49:47 2015 +0100

      arm64: dma-mapping: check whether cma area is initialized or not

      If CMA is turned on and CMA size is set to zero, kernel should
      behave as if CMA was not enabled at compile time.
      Every dma allocation should check existence of cma area
      before requesting memory.

      Arm has done this by commit e464ef16c4f0 ("arm: dma-mapping: add
      checking cma area initialized"), also do this for arm64.

      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit ef78f2a4bf84d8db9f36868decca2dc24e02a6af
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:31 2015 -0700

      x86/fpu: Check CPU-provided sizes against struct declarations

      We now have C structures defined for each of the XSAVE state
      components that we support.  This patch adds checks during our
      verification pass to ensure that the CPU-provided data
      enumerated in CPUID leaves matches our C structures.

      If not, we warn and dump all the XSAVE CPUID leaves.

      Note: this *actually* found an inconsistency with the MPX
      'bndcsr' state.  The hardware pads it out differently from
      our C structures.  This patch caught it and warned.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233131.A8DB36DA@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e6e888f96b4a531886f3bf29ba9af0b6f1026365
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:30 2015 -0700

      x86/fpu: Check to ensure increasing-offset xstate offsets

      The xstate CPUID leaves enumerate where each state component is
      inside the XSAVE buffer, along with the size of the entire
      buffer.  Our new XSAVE sanity-checking code extrapolates an
      expected _total_ buffer size by looking at the last component
      that it encounters.

      That method requires that the highest-numbered component also
      be the one with the highest offset.  This is a pretty safe
      assumption, but let's add some code to ensure it stays true.

      To make this check work correctly, we also need to ensure we
      only consider the offsets from enabled features because the
      offset register (ebx) will return 0 on unsupported features.

      This also means that we will preserve the -1's that we
      initialized xstate_offsets/sizes[] with.  That will help
      find bugs.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233130.0843AB15@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 65ac2e9baa7deebe3e9588769d44d85555e05619
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:30 2015 -0700

      x86/fpu: Correct and check XSAVE xstate size calculations

      Note: our xsaves support is currently broken and disabled.  This
      patch does not fix it, but it is an incremental improvement.

      This might be useful to someone backporting the entire set of
      XSAVES patches at some point, but it should not be backported
      alone.

      Ingo said he wanted something like this (bullets 2 and 3):

        http://lkml.kernel.org/r/20150808091508.GB32641@xxxxxxxxx

      There are currently two xsave buffer formats: standard and
      compacted.  The standard format is waht 'XSAVE' and 'XSAVEOPT'
      produce while 'XSAVES' and 'XSAVEC' produce a compacted-formet
      buffer.  (The kernel never uses XSAVEC)

      But, the XSAVES buffer *ALSO* contains "system state components"
      which are never saved by a plain XSAVE.  So, XSAVES has two
      things that might make its buffer differently-sized from an
      XSAVE-produced one.

      The current code assumes that an XSAVES buffer's size is simply
      the sum of the sizes of the (user) states which are supported.
      This seems to work in most cases, but it is not consistent with
      what the SDM says, and it breaks if we 'align' a component in
      the buffer.  The calculation is also unnecessary work since the
      CPU *tells* us the size of the buffer directly.

      This patch just reads the size of the buffer right out of the
      CPUID leaf instead of trying to derive it.

      But, blindly trusting the CPU like this is dangerous.  We add
      a verification pass in do_extra_xstate_size_checks() to ensure
      that the size we calculate matches with what we see from the
      hardware.  When it comes down to it, we trust but verify the
      CPU.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233130.234FE1EC@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 060dd0f712562925662c65b90d225d82304764f7
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:29 2015 -0700

      x86/fpu: Add C structures for AVX-512 state components

      AVX-512 has 3 separate state components:

        1. opmask registers
        2. zmm upper half of registers 0-15
        3. new zmm registers (16-31)

      This patch adds C structures for the three components along with
      a few comments mostly lifted from the SDM to explain what they
      do.  This will allow us to check our structures against what the
      hardware tells us about the sizes of the components.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233129.F2433B98@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 83aa3c45307228af4329cbb915a2f2142e5479ad
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:29 2015 -0700

      x86/fpu: Rework YMM definition

      We are about to rework all of the "extended state" definitions.
      This makes the 'ymm' naming consistent with the AVX-512 types
      we will introduce later.

      We also add a convenience type: "reg_128_bit" so that we do
      not have to spell out our arithmetic.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233129.B4EB045F@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1126cb4535c4ff172c37a412a6bd25d6b47a1901
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:29 2015 -0700

      x86/fpu/mpx: Rework MPX 'xstate' types

      MPX includes two separate "extended state components".  There is
      no real need to have an 'mpx_struct' because we never really
      manage the states together.

      We also separate out the actual data in 'mpx_bndcsr_state' from
      the padding.  We will shortly be checking the state sizes
      against our structures and need them to match.  For consistency,
      we also ensure to prefix these types with 'mpx_'.

      Lastly, we add some comments to mirror some of the descriptions
      in the Intel documents (SDM) of the various state components.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233129.384B73EB@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 633d54c47a5bedfb42f10e6a63eeeebd35abdb4c
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:29 2015 -0700

      x86/fpu: Add xfeature_enabled() helper instead of test_bit()

      We currently use test_bit() in a few places to see if an
      xfeature is enabled.  It ends up being a bit ugly because
      'xfeatures_mask' is a u64 and test_bit wants an 'unsigned long'
      so it requires a cast.  The *_bit() functions are also
      techincally atomic, which we have no need for here.

      So, remove the test_bit()s and replace with the new
      xfeature_enabled() helper.

      This also provides a central place to add a comment about the
      future need to support 'system xstates'.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233129.B1534F86@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ee9ae257eb17d3426ee9ab91449a3aa443298b36
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:28 2015 -0700

      x86/fpu: Remove 'xfeature_nr'

      xfeature_nr ended up being initialized too late for me to
      use it in the "xsave size sanity check" patch which is
      later in the series.  I tried to move around its initialization
      but realized that it was just as easy to get rid of it.

      We only have 9 XFEATURES.  Instead of dynamically calculating
      and storing the last feature, just use the compile-time max:
      XFEATURES_NR_MAX.  Note that even with 'xfeatures_nr' we can
      had "holes" in the xfeatures_mask that we had to deal with.

      We also change a 'leaf' variable to be a plain 'i'.  Although
      it is used to grab a cpuid leaf in this one loop, all of the
      other loops just use an 'i' and I find it much more obvious
      to keep the naming consistent across all the similar loops.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233128.3F30DF5A@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8a93c9e0dca131a0bf330ea9d1e57c1bcf3824ad
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:28 2015 -0700

      x86/fpu: Rework XSTATE_* macros to remove magic '2'

      The 'xstate.c' code has a bunch of references to '2'.  This
      is because we have a lot more work to do for the "extended"
      xstates than the "legacy" ones and state component 2 is the
      first "extended" state.

      This patch replaces all of the instances of '2' with
      FIRST_EXTENDED_XFEATURE, which clearly explains what is
      going on.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233128.A8C0BF51@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dad8c4fe8530f28dde73dadd1d588e3aaa507562
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:27 2015 -0700

      x86/fpu: Rename XFEATURES_NR_MAX

      This is a logcal followon to the last patch.  It makes the
      XFEATURE_MAX naming consistent with the other enum values.
      This is what Ingo suggested.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233127.A541448F@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d91cab78133d33b1dfd3d3fa7167fcbf74fb5f99
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:26 2015 -0700

      x86/fpu: Rename XSAVE macros

      There are two concepts that have some confusing naming:
       1. Extended State Component numbers (currently called
          XFEATURE_BIT_*)
       2. Extended State Component masks (currently called XSTATE_*)

      The numbers are (currently) from 0-9.  State component 3 is the
      bounds registers for MPX, for instance.

      But when we want to enable "state component 3", we go set a bit
      in XCR0.  The bit we set is 1<<3.  We can check to see if a
      state component feature is enabled by looking at its bit.

      The current 'xfeature_bit's are at best xfeature bit _numbers_.
      Calling them bits is at best inconsistent with ending the enum
      list with 'XFEATURES_NR_MAX'.

      This patch renames the enum to be 'xfeature'.  These also
      happen to be what the Intel documentation calls a "state
      component".

      We also want to differentiate these from the "XSTATE_*" macros.
      The "XSTATE_*" macros are a mask, and we rename them to match.

      These macros are reasonably widely used so this patch is a
      wee bit big, but this really is just a rename.

      The only non-mechanical part of this is the

        s/XSTATE_EXTEND_MASK/XFEATURE_MASK_EXTEND/

      We need a better name for it, but that's another patch.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233126.38653250@xxxxxxxxxxxxxxxxxx
      [ Ported to v4.3-rc1. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f454b478861325f067fd58ba7ee9f1b5c4a9d6a0
  Author: Jan Beulich <JBeulich@xxxxxxxx>
  Date:   Wed Sep 2 09:45:58 2015 -0600

      x86/ldt: Fix small LDT allocation for Xen

      While the following commit:

        37868fe113 ("x86/ldt: Make modify_ldt synchronous")

      added a nice comment explaining that Xen needs page-aligned
      whole page chunks for guest descriptor tables, it then
      nevertheless used kzalloc() on the small size path.

      As I'm unaware of guarantees for kmalloc(PAGE_SIZE, ) to return
      page-aligned memory blocks, I believe this needs to be switched
      back to __get_free_page() (or better get_zeroed_page()).

      Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: David Vrabel <david.vrabel@xxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/55E735D6020000780009F1E6@xxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 75933433d666c2ab13a7a93f4ec1e6f000a94ffc
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:25 2015 -0700

      x86/fpu: Remove partial LWP support definitions

      LightWeight Profiling was evidently an AMD profiling feature
      that we never got around to implementing.  Remove the references
      to it.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233125.7E602284@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4109ca066b6b899ac7549bf3aac94b178ac95891
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:25 2015 -0700

      x86/fpu: Remove XSTATE_RESERVE

      The original purpose of XSTATE_RESERVE was to carve out space
      to store all of the possible extended state components that
      get saved with the XSAVE instruction(s).

      However, we are now almost entirely dynamically allocating
      the buffers we use for XSAVE by placing them at the end of
      the task_struct and them sizing them at boot.  The one
      exception for that is the init_task.

      The maximum extended state component size that we have today
      is on systems with space for AVX-512 and Memory Protection
      Keys: 2696 bytes.  We have reserved a PAGE_SIZE buffer in
      the init_task via fpregs_state->__padding.

      This check ensures that even if the component sizes or
      layout were changed (which we do not expect), that we will
      still not overflow the init_task's buffer.

      In the case that we detect we might overflow the buffer,
      we completely disable XSAVE support in the kernel and try
      to boot as if we had 'legacy x87 FPU' support in place.
      This is a crippled state without any of the XSAVE-enabled
      features (MPX, AVX, etc...).  But, it at least let us
      boot safely.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233125.D948D475@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0a265375028b241a9173b7c569dd2368ba97fcd4
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:24 2015 -0700

      x86/fpu: Move XSAVE-disabling code to a helper

      When we want to _completely_ disable XSAVE support as far as
      the kernel is concerned, we have a big set of feature flags
      to clear.  We currently only do this in cases where the user
      asks for it to be disabled, but we are about to expand the
      places where we do it to handle errors too.

      Move the code in to xstate.c, and put it in the xstate.h
      header.  We will use it in the next patch too.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233124.EA9A70E5@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b0815359590f496f80e355a74319b6dc77010951
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:24 2015 -0700

      x86/fpu: Print xfeature buffer size in decimal

      This is utterly a personal taste thing, but I find it way easier
      to read structure sizes in decimal than in hex.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233124.1A8B04A8@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8ece249a811e93d3f60e3f1ebdc86c7e7a95bdbf
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:11:42 2015 +0100

      acpi/apei: Use appropriate pgprot_t to map GHES memory

      If the ACPI APEI firmware handles hardware error first (called
      "firmware first handling"), the firmware updates the GHES memory
      region with hardware error record (called "generic hardware
      error record"). Essentially the firmware writes hardware error
      records in the GHES memory region, triggers an NMI/interrupt,
      then the GHES driver goes off and grabs the error record from
      the GHES region.

      The kernel currently maps the GHES memory region as cacheable
      (PAGE_KERNEL) for all architectures. However, on some arm64
      platforms, there is a mismatch between how the kernel maps the
      GHES region (PAGE_KERNEL) and how the firmware maps it
      (EFI_MEMORY_UC, ie. uncacheable), leading to the possibility of
      the kernel GHES driver reading stale data from the cache when it
      receives the interrupt.

      With stale data being read, the kernel is unaware there is new
      hardware error to be handled when there actually is; this may
      lead to further damage in various scenarios, such as error
      propagation caused data corruption. If uncorrected error (such
      as double bit ECC error) happened in memory operation and if the
      kernel is unaware of such an event happening, errorneous data may
      be propagated to the disk.

      Instead GHES memory region should be mapped with page protection
      type according to what is returned from arch_apei_get_mem_attribute().

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      [ Small stylistic tweaks. ]
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441372302-23242-3-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 89e44b51cc0db50ea4b5bbb5d582c4db88bbaed8
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:11:41 2015 +0100

      arm64, acpi/apei: Implement arch_apei_get_mem_attributes()

      Table 8 of UEFI 2.5 section 2.3.6.1 defines mappings from EFI
      memory types to MAIR attribute encodings for arm64.

      If the physical address has memory attributes defined by EFI
      memmap as EFI_MEMORY_[UC|WC|WT], return approprate page
      protection type according to the UEFI spec. Otherwise, return
      PAGE_KERNEL.

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      [ Small stylistic tweaks. ]
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Acked-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441372302-23242-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0e2815de552a638295cfdaf0865e575573bf263e
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 09:12:44 2015 +0200

      x86/headers: Clean up too long lines

      Signed-off-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: bp@xxxxxxxxx
      Cc: brgerst@xxxxxxxxx
      Cc: dvlasenk@xxxxxxxxxx
      Cc: luto@xxxxxxxxxxxxxx
      Cc: mikko.rapeli@xxxxxx
      Cc: oleg@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/20150909071244.GM3644@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit eef7635a22f6b144206b5ca2f1398f637acffc4d
  Author: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
  Date:   Fri Sep 11 09:34:26 2015 +0530

      clockevents: Remove unused set_mode() callback

      All users are migrated to the per-state callbacks, get rid of the
      unused interface and the core support code.

      Signed-off-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linaro-kernel@xxxxxxxxxxxxxxxx
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/fd60de14cf6d125489c031207567bb255ad946f6.1441943991.git.viresh.kumar@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 04a6b8bfee06e309be7e9ae4527cdab19c081761
  Author: Mathias Krause <mathias.krause@xxxxxxxxxxx>
  Date:   Fri Sep 11 09:57:20 2015 +0200

      xfrm6: Fix ICMPv6 and MH header checks in _decode_session6

      Ensure there's enough data left prior calling pskb_may_pull(). If
      skb->data was already advanced, we'll call pskb_may_pull() with a
      negative value converted to unsigned int -- leading to a huge
      positive value. That won't matter in practice as pskb_may_pull()
      will likely fail in this case, but it leads to underflow reports on
      kernels handling such kind of over-/underflows, e.g. a PaX enabled
      kernel instrumented with the size_overflow plugin.

      Reported-by: satmd <satmd@xxxxxxx>
      Reported-and-tested-by: Marcin Jurkowski <marcin1j@xxxxxxxxx>
      Signed-off-by: Mathias Krause <mathias.krause@xxxxxxxxxxx>
      Cc: PaX Team <pageexec@xxxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit 1e6428124fe22906be0de1622c8fed8e50e5de05
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 08:58:10 2015 +0200

      x86/vm86: Fix the misleading CONFIG_VM86 Kconfig help text

      The CONFIG_VM86 Kconfig help text is actively misleading, so fix it:

        - Don't mark it 'obsolete' in the text as we'll support the ABI as long 
as CPUs
          support it.

        - Qualify the part about software emulation and mention that for some 
apps you
          want a real vm86 mode.

        - Don't scare users away from the option, instead explain what it does.

      Reported-by: Stas Sergeev <stsp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Austin S Hemmelgarn <ahferroin7@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b838c950b397ebed94eb11b473f1f17428a1443d
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:20:25 2015 +0200

      soc: dove: Prepare irq handler for irq argument removal

      The irq argument of most interrupt flow handlers is unused or merily
      used instead of a local variable. The handlers which need the irq
      argument can retrieve the irq number from the irq descriptor.

      Search and update was done with coccinelle and the invaluable help of
      Julia Lawall.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>

  commit 5230347ea70a811f0a526e8e4f0f529ac31b7d18
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:27:13 2015 +0200

      soc: dove: Use irq_desc_get_xxx() to avoid redundant lookup of irq_desc

      Search and replace done with coccinelle

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>

  commit 391de7f9ef9e6a500343d977ccd037b70e62aa45
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:17:00 2015 +0200

      powerpc/cell: Prepare irq handler for irq argument removal

      The irq argument of most interrupt flow handlers is unused or merily
      used instead of a local variable. The handlers which need the irq
      argument can retrieve the irq number from the irq descriptor.

      Search and update was done with coccinelle and the invaluable help of
      Julia Lawall.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 0a0dbd92584061549d9775030269365dc16ad289
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:13:42 2015 +0200

      powerpc/85xx: Prepare irq handlers for irq argument removal

      The irq argument of most interrupt flow handlers is unused or merily
      used instead of a local variable. The handlers which need the irq
      argument can retrieve the irq number from the irq descriptor.

      Search and update was done with coccinelle and the invaluable help of
      Julia Lawall.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Scott Wood <scottwood@xxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 5aac2d3368210f15c2fc73f158e2110a0bb611ca
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:11:26 2015 +0200

      powerpc/mpc5121_ads_cpld: Prepare irq handler for irq argument removal

      The irq argument of most interrupt flow handlers is unused or merily
      used instead of a local variable. The handlers which need the irq
      argument can retrieve the irq number from the irq descriptor.

      Search and update was done with coccinelle and the invaluable help of
      Julia Lawall.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Anatolij Gustschin <agust@xxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 2e586a7e017a502410ba1c1a7411179e1d3fbb2b
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Mon Sep 14 01:17:43 2015 -0700

      drm/vmwgfx: Map the fifo as cached

      On the guest kernel side, previously the FIFO has been mapped write-
      combined. This has worked since VMs up to now has not honored the mapping
      type and mapped the FIFO cached anyway. Since the FIFO is accessed cached
      by the CPU on the virtual device side, this leads to inconsistent
      mappings once the guest starts to honor the mapping types.

      So ask for cached mappings when we map the FIFO. We do this by
      using ioremap_cache() instead of ioremap_wc(), and remove the MTRR setup.
      On the TTM side, MOBs, GMRs and VRAM buffers are already requesting
      cached mappings for kernel- and user-space.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 54c12bc374408faddbff75dbf1a6167c19af39c4
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Mon Sep 14 01:13:11 2015 -0700

      drm/vmwgfx: Fix up user_dmabuf refcounting

      If user space calls unreference on a user_dmabuf it will typically
      kill the struct ttm_base_object member which is responsible for the
      user-space visibility. However the dmabuf part may still be alive and
      refcounted. In some situations, like for shared guest-backed surface
      referencing/opening, the driver may try to reference the
      struct ttm_base_object member again, causing an immediate kernel warning
      and a later kernel NULL pointer dereference.

      Fix this by always maintaining a reference on the struct
      ttm_base_object member, in situations where it might subsequently be
      referenced.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Brian Paul <brianp@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 19ab6bc5674a30fdb6a2436b068d19a3c17dc73e
  Author: Liu.Zhao <lzsos369@xxxxxxx>
  Date:   Mon Aug 24 08:36:12 2015 -0700

      USB: option: add ZTE PIDs

      This is intended to add ZTE device PIDs on kernel.

      Signed-off-by: Liu.Zhao <lzsos369@xxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      [johan: sort the new entries ]
      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>

  commit 91a4dc9f71e4b8f9b8da547d19f80e7be89d7539
  Merge: ebfb498 caa4704
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Sep 14 09:29:22 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fix from Arnaldo Carvalho de Melo:

        - The values of _SC_NPROCESSORS_CONF and _SC_NPROCESSORS_ONLN 
(sysconf(3)) were
          being read from perf.data files in the inverse order they are 
written, fix it.
          (Arnaldo Carvalho de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fa84b52cb681b27e6b5e003457562e25a239b9c4
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Sep 8 16:46:40 2015 +0200

      pinctrl: samsung: s3c24xx: fix syntax error

      ?SYNTAX ERROR

      irq_desc_get_irq_chip() does not exist. It should
      be irq_desc_get_chip(). Tested by compiling
      s3c2410_defconfig.

      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reported-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 942cde724075f840ded89390b10dce1a47a4d712
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Thu Sep 3 10:34:30 2015 -0700

      pinctrl: core: Warn about NULL gpio_chip in pinctrl_ready_for_gpio_range()

      If the gpio driver is confused about the numbers for gpio-ranges,
      pinctrl_ready_for_gpio_range() may get called with invalid GPIO
      causing a NULL pointer exception. Let's instead provide a warning
      that allows fixing the problem and return with error.

      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 163dc9f39a26b41fc49319fce4145b35f9705789
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Sat Aug 1 13:22:38 2015 +0900

      pinctrl: join lines that can be a single line within 80 columns

      There is no reason to break a line shorter than 80 columns.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5a99233e9bcacc7ea23e173a75bbb7301abd3e6f
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Mon Aug 24 23:12:27 2015 +0200

      pinctrl: digicolor: convert null test to IS_ERR test

      Since commit 323de9efdf3e ("pinctrl: make pinctrl_register() return proper
      error code"), pinctrl_register returns an error code rather than NULL on
      failure.  Update a driver that was introduced more recently.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@
      expression e,e1,e2;
      @@

      e = pinctrl_register(...)
      ... when != e = e1
      if (
      -   e == NULL
      +   IS_ERR(e)
         ) {
           ...
           return
      -      e2
      +      PTR_ERR(e)
           ;
           }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Acked-by: Baruch Siach <baruch@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d259ec26a6c541a5437e9ed0a1e1891342af3cff
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Mon Aug 24 23:12:26 2015 +0200

      pinctrl: qcom: ssbi: convert null test to IS_ERR test

      Since commit 323de9efdf3e ("pinctrl: make pinctrl_register() return proper
      error code"), pinctrl_register returns an error code rather than NULL on
      failure.  Update some drivers that were introduced more recently.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@
      expression e,e1,e2;
      @@

      e = pinctrl_register(...)
      ... when != e = e1
      if (
      -   e == NULL
      +   IS_ERR(e)
         ) {
           ...
           return
      -      e2
      +      PTR_ERR(e)
           ;
           }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 46d4f7c25e1bb59b1663878b843a7ec06eaf5806
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Thu Sep 3 10:31:27 2015 -0700

      gpio: omap: Fix GPIO numbering for deferred probe

      If gpio-omap probe fails with -EPROBE_DEFER, the GPIO numbering
      keeps increasing. Only increase the gpio count if gpiochip_add()
      was successful as otherwise the numbers will increase for each
      probe attempt.

      Cc: Javier Martinez Canillas <javier@xxxxxxxxxxxx>
      Cc: Kevin Hilman <khilman@xxxxxxxxxxxxxxxxxxx>
      Cc: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Reviewed-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ae80d64ee8c88b77c58254bcdc5c0981faab672d
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 10:46:15 2015 +0200

      Documentation: gpio: Explain that <function>-gpio is also supported

      The GPIO documentation mentions that GPIOs are mapped by defining a
      <function>-gpios property in the consumer device's node but a -gpio
      sufix is also supported after commit:

      dd34c37aa3e8 ("gpio: of: Allow -gpio suffix for property names")

      Update the documentation to match the implementation.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5e606abef57a89b3ca25f5d97a953c6cdad7cbac
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Fri Aug 28 11:44:49 2015 -0700

      gpio: omap: Fix gpiochip_add() handling for deferred probe

      Currently we gpio-omap breaks if gpiochip_add() returns -EPROBE_DEFER:

      [    0.570000] gpiochip_add: GPIOs 0..31 (gpio) failed to register
      [    0.570000] omap_gpio 48310000.gpio: Could not register gpio chip -517
      ...
      [    3.670000] omap_gpio 48310000.gpio: Unbalanced pm_runtime_enable!

      Let's fix the issue by adding the missing pm_runtime_put() on error.

      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Javier Martinez Canillas <javier@xxxxxxxxxxxx>
      Cc: Kevin Hilman <khilman@xxxxxxxxxxxxxxxxxxx>
      Cc: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Acked-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e799f35c32ea940222b568abf38d6abcab7fa8c1
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sun Aug 30 23:58:44 2015 +0200

      gpio: sx150x: Remove unnecessary MODULE_ALIAS()

      The driver has a I2C device id table that is used to create the module
      aliases and also "sx150x" isn't a supported I2C id, so it's never used.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 87e77e46c61a9333227ab41cdefb1875758a4f13
  Author: Dirk Behme <dirk.behme@xxxxxxxxx>
  Date:   Wed Sep 2 20:07:10 2015 +0200

      Documentation: gpio: board: describe the con_id parameter

      The con_id parameter has to match the GPIO description and is 
automatically
      extended by the GPIO suffix if not NULL. I had to look into the code to
      understand this and properly find the GPIO I've been looking for, so 
document
      this.

      Signed-off-by: Dirk Behme <dirk.behme@xxxxxxxxx>
      Acked-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 69de52ba321dda8dd7f632d1e480983494325ba0
  Author: Dirk Behme <dirk.behme@xxxxxxxxx>
  Date:   Wed Sep 2 20:07:09 2015 +0200

      Documentation: gpio: board: add flags parameter to gpiod_get*() functions

      With commit 39b2bbe3d715 ("gpio: add flags argument to gpiod_get*()
      functions") the gpiod_get*() functions got a 'flags' parameter. Reflect
      this in the documentation, too.

      Signed-off-by: Dirk Behme <dirk.behme@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e20538b82f1ffcc06e68feb117f24f211cff7a4d
  Author: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
  Date:   Fri Aug 28 09:44:18 2015 -0700

      gpio: Propagate errors from chip->get()

      It's possible to have gpio chips hanging off unreliable remote buses
      where the get() operation will fail to acquire a readout of the current
      gpio state. Propagate these errors to the consumer so that they can
      act on, retry or ignore these failing reads, instead of treating them as
      the line being held high.

      Signed-off-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Reviewed-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aad38b75fb632200eb64282469458d21ce2cc39a
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Tue Aug 25 09:12:43 2015 +0000

      gpio: rcar: GPIO_RCAR doesn't relate to ARM

      8cd1470("gpio: rcar: Add r8a7795 (R-Car H3) support") added
      GPIO support for r8a7795. r8a7795 based on CONFIG_ARM64.
      OTOH, GPIO_RCAR driver can be compiled fine on non-ARM.
      This patch removed ARM dependency for it.

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 1bbc557d976b4e5ae9a41d619bd79f09ccac9afc
  Author: Peng Fan <van.freenix@xxxxxxxxx>
  Date:   Sun Aug 23 21:11:53 2015 +0800

      gpio: mxs: need to check return value of irq_alloc_generic_chip

      Need to check return value of irq_alloc_generic_chip, because
      it may return NULL.
      1. Change mxs_gpio_init_gc return type from void to int.
      2. Add a new lable out_irqdomain_remove to remove the irq domain
         when mxc_gpio_init_gc fail.

      Signed-off-by: Peng Fan <van.freenix@xxxxxxxxx>
      Cc: Alexandre Courbot <gnurou@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9e26b0b114adb321a9bf41520bac304ef49e77d1
  Author: Peng Fan <van.freenix@xxxxxxxxx>
  Date:   Sun Aug 23 21:11:52 2015 +0800

      gpio: mxc: need to check return value of irq_alloc_generic_chip

      Need to check return value of irq_alloc_generic_chip, because
      it may return NULL.
      1. Change mxc_gpio_init_gc return type from void to int.
      2. Add a new lable out_irqdomain_remove to remove the irq domain
         when mxc_gpio_init_gc fail.

      Signed-off-by: Peng Fan <van.freenix@xxxxxxxxx>
      Cc: Alexandre Courbot <gnurou@xxxxxxxxx>
      [Manually rebased]
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit eba4f88d5af84e0fcaa5d6eb4fe35a75c47203cb
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Aug 17 19:21:43 2015 +0100

      thermal: cpu_cooling: free power table on error or when unregistering

      The power table is not being freed on error from cpufreq_cooling
      register or when unregistering.  Free it.

      Fixes: c36cf0717631 ("thermal: cpu_cooling: implement the power cooling 
device API")
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 459ac37506d195713b5e82271a2ac44a777e47df
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Aug 17 19:21:42 2015 +0100

      thermal: cpu_cooling: don't call kcalloc() under rcu_read_lock

      build_dyn_power_table() allocates the power table while holding
      rcu_read_lock.  kcalloc using GFP_KERNEL may sleep, so it can't be
      called in an RCU read-side path.

      Move the rcu protection to the part of the function that really needs
      it: the part that handles the dev_pm_opp pointer received from
      dev_pm_opp_find_freq_ceil().  In the unlikely case that there is an OPP
      added to the cpu while this function is running, return -EAGAIN.

      Fixes: c36cf0717631 ("thermal: cpu_cooling: implement the power cooling 
device API")
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 0847e26a84faa0fcb4572d7e42d0a44cab69a83d
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 13:10:14 2015 +0200

      thermal: db8500_cpufreq_cooling: Fix module autoload for OF platform 
driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 64e05d8bcc837bc66cb2c6e71796c8883aa45939
  Author: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
  Date:   Thu Aug 27 07:32:11 2015 +0530

      thermal: cpu_cooling: Add MAINTAINERS entry

      None of the patches are reaching Viresh or Daniel directly as
      get_maintainers doesn't report us as maintainers. Looks like file header
      or history of commits isn't able to do that properly.

      Add a separate entry for cpu_cooling driver in MAINTAINERS.

      Acked-by: Eduardo Valentin <edubezval@xxxxxxxxx>
      Acked-by: Amit Daniel Kachhap <amit.daniel@xxxxxxxxxxx>
      Acked-by: Amit Daniel Kachhap <amit.kachhap@xxxxxxxxx>
      Signed-off-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit ec2feb475f4880246166a47e066e7a601a6103af
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 21:13:41 2015 -0700

      thermal: ti-soc: Kconfig fix to avoid menu showing wrongly

      Move the dependencies to menu, so we avoid showing it wrongly.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-omap@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 41ae3c02743e8f1f21ceebca614342d26b4eb080
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:58:36 2015 -0700

      thermal: ti-soc: allow compile test

      Adding COMPILE_TEST flag to ti-soc driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-omap@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit cb7fb4d342023d03070fcc1ed73fcd43682973d7
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:56:26 2015 -0700

      thermal: qcom_spmi: allow compile test

      Adding COMPILE_TEST flag to qcom_spmi driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 2bf427353eb606481d15d2843c76cdffa29ed418
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:53:35 2015 -0700

      thermal: exynos: allow compile test

      Adding COMPILE_TEST flag to exynos driver to facilitate
      maintenance.

      Cc: Lukasz Majewski <l.majewski@xxxxxxxxxxx>
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-samsung-soc@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 1b1582672121e1c1138e68b64128d94e7f61d10c
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:48:00 2015 -0700

      thermal: armada: allow compile test

      Adding COMPILE_TEST flag to armada driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 07fffd5ccab70bc00fd69b9ce2297a5e8d05b838
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:45:25 2015 -0700

      thermal: dove: allow compile test

      Adding COMPILE_TEST flag to dove driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 9c8aa959e13f5cb082ad244d2c9b806a67d9a8b6
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:44:46 2015 -0700

      thermal: kirkwood: allow compile test

      Adding COMPILE_TEST flag to kirkwood driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 444f9b00073668f028db0c14f609cf08abc9a2b3
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:43:57 2015 -0700

      thermal: rockchip: allow compile test

      Adding COMPILE_TEST flag to rockchip driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Heiko Stuebner <heiko@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-rockchip@xxxxxxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit aa2937b73a45e49704b24db8d9163d83002332d9
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:42:01 2015 -0700

      thermal: spear: allow compile test

      Adding COMPILE_TEST flag to spear driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit f9e2b05218e64fc6c614b90a650863981701f974
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:39:44 2015 -0700

      thermal: hisi: allow compile test

      Adding COMPILE_TEST flag to hisi driver to facilitate maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit cd33dc9ac2977ebe30cecbf39d2992190fbac5b4
  Author: Punit Agrawal <punit.agrawal@xxxxxxx>
  Date:   Tue Sep 8 14:51:12 2015 +0100

      thermal: Fix thermal_zone_of_sensor_register to match documentation

      thermal_zone_of_sensor_register is documented as returning a pointer
      to either a valid thermal_zone_device on success, or a corresponding
      ERR_PTR() value.

      In contrast, the function returns NULL when THERMAL_OF is configured
      off. Fix this.

      Signed-off-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Acked-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 216076705d6ac291d42e0f8dd85e6a0da98c0fa3
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Tue Sep 8 08:56:13 2015 -0400

      dm thin: disable discard support for thin devices if pool's is disabled

      If the pool is configured with 'ignore_discard' its discard support is
      disabled.  The pool's thin devices should also have queue_limits that
      reflect discards are disabled.

      Fixes: 34fbcf62 ("dm thin: range discard support")
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.1+

  commit cbc41d0a761bffb3166a413a3c77100a737c0cd7
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 14:28:15 2015 +0200

      drivers: sh: Disable PM runtime for multi-platform ARM with genpd

      If the default PM Domain using PM_CLK is used for PM runtime, the real
      Clock Domain cannot be registered from DT later.

      Hence do not enable it when running a multi-platform kernel with genpd
      support on R-Car or RZ.  The CPG/MSTP Clock Domain driver will take care
      of PM runtime management of the module clocks.

      Now most multi-platform ARM shmobile platforms (SH-Mobile, R-Mobile,
      R-Car, RZ) use DT-based PM Domains to take care of PM runtime management
      of the module clocks, simplify the platform logic by replacing the
      explicit SoC checks by a single check for the presence of MSTP clocks in
      DT.

      Backwards-compatiblity with old DTs (mainly for R-Car Gen2) is provided
      by checking for the presence of a "#power-domain-cells" property in DT.

      The default PM Domain is still needed for:
        - backwards-compatibility with old DTs that lack PM Domain properties,
        - the CONFIG_PM=n case,
        - legacy (non-DT) ARM/shmobile platforms without genpd support
          (r8a7778, r8a7779),
        - legacy SuperH.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Reviewed-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit 9b302c1acf4114d51b7f0962df0b0ddee0dc75cd
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 14:28:14 2015 +0200

      drivers: sh: Disable legacy default PM Domain on emev2

      EMMA Mobile EV2 doesn't have MSTP clocks. All its device drivers manage
      clocks explicitly, without relying on Runtime PM, so it doesn't need the
      legacy default PM Domain.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Reviewed-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit 833b5794e3303cc97a0d2d4ba97f26cc9d9b4b79
  Author: Chanho Park <parkch98@xxxxxxxxx>
  Date:   Tue Sep 1 23:17:03 2015 +0900

      ARM: EXYNOS: reset Little cores when cpu is up

      The cpu booting of exynos5422 has been still broken since we discussed
      it in last year[1]. This patch is inspired from Odroid XU3
      code (Actually, it was from samsung exynos vendor kernel)[2]. This weird
      reset code was founded exynos5420 octa cores series SoCs and only
      required for the first boot core is the Little core (Cortex A7).
      Some of the exynos5420 boards and all of the exynos5422 boards will 
require
      this code.

      There is two ways to check the little core is the first cpu. One is
      checking GPG2CON[1] GPIO value and the other is checking the cluster
      number of the first cpu. I selected the latter because it's more easier
      than the former.

      [1] 
http://lists.infradead.org/pipermail/linux-arm-kernel/2015-June/350632.html
      [2] https://patchwork.kernel.org/patch/6782891/

      Cc: Kevin Hilman <khilman@xxxxxxxxxx>
      Cc: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Cc: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Tested-by: Kevin Hilman <khilman@xxxxxxxxxx>
      Signed-off-by: Chanho Park <parkch98@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1+
      [k.kozlowski: Adding stable for v4.1+, reformat comment]
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>

  commit 8b5081c876bde9b1df5e96ee6990d5acd20c128b
  Author: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:33 2015 -0400

      staging: unisys: visornic: handle error return from device registration

      There is no code to handle an error return in visornic, when it tries to
      register with visorbus. This patch handles an error return from
      visorbus_register_visor_driver() by dropping out of initialization.

      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 6155a3cf11a6d4ed102ef5a30f655d4d2a38076b
  Author: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:32 2015 -0400

      staging: unisys: stop device registration before visorbus registration

      In cases where visorbus is compiled directly into the kernel, if
      visorbus registration fails for any reason, it is still possible for
      other drivers to call visorbus_register_visor_driver(), which could
      cause an oops. Prevent this by saving the result of the call to
      create_bus() in a static variable, and return an error code when the bus
      hasn't been registered successfully.

      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 418627ddc6d1ed50a3dfd2c8f938741b0cbcc1ed
  Author: David Kershner <david.kershner@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:31 2015 -0400

      staging: unisys: visorbus: Unregister driver on error

      If there is an error in registering driver attributes, unregister
      the driver as well.

      Signed-off-by: David Kershner <david.kershner@xxxxxxxxxx>
      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit f6b6a8ec9a3bcba8cc9a9c302b514cf3848e7d35
  Author: David Kershner <david.kershner@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:30 2015 -0400

      staging: unisys: visornic: Fix receive bytes statistics

      The receive byte statistics was wrong in /proc/net/dev.

      Move the collection of statistics after the proper amount
      of bytes has been calculated and make sure you add it to
      rx_bytes instead of just replacing it.

      Signed-off-by: David Kershner <david.kershner@xxxxxxxxxx>
      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 5b12100a53c11ef760e78c2899be8f1bf33812ca
  Author: David Kershner <david.kershner@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:29 2015 -0400

      staging: unisys: unregister netdev when create debugfs fails

      Noticed we were not unregistering the netdevice if we failed to
      create the debugfs entries. This patch fixes that problem.

      Signed-off-by: David Kershner <david.kershner@xxxxxxxxxx>
      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit dd3afa57c515801f37071734f56be9035fdeaa8c
  Author: Stefan Wahren <stefan.wahren@xxxxxxxx>
  Date:   Tue Aug 25 21:04:12 2015 +0000

      staging: fbtft: replace master->setup() with spi_setup()

      Calling the setup of the SPI master directly causes a NULL pointer
      dereference with master drivers without a separate setup function.
      This problem is reproduceable on ARM MXS platform.

      So fix this issue by using spi_setup() instead.

      Signed-off-by: Stefan Wahren <stefan.wahren@xxxxxxxx>
      Acked-by: Noralf Trønnes <noralf@xxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit cabb5b2a2866829177df2f1cee70f0dd42ee6ae0
  Author: Stefan Wahren <stefan.wahren@xxxxxxxx>
  Date:   Tue Aug 25 21:04:11 2015 +0000

      staging: fbtft: fix 9-bit SPI support detection

      Since the result of the setup function isn't adequate to check
      9-bit SPI support, we better check bits_per_word_mask. Btw this
      change avoids a NULL pointer dereference with master drivers
      without a separate setup function.

      Signed-off-by: Stefan Wahren <stefan.wahren@xxxxxxxx>
      Acked-by: Noralf Trønnes <noralf@xxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit d98229f0299d5d5a741873c5900159844b2b2de5
  Author: Andreas Dilger <andreas.dilger@xxxxxxxxx>
  Date:   Mon Aug 24 11:11:49 2015 -0400

      staging/lustre: change Lustre URLs and mailing list

      Now that the lustre.org domain has been liberated we can again
      use that for the main website URL and mailing list.

      Also update the URL for userspace tools downloads and Git repo.

      Signed-off-by: Andreas Dilger <andreas.dilger@xxxxxxxxx>
      Signed-off-by: Oleg Drokin <oleg.drokin@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit a6ee5ac15ddf2425a066339f1ab030c97ec74b25
  Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
  Date:   Fri Aug 21 14:02:57 2015 -0700

      staging/android: Update ION TODO per LPC discussion

      We discussed a bit with the folks on the Cc: list below what to do
      with ION. Two big take-aways:

      - High-performance drivers (like gpus) always want to play tricks with
        coherency and will lie to the dma api (radeon, nouveau, i915 gpu
        drivers all do so in upstream). What needs to be done here is fill
        gaps in dma-buf so that we can do this without breaking the dma-api
        expections of other clients like v4l. The consesus is that hw won't
        stop needing these tricks anytime soon.

      - Placement constraints for shared buffers won't be solved any other
        way than through something platform-specific like ion with
        platform-specific knowledge in userspace in something like gralloc.
        For general-purpose devices where this assumption would be painful
        for userspace (like servers) the consensus is that such devices will
        have proper MMUs where placement constraint handling is fairly
        irrelevant.

      Hence it is reasonable to destage ion as-is without changing the
      overall design to enable these use-cases and just fixing up a these
      few fairly minor things. Since there won't relly be an open-source
      userspace for ion (and hence drm maintainers won't take it) the
      proposal is to eventually move it to drivers/android/ion.[hc]. Laura
      would be ok with being maintainer once this is all done and ion is
      destaged.

      Note that Thiago is working on exposing the cpu cache flushing for
      cpu access from userspace through mmaps so this is alread in progress.
      Also adding him to the Cc: list.

      v2: Add ION_IOC_IMPORT to the list of ioctl that probably should go.

      Cc: Laura Abbott <labbott@xxxxxxxxxx>
      Cc: sumit.semwal@xxxxxxxxxx
      Cc: laurent.pinchart@xxxxxxxxxxxxxxxx
      Cc: ghackmann@xxxxxxxxxx
      Cc: robdclark@xxxxxxxxx
      Cc: david.brown@xxxxxxx
      Cc: romlem@xxxxxxxxxx
      Cc: Tiago Vignatti <tiago.vignatti@xxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit b786a8ad6a34b45ff6e40cf9c21f9c13c38e2f70
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 1 22:05:58 2015 +0200

      Staging: most: MOST and MOSTCORE should depend on HAS_DMA

      If NO_DMA=y:

          ERROR: "dma_free_coherent" 
[drivers/staging/most/mostcore/mostcore.ko] undefined!
          ERROR: "dma_alloc_coherent" 
[drivers/staging/most/mostcore/mostcore.ko] undefined!

      As all MOST sub drivers use DMA functionality, add a dependency on
      HAS_DMA to MOSTCORE, and to MOST, which selects MOSTCORE.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Christian Gromm <christian.gromm@xxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 4de2ced795272db3ee5d668510b3a91a2bf1d1fb
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Mon Aug 17 11:08:23 2015 -0700

      staging: most: fix HDM_USB dependencies and build errors

      Fix kconfig dependency warning and build errors.

      warning: (HDM_USB) selects AIM_NETWORK which has unmet direct 
dependencies (STAGING && MOST && NET)

      drivers/built-in.o: In function `aim_resume_tx_channel':
      networking.c:(.text+0xd6f7a2): undefined reference to 
`netif_tx_wake_queue'
      drivers/built-in.o: In function `aim_rx_data':
      networking.c:(.text+0xd6f8c5): undefined reference to `__netdev_alloc_skb'
      networking.c:(.text+0xd6f99a): undefined reference to `skb_put'
      networking.c:(.text+0xd6fa44): undefined reference to `eth_type_trans'
      networking.c:(.text+0xd6fa6f): undefined reference to `netif_rx'
      drivers/built-in.o: In function `most_nd_setup':
      networking.c:(.text+0xd6fad2): undefined reference to `ether_setup'
      drivers/built-in.o: In function `most_nd_set_mac_address':
      networking.c:(.text+0xd6fb0f): undefined reference to `eth_mac_addr'
      drivers/built-in.o: In function `most_nd_open':
      networking.c:(.text+0xd6fd37): undefined reference to 
`netif_tx_wake_queue'
      drivers/built-in.o: In function `aim_probe_channel':
      networking.c:(.text+0xd6febb): undefined reference to `alloc_netdev_mqs'
      networking.c:(.text+0xd6ff18): undefined reference to `register_netdev'
      networking.c:(.text+0xd6ff4a): undefined reference to `free_netdev'
      drivers/built-in.o: In function `most_net_rm_netdev_safe.isra.0':
      networking.c:(.text+0xd6ffcf): undefined reference to `unregister_netdev'
      networking.c:(.text+0xd6ffdf): undefined reference to `free_netdev'
      drivers/built-in.o: In function `most_nd_start_xmit':
      networking.c:(.text+0xd70390): undefined reference to `kfree_skb'
      drivers/built-in.o: In function `most_deliver_netinfo':
      (.text+0xd70499): undefined reference to `netif_tx_wake_queue'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Christian Gromm <christian.gromm@xxxxxxxxxxxxx>
      Cc: Michael Fabry <Michael.Fabry@xxxxxxxxxxxxx>
      Cc: Christian Gromm <chris@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit caa470475d9b59eeff093ae650800d34612c4379
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Sep 11 12:36:12 2015 -0300

      perf header: Fixup reading of HEADER_NRCPUS feature

      The original patch introducing this header wrote the number of CPUs 
available
      and online in one order and then swapped those values when reading, fix 
it.

      Before:

        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 4
        # nrcpus avail : 4
        # echo 0 > /sys/devices/system/cpu/cpu2/online
        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 4
        # nrcpus avail : 3
        # echo 0 > /sys/devices/system/cpu/cpu1/online
        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 4
        # nrcpus avail : 2

      After the fix, bringing back the CPUs online:

        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 2
        # nrcpus avail : 4
        # echo 1 > /sys/devices/system/cpu/cpu2/online
        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 3
        # nrcpus avail : 4
        # echo 1 > /sys/devices/system/cpu/cpu1/online
        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 4
        # nrcpus avail : 4

      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: fbe96f29ce4b ("perf tools: Make perf.data more self-descriptive 
(v8)")
      Link: http://lkml.kernel.org/r/20150911153323.GP23511@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit bab84fa9cc09dfa9702029f83ea6bf8bf5ae96af
  Author: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
  Date:   Thu Aug 27 18:30:43 2015 +0600

      m68k/sun3: Use %pM format specifier to print ethernet address

      printk() supports %pM format specifier for printing 6-byte MAC/FDDI
      addresses in hex notation small buffers, let's use it intead of %x:%x...

      Signed-off-by: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>

  commit a797451b3a595759b4df48150e611237d4bd204a
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Wed Sep 2 14:25:48 2015 -0700

      ARM: dts: Add ddc i2c reference to veyron

      The ddc-i2c-bus property was missing from the veyron dtsi file since
      downstream the ddc-i2c-bus was still being specified in rk3288.dtsi and
      nobody noticed when the veyron dtsi was sent upstream.  Add it.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Tested-by: Brian Norris <briannorris@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>

  commit f594297830b29c8204c421fafe66001178ac0f9a
  Author: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 08:49:34 2015 -0400

      ARM: dts: Fix Makefile target for sun4i-a10-itead-iteaduino-plus

      Commit 79ae3e66f8d (ARM: dts: sun4i: Add Iteaduino Plus A10) added a new
      make target for the sun4i-a10-itead-iteaduino-plus dts file, but 
mistakenly
      used .dts instead of the correct .dtb suffix.  This resulted in a build 
error
      like:

              scripts/Makefile.dtbinst:42: target 
'sun4i-a10-itead-iteaduino-plus.dts' doesn't match the target pattern

      when doing a make dtbs_install.

      Fix it to use the proper file name.

      Signed-off-by: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>

  commit eaeef1ad9b6ea6df1d1220c254d9563da60cb9d1
  Author: Timo Sigurdsson <public_timo.s@xxxxxxxxxxxxxx>
  Date:   Tue Aug 4 23:08:01 2015 +0200

      ARM: dts: sunxi: Raise minimum CPU voltage for sun7i-a20 to meet SoC 
specifications

      sun7i-a20.dtsi contains a cpufreq operating point at 0.9 volts. The 
minimum
      CPU voltage for the Allwinner A20 SoC, however, is 1.0 volts. Thus, raise
      the voltage for the lowest operating point to 1.0 volts in order to stay
      within the SoC specifications. It is an undervolted setting that isn't
      stable across all SoCs and boards out there.

      Cc: <stable@xxxxxxxxxxxxxxx> # v4.0+
      Fixes: d96b7161916f ("ARM: dts: sun7i: Add cpu clock reference and 
operating points to dtsi")
      Signed-off-by: Timo Sigurdsson <public_timo.s@xxxxxxxxxxxxxx>
      Acked-by: Iain Paton <ipaton0@xxxxxxxxx>
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>

  commit b692cb83b14d2f741f513221f5f78042c674c2a9
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 10:23:01 2015 +0300

      ARM: pxa: ssp: Fix build error by removing originally incorrect DT binding

      Commit 03fbf488cece ("spi: pxa2xx: Differentiate Intel LPSS types") caused
      build error here because it removed the type LPSS_SSP and I didn't notice
      the type was used here too.

      I believe commit a6e56c28a178 ("ARM: pxa: ssp: add DT bindings") added it
      accidentally by copying all enum pxa_ssp_type types from
      include/linux/pxa2xx_ssp.h even LPSS_SSP was for Intel LPSS SPI devices.

      Fix the build error by removing this incorrect binding.

      Fixes: 03fbf488cece ("spi: pxa2xx: Differentiate Intel LPSS types")
      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Reported-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.2
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>

  commit adf3442cc890f04af1e8e2c0b335c84e5092dca9
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sun Aug 23 21:13:57 2015 +0200

      ARM: pxa: fix DFI bus lockups on startup

      After the conversion of pxa architecture to common clock framework, the
      NAND clock can be disabled on startup if no nand driver claims it.

      In this case, it happens that if the bootloader used the NAND and set
      the DFI arbitration bit, the next access to a static memory controller
      area, such as an ethernet card, the system bus will stall, and the core
      will be stalled forever.

      Fix this by clearing the DFI arbritration bit in pxa3xx startup. The bit
      will be enabled the pxa3xx-nand driver on need anyway. The only left
      requirement is that upon pxa3xx-nand removal, the bit should be cleared
      before the clock is disabled.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>

  commit 8f3e5684d3fbd91ead283916676fa3dac22615e5
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:53 2015 -0700

      perf/core: Drop PERF_EVENT_TXN

      We currently use PERF_EVENT_TXN flag to determine if we are in the middle
      of a transaction. If in a transaction, we defer the schedulability checks
      from pmu->add() operation to the pmu->commit() operation.

      Now that we have "transaction types" (PERF_PMU_TXN_ADD, PERF_PMU_TXN_READ)
      we can use the type to determine if we are in a transaction and drop the
      PERF_EVENT_TXN flag.

      When PERF_EVENT_TXN is dropped, the cpuhw->group_flag on some 
architectures
      becomes unused, so drop that field as well.

      This is an extension of the Powerpc patch from Peter Zijlstra to s390,
      Sparc and x86 architectures.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-11-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 88a486132dffeb010d659e00361c4d114de09972
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:52 2015 -0700

      powerpc, perf/powerpc/hv-24x7: Use PMU_TXN_READ interface

      The 24x7 counters in Powerpc allow monitoring a large number of counters
      simultaneously. They also allow reading several counters in a single
      HCALL so we can get a more consistent snapshot of the system.

      Use the PMU's transaction interface to monitor and read several event
      counters at once. The idea is that users can group several 24x7 events
      into a single group of events. We use the following logic to submit
      the group of events to the PMU and read the values:

        pmu->start_txn()                // Initialize before first event

        for each event in group
                pmu->read(event);       // Queue each event to be read

        pmu->commit_txn()               // Read/update all queuedcounters

      The ->commit_txn() also updates the event counts in the respective
      perf_event objects.  The perf subsystem can then directly get the
      event counts from the perf_event and can avoid submitting a new
      ->read() request to the PMU.

      Thanks to input from Peter Zijlstra.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-10-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4a00c16e552ea5e71756cd29cd2df7557ec9cac4
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:51 2015 -0700

      perf/core: Define PERF_PMU_TXN_READ interface

      Define a new PERF_PMU_TXN_READ interface to read a group of counters
      at once.

              pmu->start_txn()                // Initialize before first event

              for each event in group
                      pmu->read(event);       // Queue each event to be read

              rc = pmu->commit_txn()          // Read/update all queued counters

      Note that we use this interface with all PMUs.  PMUs that implement this
      interface use the ->read() operation to _queue_ the counters to be read
      and use ->commit_txn() to actually read all the queued counters at once.

      PMUs that don't implement PERF_PMU_TXN_READ ignore ->start_txn() and
      ->commit_txn() and continue to read counters one at a time.

      Thanks to input from Peter Zijlstra.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-9-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7d88962e230c8342080e7e2fe9dd5be43dc13b79
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:50 2015 -0700

      perf/core: Add return value for perf_event_read()

      When we implement the ability to read several counters at once (using
      the PERF_PMU_TXN_READ transaction interface), perf_event_read() can
      fail when the 'group' parameter is true (eg: trying to read too many
      events at once).

      For now, have perf_event_read() return an integer. Ignore the return
      value when the 'group' parameter is false.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-8-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fa8c269353d560b7c28119ad7617029f92e40b15
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:49 2015 -0700

      perf/core: Invert perf_read_group() loops

      In order to enable the use of perf_event_read(.group = true), we need
      to invert the sibling-child loop nesting of perf_read_group().

      Currently we iterate the child list for each sibling, this precludes
      using group reads. Flip things around so we iterate each group for
      each child.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      [ Made the patch compile and things. ]
      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-7-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0492d4c5b8c4dc3a7591bf6fa0e35d117812cc85
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:48 2015 -0700

      perf/core: Add group reads to perf_event_read()

      Enable perf_event_read() to update entire groups at once, this will be
      useful for read transactions.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150723080435.GE25159@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b15f495b4e9295cf21065d8569835a2f18cfe41b
  Author: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:47 2015 -0700

      perf/core: Rename perf_event_read_{one,group}, perf_read_hw

      In order to free up the perf_event_read_group() name:

       s/perf_event_read_\(one\|group\)/perf_read_\1/g
       s/perf_read_hw/__perf_read/g

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-5-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 01add3eaf1b25e497b14ca210f3bfe5f5dd2b112
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:46 2015 -0700

      perf/core: Split perf_event_read() and perf_event_count()

      perf_event_read() does two things:

        - call the PMU to read/update the counter value, and
        - compute the total count of the event and its children

      Not all callers need both. perf_event_reset() for instance needs the
      first piece but doesn't need the second.  Similarly, when we implement
      the ability to read a group of events using the transaction interface,
      we would need the two pieces done independently.

      Break up perf_event_read() and have it just read/update the counter
      and have the callers compute the total count if necessary.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-4-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fbbe07011581990ef74dfac06dc8511b1a14badb
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:45 2015 -0700

      perf/core: Add a 'flags' parameter to the PMU transactional interfaces

      Currently, the PMU interface allows reading only one counter at a time.
      But some PMUs like the 24x7 counters in Power, support reading several
      counters at once. To leveage this functionality, extend the transaction
      interface to support a "transaction type".

      The first type, PERF_PMU_TXN_ADD, refers to the existing transactions,
      i.e. used to _schedule_ all the events on the PMU as a group. A second
      transaction type, PERF_PMU_TXN_READ, will be used in a follow-on patch,
      by the 24x7 counters to read several counters at once.

      Extend the transaction interfaces to the PMU to accept a 'txn_flags'
      parameter and use this parameter to ignore any transactions that are
      not of type PERF_PMU_TXN_ADD.

      Thanks to Peter Zijlstra for his input.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      [peterz: s390 compile fix]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-3-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 845583767c306dac0290aab908c18b01772ea4b4
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:44 2015 -0700

      sparc, perf/sparc: Remove unnecessary assignment

      In ->commit_txn() 'cpuc' is already initialized when it is
      declared, so we can remove the duplicate assignment.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: sparclinux@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441336073-22750-2-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b0e878759452314676fbdd71df4ac67e7d08de5d
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 14:06:07 2015 +0200

      perf/abi: Document some more aspects of the perf ABI

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 73fdeb66592ee80dffb16fb8a9b7378a00c1a826
  Author: Huaitong Han <huaitong.han@xxxxxxxxx>
  Date:   Mon Aug 31 16:21:02 2015 +0800

      perf/x86/intel/pt: Fix KVM warning due to doing rdmsr() before the CPUID 
test

      If KVM does not support INTEL_PT, guest MSR_IA32_RTIT_CTL reading will
      produce host warning like "kvm [2469]: vcpu0 unhandled rdmsr: 0x570".

      Guest can determine whether the CPU supports Intel_PT according to CPUID,
      so test_cpu_cap function is added before rdmsr,and it is more in line with
      the code style.

      Signed-off-by: Huaitong Han <huaitong.han@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: acme@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441009262-9792-1-git-send-email-huaitong.han@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 516792e67c39d31701641ab355acdb9cbfec0643
  Author: Kirill Tkhai <ktkhai@xxxxxxxx>
  Date:   Mon Aug 31 15:12:56 2015 +0300

      perf/core: Delete PF_EXITING checks from perf_cgroup_exit() callback

      cgroup_exit() is not called from copy_process() after commit:

        e8604cb43690 ("cgroup: fix spurious lockdep warning in cgroup_exit()")

      from do_exit(). So this check is useless and the comment is obsolete.

      Signed-off-by: Kirill Tkhai <ktkhai@xxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/55E444C8.3020402@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit deb27519bf1f4b21a761c0675dbdf1196df7d72a
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Mon Aug 17 08:37:31 2015 -0400

      perf/x86/intel: Fix LBR callstack issue caused by FREEZE_LBRS_ON_PMI

      This patch fixes an issue which introduced by commit
      1a78d93750bb5f61abdc59a91fc3bd06a214542a ("perf/x86/intel: Streamline
      LBR MSR handling in PMI").

      The old patch not only avoids writing LBR_SELECT MSR in PMI, but also
      avoids updating lbr_select variable. So in PMI, FREEZE_LBRS_ON_PMI bit
      is always mistakenly set for IA32_DEBUGCTLMSR MSR, which causes
      superfluous increase/decrease of LBR_TOS when collecting LBR callstack.

      Reported-by: Milian Wolff <mail@xxxxxxxxxx>
      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439815051-8616-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d2878d642a4edd1d57c691dc3e4d7847cbf9d442
  Author: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 17:09:28 2015 +0300

      perf/x86/intel/bts: Disallow use by unprivileged users on paranoid systems

      BTS leaks kernel addresses even in userspace-only mode due to imprecise IP
      sampling, so sometimes syscall entry points or page fault handler 
addresses
      end up in a userspace trace.

      Now, intel_bts driver exports trace data zero-copy, it does not scan 
through
      it to filter out the kernel addresses and it's would be a O(n) job.

      To work around this situation, this patch forbids the use of intel_bts
      driver by unprivileged users on systems with the paranoid setting above 
the
      (kernel's) default "1", which still allows kernel profiling. In other 
words,
      using intel_bts driver implies kernel tracing, regardless of the
      "exclude_kernel" attribute setting.

      Signed-off-by: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: hpa@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441030168-6853-3-git-send-email-alexander.shishkin@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a09d31f45224c219a4d5c728fa40150dc9d3e3e5
  Author: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 17:09:27 2015 +0300

      perf/x86/intel/ds: Work around BTS leaking kernel addresses

      BTS leaks kernel addresses even in userspace-only mode due to imprecise IP
      sampling, so sometimes syscall entry points or page fault handler 
addresses
      end up in a userspace trace.

      Since this driver uses a relatively small buffer for BTS records and it 
has
      to iterate through them anyway, it can also take on the additional job of
      filtering out the records that contain kernel addresses when kernel space
      tracing is not enabled.

      This patch changes the bts code to skip the offending records from perf
      output. In order to request the exact amount of space on the ring buffer,
      we need to do an extra pass through the records to know how many there are
      of the valid ones, but considering the small size of the buffer, this 
extra
      pass adds very little overhead to the nmi handler. This way we won't end
      up with awkward IP samples with zero IPs in the perf stream.

      Signed-off-by: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: hpa@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441030168-6853-2-git-send-email-alexander.shishkin@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b20112edeadf0b8a1416de061caa4beb11539902
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Aug 21 12:05:18 2015 +0300

      perf/x86: Improve accuracy of perf/sched clock

      When TSC is stable perf/sched clock is based on it.
      However the conversion from cycles to nanoseconds
      is not as accurate as it could be.  Because
      CYC2NS_SCALE_FACTOR is 10, the accuracy is +/- 1/2048

      The change is to calculate the maximum shift that
      results in a multiplier that is still a 32-bit number.
      For example all frequencies over 1 GHz will have
      a shift of 32, making the accuracy of the conversion
      +/- 1/(2^33).  That is achieved by using the
      'clocks_calc_mult_shift()' function.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1440147918-22250-1-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 216dcaf290a5e93426cec283ac9edc67ff6756b3
  Merge: d2bb1d4 ebfb498
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Sep 13 11:25:55 2015 +0200

      Merge branch 'perf/urgent' into perf/core, to pick up fixes before 
applying new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d2bb1d42b95fa88f092623bbb8ed533f316b6a3c
  Merge: 3bd7617 6ff33f3
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Sep 13 11:25:35 2015 +0200

      Merge tag 'v4.3-rc1' into perf/core, to refresh the tree

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 84567995612258c23bc55795575babe7ef605dd9
  Author: Boqun Feng <boqun.feng@xxxxxxxxx>
  Date:   Wed Aug 26 19:52:46 2015 +0800

      locking/atomics, cmpxchg: Privatize the inclusion of asm/cmpxchg.h

      After commit:

        654672d4ba1a ("locking/atomics: Add _{acquire|release|relaxed}() 
variants of some atomic operations")

      Architectures may only provide {cmp,}xchg_relaxed definitions in
      asm/cmpxchg.h. Other variants, such as {cmp,}xchg, may be built in
      linux/atomic.h, which means simply including asm/cmpxchg.h may not get
      the definitions of all the{cmp,}xchg variants.

      Therefore, we should privatize the inclusions of asm/cmpxchg.h to
      keep it only included in arch/* and replace the inclusions outside
      with linux/atomic.h

      Signed-off-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Aybuke Ozdemir <aybuke.147@xxxxxxxxx>
      Cc: Chris Brannon <chris@xxxxxxxxxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Jonathan Corbet <corbet@xxxxxxx>
      Cc: Kirk Reiser <kirk@xxxxxxxxxx>
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Samuel Thibault <samuel.thibault@xxxxxxxxxxxx>
      Cc: Shradha Shah <sshah@xxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: William Hubbs <w.d.hubbs@xxxxxxxxx>
      Cc: devel@xxxxxxxxxxxxxxxxxxxx
      Cc: linux-net-drivers@xxxxxxxxxxxxxx
      Cc: speakup@xxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440589966-26280-1-git-send-email-boqun.feng@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2619d7e9c92d524cb155ec89fd72875321512e5b
  Author: John Stultz <john.stultz@xxxxxxxxxx>
  Date:   Wed Sep 9 16:07:30 2015 -0700

      time: Fix timekeeping_freqadjust()'s incorrect use of abs() instead of 
abs64()

      The internal clocksteering done for fine-grained error
      correction uses a logarithmic approximation, so any time
      adjtimex() adjusts the clock steering, timekeeping_freqadjust()
      quickly approximates the correct clock frequency over a series
      of ticks.

      Unfortunately, the logic in timekeeping_freqadjust(), introduced
      in commit:

        dc491596f639 ("timekeeping: Rework frequency adjustments to work better 
w/ nohz")

      used the abs() function with a s64 error value to calculate the
      size of the approximated adjustment to be made.

      Per include/linux/kernel.h:

        "abs() should not be used for 64-bit types (s64, u64, long long) - use 
abs64()".

      Thus on 32-bit platforms, this resulted in the clocksteering to
      take a quite dampended random walk trying to converge on the
      proper frequency, which caused the adjustments to be made much
      slower then intended (most easily observed when large
      adjustments are made).

      This patch fixes the issue by using abs64() instead.

      Reported-by: Nuno Gonçalves <nunojpg@xxxxxxxxx>
      Tested-by: Nuno Goncalves <nunojpg@xxxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.17+
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Prarit Bhargava <prarit@xxxxxxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441840051-20244-1-git-send-email-john.stultz@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c7ef92cea98bc468bbc8e67b6e49d7365dc69482
  Merge: a6b2778 6ff33f3
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Sep 13 10:01:24 2015 +0200

      Merge tag 'v4.3-rc1' into locking/core, to refresh the tree

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 006cdf025a33cb008c3d466bed311c2c347b458f
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 09:06:17 2015 +0200

      sched/fair: Optimize per entity utilization tracking

      Currently the load_{sum,avg} and util_{sum,avg} tracking is asymmetric
      in that load tracking gets a 2^10 unit from the weight, but util gets
      no such factor.

      This results in more lost bits for util scaling and asymmetric scaling
      rules.

      Fix this by removing shifts, such that we gain the 2^10 factor from
      scaling. There is no risk of overflowing the u32 as the max value is
      now LOAD_AVG_MAX << 10, which is still well below UINT_MAX.

      This further entangles the assumption that both LOAD and CAPACITY
      shifts are the same (and 10) so put in an assertion for that.

      This fixes the math for the LOAD_RESOLUTION != 0 case.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6f2b04524f0b38bfbb8413f98d2d6af234508309
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Mon Sep 7 14:57:22 2015 +0100

      sched/fair: Defer calling scaling functions

      Do not call the scaling functions in case time goes backwards or the
      last update of the sched_avg structure has happened less than 1024ns
      ago.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx <daniel.lezcano@xxxxxxxxxx>
      Cc: mturquette@xxxxxxxxxxxx <mturquette@xxxxxxxxxxxx>
      Cc: pang.xunlei@xxxxxxxxxx <pang.xunlei@xxxxxxxxxx>
      Cc: rjw@xxxxxxxxxxxxx <rjw@xxxxxxxxxxxxx>
      Cc: sgurrappadi@xxxxxxxxxx <sgurrappadi@xxxxxxxxxx>
      Cc: vincent.guittot@xxxxxxxxxx <vincent.guittot@xxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx <yuyang.du@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/55EDA2E9.8040900@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6115c793ca1a6e39c7c15159cbb47baa04009cb8
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 7 15:09:15 2015 +0200

      sched/fair: Optimize __update_load_avg()

      Prior to this patch; the line:

        scaled_delta_w = (delta_w * 1024) >> 10;

      which is the result of the default arch_scale_freq_capacity()
      function, turns into:

          1b03: 49 89 d1                mov    %rdx,%r9
          1b06: 49 c1 e1 0a             shl    $0xa,%r9
          1b0a: 49 c1 e9 0a             shr    $0xa,%r9

      Which is silly; when made unsigned int, GCC recognises this as
      pointless ops and fails to emit them (confirmed on 4.9.3 and 5.1.1).

      Furthermore, afaict unsigned is actually the correct type for these
      fields anyway, as we've explicitly ruled out negative delta's earlier
      in this function.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 54a21385facbdcd89a78e8c3e5025f04c5f2b59c
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 7 15:05:42 2015 +0200

      sched/fair: Rename scale() to cap_scale()

      Rename scale() to cap_scale() to better reflect its purpose, it is
      after all not a general purpose scale function, it has
      SCHED_CAPACITY_SHIFT hardcoded in it.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 98d8fd8126676f7ba6e133e65b2ca4b17989d32c
  Author: Morten Rasmussen <morten.rasmussen@xxxxxxx>
  Date:   Fri Aug 14 17:23:14 2015 +0100

      sched/fair: Initialize task load and utilization before placing task on rq

      Task load or utilization is not currently considered in
      select_task_rq_fair(), but if we want that in the future we should make
      sure it is not zero for new tasks.

      cc: Ingo Molnar <mingo@xxxxxxxxxx>
      cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Dietmar Eggemann <Dietmar.Eggemann@xxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: pang.xunlei@xxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Cc: sgurrappadi@xxxxxxxxxx
      Cc: vincent.guittot@xxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1439569394-11974-7-git-send-email-morten.rasmussen@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 231678b768da07d19ab5683a39eeb0c250631d02
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Fri Aug 14 17:23:13 2015 +0100

      sched/fair: Get rid of scaling utilization by capacity_orig

      Utilization is currently scaled by capacity_orig, but since we now have
      frequency and cpu invariant cfs_rq.avg.util_avg, frequency and cpu scaling
      now happens as part of the utilization tracking itself.
      So cfs_rq.avg.util_avg should no longer be scaled in cpu_util().

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Steve Muckle <steve.muckle@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx <daniel.lezcano@xxxxxxxxxx>
      Cc: mturquette@xxxxxxxxxxxx <mturquette@xxxxxxxxxxxx>
      Cc: pang.xunlei@xxxxxxxxxx <pang.xunlei@xxxxxxxxxx>
      Cc: rjw@xxxxxxxxxxxxx <rjw@xxxxxxxxxxxxx>
      Cc: sgurrappadi@xxxxxxxxxx <sgurrappadi@xxxxxxxxxx>
      Cc: vincent.guittot@xxxxxxxxxx <vincent.guittot@xxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx <yuyang.du@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/55EDAF43.30500@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9e91d61d9b0ca8d865dbd59af8d0d5c5b68003e9
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Fri Aug 14 17:23:12 2015 +0100

      sched/fair: Name utilization related data and functions consistently

      Use the advent of the per-entity load tracking rewrite to streamline the
      naming of utilization related data and functions by using
      {prefix_}util{_suffix} consistently. Moreover call both signals
      ({se,cfs}.avg.util_avg) utilization.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Dietmar Eggemann <Dietmar.Eggemann@xxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: pang.xunlei@xxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Cc: sgurrappadi@xxxxxxxxxx
      Cc: vincent.guittot@xxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1439569394-11974-5-git-send-email-morten.rasmussen@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e3279a2e6d697e00e74f905851ee7cf532f72b2d
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Sat Aug 15 00:04:41 2015 +0100

      sched/fair: Make utilization tracking CPU scale-invariant

      Besides the existing frequency scale-invariance correction factor, apply
      CPU scale-invariance correction factor to utilization tracking to
      compensate for any differences in compute capacity. This could be due to
      micro-architectural differences (i.e. instructions per seconds) between
      cpus in HMP systems (e.g. big.LITTLE), and/or differences in the current
      maximum frequency supported by individual cpus in SMP systems. In the
      existing implementation utilization isn't comparable between cpus as it
      is relative to the capacity of each individual CPU.

      Each segment of the sched_avg.util_sum geometric series is now scaled
      by the CPU performance factor too so the sched_avg.util_avg of each
      sched entity will be invariant from the particular CPU of the HMP/SMP
      system on which the sched entity is scheduled.

      With this patch, the utilization of a CPU stays relative to the max CPU
      performance of the fastest CPU in the system.

      In contrast to utilization (sched_avg.util_sum), load
      (sched_avg.load_sum) should not be scaled by compute capacity. The
      utilization metric is based on running time which only makes sense when
      cpus are _not_ fully utilized (utilization cannot go beyond 100% even if
      more tasks are added), where load is runnable time which isn't limited
      by the capacity of the CPU and therefore is a better metric for
      overloaded scenarios. If we run two nice-0 busy loops on two cpus with
      different compute capacity their load should be similar since their
      compute demands are the same. We have to assume that the compute demand
      of any task running on a fully utilized CPU (no spare cycles = 100%
      utilization) is high and the same no matter of the compute capacity of
      its current CPU, hence we shouldn't scale load by CPU capacity.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/55CE7409.1000700@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8cd5601c50603caa195ce86cc465cb04079ed488
  Author: Morten Rasmussen <morten.rasmussen@xxxxxxx>
  Date:   Fri Aug 14 17:23:10 2015 +0100

      sched/fair: Convert arch_scale_cpu_capacity() from weak function to 
#define

      Bring arch_scale_cpu_capacity() in line with the recent change of its
      arch_scale_freq_capacity() sibling in commit dfbca41f3479 ("sched:
      Optimize freq invariant accounting") from weak function to #define to
      allow inlining of the function.

      While at it, remove the ARCH_CAPACITY sched_feature as well. With the
      change to #define there isn't a straightforward way to allow runtime
      switch between an arch implementation and the default implementation of
      arch_scale_cpu_capacity() using sched_feature. The default was to use
      the arch-specific implementation, but only the arm architecture provides
      one and that is essentially equivalent to the default implementation.

      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Dietmar Eggemann <Dietmar.Eggemann@xxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: pang.xunlei@xxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Cc: sgurrappadi@xxxxxxxxxx
      Cc: vincent.guittot@xxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1439569394-11974-3-git-send-email-morten.rasmussen@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e0f5f3afd2cffa96291cd852056d83ff4e2e99c7
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Fri Aug 14 17:23:09 2015 +0100

      sched/fair: Make load tracking frequency scale-invariant

      Apply frequency scaling correction factor to per-entity load tracking to
      make it frequency invariant. Currently, load appears bigger when the CPU
      is running slower which affects load-balancing decisions.

      Each segment of the sched_avg.load_sum geometric series is now scaled by
      the current frequency so that the sched_avg.load_avg of each sched entity
      will be invariant from frequency scaling.

      Moreover, cfs_rq.runnable_load_sum is scaled by the current frequency as
      well.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Vincent Guittot <vincent.guittot@xxxxxxxxxx>
      Cc: Dietmar Eggemann <Dietmar.Eggemann@xxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: pang.xunlei@xxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Cc: sgurrappadi@xxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1439569394-11974-2-git-send-email-morten.rasmussen@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2a595721a1fa6b684c1c818f379bef834ac3d65e
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 11 21:54:21 2015 +0530

      sched/numa: Convert sched_numa_balancing to a static_branch

      Variable sched_numa_balancing toggles numa_balancing feature. Hence
      moving from a simple read mostly variable to a more apt static_branch.

      Suggested-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439310261-16124-1-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2b49d84b259fc18e131026e5d38e7855352f71b9
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 11 16:30:13 2015 +0530

      sched/numa: Remove the NUMA sched_feature

      Variable sched_numa_balancing is available for both CONFIG_SCHED_DEBUG
      and !CONFIG_SCHED_DEBUG. All code paths now check for
      sched_numa_balancing. Hence remove sched_feat(NUMA).

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439290813-6683-4-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c3b9bc5bbfc3750570d788afffd431263ef695c6
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 11 16:30:12 2015 +0530

      sched/numa: Disable sched_numa_balancing on UMA systems

      Commit 2a1ed24 ("sched/numa: Prefer NUMA hotness over cache hotness")
      sets sched feature NUMA to true. However this can enable NUMA hinting
      faults on a UMA system.

      This commit ensures that NUMA hinting faults occur only on a NUMA system
      by setting/resetting sched_numa_balancing.

      This commit:

        - Makes sched_numa_balancing common to CONFIG_SCHED_DEBUG and
          !CONFIG_SCHED_DEBUG. Earlier it was only in !CONFIG_SCHED_DEBUG.

        - Checks for sched_numa_balancing instead of sched_feat(NUMA).

      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439290813-6683-3-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 78a9c54649ea220065aad9902460a1d137c7eafd
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 11 16:30:11 2015 +0530

      sched/numa: Rename numabalancing_enabled to sched_numa_balancing

      Simple rename of the 'numabalancing_enabled' variable to 
'sched_numa_balancing'.
      No functional changes.

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439290813-6683-2-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c5afb6a87f2386bcf09fa051e6ca390d43e2222e
  Author: Vincent Guittot <vincent.guittot@xxxxxxxxxx>
  Date:   Mon Aug 3 11:55:50 2015 +0200

      sched/fair: Fix nohz.next_balance update

      Since commit:

        d4573c3e1c99 ("sched: Improve load balancing in the presence of idle 
CPUs")

      the ILB CPU starts with the idle load balancing of other idle CPUs and
      finishes with itself in order to speed up the spread of tasks in all
      idle CPUs.

      The this_rq->next_balance is still used in nohz_idle_balance() as an
      intermediate step to gather the shortest next balance before updating
      nohz.next_balance. But the former has not been updated yet and is likely 
to
      be set with the current jiffies. As a result, the nohz.next_balance will 
be
      set with current jiffies instead of the real next balance date. This
      generates spurious kicks of nohz ilde balance.

      nohz_idle_balance() must set the nohz.next_balance without taking into
      account this_rq->next_balance which is not updated yet. Then, this_rq will
      update nohz.next_update with its next_balance once updated and if 
necessary.

      Signed-off-by: Vincent Guittot <vincent.guittot@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Jason Low <jason.low2@xxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: preeti@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1438595750-20455-1-git-send-email-vincent.guittot@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 446685e9bfa11174332fbb0b3218b37015fbf4ff
  Author: Kirill Tkhai <ktkhai@xxxxxxxx>
  Date:   Mon Aug 31 15:12:56 2015 +0300

      sched/core: Delete PF_EXITING checks from cpu_cgroup_exit() callback

      cgroup_exit() is not called from copy_process() after commit:

        e8604cb43690 ("cgroup: fix spurious lockdep warning in cgroup_exit()")

      from do_exit(). So this check is useless and the comment is obsolete.

      Signed-off-by: Kirill Tkhai <ktkhai@xxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/55E444C8.3020402@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit bc54da2176cd38cedea767eff637229a191a2383
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Aug 31 17:13:55 2015 +0200

      sched/core: Remove unused argument from sched_class::task_move_group

      The previous patches made the second argument go unused, remove it.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Byungchul Park <byungchul.park@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit daa59407b558e6e621e9081a308d5db3ef991fb6
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:22:00 2015 +0900

      sched/fair: Unify switched_{from,to}_fair() and task_move_group_fair()

      By observing that switched_from_fair() detaches from a runqueue, and
      switched_to_fair() attaches to a runqueue, we can see that
      task_move_group_fair() is one followed by the other with flipping the
      runqueue in between.

      Therefore extract all the common bits and implement all three
      functions in terms of them.

      This should fix a few corner cases wrt. vruntime normalization; where,
      when we take a task off of a runqueue we convert to an approximation
      of lag by subtracting min_vruntime, and when placing a task on the a
      runqueue to the reverse.

      Suggested-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [peterz: Changelog]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-6-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a9280514bf1e54775b8d7cd93d87c05c2b5273e6
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 11 16:10:59 2015 +0200

      sched/fair: Make the entity load aging on attaching tunable

      In case there are problems with the aging on attach, provide a debug
      knob to turn it off.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Byungchul Park <byungchul.park@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6efdb105d392da3ad5cb4ef951aed373cd049813
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:21:59 2015 +0900

      sched/fair: Fix switched_to_fair()'s per entity load tracking

      Where switched_from_fair() will remove the entity's load from the
      runqueue, switched_to_fair() does not currently add it back. This
      means that when a task leaves the fair class for a short duration; say
      because of PI; we loose its load contribution.

      This can ripple forward and disturb the load tracking because other
      operations (enqueue, dequeue) assume its factored in. Only once the
      runqueue empties will the load tracking recover.

      When we add it back in, age the per entity average to match up with
      the runqueue age. This has the obvious problem that if the task leaves
      the fair class for a significant time, the load will age to 0.

      Employ the normal migration rule for inter-runqueue moves in
      task_move_group_fair(). Again, there is the obvious problem of the
      task migrating while not in the fair class.

      The alternative solution would be to to omit the chunk in
      attach_entity_load_avg(), which would effectively reset the timestamp
      and use whatever avg there was.

      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [ Rewrote the changelog and comments. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-5-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1746babbb15594ba2d8d8196589bbbc2b5ff51c9
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:21:58 2015 +0900

      sched/fair: Have task_move_group_fair() also detach entity load from the 
old runqueue

      Since we attach the entity load to the new runqueue, we should also
      detatch the entity load from the old runqueue, otherwise load can
      accumulate.

      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [ Rewrote the changelog. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-4-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 50a2a3b246149d041065a67ccb3e98145f780a2f
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:21:57 2015 +0900

      sched/fair: Have task_move_group_fair() unconditionally add the entity 
load to the runqueue

      Currently we conditionally add the entity load to the rq when moving
      the task between cgroups.

      This doesn't make sense as we always 'migrate' the task between
      cgroups, so we should always migrate the load too.

      [ The history here is that we used to only migrate the blocked load
        which was only meaningfull when !queued. ]

      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [ Rewrote the changelog. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-3-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a05e8c51ff097ff73ec2947631d9102283545f7c
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:21:56 2015 +0900

      sched/fair: Factor out the {at,de}taching of the per entity load 
{to,from} the runqueue

      Currently we open-code the addition/subtraction of the per entity load
      to/from the runqueue, factor this out into helper functions.

      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [ Rewrote the changelog. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-2-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 973759c80db96ed4b4c5cb85ac7d48107f801371
  Merge: a75a606 6ff33f3
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Sep 13 09:51:21 2015 +0200

      Merge tag 'v4.3-rc1' into sched/core, to refresh the branch

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ebfb4988f0378e2ac3b4a0aa1ea20d724293f392
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 11:58:27 2015 +0200

      perf/x86/intel: Fix constraint access

      Sasha reported that we can get here with .idx==-1, and
      cpuc->event_constraints unallocated.

      Suggested-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: b371b5943178 ("perf/x86: Fix event/group validation")
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7c5b190e115a2f7a51a85f261e7d7dca4b4bbe64
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Thu Sep 10 21:55:27 2015 +0200

      x86/cpu: Print family/model/stepping in hex

      924e101a7ab6 ("x86/debug: Dump family, model, stepping of the
      boot CPU") had its good intentions to dump the exact F/M/S as an
      aid during debugging sessions but its output can be ambiguous.
      Fix that:

      -smpboot: CPU0: Intel Core Processor (Broadwell) (fam: 06, model: 47, 
stepping: 02)
      +smpboot: CPU0: Intel Core Processor (Broadwell) (family: 0x6, model: 
0x47, stepping: 0x2)

      Also, spell out "family".

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441914927-32037-1-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7c52198b9c36001d47e11d50f7f1556805c5c3e3
  Author: George Beshers <gbeshers@xxxxxxx>
  Date:   Sat Sep 12 21:51:05 2015 -0500

      x86/platform/uv: Insert per_cpu accessor function on uv_hub_nmi

      UV: NMI: insert this_cpu_read accessor function on uv_hub_nmi.

      On SGI UV systems a 'power nmi' command from the CMC causes
      all processors to drop into uv_handle_nmi().  With the 4.0
      kernel this results in

          BUG: unable to handle kernel paging request

      The bug is caused by the current code trying to use the PER_CPU
      variable uv_cpu_nmi.hub without an appropriate accessor
      function. That oversight occurred in

          commit e16321709c82 ("uv: Replace __get_cpu_var")
          Author: Christoph Lameter <cl@xxxxxxxxx>
          Date:   Sun Aug 17 12:30:41 2014 -0500

      This patch inserts this_cpu_read() in the uv_hub_nmi macro
      restoring the intended functionality.

      Signed-off-by: George Beshers <gbeshers@xxxxxxx>
      Acked-by: Mike Travis <travis@xxxxxxx>
      Cc: Alex Thorlton <athorlton@xxxxxxx>
      Cc: Dimitri Sivanich <sivanich@xxxxxxx>
      Cc: Hedi Berriche <hedi@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Russ Anderson <rja@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit cd1faefa66425c3fa338777773c5c017edea3439
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Aug 30 19:45:19 2015 -0700

      hwmon: (nct6775) Add support for NCT6793D

      NCT6793D is register compatible with NCT6792D.

      Also move nct6775_sio_names[] closer to enum kinds to simplify
      adding new chips.

      Tested-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Reviewed-by: Jean Delvare <jdelvare@xxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 728d29400488d54974d3317fe8a232b45fdb42ee
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Mon Aug 31 16:13:47 2015 -0700

      hwmon: (nct6775) Swap STEP_UP_TIME and STEP_DOWN_TIME registers for most 
chips

      The STEP_UP_TIME and STEP_DOWN_TIME registers are swapped for all chips 
but
      NCT6775.

      Reported-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Reviewed-by: Jean Delvare <jdelvare@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v3.10+
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit a75a6068dac25d4022ebcd82192ed6345407843c
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Sep 10 15:07:50 2015 +0200

      cpu/hotplug: Read_lock(tasklist_lock) doesn't need to disable irqs

      check_for_tasks() doesn't need to disable irqs, recursive
      read_lock() from interrupt is fine.

      While at it, s/do_each_thread/for_each_process_thread/.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Reviewed-by: Kirill Tkhai <ktkhai@xxxxxxxx>
      Reviewed-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Cc: Kirill Tkhai <ktkhai@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150910130750.GA20055@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 31409c97640ff5f1a49e34ac7f3c82097bf57bec
  Merge: e713c80 dc3a04d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 12 10:26:24 2015 +0200

      Merge branch 'for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu into core/urgent

      Pull RCU fix from Paul E. McKenney, fixing an inverted RCU_LOCKDEP_WARN() 
condition.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit eda2116f4ab6d79cfcffc202b5d2bbb0797ba013
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Fri Sep 11 19:24:19 2015 -0500

      [CIFS] mount option sec=none not displayed properly in /proc/mounts

      When the user specifies "sec=none" in a cifs mount, we set
      sec_type as unspecified (and set a flag and the username will be
      null) rather than setting sectype as "none" so
      cifs_show_security was not properly displaying it in
      cifs /proc/mounts entries.

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>
      Reviewed-by: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>

  commit e8684c88774c0ddfeefdbed0aa469b25b9962f3e
  Author: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
  Date:   Sat Sep 12 00:34:48 2015 +0300

      irda: ali-ircc: Fix deadlock in ali_ircc_sir_change_speed()

      ali_ircc_sir_change_speed() is always called with self->lock held,
      so acquiring the lock inside it leads to unavoidable deadlock.

      Call graph:
      ali_ircc_sir_change_speed() is called from ali_ircc_change_speed()
        ali_ircc_fir_hard_xmit() under spin_lock_irqsave(&self->lock, flags);
        ali_ircc_sir_hard_xmit() under spin_lock_irqsave(&self->lock, flags);
        ali_ircc_net_ioctl() under spin_lock_irqsave(&self->lock, flags);
        ali_ircc_dma_xmit_complete()
          ali_ircc_fir_interrupt()
            ali_ircc_interrupt() under spin_lock(&self->lock);
        ali_ircc_sir_write_wakeup()
          ali_ircc_sir_interrupt()
            ali_ircc_interrupt() under spin_lock(&self->lock);

      The patch removes spin_lock/unlock from ali_ircc_sir_change_speed().

      Found by Linux Driver Verification project (linuxtesting.org).

      Signed-off-by: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 38c089d1d8d058f5dff018a811568aa8e8bc47fc
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Fri Sep 11 15:01:16 2015 -0700

      openvswitch: Fix dependency on IPv6 defrag.

      When NF_CONNTRACK is built-in, NF_DEFRAG_IPV6 is a module, and
      OPENVSWITCH is built-in, the following build error would occur:

      net/built-in.o: In function `ovs_ct_execute':
      (.text+0x10f587): undefined reference to `nf_ct_frag6_gather'

      Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
      Reported-by: Jim Davis <jim.epost@xxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 447e9a4d27484175a84daaa8e03d35c650f443b7
  Author: Doug Ledford <dledford@xxxxxxxxxx>
  Date:   Fri Sep 11 12:52:26 2015 -0400

      IB/ehca: Deprecate driver, move to staging, schedule deletion

      The ehca driver is only supported on IBM machines with a custom EBus.
      As they have opted to build their newer machines using more industry
      standard technology and haven't really been pushing EBus capable
      machines for a while, this driver can now safely be moved to the
      staging area and scheduled for eventual removal.  This plan was brought
      to IBM's attention and received their sign-off.

      Cc: alexs@xxxxxxxxxxxxxxxxxx
      Cc: hnguyen@xxxxxxxxxx
      Cc: raisch@xxxxxxxxxx
      Cc: stefan.roscher@xxxxxxxxxx
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit c2d4fbd2163e607915cc05798ce7fb7f31117cc1
  Author: Linus Lüssing <linus.luessing@xxxxxxxxx>
  Date:   Fri Sep 11 18:39:48 2015 +0200

      bridge: fix igmpv3 / mldv2 report parsing

      With the newly introduced helper functions the skb pulling is hidden in
      the checksumming function - and undone before returning to the caller.

      The IGMPv3 and MLDv2 report parsing functions in the bridge still
      assumed that the skb is pointing to the beginning of the IGMP/MLD
      message while it is now kept at the beginning of the IPv4/6 header,
      breaking the message parsing and creating packet loss.

      Fixing this by taking the offset between IP and IGMP/MLD header into
      account, too.

      Fixes: 9afd85c9e455 ("net: Export IGMP/MLD message validation code")
      Reported-by: Tobias Powalowski <tobias.powalowski@xxxxxxxxxxxxxx>
      Tested-by: Tobias Powalowski <tobias.powalowski@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Lüssing <linus.luessing@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a19a19de8310fb8ca2ca0621a9db1aab082943c5
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Sep 11 11:33:01 2015 +0200

      bnx2x: use ktime_get_seconds() for timestamp

      commit c48f350ff5e7 "bnx2x: Add MFW dump support" added the
      bnx2x_update_mfw_dump() function that reads the current time and stores
      it in a 32-bit field that gets passed into a buffer in a fixed format.

      This is potentially broken when the epoch overflows in 2038, and
      otherwise overflows in 2106. As we're trying to avoid uses of
      struct timeval for this reason, I noticed the addition of this
      function, and tried to rewrite it in a way that is more explicit
      about the overflow and that will keep working once we deprecate
      struct timeval.

      I assume that it is not possible to change the ABI any more, otherwise
      we should try to use a 64-bit field for the seconds right away.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Cc: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Acked-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4
  Author: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
  Date:   Thu Sep 10 17:31:15 2015 -0300

      sctp: fix race on protocol/netns initialization

      Consider sctp module is unloaded and is being requested because an user
      is creating a sctp socket.

      During initialization, sctp will add the new protocol type and then
      initialize pernet subsys:

              status = sctp_v4_protosw_init();
              if (status)
                      goto err_protosw_init;

              status = sctp_v6_protosw_init();
              if (status)
                      goto err_v6_protosw_init;

              status = register_pernet_subsys(&sctp_net_ops);

      The problem is that after those calls to sctp_v{4,6}_protosw_init(), it
      is possible for userspace to create SCTP sockets like if the module is
      already fully loaded. If that happens, one of the possible effects is
      that we will have readers for net->sctp.local_addr_list list earlier
      than expected and sctp_net_init() does not take precautions while
      dealing with that list, leading to a potential panic but not limited to
      that, as sctp_sock_init() will copy a bunch of blank/partially
      initialized values from net->sctp.

      The race happens like this:

           CPU 0                           |  CPU 1
        socket()                           |
         __sock_create                     | socket()
          inet_create                      |  __sock_create
           list_for_each_entry_rcu(        |
              answer, &inetsw[sock->type], |
              list) {                      |   inet_create
            /* no hits */                  |
           if (unlikely(err)) {            |
            ...                            |
            request_module()               |
            /* socket creation is blocked  |
             * the module is fully loaded  |
             */                            |
             sctp_init                     |
              sctp_v4_protosw_init         |
               inet_register_protosw       |
                list_add_rcu(&p->list,     |
                             last_perm);   |
                                           |  list_for_each_entry_rcu(
                                           |     answer, &inetsw[sock->type],
              sctp_v6_protosw_init         |     list) {
                                           |     /* hit, so assumes protocol
                                           |      * is already loaded
                                           |      */
                                           |  /* socket creation continues
                                           |   * before netns is initialized
                                           |   */
              register_pernet_subsys       |

      Simply inverting the initialization order between
      register_pernet_subsys() and sctp_v4_protosw_init() is not possible
      because register_pernet_subsys() will create a control sctp socket, so
      the protocol must be already visible by then. Deferring the socket
      creation to a work-queue is not good specially because we loose the
      ability to handle its errors.

      So, as suggested by Vlad, the fix is to split netns initialization in
      two moments: defaults and control socket, so that the defaults are
      already loaded by when we register the protocol, while control socket
      initialization is kept at the same moment it is today.

      Fixes: 4db67e808640 ("sctp: Make the address lists per network namespace")
      Signed-off-by: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 19539ce783dd27768d4f7f3b753152bf983db65b
  Author: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 18:25:07 2015 -0600

      ebpf: emit correct src_reg for conditional jumps

      Instead of always emitting BPF_REG_X, let's emit BPF_REG_X only when the
      source actually is BPF_X. This causes programs generated by the classic
      converter to not be importable via bpf(), as the eBPF verifier checks that
      the src_reg is correct or 0. While not a problem yet, this will be a
      problem when BPF_PROG_DUMP lands, and we can potentially dump and 
re-import
      programs generated by the converter.

      Signed-off-by: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
      CC: Alexei Starovoitov <ast@xxxxxxxxxx>
      CC: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1853c949646005b5959c483becde86608f548f24
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 20:05:46 2015 +0200

      netlink, mmap: transform mmap skb into full skb on taps

      Ken-ichirou reported that running netlink in mmap mode for receive in
      combination with nlmon will throw a NULL pointer dereference in
      __kfree_skb() on nlmon_xmit(), in my case I can also trigger an "unable
      to handle kernel paging request". The problem is the skb_clone() in
      __netlink_deliver_tap_skb() for skbs that are mmaped.

      I.e. the cloned skb doesn't have a destructor, whereas the mmap netlink
      skb has it pointed to netlink_skb_destructor(), set in the handler
      netlink_ring_setup_skb(). There, skb->head is being set to NULL, so
      that in such cases, __kfree_skb() doesn't perform a skb_release_data()
      via skb_release_all(), where skb->head is possibly being freed through
      kfree(head) into slab allocator, although netlink mmap skb->head points
      to the mmap buffer. Similarly, the same has to be done also for large
      netlink skbs where the data area is vmalloced. Therefore, as discussed,
      make a copy for these rather rare cases for now. This fixes the issue
      on my and Ken-ichirou's test-cases.

      Reference: http://thread.gmane.org/gmane.linux.network/371129
      Fixes: bcbde0d449ed ("net: netlink: virtual tap device management")
      Reported-by: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Tested-by: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2172ce2303051764829d4958bd50a11ada0590f
  Merge: a4a5a73 0b61f2c
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 19:18:28 2015 +0100

      Merge branch 'uaccess' into fixes

  commit a4a5a7379e4ca03c192b732d61e446994eb67bbc
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Fri Sep 11 17:12:27 2015 +0100

      ARM: 8431/1: fix alignement of __bug_table section entries

      On old ARM chips, unaligned accesses to memory are not trapped and
      fixed.  On module load, symbols are relocated, and the relocation of
      __bug_table symbols is done on a u32 basis. Yet the section is not
      aligned to a multiple of 4 address, but to a multiple of 2.

      This triggers an Oops on pxa architecture, where address 0xbf0021ea
      is the first relocation in the __bug_table section :
        apply_relocate(): pxa3xx_nand: section 13 reloc 0 sym ''
        Unable to handle kernel paging request at virtual address bf0021ea
        pgd = e1cd0000
        [bf0021ea] *pgd=c1cce851, *pte=c1cde04f, *ppte=c1cde01f
        Internal error: Oops: 23 [#1] ARM
        Modules linked in:
        CPU: 0 PID: 606 Comm: insmod Not tainted 
4.2.0-rc8-next-20150828-cm-x300+ #887
        Hardware name: CM-X300 module
        task: e1c68700 ti: e1c3e000 task.ti: e1c3e000
        PC is at apply_relocate+0x2f4/0x3d4
        LR is at 0xbf0021ea
        pc : [<c000e7c8>]    lr : [<bf0021ea>]    psr: 80000013
        sp : e1c3fe30  ip : 60000013  fp : e49e8c60
        r10: e49e8fa8  r9 : 00000000  r8 : e49e7c58
        r7 : e49e8c38  r6 : e49e8a58  r5 : e49e8920  r4 : e49e8918
        r3 : bf0021ea  r2 : bf007034  r1 : 00000000  r0 : bf000000
        Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
        Control: 0000397f  Table: c1cd0018  DAC: 00000051
        Process insmod (pid: 606, stack limit = 0xe1c3e198)
        [<c000e7c8>] (apply_relocate) from [<c005ce5c>] 
(load_module+0x1248/0x1f5c)
        [<c005ce5c>] (load_module) from [<c005dc54>] 
(SyS_init_module+0xe4/0x170)
        [<c005dc54>] (SyS_init_module) from [<c000a420>] 
(ret_fast_syscall+0x0/0x38)

      Fix this by ensuring entries in __bug_table are all aligned to at least
      of multiple of 4. This transforms a module section  __bug_table as :
      -   [12] __bug_table       PROGBITS        00000000 002232 000018 00   A  
0   0  1
      +   [12] __bug_table       PROGBITS        00000000 002232 000018 00   A  
0   0  4

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Reviewed-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 0b61f2c0f37983c98ed4207f3f5e265938371b68
  Author: Julien Grall <julien.grall@xxxxxxxxxx>
  Date:   Fri Sep 11 17:25:59 2015 +0100

      arm/xen: Enable user access to the kernel before issuing a privcmd call

      When Xen is copying data to/from the guest it will check if the kernel
      has the right to do the access. If not, the hypercall will return an
      error.

      After the commit a5e090acbf545c0a3b04080f8a488b17ec41fe02 "ARM:
      software-based privileged-no-access support", the kernel can't access
      any longer the user space by default. This will result to fail on every
      hypercall made by the userspace (i.e via privcmd).

      We have to enable the userspace access and then restore the correct
      permission every time the privcmd is used to made an hypercall.

      I didn't find generic helpers to do a these operations, so the change
      is only arm32 specific.

      Reported-by: Riku Voipio <riku.voipio@xxxxxxxxxx>
      Signed-off-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 6e8f580d1fcc18e290713984c379cb97131c015a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 08:34:52 2015 +0100

      ARM: domains: add memory dependencies to get_domain/set_domain

      We need to have memory dependencies on get_domain/set_domain to avoid
      the compiler over-optimising these inline assembly instructions.

      Loads/stores must not be reordered across a set_domain(), so introduce
      a compiler barrier for that assembly.

      The value of get_domain() must not be cached across a set_domain(), but
      we still want to allow the compiler to optimise it away.  Introduce a
      dependency on current_thread_info()->cpu_domain to avoid this; the new
      memory clobber in set_domain() should therefore cause the compiler to
      re-load this.  The other advantage of using this is we should have its
      address in the register set already, or very soon after at most call
      sites.

      Tested-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 716ff1921a86c637b8875c7bb312fc6755fa9300
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 08:17:39 2015 +0100

      ARM: domains: thread_info.h no longer needs asm/domains.h

      As of 1eef5d2f1b46 ("ARM: domains: switch to keeping domain value in
      register") we no longer need to include asm/domains.h into
      asm/thread_info.h.  Remove it.

      Tested-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 6fe810bda0bd9a5d7674fc671fac27b8aa8ec243
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Sat Sep 5 15:47:36 2015 -0400

      block: blkg_destroy_all() should clear q->root_blkg and ->root_rl.blkg

      While making the root blkg unconditional, ec13b1d6f0a0 ("blkcg: always
      create the blkcg_gq for the root blkcg") removed the part which clears
      q->root_blkg and ->root_rl.blkg during q exit.  This leaves the two
      pointers dangling after blkg_destroy_all().  blk-throttle exit path
      performs blkg traversals and dereferences ->root_blkg and can lead to
      the following oops.

       BUG: unable to handle kernel NULL pointer dereference at 0000000000000558
       IP: [<ffffffff81389746>] __blkg_lookup+0x26/0x70
       ...
       task: ffff88001b4e2580 ti: ffff88001ac0c000 task.ti: ffff88001ac0c000
       RIP: 0010:[<ffffffff81389746>]  [<ffffffff81389746>] 
__blkg_lookup+0x26/0x70
       ...
       Call Trace:
        [<ffffffff8138d14a>] blk_throtl_drain+0x5a/0x110
        [<ffffffff8138a108>] blkcg_drain_queue+0x18/0x20
        [<ffffffff81369a70>] __blk_drain_queue+0xc0/0x170
        [<ffffffff8136a101>] blk_queue_bypass_start+0x61/0x80
        [<ffffffff81388c59>] blkcg_deactivate_policy+0x39/0x100
        [<ffffffff8138d328>] blk_throtl_exit+0x38/0x50
        [<ffffffff8138a14e>] blkcg_exit_queue+0x3e/0x50
        [<ffffffff8137016e>] blk_release_queue+0x1e/0xc0
       ...

      While the bug is a straigh-forward use-after-free bug, it is tricky to
      reproduce because blkg release is RCU protected and the rest of exit
      path usually finishes before RCU grace period.

      This patch fixes the bug by updating blkg_destro_all() to clear
      q->root_blkg and ->root_rl.blkg.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: "Richard W.M. Jones" <rjones@xxxxxxxxxx>
      Reported-by: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/g/CA+5PVA5rzQ0s4723n5rHBcxQa9t0cW8BPPBekr_9aMRoWt2aYg@xxxxxxxxxxxxxx
      Fixes: ec13b1d6f0a0 ("blkcg: always create the blkcg_gq for the root 
blkcg")
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Tested-by: Richard W.M. Jones <rjones@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 46348456c1791053dcbe5a9e21825b10a3c8a8fb
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Thu Sep 3 19:28:23 2015 +0300

      block: Copy a user iovec if it includes gaps

      For drivers that don't support gaps in the SG lists handed to
      them we must bounce (copy the user buffers) and pass a bio that
      does not include gaps. This doesn't matter for any current user,
      but will help to allow iser which can't handle gaps to use the
      block virtual boundary instead of using driver-local bounce
      buffering when handling SG_IO commands.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 87a816df537e096d404add543ef47b796906c130
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Tue Sep 8 09:33:35 2015 -0600

      block: Refuse adding appending a gapped integrity page to a bio

      This is only theoretical at the moment given that the only
      subsystems that generate integrity payloads are the block layer
      itself and the scsi target (which generate well aligned integrity
      payloads). But when we will expose integrity meta-data to user-space,
      we'll need to refuse appending a page with a gap (if the queue
      virtual boundary is set).

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 7f39add3b08cbbdb99abe50e6d7c342e6800d684
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Fri Sep 11 09:03:04 2015 -0600

      block: Refuse request/bio merges with gaps in the integrity payload

      If a driver sets the block queue virtual boundary mask, it means that
      it cannot handle gaps so we must not allow those in the integrity
      payload as well.

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>

      Fixed up by me to have duplicate integrity merge functions, depending
      on whether block integrity is enabled or not. Fixes a compilations
      issue with CONFIG_BLK_DEV_INTEGRITY unset.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 4c17a6d56bb0cad3066a714e94f7185a24b40f49
  Author: Jann Horn <jann@xxxxxxxxx>
  Date:   Fri Sep 11 16:27:27 2015 +0200

      CIFS: fix type confusion in copy offload ioctl

      This might lead to local privilege escalation (code execution as
      kernel) for systems where the following conditions are met:

       - CONFIG_CIFS_SMB2 and CONFIG_CIFS_POSIX are enabled
       - a cifs filesystem is mounted where:
        - the mount option "vers" was used and set to a value >=2.0
        - the attacker has write access to at least one file on the filesystem

      To attack this, an attacker would have to guess the target_tcon
      pointer (but guessing wrong doesn't cause a crash, it just returns an
      error code) and win a narrow race.

      CC: Stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jann Horn <jann@xxxxxxxxx>
      Signed-off-by: Steve French <smfrench@xxxxxxxxx>

  commit 84cba178a3b88efe2668a9039f70abda072faa21
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 13:11:55 2015 +0300

      crypto: testmgr - don't copy from source IV too much

      While the destination buffer 'iv' is MAX_IVLEN size,
      the source 'template[i].iv' could be smaller, thus
      memcpy may read read invalid memory.
      Use crypto_skcipher_ivsize() to get real ivsize
      and pass it to memcpy.

      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 7e90f9b2b56669260e5f6f97974735d187f79b7d
  Author: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 19:29:11 2015 +0800

      ASoC: wm8960: correct gain value for input PGA and add microphone PGA

      The input PGAs have a gain range from -17.25dB to +30dB in 0.75dB steps.

      The boost stage can provide additional gain. For line inputs, -12dB to
      +6dB gain is available on the boost mixer. For micphone inputs, it can
      provide up to +29dB additional gain from the microphone PGA.

      Signed-off-by: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 3758ff5f3dab57cd768d54279962a2f6bbc17188
  Author: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 19:29:10 2015 +0800

      ASoC: wm8960: correct the min gain value of some PGA

      The min gain is the corresponding gain value when the register value is 0
      instead of 1, just correct it.

      Signed-off-by: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit dd85ebf681ef0ee1fc985c353dd45e8b53b5dc1e
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 10 16:48:13 2015 +0530

      spi: spidev: fix possible NULL dereference

      During the last close we are freeing spidev if spidev->spi is NULL, but
      just before checking if spidev->spi is NULL we are dereferencing it.
      Lets add a check there to avoid the NULL dereference.

      Fixes: 9169051617df ("spi: spidev: Don't mangle max_speed_hz in 
underlying spi device")
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Reviewed-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Tested-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit f17b329b73a0393dc9d5fc5b4457189f92e5bbef
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Thu Sep 10 13:40:16 2015 +0800

      ASoC: rt5645: Remove incorrect settings

      The patch removes the incorrect settings to avoid the pop sound in the
      first playback with headphone after boot.

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 75881df3fd7708f234c1e2573ade812eb5701708
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 10 18:01:44 2015 +0530

      ASoC: dapm: fix memory leak

      Incase of an unknown event we were directly returning but we missed
      freeing params.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit d249872939bfa86c9cce44a56a8cbdbc7086519b
  Author: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
  Date:   Fri Jul 17 16:34:10 2015 +0300

      perf/x86/intel/bts: Set event->hw.itrace_started in pmu::start to match 
the new logic

      Since event->hw.itrace_started is now set in pmu::start() to signal the 
beginning of
      the trace, do so also in the intel_bts driver.

      Signed-off-by: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: acme@xxxxxxxxxxxxx
      Cc: adrian.hunter@xxxxxxxxx
      Cc: hpa@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1437140050-23363-4-git-send-email-alexander.shishkin@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5473e0cc37c03c576adbda7591a6cc8e37c1bb7f
  Author: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
  Date:   Fri Aug 28 14:55:56 2015 +0800

      sched: 'Annotate' migrate_tasks()

      Kernel testing triggered this warning:

      | WARNING: CPU: 0 PID: 13 at kernel/sched/core.c:1156 
do_set_cpus_allowed+0x7e/0x80()
      | Modules linked in:
      | CPU: 0 PID: 13 Comm: migration/0 Not tainted 4.2.0-rc1-00049-g25834c7 #2
      | Call Trace:
      |   dump_stack+0x4b/0x75
      |   warn_slowpath_common+0x8b/0xc0
      |   warn_slowpath_null+0x22/0x30
      |   do_set_cpus_allowed+0x7e/0x80
      |   cpuset_cpus_allowed_fallback+0x7c/0x170
      |   select_fallback_rq+0x221/0x280
      |   migration_call+0xe3/0x250
      |   notifier_call_chain+0x53/0x70
      |   __raw_notifier_call_chain+0x1e/0x30
      |   cpu_notify+0x28/0x50
      |   take_cpu_down+0x22/0x40
      |   multi_cpu_stop+0xd5/0x140
      |   cpu_stopper_thread+0xbc/0x170
      |   smpboot_thread_fn+0x174/0x2f0
      |   kthread+0xc4/0xe0
      |   ret_from_kernel_thread+0x21/0x30

      As Peterz pointed out:

      | So the normal rules for changing task_struct::cpus_allowed are holding
      | both pi_lock and rq->lock, such that holding either stabilizes the mask.
      |
      | This is so that wakeup can happen without rq->lock and load-balance
      | without pi_lock.
      |
      | From this we already get the relaxation that we can omit acquiring
      | rq->lock if the task is not on the rq, because in that case
      | load-balancing will not apply to it.
      |
      | ** these are the rules currently tested in do_set_cpus_allowed() **
      |
      | Now, since __set_cpus_allowed_ptr() uses task_rq_lock() which
      | unconditionally acquires both locks, we could get away with holding just
      | rq->lock when on_rq for modification because that'd still exclude
      | __set_cpus_allowed_ptr(), it would also work against
      | __kthread_bind_mask() because that assumes !on_rq.
      |
      | That said, this is all somewhat fragile.
      |
      | Now, I don't think dropping rq->lock is quite as disastrous as it
      | usually is because !cpu_active at this point, which means load-balance
      | will not interfere, but that too is somewhat fragile.
      |
      | So we end up with a choice of two fragile..

      This patch fixes it by following the rules for changing
      task_struct::cpus_allowed with both pi_lock and rq->lock held.

      Reported-by: kernel test robot <ying.huang@xxxxxxxxx>
      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      [ Modified changelog and patch. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/BLU436-SMTP1660820490DE202E3934ED3806E0@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a6b277857fd2c990bc208ca1958d3f34d26052f7
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Sat Sep 5 16:55:05 2015 +0200

      locking/qspinlock/x86: Only emit the test-and-set fallback when building 
guest support

      Only emit the test-and-set fallback for Hypervisors lacking
      PARAVIRT_SPINLOCKS support when building for guests.

      Suggested-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: stable@xxxxxxxxxxxxxxx # 4.2
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 43b3f02899f74ae9914a39547cc5492156f0027a
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 4 17:25:23 2015 +0200

      locking/qspinlock/x86: Fix performance regression under unaccelerated VMs

      Dave ran into horrible performance on a VM without PARAVIRT_SPINLOCKS
      set and Linus noted that the test-and-set implementation was retarded.

      One should spin on the variable with a load, not a RMW.

      While there, remove 'queued' from the name, as the lock isn't queued
      at all, but a simple test-and-set.

      Suggested-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Reported-by: Dave Chinner <david@xxxxxxxxxxxxx>
      Tested-by: Dave Chinner <david@xxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Waiman Long <Waiman.Long@xxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Link: 
http://lkml.kernel.org/r/20150904152523.GR18673@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5f25f066f75a67835abb5e400471a27abd09395b
  Author: Xiaolong Ye <yexl@xxxxxxxxxxx>
  Date:   Fri Sep 11 11:05:23 2015 +0800

      PM / devfreq: Fix incorrect type issue.

      time_in_state in struct devfreq is defined as unsigned long, so
      devm_kzalloc should use sizeof(unsigned long) as argument instead
      of sizeof(unsigned int), otherwise it will cause unexpected result
      in 64bit system.

      Signed-off-by: Xiaolong Ye <yexl@xxxxxxxxxxx>
      Signed-off-by: Kevin Liu <kliu5@xxxxxxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 14de3903181ca41dde73d57ad4f7a79a314ee6bf
  Author: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
  Date:   Tue Aug 18 13:47:41 2015 +0900

      PM / devfreq: tegra: Update governor to use devfreq_update_stats()

      Direct invocation of get_dev_status() is no more recommended.

      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit d54cdf3fc91aae3780433471d15d73413a845bc0
  Author: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
  Date:   Tue Aug 18 13:45:49 2015 +0900

      PM / devfreq: comments for get_dev_status usage updated

      With the introduction of devfreq_update_stats(), governors
      are not recommended to use get_dev_status() directly.

      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit d3b7e1745c0d1be2add1bb58065eef142c5a098f
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Fri Aug 14 18:57:00 2015 +0100

      PM / devfreq: drop comment about thermal setting max_freq

      The thermal infrastructure should use the devfreq cooling device, which
      uses the OPP library to disable OPPs as necessary.

      Fix a couple of typos in the same comment while we are at it.

      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 08e75e754a6d9838e490b74551d19fc04d0fd6f9
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Fri Aug 14 18:56:56 2015 +0100

      PM / devfreq: cache the last call to get_dev_status()

      The return value of get_dev_status() can be reused.  Cache it so that
      other parts of the kernel can reuse it instead of having to call the
      same function again.

      Cc: Kyungmin Park <kyungmin.park@xxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 9348da2f1c2ca8e064d4907cdc5b3a19477df933
  Author: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
  Date:   Mon Aug 10 11:42:25 2015 +0530

      PM / devfreq: Drop unlikely before IS_ERR(_OR_NULL)

      IS_ERR(_OR_NULL) already contain an 'unlikely' compiler flag and there
      is no need to do that again from its callers. Drop it.

      Signed-off-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 86fa4cdb0f1e16d7e27278e29e4f0b9ba22f1a9b
  Author: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
  Date:   Wed Aug 5 10:55:10 2015 +0900

      PM / devfreq: exynos-ppmu: bit-wise operation bugfix.

      Make it u64 before left-shifting 32bits.

      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit d80f02231a1ee891f56f06ee6e4646db6ba28836
  Author: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>
  Date:   Fri Jul 24 13:17:25 2015 +0900

      PM / devfreq: exynos-ppmu: Update documentation to support PPMUv2

      This patch updates the documentation to include the information of PPMUv2.
      The PPMUv2 is used for Exynos5433 and Exynos7420 to monitor the 
performance
      of each IP in Exynos SoC.

      Cc: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
      Cc: Kyungmin Park <kyungmin.park@xxxxxxxxxxx>
      Signed-off-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>

  commit 77fe46a301a75795cf1d43ed2988a15c1600d1b5
  Author: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>
  Date:   Fri Jul 24 13:17:24 2015 +0900

      PM / devfreq: exynos-ppmu: Add the support of PPMUv2 for Exynos5433

      This patch adds the support for PPMU (Platform Performance Monitoring 
Unit)
      version 2.0 for Exynos5433 SoC. Exynos5433 SoC must need PPMUv2 which is
      quite different from PPMUv1.1. The exynos-ppmu.c driver supports both 
PPMUv1.1
      and PPMUv2.

      Cc: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
      Cc: Kyungmin Park <kyungmin.park@xxxxxxxxxxx>
      Signed-off-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>

  commit f47ff87f79a0f65db6af5b6bebd67b8f011994d1
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Jul 13 08:58:51 2015 +0200

      PM / devfreq: event: Remove incorrect property in exynos-ppmu DT binding

      The exynos-ppmu driver is only a clock consumer and not a clock provider
      but its Device Tree binding listed #clock-cells as an optional property.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 53147b6cabee5e8d1997b5682fcc0c3b72ddf9c2
  Author: Azael Avalos <coproscefalo@xxxxxxxxx>
  Date:   Wed Sep 9 11:25:45 2015 -0600

      toshiba_acpi: Fix hotkeys registration on some toshiba models

      Commit a2b3471b5b13 ("toshiba_acpi: Use the Hotkey Event Type function
      for keymap choosing") changed the *setup_keyboard function to query for
      the Hotkey Event Type to help choose the correct keymap, but turns out
      that here are certain Toshiba models out there not implementing this
      feature, and thus, failing to continue the input device registration and
      leaving such laptops without hotkey support.

      This patch changes such check, and instead of returning an error if
      the Hotkey Event Type is not present, we simply inform userspace about it,
      changing the message printed from err to notice, making the function
      responsible for registering the input device to continue.

      This issue was found on a Toshiba Portege Z30-B, but there might be
      some other models out there affected by this regression as well.

      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1+
      Signed-off-by: Azael Avalos <coproscefalo@xxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit cf680eae34d26bd474c2ed3bd7d3aff59054aed5
  Author: Azael Avalos <coproscefalo@xxxxxxxxx>
  Date:   Wed Sep 9 11:25:44 2015 -0600

      toshiba_acpi: Fix USB Sleep and Music always disabled

      Commit e1a949c1b988 ("toshiba_acpi: Refactor *{get, set} functions return
      value") made changes on the return type of the HCI/SCI functions, but a
      typo on the USB Sleep and Music code is always reporting non existent
      support for such feature.

      This patch corrects the typo, changing an assignment to a comparison,
      making the laptops with actual support for such feature to work again.

      Signed-off-by: Azael Avalos <coproscefalo@xxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit 3bba75a2ec32bd5fa7024a4de3b8cf9ee113a76a
  Author: Romain Perier <romain.perier@xxxxxxxxx>
  Date:   Sun Aug 23 11:32:37 2015 +0200

      clk: rockchip: Add pclk_peri to critical clocks on RK3066/RK3188

      Now that the rockchip clock subsystem does clock gating with GPIO banks,
      these are no longer enabled once during probe and no longer stay enabled
      for eternity. When all these clocks are disabled, the parent clock 
pclk_peri
      might be disabled too, as no other child claims it. So, we need to add 
pclk_peri
      to the critical clocks.

      Signed-off-by: Romain Perier <romain.perier@xxxxxxxxx>
      Tested-by: Michael Niewoehner <linux@xxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 1166160ab531198f7abc773992c0e04d0f9b7600
  Author: Michael Niewoehner <linux@xxxxxxxxxxxxxx>
  Date:   Tue Aug 25 22:22:07 2015 +0200

      clk: rockchip: add pclk_cpu to the list of rk3188 critical clocks

      pclk_cpu needs to keep running because it is needed for devices like
      the act8865 regulator but with the recent gpio clock handling this is
      not always the case anymore. So add it to the list of critical clocks.

      Signed-off-by: Michael Niewoehner <linux@xxxxxxxxxxxxxx>
      Reviewed-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit bb0f73616396e7929b68d3bdea70064003599d33
  Author: Heiko Stuebner <heiko@xxxxxxxxx>
  Date:   Fri Aug 21 19:51:41 2015 +0200

      clk: rockchip: handle critical clocks after registering all clocks

      Currently the registration of critical clocks is done in the function
      shared between rk3066 and rk3188 clock trees. That results in them
      getting handled maybe before all of them are registered.

      Therefore move the critical clock handling down to the end of the soc-
      specific clock registration function, so that all clocks are registered
      before they're maybe handled as critical clock.

      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Tested-by: Michael Niewoehner <linux@xxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit e11fc21e756e662e465cac3da6547d438d0b1446
  Author: Grazvydas Ignotas <notasas@xxxxxxxxx>
  Date:   Sat Sep 5 02:32:34 2015 +0300

      twl4030_charger: fix another compile error

      When CONFIG_CHARGER_TWL4030=y and CONFIG_TWL4030_MADC=m we get a
      compile error:

      drivers/built-in.o: In function `twl4030_charger_update_current':
      twl4030_charger.c:(.text+0x504681): undefined reference to
      `twl4030_get_madc_conversion'

      Use IS_REACHABLE to fix it.

      Cc: NeilBrown <neil@xxxxxxxxxx>
      Reported-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Sebastian Reichel <sre@xxxxxxxxxx>

  commit aefc574bbbbe74bb891ba392d98f2d59a417c774
  Author: Sebastian Reichel <sre@xxxxxxxxxx>
  Date:   Thu Sep 10 10:00:55 2015 +0200

      Revert "twl4030_charger: correctly handle -EPROBE_DEFER from 
devm_usb_get_phy_by_node"

      Revert commit 3fc3895e4fe17ee92ae1d1bb9f04da6069e8c370, since
      it introduced a boot failure on some OMAP platforms.

      Reported-by: Kevin Hilman <khilman@xxxxxxxxxx>
      Signed-off-by: Sebastian Reichel <sre@xxxxxxxxxx>

  commit 30059d494a72603d066baf55c748803df968aa08
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Wed Apr 29 13:07:38 2015 -0400

      tile: use global strscpy() rather than private copy

      Now that strscpy() is a standard API, remove the local copy.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 30035e45753b708e7d47a98398500ca005e02b86
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Wed Apr 29 12:52:04 2015 -0400

      string: provide strscpy()

      The strscpy() API is intended to be used instead of strlcpy(),
      and instead of most uses of strncpy().

      - Unlike strlcpy(), it doesn't read from memory beyond (src + size).

      - Unlike strlcpy() or strncpy(), the API provides an easy way to check
        for destination buffer overflow: an -E2BIG error return value.

      - The provided implementation is robust in the face of the source
        buffer being asynchronously changed during the copy, unlike the
        current implementation of strlcpy().

      - Unlike strncpy(), the destination buffer will be NUL-terminated
        if the string in the source buffer is too long.

      - Also unlike strncpy(), the destination buffer will not be updated
        beyond the NUL termination, avoiding strncpy's behavior of zeroing
        the entire tail end of the destination buffer.  (A memset() after
        the strscpy() can be used if this behavior is desired.)

      - The implementation should be reasonably performant on all
        platforms since it uses the asm/word-at-a-time.h API rather than
        simple byte copy.  Kernel-to-kernel string copy is not considered
        to be performance critical in any case.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 135919a3a80565070b9645009e65f73e72c661c0
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Wed Sep 9 13:35:05 2015 -0400

      intel_idle: Skylake Client Support - updated

      Addition of PC9 state, and minor tweaks to existing PC6 and PC8 states.

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit 85b4e4eb2f9ac29ee8ec47f1f055f251cb251a3c
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 00:08:45 2015 +0200

      wmi: Remove private %pUL implementation

      The work performed by wmi_gtoa is equivalent to simply sprintf(out,
      "%pUL", in), so one could replace its body by this. However, most
      users feed the result directly as a %s argument to some other function
      which also understands the %p extensions (they all ultimately use
      vsnprintf), so we can eliminate some stack buffers and quite a bit of
      code by just using %pUL directly.

      In wmi_dev_uevent I'm not sure whether there's room for a
      nul-terminator in env->buf, so I've just replaced wmi_gtoa with the
      equivalent sprintf call.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit 85e0a0f21a14bfd9145422a6a627c3df47101bd8
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Thu Sep 10 10:36:06 2015 +0100

      Btrfs: remove unnecessary locking of cleaner_mutex to avoid deadlock

      After commmit e44163e17796 ("btrfs: explictly delete unused block groups
      in close_ctree and ro-remount"), added in the 4.3 merge window, we have
      calls to btrfs_delete_unused_bgs() while holding the cleaner_mutex.
      This can cause a deadlock with a concurrent block group relocation (when
      a filesystem balance or shrink operation is in progress for example)
      because btrfs_delete_unused_bgs() locks delete_unused_bgs_mutex and the
      relocation path locks first delete_unused_bgs_mutex and then it locks
      cleaner_mutex, resulting in a classic ABBA deadlock:

               CPU 0                                        CPU 1

      lock fs_info->cleaner_mutex

                                                 __btrfs_balance() || 
btrfs_shrink_device()
                                                   lock 
fs_info->delete_unused_bgs_mutex
                                                   btrfs_relocate_chunk()
                                                     
btrfs_relocate_block_group()
                                                       lock 
fs_info->cleaner_mutex
      btrfs_delete_unused_bgs()
        lock fs_info->delete_unused_bgs_mutex

      Fix this by not taking the cleaner_mutex before calling
      btrfs_delete_unused_bgs() because it's no longer needed after
      commit 67c5e7d464bc ("Btrfs: fix race between balance and unused block
      group deletion"). The mutex fs_info->delete_unused_bgs_mutex, the
      spinlock fs_info->unused_bgs_lock and a block group's spinlock are
      enough to get correct serialization between tasks running relocation
      and unused block group deletion (as well as between multiple tasks
      concurrently calling btrfs_delete_unused_bgs()).

      This issue was discussed (in the mailing list) during the review of
      the patch titled "btrfs: explictly delete unused block groups in
      close_ctree and ro-remount" and it was agreed that acquiring the
      cleaner mutex had to be dropped after the patch titled
      "Btrfs: fix race between balance and unused block group deletion"
      got merged (both patches were submitted at about the same time, but
      one landed in kernel 4.2 and the other in the 4.3 merge window).

      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit 3a0e27d84bb9abac5e39dc71706768a88c72cb71
  Author: Arnaud Pouliquen <arnaud.pouliquen@xxxxxx>
  Date:   Thu Sep 10 09:45:55 2015 +0200

      ASoC: sti: check return of of_property_read

      Add check on of_property_read to return error when
      DT required property is not defined.

      Signed-off-by: Arnaud Pouliquen <arnaud.pouliquen@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit d630526d0aa6acc0868dae892b1febda72029a3e
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 10:19:52 2015 +0200

      spi: atmel: remove warning when !CONFIG_PM_SLEEP

      When CONFIG_PM is defined but not CONFIG_PM_SLEEP (this happens when
      CONFIG_SUSPEND is not defined), there is the following warning:

      drivers/spi/spi-atmel.c:1723:12: warning: â??atmel_spi_suspendâ?? defined 
but not used [-Wunused-function]
      drivers/spi/spi-atmel.c:1741:12: warning: â??atmel_spi_resumeâ?? defined 
but not used [-Wunused-function]

      Enclose both atmel_spi_suspend and atmel_spi_resume in #ifdef
      CONFIG_PM_SLEEP/#endif to solve that.

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 2a3fffd45822070309bcf0b1e1dae624d633824a
  Author: Martin Sperl <kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 09:32:14 2015 +0000

      spi: bcm2835: BUG: fix wrong use of PAGE_MASK

      There is a bug in the alignment checking of transfers,
      that results in DMA not being used for un-aligned
      transfers that do not cross page-boundries, which is valid.

      This is due to a missconception of the meaning PAGE_MASK
      when implementing that check originally - (PAGE_SIZE - 1)
      should have been used instead.

      Also fixes a copy/paste error.

      Reported-by: <robert@xxxxxxxxxxx>
      Signed-off-by: Martin Sperl <kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 9da75de030bb6e49475ef37c8495d07e98cfeb33
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Sep 9 14:27:07 2015 +0200

      crypto: sunxi-ss - Fix a possible driver hang with ciphers

      The sun4i_ss_opti_poll function cipher data until the output miter have
      a length of 0.
      If the crypto API client, give more SGs than necessary this could result
      in an infinite loop.
      Fix it by checking for remaining bytes, just like sun4i_ss_cipher_poll().

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f1ab428711358fbb747ba392c3448462494e6c6a
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Wed Sep 9 18:22:35 2015 +1000

      crypto: vmx - VMX crypto should depend on CONFIG_VSX

      This code uses FP (floating point), Altivec and VSX (Vector-Scalar
      Extension). It can just depend on CONFIG_VSX though, because that
      already depends on FP and Altivec.

      Otherwise we get lots of link errors such as:

        drivers/built-in.o: In function `.p8_aes_setkey':
        aes.c:(.text+0x2d325c): undefined reference to `.enable_kernel_altivec'
        aes.c:(.text+0x2d326c): undefined reference to `.enable_kernel_vsx'

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e297c939b745e420ef0b9dc989cb87bda617b399
  Author: Paul Mackerras <paulus@xxxxxxxxxx>
  Date:   Thu Sep 10 14:36:21 2015 +1000

      powerpc/MSI: Fix race condition in tearing down MSI interrupts

      This fixes a race which can result in the same virtual IRQ number
      being assigned to two different MSI interrupts.  The most visible
      consequence of that is usually a warning and stack trace from the
      sysfs code about an attempt to create a duplicate entry in sysfs.

      The race happens when one CPU (say CPU 0) is disposing of an MSI
      while another CPU (say CPU 1) is setting up an MSI.  CPU 0 calls
      (for example) pnv_teardown_msi_irqs(), which calls
      msi_bitmap_free_hwirqs() to indicate that the MSI (i.e. its
      hardware IRQ number) is no longer in use.  Then, before CPU 0 gets
      to calling irq_dispose_mapping() to free up the virtal IRQ number,
      CPU 1 comes in and calls msi_bitmap_alloc_hwirqs() to allocate an
      MSI, and gets the same hardware IRQ number that CPU 0 just freed.
      CPU 1 then calls irq_create_mapping() to get a virtual IRQ number,
      which sees that there is currently a mapping for that hardware IRQ
      number and returns the corresponding virtual IRQ number (which is
      the same virtual IRQ number that CPU 0 was using).  CPU 0 then
      calls irq_dispose_mapping() and frees that virtual IRQ number.
      Now, if another CPU comes along and calls irq_create_mapping(), it
      is likely to get the virtual IRQ number that was just freed,
      resulting in the same virtual IRQ number apparently being used for
      two different hardware interrupts.

      To fix this race, we just move the call to msi_bitmap_free_hwirqs()
      to after the call to irq_dispose_mapping().  Since virq_to_hw()
      doesn't work for the virtual IRQ number after irq_dispose_mapping()
      has been called, we need to call it before irq_dispose_mapping() and
      remember the result for the msi_bitmap_free_hwirqs() call.

      The pattern of calling msi_bitmap_free_hwirqs() before
      irq_dispose_mapping() appears in 5 places under arch/powerpc, and
      appears to have originated in commit 05af7bd2d75e ("[POWERPC] MPIC
      U3/U4 MSI backend") from 2007.

      Fixes: 05af7bd2d75e ("[POWERPC] MPIC U3/U4 MSI backend")
      Cc: stable@xxxxxxxxxxxxxxx # v2.6.22+
      Reported-by: Alexey Kardashevskiy <aik@xxxxxxxxx>
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit af4cb25df93d2e7a97d65db2bfacaa4400988dea
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 21:19:49 2015 +0100

      ARM: uaccess: fix undefined instruction on ARMv7M/noMMU

      The use of get_domain() in copy_thread() results in an oops on
      ARMv7M/noMMU systems.  The thread cpu_domain value is only used when
      CONFIG_CPU_USE_DOMAINS is enabled, so there's no need to save the
      value in copy_thread() except when this is enabled, and this option
      will never be enabled on these platforms.

      Unhandled exception: IPSR = 00000006 LR = fffffff1
      CPU: 0 PID: 0 Comm: swapper Not tainted 
4.2.0-next-20150909-00001-gb8ec5ad #41
      Hardware name: NXP LPC18xx/43xx (Device Tree)
      task: 2823fbe0 ti: 2823c000 task.ti: 2823c000
      PC is at copy_thread+0x18/0x92
      LR is at copy_thread+0x19/0x92
      pc : [<2800a46e>]    lr : [<2800a46f>]    psr: 4100000b
      sp : 2823df00  ip : 00000000  fp : 287c81c0
      r10: 00000000  r9 : 00800300  r8 : 287c8000
      r7 : 287c8000  r6 : 2818908d  r5 : 00000000  r4 : 287ca000
      r3 : 00000000  r2 : 00000000  r1 : fffffff0  r0 : 287ca048
      xPSR: 4100000b

      Reported-by: Ariel D'Alessandro <ariel@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 296254f3223d201f2aa53f5f717eedfdc63f3db8
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 00:30:06 2015 +0100

      ARM: uaccess: remove unneeded uaccess_save_and_disable macro

      This macro is never referenced, remove it.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 39dc53deff30d9b239ac36cfeb0ef2022d03a449
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 00:29:15 2015 +0100

      ARM: swpan: fix nwfpe for uaccess changes

      NWFPE needs to access userspace to check whether the next instruction
      is another FP instruction.  Allow userspace access for this read.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit ddab2c0eaf57b2de0b2516a477e3ce0f7554509b
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Wed Sep 9 22:03:30 2015 +0300

      tools/virtio: fix build after 4.2 changes

      more stubs, mostly

      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>

  commit f1ec5ec7a94ba8138f9cbdc1e9e3b03aee29c4df
  Author: Liam Girdwood <liam.r.girdwood@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 12:10:31 2015 +0100

      ASoC: intel: Fix SSP port configuration after RTD3 resume.

      Currently the SSP port settings are being clobbered as part of the DSP
      RTD3 restore logic. make sure we save the correct params and restore them
      at resume. The FW sadly does not save SSP settings as part of the PM
      context.

      Signed-off-by: Liam Girdwood <liam.r.girdwood@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 721b51fcf91898299d96f4b72cb9434cda29dce6
  Author: John Lin <john.lin@xxxxxxxxxxx>
  Date:   Wed Sep 9 16:47:48 2015 +0800

      ASoC: rt5645: Add struct dmi_system_id "Google Ultima" for chrome platform

      Signed-off-by: John Lin <john.lin@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 6ccea107eba46fbc7de40e944bf17145c2809666
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 17:05:27 2015 +0300

      ath10k: print invalid mcs reported in rx descriptor

      Sometimes hardware reports invalid mcs index in rx descriptor
      when operating in VHT80 mode and all packets with invalid mcs
      will be eventually dropped in mac80211. This issue is observerd during
      testing on QCA99X0 chipsets.

      This patch adds a warn message for dumping the rx desc info which helps
      in analysing the issue when invalid mcs is received.

      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0c6d6f2606dfe3758265fb29bfe8103e89d99bab
  Author: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
  Date:   Wed Sep 2 13:20:20 2015 +0200

      ath10k: fix beamformer VHT sounding dimensions capability

      Similarly to the VHT STS, this is supposed to be propagated by firmware.
      In case it's not, use the default value, but as last resort.

      Signed-off-by: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 707a0c811ca02861f1500f0696efebcf3bd2e2e2
  Author: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
  Date:   Wed Sep 2 13:20:19 2015 +0200

      ath10k: fix beamformee VHT STS capability

      The VHT STS CAP shall be reported by firmware to host, like in case of
      QCA99x0. For QCA6174 hw family this isn't set for some reason.
      So for this particular chips, let's assume it has the ability to
      support VHT NDP in up to 4 STSs (which is true by the way).

      Change the published beamformee STS cap accordingly to 3 or to what
      the firmware reports.

      Assumption so far, it suppose to be the num_rf_chains-1, was
      completely wrong.

      Signed-off-by: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7b7da0a02192fd518c26c46dad6b14aca4569605
  Author: Vivek Natarajan <nataraja@xxxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 16:34:55 2015 +0530

      ath10k: drop probe responses when too many are queued

      In a noisy environment, when multiple interfaces are created,
      the management tx descriptors are fully occupied by the probe
      responses from all the interfaces. This prevents a new station
      from a successful association.

      Fix this by limiting the probe responses when the specified
      threshold limit is reached.

      Signed-off-by: Vivek Natarajan <nataraja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a925a3763982799460b9e9b5299520172652b785
  Author: Vasanthakumar Thiagarajan <vthiagar@xxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 17:21:34 2015 +0530

      ath10k: fix DMA alloc failure for target requested memory chunks

      During long hours of stress testing like AP interface up/down along
      with continuous ping flood from a station doing connect/disconnect,
      it is observed that the system is not able to allocate DMA consistent
      memory of size > 512KB chunks as requested by firmware in 
WMI_SERVICE_EVENTID.
      With the system memory getting fragmented during the run based on the
      size of the memory requested, the failure to return physically continguous
      memory of high order can happen. Once the system gets to this situation,
      bringing up the wifi interface will fail and a system reboot may be needed
      to make it work again. This problem is obseved with QCA99X0.

      To fix this issue, allocate the DMA memory requested by firmware during
      device probe time and keep it during the life time of the device. WMI 
service
      ready event handler is changed to allocate the memory chunks if it is
      not already allocated or if the memory allocated for the previous ready
      event is not same as the current requested ones. After this patch the
      memory usage when wifi is inactive will be inceased by few 100KB to
      3MB based on the target type.

      Failure happens with the following stack trace

      [29557.488773] kworker/u4:1: page allocation failure: order:8, mode:0xd0
      [29557.494297] CPU: 0 PID: 8402 Comm: kworker/u4:1 Not tainted 3.14.43 #7
      [29557.500793] Workqueue: ath10k_aux_wq 
ath10k_wmi_event_service_ready_work [ath10k_core]
      [29557.508602] [<c021e9b0>] (unwind_backtrace) from [<c021ba90>] 
(show_stack+0x10/0x14)
      [29557.516580] [<c021ba90>] (show_stack) from [<c03bdddc>] 
(dump_stack+0x88/0xcc)
      [29557.523612] [<c03bdddc>] (dump_stack) from [<c0290e34>] 
(warn_alloc_failed+0xdc/0x108)
      [29557.531515] [<c0290e34>] (warn_alloc_failed) from [<c0292d88>] 
(__alloc_pages_nodemask+0x4f0/0x654)
      [29557.540485] [<c0292d88>] (__alloc_pages_nodemask) from [<c0222b48>] 
(__dma_alloc_buffer.isra.20+0x2c/0x104)
      [29557.550260] [<c0222b48>] (__dma_alloc_buffer.isra.20) from 
[<c0222c34>] (__alloc_remap_buffer.isra.23+0x14/0xb8)
      [29557.560413] [<c0222c34>] (__alloc_remap_buffer.isra.23) from 
[<c022305c>] (__dma_alloc+0x224/0x2b8)
      [29557.569490] [<c022305c>] (__dma_alloc) from [<c0223208>] 
(arm_dma_alloc+0x84/0x90)
      [29557.577010] [<c0223208>] (arm_dma_alloc) from [<bf5159d0>] 
(ath10k_wmi_event_service_ready_work+0x2f8/0x420 [ath10k_core])
      [29557.588055] [<bf5159d0>] (ath10k_wmi_event_service_ready_work 
[ath10k_core]) from [<c024260c>] (process_one_work+0x20c/0x328)
      [29557.599305] [<c024260c>] (process_one_work) from [<c02432d0>] 
(worker_thread+0x228/0x360)
      [29557.607470] [<c02432d0>] (worker_thread) from [<c0247f88>] 
(kthread+0xd8/0xec)
      [29557.614750] [<c0247f88>] (kthread) from [<c0208d18>] 
(ret_from_fork+0x14/0x3c)
      [29557.712751] Normal: 696*4kB (UEMR) 512*8kB (UEMR) 367*16kB (UEMR) 
404*32kB (UEMR) 455*64kB (UEMR) 424*128kB (UEMR) 379*256kB (UMR) 327*512kB 
(UMR) 1*1024kB (R) 0*2048kB 0*4096kB = 374544kB

      Signed-off-by: Vasanthakumar Thiagarajan <vthiagar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 6986fdd699f9be57cc1478c738ea6347e3d52547
  Author: Michal Kazior <michal.kazior@xxxxxxxxx>
  Date:   Thu Aug 27 14:47:33 2015 +0200

      ath10k: fix mu-mimo rx status reporting

      MU-MIMO Rx involves different interpretation of
      the VHT-SIG-A compared to SU-MIMO.

      The incorrect interpretation led ath10k to report
      VHT MCS values greater than 9 which subsequently
      prompted mac80211 to drop such frames. This
      effectively broke Rx with MU-MIMO in many cases
      and manifested with a kernel warning in the log
      which looked like this:

        [   14.552520] WARNING: CPU: 2 PID: 0 at net/mac80211/rx.c:3578 
ieee80211_rx+0x26c/0x940 [mac80211]()
        [   14.552522] Rate marked as a VHT rate but data is invalid: MCS: 10, 
NSS: 2
        ... call trace follows ...

      Signed-off-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b855d45dc3175eb3e602b945805c7b6aa8c04559
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Tue Sep 8 15:16:09 2015 +1000

      powerpc: Wire up sys_userfaultfd()

      The selftest passes on 64-bit LE and BE.

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 3bd7617596df560e2cb22ad97888cb42dae39d02
  Merge: 21adf76 cf2f33a
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Sep 8 16:22:29 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Use PERF_RECORD_SWITCH when available in intel-pt, instead of
          "sched:sched_switch" events, enabling an unprivileged user to trace
          multi-threaded or multi-process workloads. (Adrian Hunter)

        - Always use non inlined file name for 'srcfile' sort key. (Andi Kleen)

        - Quieten failed to read counter message, helps in systems without
          backend-stalled-cycles. (Andi Kleen)

      Infrastructure changes:

        - Add a 'perf test' entry for decoding of new x86 instructions. (Adrian 
Hunter)

        - Add new instructions (sha, clflushopt, clwb, pcommit, rdpkru, wrpkru, 
xsavec,
          xsaves, xrstors) to the x86 instruction decoder. (Adrian Hunter)

        - Add a build test to warn when source code drifts happen for the
          instruction decoder files in the kernel and in tools/perf. (Adrian 
Hunter)

        - Copy linux/filter.h to tools/include. (He Kuang)

        - Support function __get_dynamic_array_len in libtraceevent. (He 
Kuanguuu)

        - Tracing path finding/mounting/error reporting refactorings. (Jiri 
Olsa)

        - Store CPU socket and core IDs in perf.data. (Kan Liang)

        - Reorganize add/del probe insertion routines in 'perf probe'. 
(Namhyung Kim, Wang Nan)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit decb4c41159e1511197f2964da758fa7f2eeb741
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:43 2015 +0200

      x86/headers: Remove <asm/sigcontext.h> references on the kernel side

      Now that all type definitions are in the UAPI header, include it
      directly, instead of through <asm/sigcontext.h>.

      [ We still keep asm/sigcontext.h, so that uapi/asm/sigcontext32.h
        can include <asm/sigcontext.h>. ]

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-16-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 711531f4f3cb881f4598cddfcc36663101dee411
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:42 2015 +0200

      x86/headers: Remove direct sigcontext32.h uses

      Now that all sigcontext types are defined in asm/sigcontext.h,
      remove the various sigcontext32.h uses in the kernel.

      We still keep the header itself, which includes sigcontext.h, in
      case user-space relies on it.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-15-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8fcb346b910e860d2525457742ae984c4ddc64b5
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:41 2015 +0200

      x86/headers: Convert sigcontext_ia32 uses to sigcontext_32

      Use the new name in kernel code, and move the old name to the
      user-space-only legacy section of the UAPI header.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-14-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit db1e031401c6abab983919e882916d028f3b385e
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:40 2015 +0200

      x86/headers: Unify 'struct sigcontext_ia32' and 'struct sigcontext_32'

      The two structures are identical - merge them and keep the
      legacy name as a define.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-13-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 530e5c827182a7a5322c55276b0617fd06874c24
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:39 2015 +0200

      x86/headers: Make sigcontext pointers bit independent

      Before we can eliminate the duplication between 'struct
      sigcontext_32' and 'struct sigcontext_ia32', make the 'fpstate'
      pointer field in 'struct sigcontext_32' bit independent.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-12-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f2c609bca0b6526810fa22330ce4d173cc023ef8
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:38 2015 +0200

      x86/headers: Move the 'struct sigcontext' definitions into the UAPI header

      Our goal is to eliminate the duplicate struct sigcontext_ia32
      definition, so move the kernel's primary sigcontext type into
      the UAPI header, defining these two variants:

        struct sigcontext_32
        struct sigcontext_64

      ... and map them to 'struct sigcontext'.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-11-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2d057c69e743bfb88f1259ddbf1b1160bdd850e5
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:37 2015 +0200

      x86/headers: Clean up the kernel's struct sigcontext types to be ABI-clean

      Use the __u16/32/64 types we standardized on in ABI definitions
      and which other sigcontext related types are already using.

      This will help unify struct sigcontext types between native
      32-bit, compat and 64-bit kernels.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-10-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 86e9fc3a0ecdd3c21a938e325daf462ca1724f68
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:36 2015 +0200

      x86/headers: Convert uses of _fpstate_ia32 to _fpstate_32

      Remove uses of _fpstate_ia32 from the kernel, and move the
      legacy _fpstate_ia32 definition to the user-space only portion
      of the header.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-9-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7bb0dc2222779b4cbf1ec9ad651e500e62fa5b11
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:35 2015 +0200

      x86/headers: Unify 'struct _fpstate_ia32' and i386 struct _fpstate

      'struct _fpstate_ia32' and 'struct _fpstate' on i386 are
      identical in all fields, except 'padding1' being named
      'padding'.

      We unify the two structures and add a union that is both named
      'padding1' and 'padding', in the (unlikely) case there's
      user-space code that relies on the padding field name.

      We rename the two main types to be:

        struct _fpstate_32
        struct _fpstate_64

      for the 32-bit and 64-bit frame, and map them to the main and
      compat structure names (_fpstate) depending on whether we are on
      32-bit or on 64-bit kernels.

      We also keep the old _fpstate_ia32 name as a legacy name.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-8-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 337a167d1a5b2704414679d1a993220a4613ec13
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:34 2015 +0200

      x86/headers: Unify register type definitions between 32-bit compat and 
i386

      The following sigcontext related types were duplicated across
      native 32-bit and compat 32-bit headers:

        struct _fpreg;
        struct _fpxreg;
        struct _xmmreg;

        X86_FXSR_MAGIC

      Unify them.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-7-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3f623a5b27c150451387e358774131780dbd2407
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:33 2015 +0200

      x86/headers: Use ABI types consistently in sigcontext*.h

      Use the __u16/32/64 types we standardized on in ABI definitions
      - and which most of this header was already using.

      This will allow us to more obviously unify the compat header
      into the main header.

      No change in functionality.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-6-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 128f8257a17a47b9a40f550cc2f36458cd8c07b0
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:32 2015 +0200

      x86/headers: Separate out legacy user-space structure definitions

      Better separate the user-space struct sigcontext definitions
      from the kernel definitions, so that we can unify the kernel
      definitions with sigcontext32.h.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-5-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit cbf5f4fbf435e871e59d49653d555266b8796efc
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:31 2015 +0200

      x86/headers: Clean up and better document uapi/asm/sigcontext.h

      Clean up sigcontext.h:

       - the explanations were full of typos and were hard to read in general
       - use consistent and readable vertical spacing
       - fix, harmonize and extend comments

      No field name has been changed, user-space might be relying on
      them.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-4-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c3f4986fb0774bb13feb4bade1276bed2ba8a3db
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:30 2015 +0200

      x86/headers: Clean up uapi/asm/sigcontext32.h

      Clean up sigcontext32.h a bit:

       - use consistent and readable vertical spacing
       - fix, harmonize and extend comments

      No field name has been changed, user-space might be relying on
      them.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-3-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b76cb6c869b966b4c991251136b45b3e1babc4e8
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:29 2015 +0200

      x86/headers: Fix (old) header file dependency bug in 
uapi/asm/sigcontext32.h

      Mikko Rapeli reported that the following standalone user-space
      header does not compile:

        #include <asm/sigcontext32.h>

      Due to undefined 'struct __fpx_sw_bytes' which is defined in
      asm/sigcontext.h.

      The following header order works:

        #include <asm/sigcontext.h>
        #include <asm/sigcontext32.h>

      and that's probably how everyone's been using these headers for
      the past decade or so, but it's a legit header file dependency
      bug, so include asm/sigcontext.h in sigcontext32.h to allow it
      to be built standlone.

      Reported-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-2-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit edcd591c77a48da753456f92daf8bb50fe9bac93
  Author: Jonathan Corbet <corbet@xxxxxxx>
  Date:   Mon Sep 7 13:18:03 2015 -0600

      locking/static_keys: Fix a silly typo

      Commit:

        412758cb2670 ("jump label, locking/static_keys: Update docs")

      introduced a typo that might as well get fixed.

      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Jason Baron <jbaron@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150907131803.54c027e1@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit daebaabb5cfbe4a6f09ca0e0f8b7673efc704960
  Author: Bharata B Rao <bharata@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 15:52:40 2015 +0530

      powerpc/pseries: Release DRC when configure_connector fails

      Commit f32393c943e2 ("powerpc/pseries: Correct cpu affinity for
      dlpar added cpus") moved dlpar_acquire_drc() call to before
      dlpar_configure_connector() call in dlpar_cpu_probe(), but missed
      to release the DRC if dlpar_configure_connector() failed.
      During CPU hotplug, if configure-connector fails for any reason,
      then this will result in subsequent CPU hotplug attempts to fail.

      Release the acquired DRC if dlpar_configure_connector() call fails
      so that the DRC is left in right isolation and allocation state
      for the subsequent hotplug operation to succeed.

      Fixes: f32393c943e2 ("powerpc/pseries: Correct cpu affinity for dlpar 
added cpus")
      Cc: stable@xxxxxxxxxxxxxxx # 4.1+
      Signed-off-by: Bharata B Rao <bharata@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Nathan Fontenot <nfont@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 6af3e3adcac595a683bb55299a907d7d1ad61ab3
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Mon Sep 7 10:41:12 2015 +0100

      Btrfs: don't initialize a space info as full to prevent ENOSPC

      Commit 2e6e518335f8 ("Btrfs: fix block group ->space_info null pointer
      dereference") accidently marked a space info as full when initializing
      it with a value of 0 total bytes. This introduces an ENOSPC problem when
      writing file data if we mount a filesystem that has no data block groups
      allocated, because the data space info is initialized with 0 total bytes,
      marked as full, and it never gets its total bytes incremented by a
      (positive) value to unmark it as full (because there are no data block
      groups loaded when the fs is mounted).
      For metadata and system spaces this issue can never happen since we always
      have at least one metadata block group and one system block group (even
      for an empty filesystem).

      So fix this by just not initializing a space info as full, reverting the
      offending part of the commit mentioned above.

      The following test case for fstests reproduces the issue:

        seq=`basename $0`
        seqres=$RESULT_DIR/$seq
        echo "QA output created by $seq"
        tmp=/tmp/$$
        status=1        # failure is the default!
        trap "_cleanup; exit \$status" 0 1 2 3 15

        _cleanup()
        {
            rm -f $tmp.*
        }

        # get standard environment, filters and checks
        . ./common/rc
        . ./common/filter

        # real QA test starts here
        _need_to_be_root
        _supported_fs btrfs
        _supported_os Linux
        _require_scratch

        rm -f $seqres.full

        _scratch_mkfs >>$seqres.full 2>&1

        # Mount our filesystem without space caches enabled so that we do not
        # get any space used from the initial data block group that mkfs creates
        # (space caches used space from data block groups).
        _scratch_mount "-o nospace_cache"

        # Need an fs with at least 2Gb to make sure mkfs.btrfs does not create
        # an fs using mixed block groups (used both for data and metadata). We
        # really need to have dedicated block groups for data to reproduce the
        # issue and mkfs.btrfs defaults to mixed block groups only for small
        # filesystems (up to 1Gb).
        _require_fs_space $SCRATCH_MNT $((2 * 1024 * 1024))

        # Run balance with the purpose of deleting the unused data block group
        # that mkfs created. We could also wait for the background kthread to
        # automatically delete the unused block group, but we do not have a way
        # to make it run and wait for it to complete, so just do a balance
        # instead of some unreliable sleep
        _run_btrfs_util_prog balance start -dusage=0 $SCRATCH_MNT

        # Now unmount the filesystem, mount it again (either with or with space
        # caches enabled, it does not matter to trigger the problem) and attempt
        # to create a file with some data - this used to fail with ENOSPC
        # because there were no data block groups when the filesystem was
        # mounted and the data space info object was marked as full when
        # initialized (because it had 0 total bytes), which prevented the file
        # write path from attempting to allocate a data block group and fail
        # immediately with ENOSPC.
        _scratch_remount
        echo "hello world" > $SCRATCH_MNT/foobar

        echo "Silence is golden"
        status=0
        exit

      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit 6583d2032d57df9f1c00c753ca58e1a822901bf0
  Author: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
  Date:   Mon Sep 7 19:37:57 2015 +0800

      spi: mediatek: fix spi cs polarity error

      Mediatek spi HW can't set cs inactive(keep cs high) directly.
      Instead, it supplies pause mode to do it indirectly. If driver
      unsets SPI_CMD_PAUSE_MODE in CMD_REG, it also needs to reset
      internal state machine to let cs inactive at once.

      Signed-off-by: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit a077224fd35b2f7fbc93f14cf67074fc792fbac2
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Sep 3 13:24:40 2015 +0100

      ARM: 8429/1: disable GCC SRA optimization

      While working on the 32-bit ARM port of UEFI, I noticed a strange
      corruption in the kernel log. The following snprintf() statement
      (in drivers/firmware/efi/efi.c:efi_md_typeattr_format())

        snprintf(pos, size, "|%3s|%2s|%2s|%2s|%3s|%2s|%2s|%2s|%2s]",

      was producing the following output in the log:

        |    |   |   |   |    |WB|WT|WC|UC]
        |    |   |   |   |    |WB|WT|WC|UC]
        |    |   |   |   |    |WB|WT|WC|UC]
        |RUN|   |   |   |    |WB|WT|WC|UC]*
        |RUN|   |   |   |    |WB|WT|WC|UC]*
        |    |   |   |   |    |WB|WT|WC|UC]
        |RUN|   |   |   |    |WB|WT|WC|UC]*
        |    |   |   |   |    |WB|WT|WC|UC]
        |RUN|   |   |   |    |   |   |   |UC]
        |RUN|   |   |   |    |   |   |   |UC]

      As it turns out, this is caused by incorrect code being emitted for
      the string() function in lib/vsprintf.c. The following code

        if (!(spec.flags & LEFT)) {
                while (len < spec.field_width--) {
                        if (buf < end)
                                *buf = ' ';
                        ++buf;
                }
        }
        for (i = 0; i < len; ++i) {
                if (buf < end)
                        *buf = *s;
                ++buf; ++s;
        }
        while (len < spec.field_width--) {
                if (buf < end)
                        *buf = ' ';
                ++buf;
        }

      when called with len == 0, triggers an issue in the GCC SRA optimization
      pass (Scalar Replacement of Aggregates), which handles promotion of signed
      struct members incorrectly. This is a known but as yet unresolved issue.
      (https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65932). In this particular
      case, it is causing the second while loop to be executed erroneously a
      single time, causing the additional space characters to be printed.

      So disable the optimization by passing -fno-ipa-sra.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Acked-by: Nicolas Pitre <nico@xxxxxxxxxx>
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 7d1647dc4ba0a61fec5381c1abb59dc886b6ef3c
  Author: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
  Date:   Mon Sep 7 10:52:58 2015 +1000

      cxl: abort cxl_pci_enable_device_hook() if PCI channel is offline

      cxl_pci_enable_device_hook() is called when attempting to enable an AFU
      sitting on a vPHB. At present, the state of the underlying CXL card's PCI
      channel is only checked when it calls cxl_afu_check_and_enable() at the
      very end, after it has already set DMA options and initialised a default
      context.

      Check the CXL card's link status before setting DMA options or 
initialising
      a default context. If the link is down, print a warning and return
      immediately.

      Signed-off-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit fa14486979b3a47307bcdb10f8b5baa875a5cf68
  Author: Nishanth Aravamudan <nacc@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 11:22:52 2015 -0700

      powerpc/powernv/pci-ioda: fix kdump with non-power-of-2 crashkernel=

      The 32-bit TCE table initialization relies on the DMA window having a
      size equal to a power of 2 (and checks for it explicitly). But
      crashkernel= has no constraint that requires a power-of-2 be specified.
      This causes the kdump kernel to fail to boot as none of the PCI devices
      (including the disk controller) are successfully initialized.

      After this change, the PCI devices successfully set up the 32-bit TCE
      table and kdump succeeds.

      Fixes: aca6913f5551 ("powerpc/powernv/ioda2: Introduce helpers to 
allocate TCE pages")
      Signed-off-by: Nishanth Aravamudan <nacc@xxxxxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.2
      Tested-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit bb0054552d080dd929907c5925d4bedc8bf6def7
  Author: Nishanth Aravamudan <nacc@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 08:39:28 2015 -0700

      powerpc/powernv/pci-ioda: fix 32-bit TCE table init in kdump kernel

      When attempting to kdump with the 4.2 kernel, we see for each PCI
      device:

       pci 0003:01     : [PE# 000] Assign DMA32 space
       pci 0003:01     : [PE# 000] Setting up 32-bit TCE table at 0..80000000
       pci 0003:01     : [PE# 000] Failed to create 32-bit TCE table, err -22
       PCI: Domain 0004 has 8 available 32-bit DMA segments
       PCI: 4 PE# for a total weight of 70
       pci 0004:01     : [PE# 002] Assign DMA32 space
       pci 0004:01     : [PE# 002] Setting up 32-bit TCE table at 0..80000000
       pci 0004:01     : [PE# 002] Failed to create 32-bit TCE table, err -22
       pci 0004:0d     : [PE# 005] Assign DMA32 space
       pci 0004:0d     : [PE# 005] Setting up 32-bit TCE table at 0..80000000
       pci 0004:0d     : [PE# 005] Failed to create 32-bit TCE table, err -22
       pci 0004:0e     : [PE# 006] Assign DMA32 space
       pci 0004:0e     : [PE# 006] Setting up 32-bit TCE table at 0..80000000
       pci 0004:0e     : [PE# 006] Failed to create 32-bit TCE table, err -22
       pci 0004:10     : [PE# 008] Assign DMA32 space
       pci 0004:10     : [PE# 008] Setting up 32-bit TCE table at 0..80000000
       pci 0004:10     : [PE# 008] Failed to create 32-bit TCE table, err -22

      and eventually the kdump kernel fails to boot as none of the PCI devices
      (including the disk controller) are successfully initialized.

      The EINVAL response is because the DMA window (the 2GB base window) is
      larger than the kdump kernel's reserved memory (crashkernel=, in this
      case specified to be 1024M). The check in question,

       if ((window_size > memory_hotplug_max()) || !is_power_of_2(window_size))

      is a valid sanity check for pnv_pci_ioda2_table_alloc_pages(), so adjust
      the caller to pass in a smaller window size if our maximum memory value
      is smaller than the DMA window.

      After this change, the PCI devices successfully set up the 32-bit TCE
      table and kdump succeeds.

      The problem was seen on a Firestone machine originally.

      Fixes: aca6913f5551 ("powerpc/powernv/ioda2: Introduce helpers to 
allocate TCE pages")
      Cc: stable@xxxxxxxxxxxxxxx # 4.2
      Signed-off-by: Nishanth Aravamudan <nacc@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Alexey Kardashevskiy <aik@xxxxxxxxx>
      [mpe: Coding style pedantry, use u64, change the indentation]
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 8901c18b6cafa51f7985f1031968bbfe9dc47735
  Author: Daniel Drake <drake@xxxxxxxxxxxx>
  Date:   Wed Sep 2 16:10:34 2015 -0600

      asus-nb-wmi: Add wapf=4 quirk for X456UA/X456UF

      These laptops boot with wifi as hard-blocked, with no obvious way to
      enable it. Using a quirk to set wapf=4 solves the problem.

      Signed-off-by: Daniel Drake <drake@xxxxxxxxxxxx>
      Acked-by: Corentin Chary <corentin.chary@xxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit a394d635193b641f2c86ead5ada5b115d57c51f8
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Sep 6 01:46:54 2015 +0300

      spi: Fix documentation of spi_alloc_master()

      Actually, spi_master_put() after spi_alloc_master() must _not_ be followed
      by kfree(). The memory is already freed with the call to spi_master_put()
      through spi_master_class, which registers a release function. Calling both
      spi_master_put() and kfree() results in often nasty (and delayed) crashes
      elsewhere in the kernel, often in the networking stack.

      This reverts commit eb4af0f5349235df2e4a5057a72fc8962d00308a.

      Link to patch and concerns: https://lkml.org/lkml/2012/9/3/269
      or
      http://lkml.iu.edu/hypermail/linux/kernel/1209.0/00790.html

      Alexey Klimov: This revert becomes valid after
      94c69f765f1b4a658d96905ec59928e3e3e07e6a when spi-imx.c
      has been fixed and there is no need to call kfree() so comment
      for spi_alloc_master() should be fixed.

      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 76fc5e7b2355af167dea1a32e93c57fc37900a5b
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Sep 4 17:00:43 2015 -0700

      x86/vm86: Block non-root vm86(old) if mmap_min_addr != 0

      vm86 exposes an interesting attack surface against the entry
      code. Since vm86 is mostly useless anyway if mmap_min_addr != 0,
      just turn it off in that case.

      There are some reports that vbetool can work despite setting
      mmap_min_addr to zero.  This shouldn't break that use case,
      as CAP_SYS_RAWIO already overrides mmap_min_addr.

      Suggested-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Austin S Hemmelgarn <ahferroin7@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stas Sergeev <stsp@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 95cd2ea7d54b41b0b2828587f108fe270d59eede
  Merge: 66c117d e713c80
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:00:30 2015 +0200

      Merge branch 'linus' into x86/urgent, to be able to merge a dependent fix

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit cf2f33a4e54096f90652cca3511fd6a456ea5abe
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Sep 4 13:22:06 2015 -0300

      perf trace: Add read/write to the file group

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-l6812iuai3g486z3mn8ufan8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0c0672922dcc70ffba11d96385e98e42fb3ae08d
  Author: Alexander Spyridakis <a.spyridakis@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 17:06:24 2015 +0200

      arm/arm64: KVM: Fix PSCI affinity info return value for non valid cores

      If a guest requests the affinity info for a non-existing vCPU we need to
      properly return an error, instead of erroneously reporting an off state.

      Signed-off-by: Alexander Spyridakis <a.spyridakis@xxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alvise Rigo <a.rigo@xxxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 857d1a973077245f03b351e2539529c86267bfe4
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Aug 24 14:42:05 2015 +0100

      arm64: KVM: set {v,}TCR_EL2 RES1 bits

      Currently we don't set the RES1 bits of TCR_EL2 and VTCR_EL2 when
      configuring them, which could lead to unexpected behaviour when an
      architectural meaning is defined for those bits.

      Set the RES1 bits to avoid issues.

      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Suzuki Poulose <suzuki.poulose@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit e607f1426b584f2bd3f688a2d416baf963251e7a
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Fri Sep 4 21:16:03 2015 +0900

      perf probe: Print deleted events in cmd_probe()

      Showing actual trace event when deleteing perf events is only needed in
      perf probe command.  But the add functionality itself can be used by
      other places.  So move the printing code into the cmd_probe().

      The output is not changed.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-5-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e7895e422e4da63daedacad0a2ed1a5a6b502d66
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Fri Sep 4 21:16:02 2015 +0900

      perf probe: Split del_perf_probe_events()

      The del_perf_probe_events() does 2 things:

      1. find existing events which match to filter
      2. delete such trace events from kernel

      But sometimes we need to do something with the trace events.  So split
      the funtion into two, so that it can access intermediate trace events
      name using strlist if needed.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-4-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b02137cc6550c1fa28e9a7c943a79fe6e4c4378d
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Fri Sep 4 21:16:01 2015 +0900

      perf probe: Move print logic into cmd_probe()

      Showing actual trace event when adding perf events is only needed in
      perf probe command.  But the add functionality itself can be used by
      other places.  So move the printing code into the cmd_probe().

      Also it combines the output if more than one event is added.

      Before:
        $ sudo perf probe -a do_fork -a do_exit
        Added new event:
        probe:do_fork        (on do_fork)

        You can now use it in all perf tools, such as:

            perf record -e probe:do_fork -aR sleep 1

        Added new events:
        probe:do_exit        (on do_exit)
        probe:do_exit_1      (on do_exit)

        You can now use it in all perf tools, such as:

            perf record -e probe:do_exit_1 -aR sleep 1

      After:
        $ sudo perf probe -a do_fork -a do_exit
        Added new events:
        probe:do_fork        (on do_fork)
        probe:do_exit        (on do_exit)
        probe:do_exit_1      (on do_exit)

        You can now use it in all perf tools, such as:

            perf record -e probe:do_exit_1 -aR sleep 1

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-3-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 12fae5ef6dc6031ffcf4dffc6be5a16080e7dd7d
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Fri Sep 4 21:16:00 2015 +0900

      perf probe: Link trace_probe_event into perf_probe_event

      This patch drops struct __event_package structure.  Instead, it adds a
      'struct trace_probe_event' pointer to 'struct perf_probe_event'.

      The trace_probe_event information gives further patches a chance to
      access actual probe points and actual arguments.

      Using them, 'perf probe' can get the whole list of added probes and
      print them at once.

      Other users like the upcoming bpf_loader will be able to attach one bpf
      program to different probing points of an inline function (which has
      multiple probing points) and glob functions.

      Moreover, by reading the arguments information, bpf code for reading
      those arguments can be generated.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-2-git-send-email-namhyung@xxxxxxxxxx
      [namhyung: extract necessary part from the existing patch]
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 844dffa598b55fca6a83a856214fc0cfc3da24e5
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Fri Sep 4 21:15:59 2015 +0900

      perf probe: Split add_perf_probe_events()

      The add_perf_probe_events() does 3 things:

       1. convert all perf events to trace events
       2. add all trace events to kernel
       3. cleanup all trace events

      But sometimes we need to do something with the trace events.  So split
      the funtion into three, so that it can access intermediate trace events
      via struct __event_package if needed.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4ad9e16af36bbe8657aabe494ff912acbc213ce4
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Fri Sep 4 16:24:39 2015 +0200

      arm/arm64: KVM: arch timer: Reset CNTV_CTL to 0

      Provide a better quality of implementation and be architecture compliant
      on ARMv7 for the architected timer by resetting the CNTV_CTL to 0 on
      reset of the timer.

      This change alone fixes the UEFI reset issue reported by Laszlo back in
      February.

      Cc: Laszlo Ersek <lersek@xxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Drew Jones <drjones@xxxxxxxxxx>
      Cc: Wei Huang <wei@xxxxxxxxxx>
      Cc: Peter Maydell <peter.maydell@xxxxxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 04bdfa8ab5bab929cc57f73952c503a88372601d
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Fri Sep 4 16:24:38 2015 +0200

      arm/arm64: KVM: vgic: Move active state handling to flush_hwstate

      We currently set the physical active state only when we *inject* a new
      pending virtual interrupt, but this is actually not correct, because we
      could have been preempted and run something else on the system that
      resets the active state to clear.  This causes us to run the VM with the
      timer set to fire, but without setting the physical active state.

      The solution is to always check the LR configurations, and we if have a
      mapped interrupt in the LR in either the pending or active state
      (virtual), then set the physical active state.

      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 86c2786994bd7c0d4b525bbfbe42ac540d0b8166
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Thu Aug 13 12:40:57 2015 +0300

      perf intel-pt: Add support for PERF_RECORD_SWITCH

      Add support for selecting and processing PERF_RECORD_SWITCH events for
      use by Intel PT.  If they are available, they will be used in preference
      to sched_switch events.

      This enables an unprivileged user to trace multi-threaded or
      multi-process workloads with any level of perf_event_paranoid.  However
      it depends on kernel support for PERF_RECORD_SWITCH.

      Without this patch, tracing a multi-threaded workload will decode
      without error but all the data will be attributed to the main thread.

      Without this patch, tracing a multi-process workload will result in
      decoder errors because the decoder will not know which executable is
      executing.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439458857-30636-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1b29ac59b1d692c06ec543a5f35e0d9ebb98e003
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Thu Sep 3 08:31:00 2015 -0400

      perf session: Don't call dump_sample() when evsel is NULL

      Need to check evsel before passing it to dump_sample().

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441283463-51050-5-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f83b6b64eba155cfb43ab8a5d9c422c3e7f603e6
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:31 2015 +0300

      x86/insn: perf tools: Add new xsave instructions

      Add xsavec, xsaves and xrstors to the op code map and the perf tools new
      instructions test.  To run the test:

        $ tools/perf/perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ tools/perf/perf test -v "x86 ins" 2>&1 | grep 'xsave\|xrst'

      For information about xsavec, xsaves and xrstors, refer the Intel SDM.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-8-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 978260cdbec3e34a3dfb2277ffc0aa1809457362
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:30 2015 +0300

      x86/insn: perf tools: Add new memory protection keys instructions

      Add rdpkru and wrpkru to the op code map and the perf tools new
      instructions test.  In the case of the test, only the bytes can be
      tested at the moment since binutils doesn't support the instructions
      yet.  To run the test:

        $ tools/perf/perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ tools/perf/perf test -v "x86 ins" 2>&1 | grep pkru

      For information about rdpkru and wrpkru, refer the Intel SDM.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-7-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ac1c8859a81e2fc45db1dbff30bdc572005734ca
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:29 2015 +0300

      x86/insn: perf tools: Add new memory instructions

      Intel Architecture Instruction Set Extensions Programing Reference (Oct
      2014) describes 3 new memory instructions, namely clflushopt, clwb and
      pcommit.  Add them to the op code map and the perf tools new
      instructions test. e.g.

        $ tools/perf/perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ tools/perf/perf test -v "x86 ins"

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-6-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3fe78d6af9e2f08c4014fd3ccbf9e1ff312dedf1
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:28 2015 +0300

      x86/insn: perf tools: Add new SHA instructions

      Intel SHA Extensions are explained in the Intel Architecture
      Instruction Set Extensions Programing Reference (Oct 2014).
      There are 7 new instructions.  Add them to the op code map
      and the perf tools new instructions test. e.g.

        $ tools/perf/perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ tools/perf/perf test -v "x86 ins" 2>&1 | grep sha

      Committer note:

      3 lines of details, for the curious:

        $ perf test -v "x86 ins" 2>&1 | grep sha256msg1 | tail -3
        Decoded ok: 0f 38 cc 84 08 78 56 34 12  sha256msg1 
0x12345678(%rax,%rcx,1),%xmm0
        Decoded ok: 0f 38 cc 84 c8 78 56 34 12  sha256msg1 
0x12345678(%rax,%rcx,8),%xmm0
        Decoded ok: 44 0f 38 cc bc c8 78 56 34 12       sha256msg1 
0x12345678(%rax,%rcx,8),%xmm15
        $

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-5-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 78173ec6311a22ca9f42cf949cf37754a8b71633
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:27 2015 +0300

      x86/insn: perf tools: Pedantically tweak opcode map for MPX instructions

      The MPX instructions are presently not described in the SDM
      opcode maps, and there are not encoding characters for bnd
      registers, address method or operand type.  So the kernel
      opcode map is using 'Gv' for bnd registers and 'Ev' for
      everything else.  That is fine because the instruction
      decoder does not use that information anyway, except as
      an indication that there is a ModR/M byte.

      Nevertheless, in some cases the 'Gv' and 'Ev' are the wrong
      way around, BNDLDX and BNDSTX have 2 operands not 3, and it
      wouldn't hurt to identify the mandatory prefixes.

      This has no effect on the decoding of valid instructions,
      but the addition of the mandatory prefixes will cause some
      invalid instructions to error out that wouldn't have
      previously.

      Note that perf tools has a copy of the instruction decoder
      and provides a test for new instructions which includes MPX
      instructions e.g.

        $ perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ perf test -v "x86 ins"

      Commiter notes:

      And to see these MPX instructions specifically:

        $ perf test -v "x86 ins" 2>&1 | grep bndldx | head -3
        Decoded ok: 0f 1a 00                    bndldx (%eax),%bnd0
        Decoded ok: 0f 1a 05 78 56 34 12        bndldx 0x12345678,%bnd0
        Decoded ok: 0f 1a 18                    bndldx (%eax),%bnd3
        $ perf test -v "x86 ins" 2>&1 | grep bndstx | head -3
        Decoded ok: 0f 1b 00                    bndstx %bnd0,(%eax)
        Decoded ok: 0f 1b 05 78 56 34 12        bndstx %bnd0,0x12345678
        Decoded ok: 0f 1b 18                    bndstx %bnd3,(%eax)
        $

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-4-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 98e4619f2b2bb80d310feaac5589b44c000aecc1
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:26 2015 +0300

      perf tools: Add a test for decoding of new x86 instructions

      Add a new test titled:

        Test x86 instruction decoder - new instructions

      The purpose of this test is to check the instruction decoder after new
      instructions have been added.  Initially, MPX instructions are tested
      which are already supported, but the definitions in x86-opcode-map.txt
      will be tweaked in a subsequent patch, after which this test can be run
      to verify those changes.

      The data for the test comes from assembly language instructions in
      insn-x86-dat-src.c which is converted into bytes by the scripts
      gen-insn-x86-dat.sh and gen-insn-x86-dat.awk, and included into the test
      program insn-x86.c as insn-x86-dat-32.c and insn-x86-dat-64.c.

      The conversion is not done as part of the perf tools build because the
      test data must be under (git) change control in order for the test to be
      repeatably-correct.  Also it may require a recent version of binutils.

      Commiter notes:

      Using it:

        # perf test decoder
        39: Test x86 instruction decoder - new instructions          : Ok
        # perf test -v decoder
        39: Test x86 instruction decoder - new instructions          :
        --- start ---
        test child forked, pid 21970
        Decoded ok: 0f 31                       rdtsc
        Decoded ok: f3 0f 1b 00                 bndmk  (%eax),%bnd0
        Decoded ok: f3 0f 1b 05 78 56 34 12     bndmk  0x12345678,%bnd0
        Decoded ok: f3 0f 1b 18                 bndmk  (%eax),%bnd3
        <SNIP>
        Decoded ok: f2 e9 00 00 00 00           bnd jmpq 402 <main+0x402>
        Decoded ok: f2 e9 00 00 00 00           bnd jmpq 408 <main+0x408>
        Decoded ok: 67 f2 ff 21                 bnd jmpq *(%ecx)
        Decoded ok: f2 0f 85 00 00 00 00        bnd jne 413 <main+0x413>
        test child finished with 0
        ---- end ----
        Test x86 instruction decoder - new instructions: Ok
        #

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3a9d7723145a6c1be6e9afbb661e3ad7768be2e0
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:25 2015 +0300

      perf tools: Display build warning if x86 instruction decoder differs from 
kernel

      perf tools has a copy of the x86 instruction decoder used by the kernel.
      The expectation is that the copy will be kept more-or-less in-synch with
      the kernel version.  Consequently it is helpful to know if there are
      differences.

      This patch adds a check into the perf tools build so that a diff is done
      on the sources, and a warning is printed if they are different.  Note
      that the warning is not fatal and the build continues as normal.

      The check is done as part of building the instruction decoder, so, like
      a compiler warning, it is not seen unless the instruction decoder has to
      be re-compiled. e.g.

        $ make -C tools/perf >/dev/null
        $ echo "/* blah */" >> tools/perf/util/intel-pt-decoder/inat_types.h
        $ make -C tools/perf >/dev/null
        Warning: Intel PT: x86 instruction decoder differs from kernel
        $ make -C tools/perf >/dev/null
        $

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-2-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 709adcb33928b5bf965587b23ed6544e964584a3
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:42 2015 +0200

      tools lib api fs: Add FSTYPE__configured() method

      Add FSTYPE__configured() (where FSTYPE is one of sysfs, procfs, debugfs,
      tracefs) interface that returns bool state of the filesystem mount:

        true - mounted, false - not mounted

      It will not try to mount the filesystem.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-13-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 73ca85ad364769ffa312b1d892816d8fa23a02bf
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:41 2015 +0200

      tools lib api fs: Add FSTYPE__mount() method

      Adding FSTYPE__mount (where FSTYPE is, as of now, one of sysfs, procfs,
      debugfs, tracefs) method that tries to mount the filesystem in case no
      mount of FSTYPE is found.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-12-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c495afb4988dcbb8bae11b8f1bbb7e11f172672b
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:40 2015 +0200

      tools lib api fs: Add tracefs into fs.c object

      Adding tracefs support into fs.c framework. It'll replace the tracefs
      object functionality in following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-11-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8ccfabdb873df2e18b235bfaf2722f7528d220f1
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:39 2015 +0200

      tools lib api fs: Add debugfs into fs.c object

      Adding debugfs support into fs.c framework. It'll replace the debugfs
      object functionality in following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-10-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 41e3a1fece31d0b2383281e4a917ff4b16fa9223
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:38 2015 +0200

      tools lib api fs: Move SYSFS_MAGIC PROC_SUPER_MAGIC into fs.c

      There's no need to export SYSFS_MAGIC PROC_SUPER_MAGIC in fs.h. Leave
      them in the fs.c.

      Link: http://lkml.kernel.org/n/tip-b2cd1bb7yvbazq5oua24oz18@xxxxxxxxxxxxxx
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-9-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b86b0d3570273c6ddc16b1972e82bf7778346286
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:37 2015 +0200

      tools lib api fs: Add STR and PATH_MAX macros to fs object

      We're going to get rid of findfs.h in following patches, but we'll still
      need these macros.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-8-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 988bdb319246dea977a375beee39a5452e99b3ef
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:35 2015 +0200

      tools lib api fs: Move debugfs__strerror_open into tracing_path.c object

      Moving debugfs__strerror_open out of api/fs/debugfs.c, because it's not
      debugfs specific. It'll be changed to consider tracefs mount as well in
      following patches.

      Renaming it into tracing_path__strerror_open_tp to fit into the
      namespace. No functional change is intended.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-6-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 592d5a6ba86a31681fa5e20a63a145b0a3b53c8a
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:34 2015 +0200

      tools lib api fs: Move tracing_path interface into api/fs/tracing_path.c

      Moving tracing_path interface into api/fs/tracing_path.c out of util.c.
      It seems generic enough to be used by others, and I couldn't think of
      better place.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-5-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 21adf76e908dd03ae47c8f4dd53b180996a725ad
  Merge: 5b92356 53ff6bc
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 4 11:00:56 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

        - In some cases where perf_event.fork.{pid,tid} should be used we were 
instead
          using perf_event.comm.{pid,tid}, which is not a problem for for the 
'pid'
          case, that sits in the same place in these union_perf_event members, 
but
          comm.tid sits where fork.ppid is, oops.

          These cases were considered as (potentially) problematic:

           - 'perf script' with !sample_id_all, i.e. only non old kernels 
without
              perf_event_attr.sample_id_all.

           - intel_pt could be affected when decoding without timestamps, as 
the exit
             event is only used to flush out data which anyway gets flushed at 
the
             end of the session.

           - intel_bts also uses the exit event to flush data which would 
probably not
             cause errors as it would get flushed at the end of the session 
instead.

          Fix it. (Adrian Hunter)

        - Due to relaxing the compiler checks for bison generated files, we 
missed
          updating one parse_events_add_pmu() caller when this function had its
          prototype changed, fix it. (Jiri Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 93efac3f2e03321129de67a3c0ba53048bb53e31
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 13:21:06 2015 +0800

      ipv6: Fix IPsec pre-encap fragmentation check

      The IPv6 IPsec pre-encap path performs fragmentation for tunnel-mode
      packets.  That is, we perform fragmentation pre-encap rather than
      post-encap.

      A check was added later to ensure that proper MTU information is
      passed back for locally generated traffic.  Unfortunately this
      check was performed on all IPsec packets, including transport-mode
      packets.

      What's more, the check failed to take GSO into account.

      The end result is that transport-mode GSO packets get dropped at
      the check.

      This patch fixes it by moving the tunnel mode check forward as well
      as adding the GSO check.

      Fixes: dd767856a36e ("xfrm6: Don't call icmpv6_send on local error")
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit dc3a04d551b5d21f1badbb39bfe8e5bc1289b184
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 17:11:22 2015 -0700

      security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition

      f78f5b90c4ff ("rcu: Rename rcu_lockdep_assert() to RCU_LOCKDEP_WARN()")
      introduced a bug by incorrectly inverting the condition when moving from
      rcu_lockdep_assert() to RCU_LOCKDEP_WARN().  This commit therefore fixes
      the inversion.

      Reported-by: Felipe Balbi <balbi@xxxxxx>
      Reported-by: Tejun Heo <tj@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Acked-by: Serge Hallyn <serge.hallyn@xxxxxxxxxxxxx>
      Tested-by: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>

  commit 66c117d7fa2ae429911e60d84bf31a90b2b96189
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Thu Sep 3 12:34:55 2015 +0200

      x86/alternatives: Make optimize_nops() interrupt safe and synced

      Richard reported the following crash:

      [    0.036000] BUG: unable to handle kernel paging request at 55501e06
      [    0.036000] IP: [<c0aae48b>] common_interrupt+0xb/0x38
      [    0.036000] Call Trace:
      [    0.036000]  [<c0409c80>] ? add_nops+0x90/0xa0
      [    0.036000]  [<c040a054>] apply_alternatives+0x274/0x630

      Chuck decoded:

       "  0:   8d 90 90 83 04 24       lea    0x24048390(%eax),%edx
          6:   80 fc 0f                cmp    $0xf,%ah
          9:   a8 0f                   test   $0xf,%al
       >> b:   a0 06 1e 50 55          mov    0x55501e06,%al
         10:   57                      push   %edi
         11:   56                      push   %esi

       Interrupt 0x30 occurred while the alternatives code was replacing the
       initial 0x90,0x90,0x90 NOPs (from the ASM_CLAC macro) with the
       optimized version, 0x8d,0x76,0x00. Only the first byte has been
       replaced so far, and it makes a mess out of the insn decoding."

      optimize_nops() is buggy in two aspects:

      - It's not disabling interrupts across the modification
      - It's lacking a sync_core() call

      Add both.

      Fixes: 4fd4b6e5537c 'x86/alternatives: Use optimized NOPs for padding'
      Reported-and-tested-by: "Richard W.M. Jones" <rjones@xxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Richard W.M. Jones <rjones@xxxxxxxxxx>
      Cc: Chuck Ebbert <cebbert.lkml@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/alpine.DEB.2.11.1509031232340.15006@nanos
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 9f42a89da6b4dc015631e01ba990d3db2cae2a1b
  Author: Leo Yan <leo.yan@xxxxxxxxxx>
  Date:   Wed Sep 2 10:57:47 2015 +0800

      clk: Hi6220: separately build stub clock driver

      The previous code, kernel builds Hi6220's common clock driver and stub
      clock driver together. Stub clock driver has introduced the dependency
      with CONFIG_MAILBOX, so kernel will not build Hi6220's common clock
      driver due ARM64's defconfig have not enabled CONFIG_MAILBOX by default.

      So separately build stub clock driver and common clock driver for
      Hi6220; and only let stub clock driver has the dependency with
      CONFIG_MAILBOX.

      Signed-off-by: Leo Yan <leo.yan@xxxxxxxxxx>
      Tested-by: Kevin Hilman <khilman@xxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 5e7c4274a70aa2d6f485996d0ca1dad52d0039ca
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Thu Sep 3 19:28:20 2015 +0300

      block: Check for gaps on front and back merges

      We are checking for gaps to previous bio_vec, which can
      only detect back merges gaps. Moreover, at the point where
      we check for a gap, we don't know if we will attempt a back
      or a front merge. Thus, check for gap to prev in a back merge
      attempt and check for a gap to next in a front merge attempt.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>
      [sagig: Minor rename change]
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>

  commit b9c93646fd5cb669d096fec5ad25a01f04cfde27
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Thu Sep 3 12:20:37 2015 +0530

      regulator: pbias: program pbias register offset in pbias driver

      Add separate compatible strings for every platform and populate the
      pbias register offset in the driver data.
      This helps avoid depending on the dt for pbias register offset.

      Also update the dt binding documentation for the new compatible
      strings.

      Suggested-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit ac0e137ab0da80e8fc0db2027598e2f7f82a5a02
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Mon Aug 31 20:27:32 2015 -0700

      clk: h8s2678: Fix compile error

      Recent cleanup removed some include files without checking if the cleaned
      up code still compiles. This results in the following compile error.

      drivers/clk/h8300/clk-h8s2678.c: In function â??h8s2678_pll_clk_setupâ??:
      drivers/clk/h8300/clk-h8s2678.c:99:14: error:
        implicit declaration of function â??kzallocâ??
      drivers/clk/h8300/clk-h8s2678.c:138:2: error:
            implicit declaration of function â??kfreeâ??

      Cc: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 5fdb7e1b976dc9d18aff8c711e51d17c4c324a0e
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Aug 31 14:17:31 2015 +0200

      null_blk: fix wrong capacity when bs is not 512 bytes

      set_capacity() sets device's capacity using 512 bytes sectors.
      null_blk calculates the number of sectors by size / bs, which
      set_capacity is called with. This led to null_blk exposing the
      wrong number of sectors when bs is not 512 bytes.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Reviewed-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit de65d2d26f81f7f84c7258b3a137f20e8fa5bb6a
  Author: Matias Bjørling <mb@xxxxxxxxxxx>
  Date:   Mon Aug 31 14:17:18 2015 +0200

      null_blk: fix memory leak on cleanup

      Driver was not freeing the memory allocated for internal nullb queues.
      This patch frees the memory during driver unload.

      Signed-off-by: Matias Bjørling <mb@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 5014c311baa2b21384321fa4a9f617a92e3e56f0
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Wed Sep 2 16:46:02 2015 -0600

      block: fix bogus compiler warnings in blk-merge.c

      The compiler can't figure out that bvprv is initialized whenever 'prev'
      is set to 1 as well. Use a pointer to bvprv instead, setting it to NULL
      initially, and get rid of the 'prev' tracking. This dumbs it down
      enough that gcc is happy.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 53ff6bc37be449f546158a39c528d7814dfb15a1
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Aug 18 12:07:05 2015 +0300

      perf tools: Fix use of wrong event when processing exit events

      In a couple of cases the 'comm' member of 'union event' has been used
      instead of the correct member ('fork') when processing exit events.

      In the cases where it has been used incorrectly, only the 'pid' and
      'tid' are affected.  The 'pid' value would be correct anyway because it
      is in the same position in 'comm' and 'fork' events, but the 'tid' would
      have been incorrectly assigned from 'ppid'.

      However, for exit events, the kernel puts the current task in the 'ppid'
      and 'ttid' which is the same as the exiting task.  That is 'ppid' ==
      'pid' and if the task is not multi-threaded, 'pid' == 'tid' i.e. the
      data goes wrong only when tracing multi-threaded programs.

      It is hard to find an example of how this would produce an error in
      practice.  There are 3 occurences of the fix:

      1. perf script is only affected if !sample_id_all which only happens on
        old kernels.

      2. intel_pt is only affected when decoding without timestamps
         and would probably still decode correctly - the exit event is
         only used to flush out data which anyway gets flushed at the
         end of the session

      3. intel_bts also uses the exit event to flush data which
         would probably not cause errors as it would get flushed at
         the end of the session instead

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439888825-27708-1-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 65d4b265103a3cb2f0993c946815157a38797421
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:33 2015 +0200

      perf tools: Move tracing_path stuff under same namespace

      Renaming all functions touching tracing_path under same namespace. New
      interface is:

        char tracing_path[];
        - tracing mount path

        char tracing_events_path[];
        - tracing mount/events path

        void tracing_path_set(const char *mountpoint);
        - setting directly tracing_path(_events), used by --debugfs-dir option

        const char *tracing_path_mount(void);
        - initial setup of tracing_(events)_path, called from perf.c
          mounts debugfs/tracefs if needed and possible

        char *get_tracing_file(const char *name);
        void put_tracing_file(char *file);
        - get/put tracing file path

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f6a09af7de3b39b1e4fcff7374871f834498b7f0
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:32 2015 +0200

      perf tools: Remove mountpoint arg from perf_debugfs_mount

      It's not used by any caller. We either detect the mountpoint or use
      hardcoded one.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 245bad8eb45fca36638da53fb0a361397a707001
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 15:52:46 2015 -0700

      perf stat: Quieten failed to read counter message

      Since 3b3eb0445 running perf stat on a system without
      backend-stalled-cycles spits out ugly warnings by default.

      Since that is quite common, make the message a debug message only.

      We know anyways that the counter wasn't read by the normal <unsupported>
      output.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441147966-14917-1-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2bb00d2f95193aea5bfa98392907273115c96920
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Tue Sep 1 09:58:12 2015 -0400

      perf tools: Store the cpu socket and core ids in the perf.data header

      This patch stores the cpu socket_id and core_id in a perf.data header,
      and reads them into the perf_env struct when processing perf.data files.

      The changes modifies the CPU_TOPOLOGY section, making sure it is
      backward/forward compatible.

      The patch checks the section size before reading the core and socket ids.

      It never reads data crossing the section boundary.  An old perf binary
      without this patch can also correctly read the perf.data from a new perf
      with this patch.

      Because the new info is added at the end of the cpu_topology section, an
      old perf tool ignores the extra data.

      Examples:

      1. New perf with this patch read perf.data from an old perf without the
         patch:

        $ perf_new report -i perf_old.data --header-only -I
        ......
        # sibling threads : 33
        # sibling threads : 34
        # sibling threads : 35
        # Core ID and Socket ID information is not available
        # node0 meminfo  : total = 32823872 kB, free = 29315548 kB
        # node0 cpu list : 0-17,36-53
        ......

      2. Old perf without the patch reads perf.data from a new perf with the
         patch:

        $ perf_old report -i perf_new.data --header-only -I
        ......
        # sibling threads : 33
        # sibling threads : 34
        # sibling threads : 35
        # node0 meminfo  : total = 32823872 kB, free = 29190932 kB
        # node0 cpu list : 0-17,36-53
        ......

      3. New perf read new perf.data:

        $ perf_new report -i perf_new.data --header-only -I
        ......
        # sibling threads : 33
        # sibling threads : 34
        # sibling threads : 35
        # CPU 0: Core ID 0, Socket ID 0
        # CPU 1: Core ID 1, Socket ID 0
        ......
        # CPU 61: Core ID 10, Socket ID 1
        # CPU 62: Core ID 11, Socket ID 1
        # CPU 63: Core ID 16, Socket ID 1
        # node0 meminfo  : total = 32823872 kB, free = 29190932 kB
        # node0 cpu list : 0-17,36-53

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441115893-22006-2-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 193b6bd339ccb30c861a307a915d4532f443e0fb
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Tue Sep 1 09:58:11 2015 -0400

      perf cpumap: Factor out functions to get core_id and socket_id

      This patch moves the code which reads core_id and socket_id into
      separate functions.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441115893-22006-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 76055940c1afc8d445992fb0278b80cf205bbf97
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Sat Aug 29 04:22:05 2015 +0000

      tools lib traceevent: Support function __get_dynamic_array_len

      Support helper function __get_dynamic_array_len() in libtraceevent, this
      function is used accompany with __print_array() or __print_hex(), but
      currently it is not an available function in the function list of
      process_function().

      The total allocated length of the dynamic array is embedded in the top
      half of __data_loc_##item field. This patch adds new arg type
      PRINT_DYNAMIC_ARRAY_LEN to return the length to eval_num_arg(),

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1440822125-52691-32-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dabf626f7f0e5cbef0d1cfb5143e40213f079bb8
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Sat Aug 29 04:21:55 2015 +0000

      perf tools: Copy linux/filter.h to tools/include

      This patch copies filter.h from include/linux/kernel.h to
      tools/include/linux/filter.h to enable other libraries to use macros in 
it,
      like libbpf which will be introduced by further patches.

      Currently, the filter.h copy only contains the useful macros needed by
      libbpf for not introducing too much dependence.

      tools/perf/MANIFEST is also updated for 'make perf-*-src-pkg'.

      One change:
        The 'imm' field of BPF_EMIT_CALL becomes ((FUNC) - BPF_FUNC_unspec) to
        suit user space code generator.

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1440822125-52691-22-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      [ Removed stylistic changes, so that a diff to the original file gets 
reduced ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2f84b42b28eed0f980200401077e51571202f868
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 11:47:19 2015 -0700

      perf tools: Always use non inlined file name for 'srcfile' sort key

      When profiling the kernel with the 'srcfile' sort key it's common to
      "get stuck" in include. For example a lot of code uses current or other
      inlines, so they get accounted to some random include file. This is not
      very useful as a high level categorization.

      For example just profiling the idle loop usually shows mostly inlines,
      so you never see the actual cpuidle file.

      This patch changes the 'srcfile' sort key to always unwind the inline
      stack using BFD/DWARF. So we always account to the base function that
      called the inline.

      In a few cases include is still shown (for example for MSR accesses),
      but that is because they get inlining expanded as part of assigning to a
      global function pointer. For the majority it works fine though.

      v2: Use simpler while loop. Add maximum iteration count.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441133239-31254-1-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5ad4da4302712fba10624d28cb6c269fee592b69
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:31 2015 +0200

      perf tools: Fix parse_events_add_pmu caller

      Following commit changed parse_events_add_pmu interface:
        36adec85a86f perf tools: Change parse_events_add_pmu interface

      but forgot to change one caller. Because of lessen compilation rules for
      the bison parser, the compiler did not warn on that.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Fixes: 36adec85a86f ("perf tools: Change parse_events_add_pmu interface")
      Link: 
http://lkml.kernel.org/r/1441180605-24737-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9f8df6adf6c53abfa10e243cb289c34eb18ec581
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 2 16:14:06 2015 +0530

      regulator: core: fix possible NULL dereference

      We were checking rdev->supply for NULL after dereferencing it. Lets
      check for rdev->supply along with _regulator_is_enabled() and call
      regulator_enable() only if rdev->supply is not NULL.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 02bc933ebb59208f42c2e6305b2c17fd306f695d
  Author: Tan, Jui Nee <jui.nee.tan@xxxxxxxxx>
  Date:   Tue Sep 1 10:22:51 2015 +0800

      spi: spi-pxa2xx: Check status register to determine if SSSR_TINT is 
disabled

      On Intel Baytrail, there is case when interrupt handler get called, no SPI
      message is captured. The RX FIFO is indeed empty when RX timeout pending
      interrupt (SSSR_TINT) happens.

      Use the BIOS version where both HSUART and SPI are on the same IRQ. Both
      drivers are using IRQF_SHARED when calling the request_irq function. When
      running two separate and independent SPI and HSUART application that
      generate data traffic on both components, user will see messages like
      below on the console:

        pxa2xx-spi pxa2xx-spi.0: bad message state in interrupt handler

      This commit will fix this by first checking Receiver Time-out Interrupt,
      if it is disabled, ignore the request and return without servicing.

      Signed-off-by: Tan, Jui Nee <jui.nee.tan@xxxxxxxxx>
      Acked-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 7c8bb6cb95061b3143759459ed6c6b0c73bcfecb
  Author: Frederic Weisbecker <fweisbec@xxxxxxxxx>
  Date:   Tue Sep 1 16:51:00 2015 +0200

      nohz: Assert existing housekeepers when nohz full enabled

      The code ensures that when nohz full is running, at least the
      boot CPU serves as a housekeeper and it can't be later offlined.

      Let's assert this assumption to make sure that we have CPUs to
      handle unbound jobs like workqueues and timers while nohz full
      CPUs run undisturbed.

      Also improve the comments on housekeeper offlining prevention.

      Signed-off-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Chris Metcalf <cmetcalf@xxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Preeti U Murthy <preeti@xxxxxxxxxxxxxxxxxx>
      Cc: Vatika Harlalka <vatikaharlalka@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441119060-2230-3-git-send-email-fweisbec@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9642d18eee2cd169b60c6ac0f20bda745b5a3d1e
  Author: Vatika Harlalka <vatikaharlalka@xxxxxxxxx>
  Date:   Tue Sep 1 16:50:59 2015 +0200

      nohz: Affine unpinned timers to housekeepers

      The problem addressed in this patch is about affining unpinned
      timers. Adaptive or Full Dynticks CPUs are currently disturbed
      by unnecessary jitter due to firing of such timers on them.

      This patch will affine timers to online CPUs which are not full
      dynticks in NOHZ_FULL configured systems. It should not
      introduce overhead in nohz full off case due to static keys.

      Signed-off-by: Vatika Harlalka <vatikaharlalka@xxxxxxxxx>
      Signed-off-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Preeti U Murthy <preeti@xxxxxxxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Chris Metcalf <cmetcalf@xxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441119060-2230-2-git-send-email-fweisbec@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 31e09b18c863718939e3e9c30eee55f9011d85ee
  Author: Linda Knippers <linda.knippers@xxxxxx>
  Date:   Tue Sep 1 15:41:55 2015 -0400

      x86/mm/srat: Print non-volatile flag in SRAT

      With the addition of NVDIMM support, a question came up as to
      whether NVDIMM ranges should be in the SRAT with this bit set.
      I think the consensus was no because the ranges are in the NFIT
      with proximity domain information there.

      ACPI is not clear on the meaning of this bit in the SRAT.
      If someone is setting it, we might want to ask them what they
      expect to happen with it.

      Right now this bit is only printed if all the ACPI debug
      information is turned on.

      Signed-off-by: Linda Knippers <linda.knippers@xxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150901194154.GA4939@ljkz400
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 21b430d23d233c67e6589ea5054d18392e15a28e
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Tue Sep 1 13:59:25 2015 -0700

      ARM: omap2plus_defconfig: Enable MUSB DMA support

      With recent MUSB changes we can now build in support for multiple
      DMA implementations. So let's enable DMA by default to make life
      easier for distro use.

      Acked-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 81032e34e184a8d63598d215a6d4a3352018ffea
  Author: Vishal Mahaveer <vishalm@xxxxxx>
  Date:   Tue Sep 1 13:59:25 2015 -0700

      ARM: DRA752: Add ID detect for ES2.0

      ES2.0 is a minor variant of ES1.1. ES2.0 is an incremental revision
      with various fixes including the following:
        - reset logic fixes
        - few assymetric aging logic fixes
        - MMC clock rate fixes
        - Ethernet speed fixes
        - edma fixes for mcasp

      NOTE: even though we use a compatible of dra742 and dra752, the usage in
      the Linux kernel is more or less interchangable - we use dra752 more
      often in the linux kernel compared to dra742 and 4.2-rc6

      Signed-off-by: Vishal Mahaveer <vishalm@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 05f4f1abc274ac7e8e83424d0cef2d842db91815
  Author: Frans Klaver <fransklaver@xxxxxxxxx>
  Date:   Tue Sep 1 13:59:25 2015 -0700

      ARM: OMAP3: vc: fix 'or' always true warning

      Fix the warning:
      arch/arm/mach-omap2/vc.c:302:47: warning: logical â??orâ?? of 
collectively exhaustive tests is always true [-Wlogical-op]

      As we're toggling both CLKREQ and OFFMODE, we should also be checking
      OFFMODE.

      Signed-off-by: Frans Klaver <fransklaver@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 874b300a6a0bfe97225ed1f8648fa92238e4d9e9
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Tue Sep 1 13:59:25 2015 -0700

      ARM: OMAP2+: Fix booting if no timer parent clock is available

      When bringing up a new SoC we needlessly prevent booting at timer
      init if timer clock_set_parent fails. This can fail if the system
      is booting on bootloader configured PLL values until the clock
      framework driver for the PLL is implemented.

      Let's just WARN instead, this will provide helpful information
      for anybody bringing up a new SoC what needs to be fixed.

      This allows to boot dm814x that's still missing the PLL driver.

      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit fe8291e82b5d0b79b743683e5c0fb7e273f7a99a
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Tue Sep 1 13:59:24 2015 -0700

      ARM: OMAP2+: omap-device: fix race deferred probe of omap_hsmmc vs 
omap_device_late_init

      Kernel fails to boot 50% of times (form build to build) with
      RT-patchset applied due to the following race - on late boot
      stages deferred_probe_work_func->omap_hsmmc_probe races with 
omap_device_late_ini.

      The same issue has been reported now on linux-next (4.3) by Keerthy [1]

      late_initcall
       - deferred_probe_initcal() tries to re-probe all pending driver's probe.

      - later on, some driver is probing in this case It's cpsw.c
        (but could be any other drivers)
        cpsw_init
        - platform_driver_register
          - really_probe
             - driver_bound
               - driver_deferred_probe_trigger
        and boot proceed.
        So, at this moment we have deferred_probe_work_func scheduled.

      late_initcall_sync
        - omap_device_late_init
          - omap_device_idle

      CPU1                                      CPU2
        - deferred_probe_work_func
          - really_probe
            - omap_hsmmc_probe
        - pm_runtime_get_sync
                                        late_initcall_sync
                                        - omap_device_late_init
                                                if (od->_driver_status != 
BUS_NOTIFY_BOUND_DRIVER) {
                                                        if (od->_state == 
OMAP_DEVICE_STATE_ENABLED) {
                                                                - 
omap_device_idle [ops - IP is disabled]
        - [fail]
        - pm_runtime_put_sync
                - omap_hsmmc_runtime_suspend [ooops!]

      == log ==
       omap_hsmmc 480b4000.mmc: unable to get vmmc regulator -517
       davinci_mdio 48485000.mdio: davinci mdio revision 1.6
       davinci_mdio 48485000.mdio: detected phy mask fffffff3
       libphy: 48485000.mdio: probed
       davinci_mdio 48485000.mdio: phy[2]: device 48485000.mdio:02, driver 
unknown
       davinci_mdio 48485000.mdio: phy[3]: device 48485000.mdio:03, driver 
unknown
       omap_hsmmc 480b4000.mmc: unable to get vmmc regulator -517
       cpsw 48484000.ethernet: Detected MACID = b4:99:4c:c7:d2:48
       cpsw 48484000.ethernet: cpsw: Detected MACID = b4:99:4c:c7:d2:49
       hctosys: unable to open rtc device (rtc0)
       omap_hsmmc 480b4000.mmc: omap_device_late_idle: enabled but no driver.  
Idling
       ldousb: disabling
       Unhandled fault: imprecise external abort (0x1406) at 0x00000000
       [00000000] *pgd=00000000
       Internal error: : 1406 [#1] PREEMPT SMP ARM
       Modules linked in:
       CPU: 1 PID: 58 Comm: kworker/u4:1 Not tainted 
4.1.2-rt1-00467-g6da3c0a-dirty #5
       Hardware name: Generic DRA74X (Flattened Device Tree)
       Workqueue: deferwq deferred_probe_work_func
       task: ee6ddb00 ti: edd3c000 task.ti: edd3c000
       PC is at omap_hsmmc_runtime_suspend+0x1c/0x12c
       LR is at _od_runtime_suspend+0xc/0x24
       pc : [<c0471998>]    lr : [<c0029590>]    psr: a0000013
       sp : edd3dda0  ip : ee6ddb00  fp : c07be540
       r10: 00000000  r9 : c07be540  r8 : 00000008
       r7 : 00000000  r6 : ee646c10  r5 : ee646c10  r4 : edd79380
       r3 : fa0b4100  r2 : 00000000  r1 : 00000000  r0 : ee646c10
       Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment kernel
       Control: 10c5387d  Table: 8000406a  DAC: 00000015
       Process kworker/u4:1 (pid: 58, stack limit = 0xedd3c218)
       Stack: (0xedd3dda0 to 0xedd3e000)
       dda0: ee646c70 ee646c10 c0029584 00000000 00000008 c0029590 ee646c70 
ee646c10
       ddc0: c0029584 c03adfb8 ee646c10 00000004 0000000c c03adff0 ee646c10 
00000004
       dde0: 0000000c c03ae4ec 00000000 edd3c000 ee646c10 00000004 ee646c70 
00000004
       de00: fa0b4000 c03aec20 ee6ddb00 ee646c10 00000004 ee646c70 ee646c10 
fffffdfb
       de20: edd79380 00000000 fa0b4000 c03aee90 fffffdfb edd79000 ee646c00 
c0474290
       de40: 00000000 edda24c0 edd79380 edc81f00 00000000 00000200 00000001 
c06dd488
       de60: edda3960 ee646c10 ee646c10 c0824cc4 fffffdfb c0880c94 00000002 
edc92600
       de80: c0836378 c03a7f84 ee646c10 c0824cc4 00000000 c0880c80 c0880c94 
c03a6568
       dea0: 00000000 ee646c10 c03a66ac ee4f8000 00000000 00000001 edc92600 
c03a4b40
       dec0: ee404c94 edc83c4c ee646c10 ee646c10 ee646c44 c03a63c4 ee646c10 
ee646c10
       dee0: c0814448 c03a5aa8 ee646c10 c0814220 edd3c000 c03a5ec0 c0814250 
ee6be400
       df00: edd3c000 c004e5bc ee6ddb01 00000078 ee6ddb00 ee4f8000 ee6be418 
edd3c000
       df20: ee4f8028 00000088 c0836045 ee4f8000 ee6be400 c004e928 ee4f8028 
00000000
       df40: c004e8ec 00000000 ee6bf1c0 ee6be400 c004e8ec 00000000 00000000 
00000000
       df60: 00000000 c0053450 2e56fa97 00000000 afdffbd7 ee6be400 00000000 
00000000
       df80: edd3df80 edd3df80 00000000 00000000 edd3df90 edd3df90 edd3dfac 
ee6bf1c0
       dfa0: c0053384 00000000 00000000 c000f668 00000000 00000000 00000000 
00000000
       dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000
       dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 f1fc9d7e 
febfbdff
       [<c0471998>] (omap_hsmmc_runtime_suspend) from [<c0029590>] 
(_od_runtime_suspend+0xc/0x24)
       [<c0029590>] (_od_runtime_suspend) from [<c03adfb8>] 
(__rpm_callback+0x24/0x3c)
       [<c03adfb8>] (__rpm_callback) from [<c03adff0>] (rpm_callback+0x20/0x80)
       [<c03adff0>] (rpm_callback) from [<c03ae4ec>] (rpm_suspend+0xe4/0x618)
       [<c03ae4ec>] (rpm_suspend) from [<c03aee90>] 
(__pm_runtime_idle+0x60/0x80)
       [<c03aee90>] (__pm_runtime_idle) from [<c0474290>] 
(omap_hsmmc_probe+0x6bc/0xa7c)
       [<c0474290>] (omap_hsmmc_probe) from [<c03a7f84>] 
(platform_drv_probe+0x44/0xa4)
       [<c03a7f84>] (platform_drv_probe) from [<c03a6568>] 
(driver_probe_device+0x170/0x2b4)
       [<c03a6568>] (driver_probe_device) from [<c03a4b40>] 
(bus_for_each_drv+0x64/0x98)
       [<c03a4b40>] (bus_for_each_drv) from [<c03a63c4>] 
(device_attach+0x70/0x88)
       [<c03a63c4>] (device_attach) from [<c03a5aa8>] 
(bus_probe_device+0x84/0xac)
       [<c03a5aa8>] (bus_probe_device) from [<c03a5ec0>] 
(deferred_probe_work_func+0x58/0x88)
       [<c03a5ec0>] (deferred_probe_work_func) from [<c004e5bc>] 
(process_one_work+0x134/0x464)
       [<c004e5bc>] (process_one_work) from [<c004e928>] 
(worker_thread+0x3c/0x4fc)
       [<c004e928>] (worker_thread) from [<c0053450>] (kthread+0xcc/0xe4)
       [<c0053450>] (kthread) from [<c000f668>] (ret_from_fork+0x14/0x2c)
       Code: e594302c e593202c e584205c e594302c (e5932128)
       ---[ end trace 0000000000000002 ]---

      The issue happens because omap_device_late_init() do not take into
      account that some drivers are present, but their probes were not
      finished successfully and where deferred instead. This is the valid
      case, and omap_device_late_init() should not idle such devices.

      To fix this issue, the value of omap_device->_driver_status field
      should be checked not only for BUS_NOTIFY_BOUND_DRIVER (driver is
      present and has been bound to device successfully), but also checked
      for BUS_NOTIFY_BIND_DRIVER (driver about to be bound) - which means
      driver is present and there was try to bind it to device.

      [1] http://www.spinics.net/lists/arm-kernel/msg441880.html
      Cc: Tero Kristo <t-kristo@xxxxxx>
      Cc: Keerthy <j-keerthy@xxxxxx>
      Tested-by: Keerthy <j-keerthy@xxxxxx>
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 51d2eeef1d958ef6834b24f548194f5acea0f499
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Tue Sep 1 11:14:05 2015 +0530

      ASoC: wm0010: fix memory leak

      We were aborting if the kzalloc of img_swap fails but without freeing the
      already allocated out. Similarly we were aborting if spi_sync fails
      without releasing out and img_swap.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 5e26b1b3abce05c177feb589260031519a1bc7b1
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:41 2015 -0700

      ipvs: support scheduling inverse and icmp SCTP packets

      In the event of an icmp packet, take only the ports instead of trying to
      grab the full header.

      In the event of an inverse packet, use the source address and port.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 2b0f39ef3d8951036d778ddee503e2fdf8e4ff4f
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:40 2015 -0700

      ipvs: support scheduling inverse and icmp UDP packets

      In the event of an icmp packet, take only the ports instead of trying to
      grab the full header.

      In the event of an inverse packet, use the source address and port.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 8f88ea68e6146ff2d0df263b1f3e6e655e69ba98
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:39 2015 -0700

      ipvs: support scheduling inverse and icmp TCP packets

      In the event of an icmp packet, take only the ports instead of trying to
      grab the full header.

      In the event of an inverse packet, use the source address and port.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 89621f31d18b81a6c66a97fc2a80b3b6e5937a81
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:38 2015 -0700

      ipvs: ensure that ICMP cannot be sent in reply to ICMP

      Check the header for icmp before sending a PACKET_TOO_BIG

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6044eeffafbe35154c5d3b04b73e8938a62e5d39
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:37 2015 -0700

      ipvs: attempt to schedule icmp packets

      Invoke the try_to_schedule logic from the icmp path and update it to the
      appropriate ip_vs_conn_put function.  The schedule functions have been
      updated to reject the packets immediately for now.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1471f35efa86407fc180ca6d55363c684d166ef6
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:36 2015 -0700

      ipvs: sh: support scheduling icmp/inverse packets consistently

      "source_hash" the dest fields if it's an inverse packet.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3481894fcb0d7d3c226618e6b73a27796a7a3eca
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:35 2015 -0700

      ipvs: Use outer header in ip_vs_bypass_xmit_v6

      The ip_vs_iphdr may refer to an internal header, so use the outer one
      instead.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 94485fedcb176a9105961e47bd9dda23801c1906
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:34 2015 -0700

      ipvs: add schedule_icmp sysctl

      This sysctl will be used to enable the scheduling of icmp packets.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ee78378f97648834d22ce97e91633ea40f044e3d
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:33 2015 -0700

      ipvs: Make ip_vs_schedule aware of inverse iph'es

      This is necessary to schedule icmp later.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 802c41adcf3be63f351c302c9665865d705cada9
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:32 2015 -0700

      ipvs: drop inverse argument to conn_{in,out}_get

      No longer necessary since the information is included in the ip_vs_iphdr
      itself.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3b5ca61768457de5139229392d0333165abcf10f
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:31 2015 -0700

      ipvs: pull out ip_vs_try_to_schedule function

      This is necessary as we'll be trying to schedule icmp later and we'll want
      to share this code.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0b72902120d89153996f411bb3ec8ca7b4baf1d8
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:30 2015 -0700

      ipvs: Handle inverse and icmp headers in ip_vs_leave

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 4fd9beef37f3a14aa34cb025479a0e431dc9e58b
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:29 2015 -0700

      ipvs: Add hdr_flags to iphdr

      These flags contain information like whether or not the addresses are
      inverted or from icmp.  The first will allow us to drop an inverse param
      all over the place, and the second will later be useful in scheduling 
icmp.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b0e010c527de742cb18e8d50a06dfd1a995b5382
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:28 2015 -0700

      ipvs: replace ip_vs_fill_ip4hdr with ip_vs_fill_iph_skb_off

      This removes some duplicated code and makes the ICMPv6 path look more like
      the ICMP path.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0050ae57cd02dbd4f171622d0269e2fb7029a23e
  Merge: a57e456 488ca7d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Aug 31 19:47:03 2015 +0200

      Merge branch 'x86/cpufeature' into x86/urgent, because it's ready

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d76f41982f2fc88492efd96c7c3178044f32e125
  Author: Anatol Pomozov <anatol.pomozov@xxxxxxxxx>
  Date:   Mon Aug 31 08:24:23 2015 -0700

      ASoC: Document snd-soc-dummy-dai purpose

      Signed-off-by: Anatol Pomozov <anatol.pomozov@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 6bd3c6f75e0f9baddbf1196a7e3fceabb50c7e3c
  Author: Maciej S. Szmigiero <mail@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 17:07:12 2015 +0200

      ASoC: fsl-asoc-card: put ASRC OF node in case of unknown device

      In case of unknown DT compatible device the ASRC OF node
      possibly acquired earlier by of_parse_phandle() has
      to be put before returning from probe method.

      Signed-off-by: Maciej Szmigiero <mail@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 3d4fe182003bcde778e29e84c14c0c4bb70a452e
  Author: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
  Date:   Mon Aug 31 21:18:58 2015 +0800

      spi: Mediatek: Document devicetree bindings update for spi bus

      This patch updates spi bindings, fixs clock usage description.

      Signed-off-by: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit adcbcfea15d62fab5ba40ac28f9d2a590cc5e5e8
  Author: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
  Date:   Mon Aug 31 21:18:57 2015 +0800

      spi: mediatek: fix spi clock usage error

      spi clock manages flow:
        CLK_TOP_SYSPLL3_D2 ---> CLK_TOP_SPI_SEL ---> CLK_PERI_SPI0
           (source clock)           (clock mux)       (clock gate)
      spi driver should choose source clock by clock mux, then enable
      clock gate.

      Signed-off-by: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit ca9f26a27949ba3b295e4f0841c0bec9ef440141
  Author: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
  Date:   Mon Aug 31 21:18:56 2015 +0800

      spi: mediatek: remove clk_disable_unprepare()

      This patch removes clk_disable_unprepare() in mtk_spi_remove().
      clk_disable_prepare/unprepare must be balance, spi-clk is disabled
      in mtk_spi_probe, so not needs to disable again.

      Signed-off-by: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 79f682806240741f62faaa33d933ebe768caa07f
  Author: Liad Kaufman <liad.kaufman@xxxxxxxxx>
  Date:   Mon Aug 24 16:23:58 2015 +0300

      iwlwifi: mvm: remove SCD_QUEUE_CONFIG TLV flag

      We don't support firmwares that don't use the new API.
      This also allows to use all the SCD queues, so increase
      the reported number of queues to 31.

      Signed-off-by: Liad Kaufman <liad.kaufman@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 3c1f84a174e425f2e7a687a6cfd791f609cbc9eb
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:48:55 2015 +0300

      iwlwifi: mvm: don't load -12.ucode anymore

      -13.ucode has been published long ago. Deprecate old
      versions of the firmware.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit cfe417bc47ba8f470941a1b8ad60911e163f1b34
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Aug 26 12:22:12 2015 +0200

      iwlwifi: mvm: don't NUL-terminate low-latency debugfs file

      There's obviously no reason to write a NUL-terminating byte into
      the debugfs file. Apparently nobody tried to use this from a tool
      that doesn't strip NUL bytes though, so we never noticed. Fix it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit cf8c3cff3fcce966c6d31001c09c92778f961eea
  Author: Luciano Coelho <luciano.coelho@xxxxxxxxx>
  Date:   Mon Aug 24 14:53:25 2015 +0300

      iwlwifi: mvm: make sure d0i3 exit work runs before suspending

      If we are in d0i3 when entering suspend, we leave d0i3 so that
      mac80211 can call us to remove connections or whatever before going to
      suspend.  We do this by calling pm_runtime_resume() early in the slave
      transport flow and reactivating it later, when the wiphy suspend flow
      runs.

      The problem is that we queue a work in order to leave d0i3.  If this
      work hasn't run yet when the wiphy suspend flow is called, we have a
      race and entering d0i3 fails (because we're still holding the
      IWL_MVM_REF_EXIT_WORK reference).

      To solve this, simply flush the d0i3_exit_work at the beginning of the
      iwl_mvm_suspend() function.

      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 9493908095a3d0b4fa24ff529975376b3a2b8394
  Author: Gregory Greenman <gregory.greenman@xxxxxxxxx>
  Date:   Mon Aug 24 14:38:35 2015 +0300

      iwlwifi: mvm: don't ask for beacons when AP vif and no assoc sta

      When in AP mode, we need beacons from other APs for HT protection.
      However, when there's no any associated station we will not do
      any Tx and thus don't really need beacons. On the other hand, these
      beacons will cause a lot of unnecessary wakeups which increase our
      power consumption. Handle this by asking FW to pass beacons only when
      there's at least one associated station.

      Signed-off-by: Gregory Greenman <gregory.greenman@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit a73a2cea922de5d2dd03ad456e280ef92c8bb9f6
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Sun Aug 23 13:29:36 2015 +0300

      iwlwifi: Deinline iwl_{read,write}(8,32}

      With CONFIG_IWLWIFI_DEVICE_TRACING=y, these functions are rather large,
      too big for inlining.

      With this .config: http://busybox.net/~vda/kernel_config,
      after uninlining these functions have sizes and callsite counts
      as follows:

      iwl_read32  475 bytes, 51 callsites
      iwl_write32 477 bytes, 90 callsites
      iwl_write8  493 bytes, 3 callsites

      Reduction in size is about 74,000 bytes:

          text     data      bss       dec     hex filename
      90758147 17226024 36659200 144643371 89f152b vmlinux0
      90687995 17221928 36659200 144569123 89df323 vmlinux.after

      Reported-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit e50460192e6e326fc748037c7ba69565fc18f992
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Mon Aug 17 10:45:50 2015 +0300

      iwlwifi: mvm: add debugfs hook to send ECHO_CMD to the firmware

      ECHO_CMD is a simple command that can be sent to the
      firmware just to check that it is alive.
      This command is useful for debug purpose, provide a debugfs
      hook to send it.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 62e004fe941d56cb70ea9148bb79cf6698751248
  Author: Sara Sharon <sara.sharon@xxxxxxxxx>
  Date:   Thu Aug 20 14:12:58 2015 +0300

      iwlwifi: mvm: fix statistics variables type

      When receiving statistics notification there is a field of average energy.
      This is defines as signed 8 bit, while FW refers to it as unsigned.
      when the energy is higher than 127 this causes in iwl_mvm_stat_iterator
      a wrong computation of the signal
           int sig = -stats->general.beacon_filter_average_energy;
      resulting in incorrect CQM event (change from low to high).

      While at it - update the rest of the fields to the correct type.

      Signed-off-by: Sara Sharon <sara.sharon@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit dbb04b0d29f884dbb6d0a52dd7877445d2e776f1
  Author: Luciano Coelho <luciano.coelho@xxxxxxxxx>
  Date:   Tue Aug 18 12:07:48 2015 +0300

      iwlwifi: mvm: remove netdetect debugfs entry

      This debugfs entry was implemented just as a proof-of-concept before
      the full support for netdetect via cfg80211/mac80211 was implemented.
      Now that we have a proper way to enable netdetect from userspace, this
      entry is redundant and should be removed to avoid unnecessary
      maintenance work.

      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 275d7d44d802ef271a42dc87ac091a495ba72fc5
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Aug 20 10:34:59 2015 +0930

      module: Fix locking in symbol_put_addr()

      Poma (on the way to another bug) reported an assertion triggering:

        [<ffffffff81150529>] module_assert_mutex_or_preempt+0x49/0x90
        [<ffffffff81150822>] __module_address+0x32/0x150
        [<ffffffff81150956>] __module_text_address+0x16/0x70
        [<ffffffff81150f19>] symbol_put_addr+0x29/0x40
        [<ffffffffa04b77ad>] dvb_frontend_detach+0x7d/0x90 [dvb_core]

      Laura Abbott <labbott@xxxxxxxxxx> produced a patch which lead us to
      inspect symbol_put_addr(). This function has a comment claiming it
      doesn't need to disable preemption around the module lookup
      because it holds a reference to the module it wants to find, which
      therefore cannot go away.

      This is wrong (and a false optimization too, preempt_disable() is really
      rather cheap, and I doubt any of this is on uber critical paths,
      otherwise it would've retained a pointer to the actual module anyway and
      avoided the second lookup).

      While its true that the module cannot go away while we hold a reference
      on it, the data structure we do the lookup in very much _CAN_ change
      while we do the lookup. Therefore fix the comment and add the
      required preempt_disable().

      Reported-by: poma <pomidorabelisima@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Fixes: a6e6abd575fc ("module: remove module_text_address()")
      Cc: stable@xxxxxxxxxx

  commit 488ca7d72d974e3c00ae73ed9f947590680bdf00
  Author: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Fri Aug 21 14:56:46 2015 -0700

      x86/cpufeatures: Enable cpuid for Intel SHA extensions

      Add Intel CPUID for Intel Secure Hash Algorithm Extensions. This feature
      provides new instructions for accelerated computation of SHA-1 and 
SHA-256.
      This allows the feature to be shown in the /proc/cpuinfo for cpus that
      support it.

      Refer to SHA extension programming guide in chapter 8.2 of the Intel
      Architecture Instruction Set Extensions Programming reference
      for definition of this feature's cpuid: CPUID.(EAX=07H, ECX=0):EBX.SHA 
[bit 29] = 1
      
https://software.intel.com/sites/default/files/managed/07/b7/319433-023.pdf

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxx>
      Cc: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/1440194206.3940.6.camel@schen9-mobl2
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 8d446c8647c9ab8fcb45a8fc7dbbafe1f83aa2f3
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Aug 7 09:36:59 2015 +0100

      arm64/mm: Add PROT_DEVICE_nGnRnE and PROT_NORMAL_WT

      UEFI spec 2.5 section 2.3.6.1 defines that
      EFI_MEMORY_[UC|WC|WT|WB] are possible EFI memory types for
      AArch64.

      Each of those EFI memory types is mapped to a corresponding
      AArch64 memory type. So we need to define PROT_DEVICE_nGnRnE
      and PROT_NORMWL_WT additionaly.

      MT_NORMAL_WT is defined, and its encoding is added to MAIR_EL1
      when initializing the CPU.

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-6-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b40227fbfb1f98614e6f9bdc4cb3a54ab31d48a5
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Aug 7 09:36:58 2015 +0100

      acpi, x86: Implement arch_apei_get_mem_attributes()

      ... to allow an arch specific implementation of getting page
      protection type associated with a physical address.

      On x86, we currently have no way to look up the EFI memory map
      attributes for a region in a consistent way, because the
      memmap is discarded after efi_free_boot_services(). So if
      you call efi_mem_attributes() during boot and at runtime,
      you could theoretically see different attributes.

      Since we are yet to see any x86 platforms that require
      anything other than PAGE_KERNEL (some arm64 platforms
      require the equivalent of PAGE_KERNEL_NOCACHE), return that
      until we know differently.

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-5-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      [ Small fixes to spelling. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7bf793115dd96ce9bd8ed1665fc187d961a95dba
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Aug 7 09:36:57 2015 +0100

      efi, x86: Rearrange efi_mem_attributes()

      x86 and ia64 implement efi_mem_attributes() differently. This
      function needs to be available for other architectures
      (such as arm64) as well, such as for the purpose of ACPI/APEI.

      ia64 EFI does not set up a 'memmap' variable and does not set
      the EFI_MEMMAP flag, so it needs to have its unique implementation
      of efi_mem_attributes().

      Move efi_mem_attributes() implementation from x86 to the core
      EFI code, and declare it with __weak.

      It is recommended that other architectures should not override
      the default implementation.

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-4-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fa5c35011a8d5f3d0c597a6336107eafd1b6046c
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Fri Aug 7 09:36:56 2015 +0100

      Revert "x86/efi: Request desired alignment via the PE/COFF headers"

      This reverts commit:

        aeffc4928ea2 ("x86/efi: Request desired alignment via the PE/COFF 
headers")

      Linn reports that Signtool complains that kernels built with
      CONFIG_EFI_STUB=y are violating the PE/COFF specification because
      the 'SizeOfImage' field is not a multiple of 'SectionAlignment'.

      This violation was introduced as an optimisation to skip having
      the kernel relocate itself during boot and instead have the
      firmware place it at a correctly aligned address.

      No one else has complained and I'm not aware of any firmware
      implementations that refuse to boot with commit aeffc4928ea2,
      but it's a real bug, so revert the offending commit.

      Reported-by: Linn Crosetto <linn@xxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Brown <mbrown@xxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-3-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 248fbcd5aee00f6519a12c5ed3bc3dc0f5e84de5
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Fri Aug 7 09:36:55 2015 +0100

      x86/efi-bgrt: Switch pr_err() to pr_debug() for invalid BGRT

      It's totally legitimate, per the ACPI spec, for the firmware to
      set the BGRT 'status' field to zero to indicate that the BGRT
      image isn't being displayed, and we shouldn't be printing an
      error message in that case because it's just noise for users. So
      swap pr_err() for pr_debug().

      However, Josh points that out it still makes sense to test the
      validity of the upper 7 bits of the 'status' field, since
      they're marked as "reserved" in the spec and must be zero. If
      firmware violates this it really *is* an error.

      Reported-by: Tom Yan <tom.ty89@xxxxxxxxx>
      Tested-by: Tom Yan <tom.ty89@xxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 87db73aebf55554fefaa3eade0a28f282a1511b8
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Aug 7 09:36:54 2015 +0100

      efi: Add support for EFI_MEMORY_RO attribute introduced by UEFIv2.5

      The UEFI spec v2.5 introduces a new memory attribute
      EFI_MEMORY_RO, which is now the preferred attribute to convey
      that the nature of the contents of such a region allows it to be
      mapped read-only (i.e., it contains .text and .rodata only).

      The specification of the existing EFI_MEMORY_WP attribute has been
      updated to align more closely with its common use as a
      cacheability attribute rather than a permission attribute.

      Add the #define and add the attribute to the memory map dumping
      routine.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Laszlo Ersek <lersek@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-1-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 15bbdec3931e617231c12b0920e497e87ec8c2c6
  Author: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
  Date:   Mon Jul 13 14:31:30 2015 +0300

      iommu: Make the iova library a module

      The iova library has use outside the intel-iommu driver, thus make it a
      module.

      Signed-off-by: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit 9b41760b03816b34f4c9eee2cbb8fda8439920fc
  Author: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
  Date:   Mon Jul 13 14:31:29 2015 +0300

      iommu: iova: Export symbols

      Use EXPORT_SYMBOL_GPL() to export the iova library symbols. The symbols
      include:

        init_iova_domain();
        iova_cache_get();
        iova_cache_put();
        iova_cache_init();
        alloc_iova();
        find_iova();
        __free_iova();
        free_iova();
        put_iova_domain();
        reserve_iova();
        copy_reserved_iova();

      Signed-off-by: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit ae1ff3d623905947158fd3394854c23026337810
  Author: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
  Date:   Mon Jul 13 14:31:28 2015 +0300

      iommu: iova: Move iova cache management to the iova library

      This is necessary to separate intel-iommu from the iova library.

      Signed-off-by: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit 8f6429c7cb59f28433253575cc8e3262eed63592
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Thu Jul 16 19:40:12 2015 +0100

      iommu/iova: Avoid over-allocating when size-aligned

      Currently, allocating a size-aligned IOVA region quietly adjusts the
      actual allocation size in the process, returning a rounded-up
      power-of-two-sized allocation. This results in mismatched behaviour in
      the IOMMU driver if the original size was not a power of two, where the
      original size is mapped, but the rounded-up IOVA size is unmapped.

      Whilst some IOMMUs will happily unmap already-unmapped pages, others
      consider this an error, so fix it by computing the necessary alignment
      padding without altering the actual allocation size. Also clean up by
      making pad_size unsigned, since its callers always pass unsigned values
      and negative padding makes little sense here anyway.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit a6e2f029ae34f41adb6ae3812c32c5d326e1abd2
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Wed Apr 29 12:48:40 2015 -0400

      Make asm/word-at-a-time.h available on all architectures

      Added the x86 implementation of word-at-a-time to the
      generic version, which previously only supported big-endian.

      Omitted the x86-specific load_unaligned_zeropad(), which in
      any case is also not present for the existing BE-only
      implementation of a word-at-a-time, and is only used under
      CONFIG_DCACHE_WORD_ACCESS.

      Added as a "generic-y" to the Kbuilds of all architectures
      that didn't previously have it.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>


For bisection revision-tuple graph see:
   
http://logs.test-lab.xenproject.org/osstest/results/bisect/linux-linus/test-amd64-amd64-rumpuserxen-amd64.xen-boot.html
Revision IDs in each graph node refer, respectively, to the Trees above.

----------------------------------------
Running cs-bisection-step 
--graph-out=/home/logs/results/bisect/linux-linus/test-amd64-amd64-rumpuserxen-amd64.xen-boot
 --summary-out=tmp/63832.bisection-summary --basis-template=59254 
--blessings=real,real-bisect linux-linus test-amd64-amd64-rumpuserxen-amd64 
xen-boot
Searching for failure / basis pass:
 63654 fail [host=fiano0] / 63536 [host=italia1] 63398 [host=fiano1] 63372 
[host=huxelrebe0] 63354 [host=godello0] 63339 [host=pinot1] 63208 
[host=italia0] 63084 [host=italia1] 63059 [host=italia1] 63023 [host=italia1] 
62972 [host=godello1] 62958 [host=godello1] 62948 [host=huxelrebe1] 62940 
[host=rimava1] 62908 [host=rimava1] 62744 [host=godello0] 62694 [host=pinot1] 
62663 [host=pinot1] 62615 [host=pinot1] 62544 [host=chardonnay1] 62381 
[host=godello0] 62295 [host=huxelrebe0] 62197 [host=godello1] 62110 
[host=merlot0] 62042 [host=merlot0] 61911 ok.
Failure / basis pass flights: 63654 / 61911
(tree with no url: ovmf)
(tree with no url: seabios)
Tree: linux git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: rumpuserxen git://xenbits.xen.org/rumpuser-xen.git
Tree: rumpuserxen_buildrumpsh https://github.com/rumpkernel/buildrump.sh.git
Tree: rumpuserxen_netbsdsrc https://github.com/rumpkernel/src-netbsd
Tree: xen git://xenbits.xen.org/xen.git
Latest 2dc10ad81fc017837037e60439662e1b16bdffb9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
Basis pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
5cdde31eacdd288359746019ad05cac8ed5d9f70 
b05befcbea71a979509ce04f02929969a790c923 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
a7b39c8bd6cba3fe1c8012987b9e28bdbac7e92d
Generating revisions with ./adhoc-revtuple-generator  
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git#6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f-2dc10ad81fc017837037e60439662e1b16bdffb9
 
git://xenbits.xen.org/osstest/linux-firmware.git#c530a75c1e6a472b0eb9558310b518f0dfcd8860-c530a75c1e6a472b0eb9558310b518f0dfcd8860
 
git://xenbits.xen.org/qemu-xen-traditional.git#5cdde31eacdd288359746019ad05cac8ed5d9f70-bc00cad75d8bcc3ba696992bec219c21db8406aa
 
git://xenbits.xen.org/qemu-xen.git#b05befcbea71a979509ce04f02929969a790c923-816609b2841297925a223ec377c336360e044ee5
 
git://xenbits.xen.org/rumpuser-xen.git#30d72f3fc5e35cd53afd82c8179cc0e0b11146ad-30d72f3fc5e35cd53afd82c8179cc0e0b11146ad
 
https://github.com/rumpkernel/buildrump.sh.git#47b1a5eef43cce61bf018500bddf751ecf9de38e-47b1a5eef43cce61bf018500bddf751ecf9de38e
 
https://github.com/rumpkernel/src-netbsd#17a547ca2943a7d98780a0366966c3aef29093a6-17a547ca2943a7d98780a0366966c3aef29093a6
 
git://xenbits.xen.org/xen.git#a7b39c8bd6cba3fe1c8012987b9e28bdbac7e92d-e294a0c3af9f4443dc692b180fb1771b1cb075e8
adhoc-revtuple-generator: tree discontiguous: linux-2.6
Loaded 8989 nodes in revision graph
Searching for test results:
 61594 [host=godello0]
 61692 [host=italia1]
 61780 [host=huxelrebe1]
 61911 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
5cdde31eacdd288359746019ad05cac8ed5d9f70 
b05befcbea71a979509ce04f02929969a790c923 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
a7b39c8bd6cba3fe1c8012987b9e28bdbac7e92d
 62042 [host=merlot0]
 62110 [host=merlot0]
 62197 [host=godello1]
 62295 [host=huxelrebe0]
 62381 [host=godello0]
 62544 [host=chardonnay1]
 62615 [host=pinot1]
 62663 [host=pinot1]
 62694 [host=pinot1]
 62744 [host=godello0]
 62908 [host=rimava1]
 62948 [host=huxelrebe1]
 62940 [host=rimava1]
 62958 [host=godello1]
 62972 [host=godello1]
 62969 [host=godello1]
 62975 [host=godello1]
 63023 [host=italia1]
 63084 [host=italia1]
 63059 [host=italia1]
 63208 [host=italia0]
 63339 [host=pinot1]
 63372 [host=huxelrebe0]
 63354 [host=godello0]
 63398 [host=fiano1]
 63536 [host=italia1]
 63654 fail 2dc10ad81fc017837037e60439662e1b16bdffb9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
 63749 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
1c8d43cbdf0fc01a8f05acfbf55b805a83da34bb 
8ad9e71fc937439730fa68e82d6da11a50eb5c04 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
66c8e456b7f152989c556123bd56d1d940abad8e
 63764 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
5c23c760a8ef4cec4aaef11575b85fd17e82986c
 63709 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
5cdde31eacdd288359746019ad05cac8ed5d9f70 
b05befcbea71a979509ce04f02929969a790c923 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
a7b39c8bd6cba3fe1c8012987b9e28bdbac7e92d
 63745 fail 2dc10ad81fc017837037e60439662e1b16bdffb9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
 63746 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
1c8d43cbdf0fc01a8f05acfbf55b805a83da34bb 
8ad9e71fc937439730fa68e82d6da11a50eb5c04 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
813ae80d82e77250dc12547cf78d50b887be62ca
 63748 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
1c8d43cbdf0fc01a8f05acfbf55b805a83da34bb 
8ad9e71fc937439730fa68e82d6da11a50eb5c04 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
6c0e4ad60850032c9bbd5d18b8446421c97e08e4
 63756 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
c92e34bfae67b8ed7b47565a2a76e6797d4afe75
 63769 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
5a722f89d30093cf5e1d2bc536fd73d6f9e5513f
 63776 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
1ef01396fdff88b1c3331a09ca5c69619b90f4ea
 63782 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
101ce53266866144e724ed593173bc4098b300b9
 63787 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
95e7415843b94c346e5ba8682665f508f220e04b
 63796 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
 63807 fail 2dc10ad81fc017837037e60439662e1b16bdffb9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
 63815 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
 63821 fail 2dc10ad81fc017837037e60439662e1b16bdffb9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
 63829 pass 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
 63832 fail 2dc10ad81fc017837037e60439662e1b16bdffb9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
Searching for interesting versions
 Result found: flight 61911 (pass), for basis pass
 Result found: flight 63654 (fail), for basis failure
 Repro found: flight 63709 (pass), for basis pass
 Repro found: flight 63745 (fail), for basis failure
 0 revisions at 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bc00cad75d8bcc3ba696992bec219c21db8406aa 
816609b2841297925a223ec377c336360e044ee5 
30d72f3fc5e35cd53afd82c8179cc0e0b11146ad 
47b1a5eef43cce61bf018500bddf751ecf9de38e 
17a547ca2943a7d98780a0366966c3aef29093a6 
e294a0c3af9f4443dc692b180fb1771b1cb075e8
No revisions left to test, checking graph state.
 Result found: flight 63796 (pass), for last pass
 Result found: flight 63807 (fail), for first failure
 Repro found: flight 63815 (pass), for last pass
 Repro found: flight 63821 (fail), for first failure
 Repro found: flight 63829 (pass), for last pass
 Repro found: flight 63832 (fail), for first failure

*** Found and reproduced problem changeset ***

  Bug is in tree:  linux 
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git
  Bug introduced:  2dc10ad81fc017837037e60439662e1b16bdffb9
  Bug not present: 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/63832/


  commit 2dc10ad81fc017837037e60439662e1b16bdffb9
  Merge: e627078 f8f8bdc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 14:47:13 2015 -0800

      Merge tag 'arm64-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 updates from Catalin Marinas:

       - "genirq: Introduce generic irq migration for cpu hotunplugged" patch
         merged from tip/irq/for-arm to allow the arm64-specific part to be
         upstreamed via the arm64 tree

       - CPU feature detection reworked to cope with heterogeneous systems
         where CPUs may not have exactly the same features.  The features
         reported by the kernel via internal data structures or ELF_HWCAP are
         delayed until all the CPUs are up (and before user space starts)

       - Support for 16KB pages, with the additional bonus of a 36-bit VA
         space, though the latter only depending on EXPERT

       - Implement native {relaxed, acquire, release} atomics for arm64

       - New ASID allocation algorithm which avoids IPI on roll-over, together
         with TLB invalidation optimisations (using local vs global where
         feasible)

       - KASan support for arm64

       - EFI_STUB clean-up and isolation for the kernel proper (required by
         KASan)

       - copy_{to,from,in}_user optimisations (sharing the memcpy template)

       - perf: moving arm64 to the arm32/64 shared PMU framework

       - L1_CACHE_BYTES increased to 128 to accommodate Cavium hardware

       - Support for the contiguous PTE hint on kernel mapping (16 consecutive
         entries may be able to use a single TLB entry)

       - Generic CONFIG_HZ now used on arm64

       - defconfig updates

      * tag 'arm64-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux: (91 commits)
        arm64/efi: fix libstub build under CONFIG_MODVERSIONS
        ARM64: Enable multi-core scheduler support by default
        arm64/efi: move arm64 specific stub C code to libstub
        arm64: page-align sections for DEBUG_RODATA
        arm64: Fix build with CONFIG_ZONE_DMA=n
        arm64: Fix compat register mappings
        arm64: Increase the max granular size
        arm64: remove bogus TASK_SIZE_64 check
        arm64: make Timer Interrupt Frequency selectable
        arm64/mm: use PAGE_ALIGNED instead of IS_ALIGNED
        arm64: cachetype: fix definitions of ICACHEF_* flags
        arm64: cpufeature: declare enable_cpu_capabilities as static
        genirq: Make the cpuhotplug migration code less noisy
        arm64: Constify hwcap name string arrays
        arm64/kvm: Make use of the system wide safe values
        arm64/debug: Make use of the system wide safe value
        arm64: Move FP/ASIMD hwcap handling to common code
        arm64/HWCAP: Use system wide safe values
        arm64/capabilities: Make use of system wide safe value
        arm64: Delay cpu feature capability checks
        ...

  commit e627078a0cbdc0c391efeb5a2c4eb287328fd633
  Merge: 14c7909 b38fecc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 11:31:31 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

      Pull s390 updates from Martin Schwidefsky:
       "There is only one new feature in this pull for the 4.4 merge window,
        most of it is small enhancements, cleanup and bug fixes:

         - Add the s390 backend for the software dirty bit tracking.  This
           adds two new pgtable functions pte_clear_soft_dirty and
           pmd_clear_soft_dirty which is why there is a hit to
           arch/x86/include/asm/pgtable.h in this pull request.

         - A series of cleanup patches for the AP bus, this includes the
           removal of the support for two outdated crypto cards (PCICC and
           PCICA).

         - The irq handling / signaling on buffer full in the runtime
           instrumentation code is dropped.

         - Some micro optimizations: remove unnecessary memory barriers for a
           couple of functions: [smb_]rmb, [smb_]wmb, atomics, bitops, and for
           spin_unlock.  Use the builtin bswap if available and make
           test_and_set_bit_lock more cache friendly.

         - Statistics and a tracepoint for the diagnose calls to the
           hypervisor.

         - The CPU measurement facility support to sample KVM guests is
           improved.

         - The vector instructions are now always enabled for user space
           processes if the hardware has the vector facility.  This simplifies
           the FPU handling code.  The fpu-internal.h header is split into fpu
           internals, api and types just like x86.

         - Cleanup and improvements for the common I/O layer.

         - Rework udelay to solve a problem with kprobe.  udelay has busy loop
           semantics but still uses an idle processor state for the wait"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux: (66 commits)
        s390: remove runtime instrumentation interrupts
        s390/cio: de-duplicate subchannel validation
        s390/css: unneeded initialization in for_each_subchannel
        s390/Kconfig: use builtin bswap
        s390/dasd: fix disconnected device with valid path mask
        s390/dasd: fix invalid PAV assignment after suspend/resume
        s390/dasd: fix double free in dasd_eckd_read_conf
        s390/kernel: fix ptrace peek/poke for floating point registers
        s390/cio: move ccw_device_stlck functions
        s390/cio: move ccw_device_call_handler
        s390/topology: reduce per_cpu() invocations
        s390/nmi: reduce size of percpu variable
        s390/nmi: fix terminology
        s390/nmi: remove casts
        s390/nmi: remove pointless error strings
        s390: don't store registers on disabled wait anymore
        s390: get rid of __set_psw_mask()
        s390/fpu: split fpu-internal.h into fpu internals, api, and type headers
        s390/dasd: fix list_del corruption after lcu changes
        s390/spinlock: remove unneeded serializations at unlock
        ...

  commit 14c79092909a52b6fd6394b6ad5e7756c4f9565e
  Merge: 1b1050c a01fece
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 11:30:22 2015 -0800

      Merge branch 'parisc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux

      Pull parisc updates from Helge Deller:
       "The most important change is that we reduce L1_CACHE_BYTES to 16
        bytes, for which a trivial patch for XPS in the network layer was
        needed.  Then we wire up the sys_membarrier and userfaultfd syscalls
        and added two other small cleanups"

      * 'parisc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux:
        parisc: Change L1_CACHE_BYTES to 16
        net/xps: Fix calculation of initial number of xps queues
        parisc: reduce syslog debug output
        parisc: serial/mux: Convert to uart_console_device instead of open-coded
        parisc: Wire up userfaultfd syscall
        parisc: allocate sys_membarrier system call number

  commit 1b1050cdc5cdde43177b375b5f22dc070d45d8f8
  Merge: b0f85fa 353b39d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 10:12:43 2015 -0800

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/ide

      Pull IDE fixlet from David Miller:
       "Just a y2038 fix to the pdc202xx_new IDE driver"

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/ide:
        ide: pdc202xx_new: Replace timeval with ktime_t

  commit b0f85fa11aefc4f3e03306b4cd47f113bd57dcba
  Merge: ccc9d4a f32bfb9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 09:41:05 2015 -0800

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

      Pull networking updates from David Miller:

      Changes of note:

       1) Allow to schedule ICMP packets in IPVS, from Alex Gartrell.

       2) Provide FIB table ID in ipv4 route dumps just as ipv6 does, from
          David Ahern.

       3) Allow the user to ask for the statistics to be filtered out of
          ipv4/ipv6 address netlink dumps.  From Sowmini Varadhan.

       4) More work to pass the network namespace context around deep into
          various packet path APIs, starting with the netfilter hooks.  From
          Eric W Biederman.

       5) Add layer 2 TX/RX checksum offloading to qeth driver, from Thomas
          Richter.

       6) Use usec resolution for SYN/ACK RTTs in TCP, from Yuchung Cheng.

       7) Support Very High Throughput in wireless MESH code, from Bob
          Copeland.

       8) Allow setting the ageing_time in switchdev/rocker.  From Scott
          Feldman.

       9) Properly autoload L2TP type modules, from Stephen Hemminger.

      10) Fix and enable offload features by default in 8139cp driver, from
          David Woodhouse.

      11) Support both ipv4 and ipv6 sockets in a single vxlan device, from
          Jiri Benc.

      12) Fix CWND limiting of thin streams in TCP, from Bendik Rønning
          Opstad.

      13) Fix IPSEC flowcache overflows on large systems, from Steffen
          Klassert.

      14) Convert bridging to track VLANs using rhashtable entries rather than
          a bitmap.  From Nikolay Aleksandrov.

      15) Make TCP listener handling completely lockless, this is a major
          accomplishment.  Incoming request sockets now live in the
          established hash table just like any other socket too.

          From Eric Dumazet.

      15) Provide more bridging attributes to netlink, from Nikolay
          Aleksandrov.

      16) Use hash based algorithm for ipv4 multipath routing, this was very
          long overdue.  From Peter Nørlund.

      17) Several y2038 cures, mostly avoiding timespec.  From Arnd Bergmann.

      18) Allow non-root execution of EBPF programs, from Alexei Starovoitov.

      19) Support SO_INCOMING_CPU as setsockopt, from Eric Dumazet.  This
          influences the port binding selection logic used by SO_REUSEPORT.

      20) Add ipv6 support to VRF, from David Ahern.

      21) Add support for Mellanox Spectrum switch ASIC, from Jiri Pirko.

      22) Add rtl8xxxu Realtek wireless driver, from Jes Sorensen.

      23) Implement RACK loss recovery in TCP, from Yuchung Cheng.

      24) Support multipath routes in MPLS, from Roopa Prabhu.

      25) Fix POLLOUT notification for listening sockets in AF_UNIX, from Eric
          Dumazet.

      26) Add new QED Qlogic river, from Yuval Mintz, Manish Chopra, and
          Sudarsana Kalluru.

      27) Don't fetch timestamps on AF_UNIX sockets, from Hannes Frederic
          Sowa.

      28) Support ipv6 geneve tunnels, from John W Linville.

      29) Add flood control support to switchdev layer, from Ido Schimmel.

      30) Fix CHECKSUM_PARTIAL handling of potentially fragmented frames, from
          Hannes Frederic Sowa.

      31) Support persistent maps and progs in bpf, from Daniel Borkmann.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next: (1790 
commits)
        sh_eth: use DMA barriers
        switchdev: respect SKIP_EOPNOTSUPP flag in case there is no recursion
        net: sched: kill dead code in sch_choke.c
        irda: Delete an unnecessary check before the function call 
"irlmp_unregister_service"
        net: dsa: mv88e6xxx: include DSA ports in VLANs
        net: dsa: mv88e6xxx: disable SA learning for DSA and CPU ports
        net/core: fix for_each_netdev_feature
        vlan: Invoke driver vlan hooks only if device is present
        arcnet/com20020: add LEDS_CLASS dependency
        bpf, verifier: annotate verbose printer with __printf
        dp83640: Only wait for timestamps for packets with timestamping enabled.
        ptp: Change ptp_class to a proper bitmask
        dp83640: Prune rx timestamp list before reading from it
        dp83640: Delay scheduled work.
        dp83640: Include hash in timestamp/packet matching
        ipv6: fix tunnel error handling
        net/mlx5e: Fix LSO vlan insertion
        net/mlx5e: Re-eanble client vlan TX acceleration
        net/mlx5e: Return error in case mlx5e_set_features() fails
        net/mlx5e: Don't allow more than max supported channels
        ...

  commit ccc9d4a6d640cbde05d519edeb727881646cf71b
  Merge: 66ef349 271817a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 09:11:12 2015 -0800

      Merge branch 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto update from Herbert Xu:
       "API:

         - Add support for cipher output IVs in testmgr
         - Add missing crypto_ahash_blocksize helper
         - Mark authenc and des ciphers as not allowed under FIPS.

      Algorithms:

         - Add CRC support to 842 compression
         - Add keywrap algorithm
         - A number of changes to the akcipher interface:
            + Separate functions for setting public/private keys.
            + Use SG lists.

      Drivers:

         - Add Intel SHA Extension optimised SHA1 and SHA256
         - Use dma_map_sg instead of custom functions in crypto drivers
         - Add support for STM32 RNG
         - Add support for ST RNG
         - Add Device Tree support to exynos RNG driver
         - Add support for mxs-dcp crypto device on MX6SL
         - Add xts(aes) support to caam
         - Add ctr(aes) and xts(aes) support to qat
         - A large set of fixes from Russell King for the marvell/cesa driver"

      * 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (115 commits)
        crypto: asymmetric_keys - Fix unaligned access in x509_get_sig_params()
        crypto: akcipher - Don't #include crypto/public_key.h as the contents 
aren't used
        hwrng: exynos - Add Device Tree support
        hwrng: exynos - Fix missing configuration after suspend to RAM
        hwrng: exynos - Add timeout for waiting on init done
        dt-bindings: rng: Describe Exynos4 PRNG bindings
        crypto: marvell/cesa - use __le32 for hardware descriptors
        crypto: marvell/cesa - fix missing cpu_to_le32() in mv_cesa_dma_add_op()
        crypto: marvell/cesa - use memcpy_fromio()/memcpy_toio()
        crypto: marvell/cesa - use gfp_t for gfp flags
        crypto: marvell/cesa - use dma_addr_t for cur_dma
        crypto: marvell/cesa - use readl_relaxed()/writel_relaxed()
        crypto: caam - fix indentation of close braces
        crypto: caam - only export the state we really need to export
        crypto: caam - fix non-block aligned hash calculation
        crypto: caam - avoid needlessly saving and restoring caam_hash_ctx
        crypto: caam - print errno code when hash registration fails
        crypto: marvell/cesa - fix memory leak
        crypto: marvell/cesa - fix first-fragment handling in 
mv_cesa_ahash_dma_last_req()
        crypto: marvell/cesa - rearrange handling for sw padded hashes
        ...

  commit 66ef3493d4bb387f5a83915e33dc893102fd1b43
  Merge: 639ab3e d1f0f6c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 21:33:18 2015 -0800

      Merge branch 'x86-platform-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 platform changes from Ingo Molnar:
       "Misc updates to the Intel MID and SGI UV platforms"

      * 'x86-platform-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/intel-mid: Make intel_mid_ops static
        arch/x86/intel-mid: Use kmemdup rather than duplicating its 
implementation
        x86/platform/uv: Implement simple dump failover if kdump fails
        x86/platform/uv: Insert per_cpu accessor function on uv_hub_nmi

  commit 639ab3eb38c6e92e27e061551dddee6dd3bbb5d2
  Merge: 4302d50 e1a5832
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 21:23:56 2015 -0800

      Merge branch 'x86-mm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 mm changes from Ingo Molnar:
       "The main changes are: continued PAT work by Toshi Kani, plus a new
        boot time warning about insecure RWX kernel mappings, by Stephen
        Smalley.

        The new CONFIG_DEBUG_WX=y warning is marked default-y if
        CONFIG_DEBUG_RODATA=y is already eanbled, as a special exception, as
        these bugs are hard to notice and this check already found several
        live bugs"

      * 'x86-mm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/mm: Warn on W^X mappings
        x86/mm: Fix no-change case in try_preserve_large_page()
        x86/mm: Fix __split_large_page() to handle large PAT bit
        x86/mm: Fix try_preserve_large_page() to handle large PAT bit
        x86/mm: Fix gup_huge_p?d() to handle large PAT bit
        x86/mm: Fix slow_virt_to_phys() to handle large PAT bit
        x86/mm: Fix page table dump to show PAT bit
        x86/asm: Add pud_pgprot() and pmd_pgprot()
        x86/asm: Fix pud/pmd interfaces to handle large PAT bit
        x86/asm: Add pud/pmd mask interfaces to handle large PAT bit
        x86/asm: Move PUD_PAGE macros to page_types.h
        x86/vdso32: Define PGTABLE_LEVELS to 32bit VDSO

  commit 4302d506d5f3419109abdd0d6e400ed6e8148209
  Merge: ce4d72f 0e2815d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 21:05:40 2015 -0800

      Merge branch 'x86-headers-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 sigcontext header cleanups from Ingo Molnar:
       "This series reorganizes and cleans up various aspects of the main
        sigcontext UAPI headers, such as unifying the data structures and
        updating/adding lots of comments to explain all the ABI details and
        quirks.  The headers can now also be built in user-space standalone"

      * 'x86-headers-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/headers: Clean up too long lines
        x86/headers: Remove <asm/sigcontext.h> references on the kernel side
        x86/headers: Remove direct sigcontext32.h uses
        x86/headers: Convert sigcontext_ia32 uses to sigcontext_32
        x86/headers: Unify 'struct sigcontext_ia32' and 'struct sigcontext_32'
        x86/headers: Make sigcontext pointers bit independent
        x86/headers: Move the 'struct sigcontext' definitions into the UAPI 
header
        x86/headers: Clean up the kernel's struct sigcontext types to be 
ABI-clean
        x86/headers: Convert uses of _fpstate_ia32 to _fpstate_32
        x86/headers: Unify 'struct _fpstate_ia32' and i386 struct _fpstate
        x86/headers: Unify register type definitions between 32-bit compat and 
i386
        x86/headers: Use ABI types consistently in sigcontext*.h
        x86/headers: Separate out legacy user-space structure definitions
        x86/headers: Clean up and better document uapi/asm/sigcontext.h
        x86/headers: Clean up uapi/asm/sigcontext32.h
        x86/headers: Fix (old) header file dependency bug in 
uapi/asm/sigcontext32.h

  commit ce4d72fac16a9540452957b526443b6080030bff
  Merge: 0f25f2c 158ecc3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 20:50:26 2015 -0800

      Merge branch 'x86-fpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fpu changes from Ingo Molnar:
       "There are two main areas of changes:

         - Rework of the extended FPU state code to robustify the kernel's
           usage of cpuid provided xstate sizes - and related changes (Dave
           Hansen)"

         - math emulation enhancements: new modern FPU instructions support,
           with testcases, plus cleanups (Denys Vlasnko)"

      * 'x86-fpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (23 commits)
        x86/fpu: Fixup uninitialized feature_name warning
        x86/fpu/math-emu: Add support for FISTTP instructions
        x86/fpu/math-emu, selftests: Add test for FISTTP instructions
        x86/fpu/math-emu: Add support for FCMOVcc insns
        x86/fpu/math-emu: Add support for F[U]COMI[P] insns
        x86/fpu/math-emu: Remove define layer for undocumented opcodes
        x86/fpu/math-emu, selftests: Add tests for FCMOV and FCOMI insns
        x86/fpu/math-emu: Remove !NO_UNDOC_CODE
        x86/fpu: Check CPU-provided sizes against struct declarations
        x86/fpu: Check to ensure increasing-offset xstate offsets
        x86/fpu: Correct and check XSAVE xstate size calculations
        x86/fpu: Add C structures for AVX-512 state components
        x86/fpu: Rework YMM definition
        x86/fpu/mpx: Rework MPX 'xstate' types
        x86/fpu: Add xfeature_enabled() helper instead of test_bit()
        x86/fpu: Remove 'xfeature_nr'
        x86/fpu: Rework XSTATE_* macros to remove magic '2'
        x86/fpu: Rename XFEATURES_NR_MAX
        x86/fpu: Rename XSAVE macros
        x86/fpu: Remove partial LWP support definitions
        ...

  commit 0f25f2c1b18f7e47279ec2cf1d24c11c3108873b
  Merge: f323c49 0d44975
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 20:12:10 2015 -0800

      Merge branch 'x86-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 kgdb fixlet from Ingo Molnar:
       "A single debugging related commit: compress the memory usage of a kgdb
        data structure"

      * 'x86-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/kgdb: Replace bool_int_array[NR_CPUS] with bitmap

  commit f323c49b300baf89e2cb4050b0def1856c0b1852
  Merge: 33d46f9 2167cea
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 19:39:42 2015 -0800

      Merge branch 'x86-cpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 cpu changes from Ingo Molnar:
       "Two changes in this cycle: a Kconfig help text enhancement, and an AMD
        CLZERO instruction capability detection and enumeration"

      * 'x86-cpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/cpu: Add CLZERO detection
        x86/Kconfig/cpus: Fix/complete CPU type help texts

  commit 33d46f9765901a08d7759c031779073263e8b4e3
  Merge: 378e4e9 3435dd0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 19:34:22 2015 -0800

      Merge branch 'x86-cleanups-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 cleanups from Ingo Molnar:
       "An early_printk cleanup plus deinlining enhancements"

      * 'x86-cleanups-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/early_printk: Set __iomem address space for IO
        x86/signal: Deinline get_sigframe, save 240 bytes
        x86: Deinline early_console_register, save 403 bytes
        x86/e820: Deinline e820_type_to_string, save 126 bytes

  commit 378e4e98258ad92097bfdf795dbef8b49cf52a34
  Merge: a75a3f6 e9c40d2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 19:28:37 2015 -0800

      Merge branch 'x86-boot-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 boot cleanup from Ingo Molnar:
       "A single commit: remove an obsolete kcrash boot flag"

      * 'x86-boot-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/kexec: Remove obsolete 'in_crash_kexec' flag

  commit a75a3f6fc92888e4119744d8594ffdf748c3d444
  Merge: d2bea73 3bd2951
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:59:10 2015 -0800

      Merge branch 'x86-asm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 asm changes from Ingo Molnar:
       "The main change in this cycle is another step in the big x86 system
        call interface rework by Andy Lutomirski, which moves most of the low
        level x86 entry code from assembly to C, for all syscall entries
        except native 64-bit system calls:

          arch/x86/entry/entry_32.S        | 182 ++++------
          arch/x86/entry/entry_64_compat.S | 547 ++++++++-----------------------
          194 insertions(+), 535 deletions(-)

        ... our hope is that the final remaining step (converting native
        64-bit system calls) will be less painful as all the previous steps,
        given that most of the legacies and quirks are concentrated around
        native 32-bit and compat environments"

      * 'x86-asm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (47 commits)
        x86/entry/32: Fix FS and GS restore in opportunistic SYSEXIT
        x86/entry/32: Fix entry_INT80_32() to expect interrupts to be on
        um/x86: Fix build after x86 syscall changes
        x86/asm: Remove the xyz_cfi macros from dwarf2.h
        selftests/x86: Style fixes for the 'unwind_vdso' test
        x86/entry/64/compat: Document sysenter_fix_flags's reason for existence
        x86/entry: Split and inline syscall_return_slowpath()
        x86/entry: Split and inline prepare_exit_to_usermode()
        x86/entry: Use pt_regs_to_thread_info() in syscall entry tracing
        x86/entry: Hide two syscall entry assertions behind CONFIG_DEBUG_ENTRY
        x86/entry: Micro-optimize compat fast syscall arg fetch
        x86/entry: Force inlining of 32-bit syscall code
        x86/entry: Make irqs_disabled checks in exit code depend on lockdep
        x86/entry: Remove unnecessary IRQ twiddling in fast 32-bit syscalls
        x86/asm: Remove thread_info.sysenter_return
        x86/entry/32: Re-implement SYSENTER using the new C path
        x86/entry/32: Switch INT80 to the new C syscall path
        x86/entry/32: Open-code return tracking from fork and kthreads
        x86/entry/compat: Implement opportunistic SYSRETL for compat syscalls
        x86/vdso/compat: Wire up SYSENTER and SYSCSALL for compat userspace
        ...

  commit d2bea739f8b41d620c235d81e00289d01169dc3c
  Merge: 5352869 4faefda
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:33:15 2015 -0800

      Merge branch 'x86-apic-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 apic changes from Ingo Molnar:
       "The main changes in this cycle were:

         - Numachip updates: new hardware support, fixes and cleanups.
           (Daniel J Blueman)

         - misc smaller cleanups and fixlets"

      * 'x86-apic-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/io_apic: Make eoi_ioapic_pin() static
        x86/irq: Drop unlikely before IS_ERR_OR_NULL
        x86/x2apic: Make stub functions available even if !CONFIG_X86_LOCAL_APIC
        x86/apic: Deinline various functions
        x86/numachip: Fix timer build conflict
        x86/numachip: Introduce Numachip2 timer mechanisms
        x86/numachip: Add Numachip IPI optimisations
        x86/numachip: Add Numachip2 APIC support
        x86/numachip: Cleanup Numachip support

  commit 53528695ff6d8b77011bc818407c13e30914a946
  Merge: b831ef2 e73e85f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:03:50 2015 -0800

      Merge branch 'sched-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler changes from Ingo Molnar:
       "The main changes in this cycle were:

         - sched/fair load tracking fixes and cleanups (Byungchul Park)

         - Make load tracking frequency scale invariant (Dietmar Eggemann)

         - sched/deadline updates (Juri Lelli)

         - stop machine fixes, cleanups and enhancements for bugs triggered by
           CPU hotplug stress testing (Oleg Nesterov)

         - scheduler preemption code rework: remove PREEMPT_ACTIVE and related
           cleanups (Peter Zijlstra)

         - Rework the sched_info::run_delay code to fix races (Peter Zijlstra)

         - Optimize per entity utilization tracking (Peter Zijlstra)

         - ... misc other fixes, cleanups and smaller updates"

      * 'sched-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (57 commits)
        sched: Don't scan all-offline ->cpus_allowed twice if !CONFIG_CPUSETS
        sched: Move cpu_active() tests from stop_two_cpus() into 
migrate_swap_stop()
        sched: Start stopper early
        stop_machine: Kill cpu_stop_threads->setup() and cpu_stop_unpark()
        stop_machine: Kill smp_hotplug_thread->pre_unpark, introduce 
stop_machine_unpark()
        stop_machine: Change cpu_stop_queue_two_works() to rely on 
stopper->enabled
        stop_machine: Introduce __cpu_stop_queue_work() and 
cpu_stop_queue_two_works()
        stop_machine: Ensure that a queued callback will be called before 
cpu_stop_park()
        sched/x86: Fix typo in __switch_to() comments
        sched/core: Remove a parameter in the migrate_task_rq() function
        sched/core: Drop unlikely behind BUG_ON()
        sched/core: Fix task and run queue sched_info::run_delay inconsistencies
        sched/numa: Fix task_tick_fair() from disabling numa_balancing
        sched/core: Add preempt_count invariant check
        sched/core: More notrace annotations
        sched/core: Kill PREEMPT_ACTIVE
        sched/core, sched/x86: Kill thread_info::saved_preempt_count
        sched/core: Simplify preempt_count tests
        sched/core: Robustify preemption leak checks
        sched/core: Stop setting PREEMPT_ACTIVE
        ...

  commit b831ef2cad979912850e34f82415c0c5d59de8cb
  Merge: b02ac6b dc34bdd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 17:51:33 2015 -0800

      Merge branch 'ras-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RAS changes from Ingo Molnar:
       "The main system reliability related changes were from x86, but also
        some generic RAS changes:

         - AMD MCE error injection subsystem enhancements.  (Aravind
           Gopalakrishnan)

         - Fix MCE and CPU hotplug interaction bug.  (Ashok Raj)

         - kcrash bootup robustness fix.  (Baoquan He)

         - kcrash cleanups.  (Borislav Petkov)

         - x86 microcode driver rework: simplify it by unmodularizing it and
           other cleanups.  (Borislav Petkov)"

      * 'ras-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (23 commits)
        x86/mce: Add a default case to the switch in __mcheck_cpu_ancient_init()
        x86/mce: Add a Scalable MCA vendor flags bit
        MAINTAINERS: Unify the microcode driver section
        x86/microcode/intel: Move #ifdef DEBUG inside the function
        x86/microcode/amd: Remove maintainers from comments
        x86/microcode: Remove modularization leftovers
        x86/microcode: Merge the early microcode loader
        x86/microcode: Unmodularize the microcode driver
        x86/mce: Fix thermal throttling reporting after kexec
        kexec/crash: Say which char is the unrecognized
        x86/setup/crash: Check memblock_reserve() retval
        x86/setup/crash: Cleanup some more
        x86/setup/crash: Remove alignment variable
        x86/setup: Cleanup crashkernel reservation functions
        x86/amd_nb, EDAC: Rename amd_get_node_id()
        x86/setup: Do not reserve crashkernel high memory if low reservation 
failed
        x86/microcode/amd: Do not overwrite final patch levels
        x86/microcode/amd: Extract current patch level read to a function
        x86/ras/mce_amd_inj: Inject bank 4 errors on the NBC
        x86/ras/mce_amd_inj: Trigger deferred and thresholding errors interrupts
        ...

  commit b02ac6b18cd4e2c76bf0a102c20c429b973f5f76
  Merge: 105ff3c bebd23a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 17:38:09 2015 -0800

      Merge branch 'perf-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf updates from Ingo Molnar:
       "Kernel side changes:

         - Improve accuracy of perf/sched clock on x86.  (Adrian Hunter)

         - Intel DS and BTS updates.  (Alexander Shishkin)

         - Intel cstate PMU support.  (Kan Liang)

         - Add group read support to perf_event_read().  (Peter Zijlstra)

         - Branch call hardware sampling support, implemented on x86 and
           PowerPC.  (Stephane Eranian)

         - Event groups transactional interface enhancements.  (Sukadev
           Bhattiprolu)

         - Enable proper x86/intel/uncore PMU support on multi-segment PCI
           systems.  (Taku Izumi)

         - ... misc fixes and cleanups.

        The perf tooling team was very busy again with 200+ commits, the full
        diff doesn't fit into lkml size limits.  Here's an (incomplete) list
        of the tooling highlights:

        New features:

         - Change the default event used in all tools (record/top): use the
           most precise "cycles" hw counter available, i.e. when the user
           doesn't specify any event, it will try using cycles:ppp, cycles:pp,
           etc and fall back transparently until it finds a working counter.
           (Arnaldo Carvalho de Melo)

         - Integration of perf with eBPF that, given an eBPF .c source file
           (or .o file built for the 'bpf' target with clang), will get it
           automatically built, validated and loaded into the kernel via the
           sys_bpf syscall, which can then be used and seen using 'perf trace'
           and other tools.

           (Wang Nan)

        Various user interface improvements:

         - Automatic pager invocation on long help output.  (Namhyung Kim)

         - Search for more options when passing args to -h, e.g.: (Arnaldo
           Carvalho de Melo)

              $ perf report -h interface

              Usage: perf report [<options>]

               --gtk    Use the GTK2 interface
               --stdio  Use the stdio interface
               --tui    Use the TUI interface

         - Show ordered command line options when -h is used or when an
           unknown option is specified.  (Arnaldo Carvalho de Melo)

         - If options are passed after -h, show just its descriptions, not all
           options.  (Arnaldo Carvalho de Melo)

         - Implement column based horizontal scrolling in the hists browser
           (top, report), making it possible to use the TUI for things like
           'perf mem report' where there are many more columns than can fit in
           a terminal.  (Arnaldo Carvalho de Melo)

         - Enhance the error reporting of tracepoint event parsing, e.g.:

             $ oldperf record -e sched:sched_switc usleep 1
             event syntax error: 'sched:sched_switc'
                                  \___ unknown tracepoint
             Run 'perf list' for a list of valid events

           Now we get the much nicer:

             $ perf record -e sched:sched_switc ls
             event syntax error: 'sched:sched_switc'
                                  \___ can't access trace events

             Error: No permissions to read 
/sys/kernel/debug/tracing/events/sched/sched_switc
             Hint:  Try 'sudo mount -o remount,mode=755 /sys/kernel/debug'

           And after we have those mount point permissions fixed:

             $ perf record -e sched:sched_switc ls
             event syntax error: 'sched:sched_switc'
                                  \___ unknown tracepoint

             Error: File /sys/kernel/debug/tracing/events/sched/sched_switc not 
found.
             Hint:  Perhaps this kernel misses some CONFIG_ setting to enable 
this feature?.

           I.e.  basically now the event parsing routing uses the 
strerror_open()
           routines introduced by and used in 'perf trace' work.  (Jiri Olsa)

         - Fail properly when pattern matching fails to find a tracepoint,
           i.e. '-e non:existent' was being correctly handled, with a proper
           error message about that not being a valid event, but '-e
           non:existent*' wasn't, fix it.  (Jiri Olsa)

         - Do event name substring search as last resort in 'perf list'.
           (Arnaldo Carvalho de Melo)

           E.g.:

             # perf list clock

             List of pre-defined events (to be used in -e):

              cpu-clock                                          [Software 
event]
              task-clock                                         [Software 
event]

              uncore_cbox_0/clockticks/                          [Kernel PMU 
event]
              uncore_cbox_1/clockticks/                          [Kernel PMU 
event]

              kvm:kvm_pvclock_update                             [Tracepoint 
event]
              kvm:kvm_update_master_clock                        [Tracepoint 
event]
              power:clock_disable                                [Tracepoint 
event]
              power:clock_enable                                 [Tracepoint 
event]
              power:clock_set_rate                               [Tracepoint 
event]
              syscalls:sys_enter_clock_adjtime                   [Tracepoint 
event]
              syscalls:sys_enter_clock_getres                    [Tracepoint 
event]
              syscalls:sys_enter_clock_gettime                   [Tracepoint 
event]
              syscalls:sys_enter_clock_nanosleep                 [Tracepoint 
event]
              syscalls:sys_enter_clock_settime                   [Tracepoint 
event]
              syscalls:sys_exit_clock_adjtime                    [Tracepoint 
event]
              syscalls:sys_exit_clock_getres                     [Tracepoint 
event]
              syscalls:sys_exit_clock_gettime                    [Tracepoint 
event]
              syscalls:sys_exit_clock_nanosleep                  [Tracepoint 
event]
              syscalls:sys_exit_clock_settime                    [Tracepoint 
event]

        Intel PT hardware tracing enhancements:

         - Accept a zero --itrace period, meaning "as often as possible".  In
           the case of Intel PT that is the same as a period of 1 and a unit
           of 'instructions' (i.e.  --itrace=i1i).  (Adrian Hunter)

         - Harmonize itrace's synthesized callchains with the existing
           --max-stack tool option.  (Adrian Hunter)

         - Allow time to be displayed in nanoseconds in 'perf script'.
           (Adrian Hunter)

         - Fix potential infinite loop when handling Intel PT timestamps.
           (Adrian Hunter)

         - Slighly improve Intel PT debug logging.  (Adrian Hunter)

         - Warn when AUX data has been lost, just like when processing
           PERF_RECORD_LOST.  (Adrian Hunter)

         - Further document export-to-postgresql.py script.  (Adrian Hunter)

         - Add option to synthesize branch stack from auxtrace data.  (Adrian
           Hunter)

        Misc notable changes:

         - Switch the default callchain output mode to 'graph,0.5,caller', to
           make it look like the default for other tools, reducing the
           learning curve for people used to 'caller' based viewing.  (Arnaldo
           Carvalho de Melo)

         - various call chain usability enhancements.  (Namhyung Kim)

         - Introduce the 'P' event modifier, meaning 'max precision level,
           please', i.e.:

              $ perf record -e cycles:P usleep 1

           Is now similar to:

              $ perf record usleep 1

           Useful, for instance, when specifying multiple events.  (Jiri Olsa)

         - Add 'socket' sort entry, to sort by the processor socket in 'perf
           top' and 'perf report'.  (Kan Liang)

         - Introduce --socket-filter to 'perf report', for filtering by
           processor socket.  (Kan Liang)

         - Add new "Zoom into Processor Socket" operation in the perf hists
           browser, used in 'perf top' and 'perf report'.  (Kan Liang)

         - Allow probing on kmodules without DWARF.  (Masami Hiramatsu)

         - Fix 'perf probe -l' for probes added to kernel module functions.
           (Masami Hiramatsu)

         - Preparatory work for the 'perf stat record' feature that will allow
           generating perf.data files with counting data in addition to the
           sampling mode we have now (Jiri Olsa)

         - Update libtraceevent KVM plugin.  (Paolo Bonzini)

         - ... plus lots of other enhancements that I failed to list properly,
           by: Adrian Hunter, Alexander Shishkin, Andi Kleen, Andrzej Hajda,
           Arnaldo Carvalho de Melo, Dima Kogan, Don Zickus, Geliang Tang, He
           Kuang, Huaitong Han, Ingo Molnar, Jan Stancek, Jiri Olsa, Kan
           Liang, Kirill Tkhai, Masami Hiramatsu, Matt Fleming, Namhyung Kim,
           Paolo Bonzini, Peter Zijlstra, Rabin Vincent, Scott Wood, Stephane
           Eranian, Sukadev Bhattiprolu, Taku Izumi, Vaishali Thakkar, Wang
           Nan, Yang Shi and Yunlong Song"

      * 'perf-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (260 commits)
        perf unwind: Pass symbol source to libunwind
        tools build: Fix libiberty feature detection
        perf tools: Compile scriptlets to BPF objects when passing '.c' to 
--event
        perf record: Add clang options for compiling BPF scripts
        perf bpf: Attach eBPF filter to perf event
        perf tools: Make sure fixdep is built before libbpf
        perf script: Enable printing of branch stack
        perf trace: Add cmd string table to decode sys_bpf first arg
        perf bpf: Collect perf_evsel in BPF object files
        perf tools: Load eBPF object into kernel
        perf tools: Create probe points for BPF programs
        perf tools: Enable passing bpf object file to --event
        perf ebpf: Add the libbpf glue
        perf tools: Make perf depend on libbpf
        perf symbols: Fix endless loop in dso__split_kallsyms_for_kcore
        perf tools: Enable pre-event inherit setting by config terms
        perf symbols: we can now read separate debug-info files based on a 
build ID
        perf symbols: Fix type error when reading a build-id
        perf tools: Search for more options when passing args to -h
        perf stat: Cache aggregated map entries in extra cpumap
        ...

  commit 105ff3cbf225036b75a6a46c96d1ddce8e7bdc66
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 17:22:17 2015 -0800

      atomic: remove all traces of READ_ONCE_CTRL() and atomic*_read_ctrl()

      This seems to be a mis-reading of how alpha memory ordering works, and
      is not backed up by the alpha architecture manual.  The helper functions
      don't do anything special on any other architectures, and the arguments
      that support them being safe on other architectures also argue that they
      are safe on alpha.

      Basically, the "control dependency" is between a previous read and a
      subsequent write that is dependent on the value read.  Even if the
      subsequent write is actually done speculatively, there is no way that
      such a speculative write could be made visible to other cpu's until it
      has been committed, which requires validating the speculation.

      Note that most weakely ordered architectures (very much including alpha)
      do not guarantee any ordering relationship between two loads that depend
      on each other on a control dependency:

          read A
          if (val == 1)
              read B

      because the conditional may be predicted, and the "read B" may be
      speculatively moved up to before reading the value A.  So we require the
      user to insert a smp_rmb() between the two accesses to be correct:

          read A;
          if (A == 1)
              smp_rmb()
              read B

      Alpha is further special in that it can break that ordering even if the
      *address* of B depends on the read of A, because the cacheline that is
      read later may be stale unless you have a memory barrier in between the
      pointer read and the read of the value behind a pointer:

          read ptr
          read offset(ptr)

      whereas all other weakly ordered architectures guarantee that the data
      dependency (as opposed to just a control dependency) will order the two
      accesses.  As a result, alpha needs a "smp_read_barrier_depends()" in
      between those two reads for them to be ordered.

      The coontrol dependency that "READ_ONCE_CTRL()" and "atomic_read_ctrl()"
      had was a control dependency to a subsequent *write*, however, and
      nobody can finalize such a subsequent write without having actually done
      the read.  And were you to write such a value to a "stale" cacheline
      (the way the unordered reads came to be), that would seem to lose the
      write entirely.

      So the things that make alpha able to re-order reads even more
      aggressively than other weak architectures do not seem to be relevant
      for a subsequent write.  Alpha memory ordering may be strange, but
      there's no real indication that it is *that* strange.

      Also, the alpha architecture reference manual very explicitly talks
      about the definition of "Dependence Constraints" in section 5.6.1.7,
      where a preceding read dominates a subsequent write.

      Such a dependence constraint admittedly does not impose a BEFORE (alpha
      architecture term for globally visible ordering), but it does guarantee
      that there can be no "causal loop".  I don't see how you could avoid
      such a loop if another cpu could see the stored value and then impact
      the value of the first read.  Put another way: the read and the write
      could not be seen as being out of order wrt other cpus.

      So I do not see how these "x_ctrl()" functions can currently be necessary.

      I may have to eat my words at some point, but in the absense of clear
      proof that alpha actually needs this, or indeed even an explanation of
      how alpha could _possibly_ need it, I do not believe these functions are
      called for.

      And if it turns out that alpha really _does_ need a barrier for this
      case, that barrier still should not be "smp_read_barrier_depends()".
      We'd have to make up some new speciality barrier just for alpha, along
      with the documentation for why it really is necessary.

      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Paul E McKenney <paulmck@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d63a9788650fcd999b34584316afee6bd4378f19
  Merge: 2814228 6e490b0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 16:10:43 2015 -0800

      Merge branch 'locking-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull locking changes from Ingo Molnar:
       "The main changes in this cycle were:

         - More gradual enhancements to atomic ops: new atomic*_read_ctrl()
           ops, synchronize atomic_{read,set}() ordering requirements between
           architectures, add atomic_long_t bitops.  (Peter Zijlstra)

         - Add _{relaxed|acquire|release}() variants for inc/dec atomics and
           use them in various locking primitives: mutex, rtmutex, mcs, rwsem.
           This enables weakly ordered architectures (such as arm64) to make
           use of more locking related optimizations.  (Davidlohr Bueso)

         - Implement atomic[64]_{inc,dec}_relaxed() on ARM.  (Will Deacon)

         - Futex kernel data cache footprint micro-optimization.  (Rasmus
           Villemoes)

         - pvqspinlock runtime overhead micro-optimization.  (Waiman Long)

         - misc smaller fixlets"

      * 'locking-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        ARM, locking/atomics: Implement _relaxed variants of 
atomic[64]_{inc,dec}
        locking/rwsem: Use acquire/release semantics
        locking/mcs: Use acquire/release semantics
        locking/rtmutex: Use acquire/release semantics
        locking/mutex: Use acquire/release semantics
        locking/asm-generic: Add _{relaxed|acquire|release}() variants for 
inc/dec atomics
        atomic: Implement atomic_read_ctrl()
        atomic, arch: Audit atomic_{read,set}()
        atomic: Add atomic_long_t bitops
        futex: Force hot variables into a single cache line
        locking/pvqspinlock: Kick the PV CPU unconditionally when _Q_SLOW_VAL
        locking/osq: Relax atomic semantics
        locking/qrwlock: Rename ->lock to ->wait_lock
        locking/Documentation/lockstat: Fix typo - lokcing -> locking
        locking/atomics, cmpxchg: Privatize the inclusion of asm/cmpxchg.h

  commit 281422869942c19f05a08d4017c633d08d390938
  Merge: f5a8160 b33e18f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:40:38 2015 -0800

      Merge branch 'core-rcu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RCU changes from Ingo Molnar:
       "The main changes in this cycle were:

         - Improvements to expedited grace periods (Paul E McKenney)

         - Performance improvements to and locktorture tests for percpu-rwsem
           (Oleg Nesterov, Paul E McKenney)

         - Torture-test changes (Paul E McKenney, Davidlohr Bueso)

         - Documentation updates (Paul E McKenney)

         - Miscellaneous fixes (Paul E McKenney, Boqun Feng, Oleg Nesterov,
           Patrick Marlier)"

      * 'core-rcu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (54 commits)
        fs/writeback, rcu: Don't use list_entry_rcu() for pointer offsetting in 
bdi_split_work_to_wbs()
        rcu: Better hotplug handling for synchronize_sched_expedited()
        rcu: Enable stall warnings for synchronize_rcu_expedited()
        rcu: Add tasks to expedited stall-warning messages
        rcu: Add online/offline info to expedited stall warning message
        rcu: Consolidate expedited CPU selection
        rcu: Prepare for consolidating expedited CPU selection
        cpu: Remove try_get_online_cpus()
        rcu: Stop excluding CPU hotplug in synchronize_sched_expedited()
        rcu: Stop silencing lockdep false positive for expedited grace periods
        rcu: Switch synchronize_sched_expedited() to IPI
        locktorture: Fix module unwind when bad torture_type specified
        torture: Forgive non-plural arguments
        rcutorture: Fix unused-function warning for torturing_tasks()
        rcutorture: Fix module unwind when bad torture_type specified
        rcu_sync: Cleanup the CONFIG_PROVE_RCU checks
        locking/percpu-rwsem: Clean up the lockdep annotations in 
percpu_down_read()
        locking/percpu-rwsem: Fix the comments outdated by rcu_sync
        locking/percpu-rwsem: Make use of the rcu_sync infrastructure
        locking/percpu-rwsem: Make percpu_free_rwsem() after kzalloc() safe
        ...

  commit f5a8160c1e055c0fd8d16a5b3ac97c638365b0db
  Merge: 7eeef2a 78b9bc9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:05:52 2015 -0800

      Merge branch 'core-efi-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull EFI changes from Ingo Molnar:
       "The main changes in this cycle were:

         - further EFI code generalization to make it more workable for ARM64
         - various extensions, such as 64-bit framebuffer address support,
           UEFI v2.5 EFI_PROPERTIES_TABLE support
         - code modularization simplifications and cleanups
         - new debugging parameters
         - various fixes and smaller additions"

      * 'core-efi-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (23 commits)
        efi: Fix warning of int-to-pointer-cast on x86 32-bit builds
        efi: Use correct type for struct efi_memory_map::phys_map
        x86/efi: Fix kernel panic when CONFIG_DEBUG_VIRTUAL is enabled
        efi: Add "efi_fake_mem" boot option
        x86/efi: Rename print_efi_memmap() to efi_print_memmap()
        efi: Auto-load the efi-pstore module
        efi: Introduce EFI_NX_PE_DATA bit and set it from properties table
        efi: Add support for UEFIv2.5 Properties table
        efi: Add EFI_MEMORY_MORE_RELIABLE support to efi_md_typeattr_format()
        efifb: Add support for 64-bit frame buffer addresses
        efi/arm64: Clean up efi_get_fdt_params() interface
        arm64: Use core efi=debug instead of uefi_debug command line parameter
        efi/x86: Move efi=debug option parsing to core
        drivers/firmware: Make efi/esrt.c driver explicitly non-modular
        efi: Use the generic efi.memmap instead of 'memmap'
        acpi/apei: Use appropriate pgprot_t to map GHES memory
        arm64, acpi/apei: Implement arch_apei_get_mem_attributes()
        arm64/mm: Add PROT_DEVICE_nGnRnE and PROT_NORMAL_WT
        acpi, x86: Implement arch_apei_get_mem_attributes()
        efi, x86: Rearrange efi_mem_attributes()
        ...

  commit 7eeef2abe87dc0d8c276f97ccfdb1f42d9d1e4d8
  Merge: 6aa2fdb b2f7392
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:04:04 2015 -0800

      Merge branch 'core-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull wchan kernel address hiding from Ingo Molnar:
       "This fixes a wchan related information leak in /proc/PID/stat.

        There's a bit of an ABI twist to it: instead of setting the wchan
        field to 0 (which is our usual technique) we set it conditionally to a
        0/1 flag to keep ABI compatibility with older procps versions that
        only fetches /proc/PID/wchan (symbolic names) if the absolute wchan
        address is nonzero"

      * 'core-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        fs/proc, core/debug: Don't expose absolute kernel addresses via wchan

  commit 6aa2fdb87cf01d7746955c600cbac352dc04d451
  Merge: 7b2a430 d9e4ad5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 14:40:01 2015 -0800

      Merge branch 'irq-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq updates from Thomas Gleixner:
       "The irq departement delivers:

         - Rework the irqdomain core infrastructure to accomodate ACPI based
           systems.  This is required to support ARM64 without creating
           artificial device tree nodes.

         - Sanitize the ACPI based ARM GIC initialization by making use of the
           new firmware independent irqdomain core

         - Further improvements to the generic MSI management

         - Generalize the irq migration on CPU hotplug

         - Improvements to the threaded interrupt infrastructure

         - Allow the migration of "chained" low level interrupt handlers

         - Allow optional force masking of interrupts in disable_irq[_nosysnc]

         - Support for two new interrupt chips - Sigh!

         - A larger set of errata fixes for ARM gicv3

         - The usual pile of fixes, updates, improvements and cleanups all
           over the place"

      * 'irq-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (71 commits)
        Document that IRQ_NONE should be returned when IRQ not actually handled
        PCI/MSI: Allow the MSI domain to be device-specific
        PCI: Add per-device MSI domain hook
        of/irq: Use the msi-map property to provide device-specific MSI domain
        of/irq: Split of_msi_map_rid to reuse msi-map lookup
        irqchip/gic-v3-its: Parse new version of msi-parent property
        PCI/MSI: Use of_msi_get_domain instead of open-coded "msi-parent" 
parsing
        of/irq: Use of_msi_get_domain instead of open-coded "msi-parent" parsing
        of/irq: Add support code for multi-parent version of "msi-parent"
        irqchip/gic-v3-its: Add handling of PCI requester id.
        PCI/MSI: Add helper function pci_msi_domain_get_msi_rid().
        of/irq: Add new function of_msi_map_rid()
        Docs: dt: Add PCI MSI map bindings
        irqchip/gic-v2m: Add support for multiple MSI frames
        irqchip/gic-v3: Fix translation of LPIs after conversion to irq_fwspec
        irqchip/mxs: Add Alphascale ASM9260 support
        irqchip/mxs: Prepare driver for hardware with different offsets
        irqchip/mxs: Panic if ioremap or domain creation fails
        irqdomain: Documentation updates
        irqdomain/msi: Use fwnode instead of of_node
        ...

  commit 7b2a4306f9e7d64bb408a6df3bb419500578068a
  Merge: 316dde2 03f136a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 14:13:41 2015 -0800

      Merge branch 'timers-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer updates from Thomas Gleixner:
       "The timer departement provides:

         - More y2038 work in the area of ntp and pps.

         - Optimization of posix cpu timers

         - New time related selftests

         - Some new clocksource drivers

         - The usual pile of fixes, cleanups and improvements"

      * 'timers-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (25 commits)
        timeconst: Update path in comment
        timers/x86/hpet: Type adjustments
        clocksource/drivers/armada-370-xp: Implement ARM delay timer
        clocksource/drivers/tango_xtal: Add new timer for Tango SoCs
        clocksource/drivers/imx: Allow timer irq affinity change
        clocksource/drivers/exynos_mct: Use container_of() instead of 
this_cpu_ptr()
        clocksource/drivers/h8300_*: Remove unneeded memset()s
        clocksource/drivers/sh_cmt: Remove unneeded memset() in sh_cmt_setup()
        clocksource/drivers/em_sti: Remove unneeded memset()s
        clocksource/drivers/mediatek: Use GPT as sched clock source
        clockevents/drivers/mtk: Fix spurious interrupt leading to crash
        posix_cpu_timer: Reduce unnecessary sighand lock contention
        posix_cpu_timer: Convert cputimer->running to bool
        posix_cpu_timer: Check thread timers only when there are active thread 
timers
        posix_cpu_timer: Optimize fastpath_timer_check()
        timers, kselftest: Add 'adjtick' test to validate adjtimex() tick 
adjustments
        timers: Use __fls in apply_slack()
        clocksource: Remove return statement from void functions
        net: sfc: avoid using timespec
        ntp/pps: use y2038 safe types in pps_event_time
        ...

  commit 316dde2fe95b33657de1fc2db54bfc16aa065790
  Merge: 2c2b828 116ef0f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:54:35 2015 -0800

      Merge branch 'for-linus' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM updates from Russell King:
       "In this ARM merge, we remove more lines than we add.  Changes include:

         - Enable imprecise aborts early, so that bus errors aren't masked
           until later in the boot.  This has the side effect that boot
           loaders which provoke these aborts can cause the kernel to crash
           early in boot, so we install a handler to report this event around
           the site where these are enabled.

         - Remove the buggy but impossible to enable cmpxchg syscall code.

         - Add unwinding annotations to some assembly code.

         - Add support for atomic half-word exchange for ARMv6k+.

         - Reduce ioremap() alignment for SMP/LPAE cases where we don't need
           the large alignment.

         - Addition of an "optimal" 3G configuration for systems with 1G of
           RAM.

         - Increase vmalloc space by 128M.

         - Constify some SMP operations structures, which have never been
           writable.

         - Improve ARMs dma_mmap() support for mapping DMA coherent mappings
           into userspace.

         - Fix to the NMI backtrace code in the IPI case on ARM where the
           failing CPU gets stuck for 10s waiting for its own IPI to be
           delivered.

         - Removal of legacy PM support from the AMBA bus driver.

         - Another fix for the previous fix of vdsomunge"

      * 'for-linus' of git://ftp.arm.linux.org.uk/~rmk/linux-arm: (23 commits)
        ARM: 8449/1: fix bug in vdsomunge swab32 macro
        arm: add missing of_node_put
        ARM: 8447/1: catch pending imprecise abort on unmask
        ARM: 8446/1: amba: Remove unused callbacks for legacy system PM
        ARM: 8443/1: Adding support for atomic half word exchange
        ARM: clean up TWD after previous patch
        ARM: 8441/2: twd: Don't set CLOCK_EVT_FEAT_C3STOP unconditionally
        ARM: 8440/1: remove obsolete documentation
        ARM: make highpte an expert option
        ARM: 8433/1: add a VMSPLIT_3G_OPT config option
        ARM: 8439/1: Fix backtrace generation when IPI is masked
        ARM: 8428/1: kgdb: Fix registers on sleeping tasks
        ARM: 8427/1: dma-mapping: add support for offset parameter in dma_mmap()
        ARM: 8426/1: dma-mapping: add missing range check in dma_mmap()
        ARM: remove user cmpxchg syscall
        ARM: 8438/1: Add unwinding to __clear_user_std()
        ARM: 8436/1: hw_breakpoint: remove unnecessary header
        ARM: 8434/2: Revert "7655/1: smp_twd: make 
twd_local_timer_of_register() no-op for nosmp"
        ARM: 8432/1: move VMALLOC_END from 0xff000000 to 0xff800000
        ARM: 8430/1: use default ioremap alignment for SMP or LPAE
        ...

  commit 2c2b8285dcd4d0674b6e77269cf32721fffea59e
  Merge: 0921f1e 5a364c2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:21:09 2015 -0800

      Merge tag 'arc-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc

      Pull ARC updates from Vineet Gupta:

       - Support for new MM features in ARCv2 cores (THP, PAE40) Some generic
         THP bits are touched - all ACKed by Kirill

       - Platform framework updates to prepare for EZChip arrival (still in 
works)

       - ARC Public Mailing list setup finally 
(linux-snps-arc@xxxxxxxxxxxxxxxxxx)

      * tag 'arc-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc: (42 commits)
        ARC: mm: PAE40 support
        ARC: mm: PAE40: tlbex.S: Explicitify the size of pte_t
        ARC: mm: PAE40: switch to using phys_addr_t for physical addresses
        ARC: mm: HIGHMEM: populate high memory from DT
        ARC: mm: HIGHMEM: kmap API implementation
        ARC: mm: preps ahead of HIGHMEM support #2
        ARC: mm: preps ahead of HIGHMEM support
        ARC: mm: use generic macros _BITUL()/_AC()
        ARC: mm: Improve Duplicate PD Fault handler
        MAINTAINERS: Add public mailing list for ARC
        ARC: Ensure DT mem base is same as what kernel is built with
        ARC: boot: Non Master cpus only need to call EARLY_CPU_SETUP once
        ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_smp()
        ARC: smp: Introduce smp hook @init_irq_cpu called for all cores
        ARC: smp: Rename platform hook @init_smp -> @init_cpu_smp
        ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_early_smp()
        ARC: smp: Introduce smp hook @init_early_smp for Master core
        ARC: remove @init_time, @init_irq platform callbacks
        ARC: smp: irqchip: handle IPI as percpu irq like timer
        ARC: boot: Support Halt-on-reset and Run-on-reset SMP booting modes
        ...

  commit 0921f1efb605d8fda43d794734222d1ad39c6840
  Merge: 15f9340 4247896
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:15:46 2015 -0800

      Merge tag 'cris-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jesper/cris

      Pull CRIS changes from Jesper Nilsson:
       "Mostly another batch of code removal due to move to standard
        frameworks for CRISv32, initial devicetree configuration for a couple
        of boards, and some small fixes for kgdb and time handling"

      * tag 'cris-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jesper/cris:
        cris: Drop reference to get_cmos_time()
        CRIS: Drop code related to obsolete or unused kconfigs
        cris: time: Cleanup of persistent clock stuff
        cris: re-use helpers to dump data in hex format
        CRIS v32: remove old GPIO and LEDs code
        CRIS v32: remove I2C bitbanging driver
        CRIS v32: add ARTPEC-3 and P1343 device trees
        CRIS v32: dev88: add GPIO, LEDs, RTC, temp sensor
        CRIS: add dt-bindings symlink
        CRIS v32: increase NR_IRQS
        cris: arch-v10: kgdb: Add '__used' for static variable is_dyn_brkp
        cris: arch-v10: kgdb: Use BAR instead of DTP0 for register P12
        cris: kgdb: use native hex2bin

  commit 15f93405aae307a3cb2c33c795286463601963f7
  Merge: df91fba 6ebbabb
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:09:32 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/egtvedt/linux-avr32

      Pull avr32 update from Hans-Christian Noren Egtvedt.

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/egtvedt/linux-avr32:
        avr32: atngw100: remove useless include

  commit df91fba5e7ed414b1856b33bbed6d55439a14c47
  Merge: e8a2a17 bab84fa
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:01:48 2015 -0800

      Merge branch 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k

      Pull m68k update from Geert Uytterhoeven.

      * 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k:
        m68k/sun3: Use %pM format specifier to print ethernet address

  commit e8a2a176dd0f3e4c7252b79dc5cea6bd4acaf78e
  Merge: 5062ecd ffdc307
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 12:20:29 2015 -0800

      Merge tag 'leds_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds

      Pull LED updates from Jacek Anaszewski:

       - Move the out-of-LED-tree led-sead3 driver to the LED subsystem.

       - Add 'invert' sysfs attribute to the heartbeat trigger.

       - Add Device Tree support to the leds-netxbig driver and add related DT
         nodes to the kirkwood-netxbig.dtsi and kirkwood-net5big.dts files.
         Remove static LED setup from the related board files.

       - Remove redundant brightness conversion operation from leds-netxbig.

       - Improve leds-bcm6328 driver: improve default-state handling, add more
         init configuration options, print invalid LED instead of warning only
         about maximum LED value.

       - Add a shutdown function for setting gpio-leds into off state when
         shutting down.

       - Fix DT flash timeout property naming in leds-aat1290.txt.

       - Switch to using devm prefixed version of led_classdev_register()
         (leds-cobalt-qube, leds-hp6xx, leds-ot200, leds-ipaq-micro,
         leds-netxbig, leds-locomo, leds-menf21bmc, leds-net48xx, leds-wrap).

       - Add missing of_node_put (leds-powernv, leds-bcm6358, leds-bcm6328,
         leds-88pm860x).

       - Coding style fixes and cleanups: led-class/led-core, leds-ipaq-micro.

      * tag 'leds_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds: (27 
commits)
        leds: 88pm860x: add missing of_node_put
        leds: bcm6328: add missing of_node_put
        leds: bcm6358: add missing of_node_put
        powerpc/powernv: add missing of_node_put
        leds: leds-wrap.c: Use devm_led_classdev_register
        leds: aat1290: Fix property naming of flash-timeout-us
        leds: leds-net48xx: Use devm_led_classdev_register
        leds: leds-menf21bmc.c: Use devm_led_class_register
        leds: leds-locomo.c: Use devm_led_classdev_register
        leds: leds-gpio: add shutdown function
        Documentation: leds: update DT bindings for leds-bcm6328
        leds-bcm6328: add more init configuration options
        leds-bcm6328: simplify and improve default-state handling
        leds-bcm6328: print invalid LED
        leds: netxbig: set led_classdev max_brightness
        leds: netxbig: convert to use the devm_ functions
        ARM: mvebu: remove static LED setup for netxbig boards
        ARM: Kirkwood: add LED DT entries for netxbig boards
        leds: netxbig: add device tree binding
        leds: triggers: add invert to heartbeat
        ...

  commit f32bfb9a8ca083f8d148ea90ae5ba66f4831836e
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 22:36:04 2015 +0300

      sh_eth: use DMA barriers

      Commit  7d7355f58ba4 ("sh_eth: Ensure proper ordering of descriptor active
      bit write/read") did the right thing  but used too "heavy" barriers while
      there were already "lighter" DMA barriers exactly  for this case...

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 73186df8d7fa574345f0ad626ebe89649f8308a5
  Merge: 0c63d80 ebac62f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:41:45 2015 -0500

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Minor overlapping changes in net/ipv4/ipmr.c, in 'net' we were
      fixing the "BH-ness" of the counter bumps whilst in 'net-next'
      the functions were modified to take an explicit 'net' parameter.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c63d80c3fac4e6eb0f01dff756e47bc7cd50092
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Tue Nov 3 17:40:53 2015 +0100

      switchdev: respect SKIP_EOPNOTSUPP flag in case there is no recursion

      Caller passing down the SKIP_EOPNOTSUPP switchdev flag expects that
      -EOPNOTSUPP cannot be returned. But in case of direct op call without
      recurtion, this may happen. So fix this by checking it always on the
      end of __switchdev_port_attr_set function.

      Fixes: 464314ea6c11 ("switchdev: skip over ports returning -EOPNOTSUPP 
when recursing ports")
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2a4f4176217d3a29176dff83f2647c48ebaa30a4
  Author: Phil Sutter <phil@xxxxxx>
  Date:   Tue Nov 3 19:01:41 2015 +0100

      net: sched: kill dead code in sch_choke.c

      It looks like this has never been used at all.

      Signed-off-by: Phil Sutter <phil@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 37b8e1ca0fd7adce1c75b5d95e5515bd2dc234dd
  Author: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:18:37 2015 +0100

      irda: Delete an unnecessary check before the function call 
"irlmp_unregister_service"

      The irlmp_unregister_service() function tests whether its argument is NULL
      and then returns immediately. Thus the test around the call is not needed.

      This issue was detected by using the Coccinelle software.

      Signed-off-by: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 353b39d1b1511376aca71bc3aba62831370561ca
  Author: Amitoj Kaur Chawla <amitoj1606@xxxxxxxxx>
  Date:   Thu Oct 22 18:15:50 2015 +0530

      ide: pdc202xx_new: Replace timeval with ktime_t

      This driver uses 'struct timeval' which we are trying to remove since
      32 bit time types will break in the year 2038 by replacing it with
      ktime_t.

      This patch changes do_gettimeofday() to ktime_get() because
      ktime_get() returns a ktime_t while do_gettimeofday() returns struct
      timeval.

      This patch also uses ktime_us_delta() to get the elapsed time.

      Signed-off-by: Amitoj Kaur Chawla <amitoj1606@xxxxxxxxx>
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b3047a77cba193658ebf534ee4abab9cb5446842
  Merge: 3d131f0 e420842
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 11:30:57 2015 -0500

      Merge tag 'mac80211-for-davem-2015-11-03' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211

      Johannes Berg says:

      ====================
      Another set of fixes:
       * remove a warning on a check that can trigger without any
         errors having happened (Andrei)
       * correctly handle deauth request while in the process of
         associating (Andrei)
       * fix TDLS HT operation (Arik)
       * allow changing AID/listen interval during client setup (Ayala)
       * be more forgiving with WMM parameters to get HT/VHT in case of
         broken APs with bad WMM settings (Emmanuel, myself)
       * a number of other fixes (some in documentation)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3d131f070948e4ad93189cb379b3a45d53dce71b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 10:52:52 2015 -0500

      net: dsa: mv88e6xxx: include DSA ports in VLANs

      DSA ports must be members of a VLAN in order to ensure frame bridging
      between chained switch chips.

      Thus tag them in addition to the CPU port when adding a VLAN, and skip
      them when deleting a VLAN and reporting VLAN members.

      Also use the UNMODIFIED egress policy, so that frames egress on these
      ports as they ingress, tagged or untagged.

      Fixes: 0d3b33e60206 ("net: dsa: mv88e6xxx: add VLAN Load support")
      Reported-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c7ea3c0791e971f05f78453a587a1640fe09a61
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Tue Nov 3 10:52:36 2015 -0500

      net: dsa: mv88e6xxx: disable SA learning for DSA and CPU ports

      Frames with DSA headers passing to/from the CPU were taking place in the
      MAC learning on these ports, resulting in incorrect ATU entries. Disable
      learning on these ports.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5ba3f7d61a3a9e6d94462b207d302931b53d8c61
  Author: Jarod Wilson <jarod@xxxxxxxxxx>
  Date:   Tue Nov 3 10:15:59 2015 -0500

      net/core: fix for_each_netdev_feature

      As pointed out by Nikolay and further explained by Geert, the initial
      for_each_netdev_feature macro was broken, as feature would get set outside
      of the block of code it was intended to run in, thus only ever working for
      the first feature bit in the mask. While less pretty this way, this is
      tested and confirmed functional with multiple feature bits set in
      NETIF_F_UPPER_DISABLES.

      [root@dell-per730-01 ~]# ethtool -K bond0 lro off
      ...
      [  242.761394] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p2.
      [  243.552178] bnx2x 0000:06:00.1 p5p2: using MSI-X  IRQs: sp 74  fp[0] 
76 ... fp[7] 83
      [  244.353978] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p1.
      [  245.147420] bnx2x 0000:06:00.0 p5p1: using MSI-X  IRQs: sp 62  fp[0] 
64 ... fp[7] 71

      [root@dell-per730-01 ~]# ethtool -K bond0 gro off
      ...
      [  251.925645] bond0: Disabling feature 0x0000000000004000 on lower dev 
p5p2.
      [  252.713693] bnx2x 0000:06:00.1 p5p2: using MSI-X  IRQs: sp 74  fp[0] 
76 ... fp[7] 83
      [  253.499085] bond0: Disabling feature 0x0000000000004000 on lower dev 
p5p1.
      [  254.290922] bnx2x 0000:06:00.0 p5p1: using MSI-X  IRQs: sp 62  fp[0] 
64 ... fp[7] 71

      Fixes: fd867d51f ("net/core: generic support for disabling netdev 
features down stack")
      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: Eric Dumazet <edumazet@xxxxxxxxxx>
      CC: Jay Vosburgh <j.vosburgh@xxxxxxxxx>
      CC: Veaceslav Falico <vfalico@xxxxxxxxx>
      CC: Andy Gospodarek <gospo@xxxxxxxxxxxxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      CC: Nikolay Aleksandrov <razor@xxxxxxxxxxxxx>
      CC: Michal Kubecek <mkubecek@xxxxxxx>
      CC: Alexander Duyck <alexander.duyck@xxxxxxxxx>
      CC: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      CC: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Jarod Wilson <jarod@xxxxxxxxxx>
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74f2d19caff885bc656e9acf2a6e727b66ab0ed1
  Author: Padmanabh Ratnakar <padmanabh.ratnakar@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 20:25:59 2015 +0530

      vlan: Invoke driver vlan hooks only if device is present

      NIC drivers mark device as detached during error recovery.
      It expects no manangement hooks to be invoked in this state.
      Invoke driver vlan hooks only if device is present.

      Signed-off-by: Padmanabh Ratnakar <padmanabh.ratnakar@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 754107e34165373b3696620cef344227b10eaa99
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Nov 3 14:51:29 2015 +0100

      arcnet/com20020: add LEDS_CLASS dependency

      The newly added led trigger support in the com20020-pci driver causes
      build errors when CONFIG_LEDS_CLASS is disabled:

      drivers/built-in.o: In function `com20020pci_probe':
      (.text+0x185dc4): undefined reference to `devm_led_classdev_register'
      (.text+0x185dd8): undefined reference to `devm_led_classdev_register'

      This adds a Kconfig dependency to prevent the invalid configurations.
      Other drivers appear to be split 50:50 between 'select' and 'depends on'
      for this symbol, I picked 'depends on' as I could not find a common
      policy and it generally causes fewer problems.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 8890624a4e8c ("arcnet: com20020-pci: add led trigger support")
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d056d9c95be87725c07e514930b41c2c7174e75
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 11:39:20 2015 +0100

      bpf, verifier: annotate verbose printer with __printf

      The verbose() printer dumps the verifier state to user space, so let gcc
      take care to check calls to verbose() for (future) errors. make with W=1
      correctly suggests: function might be possible candidate for 'gnu_printf'
      format attribute [-Wsuggest-attribute=format].

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 85013ab5722268cd3c410425bd5a42feb6974a1f
  Merge: 0561e8e a1f8723
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 11:08:22 2015 -0500

      Merge branch 'dp83640-fixes'

      Stefan Sørensen says:

      ====================
      dp83640 driver fixes

      This series fixes a number of minor bugs in the dp83640 driver.
      ====================

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1f8723f38921a0216a63d3ec9f01ec1e2813363
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:08 2015 +0100

      dp83640: Only wait for timestamps for packets with timestamping enabled.

      In the packet timestamping function, check that the ptp version and
      protocol of the packet matches what we have configured the hardware to
      actually generate timestamps for, before looking/waiting for a timestamp.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5f94c943d5dd4b51f3248193e622dd5fcdbb8b11
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:07 2015 +0100

      ptp: Change ptp_class to a proper bitmask

      Change the definition of PTP_CLASS_L2 to not have any bits overlapping 
with
      the other defined protocol values, allowing the PTP_CLASS_* definitions to
      be for simple filtering on packet type.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ccf6ee9a6980eff9ec0eeaa8f63c65bff34d9697
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:06 2015 +0100

      dp83640: Prune rx timestamp list before reading from it

      The list of rx timestamps are currently only pruned of old entries when a
      new entry is inserted. If no new entries are added, old timestamps may
      survive beyond their lifetime, possible causing them to be attached to
      packets with the same sequence number after a rollover.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4b063258ab9360207a4f6913d31d761bd85631ab
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:05 2015 +0100

      dp83640: Delay scheduled work.

      Currently rx_timestamp_work reschedules itself as a regular workqueue 
item,
      effectively causing it run constantly as long as there are packets left in
      the queue. Fix by using delayed workqueue items, limiting it to run only
      every two jiffies.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 539e44d26855fdd198280ee41360a0b3adcf699b
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:04 2015 +0100

      dp83640: Include hash in timestamp/packet matching

      Only using the message type and sequence id for matching timestamps
      with packets is error prone, as multiple clients may very well be
      sending packets with the same messagetype and timestamp at the same
      time. Fix by extending the check to include the hash of bytes 20-29
      (source id in PTPv2) that is provided with the timestamps.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebac62fe3d24c0ce22dd83afa7b07d1a2aaef44d
  Author: Michal KubeÄ?ek <mkubecek@xxxxxxx>
  Date:   Tue Nov 3 08:51:07 2015 +0100

      ipv6: fix tunnel error handling

      Both tunnel6_protocol and tunnel46_protocol share the same error
      handler, tunnel6_err(), which traverses through tunnel6_handlers list.
      For ipip6 tunnels, we need to traverse tunnel46_handlers as we do e.g.
      in tunnel46_rcv(). Current code can generate an ICMPv6 error message
      with an IPv4 packet embedded in it.

      Fixes: 73d605d1abbd ("[IPSEC]: changing API of xfrm6_tunnel_register")
      Signed-off-by: Michal Kubecek <mkubecek@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0561e8e8786203f1b82322550e5c31aeef033d2f
  Merge: fd867d5 3ea4891
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 10:41:51 2015 -0500

      Merge branch 'mlx5-fixes'

      Or Gerlitz says:

      ====================
      Mellanox mlx5e driver update, Nov 3 2015

      This series contains bunch of small fixes to the mlx5e driver from Achiad.

      Changes from V0:
        - removed the driver patch that dealt with IRQ affinity changes during
          NAPI poll, as this is a generic problem which needs generic solution.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ea4891db8d0d224f59b2fae0f386c8f5e68993f
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:24 2015 +0200

      net/mlx5e: Fix LSO vlan insertion

      Consider vlan insertion impact on headers copy size also for LSO
      packets.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e4cf27bd9ce64d048df52a21cf162ce8b1a99362
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:23 2015 +0200

      net/mlx5e: Re-eanble client vlan TX acceleration

      This reverts commit cd58c714acb9 "net/mlx5e: Disable client vlan TX 
acceleration".

      Bring back client vlan insertion offload, the original
      performance issue was found and fixed in the next patch.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fe9f4fe58d17e09b210061ed089dba6e81564652
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:22 2015 +0200

      net/mlx5e: Return error in case mlx5e_set_features() fails

      In case mlx5e_set_features() fails, return the failure status rather
      than 0.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3435ab59d3febe0c00af2a4d40a6df401effe3de
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:21 2015 +0200

      net/mlx5e: Don't allow more than max supported channels

      Consider MLX5E_MAX_NUM_CHANNELS @ethtool set/get_channels

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61d0e73e0a5ab5fc80f6cd9d54f5146e33288a8d
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:20 2015 +0200

      net/mlx5_core: Use the the real irqn in eq->irqn

      Instead of storing the msix array index in eq->irqn (vecidx),
      store the real irq number.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 01c196a2d3d1cfaab7d20879236e981104749510
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:19 2015 +0200

      net/mlx5e: Wait for RX buffers initialization in a more proper manner

      Use jiffies rather than wait loop with msleep().

      The wait loop didn't take into consideration time when the
      process was not executing.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1985740904342a884471348f6e038ee5d706c36
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:18 2015 +0200

      net/mlx5e: Avoid NULL pointer access in case of configuration failure

      In case a configuration operation that involves closing and re-opening
      resources (e.g RX/TX queue size change) fails at the re-opening stage
      these resources will remain closed.
      So when executing (following) configuration operations (e.g ifconfig
      down) we cannot assume that these resources are available.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b38feccd663b55ab07116208b68e1ffc7c3c7e78
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Nov 2 14:03:46 2015 +0100

      s390: remove runtime instrumentation interrupts

      The external interrupts for runtime instrumentation buffer-full
      and runtime instrumentation halted are unused and have no current
      user. Remove the support and ignore the second parameter of the
      s390_runtime_instr system call from now on.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e510f681d27d402d74dc7b81e13db118e4180937
  Author: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 11:13:18 2015 +0100

      s390/cio: de-duplicate subchannel validation

      cio_validate_io_subchannel() and cio_validate_msg_subchannel() are
      identical, as the called functions already take care about the
      differences between subchannel types.

      Just inline the code into the only user,
      cio_validate_subchannel(), instead.

      Signed-off-by: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Acked-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8f0ba83178d4f3630687296c45d593326ec2d63d
  Author: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 10:45:04 2015 +0100

      s390/css: unneeded initialization in for_each_subchannel

      The ret variable is always set by the fn function.
      There is no need to initialize it.

      Signed-off-by: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
      Reviewed-By: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
      Acked-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 295d8fa961466bb9e9ebb87b46fdad4edaf736de
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Thu Oct 29 01:16:04 2015 +0100

      s390/Kconfig: use builtin bswap

      Depending on the gcc version we can use builtin_bswap instead of
      architecture functions. Doing so is better than the inline assembly
      version of load reverse for two reasons:
      - the sequence of load reversed, apply constant mask, save reversed can
        be optimized to load, apply reversed mask, save
      - builtins are slightly better to optimize e.g. gcc instruction
        scheduler cannot optimize grouping on inline assemblies.

      To enable set we have to ARCH_USE_BUILTIN_BSWAP.
      bloat-o-meter results:
      add/remove: 1/1 grow/shrink: 75/533 up/down: 1711/-9394 (-7683)

      Suggested-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Acked-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ccc0e7dc708ce1bd2e1c4a2b6a180ae7459374de
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Fri Oct 23 12:10:51 2015 +0200

      s390/dasd: fix disconnected device with valid path mask

      Path verification is either done via dasd_eckd_read_conf() which is
      triggered during online processing and resume or via
      do_path_verification_work() which is triggered after path events.
      The dasd_eckd_read_conf() version added paths unconditionally and did
      not check if the path mask was empty. This led to devices having the
      disconnected stop flag set but a valid path mask. So they where not
      working although they had paths validated successfully. After a resume
      this state could even not be solved with additional paths added.

      Fix by checking for an empty path mask in dasd_eckd_read_conf() and
      clearing the device stop bits for a newly added channel path.

      Reviewed-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 251afd69e3328653bae4a8ca09700971ca4000c5
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Thu Oct 15 13:54:39 2015 +0200

      s390/dasd: fix invalid PAV assignment after suspend/resume

      For a valid PAV assignment the DASD driver needs to notice possibly
      changed configuration data. Thus the failing of read configuration
      data should also fail the device restore to prevent invalid PAV
      assignment. The failed device may get restored after additional paths
      get available later on.
      If the restore fails after the device was added to the lcu alias
      handling it needs to be removed from the alias handling before exiting
      the restore function.

      Reviewed-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit c7c0c9deb0a4b0715d2c09438420437b86f387c4
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Thu Oct 15 11:10:08 2015 +0200

      s390/dasd: fix double free in dasd_eckd_read_conf

      The configuration data is stored per path and also the first valid
      configuration data per device. When dasd_eckd_read_conf is called
      again after a path got lost the device configuration data is cleared
      but possibly not the per path configuration data. This might lead to a
      double free when the lost path gets operational again.

      Fix by clearing all per path configuration data when the first valid
      configuration data is received and stored.

      Reviewed-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 55a423b6f105fa323168f15f4bb67f23b21da44e
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Oct 27 13:13:38 2015 +0100

      s390/kernel: fix ptrace peek/poke for floating point registers

      git commit 155e839a814834a3b4b31e729f4716e59d3d2dd4
      "s390/kernel: dynamically allocate FP register save area"
      introduced a regression in regard to ptrace.

      If the vector register extension is not present or unused the
      ptrace peek of a floating pointer register return incorrect data
      and the ptrace poke to a floating pointer register overwrites the
      task structure starting at task->thread.fpu.fprs.

      Cc: stable@xxxxxxxxxx # v4.3
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e4208427247ecc7306c8f71ab3c5c08e08cf9fda
  Author: Ayala Beker <ayala.beker@xxxxxxxxx>
  Date:   Fri Oct 23 11:20:06 2015 +0300

      cfg80211: allow AID/listen interval changes for unassociated station

      Currently, cfg80211 rejects updates of AID and listen interval parameters
      for existing entries. This information is known only at association stage
      and as a result it's impossible to update entries that were added
      unassociated.
      Fix this by allowing updates of these properies for stations that the
      driver (or mac80211) assigned unassociated state.

      This then fixes mac80211's use of NL80211_FEATURE_FULL_AP_CLIENT_STATE.

      Signed-off-by: Ayala Beker <ayala.beker@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit dcae9e0203dfd887a7413cd38d1f87aaac1127f4
  Author: Chaitanya T K <chaitanya.mgit@xxxxxxxxx>
  Date:   Fri Oct 30 23:16:15 2015 +0530

      mac80211: document sleep requirements for channel context ops

      Channel context driver operations can sleep, so add might_sleep()
      and document this.

      Signed-off-by: Chaitanya T K <chaitanya.mgit@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ef95d8ba384781ce574c10f87b97d6bab2659735
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Sun Oct 25 10:59:42 2015 +0200

      mac80211: further improve "no supported rates" warning

      Allow distinguishing the non-station case from the case of a
      station without rates, by using -1 for the non-station case.
      This value cannot be reached with a station since that many
      legacy rates don't exist.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 2ed77ea69205139c3f6016b250d34e09bf48574d
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 22 17:46:06 2015 +0200

      mac80211: treat bad WMM parameters more gracefully

      As WMM is required for HT/VHT operation, treat bad WMM parameters
      more gracefully by falling back to default parameters instead of
      not using WMM assocation. This makes it possible to still use HT
      or VHT, although potentially with reduced quality of service due
      to unintended WMM parameters.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 730a755017139ddedac08d82f73c3532a020d372
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Thu Oct 22 17:46:05 2015 +0200

      mac80211: fixup AIFSN instead of disabling WMM

      Disabling WMM has a huge impact these days. It implies that
      HT and VHT will be disabled which means that the throughput
      will be drammatically reduced.
      Since the AIFSN is a transmission parameter, we can play a
      bit and fix it up to make it compliant with the 802.11
      specification which requires it to be at least 2.
      Increasing it from 1 to 2 will slightly reduce the
      likelyhood to get a transmission opportunity compared to
      other clients that would accept to set AIFSN=1, but at
      least it will allow HT and VHT which is a huge gain.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit cec6628350802b0a652486c41b57d4e1dd37a65c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 22 17:46:04 2015 +0200

      mac80211: make enable_qos parameter to ieee80211_set_wmm_default()

      The function currently determines this value, for use in bss_info.qos,
      based on the interface type itself. Make it a parameter instead and
      set it with the same logic for now.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit e86abc689c5cb963f713c1bab9c37775421a6a96
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 22 17:35:14 2015 +0200

      cfg80211/mac80211: clarify RSSI CQM reporting requirements

      The previous patch changed mac80211 to always report an event
      after a CQM RSSI reconfiguration. Document that as expected
      behaviour in both the cfg80211 and mac80211 API.

      Currently, iwlmvm already implements that behaviour; the other
      drivers implementing CQM RSSI events may have to be changed.

      This behaviour lets userspace know what the current state is
      without relying on querying the data which is racy.

      Reviewed-by: Sharon, Sara <sara.sharon@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 520c75dcae6e588670962243bac6324e7839b648
  Author: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 21:25:51 2015 +0200

      mac80211: fix crash on mesh local link ID generation with VIFs

      llid_in_use needs to be limited to stations of the same VIF, otherwise it
      will cause a NULL deref as the sta_info of non-mesh-VIFs don't have
      sta->mesh set.

      Steps to reproduce:

         modprobe mac80211_hwsim channels=2
         iw phy phy0 interface add ibss0 type ibss
         iw phy phy0 interface add mesh0 type mp
         iw phy phy1 interface add ibss1 type ibss
         iw phy phy1 interface add mesh1 type mp
         ip link set ibss0 up
         ip link set mesh0 up
         ip link set ibss1 up
         ip link set mesh1 up
         iw dev ibss0 ibss join foo 2412
         iw dev ibss1 ibss join foo 2412
         # Ensure that ibss0 and ibss1 are actually associated; I often need to
         # leave and join the cell on ibss1 a second time.
         iw dev mesh0 mesh join bar
         iw dev mesh1 mesh join bar # crash

      Signed-off-by: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 57f255f58165974c131f048b4302728052d92d29
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:34 2015 +0200

      mac80211: TDLS: add proper HT-oper IE

      When 11n peers performs a TDLS connection on a legacy BSS, the HT
      operation IE must be specified according to IEEE802.11-2012 section
      9.23.3.2. Otherwise HT-protection is compromised and the medium becomes
      noisy for both the TDLS and the BSS links.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 0d440ea294a00b60ced66c0bc5cb5caa42fd4fbd
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:33 2015 +0200

      mac80211: don't reconfigure sched scan in case of wowlan

      Scheduled scan has to be reconfigured only if wowlan wasn't
      configured, since otherwise it should continue to run (with
      the 'any' trigger) or be aborted.

      The current code will end up asking the driver to start a new
      scheduled scan without stopping the previous one, and leaking
      some memory (from the previous request.)

      Fix this by doing the abort/restart under the proper conditions.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 968a76cef3d1bb9a3b4d135cd788056e742859f3
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:36 2015 +0200

      mac80211: call drv_stop only if driver is started

      If drv_start() fails during hw_restart, all the running
      interfaces are being closed/stopped, which results in
      drv_stop() being called, although the driver was never
      started successfully.

      This might cause drivers to perform operations on uninitialized
      memory (as they assume it was initialized on drv_start)

      Consider the local->started flag, and call the driver's stop()
      op only if drv_start() succeeded before.

      Move drv_start() and drv_stop() to driver-ops.c, as they are no
      longer simple wrappers.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit c189a685b83955a39884dc2bdae531bc0adf3b98
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sun Oct 25 10:59:40 2015 +0200

      mac80211: Remove WARN_ON_ONCE in ieee80211_recalc_smps

      The recalc_smps work can run after the station disassociates.
      At this stage we already released the channel, but the work
      will be cancelled only when the interface stops.
      In this scenario we can hit the warning in ieee80211_recalc_smps, so
      just remove it.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 43d6df007c0cc111ab8ead8bd95aafab9bb4531d
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:35 2015 +0200

      mac80211: use freezable workqueue for restart work

      Requesting hw restart during suspend might result
      in the restart work being executed after mac80211
      and the hw are suspended.

      Solve the race by simply scheduling the restart
      work on a freezable workqueue.

      Note that there can be some cases of reconfiguration
      on resume (besides the hardware restart):

      * wowlan is not configured -
          All the interfaces removed were removed on suspend,
          and drv_stop() was called. At this point the driver
          shouldn't expect for hw_restart anyway, so we can
          simply cancel it (on resume).

      * wowlan is configured, drv_resume() == 1
          There is no definitive expected behavior in this case,
          as each driver might have different expectations (e.g.
          setting some flags on suspend/restart vs. not handling
          spurious recovery).
          For now, simply let the hw_restart work run again after
          resume, and hope the driver will handle it well (or at
          least initiate another hw restart).

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a64cba3c5330704a034bd3179270b8d04daf6987
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sun Oct 25 10:59:38 2015 +0200

      mac80211: Fix local deauth while associating

      Local request to deauthenticate wasn't handled while associating, thus
      the association could continue even when the user space required to
      disconnect.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 254d3dfe445f94a764e399ca12e04365ac9413ed
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:41 2015 +0200

      mac80211: allow null chandef in tracing

      In TDLS channel-switch operations the chandef can sometimes be NULL.
      Avoid an oops in the trace code for these cases and just print a
      chandef full of zeros.

      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: a7a6bdd0670fe ("mac80211: introduce TDLS channel switch ops")
      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4baf6bea37247e59f1971e8009d13aeda95edba2
  Author: Ola Olsson <ola1olsson@xxxxxxxxx>
  Date:   Thu Oct 29 07:04:58 2015 +0100

      nl80211: Fix potential memory leak from parse_acl_data

      If parse_acl_data succeeds but the subsequent parsing of smps
      attributes fails, there will be a memory leak due to early returns.
      Fix that by moving the ACL parsing later.

      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: 18998c381b19b ("cfg80211: allow requesting SMPS mode on ap start")
      Signed-off-by: Ola Olsson <ola.olsson@xxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 519ee6918b91abdc4bc9720deae17599a109eb40
  Author: Janusz.Dziedzic@xxxxxxxxx <Janusz.Dziedzic@xxxxxxxxx>
  Date:   Tue Oct 27 08:35:11 2015 +0100

      mac80211: fix divide by zero when NOA update

      In case of one shot NOA the interval can be 0, catch that
      instead of potentially (depending on the driver) crashing
      like this:

      divide error: 0000 [#1] SMP
      [...]
      Call Trace:
      <IRQ>
      [<ffffffffc08e891c>] ieee80211_extend_absent_time+0x6c/0xb0 [mac80211]
      [<ffffffffc08e8a17>] ieee80211_update_p2p_noa+0xb7/0xe0 [mac80211]
      [<ffffffffc069cc30>] ath9k_p2p_ps_timer+0x170/0x190 [ath9k]
      [<ffffffffc070adf8>] ath_gen_timer_isr+0xc8/0xf0 [ath9k_hw]
      [<ffffffffc0691156>] ath9k_tasklet+0x296/0x2f0 [ath9k]
      [<ffffffff8107ad65>] tasklet_action+0xe5/0xf0
      [...]

      Cc: stable@xxxxxxxxxxxxxxx [3.16+, due to d463af4a1c34 using it]
      Signed-off-by: Janusz Dziedzic <janusz.dziedzic@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ffdc307d038f02617041f8e5c7e3cd00a1706a2a
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:30 2015 +0200

      leds: 88pm860x: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression n;
      expression e,r;
      @@

       for_each_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 6cc7624415466022749a868c159ac68367bc9a0e
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:29 2015 +0200

      leds: bcm6328: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each
      iteration, so a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 4b6ba5e28b2903fa8b51c6d5fdafb2979fe6eeab
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:28 2015 +0200

      leds: bcm6358: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each
      iteration, so a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit dde4afe7656084b7886f3b721530c32209842390
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:27 2015 +0200

      powerpc/powernv: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit e9aadb864f04f1f7c7f8713fead64a2370be940d
  Author: Fida Mohammad <fmthoker@xxxxxxxxx>
  Date:   Wed Oct 21 03:58:35 2015 -0700

      leds: leds-wrap.c: Use devm_led_classdev_register

      Use of resource managed function devm_led_classdev_register to
      make initialization path simpler. Also removed redundant remove
      function.

      Signed-off-by: Fida Mohammad <fmthoker@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 10238adb6f2bcc6c418188ef3425ea57297fa3a6
  Author: Ingi Kim <ingi2.kim@xxxxxxxxxxx>
  Date:   Thu Oct 22 10:14:07 2015 +0900

      leds: aat1290: Fix property naming of flash-timeout-us

      flash-timeout-us property name is changed to flash-max-timeout-us.
      This patch fixes that name.

      Signed-off-by: Ingi Kim <ingi2.kim@xxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 511676230b56249ecb613298f95f9910684fcb4f
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sat Oct 17 05:02:57 2015 +0530

      leds: leds-net48xx: Use devm_led_classdev_register

      Use devm_led_classdev_register instead of led_classdev_register,
      removing the redundant net48xx_led_remove function.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 81aad9f81e6d89819f12656bd38df9ef639dbe45
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sat Oct 17 01:47:55 2015 +0530

      leds: leds-menf21bmc.c: Use devm_led_class_register

      Use resource-managed function devm_led_classdev_register instead
      of led_classdev_register, consequently remove redundant
      menf21bmc_led_remove function.
      Also drop the unneeded label err_free_leds.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit d43986143463690642bac8897196496d4c776269
  Author: Fida Mohammad <fmthoker@xxxxxxxxx>
  Date:   Fri Oct 16 14:33:03 2015 -0700

      leds: leds-locomo.c: Use devm_led_classdev_register

      Use resource managed function devm_led_classdev_register to make
      initialisation path simpler.
      Also removed redundant led_classdev_unregister function.

      Signed-off-by: Fida Mohammad <fmthoker@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 707f33ed85ff423016674d27bb2e60fe8fa352ce
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Tue Oct 13 07:17:12 2015 +0200

      leds: leds-gpio: add shutdown function

      add a shutdown function for setting the gpio-leds
      into off state when shuting down.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 1d3ff22d633d35048c35c3deeead7ab116cebc32
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:55 2015 +0200

      Documentation: leds: update DT bindings for leds-bcm6328

      This patch adds latest DT bindings for leds-bcm6328 init register
      configuration.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 9f82c778ce17789a038351a411ff65cd41033c7a
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:54 2015 +0200

      leds-bcm6328: add more init configuration options

      This patch adds more init register configuration options:
      - Serial LEDs multiplexing.
      - Serial LEDs clock signal low/high polarity.
      - Serial LEDs data signal low/high polarity.
      - Serial LEDs shift direction inverted/normal.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit d8fe1606d1a7181c877d8b1727cdcfb82f76e91c
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:53 2015 +0200

      leds-bcm6328: simplify and improve default-state handling

      This patch simplifies and improves the code related to
      default-state handling.
      It also changes the code to power off the LEDs by default.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 79653fbb3365002899e7d25ec5ca96aff4241ede
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:52 2015 +0200

      leds-bcm6328: print invalid LED

      Print invalid LED instead of warning only about maximum LED value.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 7b9d9d88158e99a6a17a292ec4ec47105a771c4f
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:38 2015 +0200

      leds: netxbig: set led_classdev max_brightness

      This patch sets the led_classdev max_brightness to the maximum level
      value supported by hardware. This allows to get rid of the brightness
      conversion operation (from software [0:LED_FULL] to hardware ranges) in
      brightness_set().

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit cd0109555bd118ddb8ee0df0ca5d8f9bd3d7a77f
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:37 2015 +0200

      leds: netxbig: convert to use the devm_ functions

      This patch converts the leds-netxbig driver to use the devres functions
      devm_gpio_request_one() and devm_led_classdev_register(). This allows to
      simplify the code a bit.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit ebc278f1575942d08ad3278b71cde99bd24eae63
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:36 2015 +0200

      ARM: mvebu: remove static LED setup for netxbig boards

      Since DT support is now available for the LEDs found on the LaCie
      netxbig boards (Kirkwood-based), then the old-fashion netxbig board
      setup file is no longer needed. This patch removes this file.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 767361fac0f730293c1be8cdf1636cf9510b2245
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:35 2015 +0200

      ARM: Kirkwood: add LED DT entries for netxbig boards

      This patch adds DT entries for the LEDs found on the Kirkwood-based
      LaCie boards 2Big and 5Big Network v2.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 2976b17989094e97567510be3ea91fc2f0c7aab3
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:34 2015 +0200

      leds: netxbig: add device tree binding

      This patch adds device tree support for the netxbig LEDs.

      This also introduces a additionnal DT binding for the GPIO extension bus
      (netxbig-gpio-ext) used to configure the LEDs. Since this bus could also
      be used to control other devices, then it seems more suitable to have it
      in a separate DT binding.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 1c7b9d0edf5ada916fd02e66355f79f2089ee095
  Author: Jiri Prchal <jiri.prchal@xxxxxxxxxxx>
  Date:   Thu Oct 8 10:32:26 2015 +0200

      leds: triggers: add invert to heartbeat

      This patch adds possibility to invert heartbeat blinking.
      The inverted LED is more time ON then OFF. It's because it looks
      better when the heartbeat LED is next to other LED which is most
      time ON. The invert value is exported same way via sysfs in file
      invert like oneshot. I get inspiration from this trigger.

      Signed-off-by: Jiri Prchal <jiri.prchal@xxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 757b06ae04b3b6c8958ab067e879a8865d076d2a
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Mon Sep 28 14:38:04 2015 +0200

      leds: core: Move LED core callbacks out of led-class.c

      Since the API for controlling LED brightness and blinking is defined in
      the LED core, move the related timer and work callbacks to the led-core.c,
      and initialize them through a new led_core_init API.

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Acked-by: Pavel Machek <pavel@xxxxxx>

  commit 22a16873d38829570677871a22cf77f00445206f
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Mon Aug 3 17:04:01 2015 +0200

      LED/MIPS: Move SEAD3 LED driver to where it belongs.

      Fixes the following randconfig problem

      leds-sead3.c:(.text+0x7dc): undefined reference to 
`led_classdev_unregister'
      leds-sead3.c:(.text+0x7e8): undefined reference to 
`led_classdev_unregister'

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Bryan Wu <cooloney@xxxxxxxxx>
      Cc: Richard Purdie <rpurdie@xxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-leds@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 95281b5b598e9805b77dbbaaea400ebc2289bac8
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Mon Sep 7 21:58:29 2015 +0530

      leds: leds-ipaq-micro: Fix coding style issues

      Spaces at the starting of a line are removed, indentation using
      tab, instead of space. Also, line width of more than 80 characters
      is also taken care of.
      Two warnings are left alone to aid better readability.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 431557f4a44f582f83fd83cbee571baeab24b853
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Mon Sep 7 19:43:23 2015 +0530

      leds: leds-ipaq-micro: Use devm_led_classdev_register

      Use of resource-managed function devm_led_classdev_register
      instead of led_classdev_register is preferred, consequently
      remove redundant function micro_leds_remove.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 583a2b2cd73c13a91b5f529466dec4d27716d226
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sat Sep 5 19:53:27 2015 +0530

      leds: leds-ot200: Use devm_led_classdev_register

      Use resource-managed function devm_led_classdev_register
      instead of led_classdev_register to make the error path simpler.
      The goto is replaced with direct return, unneeded label err is
      dropped. Also, remove redundant ot200_led_remove.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit c0fc68ba97b0f96fa4aaa6010ead6b77d3ffc3dd
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sun Sep 6 01:23:37 2015 +0530

      leds: leds-hp6xx: Use devm_led_classdev_register

      Use resource-managed function devm_led_classdev_register
      instead of led_classdev_register to simplify error path.
      An unnecessary check of ret is replaced with a direct return
      Also, remove redundant hp6xxled_remove.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit aa4e2524955971730ff845c0589f2f8f441ad610
  Author: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
  Date:   Fri Sep 4 12:12:01 2015 +0200

      leds: leds-cobalt-qube: Use devm_led_classdev_register

      Use resource-managed function devm_led_classdev_register instead
      of led_classdev_register to make the error-path simpler.

      To be compatible with the change, goto is replaced with direct
      return, unneeded label err_null is dropped and unnecessary variable
      retval is removed. Also, remove redundant cobalt_qube_led_remove.

      Signed-off-by: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 6ebbabbaed0b38563f62100762e3b3780655f83f
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:14:21 2015 +0200

      avr32: atngw100: remove useless include

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Acked-by: Hans-Christian Egtvedt <egtvedt@xxxxxxxxxxxx>

  commit 5f6c99e0ab805d8ec9eda105822912d49aa1d409
  Author: Shaohui Xie <Shaohui.Xie@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 12:27:33 2015 +0800

      net: phy: fix a bug in get_phy_c45_ids

      When probing devices-in-package for a c45 phy, device zero is the last
      device to probe, however, if driver reads 0 from device zero,
      c45_ids->devices_in_package is set to '0', the loop condition of probing
      will be matched again, see codes below:

      for (i = 1;i < num_ids && c45_ids->devices_in_package == 0;i++)

      driver will run in a dead loop.

      This patch restructures the bug and confusing loop, it provides a helper
      function get_phy_c45_devs_in_pkg which to read devices-in-package 
registers
      of a MMD, and rewrites the loop with using the helper function.

      Signed-off-by: Shaohui Xie <Shaohui.Xie@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd867d51f889aec11cca235ebb008578780d052d
  Author: Jarod Wilson <jarod@xxxxxxxxxx>
  Date:   Mon Nov 2 21:55:59 2015 -0500

      net/core: generic support for disabling netdev features down stack

      There are some netdev features, which when disabled on an upper device,
      such as a bonding master or a bridge, must be disabled and cannot be
      re-enabled on underlying devices.

      This is a rework of an earlier more heavy-handed appraoch, which simply
      disables and prevents re-enabling of netdev features listed in a new
      define in include/net/netdev_features.h, NETIF_F_UPPER_DISABLES. Any upper
      device that disables a flag in that feature mask, the disabling will
      propagate down the stack, and any lower device that has any upper device
      with one of those flags disabled should not be able to enable said flag.

      Initially, only LRO is included for proof of concept, and because this
      code effectively does the same thing as dev_disable_lro(), though it will
      also activate from the ethtool path, which was one of the goals here.

      [root@dell-per730-01 ~]# ethtool -k bond0 |grep large
      large-receive-offload: on
      [root@dell-per730-01 ~]# ethtool -k p5p1 |grep large
      large-receive-offload: on
      [root@dell-per730-01 ~]# ethtool -K bond0 lro off
      [root@dell-per730-01 ~]# ethtool -k bond0 |grep large
      large-receive-offload: off
      [root@dell-per730-01 ~]# ethtool -k p5p1 |grep large
      large-receive-offload: off

      dmesg dump:

      [ 1033.277986] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p2.
      [ 1034.067949] bnx2x 0000:06:00.1 p5p2: using MSI-X  IRQs: sp 74  fp[0] 
76 ... fp[7] 83
      [ 1034.753612] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p1.
      [ 1035.591019] bnx2x 0000:06:00.0 p5p1: using MSI-X  IRQs: sp 62  fp[0] 
64 ... fp[7] 71

      This has been successfully tested with bnx2x, qlcnic and netxen network
      cards as slaves in a bond interface. Turning LRO on or off on the master
      also turns it on or off on each of the slaves, new slaves are added with
      LRO in the same state as the master, and LRO can't be toggled on the
      slaves.

      Also, this should largely remove the need for dev_disable_lro(), and most,
      if not all, of its call sites can be replaced by simply making sure
      NETIF_F_LRO isn't included in the relevant device's feature flags.

      Note that this patch is driven by bug reports from users saying it was
      confusing that bonds and slaves had different settings for the same
      features, and while it won't be 100% in sync if a lower device doesn't
      support a feature like LRO, I think this is a good step in the right
      direction.

      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: Eric Dumazet <edumazet@xxxxxxxxxx>
      CC: Jay Vosburgh <j.vosburgh@xxxxxxxxx>
      CC: Veaceslav Falico <vfalico@xxxxxxxxx>
      CC: Andy Gospodarek <gospo@xxxxxxxxxxxxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      CC: Nikolay Aleksandrov <razor@xxxxxxxxxxxxx>
      CC: Michal Kubecek <mkubecek@xxxxxxx>
      CC: Alexander Duyck <alexander.duyck@xxxxxxxxx>
      CC: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Jarod Wilson <jarod@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b2663a4f30e85ec606b806f5135413e6d5c78d1e
  Author: Martin Habets <mhabets@xxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:51:31 2015 +0000

      sfc: push partner queue for skb->xmit_more

      When the IP stack passes SKBs the sfc driver puts them in 2 different TX
      queues (called partners), one for checksummed and one for not checksummed.
      If the SKB has xmit_more set the driver will delay pushing the work to the
      NIC.

      When later it does decide to push the buffers this patch ensures it also
      pushes the partner queue, if that also has any delayed work. Before this
      fix the work in the partner queue would be left for a long time and cause
      a netdev watchdog.

      Fixes: 70b33fb ("sfc: add support for skb->xmit_more")
      Reported-by: Jianlin Shi <jishi@xxxxxxxxxx>
      Signed-off-by: Martin Habets <mhabets@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c238041f517d0a6458264582e8e2a1513766f8e7
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 01:28:07 2015 +0300

      sh_eth: fix typo in RX descriptor bit name

      The correct name of the RX descriptor 0 bit 30 is RDLE (receive descriptor
      list end),  not  RDEL.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ece9009774596ee3df0acba65a324b7ea79387c
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 2 17:08:19 2015 -0800

      sit: fix sit0 percpu double allocations

      sit0 device allocates its percpu storage twice :
      - One time in ipip6_tunnel_init()
      - One time in ipip6_fb_tunnel_init()

      Thus we leak 48 bytes per possible cpu per network namespace dismantle.

      ipip6_fb_tunnel_init() can be much simpler and does not
      return an error, and should be called after register_netdev()

      Note that ipip6_tunnel_clone_6rd() also needs to be called
      after register_netdev() (calling ipip6_tunnel_init())

      Fixes: ebe084aafb7e ("sit: Use ipip6_tunnel_init as the ndo_init 
function.")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a176ded3f4bdbd267bc9a79bde12d984c8c517b2
  Merge: 12d4309 52bc671
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 22:52:24 2015 -0500

      Merge branch 'bonding-actor-updates'

      Mahesh Bandewar says:

      ====================
      re-org actor admin/oper key updates

      I was observing machines entering into weird LACP state when the
      partner is in passive mode. This issue is not because of the partners
      in passive state but probably because of some operational key update
      which is pushing the state-machine is that weird state. This was
      happening randomly on about 1% of the machine (when the sample size
      is a large set of machines with a variety of NICs/ports bonded).

      In this patch-series I'm attempting to unify the logic of actor-key
      / operational-key changes to one place to avoid possible errors in
      update. Also this eliminates the need for the event-handler to decide
      if the key needs update.

      After this patch-set none of the machines (from same sample set) were
      exhibiting LACP-weirdness that was observed earlier.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52bc67168109ade61014a36feedf09f4bc53d8f1
  Author: Mahesh Bandewar <maheshb@xxxxxxxxxx>
  Date:   Sat Oct 31 12:45:11 2015 -0700

      bonding: simplify / unify event handling code for 3ad mode.

      Old logic of updating state-machine is not required since
      ad_update_actor_keys() does it implicitly. The only loss is
      the notification differentiation between speed vs. duplex
      change. Now only one unified notification is printed.

      Signed-off-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7bb11dc9f59ddcb33ee317da77b235235aaa582a
  Author: Mahesh Bandewar <maheshb@xxxxxxxxxx>
  Date:   Sat Oct 31 12:45:06 2015 -0700

      bonding: unify all places where actor-oper key needs to be updated.

      actor_admin, and actor_oper key is changed at multiple locations in
      the code. This patch brings all those updates into one location in
      an attempt to avoid possible inconsistent updates causing LACP state
      machine to go in weird state.

      The unified place is ad_update_actor_key() with simple state-machine
      logic -
        (a) If port is "duplex" then only it can participate in LACP
        (b) Speed change reinitializes the LACP state-machine.

      Signed-off-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b25c2e7d3c44aaadee55d70f70c31cbc9014c713
  Author: Mahesh Bandewar <maheshb@xxxxxxxxxx>
  Date:   Sat Oct 31 12:45:00 2015 -0700

      bonding: Simplify __get_duplex function.

      Eliminate 'else' clause by simply initializing variable

      Signed-off-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 12d4309636d30770b54985be05ac512131f328b8
  Merge: 1d6119b 42984d7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 22:48:39 2015 -0500

      Merge branch 'bpf-persistent'

      Daniel Borkmann says:

      ====================
      BPF updates

      This set adds support for persistent maps/progs. Please see
      individual patches for further details. A man-page update
      to bpf(2) will be sent later on, also a iproute2 patch for
      support in tc.

      v1 -> v2:
        - Reworked most of patch 4 and 5
        - Rebased to latest net-next
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 42984d7c1e563bf92e6ca7a0fd89f8e933f2162e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:10 2015 +0100

      bpf: add sample usages for persistent maps/progs

      This patch adds a couple of stand-alone examples on how BPF_OBJ_PIN
      and BPF_OBJ_GET commands can be used.

      Example with maps:

        # ./fds_example -F /sys/fs/bpf/m -P -m -k 1 -v 42
        bpf: map fd:3 (Success)
        bpf: pin ret:(0,Success)
        bpf: fd:3 u->(1:42) ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m -G -m -k 1
        bpf: get fd:3 (Success)
        bpf: fd:3 l->(1):42 ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m -G -m -k 1 -v 24
        bpf: get fd:3 (Success)
        bpf: fd:3 u->(1:24) ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m -G -m -k 1
        bpf: get fd:3 (Success)
        bpf: fd:3 l->(1):24 ret:(0,Success)

        # ./fds_example -F /sys/fs/bpf/m2 -P -m
        bpf: map fd:3 (Success)
        bpf: pin ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m2 -G -m -k 1
        bpf: get fd:3 (Success)
        bpf: fd:3 l->(1):0 ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m2 -G -m
        bpf: get fd:3 (Success)

      Example with progs:

        # ./fds_example -F /sys/fs/bpf/p -P -p
        bpf: prog fd:3 (Success)
        bpf: pin ret:(0,Success)
        bpf sock:4 <- fd:3 attached ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/p -G -p
        bpf: get fd:3 (Success)
        bpf: sock:4 <- fd:3 attached ret:(0,Success)

        # ./fds_example -F /sys/fs/bpf/p2 -P -p -o ./sockex1_kern.o
        bpf: prog fd:5 (Success)
        bpf: pin ret:(0,Success)
        bpf: sock:3 <- fd:5 attached ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/p2 -G -p
        bpf: get fd:3 (Success)
        bpf: sock:4 <- fd:3 attached ret:(0,Success)

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b2197755b2633e164a439682fb05a9b5ea48f706
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:09 2015 +0100

      bpf: add support for persistent maps/progs

      This work adds support for "persistent" eBPF maps/programs. The term
      "persistent" is to be understood that maps/programs have a facility
      that lets them survive process termination. This is desired by various
      eBPF subsystem users.

      Just to name one example: tc classifier/action. Whenever tc parses
      the ELF object, extracts and loads maps/progs into the kernel, these
      file descriptors will be out of reach after the tc instance exits.
      So a subsequent tc invocation won't be able to access/relocate on this
      resource, and therefore maps cannot easily be shared, f.e. between the
      ingress and egress networking data path.

      The current workaround is that Unix domain sockets (UDS) need to be
      instrumented in order to pass the created eBPF map/program file
      descriptors to a third party management daemon through UDS' socket
      passing facility. This makes it a bit complicated to deploy shared
      eBPF maps or programs (programs f.e. for tail calls) among various
      processes.

      We've been brainstorming on how we could tackle this issue and various
      approches have been tried out so far, which can be read up further in
      the below reference.

      The architecture we eventually ended up with is a minimal file system
      that can hold map/prog objects. The file system is a per mount namespace
      singleton, and the default mount point is /sys/fs/bpf/. Any subsequent
      mounts within a given namespace will point to the same instance. The
      file system allows for creating a user-defined directory structure.
      The objects for maps/progs are created/fetched through bpf(2) with
      two new commands (BPF_OBJ_PIN/BPF_OBJ_GET). I.e. a bpf file descriptor
      along with a pathname is being passed to bpf(2) that in turn creates
      (we call it eBPF object pinning) the file system nodes. Only the pathname
      is being passed to bpf(2) for getting a new BPF file descriptor to an
      existing node. The user can use that to access maps and progs later on,
      through bpf(2). Removal of file system nodes is being managed through
      normal VFS functions such as unlink(2), etc. The file system code is
      kept to a very minimum and can be further extended later on.

      The next step I'm working on is to add dump eBPF map/prog commands
      to bpf(2), so that a specification from a given file descriptor can
      be retrieved. This can be used by things like CRIU but also applications
      can inspect the meta data after calling BPF_OBJ_GET.

      Big thanks also to Alexei and Hannes who significantly contributed
      in the design discussion that eventually let us end up with this
      architecture here.

      Reference: https://lkml.org/lkml/2015/10/15/925
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9d8afa90b789b07d414637ab557d169d6b2b84e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:08 2015 +0100

      bpf: consolidate bpf_prog_put{, _rcu} dismantle paths

      We currently have duplicated cleanup code in bpf_prog_put() and
      bpf_prog_put_rcu() cleanup paths. Back then we decided that it was
      not worth it to make it a common helper called by both, but with
      the recent addition of resource charging, we could have avoided
      the fix in commit ac00737f4e81 ("bpf: Need to call 
bpf_prog_uncharge_memlock
      from bpf_prog_put") if we would have had only a single, common path.
      We can simplify it further by assigning aux->prog only once during
      allocation time.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c210129760a010b555372ef74f4e1a46d4eb8a22
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:07 2015 +0100

      bpf: align and clean bpf_{map,prog}_get helpers

      Add a bpf_map_get() function that we're going to use later on and
      align/clean the remaining helpers a bit so that we have them a bit
      more consistent:

        - __bpf_map_get() and __bpf_prog_get() that both work on the fd
          struct, check whether the descriptor is eBPF and return the
          pointer to the map/prog stored in the private data.

          Also, we can return f.file->private_data directly, the function
          signature is enough of a documentation already.

        - bpf_map_get() and bpf_prog_get() that both work on u32 user fd,
          call their respective __bpf_map_get()/__bpf_prog_get() variants,
          and take a reference.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aa79781b65b9cf79807ade78f2703f5e9402c336
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:06 2015 +0100

      bpf: abstract anon_inode_getfd invocations

      Since we're going to use anon_inode_getfd() invocations in more than just
      the current places, make a helper function for both, so that we only need
      to pass a map/prog pointer to the helper itself in order to get a fd. The
      new helpers are called bpf_map_new_fd() and bpf_prog_new_fd().

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d6119baf0610f813eb9d9580eb4fd16de5b4ceb
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 2 09:03:11 2015 -0800

      net: fix percpu memory leaks

      This patch fixes following problems :

      1) percpu_counter_init() can return an error, therefore
        init_frag_mem_limit() must propagate this error so that
        inet_frags_init_net() can do the same up to its callers.

      2) If ip[46]_frags_ns_ctl_register() fail, we must unwind
         properly and free the percpu_counter.

      Without this fix, we leave freed object in percpu_counters
      global list (if CONFIG_HOTPLUG_CPU) leading to crashes.

      This bug was detected by KASAN and syzkaller tool
      (http://github.com/google/syzkaller)

      Fixes: 6d7b857d541e ("net: use lib/percpu_counter API for fragmentation 
mem accounting")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Cc: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fa677d2706d325d71dab91bf6e6512c05214e37
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 2 07:50:07 2015 -0800

      net: avoid NULL deref in inet_ctl_sock_destroy()

      Under low memory conditions, tcp_sk_init() and icmp_sk_init()
      can both iterate on all possible cpus and call inet_ctl_sock_destroy(),
      with eventual NULL pointer.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5062ecdb662bf3aed6dc975019c53ffcd3b01d1c
  Merge: e86328c d4a1a31
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 16:16:24 2015 -0800

      Merge tag 'regmap-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap

      Pull regmap updates from Mark Brown:
       "Quite a few new features for regmap this time, mostly expanding things
        around the edges of the existing functionality to cover more devices
        rather than thinsg with wide applicability:

         - Support for offload of the update_bits() operation to hardware
           where devices implement bit level access.
         - Support for a few extra operations that need scratch buffers on
           fast_io devices where we can't sleep.
         - Expanded the feature set of regmap_irq to cope with some extra
           register layouts.
         - Cleanups to the debugfs code"

      * tag 'regmap-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap:
        regmap: Allow installing custom reg_update_bits function
        regmap: debugfs: simplify regmap_reg_ranges_read_file() slightly
        regmap: debugfs: use memcpy instead of snprintf
        regmap: debugfs: use snprintf return value in 
regmap_reg_ranges_read_file()
        regmap: Add generic macro to define regmap_irq
        regmap: debugfs: Remove scratch buffer for register length calculation
        regmap: irq: add ack_invert flag for chips using cleared bits as ack
        regmap: irq: add support for chips who have separate unmask registers
        regmap: Allocate buffers with GFP_ATOMIC when fast_io == true

  commit c451113291c193d3bfbd0682011d2979d649010c
  Author: Simon Horman <horms+renesas@xxxxxxxxxxxx>
  Date:   Mon Nov 2 10:40:17 2015 +0900

      ravb: use pdev rather than ndev for error messages

      This corrects what appear to be typos, making the code consistent with
      itself, and allowing meaningful prefixes to be displayed with the errors 
in
      question.

      Before:
       (null): failed to initialize MDIO
       (null): Cannot allocate desc base address table (size 176 bytes)

      After:
      ravb e6800000.ethernet: failed to initialize MDIO
      ravb e6800000.ethernet: Cannot allocate desc base address table (size 176 
bytes)

      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec13ad1d705c9990d55ed8ab21946cef323d30c7
  Author: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 01:24:38 2015 +0100

      ipv6: fix crash on ICMPv6 redirects with prohibited/blackholed source

      There are other error values besides ip6_null_entry that can be returned 
by
      ip6_route_redirect(): fib6_rule_action() can also result in
      ip6_blk_hole_entry and ip6_prohibit_entry if such ip rules are installed.

      Only checking for ip6_null_entry in rt6_do_redirect() causes ip6_ins_rt()
      to be called with rt->rt6i_table == NULL in these cases, making the kernel
      crash.

      Signed-off-by: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e17f8a475fca81950fdddc08df428ed66cf441f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Nov 1 15:36:55 2015 -0800

      net: make skb_set_owner_w() more robust

      skb_set_owner_w() is called from various places that assume
      skb->sk always point to a full blown socket (as it changes
      sk->sk_wmem_alloc)

      We'd like to attach skb to request sockets, and in the future
      to timewait sockets as well. For these kind of pseudo sockets,
      we need to take a traditional refcount and use sock_edemux()
      as the destructor.

      It is now time to un-inline skb_set_owner_w(), being too big.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Bisected-by: Haiyang Zhang <haiyangz@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eca1e006cf6f6f66a1a90c055a8a6d393475c3f9
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Sun Nov 1 18:31:45 2015 +0200

      bridge: vlan: Use rcu_dereference instead of rtnl_dereference

      br_should_learn() is protected by RCU and not by RTNL, so use correct
      flavor of nbp_vlan_group().

      Fixes: 907b1e6e83ed ("bridge: vlan: use proper rcu for the vlgrp
      member")
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ab42d78e37a294ac7bc56901d563c642e03c4ae
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:22:53 2015 +0000

      ppp, slip: Validate VJ compression slot parameters completely

      Currently slhc_init() treats out-of-range values of rslots and tslots
      as equivalent to 0, except that if tslots is too large it will
      dereference a null pointer (CVE-2015-7799).

      Add a range-check at the top of the function and make it return an
      ERR_PTR() on error instead of NULL.  Change the callers accordingly.

      Compile-tested only.

      Reported-by: é?­æ°¸å?? <guoyonggang@xxxxxx>
      References: http://article.gmane.org/gmane.comp.security.oss.general/17908
      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0baa57d8dc32db78369d8b5176ef56c5e2e18ab3
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:21:24 2015 +0000

      isdn_ppp: Add checks for allocation failure in isdn_ppp_open()

      Compile-tested only.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70910791731b5956171e1bfcad707766b8e18fee
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Sun Nov 1 01:34:50 2015 +0100

      qmi_wwan: fix entry for HP lt4112 LTE/HSPA+ Gobi 4G Module

      The lt4112 is a HP branded Huawei me906e modem. Like other Huawei
      modems, it does not have a fixed interface to function mapping.
      Instead it uses a Huawei specific scheme: functions are mapped by
      subclass and protocol.

      However, the HP vendor ID is used for modems from many different
      manufacturers using different schemes, so we cannot apply a generic
      vendor rule like we do for the Huawei vendor ID.

      Replace the previous lt4112 entry pointing to an arbitrary interface
      number with a device specific subclass + protocol match.

      Reported-and-tested-by: Muri Nicanor <muri+libqmi@xxxxxxxxxx>
      Tested-by: Martin Hauke <mardnh@xxxxxx>
      Fixes: bb2bdeb83fb1 ("qmi_wwan: Add support for HP lt4112 LTE/HSPA+ Gobi 
4G Modem")
      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e86328c489d7ecdca99410a06a3f448caf7857bf
  Merge: bc9d8c2 0963670
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:59:12 2015 -0800

      Merge tag 'gpio-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio

      Pull GPIO updates from Linus Walleij:
       "Here is the bulk of GPIO changes for the v4.4 development cycle.

        The only changes hitting outside drivers/gpio are in the pin control
        subsystem and these seem to have settled nicely in linux-next.

        Development mistakes and catfights are nicely documented in the
        reverts as you can see.  The outcome of the ABI fight is that we're
        working on a chardev ABI for GPIO now, where hope to show results for
        the v4.5 kernel.

        Summary of changes:

        GPIO core:
         - Define and handle flags for open drain/open collector and open
           source/open emitter, also know as "single-ended" configurations.
         - Generic request/free operations that handle calling out to the
           (optional) pin control backend.
         - Some refactoring related to an ABI change that did not happen, yet
           provide useful.
         - Added a real-time compliance checklist.  Many GPIO chips have
           irqchips, and need to think this over with the RT patches going
           upstream.
         - Restructure, fix and clean up Kconfig menus a bit.

        New drivers:
         - New driver for AMD Promony.
         - New driver for ACCES 104-IDIO-16, a port-mapped I/O card,
           ISA-style.  Very retro.

        Subdriver changes:
         - OMAP changes to handle real time requirements.
         - Handle trigger types for edge and level IRQs on PL061 properly.  As
           this hardware is very common it needs to set a proper example for
           others to follow.
         - Some container_of() cleanups.
         - Delete the unused MSM driver in favor of the driver that is
           embedded inside the pin control driver.
         - Cleanup of the ath79 GPIO driver used by many, many OpenWRT router
           targets.
         - A consolidated IT87xx driver replacing the earlier very specific
           IT8761e driver.
         - Handle the TI TCA9539 in the PCA953x driver.  Also handle ACPI
           devices in this subdriver.
         - Drop xilinx arch dependencies as these FPGAs seem to profilate over
           a few different architectures.  MIPS and ARM come to mind"

      * tag 'gpio-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio: (57 commits)
        gpio: fix up SPI submenu
        gpio: drop surplus I2C dependencies
        gpio: drop surplus X86 dependencies
        gpio: dt-bindings: document the official use of "ngpios"
        gpio: MAINTAINERS: Add an entry for the ATH79 GPIO driver
        gpio / ACPI: Allow shared GPIO event to be read via operation region
        gpio: group port-mapped I/O drivers in a menu
        gpio: Add ACCES 104-IDIO-16 driver maintainer entry
        gpio: zynq: Document interrupt-controller DT binding
        gpio: xilinx: Drop architecture dependencies
        gpio: generic: Revert to old error handling in bgpio_map
        gpio: add a real time compliance notes
        Revert "gpio: add a real time compliance checklist"
        gpio: Add GPIO support for the ACCES 104-IDIO-16
        gpio: driver for AMD Promontory
        gpio: xlp: Convert to use gpiolib irqchip helpers
        gpio: add a real time compliance checklist
        gpio/xilinx: enable for MIPS
        gpiolib: Add and use OF_GPIO_SINGLE_ENDED flag
        gpiolib: Split GPIO flags parsing and GPIO configuration
        ...

  commit 44f49dd8b5a606870a1f21101522a0f9c4414784
  Author: Ani Sinha <ani@xxxxxxxxxx>
  Date:   Fri Oct 30 16:54:31 2015 -0700

      ipmr: fix possible race resulting from improper usage of 
IP_INC_STATS_BH() in preemptible context.

      Fixes the following kernel BUG :

      BUG: using __this_cpu_add() in preemptible [00000000] code: bash/2758
      caller is __this_cpu_preempt_check+0x13/0x15
      CPU: 0 PID: 2758 Comm: bash Tainted: P           O   3.18.19 #2
       ffffffff8170eaca ffff880110d1b788 ffffffff81482b2a 0000000000000000
       0000000000000000 ffff880110d1b7b8 ffffffff812010ae ffff880007cab800
       ffff88001a060800 ffff88013a899108 ffff880108b84240 ffff880110d1b7c8
      Call Trace:
      [<ffffffff81482b2a>] dump_stack+0x52/0x80
      [<ffffffff812010ae>] check_preemption_disabled+0xce/0xe1
      [<ffffffff812010d4>] __this_cpu_preempt_check+0x13/0x15
      [<ffffffff81419d60>] ipmr_queue_xmit+0x647/0x70c
      [<ffffffff8141a154>] ip_mr_forward+0x32f/0x34e
      [<ffffffff8141af76>] ip_mroute_setsockopt+0xe03/0x108c
      [<ffffffff810553fc>] ? get_parent_ip+0x11/0x42
      [<ffffffff810e6974>] ? pollwake+0x4d/0x51
      [<ffffffff81058ac0>] ? default_wake_function+0x0/0xf
      [<ffffffff810553fc>] ? get_parent_ip+0x11/0x42
      [<ffffffff810613d9>] ? __wake_up_common+0x45/0x77
      [<ffffffff81486ea9>] ? _raw_spin_unlock_irqrestore+0x1d/0x32
      [<ffffffff810618bc>] ? __wake_up_sync_key+0x4a/0x53
      [<ffffffff8139a519>] ? sock_def_readable+0x71/0x75
      [<ffffffff813dd226>] do_ip_setsockopt+0x9d/0xb55
      [<ffffffff81429818>] ? unix_seqpacket_sendmsg+0x3f/0x41
      [<ffffffff813963fe>] ? sock_sendmsg+0x6d/0x86
      [<ffffffff813959d4>] ? sockfd_lookup_light+0x12/0x5d
      [<ffffffff8139650a>] ? SyS_sendto+0xf3/0x11b
      [<ffffffff810d5738>] ? new_sync_read+0x82/0xaa
      [<ffffffff813ddd19>] compat_ip_setsockopt+0x3b/0x99
      [<ffffffff813fb24a>] compat_raw_setsockopt+0x11/0x32
      [<ffffffff81399052>] compat_sock_common_setsockopt+0x18/0x1f
      [<ffffffff813c4d05>] compat_SyS_setsockopt+0x1a9/0x1cf
      [<ffffffff813c4149>] compat_SyS_socketcall+0x180/0x1e3
      [<ffffffff81488ea1>] cstar_dispatch+0x7/0x1e

      Signed-off-by: Ani Sinha <ani@xxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3e8b858f375595421817a5475611a3e63bb4a43
  Merge: 615a100 b61ed8f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:56:12 2015 -0500

      Merge branch 'sh_eth-fixes'

      Sergei Shtylyov says:

      ====================
      sh_eth: fix bugs in sh_eth_ring_init()

         Here's a set of 2 patches against DaveM's 'net.git' repo which fix 
couple of
      bugs in the sh_eth_ring_init() function.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b61ed8fdd845340ee31e8a97403b6101ccf4e4a2
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 02:06:29 2015 +0300

      sh_eth: fix WARNING in dma_common_free_remap()

      Iff the first dma_alloc_coherent()  call fails in sh_eth_ring_init(), the
      following  is printed to the kernel console:

      WARNING: CPU: 0 PID: 1 at drivers/base/dma-mapping.c:334 
dma_common_free_remap+0x48/0x6c()
      trying to free invalid coherent area:   (null)
      Modules linked in:
      CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.3.0-rc7-dirty #969
      Hardware name: Generic R8A7791 (Flattened Device Tree)
      Backtrace:
      [<c0013820>] (dump_backtrace) from [<c00139bc>] (show_stack+0x18/0x1c)
       r6:c0662856 r5:00000009 r4:00000000 r3:00204140
      [<c00139a4>] (show_stack) from [<c0227510>] (dump_stack+0x74/0x90)
      [<c022749c>] (dump_stack) from [<c0026ef4>] 
(warn_slowpath_common+0x8c/0xb8)
       r4:ee84dce0 r3:c0712774
      [<c0026e68>] (warn_slowpath_common) from [<c0026fc4>] 
(warn_slowpath_fmt+0x38/0x40)
       r8:ee7f8000 r7:c0734520 r6:00001000 r5:20000008 r4:00000000
      [<c0026f90>] (warn_slowpath_fmt) from [<c02df404>] 
(dma_common_free_remap+0x48/0x6c)
       r3:00000000 r2:c0662871
      [<c02df3bc>] (dma_common_free_remap) from [<c001b9fc>] 
(__arm_dma_free+0xb8/0xd4)
      r6:00000001 r5:00000000 r4:00001000 r3:ee8c5584
      [<c001b944>] (__arm_dma_free) from [<c001ba68>] (arm_dma_free+0x24/0x2c)
       r10:0000016b r8:00000000 r7:ee9bc830 r6:00000000 r5:00000400 r4:ee9bc800
      [<c001ba44>] (arm_dma_free) from [<c032ebf0>] 
(sh_eth_ring_init+0x110/0x138)
      [<c032eae0>] (sh_eth_ring_init) from [<c033179c>] (sh_eth_open+0x94/0x1f4)
       r6:00000000 r5:ee9bcd18 r4:ee9bc800
      [<c0331708>] (sh_eth_open) from [<c041bf7c>] (__dev_open+0x84/0x104)
       r6:c0565c50 r5:00000000 r4:ee9bc800
      [<c041bef8>] (__dev_open) from [<c041c208>] 
(__dev_change_flags+0x94/0x13c)
       r7:00001002 r6:00000001 r5:00001003 r4:ee9bc800
      [<c041c174>] (__dev_change_flags) from [<c041c2e8>] 
(dev_change_flags+0x20/0x50)
       r7:c072c8a0 r6:00000138 r5:00001002 r4:ee9bc800
      [<c041c2c8>] (dev_change_flags) from [<c06e8d4c>] 
(ip_auto_config+0x174/0xf7c)
       r8:00001002 r7:c072c8a0 r6:c0700040 r5:00000001 r4:ee9bc800 r3:00000101
      [<c06e8bd8>] (ip_auto_config) from [<c000a810>] 
(do_one_initcall+0x100/0x1c8)
       r10:c06f883c r9:00000000 r8:c06e8bd8 r7:c0734000 r6:c070e918 r5:c070e918
       r4:ee083640
      [<c000a710>] (do_one_initcall) from [<c06c9ddc>] 
(kernel_init_freeable+0x11c/0x1ec)
       r10:c06f883c r9:00000000 r8:00000099 r7:c0734000 r6:c070372c r5:c06f8834
       r4:00000007
      [<c06c9cc0>] (kernel_init_freeable) from [<c0514d78>] 
(kernel_init+0x14/0xec)
       r10:00000000 r8:00000000 r7:00000000 r6:00000000 r5:c0514d64 r4:c0734000
      [<c0514d64>] (kernel_init) from [<c0010458>] (ret_from_fork+0x14/0x3c)
       r4:00000000 r3:ee84c000

      This is because the code jumps to a wrong label and so tries to free yet
      unallocated coherent memory.  Fix the *goto* in question.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c94e8567d7c7c9d619584da857e9f5b28f283ea
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 02:05:56 2015 +0300

      sh_eth: fix uninitialized arrays in sh_eth_ring_init()

      sh_eth_ring_free()  called in the sh_eth_ring_init()'s error path expects
      the arrays pointed  to  by 'sh_eth_private::[rt]x_skbuff' to be 
initialized
      with NULLs but they are allocated with just kmalloc_array() and so are 
left
      filled with random data. Use kcalloc() instead.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b9b377136eb83cace5667cb6e8d53da771df6faa
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 19:39:48 2015 -0400

      net: dsa: mv88e6xxx: lookup switch name

      All the mv88e6xxx drivers use the exact same code in their probe
      function to lookup the switch name given its ID. Thus introduce a
      mv88e6xxx_switch_id structure and a mv88e6xxx_lookup_name function in
      the common mv88e6xxx code.

      In the meantime make __mv88e6xxx_reg_{read,write} static since we do not
      need to expose these low-level r/w routines anymore.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3996a4ffb01f57f82abe6c7e60ac9048dd0c31df
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:56:45 2015 -0400

      net: dsa: mv88e6xxx: assert SMI lock

      It's easy to forget to lock the smi_mutex before calling the low-level
      _mv88e6xxx_reg_{read,write}, so add a assert_smi_lock function in them.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac00881f922106b45e934dc6988fa9c1ec542d71
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Fri Oct 30 15:16:26 2015 -0700

      bpf: convert hashtab lock to raw lock

      When running bpf samples on rt kernel, it reports the below warning:

      BUG: sleeping function called from invalid context at 
kernel/locking/rtmutex.c:917
      in_atomic(): 1, irqs_disabled(): 128, pid: 477, name: ping
      Preemption disabled at:[<ffff80000017db58>] kprobe_perf_func+0x30/0x228

      CPU: 3 PID: 477 Comm: ping Not tainted 4.1.10-rt8 #4
      Hardware name: Freescale Layerscape 2085a RDB Board (DT)
      Call trace:
      [<ffff80000008a5b0>] dump_backtrace+0x0/0x128
      [<ffff80000008a6f8>] show_stack+0x20/0x30
      [<ffff8000007da90c>] dump_stack+0x7c/0xa0
      [<ffff8000000e4830>] ___might_sleep+0x188/0x1a0
      [<ffff8000007e2200>] rt_spin_lock+0x28/0x40
      [<ffff80000018bf9c>] htab_map_update_elem+0x124/0x320
      [<ffff80000018c718>] bpf_map_update_elem+0x40/0x58
      [<ffff800000187658>] __bpf_prog_run+0xd48/0x1640
      [<ffff80000017ca6c>] trace_call_bpf+0x8c/0x100
      [<ffff80000017db58>] kprobe_perf_func+0x30/0x228
      [<ffff80000017dd84>] kprobe_dispatcher+0x34/0x58
      [<ffff8000007e399c>] kprobe_handler+0x114/0x250
      [<ffff8000007e3bf4>] kprobe_breakpoint_handler+0x1c/0x30
      [<ffff800000085b80>] brk_handler+0x88/0x98
      [<ffff8000000822f0>] do_debug_exception+0x50/0xb8
      Exception stack(0xffff808349687460 to 0xffff808349687580)
      7460: 4ca2b600 ffff8083 4a3a7000 ffff8083 49687620 ffff8083 0069c5f8 
ffff8000
      7480: 00000001 00000000 007e0628 ffff8000 496874b0 ffff8083 007e1de8 
ffff8000
      74a0: 496874d0 ffff8083 0008e04c ffff8000 00000001 00000000 4ca2b600 
ffff8083
      74c0: 00ba2e80 ffff8000 49687528 ffff8083 49687510 ffff8083 000e5c70 
ffff8000
      74e0: 00c22348 ffff8000 00000000 ffff8083 49687510 ffff8083 000e5c74 
ffff8000
      7500: 4ca2b600 ffff8083 49401800 ffff8083 00000001 00000000 00000000 
00000000
      7520: 496874d0 ffff8083 00000000 00000000 00000000 00000000 00000000 
00000000
      7540: 2f2e2d2c 33323130 00000000 00000000 4c944500 ffff8083 00000000 
00000000
      7560: 00000000 00000000 008751e0 ffff8000 00000001 00000000 124e2d1d 
00107b77

      Convert hashtab lock to raw lock to avoid such warning.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21086b990ba51d12670eba342eec76d4bba55d33
  Merge: ce10500 ddd611d
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:40:11 2015 -0500

      Merge branch 'bridge_vlan_fixes'

      Nikolay Aleksandrov says:

      ====================
      bridge: vlan: failure path and comment fixes

      This is a set from Ido which takes care of one failure path error in
      nbp_vlan_init (patch 1) and a few comment errors (patch 2).
      I must admit I didn't expect the port init continues after a vlan init
      failure but should've checked to make sure. Thanks to Ido for catching
      these!
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ddd611d3fffb90b967e50f5aa6d45d55eb0e1d3f
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 30 17:46:20 2015 +0100

      bridge: vlan: Use correct flag name in comment

      The flag used to indicate if a VLAN should be used for filtering - as
      opposed to context only - on the bridge itself (e.g. br0) is called
      'brentry' and not 'brvlan'.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 07bc588fc1087929e8e6dfe95ffcee1cb69a240f
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 30 17:46:19 2015 +0100

      bridge: vlan: Prevent possible use-after-free

      When adding a port to a bridge we initialize VLAN filtering on it. We do
      not bail out in case an error occurred in nbp_vlan_init, as it can be
      used as a non VLAN filtering bridge.

      However, if VLAN filtering is required and an error occurred in
      nbp_vlan_init, we should set vlgrp to NULL, so that VLAN filtering
      functions (e.g. br_vlan_find, br_get_pvid) will know the struct is
      invalid and will not try to access it.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce1050089c969b96c797118f9cb0cf5a421ddc69
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 30 09:46:12 2015 -0700

      tcp/dccp: fix ireq->pktopts race

      IPv6 request sockets store a pointer to skb containing the SYN packet
      to be able to transfer it to full blown socket when 3WHS is done
      (ireq->pktopts -> np->pktoptions)

      As explained in commit 5e0724d027f0 ("tcp/dccp: fix hashdance race for
      passive sessions"), we must transfer the skb only if we won the
      hashdance race, if multiple cpus receive the 'ack' packet completing
      3WHS at the same time.

      Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b5654349e4728021b9301e42ae16fa11f6832c8
  Author: santosh.shilimkar@xxxxxxxxxx <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Oct 30 08:49:10 2015 -0700

      RDS: convert bind hash table to re-sizable hashtable

      To further improve the RDS connection scalabilty on massive systems
      where number of sockets grows into tens of thousands  of sockets, there
      is a need of larger bind hashtable. Pre-allocated 8K or 16K table is
      not very flexible in terms of memory utilisation. The rhashtable
      infrastructure gives us the flexibility to grow the hashtbable based
      on use and also comes up with inbuilt efficient bucket(chain) handling.

      Reviewed-by: David Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3ffaefa1bbcfba1b4ef985fd53406f31b98f277
  Author: Saurabh Sengar <saurabh.truth@xxxxxxxxx>
  Date:   Fri Oct 30 19:46:44 2015 +0530

      net: rds: changing the return type from int to void

      as result of function rds_iw_flush_mr_pool is nowhere checked,
      changing its return type from int to void.
      also removing the unused variable rc as there is nothing to return

      Signed-off-by: Saurabh Sengar <saurabh.truth@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 615a1003c6502f0d1812fd2dbe08e86b1c3f5db9
  Merge: e6dbe1e 562b103
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:33:38 2015 -0500

      Merge tag 'linux-can-fixes-for-4.3-20151030' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can

      Marc Kleine-Budde says:

      ====================
      pull-request: can 2015-10-30

      this is a pull request for the upcoming v4.3 release.

      Marek Vasut provides a patch to use the correct attrlen in the nla_put() 
in the
      can_fill_info() function.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bc9d8c20ffb47e64a41a4716a06d37cdf88fcc42
  Merge: 9ff3ca5 d99c805
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:30:39 2015 -0800

      Merge tag 'pinctrl-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl

      Pull pin control updates from Linus Walleij:
       "This is the big bulk of pin control changes for the v4.4 kernel
        development cycle.  Development pace is high in pin control again this
        merge window.  28 contributors, 83 patches.

        It hits a few sites outside the pin control subsystem:

         - Device tree bindings in Documentation (as usual)
         - MAINTAINERS
         - drivers/base/* for the "init" state handling by Doug Anderson.
           This has been ACKed by Greg.
         - drivers/usb/renesas_usbhs/rcar2.c, for a dependent Renesas change
           in the USB subsystem.  This has been ACKed by both Greg and Felipe.
         - arch/arm/boot/dts/sama5d2.dtsi - this should ideally have gone
           through the ARM SoC tree but ended up here.

        This time I am using Geert Uytterhoeven as submaintainer for SH PFC
        since the are three-four people working in parallel with new Renesas
        ASICs.

        Summary of changes:

        Infrastructure:

         - Doug Anderson wrote a patch adding an "init" state different from
           the "default" state for pin control state handling in the core
           framework.  This is applied before the driver's probe() call if
           defined and takes precedence over "default".  If both are defined,
           "init" will be applied *before* probe() and "default" will be
           applied *after* probe().

        Significant subdriver improvements:

         - SH PFC is switched to getting GPIO ranges from the device tree
           ranges property on DT platforms.
         - Got rid of CONFIG_ARCH_SHMOBILE_LEGACY, we are all modernized.
         - Got rid of SH PFC hardcoded IRQ numbers.
         - Allwinner sunxi external interrupt through the "r" controller.
         - Moved the Cygnus driver to use DT-provided GPIO ranges.

        New drivers:

         - Atmel PIO4 pin controller for the SAMA4D2 family

        New subdrivers:

         - Rockchip RK3036 subdriver
         - Renesas SH PFC R8A7795 subdriver
         - Allwinner sunxi A83T PIO subdriver
         - Freescale i.MX7d iomux lpsr subdriver
         - Marvell Berlin BG4CT subdriver
         - SiRF Atlas 7 step B SoC subdriver
         - Intel Broxton SoC subdriver

        Apart from this, the usual slew if syntactic and semantic fixes"

      * tag 'pinctrl-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl: (81 commits)
        pinctrl: pinconf: remove needless loop
        pinctrl: uniphier: guard uniphier directory with CONFIG_PINCTRL_UNIPHIER
        pinctrl: zynq: fix UTF-8 errors
        pinctrl: zynq: Initialize early
        pinctrl: at91: add missing of_node_put
        pinctrl: tegra-xusb: Correct lane mux options
        pinctrl: intel: Add Intel Broxton pin controller support
        pinctrl: intel: Allow requesting pins which are in ACPI mode as GPIOs
        pinctrl: intel: Add support for multiple GPIO chips sharing the 
interrupt
        drivers/pinctrl: Add the concept of an "init" state
        pinctrl: uniphier: set input-enable before pin-muxing
        pinctrl: cygnus: Add new compatible string for gpio controller driver
        pinctrl: cygnus: Remove GPIO to Pinctrl pin mapping from driver
        pinctrl: cygnus: Optional DT property to support pin mappings
        pinctrl: sunxi: Add irq pinmuxing to sun6i "r" pincontroller
        pinctrl: sunxi: Fix irq_of_xlate for the r_pio pinctrl block
        pinctrl: sh-pfc: Remove obsolete r8a7778 platform_device_id entry
        pinctrl: sh-pfc: Remove obsolete r8a7779 platform_device_id entry
        pinctrl: sh-pfc: Stop including <linux/platform_data/gpio-rcar.h>
        usb: renesas_usbhs: Remove unneeded #include 
<linux/platform_data/gpio-rcar.h>
        ...

  commit 64cf370887ac497e74b2e4224b662bfd1d8db41a
  Merge: 322cf7e 07f56c6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:28:57 2015 -0500

      Merge branch 'encx24j600-fixes'

      Javier Martinez Canillas says:

      ====================
      net: encx24j600: Fix SPI driver module autoload

      Recently I've been trying to fix module autoloading for all SPI drivers 
and
      found that the encx24j600 driver does not fill module alias information 
due
      missing a MODULE_DEVICE_TABLE() so module autload won't work and the 
driver
      Kconfig symbol is tristate which means the driver can be built as a 
module.

      But also the SPI id table is not correctly defined so this series fixes 
both
      issues.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 07f56c616d06b966c0a63d16172935b257a6a8d4
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 13:49:18 2015 +0100

      net: encx24j600: Export missing SPI module alias information

      The driver Kconfig symbol is tristate which means that it can be built as
      a module but the module alias information is not added to the module info
      so module autoload won't work since user-space won't have the information.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d0cb48cd19ce1e249cd350aa67fbf63560292266
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 13:49:17 2015 +0100

      net: encx24j600: Fix SPI id table definition

      A driver's SPI id table is expected to be an array of struct spi_device_id
      that ends with a zero-initialized sentinel entry. But this driver defines
      the table as a single struct spi_device_id and sets .id_table to a pointer
      to this struct.

      But spi_match_id() has a loop that iterates while the struct spi_device_id
      .name[0] is not NULL, so not having a sentinel can cause a NULL pointer
      deference error.

      This patch defines the SPI id table correctly as all other SPI drivers do.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9ff3ca58b0f99475f269cd6faf4ab1b194243b3f
  Merge: 17a1359 990995b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:14:50 2015 -0800

      Merge tag 'edac_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bp/bp

      Pull EDAC updates from Borislav Petkov:
       "A bunch of fixes all over the place and some hw enablement this time.

         - Convert EDAC to debugfs wrappers and make drivers use those
           (Borislav Petkov)

         - L3 and SoC support for xgene_edac (Loc Ho)

         - AMD F15h, models 0x60-6f support to amd64_edac (Aravind
           Gopalakrishnan)

         - Fixes and cleanups all over the place"

      * tag 'edac_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bp/bp: (22 commits)
        EDAC: Fix PAGES_TO_MiB macro misuse
        EDAC, altera: SoCFPGA EDAC should not look for ECC_CORR_EN
        EDAC: Use edac_debugfs_remove_recursive()
        EDAC, ppc4xx_edac: Fix module autoload for OF platform driver
        Documentation/EDAC: Add reference documents section for amd64_edac
        EDAC, amd64_edac: Update copyright and remove changelog
        EDAC, amd64_edac: Extend scrub rate support to F15hM60h
        EDAC: Don't allow empty DIMM labels
        EDAC: Fix sysfs dimm_label store operation
        EDAC: Fix sysfs dimm_label show operation
        arm64, EDAC: Add L3/SoC DT subnodes to the APM X-Gene SoC EDAC node
        EDAC, xgene: Add SoC support
        EDAC, xgene: Fix possible sprintf() overflow issue
        EDAC, xgene: Add L3 support
        EDAC, Documentation: Update X-Gene EDAC binding for L3/SoC subnodes
        EDAC, sb_edac: Fix TAD presence check for sbridge_mci_bind_devs()
        EDAC, ghes_edac: Remove redundant memory_type array
        EDAC, xgene: Convert to debugfs wrappers
        EDAC, i5100: Convert to debugfs wrappers
        EDAC, altera: Convert to debugfs wrappers
        ...

  commit 322cf7e3a4e89236ae386cb5668ae0d787d21136
  Author: Govindarajulu Varadarajan <_govind@xxxxxxx>
  Date:   Fri Oct 30 16:52:51 2015 +0530

      enic: assign affinity hint to interrupts

      The affinity hint is used by the user space daemon, irqbalancer, to
      indicate a preferred CPU mask for irqs. This patch sets the irq affinity
      hint to local numa core first, when exausted we try non-local numa cores.

      Also set tx xps cpus mask bassed on affinity hint.

      v2: remove the global affinity policy.

      Signed-off-by: Govindarajulu Varadarajan <_govind@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 17a1359034e1fb5cfe9e5196a8ab5153acfacdc6
  Merge: 66b0199 7cc8d58
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 11:40:22 2015 -0800

      Merge tag 'mmc-v4.4' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC updates from Ulf Hansson:
       "MMC core:
         - Add new API to set VCCQ voltage - mmc_regulator_set_vqmmc()
         - Add new ioctl to allow userspace to send multi commands
         - Wait for card busy signalling before starting SDIO requests
         - Remove MMC_CLKGATE
         - Enable tuning for DDR50 mode
         - Some code clean-up/improvements to mmc pwrseq
         - Use highest priority for eMMC restart handler
         - Add DT bindings for eMMC hardware reset support
         - Extend the mmc_send_tuning() API
         - Improve ios show for debugfs
         - A couple of code optimizations

        MMC host:
         - Some generic OF improvements
         - Various code clean-ups
         - sirf: Add support for DDR50
         - sunxi: Add support for card busy detection
         - mediatek: Use MMC_CAP_RUNTIME_RESUME
         - mediatek: Add support for eMMC HW-reset
         - mediatek: Add support for HS400
         - dw_mmc: Convert to use the new mmc_regulator_set_vqmmc() API
         - dw_mmc: Add external DMA interface support
         - dw_mmc: Some various improvements
         - dw_mmc-rockchip: MMC tuning with the clock phase framework
         - sdhci: Properly clear IRQs during resume
         - sdhci: Enable tuning for DDR50 mode
         - sdhci-of-esdhc: Use IRQ mode for card detection
         - sdhci-of-esdhc: Support both BE and LE host controller
         - sdhci-pci: Build o2micro support in the same module
         - sdhci-pci: Support for new Intel host controllers
         - sdhci-acpi: Support for new Intel host controllers"

      * tag 'mmc-v4.4' of git://git.linaro.org/people/ulf.hansson/mmc: (73 
commits)
        mmc: dw_mmc: fix the wrong setting for UHS-DDR50 mode
        mmc: dw_mmc: fix the CardThreshold boundary at CardThrCtl register
        mmc: dw_mmc: NULL dereference in error message
        mmc: pwrseq: Use highest priority for eMMC restart handler
        mmc: mediatek: add HS400 support
        mmc: mmc: extend the mmc_send_tuning()
        mmc: mediatek: add implement of ops->hw_reset()
        mmc: mediatek: fix got GPD checksum error interrupt when data transfer
        mmc: mediatek: change the argument "ddr" to "timing"
        mmc: mediatek: make cmd_ints_mask to const
        mmc: dt-bindings: update Mediatek MMC bindings
        mmc: core: Add DT bindings for eMMC hardware reset support
        mmc: omap_hsmmc: Enable omap_hsmmc for Keystone 2
        mmc: sdhci-acpi: Add more ACPI HIDs for Intel controllers
        mmc: sdhci-pci: Add more PCI IDs for Intel controllers
        arm: lpc18xx_defconfig: remove CONFIG_MMC_DW_IDMAC
        arm: hisi_defconfig: remove CONFIG_MMC_DW_IDMAC
        arm: exynos_defconfig: remove CONFIG_MMC_DW_IDMAC
        arc: axs10x_defconfig: remove CONFIG_MMC_DW_IDMAC
        mips: pistachio_defconfig: remove CONFIG_MMC_DW_IDMAC
        ...

  commit 9920e48b830a0f4ec06bcbf0ec3147c88ae72bac
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Thu Oct 29 22:20:40 2015 +0100

      ipv4: use l4 hash for locally generated multipath flows

      This patch changes how the multipath hash is computed for locally
      generated flows: now the hash comprises l4 information.

      This allows better utilization of the available paths when the existing
      flows have the same source IP and the same destination IP: with l3 hash,
      even when multiple connections are in place simultaneously, a single path
      will be used, while with l4 hash we can use all the available paths.

      v2 changes:
      - use get_hash_from_flowi4() instead of implementing just another l4 hash
        function

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 66b019967845a5af58802fd9af77f2317e5298a1
  Merge: a5ad88c 3b5ea47
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 11:32:24 2015 -0800

      Merge tag 'hwmon-for-linus-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging

      Pull hwmon updates from Guenter Roeck:
       "New driver for MAX31790, added support for TMP75C, as well as cleanups
        and minor improvements in various drivers"

      * tag 'hwmon-for-linus-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:
        hwmon: (fam15h_power) Add max compute unit accumulated power
        hwmon: (fam15h_power) Enable power1_input on AMD Carrizo
        hwmon: (fam15h_power) Refactor attributes for dynamically added
        hwmon: (ina2xx) remove no longer used variable 'kind'
        hwmon: (nct6775) Introduce separate temperature labels for NCT6792 and 
NCT6793
        hwmon: (nct6775) NCT6791D and NCT6792D have an additional temperature 
source
        hwmon: (ina2xx) give precedence to DT over checking for platform data.
        hwmon: (ina2xx) convert driver to using regmap
        hwmon: (coretemp) Increase limit of maximum core ID from 32 to 128.
        hwmon: (lm75) Add support for TMP75C
        hwmon: (ibmpowernv) Add OF compatibility table entry
        hwmon: (abx500) drop the use of IRQF_NO_SUSPEND
        hwmon: (max31790) Fix dereference of ERR_PTR
        hwmon: Driver for Maxim MAX31790

  commit 4247896f4b8bdbe2c9a03c2f713b636e94eab210
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Oct 25 15:50:59 2015 -0700

      cris: Drop reference to get_cmos_time()

      Function get_cmos_time() was removed with commit 657926a83df9 ("cris:
      time: Cleanup of persistent clock stuff"). The remaining reference to
      it may cause the following build error.

      arch/cris/kernel/built-in.o:(___ksymtab+get_cmos_time+0x0):
        undefined reference to `get_cmos_time'
      Makefile:946: recipe for target 'vmlinux' failed

      Fixes: 657926a83df9 ("cris: time: Cleanup of persistent clock stuff")
      Cc: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
      Cc: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit e301a08be4e4ad349b6195562197950d74c86e8a
  Author: Jesper Nilsson <jespern@xxxxxxxx>
  Date:   Fri Oct 2 11:22:55 2015 +0200

      CRIS: Drop code related to obsolete or unused kconfigs

      Drop all code related to Kconfigs that don't exist.
      Fix one Kconfig where it was actually typo:ed (ETRAX_KGB_PORT2)
      Drop content related to CRIS v32 SoCs from etraxgpio.h headerfile,
      all use of GPIO for both ETRAX FS and ARTPEC-3 should now be through
      standard gpiolib instead.

      Signed-off-by: Jesper Nilsson <jesper.nilsson@xxxxxxxx>

  commit 9f4137fa2cf20bd1ffb1fcb2711c3c347cc86fea
  Author: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
  Date:   Fri Jul 17 17:31:26 2015 +0800

      cris: time: Cleanup of persistent clock stuff

      - Remove update_persistent_clock(), as it does nothing now.
      - Remove read_persistent_clock(), let it fall back to the weak version.

      Cc: Mikael Starvik <starvik@xxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
      Acked-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit fad5a06b0cfd9a65c71d09c70520d0cf67e0c577
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:17:25 2015 +0300

      cris: re-use helpers to dump data in hex format

      There are native helpers such as print_hex_byte() and %*ph specifier to 
dump
      data in hex format. Re-use them instead of a custom approach.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit ab28e96fd1cf1db1579854931890e5613efc5021
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:24 2015 +0200

      CRIS v32: remove old GPIO and LEDs code

      Since we now have a gpiolib driver, remove this code:

      The gpio-etraxfs driver (along with things like gpio-keys-polled for
      polling support) replaces the GIO driver implementations in mach-a3 and
      mach-fs.  The various generic external chip drivers replace the "virtual
      gpio" parts.

      The generic gpio-leds driver replaces the LED handling.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 79b863c68eba8f7aa5b76c44db3b1df8412c977e
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:23 2015 +0200

      CRIS v32: remove I2C bitbanging driver

      Now that we have a gpiolib GPIO driver, the generic i2c-gpio driver
      provides this functionality.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 25624b98509f6868829a093392bb6437bcbd7beb
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:22 2015 +0200

      CRIS v32: add ARTPEC-3 and P1343 device trees

      Add a device tree for the Axis P1343 with the ARTPEC-3 SoC and on-board
      LEDs and RTC.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit a95b3ba2c322c3c373d34988d6928311b1b447a1
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:21 2015 +0200

      CRIS v32: dev88: add GPIO, LEDs, RTC, temp sensor

      Add the GPIO driver to the device tree and, using it, support for the
      LEDs and the RTC chip (via I2C-GPIO), as well as the temperature sensor
      (via SPI-GPIO).

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit d4dde7d21c4e243744d574ae38e2971be6a7a3a7
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:20 2015 +0200

      CRIS: add dt-bindings symlink

      Add a dt-bindings symlink to get DT include files, as on other
      architectures.  See c58299a ("kbuild: create an "include chroot" for DT
      bindings") for the details.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit df90c338087fdec88727a025a8d6400ecb7fe4bd
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:19 2015 +0200

      CRIS v32: increase NR_IRQS

      Increase NR_IQRS so we can fit in GPIO interrupts.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit c33fe4444395a6972b30cb91676d04af2a3dc1a5
  Author: Chen Gang <xili_gchen_5257@xxxxxxxxxxx>
  Date:   Thu Aug 6 00:34:53 2015 +0200

      cris: arch-v10: kgdb: Add '__used' for static variable is_dyn_brkp

      Within one C file, current gcc can optimize the global static variables
      according to the C code, but it will skip assembly code -- it will pass
      them to gas directly.

      if the static variable is used between C code and assembly code in one C
      file (e.g. is_dyn_brkp in kgdb.c), it needs '__used' to let gcc know it
      should be still used, or gcc may remove it for optimization.

      The related error in this case:

          LD      init/built-in.o
        arch/cris/arch-v10/kernel/built-in.o: In function 
`kgdb_handle_breakpoint':
        (.text+0x2aca): undefined reference to `is_dyn_brkp'
        arch/cris/arch-v10/kernel/built-in.o: In function `is_static':
        kgdb.c:(.text+0x2ada): undefined reference to `is_dyn_brkp'

      Signed-off-by: Chen Gang <gang.chen.5i5j@xxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 8f40dcebefd4a9e8fa24d2ac5e3fd5e410eea58d
  Author: Chen Gang <xili_gchen_5257@xxxxxxxxxxx>
  Date:   Sat Jul 11 05:47:24 2015 +0800

      cris: arch-v10: kgdb: Use BAR instead of DTP0 for register P12

      For arch-v10, there is no DTP0 register, and at present, assembler know
      BAR, so use BAR instead of DTP0, the related error (with allmodconfig):

          CC      arch/cris/arch-v10/kernel/kgdb.o
        {standard input}: Assembler messages:
        {standard input}:6: Error: Illegal operands
        {standard input}:6: Error: Illegal operands

      Signed-off-by: Chen Gang <gang.chen.5i5j@xxxxxxxxx>
      Acked-by: Hans-Peter Nilsson <hp@xxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 4d0d39758d3e10a31e7f146d56760a92396feb85
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 14:42:29 2015 +0300

      cris: kgdb: use native hex2bin

      There are kernel native helpers to convert hex ascii to the binary format:
      hex_to_bin() and hex2bin(). Thus, no need to reimplement them customly.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Cc: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit f8f8bdc48851da979c6e0e4808b6031122e4af47
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Tue Oct 27 11:12:51 2015 +0900

      arm64/efi: fix libstub build under CONFIG_MODVERSIONS

      Now that we strictly forbid absolute relocations in libstub code,
      make sure that we don't emit any when CONFIG_MODVERSIONS is enabled,
      by stripping the kcrctab sections from the object file. This fixes
      a build problem under CONFIG_MODVERSIONS=y.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit a5ad88ce8c7fae7ddc72ee49a11a75aa837788e0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 17:09:15 2015 -0800

      mm: get rid of 'vmalloc_info' from /proc/meminfo

      It turns out that at least some versions of glibc end up reading
      /proc/meminfo at every single startup, because glibc wants to know the
      amount of memory the machine has.  And while that's arguably insane,
      it's just how things are.

      And it turns out that it's not all that expensive most of the time, but
      the vmalloc information statistics (amount of virtual memory used in the
      vmalloc space, and the biggest remaining chunk) can be rather expensive
      to compute.

      The 'get_vmalloc_info()' function actually showed up on my profiles as
      4% of the CPU usage of "make test" in the git source repository, because
      the git tests are lots of very short-lived shell-scripts etc.

      It turns out that apparently this same silly vmalloc info gathering
      shows up on the facebook servers too, according to Dave Jones.  So it's
      not just "make test" for git.

      We had two patches to just cache the information (one by me, one by
      Ingo) to mitigate this issue, but the whole vmalloc information of of
      rather dubious value to begin with, and people who *actually* want to
      know what the situation is wrt the vmalloc area should just look at the
      much more complete /proc/vmallocinfo instead.

      In fact, according to my testing - and perhaps more importantly,
      according to that big search engine in the sky: Google - there is
      nothing out there that actually cares about those two expensive fields:
      VmallocUsed and VmallocChunk.

      So let's try to just remove them entirely.  Actually, this just removes
      the computation and reports the numbers as zero for now, just to try to
      be minimally intrusive.

      If this breaks anything, we'll obviously have to re-introduce the code
      to compute this all and add the caching patches on top.  But if given
      the option, I'd really prefer to just remove this bad idea entirely
      rather than add even more code to work around our historical mistake
      that likely nobody really cares about.

      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 2e002662973fd8d67d5a760776a5d3ea3d3399a9
  Merge: 6a13feb fc90888
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:43:24 2015 -0800

      Merge branch 'fs-file-descriptor-optimization'

      Merge file descriptor allocation speedup.

      Eric Dumazet has a test-case for a fairly common network deamon load
      pattern: openign and closing a lot of sockets that each have very little
      work done on them.  It turns out that in that case, the cost of just
      finding the correct file descriptor number can be a dominating factor.

      We've long had a trivial optimization for allocating file descriptors
      sequentially, but that optimization ends up being not very effective
      when other file descriptors are being closed concurrently, and the fd
      patterns are not some simple FIFO pattern.  In such cases we ended up
      spending a lot of time just scanning the bitmap of open file descriptors
      in order to find the next file descriptor number to open.

      This trivial patch-series mitigates that by simply introducing a
      second-level bitmap of which words in the first bitmap are already fully
      allocated.  That cuts down the cost of scanning by an order of magnitude
      in some pathological (but realistic) cases.

      The second patch is an even more trivial patch to avoid unnecessarily
      dirtying the cacheline for the close-on-exec bit array that normally
      ends up being all empty.

      * fs-file-descriptor-optimization:
        vfs: conditionally clear close-on-exec flag
        vfs: Fix pathological performance case for __alloc_fd()

  commit 6a13feb9c82803e2b815eca72fa7a9f5561d7861
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:05:25 2015 -0800

      Linux 4.3

  commit 95fc00a4e15e804356d01c1c53c7da3d99a94f20
  Merge: ca04d39 182475b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 14:13:54 2015 -0800

      Merge branch 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

      Pull memremap fix from Dan Williams:
       "The new memremap() api introduced in the 4.3 cycle to unify/replace
        ioremap_cache() and ioremap_wt() is mishandling the highmem case.
        This patch has received a build success notification from a
        0day-kbuild-robot run and has received an ack from Ard"

      From the commit message:
       "The impact of this bug is low for now since the pmem driver is the
        only user of memremap(), but this is important to fix before more
        conversions to memremap arrive in 4.4"

      * 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        memremap: fix highmem support

  commit e6dbe1eb2db0d7a14991c06278dd3030c45fb825
  Author: Phil Reid <preid@xxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:43:55 2015 +0800

      stmmac: Correctly report PTP capabilities.

      priv->hwts_*_en indicate if timestamping is enabled/disabled at run
      time. But  priv->dma_cap.time_stamp  and priv->dma_cap.atime_stamp
      indicates HW is support for PTPv1/PTPv2.

      Signed-off-by: Phil Reid <preid@xxxxxxxxxxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1032a6687168af9509615879d513f77e4049062e
  Author: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
  Date:   Fri Oct 30 01:24:56 2015 -0700

      Use 64-bit timekeeping

      This patch changes the use of struct timespec in
      dccp_probe to use struct timespec64 instead. timespec uses a 32-bit
      seconds field which will overflow in the year 2038 and beyond. timespec64
      uses a 64-bit seconds field. Note that the correctness of the code isn't
      changed, since the original code only uses the timestamps to compute a
      small elapsed interval. This patch is part of a larger attempt to remove
      instances of 32-bit timekeeping structures (timespec, timeval, time_t)
      from the kernel so it is easier to identify where the real 2038 issues
      are.

      Signed-off-by: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fc2a263bb0604642703cda6cba5ac1ffb1935440
  Merge: 5dbebbb c9b3292
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:57:44 2015 -0500

      Merge branch 'ipv4_link_down'

      Julian Anastasov says:

      ====================
      ipv4: fix problems from the RTNH_F_LINKDOWN introduction

      Fix two problems from the change that introduced RTNH_F_LINKDOWN
      flag. The first patch deals with the removal of local route on
      DOWN event. The second patch makes sure the RTNH_F_LINKDOWN
      flag is properly updated on UP event because the DOWN event
      sets it in all cases.

      v2->v3:
      - use bool for force var

      v1->v2:
      - forgot to add ifconfig dummy0 down in the test case
      - split to 2 patches
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c9b3292eeb52c6834e972eb5b8fe38914771ed12
  Author: Julian Anastasov <ja@xxxxxx>
  Date:   Fri Oct 30 10:23:34 2015 +0200

      ipv4: update RTNH_F_LINKDOWN flag on UP event

      When nexthop is part of multipath route we should clear the
      LINKDOWN flag when link goes UP or when first address is added.
      This is needed because we always set LINKDOWN flag when DEAD flag
      was set but now on UP the nexthop is not dead anymore. Examples when
      LINKDOWN bit can be forgotten when no NETDEV_CHANGE is delivered:

      - link goes down (LINKDOWN is set), then link goes UP and device
      shows carrier OK but LINKDOWN remains set

      - last address is deleted (LINKDOWN is set), then address is
      added and device shows carrier OK but LINKDOWN remains set

      Steps to reproduce:
      modprobe dummy
      ifconfig dummy0 192.168.168.1 up

      here add a multipath route where one nexthop is for dummy0:

      ip route add 1.2.3.4 nexthop dummy0 nexthop SOME_OTHER_DEVICE
      ifconfig dummy0 down
      ifconfig dummy0 up

      now ip route shows nexthop that is not dead. Now set the sysctl var:

      echo 1 > /proc/sys/net/ipv4/conf/dummy0/ignore_routes_with_linkdown

      now ip route will show a dead nexthop because the forgotten
      RTNH_F_LINKDOWN is propagated as RTNH_F_DEAD.

      Fixes: 8a3d03166f19 ("net: track link-status of ipv4 nexthops")
      Signed-off-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f823defdd5b106a5e89745ee8b163c71855de1e
  Author: Julian Anastasov <ja@xxxxxx>
  Date:   Fri Oct 30 10:23:33 2015 +0200

      ipv4: fix to not remove local route on link down

      When fib_netdev_event calls fib_disable_ip on NETDEV_DOWN event
      we should not delete the local routes if the local address
      is still present. The confusion comes from the fact that both
      fib_netdev_event and fib_inetaddr_event use the NETDEV_DOWN
      constant. Fix it by returning back the variable 'force'.

      Steps to reproduce:
      modprobe dummy
      ifconfig dummy0 192.168.168.1 up
      ifconfig dummy0 down
      ip route list table local | grep dummy | grep host
      local 192.168.168.1 dev dummy0  proto kernel  scope host  src 
192.168.168.1

      Fixes: 8a3d03166f19 ("net: track link-status of ipv4 nexthops")
      Signed-off-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1cf7d8dda2bd1704ca8552c93d5475af444a986b
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 10:50:54 2015 +0800

      net: hisilicon: Remove .owner assignment from platform_driver

      platform_driver doesn't need to set .owner, because
      platform_driver_register() will set it.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76e398a6271285c1f361d66445a55cdcee5c1b4b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 12:33:55 2015 -0500

      net: dsa: use switchdev obj for VLAN add/del ops

      Simplify DSA by pushing the switchdev objects for VLAN add and delete
      operations down to its drivers. Currently only mv88e6xxx is affected.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5dbebbb44a6ad94aab2cd1a46f7676f255403f64
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Thu Oct 29 18:11:35 2015 -0700

      net: bcmgenet: Software reset EPHY after power on

      The EPHY on GENET v1->v3 is extremely finicky, and will show occasional
      failures based on the timing and reset sequence, ranging from duplicate
      packets, to extremely high latencies.

      Perform an additional software reset, and re-configuration to make sure 
it is
      in a consistent and working state.

      Fixes: 6ac3ce8295e6 ("net: bcmgenet: Remove excessive PHY reset")
      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca04d396a3229d37d8151311ad70d1255a5807bd
  Merge: f5eab26 2459ee8
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 11:45:26 2015 -0800

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Thomas Gleixner:
       "This set of updates contains:

         - Another bugfix for the pathologic vm86 machinery.  Clear
           thread.vm86 on fork to prevent corrupting the parent state.  This
           comes along with an update to the vm86 selftest case

         - Fix another corner case in the ioapic setup code which causes a
           boot crash on some oddball systems

         - Fix the fallout from the dma allocation consolidation work, which
           leads to a NULL pointer dereference when the allocation code is
           called with a NULL device"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/vm86: Set thread.vm86 to NULL on fork/clone
        selftests/x86: Add a fork() to entry_from_vm86 to catch fork bugs
        x86/ioapic: Prevent NULL pointer dereference in setup_ioapic_dest()
        x86/dma-mapping: Fix arch_dma_alloc_attrs() oops with NULL dev

  commit f5eab26701999b1aa26d06772e013b11c4a16f6a
  Merge: 4bf690d fe326c5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 11:39:03 2015 -0800

      Merge branch 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer fixes from Thomas Gleixner:
       "The last round of minimalistic fixes for clocksource drivers:

         - Prevent multiple shutdown of the sh_mtu2 clocksource

         - Annotate a bunch of clocksource/schedclock functions with notrace
           to prevent an annoying ftrace recursion issue"

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        clocksource/drivers/sh_mtu2: Fix multiple shutdown call issue
        clocksource/drivers/digicolor: Prevent ftrace recursion
        clocksource/drivers/fsl_ftm_timer: Prevent ftrace recursion
        clocksource/drivers/vf_pit_timer: Prevent ftrace recursion
        clocksource/drivers/prima2: Prevent ftrace recursion
        clocksource/drivers/samsung_pwm_timer: Prevent ftrace recursion
        clocksource/drivers/pistachio: Prevent ftrace recursion
        clocksource/drivers/arm_global_timer: Prevent ftrace recursion

  commit 4bf690d7e09bbac43dfac9af01ba263e08f37e3e
  Merge: 56ef9db 209da39
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 11:33:04 2015 -0800

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fixes from Thomas Gleixner:
       "The last two one-liners for 4.3 from the irqchip space:

         - Regression fix for armada SoC which addresses the fallout from the
           set_irq_flags() cleanup

         - Add the missing propagation of the irq_set_type() callback to the
           parent interrupt controller of the tegra interrupt chip"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqchip/tegra: Propagate IRQ type setting to parent
        irqchip/armada-370-xp: Fix regression by clearing IRQ_NOAUTOEN

  commit ea3803c193df18d8353d6c8d77034066a08c19f5
  Author: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
  Date:   Thu Oct 29 11:57:42 2015 +0000

      VSOCK: define VSOCK_SS_LISTEN once only

      The SS_LISTEN socket state is defined by both af_vsock.c and
      vmci_transport.c.  This is risky since the value could be changed in one
      file and the other would be out of sync.

      Rename from SS_LISTEN to VSOCK_SS_LISTEN since the constant is not part
      of enum socket_state (SS_CONNECTED, ...).  This way it is clear that the
      constant is vsock-specific.

      The big text reflow in af_vsock.c was necessary to keep to the maximum
      line length.  Text is unchanged except for s/SS_LISTEN/VSOCK_SS_LISTEN/.

      Signed-off-by: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b43c142f22236b37aa68faf23ac1bbd75f94c5b5
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Thu Oct 29 09:45:22 2015 +0300

      net: smsc911x: Fix crash if loopback test fails

      On certain hardware in certain situations loopback test fails and the
      driver gets removed. During mdiobus_unregister() instance of PHY driver
      gets disposed. But by this time it has already been started using
      phy_connect_direct().

      PHY driver uses DELAYED_WORK in order to maintain its state. Attempting
      to dispose the driver without calling phy_disconnect() causes deallocation
      of DELAYED_WORK being active. This shortly causes a bad crash in timer
      code.

      The problem can be discovered by enabling CONFIG_DEBUG_OBJECTS_TIMERS and
      CONFIG_DEBUG_OBJECTS_FREE

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5cbb28a4bf65c7e4daa6c25b651fed8eb888c620
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Wed Oct 28 13:09:53 2015 -0400

      tipc: linearize arriving NAME_DISTR and LINK_PROTO buffers

      Testing of the new UDP bearer has revealed that reception of
      NAME_DISTRIBUTOR, LINK_PROTOCOL/RESET and LINK_PROTOCOL/ACTIVATE
      message buffers is not prepared for the case that those may be
      non-linear.

      We now linearize all such buffers before they are delivered up to the
      generic reception layer.

      In order for the commit to apply cleanly to 'net' and 'stable', we do
      the change in the function tipc_udp_recv() for now. Later, we will post
      a commit to 'net-next' moving the linearization to generic code, in
      tipc_named_rcv() and tipc_link_proto_rcv().

      Fixes: commit d0f91938bede ("tipc: add ip/udp media type")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f4444574a41430315a9c3eeb9e37cb0a36444a35
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 10:20:30 2015 -0200

      fec: Use gpio_set_value_cansleep()

      We are in a context where we can sleep, and the FEC PHY reset gpio
      may be on an I2C expander. Use the cansleep() variant when
      setting the GPIO value.

      Based on a patch from Russell King for pci-mvebu.c.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 24c39de0091197f4c1f1a18a7c31e540000dc3b8
  Merge: b75ec3a 405c92f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 1 12:01:37 2015 -0500

      Merge branch 'csum_partial_frags'

      Hannes Frederic Sowa says:

      ====================
      net: clean up interactions of CHECKSUM_PARTIAL and fragmentation

      This series fixes wrong checksums on the wire for IPv4 and IPv6. Large
      send buffers and especially NFS lead to wrong checksums in both IPv4
      and IPv6.

      CHECKSUM_PARTIAL skbs should not receive the respective fragmentations
      functions, so we add WARN_ON_ONCE to those functions to fix up those as
      soon as they get reported.

      Changelog:
      v2: added v4 checks
      v3: removed WARN_ON_ONCES (advice by Tom Herbert)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 405c92f7a5417274419192ad134d6dc71aedaaa4
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:42 2015 +0100

      ipv6: add defensive check for CHECKSUM_PARTIAL skbs in ip_fragment

      CHECKSUM_PARTIAL skbs should never arrive in ip_fragment. If we get one
      of those warn about them once and handle them gracefully by recalculating
      the checksum.

      Fixes: commit 32dce968dd987 ("ipv6: Allow for partial checksums on 
non-ufo packets")
      See-also: commit 72e843bb09d45 ("ipv6: ip6_fragment() should check 
CHECKSUM_PARTIAL")
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 682b1a9d3f9686ee43fd66b48605daff00522157
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:41 2015 +0100

      ipv6: no CHECKSUM_PARTIAL on MSG_MORE corked sockets

      We cannot reliable calculate packet size on MSG_MORE corked sockets
      and thus cannot decide if they are going to be fragmented later on,
      so better not use CHECKSUM_PARTIAL in the first place.

      The IPv6 code also intended to protect and not use CHECKSUM_PARTIAL in
      the existence of IPv6 extension headers, but the condition was wrong. Fix
      it up, too. Also the condition to check whether the packet fits into
      one fragment was wrong and has been corrected.

      Fixes: commit 32dce968dd987 ("ipv6: Allow for partial checksums on 
non-ufo packets")
      See-also: commit 72e843bb09d45 ("ipv6: ip6_fragment() should check 
CHECKSUM_PARTIAL")
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dbd3393c56a8794fe596e7dd20d0efa613b9cf61
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:40 2015 +0100

      ipv4: add defensive check for CHECKSUM_PARTIAL skbs in ip_fragment

      CHECKSUM_PARTIAL skbs should never arrive in ip_fragment. If we get one
      of those warn about them once and handle them gracefully by recalculating
      the checksum.

      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d749c9cbffd666956694f307d237e018c464d973
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:39 2015 +0100

      ipv4: no CHECKSUM_PARTIAL on MSG_MORE corked sockets

      We cannot reliable calculate packet size on MSG_MORE corked sockets
      and thus cannot decide if they are going to be fragmented later on,
      so better not use CHECKSUM_PARTIAL in the first place.

      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2167ceabf34163727ca4e283c0f030e3960932e5
  Author: Wan Zongshun <Vincent.Wan@xxxxxxx>
  Date:   Fri Oct 30 13:11:39 2015 +0100

      x86/cpu: Add CLZERO detection

      AMD Fam17h processors introduce support for the CLZERO
      instruction. It zeroes out the 64 byte cache line specified in
      RAX.

      Add the bit here to allow /proc/cpuinfo to list the feature.

      Boris: we're adding this as a separate ->x86_capability leaf
      because CPUID_80000008_EBX is going to contain more feature bits
      and it will fill out with time.

      Signed-off-by: Wan Zongshun <Vincent.Wan@xxxxxxx>
      Signed-off-by: Aravind Gopalakrishnan <aravind.gopalakrishnan@xxxxxxx>
      [ Wrap code in patch form, fix comments. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Huang Rui <ray.huang@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446207099-24948-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dc34bdd2367fd31744ee3ba1de1b1cc0fa2ce193
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Fri Oct 30 13:11:38 2015 +0100

      x86/mce: Add a default case to the switch in __mcheck_cpu_ancient_init()

      Caught by building with W= which enable -Wswitch-default also.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446207099-24948-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c7f54d21fb02e90042e6233b46716dcb244e70e6
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Fri Oct 30 13:11:37 2015 +0100

      x86/mce: Add a Scalable MCA vendor flags bit

      Scalable MCA (SMCA) is a new feature in AMD Fam17h processors
      which indicates presence of MCA extensions.

      MCA extensions expands existing register space for the MCE banks
      and also introduces a new MSR range to accommodate new banks.

      Add the detection bit.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      [ Reformat mce_vendor_flags definitions and save indentation levels. 
Improve comments. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Ashok Raj <ashok.raj@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446207099-24948-2-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0963670aeaec2287aa263daa0d41384d4dcd5292
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Sun Nov 1 10:50:19 2015 +0100

      gpio: fix up SPI submenu

      - Relax dependencies on SPI_MASTER for drivers in the SPI menu
        that already has this dependency.
      - Move out the expander that would be hidden for I2C access if
        SPI_MASTER was not selected. Tentatively create a separate
        menu for this.
      - Move the ZX SoC driver to memory-mapped drivers, this must be
        a mistake and only worked because the system has an SPI master
        enabled at the same time.

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 269a46f80bd9c77b6f862a92ccb52eb8a68d3997
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Sun Nov 1 10:43:16 2015 +0100

      gpio: drop surplus I2C dependencies

      The I2C expander menu already depends on I2C, drop subdependecies
      on individual drivers. Keep the instances of depends on I2C=y
      though, so these are still restricted to the compiled-in case.

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 7768feb0f56d4ba6c1ae1395e144e168e41f1900
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Sun Nov 1 10:39:07 2015 +0100

      gpio: drop surplus X86 dependencies

      Port-mapped I/O depends on X86 already, so individual drivers need
      not specify this dependency.

      Suggested-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 56ef9db24633cf6528d2ce736de0985eb125a3c1
  Merge: 060b85b 53dd186
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 21:36:07 2015 -0700

      Merge tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Olof Johansson:
       "This should be our final batch of fixes for 4.3:

         - A patch from Sudeep Holla that fixes annotation of wakeup sources
           properly, old unused format seems to have spread through copying.

         - Two patches from Tony for OMAP.  One dealing with MUSB setup
           problems due to runtime PM being enabled too early on the parent
           device.  The other fixes IRQ numbering for OMAP1"

      * tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:
        usb: musb: omap2430: Fix regression caused by driver core change
        ARM: OMAP1: fix incorrect INT_DMA_LCD
        ARM: dts: fix gpio-keys wakeup-source property

  commit 060b85b0d3064032b6810928973f8c7a15ab9c11
  Merge: af7eba0 d6a32b9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 21:26:04 2015 -0700

      Merge tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

      Pull SCSI fixes from James Bottomley:
       "This is three essential bug fixes for various SCSI parts.

        The only affected users are SCSI multi-path via device handler
        (basically all the enterprise) and mvsas users.  The dh bugs are an
        async entanglement in boot resulting in a serious WARN_ON trip and a
        use after free on remove leading to a crash with strict memory
        accounting.  The mvsas bug manifests as a null deref oops but only on
        abort sequences; however, these can commonly occur with SATA attached
        devices, hence the fix"

      * tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:
        scsi_dh: don't try to load a device handler during async probing
        scsi_dh: fix use-after-free when removing scsi device
        mvsas: Fix NULL pointer dereference in mvs_slot_task_free

  commit af7eba0158e9b4632dcd94c1cd4100689666e14f
  Merge: d59ebbf d01552a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 21:20:49 2015 -0700

      Merge tag 'md/4.3-rc7-fixes' of git://neil.brown.name/md

      Pull md bug fixes from Neil Brown:
       "Two more bug fixes for md.

        One bugfix for a list corruption in raid5 because of incorrect
        locking.

        Other for possible data corruption when a recovering device is failed,
        removed, and re-added.

        Both tagged for -stable"

      * tag 'md/4.3-rc7-fixes' of git://neil.brown.name/md:
        Revert "md: allow a partially recovered device to be hot-added to an 
array."
        md/raid5: fix locking in handle_stripe_clean_event()

  commit b75ec3af27bf011a760e2f44eb25a99b6fbb0fb3
  Merge: e7b63ff 523e134
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 1 00:15:30 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

  commit d59ebbf19b29f4964b24f38c3ad876c33cdd7368
  Merge: 523e134 8731b26
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 16:16:51 2015 -0700

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Two drm atomic core fixes.

        And two radeon patches needed to fix a backlight regression on some
        older hardware"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm: Correct arguments to list_tail_add in create blob ioctl
        drm: crtc: integer overflow in drm_property_create_blob()
        drm/radeon: fix dpms when driver backlight control is disabled
        drm/radeon: move bl encoder assignment into bl init

  commit fc90888d07b8e17eec49c04bdb26344fdea96c3b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 16:06:40 2015 -0700

      vfs: conditionally clear close-on-exec flag

      We clear the close-on-exec flag when opening and closing files, and the
      bit was almost always already clear before.  Avoid dirtying the
      cacheline if the clearning isn't necessary.  That avoids unnecessary
      cacheline dirtying and bouncing in multi-socket environments.

      Eric Dumazet has a file descriptor benchmark that goes 4% faster from
      this on his two-socket machine.  It's probably partly superlinear
      improvement due to getting slightly less spinlock contention on the
      file_lock spinlock due to less work in the critical section.

      Tested-by: Eric Dumazet <eric.dumazet@xxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit f3f86e33dc3da437fa4f204588ce7c78ea756982
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:53:57 2015 -0700

      vfs: Fix pathological performance case for __alloc_fd()

      Al Viro points out that:
      > >     * [Linux-specific aside] our __alloc_fd() can degrade quite badly
      > > with some use patterns.  The cacheline pingpong in the bitmap is 
probably
      > > inevitable, unless we accept considerably heavier memory footprint,
      > > but we also have a case when alloc_fd() takes O(n) and it's _not_ hard
      > > to trigger - close(3);open(...); will have the next open() after that
      > > scanning the entire in-use bitmap.

      And Eric Dumazet has a somewhat realistic multithreaded microbenchmark
      that opens and closes a lot of sockets with minimal work per socket.

      This patch largely fixes it.  We keep a 2nd-level bitmap of the open
      file bitmaps, showing which words are already full.  So then we can
      traverse that second-level bitmap to efficiently skip already allocated
      file descriptors.

      On his benchmark, this improves performance by up to an order of
      magnitude, by avoiding the excessive open file bitmap scanning.

      Tested-and-acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3b5ea47dbff0c934b7b979bcc772427a2404ed3d
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Fri Oct 30 17:56:57 2015 +0800

      hwmon: (fam15h_power) Add max compute unit accumulated power

      This patch adds a member in fam15h_power_data which specifies the
      maximum accumulated power in a compute unit.

      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 46f29c2b494600cd326b84f87f5765e80fffface
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Fri Oct 30 17:56:56 2015 +0800

      hwmon: (fam15h_power) Enable power1_input on AMD Carrizo

      This patch enables power1_input attribute for Carrizo platform.

      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 7deb14b1316def5d4c85f99718d9e530d53cef4e
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Fri Oct 30 17:56:55 2015 +0800

      hwmon: (fam15h_power) Refactor attributes for dynamically added

      Attributes depend on the CPU model the driver gets loaded on.
      Therefore, add those attributes dynamically at init time. This is more
      flexible to control the different attributes on different platforms.

      Suggested-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 523e13455ec9ec4457a5a1d24ff7132949742b70
  Merge: 4bb0fb5 bae818e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 15:19:36 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fix from Sage Weil:
       "This sets the stable pages flag on the RBD block device when we have
        CRCs enabled.  (This is necessary since the default assumption for
        block devices changed in 3.9)"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        rbd: require stable pages if message data CRCs are enabled

  commit 4bb0fb57f3bbe2ed7d4aad75a3c60a051afbd1db
  Merge: c94eee8 5ffdbe8
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 14:49:19 2015 -0700

      Merge branch 'overlayfs-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs

      Pull overlayfs bug fixes from Miklos Szeredi:
       "This contains fixes for bugs that appeared in earlier kernels (all are
        marked for -stable)"

      * 'overlayfs-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs:
        ovl: free lower_mnt array in ovl_put_super
        ovl: free stack of paths in ovl_fill_super
        ovl: fix open in stacked overlay
        ovl: fix dentry reference leak
        ovl: use O_LARGEFILE in ovl_copy_up()

  commit d99c8053fc2473115f506782822cb7c33c687513
  Author: Laurent Meunier <laurent.meunier@xxxxxx>
  Date:   Fri Oct 30 15:15:51 2015 +0100

      pinctrl: pinconf: remove needless loop

      This removes a needless loop which was caught in pinconf.c.

      Suggested-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Laurent Meunier <laurent.meunier@xxxxxx>
      Reviewed-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 241297c2af8bf0459a590c143a1d15b93779fab1
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 19:28:15 2015 +0900

      pinctrl: uniphier: guard uniphier directory with CONFIG_PINCTRL_UNIPHIER

      CONFIG_PINCTRL_UNIPHIER is more suitable than CONFIG_ARCH_UNIPHIER
      to guard the drivers/pinctrl/uniphier directory.

      The current CONFIG_PINCTRL_UNIPHIER_CORE is a bit long
      (it would break the indentation in drivers/pinctrl/Makefile),
      so rename it into CONFIG_PINCTRL_UNIPHIER.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a7c6f30c02326a5acccc602b0d0f08a9853eec3f
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 30 15:04:37 2015 +0100

      pinctrl: zynq: fix UTF-8 errors

      Fix up Sören's name in the Zynq driver. I caused this. I fix it.

      Acked-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aacaffd1d9a6f8e2c7369d83c21d41c3b53e2edc
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 30 11:58:28 2015 +0100

      gpio: dt-bindings: document the official use of "ngpios"

      There are a bunch of drivers that utilize the "ngpios" DT property
      without any vendor prefix. Try to start cleaning up the mess by
      defining what we mean by this property.

      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Cc: Jonas Gorski <jogo@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aad7a2119965a4a504ddf1d8374968135e9a8780
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Fri Oct 30 11:36:29 2015 +0100

      gpio: MAINTAINERS: Add an entry for the ATH79 GPIO driver

      Add an entry for the ATH79 GPIO driver with myself as maintainer.

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c103a10f690cc49054c52f493eeeff143d5f59e7
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:02:05 2015 +0200

      gpio / ACPI: Allow shared GPIO event to be read via operation region

      In Microsoft Surface3 the GPIO detecting lid state is shared between GPIO
      event and operation region. Below is simplied version of the DSDT from
      Surface3 including relevant parts:

          Scope (GPO0)
          {
              Name (_AEI, ResourceTemplate ()
              {
                  GpioInt (Edge, ActiveBoth, Shared, PullNone, 0x0000,
                      "\\_SB.GPO0", 0x00, ResourceConsumer, ,
                      )
                      {   // Pin list
                          0x004C
                      }
              })

              OperationRegion (GPOR, GeneralPurposeIo, Zero, One)
              Field (GPOR, ByteAcc, NoLock, Preserve)
              {
                  Connection (
                      GpioIo (Shared, PullNone, 0x0000, 0x0000,
                          IoRestrictionNone, "\\_SB.GPO0", 0x00,
                          ResourceConsumer,,)
                          {   // Pin list
                              0x004C
                          }
                  ),
                  HELD,   1
              }

              Method (_E4C, 0, Serialized)  // _Exx: Edge-Triggered GPE
              {
                  If ((HELD == One))
                  {
                      ^^LID.LIDB = One
                  }
                  Else
                  {
                      ^^LID.LIDB = Zero
                      Notify (LID, 0x80) // Status Change
                  }

                  Notify (^^PCI0.SPI1.NTRG, One) // Device Check
              }
          }

      When GPIO 0x4c changes we call ASL method _E4C which tries to read HELD
      field (the same GPIO). This triggers following error on the console:

          ACPI Error: Method parse/execution failed [\_SB.GPO0._E4C]
              (Node ffff88013f4b4438), AE_ERROR (20150930/psparse-542)

      The error happens because ACPI GPIO operation region handler
      (acpi_gpio_adr_space_handler()) tries to acquire the very same GPIO which
      returns an error (-EBUSY) because the GPIO is already reserved for the 
GPIO
      event.

      Fix this so that we "borrow" the event GPIO if we find the GPIO belongs to
      an event. Allow this only for GPIOs that are read.

      To be able to go through acpi_gpio->events list for operation region 
access
      we need to make sure the list is properly initialized whenever GPIO chip 
is
      registered.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=106571
      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit bc6a73bbfba5d8325b0e659545ce2f3ad983829b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 30 10:32:19 2015 +0100

      gpio: group port-mapped I/O drivers in a menu

      Create a Kconfig submenu for drivers using X86 port-mapped I/O
      and depend on X86 for this.

      Suggested-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
      Cc: Andreas Bofjall <andreas@xxxxxxxxxx>
      Cc: Diego Elio Pettenò <flameeyes@xxxxxxxxxxxx>
      Cc: Daniel Krueger <daniel.krueger@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Bruno Randolf <br1@xxxxxxxxxxx>
      Cc: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c94eee8a3befe480a1193f2633f16988108393bc
  Merge: 38dab9a 89bc784
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 11:52:20 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

       1) Fix two regressions in ipv6 route lookups, particularly wrt output
          interface specifications in the lookup key.  From David Ahern.

       2) Fix checks in ipv6 IPSEC tunnel pre-encap fragmentation, from
          Herbert Xu.

       3) Fix mis-advertisement of 1000BASE-T on bcm63xx_enet, from Simon
          Arlott.

       4) Some smsc phys misbehave with energy detect mode enabled, so add a
          DT property and disable it on such switches.  From Heiko Schocher.

       5) Fix TSO corruption on TX in mv643xx_eth, from Philipp Kirchhofer.

       6) Fix regression added by removal of openvswitch vport stats, from
          James Morse.

       7) Vendor Kconfig options should be bool, not tristate, from Andreas
          Schwab.

       8) Use non-_BH() net stats bump in tcp_xmit_probe_skb(), otherwise we
          barf during TCP REPAIR operations.

       9) Fix various bugs in openvswitch conntrack support, from Joe
          Stringer.

      10) Fix NETLINK_LIST_MEMBERSHIPS locking, from David Herrmann.

      11) Don't have VSOCK do sock_put() in interrupt context, from Jorgen
          Hansen.

      12) Fix skb_realloc_headroom() failures properly in ISDN, from Karsten
          Keil.

      13) Add some device IDs to qmi_wwan, from Bjorn Mork.

      14) Fix ovs egress tunnel information when using lwtunnel devices, from
          Pravin B Shelar.

      15) Add missing NETIF_F_FRAGLIST to macvtab feature list, from Jason
          Wang.

      16) Fix incorrect handling of throw routes when the result of the throw
          cannot find a match, from Xin Long.

      17) Protect ipv6 MTU calculations from wrap-around, from Hannes Frederic
          Sowa.

      18) Fix failed autonegotiation on KSZ9031 micrel PHYs, from Nathan
          Sullivan.

      19) Add missing memory barries in descriptor accesses or xgbe driver,
          from Thomas Lendacky.

      20) Fix release conditon test in pppoe_release(), from Guillaume Nault.

      21) Fix gianfar bugs wrt filter configuration, from Claudiu Manoil.

      22) Fix violations of RX buffer alignment in sh_eth driver, from Sergei
          Shtylyov.

      23) Fixing missing of_node_put() calls in various places around the
          networking, from Julia Lawall.

      24) Fix incorrect leaf now walking in ipv4 routing tree, from Alexander
          Duyck.

      25) RDS doesn't check pskb_pull()/pskb_trim() return values, from
          Sowmini Varadhan.

      26) Fix VLAN configuration in mlx4 driver, from Jack Morgenstein.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (79 commits)
        ipv6: protect mtu calculation of wrap-around and infinite loop by 
rounding issues
        Revert "Merge branch 'ipv6-overflow-arith'"
        net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes
        net/mlx4_en: Explicitly set no vlan tags in WQE ctrl segment when no 
vlan is present
        vhost: fix performance on LE hosts
        bpf: sample: define aarch64 specific registers
        amd-xgbe: Fix race between access of desc and desc index
        RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in 
rds_tcp_data_recv
        forcedeth: fix unilateral interrupt disabling in netpoll path
        openvswitch: Fix skb leak using IPv6 defrag
        ipv6: Export nf_ct_frag6_consume_orig()
        openvswitch: Fix double-free on ip_defrag() errors
        fib_trie: leaf_walk_rcu should not compute key if key is less than 
pn->key
        net: mv643xx_eth: add missing of_node_put
        ath6kl: add missing of_node_put
        net: phy: mdio: add missing of_node_put
        netdev/phy: add missing of_node_put
        net: netcp: add missing of_node_put
        net: thunderx: add missing of_node_put
        ipv6: gre: support SIT encapsulation
        ...

  commit 5aa4e83dd54a3b33d0f2fbab0a1f06a3614a5949
  Author: Marc Titinger <mtitinger@xxxxxxxxxxxx>
  Date:   Thu Oct 29 10:07:17 2015 +0100

      hwmon: (ina2xx) remove no longer used variable 'kind'

      Signed-off-by: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 2459ee8651dc5ab72790c2ffa99af288c7641b64
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 30 22:42:46 2015 -0700

      x86/vm86: Set thread.vm86 to NULL on fork/clone

      thread.vm86 points to per-task information -- the pointer should not
      be copied on clone.

      Fixes: d4ce0f26c790 ("x86/vm86: Move fields from 'struct 
kernel_vm86_struct' to 'struct vm86'")
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Stas Sergeev <stsp@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/71c5d6985d70ec8197c8d72f003823c81b7dcf99.1446270067.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 226f1f729ce277720fab60c91dd1b12574cfe66c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 30 22:42:45 2015 -0700

      selftests/x86: Add a fork() to entry_from_vm86 to catch fork bugs

      Mere possession of vm86 state is strange.  Make sure that nothing
      gets corrupted if we fork after calling vm86().

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Stas Sergeev <stsp@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/08f83295460a80e41dc5e3e81ec40d6844d316f5.1446270067.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 38dab9ac1c017e96dc98e978111e365134d41d13
  Merge: f9793e3 1955621
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:49:44 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

      Pull input layer fixes from Dmitry Torokhov:

       - a change to the ALPS driver where we had limit the quirk for
         trackstick handling from being active on all Dells to just a few
         models

       - a fix for a build dependency issue in the sur40 driver

       - a small clock handling fixup in the LPC32xx touchscreen driver

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
        Input: alps - only the Dell Latitude D420/430/620/630 have separate 
stick button bits
        Input: sur40 - add dependency on VIDEO_V4L2
        Input: lpc32xx_ts - fix warnings caused by enabling unprepared clock

  commit f9793e379bbb1188c72d8a367083290a14f98c97
  Merge: 9b971e7 1266963
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:47:18 2015 -0700

      Merge tag 'pci-v4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci

      Pull PCI fix from Bjorn Helgaas:
       "Sorry for this last-minute update; it's been in -next for quite a
        while, but I forgot about it until I started getting ready for the
        merge window.

        It's small and fixes a way a user could cause a panic via sysfs, so I
        think it's worth getting it in v4.3.

        NUMA:
          - Prevent out of bounds access in sysfs numa_node override (Sasha 
Levin)"

      * tag 'pci-v4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci:
        PCI: Prevent out of bounds access in numa_node override

  commit 53dd186b3fb7254ae0cb4d6648abb5589aaa8c2d
  Merge: 4db7062 8f2279d
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Sat Oct 31 01:41:45 2015 +0000

      Merge tag 'omap-for-v4.3/fixes-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Two omap regression fixes:

      - Fix omap3 MUSB with DMA caused by driver core changes

      - Fix LCD DMA interrupt number for omap1 that did not
        get changed for sparse IRQ changes

      * tag 'omap-for-v4.3/fixes-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        usb: musb: omap2430: Fix regression caused by driver core change
        ARM: OMAP1: fix incorrect INT_DMA_LCD

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit 8731b269f01e16193390c7276e70530366b8d626
  Author: Maneet Singh <mmaneetsingh@xxxxxxxxxx>
  Date:   Thu Oct 8 10:10:24 2015 -0400

      drm: Correct arguments to list_tail_add in create blob ioctl

      Arguments passed to list_add_tail were reversed resulting in deletion
      of old blob property everytime the new one is added.

      Fixes

      commit e2f5d2ea479b9b2619965d43db70939589afe43a
      Author: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Date:   Fri May 22 13:34:51 2015 +0100

          drm/mode: Add user blob-creation ioctl

      Signed-off-by: Maneet Singh <mmaneetsingh@xxxxxxxxxx>
      [seanpaul tweaked commit subject a little]
      Signed-off-by: Sean Paul <seanpaul@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx # v4.2
      Reviewed-by: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Reviewed-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxx>

  commit d01552a76d71f9879af448e9142389ee9be6e95b
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Oct 31 11:00:56 2015 +1100

      Revert "md: allow a partially recovered device to be hot-added to an 
array."

      This reverts commit 7eb418851f3278de67126ea0c427641ab4792c57.

      This commit is poorly justified, I can find not discusison in email,
      and it clearly causes a problem.

      If a device which is being recovered fails and is subsequently
      re-added to an array, there could easily have been changes to the
      array *before* the point where the recovery was up to.  So the
      recovery must start again from the beginning.

      If a spare is being recovered and fails, then when it is re-added we
      really should do a bitmap-based recovery up to the recovery-offset,
      and then a full recovery from there.  Before this reversion, we only
      did the "full recovery from there" which is not corect.  After this
      reversion with will do a full recovery from the start, which is safer
      but not ideal.

      It will be left to a future patch to arrange the two different styles
      of recovery.

      Reported-and-tested-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx (3.14+)
      Fixes: 7eb418851f32 ("md: allow a partially recovered device to be 
hot-added to an array.")

  commit 9ac0934bbe52290e4e4c2a58ec41cab9b6ca8c96
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 29 16:37:54 2015 +0300

      drm: crtc: integer overflow in drm_property_create_blob()

      The size here comes from the user via the ioctl, it is a number between
      1-u32max so the addition here could overflow on 32 bit systems.

      Fixes: f453ba046074 ('DRM: add mode setting support')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Reviewed-by: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx # v4.2
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxx>

  commit 9b971e771ece3f3fa9c6074e5a12d9304e5fa9ef
  Merge: 7c0f488 73effcc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:57:55 2015 -0700

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Will Deacon:
       "Apologies for this being so late, but we've uncovered a few nasty
        issues on arm64 which didn't settle down until yesterday and the fixes
        all look suitable for 4.3.  Of the four patches, three of them are
        Cc'd to stable, with the remaining patch fixing an issue that only
        took effect during the merge window.

        Summary:

         - Fix corruption in SWP emulation when STXR fails due to contention
         - Fix MMU re-initialisation when resuming from a low-power state
         - Fix stack unwinding code to match what ftrace expects
         - Fix relocation code in the EFI stub when DRAM base is not 2MB 
aligned"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64/efi: do not assume DRAM base is aligned to 2 MB
        Revert "ARM64: unwind: Fix PC calculation"
        arm64: kernel: fix tcr_el1.t0sz restore on systems with extended idmap
        arm64: compat: fix stxr failure case in SWP emulation

  commit 7c0f488fbed7e498043f26de42c89c00855028c1
  Merge: 8a28d67 d305c47
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:56:44 2015 -0700

      Merge tag 'please-pull-syscalls' of 
git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux

      Pull ia64 kcmp syscall from Tony Luck:
       "Missed adding the kcmp() syscall a long time ago.  Now it seems that
        it is essential to build systemd"

      * tag 'please-pull-syscalls' of 
git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux:
        [IA64] Wire up kcmp syscall

  commit b8a9d66d043ffac116100775a469f05f5158c16f
  Author: Roman Gushchin <klamm@xxxxxxxxxxxxxx>
  Date:   Sat Oct 31 10:53:50 2015 +1100

      md/raid5: fix locking in handle_stripe_clean_event()

      After commit 566c09c53455 ("raid5: relieve lock contention in 
get_active_stripe()")
      __find_stripe() is called under conf->hash_locks + hash.
      But handle_stripe_clean_event() calls remove_hash() under
      conf->device_lock.

      Under some cirscumstances the hash chain can be circuited,
      and we get an infinite loop with disabled interrupts and locked hash
      lock in __find_stripe(). This leads to hard lockup on multiple CPUs
      and following system crash.

      I was able to reproduce this behavior on raid6 over 6 ssd disks.
      The devices_handle_discard_safely option should be set to enable trim
      support. The following script was used:

      for i in `seq 1 32`; do
          dd if=/dev/zero of=large$i bs=10M count=100 &
      done

      neilb: original was against a 3.x kernel.  I forward-ported
        to 4.3-rc.  This verison is suitable for any kernel since
        Commit: 59fc630b8b5f ("RAID5: batch adjacent full stripe write")
        (v4.1+).  I'll post a version for earlier kernels to stable.

      Signed-off-by: Roman Gushchin <klamm@xxxxxxxxxxxxxx>
      Fixes: 566c09c53455 ("raid5: relieve lock contention in 
get_active_stripe()")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>
      Cc: Shaohua Li <shli@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.13 - 4.2

  commit bae818ee1577c27356093901a0ea48f672eda514
  Author: Ronny Hegewald <ronny.hegewald@xxxxxxxxx>
  Date:   Thu Oct 15 18:50:46 2015 +0000

      rbd: require stable pages if message data CRCs are enabled

      rbd requires stable pages, as it performs a crc of the page data before
      they are send to the OSDs.

      But since kernel 3.9 (patch 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0
      "mm: only enforce stable page writes if the backing device requires
      it") it is not assumed anymore that block devices require stable pages.

      This patch sets the necessary flag to get stable pages back for rbd.

      In a ceph installation that provides multiple ext4 formatted rbd
      devices "bad crc" messages appeared regularly (ca 1 message every 1-2
      minutes on every OSD that provided the data for the rbd) in the
      OSD-logs before this patch. After this patch this messages are pretty
      much gone (only ca 1-2 / month / OSD).

      Cc: stable@xxxxxxxxxxxxxxx # 3.9+, needs backporting
      Signed-off-by: Ronny Hegewald <Ronny.Hegewald@xxxxxxxxx>
      [idryomov@xxxxxxxxx: require stable pages only in crc case, changelog]
      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>

  commit aa644fa64c25ab2231a0fa9464892f5579d4e161
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Mon Oct 19 17:55:49 2015 +0100

      ARM64: Enable multi-core scheduler support by default

      Make sure that the task scheduler domain hierarchy is set-up correctly
      on systems with single or multi-cluster topology.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Acked-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit bf457786f569cc480629d7855cac1fd1173ac009
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Oct 23 16:48:14 2015 +0200

      arm64/efi: move arm64 specific stub C code to libstub

      Now that we added special handling to the C files in libstub, move
      the one remaining arm64 specific EFI stub C file to libstub as
      well, so that it gets the same treatment. This should prevent future
      changes from resulting in binaries that may execute incorrectly in
      UEFI context.

      With efi-entry.S the only remaining EFI stub source file under
      arch/arm64, we can also simplify the Makefile logic somewhat.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Tested-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 50224f4d0959981ed03c407af1f35ed7917ae097
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Fri Oct 30 07:52:39 2015 -0700

      hwmon: (nct6775) Introduce separate temperature labels for NCT6792 and 
NCT6793

      NCT6792 and NCT6793 are mostly register compatible to NCT6791, but
      temperature sources are different and difficult to manage with a single
      temperature label array. Introduce separate temperature label arrays
      for those chips to reflect the differences.

      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 9a38371a8cda366400e592d10bc062deea09b695
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sat Aug 29 15:29:25 2015 -0700

      hwmon: (nct6775) NCT6791D and NCT6792D have an additional temperature 
source

      Both NCT6791D and NCT6792D permit selection of a 'virtual' temperature
      register as temperature source. The virtual temperature registers are
      registers 0xea to 0xef in bank 0 and can be written by software.

      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 562b103a21974c2f9cd67514d110f918bb3e1796
  Author: Marek Vasut <marex@xxxxxxx>
  Date:   Fri Oct 30 13:48:19 2015 +0100

      can: Use correct type in sizeof() in nla_put()

      The sizeof() is invoked on an incorrect variable, likely due to some
      copy-paste error, and this might result in memory corruption. Fix this.

      Signed-off-by: Marek Vasut <marex@xxxxxxx>
      Cc: Wolfgang Grandegger <wg@xxxxxxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Cc: linux-stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit e7b63ff115f21ea6c609cbb08f3d489af627af6e
  Merge: a493bcf cb866e3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 20:51:56 2015 +0900

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

      Steffen Klassert says:

      ====================
      pull request (net-next): ipsec-next 2015-10-30

      1) The flow cache is limited by the flow cache limit which
         depends on the number of cpus and the xfrm garbage collector
         threshold which is independent of the number of cpus. This
         leads to the fact that on systems with more than 16 cpus
         we hit the xfrm garbage collector limit and refuse new
         allocations, so new flows are dropped. On systems with 16
         or less cpus, we hit the flowcache limit. In this case, we
         shrink the flow cache instead of refusing new flows.

         We increase the xfrm garbage collector threshold to INT_MAX
         to get the same behaviour, independent of the number of cpus.

      2) Fix some unaligned accesses on sparc systems.
         From Sowmini Varadhan.

      3) Fix some header checks in _decode_session4. We may call
         pskb_may_pull with a negative value converted to unsigened
         int from pskb_may_pull. This can lead to incorrect policy
         lookups. We fix this by a check of the data pointer position
         before we call pskb_may_pull.

      4) Reload skb header pointers after calling pskb_may_pull
         in _decode_session4 as this may change the pointers into
         the packet.

      5) Add a missing statistic counter on inner mode errors.

      Please pull or let me know if there are problems.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a493bcf8d6caf28f062c5f8f2ba486fdbf1ae899
  Merge: e258d91 8aaa878
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 20:38:24 2015 +0900

      Merge tag 'wireless-drivers-next-for-davem-2015-10-29' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

      Kalle Valo says:

      ====================
      iwlwifi

      * bug fix for TDLS
      * fixes and cleanups in scan
      * support of several scan plans
      * improvements in FTM
      * fixes in FW API
      * improvements in the failure paths when the bus is dead
      * other various small things here and there

      ath10k

      * add QCA9377 support
      * fw_stats support for 10.4 firmware

      ath6kl

      * report antenna configuration to user space
      * implement ethtool stats

      ssb

      * add Kconfig SSB_HOST_SOC for compiling SoC related code
      * move functions specific to SoC hosted bus to separated file
      * pick PCMCIA host code support from b43 driver
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e258d919b175e0160a694a20fb309e29fc93d7b1
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Oct 28 23:17:31 2015 -0700

      switchdev: fix: pass correct obj size when deferring obj add

      Fixes: 4d429c5dd ("switchdev: introduce possibility to defer obj_add/del")
      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3a7bde55a11c4a22a6ccfc487993d621ae8e3688
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Oct 28 23:17:30 2015 -0700

      switchdev: fix: erasing too much of vlan obj when handling multiple vlan 
specs

      When adding vlans with multiple IFLA_BRIDGE_VLAN_INFO attrs set in AFSPEC,
      we would wipe the vlan obj struct after the first IFLA_BRIDGE_VLAN_INFO.
      Fix this by only clearing what's necessary on each IFLA_BRIDGE_VLAN_INFO
      iteration.

      Fixes: 9e8f4a54 ("switchdev: push object ID back to object structure")
      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 740215ddb5b3faa0006505de073654cc50e9a299
  Merge: 5bf8921 f116317
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 20:19:43 2015 +0900

      Merge tag 'nfc-next-4.4-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sameo/nfc-next

      Samuel Ortiz says:

      ====================
      NFC 4.4 pull request

      This is the NFC pull request for 4.4.

      It's a bit bigger than usual, the 3 main culprits being:

      - A new driver for Intel's Fields Peak NCI chipset. In order to
        support this chipset we had to export a few NCI routines and
        extend the driver NCI ops to not only support proprietary
        commands but also core ones.

      - Support for vendor commands for both STM drivers, st-nci
        and st21nfca. Those vendor commands allow to run factory tests
        through the NFC netlink interface.

      - New i2c and SPI support for the Marvell driver, together with
        firmware download support for this driver's core.

      Besides that we also have:

      - A few file renames in the STM drivers, to keep the naming
        consistent between drivers.

      - Some improvements and fixes on the NCI HCI layer, mostly to
        properly reach a secure element over a legacy HCI link.

      - A few fixes for the s3fwrn5 and trf7970a drivers.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5bf8921116ce0972c23b78ea2d98e5c0c6a99ae2
  Merge: b7b0b1d 324e786
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 19:41:10 2015 +0900

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-10-28

      Here are a some more Bluetooth patches for 4.4 which collected up during
      the past week. The most important ones are from Kuba Pawlak for fixing
      locking issues with SCO sockets. There's also a fix from Alexander Aring
      for 6lowpan, a memleak fix from Julia Lawall for the btmrvl driver and
      some cleanup patches from Marcel.

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 13e3008fae342c86dd645b2ec4c669bbb40c5d33
  Author: Mike Looijmans <mike.looijmans@xxxxxxxx>
  Date:   Thu Oct 22 13:30:20 2015 +0200

      pinctrl: zynq: Initialize early

      Supplying pinmux configuration for e.g. gpio pins leads to deferred
      probes because the pinctrl device is probed much later than gpio.
      Move the init call to a much earlier stage so it probes before the
      devices that may need it.

      Signed-off-by: Mike Looijmans <mike.looijmans@xxxxxxxx>
      Tested-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e25589894e24b07a33b143b9bfd95fe8d2c0a353
  Author: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
  Date:   Wed Oct 28 17:24:16 2015 -0400

      gpio: Add ACCES 104-IDIO-16 driver maintainer entry

      Add William Breathitt Gray as the maintainer of the ACCES 104-IDIO-16
      GPIO driver.

      Signed-off-by: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d9e4ad5badf4ccbfddee208c898fb8fd0c8836b1
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 16:14:31 2015 +0900

      Document that IRQ_NONE should be returned when IRQ not actually handled

      Our IRQ storm detection works when an interrupt handler returns
      IRQ_NONE for thousands of consecutive interrupts in a second. It
      doesn't hurt to occasionally return IRQ_NONE when the interrupt is
      actually genuine.

      Drivers should only be returning IRQ_HANDLED if they have actually
      *done* something to stop an interrupt from happening â?? it doesn't just
      mean "this really *was* my device".

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Cc: davem@xxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/1446016471.3405.201.camel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b7b0b1d290cc89c39607dd47f8047e1071e65692
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Mon Oct 26 11:06:33 2015 -0700

      ipv6: recreate ipv6 link-local addresses when increasing MTU over 
IPV6_MIN_MTU

      This change makes it so that we reinitialize the interface if the MTU is
      increased back above IPV6_MIN_MTU and the interface is up.

      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bebd23a2ed31d47e7dd746d3b125068aa2c42d85
  Merge: 66a565c 7ed4915
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Oct 30 10:09:37 2015 +0100

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      New features:

        - Allow passing C language eBPF scriptlets via --event in all tools,
          so that it gets built using clang and then pass it to the kernel via
          sys_bpf(). (Wang Nan)

        - Wire up the loaded ebpf object file with associated kprobes, so that
          it can determine if the kprobes will be filtered or not. (Wang Nan)

      User visible changes:

        - Add cmd string table to decode sys_bpf first arg in 'trace'. (Arnaldo 
Carvalho de Melo)

        - Enable printing of branch stack in 'perf script'. (Stephane Eranian)

        - Pass the right file with debug info to libunwind. (Rabin Vincent)

      Build Fixes:

        - Make sure fixdep is built before libbpf, fixing a race. (Jiri Olsa)

        - Fix libiberty feature detection. (Rabin Vincent)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ee6259382ca8f723a2cc90841f903667c7720584
  Merge: 65bdc43 c7070fc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:27:07 2015 +0900

      Merge branch 'mlxsw-flooding-and-cosmetics'

      Jiri Pirko says:

      ====================
      mlxsw: driver update

      This driver update mainly brings support for user to be able to setup
      flooding on specified port, via bridge flag. Also, there is a fix in 
ageing
      time conversion. The rest is just cosmetics.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7070fc4ecb50bee801cef85483e043d0ba1dd27
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:05 2015 +0100

      mlxsw: spectrum: Make mlxsw_sp_port_switchdev_ops static

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d9324f68eea7b01bde25ab4c204227f3583b92ba
  Author: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:04 2015 +0100

      mlxsw: Put braces on all arms of branch statement

      Fix a place where checkpatch complains that braces should be used
      on all arms of this statement.

      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef743fddb33f47b34c852f26fbd2057c72c70016
  Author: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:03 2015 +0100

      mlxsw: Put constant on the right side of comparisons

      Fixes those places where checkpatch complains that comparisons
      should place the constant on the right side of the test.

      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 135f9eceb7fa0287e535f9ec921485661e9d6667
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:02 2015 +0100

      mlxsw: spectrum: Fix ageing time value

      The value passed through switchdev attr set is not in jiffies, but in
      clock_t, so fix the convert.

      Reported-by: Sagi Rotem <sagir@xxxxxxxxxxxx>
      Fixes: 56ade8fe3f ("mlxsw: spectrum: Add initial support for Spectrum 
ASIC")
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 75c09280feddcf5c01c00aa11881c4b38559e2ef
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:01 2015 +0100

      mlxsw: reg: Avoid unnecessary line wrap for mlxsw_reg_sfd_uc_unpack

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8316f087f7c62a2d21ec4e72926ec07ce777fe48
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:00 2015 +0100

      mlxsw: reg: Fix desription typos of couple of SFN items

      Fix copy-paste errors.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e9ec0839b4994ebc764d8067832dd079336c42f
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:59 2015 +0100

      mlxsw: reg: Fix description for reg_sfd_uc_sub_port

      The original description was for LAG, so fix it.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0293038e0c36db45f2ea4e4e4a8ce0a0faa62139
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:58 2015 +0100

      mlxsw: spectrum: Add support for flood control

      Add or remove a bridged port from the flooding domain of unknown unicast
      packets according to user configuration.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1b3433a942922953df43ef0bc0172119041364c5
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:57 2015 +0100

      mlxsw: spectrum: Add support for VLAN ranges in flooding configuration

      When enabling a range of VLANs on a bridged port we can configure
      flooding for these VLANs by one register access instead of calling the
      same register for each VLAN. This is accomplished by using the 'range'
      field of the Switch Flooding Table Register (SFTR).

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0d9b970cee612968c6b888b93736d991762b9edb
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:56 2015 +0100

      mlxsw: spectrum: move "bridged" bool to u8 flags

      It is a flag anyway, so move it to existing u8 flag and don't waste mem.
      Fix the flags to be in single u8 on the way.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 371e59adcebf9953385bf46d5325ac39a53c5520
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:55 2015 +0100

      switchdev: Make flood to CPU optional

      In certain use cases it is not always desirable for the switch device to
      flood traffic to CPU port. Instead, only certain packet types (e.g.
      STP, LACP) should be trapped to it.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 741af0053b43d8b9a688a12c57ece62338616ae8
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:54 2015 +0100

      switchdev: Add support for flood control

      Allow devices supporting this feature to control the flooding of unknown
      unicast traffic, by making switchdev infrastructure propagate this setting
      to the switch driver.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 65bdc43d2220bc97af037c87aba2407b46f13c2a
  Merge: b7af147 6ccbe6b
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:21:57 2015 +0900

      Merge branch 'xgene_txrx_delay'

      Iyappan Subramanian says:

      ====================
      drivers: xgene: Add support RGMII TX/RX delay configuration

      X-Gene RGMII ethernet controller has a RGMII bridge that performs the
      task of converting the RGMII signal {RX_CLK,RX_CTL, RX_DATA[3:0]} from
      PHY to GMII signal {RX_DV,RX_ER,RX_DATA[7:0]} and vice versa.  This
      RGMII bridge has a provision to internally delay the input RX_CLK and
      the output TX_CLK using configuration registers. This will help in
      maintain the CLK-CTL delay relationship in various operating
      conditions.

      This patch adds support RGMII TX/RX delay configuration.
      ====================

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ccbe6b248ef8cc31477a388ea9841b56030bea9
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Mon Oct 26 15:25:16 2015 -0700

      Documentation: dts: xgene: Add TX/RX delay field

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 16615a4c6f4d54d7655dff19e7061c76043f907d
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Mon Oct 26 15:25:15 2015 -0700

      drivers: net: xgene: Add support RGMII TX/RX delay configuration

      Add RGMII TX/RX delay configuration support. RGMII standard requires 2ns
      delay to help the RGMII bridge receiver to sample data correctly. If the
      default value does not provide proper centering of the data sample, the
      TX/RX delay parameters can be used to adjust accordingly.

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b7af1472afa2228bd9fe8b4cea3b003b4027d72d
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:52:56 2015 -0700

      bridge: set is_local and is_static before fdb entry is added to the fdb 
hashtable

      Problem Description:
      We can add fdbs pointing to the bridge with NULL ->dst but that has a
      few race conditions because br_fdb_insert() is used which first creates
      the fdb and then, after the fdb has been published/linked, sets
      "is_local" to 1 and in that time frame if a packet arrives for that fdb
      it may see it as non-local and either do a NULL ptr dereference in
      br_forward() or attach the fdb to the port where it arrived, and later
      br_fdb_insert() will make it local thus getting a wrong fdb entry.
      Call chain br_handle_frame_finish() -> br_forward():
      But in br_handle_frame_finish() in order to call br_forward() the dst
      should not be local i.e. skb != NULL, whenever the dst is
      found to be local skb is set to NULL so we can't forward it,
      and here comes the problem since it's running only
      with RCU when forwarding packets it can see the entry before "is_local"
      is set to 1 and actually try to dereference NULL.
      The main issue is that if someone sends a packet to the switch while
      it's adding the entry which points to the bridge device, it may
      dereference NULL ptr. This is needed now after we can add fdbs
      pointing to the bridge.  This poses a problem for
      br_fdb_update() as well, while someone's adding a bridge fdb, but
      before it has is_local == 1, it might get moved to a port if it comes
      as a source mac and then it may get its "is_local" set to 1

      This patch changes fdb_create to take is_local and is_static as
      arguments to set these values in the fdb entry before it is added to the
      hash. Also adds null check for port in br_forward.

      Fixes: 3741873b4f73 ("bridge: allow adding of fdb entries pointing to the 
bridge device")
      Reported-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b8812fa88371ae567c907448d9a7ba62d09b90c9
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 09:49:00 2015 -0400

      geneve: add IPv6 bits to geneve_fill_metadata_dst

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3a56f86f1be6a381345800d69999eaff87e0161d
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 17:01:45 2015 -0400

      geneve: handle ipv6 priority like ipv4 tos

      Other callers of udp_tunnel6_xmit_skb just pass 0 for the prio
      argument.  Jesse Gross <jesse@xxxxxxxxxx> suggested that prio is really
      the same as IPv4's tos and should be handled the same, so this is my
      interpretation of that suggestion.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reported-by: Jesse Gross <jesse@xxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ed66f0e8235118a31720acdab3bbbe9debd0f6a
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 17:01:44 2015 -0400

      geneve: implement support for IPv6-based tunnels

      NOTE: Link-local IPv6 addresses for remote endpoints are not supported,
      since the driver currently has no capacity for binding a geneve
      interface to a specific link.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04ccb89073e7cfc31d9b9208d32b2cdf84a4d97d
  Merge: 8a28d67 ae93580
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 30 09:32:59 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      regression fix for backlight on old laptops.

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/radeon: fix dpms when driver backlight control is disabled
        drm/radeon: move bl encoder assignment into bl init

  commit 7ed4915ad60788d6b846e2cd034f49ee15698143
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Thu Oct 29 08:49:36 2015 +0100

      perf unwind: Pass symbol source to libunwind

      Even if --symfs is used to point to the debug binaries, we send in the
      non-debug filenames to libunwind, which leads to libunwind not finding
      the debug frame.  Fix this by preferring the file in --symfs, if it is
      available.

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446104978-26429-1-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3af6ed84eb43c587beb5f3252222e39e65d08c61
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Thu Oct 29 08:49:37 2015 +0100

      tools build: Fix libiberty feature detection

      Any CFLAGS or LDFLAGS set by the user need to be passed to the feature
      build command.  This many include for example -I or -L to point to
      libraries and include files in custom paths.

      In most of the test-*.bin rules in build/feature/Makefile, we use the 
BUILD
      macro which always sends in CFLAGS and LDFLAGS.  The libiberty build line
      however doesn't use the BUILD macro and thus needs to send in CFLAGS and
      LDFLAGS explicitly.  Without this, when using custom CFLAGS/LDFLAGS, 
libiberty
      fails to be detected and the perf link fails with something like:

         LINK     perf
        libbfd.a(bfd.o): In function `bfd_errmsg':
        bfd.c:(.text+0x168): undefined reference to `xstrerror'
        bbfd.a(opncls.o): In function `_bfd_new_bfd':
        opncls.c:(.text+0xe8): undefined reference to `objalloc_create'
        ...

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446104978-26429-2-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d509db0473e40134286271b1d1adadccf42ac467
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:20 2015 +0000

      perf tools: Compile scriptlets to BPF objects when passing '.c' to --event

      This patch provides infrastructure for passing source files to --event
      directly using:

       # perf record --event bpf-file.c command

      This patch does following works:

       1) Allow passing '.c' file to '--event'. parse_events_load_bpf() is
          expanded to allow caller tell it whether the passed file is source
          file or object.

       2) llvm__compile_bpf() is called to compile the '.c' file, the result
          is saved into memory. Use bpf_object__open_buffer() to load the
          in-memory object.

      Introduces a bpf-script-example.c so we can manually test it:

       # perf record --clang-opt "-DLINUX_VERSION_CODE=0x40200" --event 
./bpf-script-example.c sleep 1

      Note that '--clang-opt' must put before '--event'.

      Futher patches will merge it into a testcase so can be tested 
automatically.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-10-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 71dc2326252ff1bcdddc05db03c0f831d16c9447
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:19 2015 +0000

      perf record: Add clang options for compiling BPF scripts

      Although previous patch allows setting BPF compiler related options in
      perfconfig, on some ad-hoc situation it still requires passing options
      through cmdline. This patch introduces 2 options to 'perf record' for
      this propose: --clang-path and --clang-opt.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-9-git-send-email-wangnan0@xxxxxxxxxx
      [ Add the new options to the 'record' man page ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1f45b1d49073541947193bd7dac9e904142576aa
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:18 2015 +0000

      perf bpf: Attach eBPF filter to perf event

      This is the final patch which makes basic BPF filter work. After
      applying this patch, users are allowed to use BPF filter like:

       # perf record --event ./hello_world.o ls

      A bpf_fd field is appended to 'struct evsel', and setup during the
      callback function add_bpf_event() for each 'probe_trace_event'.

      PERF_EVENT_IOC_SET_BPF ioctl is used to attach eBPF program to a newly
      created perf event. The file descriptor of the eBPF program is passed to
      perf record using previous patches, and stored into evsel->bpf_fd.

      It is possible that different perf event are created for one kprobe
      events for different CPUs. In this case, when trying to call the ioctl,
      EEXIST will be return. This patch doesn't treat it as an error.

      Committer note:

      The bpf proggie used so far:

        __attribute__((section("fork=_do_fork"), used))
        int fork(void *ctx)
        {
          return 0;
        }

        char _license[] __attribute__((section("license"), used)) = "GPL";
        int _version __attribute__((section("version"), used)) = 0x40300;

      failed to produce any samples, even with forks happening and it being
      running in system wide mode.

      That is because now the filter is being associated, and the code above
      always returns zero, meaning that all forks will be probed but filtered
      away ;-/

      Change it to 'return 1;' instead and after that:

        # trace --no-syscalls --event /tmp/foo.o
           0.000 perf_bpf_probe:fork:(ffffffff8109be30))
           2.333 perf_bpf_probe:fork:(ffffffff8109be30))
           3.725 perf_bpf_probe:fork:(ffffffff8109be30))
           4.550 perf_bpf_probe:fork:(ffffffff8109be30))
        ^C#

      And it works with all tools, including 'perf trace'.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-8-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 50f1e6d0431d3343cb506037c43ce623bd15581f
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Oct 28 21:44:50 2015 +0100

      perf tools: Make sure fixdep is built before libbpf

      While doing 'make -C tools/perf build-test':

         LD       fixdep-in.o
         LINK     fixdep
       /bin/sh: /home/acme/git/linux/tools/build/fixdep: Permission denied
       make[6]: *** [bpf.o] Error 1
       make[5]: *** [libbpf-in.o] Error 2
       make[4]: *** [/home/acme/git/linux/tools/lib/bpf/libbpf.a] Error 2
       make[4]: *** Waiting for unfinished jobs....

      The fixdep tool needs to be built as the first binary.  Libraries are
      built in paralel, so each of them needs to depend on fixdep target.

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151028204450.GA25553@xxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dc323ce8e72d6d1beb9af9bbd29c4d55ce3d7fb0
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Mon Aug 31 18:41:13 2015 +0200

      perf script: Enable printing of branch stack

      This patch improves perf script by enabling printing of the
      branch stack via the 'brstack' and 'brstacksym' arguments to
      the field selection option -F. The option is off by default
      and operates only if the perf.data file has branch stack content.

      The branches are printed in to/from pairs. The most recent branch
      is printed first. The number of branch entries vary based on the
      underlying hardware and filtering used.

      The brstack prints FROM/TO addresses in raw hexadecimal format.
      The brstacksym prints FROM/TO addresses in symbolic form wherever
      possible.

       $ perf script -F ip,brstack
        5d3000 0x401aa0/0x5d2000/M/-/-/-/0 ...

       $ perf script -F ip,brstacksym
        4011e0 noploop+0x0/noploop+0x0/P/-/-/0

      The notation F/T/M/X/A/C describes the attributes of the branch.
      F=from, T=to, M/P=misprediction/prediction, X=TSX, A=TSX abort, C=cycles 
(SKL)

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Yuanfang Chen <cyfmxc@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441039273-16260-5-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit cb083816ab5ac3d10a9417527f07fc5962cc3808
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Oct 26 21:42:33 2015 +0000

      arm64: page-align sections for DEBUG_RODATA

      A kernel built with DEBUG_RO_DATA && !CONFIG_DEBUG_ALIGN_RODATA doesn't
      have .text aligned to a page boundary, though fixup_executable works at
      page-granularity thanks to its use of create_mapping. If .text is not
      page-aligned, the first page it exists in may be marked non-executable,
      leading to failures when an attempt is made to execute code in said
      page.

      This patch upgrades ALIGN_DEBUG_RO and ALIGN_DEBUG_RO_MIN to force page
      alignment for DEBUG_RO_DATA && !CONFIG_DEBUG_ALIGN_RODATA kernels,
      ensuring that all sections with specific RWX permission requirements are
      mapped with the correct permissions.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Reported-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Reviewed-by: Laura Abbott <laura@xxxxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Suzuki Poulose <suzuki.poulose@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Fixes: da141706aea52c1a ("arm64: add better page protections to arm64")
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 86a5906e4d1df1ec160fa9e18b6f2277a5216c60
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Tue Oct 27 17:40:26 2015 +0000

      arm64: Fix build with CONFIG_ZONE_DMA=n

      Trying to build with CONFIG_ZONE_DMA=n leaves visible references
      to the now-undefined ZONE_DMA, resulting in a syntax error.

      Hide the references behind an #ifdef instead of using IS_ENABLED.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5accd17d0eb523350c9ef754d655e379c9bb93b3
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Thu Oct 22 15:41:52 2015 +0100

      arm64: Fix compat register mappings

      For reasons not entirely apparent, but now enshrined in history, the
      architectural mapping of AArch32 banked registers to AArch64 registers
      actually orders SP_<mode> and LR_<mode> backwards compared to the
      intuitive r13/r14 order, for all modes except FIQ.

      Fix the compat_<reg>_<mode> macros accordingly, in the hope of avoiding
      subtle bugs with KVM and AArch32 guests.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 73effccb9196ccc0241c3fb51dfd8de1d14ae8ed
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Oct 29 15:07:25 2015 +0100

      arm64/efi: do not assume DRAM base is aligned to 2 MB

      The current arm64 Image relocation code in the UEFI stub assumes that
      the dram_base argument it receives is always a multiple of 2 MB. In
      reality, it is simply the lowest start address of all RAM entries in
      the UEFI memory map, which means it could be any multiple of 4 KB.

      Since the arm64 kernel Image needs to reside TEXT_OFFSET bytes beyond
      a 2 MB aligned base, or it will fail to boot, make sure we round dram_base
      to 2 MB before using it to calculate the relocation address.

      Fixes: e38457c361b30c5a ("arm64: efi: prefer AllocatePages() over 
efi_low_alloc() for vmlinux")
      Reported-by: Timur Tabi <timur@xxxxxxxxxxxxxx>
      Tested-by: Timur Tabi <timur@xxxxxxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 116ef0fcc9268a876c8d1bbf77d8fa80111fa526
  Merge: 9ffecb1 38850d7 a4283e4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 29 15:21:30 2015 +0000

      Merge branches 'fixes' and 'misc' into for-next

  commit 38850d786a799c3ff2de0dc1980902c3263698dc
  Author: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 19:00:26 2015 +0100

      ARM: 8449/1: fix bug in vdsomunge swab32 macro

      Commit 8a603f91cc48 ("ARM: 8445/1: fix vdsomunge not to depend on
      glibc specific byteswap.h") unfortunately introduced a bug created but
      not found during discussion and patch simplification.

      Reported-by: Efraim Yawitz <efraim.yawitz@xxxxxxxxx>
      Signed-off-by: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
      Fixes: 8a603f91cc48 ("ARM: 8445/1: fix vdsomunge not to depend on glibc 
specific byteswap.h")
      Signed-off-by: Nathan Lynch <nathan_lynch@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit ae93580ee59c02395c1711d3e6b90546b8137b86
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Oct 27 10:56:44 2015 -0400

      drm/radeon: fix dpms when driver backlight control is disabled

      If driver backlight control is disabled, either by driver
      parameter or default per-asic setting, revert to the old behavior.

      Fixes a regression in commit:
      4281f46ef839050d2ef60348f661eb463c21cc2e

      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 4cee6a9057d5e13911f0cb6e143d11dc1a3245dd
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Wed Oct 28 14:26:32 2015 -0400

      drm/radeon: move bl encoder assignment into bl init

      So that the bl encoder will be null if the GPU does not
      control the backlight.

      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 729a78417a7b5c1f59e15d21a1900758375c4647
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 29 11:48:18 2015 -0300

      perf trace: Add cmd string table to decode sys_bpf first arg

       # perf trace -e bpf perf record -e /tmp/foo.o -a
         362.779 (0.130 ms): perf/3451 bpf(cmd: PROG_LOAD, uattr: 
0x7ffe9a6825d0, size: 48) = 3

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-2b0nknu53baz9e0wj4thcdd8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 89bc7848a91bc99532f5c21b2885472ba710f249
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:21:04 2015 +0100

      ipv6: protect mtu calculation of wrap-around and infinite loop by 
rounding issues

      Raw sockets with hdrincl enabled can insert ipv6 extension headers
      right into the data stream. In case we need to fragment those packets,
      we reparse the options header to find the place where we can insert
      the fragment header. If the extension headers exceed the link's MTU we
      actually cannot make progress in such a case.

      Instead of ending up in broken arithmetic or rounding towards 0 and
      entering an endless loop in ip6_fragment, just prevent those cases by
      aborting early and signal -EMSGSIZE to user space.

      This is the second version of the patch which doesn't use the
      overflow_usub function, which got reverted for now.

      Suggested-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1e0d69a9cc9172d7896c2113f983a74f6e8ff303
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:21:03 2015 +0100

      Revert "Merge branch 'ipv6-overflow-arith'"

      Linus dislikes these changes. To not hold up the net-merge let's revert
      it for now and fix the bug like Linus suggested.

      This reverts commit ec3661b42257d9a06cf0d318175623ac7a660113, reversing
      changes made to c80dbe04612986fd6104b4a1be21681b113b5ac9.

      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8aaa878de83a0de3833f5b00bc822dbcd403ec36
  Merge: 845da6e 13eff53
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Thu Oct 29 15:34:27 2015 +0200

      Merge ath-next from ath.git

      Major changes:

      ath10k:

      * add QCA9377 support
      * fw_stats support for 10.4 firmware

      ath6kl:

      * report antenna configuration to user space
      * implement ethtool stats

  commit 5a364c2a1762e8a78721fafc93144509c0b6cb84
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Feb 6 18:44:57 2015 +0300

      ARC: mm: PAE40 support

      This is the first working implementation of 40-bit physical address
      extension on ARCv2.

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 66a565c203bc31b76969711fbd92da11bee2f129
  Merge: 6fc774e 4edf30e
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 29 13:17:56 2015 +0100

      Merge tag 'perf-ebpf-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull basic perf/ebpf integration:

       "Please see the changeset comments, but this is the very basic 
integration of
        perf with libbpf that, given a .o file built for the 'bpf' target with 
clang,
        will get it validated and loaded into the kernel via the sys_bpf 
syscall, which
        can be seen using 'perf trace' to trace the whole thing looking just 
for the
        bpf and perf_event_open syscalls:

          # perf trace -e bpf,perf_event_open perf record -g --event /tmp/foo.o 
-a
           362.779 ( 0.129 ms): perf/22408 bpf(cmd: 5, uattr: 0x7ffd4edb6db0, 
size: 48                           ) = 3
           384.192 ( 0.016 ms): perf/22408 perf_event_open(attr_uptr: 
0x7ffd4edbace0, pid: -1, cpu: 3, group_fd: -1, flags: FD_CLOEXEC) = 5
           384.247 ( 0.038 ms): perf/22408 perf_event_open(attr_uptr: 
0x37aedd8, pid: -1, group_fd: -1, flags: FD_CLOEXEC) = 5
           384.261 ( 0.007 ms): perf/22408 perf_event_open(attr_uptr: 
0x37aedd8, pid: -1, group_fd: -1, flags: FD_CLOEXEC) = 5
           387.680 ( 3.413 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, group_fd: -1, flags: FD_CLOEXEC) = 5
           387.688 ( 0.005 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, cpu: 1, group_fd: -1, flags: FD_CLOEXEC) = 6
           387.693 ( 0.004 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, cpu: 2, group_fd: -1, flags: FD_CLOEXEC) = 7
           387.698 ( 0.003 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, cpu: 3, group_fd: -1, flags: FD_CLOEXEC) = 8
          ^C[ perf record: Woken up 1 times to write data ]
            [ perf record: Captured and wrote 0.221 MB perf.data (2 samples) ]
          # perf script
          bash 18389 [002] 83446.412607: perf_bpf_probe:fork: (ffffffff8109be30)
                          29be31 _do_fork 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                          96d662 tracesys_phase2 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                           bd56c __libc_fork (/usr/lib64/libc-2.17.so)
                           413b2 make_child (/usr/bin/bash)

          bash 18389 [002] 83447.227255: perf_bpf_probe:fork: (ffffffff8109be30)
                          29be31 _do_fork 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                          96d662 tracesys_phase2 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                           bd56c __libc_fork (/usr/lib64/libc-2.17.so)
                           413b2 make_child (/usr/bin/bash)

          # perf evlist -v
          perf_bpf_probe:fork: type: 2, size: 112, config: 0x6cf, { 
sample_period, sample_freq }: 1, sample_type: 
IP|TID|TIME|CALLCHAIN|CPU|PERIOD|RAW, disabled: 1, inherit: 1, mmap: 1, comm: 
1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2: 1, comm_exec: 1
          #

        More work is about to be reviewed, tested and merged that will allow 
the whole
        process of going from a .c file to an .o file via clang, etc to be done
        automagically. (Wang Nan)"

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 13eff5311382cb109725363026cdb4717714bf65
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:07:39 2015 -0700

      ath6kl: implement ethtool stats

      This supports a way to get target stats through normal
      ethtool stats API.

      For instance:
      # ethtool -S wlan1
      NIC statistics:
           tx_pkts_nic: 353
           tx_bytes_nic: 25142
           rx_pkts_nic: 6
           rx_bytes_nic: 996
           d_tx_ucast_pkts: 89
           d_tx_bcast_pkts: 264
           d_tx_ucast_bytes: 3020
           d_tx_bcast_bytes: 22122
      ...

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0370248379579aa0274c8f14f2d9af1f32388104
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:07:38 2015 -0700

      ath6kl: break stats gathering code into separate method

      This will allow us to call it from elsewhere when implementing
      ethtool stats.

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 53cc3291bcfbefc0b3f1e3b7b30ed028b5f1a75d
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:53:21 2015 -0700

      ath6kl: fix firmware version assignment

      Improper use of strlcpy caused garbage to be appended to the
      firmware version string.  Fix this by paying attention to the
      ie_lenth.

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7fd98524560cac3a629aa1130d45260d4469d254
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:53:20 2015 -0700

      ath6kl: add error message to explain lack of HT

      It can take a user a while to understand why their
      NIC that advertises 802.11n support cannot actually
      do 802.11n.  Print out a warning in the logs to save
      the next poor person to use this NIC some trouble.

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 9c2e90ffc97a8f45b98d81345d8f2eff192d09ef
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:53:19 2015 -0700

      ath6kl: report antenna configuration

      This lets 'iw phy phy0 info' report antennas for
      the radio device:

      ...
        Available Antennas: TX 0x2 RX 0x2
        Configured Antennas: TX 0x2 RX 0x2
      ...

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 5140a5fde2b44d366338e00ad7c2a7ede8be3e65
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:24 2015 +0200

      wil6210: handle failure in Tx vring config

      When configuring Tx vring for new connection,
      WMI call to the firmware may fail. In this case, need to
      clean up properly. In particular, need to call
      cfg80211_del_sta() in case of AP like interface.

      Perform full "disconnect" procedure for proper clean up

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 817f18534412532198bf3da8dfd2663a1d75a7de
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:23 2015 +0200

      wil6210: fix device ready detection

      Adjust driver behavior during FW boot. Proper sequence of
      events after reset and FW download, is as following:

      - FW prepares mailbox structure and reports IRQ "FW_READY"
      - driver caches mailbox registers, marks mailbox readiness
      - FW sends WMI_FW_READY event, ignore it
      - FW sends WMI_READY event with some data
      - driver stores relevant data marks FW is operational

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit e3d2ed9434331dedb9eeece586d38aec9e29f60b
  Author: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:22 2015 +0200

      wil6210: Fix TSO overflow handling

      When Tx ring full is encountered with TSO,
      printout of "DMA error" was wrongly printed.

      In addition, in case of Tx ring full return
      proper error code so that NETDEV_TX_BUSY is
      returned to network stack in order not to
      drop the packets and retry transmission of the
      packets when ring is emptied.

      Signed-off-by: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b03fbab0c4d502510400b7ee5fb3d5bab6d859bf
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:21 2015 +0200

      wil6210: ignore selected WMI events

      Some events are ignored for purpose; such events should not
      be treated as "unhandled events". Replace info message
      saying "unhandled" with debug one saying "ignore", to reduce
      dmesg pollution

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a226b519d43a2a6b37267fea051aacb4a79c9614
  Author: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
  Date:   Wed Oct 28 15:09:53 2015 +0100

      ath10k: add QCA9377 chipset support

      Add the hardware name, revision and update the pci_id table.

      Currently there're two HW ref. designs available I'm aware of,
      with 1.0.2 and 1.1 chip revisions. I've access and been using
      the first one so far and this patch cover only it.

      QCA9377 inherits most of the stuff (e.g. fw interfaces)
      from QCA61x4 design, so the integration was pretty straightforward.

      Signed-off-by: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 5036fe0f6fae8a961745f5cf8d82a2a4912ae1ef
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:14 2015 +0530

      ath10k: reload HT/VHT capabilities on antenna change

      To reflect configured antenna settings in HT/VHT MCS map,
      reload the HT/VHT capabilities upon antenna change.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit f58512f336bbb166610be4a4c42ec1184edcd426
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:13 2015 +0530

      ath10k: move static HT/VHT capability setup functions

      Move HT and VHT capabiltity setup static functions to avoid
      forward declaration.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7a1d70ab05488146d20cfc8fb9e4acfd132c7bf5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:12 2015 +0530

      ath10k: fill HT/VHT MCS rateset only for configured chainmask

      HT/VHT MCS rateset should be filled only for configured chainmask
      rather that max supported chainmask. Fix that by checking configured
      chainmask while filling HT/VHT MCS rate map.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 166de3f1895dfc49d1f16cc39fd76dab6d7961d2
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:11 2015 +0530

      ath10k: remove supported chain mask

      Removing supported chainmask fields as it can be always derived
      from num_rf_chains.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b4c306d0c53ec1b444a4da1f1a3fefaace6b486e
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:06 2015 +0530

      ath10k: remove shadow copy of CE descriptors for source ring

      For the messages from host to target, shadow copy of CE descriptors
      are maintained in source ring. Before writing actual CE descriptor,
      first shadow copy is filled and then it is copied to CE address space.
      To optimize in download path and to reduce d-cache pressure, removing
      shadow copy of CE descriptors. This will also reduce driver memory
      consumption by 33KB during on device probing.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 765952e40dbadd4a74a44f55ac1344c338571bb9
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:05 2015 +0530

      ath10k: cleanup copy engine send completion

      The physical address necessary to unmap DMA ('bufferp') is stored
      in ath10k_skb_cb as 'paddr'. ath10k doesn't rely on the meta/transfer_id
      when handling send completion (htc ep id is stored in sk_buff control
      buffer). So the unused output arguments {bufferp, nbytesp and 
transfer_idp}
      are removed from CE send completion. This change is needed before removing
      the shadow copy of copy engine (CE) descriptors in follow up patch.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 1e8f86d9cbe9431dcda36fdd85a9f342d639dca5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:04 2015 +0530

      ath10k: remove send completion validation in diag read/write

      CE diag window access is serialized (it has to be by design) so
      there's no way to get a different send completion. so there's no
      need for post completion validation.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b4e84c5606f6c91a3fff96c25b9347dc75b2002d
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:03 2015 +0530

      ath10k: use local memory instead of shadow descriptor in ce_send

      Currently to avoid uncached memory access while filling up copy engine
      descriptors, shadow descriptors are used. This can be optimized further
      by removing shadow descriptors. To achieve that first shadow ring
      dependency in ce_send is removed by creating local copy of the
      descriptor on stack and make a one-shot copy into the "uncached"
      descriptor.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 98dd2b92bb591007e82fb58808f60134ee4479bf
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 21:38:33 2015 +0200

      ath10k: add fw_stats support to 10.4 firmware

      This patch adds support for getting firmware debug stats in 10.4 fw.

      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Tamizh chelvam <c_traja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a81a98cee94519807e826e199bb579a546efa289
  Author: Alan Liu <alanliu@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 21:38:32 2015 +0200

      ath10k: add FW API support to test mode

      Add WMI-TLV and FW API support in ath10k testmode.
      Ath10k can get right wmi command format from UTF image
      to communicate UTF firmware.

      Signed-off-by: Alan Liu <alanliu@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7cc8d580228cc712edcf7a1856a3bdb38c164e83
  Author: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
  Date:   Wed Oct 21 19:49:42 2015 +0900

      mmc: dw_mmc: fix the wrong setting for UHS-DDR50 mode

      When card is running with DDR mode, dwmmc needs to set DDR_REG bit at
      UHS_REG register.
      Before this patch, dwmmc controller doesn't consider this.
      If this patch is not applied, CRC or other error shoulds be occurred.

      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Reviewed-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 98daafd8a09d9a514bc2166709731d659037003b
  Author: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
  Date:   Wed Oct 21 19:49:41 2015 +0900

      mmc: dw_mmc: fix the CardThreshold boundary at CardThrCtl register

      According to DesignWare DoC file, CardThreshold bit should be
      bit[27:16].
      So it's correct to use (0xFFF << 16), not (0x1FFF << 16).

      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Reviewed-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4539d36ef2bbf2ee1519e7cfb51c6fdddda3e4e6
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 22 22:53:46 2015 +0300

      mmc: dw_mmc: NULL dereference in error message

      The "host->dms->ch" pointer is NULL here so we can't use it to print the
      error message.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 6fc774ef4ceca99c35dd3fb230dab618f78c8d6f
  Merge: 4341801 443f8c7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 29 10:29:18 2015 +0100

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Enable per-event perf_event_attr.inherit setting by config terms, i.e.
          this becomes possible:

              $ perf record -e cycles/inherit/ -e instructions/no-inherit/

          This affects the default, that can be changed globally using the 
--no-inherit
          option.

          This fine grained control appeared in the eBPF patchkit, but this 
added
          flexibility may end up being useful in other scenarios. (Wang Nan)

        - Setup pager when printing usage and help, we have long lists of 
options,
          better use the pager like we do with normal tooling output, i.e. when 
needed,
          and including any error messages in the paged output. (Namhyung Kim)

        - Search for more options when passing args to -h, e.g.: (Arnaldo 
Carvalho de Melo)

          $ perf report -h interface

           Usage: perf report [<options>]

            --gtk    Use the GTK2 interface
            --stdio  Use the stdio interface
            --tui    Use the TUI interface

        - Fix reading separate debuginfo files based on a build-id, problem
          found on a Debian system. (Dima Kogan)

        - Fix endless loop when splitting kallsyms symbols per section for
          handling kcore files, problem found on a s390x system. (Jiri Olsa)

      Infrastructure changes:

        - Prep work for the 'perf stat record' work that will allow generating
          perf.data files with counting data in addition to the sampling mode
          we have now (Jiri Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 001e2e730ce4e6dc2cd97fcb169097febfc7b200
  Author: Marc Titinger <mtitinger@xxxxxxxxxxxx>
  Date:   Tue Oct 27 10:51:08 2015 +0100

      hwmon: (ina2xx) give precedence to DT over checking for platform data.

      when checking for the value of the shunt resistor.

      Signed-off-by: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit a0de56c81fcf9f1a691e22e519b0dff21c48c645
  Author: Marc Titinger <mtitinger@xxxxxxxxxxxx>
  Date:   Wed Oct 28 12:04:53 2015 +0100

      hwmon: (ina2xx) convert driver to using regmap

      Any sysfs "show" read access from the client app will result in reading
      all registers (8 with ina226). Depending on the host this can limit the
      best achievable read rate.

      This changeset allows for individual register accesses through regmap.

      Tested with BeagleBone Black (Baylibre-ACME) and ina226.

      Signed-off-by: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit d305c4773458fdd6ff9c52bfdea8c67fbd3b2072
  Author: Ã?meric MASCHINO <emeric.maschino@xxxxxxxxx>
  Date:   Tue Sep 22 23:58:48 2015 +0200

      [IA64] Wire up kcmp syscall

      systemd > 218 fails to compile on ia64 with:

           error: â??__NR_kcmpâ?? undeclared [1].

      I've been told that this is because the kcmp syscall hasn't been wired up
      for the ia64 arch [2].

      The proposed patch thus wire up the kcmp syscall for the ia64 arch.

      [1] https://bugs.gentoo.org/show_bug.cgi?id=560492
      [2] https://bugs.gentoo.org/show_bug.cgi?id=560492#c17

      Signed-off-by: Ã?meric MASCHINO <emeric.maschino@xxxxxxxxx>
      Signed-off-by: Tony Luck <tony.luck@xxxxxxxxx>

  commit 62f77f095c27dc6b3536735aa960a8bb21e4c5eb
  Author: Maharaja <c_mkenna@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 11:49:18 2015 +0300

      ath10k: enable adaptive CCA

      European Union has made it mandatory that all devices working in 2.4 GHz
      has to adhere to the ETSI specification (ETSI EN 300 328 V1.9.1)
      beginnig this year. The standard basically speaks about interferences
      in 2.4Ghz band.
      For example, when 802.11 device detects interference, TX must be stopped
      as long as interference is present.

      Adaptive CCA is a feature, when enabled the device learns from the
      environment and configures CCA levels adaptively. This will improve
      detecting interferences and the device can stop trasmissions till the
      interference is present eventually leading to good performances in
      varying interference conditions.

      The patch includes code for enabling adaptive CCA for 10.2.4 firmware on
      QCA988X.

      Signed-off-by: Maharaja <c_mkenna@xxxxxxxxxxxxxxxx>
      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 97303480753e48fb313dc0e15daaf11b0451cdb8
  Author: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
  Date:   Tue Sep 22 19:59:48 2015 +0200

      arm64: Increase the max granular size

      Increase the standard cacheline size to avoid having locks in the same
      cacheline.

      Cavium's ThunderX core implements cache lines of 128 byte size. With
      current granulare size of 64 bytes (L1_CACHE_SHIFT=6) two locks could
      share the same cache line leading a performance degradation.
      Increasing the size fixes that.

      Increasing the size has no negative impact to cache invalidation on
      systems with a smaller cache line. There is an impact on memory usage,
      but that's not too important for arm64 use cases.

      Signed-off-by: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Acked-by: Timur Tabi <timur@xxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 845da6e58e19b932b8364ec3678b8f7f80d6b6a9
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Sun Oct 25 19:32:43 2015 +0100

      ssb: add Kconfig entry for compiling SoC related code

      This allows saving a little of space when not using ssb on Broadcom SoC.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 830c7df46247b44aa46ae276073e2e10727c9e93
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Sun Oct 25 19:32:42 2015 +0100

      ssb: move functions specific to SoC hosted bus to separated file

      This cleans main.c a bit and will allow us to compile SoC related code
      conditionally in the future.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 399500da18f7fe79699c0e4f603f8874cecb3898
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Thu Oct 15 07:23:25 2015 +0200

      ssb: pick PCMCIA host code support from b43 driver

      ssb bus can be found on various "host" devices like PCI/PCMCIA/SDIO.
      Every ssb bus contains cores AKA devices.
      The main idea is to have ssb driver scan/initialize bus and register
      ready-to-use cores. This way ssb drivers can operate on a single core
      mostly ignoring underlaying details.

      For some reason PCMCIA support was split between ssb and b43. We got
      PCMCIA host device probing in b43, then bus scanning in ssb and then
      wireless core probing back in b43. The truth is it's very unlikely we
      will ever see PCMCIA ssb device with no 802.11 core but I still don't
      see any advantage of the current architecture.

      With proposed change we get the same functionality with a simpler
      architecture, less Kconfig symbols, one killed EXPORT and hopefully
      cleaner b43. Since b43 supports both: ssb & bcma I prefer to keep ssb
      specific code in ssb driver.

      This mostly moves code from b43's pcmcia.c to bridge_pcmcia_80211.c. We
      already use similar solution with b43_pci_bridge.c. I didn't use "b43"
      in name of this new file as in theory any driver can operate on wireless
      core.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 0117e78aec73f1c0869e50d11a255b28aa4db8f0
  Author: Marty Faltesek <mfaltesek@xxxxxxxxxx>
  Date:   Sun Oct 25 22:54:01 2015 -0700

      mwifiex: toggle carrier state in start_ap/stop_ap.

      In uap mode the carrier is not enabled until after the first STA joins.
      The carrier triggers the bridge to start its state machine, and if STP
      is enabled, it takes 4 seconds as it transitions from disabled to
      forwarding. During this time the bridge drops all traffic, and the EAPOL
      handshake times out after 3 seconds, preventing stations from joining.

      Follow the logic used in mac80211 and start the carrier in start_ap
      and disable it in stop_ap. This has a nice benefit of allowing the
      first station connection time to be reduced by up to 75% when STP is
      in use.

      Signed-off-by: Martin Faltesek <mfaltesek@xxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 072255241d2e3e9c1e23fc693f0333be72adfe2a
  Author: yfw <fengwei.yin@xxxxxxxxxx>
  Date:   Mon Oct 26 10:36:22 2015 +0800

      wcn36xx: Remove warning message when dev is NULL for arm64 dma_alloc.

      arm64 has requirement that all the dma operations have actual device.
      Otherwise, following warnning message shown and dma allocation fails:

      WARNING: CPU: 0 PID: 954 at arch/arm64/mm/dma-mapping.c:106 
__dma_alloc+0x24c/0x258()
      Use an actual device structure for DMA allocation
      Modules linked in: wcn36xx wcn36xx_platform
      CPU: 0 PID: 954 Comm: ifconfig Not tainted 4.0.0+ #14
      Hardware name: Qualcomm Technologies, Inc. MSM 8916 MTP (DT)
      Call trace:
      [<ffffffc000089904>] dump_backtrace+0x0/0x124
      [<ffffffc000089a38>] show_stack+0x10/0x1c
      [<ffffffc000627114>] dump_stack+0x80/0xc4
      [<ffffffc0000b2e64>] warn_slowpath_common+0x98/0xd0
      [<ffffffc0000b2ee8>] warn_slowpath_fmt+0x4c/0x58
      [<ffffffc00009487c>] __dma_alloc+0x248/0x258
      [<ffffffbffc009270>] wcn36xx_dxe_allocate_mem_pools+0xc4/0x108 [wcn36xx]
      [<ffffffbffc0079c4>] wcn36xx_start+0x38/0x240 [wcn36xx]
      [<ffffffc0005f161c>] ieee80211_do_open+0x1b0/0x9a4
      [<ffffffc0005f1e68>] ieee80211_open+0x58/0x68
      [<ffffffc00051693c>] __dev_open+0xb0/0x120
      [<ffffffc000516c10>] __dev_change_flags+0x88/0x150
      [<ffffffc000516cf4>] dev_change_flags+0x1c/0x5c
      [<ffffffc000570950>] devinet_ioctl+0x644/0x6f0

      Signed-off-by: Yin, Fengwei <fengwei.yin@xxxxxxxxxx>
      Acked-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 8e8e54c490032f15779d7b199548eb0143b70f0f
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 13:42:15 2015 -0400

      wcn36xx: introduce per-channel ring buffer locks

      wcn36xx implements a ring buffer for transmitted frames for each
      (high and low priority) DMA channel.  The ring buffers are lockless:
      new frames are inserted at the head of the queue, while finished
      packets are reaped from the tail.

      Unfortunately, the list manipulations are missing any kind of barriers
      so are susceptible to various races: for example, a TX completion
      handler might read an updated desc->ctrl before the head has actually
      advanced, and then null out the ctl->skb pointer while it is still
      being used in the TX path.

      Simplify things here by adding a spin lock when traversing the ring.
      This change increased stability for me without adding any noticeable
      overhead on my platform (xperia z).

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 56bae464275ac57cbf993f3ed15e96d6e1ec00a2
  Author: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
  Date:   Tue Oct 20 14:19:26 2015 +0200

      ath9k: fix phyerror codes

      Some of the ath9k_phyerr enums were wrong from the
      beginning (and even before). Most of the time the
      codes were used for counters to be displayed over
      debugfs, which made this a non-functional issue.

      Some (e.g. ATH9K_PHYERR_FALSE_RADAR_EXT) are used
      for radar detection and require the correct code
      to work as intended.

      This patch includes:
      a) fixes
        ATH9K_PHYERR_FALSE_RADAR_EXT:    24 => 36
        ATH9K_PHYERR_CCK_LENGTH_ILLEGAL: 32 => 28
        ATH9K_PHYERR_CCK_POWER_DROP:     33 => 29
        ATH9K_PHYERR_HT_CRC_ERROR:       34 => 32
        ATH9K_PHYERR_HT_LENGTH_ILLEGAL:  35 => 33
        ATH9K_PHYERR_HT_RATE_ILLEGAL:    36 => 34

      b) extensions
        ATH9K_PHYERR_CCK_BLOCKER = 24
        ATH9K_PHYERR_HT_ZLF      = 35
        ATH9K_PHYERR_GREEN_FIELD = 37

      Aside from the correction and completion made in
      the enum, the patch also extends the display of
      the related counters in the debugfs.

      Signed-off-by: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 989b8376f33721f7206dd058330da05972a71384
  Author: John Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:15:00 2015 -0400

      orinoco_usb: return error in ezusb_probe when alloc_orinocodev fails

      The current code exits after alloc_orinocodev, but fails to change the
      return value to something that indicates the failure.  This patch
      changes the return value to -ENOMEM.

      https://bugzilla.kernel.org/show_bug.cgi?id=106181

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit dae0412d0caa4948da07fe4ad91352b5b61a70ec
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 21:04:14 2015 +0200

      airo: fix scan after SIOCSIWAP (airo_set_wap)

      SIOCSIWAP (airo_set_wap) affects scan: only the AP specified by
      SIOCSIWAP is present in scan results.

      This makes NetworkManager work for the first time but then unable to
      find any other APs.

      Clear APList before starting scan and set it back after scan completes
      to work-around the problem.

      To avoid losing packets during scan, modify disable_MAC() to omit
      netif_carrier_off() call when lock == 2.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit f675f93a797a18fc1f82030d56d02286039d0fb3
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 21:04:13 2015 +0200

      airo: Track APList_rid in struct airo_info

      Instead of dynamically allocating APList, make it a member of struct
      airo_info to always track state of APList_rid.
      This simplifies suspend/resume and allows removal of readAPListRid.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 6e4a0f2b5c56af6be43b546df16b1ece7df537d8
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Mon Oct 26 12:53:17 2015 +0900

      arm64: remove bogus TASK_SIZE_64 check

      The comparison between TASK_SIZE_64 and MODULES_VADDR does not
      make any sense on arm64, it is simply something that has been
      carried over from the ARM port which arm64 is based on. So drop it.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit b3bcb1b27203c24fbf181748cec6eec10419678d
  Merge: 6d08f61 2edb7a3
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 20:48:26 2015 +0200

      Merge tag 'iwlwifi-next-for-kalle-2015-10-25' of 
https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

      * bug fix for TDLS
      * fixes and cleanups in scan
      * support of several scan plans
      * improvements in FTM
      * fixes in FW API
      * improvements in the failure paths when the bus is dead
      * other various small things here and there

  commit f90df5e27d978c492c4d911476622a7413621213
  Author: Kefeng Wang <wangkefeng.wang@xxxxxxxxxx>
  Date:   Mon Oct 26 11:48:16 2015 +0800

      arm64: make Timer Interrupt Frequency selectable

      It allows a selectable timer interrupt frequency of 100, 250, 300 and 
1000 HZ.
      We will get better performance when choose a suitable frequency in some 
scene.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Kefeng Wang <wangkefeng.wang@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit f23bef34d34b6325916daddc4cfdeee53d5139e6
  Author: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
  Date:   Mon Oct 26 17:26:57 2015 +0600

      arm64/mm: use PAGE_ALIGNED instead of IS_ALIGNED

      The <linux/mm.h> already provides the PAGE_ALIGNED macro. Let's
      use this macro instead of IS_ALIGNED and passing PAGE_SIZE directly.

      Signed-off-by: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
      Acked-by: Laura Abbott <laura@xxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 59f2413573e4ee1e76062beef4a359156500db94
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 27 12:05:55 2015 +0000

      arm64: cachetype: fix definitions of ICACHEF_* flags

      test_bit and set_bit take the bit number to operate on, rather than a
      mask. This patch fixes the ICACHEF_* definitions so that they represent
      the bit index in __icache_flags as opposed to the mask returned by the
      BIT macro.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Reviewed-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fde4a59fc1c55709b96d0f07110895f20015b6cc
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 27 12:05:54 2015 +0000

      arm64: cpufeature: declare enable_cpu_capabilities as static

      enable_cpu_capabilities is only called from within cpufeature.c, so it
      can be declared static.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 8f2279d5d908119a08e906be1c6b69c744d0c379
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:04 2015 -0700

      usb: musb: omap2430: Fix regression caused by driver core change

      Commit ddef08dd00f5 ("Driver core: wakeup the parent device before trying
      probe") started automatically ensuring the parent device is enabled when
      the child gets probed.

      This however caused a regression for MUSB omap2430 interface as the
      runtime PM for the parent device needs the child initialized to access
      the MUSB hardware registers.

      Let's delay the enabling of PM runtime for the parent until the child
      has been properly initialized as suggested in an earlier patch by
      Grygorii Strashko <grygorii.strashko@xxxxxx>.

      In addition to delaying pm_runtime_enable, we now also need to make sure
      the parent is enabled during omap2430_musb_init. We also want to propagate
      an error from omap2430_runtime_resume if struct musb is not initialized.

      Note that we use pm_runtime_put_noidle here for both the child and parent
      to prevent an extra runtime_suspend/resume cycle.

      Let's also add some comments to avoid confusion between the
      two different devices.

      Fixes: ddef08dd00f5 ("Driver core: wakeup the parent device before
      trying probe")
      Suggested-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Reviewed-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Acked-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 9702970c7bd3e2d6fecb642a190269131d4ac16c
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Oct 28 16:56:13 2015 +0000

      Revert "ARM64: unwind: Fix PC calculation"

      This reverts commit e306dfd06fcb44d21c80acb8e5a88d55f3d1cf63.

      With this patch applied, we were the only architecture making this sort
      of adjustment to the PC calculation in the unwinder. This causes
      problems for ftrace, where the PC values are matched against the
      contents of the stack frames in the callchain and fail to match any
      records after the address adjustment.

      Whilst there has been some effort to change ftrace to workaround this,
      those patches are not yet ready for mainline and, since we're the odd
      architecture in this regard, let's just step in line with other
      architectures (like arch/arm/) for now.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit e13d918a19a7b6cba62b32884f5e336e764c2cc6
  Author: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
  Date:   Tue Oct 27 17:29:10 2015 +0000

      arm64: kernel: fix tcr_el1.t0sz restore on systems with extended idmap

      Commit dd006da21646 ("arm64: mm: increase VA range of identity map")
      introduced a mechanism to extend the virtual memory map range
      to support arm64 systems with system RAM located at very high offset,
      where the identity mapping used to enable/disable the MMU requires
      additional translation levels to map the physical memory at an equal
      virtual offset.

      The kernel detects at boot time the tcr_el1.t0sz value required by the
      identity mapping and sets-up the tcr_el1.t0sz register field accordingly,
      any time the identity map is required in the kernel (ie when enabling the
      MMU).

      After enabling the MMU, in the cold boot path the kernel resets the
      tcr_el1.t0sz to its default value (ie the actual configuration value for
      the system virtual address space) so that after enabling the MMU the
      memory space translated by ttbr0_el1 is restored as expected.

      Commit dd006da21646 ("arm64: mm: increase VA range of identity map")
      also added code to set-up the tcr_el1.t0sz value when the kernel resumes
      from low-power states with the MMU off through cpu_resume() in order to
      effectively use the identity mapping to enable the MMU but failed to add
      the code required to restore the tcr_el1.t0sz to its default value, when
      the core returns to the kernel with the MMU enabled, so that the kernel
      might end up running with tcr_el1.t0sz value set-up for the identity
      mapping which can be lower than the value required by the actual virtual
      address space, resulting in an erroneous set-up.

      This patchs adds code in the resume path that restores the tcr_el1.t0sz
      default value upon core resume, mirroring this way the cold boot path
      behaviour therefore fixing the issue.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Fixes: dd006da21646 ("arm64: mm: increase VA range of identity map")
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: James Morse <james.morse@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 589cb22bbedacf325951014c07a35a2b01ca57f6
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Thu Oct 15 13:55:53 2015 +0100

      arm64: compat: fix stxr failure case in SWP emulation

      If the STXR instruction fails in the SWP emulation code, we leave *data
      overwritten with the loaded value, therefore corrupting the data written
      by a subsequent, successful attempt.

      This patch re-jigs the code so that we only write back to *data once we
      know that the update has happened.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: bd35a4adc413 ("arm64: Port SWP/SWPB emulation support from arm")
      Reported-by: Shengjiu Wang <shengjiu.wang@xxxxxxxxxxxxx>
      Reported-by: Vladimir Murzin <vladimir.murzin@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 1bd5dfe41b994a6e793363894befef76626965a9
  Author: Aaro Koskinen <aaro.koskinen@xxxxxx>
  Date:   Mon Oct 26 20:23:53 2015 +0200

      ARM: OMAP1: fix incorrect INT_DMA_LCD

      Commit 685e2d08c54b ("ARM: OMAP1: Change interrupt numbering for
      sparse IRQ") turned on SPARSE_IRQ on OMAP1, but forgot to change
      the number of INT_DMA_LCD. This broke the boot at least on Nokia 770,
      where the device hangs during framebuffer initialization.

      Fix by defining INT_DMA_LCD like the other interrupts.

      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Fixes: 685e2d08c54b ("ARM: OMAP1: Change interrupt numbering for sparse 
IRQ")
      Signed-off-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 4edf30e39e6cff32390eaff6a1508969b3cd967b
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:17 2015 +0000

      perf bpf: Collect perf_evsel in BPF object files

      This patch creates a 'struct perf_evsel' for every probe in a BPF object
      file(s) and fills 'struct evlist' with them. The previously introduced
      dummy event is now removed. After this patch, the following command:

       # perf record --event filter.o ls

      Can trace on each of the probes defined in filter.o.

      The core of this patch is bpf__foreach_tev(), which calls a callback
      function for each 'struct probe_trace_event' event for a bpf program
      with each associated file descriptors. The add_bpf_event() callback
      creates evsels by calling parse_events_add_tracepoint().

      Since bpf-loader.c will not be built if libbpf is turned off, an empty
      bpf__foreach_tev() is defined in bpf-loader.h to avoid build errors.

      Committer notes:

      Before:

        # /tmp/oldperf record --event /tmp/foo.o -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.198 MB perf.data ]
        # perf evlist
        /tmp/foo.o
        # perf evlist -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period,
        sample_freq }: 4000, sample_type: IP|TID|TIME|CPU|PERIOD, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, freq: 1, task: 1, sample_id_all: 1,
        exclude_guest: 1, mmap2: 1, comm_exec: 1

      I.e. we create just the PERF_TYPE_SOFTWARE (type: 1),
      PERF_COUNT_SW_DUMMY(config 0x9) event, now, with this patch:

        # perf record --event /tmp/foo.o -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.210 MB perf.data ]
        # perf evlist -v
        perf_bpf_probe:fork: type: 2, size: 112, config: 0x6bd, { sample_period,
        sample_freq }: 1, sample_type: IP|TID|TIME|CPU|PERIOD|RAW, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, task: 1, sample_id_all: 1, exclude_guest:
        1, mmap2: 1, comm_exec: 1
        #

      We now have a PERF_TYPE_SOFTWARE (type: 1), but the config states 0x6bd,
      which is how, after setting up the event via the kprobes interface, the
      'perf_bpf_probe:fork' event is accessible via the perf_event_open
      syscall. This is all transient, as soon as the 'perf record' session
      ends, these probes will go away.

      To see how it looks like, lets try doing a neverending session, one that
      expects a control+C to end:

        # perf record --event /tmp/foo.o -a

      So, with that in place, we can use 'perf probe' to see what is in place:

        # perf probe -l
          perf_bpf_probe:fork  (on _do_fork@acme/git/linux/kernel/fork.c)

      We also can use debugfs:

        [root@felicio ~]# cat /sys/kernel/debug/tracing/kprobe_events
        p:perf_bpf_probe/fork _text+638512

      Ok, now lets stop and see if we got some forks:

        [root@felicio linux]# perf record --event /tmp/foo.o -a
        ^C[ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.325 MB perf.data (111 samples) ]

        [root@felicio linux]# perf script
            sshd  1271 [003] 81797.507678: perf_bpf_probe:fork: 
(ffffffff8109be30)
            sshd 18309 [000] 81797.524917: perf_bpf_probe:fork: 
(ffffffff8109be30)
            sshd 18309 [001] 81799.381603: perf_bpf_probe:fork: 
(ffffffff8109be30)
            sshd 18309 [001] 81799.408635: perf_bpf_probe:fork: 
(ffffffff8109be30)
        <SNIP>

      Sure enough, we have 111 forks :-)

      Callchains seems to work as well:

        # perf report --stdio --no-child
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        # Total Lost Samples: 0
        #
        # Samples: 562  of event 'perf_bpf_probe:fork'
        # Event count (approx.): 562
        #
        # Overhead  Command   Shared Object     Symbol
        # ........  ........  ................  ............
        #
            44.66%  sh        [kernel.vmlinux]  [k] _do_fork
                          |
                          ---_do_fork
                             entry_SYSCALL_64_fastpath
                             __libc_fork
                             make_child

          26.16%  make      [kernel.vmlinux]  [k] _do_fork
      <SNIP>
        #

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-7-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1e5e3ee8ff3877db6943032b54a6ac21c095affd
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:16 2015 +0000

      perf tools: Load eBPF object into kernel

      This patch utilizes bpf_object__load() provided by libbpf to load all
      objects into kernel.

      Committer notes:

      Testing it:

      When using an incorrect kernel version number, i.e., having this in your
      eBPF proggie:

        int _version __attribute__((section("version"), used)) = 0x40100;

      For a 4.3.0-rc6+ kernel, say, this happens and needs checking at event
      parsing time, to provide a better error report to the user:

        # perf record --event /tmp/foo.o sleep 1
        libbpf: load bpf program failed: Invalid argument
        libbpf: -- BEGIN DUMP LOG ---
        libbpf:

        libbpf: -- END LOG --
        libbpf: failed to load program 'fork=_do_fork'
        libbpf: failed to load object '/tmp/foo.o'
        event syntax error: '/tmp/foo.o'
                             \___ Invalid argument: Are you root and runing a 
CONFIG_BPF_SYSCALL kernel?

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events

      If we instead make it match, i.e. use 0x40300 on this v4.3.0-rc6+
      kernel, the whole process goes thru:

        # perf record --event /tmp/foo.o -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.202 MB perf.data ]
        # perf evlist -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period,
        sample_freq }: 4000, sample_type: IP|TID|TIME|CPU|PERIOD, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, freq: 1, task: 1, sample_id_all: 1,
        exclude_guest: 1, mmap2: 1, comm_exec: 1
        #

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-6-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit aa3abf30bb28addcf593578d37447d42e3f65fc3
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:15 2015 +0000

      perf tools: Create probe points for BPF programs

      This patch introduces bpf__{un,}probe() functions to enable callers to
      create kprobe points based on section names a BPF program. It parses the
      section names in the program and creates corresponding 'struct
      perf_probe_event' structures. The parse_perf_probe_command() function is
      used to do the main parsing work. The resuling 'struct perf_probe_event'
      is stored into program private data for further using.

      By utilizing the new probing API, this patch creates probe points during
      event parsing.

      To ensure probe points be removed correctly, register an atexit hook so
      even perf quit through exit() bpf__clear() is still called, so probing
      points are cleared. Note that bpf_clear() should be registered before
      bpf__probe() is called, so failure of bpf__probe() can still trigger
      bpf__clear() to remove probe points which are already probed.

      strerror style error reporting scaffold is created by this patch.
      bpf__strerror_probe() is the first error reporting function in
      bpf-loader.c.

      Committer note:

      Trying it:

      To build a test eBPF object file:

      I am testing using a script I built from the 'perf test -v LLVM' output:

        $ cat ~/bin/hello-ebpf
        export KERNEL_INC_OPTIONS="-nostdinc -isystem 
/usr/lib/gcc/x86_64-redhat-linux/4.8.3/include 
-I/home/acme/git/linux/arch/x86/include -Iarch/x86/include/generated/uapi 
-Iarch/x86/include/generated -I/home/acme/git/linux/include -Iinclude 
-I/home/acme/git/linux/arch/x86/include/uapi -Iarch/x86/include/generated/uapi 
-I/home/acme/git/linux/include/uapi -Iinclude/generated/uapi -include 
/home/acme/git/linux/include/linux/kconfig.h"
        export WORKING_DIR=/lib/modules/4.2.0/build
        export CLANG_SOURCE=-
        export CLANG_OPTIONS=-xc

        OBJ=/tmp/foo.o
        rm -f $OBJ
        echo '__attribute__((section("fork=do_fork"), used)) int fork(void 
*ctx) {return 0;} char _license[] __attribute__((section("license"), used)) = 
"GPL";int _version __attribute__((section("version"), used)) = 0x40100;' | \
        clang -D__KERNEL__ $CLANG_OPTIONS $KERNEL_INC_OPTIONS -Wno-unused-value 
-Wno-pointer-sign -working-directory $WORKING_DIR -c "$CLANG_SOURCE" -target 
bpf -O2 -o /tmp/foo.o && file $OBJ

       ---

      First asking to put a probe in a function not present in the kernel
      (misses the initial _):

        $ perf record --event /tmp/foo.o sleep 1
        Probe point 'do_fork' not found.
        event syntax error: '/tmp/foo.o'
                             \___ You need to check probing points in BPF file

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events
        $

       ---

      Now, with "__attribute__((section("fork=_do_fork"), used)):

       $ grep _do_fork /proc/kallsyms
       ffffffff81099ab0 T _do_fork
       $ perf record --event /tmp/foo.o sleep 1
       Failed to open kprobe_events: Permission denied
       event syntax error: '/tmp/foo.o'
                            \___ Permission denied

       ---

      Cool, we need to provide some better hints, "kprobe_events" is too low
      level, one doesn't strictly need to know the precise details of how
      these things are put in place, so something that shows the command
      needed to fix the permissions would be more helpful.

      Lets try as root instead:

        # perf record --event /tmp/foo.o sleep 1
        Lowering default frequency rate to 1000.
        Please consider tweaking /proc/sys/kernel/perf_event_max_sample_rate.
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.013 MB perf.data ]
        # perf evlist
        /tmp/foo.o
        [root@felicio ~]# perf evlist -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period,
        sample_freq }: 1000, sample_type: IP|TID|TIME|PERIOD, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, freq: 1, enable_on_exec: 1, task: 1,
        sample_id_all: 1, exclude_guest: 1, mmap2: 1, comm_exec: 1

       ---

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-5-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 84c86ca12b2189df751eed7b2d67cb63bc8feda5
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:14 2015 +0000

      perf tools: Enable passing bpf object file to --event

      By introducing new rules in tools/perf/util/parse-events.[ly], this
      patch enables 'perf record --event bpf_file.o' to select events by an
      eBPF object file. It calls parse_events_load_bpf() to load that file,
      which uses bpf__prepare_load() and finally calls bpf_object__open() for
      the object files.

      After applying this patch, commands like:

       # perf record --event foo.o sleep

      become possible.

      However, at this point it is unable to link any useful things onto the
      evsel list because the creating of probe points and BPF program
      attaching have not been implemented.  Before real events are possible to
      be extracted, to avoid perf report error because of empty evsel list,
      this patch link a dummy evsel. The dummy event related code will be
      removed when probing and extracting code is ready.

      Commiter notes:

      Using it:

        $ ls -la foo.o
        ls: cannot access foo.o: No such file or directory
        $ perf record --event foo.o sleep
        libbpf: failed to open foo.o: No such file or directory
        event syntax error: 'foo.o'
                             \___ BPF object file 'foo.o' is invalid

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events
        $

        $ file /tmp/build/perf/perf.o
        /tmp/build/perf/perf.o: ELF 64-bit LSB relocatable, x86-64, version 1 
(SYSV), not stripped
        $ perf record --event /tmp/build/perf/perf.o sleep
        libbpf: /tmp/build/perf/perf.o is not an eBPF object file
        event syntax error: '/tmp/build/perf/perf.o'
                             \___ BPF object file '/tmp/build/perf/perf.o' is 
invalid

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events
        $

        $ file /tmp/foo.o
        /tmp/foo.o: ELF 64-bit LSB relocatable, no machine, version 1 (SYSV), 
not stripped
        $ perf record --event /tmp/foo.o sleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.013 MB perf.data ]
        $ perf evlist
        /tmp/foo.o
        $ perf evlist  -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period, 
sample_freq }: 4000, sample_type: IP|TID|TIME|PERIOD, disabled: 1, inherit: 1, 
mmap: 1, comm: 1, freq: 1, enable_on_exec: 1, task: 1, sample_id_all: 1, 
exclude_guest: 1, mmap2: 1, comm_exec: 1
        $

      So, type 1 is PERF_TYPE_SOFTWARE, config 0x9 is PERF_COUNT_SW_DUMMY, ok.

        $ perf report --stdio
        Error:
        The perf.data file has no samples!
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        $

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-4-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 69d262a93a25cf475012ea2e00aeb29f4932c028
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:13 2015 +0000

      perf ebpf: Add the libbpf glue

      The 'bpf-loader.[ch]' files are introduced in this patch. Which will be
      the interface between perf and libbpf. bpf__prepare_load() resides in
      bpf-loader.c. Following patches will enrich these two files.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-3-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ed63f34c026e9a60d17fa750ecdfe3f600d49393
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:12 2015 +0000

      perf tools: Make perf depend on libbpf

      By adding libbpf into perf's Makefile, this patch enables perf to build
      libbpf if libelf is found and neither NO_LIBELF nor NO_LIBBPF is set.

      The newly introduced code is similar to how libapi and libtraceevent
      are wired into Makefile.perf.

      MANIFEST is also updated for 'make perf-*-src-pkg'.

      Append make_no_libbpf to tools/perf/tests/make.

      The 'bpf' feature check is appended into default FEATURE_TESTS and
      FEATURE_DISPLAY, so perf will check the API version of bpf in
      /path/to/kernel/include/uapi/linux/bpf.h. Which should not fail except
      when we are trying to port this code to an old kernel.

      Error messages are also updated to notify users about the lack of BPF
      support in 'perf record' if libelf is missing or the BPF API check
      failed.

      tools/lib/bpf is added to TAG_FOLDERS to allow us to navigate libbpf
      files when working on perf using tools/perf/tags.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-2-git-send-email-wangnan0@xxxxxxxxxx
      [ Document NO_LIBBPF in Makefile.perf, noted by Jiri Olsa ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fe326c5cc07cd265abad29c35c142cfae09889e4
  Author: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 10:43:23 2015 +0900

      clocksource/drivers/sh_mtu2: Fix multiple shutdown call issue

      On the r7s72100 Genmai board the MTU2 driver currently triggers a common
      clock framework WARN_ON(enable_count) when disabling the clock due to
      the MTU2 driver after recent callback rework may call 
->set_state_shutdown()
      multiple times. A similar issue was spotted for the TMU driver and fixed 
in:
      452b132 clocksource/drivers/sh_tmu: Fix traceback spotted in -next

      On r7s72100 Genmai v4.3-rc7 built with shmobile_defconfig spits out the
      following during boot:

      sh_mtu2 fcff0000.timer: ch0: used for clock events
      ------------[ cut here ]------------
      WARNING: CPU: 0 PID: 1 at drivers/clk/clk.c:675 
clk_core_disable+0x2c/0x6c()
      CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.3.0-rc7 #1
      Hardware name: Generic R7S72100 (Flattened Device Tree)
      Backtrace:
      [<c00133d4>] (dump_backtrace) from [<c0013570>] (show_stack+0x18/0x1c)
      [<c0013558>] (show_stack) from [<c01c7aac>] (dump_stack+0x74/0x90)
      [<c01c7a38>] (dump_stack) from [<c00272fc>] 
(warn_slowpath_common+0x88/0xb4)
      [<c0027274>] (warn_slowpath_common) from [<c0027400>] 
(warn_slowpath_null+0x24/0x2c)
      [<c00273dc>] (warn_slowpath_null) from [<c03a9320>] 
(clk_core_disable+0x2c/0x6c)
      [<c03a92f4>] (clk_core_disable) from [<c03aa0a0>] (clk_disable+0x40/0x4c)
      [<c03aa060>] (clk_disable) from [<c0395d2c>] (sh_mtu2_disable+0x24/0x50)
      [<c0395d08>] (sh_mtu2_disable) from [<c0395d6c>] 
(sh_mtu2_clock_event_shutdown+0x14/0x1c)
      [<c0395d58>] (sh_mtu2_clock_event_shutdown) from [<c007d7d0>] 
(clockevents_switch_state+0xc8/0x114)
      [<c007d708>] (clockevents_switch_state) from [<c007d834>] 
(clockevents_shutdown+0x18/0x28)
      [<c007d81c>] (clockevents_shutdown) from [<c007dd58>] 
(clockevents_exchange_device+0x70/0x78)
      [<c007dce8>] (clockevents_exchange_device) from [<c007e578>] 
(tick_check_new_device+0x88/0xe0)
      [<c007e4f0>] (tick_check_new_device) from [<c007daf0>] 
(clockevents_register_device+0xac/0x120)
      [<c007da44>] (clockevents_register_device) from [<c0395be8>] 
(sh_mtu2_probe+0x230/0x350)
      [<c03959b8>] (sh_mtu2_probe) from [<c028b6f0>] 
(platform_drv_probe+0x50/0x98)

      Reported-by: Chris Brandt <chris.brandt@xxxxxxxxxxx>
      Fixes: 19a9ffb ("clockevents/drivers/sh_mtu2: Migrate to new 'set-state' 
interface")
      Cc: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Cc: Laurent Pinchart <laurent.pinchart+renesas@xxxxxxxxxxxxxxxx>
      Signed-off-by: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Reviewed-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>

  commit 25d464183ca3522ae27ec1bbef5ddcbbbef65017
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 5 15:41:36 2015 +0530

      ARC: mm: PAE40: tlbex.S: Explicitify the size of pte_t

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 28b4af729fc4f7ee748c4bccb50ba5a6066418eb
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Sep 14 18:43:42 2015 -0700

      ARC: mm: PAE40: switch to using phys_addr_t for physical addresses

      That way a single flip of phys_addr_t to 64 bit ensures all places
      dealing with physical addresses get correct data

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 29e332261d2ae0900e3befffd90cd70594cd7a84
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Wed Oct 28 19:06:10 2015 +0530

      ARC: mm: HIGHMEM: populate high memory from DT

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 443f8c75e8d58d394b0e65b47e02e5cd8ed32b41
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 26 14:51:30 2015 +0100

      perf symbols: Fix endless loop in dso__split_kallsyms_for_kcore

      Currently we split symbols based on the map comparison, but symbols are 
stored
      within dso objects and maps could point into same dso objects (kernel 
maps).

      Hence we could end up changing rbtree we are currently iterating and mess 
it
      up. It's easily reproduced on s390x by running:

        $ perf record -a -- sleep 3
        $ perf buildid-list -i perf.data --with-hits

      The fix is to compare dso objects instead.

      Reported-by: Michael Petlan <mpetlan@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151026135130.GA26003@xxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 374ce938aaeb481114b2a8fdedd261f9b2ff9b2b
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 28 10:55:02 2015 +0000

      perf tools: Enable pre-event inherit setting by config terms

      This patch allows perf record setting event's attr.inherit bit by
      config terms like:

        # perf record -e cycles/no-inherit/ ...
        # perf record -e cycles/inherit/ ...

      So user can control inherit bit for each event separately.

      In following example, a.out fork()s in main then do some complex
      CPU intensive computations in both of its children.

      Basic result with and without inherit:

        # perf record -e cycles -e instructions ./a.out
        [ perf record: Woken up 9 times to write data ]
        [ perf record: Captured and wrote 2.205 MB perf.data (47920 samples) ]
        # perf report --stdio
        # ...
        # Samples: 23K of event 'cycles'
        # Event count (approx.): 23641752891
        ...
        # Samples: 24K of event 'instructions'
        # Event count (approx.): 30428312415

        # perf record -i -e cycles -e instructions ./a.out
        [ perf record: Woken up 5 times to write data ]
        [ perf record: Captured and wrote 1.111 MB perf.data (24019 samples) ]
        ...
        # Samples: 12K of event 'cycles'
        # Event count (approx.): 11699501775
        ...
        # Samples: 12K of event 'instructions'
        # Event count (approx.): 15058023559

      Cancel inherit for one event when globally enable:

        # perf record -e cycles/no-inherit/ -e instructions ./a.out
        [ perf record: Woken up 7 times to write data ]
        [ perf record: Captured and wrote 1.660 MB perf.data (36004 samples) ]
        ...
        # Samples: 12K of event 'cycles/no-inherit/'
        # Event count (approx.): 11895759282
       ...
        # Samples: 24K of event 'instructions'
        # Event count (approx.): 30668000441

      Enable inherit for one event when globally disable:

        # perf record -i -e cycles/inherit/ -e instructions ./a.out
        [ perf record: Woken up 7 times to write data ]
        [ perf record: Captured and wrote 1.654 MB perf.data (35868 samples) ]
        ...
        # Samples: 23K of event 'cycles/inherit/'
        # Event count (approx.): 23285400229
        ...
        # Samples: 11K of event 'instructions'
        # Event count (approx.): 14969050259

      Committer note:

      One can check if the bit was set, in addition to seeing the result in
      the perf.data file size as above by doing one of:

        # perf record -e cycles -e instructions -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.911 MB perf.data (63 samples) ]
        # perf evlist -v
        cycles: size: 112, { sample_period, sample_freq }: 4000, sample_type: 
IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, inherit: 1, mmap: 1, 
comm: 1, freq: 1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2: 1, 
comm_exec: 1
        instructions: size: 112, config: 0x1, { sample_period, sample_freq }: 
4000, sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, 
inherit: 1, freq: 1, sample_id_all: 1, exclude_guest: 1
        #

      So, the inherit bit was set in both, now, if we disable it globally using
      --no-inherit:

        # perf record --no-inherit -e cycles -e instructions -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.910 MB perf.data (56 samples) ]
        # perf evlist -v
        cycles: size: 112, { sample_period, sample_freq }: 4000, sample_type: 
IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, mmap: 1, comm: 1, 
freq: 1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2: 1, comm_exec: 1
        instructions: size: 112, config: 0x1, { sample_period, sample_freq }: 
4000, sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, 
freq: 1, sample_id_all: 1, exclude_guest: 1

      No inherit bit set, then disabling it and setting just on the cycles 
event:

        # perf record --no-inherit -e cycles/inherit/ -e instructions -a usleep 
1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.909 MB perf.data (48 samples) ]
        # perf evlist -v
        cycles/inherit/: size: 112, { sample_period, sample_freq }: 4000, 
sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, inherit: 
1, mmap: 1, comm: 1, freq: 1, task: 1, sample_id_all: 1, exclude_guest: 1, 
mmap2: 1, comm_exec: 1
        instructions: size: 112, config: 0x1, { sample_period, sample_freq }: 
4000, sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, 
freq: 1, sample_id_all: 1, exclude_guest: 1
        #

      We can see it as well in by using a more verbose level of debug messages 
in
      the tool that sets up the perf_event_attr, 'perf record' in this case:

        [root@zoo ~]# perf record -vv --no-inherit -e cycles/inherit/ -e 
instructions -a usleep 1
        ------------------------------------------------------------
        perf_event_attr:
          size                             112
          { sample_period, sample_freq }   4000
          sample_type                      IP|TID|TIME|ID|CPU|PERIOD
          read_format                      ID
          disabled                         1
          inherit                          1
          mmap                             1
          comm                             1
          freq                             1
          task                             1
          sample_id_all                    1
          exclude_guest                    1
          mmap2                            1
          comm_exec                        1
        ------------------------------------------------------------
        sys_perf_event_open: pid -1  cpu 0  group_fd -1  flags 0x8
        sys_perf_event_open: pid -1  cpu 1  group_fd -1  flags 0x8
        sys_perf_event_open: pid -1  cpu 2  group_fd -1  flags 0x8
        sys_perf_event_open: pid -1  cpu 3  group_fd -1  flags 0x8
        ------------------------------------------------------------
        perf_event_attr:
          size                             112
          config                           0x1
          { sample_period, sample_freq }   4000
          sample_type                      IP|TID|TIME|ID|CPU|PERIOD
          read_format                      ID
          disabled                         1
          freq                             1
          sample_id_all                    1
          exclude_guest                    1
        ------------------------------------------------------------
        sys_perf_event_open: pid -1  cpu 0  group_fd -1  flags 0x8

      <SNIP>

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: Li Zefan <lizefan@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1446029705-199659-2-git-send-email-wangnan0@xxxxxxxxxx
      [ s/u64/bool/ for the perf_evsel_config_term inherit field - jolsa]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 45890f6d34e70d9dd194bd1729eba3ff72cabf78
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Mar 9 18:53:49 2015 +0530

      ARC: mm: HIGHMEM: kmap API implementation

      Implement kmap* API for ARC.

      This enables
       - permanent kernel maps (pkmaps): :kmap() API
       - fixmap : kmap_atomic()

      We use a very simple/uniform approach for both (unlike some of the other
      arches). So fixmap doesn't use the customary compile time address stuff.
      The important semantic is sleep'ability (pkmap) vs. not (fixmap) which
      the API guarantees.

      Note that this patch only enables highmem for subsequent PAE40 support
      as there is no real highmem for ARC in pure 32-bit paradigm as explained
      below.

      ARC has 2:2 address split of the 32-bit address space with lower half
      being translated (virtual) while upper half unstranslated
      (0x8000_0000 to 0xFFFF_FFFF). kernel itself is linked at base of
      unstranslated space (i.e. 0x8000_0000 onwards), which is mapped to say
      DDR 0x0 by external Bus Glue logic (outside the core). So kernel can
      potentially access 1.75G worth of memory directly w/o need for highmem.
      (the top 256M is taken by uncached peripheral space from 0xF000_0000 to
      0xFFFF_FFFF)

      In PAE40, hardware can address memory beyond 4G (0x1_0000_0000) while
      the logical/virtual addresses remain 32-bits. Thus highmem is required
      for kernel proper to be able to access these pages for it's own purposes
      (user space is agnostic to this anyways).

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 6101be5ad439806c70b54bdd083e7db9e3affb3d
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Wed Oct 28 18:48:17 2015 +0530

      ARC: mm: preps ahead of HIGHMEM support #2

      Explicit'ify that all memory added so far is low memory
      Nothing semantical

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 336e2136e1353db8e9e731c27381ee0735656a8a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Mar 5 17:06:31 2015 +0530

      ARC: mm: preps ahead of HIGHMEM support

      Before we plug in highmem support, some of code needs to be ready for it
       - copy_user_highpage() needs to be using the kmap_atomic API
       - mk_pte() can't assume page_address()
       - do_page_fault() can't assume VMALLOC_END is end of kernel vaddr space

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit d40846457fc23cd841a60fdc2786e08a8bedb35b
  Author: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
  Date:   Wed Sep 2 20:43:30 2015 +0300

      ARC: mm: use generic macros _BITUL()/_AC()

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 8840e14cd82d398d348b2947fad3a630e93260ba
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Oct 13 12:11:38 2015 +0530

      ARC: mm: Improve Duplicate PD Fault handler

       - Move the verbosity knob from .data to .bss by using inverted logic
       - No need to readout PD1 descriptor
       - clip the non pfn bits of PD0 to avoid clipping inside the loop

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 5baecbcd9c9a2f491afe1369fc22e7363f9c94d5
  Author: Dima Kogan <dima@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 17:34:19 2015 -0700

      perf symbols: we can now read separate debug-info files based on a build 
ID

      Recent GDB (at least on a vanilla Debian box) looks for debug information 
in

        /usr/lib/debug/.build-id/nn/nnnnnnn

      where nn/nnnnnn is the build-id of the stripped ELF binary. This is
      documented here:

        https://sourceware.org/gdb/onlinedocs/gdb/Separate-Debug-Files.html

      This was not working in perf because we didn't read the build id until
      AFTER we searched for the separate debug information file. This patch
      reads the build ID and THEN does the search.

      Signed-off-by: Dima Kogan <dima@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/87si6pfwz4.fsf@xxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f2f3096888569ff1fc15fa0187a39eef3a24b28e
  Author: Dima Kogan <dima@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 17:30:28 2015 -0700

      perf symbols: Fix type error when reading a build-id

      This was benign, but wrong. The build-id should live in a char[], not a 
char*[]

      Signed-off-by: Dima Kogan <dima@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/87si6pfwz4.fsf@xxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b33e18f61bd18227a456016a77b1a968f5bc1d65
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Oct 27 14:19:39 2015 +0900

      fs/writeback, rcu: Don't use list_entry_rcu() for pointer offsetting in 
bdi_split_work_to_wbs()

      bdi_split_work_to_wbs() uses list_for_each_entry_rcu_continue()
      to walk @bdi->wb_list.  To set up the initial iteration
      condition, it uses list_entry_rcu() to calculate the entry
      pointer corresponding to the list head; however, this isn't an
      actual RCU dereference and using list_entry_rcu() for it ended
      up breaking a proposed list_entry_rcu() change because it was
      feeding an non-lvalue pointer into the macro.

      Don't use the RCU variant for simple pointer offsetting.  Use
      list_entry() instead.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Darren Hart <dvhart@xxxxxxxxxxxxxxx>
      Cc: David Howells <dhowells@xxxxxxxxxx>
      Cc: Dipankar Sarma <dipankar@xxxxxxxxxx>
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
      Cc: Lai Jiangshan <jiangshanlai@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Patrick Marlier <patrick.marlier@xxxxxxxxx>
      Cc: Paul McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: pranith kumar <bobby.prani@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151027051939.GA19355@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e4340bbb07dd38339c0773543dd928886e512a57
  Merge: c13dc31 a22c4d7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 28 13:17:01 2015 +0100

      Merge branch 'linus' into core/rcu, to fix up a semantic conflict

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 78b9bc947b18ed16b6c2c573d774e6d54ad9452d
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:48:17 2015 +0200

      efi: Fix warning of int-to-pointer-cast on x86 32-bit builds

      Commit:

        0f96a99dab36 ("efi: Add "efi_fake_mem" boot option")

      introduced the following warning message:

        drivers/firmware/efi/fake_mem.c:186:20: warning: cast to pointer from 
integer of different size [-Wint-to-pointer-cast]

      new_memmap_phy was defined as a u64 value and cast to void*,
      causing a int-to-pointer-cast warning on x86 32-bit builds.
      However, since the void* type is inappropriate for a physical
      address, the definition of struct efi_memory_map::phys_map has
      been changed to phys_addr_t in the previous patch, and so the
      cast can be dropped entirely.

      This patch also changes the type of the "new_memmap_phy"
      variable from "u64" to "phys_addr_t" to align with the types of
      memblock_alloc() and struct efi_memory_map::phys_map.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      [ Removed void* cast, updated commit log]
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: kamezawa.hiroyu@xxxxxxxxxxxxxx
      Cc: linux-efi@xxxxxxxxxxxxxxx
      Cc: matt.fleming@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1445593697-1342-2-git-send-email-ard.biesheuvel@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 44511fb9e55ada760822b0b0d7be9d150576f17f
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Oct 23 11:48:16 2015 +0200

      efi: Use correct type for struct efi_memory_map::phys_map

      We have been getting away with using a void* for the physical
      address of the UEFI memory map, since, even on 32-bit platforms
      with 64-bit physical addresses, no truncation takes place if the
      memory map has been allocated by the firmware (which only uses
      1:1 virtually addressable memory), which is usually the case.

      However, commit:

        0f96a99dab36 ("efi: Add "efi_fake_mem" boot option")

      adds code that clones and modifies the UEFI memory map, and the
      clone may live above 4 GB on 32-bit platforms.

      This means our use of void* for struct efi_memory_map::phys_map has
      graduated from 'incorrect but working' to 'incorrect and
      broken', and we need to fix it.

      So redefine struct efi_memory_map::phys_map as phys_addr_t, and
      get rid of a bunch of casts that are now unneeded.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: izumi.taku@xxxxxxxxxxxxxx
      Cc: kamezawa.hiroyu@xxxxxxxxxxxxxx
      Cc: linux-efi@xxxxxxxxxxxxxxx
      Cc: matt.fleming@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1445593697-1342-1-git-send-email-ard.biesheuvel@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9acdc911b55569145034b01075adf658891afbd2
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 26 10:52:57 2015 +0530

      MAINTAINERS: Add public mailing list for ARC

      Cc: <stable@xxxxxxxxxxxxxxx> #3.9+
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit f759ee57b205223e98fdc97e26cbef305b8048e1
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Jan 23 18:10:26 2015 +0530

      ARC: Ensure DT mem base is same as what kernel is built with

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 483bcc99c0a349570b30fc9cb20dea20c9387a4b
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Oct 15 20:32:39 2015 +0530

      ARC: boot: Non Master cpus only need to call EARLY_CPU_SETUP once

      With prev fixes, all cores now start via common entry point @stext which
      already calls EARLY_CPU_SETUP for all cores - so no need to invoke it
      again

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit aa0efcde45a36d1ea2bc5bde4d47f36ec17502de
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 15:15:48 2015 +0530

      ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_smp()

      MCIP now registers it's own per cpu setup routine (for IPI IRQ request)
      using smp_ops.init_irq_cpu().

      So no need for platforms to do that. This now completely decouples
      platforms from MCIP.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 286130ebf196d9643800977d57bdb7cda266b49e
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Wed Oct 14 14:38:02 2015 +0530

      ARC: smp: Introduce smp hook @init_irq_cpu called for all cores

      Note this is not part of platform owned static machine_desc,
      but more of device owned plat_smp_ops (rather misnamed) which a IPI
      provider or some such typically defines.

      This will help us seperate out the IPI registration from platform
      specific init_cpu_smp() into device specific init_irq_cpu()

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 8721a7f5a6f95c38cacbe1be22c820a7698926ef
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Oct 13 15:26:00 2015 +0530

      ARC: smp: Rename platform hook @init_smp -> @init_cpu_smp

      This conveys better that it is called for each cpu

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 26b8f996239884451aeb1213747e3ca808c26024
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 16:38:07 2015 +0530

      ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_early_smp()

      MCIP now registers it's own probe callback with smp_ops.init_early_smp()
      which is called by ARC common code, so no need for platforms to do that.

      This decouples the platforms and MCIP and helps confine MCIP details
      to it's own file.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit e55af4da026ebdb9ded3cb7708b8a8bd7884ad3a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 16:28:55 2015 +0530

      ARC: smp: Introduce smp hook @init_early_smp for Master core

      This adds a platform agnostic early SMP init hook which is called on
      Master core before calling setup_processor()

        setup_arch()
           smp_init_cpus()
               smp_ops.init_early_smp()
           ...
           setup_processor()

      How this helps:
       - Used for one time init of certain SMP centric IP blocks, before
         calling setup_processor() which probes various bits of core,
         possibly including this block

       - Currently platforms need to call this IP block init from their
         init routines, which doesn't make sense as this is specific to ARC
         core and not platform and otherwise requires copy/paste in all
         (and hence a possible point of failure)

      e.g. MCIP init is called from 2 platforms currently (axs10x and sim)
      which will go away once we have this.

      This change only adds the hooks but they are empty for now. Next commit
      will populate them and remove the explicit init calls from platforms.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 4c82f28617ab9ce938118f0b99156a96c64d3da0
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Oct 13 08:48:54 2015 +0530

      ARC: remove @init_time, @init_irq platform callbacks

      These are not in use for ARC platforms. Moreover DT mechanims exist to
      probe them w/o explicit platform calls.

       - clocksource drivers can use CLOCKSOURCE_OF_DECLARE()
       - intc IRQCHIP_DECLARE() calls + cascading inside DT allows external
         intc to be probed automatically

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit e0868e6f673d0d2db6a3c3798605e6efb756e61e
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:58:54 2015 +0530

      ARC: smp: irqchip: handle IPI as percpu irq like timer

      The reason this was not done so far was lack of genuine IPI_IRQ for
      ARC700, as we don't have a SMP version of core yet (which might change
      soon thx to EZChip). Nevertheles to increase the build coverage, we
      need to allow CONFIG_SMP for ARC700 and still be able to run it on a
      UP platform (nsim or AXS101) with a UP Device Tree (SMP-on-UP)

      The build itself requires some define for IPI_IRQ and even a dummy
      value is fine since that code won't run anyways.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 3971cdc202f638f252e39316d42492ace04cc1b1
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 9 11:26:12 2015 +0530

      ARC: boot: Support Halt-on-reset and Run-on-reset SMP booting modes

      For Run-on-reset, non masters need to spin wait. For Halt-on-reset they
      can jump to entry point directly.

      Also while at it, made reset vector handler as "the" entry point for
      kernel including host debugger based boot (which uses the ELF header
      entry point)

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 8a28d67457b613258aa0578ccece206d166f2b9f
  Merge: a22c4d7 977bf06
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 18:59:53 2015 +0900

      Merge tag 'powerpc-4.3-6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fix from Michael Ellerman:
       - powerpc/dma: dma_set_coherent_mask() should not be GPL only from Ben

      * tag 'powerpc-4.3-6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc/dma: dma_set_coherent_mask() should not be GPL only

  commit f11631748ee6973f85238109a3fa8ab8e760e5a4
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Mon Oct 26 13:58:54 2015 +0200

      NFC: nci: non-static functions can not be inline

      This fixes a build error that seems to be toochain
      dependent (Not seen with gcc v5.1):

      In file included from net/nfc/nci/rsp.c:36:0:
      net/nfc/nci/rsp.c: In function â??nci_rsp_packetâ??:
      include/net/nfc/nci_core.h:355:12: error: inlining failed in call to
      always_inline â??nci_prop_rsp_packetâ??: function body not available
       inline int nci_prop_rsp_packet(struct nci_dev *ndev, __u16 opcode,

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 977bf062bba3eb8d03f66d5b4e227e5d7ebc1e08
  Author: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:20:05 2015 +0900

      powerpc/dma: dma_set_coherent_mask() should not be GPL only

      When turning this from inline to an exported function I was a bit
      over-eager and made it GPL only. This prevents the use of pretty much
      all non-GPL PCI driver which is a bit over the top. Let's bring it
      back in line with other architecture.

      Fixes: 817820b0226a ("powerpc/iommu: Support "hybrid" iommu/direct DMA 
ops for coherent_mask < dma_mask")
      Signed-off-by: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit e18f6ac30d31433d8cd9ccf693d3cdd5d2e66ef9
  Merge: e407f39 c02b050
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 20:27:45 2015 -0700

      Merge branch 'mlx4-fixes'

      Or Gerlitz says:

      ====================
      Mellanox mlx4 driver fixes for 4.3-rc7

      Jack's fix is for a regression introduced in 4.3-rc1

      Carol's fix addresses an issue which exists for while and
      turns to beat us hard on PPC, please queue for -stable.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c02b05011fadf8e409e41910217ca689f2fc9d91
  Author: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:36:20 2015 +0200

      net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes

      When doing memcpy/memset of EQEs, we should use sizeof struct
      mlx4_eqe as the base size and not caps.eqe_size which could be bigger.

      If caps.eqe_size is bigger than the struct mlx4_eqe then we corrupt
      data in the master context.

      When using a 64 byte stride, the memcpy copied over 63 bytes to the
      slave_eq structure.  This resulted in copying over the entire eqe of
      interest, including its ownership bit -- and also 31 bytes of garbage
      into the next WQE in the slave EQ -- which did NOT include the ownership
      bit (and therefore had no impact).

      However, once the stride is increased to 128, we are overwriting the
      ownership bits of *three* eqes in the slave_eq struct.  This results
      in an incorrect ownership bit for those eqes, which causes the eq to
      seem to be full. The issue therefore surfaced only once 128-byte EQEs
      started being used in SRIOV and (overarchitectures that have 128/256
      byte cache-lines such as PPC) - e.g after commit 77507aa249ae
      "net/mlx4_core: Enable CQE/EQE stride support".

      Fixes: 08ff32352d6f ('mlx4: 64-byte CQE/EQE support')
      Signed-off-by: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 092bf0fc80f5fb7928244ad63d8a2a8df8a72a3e
  Author: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:36:19 2015 +0200

      net/mlx4_en: Explicitly set no vlan tags in WQE ctrl segment when no vlan 
is present

      We do not set the ins_vlan field to zero when no vlan id is present in 
the packet.

      Since WQEs in the TX ring are not zeroed out between uses, this oversight
      could result in having vlan flags present in the WQE ctrl segment when no
      vlan is preset.

      Fixes: e38af4faf01d ('net/mlx4_en: Add support for hardware accelerated 
802.1ad vlan')
      Reported-by: Gideon Naim <gideonn@xxxxxxxxxxxx>
      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6d08f617872cc048173d59f1ce4660b030bab5a6
  Author: yankejian <yankejian@xxxxxxxxxx>
  Date:   Tue Oct 27 19:16:34 2015 +0800

      net: hisilicon: updates HNS config and documents

      updates the bindings documents and dtsi file according to the review
      comments[https://lkml.org/lkml/2015/9/21/670] from Rob Herring 
<robh@xxxxxxxxxx>

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e407f39afdc0741dcf20aed100b8e738ccab7cb1
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Tue Oct 27 11:37:39 2015 +0200

      vhost: fix performance on LE hosts

      commit 2751c9882b947292fcfb084c4f604e01724af804 ("vhost: cross-endian
      support for legacy devices") introduced a minor regression: even with
      cross-endian disabled, and even on LE host, vhost_is_little_endian is
      checking is_le flag so there's always a branch.

      To fix, simply check virtio_legacy_is_little_endian first.

      Cc: Greg Kurz <gkurz@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Reviewed-by: Greg Kurz <gkurz@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit edc9b4272e3298c4a6a86d34d03e951033566f69
  Author: Li Peng <lipeng321@xxxxxxxxxx>
  Date:   Tue Oct 27 17:17:40 2015 +0800

      net: hns: fixes the bug tested XGE by ethtool -p

      delete action of ETHTOOL_ID_ON/ETHTOOL_ID_OFF in XGE ethtool -p,
      so Hardware control the LED state instead of software.

      Signed-off-by: Li Peng <lipeng321@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fcc60333ccf5622f1788ab72848e1a880667fe0
  Author: Abhimanyu <abhimanyu@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 14:17:43 2015 +0530

      gianfar: Increase TX_TIMEOUT to 5HZ

      Increased TX_TIMEOUT to 5HZ to accommodate worst case situation
      for traffic and CPU intensive use cases

      Signed-off-by: Priyanka Jain <Priyanka.Jain@xxxxxxxxxxxxx>
      Signed-off-by: Abhimanyu <abhimanyu@xxxxxxxxxxxxx>
      Acked-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d59542ddcb547871b1913c34c31a6d207627db02
  Merge: f8e529e c096377
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 19:56:56 2015 -0700

      Merge tag 'wireless-drivers-next-for-davem-2015-10-27' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

      Kalle Valo says:

      ====================
      here's a bigger pull request for 4.4. The diffstat looks scary as we
      created a new directory realtek for all realtek drivers. In the future
      I'm planning to create similar directories for all vendors, currently we
      just have ath, mediatek and realtek. This change has been in linux-next
      for a couple of weeks so it should be safe, but of course you never
      know.

      There's also a new driver rtl8xxxu for few realtek USB devices. This
      just made it to the last linux-next build.

      Otherwise there's nothing really special, more info below. If time
      permits, and it's ok for you, I'm hoping to send you a one more pull
      request this week.

      brcmfmac

      * using netdev carrier state
      * add and rework some cfg80211 callbacks mainly for AP mode
      * use devcoredump when triggered by firmware event

      realtek

      * create new directory drivers/net/wireless/realtek/ for all realtek
        drivers, not visible to users (no kconfig changes etc)
      * add rtl8xxxu, a new mac80211 driver for RTL8723AU, RTL8188CU,
        RTL8188RU, RTL8191CU, RTL8192CU and hopefully more in the future

      ath10k

      * add board 2 API support for automatically choosing correct board file
      * data path optimisations
      * disable PCI power save for qca988x and QCA99x0 due to interop reasons

      wil6210

      * BlockAckReq support
      * firmware crashdump using devcoredump
      * capture all frames with sniffer
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8e529ed941ba2bbcbf310b575d968159ce7e895
  Author: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 09:23:59 2015 +0900

      seccomp, ptrace: add support for dumping seccomp filters

      This patch adds support for dumping a process' (classic BPF) seccomp
      filters via ptrace.

      PTRACE_SECCOMP_GET_FILTER allows the tracer to dump the user's classic BPF
      seccomp filters. addr should be an integer which represents the ith 
seccomp
      filter (0 is the most recently installed filter). data should be a struct
      sock_filter * with enough room for the ith filter, or NULL, in which case
      the filter is not saved. The return value for this command is the number 
of
      BPF instructions the program represents, or negative in the case of 
errors.
      Command specific errors are ENOENT: which indicates that there is no ith
      filter in this seccomp tree, and EMEDIUMTYPE, which indicates that the ith
      filter was not installed as a classic BPF filter.

      A caveat with this approach is that there is no way to get explicitly at
      the heirarchy of seccomp filters, and users need to memcmp() filters to
      decide which are inherited. This means that a task which installs two of
      the same filter can potentially confuse users of this interface.

      v2: * make save_orig const
          * check that the orig_prog exists (not necessary right now, but when
             grows eBPF support it will be)
          * s/n/filter_off and make it an unsigned long to match ptrace
          * count "down" the tree instead of "up" when passing a filter offset

      v3: * don't take the current task's lock for inspecting its seccomp mode
          * use a 0x42** constant for the ptrace command value

      v4: * don't copy to userspace while holding spinlocks

      v5: * add another condition to WARN_ON

      v6: * rebase on net-next

      Signed-off-by: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      CC: Will Drewry <wad@xxxxxxxxxxxx>
      Reviewed-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      CC: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      CC: Pavel Emelyanov <xemul@xxxxxxxxxxxxx>
      CC: Serge E. Hallyn <serge.hallyn@xxxxxxxxxx>
      CC: Alexei Starovoitov <ast@xxxxxxxxxx>
      CC: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b9e3bd5b2f807f66a959cc079c495915f032c67
  Merge: c0f9c7e cf4b24f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 19:53:04 2015 -0700

      Merge branch 'mpls-multipath-improvements'

      Robert Shearman says:

      ====================
      mpls: mulipath improvements

      Two improvements to the recently added mpls multipath support. The
      first is a fix for missing initialisation the nexthop address length
      for the v4 and v6 explicit null label routes, and the second is to
      reduce the amount of memory used by mpls routes by changing the way
      the via addresses are stored.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cf4b24f0024fc2e3fbc653a659356d224b5b9172
  Author: Robert Shearman <rshearma@xxxxxxxxxxx>
  Date:   Tue Oct 27 00:37:36 2015 +0000

      mpls: reduce memory usage of routes

      Nexthops for MPLS routes have a via address field sized for the
      largest via address that is expected, which is 32 bytes. This means
      that in the most common case of having ipv4 via addresses, 28 bytes of
      memory more than required are used per nexthop. In the other common
      case of an ipv6 nexthop then 16 bytes more than required are
      used. With large numbers of MPLS routes this extra memory usage could
      start to become significant.

      To avoid allocating memory for a maximum length via address when not
      all of it is required and to allow for ease of iterating over
      nexthops, then the via addresses are changed to be stored in the same
      memory block as the route and nexthops, but in an array after the end
      of the array of nexthops. New accessors are provided to retrieve a
      pointer to the via address.

      To allow for O(1) access without having to store a pointer or offset
      per nh, the via address for each nexthop is sized according to the
      maximum via address for any nexthop in the route, which is stored in a
      new route field, rt_max_alen, but this is in an existing hole in
      struct mpls_route so it doesn't increase the size of the
      structure. Each via address is ensured to be aligned to VIA_ALEN_ALIGN
      to account for architectures that don't allow unaligned accesses.

      Signed-off-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b4e04fc7357b6cef0856cb14b42306af1af990e5
  Author: Robert Shearman <rshearma@xxxxxxxxxxx>
  Date:   Tue Oct 27 00:37:35 2015 +0000

      mpls: fix forwarding using v4/v6 explicit null

      Fill in the via address length for the predefined IPv4 and IPv6
      explicit-null label routes.

      Fixes: f8efb73c97e2 ("mpls: multipath route support")
      Signed-off-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Acked-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 85ff8a43f39fa6d2f970b5e1e5c03df87abde242
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Mon Oct 26 17:02:19 2015 -0700

      bpf: sample: define aarch64 specific registers

      Define aarch64 specific registers for building bpf samples correctly.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 20986ed826cbb36bb8f2d77f872e3c52d8d30647
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Mon Oct 26 17:13:54 2015 -0500

      amd-xgbe: Fix race between access of desc and desc index

      During Tx cleanup it's still possible for the descriptor data to be
      read ahead of the descriptor index. A memory barrier is required between
      the read of the descriptor index and the start of the Tx cleanup loop.
      This allows a change to a lighter-weight barrier in the Tx transmit
      routine just before updating the current descriptor index.

      Since the memory barrier does result in extra overhead on arm64, keep
      the previous change to not chase the current descriptor value. This
      prevents the execution of the barrier for each loop performed.

      Suggested-by: Alexander Duyck <alexander.duyck@xxxxxxxxx>
      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ce675ff39b9958d1c10f86cf58e357efaafc856
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Mon Oct 26 12:46:37 2015 -0400

      RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in 
rds_tcp_data_recv

      Either of pskb_pull() or pskb_trim() may fail under low memory conditions.
      If rds_tcp_data_recv() ignores such failures, the application will
      receive corrupted data because the skb has not been correctly
      carved to the RDS datagram size.

      Avoid this by handling pskb_pull/pskb_trim failure in the same
      manner as the skb_clone failure: bail out of rds_tcp_data_recv(), and
      retry via the deferred call to rds_send_worker() that gets set up on
      ENOMEM from rds_tcp_read_sock()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0b7c874348ea14ec3c358fe95e56d6f830540248
  Author: Neil Horman <nhorman@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:24:22 2015 -0400

      forcedeth: fix unilateral interrupt disabling in netpoll path

      Forcedeth currently uses disable_irq_lockdep and enable_irq_lockdep, 
which in
      some configurations simply calls local_irq_disable.  This causes errant 
warnings
      in the netpoll path as in netpoll_send_skb_on_dev, where we disable irqs 
using
      local_irq_save, leading to the following warning:

      WARNING: at net/core/netpoll.c:352 netpoll_send_skb_on_dev+0x243/0x250() 
(Not
      tainted)
      Hardware name:
      netpoll_send_skb_on_dev(): eth0 enabled interrupts in poll
      (nv_start_xmit_optimized+0x0/0x860 [forcedeth])
      Modules linked in: netconsole(+) configfs ipv6 iptable_filter ip_tables 
ppdev
      parport_pc parport sg microcode serio_raw edac_core edac_mce_amd k8temp
      snd_hda_codec_realtek snd_hda_codec_generic forcedeth snd_hda_intel
      snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd 
soundcore
      snd_page_alloc i2c_nforce2 i2c_core shpchp ext4 jbd2 mbcache sr_mod cdrom 
sd_mod
      crc_t10dif pata_amd ata_generic pata_acpi sata_nv dm_mirror dm_region_hash
      dm_log dm_mod [last unloaded: scsi_wait_scan]
      Pid: 1940, comm: modprobe Not tainted 2.6.32-573.7.1.el6.x86_64.debug #1
      Call Trace:
       [<ffffffff8107bbc1>] ? warn_slowpath_common+0x91/0xe0
       [<ffffffff8107bcc6>] ? warn_slowpath_fmt+0x46/0x60
       [<ffffffffa00fe5b0>] ? nv_start_xmit_optimized+0x0/0x860 [forcedeth]
       [<ffffffff814b3593>] ? netpoll_send_skb_on_dev+0x243/0x250
       [<ffffffff814b37c9>] ? netpoll_send_udp+0x229/0x270
       [<ffffffffa02e3299>] ? write_msg+0x39/0x110 [netconsole]
       [<ffffffffa02e331b>] ? write_msg+0xbb/0x110 [netconsole]
       [<ffffffff8107bd55>] ? __call_console_drivers+0x75/0x90
       [<ffffffff8107bdba>] ? _call_console_drivers+0x4a/0x80
       [<ffffffff8107c445>] ? release_console_sem+0xe5/0x250
       [<ffffffff8107d200>] ? register_console+0x190/0x3e0
       [<ffffffffa02e71a6>] ? init_netconsole+0x1a6/0x216 [netconsole]
       [<ffffffffa02e7000>] ? init_netconsole+0x0/0x216 [netconsole]
       [<ffffffff810020d0>] ? do_one_initcall+0xc0/0x280
       [<ffffffff810d4933>] ? sys_init_module+0xe3/0x260
       [<ffffffff8100b0d2>] ? system_call_fastpath+0x16/0x1b
      ---[ end trace f349c7af88e6a6d5 ]---
      console [netcon0] enabled
      netconsole: network logging started

      Fix it by modifying the forcedeth code to use
      disable_irq_nosync_lockdep_irqsavedisable_irq_nosync_lockdep_irqsave 
instead,
      which saves and restores irq state properly.  This also saves us a little 
code
      in the process

      Tested by the reporter, with successful restuls

      Patch applies to the head of the net tree

      Signed-off-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Reported-by: Vasily Averin <vvs@xxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c0f9c7e45d374ce6dc369443fa586c2fe228c345
  Author: Bert Kenward <bkenward@xxxxxxxxxxxxxx>
  Date:   Mon Oct 26 14:23:42 2015 +0000

      sfc: replace spinlocks with bit ops for busy poll locking

      This patch reduces the overhead of locking for busy poll.
      Previously the state was protected by a lock, whereas now
      it's manipulated solely with atomic operations.

      Signed-off-by: Shradha Shah <sshah@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 080a270f5adec1ada1357eb66321e7222cc34301
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 13:51:37 2015 +0100

      sock: don't enable netstamp for af_unix sockets

      netstamp_needed is toggled for all socket families if they request
      timestamping. But some protocols don't need the lower-layer timestamping
      code at all. This patch starts disabling it for af-unix.

      E.g. systemd enables timestamping during boot-up on the journald af-unix
      sockets, thus causing the system to globally enable timestamping in the
      lower networking stack. Still, it is very probable that timestamping
      gets activated, by e.g. dhclient or various NTP implementations.

      Reported-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6092db1aba2d151acd40a0370b80b5c043936d2d
  Merge: 8941faa 133fac0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 19:35:01 2015 -0700

      Merge branch 'qed-driver'

      Ariel Elior says:

      ====================
      Add new drivers: qed & qede

      This series implements the driver set for Qlogic's new QL4xxx series.
      These are 10/20/25/40/50/100 Gig capable converged nics, supporting
      ethernet (obviously), iscsi, fcoe, roce and iwarp protocols.

      The overall driver design includes a common module ('qed') and protocol
      specific dependent modules for ethernet ('qede'), fcoe ('qedf'),
      iscsi ('qedi') and roce ('qedr').
      The common module contains all of the common logic, e.g. initialization,
      cleanup, infrastructure for interrupt handling, link management, slowpath
      etc. as well as protocol agnostic features, and supplying an abstraction
      layer for other modules.
      The protocol specific modules can be compiled and operated independently
      of each other, with the exception of the rdma modules which are dependent
      on the ethernet module, in accordance with the kernel rdma stack design.

      This series only adds the core and ethernet modules, with basic L2
      capabilities. Future series will add the rest of the modules and enhance
      the L2 functionality.

      Ths patch series is constructed of the following patches:
      qed:  Add module with basic common support
      qed:  Add basic L2 interface
      qede: Add basic Network driver
      qed:  Add slowpath L2 support
      qede: Add basic network device support
      qede: Add classification configuration
      qed:  Add link support
      qede: Add support for link
      qed:  Add statistics support
      qede: Add basic ethtool support

      This project is a team effort, thanks go to Yuval Mintz, Dmitry Kravkov,
      Michal Kalderon, Tomer Tayar, Manish Chopra, Sudarsana Kalluru,
      Rajesh Borundia, Sony Chacko, Artum Zolotushko, Harish Patil, Rasesh Mody,
      Sergey Ukhterov and Elad Manela, as well as former team members,
      Eilon Greenstein and Shmulik Ravid.

      Changes from previos version:
      -----------------------------

      From Version 7:
        - Various small fixes according to Dave's suggestions; Largest change
          [code-wise] - don't use tabs for indenting function arguments.

      From Version 6:
        - Reduced the number of arguments for functions with exceptionally
          high number of parameters.

      From Version 5:
        - Style change and fixes [mostly in 1, 4 and 7].
          Thanks go to Francois Romieu, a mere mortal. ;-)

      From Version 4:
        - Drop dependency for x86_64.

      From Version 3:
        - Limit support of initial submission to x86_64.
        - Fix endian problems appearing via sparse [although no BE support yet].
        - Fix small issues suggested by the kbuild test robot.

      From Version 2:
        - Removed U64_{HI,LO}; Using {upper,lower}_32_bits instead.
        - Use regular napi weight definition.
        - [We still use the __le variants for variables, since we didn't get
           a reply regarding the change into non-user API types].

      From Version 1:
        - Removed private license file; Instead revised comments at source 
headers.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 133fac0eedc355be5cdbeb9cdfc6df59d2bbbdd1
  Author: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:34 2015 +0200

      qede: Add basic ethtool support

      This adds basic ethtool operations to the qed driver, allowing support in:
       - Statistics gathering [ethtool -S]
       - Setting of debug level [ethtool -s <interface> msglvl]
       - Getting basic information [ethtool, ethtool -i]

      In addition it adds the ability to change the MTU.

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9df2ed0415b13218f84262c2372323ef028310fc
  Author: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:33 2015 +0200

      qed: Add statistics support

      Device statistics can be gathered on-demand. This adds the qed support for
      reading the statistics [both function and port] from the device, and adds
      to the public API a method for requesting the current statistics.

      Signed-off-by: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2ec6172d29cf3aed92e9db40e83e36329db1dd5
  Author: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:32 2015 +0200

      qede: Add support for link

      This adds basic link functionality to qede - driver still doesn't provide
      users with an API to change any link property, but it does request qed to
      initialize the link using default configuration, and registers a callback
      that allows it to get link notifications.

      This patch adds the ability of the driver to set the carrier as active and
      to enable traffic as a result of async. link notifications.
      Following this patch, driver should be capable of running traffic.

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc875c2e4f34e86c2f562f18b6e917cfcc560bcb
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:31 2015 +0200

      qed: Add link support

      Physical link is handled by the management Firmware.
      This patch lays the infrastructure for attention handling in the driver,
      as link change notifications arrive via async. attentions,
      as well the handling of such notifications.

      This patch also extends the API with the protocol drivers by adding
      registered callbacks which the protocol driver passes to qed in order
      to be notified of async. events originating from the FW/HW.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0d8e0aa05796c8a5652c164de5e4f16d8c9ee199
  Author: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:30 2015 +0200

      qede: classification configuration

      Add the ability to configure basic classification in driver by
      implementing ndo_set_mac_address() and ndo_set_rx_mode().

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2950219d87b040959f23484dd4ff5856bf1bc172
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:29 2015 +0200

      qede: Add basic network device support

      This patch includes the basic Rx/Tx support for the driver [although
      carrier will still never be turned on].
      Following this patch the driver registers a network device, initializes
      it and prepares it for traffic.

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cee4d26448c1000ccc1711eb5e6ed4c15f18fa83
  Author: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:28 2015 +0200

      qed: Add slowpath L2 support

      This patch adds to the qed the support to configure various L2 elements,
      such as channels and basic filtering conditions.
      It also enhances its public API to allow qede to later utilize this
      functionality.

      Signed-off-by: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e712d52b9f2a8ecf14ba0a2ec9a80ed0b194c4a1
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:27 2015 +0200

      qede: Add basic Network driver

      The Qlogic Everest Driver for Ethernet is the Ethernet specific module for
      QL4xxx ethernet products by Qlogic.

      This patch adds a very minimal PCI driver, one that doesn't yet register
      a network device, but one that does interact with qed and does a basic
      initialization of the HW.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 25c089d78f3833edf614fc377e75e9cf848562f5
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:26 2015 +0200

      qed: Add basic L2 interface

      This patch adds a public API for a network driver to work on top of QED.
      The interface itself is very minimal - it's mostly infrastructure, as the
      only content it has after this patch is a query for HW-based information
      required for the creation of a network interface [I.e., no actual
      protocol-specific configurations are supported].

      Signed-off-by: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fe56b9e6a8d957d6a20729d626027f800c17a2da
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:25 2015 +0200

      qed: Add module with basic common support

      The Qlogic Everest Driver is the backend module for the QL4xxx ethernet
      products by Qlogic.

      This module serves two main purposes:
       1. It's responsible to contain all the common code that will be shared
          between the various drivers that would be used with said line of
          products. Flows such as chip initialization and de-initialization
          fall under this category.

       2. It would abstract the protocol-specific HW & FW components, allowing
          the protocol drivers to have a clean APIs which is detached in its
          slowpath configuration from the actual HSI.

      This adds a very basic module without any protocol-specific bits.
      I.e., this adds a basic implementation that almost entirely falls under
      the first category.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6f5cadee44d83395dcd78d557b577e1021e192e4
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Sun Oct 25 20:21:50 2015 -0700

      openvswitch: Fix skb leak using IPv6 defrag

      nf_ct_frag6_gather() makes a clone of each skb passed to it, and if the
      reassembly is successful, expects the caller to free all of the original
      skbs using nf_ct_frag6_consume_orig(). This call was previously missing,
      meaning that the original fragments were never freed (with the exception
      of the last fragment to arrive).

      Fix this by ensuring that all original fragments except for the last
      fragment are freed via nf_ct_frag6_consume_orig(). The last fragment
      will be morphed into the head, so it must not be freed yet. Furthermore,
      retain the ->next pointer for the head after skb_morph().

      Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
      Reported-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 190b8ffbb700a9aa47acc559779bc79c0cb14766
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Sun Oct 25 20:21:49 2015 -0700

      ipv6: Export nf_ct_frag6_consume_orig()

      This is needed in openvswitch to fix an skb leak in the next patch.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74c16618137f1505b0a32dea3ec73a2ef6f8f842
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Sun Oct 25 20:21:48 2015 -0700

      openvswitch: Fix double-free on ip_defrag() errors

      If ip_defrag() returns an error other than -EINPROGRESS, then the skb is
      freed. When handle_fragments() passes this back up to
      do_execute_actions(), it will be freed again. Prevent this double free
      by never freeing the skb in do_execute_actions() for errors returned by
      ovs_ct_execute. Always free it in ovs_ct_execute() error paths instead.

      Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
      Reported-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2229fe1430d4e1c70e36520229dd64a87802b20
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Tue Oct 27 15:06:45 2015 -0700

      fib_trie: leaf_walk_rcu should not compute key if key is less than pn->key

      We were computing the child index in cases where the key value we were
      looking for was actually less than the base key of the tnode.  As a result
      we were getting incorrect index values that would cause us to skip over
      some children.

      To fix this I have added a test that will force us to use child index 0 if
      the key we are looking for is less than the key of the current tnode.

      Fixes: 8be33e955cb9 ("fib_trie: Fib walk rcu should take a tnode and key 
instead of a trie and a leaf")
      Reported-by: Brian Rak <brak@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a22c4d7e34402ccdf3414f64c50365436eba7b93
  Author: Ming Lin <ming.l@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:59:42 2015 -0700

      block: re-add discard_granularity and alignment checks

      In commit b49a087("block: remove split code in
      blkdev_issue_{discard,write_same}"), discard_granularity and alignment
      checks were removed. Ideally, with bio late splitting, the upper layers
      shouldn't need to depend on device's limits.

      Christoph reported a discard regression on the HGST Ultrastar SN100 NVMe
      device when mkfs.xfs. We have not found the root cause yet.

      This patch re-adds discard_granularity and alignment checks by reverting
      the related changes in commit b49a087. The good thing is now we can
      remove the 2G discard size cap and just use UINT_MAX to avoid bi_size
      overflow.

      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Tested-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Ming Lin <ming.l@xxxxxxxxxxxxxxx>
      Reviewed-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 23d88271b4f97f66de521ac9b2c1471e6311cf26
  Merge: 3d0aa36 625faa6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:24:53 2015 +0900

      Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM fixes from Russell King:
       "Two fixes for ARM and one for clkdev:

         - Fix another build issue with vdsomunge on non-glibc systems
         - Fix a randconfig build error caused by an invalid configuration
         - Fix a clkdev problem causing the Nokia n700 to no longer boot"

      * 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm:
        clkdev: fix clk_add_alias() with a NULL alias device name
        ARM: 8445/1: fix vdsomunge not to depend on glibc specific byteswap.h
        ARM: make RiscPC depend on MMU

  commit 3d0aa366072a194c6a339d37b85d5b99e936097e
  Merge: dc5bc3f 174fd8d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:22:15 2015 +0900

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull blkcg fix from Jens Axboe:
       "One final fix that should go into 4.3.  It's a simple 2x1 liner,
        fixing a blkcg accounting issue.  It was using the wrong bio member to
        look at the sync and write bits..."

      * 'for-linus' of git://git.kernel.dk/linux-block:
        blkcg: fix incorrect read/write sync/async stat accounting

  commit dc5bc3f1e3d886ce1193281bb2bfb2b44f4aeae4
  Merge: 9e17f90 3fc89ad
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:20:10 2015 +0900

      Merge branch 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fix from Herbert Xu:
       "This fixes a problem in the Crypto API that may cause spurious errors
        when signals are received by the process that made the orignal system
        call into the kernel"

      * 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: api - Only abort operations on fatal signal

  commit 9e17f9070280bd58af9aead415544387a7a61427
  Merge: 858e904 275d7d4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:17:50 2015 +0900

      Merge tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

      Pull module preemption fix from Rusty Russell:
       "Turns out we should have always been disabling preemption here;
        someone finally caught it thanks to Peter Z's additional checks"

      * tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux:
        module: Fix locking in symbol_put_addr()

  commit f4efcce33d2e5224a905369f9906f3931f5d907c
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Oct 27 17:35:58 2015 -0300

      perf tools: Search for more options when passing args to -h

      Recently 'perf <tool> -h' was made aware of arguments and would show
      just the help for the arguments specified, but that required a strict
      form, i.e.:

        $ perf -h --tui

      worked, but:

        $ perf -h tui

      didn't.

      Make it support both cases and also look at the option help when neither
      matches, so that he following examples works:

        $ perf report -h interface

         Usage: perf report [<options>]

          --gtk    Use the GTK2 interface
          --stdio  Use the stdio interface
          --tui    Use the TUI interface

        $ perf report -h stack

         Usage: perf report [<options>]

          -g, --call-graph <print_type,threshold[,print_limit],order,
                            sort_key[,branch]>
            Display call graph (stack chain/backtrace):

              print_type:  call graph printing style (graph|flat|fractal|none)
              threshold:   minimum call graph inclusion threshold (<percent>)
              print_limit: maximum number of call graph entry (<number>)
              order:       call graph order (caller|callee)
              sort_key:    call graph sort key (function|address)
              branch:      include last branch info to call graph (branch)

            Default: graph,0.5,caller,function
              --max-stack <n>   Set the maximum stack depth when parsing the
                                callchain, anything beyond the specified depth
                                will be ignored. Default: 127
        $

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-xzqvamzqv3cv0p6w3inhols3@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1e5a29318ba8506f52a8d727b5c6a53143f9882a
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sun Oct 25 15:51:18 2015 +0100

      perf stat: Cache aggregated map entries in extra cpumap

      Currently any time we need to access socket or core id for given cpu, we
      access the sysfs topology file.

      Adding a cpus_aggr_map cpu_map to cache those entries.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445784728-21732-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2322f573f8131da9c6d1fab01fe0a0c2c23aa549
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sun Oct 25 15:51:17 2015 +0100

      perf cpu_map: Add cpu_map__empty_new function

      Adding cpu_map__empty_new interface to create empty cpumap with given
      size. The cpumap entries are initialized with -1.

      It'll be used for caching cpu_map in following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445784728-21732-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit af3399817428d8adc2c87c91df23fde77dbcdb35
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sun Oct 25 15:51:44 2015 +0100

      perf evsel: Move id_offset out of struct perf_evsel union member

      Because the 'perf stat record' patches will use the id_offset member
      together with the priv pointer.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445784728-21732-29-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 06ef431ab8060aa8ef51b36f56773d01f6a53f24
  Merge: 790a2ee 2c66e24d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 27 18:40:47 2015 +0100

      Merge tag 'efi-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi into core/efi

      Pull EFI fix from Matt Fleming:

        - Fix a kernel panic by not passing EFI virtual mapping addresses to
          __pa() in the x86 pageattr code. Since these virtual addreses are
          not part of the direct mapping or kernel text mapping, passing them
          to __pa() will trigger a BUG_ON() when CONFIG_DEBUG_VIRTUAL is
          enabled. (Sai Praneeth Prakhya)

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d94b986aa734efea09fbc8f59390ba2e4e00f9d0
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:35 2015 +0200

      pinctrl: at91: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Acked-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9d4cc85d290578ec07e37d063d73f0e8707ea3eb
  Author: Jon Hunter <jonathanh@xxxxxxxxxx>
  Date:   Fri Oct 16 10:24:01 2015 +0100

      pinctrl: tegra-xusb: Correct lane mux options

      The description of the XUSB_PADCTL_USB3_PAD_MUX_0 register in the Tegra124
      documentation implies that all functions (pcie, usb3 and sata) can be
      muxed onto to all lanes (pcie lanes 0-4 and sata lane 0). However, it has
      been confirmed that this is not the case and the mux'ing options much more
      limited. Unfortunately, the public documentation has not been updated to
      reflect this and so detail the actual mux'ing options here by function:

      Function:         Lanes:
      pcie1 x2:         pcie3, pcie4
      pcie1 x4:         pcie1, pcie2, pcie3, pcie4
      pcie2 x1 (option1):       pcie0
      pcie2 x1 (option2):       pcie2
      usb3 port 0:              pcie0
      usb3 port 1 (option 1):   pcie1
      usb3 port 1 (option 2):   sata0
      sata:                     sata0

      Signed-off-by: Jon Hunter <jonathanh@xxxxxxxxxx>
      Acked-by: Stephen Warren <swarren@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 787dfbb294b25b37211d0749e7cdbb20d443c680
  Author: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
  Date:   Fri Oct 23 09:25:30 2015 -0700

      gpio: zynq: Document interrupt-controller DT binding

      HW and driver support the GPIO as interrupt-controller.
      Document that in the DT binding.

      Signed-off-by: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 79786721c29ff8fecf2903ba080479476015553d
  Author: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
  Date:   Thu Oct 22 21:51:18 2015 -0700

      gpio: xilinx: Drop architecture dependencies

      The driver does not have any real architecture dependencies. To avoid
      listing each architecture that might use this driver on some
      FPGA-enabled platform, drop these dependencies.

      Signed-off-by: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Acked-by: Moritz Fischer <moritz.fischer@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ee1a6ca43dba07465c71f6ab661702d703f5eb06
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 13:08:45 2015 +0300

      pinctrl: intel: Add Intel Broxton pin controller support

      This driver adds pinctrl/GPIO support for Intel Broxton. The GPIO
      controller is based on the same hardware design that is already used in
      Intel Sunrisepoint so we leverage the core driver here.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4341e8a5458f10cb7265167061fa06ebf3a3a903
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 13:08:44 2015 +0300

      pinctrl: intel: Allow requesting pins which are in ACPI mode as GPIOs

      Reserved for ACPI actually means that in such case the GPIO hardware will
      not update the interrupt status register (GPI_IS) even if the pin is
      configured to trigger an interrupt. It will update GPI_GPE_STS instead and
      does not trigger an interrupt.

      Allow using such pins as GPIOs, only prevent their usage as interrupts.

      We also rename function intel_pad_reserved_for_acpi() to be
      intel_pad_acpi_mode() which reflects the actual meaning better.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c71183697250b356be6c7c1abc2e9a74073e1dca
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:27 2015 +0900

      perf tools: Introduce usage_with_options_msg()

      Now usage_with_options() setup a pager before printing message so normal
      printf() or pr_err() will not be shown.  The usage_with_options_msg()
      can be used to print some help message before usage strings.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-4-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 193b40c8258f781d8dc395909b2971472aad6796
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 13:08:43 2015 +0300

      pinctrl: intel: Add support for multiple GPIO chips sharing the interrupt

      On Intel Broxton the GPIO hardware consists of several chips that all 
share
      the parent interrupt. It is not possible to handle this by setting chained
      handler for each chip (as they will overwrite each other).

      To overcome this we need to request the interrupt using devm_request_irq()
      and pass IRQF_SHARED with the flags.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit b2f68b6306dbdbfd9b8cf46c697b52efa78f9ad6
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Wed Oct 21 00:12:00 2015 -0700

      gpio: generic: Revert to old error handling in bgpio_map

      Returning an error instead of NULL in bgpio_map if
      platform_get_resource_byname does not find a resource was introduced with
      commit cf3f2a2c8bae ("gpio: generic: improve error handling in 
bgpio_map").
      This results in several qemu runtime failures with default and non-default
      configurations, if attempts are made to boot from mmcblk0. Examples for
      failures with multi_v7_defconfig are

      Machine: vexpress-a9      dtb: vexpress-v2p-ca9
      Machine: vexpress-a15     dtb: vexpress-v2p-ca15-tc1

      Crash:

      VFS: Cannot open root device "mmcblk0" or unknown-block(0,0): error -6
      Please append a correct "root=" boot option; here are the available 
partitions:
      Kernel panic - not syncing: VFS: Unable to mount root fs on 
unknown-block(0,0)

      Looking into the code, always returning an error if bgpio_map fails
      does not appear to make much sense, since the code in bgpio_setup_io
      specifically supports some of the resources to be NULL.

      Fixes: cf3f2a2c8bae ("gpio: generic: improve error handling in bgpio_map")
      Cc: Heiner Kallweit <hkallweit1@xxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ef0eebc05130b0d22b0ea65c0cd014ee16fc89c7
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Tue Oct 20 21:15:06 2015 -0700

      drivers/pinctrl: Add the concept of an "init" state

      For pinctrl the "default" state is applied to pins before the driver's
      probe function is called.  This is normally a sensible thing to do,
      but in some cases can cause problems.  That's because the pins will
      change state before the driver is given a chance to program how those
      pins should behave.

      As an example you might have a regulator that is controlled by a PWM
      (output high = high voltage, output low = low voltage).  The firmware
      might leave this pin as driven high.  If we allow the driver core to
      reconfigure this pin as a PWM pin before the PWM's probe function runs
      then you might end up running at too low of a voltage while we probe.

      Let's introudce a new "init" state.  If this is defined we'll set
      pinctrl to this state before probe and then "default" after probe
      (unless the driver explicitly changed states already).

      An alternative idea that was thought of was to use the pre-existing
      "sleep" or "idle" states and add a boolean property that we should
      start in that mode.  This was not done because the "init" state is
      needed for correctness and those other states are only present (and
      only transitioned in to and out of) when (optional) power management
      is enabled.

      Changes in v3:
      - Moved declarations to pinctrl/devinfo.h
      - Fixed author/SoB

      Changes in v2:
      - Added comment to pinctrl_init_done() as per Linus W.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Tested-by: Caesar Wang <wxt@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c307b002548590c5d8c32b964831de671ad4affe
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Tue Oct 20 17:22:15 2015 +0300

      gpio: add a real time compliance notes

      Put in a compliance checklist.

      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4aa50b87f1e99164a93314c25ed3a827c24bc54f
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Oct 27 11:13:18 2015 +0100

      Revert "gpio: add a real time compliance checklist"

      This reverts commit 677b2ff4afd9996eabefc9472c701211b4b49e87.

  commit 1c6e58d83615678875bf52747f8841c49291dfcf
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 17:15:40 2015 +0200

      mmc: pwrseq: Use highest priority for eMMC restart handler

      The pwrseq_emmc driver does a eMMC card reset before a system reboot to
      allow broken or limited ROM boot-loaders (that don't have an eMMC reset
      logic) to be able to read the second stage from the eMMC.

      But this has to be called before a system reboot handler and while most
      of them use the priority 128, there are other restart handlers (such as
      the syscon-reboot one) that use a higher priority. So, use the highest
      priority to make sure that the eMMC hw is reset before a system reboot.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Tested-by: Markus Reichl <m.reichl@xxxxxxxxxxxxx>
      Tested-by: Anand Moon <linux.amoon@xxxxxxxxx>
      Reviewed-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Tested-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bac7f4c1bf5e7c6ccd5bb71edc015b26c77f7460
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Tue Oct 20 17:25:09 2015 +0900

      pinctrl: uniphier: set input-enable before pin-muxing

      While IECTRL is disabled, input signals are pulled-down internally.
      If pin-muxing is set up first, glitch signals (Low to High transition)
      might be input to hardware blocks.

      Bad case scenario:
      [1] The hardware block is already running before pinctrl is handled.
         (the reset is de-asserted by default or by a firmware, for example)
      [2] The pin-muxing is set up.  The input signals to hardware block
          are pulled-down by the chip-internal biasing.
      [3] The pins are input-enabled.  The signals from the board reach the
          hardware block.

      Actually, one invalid character is input to the UART blocks for such
      SoCs as PH1-LD4, PH1-sLD8, where UART devices start to run at the
      power on reset.

      To avoid such problems, pins should be input-enabled before muxing.

      Fixes: 6e9088920258 ("pinctrl: UniPhier: add UniPhier pinctrl core 
support")
      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Reported-by: Dai Okamura <okamura.dai@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 1ceacea220c36e7933216e79b0ca21e1318b7c8d
  Author: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
  Date:   Mon Oct 19 12:59:14 2015 -0400

      gpio: Add GPIO support for the ACCES 104-IDIO-16

      The ACCES 104-IDIO-16 family of PC/104 utility boards feature 16
      optically isolated inputs and 16 optically isolated FET solid state
      outputs. This driver provides GPIO support for these 32 channels of
      digital I/O. Change-of-State detection interrupts are not supported.

      GPIO 0-15 correspond to digital outputs 0-15, while GPIO 16-31
      correspond to digital inputs 0-15. The base port address for the device
      may be set via the idio_16_base module parameter.

      Signed-off-by: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e0548004d433e4454c5d129a5c5b0905442bfe8e
  Author: Pramod Kumar <pramodku@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:13:11 2015 +0530

      pinctrl: cygnus: Add new compatible string for gpio controller driver

      This new compatible string, "brcm,iproc-gpio", should be used for
      all new iproc-based future SoCs.

      Signed-off-by: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Reviewed-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ea92211c0844afbe8b3f83809ea2f51bc53acc68
  Author: Pramod Kumar <pramodku@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:13:09 2015 +0530

      pinctrl: cygnus: Remove GPIO to Pinctrl pin mapping from driver

      Remove gpio to pinctrl pin mapping code from driver and
      address this through standard property "gpio-ranges".

      Signed-off-by: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Reviewed-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 03e09bc18580c84961c8a05470e8d5ed197ecd84
  Author: Pramod Kumar <pramodku@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:13:08 2015 +0530

      pinctrl: cygnus: Optional DT property to support pin mappings

      If GPIO controller's pins are muxed, pin-controller subsystem
      need to be intimated by defining mapping between gpio and
      pinmux controller. This patch adds required properties to
      define this mapping via DT.

      Signed-off-by: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Reviewed-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 6397b7f5f405f30f03f67ef829306c5af6d3369b
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:29 2015 +0800

      mmc: mediatek: add HS400 support

      add HS400 mode and tune support

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9979dbe5158899b556eb772b7335e29417ac0ddd
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:28 2015 +0800

      mmc: mmc: extend the mmc_send_tuning()

      The mmc_execute_tuning() has already prepared the opcode,
      there is no need to prepare it again at mmc_send_tuning(),
      and, there is a BUG of mmc_send_tuning() to determine the opcode
      by bus width, assume eMMC was running at HS200, 4bit mode,
      then the mmc_send_tuning() will overwrite the opcode from CMD21
      to CMD19, then got error.

      in addition, extend an argument of "cmd_error" to allow getting
      if there was cmd error when tune response.

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      [Ulf: Rebased patch]
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c9b5061e7728da1f7192ecaf3ffab4a7300920dc
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:26 2015 +0800

      mmc: mediatek: add implement of ops->hw_reset()

      add implement of ops->hw_reset() for eMMC

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 62b0d27af85ef1b1729c2ed675c12020e1fbf10f
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:25 2015 +0800

      mmc: mediatek: fix got GPD checksum error interrupt when data transfer

      Even if we only use one gpd, we need alloc 2 gpd and make
      the gpd->next pointer to the second gpd, or may get gpd checksum
      error, this was checked by hardware

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 6e622947e149fa9fd62e3609aab010935c8e10bd
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:24 2015 +0800

      mmc: mediatek: change the argument "ddr" to "timing"

      use the ios->timing directly is better
      It can reflect current timing and do settings by timing

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 726a9aac31a89d5a02614ca8f2b3f644df621c27
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:23 2015 +0800

      mmc: mediatek: make cmd_ints_mask to const

      cmd_ints_mask and data_ints_mask are constant value,
      so make it to const

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2c21d26825d5c1fda1729541d5fad56ee7ef7fa2
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:22 2015 +0800

      mmc: dt-bindings: update Mediatek MMC bindings

      Add 400Mhz clock source for HS400 mode

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 794f15782d9f12aa5a43f796680a5fc4f2c424e3
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:21 2015 +0800

      mmc: core: Add DT bindings for eMMC hardware reset support

      Sometime only need set MMC_CAP_HW_RESET for one of MMC hosts,
      So set it in device tree is better.

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 324e786ee39c70ffbdc280c34b7d2b6da5c87879
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 27 08:35:24 2015 +0100

      bluetooth: 6lowpan: fix NOHZ: local_softirq_pending

      Jukka reported about the following warning:

      "NOHZ: local_softirq_pending 08"

      I remember this warning and we had a similar issue when using workqueues
      and calling netif_rx. See commit 5ff3fec ("mac802154: fix NOHZ
      local_softirq_pending 08 warning").

      This warning occurs when calling "netif_rx" inside the wrong context
      (non softirq context). The net core api offers "netif_rx_ni" to call
      netif_rx inside the correct softirq context.

      Reported-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ef12cb904e096335ef179bfe30e637a9c2464343
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:38:13 2015 +0100

      s390/cio: move ccw_device_stlck functions

      device_ops.c should only contain functions that are called by ccw device
      drivers. Move the cio internal functions that handle unconditional
      reserve + release to device_pgid.c

      Acked-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8421d212e831cb03ba65bada57a733ad875286bf
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:35:06 2015 +0100

      s390/cio: move ccw_device_call_handler

      device_ops.c should only contain functions that are called by ccw device
      drivers. Move the cio internal function ccw_device_call_handler to
      device_fsm.c where it's used. Remove some useless comments while at it.

      Acked-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 439eb131f796d8b2cf625d791b22b42962b9dd0d
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Oct 15 13:40:55 2015 +0200

      s390/topology: reduce per_cpu() invocations

      Each per_cpu() invocation generates extra code. Since there are a lot
      of similiar calls in the topology code we can avoid a lot of them.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 36324963a3006d2c416095d87d8272e4825c679b
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 13:04:12 2015 +0200

      s390/nmi: reduce size of percpu variable

      Change the flag fields within struct mcck_struct to simple bit fields
      to reduce the size of the structure which is used as percpu variable.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 975be635d929e3cfdae149d6de055f31a17c92d7
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 13:03:05 2015 +0200

      s390/nmi: fix terminology

      According to the architecture registers are validated and not
      revalidated. So change comments and functions names to match.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit dc6e15556a9f21d640a62ae6de3cbfa68ec687a4
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 13:00:39 2015 +0200

      s390/nmi: remove casts

      Remove all the casts to and from the machine check interruption code.
      This patch changes struct mci to a union, which contains an anonymous
      structure with the already known bits and in addition an unsigned
      long field, which contains the raw machine check interruption code.

      This allows to simply assign and decoce the interruption code value
      without the need for all those casts we had all the time.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 3d68286a4304574c250ca3b0a5429d2901688f16
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 12:39:09 2015 +0200

      s390/nmi: remove pointless error strings

      s390_handle_damage() has character string parameter which was used as
      a pointer to verbose error message. The hope was (a lot of years ago)
      when analyzing dumps that register R2 would still contain the pointer
      and therefore it would be rather easy to tell what went wrong.

      However gcc optimizes the strings away since a long time. And even if
      it wouldn't it is necessary to have a close look at the machine check
      interruption code to tell what's wrong.

      So remove the pointless error strings.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit f9e6edfb9cf780edfe0a649a85ed00032e787f69
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 12:28:28 2015 +0200

      s390: don't store registers on disabled wait anymore

      The current disabled wait code stores register contents into their
      save areas, however it is (at least) missing the new vector registers.

      Given the fact that the whole exercise seems to be rather pointless
      simply don't save any registers anymore.

      In a "live" system it is always possible to inspect register contents,
      and in case of a dump the register contents will be stored by the
      dump mechanism.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ecbafda85371a3d85814aab8ff080a19e4d98b36
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 11:54:03 2015 +0200

      s390: get rid of __set_psw_mask()

      With the removal of 31 bit code we can always assume that the epsw
      instruction is available. Therefore use the __extract_psw() function
      to disable and enable machine checks.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 174fd8d369613c4e06660f3704caaba48dac8554
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Thu Oct 22 09:27:12 2015 +0900

      blkcg: fix incorrect read/write sync/async stat accounting

      While unifying how blkcg stats are collected, 77ea733884eb ("blkcg:
      move io_service_bytes and io_serviced stats into blkcg_gq")
      incorrectly used bio->flags instead of bio->rw to tell the IO type.
      This made IOs to be accounted as the wrong type.  Fix it.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: 77ea733884eb ("blkcg: move io_service_bytes and io_serviced stats 
into blkcg_gq")
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit d6a32b98099fb6b257e9b4f7b3febb5aae6f7408
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Thu Oct 8 09:25:32 2015 +0100

      scsi_dh: don't try to load a device handler during async probing

      Request_module gets really unhappy when called from async probing, so
      revert to not auto load device handler modules during the SCSI bus
      scan.  While autoloading would be really useful we never did this
      until 4.3-rc and it turns out that functionality doesn't actually
      work.

      Fixes: 566079 ("dm-mpath, scsi_dh: request scsi_dh modules in scsi_dh, 
not dm-mpath")
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Reported-by: Paul Mackerras <paulus@xxxxxxxxxx>
      Tested-by: Paul Mackerras <paulus@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 8941faa161b526199e55ca7764cf875383453612
  Author: emmanuel.grumbach@xxxxxxxxx <emmanuel.grumbach@xxxxxxxxx>
  Date:   Mon Oct 26 10:31:29 2015 +0200

      net: tso: add support for IPv6

      Adding IPv6 for the TSO helper API is trivial:
      * Don't play with the id (which doesn't exist in IPv6)
      * Correctly update the payload_len (don't include the
        length of the IP header itself)

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61b9da925a5e985afc268eb8184f1af3ef542422
  Merge: 4b3418f 59fbcbc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 22:16:02 2015 -0700

      Merge tag 'arcnet-for-4.4-rc1' of git://git.pengutronix.de/git/mgr/linux

      Michael Grzeschik says:

      ====================
      This series includes code simplifaction. The main changes are the correct
      xceiver handling (enable/disable) of the com20020 cards. The driver now 
handles
      link status change detection. The EAE PCI-ARCNET cards now make use of the
      rotary encoded subdevice indexing and got support for led triggers on 
transmit
      and reconnection events.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fe012964a39ead19405ba8d65f50d4fd598f5b8
  Merge: 7e3b6e7 26b7974
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 22:08:22 2015 -0700

      Merge branch 'net_of_node_put'

      Julia Lawall says:

      ====================
      add missing of_node_put

      The various for_each device_node iterators performs an of_node_get on each
      iteration, so a break out of the loop requires an of_node_put.

      The complete semantic patch that fixes this problem is
      (http://coccinelle.lip6.fr):

      // <smpl>
      @r@
      local idexpression n;
      expression e1,e2;
      iterator name for_each_node_by_name, for_each_node_by_type,
      for_each_compatible_node, for_each_matching_node,
      for_each_matching_node_and_match, for_each_child_of_node,
      for_each_available_child_of_node, for_each_node_with_property;
      iterator i;
      statement S;
      expression list [n1] es;
      @@

      (
      (
      for_each_node_by_name(n,e1) S
      |
      for_each_node_by_type(n,e1) S
      |
      for_each_compatible_node(n,e1,e2) S
      |
      for_each_matching_node(n,e1) S
      |
      for_each_matching_node_and_match(n,e1,e2) S
      |
      for_each_child_of_node(e1,n) S
      |
      for_each_available_child_of_node(e1,n) S
      |
      for_each_node_with_property(n,e1) S
      )
      &
      i(es,n,...) S
      )

      @@
      local idexpression r.n;
      iterator r.i;
      expression e;
      expression list [r.n1] es;
      @@

       i(es,n,...) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
         return n;
      |
      +  of_node_put(n);
      ?  return ...;
      )
         ...
       }

      @@
      local idexpression r.n;
      iterator r.i;
      expression e;
      expression list [r.n1] es;
      @@

       i(es,n,...) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n

      @@
      local idexpression r.n;
      iterator r.i;
      expression e;
      identifier l;
      expression list [r.n1] es;
      @@

       i(es,n,...) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  goto l;
      )
         ...
       }
      ...
      l: ... when != n// </smpl>
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 26b7974d9ad7f93891ee8c39ee63bd2515da7744
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:07 2015 +0100

      net: mv643xx_eth: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each 
iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 81a577034b000964ca791281a975f0ba9a9d7eed
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:06 2015 +0100

      ath6kl: add missing of_node_put

      for_each_compatible_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression e;
      local idexpression n;
      @@

       for_each_compatible_node(n,...) {
         ... when != of_node_put(n)
             when != e = n
      (
         return n;
      |
      +  of_node_put(n);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 028623418766ea64f4256035b06ac6cbc0a67892
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:03 2015 +0100

      net: phy: mdio: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each 
iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 447ed7360037b6e38c0206ddcbd04a256ec94099
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:02 2015 +0100

      netdev/phy: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each 
iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression r.n;
      expression r,e;
      @@

       for_each_available_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bd252796852193277a07da505601a2f407c70e0b
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:01 2015 +0100

      net: netcp: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression r.n;
      expression r,e;
      @@

       for_each_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8c387ebbaff8652943a1cbcab496aecadc6a8875
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:00 2015 +0100

      net: thunderx: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression r.n;
      expression r,e;
      @@

       for_each_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7e3b6e7423d5f994257c1de88e06b509673fdbcf
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sat Oct 24 05:47:44 2015 -0700

      ipv6: gre: support SIT encapsulation

      gre_gso_segment() chokes if SIT frames were aggregated by GRO engine.

      Fixes: 61c1db7fae21e ("ipv6: sit: add GSO/TSO support")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c501cdd6823a644cf35ac594c635310bf077125
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 26 16:17:14 2015 +0000

      Bluetooth: Fix crash on fast disconnect of SCO

      Fix a crash that may happen when a connection is closed before it was 
fully
      established. Mapping conn->hcon was released by shutdown function, but it
      is still referenced in (not yet finished) connection established handling
      function.

      [ 4635.254073] BUG: unable to handle kernel NULL pointer dereference at 
00000013
      [ 4635.262058] IP: [<c11659f0>] memcmp+0xe/0x25
      [ 4635.266835] *pdpt = 0000000024190001 *pde = 0000000000000000
      [ 4635.273261] Oops: 0000 [#1] PREEMPT SMP
      [ 4635.277652] Modules linked in: evdev ecb vfat fat libcomposite usb2380 
isofs zlib_inflate rfcomm(O) udc_core bnep(O) btusb(O) btbcm(O) btintel(O) 
bluetooth(O) cdc_acm arc4 uinput hid_mule
      [ 4635.321761] Pid: 363, comm: kworker/u:2H Tainted: G           O 
3.8.0-119.1-plk-adaptation-byt-ivi-brd #1
      [ 4635.332642] EIP: 0060:[<c11659f0>] EFLAGS: 00010206 CPU: 0
      [ 4635.338767] EIP is at memcmp+0xe/0x25
      [ 4635.342852] EAX: e4720678 EBX: 00000000 ECX: 00000006 EDX: 00000013
      [ 4635.349849] ESI: 00000000 EDI: fb85366c EBP: e40c7dc0 ESP: e40c7db4
      [ 4635.356846]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
      [ 4635.362873] CR0: 8005003b CR2: 00000013 CR3: 24191000 CR4: 001007f0
      [ 4635.369869] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      [ 4635.376865] DR6: ffff0ff0 DR7: 00000400
      [ 4635.381143] Process kworker/u:2H (pid: 363, ti=e40c6000 task=e40c5510 
task.ti=e40c6000)
      [ 4635.390080] Stack:
      [ 4635.392319]  e4720400 00000000 fb85366c e40c7df4 fb842285 e40c7de2 
fb853200 00000013
      [ 4635.401003]  e3f101c4 e4720678 e3f101c0 e403be0a e40c7dfc e416a000 
e403be0a fb85366c
      [ 4635.409692]  e40c7e1c fb820186 020f6c00 e47c49ac e47c4008 00000000 
e416a000 e47c402c
      [ 4635.418380] Call Trace:
      [ 4635.421153]  [<fb842285>] sco_connect_cfm+0xff/0x236 [bluetooth]
      [ 4635.427893]  [<fb820186>] 
hci_sync_conn_complete_evt.clone.101+0x227/0x268 [bluetooth]
      [ 4635.436758]  [<fb82370f>] hci_event_packet+0x1caa/0x21d3 [bluetooth]
      [ 4635.443859]  [<c106231f>] ? trace_hardirqs_on+0xb/0xd
      [ 4635.449502]  [<c1375b8a>] ? _raw_spin_unlock_irqrestore+0x42/0x59
      [ 4635.456340]  [<fb814b67>] hci_rx_work+0xb9/0x350 [bluetooth]
      [ 4635.462663]  [<c1039f1e>] ? process_one_work+0x17b/0x2e6
      [ 4635.468596]  [<c1039f77>] process_one_work+0x1d4/0x2e6
      [ 4635.474333]  [<c1039f1e>] ? process_one_work+0x17b/0x2e6
      [ 4635.480294]  [<fb814aae>] ? hci_cmd_work+0xda/0xda [bluetooth]
      [ 4635.486810]  [<c103a3fa>] worker_thread+0x171/0x20f
      [ 4635.492257]  [<c10456c5>] ? complete+0x34/0x3e
      [ 4635.497219]  [<c103ea06>] kthread+0x90/0x95
      [ 4635.501888]  [<c103a289>] ? manage_workers+0x1df/0x1df
      [ 4635.507628]  [<c1376537>] ret_from_kernel_thread+0x1b/0x28
      [ 4635.513755]  [<c103e976>] ? __init_kthread_worker+0x42/0x42
      [ 4635.519975] Code: 74 0d 3c 79 74 04 3c 59 75 0c c6 02 01 eb 03 c6 02 
00 31 c0 eb 05 b8 ea ff ff ff 5d c3 55 89 e5 57 56 53 31 db eb 0e 0f b6 34 18 
<0f> b6 3c 1a 43 29 fe 75 07 49 85 c9 7f
      [ 4635.541264] EIP: [<c11659f0>] memcmp+0xe/0x25 SS:ESP 0068:e40c7db4
      [ 4635.548166] CR2: 0000000000000013
      [ 4635.552177] ---[ end trace e05ce9b8ce6182f6 ]---

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4b3418fba0fe819197e3359d5ddbef84ba2c59de
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Sat Oct 24 14:00:20 2015 +0200

      ipv6: icmp: include addresses in debug messages

      Messages like "icmp6_send: no reply to icmp error" are close
      to useless. Adding source and destination addresses to provide
      some more clue.

      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1075ef5950da97927ae1b3ef76d03e211c4fdb55
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Fri Oct 23 14:58:19 2015 -0700

      bpf: make tracing helpers gpl only

      exported perf symbols are GPL only, mark eBPF helper functions
      used in tracing as GPL only as well.

      Suggested-by: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 62544ce8e01c1879d420ba309f7f319d24c0f4e6
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Thu Oct 22 17:10:14 2015 -0700

      bpf: fix bpf_perf_event_read() helper

      Fix safety checks for bpf_perf_event_read():
      - only non-inherited events can be added to perf_event_array map
        (do this check statically at map insertion time)
      - dynamically check that event is local and !pmu->count
      Otherwise buggy bpf program can cause kernel splat.

      Also fix error path after perf_event_attrs()
      and remove redundant 'extern'.

      Fixes: 35578d798400 ("bpf: Implement function bpf_perf_event_read() that 
get the selected hardware PMU conuter")
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d8e018c0b3211902af1bfb5d5b280f955a4633b7
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:45 2015 +0100

      NFC: nfcmrvl: update device tree bindings for Marvell NFC

      Align NFC bindgins to use marvell instead of mrvl.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit caf6e49bf6d02e6bb94df680bbe3beaf680fdefa
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:44 2015 +0100

      NFC: nfcmrvl: add spi driver

      This driver adds the support of SPI-based Marvell NFC controller.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2bd832459a0827b8dcf13b345380b66f92089d74
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:43 2015 +0100

      NFC: NCI: allow spi driver to choose transfer clock

      In some cases low level drivers might want to update the
      SPI transfer clock (e.g. during firmware download).

      This patch adds this support. Without any modification the
      driver will use the default SPI clock (from pdata or device tree).

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit fcd9d046fd8998cc984f2ff80e76f246ebca15b6
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:42 2015 +0100

      NFC: NCI: move generic spi driver to a module

      SPI driver should be a module.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit b5b3e23e4cace008e1a30e8614a484d14dfd07a1
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:41 2015 +0100

      NFC: nfcmrvl: add i2c driver

      This driver adds the support of I2C-based Marvell NFC controller.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 58d34aa677ec248539262c54a618d61804a893f1
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:40 2015 +0100

      NFC: nfcmrvl: configure head/tail room values per low level drivers

      Low-level drivers may need to add some data before and/or
      after NCI packet.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 3194c6870158e305dac2af52f83681e9cb67280f
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:39 2015 +0100

      NFC: nfcmrvl: add firmware download support

      Implement firmware download protocol for Marvell NFC controllers.
      This protocol is based on NCI frames that's why parts of its
      implementation use some NCI generic functions.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit e5629d29470134af1954d2bbe45c4f2b73f68ee9
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:38 2015 +0100

      NFC: NCI: export nci_send_frame and nci_send_cmd function

      Export nci_send_frame and nci_send_cmd symbols to allow drivers
      to use it. This is needed for example if NCI is used during
      firmware download phase.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit fb101c0e9cc635b811b413b26a6690240c303f54
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:37 2015 +0100

      NFC: nfcmrvl: remove unneeded version defines

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 15d17170b4e44c5768c3d32b093cd393c4dbc158
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Mon Oct 26 07:50:11 2015 +0100

      NFC: st21nfca: Add support for proprietary commands

      Add support for proprietary commands useful mainly
      for factory testings.

      Here is a list:

      - FACTORY_MODE: Allow to set the driver into a mode where no
        secure element are activated. It does not consider any
        NFC_ATTR_VENDOR_DATA.
      - HCI_CLEAR_ALL_PIPES: Allow to execute a HCI clear all pipes
        command. It does not consider any NFC_ATTR_VENDOR_DATA.
      - HCI_DM_PUT_DATA: Allow to configure specific CLF registry as
        for example RF trimmings or low level drivers configurations
        (I2C, SPI, SWP).
      - HCI_DM_UPDATE_AID: Allow to configure an AID routing into the
        CLF routing table following RF technology, CLF mode or protocol.
      - HCI_DM_GET_INFO: Allow to retrieve CLF information.
      - HCI_DM_GET_DATA: Allow to retrieve CLF configurable data such as
        low level drivers configurations or RF trimmings.
      - HCI_DM_LOAD: Allow to load a firmware into the CLF. A complete
        packet can be more than 8KB.
      - HCI_DM_RESET: Allow to run a CLF reset in order to "commit" CLF
        configuration changes without CLF power off.
      - HCI_GET_PARAM: Allow to retrieve an HCI CLF parameter (for example
        the white list).
      - HCI_DM_FIELD_GENERATOR: Allow to generate different kind of RF
        technology. When using this command to anti-collision is done.
      - HCI_LOOPBACK: Allow to echo a command and test the Dh to CLF
        connectivity.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2b6e5bfed0288524fca1376eb89856363cb8c55e
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:50 2015 +0100

      NFC: st-nci: Replace st21nfcb by st_nci in makefile

      Replace 1 missing st21nfcb by st_nci

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit bd8f1a31a98b9f26201167f695bc807e3ff45841
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:49 2015 +0100

      NFC: st-nci: remove duplicated skb dump

      Remove SPI_DUMP_SKB and I2C_DUMP_SKB as skb is already dumped
      in ndlc layer.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit bb2496c3ecae8a4a24c86b3c67de192f30fa1385
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:48 2015 +0100

      NFC: st-nci: Disable irq when powering the device up

      Upon some conditions (timing, CLF errors, platform errors...), the
      irq might be already active when powering the device.

      Add irq_active variable as a guard to avoid kernel warning message

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a9e062d0599f499082320006ae3b54cf391bf996
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:47 2015 +0100

      NFC: st21nfca: Add error messages for unexpected HCI events

      Potentially an unexpected HCI event may occur because of a
      firmware bug. It could be transparent for the user but we should
      at least log it.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 57dc828a7740f600ea8ce3049c3745aa805c83c9
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:45 2015 +0100

      NFC: st21nfca: Add few code style fixes

      Add a minor code style fixes

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 064d00479697907730a4aff9edf879c0ca4743f0
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:44 2015 +0100

      NFC: st-nci: Add few code style fixes

      Add some few code style fixes.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 96d4581f0b3712221d6ed4a765bb6b4ea40f2b2f
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:43 2015 +0100

      NFC: netlink: Add mode parameter to deactivate_target functions

      In order to manage in a better way the nci poll mode state machine,
      add mode parameter to deactivate_target functions.
      This way we can manage different target state.
      mode parameter make sense only in nci core.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit cde2aa99ba702ab8efa583495e54731b9f854e66
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:42 2015 +0100

      NFC: st21nfca: Fix host_list verification after SEactivation

      A secure element can be activated in different order.
      The host_list is updated keeping a fixed order:
        <terminal_host_id><uicc_id><ese_id>.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 4e932acc6fd66c905b2d0ca452dcf69321b6c414
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:41 2015 +0100

      NFC: st-nci: Fix host_list verification after SE activation

      A secure element can be activated in different order.
      The host_list is updated keeping a fixed order:
        <terminal_host_id><uicc_id><ese_id>.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 06521053a06062f62f001d79b7c1449a614cc4af
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:40 2015 +0100

      NFC: st-nci: Increase delay between 2 secure element activations

      After internal discussion, it appears this timing should be
      increased to 20 ms for interoperability reason.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 3648dc6d27f648b8e3ce9b48874627a833d53c3a
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:39 2015 +0100

      NFC: st-nci: Add ese-present/uicc-present dts properties

      In order to align with st21nfca, dts configuration properties
      ese_present and uicc_present are made available in st-nci driver.

      So far, in early development firmware, because
      nci_nfcee_mode_set(DISABLE) was not supported we had to try to
      enable it during the secure element discovery phase.

      After several trials on commercial and qualified firmware it appears
      that nci_nfcee_mode_set(ENABLE) and nci_nfcee_mode_set(DISABLE) are
      properly supported.

      Such feature also help us to eventually save some time (~5ms) when
      only one secure element is connected.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit be73c2cbc857a4a3424c0e3cdd70002d5a27a756
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:38 2015 +0100

      NFC: netlink: Add missing NFC_ATTR comments

      NFC_CMD_ACTIVATE_TARGET and NFC_ATTR_SE_PARAMS comments are missing.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2b5dbe089f619f995faf2fe6beb7efb705eed302
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:37 2015 +0100

      NFC: st-nci: Add error messages when an unexpected HCI event occurs

      Potentially an unexpected HCI event may occur because of a
      firmware bug. It could be transparent for the user but we need to
      at least log it.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit b1fa4dc4ffef843bda17f26bbf54fb5d8bc23d2b
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:36 2015 +0100

      NFC: st-nci: Add support for proprietary commands

      Add support for proprietary commands useful mainly for
      factory testings. Here is a list:

      - FACTORY_MODE: Allow to set the driver into a mode where
        no secure element are activated. It does not consider any
        NFC_ATTR_VENDOR_DATA.
      - HCI_CLEAR_ALL_PIPES: Allow to execute a HCI clear all pipes
        command. It does not consider any NFC_ATTR_VENDOR_DATA.
      - HCI_DM_PUT_DATA: Allow to configure specific CLF registry
        like for example RF trimmings or low level drivers
        configurations (I2C, SPI, SWP).
      - HCI_DM_UPDATE_AID: Allow to configure an AID routing into the
        CLF routing table following RF technology, CLF mode or protocol.
      - HCI_DM_GET_INFO: Allow to retrieve CLF information.
      - HCI_DM_GET_DATA: Allow to retrieve CLF configurable data such as
        low level drivers configurations or RF trimmings.
      - HCI_DM_DIRECT_LOAD: Allow to load a firmware into the CLF.
        A complete packet can be more than 8KB.
      - HCI_DM_RESET: Allow to run a CLF reset in order to "commit" CLF
        configuration changes without CLF power off.
      - HCI_GET_PARAM: Allow to retrieve an HCI CLF parameter (for example
        the white list).
      - HCI_DM_FIELD_GENERATOR: Allow to generate different kind of RF
        technology. When using this command to anti-collision is done.
      - HCI_LOOPBACK: Allow to echo a command and test the Dh to CLF
        connectivity.
      - HCI_DM_VDC_MEASUREMENT_VALUE: Allow to measure the field applied
        on the CLF antenna. A value between 0 and 0x0f is returned. 0 is
        maximum.
      - HCI_DM_FWUPD_START: Allow to put CLF into firmware update mode.
        It is a specific CLF command as there is no GPIO for this.
      - HCI_DM_FWUPD_END:  Allow to complete firmware update.
      - HCI_DM_VDC_VALUE_COMPARISON: Allow to compare the field applied
        on the CLF antenna to a reference value.
      - MANUFACTURER_SPECIFIC: Allow to retrieve manufacturer specific data
        received during a NCI_CORE_INIT_CMD.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 23695e41a1cac017edad2b38607f33678a31b877
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 04:32:57 2015 +0000

      scsi_dh: fix use-after-free when removing scsi device

      The commit 1bab0de0274f ("dm-mpath, scsi_dh: don't let dm detach device
      handlers") removed reference counting of attached scsi device handler.
      As a result, handler data is freed immediately via scsi_dh->detach()
      in the context of scsi_remove_device() where activation request can be
      still in flight.

      This patch moves scsi_dh_handler_detach() to sdev releasing function,
      scsi_device_dev_release_usercontext(), at that point the device
      is already in quiesced state.

      Fixes: 1bab0de0274f ("dm-mpath, scsi_dh: don't let dm detach device 
handlers")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 2280521719e81919283b82902ac24058f87dfc1b
  Author: DÄ?vis MosÄ?ns <davispuh@xxxxxxxxx>
  Date:   Fri Aug 21 07:29:22 2015 +0300

      mvsas: Fix NULL pointer dereference in mvs_slot_task_free

      When pci_pool_alloc fails in mvs_task_prep then task->lldd_task stays
      NULL but it's later used in mvs_abort_task as slot which is passed
      to mvs_slot_task_free causing NULL pointer dereference.

      Just return from mvs_slot_task_free when passed with NULL slot.

      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=101891
      Signed-off-by: DÄ?vis MosÄ?ns <davispuh@xxxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 3242c9ee0b6104c901336a9498bb7ec64923eb1f
  Merge: f7e1b37 cb36859
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 18:32:22 2015 -0700

      Merge branch 'sh_eth-fixes'

      Sergei Shtylyov says:

      ====================
      sh_eth: RX buffer alignment fixes

      Here's a set of 2 patches against DaveM's 'net.git' repo which are the
      fixes to the RX buffer size calculation.

      [1/2] sh_eth: fix RX buffer size alignment
      [2/2] sh_eth: fix RX buffer size calculation
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cb3685958dd4c46d7646d244063ea3ec8adf3618
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 00:46:40 2015 +0300

      sh_eth: fix RX buffer size calculation

      The RX buffer size calulation failed to account for the length granularity
      (which is now 32 bytes)...

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab8579169b79c062935dade949287113c7c1ba73
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 00:46:03 2015 +0300

      sh_eth: fix RX buffer size alignment

      Both  Renesas R-Car and RZ/A1 manuals state that RX buffer  length must be
      a multiple of 32 bytes, while the driver  only uses 16 byte granularity...

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8b7c94e3478dbb0296293b43a974c3561d01e9fb
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Fri Oct 23 12:11:08 2015 -0700

      net: dsa: bcm_sf2: Unhardcode port numbers

      While the current driver mostly supports BCM7445 which has a hardcoded
      location for its MoCA port on port 7 and port 0 for its internal PHY,
      this is not necessarily true for all other chips out there such as
      BCM3390 for instance.

      Walk the list of ports from Device Tree, get their port number ("reg"
      property), and then parse the "phy-mode" property and initialize two
      internal variables: moca_port and a bitmask of internal PHYs. Since we
      use interrupts for the MoCA port, we introduce two helper functions to
      enable/disable interrupts and do this at the appropriate bank (INTRL2_0
      or INTRL2_1).

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 680060d3e02d175516832e9af058ffe96ecc4cdc
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Fri Oct 23 11:38:07 2015 -0700

      net: dsa: bcm_sf2: Implement FDB operations

      Add support for the FDB add, delete, and dump operations. The add and
      delete operations are implemented using directed ARL operations using
      the specified MAC address and consist in a read operation, write and
      readback operation.

      The dump operation consists in using the ARL search and software
      filtering entries which are not for the desired port.

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76b1ba7feda533a74c5874a1d15bb4039083efc8
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:39 2015 +0800

      clocksource/drivers/digicolor: Prevent ftrace recursion

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      We should not trace digicolor_timer_sched_read() function. Fix this by 
adding
      the notrace attribute to this function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Baruch Siach <baruch@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit bd859a44b2f6749fd82e89dabbaa37f2c8aa33fe
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:40 2015 +0800

      clocksource/drivers/fsl_ftm_timer: Prevent ftrace recursion

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      We should not trace the ftm_read_sched_clock() function.

      Fix this by adding the notrace attribute to this function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 36361abc8bc14e80f6b4db561665e5e15249c181
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:38 2015 +0800

      clocksource/drivers/vf_pit_timer: Prevent ftrace recursion

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      We should not trace the pit_read_sched_clock() function. Fix this by 
adding a
      notrace attribute to this function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit cdc68ec01853baf3558c6d25f19c869add4a6888
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:37 2015 +0800

      clocksource/drivers/prima2: Prevent ftrace recursion

      Currently prima2 timer can be used as a scheduler clock. We properly
      marked sirfsoc_read_sched_clock() as notrace but we then call another
      function sirfsoc_timer_read() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding notrace attribute to the sirfsoc_timer_read() function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit b8725dab66f0b2d57affb33a7f6ca094d9f1f8dd
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:35 2015 +0800

      clocksource/drivers/samsung_pwm_timer: Prevent ftrace recursion

      Currently samsung_pwm_timer can be used as a scheduler clock. We properly
      marked samsung_read_sched_clock() as notrace but we then call another
      function samsung_clocksource_read() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding notrace attribute to the samsung_clocksource_read()
      function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit f8af0e9c644caf64d0f42dce816c18346c744a9f
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:36 2015 +0800

      clocksource/drivers/pistachio: Prevent ftrace recursion

      Currently pistachio can be used as a scheduler clock. We properly marked
      pistachio_read_sched_clock() as notrace but we then call another function
      pistachio_clocksource_read_cycles() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding notrace attribute to the 
pistachio_clocksource_read_cycles()
      function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit d6df3576e6b4bcf765f5ace69915b4fa4a7ee1c3
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:34 2015 +0800

      clocksource/drivers/arm_global_timer: Prevent ftrace recursion

      Currently arm_global_timer can be used as a scheduler clock. We properly
      marked gt_sched_clock_read() as notrace but we then call another function
      gt_counter_read() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding an extra notrace function to keep other users of
      gt_counter_read() traceable.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 195562194aad3a0a3915941077f283bcc6347b9b
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Mon Oct 26 01:50:28 2015 -0700

      Input: alps - only the Dell Latitude D420/430/620/630 have separate stick 
button bits

      commit 92bac83dd79e ("Input: alps - non interleaved V2 dualpoint has
      separate stick button bits") assumes that all alps v2 non-interleaved
      dual point setups have the separate stick button bits.

      Later we limited this to Dell laptops only because of reports that this
      broke things on non Dell laptops. Now it turns out that this breaks things
      on the Dell Latitude D600 too. So it seems that only the Dell Latitude
      D420/430/620/630, which all share the same touchpad / stick combo,
      have these separate bits.

      This patch limits the checking of the separate bits to only these models
      fixing regressions with other models.

      Reported-and-tested-by: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Tested-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-By: Pali Rohár <pali.rohar@xxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit ababae44108b0e94b58eef6cb5bd830bd040a47f
  Author: Werner Pawlitschko <werner.pawlitschko@xxxxxxxx>
  Date:   Tue Oct 27 09:08:04 2015 +0900

      x86/ioapic: Prevent NULL pointer dereference in setup_ioapic_dest()

      Commit 4857c91f0d19 changed the way how irq affinity is setup in
      setup_ioapic_dest() from using the core helper function to
      unconditionally calling the irq_set_affinity() callback of the
      underlying irq chip.

      That results in a NULL pointer dereference for the rare case where the
      underlying irq chip is lapic_chip which has no irq_set_affinity()
      callback. lapic_chip is occasionally used for the timer interrupt (irq
      0).

      The fix is simple: Check the availability of the callback instead of
      calling it unconditionally.

      Fixes: 4857c91f0d19 "x86/ioapic: Force affinity setting in 
setup_ioapic_dest()"
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 858e904bd71dd0057a548d6785d94ce5ec4aeabd
  Merge: ce6f988 cbf3ccd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:44:13 2015 +0900

      Merge tag 'iommu-fixes-v4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu

      Pull iommu fixes from Joerg Roedel:
       "Two late fixes for the AMD IOMMU driver:

         - add an additional check to the io page-fault handler to avoid a
           BUG_ON being hit in handle_mm_fault()

         - fix a problem with devices writing to the system management area
           and were blocked by the IOMMU because the driver wrongly cleared
           out the DTE flags allowing that access"

      * tag 'iommu-fixes-v4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu:
        iommu/amd: Don't clear DTE flags when modifying it
        iommu/amd: Fix BUG when faulting a PROT_NONE VMA

  commit ce6f9886037f5566cb8e440b9caa5e7d7334e53b
  Merge: 896066e 8bce6d3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:41:48 2015 +0900

      Merge tag 'md/4.3-rc6-fixes' of git://neil.brown.name/md

      Pull md fixes from Neil Brown:
       "Some raid1/raid10 fixes.

        I meant to get this to you before -rc7, but what with all the travel
        plans..

        Two fixes for bugs that are in both raid1 and raid10.  Both related to
        bad-block-lists and at least one needs to be back ported to 3.1.

        Also a revision for the "new" layout in raid10.  This "new" code
        (which aims to improve robustness) actually reduces robustness in some
        cases.  It probably isn't in use at all as not public user-space code
        makes use of these new layouts.  However just in case someone has
        their own code, it would be good to get the WARNing out for them
        sooner"

      * tag 'md/4.3-rc6-fixes' of git://neil.brown.name/md:
        md/raid10: fix the 'new' raid10 layout to work correctly.
        md/raid10: don't clear bitmap bit when bad-block-list write fails.
        md/raid1: don't clear bitmap bit when bad-block-list write fails.
        md/raid10: submit_bio_wait() returns 0 on success
        md/raid1: submit_bio_wait() returns 0 on success

  commit 896066ee1cf4d653057dac4e952f49c96ad16fa7
  Merge: 85051e2 22ca7ca
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:40:01 2015 +0900

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Last fixes from me: one amdgpu/radeon suspend resume and one leak fix,
        along with one vmware fix for some issues when command submission
        fails"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/amdgpu: don't try to recreate sysfs entries on resume
        drm/radeon: don't try to recreate sysfs entries on resume
        drm/amdgpu: stop leaking page flip fence
        drm/vmwgfx: Stabilize the command buffer submission code

  commit 182475b7a2831abf7e6ca83b2aced0bef5dcdfd3
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Mon Oct 26 16:55:56 2015 -0400

      memremap: fix highmem support

      Currently memremap checks if the range is "System RAM" and returns the
      kernel linear address.  This is broken for highmem platforms where a
      range may be "System RAM", but is not part of the kernel linear mapping.
      Fallback to ioremap_cache() in these cases, to let the arch code attempt
      to handle it.

      Note that ARM ioremap will WARN when attempting to remap ram, and in
      that case the caller needs to be fixed.  For this reason, existing
      ioremap_cache() usages for ARM are already trained to avoid attempts to
      remap ram.

      The impact of this bug is low for now since the pmem driver is the only
      user of memremap(), but this is important to fix before more conversions
      to memremap arrive in 4.4.

      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reported-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 01b19455c08cc37d1c3ef174524278e84c92fec1
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:26 2015 +0900

      perf tools: Setup pager when printing usage and help

      It's annoying to see error or help message when command has many options
      like in perf record, report or top.  So setup pager when print parser
      error or help message - it should be OK since no UI is enabled at the
      parsing time.  The usage_with_options() already disables it by calling
      exit_browser() anyway.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-3-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b272a59d835cd8ca6b45f41c66c61b473996c759
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:25 2015 +0900

      perf report: Rename to --show-cpu-utilization

      So that it can be more consistent with other --show-* options.  The old
      name (--showcpuutilization) is provided only for compatibility.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a5f4a6932ec2e1a53642e97a1be64bc7b169942f
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:24 2015 +0900

      perf tools: Improve ambiguous option help message

      Currently if an option name is ambiguous it only prints first two
      matched option names but no help.  It'd be better it could show all
      possible names and help messages too.

      Before:
        $ perf report --show
          Error: Ambiguous option: show (could be --show-total-period or
                                                  --show-ref-call-graph)
         Usage: perf report [<options>]

      After:
        $ perf report --show
          Error: Ambiguous option: show (could be --show-total-period or
                                                  --show-ref-call-graph)
         Usage: perf report [<options>]

            -n, --show-nr-samples
                                    Show a column with the number of samples
                --showcpuutilization
                                    Show sample percentage for different cpu 
modes
            -I, --show-info         Display extended information about 
perf.data file
                --show-total-period
                                    Show a column with the sum of periods
                --show-ref-call-graph
                                    Show callgraph from reference event

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c0963772cbbf1b7dc9fad4497f3aba8526bb07d6
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:24:38 2015 +0200

      rtl8xxxu: fix unused rtl8192cu_fops compiler warning

      kbuild reported:

      rtl8xxxu.c:5786:32: warning: â??rtl8192cu_fopsâ?? defined but not used 
[-Wunused-variable]

      Fix it by adding temporary ifdefs around the static functions.

      Fixes: 033695bdf6d7 ("rtl8xxxu: move devices supported by rtlwifi under 
UNTESTED config")
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit a7cedab6ccd7f02c86476ae52760a5d0482806fa
  Author: Lokesh Vutla <lokeshvutla@xxxxxx>
  Date:   Tue Oct 20 16:50:06 2015 -0500

      mmc: omap_hsmmc: Enable omap_hsmmc for Keystone 2

      Enable omap_hsmmc for Keystone 2 architecture which reuses the HSMMC
      IP found on OMAP platforms.

      Signed-off-by: Franklin S Cooper Jr <fcooper@xxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e839b134761444e5988d5eee1ef54a0ff2327344
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 21 11:15:46 2015 +0300

      mmc: sdhci-acpi: Add more ACPI HIDs for Intel controllers

      Add ACPI HIDs for Intel host controllers including one
      supporting HS400.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4fd4c0655b82b0f81841b915ef1e70e2141d4a38
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 21 11:15:45 2015 +0300

      mmc: sdhci-pci: Add more PCI IDs for Intel controllers

      Add PCI IDs for Intel host controllers

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b3b78f2cb2eeca47f3b81dd795fd341a337363c4
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:43:01 2015 +0800

      arm: lpc18xx_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Joachim Eastwood <manabian@xxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit fdd36e530e0f29b86aaa2013e0d9dee0964ecf6f
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:49 2015 +0800

      arm: hisi_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Wei Xu <xuwei5@xxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 391ce1e0eb0af2cb5d85273a142061fb77ecf135
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:37 2015 +0800

      arm: exynos_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 005a5243aab6a2d45910233593bf9cba4f207bf2
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:20 2015 +0800

      arc: axs10x_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b13af8f9685e85d0a0939aae8c5fce53f8e90186
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:05 2015 +0800

      mips: pistachio_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Govindraj Raja <govindraj.raja@xxxxxxxxxx>
      Acked-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 87ffa7d30d0be24f4bcf08005f145903c5ef55b7
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:41:50 2015 +0800

      Documentation: synopsys-dw-mshc: add bindings for idmac and edmac

      synopsys-dw-mshc supports three types of transfer mode. We add
      bindings and description for how to use them at runtime.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 70692752af12e2dbae48685b1d07fe7bdb2fab31
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:41:37 2015 +0800

      mmc: dw_mmc: use macro for HCON register operations

      This patch add some macros for HCON register operations
      to make code more readable.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 3fc7eaef44dbcbcd602b6bcd0ac6efba7a30b108
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:41:23 2015 +0800

      mmc: dw_mmc: Add external dma interface support

      DesignWare MMC Controller can supports two types of DMA
      mode: external dma and internal dma. We get a RK312x platform
      integrated dw_mmc and ARM pl330 dma controller. This patch add
      edmac ops to support these platforms. I've tested it on RK31xx
      platform with edmac mode and RK3288 platform with idmac mode.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9e4703df3aa9829a84d6ccf19c6062ba19a8de71
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:44:03 2015 +0800

      mmc: sdhci-of-esdhc: avoid writing power control register

      The eSDHC doesn't have a standard power control register, so when
      writing this register in stack we should do nothing to avoid
      incorrect operation.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit a599579ee8e32daebdfa4d97b24389c680ef5789
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 01:40:16 2015 +0300

      DT: mmc: sh_mmcif: document R8A7794 support

      Renesas R8A7794 SoC also has the MMCIF controller.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 76d63c2b59d4a1481bedc65a3ef25e9d1354dca3
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 01:39:39 2015 +0300

      DT: mmc: sh_mmcif: fix "compatible" property text

      The "compatible" property text contradicts even the example given in the 
MMCIF
      binding document itself;  moreover, the Renesas MMCIF driver only matches 
 on
      the generic "compatible" string and doesn't look for the SoC specific 
strings
      at all. Thus describe "renesas,sh-mmcif" as a fallback value.

      Fixes: b4c27763d749 ("mmc: sh_mmcif: Document DT bindings")
      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2860d060ac902df0164cc9580f843b101e27a2c6
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:53:03 2015 +0300

      mmc: skip reclaiming host on mmc_add_card() error

      There's little sense in releasing the host on mmc_add_card() error
      immediately after reclaiming  it, so reclaim the host  only in case
      of success.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7f8a9a7e98f99e9cd874eaf6ca2f00438c2a7c38
  Author: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 17:08:32 2015 +0100

      mmc: android-goldfish: Allow compiling the driver with COMPILE_TEST

      The driver depends on GOLDFISH but there isn't a build dependency
      so it's a good idea to allow the driver to always be built when the
      COMPILE_TEST option is enabled.

      That way, the driver can be built with a config generated by make
      allyesconfig and check if a patch would break the build.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Reviewed-by: Jean Delvare <jdelvare@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c41d31f71d8889919d2f3becbccd6d2d7a3bd243
  Author: Heiko Stuebner <heiko@xxxxxxxxx>
  Date:   Mon Oct 12 14:48:30 2015 +0200

      ARM: dts: rockchip: add tuning related settings to veyron devices

      This allows the tuning code to run and use higher speeds on capable cards.

      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f71ddc5873cb90ffb217de50aed8bdd2fb00fc9f
  Author: Alexandru M Stan <amstan@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:29 2015 +0200

      ARM: dts: rockchip: Add drive/sample clocks for rk3288 dw_mmc devices

      The drive/sample clocks can be phase shifted.  The drive clock
      could be used in a future patch to adjust hold times.  The sample
      clock is used for tuning.

      Signed-off-by: Alexandru M Stan <amstan@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit cbb79e43c82635840cdcbf71b1d1c374e2c3a025
  Author: Alexandru M Stan <amstan@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:28 2015 +0200

      mmc: dw_mmc-rockchip: MMC tuning with the clock phase framework

      This algorithm will try 1 degree increments, since there's no way to tell
      what resolution the underlying phase code uses. As an added bonus, doing
      many tunings yields better results since some tests are run more than once
      (ex: if the underlying driver uses 45 degree increments, the tuning code
      will try the same angle more than once).

      It will then construct a list of good phase ranges (even ranges that cross
      360/0), will pick the biggest range then it will set the sample_clk to the
      middle of that range.

      We do not touch ciu_drive (and by extension define default-drive-phase).
      Drive phase is mostly used to define minimum hold times, while one could
      write some code to determine what phase meets the minimum hold time (ex 10
      degrees) this will not work with the current clock phase framework (which
      floors angles, so we'll get 0 deg, and there's no way to know what
      resolution the floors happen at). We assume that the default drive angles
      set by the hardware are good enough.

      If a device has device specific code (like exynos) then that will still
      take precedence, otherwise this new code will execute. If the device wants
      to tune, but has no sample_clk defined we'll return EIO with an error
      message.

      Signed-off-by: Alexandru M Stan <amstan@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f8085bbada3b124b5b39b61bb1a7a0a78c24604b
  Author: Alexandru M Stan <amstan@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:27 2015 +0200

      mmc: dw_mmc-rockchip: dt-binding: Add tuning related things

      Add ciu_drive, ciu_sample clocks and default-sample-phase. This will later
      be used by tuning code.

      We do not touch ciu_drive (and by extension define default-drive-phase).
      Drive phase is mostly used to define minimum hold times, while one could
      write some code to determine what phase meets the minimum hold time
      (ex 10 degrees) this will not work with the current clock phase framework
      (which floors angles, so we'll get 0 deg, and there's no way to know what
      resolution the floors happen at). We assume that the default drive angles
      set by the hardware are good enough.

      Signed-off-by: Alexandru M Stan <amstan@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e0848f5d294c703917260a6228cc08b8be46c527
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:26 2015 +0200

      mmc: dw_mmc: Use mmc_regulator_set_vqmmc in start_signal_voltage_switch

      We've introduced a new helper in the MMC core:
      mmc_regulator_set_vqmmc().  Let's use this in dw_mmc.  Using this new
      helper has some advantages:

      1. We get the mmc_regulator_set_vqmmc() behavior of trying to match
         VQMMC and VMMC when the signal voltage is 3.3V.  This ensures max
         compatibility.

      2. We get rid of a few more warnings when probing unsupported
         voltages.

      3. We get rid of some non-dw_mmc specific code in dw_mmc.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2086f801cb2a796279e817e68255654c4cfd3be3
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:25 2015 +0200

      mmc: core: Add mmc_regulator_set_vqmmc()

      This adds logic to the MMC core to set VQMMC.  This is expected to be
      called by MMC drivers like dw_mmc as part of (or instead of) their
      start_signal_voltage_switch() callback.

      A few notes:

      * When setting the signal voltage to 3.3V we do our best to make VQMMC
        and VMMC match.  It's been reported that this makes some old cards
        happy since they were tested back in the day before UHS when VQMMC
        and VMMC were provided by the same regulator.  A nice side effect of
        this is that we don't end up on the hairy edge of VQMMC (2.7V),
        which some EEs claim is a little too close to the minimum for
        comfort.
        This is done in two steps. At first we try to find a VQMMC within
        a 0.3V tolerance of VMMC and if this is not supported by the
        supplying regulator we try to find a suitable voltage within the
        whole 2.7V-3.6V area of the spec.

      * The two step approach is currently necessary, as the used
        regulator_set_voltage_triplet(min, target, max) uses a simple
        implementation that just tries two basic steps:
        regulator_set_voltage(target, max);
        regulator_set_voltage(min, target);
        So with only one step with 2.7-3.6V borders, if a suitable voltage
        is a bit below VMMC, we would directly get the lowest 2.7V
        which some boards (like Rockchips) don't like at all.

      * When setting the signal voltage to 1.8V or 1.2V we aim for that
        specific voltage instead of picking the lowest one in the range.

      * We very purposely don't print errors in mmc_regulator_set_vqmmc().
        There are cases where the MMC core will try several different
        voltages and we don't want to pollute the logs.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 310c805e7f133443cd57f880b73557a4a8f54b30
  Author: Heiko Stuebner <heiko@xxxxxxxxx>
  Date:   Mon Oct 12 18:00:54 2015 +0200

      mmc: core: move ocr-bit to voltage translation into separate function

      We will shortly need the calculation of an ocr-bit to the actual
      voltage in a second place too, so move it from mmc_regulator_set_ocr
      to a common function mmc_ocrbitnum_to_vdd to make that possible.

      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9eadcc0581a8ccaf4c2378aa1c193fb164304f1d
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Fri Oct 2 10:56:11 2015 +0200

      mmc: core: Remove MMC_CLKGATE

      MMC_CLKGATE was once invented to save power by gating the bus clock at
      request inactivity. At that time it served its purpose. The modern way to
      deal with power saving for these scenarios, is by using runtime PM.

      Nowadays, several host drivers have deployed runtime PM, but for those
      that haven't and which still cares power saving at request inactivity,
      it's certainly time to deploy runtime PM as it has been around for several
      years now.

      To simplify code to mmc core and thus decrease maintenance efforts, this
      patch removes all code related to MMC_CLKGATE.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a22950c888e3770c958a5c489906b48d3764a783
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:57 2015 +0800

      mmc: sdhci-of-esdhc: add quirk SDHCI_QUIRK_BROKEN_TIMEOUT_VAL for ls1021a

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2ca635242ec40c8d575e337a0b2b0a1928ad6581
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:47 2015 +0800

      mmc: kconfig: reconfigure MMC_SDHCI_OF_ESDHC option

      Freescale eSDHC driver now supports both little-endian and
      big-endian mode eSDHC IPs for ARM and PPC. So, MMC_SDHCI_OF_ESDHC
      option needs to be reconfigured.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f4932cfd22f151af19d552c0ee607b2fb9c41b53
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:36 2015 +0800

      mmc: sdhci-of-esdhc: support both BE and LE host controller

      To support little endian eSDHC controller, we redefine both BE and
      LE IO accessors. In the new accessors, use ioread*/iowrite* instead
      of in_be32/out_be32 and will select accessors according to endian
      mode in probe function.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e38eeca5c23389f9a606e4847f0f9731b2e889f2
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:23 2015 +0800

      mmc: dt: add DT binding for little-endian eSDHC host controller

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 06bf9c565444643ce2732f8a297f76b953acde6b
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Oct 6 10:26:21 2015 +0300

      mmc: sdhci-pci: Add another PCI ID for an Intel eMMC host controller

      Add another PCI ID for an Intel eMMC host controller.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4351f19a337d48a780762d076408ebe9b0c1f945
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Wed Sep 30 16:07:38 2015 +0200

      clk: rockchip: Make calculations use rounding

      Let's use DIV_ROUND_CLOSEST for rounding, not just truncating
      division.  This lets us get closer to the right rate.

      Before this:
        set_phase(86) delay_nums=26 reg[0xf000420c]=0x468 actual_degrees=83
        set_phase(89) delay_nums=27 reg[0xf000420c]=0x46c actual_degrees=86

      After this:
        set_phase(86) delay_nums=27 reg[0xf000420c]=0x46c actual_degrees=86
        set_phase(89) delay_nums=28 reg[0xf000420c]=0x470 actual_degrees=90

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f0232063fb64fc79bfb7b6b35d611b2e4a79ffe6
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Wed Sep 30 16:07:37 2015 +0200

      clk: rockchip: Allow more precision for some mmc clock phases

      Because of the inexact nature of the extra MMC delay elements (it's
      not possible to keep the phase monotonic and to also make phases (mod
      90) > 70), we previously only allowed phases (mod 90) of 22.5, 45,
      and 67.5.

      But it's not the end of the world if the MMC clock phase goes
      non-monotonic.  At most we'll be 25 degrees off.  It's way better to
      test more phases to look for bad ones than to be 25 degrees off, because
      in the case of MMC really the point is to find bad phases and get as far
      asway from the as possible.  If we get to test extra phases by going
      slightly non-monotonic then that might be fine.  Worst case we would
      end up at a phases that's slight differnt than the one we wanted, but
      at least we'd still be quite far away from the a bad phase.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Fold in more precise variance-values of 44-77 instead of 40-80.
      Fold in the actual removal of the monotonic requirement and adapt
      patch message accordingly.
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7582041ff3d4aaa348894858d6384c4a9981c5fc
  Author: kbuild test robot <lkp@xxxxxxxxx>
  Date:   Tue Oct 6 04:01:04 2015 +0800

      mmc: sdhci-pci: fix simple_return.cocci warnings

      drivers/mmc/host/sdhci-pci-core.c:447:1-4: WARNING: end returns can be 
simpified

       Simplify a trivial if-return sequence.  Possibly combine with a
       preceding function call.

      Generated by: scripts/coccinelle/misc/simple_return.cocci

      CC: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f0cbd7806d736d77714994cc41c5161c0a29cccf
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 20:31:58 2015 +0100

      mmc: sdhci-pci: Make sdhci_pci_o2_fujin2_pci_init() static

      It has no external callers.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 659c9bc114a810b3a3c1e50585cc57f1312a6d60
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 20:31:18 2015 +0100

      mmc: sdhci-pci: Build o2micro support in the same module

      sdhci-pci-o2micro.c contains no initialisation and its functions are only
      called from shdci-pci.c, so there is no reason for it to be a separate
      module, let alone or for it to always be built-in.

      - Rename sdhci-pci.c to sdhci-pci-core.c so that the sdhci-pci module
        can be built from multiple source files
      - Add sdhci-pci-o2micro.c to it
      - Remove redundant exports

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 0de9125fa823e526c9f68dc0987aae342ec94cbd
  Author: Weijun Yang <york.yang@xxxxxxx>
  Date:   Sun Oct 4 12:04:13 2015 +0000

      mmc: sirf: fix the capbility to support DDR50

      According to hardware spec, validate DDR50 mode
      for SDXC.

      Signed-off-by: Weijun Yang <york.yang@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9faac7b95ea4f9e83b7a914084cc81ef1632fd91
  Author: Weijun Yang <york.yang@xxxxxxx>
  Date:   Sun Oct 4 12:04:12 2015 +0000

      mmc: sdhci: enable tuning for DDR50

      CMD19 tuning is also available for DDR50 mode.

      Signed-off-by: Weijun Yang <york.yang@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4324f6de6d2eb9b232410eb0d67bfafdde8ba711
  Author: Weijun Yang <york.yang@xxxxxxx>
  Date:   Sun Oct 4 12:04:11 2015 +0000

      mmc: core: enable CMD19 tuning for DDR50 mode

      As SD Specifications Part1 Physical Layer Specification Version
      3.01 says, CMD19 tuning is available for unlocked cards in transfer
      state of 1.8V signaling mode. The small difference between v3.00
      and 3.01 spec means that CMD19 tuning is also available for DDR50
      mode.

      Signed-off-by: Weijun Yang <york.yang@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b093410c9aef29efbf2f4af7b00b2dcc1c119fe8
  Author: Grant Grundler <grundler@xxxxxxxxxxxx>
  Date:   Wed Sep 23 18:30:33 2015 -0700

      mmc: block: copy resp[] data on err for MMC_IOC_MULTI_CMD

      MMC_IOC_CMD and MMC_IOC_MULTI_CMD ioctl() code currently bails on
      any eMMC errors. However, in case there is any resp[] data, we
      should attempt to copy resp[] back to user space. The user app
      can then determine which command(s) failed in the MMC_IOC_MULTI_CMD
      case AND/OR report better diagnostics in both cases.

      Gwendal Grignou provided the idea and it was previously implemented
      and tested on v3.18 ChromeOS kernel:
          https://chromium-review.googlesource.com/#/c/299956

      Signed-off-by: Grant Grundler <grundler@xxxxxxxxxxxx>
      Reviewed-by: Hyung Taek Ryoo <hryoo@xxxxxxxxxx>
      Reviewed-by: Gwendal Grignou <gwendal@xxxxxxxxxxxx>
      Tested-by: David Riley <davidriley@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 85f45058eeef94fdc9f533cca8e17679e44f1177
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Thu Sep 24 08:13:43 2015 +0800

      mmc: debugfs: implement ios show for SDR12 and SDR25

      This patch add MMC_TIMING_UHS_SDR12 and MMC_TIMING_UHS_SDR25
      for mmc_ios_show to show the ios->timing if mmc card runs under
      these two modes.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c1590dd86d6e34df214f30a501682e392be0ba3c
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Sep 22 17:30:26 2015 +0200

      mmc: sunxi: Add card busy detection

      Some sdio wifi modules have not been working reliable with the sunxi-mmc
      host code. This turns out to be caused by starting new io-rw commands 
while
      the card signals that it is still busy processing a previous command.

      This commit adds card-busy detection to the sunxi-mmc driver which 
together
      with recent core changes to check card-busy before starting io-rw commands
      fixes the wifi reliability issues on the Cubietruck and other sunxi boards
      using sdio wifi.

      Reported-by: Eugene K <sigintmailru@xxxxxxxxx>
      Suggested-by: Eugene K <sigintmailru@xxxxxxxxx>
      Cc: Eugene K <sigintmailru@xxxxxxxxx>
      Cc: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 5d3f6ef04d65dda92a3573841a7215fb05c347de
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Sep 22 17:30:25 2015 +0200

      mmc: Wait for card_busy before starting sdio requests

      Some sdio wifi chips will not work properly if we try to start new
      sdio-rw requests while the device is signalling that it is busy.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit de98c55682790437fb3c6b5335f2bf3ce20539db
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Sep 22 17:30:24 2015 +0200

      mmc: Add mmc_is_io_op helper function

      Add a helper function to check if an opcode is a sd-io-rw-* opcode.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit a5f5774c55a2e3ed75f4d6c5556b7bfcb726e6f0
  Author: Jon Hunter <jonathanh@xxxxxxxxxx>
  Date:   Tue Sep 22 10:27:53 2015 +0100

      mmc: block: Add new ioctl to send multi commands

      Certain eMMC devices allow vendor specific device information to be read
      via a sequence of vendor commands. These vendor commands must be issued
      in sequence and an atomic fashion. One way to support this would be to
      add an ioctl function for sending a sequence of commands to the device
      atomically as proposed here. These multi commands are simple array of
      the existing mmc_ioc_cmd structure.

      The structure passed via the ioctl uses a __u64 type to specify the number
      of commands (so that the structure is aligned on a 64-bit boundary) and a
      zero length array as a header for list of commands to be issued. The
      maximum number of commands that can be sent is determined by
      MMC_IOC_MAX_CMDS (which defaults to 255 and should be more than
      sufficient).

      This based upon work by Seshagiri Holi <sholi@xxxxxxxxxx>.

      Signed-off-by: Seshagiri Holi <sholi@xxxxxxxxxx>
      Signed-off-by: Jon Hunter <jonathanh@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit aaa58d0e932c518bdb1d9dc767876d7a8c68e17e
  Author: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:36:10 2015 +0800

      mmc: sdhci-pltfm: enable interrupt mode to detect card for ls1021a

      Enable interrupt mode to detect card instead of polling mode for
      ls1021a by removing the quirk SDHCI_QUIRK_BROKEN_CARD_DETECTION.
      This could improve data transferring performance and avoid the call
      trace caused by polling card status sometime.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit ce037275861ea6c016ab88a6b884adb8c481db31
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 14:14:54 2015 +0200

      mmc: pwrseq_simple: use GPIO descriptors array API

      The simple power sequence provider sets a value for multiple GPIOs in one
      go so it is better to use the API already provided by the GPIO descriptor
      API instead of open coding the same logic.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 8131e815f723ec8fee018d6fa34348d61c0e54b8
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Sep 22 14:00:44 2015 +0800

      mmc: mediatek: Add MMC_CAP_RUNTIME_RESUME support

      Add MMC_CAP_RUNTIME_RESUME support to save resume time
      Drop unnecessary SDC_ARG write

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit d1f23f9304f303e15200c8b7940eeeeb1a1c8c6a
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Tue Sep 22 09:20:08 2015 +0800

      mmc: debugfs: implement ios show for driver type

      This patch add ios->drv_type for mmc_ios_show to show the
      card's driver type.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b73f34c22d283f049347f7f625c272ec22830eb3
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 23:50:25 2015 +0200

      mmc: omap: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 774523539fff7bf34499b7b088dc8b2c0b4a04bc
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 23:49:59 2015 +0200

      mmc: moxart: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e02b9d7cbfe1536aef9e7ba7751993d7eca6e829
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Thu Sep 17 15:09:54 2015 +0200

      mmc: sdhci-pltfm: Use of_property_read_u32 instead of open-coding it

      Use of_property_read_u32 instead of of_get_property with return value
      checks and endianness conversion.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bf7241d02eb4704beeaa055cb027ba7b28344a0e
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:12:07 2015 +0200

      mmc: mmc_spi: Export OF module alias information

      Drivers needs to export the OF id table and this be built into
      the module or udev won't have the necessary information to autoload
      the driver module when the device is registered via OF.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 930d50f7fd49fe485d9126ffd26dcc0428d7920a
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 09:19:49 2015 +0300

      mmc: sdhci-of-at91: remove a line of dead code

      The goto is correct and the unreachable "return -EINVAL" should be
      removed.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 14a7b416434a8076afb2dea8bb51c6514b41a47b
  Author: Haibo Chen <haibo.chen@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 18:32:58 2015 +0800

      mmc: sdhci: call sdhci_init() before request irq

      sdhci_init() will clear all irqs and set the needed irqs. So
      logically sdhci_init() should be called before request irq.

      If not, some irqs may be triggled and handled wrongly. Take
      the following into consideration, after request irq, if
      SDIO card interrupt enabled, a sd card in the sd slot will
      trigger a mass of interrupt(SDHCI_INT_CARD_INT), because at
      this time, the vmmc-regulator still not restore, no voltage
      supply for the sd card, so the pin of data0~data3 change and
      keep low, interrupt(SDHCI_INT_CARD_INT) will rise up ceaselessly.
      Due to we already reguest irq, system will be busy in handling
      this endless irq, can't response to other event.

      So we should call sdhci_init() before request irq in sd resume.

      Signed-off-by: Haibo Chen <haibo.chen@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 28804293b9086100ae784a15d62ebf6249db433c
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:53:20 2015 +0200

      mmc: sdhci-bcm-kona: fix logic to check for 8-bit data width

      The driver prints if the data width is 8-bit but it's using a
      binary OR instead of a binary AND so it will always report as
      "is_8bit=Y" regardless of the flags in host->mmc->caps.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit a30b55119d086d33bd6046dfdd4723c810fd2579
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 14:00:35 2015 +0200

      mmc: pwrseq: use gpiod_get() instead of index 0

      The gpiod_get() function expands to gpiod_get_index() with index 0
      so it's better to use it since is easier to read and more concise.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f90d2e4035d456cb20c0b784725d556eb4de4d8a
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Tue Sep 15 15:19:45 2015 +0200

      mmc: core: Convert __mmc_switch() into an internal core function

      As there are no users of the __mmc_switch() API, except for the mmc core
      itself, let's convert it from an exported function into an internal.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7eece8d0e436e1eabc6b0adb04872964afe20b35
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:30:04 2015 +0200

      mmc: vub300: Remove unneded semicolons

      They aren't needed and are just creating null statements so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 17a90539710d090d7bfb736c071a94451dc09170
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:30:03 2015 +0200

      mmc: wbsd: Remove unneded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bf8b8511af7721e6f81848a1fd1359716602f3b7
  Author: Yousong Zhou <yszhou4tech@xxxxxxxxx>
  Date:   Thu Sep 10 00:33:16 2015 +0800

      mmc: sd: Remove superfluous error code assignment

      Signed-off-by: Yousong Zhou <yszhou4tech@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 8d1ffc8c982e4480059ef735e8f15f631e40e80c
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Fri Sep 11 14:41:55 2015 +0200

      mmc: core: Keep host claimed while invoking mmc_power_off|up()

      As mmc_claim_host() invokes pm_runtime_get_sync() for the mmc host device,
      it's important that the host is kept claimed for *all* accesses to it via
      the host_ops callbacks.

      In some code paths for SDIO, particularly related to the PM support,
      mmc_power_off|up() is invoked without keeping the host claimed. Let's fix
      these.

      Moreover, mmc_start|stop_host() also invokes mmc_power_off|up() without
      claiming the host, let's fix these as well.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Acked-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit 0cd2f04453fcb7bf3f38a4a72d1619636b4afa57
  Author: Michele Curti <michele.curti@xxxxxxxxx>
  Date:   Sat Sep 5 08:49:52 2015 +0200

      mmc: sdhci-acpi: detect sd card reader on asus x205ta

      Add an entry to the sdhci_acpi_uids list to detect the SD card
      reader on the Asus X205Ta laptop.

      dstd table:

      Device (SDHC)
      {
          Name (_ADR, Zero)  // _ADR: Address
          Name (_HID, "PNP0FFF")  // _HID: Hardware ID
          Name (_CID, "PNP0D40" /* SDA Standard Compliant SD Host Controller */)
          Name (_DDN, "Intel(R) SD Card Controller - 80860F16")  // _DDN: DOS 
Dev
          Name (_UID, 0x03)  // _UID: Unique ID
          Name (RDEP, Package (0x02)

      Signed-off-by: Michele Curti <michele.curti@xxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 10af309a86669878099b40cec24dbb52aca1d3ed
  Merge: 3f84ccf 660c40b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Mon Oct 26 14:49:11 2015 +0100

      Merge branch 'sh-pfc-for-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/renesas-drivers into devel

  commit 6057d40f41a30f234533e5cf28810dd3fd2b6995
  Author: YD Tseng <ltyu101@xxxxxxxxx>
  Date:   Mon Oct 19 11:07:37 2015 +0800

      gpio: driver for AMD Promontory

      This patch adds a new GPIO driver for AMD Promontory chip.

      This GPIO controller is enumerated by ACPI and the ACPI compliant
      hardware ID is AMDF030.

      Change history:

      v2: 1. fix coding style
          2. registers renaming
      v3: 1. change include file
          2. fix coding style
          3. remove module_init/exit, add module_platform_driver
          4. remove MODULE_ALIAS
      v4: 1. change TOTAL_GPIO_PINS to PT_TOTAL_GPIO
          2. remove PCI dependency in Kconfig
          3. fix subject line

      Signed-off-by: YD Tseng <Yd_Tseng@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a4283e41bbd80c629770f954cc5d013eb8851229
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sat Oct 10 23:41:42 2015 +0200

      arm: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      The of_node_put is duplicated in front of each error return, because the
      function contains a later error return that is beyond the end of the
      for_each_child_of_node and thus doesn't need of_node_put.

      The semantic patch that fixes this problem is as follows
      (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      iterator name for_each_child_of_node;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }

      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      +  of_node_put(child);
      ?  break;
         ...
      }
      ... when != child
      // </smpl>

      Additionally, concatenated a string in an affected line to avoid 
introducing
      a checkpatch warning.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 59fbcbc61e1f0fd9acdf3efb09faca0320049718
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:15:45 2015 +0200

      arcnet: add netif_carrier_on/off for reconnect

      The arcnet device has no interrupt to detect if the link has changed
      from disconnected to connected. This patch adds an timer to toggle the
      link detection. The timer will get retriggered as long as the
      reconnection interrupts accure. If the recon interrupts hold off
      for >1s we define the connection stable again.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 8890624a4e8c2c7046d63bfd15d7331af9f55f10
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 18 00:12:50 2014 +0200

      arcnet: com20020-pci: add led trigger support

      The EAE PLX-PCI card has special leds on the the main io pci resource
      bar. This patch adds support to trigger the conflict and data leds with
      the packages.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 5ef216c1f84825c6942fdd6c24d12a08ac2df135
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 18 00:12:50 2014 +0200

      arcnet: com20020-pci: add rotary index support

      The EAE PLX-PCI card has a special rotary encoder
      to configure the address of every card individually.
      We take this information for the initial setup of
      the cards dev_id.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit ae8ede6a0cdcf3b21596f44dff30bbd02265bb41
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Fri Mar 20 15:22:24 2015 +0100

      arcnet: com20020-pci: set dev_port to the subdevice index

      This patch sets the dev_port according to the index of
      the card. This can be used by udev to name the ports
      in userspace.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 27daf6ed5c1fbeca9029c59c7f4f70a5c7e13531
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Fri Mar 20 15:20:59 2015 +0100

      arcnet: com20020: add enable and disable device on open/close

      This patch changes the driver to properly work with the linux netif
      interface. The controller gets enabled on open and disabled on close.
      Therefor it removes every bogus start of the xceiver. It only gets
      enabled on com20020_open and disabled on com20020_close.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit b82de0e28ccac15e1a0c3b4f6f20dfd230049041
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Apr 22 16:41:46 2015 +0200

      arcnet: move dev_free_skb to its only user

      The call for dev_free_skb is done only once. This patch
      moves its call to its only user and removes the obsolete
      condition variable.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit c4297e8f7f453c83a75c2cbd93e57d8d9f36a316
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Mon Oct 26 02:08:38 2015 +0100

      Bluetooth: Fix some obvious coding style issues in the SCO module

      Lets fix this obvious coding style issues in the SCO module and bring it
      in line with the rest of the Bluetooth subsystem.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 05fcd4c4f1011858fe86dd7423304d8cae8e8d2e
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 25 23:29:22 2015 +0100

      Bluetooth: Replace hci_notify with hci_sock_dev_event

      There is no point in wrapping hci_sock_dev_event around hci_notify. It
      is an empty wrapper which adds no value. So remove it.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 242c0ebd3730334c43b9c04eeec40d8dd5c3a26e
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 25 22:45:53 2015 +0100

      Bluetooth: Rename bt_cb()->req into bt_cb()->hci

      The SKB context buffer for HCI request is really not just for requests,
      information in their are preserved for the whole HCI layer. So it makes
      more sense to actually rename it into bt_cb()->hci and also call it then
      struct hci_ctrl.

      In addition that allows moving the decoded opcode for outgoing packets
      into that struct. So far it was just consuming valuable space from the
      main shared items. And opcode are not valid for L2CAP packets.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit d94a61040d8f99cbaf7f3e7686315edcc6dc2400
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 25 22:45:18 2015 +0100

      Bluetooth: Remove unneeded parenthesis around MSG_OOB

      There are two checks that are still using (MSG_OOB) instead of just
      MSG_OOB and so lets just fix them.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 298a96c12b2d8fd845ae0c2c21c0a1c0b470f99e
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 23:11:43 2015 +0200

      x86/dma-mapping: Fix arch_dma_alloc_attrs() oops with NULL dev

      Commit 6894258eda2f broke drivers that pass NULL as the device pointer
      to dma_alloc. The reason is that arch_dma_alloc_attrs() now calls
      dma_alloc_coherent_gfp_flags() which in turn calls
      dma_alloc_coherent_mask(), where the device pointer is dereferenced
      unconditionally.

      Fix things by moving the ISA DMA fallback device assignment before the
      call to dma_alloc_coherent_gfp_flags().

      Fixes: 6894258eda2f ("dma-mapping: consolidate 
dma_{alloc,free}_{attrs,coherent}")
      Reported-and-tested-by: Meelis Roos <mroos@xxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Link: 
http://lkml.kernel.org/r/1445807503-8920-1-git-send-email-ville.syrjala@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ba723199d18eeb5021cd6ace4aaf90670d6b3133
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:35 2015 +0100

      NFC: st21nfca: Fix st21nfca_gates offset

      It is useless to start from index 0 when looking for a gate
      because only dynamic pipes are retrieved with
      ST21NFCA_DM_GETINFO(ST21NFCA_DM_GETINFO_PIPE_LIST).

      The first dynamic pipe is present at index 3.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit d3f13c558f2501d4bd0212030f692bc56fbcb755
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:34 2015 +0100

      NFC: st-nci: Fix st_nci_gates offset

      It is useless to start from index 0 when looking for a gate
      because only dynamic pipes are retrieved with
      ST_NCI_DM_GETINFO(ST_NCI_DM_GETINFO_PIPE_LIST).

      The first dynamic pipe is present at index 3.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 7e35740438bafcc8be0e05ff2461b73d631caeb0
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:33 2015 +0100

      NFC: st-nci: Add support for NCI_HCI_IDENTITY_MGMT_GATE

      NCI_HCI_IDENTITY_MGMT_GATE might be useful to get information
      about hardware or firmware version.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 404b3e585b15d7431a0ffa5cf67090569fad88c1
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:32 2015 +0100

      NFC: st-nci: initialize gate_count in st_nci_hci_network_init

      When initializing ndev->hci_dev->init_data, only gates field
      was set. gate_count needs to be initialized as well.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 92d108b6f4fcabf45df5fa9631cfc4ada35e9ab1
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:31 2015 +0100

      NFC: st21nfca: Keep st21nfca_gates unchanged in load_session

      We need to keep initial st_nci_gates values in order for
      nfc_hci_dev_connect_gates to create and open pipe when necessary.

      For example after a firmware update CLF pipes are cleared. Changing
      pipe values in st21nfca_gates was causing nfc_hci_dev_connect_gates
      not using accurate pipes value.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 22c84c5b23932161546b7b16c61a6eb85bf587b8
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:30 2015 +0100

      NFC: st-nci: Keep st_nci_gates unchanged in load_session

      We need to keep initial st_nci_gates values in order for
      nci_hci_dev_connect_gates to create and open pipe when necessary.

      For example after a firmware update CLF pipes are cleared. Changing
      pipe values in st_nci_gates was causing nci_hci_dev_connect_gates
      not using accurate pipes value.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 6443ce97d2266b24f8315cb7e3ff99adf822a597
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:29 2015 +0100

      NFC: st21nfca: Open NFC_HCI_LINK_MGMT_PIPE

      NFC_HCI_LINK_MGMT_PIPE was never opened in nfc_hci_load_session.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 9dfe29f1796f9d92db6e7d33a3fc8ed8e496912a
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:28 2015 +0100

      NFC: st-nci: Open NCI_HCI_LINK_MGMT_PIPE

      NCI_HCI_LINK_MGMT_PIPE was never opened in st_nci_hci_load_session.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 4d37a772b7437bed2ffb94e391a0534198588d20
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:27 2015 +0100

      NFC: st21nfca: Remove HCI gates initialization in load_session

      hdev->init_data.gates is already initialized in st21nfca_hci_probe.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 543a0a301fb831f19a37ac06fbe8094e0b5a2c73
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:26 2015 +0100

      NFC: st-nci: Remove HCI init_data.gates initialization in load_session

      ndev->hci_dev->init_data.gates is already initialized in
      st_nci_hci_network.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a1b0b9415817c14d207921582f269d03f848b69f
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:25 2015 +0100

      NFC: nci: Create pipe on specific gate in nci_hci_connect_gate

      Some gates might need to have their pipes explicitly created.
      Add a call to nci_hci_create_pipe in nci_hci_connect_gate for
      every gate that is different than NCI_HCI_LINK_MGMT_GATE or
      NCI_HCI_ADMIN_GATE.

      In case of an error when opening a pipe, like in hci layer,
      delete the pipe if it was created.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 8a49943f5bc5ff4f835d50451ecf2380eab44d2e
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:24 2015 +0100

      NFC: nci: Call nci_hci_clear_all_pipes at HCI initial activation.

      When session_id is filled to 0xff, the pipe configuration is
      probably incorrect and needs to be cleared.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit fa6fbadea5d3618339fae8f9d5136a470bad4fa7
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:23 2015 +0100

      NFC: nci: add nci_hci_clear_all_pipes functions

      nci_hci_clear_all_pipes might be use full in some cases
      for example after a firmware update.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit e65917b6d54f8b47d8293ea96adfa604fd46cf0d
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:22 2015 +0100

      NFC: nci: extract pipe value using NCI_HCP_MSG_GET_PIPE

      When receiving data in nci_hci_msg_rx_work, extract pipe
      value using NCI_HCP_MSG_GET_PIPE macro.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit d8cd37ed2fc871c66b4c79c59f651dc2cdf7091c
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:21 2015 +0100

      NFC: nci: Fix improper management of HCI return code

      When sending HCI data over NCI, HCI return code is part
      of the NCI data. In order to get correctly the HCI return
      code, we assume the NCI communication is successful and
      extract the return code for the nci_hci functions return code.

      This is done because nci_to_errno does not match hci return
      code value.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 500c4ef02277eaadbfe20537f963b6221f6ac007
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:20 2015 +0100

      NFC: nci: Fix incorrect data chaining when sending data

      When sending HCI data over NCI, cmd information should be
      present only on the first packet.
      Each packet shall be specifically allocated and sent to the
      NCI layer.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a1269dd116319335db6d73013a31c038486c813e
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:19 2015 +0100

      NFC: st-nci: Fix incorrect spi buffer size

      When sending data over SPI, the maximum expected length is the maximum
      nci packet payload + data header size + the frame head room (1 for the
      ndlc header) + the frame trail room (0).

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 1c54795da05a792e495387317240625696d37abd
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:18 2015 +0100

      NFC: st21nfca: Align st21nfca driver with other nfc driver

      Align st21nfca driver with or nfc driver:
      - Remove st21nfca_ prefix
      - Merge st21nfca_se.h, st21nfca_dep.h in st21nfca.h

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit d1611c3aba11ffa281bdd027aace52f5a370b8c5
  Author: Michael Chan <mchan@xxxxxxxxxxxx>
  Date:   Sun Oct 25 22:27:57 2015 -0400

      bnxt_en: Fix compile warnings when CONFIG_INET is not set.

      bnxt_gro_skb() has unused variables when CONFIG_INET is not set.  We
      really cannot support hardware GRO if CONFIG_INET is not set, so
      compile out bnxt_gro_skb() completely and define BNXT_FLAG_GRO to be 0
      if CONFIG_INET is not set.  This will effectively always disable
      hardware GRO if CONFIG_INET is not set.

      Signed-off-by: Michael Chan <mchan@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e67e7e596f3ff19fb90520be9f2130aa54914181
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:17 2015 +0100

      NFC: st-nci: include st-nci.h instead of ndlc.h

      st-nci.h already include ndlc.h.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit f5876627715e3584db379a0549f8ce6f3f06e2bc
  Author: Christophe Ricard <christophe-h.ricard@xxxxxx>
  Date:   Mon Oct 26 05:55:22 2015 +0100

      NFC: st-nci: Align st-nci driver with other nfc driver

      Align st-nci driver with other NFC drivers:
      - Remove st-nci_ prefix
      - Merge se.h in st-nci.h

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 85051e295fb7487fd22546f86058e99d5266dd88
  Merge: 32b8819 5dd32ea
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:29:16 2015 +0900

      Merge branch 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux

      Pull i2c fixes from Wolfram Sang:
       "Two driver bugfixes for the I2C subsystem"

      * 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:
        i2c: pnx: fix runtime warnings caused by enabling unprepared clock
        i2c: mv64xxx: really allow I2C offloading

  commit f7e1b37ec84730c759eee54289f61f30e59d79de
  Merge: 30aa7b1 abb1ed7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:28:23 2015 -0700

      Merge branch 'gianfar-fixes'

      Claudiu Manoil says:

      ====================
      gianfar: Misc. fixes and updates

      Various fixes for some older issues, including having a
      MAINTAINERS entry for this driver.
      I'd recommend applying them on top of net, thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit abb1ed7b793fcb10cadb378fe0eeee589b61a9e1
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:42:01 2015 +0300

      MAINTAINERS: Add entry for gianfar ethernet driver

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1de65a5ea32de7b335ab505366d45cefadbbdf71
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:42:00 2015 +0300

      gianfar: Fix Rx BSY error handling

      The Rx BSY error interrupt indicates that a frame was
      received and discarded due to lack of buffers, so it's
      a rx ring overflow condition and has nothing to do with
      with bad rx packets.  Use the right counter.

      BSY conditions happen when the SoC is under performance
      stress.  Doing *more* work in stress situations by trying
      to schedule NAPI is not a good idea as the stressed system
      becomes still more stressed.  The Rx interrupt is already
      at work making sure the NAPI is scheduled.
      So calling gfar_receive() here does not help.  This issue
      was present since day 1.

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 15bf176db1fb00333af7050c0c699fc7b4e4a960
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:41:59 2015 +0300

      gianfar: Don't enable the Filer w/o the Parser

      Under one unusual circumstance it's possible to wrongly set
      FILREN without enabling PRSDEP as well in the RCTRL register,
      against the hardware specifications.  With the default config
      this does not happen because the default Rx offloads (Rx csum
      and Rx VLAN) properly enable PRSDEP.  But if anyone disables
      all these offloads (via ethtool), we get a wrong configuration
      were the Rx flow classification and hashing, and other Filer
      based features (e.g. wake-on-filer interrupt) won't work.
      This patch fixes the issue.
      Also, account for Rx FCB insertion which happens every time
      PRSDEP is set.

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5188f7e5a7175975f8b943a4b25e499c98a7b9d6
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:41:58 2015 +0300

      gianfar: Remove duplicated argument to bitwise OR

      RQFCR_AND is duplicated.
      Add missing space as well.

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ed770f60317a02a5a5e4a7345dc13d8819f56e8
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 15:09:04 2015 -0400

      net: encx24j600: Fix mask to update LED configuration

      This fixes the mask used to update the LED configuration so that it clears
      the necessary bits as well as setting the bits according to the mask.
      Also reverse the LED configuration to show the Link state + collisions in
      LEDA and the Link state + TX/RX events in LEDB.

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit da92bf99dd9f4b62df6168787bf0a92dc7d1bce7
  Merge: 1586a58 e483911
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:20:41 2015 -0700

      Merge branch 'mvneta-ethtool-stats'

      Russell King says:

      ====================
      mvneta ethtool statistics

      Sorry for v3 - I forgot to update the commit message on patch 1 as
      requested by Marcin.

      This short series adds ethtool statistics reporting to mvneta.  Having
      discussed with Andrew on IRC, we decided I'd pick up his patch into my
      series.

      My change for patch 1 compared to the previous RFC splits out the
      reading of the statistics from the hardware into a separate function,
      in order to facilitate work going on elsewhere to arrange for the
      statistics to be preserved across a suspend/resume cycle.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e483911f9f16d508dd2652ac860977533b96e34e
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Thu Oct 22 18:37:36 2015 +0100

      net: mvneta: Fix clearing of MIB statistics

      The existing function to clear the MIB statatistics was using the
      wrong address for the registers. Also, the counters would of been
      cleared when the interface was brought up, not during the
      probe. Fix both of these.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9b0cdefa4cd5dca85967f66da8ab376c0321b845
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 18:37:30 2015 +0100

      net: mvneta: add ethtool statistics

      Add support for the ethtool statistic interface, returning the full set
      of statistics which both Armada 370, 38x and Armada XP can support.

      Tested-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 30aa7b18e8f997a6c35e8d866642396a787afbb8
  Merge: ce9d9b8 34411b6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:13:37 2015 -0700

      Merge branch 'thunderx-fixes'

      David Daney says:

      ====================
      net: thunderx: Support pass-2 revision hardware.

      With the availability of a new revision of the ThunderX NIC hardware a
      few changes to the driver are required.  With these, the driver works
      on all currently available hardware revisions.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34411b68b132e403ddf395419e986475a9993d9b
  Author: Thanneeru Srinivasulu <tsrinivasulu@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 17:14:10 2015 -0700

      net: thunderx: Incorporate pass2 silicon CPI index configuration changes

      Add support for ThunderX pass2 CPI and MPI configuration changes.
      MPI_ALG is not enabled i.e MCAM parsing is disabled.

      Signed-off-by: Thanneeru Srinivasulu <tsrinivasulu@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 88ed237720bd618240439714a57fb69ea96428e7
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Fri Oct 23 17:14:09 2015 -0700

      net: thunderx: Rewrite silicon revision tests.

      The test for pass-1 silicon was incorrect, it should be for all
      revisions less than 8.  Also the revision is already present in the
      pci_dev, so there is no need to read and keep a private copy.

      Remove rev_id and code to read it from struct nicpf.  Create new
      static inline function pass1_silicon() to be used to testing the
      silicon version.  Use pass1_silicon() for revision checks, this will
      be more widely used in follow on patches.

      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e85777ff071b51f500b130b6d036922af32be25
  Author: Sunil Goutham <sgoutham@xxxxxxxxxx>
  Date:   Fri Oct 23 17:14:08 2015 -0700

      net: thunderx: Fix incorrect subsystem devid of VF on pass2 silicon

      Signed-off-by: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9bf45e08ef36b6726a5744f0029325e81b3248a
  Author: Sunil Goutham <sgoutham@xxxxxxxxxx>
  Date:   Fri Oct 23 17:14:07 2015 -0700

      net: thunderx: Remove PF soft reset.

      In some silicon revisions, the soft reset clobbers PCI config space,
      so quit doing the reset.

      Signed-off-by: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03f136a2074b2b8890da4a24df7104558ad0da48
  Author: Jason A. Donenfeld <Jason@xxxxxxxxx>
  Date:   Tue Jul 14 19:24:45 2015 +0200

      timeconst: Update path in comment

      Signed-off-by: Jason A. Donenfeld <Jason@xxxxxxxxx>
      Cc: hofrat@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1436894685-5868-1-git-send-email-Jason@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 209da39154837ec1b69fb34f438041939911e4b4
  Author: Lucas Stach <dev@xxxxxxxxxx>
  Date:   Sun Oct 25 16:39:12 2015 +0100

      irqchip/tegra: Propagate IRQ type setting to parent

      The LIC doesn't deal with the different types of interrupts itself
      but needs to forward calls to set the appropriate type to its parent
      IRQ controller.

      Without this fix all IRQs routed through the LIC will stay at the
      initial EDGE type, while most of them should actually be level triggered.

      Fixes: 1eec582158e2 "irqchip: tegra: Add Tegra210 support"
      Signed-off-by: Lucas Stach <dev@xxxxxxxxxx>
      Cc: Stephen Warren <swarren@xxxxxxxxxxxxx>
      Cc: Thierry Reding <thierry.reding@xxxxxxxxx>
      Cc: Alexandre Courbot <gnurou@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1
      Link: 
http://lkml.kernel.org/r/1445787552-13062-1-git-send-email-dev@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 353d6d6c82e5d2533ba22e7f9fb081582bf50dc2
  Author: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 15:48:15 2015 +0200

      irqchip/armada-370-xp: Fix regression by clearing IRQ_NOAUTOEN

      Commit d17cab4451df1 ("irqchip: Kill off set_irq_flags usage") changed
      the code of armada_370_xp_mpic_irq_map() from using set_irq_flags() to
      irq_set_probe().

      While the commit log seems to imply that there are no functional
      changes, there are indeed functional changes introduced by this
      commit: the IRQ_NOAUTOEN flag is no longer cleared. This functional
      change causes a regression on Armada XP, which no longer works
      properly after suspend/resume because per-CPU interrupts remain
      disabled.

      Due to how the hardware registers work, the irq-armada-370-xp cannot
      simply save/restore a bunch of registers at suspend/resume to make
      sure that the interrupts remain in the same state after
      resuming. Therefore, it relies on the kernel to say whether the
      interrupt is disabled or not, using the irqd_irq_disabled()
      function. This was all working fine while the IRQ_NOAUTOEN flag was
      cleared.

      With the change introduced by Rob Herring in d17cab4451df1, the
      IRQ_NOAUTOEN flag is now set for all interrupts. irqd_irq_disabled()
      returns false for per-CPU interrupts, and therefore our per-CPU
      interrupts are no longer re-enabled after resume.

      This commit works around this problem by clearing again the
      IRQ_NOAUTOEN flags, so that we are back to the situation we had before
      commit d17cab4451df1. This work around is proposed as a minimal fix
      for the problem, while a better long-term solution is being worked on.

      Fixes: d17cab4451df1 "irqchip: Kill off set_irq_flags usage"
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Link: 
https://lkml.kernel.org/r/1445435295-19956-1-git-send-email-thomas.petazzoni@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1da5537eccd865b83fedbbb7ea704669f6d255fd
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 5 18:44:17 2015 +0200

      Bluetooth: Fix locking issue during fast SCO reconnection.

      When SCO connection is requested and disconnected fast, there is a change
      that sco_sock_shutdown is going to preempt thread started in 
sco_connect_cfm.
      When this happens struct sock sk may be removed but a pointer to it is 
still
      held in sco_conn_ready, where embedded spinlock is used. If it is used, 
but
      struct sock has been removed, it will crash.

      Block connection object, which will prevent struct sock from being removed
      and give connection process chance to finish.

      BUG: spinlock bad magic on CPU#0, kworker/u:2H/319
       lock: 0xe3e99434, .magic: f3000000, .owner: (���/0, .owner_cpu: 
-203804160
      Pid: 319, comm: kworker/u:2H Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      Call Trace:
       [<c1155659>] ? do_raw_spin_lock+0x19/0xe9
       [<fb75354f>] ? sco_connect_cfm+0x92/0x236 [bluetooth]
       [<fb731dbc>] ? hci_sync_conn_complete_evt.clone.101+0x18b/0x1cb 
[bluetooth]
       [<fb734ee7>] ? hci_event_packet+0x1acd/0x21a6 [bluetooth]
       [<c1041095>] ? finish_task_switch+0x50/0x89
       [<c1349a2e>] ? __schedule+0x638/0x6b8
       [<fb727918>] ? hci_rx_work+0xb9/0x2b8 [bluetooth]
       [<c103760a>] ? queue_delayed_work_on+0x21/0x2a
       [<c1035df9>] ? process_one_work+0x157/0x21b
       [<fb72785f>] ? hci_cmd_work+0xef/0xef [bluetooth]
       [<c1036217>] ? worker_thread+0x16e/0x20a
       [<c10360a9>] ? manage_workers+0x1cf/0x1cf
       [<c103a0ef>] ? kthread+0x8d/0x92
       [<c134adf7>] ? ret_from_kernel_thread+0x1b/0x28
       [<c103a062>] ? __init_kthread_worker+0x24/0x24
      BUG: unable to handle kernel NULL pointer dereference at   (null)
      IP: [<  (null)>]   (null)
      *pdpt = 00000000244e1001 *pde = 0000000000000000
      Oops: 0010 [#1] PREEMPT SMP
      Modules linked in: evdev ecb rfcomm(O) libcomposite usb2380 udc_core 
bnep(O) btusb(O) btbcm(O) cdc_acm btintel(O) bluetooth(O) arc4 uinput 
hid_multitouch usbhid hid iwlmvm(O)e
      Pid: 319, comm: kworker/u:2H Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      EIP: 0060:[<00000000>] EFLAGS: 00010246 CPU: 0
      EIP is at 0x0
      EAX: e3e99400 EBX: e3e99400 ECX: 00000100 EDX: 00000000
      ESI: e3e99434 EDI: fb763ce0 EBP: e49b9e44 ESP: e49b9e14
       DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
      CR0: 8005003b CR2: 00000000 CR3: 24444000 CR4: 001007f0
      DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      DR6: ffff0ff0 DR7: 00000400
      Process kworker/u:2H (pid: 319, ti=e49b8000 task=e4ab9030 
task.ti=e49b8000)
      Stack:
       fb75355b 00000246 fb763900 22222222 22222222 22222222 e3f94460 e3ca7c0a
       e49b9e4c e3f34c00 e3ca7c0a fb763ce0 e49b9e6c fb731dbc 02000246 e4cec85c
       e4cec008 00000000 e3f34c00 e4cec000 e3c2ce00 0000002c e49b9ed0 fb734ee7
      Call Trace:
       [<fb75355b>] ? sco_connect_cfm+0x9e/0x236 [bluetooth]
       [<fb731dbc>] ? hci_sync_conn_complete_evt.clone.101+0x18b/0x1cb 
[bluetooth]
       [<fb734ee7>] ? hci_event_packet+0x1acd/0x21a6 [bluetooth]
       [<c1041095>] ? finish_task_switch+0x50/0x89
       [<c1349a2e>] ? __schedule+0x638/0x6b8
       [<fb727918>] ? hci_rx_work+0xb9/0x2b8 [bluetooth]
       [<c103760a>] ? queue_delayed_work_on+0x21/0x2a
       [<c1035df9>] ? process_one_work+0x157/0x21b
       [<fb72785f>] ? hci_cmd_work+0xef/0xef [bluetooth]
       [<c1036217>] ? worker_thread+0x16e/0x20a
       [<c10360a9>] ? manage_workers+0x1cf/0x1cf
       [<c103a0ef>] ? kthread+0x8d/0x92
       [<c134adf7>] ? ret_from_kernel_thread+0x1b/0x28
       [<c103a062>] ? __init_kthread_worker+0x24/0x24
      Code:  Bad EIP value.
      EIP: [<00000000>] 0x0 SS:ESP 0068:e49b9e14
      CR2: 0000000000000000
      ---[ end trace 942a6577c0abd725 ]---

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 435c513369768f5840cd57101e398bc450fd26de
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 5 18:44:16 2015 +0200

      Bluetooth: Fix locking issue on SCO disconnection

      Thread handling SCO disconnection may get preempted in '__sco_sock_close'
      after dropping a reference to hci_conn but before marking this as NULL
      in associated struct sco_conn. When execution returs to this thread,
      this connection will possibly be released, resulting in kernel crash

      Lock connection before this point.

      BUG: unable to handle kernel NULL pointer dereference at   (null)
      IP: [<fb770ab9>] __sco_sock_close+0x194/0x1ff [bluetooth]
      *pdpt = 0000000023da6001 *pde = 0000000000000000
      Oops: 0002 [#1] PREEMPT SMP
      Modules linked in: evdev ecb rfcomm(O) libcomposite usb2380 udc_core 
bnep(O) btusb(O) btbcm(O) cdc_acm btintel(O) bluetooth(O) arc4 uinput 
hid_multitouch usbhid iwlmvm(O) hide
      Pid: 984, comm: bluetooth Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      EIP: 0060:[<fb770ab9>] EFLAGS: 00010282 CPU: 2
      EIP is at __sco_sock_close+0x194/0x1ff [bluetooth]
      EAX: 00000000 EBX: e49d7600 ECX: ef1ec3c2 EDX: 000000c3
      ESI: e4c12000 EDI: 00000000 EBP: ef1edf5c ESP: ef1edf4c
       DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
      CR0: 80050033 CR2: 00000000 CR3: 23da7000 CR4: 001007f0
      DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      DR6: ffff0ff0 DR7: 00000400
      Process bluetooth (pid: 984, ti=ef1ec000 task=e47f2550 task.ti=ef1ec000)
      Stack:
       e4c120d0 e49d7600 00000000 08421a40 ef1edf70 fb770b7a 00000002 e8a4cc80
       08421a40 ef1ec000 c12966b1 00000001 00000000 0000000b 084954c8 c1296b6c
       0000001b 00000002 0000001b 00000002 00000000 00000002 b2524880 00000046
      Call Trace:
       [<fb770b7a>] ? sco_sock_shutdown+0x56/0x95 [bluetooth]
       [<c12966b1>] ? sys_shutdown+0x37/0x53
       [<c1296b6c>] ? sys_socketcall+0x12e/0x1be
       [<c134ae7e>] ? sysenter_do_call+0x12/0x26
       [<c1340000>] ? ip_vs_control_net_cleanup+0x46/0xb1
      Code: e8 90 6b 8c c5 f6 05 72 5d 78 fb 04 74 17 8b 46 08 50 56 68 0a fd 
77 fb 68 60 5d 78 fb e8 68 95 9e c5 83 c4 10 8b 83 fc 01 00 00 <c7> 00 00 00 00 
00 eb 32 ba 68 00 00 0b
      EIP: [<fb770ab9>] __sco_sock_close+0x194/0x1ff [bluetooth] SS:ESP 
0068:ef1edf4c
      CR2: 0000000000000000
      ---[ end trace 47fa2f55a9544e69 ]---

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 75e34f5cf69bd731d3b7375a786d4a15494fb8c6
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 5 18:44:15 2015 +0200

      Bluetooth: Fix crash on SCO disconnect

      When disconnecting audio from the phone's side, it may happen, that
      a thread handling HCI message 'disconnection complete' will get preempted
      in 'sco_conn_del' before calling 'sco_sock_kill', still holding a pointer
      to struct sock sk. Interrupting thread started in 'sco_sock_shutdown' will
      carry on releasing resources and will eventually release struct sock.
      When execution goes back to first thread it will call sco_sock_kill using
      now invalid pointer to already destroyed socket.

      Fix is to grab a reference to the socket a release it after calling
      'sco_sock_kill'.

      [  166.358213] BUG: unable to handle kernel paging request at 7541203a
      [  166.365228] IP: [<fb6e8bfb>] bt_sock_unlink+0x1a/0x38 [bluetooth]
      [  166.372068] *pdpt = 0000000024b19001 *pde = 0000000000000000
      [  166.378483] Oops: 0002 [#1] PREEMPT SMP
      [  166.382871] Modules linked in: evdev ecb rfcomm(O) libcomposite 
usb2380 udc_core bnep(O) btusb(O) btbcm(O) btintel(O) cdc_acm bluetooth(O) arc4 
uinput hid_multitouch iwlmvm(O) usbhid hide
      [  166.424233] Pid: 338, comm: kworker/u:2H Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      [  166.435112] EIP: 0060:[<fb6e8bfb>] EFLAGS: 00010206 CPU: 0
      [  166.441259] EIP is at bt_sock_unlink+0x1a/0x38 [bluetooth]
      [  166.447382] EAX: 632e6563 EBX: e4bfc600 ECX: e466d4d3 EDX: 7541203a
      [  166.454369] ESI: fb7278ac EDI: e4d52000 EBP: e4669e20 ESP: e4669e0c
      [  166.461366]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
      [  166.467391] CR0: 8005003b CR2: 7541203a CR3: 24aba000 CR4: 001007f0
      [  166.474387] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      [  166.481375] DR6: ffff0ff0 DR7: 00000400
      [  166.485654] Process kworker/u:2H (pid: 338, ti=e4668000 task=e466e030 
task.ti=e4668000)
      [  166.494591] Stack:
      [  166.496830]  e4bfc600 e4bfc600 fb715c28 e4717ee0 e4d52000 e4669e3c 
fb715cf3 e4bfc634
      [  166.505518]  00000068 e4d52000 e4c32000 fb7277c0 e4669e6c fb6f2019 
0000004a 00000216
      [  166.514205]  e4660101 e4c32008 02000001 00000013 e4d52000 e4c32000 
e3dc9240 00000005
      [  166.522891] Call Trace:
      [  166.525654]  [<fb715c28>] ? sco_sock_kill+0x73/0x9a [bluetooth]
      [  166.532295]  [<fb715cf3>] ? sco_conn_del+0xa4/0xbf [bluetooth]
      [  166.538836]  [<fb6f2019>] ? 
hci_disconn_complete_evt.clone.55+0x1bd/0x205 [bluetooth]
      [  166.547609]  [<fb6f73d3>] ? hci_event_packet+0x297/0x223c [bluetooth]
      [  166.554805]  [<c10416da>] ? dequeue_task+0xaf/0xb7
      [  166.560154]  [<c1041095>] ? finish_task_switch+0x50/0x89
      [  166.566086]  [<c1349a2e>] ? __schedule+0x638/0x6b8
      [  166.571460]  [<fb6eb906>] ? hci_rx_work+0xb9/0x2b8 [bluetooth]
      [  166.577975]  [<c1035df9>] ? process_one_work+0x157/0x21b
      [  166.583933]  [<fb6eb84d>] ? hci_cmd_work+0xef/0xef [bluetooth]
      [  166.590448]  [<c1036217>] ? worker_thread+0x16e/0x20a
      [  166.596088]  [<c10360a9>] ? manage_workers+0x1cf/0x1cf
      [  166.601826]  [<c103a0ef>] ? kthread+0x8d/0x92
      [  166.606691]  [<c134adf7>] ? ret_from_kernel_thread+0x1b/0x28
      [  166.613010]  [<c103a062>] ? __init_kthread_worker+0x24/0x24
      [  166.619230] Code: 85 63 ff ff ff 31 db 8d 65 f4 89 d8 5b 5e 5f 5d c3 
56 8d 70 04 53 89 f0 89 d3 e8 7e 17 c6 c5 8b 53 28 85 d2 74 1a 8b 43 24 85 c0 
<89> 02 74 03 89 50 04 c7 43 28 00 00 00
      [  166.640501] EIP: [<fb6e8bfb>] bt_sock_unlink+0x1a/0x38 [bluetooth] 
SS:ESP 0068:e4669e0c
      [  166.649474] CR2: 000000007541203a
      [  166.653420] ---[ end trace 0181ff2c9e42d51e ]---
      [  166.658609] note: kworker/u:2H[338] exited with preempt_count 1

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c0859e2f4ca530c0bf6a333ca3eb8430008e62c9
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:32 2015 +0200

      Bluetooth: btmrvl: add missing of_node_put

      for_each_compatible_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression e;
      local idexpression n;
      @@

       for_each_compatible_node(n, ...) {
         ... when != of_node_put(n)
             when != e = n
      (
         return n;
      |
      +  of_node_put(n);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a06347c04c13e380afce0c9816df51f00b83faf1
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:42 2015 +0300

      NFC: Add Intel Fields Peak NFC solution driver

      Fields Peak complies with the ISO/IEC 14443A/B, 15693, 18092,
      and JIS X 6319-4. It is an NCI based controller.

      RF Protocols supported:
       - NFC Forum Type 1 Tags (Jewel, Topaz)
       - NFC Forum Type 2 Tags (Mifare UL)
       - NFC Forum Type 3 Tags (FeliCa)
       - NFC Forum Type 4A (ISO/IEC 14443 A-4 106kbps to 848kbps)
       - NFC Forum Type 4B (ISO/IEC 14443 B-4 106kbps to 848kbps)
       - NFCIP in passive and active modes (ISO/IEC 18092 106kbps
         to 424kbps)
       - Bâ?? (based on ISO/IEC 14443 B-2)
       - iCLASS (based on ISO/IEC 15693-2)
       - Vicinity cards (ISO/IEC 15693-3)
       - Kovio tags (NFC Forum Type 2)

      The device can be enumerated using ACPI using the id INT339A.
      The 1st GPIO is the IRQ and the 2nd is the RESET pin.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 85b9ce9a21b119a8163f20d60e7f0ce58fffbeef
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:41 2015 +0300

      NFC: nci: add nci_get_conn_info_by_id function

      This functin takes as a parameter a pointer to the nci_dev
      struct and the first byte from the values of the first domain
      specific parameter that was used for the connection creation.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit caa575a86ec1f177730cafa089d69ab4e424860c
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:40 2015 +0300

      NFC: nci: fix possible crash in nci_core_conn_create

      If the number of destination speific parameters supplied is 0
      the call will fail. If the first destination specific parameter
      does not have a value, curr_id will be set to 0.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 22e4bd09c401905671f3787a8392d269a0ebfa0d
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:39 2015 +0300

      NFC: nci: rename nci_prop_ops to nci_driver_ops

      Initially it was used to create hooks in the driver for
      proprietary operations. Currently it is being used for hooks
      for both proprietary and generic operations.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 0a97a3cba298fd989802bf34541c94b6488c3834
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:38 2015 +0300

      NFC: nci: Allow the driver to set handler for core nci ops

      The driver may be required to act when some responses or
      notifications arrive. For example the NCI core does not have a
      handler for NCI_OP_CORE_GET_CONFIG_RSP. The NFCC can send a
      config response that has to be read by the driver and the packet
      may contain vendor specific data.

      The Fields Peak driver needs to take certain actions when a reset
      notification arrives (packet also not handled by the nfc core).

      The driver handlers do not interfere with the core and they are
      called after the core processes the packet.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 7bc4824ed5cf9feb0173b90a6bec28f694a5f7ce
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:37 2015 +0300

      NFC: nci: Introduce nci_core_cmd

      This allows sending core commands from the driver. The driver
      should be able to send NCI core commands like CORE_GET_CONFIG_CMD.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit e4dbd62528931951aa9d3b313ee7d536df5069fc
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:36 2015 +0300

      NFC: nci: Do not call post_setup when setup fails

      The driver should know that it can continue with post setup where
      setup left off. Being able to execute post_setup when setup fails
      may force the developer to keep this state in the driver.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a9433c11b1aa0639cc6e4842fff52af2422af06d
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:35 2015 +0300

      NFC: nci: Introduce new core opcodes

      Add NCI_OP_CORE_GET_CONFIG_CMD, NCI_OP_CORE_GET_CONFIG_RSP
      and NCI_OP_CORE_RESET_NTF.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2663589ce67e5429bac89544bb0e102bb1fcf617
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:34 2015 +0300

      NFC: nci: Add function to get max packet size for conn

      FDP driver needs to send the firmware as regular packets
      (not fragmented). The driver should have a way to
      get the max packet size for a given connection.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit ea785c094d38bc5eae8011330759d68f45236559
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:33 2015 +0300

      NFC: nci: Export nci data send API

      For the firmware update the driver may use nci_send_data.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit dc42143b8468b1fe6385962d1d78ddadc76c5168
  Author: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 17:05:37 2015 +0200

      NFC: st-nci: Rename st-nci_se.c

      Rename it to se.c to keep the driver files namespace consistent.

      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 1586a5877db9eee313379738d6581bc7c6ffb5e3
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 23 10:59:16 2015 -0700

      af_unix: do not report POLLOUT on listeners

      poll(POLLOUT) on a listener should not report fd is ready for
      a write().

      This would break some applications using poll() and pfd.events = -1,
      as they would not block in poll()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Alan Burlison <Alan.Burlison@xxxxxxxxxx>
      Tested-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 742e038330a485350334ee5eb75dce4a9dff87cd
  Author: Wu Fengguang <fengguang.wu@xxxxxxxxx>
  Date:   Sat Oct 24 22:56:01 2015 +0800

      tipc: link_is_bc_sndlink() can be static

      TO: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: netdev@xxxxxxxxxxxxxxx
      CC: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      CC: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      CC: tipc-discussion@xxxxxxxxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx

      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Acked-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2edb7a3372c76c9379d0fc00e4274ea8f018248a
  Author: Moshe Harel <moshe.harel@xxxxxxxxx>
  Date:   Thu Sep 10 15:29:09 2015 +0300

      iwlwifi: nvm: free old section data when reading nvm file

      When reading external NVM file, if a section exists both in OTP
      and in the external file, the memory that was allocated at OTP
      reading is not freed.
      This is possible only on systems that have an external NVM
      file which is typically the case on embedded systems.

      Signed-off-by: Moshe Harel <moshe.harel@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 06ecdba319e2b389c94c7b6a9c936d09ec188359
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Mon Oct 12 14:47:11 2015 +0300

      iwlwifi: mvm: disable TDLS ac queues correctly

      The iwl_mvm_disable_queue function requires the TID to be set to
      IWL_MAX_TID_COUNT when disabling an AC queue. Call it correctly for TDLS
      scenarios.

      Fixes: 4ecafae9e568 ("iwlwifi: mvm: support using multiple ACs on single 
HW queue")
      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 78ba82f777f3ab41f10afa3694c9c7633bf595d4
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Thu Oct 15 10:58:48 2015 +0300

      iwlwifi: mvm: take scan ref only on success

      In some cases, scan reference was taken, but wasn't
      released even though scan command wasn't actually issued.

      Change the current code to simply take the reference
      only on success.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit c8f423159e3e53d30e5b36a455797ee2072b09d0
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 11 12:07:21 2015 +0200

      iwlwifi: mvm: remove pointless scan plan checks

      As cfg80211 already enforces these limits, there's little point
      in having them again here in our code.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 46eebec9794e47ebad0352285db50a10de595bb5
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 11 12:09:22 2015 +0200

      iwlwifi: mvm: clean up some whitespace in scan code

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit effd19298c7767457772d489c88f1b7ffa6e7bd9
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Tue Jun 30 12:08:28 2015 +0300

      iwlwifi: mvm: Implement per vif frame registration API

      Implement config_iface_filter() driver op. Currently support only
      probe request registration for p2p client vifs, by setting
      MAC_FILTER_IN_PROBE_REQUEST flag in MAC_CONTEXT_CMD.
      This is needed since WFDS spec and certification require a P2P client
      to be discoverable on its operating channel.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 053225de121a950b94a1989802c22895797ffbfc
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Thu Sep 10 15:00:22 2015 +0300

      iwlwifi: avoid read/write operations if the bus is dead

      Recovery takes too much time if the bus is dead (each timeout
      is 2000ms, etc.).
      Explicitly skip fw dump in this case, as it will result in
      garbage data (and might take signifcant time)

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit cd55ccea5978d7e87852be3ea5daf89c95b7e78a
  Author: Avraham Stern <avraham.stern@xxxxxxxxx>
  Date:   Wed Aug 19 12:46:12 2015 +0300

      iwlwifi: mvm: Add support for two scheduled scan plans

      Add support for two scan plans for scheduled scan. The first plan
      will run for a limited number of iterations, then the second plan
      will run infinitely.

      Signed-off-by: Avraham Stern <avraham.stern@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 5888a40c50b181bab6737167cfc1bf653945e2a1
  Author: Luca Coelho <luciano.coelho@xxxxxxxxx>
  Date:   Tue Oct 6 09:54:57 2015 +0300

      iwlwifi: mvm: let any command flag be passed to iwl_mvm_flushtx_path()

      Instead of only allowing the caller to decide whether the CMD_ASYNC
      flag is set, let it pass the entire flags bitmask.  This allows more
      flexibility and will be needed when we call this function in the
      suspend flow (where other flags are needed).

      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit c84af35de612fb45db6b5c5968b575813f5daa3b
  Author: Assaf Krauss <assaf.krauss@xxxxxxxxx>
  Date:   Wed Aug 12 17:52:12 2015 +0300

      iwlwifi: mvm: Allow setting ctrl-chnl-position in FTM responder

      This patch enables the debugfs user to configure an FTM responder
      with the appropriate control channel position.

      Signed-off-by: Assaf Krauss <assaf.krauss@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit b08dbed71a876d982e3506a97702535fd5cff48c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 6 14:07:44 2015 +0200

      iwlwifi: mvm: use short timeouts in P2P low latency if supported

      Those timeouts are used for AM-to-PSM transition.
      We already have those pairs defined for default and WOWLAN use cases.
      We expect that by using shorter threshold for low latency P2P,
      e.g. for Miracast video scenario, we might save a considerable amount of 
power.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Avri Altman <avri.altman@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 9645edb607427a9728b9269dfded74e8c42a9d48
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 6 13:28:48 2015 +0200

      iwlwifi: mvm: use wowlan RX/TX timeouts in D0i3

      In "hostless" mode (D3 or D0i3) the same parameters were intended
      to be used, but the code doesn't do that properly. Fix it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Avri Altman <avri.altman@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 78efc702c8b6ddd6563d836f0d9844bf1f288f9b
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Tue Oct 6 12:22:47 2015 +0300

      iwlwifi: mvm: correctly request DTS-measure for new cards

      Since the 8000 series, the DTS measurement request command has been
      changed. Use an ucode capability flag to determine which version is
      supported and send the extended command when needed.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 03a19cbb91994212be72ce15ac3406fa9f8ba079
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Oct 21 19:55:32 2015 +0300

      iwlwifi: pcie: fix (again) prepare card flow

      The hardware bug in the commit mentioned below forces us
      not to re-enable the clock gating in the Host Cluster.
      The impact on the power consumption is minimal and it allows
      the WAKE_ME interrupt to propagate.

      CC: <stable@xxxxxxxxxxxxxxx> [4.1+]
      Fixes: c9fdec9f3970 ("iwlwifi: pcie: fix prepare card flow")
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit f0afea54ee0dd212186de0291ec025c63016fa39
  Author: Matti Gottlieb <matti.gottlieb@xxxxxxxxx>
  Date:   Mon Jul 20 17:55:51 2015 +0300

      iwlwifi: mvm: Dump FW's virtual image in the case of a NIC error

      When paging is enabled the driver stores part of the FW's
      image in the DRAM.

      Dump FW's virtual image in the case of a NIC error.

      Signed-off-by: Golan Ben-Ami <golan.ben.ami@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit e621c2282e310aa83a50db4da3e16dfc5945db08
  Author: Alexander Bondar <alexander.bondar@xxxxxxxxx>
  Date:   Thu Sep 3 15:42:09 2015 +0300

      iwlwifi: rs: Remove workaround that disables MIMO on P2P

      Remove an old workaround that's no longer needed and
      enable MIMO on P2P interfaces.

      Signed-off-by: Alexander Bondar <alexander.bondar@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 10d15322ed26652263a579bcb59dfd49ab8a30de
  Merge: 0316d30 e5a9f8d
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Sun Oct 25 12:38:20 2015 +0200

      Merge remote-tracking branch 'mac80211-next/master' into next

  commit 2c66e24d75d424919c42288b418d2e593fa818b1
  Author: Sai Praneeth <sai.praneeth.prakhya@xxxxxxxxx>
  Date:   Fri Oct 16 16:20:27 2015 -0700

      x86/efi: Fix kernel panic when CONFIG_DEBUG_VIRTUAL is enabled

      When CONFIG_DEBUG_VIRTUAL is enabled, all accesses to __pa(address) are
      monitored to see whether address falls in direct mapping or kernel text
      mapping (see Documentation/x86/x86_64/mm.txt for details), if it does
      not, the kernel panics. During 1:1 mapping of EFI runtime services we 
access
      virtual addresses which are == physical addresses, thus the 1:1 mapping
      and these addresses do not fall in either of the above two regions and
      hence when passed as arguments to __pa() kernel panics as reported by
      Dave Hansen here https://lkml.kernel.org/r/5462999A.7090706@xxxxxxxxxx

      So, before calling __pa() virtual addresses should be validated which
      results in skipping call to split_page_count() and that should be fine
      because it is used to keep track of everything *but* 1:1 mappings.

      Signed-off-by: Sai Praneeth Prakhya <sai.praneeth.prakhya@xxxxxxxxx>
      Reported-by: Dave Hansen <dave.hansen@xxxxxxxxx>
      Reviewed-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Ricardo Neri <ricardo.neri@xxxxxxxxx>
      Cc: Glenn P Williamson <glenn.p.williamson@xxxxxxxxx>
      Cc: Ravi Shankar <ravi.v.shankar@xxxxxxxxx>
      Signed-off-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>

  commit a01fece2e4185ac173abd16d10304d73d47ebf00
  Author: John David Anglin <dave.anglin@xxxxxxxx>
  Date:   Wed Oct 14 20:32:11 2015 -0400

      parisc: Change L1_CACHE_BYTES to 16

      Change L1_CACHE_BYTES to 16 bytes.
      Tested for 16 days on rp3440.

      Additional remarks from Helge Deller:
      Saves ~17 kb of kernel code/data and gives a slight performance 
improvement in
      various test cases.

      Signed-off-by: John David Anglin <dave.anglin@xxxxxxxx>
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit c59f419bdd1f056e1ceacbd29f7be7bcff746a5d
  Author: Helge Deller <deller@xxxxxx>
  Date:   Sun Oct 25 10:00:32 2015 +0100

      net/xps: Fix calculation of initial number of xps queues

      The existing code breaks on architectures where the L1 cache size
      (L1_CACHE_BYTES) is smaller or equal the size of struct xps_map.

      The new code ensures that we get at minimum one initial xps queue, or 
even more
      as long as it fits into the next multiple of L1_CACHE_SIZE.

      Signed-off-by: Helge Deller <deller@xxxxxx>
      Acked-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>

  commit 4341801873e23bbecee76dabb7c111e3693b900f
  Merge: 80fcd45 161d904
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Oct 25 09:40:31 2015 +0100

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements from Arnaldo Carvalho de Melo:

      New user-visible features:

        - Show ordered command line options when -h is used or when an
          unknown option is specified. (Arnaldo Carvalho de Melo)

        - If options are passed after -h, show just its descriptions, not
          all options. (Arnaldo Carvalho de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 32b88194f71d6ae7768a29f87fbba454728273ee
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 10:39:47 2015 +0900

      Linux 4.3-rc7

  commit 22ca7ca52e80524360b43944a0556b2a6dc1aa21
  Merge: aef8cc9 09dc138
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Sun Oct 25 05:02:33 2015 +1000

      Merge branch 'vmwgfx-fixes-4.3' of 
git://people.freedesktop.org/~thomash/linux

      I'm not sure whether this patch comes in too late, but it would be good to
      have it in. It stabilizes command submission in case of command buffer 
errors.

      * 'vmwgfx-fixes-4.3' of git://people.freedesktop.org/~thomash/linux:
        drm/vmwgfx: Stabilize the command buffer submission code

  commit aef8cc903583c5a205b696fb0a51e1eca9117321
  Merge: 01815536 c86f5ebf
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Sun Oct 25 05:01:57 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux

      Two regression fixes and a memory leak fix for amdgpu and radeon.

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: don't try to recreate sysfs entries on resume
        drm/radeon: don't try to recreate sysfs entries on resume
        drm/amdgpu: stop leaking page flip fence

  commit 687f079addba1ac7f97ce97080c2291bbe8c8dce
  Merge: ba3e208 2af5ae3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 24 06:56:54 2015 -0700

      Merge branch 'tipc-next'

      Jon Maloy says:

      ====================
      tipc: improve broadcast implementation

      The TIPC broadcast link implementation is currently complex and hard to
      follow. It also incurs some amount of code and structure duplication,
      something that can be reduced significantly with a little effort.

      This commit series introduces a number of improvements which address
      both the locking structure, the code/structure duplication issue, and
      the overall readbility of the code.

      The series consists of three main parts:

      1-7: Adaptation to the new link structure, and preparation for the next
           step. In particular, we want the broadcast transmission link to
           have a life cycle that is longer than any of its potential (unicast
           and broadcast receive links) users. This eliminates the need to
           always test for the presence of this link before accessing it.

      8-10: This is what is really new in this series. Commit #9 is by far
            the largest and most important one, because it moves most of
            the broadcast functionality into link.c, partially reusing the
            fields and functionality of the unicast link. The removal of
            the "node_map" infrastructure in commit #10 is also an important
            achievement.

      11-16: Some improvements leveraging the changes made in the previous
             commits.

      The series needs commit 53387c4e22ac ("tipc: extend broadcast link window 
size")
      and commit e53567948f82 ("tipc: conditionally expand buffer headroom over 
udp tunnel")
      which are both present in 'net' but not yet in 'net-next', to apply 
cleanly.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2af5ae372a4b6d6e2d3314af0e9c865d6d64f8d3
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:48 2015 -0400

      tipc: clean up unused code and structures

      After the previous changes in this series, we can now remove some
      unused code and structures, both in the broadcast, link aggregation
      and link code.

      There are no functional changes in this commit.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c49a0a84391bcc313b3dc2a9ceee6de684e07655
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:47 2015 -0400

      tipc: ensure binding table initial distribution is sent via first link

      Correct synchronization of the broadcast link at first contact between
      two nodes is dependent on the assumption that the binding table "bulk"
      update passes via the same link as the initial broadcast syncronization
      message, i.e., via the first link that is established.

      This is not guaranteed in the current implementation. If two link
      come up very close to each other in time, the "bulk" may quite well
      pass via the second link, and hence void the guarantee of a correct
      initial synchronization before the broadcast link is opened.

      This commit makes two small changes to strengthen this guarantee.

      1) We let the second established link occupy slot 1 of the
         "active_links" array, while the first link will retain slot 0.
         (This is in reality a cosmetic change, we could just as well keep
          the current, opposite order)

      2) We let the name distributor always use link selector/slot 0 when
         it sends it binding table updates.

      The extra traffic bias on the first link caused by this change should
      be negligible, since binding table updates constitutes a very small
      fraction of the total traffic.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c72fa872a23f03b2b9c17e88f3b0a8070924e5f1
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:46 2015 -0400

      tipc: eliminate link's reference to owner node

      With the recent commit series, we have established a one-way dependency
      between the link aggregation (struct tipc_node) instances and their
      pertaining tipc_link instances. This has enabled quite significant code
      and structure simplifications.

      In this commit, we eliminate the field 'owner', which points to an
      instance of struct tipc_node, from struct tipc_link, and replace it with
      a pointer to struct net, which is the only external reference now needed
      by a link instance.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7214bcf8753109256d635ba079938fbd6fcf713b
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:45 2015 -0400

      tipc: eliminate redundant buffer cloning at transmission

      Since all packet transmitters (link, bcast, discovery) are now sending
      consumable buffer clones to the bearer layer, we can remove the
      redundant buffer cloning that is perfomed in the lower level functions
      tipc_l2_send_msg() and tipc_udp_send_msg().

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 60852d679575b0d7ce62497938116f92654ae908
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:44 2015 -0400

      tipc: let neighbor discoverer tranmsit consumable buffers

      The neighbor discovery function currently uses the function
      tipc_bearer_send() for transmitting packets, assuming that the
      sent buffers are not consumed by the called function.

      We want to change this, in order to avoid unnecessary buffer cloning
      elswhere in the code.

      This commit introduces a new function tipc_bearer_skb() which consumes
      the sent buffers, and let the discoverer functions use this new call
      instead. The discoverer does now itself perform the cloning when
      that is necessary.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 959e1781aa230aecc90e4deb80117fd9a53dede7
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:43 2015 -0400

      tipc: introduce jumbo frame support for broadcast

      Until now, we have only been supporting a fix MTU size of 1500 bytes
      for all broadcast media, irrespective of their actual capability.

      We now make the broadcast MTU adaptable to the carrying media, i.e.,
      we use the smallest MTU supported by any of the interfaces attached
      to TIPC.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b06b281e79375fcbd9ffaec7c5fdc350b888d089
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:42 2015 -0400

      tipc: simplify bearer level broadcast

      Until now, we have been keeping track of the exact set of broadcast
      destinations though the help structure tipc_node_map. This leads us to
      have to maintain a whole infrastructure for supporting this, including
      a pseudo-bearer and a number of functions to manipulate both the bearers
      and the node map correctly. Apart from the complexity, this approach is
      also limiting, as struct tipc_node_map only can support cluster local
      broadcast if we want to avoid it becoming excessively large. We want to
      eliminate this limitation, in order to enable introduction of scoped
      multicast in the future.

      A closer analysis reveals that it is unnecessary maintaining this "full
      set" overview; it is sufficient to keep a counter per bearer, indicating
      how many nodes can be reached via this bearer at the moment. The protocol
      is now robust enough to handle transitional discrepancies between the
      nominal number of reachable destinations, as expected by the broadcast
      protocol itself, and the number which is actually reachable at the
      moment. The initial broadcast synchronization, in conjunction with the
      retransmission mechanism, ensures that all packets will eventually be
      acknowledged by the correct set of destinations.

      This commit introduces these changes.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5266698661401afc5e4a1a521cf9ba10724d10dd
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:41 2015 -0400

      tipc: let broadcast packet reception use new link receive function

      The code path for receiving broadcast packets is currently distinct
      from the unicast path. This leads to unnecessary code and data
      duplication, something that can be avoided with some effort.

      We now introduce separate per-peer tipc_link instances for handling
      broadcast packet reception. Each receive link keeps a pointer to the
      common, single, broadcast link instance, and can hence handle release
      and retransmission of send buffers as if they belonged to the own
      instance.

      Furthermore, we let each unicast link instance keep a reference to both
      the pertaining broadcast receive link, and to the common send link.
      This makes it possible for the unicast links to easily access data for
      broadcast link synchronization, as well as for carrying acknowledges for
      received broadcast packets.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd556f209af53b9cdc45df8c467feb235376c4df
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:40 2015 -0400

      tipc: introduce capability bit for broadcast synchronization

      Until now, we have tried to support both the newer, dedicated broadcast
      synchronization mechanism along with the older, less safe, RESET_MSG/
      ACTIVATE_MSG based one. The latter method has turned out to be a hazard
      in a highly dynamic cluster, so we find it safer to disable it completely
      when we find that the former mechanism is supported by the peer node.

      For this purpose, we now introduce a new capabability bit,
      TIPC_BCAST_SYNCH, to inform any peer nodes that dedicated broadcast
      syncronization is supported by the present node. The new bit is conveyed
      between peers in the 'capabilities' field of neighbor discovery messages.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2f566124570625c29c3fd79bac4d9cd97c0c31a1
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:39 2015 -0400

      tipc: let broadcast transmission use new link transmit function

      This commit simplifies the broadcast link transmission function, by
      leveraging previous changes to the link transmission function and the
      broadcast transmission link life cycle.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c1ab3f1dea3df566ad38caf98baf69c656679090
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:38 2015 -0400

      tipc: make struct tipc_link generic to support broadcast

      Realizing that unicast is just a special case of broadcast, we also see
      that we can go in the other direction, i.e., that modest changes to the
      current unicast link can make it generic enough to support broadcast.

      The following changes are introduced here:

      - A new counter ("ackers") in struct tipc_link, to indicate how many
        peers need to ack a packet before it can be released.
      - A corresponding counter in the skb user area, to keep track of how
        many peers a are left to ack before a buffer can be released.
      - A new counter ("acked"), to keep persistent track of how far a peer
        has acked at the moment, i.e., where in the transmission queue to
        start updating buffers when the next ack arrives. This is to avoid
        double acknowledgements from a peer, with inadvertent relase of
        packets as a result.
      - A more generic tipc_link_retrans() function, where retransmit starts
        from a given sequence number, instead of the first packet in the
        transmision queue. This is to minimize the number of retransmitted
        packets on the broadcast media.

      When the new functionality is taken into use in the next commits,
      we expect it to have minimal effect on unicast mode performance.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 323019069e8d96d87e9dba51f897060f94999821
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:37 2015 -0400

      tipc: use explicit allocation of broadcast send link

      The broadcast link instance (struct tipc_link) used for sending is
      currently aggregated into struct tipc_bclink. This means that we cannot
      use the regular tipc_link_create() function for initiating the link, but
      do instead have to initiate numerous fields directly from the
      bcast_init() function.

      We want to reduce dependencies between the broadcast functionality
      and the inner workings of tipc_link. In this commit, we introduce
      a new function tipc_bclink_create() to link.c, and allocate the
      instance of the link separately using this function.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0e05498e9eae16a6d8c86543e77930ec152e655e
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:36 2015 -0400

      tipc: make link implementation independent from struct tipc_bearer

      In reality, the link implementation is already independent from
      struct tipc_bearer, in that it doesn't store any reference to it.
      However, we still pass on a pointer to a bearer instance in the
      function tipc_link_create(), just to have it extract some
      initialization information from it.

      I later commits, we need to create instances of tipc_link without
      having any associated struct tipc_bearer. To facilitate this, we
      want to extract the initialization data already in the creator
      function in node.c, before calling tipc_link_create(), and pass
      this info on as individual parameters in the call.

      This commit introduces this change.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5fd9fd635104f4816da158cdac6917e99e192eac
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:35 2015 -0400

      tipc: create broadcast transmission link at namespace init

      The broadcast transmission link is currently instantiated when the
      network subsystem is started, i.e., on order from user space via netlink.

      This forces the broadcast transmission code to do unnecessary tests for
      the existence of the transmission link, as well in single mode node as
      in network mode.

      In this commit, we do instead create the link during initialization of
      the name space, and remove it when it is stopped. The fact that the
      transmission link now has a guaranteed longer life cycle than any of its
      potential clients paves the way for further code simplifcations
      and optimizations.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0043550b0a88b72216161d6f25eb0a2e0e78babf
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:34 2015 -0400

      tipc: move broadcast link lock to struct tipc_net

      The broadcast lock will need to be acquired outside bcast.c in a later
      commit. For this reason, we move the lock to struct tipc_net. Consistent
      with the changes in the previous commit, we also introducee two new
      functions tipc_bcast_lock() and tipc_bcast_unlock(). The code that is
      currently using tipc_bclink_lock()/unlock() will be phased out during
      the coming commits in this series.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6beb19a62a87ef6f7107fcd43c2cc1ebad3edfb5
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:33 2015 -0400

      tipc: move bcast definitions to bcast.c

      Currently, a number of structure and function definitions related
      to the broadcast functionality are unnecessarily exposed in the file
      bcast.h. This obscures the fact that the external interface towards
      the broadcast link in fact is very narrow, and causes unnecessary
      recompilations of other files when anything changes in those
      definitions.

      In this commit, we move as many of those definitions as is currently
      possible to the file bcast.c.

      We also rename the structure 'tipc_bclink' to 'tipc_bc_base', both
      since the name does not correctly describe the contents of this
      struct, and will do so even less in the future, and because we want
      to use the term 'link' more appropriately in the functionality
      introduced later in this series.

      Finally, we rename a couple of functions, such as tipc_bclink_xmit()
      and others that will be kept in the future, to include the term 'bcast'
      instead.

      There are no functional changes in this commit.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba3e2084f268bdfed7627046e58a2218037e15af
  Merge: a72c951 ce9d9b8
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 24 06:54:12 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Conflicts:
        net/ipv6/xfrm6_output.c
        net/openvswitch/flow_netlink.c
        net/openvswitch/vport-gre.c
        net/openvswitch/vport-vxlan.c
        net/openvswitch/vport.c
        net/openvswitch/vport.h

      The openvswitch conflicts were overlapping changes.  One was
      the egress tunnel info fix in 'net' and the other was the
      vport ->send() op simplification in 'net-next'.

      The xfrm6_output.c conflicts was also a simplification
      overlapping a bug fix.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a72c9512bf2bef12c5e66a4d910c4b348fe31d61
  Merge: 379a80a 13972ad
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 24 05:13:16 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-10-22

      Here's probably the last bluetooth-next pull request for 4.4. Among
      several other changes it contains the rest of the fixes & cleanups from
      the Bluetooth UnplugFest (that didn't need to be hurried to 4.3).

       - Refactoring & cleanups to 6lowpan code
       - New USB ids for two Atheros controllers and BCM43142A0 from Broadcom
       - Fix (quirk) for broken Broadcom BCM2045 controllers
       - Support for latest Apple controllers
       - Improvements to the vendor diagnostic message support

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 033695bdf6d79180f74893830053fcf3e8bc9d24
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Fri Oct 23 20:27:58 2015 +0300

      rtl8xxxu: move devices supported by rtlwifi under UNTESTED config

      There are still four devices which are currently supported both by the new
      rtl8xxxu driver and rtlwifi. To not break existing setups enable the 
support
      for these four devices only when CONFIG_RTL8XXXU_UNTESTED is turned on.

      Once rtl8xxxu support is found to be good enough the devices can be 
removed
      from rtlwifi and enabled by default in rtl8xxxu.

      Reported-by: Xose Vazquez Perez <xose.vazquez@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 8bce6d35b308d73cdb2ee273c95d711a55be688c
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Oct 22 13:20:15 2015 +1100

      md/raid10: fix the 'new' raid10 layout to work correctly.

      In Linux 3.9 we introduce a new 'far' layout for RAID10 which was
      supposed to rotate the replicas differently and so provide better
      resilience.  In particular it could survive more combinations of 2
      drive failures.

      Unfortunately. due to a coding error, this some did what was wanted,
      sometimes improved less than we hoped, and sometimes - in very
      unlikely circumstances - put multiple replicas on the same device so
      the redundancy was harmed.

      No public user-space tool has created arrays using this layout so it
      is very unlikely that zero-redundancy arrays actually exist.  Probably
      no arrays using any form of the new layout exist.  But we cannot be
      certain.

      So use another bit in the 'layout' number and introduce a bug-fixed
      version of the layout.
      Also when assembling an array, if it has a zero-redundancy layout,
      give a warning.

      Reported-by: Heinz Mauelshagen <heinzm@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit c340702ca26a628832fade4f133d8160a55c29cc
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Oct 24 16:23:48 2015 +1100

      md/raid10: don't clear bitmap bit when bad-block-list write fails.

      When a write fails and a bad-block-list is present, we can
      update the bad-block-list instead of writing the data.  If
      this succeeds then it is OK clear the relevant bitmap-bit as
      no further 'sync' of the block is needed.

      However if writing the bad-block-list fails then we need to
      treat the write as failed and particularly must not clear
      the bitmap bit.  Otherwise the device can be re-added (after
      any hardware connection issues are resolved) and because the
      relevant bit in the bitmap is clear, that block will not be
      resynced.  This leads to data corruption.

      We already delay the final bio_endio() on the write until
      the bad-block-list is written so that when the write
      returns: either that data is safe, the bad-block record is
      safe, or the fact that the device is faulty is safe.
      However we *don't* delay the clearing of the bitmap, so the
      bitmap bit can be recorded as cleared before we know if the
      bad-block-list was written safely.

      So: delay that until the write really is safe.
      i.e. move the call to close_write() until just before
      calling bio_endio(), and recheck the 'is array degraded'
      status before making that call.

      This bug goes back to v3.1 when bad-block-lists were
      introduced, though it only affects arrays created with
      mdadm-3.3 or later as only those have bad-block lists.

      Backports will require at least
      Commit: 95af587e95aa ("md/raid10: ensure device failure recorded before 
write request returns.")
      as well.  I'll send that to 'stable' separately.

      Note that of the two tests of R10BIO_WriteError that this
      patch adds, the first is certain to fail and the second is
      certain to succeed.  However doing it this way makes the
      patch more obviously correct.  I will tidy the code up in a
      future merge window.

      Reported-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Fixes: bd870a16c594 ("md/raid10:  Handle write errors by updating 
badblock log.")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit bd8688a199b864944bf62eebed0ca13b46249453
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Oct 24 16:02:16 2015 +1100

      md/raid1: don't clear bitmap bit when bad-block-list write fails.

      When a write fails and a bad-block-list is present, we can
      update the bad-block-list instead of writing the data.  If
      this succeeds then it is OK clear the relevant bitmap-bit as
      no further 'sync' of the block is needed.

      However if writing the bad-block-list fails then we need to
      treat the write as failed and particularly must not clear
      the bitmap bit.  Otherwise the device can be re-added (after
      any hardware connection issues are resolved) and because the
      relevant bit in the bitmap is clear, that block will not be
      resynced.  This leads to data corruption.

      We already delay the final bio_endio() on the write until
      the bad-block-list is written so that when the write
      returns: either that data is safe, the bad-block record is
      safe, or the fact that the device is faulty is safe.
      However we *don't* delay the clearing of the bitmap, so the
      bitmap bit can be recorded as cleared before we know if the
      bad-block-list was written safely.

      So: delay that until the write really is safe.
      i.e. move the call to close_write() until just before
      calling bio_endio(), and recheck the 'is array degraded'
      status before making that call.

      This bug goes back to v3.1 when bad-block-lists were
      introduced, though it only affects arrays created with
      mdadm-3.3 or later as only those have bad-block lists.

      Backports will require at least
      Commit: 55ce74d4bfe1 ("md/raid1: ensure device failure recorded before 
write request returns.")
      as well.  I'll send that to 'stable' separately.

      Note that of the two tests of R1BIO_WriteError that this
      patch adds, the first is certain to fail and the second is
      certain to succeed.  However doing it this way makes the
      patch more obviously correct.  I will tidy the code up in a
      future merge window.

      Reported-and-tested-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Cc: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Fixes: cd5ff9a16f08 ("md/raid1:  Handle write errors by updating badblock 
log.")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 161d9041782b86c5493481566539bfc058ceeaff
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Oct 23 13:27:39 2015 -0300

      perf tools: Provide help for subset of options

      Some tools have a lot of options, so, providing a way to show help just
      for some of them may come handy:

        $ perf report -h --tui

         Usage: perf report [<options>]

              --tui             Use the TUI interface

        $ perf report -h --tui --showcpuutilization -b -c

         Usage: perf report [<options>]

          -b, --branch-stack    use branch records for per branch histogram 
filling
          -c, --comms <comm[,comm...]>
                                only consider symbols in these comms
              --showcpuutilization
                                Show sample percentage for different cpu modes
              --tui             Use the TUI interface

        $

      Using it with perf bash completion is also handy, just make sure you
      source the needed file:

        $ . ~/git/linux/tools/perf/perf-completion.sh

      Then press tab/tab after -- to see a list of options, put them after -h
      and only the options chosen will have its help presented:

        $ perf report -h --
        --asm-raw              --demangle-kernel      --group
        --kallsyms             --pretty               --stdio
        --branch-history       --disassembler-style   --gtk
        --max-stack            --showcpuutilization   --symbol-filter
        --branch-stack         --dsos                 --header
        --mem-mode             --show-info            --symbols
        --call-graph           --dump-raw-trace       --header-only
        --modules              --show-nr-samples      --symfs
        --children             --exclude-other        --hide-unresolved
        --objdump              --show-ref-call-graph  --threads
        --column-widths        --fields               --ignore-callees
        --parent               --show-total-period    --tid
        --comms                --field-separator      --input
        --percentage           --socket-filter        --tui
        --cpu                  --force                --inverted
        --percent-limit        --sort                 --verbose
        --demangle             --full-source-path     --itrace
        --pid                  --source               --vmlinux
        $ perf report -h --socket-filter

         Usage: perf report [<options>]

            --socket-filter <n>
                        only show processor socket that match with this filter

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-83mcdd3wj0379jcgea8w0fxa@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 869c55b0f473fecfe6c294c6fa965dedfe469e02
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Oct 23 11:23:28 2015 -0300

      perf tools: Show tool command line options ordered

      When asking for a listing of the options, be it using -h or when an
      unknown option is passed, order it by one-letter options, then the ones
      having just long names.

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-41qh68t35n4ehrpsuazp1dx8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 379a80a1d048dcacfc2011d5d32e16d5c804b9f4
  Author: Michael Chan <mchan@xxxxxxxxxxxx>
  Date:   Fri Oct 23 15:06:19 2015 -0400

      bnxt_en: Fix compile errors when CONFIG_BNXT_SRIOV is not set.

      struct bnxt_pf_info needs to be always defined.  Move bnxt_update_vf_mac()
      to bnxt_sriov.c and add some missing #ifdef CONFIG_BNXT_SRIOV.

      Reported-by: Jim Hull <jim.hull@xxxxxxx>
      Tested-by: Jim Hull <jim.hull@xxxxxxx>
      Signed-off-by: Michael Chan <mchan@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 018155365dccecd9ea9f26e1b26fb0f960c1ee32
  Merge: dd5ae68 fd7cd06
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:52:59 2015 +0900

      Merge tag 'usb-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

      Pull USB fixes from Greg KH:
       "Here are three xhci driver fixes for reported issues for 4.3-rc7

        All have been in linux-next for a while with no problems"

      * tag 'usb-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:
        xhci: Add spurious wakeup quirk for LynxPoint-LP controllers
        xhci: handle no ping response error properly
        xhci: don't finish a TD if we get a short transfer event mid TD

  commit dd5ae6818ccd4ab0aa6f7d84e88f60a48af0fb52
  Merge: 4ee8019 f235f66
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:52:09 2015 +0900

      Merge tag 'tty-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

      Pull tty/serial fixes from Greg KH:
       "Here are two fixes that resolve reported issues, one with the 8250
        driver, and the other with the generic fbcon driver.

        Both have been in linux-next for a while"

      * tag 'tty-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:
        fbcon: initialize blink interval before calling fb_set_par
        Revert "serial: 8250_dma: don't bother DMA with small transfers"

  commit 4ee8019d3fdc6cce14129a954632c0f81d456884
  Merge: 410694e 4301de3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:51:13 2015 +0900

      Merge tag 'staging-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

      Pull staging driver fixes from Greg KH:
       "Here are four iio driver fixes for 4.3-rc7, fixing some reported
        issues.  All of these have been in linux-next for a while"

      * tag 'staging-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
        iio: mxs-lradc: Fix temperature offset
        iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
        iio: st_accel: fix interrupt handling on LIS3LV02
        iio: adc: twl4030: Fix ADC[3:6] readings

  commit 410694e214d5b479bc8b035ded0bb832f1c469b4
  Merge: 35df017 0ca81a2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:28:05 2015 +0900

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull infiniband fixes from Doug Ledford:
       "It's late in the game, I know, but these fixes seemed important enough
        to warrant a late pull request.  They all involve oopses or use after
        frees or corruptions.

        Six serious fixes:

         - Hold the mutex around the find and corresponding update of our gid

         - The ifa list is rcu protected, copy its contents under rcu to avoid
           using a freed structure

         - On error, netdev might be null, so check it before trying to
           release it

         - On init, if workqueue alloc fails, fail init

         - The new demux patches exposed a bug in mlx5 and ipath drivers, we
           need to use the payload P_Key to determine the P_Key the packet
           arrived on because the hardware doesn't tell us the truth

         - Due to a couple convoluted error flows, it is possible for the CM
           to trigger a use_after_free and a double_free of rb nodes.  Add two
           checks to prevent that.  This code has worked for 10+ years.  It is
           likely that some of the recent changes have caused this issue to
           surface.  The current patch will protect us from nasty events for
           now while we track down why this is just now showing up"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/cm: Fix rb-tree duplicate free and use-after-free
        IB/cma: Use inner P_Key to determine netdev
        IB/ucma: check workqueue allocation before usage
        IB/cma: Potential NULL dereference in cma_id_from_event
        IB/core: Fix use after free of ifa
        IB/core: Fix memory corruption in ib_cache_gid_set_default_gid

  commit 35df017c4d5571ee6f3061964d1445aae250219c
  Merge: ea1ee5f 3201ac4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:23:52 2015 +0900

      Merge tag 'dm-4.3-fixes-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull device mapper fixes from Mike Snitzer:
       "Three stable fixes (two in btree code used by DM thinp and one to
        properly store flags in DM cache metadata's superblock)"

      * tag 'dm-4.3-fixes-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm cache: the CLEAN_SHUTDOWN flag was not being set
        dm btree: fix leak of bufio-backed block in btree_split_beneath error 
path
        dm btree remove: fix a bug when rebalancing nodes after removal

  commit ea1ee5ff1b500ccdc64782ecef13d276afb08f14
  Merge: ef594c4 e27c5b9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:20:57 2015 +0900

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull block layer fixes from Jens Axboe:
       "A final set of fixes for 4.3.

        It is (again) bigger than I would have liked, but it's all been
        through the testing mill and has been carefully reviewed by multiple
        parties.  Each fix is either a regression fix for this cycle, or is
        marked stable.  You can scold me at KS.  The pull request contains:

         - Three simple fixes for NVMe, fixing regressions since 4.3.  From
           Arnd, Christoph, and Keith.

         - A single xen-blkfront fix from Cathy, fixing a NULL dereference if
           an error is returned through the staste change callback.

         - Fixup for some bad/sloppy code in nbd that got introduced earlier
           in this cycle.  From Markus Pargmann.

         - A blk-mq tagset use-after-free fix from Junichi.

         - A backing device lifetime fix from Tejun, fixing a crash.

         - And finally, a set of regression/stable fixes for cgroup writeback
           from Tejun"

      * 'for-linus' of git://git.kernel.dk/linux-block:
        writeback: remove broken rbtree_postorder_for_each_entry_safe() usage 
in cgwb_bdi_destroy()
        NVMe: Fix memory leak on retried commands
        block: don't release bdi while request_queue has live references
        nvme: use an integer value to Linux errno values
        blk-mq: fix use-after-free in blk_mq_free_tag_set()
        nvme: fix 32-bit build warning
        writeback: fix incorrect calculation of available memory for memcg 
domains
        writeback: memcg dirty_throttle_control should be initialized with 
wb->memcg_completions
        writeback: bdi_writeback iteration must not skip dying ones
        writeback: fix bdi_writeback iteration in wakeup_dirtytime_writeback()
        writeback: laptop_mode_timer_fn() needs rcu_read_lock() around 
bdi_writeback iteration
        nbd: Add locking for tasks
        xen-blkfront: check for null drvdata in blkback_changed 
(XenbusStateClosing)

  commit ef594c421a0f96197f28d205e2ee58a83c1e0e37
  Merge: 37902bc 6d69bb53
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:19:33 2015 +0900

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fixes from Sage Weil:
       "Two fixes.

        One is a stopgap to prevent a stack blowout when users have a deep
        chain of image clones.  (We'll rewrite this code to be non-recursive
        for the next window, but in the meantime this is a simple fix that
        avoids a crash.)

        The second fixes a refcount underflow"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        rbd: prevent kernel stack blow up on rbd map
        rbd: don't leak parent_spec in rbd_dev_probe_parent()

  commit 37902bc190f1396a8c232783b29ddfcaa4026028
  Merge: 0386729 0f89abf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:17:58 2015 +0900

      Merge branch 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes from Chris Mason:
       "I have two more small fixes this week:

        Qu's fix avoids unneeded COW during fallocate, and Christian found a
        memory leak in the error handling of an earlier fix"

      * 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        btrfs: fix possible leak in btrfs_ioctl_balance()
        btrfs: Avoid truncate tailing page if fallocate range doesn't exceed 
inode size

  commit 5dd32eae604ee503e5a84a4f18d1381e4cc356cb
  Author: Vladimir Zapolskiy <vz@xxxxxxxxx>
  Date:   Sat Oct 17 21:52:27 2015 +0300

      i2c: pnx: fix runtime warnings caused by enabling unprepared clock

      The driver can not be used on a platform with common clock framework
      until clk_prepare/clk_unprepare calls are added, otherwise clk_enable
      calls will fail and a WARN is generated.

      Signed-off-by: Vladimir Zapolskiy <vz@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>

  commit 3201ac452e84a8a368197d648c9b7011e061804a
  Author: Joe Thornber <ejt@xxxxxxxxxx>
  Date:   Thu Oct 22 18:10:55 2015 +0100

      dm cache: the CLEAN_SHUTDOWN flag was not being set

      If the CLEAN_SHUTDOWN flag is not set when a cache is loaded then all 
cache
      blocks are marked as dirty and a full writeback occurs.

      __commit_transaction() is responsible for setting/clearing
      CLEAN_SHUTDOWN (based the flags_mutator that is passed in).

      Fix this issue, of the cache's on-disk flags being wrong, by making sure
      __commit_transaction() does not reset the flags after the mutator has
      altered the flags in preparation for them being serialized to disk.

      before:

      sb_flags = mutator(le32_to_cpu(disk_super->flags));
      disk_super->flags = cpu_to_le32(sb_flags);
      disk_super->flags = cpu_to_le32(cmd->flags);

      after:

      disk_super->flags = cpu_to_le32(cmd->flags);
      sb_flags = mutator(le32_to_cpu(disk_super->flags));
      disk_super->flags = cpu_to_le32(sb_flags);

      Reported-by: Bogdan Vasiliev <bogdan.vasiliev@xxxxxxxxx>
      Signed-off-by: Joe Thornber <ejt@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 4dcb8b57df3593dcb20481d9d6cf79d1dc1534be
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Thu Oct 22 10:56:40 2015 -0400

      dm btree: fix leak of bufio-backed block in btree_split_beneath error path

      btree_split_beneath()'s error path had an outstanding FIXME that speaks
      directly to the potential for _not_ cleaning up a previously allocated
      bufio-backed block.

      Fix this by releasing the previously allocated bufio block using
      unlock_block().

      Reported-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Acked-by: Joe Thornber <thornber@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2871c69e025e8bc507651d5a9cf81a8a7da9d24b
  Author: Joe Thornber <ejt@xxxxxxxxxx>
  Date:   Wed Oct 21 18:36:49 2015 +0100

      dm btree remove: fix a bug when rebalancing nodes after removal

      Commit 4c7e309340ff ("dm btree remove: fix bug in redistribute3") wasn't
      a complete fix for redistribute3().

      The redistribute3 function takes 3 btree nodes and shares out the entries
      evenly between them.  If the three nodes in total contained
      (MAX_ENTRIES * 3) - 1 entries between them then this was erroneously 
getting
      rebalanced as (MAX_ENTRIES - 1) on the left and right, and (MAX_ENTRIES + 
1) in
      the center.

      Fix this issue by being more careful about calculating the target number
      of entries for the left and right nodes.

      Unit tested in userspace using this program:
      
https://github.com/jthornber/redistribute3-test/blob/master/redistribute3_t.c

      Signed-off-by: Joe Thornber <ejt@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 6d69bb536bac0d403d83db1ca841444981b280cd
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Sun Oct 11 19:38:00 2015 +0200

      rbd: prevent kernel stack blow up on rbd map

      Mapping an image with a long parent chain (e.g. image foo, whose parent
      is bar, whose parent is baz, etc) currently leads to a kernel stack
      overflow, due to the following recursion in the reply path:

        rbd_osd_req_callback()
          rbd_obj_request_complete()
            rbd_img_obj_callback()
              rbd_img_parent_read_callback()
                rbd_obj_request_complete()
                  ...

      Limit the parent chain to 16 images, which is ~5K worth of stack.  When
      the above recursion is eliminated, this limit can be lifted.

      Fixes: http://tracker.ceph.com/issues/12538

      Cc: stable@xxxxxxxxxxxxxxx # 3.10+, needs backporting for < 4.2
      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Josh Durgin <jdurgin@xxxxxxxxxx>

  commit 1f2c6651f69c14d0d3a9cfbda44ea101b02160ba
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Sun Oct 11 19:38:00 2015 +0200

      rbd: don't leak parent_spec in rbd_dev_probe_parent()

      Currently we leak parent_spec and trigger a "parent reference
      underflow" warning if rbd_dev_create() in rbd_dev_probe_parent() fails.
      The problem is we take the !parent out_err branch and that only drops
      refcounts; parent_spec that would've been freed had we called
      rbd_dev_unparent() remains and triggers rbd_warn() in
      rbd_dev_parent_put() - at that point we have parent_spec != NULL and
      parent_ref == 0, so counter ends up being -1 after the decrement.

      Redo rbd_dev_probe_parent() to fix this.

      Cc: stable@xxxxxxxxxxxxxxx # 3.10+, needs backporting for < 4.2
      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Alex Elder <elder@xxxxxxxxxx>

  commit c86f5ebfbd147d1a228ab89ee1658e18939bd7ad
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 23 10:45:14 2015 -0400

      drm/amdgpu: don't try to recreate sysfs entries on resume

      Fixes an error on resume caused by:
      fa022a9b65d2886486a022fd66b20c823cd76ad9

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 49abb26651167c892393cd9f2ad23df429645ed9
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 23 10:38:52 2015 -0400

      drm/radeon: don't try to recreate sysfs entries on resume

      Fixes a harmless error message caused by:
      51a4726b04e880fdd9b4e0e58b13f70b0a68a7f5

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 5c92d87d30b23844e6998d8318e4c19ee3a907ac
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Wed Oct 21 21:58:28 2015 +0200

      drm/amdgpu: stop leaking page flip fence

      reservation_object_get_fences_rcu already takes the references.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit bf7958607d0b792e0c43482c0c78786023a69832
  Merge: e74f510 8443c1a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 06:58:09 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-23

      This series contains updates to i40e, i40evf, if_link, ixgbe and ixgbevf.

      Anjali adds a workaround to drop any flow control frames from being
      transmitted from any VSI, so that a malicious VF cannot send flow control
      or PFC packets out on the wire.  Also fixed a bug in debugfs by grabbing
      the filter list lock before adding or deleting a filter.

      Akeem fixes an issue where we were unconditionally returning VEB bridge
      mode before allowing LB in the add VSI routine, resolve by checking if
      the bridge is actually in VEB mode first.

      Mitch fixed an issue where the incorrect structure was being used for
      VLAN filter list, which meant the VLAN filter list did not get
      processed correctly and VLAN filters would not be re-enabled after any
      kind of reset.

      Helin fixed a problem of possibly getting inconsistent flow control
      status after a PF reset.  The issue was requested_mode was being set
      with a default value during probe, but the hardware state could be a
      different value from this mode.

      Carolyn fixed a problem where the driver output of the OEM version
      string varied from the other tools.

      Jean Sacren fixes up kernel documentation by fixing function header
      comments to match actual variables used in the functions.  Also
      cleaned up variable initialization, when the variable would be
      over-written immediately.

      Hiroshi Shimanoto provides three patches to add "trusted" VF by adding
      netlink directives and an NDO entry.  Then implement these new controls
      in ixgbe and ixgbevf.  This series has gone through several iterations
      to address all the suggested community changes and concerns.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03867292476e6fa7679395838d768dda0a0816c7
  Merge: df55793 f7d27c3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 22:34:32 2015 +0900

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Ingo Molnar:
       "Misc fixes: two KASAN fixes, two EFI boot fixes, two boot-delay
        optimization fixes, and a fix for a IRQ handling hang observed on
        virtual platforms"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/mm, kasan: Silence KASAN warnings in get_wchan()
        compiler, atomics, kasan: Provide READ_ONCE_NOCHECK()
        x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels
        x86/smpboot: Fix CPU #1 boot timeout
        x86/smpboot: Fix cpu_init_udelay=10000 corner case boot parameter 
misbehavior
        x86/ioapic: Disable interrupts when re-routing legacy IRQs
        x86/setup: Extend low identity map to cover whole kernel range
        x86/efi: Fix multiple GOP device support

  commit df55793680d36e37e6fc384fbd90c39ed83cbe75
  Merge: 9f30931 0aaafaa
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 22:31:39 2015 +0900

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fixes from Ingo Molnar:
       "Misc fixes all around the map: an instrumentation fix, a nohz
        usability fix, a lockdep annotation fix and two task group scheduling
        fixes"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched/core: Add missing lockdep_unpin() annotations
        sched/deadline: Fix migration of SCHED_DEADLINE tasks
        nohz: Revert "nohz: Set isolcpus when nohz_full is set"
        sched/fair: Update task group's load_avg after task migration
        sched/fair: Fix overly small weight for interactive group entities
        sched, tracing: Stop/start critical timings around the idle=poll idle 
loop

  commit e74f51056a167036f9168fb8d04b9e16ea12af43
  Merge: 654c9c5 1c78efa
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 06:26:50 2015 -0700

      Merge branch 'mpls_multipath'

      Roopa Prabhu says:

      ====================
      mpls: multipath support

      This patch adds support for MPLS multipath routes.

      Includes following changes to support multipath:
      - splits struct mpls_route into 'struct mpls_route + struct mpls_nh'.

      - struct mpls_nh represents a mpls nexthop label forwarding entry

      - Adds support to parse/fill RTA_MULTIPATH netlink attribute for
      multipath routes similar to ipv4/v6 fib

      - In the process of restructuring, this patch also consistently changes 
all
      labels to u8

      $ip -f mpls route add 100 nexthop as 200 via inet 10.1.1.2 dev swp1 \
                nexthop as 700 via inet 10.1.1.6 dev swp2 \
                nexthop as 800 via inet 40.1.1.2 dev swp3

      $ip  -f mpls route show
      100
        nexthop as to 200 via inet 10.1.1.2  dev swp1
        nexthop as to 700 via inet 10.1.1.6  dev swp2
        nexthop as to 800 via inet 40.1.1.2  dev swp3
      ====================

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1c78efa8319cad2f10f421afa627745fb4d9b29f
  Author: Robert Shearman <rshearma@xxxxxxxxxxx>
  Date:   Fri Oct 23 06:03:28 2015 -0700

      mpls: flow-based multipath selection

      Change the selection of a multipath route to use a flow-based
      hash. This more suitable for traffic sensitive to reordering within a
      flow (e.g. TCP, L2VPN) and whilst still allowing a good distribution
      of traffic given enough flows.

      Selection of the path for a multipath route is done using a hash of:
      1. Label stack up to MAX_MP_SELECT_LABELS labels or up to and
         including entropy label, whichever is first.
      2. 3-tuple of (L3 src, L3 dst, proto) from IPv4/IPv6 header in MPLS
         payload, if present.

      Naturally, a 5-tuple hash using L4 information in addition would be
      possible and be better in some scenarios, but there is a tradeoff
      between looking deeper into the packet to achieve good distribution,
      and packet forwarding performance, and I have erred on the side of the
      latter as the default.

      Signed-off-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8efb73c97e2fa0abbe2e07c5c5df07800312643
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 06:03:27 2015 -0700

      mpls: multipath route support

      This patch adds support for MPLS multipath routes.

      Includes following changes to support multipath:
      - splits struct mpls_route into 'struct mpls_route + struct mpls_nh'

      - 'struct mpls_nh' represents a mpls nexthop label forwarding entry

      - moves mpls route and nexthop structures into internal.h

      - A mpls_route can point to multiple mpls_nh structs

      - the nexthops are maintained as a array (similar to ipv4 fib)

      - In the process of restructuring, this patch also consistently changes
        all labels to u8

      - Adds support to parse/fill RTA_MULTIPATH netlink attribute for
      multipath routes similar to ipv4/v6 fib

      - In this patch, the multipath route nexthop selection algorithm
      simply returns the first nexthop. It is replaced by a
      hash based algorithm from Robert Shearman in the next patch

      - mpls_route_update cleanup: remove 'dev' handling in mpls_route_update.
      mpls_route_update though implemented to update based on dev, it was
      never used that way. And the dev handling gets tricky with multiple
      nexthops. Cannot match against any single nexthops dev. So, this patch
      removes the unused 'dev' handling in mpls_route_update.

      - dead route/path handling will be implemented in a subsequent patch

      Example:

      $ip -f mpls route add 100 nexthop as 200 via inet 10.1.1.2 dev swp1 \
                      nexthop as 700 via inet 10.1.1.6 dev swp2 \
                      nexthop as 800 via inet 40.1.1.2 dev swp3

      $ip  -f mpls route show
      100
              nexthop as to 200 via inet 10.1.1.2  dev swp1
              nexthop as to 700 via inet 10.1.1.6  dev swp2
              nexthop as to 800 via inet 40.1.1.2  dev swp3

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce9d9b8e5c2b7486edf76958bcdb5e6534a915b0
  Author: Li RongQing <roy.qing.li@xxxxxxxxx>
  Date:   Fri Oct 23 20:59:49 2015 +0800

      net: sysctl: fix a kmemleak warning

      the returned buffer of register_sysctl() is stored into net_header
      variable, but net_header is not used after, and compiler maybe
      optimise the variable out, and lead kmemleak reported the below warning

        comm "swapper/0", pid 1, jiffies 4294937448 (age 267.270s)
        hex dump (first 32 bytes):
        90 38 8b 01 c0 ff ff ff 00 00 00 00 01 00 00 00 .8..............
        01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
        backtrace:
        [<ffffffc00020f134>] create_object+0x10c/0x2a0
        [<ffffffc00070ff44>] kmemleak_alloc+0x54/0xa0
        [<ffffffc0001fe378>] __kmalloc+0x1f8/0x4f8
        [<ffffffc00028e984>] __register_sysctl_table+0x64/0x5a0
        [<ffffffc00028eef0>] register_sysctl+0x30/0x40
        [<ffffffc00099c304>] net_sysctl_init+0x20/0x58
        [<ffffffc000994dd8>] sock_init+0x10/0xb0
        [<ffffffc0000842e0>] do_one_initcall+0x90/0x1b8
        [<ffffffc000966bac>] kernel_init_freeable+0x218/0x2f0
        [<ffffffc00070ed6c>] kernel_init+0x1c/0xe8
        [<ffffffc000083bfc>] ret_from_fork+0xc/0x50
        [<ffffffffffffffff>] 0xffffffffffffffff <<end check kmemleak>>

      Before fix, the objdump result on ARM64:
      0000000000000000 <net_sysctl_init>:
         0:   a9be7bfd        stp     x29, x30, [sp,#-32]!
         4:   90000001        adrp    x1, 0 <net_sysctl_init>
         8:   90000000        adrp    x0, 0 <net_sysctl_init>
         c:   910003fd        mov     x29, sp
        10:   91000021        add     x1, x1, #0x0
        14:   91000000        add     x0, x0, #0x0
        18:   a90153f3        stp     x19, x20, [sp,#16]
        1c:   12800174        mov     w20, #0xfffffff4                // #-12
        20:   94000000        bl      0 <register_sysctl>
        24:   b4000120        cbz     x0, 48 <net_sysctl_init+0x48>
        28:   90000013        adrp    x19, 0 <net_sysctl_init>
        2c:   91000273        add     x19, x19, #0x0
        30:   9101a260        add     x0, x19, #0x68
        34:   94000000        bl      0 <register_pernet_subsys>
        38:   2a0003f4        mov     w20, w0
        3c:   35000060        cbnz    w0, 48 <net_sysctl_init+0x48>
        40:   aa1303e0        mov     x0, x19
        44:   94000000        bl      0 <register_sysctl_root>
        48:   2a1403e0        mov     w0, w20
        4c:   a94153f3        ldp     x19, x20, [sp,#16]
        50:   a8c27bfd        ldp     x29, x30, [sp],#32
        54:   d65f03c0        ret
      After:
      0000000000000000 <net_sysctl_init>:
         0:   a9bd7bfd        stp     x29, x30, [sp,#-48]!
         4:   90000000        adrp    x0, 0 <net_sysctl_init>
         8:   910003fd        mov     x29, sp
         c:   a90153f3        stp     x19, x20, [sp,#16]
        10:   90000013        adrp    x19, 0 <net_sysctl_init>
        14:   91000000        add     x0, x0, #0x0
        18:   91000273        add     x19, x19, #0x0
        1c:   f90013f5        str     x21, [sp,#32]
        20:   aa1303e1        mov     x1, x19
        24:   12800175        mov     w21, #0xfffffff4                // #-12
        28:   94000000        bl      0 <register_sysctl>
        2c:   f9002260        str     x0, [x19,#64]
        30:   b40001a0        cbz     x0, 64 <net_sysctl_init+0x64>
        34:   90000014        adrp    x20, 0 <net_sysctl_init>
        38:   91000294        add     x20, x20, #0x0
        3c:   9101a280        add     x0, x20, #0x68
        40:   94000000        bl      0 <register_pernet_subsys>
        44:   2a0003f5        mov     w21, w0
        48:   35000080        cbnz    w0, 58 <net_sysctl_init+0x58>
        4c:   aa1403e0        mov     x0, x20
        50:   94000000        bl      0 <register_sysctl_root>
        54:   14000004        b       64 <net_sysctl_init+0x64>
        58:   f9402260        ldr     x0, [x19,#64]
        5c:   94000000        bl      0 <unregister_sysctl_table>
        60:   f900227f        str     xzr, [x19,#64]
        64:   2a1503e0        mov     w0, w21
        68:   f94013f5        ldr     x21, [sp,#32]
        6c:   a94153f3        ldp     x19, x20, [sp,#16]
        70:   a8c37bfd        ldp     x29, x30, [sp],#48
        74:   d65f03c0        ret

      Add the possible error handle to free the net_header to remove the
      kmemleak warning

      Signed-off-by: Li RongQing <roy.qing.li@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f30931a5482d66710210dafe9b4f2cc92320540
  Merge: a2c01ed b67de01
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 22:10:51 2015 +0900

      Merge branch 'akpm' (patches from Andrew)

      Merge fixes from Andrew Morton:
       "9 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        ocfs2/dlm: unlock lockres spinlock before dlm_lockres_put
        fault-inject: fix inverted interval/probability values in printk
        lib/Kconfig.debug: disable -Wframe-larger-than warnings with KASAN=y
        mm: make sendfile(2) killable
        thp: use is_zero_pfn() only after pte_present() check
        mailmap: update Javier Martinez Canillas' email
        MAINTAINERS: add Sergey as zsmalloc reviewer
        mm: cma: fix incorrect type conversion for size during dma allocation
        kmod: don't run async usermode helper as a child of kworker thread

  commit 654c9c543ac025f4ecb73047f2e5b689137c77c5
  Merge: 6fb3b6b5 f050561
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 05:57:53 2015 -0700

      Merge branch 'mdiobus_nested_read_write'

      Neil Armstrong says:

      ====================
      Refactor nested mdiobus read/write functions

      In order to avoid locked signal false positive for nested mdiobus
      read/write calls, nested code was introduced in mv88e6xxx and
      mdio-mux.
      But mv88e6060 also needs such nested mdiobus read/write calls.
      For sake of refactoring, introduce nested variants of mdiobus read/write
      and make them used by mv88e6xxx and mv88e6060.
      In a next patch, mdio-mux should also use these variant calls.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f0505610505caf8443cd5ea269a7936b64711fee
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Thu Oct 22 10:37:57 2015 +0200

      net: dsa: Make mv88e6060 use nested mdiobus read/write

      Like mv88e6xxx and mdio-mux, to avoid lockdep give false positives
      because of nested MDIO busses, switch to previously introduced
      nested mdiobus_read/write variants.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e899e6c51320dd340ccc7a3d4391cedd0ba275b
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Thu Oct 22 10:37:53 2015 +0200

      net: dsa: Make mv88e6xxx use nested mdiobus read/write

      Make the mv88e6xxx driver use the previously introduced nested
      variants of mdiobus_read/write functions.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21dd19fed3c3eb42a3877600f4a97a774323e562
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Thu Oct 22 10:37:49 2015 +0200

      net: phy: Add nested variants of mdiobus read/write

      Since nested variants of mdiobus_read/write are used in multiple
      drivers, add nested variants in the mdiobus core.

      Suggested-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8443c1a4b192089e62642d847ebac3e4d15134c3
  Author: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 06:59:03 2015 +0000

      ixgbe, ixgbevf: Add new mbox API xcast mode

      The limitation of the number of multicast address for VF is not enough
      for the large scale server with SR-IOV feature. IPv6 requires the 
multicast
      MAC address for each IP address to handle the Neighbor Solicitation
      message. We couldn't assign over 30 IPv6 addresses to a single VF.

      This patch introduces the new mailbox API, IXGBE_VF_UPDATE_XCAST_MODE,
      to update multicast mode of VF. This adds 3 modes;
        - NONE     only L2 exact match addresses or Flow Director enabled
        - MULTI    BAM and ROMPE set
        - ALLMULTI BAM, ROMPE and MPE set

      If a guest VF user wants over 30 MAC multicast addresses, set IFF_ALLMULTI
      to request PF to update xcast mode to enable VF multicast promiscuous 
mode.

      On the other hand, enabling VF multicast promiscuous mode may affect
      security and performance in the network of the NIC. Only trusted VF can
      enable multicast promiscuous mode. The behavior of untrusted VF is the
      same as previous version.

      Signed-off-by: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 54011e4db839504791cf8317fc48949c683587d4
  Author: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 06:58:33 2015 +0000

      ixgbe: Add new ndo to trust VF

      Implements the new netdev op to trust VF in ixgbe.

      The administrator can turn on and off VF trusted by ip command which
      supports trust message.
       # ip link set dev eth0 vf 1 trust on
      or
       # ip link set dev eth0 vf 1 trust off

      Send a ping to reset VF on changing the status of trusting.
      VF driver will reconfigure its features on reset.

      Signed-off-by: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6fb3b6b57ae444d7723088656dce86b1be92498d
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Fri Oct 23 14:41:12 2015 +0300

      drivers: net: cpsw: use module_platform_driver

      There is no reasons to probe cpsw from late_initcall level
      and it's not recommended. Hence, use module_platform_driver()
      to register and probe cpsw driver from module_init() level.

      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Acked-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dd461d6aa894761fe67c30ddf81eec0d08be216b
  Author: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 06:57:55 2015 +0000

      if_link: Add control trust VF

      Add netlink directives and ndo entry to trust VF user.

      This controls the special permission of VF user.
      The administrator will dedicatedly trust VF user to use some features
      which impacts security and/or performance.

      The administrator never turn it on unless VF user is fully trusted.

      CC: Sy Jong Choi <sy.jong.choi@xxxxxxxxx>
      Signed-off-by: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
      Acked-by: Greg Rose <gregory.v.rose@xxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5e0724d027f0548511a2165a209572d48fe7a4c8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 22 08:20:46 2015 -0700

      tcp/dccp: fix hashdance race for passive sessions

      Multiple cpus can process duplicates of incoming ACK messages
      matching a SYN_RECV request socket. This is a rare event under
      normal operations, but definitely can happen.

      Only one must win the race, otherwise corruption would occur.

      To fix this without adding new atomic ops, we use logic in
      inet_ehash_nolisten() to detect the request was present in the same
      ehash bucket where we try to insert the new child.

      If request socket was not found, we have to undo the child creation.

      This actually removes a spin_lock()/spin_unlock() pair in
      reqsk_queue_unlink() for the fast path.

      Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2fc4cd52fa7ed86e9d1df94e459b6a2435bfa9c7
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:32 2015 -0600

      i40e: fix unconditional execution of cpu_to_le16()

      The commit 3092e5e4cc79 ("i40e: add little endian conversion for
      checksum") fixed the checksum bug on big-endian architecture.

      But we should not execute cpu_to_le16() unconditionally. Thus, put
      cpu_to_le16() under certain condition.

      Cc: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Cc: Paul M Stillwell Jr <paul.m.stillwell.jr@xxxxxxxxx>
      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0e5229c6c576969bf8f89f8ca74fa7ea355b434e
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:31 2015 -0600

      i40e: clean up local variable initialization

      In both i40e_calc_nvm_checksum() and i40e_update_nvm_checksum(), the
      local variables designated by 'ret_code' are overwritten immediately. As
      such, they should merely be declared.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ed17f7e5d7918adb487debe49fadf57fd2b98d1c
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:30 2015 -0600

      i40evf: clean up local variable initialization

      In i40evf_msix_aq(), the first two lines of rd32() are mainly to clear
      the registers. If we initialize 'val' at this point, it will be
      overwritten immediately. We shall simply discard the return value here.

      When we initialize 'val', we might as well include the mask in one step.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 554f4544afa541b25882cd0ca5fd6b01b4e2ce07
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:28 2015 -0600

      i40e: add missing kernel-doc argument

      The following kernel-doc arguments for their respective functions are
      missing:

      1) @cd_type_cmd_tso_mss for i40e_tso();
      2) @cd_type_cmd_tso_mss for i40e_tsyn();
      3) @tx_ring for i40e_tx_enable_csum().

      Add them all for the kernel-doc requirement.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 69c1d70ab6b5b53ec21919f4f8de84041d3f6cdd
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:27 2015 -0600

      i40evf: add missing kernel-doc argument

      @flush has been missing since the inception of i40evf_irq_enable(). Add
      it for the kernel doc.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a3524e95ac5339e9b65dba2228f3f7efd27648cf
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 12:18:16 2015 +0300

      i40e: re-use %*ph specifier to hexdump a data

      Instead of using a custom approach change the code to use %*ph format
      specifier.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0e320516b280a8cf7258d9d41e7140563dd7c027
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:41 2015 -0400

      i40e/i40evf: Bump i40e to 1.3.46 and i40evf to 1.3.33

      Bump up the version...

      Change-ID: Ib8d501021671ba20250115ed54330e2c182255b7
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit de445b3dc29835ae840f202bc62fd3ae42da12ad
  Author: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:40 2015 -0400

      i40e: Disable VEB bridge mode with SR-IOV failure

      If a call to enable SR-IOV in the kernel failed, we need to disable
      I40E_FLAG_VEB_MODE_ENABLED, so that bridge mode could fall back to
      VEPA, which is a default.

      Change-ID: I12b6f776769506db85b29bea94b9c88d0b5ee65e
      Signed-off-by: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2efaad86b5cdd0f6d70436fa304a567df8a3cf6c
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:39 2015 -0400

      i40e: Fix an incorrect OEM version string

      This patch fixes a problem where the driver output of the OEM
      version string varied from the other tools.  The mask value
      and the order of operations were incorrect, per the original
      change request.  Without this patch, the version string will
      appear incorrect from the driver.

      Change-ID: Ie1ca6485284b4ce3b57e5a99b18b7641617c7ef7
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 58fc3267f151f6facfc94c6982bef09a53bb5219
  Author: Helin Zhang <helin.zhang@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:38 2015 -0400

      i40e: fix inconsistent statuses after a PF reset

      This patch fixes a problem of possibly getting inconsistent flow control
      statuses after a PF reset. Requested_mode was being set with a default
      value during probing, but the initial HW state could be different from
      this mode.

      Change-ID: I772bf07b78616e87086418d4bd87954b66fa17cd
      Signed-off-by: Helin Zhang <helin.zhang@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 40d01366e6dd5ef1cb3505f11b2d208cfa3632f3
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:37 2015 -0400

      i40evf: use correct struct for list manipulation

      Not sure how this compiles at all. Use the correct struct for
      manipulating the VLAN filter list. Without this, the VLAN filter
      list doesn't get processed correctly, and VLAN filters will not
      be re-enabled after any kind of reset.

      Change-ID: Iceff2dc089f303058fb71ecb08419eed471e0e90
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 09603eaa5ca91dd9a318d8722ff5de8feb1e36ab
  Author: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:36 2015 -0400

      i40e: Fix VEB/VEPA bridge mode mismatch issue

      Fix i40e_is_vsi_uplink_mode_veb to check if bridge is actually
      in VEB mode before allowing LB in the add VSI routine, instead of
      unconditionally returning VEB bridge mode.

      Change-ID: I162397b1bdd02367735fe9baaeb51465be2a3ce9
      Signed-off-by: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 10dc0358e802ea60f95432f89c8dd051767fc06f
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:35 2015 -0400

      i40e: fix a bug in debugfs with add/del macaddr

      The new code flow requires us to grab the filter list lock before
      adding/deleting the filter.

      Change-ID: I4eaef508ab4da2d1b2e23f20f2a78d931d5b6aeb
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e7358f54a3954df16d4f87e3cad35063f1c17de5
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:34 2015 -0400

      i40e/i40evf: Add a workaround to drop all flow control frames

      This patch adds a workaround to drop any flow control frames from being
      transmitted from any VSI. FW can still send flow control frames if flow
      control is enabled.

      With this patch in place a malicious VF cannot send flow control or PFC
      packets out on the wire.

      Change-ID: I4303b24e98b93066d2767fec24dfe78be591c277
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1acea4f6ce1b1c0941438aca75dd2e5c6b09db60
  Author: Guillaume Nault <g.nault@xxxxxxxxxxxx>
  Date:   Thu Oct 22 16:57:10 2015 +0200

      ppp: fix pppoe_dev deletion condition in pppoe_release()

      We can't rely on PPPOX_ZOMBIE to decide whether to clear po->pppoe_dev.
      PPPOX_ZOMBIE can be set by pppoe_disc_rcv() even when po->pppoe_dev is
      NULL. So we have no guarantee that (sk->sk_state & PPPOX_ZOMBIE) implies
      (po->pppoe_dev != NULL).
      Since we're releasing a PPPoE socket, we want to release the pppoe_dev
      if it exists and reset sk_state to PPPOX_DEAD, no matter the previous
      value of sk_state. So we can just check for po->pppoe_dev and avoid any
      assumption on sk->sk_state.

      Fixes: 2b018d57ff18 ("pppoe: drop PPPOX_ZOMBIEs in pppoe_release")
      Signed-off-by: Guillaume Nault <g.nault@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6b8dec99865ea906150e963eacbfd037b579ee9
  Author: Li RongQing <roy.qing.li@xxxxxxxxx>
  Date:   Thu Oct 22 11:35:05 2015 +0800

      af_key: fix two typos

      Signed-off-by: Li RongQing <roy.qing.li@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0aaafaabfcba8aa991913cd3280a5dbf7f111a2a
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:50:08 2015 +0200

      sched/core: Add missing lockdep_unpin() annotations

      Luca and Wanpeng reported two missing annotations that led to
      false lockdep complaints. Add the missing annotations.

      Reported-by: Luca Abeni <luca.abeni@xxxxxxxx>
      Reported-by: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Juri Lelli <juri.lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: cbce1a686700 ("sched,lockdep: Employ lock pinning")
      Link: 
http://lkml.kernel.org/r/20151023095008.GY17308@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 20a41fba679d665cdae2808e2b9cae97c073351f
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Oct 21 15:37:05 2015 -0500

      amd-xgbe: Use wmb before updating current descriptor count

      The code currently uses the lightweight dma_wmb barrier before updating
      the current descriptor count. Under heavy load, the Tx cleanup routine
      was seeing the updated current descriptor count before the updated
      descriptor information. As a result, the Tx descriptor was being cleaned
      up before it was used because it was not "owned" by the hardware yet,
      resulting in a Tx queue hang.

      Using the wmb barrier insures that the descriptor is updated before the
      descriptor counter preventing the Tx queue hang. For extra insurance,
      the Tx cleanup routine is changed to grab the current decriptor count on
      entry and uses that initial value in the processing loop rather than
      trying to chase the current value.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Tested-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d2fd719bcb0e83cb39cfee22ee800f98a56eceb3
  Author: Nathan Sullivan <nathan.sullivan@xxxxxx>
  Date:   Wed Oct 21 14:17:04 2015 -0500

      net/phy: micrel: Add workaround for bad autoneg

      Very rarely, the KSZ9031 will appear to complete autonegotiation, but
      will drop all traffic afterwards.  When this happens, the idle error
      count will read 0xFF after autonegotiation completes.  Reset the PHY
      when in that state.

      Signed-off-by: Nathan Sullivan <nathan.sullivan@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b1311807f3d3eb8bef3ccc53127838b3bea3771
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Tue Oct 20 10:28:45 2015 +0200

      ipv4: implement support for NOPREFIXROUTE ifa flag for ipv4 address

      Currently adding a new ipv4 address always cause the creation of the
      related network route, with default metric. When a host has multiple
      interfaces on the same network, multiple routes with the same metric
      are created.

      If the userspace wants to set specific metric on each routes, i.e.
      giving better metric to ethernet links in respect to Wi-Fi ones,
      the network routes must be deleted and recreated, which is error-prone.

      This patch implements the support for IFA_F_NOPREFIXROUTE for ipv4
      address. When an address is added with such flag set, no associated
      network route is created, no network route is deleted when
      said IP is gone and it's up to the user space manage such route.

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2c01ed5d46f0686c52272e09f7d2f5be9f573fd
  Merge: d0ddf98 8832317
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:49:51 2015 +0900

      Merge tag 'powerpc-4.3-5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixes from Michael Ellerman:

       - Revert "Use the POWER8 Micro Partition Prefetch Engine in KVM HV on
         POWER8" from Paul
       - Handle irq_happened flag correctly in off-line loop from Paul
       - Validate rtas.entry before calling enter_rtas() from Vasant

      * tag 'powerpc-4.3-5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc/rtas: Validate rtas.entry before calling enter_rtas()
        powerpc/powernv: Handle irq_happened flag correctly in off-line loop
        powerpc: Revert "Use the POWER8 Micro Partition Prefetch Engine in KVM 
HV on POWER8"

  commit ec3661b42257d9a06cf0d318175623ac7a660113
  Merge: c80dbe0 b72a2b0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 02:49:41 2015 -0700

      Merge branch 'ipv6-overflow-arith'

      Hannes Frederic Sowa says:

      ====================
      overflow-arith: begin to add support for overflow builtins functions

      I add a new header, linux/overflow-arith.h, as the central place to add
      overflow and wrap-around checking functions. The reason I am doing so
      is that it can make use of compiler supported builtin functions which
      can leverage hardware.

      As I need this for a fix in the ipv6 stack, which is also included in
      this series, I propose to add it sooner than later over Davem's net
      tree. This is also the reason why I start slowly with only the one
      function I need at this time.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b72a2b01b686f242028038f630555513c9e4de38
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:32:43 2015 +0200

      ipv6: protect mtu calculation of wrap-around and infinite loop by 
rounding issues

      Raw sockets with hdrincl enabled can insert ipv6 extension headers
      right into the data stream. In case we need to fragment those packets,
      we reparse the options header to find the place where we can insert
      the fragment header. If the extension headers exceed the link's MTU we
      actually cannot make progress in such a case.

      Instead of ending up in broken arithmetic or rounding towards 0 and
      entering an endless loop in ip6_fragment, just prevent those cases by
      aborting early and signal -EMSGSIZE to user space.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79907146fb5b1778035870db895fb2bf64061284
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:32:42 2015 +0200

      overflow-arith: begin to add support for overflow builtin functions

      The idea of the overflow-arith.h header is to collect overflow checking
      functions in one central place.

      If gcc compiler supports the __builtin_overflow_* builtins we use them
      because they might give better performance, otherwise the code falls
      back to normal overflow checking functions.

      The builtin_overflow functions are supported by gcc-5 and clang. The
      matter of supporting clang is to just provide a corresponding
      CC_HAVE_BUILTIN_OVERFLOW, because the specific overflow checking builtins
      don't differ between gcc and clang.

      I just provide overflow_usub function here as I intend this to get merged
      into net, more functions will definitely follow as they are needed.

      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c80dbe04612986fd6104b4a1be21681b113b5ac9
  Author: Andrew Shewmaker <agshew@xxxxxxxxx>
  Date:   Sun Oct 18 21:59:08 2015 -0700

      tcp: allow dctcp alpha to drop to zero

      If alpha is strictly reduced by alpha >> dctcp_shift_g and if alpha is 
less
      than 1 << dctcp_shift_g, then alpha may never reach zero. For example,
      given shift_g=4 and alpha=15, alpha >> dctcp_shift_g yields 0 and alpha
      remains 15. The effect isn't noticeable in this case below cwnd=137, but
      could gradually drive uncongested flows with leftover alpha down to
      cwnd=137. A larger dctcp_shift_g would have a greater effect.

      This change causes alpha=15 to drop to 0 instead of being decrementing by 
1
      as it would when alpha=16. However, it requires one less conditional to
      implement since it doesn't have to guard against subtracting 1 from 0U. A
      decay of 15 is not unreasonable since an equal or greater amount occurs at
      alpha >= 240.

      Signed-off-by: Andrew G. Shewmaker <agshew@xxxxxxxxx>
      Acked-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab997ad408394bcaf7f3015d4c4e38047eaf2ad6
  Author: lucien <lucien.xin@xxxxxxxxx>
  Date:   Fri Oct 23 15:36:53 2015 +0800

      ipv6: fix the incorrect return value of throw route

      The error condition -EAGAIN, which is signaled by throw routes, tells
      the rules framework to walk on searching for next matches. If the walk
      ends and we stop walking the rules with the result of a throw route we
      have to translate the error conditions to -ENETUNREACH.

      Signed-off-by: Xin Long <lucien.xin@xxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d0ddf980d6efdcee6c7a85eb0f27baa6b60eeff6
  Merge: 2c44f4f 55f4129
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:38:00 2015 +0900

      Merge tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Arnd Bergmann:
       "Most of the changes this time are for incorrect device nodes in
        various ways, on on imx, berlin, exynos, ux500, uniphier, omap and
        meson.

        Chen-Yu Tsai now co-maintains mach-sunxi (Allwinner).

        Other bug fixes include
         - a partial revert of a broken tegra gpio patch
         - irq affinity for arm ccn
         - suspend on one Armada 385 machine
         - enable ZONE_DMA to avoid an OMAP crash for over 2GB RAM
         - turning on a regulator on beagleboard-x15 for HDMI
         - making the omap gpmc debug code visible
         - setup of orion network switch
         - a rare build regression for pxa"

      * tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (22 commits)
        ARM: OMAP2+: Fix imprecise external abort caused by bogus SRAM init
        thermal: exynos: Fix register read in TMU
        ARM: OMAP2+: Fix oops with LPAE and more than 2GB of memory
        ARM: tegra: Comment out gpio-ranges properties
        ARM: dts: uniphier: fix IRQ number for devices on PH1-LD6b ref board
        drivers/perf: arm_pmu: avoid CPU device_node reference leak
        bus: arm-ccn: Fix irq affinity setting on CPU migration
        bus: arm-ccn: Handle correctly no-more-cpus case
        ARM: mvebu: correct a385-db-ap compatible string
        ARM: meson6: DTS: Fix wrong reg mapping and IRQ numbers
        MAINTAINERS: Update Allwinner entry and add new maintainer
        ARM: ux500: modify initial levelshifter status
        ARM: pxa: fix pxa3xx DFI lockup hack
        Documentation: ARM: List new omap MMC requirements
        memory: omap-gpmc: dump "before" state before first modification
        memory: omap-gpmc: Fix unselectable debug option for GPMC
        ARM: dts: am57xx-beagle-x15: set VDD_SD to always-on
        ARM: dts: Fix audio card detection on Peach boards
        ARM: EXYNOS: Fix double of_node_put() when parsing child power domains
        ARM: orion: Fix DSA platform device after mvmdio conversion
        ...

  commit f23d538bc24a83c16127c2eb82c9cf1adc2b5149
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Fri Oct 23 00:57:05 2015 -0400

      macvtap: unbreak receiving of gro skb with frag list

      We don't have fraglist support in TAP_FEATURES. This will lead
      software segmentation of gro skb with frag list. Fixes by having
      frag list support in TAP_FEATURES.

      With this patch single session of netperf receiving were restored from
      about 5Gb/s to about 12Gb/s on mlx4.

      Fixes a567dd6252 ("macvtap: simplify usage of tap_features")
      Cc: Vlad Yasevich <vyasevic@xxxxxxxxxx>
      Cc: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c44f4f03574a3754306b5a8a80b9ed38a795104
  Merge: 8a990fb ad355e3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:32:29 2015 +0900

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM bugfixes from Paolo Bonzini:
       "Bug fixes for ARM, mostly 4.3 regressions related to virtual interrupt
        controller changes"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        arm/arm64: KVM: Fix disabled distributor operation
        arm/arm64: KVM: Clear map->active on pend/active clear
        arm/arm64: KVM: Fix arch timer behavior for disabled interrupts
        KVM: arm: use GIC support unconditionally
        KVM: arm/arm64: Fix memory leak if timer initialization fails
        KVM: arm/arm64: Do not inject spurious interrupts

  commit 8a990fb47b4c93653745512eca7d2d210678e6c1
  Merge: 0122835 1904be1
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:24:33 2015 +0900

      Merge tag 'trace-fixes-v4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace

      Pull tracing fixes from Steven Rostedt:
       "Running tests on other changes, the system locked up due to lots of
        warnings.  It was caused by the stack tracer triggering a warning
        about using rcu_dereference() when RCU was not watching.  This can
        happen due to the fact that the stack tracer uses the function tracer
        to check each function, and there are functions that may be called and
        traced when RCU stopped watching.  Namely when a function is called
        just before going idle or to userspace and after RCU stopped watching
        that current CPU.

        The first patch makes sure that RCU is watching when the stack tracer
        uses RCU.  The second patch is to make sure that the stack tracer does
        not get called by functions in NMI, as it's not NMI safe"

      * tag 'trace-fixes-v4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace:
        tracing: Do not allow stack_tracer to record stack in NMI
        tracing: Have stack tracer force RCU to be watching

  commit 0122835a020a9f5c007b3a49ea9b5f1ac68fc7c7
  Merge: 45d80f1 b9b6e4a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:21:55 2015 +0900

      Merge tag 'sound-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

      Pull sound fixes from Takashi Iwai:
       "There is nothing to worry you much, only a few small & stable patches
        are found for usual stuff, HD-audio (a Lenovo laptop quirk, a fix for
        minor error handling) and ASoC (trivial fixes for RT298 and WM
        codecs).

        The only remaining major change is the fix for ASoC SX_TLV control
        that was overseen during refactoring, but the fix itself is trivial
        and safe"

      * tag 'sound-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:
        ASoC: wm8962: mark cache_dirty flag after software reset in pm_resume
        ASoC: rt298: fix wrong setting of gpio2_en
        ASoC: wm8904: Correct number of EQ registers
        ALSA: hda - Fix deadlock at error in building PCM
        ASoC: Add info callback for SX_TLV controls
        ASoC: rt298: correct index default value
        ALSA: hda - Fix inverted internal mic on Lenovo G50-80
        ALSA: hdac: Explicitly add io.h

  commit 45d80f168d2727f60bf1de64536f4ba62f303130
  Merge: a67b20d 56ea37d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:15:20 2015 +0900

      Merge tag 'media/v4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media

      Pull media fixes from Mauro Carvalho Chehab:
       "Some regression fixes and potential security issues:

         - netup_unidvb: fix potential crash when spi is NULL
         - rtl28xxu: fix control message flaws
         - m88ds3103: fix a regression on Kernel 4.2
         - c8sectpfe: fix some issues on this new driver
         - v4l2-flash-led-class: fix a Kbuild dependency
         - si2157 and si2158: check for array boundary when uploading firmware
           files
         - horus3a and lnbh25: fix some building troubles when some options
           aren't selected
         - ir-hix5hd2: drop the use of IRQF_NO_SUSPEND"

      * tag 'media/v4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media:
        [media] m88ds3103: use own reg update_bits() implementation
        [media] rtl28xxu: fix control message flaws
        [media] v4l2-flash-led-class: Add missing VIDEO_V4L2 Kconfig dependency
        [media] netup_unidvb: fix potential crash when spi is NULL
        [media] si2168: Bounds check firmware
        [media] si2157: Bounds check firmware
        [media] ir-hix5hd2: drop the use of IRQF_NO_SUSPEND
        [media] c8sectpfe: fix return of garbage
        [media] c8sectpfe: fix ininitialized error return on firmware load 
failure
        [media] lnbh25: Fix lnbh25_attach() function return type
        [media] horus3a: Fix horus3a_attach() function parameters

  commit a67b20d24c9ed3719146c9a5e95937c38c89e16a
  Merge: 8a70dd2 c50f13f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:08:22 2015 +0900

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "I've been a bit slow gathering these:

         - drm/mst: one mutex leak in a fail path

         - radeon: two oops fixes, one dpm fix

         - i915: one messy set of fixes, where we revert the original fix, and
                 pull back the proper set of fixes from -next on top.

         - nouveau: one fix for an illegal buffer placement.

        Doesn't look too bad, hopefully shouldn't be too much more"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/nouveau/gem: return only valid domain when there's only one
        drm: fix mutex leak in drm_dp_get_mst_branch_device
        drm/amdgpu: add missing dpm check for KV dpm late init
        drm/amdgpu/dpm: don't add pwm attributes if DPM is disabled
        drm/radeon/dpm: don't add pwm attributes if DPM is disabled
        drm/i915: Add primary plane to mask if it's visible
        drm/i915: Move sprite/cursor plane disable to intel_sanitize_crtc()
        drm/i915: Assign hwmode after encoder state readout
        Revert "drm/i915: Add primary plane to mask if it's visible"
        drm/i915: Deny wrapping an userptr into a framebuffer
        drm/i915: Enable DPLL VGA mode before P1/P2 divider write
        drm/i915: Restore lost DPLL register write on gen2-4
        drm/i915: Flush pipecontrol post-sync writes
        drm/i915: Fix kerneldoc for i915_gem_shrink_all

  commit b67de018b37a97548645a879c627d4188518e907
  Author: Joseph Qi <joseph.qi@xxxxxxxxxx>
  Date:   Thu Oct 22 13:32:29 2015 -0700

      ocfs2/dlm: unlock lockres spinlock before dlm_lockres_put

      dlm_lockres_put will call dlm_lockres_release if it is the last
      reference, and then it may call dlm_print_one_lock_resource and
      take lockres spinlock.

      So unlock lockres spinlock before dlm_lockres_put to avoid deadlock.

      Signed-off-by: Joseph Qi <joseph.qi@xxxxxxxxxx>
      Cc: Mark Fasheh <mfasheh@xxxxxxx>
      Cc: Joel Becker <jlbec@xxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit bb387002693ed28b2bb0408c5dec65521b71e5f1
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Thu Oct 22 13:32:27 2015 -0700

      fault-inject: fix inverted interval/probability values in printk

      interval displays the probability and vice versa.

      Fixes: 6adc4a22f20bb ("fault-inject: add ratelimit option")
      Acked-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3f181b4d8652f7bcd7e9932c7307b8ecd4d87cf6
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 13:32:24 2015 -0700

      lib/Kconfig.debug: disable -Wframe-larger-than warnings with KASAN=y

      When the kernel compiled with KASAN=y, GCC adds redzones for each
      variable on stack.  This enlarges function's stack frame and causes:

        'warning: the frame size of X bytes is larger than Y bytes'

      The worst case I've seen for now is following:

         ../net/wireless/nl80211.c: In function `nl80211_send_wiphy':
         ../net/wireless/nl80211.c:1731:1: warning: the frame size of 5448 
bytes is larger than 2048 bytes [-Wframe-larger-than=]

      That kind of warning becomes useless with KASAN=y.  It doesn't
      necessarily indicate that there is some problem in the code, thus we
      should turn it off.

      (The KASAN=y stack size in increased from 16k to 32k for this reason)

      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Acked-by: Abylay Ospan <aospan@xxxxxxxx>
      Cc: Andi Kleen <andi@xxxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <m.chehab@xxxxxxxxxxx>
      Cc: Kozlov Sergey <serjk@xxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 296291cdd1629c308114504b850dc343eabc2782
  Author: Jan Kara <jack@xxxxxxxx>
  Date:   Thu Oct 22 13:32:21 2015 -0700

      mm: make sendfile(2) killable

      Currently a simple program below issues a sendfile(2) system call which
      takes about 62 days to complete in my test KVM instance.

              int fd;
              off_t off = 0;

              fd = open("file", O_RDWR | O_TRUNC | O_SYNC | O_CREAT, 0644);
              ftruncate(fd, 2);
              lseek(fd, 0, SEEK_END);
              sendfile(fd, fd, &off, 0xfffffff);

      Now you should not ask kernel to do a stupid stuff like copying 256MB in
      2-byte chunks and call fsync(2) after each chunk but if you do, sysadmin
      should have a way to stop you.

      We actually do have a check for fatal_signal_pending() in
      generic_perform_write() which triggers in this path however because we
      always succeed in writing something before the check is done, we return
      value > 0 from generic_perform_write() and thus the information about
      signal gets lost.

      Fix the problem by doing the signal check before writing anything.  That
      way generic_perform_write() returns -EINTR, the error gets propagated up
      and the sendfile loop terminates early.

      Signed-off-by: Jan Kara <jack@xxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 47aee4d8e314384807e98b67ade07f6da476aa75
  Author: Minchan Kim <minchan@xxxxxxxxxx>
  Date:   Thu Oct 22 13:32:19 2015 -0700

      thp: use is_zero_pfn() only after pte_present() check

      Use is_zero_pfn() on pteval only after pte_present() check on pteval
      (It might be better idea to introduce is_zero_pte() which checks
      pte_present() first).

      Otherwise when working on a swap or migration entry and if pte_pfn's
      result is equal to zero_pfn by chance, we lose user's data in
      __collapse_huge_page_copy().  So if you're unlucky, the application
      segfaults and finally you could see below message on exit:

      BUG: Bad rss-counter state mm:ffff88007f099300 idx:2 val:3

      Fixes: ca0984caa823 ("mm: incorporate zero pages into transparent huge 
pages")
      Signed-off-by: Minchan Kim <minchan@xxxxxxxxxx>
      Reviewed-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Acked-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Acked-by: Vlastimil Babka <vbabka@xxxxxxx>
      Cc: Hugh Dickins <hughd@xxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>      [4.1+]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit b8fa0efa01109e294e9be610465c324f771cb5ba
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 13:32:16 2015 -0700

      mailmap: update Javier Martinez Canillas' email

      The get_maintainer script still reports my old Collabora email based on
      old commits but that address no longer exist so update mailmap to report
      my current email and avoid people sending to the old address.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 41192a2d6a7f4cd6af9fc2f8edbbf24b2694f2f6
  Author: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
  Date:   Thu Oct 22 13:32:13 2015 -0700

      MAINTAINERS: add Sergey as zsmalloc reviewer

      Nominate myself as a zsmalloc reviewer.

      Signed-off-by: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
      Cc: Minchan Kim <minchan@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 67a2e213e7e937c41c52ab5bc46bf3f4de469f6e
  Author: Rohit Vaswani <rvaswani@xxxxxxxxxxxxxx>
  Date:   Thu Oct 22 13:32:11 2015 -0700

      mm: cma: fix incorrect type conversion for size during dma allocation

      This was found during userspace fuzzing test when a large size dma cma
      allocation is made by driver(like ion) through userspace.

        show_stack+0x10/0x1c
        dump_stack+0x74/0xc8
        kasan_report_error+0x2b0/0x408
        kasan_report+0x34/0x40
        __asan_storeN+0x15c/0x168
        memset+0x20/0x44
        __dma_alloc_coherent+0x114/0x18c

      Signed-off-by: Rohit Vaswani <rvaswani@xxxxxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 5211613978cb7353a3237e4372958c0e7514683f
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Oct 22 13:32:08 2015 -0700

      kmod: don't run async usermode helper as a child of kworker thread

      call_usermodehelper_exec_sync() does fork() + wait() with "unignored"
      SIGCHLD.  What we have missed is that this worker thread can have other
      children previously forked by call_usermodehelper_exec_work() without
      UMH_WAIT_PROC.  If such a child exits in between it becomes a zombie
      because auto-reaping only works if SIGCHLD is ignored, and nobody can
      reap it (unless/until this worker thread exits too).

      Change the !UMH_WAIT_PROC case to use CLONE_PARENT.

      Note: this is only first step.  All PF_KTHREAD tasks, even created by
      kernel_thread() should have ->parent == kthreadd by default.

      Fixes: bb304a5c6fc63d8506c ("kmod: handle UMH_WAIT_PROC from system 
unbound workqueue")
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Acked-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 80fcd45ee05b4ef05e61d37a5ffb70a67095a9f6
  Merge: 4ba792e f06cff7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Oct 23 10:25:57 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - The default for callchains is back to 'callee' when --children is not 
used.
          (Namhyung Kim)

        - Move the 'use_offset' option to the right place where the annotate 
code
          expects it to be to be able to properly handle it. (Namhyung Kim)

        - Don't die when an unknown 'annotate' option is found in the perf 
config
          file (usually ~/.perfconfig), just warn the user. (Arnaldo Carvalho 
de Melo)

      Infrastructure changes:

        - Support %ps/%pS in libtraceevent. (Scott Wood)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3f84ccf62c9fdd39d2cb1caa725663191c817b65
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Fri Oct 16 09:46:12 2015 +0200

      pinctrl: sunxi: Add irq pinmuxing to sun6i "r" pincontroller

      Add pinmuxing for external interrupt functionality through the
      sun6i "r" pincontroller.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 8297992cad599e8a214e65959ccdde51738fe5a2
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Fri Oct 16 09:46:11 2015 +0200

      pinctrl: sunxi: Fix irq_of_xlate for the r_pio pinctrl block

      The r_pio gpio / pin controller has a pin_base of non 0, we need to
      adjust for this before calling sunxi_pinctrl_desc_find_function_by_pin.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit cb866e3298cd7412503fc7e2c265753c853fab9d
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Fri Oct 23 07:52:58 2015 +0200

      xfrm: Increment statistic counter on inner mode error

      Increment the LINUX_MIB_XFRMINSTATEMODEERROR statistic counter
      to notify about dropped packets if we fail to fetch a inner mode.

      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit ea673a4d3a337184f3c314dcc6300bf02f39e077
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Fri Oct 23 07:32:39 2015 +0200

      xfrm4: Reload skb header pointers after calling pskb_may_pull.

      A call to pskb_may_pull may change the pointers into the packet,
      so reload the pointers after the call.

      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit 1a14f1e5550a341f76e5c8f596e9b5f8a886dfbc
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Fri Oct 23 07:31:23 2015 +0200

      xfrm4: Fix header checks in _decode_session4.

      We skip the header informations if the data pointer points
      already behind the header in question for some protocols.
      This is because we call pskb_may_pull with a negative value
      converted to unsigened int from pskb_may_pull in this case.
      Skipping the header informations can lead to incorrect policy
      lookups, so fix it by a check of the data pointer position
      before we call pskb_may_pull.

      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit b9b6e4ac2da74995cb7ac9394854a5fd563014c2
  Merge: d289619 f69eccc
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Fri Oct 23 06:56:56 2015 +0200

      Merge tag 'asoc-fix-v4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

      ASoC: Fixes for v4.3

      A bunch of driver fixes plus one core fix which fixes problems with
      misreporting values from _SX controls following a recent refactoring.
      This had gone unnoticed as such controls are quite rare.

  commit e33d4f13d21e9f604194ebc8730077ff39916c50
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Wed Oct 21 11:48:25 2015 -0400

      xfrm: Fix unaligned access to stats in copy_to_user_state()

      On sparc, deleting established SAs (e.g., by restarting ipsec)
      results in unaligned access messages via xfrm_del_sa ->
      km_state_notify -> xfrm_send_state_notify().

      Even though struct xfrm_usersa_info is aligned on 8-byte boundaries,
      netlink attributes are fundamentally only 4 byte aligned, and this
      cannot be changed for nla_data() that is passed up to userspace.
      As a result, the put_unaligned() macro needs to be used to
      set up potentially unaligned fields such as the xfrm_stats in
      copy_to_user_state()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit fc4099f17240767554ff3a73977acb78ef615404
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Thu Oct 22 18:17:16 2015 -0700

      openvswitch: Fix egress tunnel info.

      While transitioning to netdev based vport we broke OVS
      feature which allows user to retrieve tunnel packet egress
      information for lwtunnel devices.  Following patch fixes it
      by introducing ndo operation to get the tunnel egress info.
      Same ndo operation can be used for lwtunnel devices and compat
      ovs-tnl-vport devices. So after adding such device operation
      we can remove similar operation from ovs-vport.

      Fixes: 614732eaa12d ("openvswitch: Use regular VXLAN net_device device").
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c0c050c58d840994ba842ad1c338a98e7c12b764
  Author: Michael Chan <mchan@xxxxxxxxxxxx>
  Date:   Thu Oct 22 16:01:17 2015 -0400

      bnxt_en: New Broadcom ethernet driver.

      Broadcom ethernet driver for the new family of NetXtreme-C/E
      ethernet devices.

      v5:
        - Removed empty blank lines at end of files (noted by David Miller).
        - Moved busy poll helper functions to bnxt.h to at least make the
          .c file look less cluttered with #ifdef (noted by Stephen Hemminger).

      v4:
        - Broke up 2 long message strings with "\n" (suggested by John Linville)
        - Constify an array of strings (suggested by Stephen Hemminger)
        - Improve bnxt_vf_pciid() (suggested by Stephen Hemminger)
        - Use PCI_VDEVICE() to populate pci_device_id table for more compact
          source.

      v3:
        - Fixed 2 more sparse warnings.
        - Removed some unused structures in .h files.

      v2:
        - Fixed all kbuild test robot reported warnings.
        - Fixed many of the checkpatch.pl errors and warnings.
        - Fixed the Kconfig description (noted by Dmitry Kravkov).

      Acked-by: Eddie Wai <eddie.wai@xxxxxxxxxxxx>
      Acked-by: Jeffrey Huang <huangjw@xxxxxxxxxxxx>
      Signed-off-by: Prashant Sreedharan <prashant@xxxxxxxxxxxx>
      Signed-off-by: Michael Chan <mchan@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a31adae0b2ab70127b2d5faa6a685e2ea70cc1b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 16:54:31 2015 -0400

      net: dsa: mv88e6xxx: remove debugfs interface

      It is preferable to have a common debugfs interface for DSA or switchdev
      instead of a driver specific one. Thus remove the mv88e6xxx debug code.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c472b9b391ecf9011d383956b322e72593d87b2
  Merge: 8566b86 e9e5366
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 19:02:08 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/net-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-22

      This series contains fixes to i40e only.

      Jesse provides two small fixes for i40e, first fixes counters that were
      being displayed incorrectly due to indexing beyond the array of strings
      when printing stats.  Then fixed the fact that the driver was printing
      a message about not being able to assign VMDq because a lack of MSI-X
      vectors, when it was not true.  It was due to a line missing that
      initialized a variable.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8566b86ab9f0f45bc6f7dd422b21de9d0cf5415a
  Author: Jorgen Hansen <jhansen@xxxxxxxxxx>
  Date:   Thu Oct 22 08:25:25 2015 -0700

      VSOCK: Fix lockdep issue.

      The recent fix for the vsock sock_put issue used the wrong
      initializer for the transport spin_lock causing an issue when
      running with lockdep checking.

      Testing: Verified fix on kernel with lockdep enabled.

      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Signed-off-by: Jorgen Hansen <jhansen@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9e53662d8130dd950885e37dc1d97008e1283f9
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Oct 2 17:57:21 2015 -0700

      i40e: fix annoying message

      The driver was printing a message about not being able
      to assign VMDq because of a lack of MSI-X vectors.

      This was because a line was missing that initialized a variable,
      simply a merge error.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 74a6c66565f5f4eda4aaae53e2e325deeedeaca2
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Oct 2 19:09:34 2015 -0700

      i40e: fix stats offsets

      The code was setting up stats that were not being initialized.
      This caused several counters to be displayed incorrectly, due
      to indexing beyond the array of strings when printing stats.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f69eccc4b248ce53b1b830034babd0a795d5763c
  Merge: ab5cf7d f8f2dc4 3419871 97aff2c 4eb0f7a
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Oct 23 08:44:14 2015 +0900

      Merge remote-tracking branches 'asoc/fix/rt298', 'asoc/fix/sx', 
'asoc/fix/wm8904' and 'asoc/fix/wm8962' into asoc-linus

  commit ab5cf7df4578e46f6587c589f0c4d58c7c9a8753
  Merge: 7379047 79828b4
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Oct 23 08:44:13 2015 +0900

      Merge remote-tracking branch 'asoc/fix/rt5645' into asoc-linus

  commit f06cff7c59b6b252d667435d7baad48687b41002
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 22 18:10:52 2015 -0300

      perf annotate: Don't die() when finding an invalid config option

      The perf_config() infrastructure we inherited from git calls die() when
      the provided config callback returns -1, meaning some key in a config
      section is unexpected, that seems ok for a stdio based tool, but in
      --tui we end up messing up the output, so just tell the user about the
      error, wait for a keystroke and return 0, being more resilient and
      proceeding with what we managed to parse.

      That die() needs to die, tho :-)

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-pqtsffh2kwr5mwm4qg9kgotu@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 990995bad13c2bcf074f87236d1a6c5e09bd5eff
  Author: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
  Date:   Tue Oct 20 19:45:38 2015 +0800

      EDAC: Fix PAGES_TO_MiB macro misuse

      The PAGES_TO_MiB macro is used for unit conversion but the
      trace_mc_event() tracepoint expects a page address. Fix that.

      Signed-off-by: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445341538-24271-1-git-send-email-tanxiaojun@xxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 464b01a48eb6be48bc58332e029760b5e40ea119
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 22 16:44:17 2015 -0300

      perf ui tui: Register the error callbacks before initializing the widgets

      I.e. we want to tell the user about errors found during, for instance,
      the ui_browser initialization, so that a call to ui__warning() appears
      as a window waiting for a key to be pressed.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ederrwizcl6mfz10vfobl5qq@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 39ff7cdb5a5e6b75dd049255615828c6531cd109
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Oct 21 11:57:20 2015 +0900

      perf annotate: Fix 'annotate.use_offset' config variable usage

      The annotate__configs should be sorted so that it can use bsearch(3).

      However commit 0c4a5bcea460 ("perf annotate: Display total number of
      samples with --show-total-period") added a new config item at the end.
      This resulted in the 'annotate.use_offset' config variable cannot be
      found and perf terminated like below:

        $ perf report
        bad config file line 6 in ~/.perfconfig

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Martin Liška <mliska@xxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Taeung Song <treeze.taeung@xxxxxxxxx>
      Fixes: 0c4a5bcea460 ("perf annotate: Display total number of samples with 
--show-total-period")
      Link: 
http://lkml.kernel.org/r/1445396240-3428-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 76a26549eb367f683fbb394b7246bef5dc665f8c
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 23:28:32 2015 +0900

      perf tools: Improve call graph documents and help messages

      The --call-graph option is complex so we should provide better guide for
      users.  Also change help message to be consistent with config option
      names.  Now perf top will show help like below:

        $ perf top --call-graph
          Error: option `call-graph' requires a value

         Usage: perf top [<options>]

            --call-graph 
<record_mode[,record_size],print_type,threshold[,print_limit],order,sort_key[,branch]>
                 setup and enables call-graph (stack chain/backtrace):

                record_mode:    call graph recording mode (fp|dwarf|lbr)
                record_size:    if record_mode is 'dwarf', max size of stack 
recording (<bytes>)
                                default: 8192 (bytes)
                print_type:     call graph printing style 
(graph|flat|fractal|none)
                threshold:      minimum call graph inclusion threshold 
(<percent>)
                print_limit:    maximum number of call graph entry (<number>)
                order:          call graph order (caller|callee)
                sort_key:       call graph sort key (function|address)
                branch:         include last branch info to call graph (branch)

                Default: fp,graph,0.5,caller,function

      Requested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445524112-5201-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 792aeafa8ed08e5e18fb66ab93b470f78e619f75
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 16:45:46 2015 +0900

      perf tools: Defaults to 'caller' callchain order only if --children is 
enabled

      The caller callchain order is useful with --children option since it can
      show 'overview' style output, but other commands which don't use
      --children feature like 'perf script' or even 'perf report/top' without
      --children are better to keep callee order.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Acked-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445499946-29817-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a2c10d39af49b00514f7cc7b750757fcc2174f0c
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 15:28:49 2015 +0900

      perf top: Support call-graph display options also

      Currently 'perf top --call-graph' option is same as 'perf record'.  But
      'perf top' also need to receive display options in 'perf report'.  To do
      that, change parse_callchain_report_opt() to allow record options too.

      Now perf top can receive display options like below:

        $ perf top --call-graph
          Error: option `call-graph' requires a value

         Usage: perf top [<options>]

              --call-graph
                
<mode[,dump_size],output_type,min_percent[,print_limit],call_order[,branch]>
                           setup and enables call-graph (stack chain/backtrace)
                           recording: fp dwarf lbr, output_type (graph, flat,
                     fractal, or none), min percent threshold, optional
                     print limit, callchain order, key (function or
                     address), add branches

        $ perf top --call-graph callee,graph,fp

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445495330-25416-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 21cf62847d29392e51c37460856d3c3c57769c5e
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 15:28:48 2015 +0900

      perf tools: Move callchain help messages to callchain.h

      These messages will be used by 'perf top' in the next patch.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445495330-25416-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b6bd9c7d543ac160646a667470158c5da319a85c
  Author: Scott Wood <scottwood@xxxxxxxxxxxxx>
  Date:   Mon Aug 31 16:16:37 2015 -0500

      tools lib traceevent: Support %ps/%pS

      Commits such as 65dd297ac25565 ("xfs: %pF is only for function
      pointers") caused a regression because pretty_print() didn't support
      %ps/%pS.  The current %pf/%pF implementation in pretty_print() is what
      %ps/%pS is supposed to do, so use the same code for %ps/%pS.

      Addressing the incorrect %pf/%pF implementation is beyond the scope of
      this patch.

      Signed-off-by: Scott Wood <scottwood@xxxxxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Dave Chinner <david@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150831211637.GA12848@xxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 56ea37da3b93dfe46cb5c3ee0ee4cc44229ece47
  Author: Antti Palosaari <crope@xxxxxx>
  Date:   Sat Oct 3 18:35:14 2015 -0300

      [media] m88ds3103: use own reg update_bits() implementation

      Device stopped to tuning some channels after regmap conversion.
      Reason is that regmap_update_bits() works a bit differently for
      partially volatile registers than old homemade routine. Return
      back to old routine in order to fix issue.

      Fixes: 478932b16052f5ded74685d096ae920cd17d6424

      Cc: <stable@xxxxxxxxxx> # 4.2+
      Reported-by: Mark Clarkstone <hello@xxxxxxxxxxxxxxxxxxxx>
      Tested-by: Mark Clarkstone <hello@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Antti Palosaari <crope@xxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit d18ca5b7ceca0e9674cb4bb2ed476b0fcbb23ba2
  Author: Antti Palosaari <crope@xxxxxx>
  Date:   Tue Oct 6 00:22:23 2015 -0300

      [media] rtl28xxu: fix control message flaws

      Add lock to prevent concurrent access for control message as control
      message function uses shared buffer. Without the lock there may be
      remote control polling which messes the buffer causing IO errors.
      Increase buffer size and add check for maximum supported message
      length.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=103391
      Fixes: c56222a6b25c ("[media] rtl28xxu: move usb buffers to state")

      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+
      Signed-off-by: Antti Palosaari <crope@xxxxxx>

  commit 17f38822038ba5d4dba79b72fd111bbf64173063
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Fri Oct 2 06:19:15 2015 -0300

      [media] v4l2-flash-led-class: Add missing VIDEO_V4L2 Kconfig dependency

      Fixes the following randconfig problem:

      drivers/built-in.o: In function `v4l2_flash_release':
      (.text+0x12204f): undefined reference to `v4l2_async_unregister_subdev'
      drivers/built-in.o: In function `v4l2_flash_release':
      (.text+0x122057): undefined reference to `v4l2_ctrl_handler_free'
      drivers/built-in.o: In function `v4l2_flash_close':
      v4l2-flash-led-class.c:(.text+0x12208f): undefined reference to 
`v4l2_fh_is_singular'
      v4l2-flash-led-class.c:(.text+0x1220c8): undefined reference to 
`__v4l2_ctrl_s_ctrl'
      drivers/built-in.o: In function `v4l2_flash_open':
      v4l2-flash-led-class.c:(.text+0x12227f): undefined reference to 
`v4l2_fh_is_singular'
      drivers/built-in.o: In function `v4l2_flash_init_controls':
      v4l2-flash-led-class.c:(.text+0x12274e): undefined reference to 
`v4l2_ctrl_handler_init_class'
      v4l2-flash-led-class.c:(.text+0x122797): undefined reference to 
`v4l2_ctrl_new_std_menu'
      v4l2-flash-led-class.c:(.text+0x1227e0): undefined reference to 
`v4l2_ctrl_new_std'
      v4l2-flash-led-class.c:(.text+0x122826): undefined reference to 
`v4l2_ctrl_handler_setup'
      v4l2-flash-led-class.c:(.text+0x122839): undefined reference to 
`v4l2_ctrl_handler_free'
      drivers/built-in.o: In function `v4l2_flash_init':
      (.text+0x1228e2): undefined reference to `v4l2_subdev_init'
      drivers/built-in.o: In function `v4l2_flash_init':
      (.text+0x12293b): undefined reference to `v4l2_async_register_subdev'
      drivers/built-in.o: In function `v4l2_flash_init':
      (.text+0x122949): undefined reference to `v4l2_ctrl_handler_free'
      drivers/built-in.o:(.rodata+0x20ef8): undefined reference to 
`v4l2_subdev_queryctrl'
      drivers/built-in.o:(.rodata+0x20f10): undefined reference to 
`v4l2_subdev_querymenu'

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Cc: Sakari Ailus <sakari.ailus@xxxxxx>
      Cc: Hans Verkuil <hans.verkuil@xxxxxxxxx>

  commit 9d2b064c0ae42ad93b2a0c7da05daef312c96bcc
  Author: Abylay Ospan <aospan@xxxxxxxx>
  Date:   Fri Sep 25 04:56:21 2015 -0300

      [media] netup_unidvb: fix potential crash when spi is NULL

      Signed-off-by: Abylay Ospan <aospan@xxxxxxxx>
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit 47810b4341ac9d2f558894bc5995e6fa2a1298f9
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:10:09 2015 -0300

      [media] si2168: Bounds check firmware

      When reading the firmware and sending commands, the length must
      be bounds checked to avoid overrunning the size of the command
      buffer and smashing the stack if the firmware is not in the expected
      format:

      si2168 11-0064: found a 'Silicon Labs Si2168-B40'
      si2168 11-0064: downloading firmware from file 
'dvb-demod-si2168-b40-01.fw'
      si2168 11-0064: firmware download failed -95
      Kernel panic - not syncing: stack-protector: Kernel stack is corrupted 
in: ffffffffa085708f

      Add the proper check.

      Cc: stable@xxxxxxxxxx
      Reported-by: Stuart Auchterlonie <sauchter@xxxxxxxxxx>
      Reviewed-by: Antti Palosaari <crope@xxxxxx>
      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit a828d72df216c36e9c40b6c24dc4b17b6f7b5a76
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:10:10 2015 -0300

      [media] si2157: Bounds check firmware

      When reading the firmware and sending commands, the length
      must be bounds checked to avoid overrunning the size of the command
      buffer and smashing the stack if the firmware is not in the
      expected format. Add the proper check.

      Cc: stable@xxxxxxxxxx
      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit 54bec3970cb5351d08866af1ea8b0787edd7ede3
  Author: Sudeep Holla <sudeep.holla@xxxxxxx>
  Date:   Mon Sep 21 12:47:11 2015 -0300

      [media] ir-hix5hd2: drop the use of IRQF_NO_SUSPEND

      This driver doesn't claim the IR transmitter to be wakeup source. It
      even disables the clock and the IR during suspend-resume cycle.

      This patch removes yet another misuse of IRQF_NO_SUSPEND.

      Cc: Patrice Chotard <patrice.chotard@xxxxxx>
      Cc: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Cc: Guoxiong Yan <yanguoxiong@xxxxxxxxxx>
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Acked-by: Zhangfei Gao <zhangfei.gao@xxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit 51a3ac5f4dc45120c78fad51096d989914801457
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 17 07:12:54 2015 -0300

      [media] c8sectpfe: fix return of garbage

      The variable err was never initialized, that means we had been checking
      a garbage value in the for loop. Moreover if the segment is not outside
      the firmware file then also we have been returning the garbage.
      Initialize it to 0 so that on success we return the value and no need to
      check in the for loop also as it is initially 0 and whenever that value
      changes we have done a break from the loop.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit bf447221a8791d0f5dd28b19336e31e48f05f04a
  Author: Colin Ian King <colin.king@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 08:42:27 2015 -0300

      [media] c8sectpfe: fix ininitialized error return on firmware load failure

      static analysis with cppcheck detected the following error:

      [drivers/media/platform/sti/c8sectpfe/c8sectpfe-core.c:1210]:
        (error) Uninitialized variable: ret

      ret is never initialised, so garbage is being returned. Instead
      return the error return from the call of request_firmware_nowait

      Signed-off-by: Colin Ian King <colin.king@xxxxxxxxxxxxx>

  commit a9c4e5cfebc44e6caa6b9299af5603f5c2da0c33
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 19:45:21 2015 -0300

      [media] lnbh25: Fix lnbh25_attach() function return type

      If CONFIG_DVB_LNBH25 is disabled, a stub static inline function is
      defined that just prints a warning about the driver being disabled
      but the function return type was wrong which caused a build error.

      Fixes: e025273b86fb ("[media] lnbh25: LNBH25 SEC controller driver")

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>

  commit ebdd4b7e6a0dd86736eeb6b9e60b361ef64ccc30
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 19:39:22 2015 -0300

      [media] horus3a: Fix horus3a_attach() function parameters

      If CONFIG_DVB_HORUS3A is disabled a stub static inline function is
      defined that just prints a warning about the driver being disabled
      but the function parameters were wrong which caused a build error.

      Fixes: a5d32b358254f ("[media] horus3a: Sony Horus3A DVB-S/S2 tuner 
driver")

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>

  commit 4db7062c9a8bff92137bb2f381d81dd1bb5b7872
  Author: Sudeep Holla <sudeep.holla@xxxxxxx>
  Date:   Fri Oct 16 17:01:36 2015 +0100

      ARM: dts: fix gpio-keys wakeup-source property

      The keyboard driver for GPIO buttons(gpio-keys) checks for one of the
      two boolean properties to enable gpio buttons as wakeup source:
      1. "wakeup-source" or
      2. the legacy "gpio-key,wakeup"

      However juno, ste-snowball and emev2-kzm9d dts file have a undetected
      "wakeup" property to indictate the wakeup source.

      This patch fixes it by making use of "wakeup-source" property.

      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Acked-by: Simon Horman <horms@xxxxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit 6bccb4955c1cc6335d76a9cad87b97c7b1457b8d
  Merge: 9299b24 58c9c87
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Thu Oct 22 17:30:08 2015 +0100

      Merge branch 'irq/for-arm' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      This is an incremental fix for a patch previously pulled from tip
      irq/for-arm.

      * 'irq/for-arm' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        genirq: Make the cpuhotplug migration code less noisy

  commit 0db65fcfcded76fe4f74e3ca9f4e2baf67b683ef
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Thu Oct 22 14:15:58 2015 +0200

      qmi_wwan: add Sierra Wireless MC74xx/EM74xx

      New device IDs shamelessly lifted from the vendor driver.

      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 199c6550694dcdf5f568ea9db6fe2b46d14e4fa5
  Merge: d46a9d6 ca064bd
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:46:05 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec

      Steffen Klassert says:

      ====================
      pull request (net): ipsec 2015-10-22

      1) Fix IPsec pre-encap fragmentation for GSO packets.
         From Herbert Xu.

      2) Fix some header checks in _decode_session6.
         We skip the header informations if the data pointer points
         already behind the header in question for some protocols.
         This is because we call pskb_may_pull with a negative value
         converted to unsigened int from pskb_may_pull in this case.
         Skipping the header informations can lead to incorrect policy
         lookups. From Mathias Krause.

      3) Allow to change the replay threshold and expiry timer of a
         state without having to set other attributes like replay
         counter and byte lifetime. Changing these other attributes
         may break the SA. From Michael Rossberg.

      4) Fix pmtu discovery for local generated packets.
         We may fail dispatch to the inner address family.
         As a reault, the local error handler is not called
         and the mtu value is not reported back to userspace.

      Please pull or let me know if there are problems.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 998eb8079f03f44d4017d7941c082b4a57eb2db8
  Merge: e9829b9 1a49a2f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:39:07 2015 -0700

      Merge branch 'dsa-port_fdb_dump'

      Vivien Didelot says:

      ====================
      net: dsa: implement port_fdb_dump in drivers

      Not all switch chips provide a Get Next kind of operation to dump FDB 
entries.
      It is preferred to let the driver handle the dump operation the way it 
works
      best for the chip. Thus, drop port_fdb_getnext and implement the 
port_fdb_dump
      operation in DSA, which pushes the switchdev FDB dump callback down to the
      drivers. mv88e6xxx is the only driver affected and is updated accordingly.

      v3 -> v4: fix rejects on latest net-next

      v2 -> v3: opencode switchdev_obj_dump_cb_t to avoid multiple typedef;
                use ether_addr_copy in fdb_dump

      v1 -> v2: fix a few "return err" instead of "goto unlock" in mv88e6xxx.c
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1a49a2fbf8c15d63a0b5e60d935ec7d5d3d07fd5
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:43 2015 -0400

      net: dsa: remove port_fdb_getnext

      No driver implements port_fdb_getnext anymore, and port_fdb_dump is
      preferred anyway, so remove this function from DSA.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c49471b6695c5bac0d36c30ca07b8c311cd7cc3
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:42 2015 -0400

      net: dsa: mv88e6xxx: remove port_fdb_getnext

      Now that port_fdb_dump is implemented and even simpler, get rid of
      port_fdb_getnext.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f33475bd678e3c052f585d5660373ee7e957c742
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:41 2015 -0400

      net: dsa: mv88e6xxx: implement port_fdb_dump

      Implement the port_fdb_dump DSA operation.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b0e1a692ff17a37031af03599fbb3666e82c777b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:40 2015 -0400

      net: dsa: mv88e6xxx: write MAC outside of ATU Get Next code

      There is no need to write the MAC address before every Get Next
      operation, since ATU MAC registers are not cleared between calls.

      Move the _mv88e6xxx_atu_mac_write call outside of _mv88e6xxx_atu_getnext
      so future code could call ATU Get Next multiple times and save a few
      register access.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36d04ba127eeed94b003155129c7509a2139b474
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:39 2015 -0400

      net: dsa: mv88e6xxx: write VID outside of VTU Get Next code

      There is no need to write the VLAN ID before every Get Next operation,
      since the VTU VID register is not cleared between calls.

      Move the VID write call in a _mv88e6xxx_vtu_vid_write function outside
      of _mv88e6xxx_vtu_getnext so future code could call VTU Get Next
      multiple times and save a few register accesses.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ea70ba980666cffacb57d90d867b2c7952d90700
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:38 2015 -0400

      net: dsa: add port_fdb_dump function

      Not all switch chips support a Get Next operation to iterate on its FDB.
      So add a more simple port_fdb_dump function for them.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d46a9d678e4c9fac1e968d0593e4dba683389324
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 08:42:22 2015 -0700

      net: ipv6: Dont add RT6_LOOKUP_F_IFACE flag if saddr set

      741a11d9e410 ("net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is set")
      adds the RT6_LOOKUP_F_IFACE flag to make device index mismatch fatal if
      oif is given. Hajime reported that this change breaks the Mobile IPv6
      use case that wants to force the message through one interface yet use
      the source address from another interface. Handle this case by only
      adding the flag if oif is set and saddr is not set.

      Fixes: 741a11d9e410 ("net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is 
set")
      Cc: Hajime Tazaki <thehajime@xxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9829b9745b6e1683fd2a90842da498a2197299e
  Merge: c7fc9eb e5a9f8d
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:28:41 2015 -0700

      Merge tag 'mac80211-next-for-davem-2015-10-21' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

      Johannes Berg says:

      ====================
      Here's another set of patches for the current cycle:
       * I merged net-next back to avoid a conflict with the
       * cfg80211 scheduled scan API extensions
       * preparations for better scan result timestamping
       * regulatory cleanups
       * mac80211 statistics cleanups
       * a few other small cleanups and fixes
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 92a93fd5bbe7dbe0ee7322c92e44a820f62bef90
  Merge: 4ef7ea9 c96356a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:23:25 2015 -0700

      Merge branch 'isdn-null-deref'

      Karsten Keil says:

      ====================
      Fix potential NULL pointer access and memory leak in ISDN layer2 functions

      Insu Yun did brinup the issue with not checking the skb_clone() return
      value in the layer2 I-frame ull functions.
      This series fix the issue in a way which avoid protocol violations/data 
loss
      on a temporary memory shortage.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c96356a9baa2e3d628caf52f3b83df1968628b5f
  Author: Karsten Keil <keil@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:18:39 2015 +0200

      mISDN: fix OOM condition for sending queued I-Frames

      The old code did not check the return value of skb_clone().
      The extra skb_clone() is not needed at all, if using 
skb_realloc_headroom()
      instead, which gives us a private copy with enough headroom as well.
      We need to requeue the original skb if the call failed, because we cannot
      inform upper layers about the data loss. Restructure the code to minimise
      rollback effort if it happens.
      This fix kernel bug #86091

      Thanks to Insu Yun <wuninsu@xxxxxxxxx> to remind me on this issue.

      Signed-off-by: Karsten Keil <keil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7a7c95e8e18a3598c4d0f99c35e69dce591daf1
  Author: Karsten Keil <keil@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:18:38 2015 +0200

      ISDN: fix OOM condition for sending queued I-Frames

      The skb_clone() return value was not checked and the 
skb_realloc_headroom()
      usage was wrong, the old skb was not freed. It turned out, that the
      skb_clone is not needed at all, the skb_realloc_headroom() will create a
      private copy with enough headroom and the original SKB can be used for the
      ACK queue.
      We need to requeue the original skb if the call failed, since the upper
      layer cannot be informed about memory shortage.

      Thanks to Insu Yun <wuninsu@xxxxxxxxx> to remind me on this issue.

      Signed-off-by: Karsten Keil <keil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ef7ea9195ea73262cd9730fb54e1eb726da157b
  Author: Jorgen Hansen <jhansen@xxxxxxxxxx>
  Date:   Wed Oct 21 04:53:56 2015 -0700

      VSOCK: sock_put wasn't safe to call in interrupt context

      In the vsock vmci_transport driver, sock_put wasn't safe to call
      in interrupt context, since that may call the vsock destructor
      which in turn calls several functions that should only be called
      from process context. This change defers the callling of these
      functions  to a worker thread. All these functions were
      deallocation of resources related to the transport itself.

      Furthermore, an unused callback was removed to simplify the
      cleanup.

      Multiple customers have been hitting this issue when using
      VMware tools on vSphere 2015.

      Also added a version to the vmci transport module (starting from
      1.0.2.0-k since up until now it appears that this module was
      sharing version with vsock that is currently at 1.0.1.0-k).

      Reviewed-by: Aditya Asarwade <asarwade@xxxxxxxxxx>
      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Signed-off-by: Jorgen Hansen <jhansen@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7fc9eb79a89049214f9870a6cf978050aaea43a
  Author: yankejian <yankejian@xxxxxxxxxx>
  Date:   Wed Oct 21 17:57:44 2015 +0800

      net: hisilicon: deals with the sub ctrl by syscon

      the global Soc configuration is treated by syscon, and sub ctrl bus is
      Soc bus. it has to be treated by syscon.

      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: lisheng <lisheng011@xxxxxxxxxx>
      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 47191d65b647af5eb5c82ede70ed4c24b1e93ef4
  Author: David Herrmann <dh.herrmann@xxxxxxxxx>
  Date:   Wed Oct 21 11:47:43 2015 +0200

      netlink: fix locking around NETLINK_LIST_MEMBERSHIPS

      Currently, NETLINK_LIST_MEMBERSHIPS grabs the netlink table while copying
      the membership state to user-space. However, grabing the netlink table is
      effectively a write_lock_irq(), and as such we should not be triggering
      page-faults in the critical section.

      This can be easily reproduced by the following snippet:
          int s = socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
          void *p = mmap(0, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, 
-1, 0);
          int r = getsockopt(s, 0x10e, 9, p, (void*)((char*)p + 4092));

      This should work just fine, but currently triggers EFAULT and a possible
      WARN_ON below handle_mm_fault().

      Fix this by reducing locking of NETLINK_LIST_MEMBERSHIPS to a read-side
      lock. The write-lock was overkill in the first place, and the read-lock
      allows page-faults just fine.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: David Herrmann <dh.herrmann@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9e6d79c521b91e7103fea37411680e31927487b
  Merge: aec1592 b08f2b3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:04:08 2015 -0700

      Merge branch 'cxgb4-trivial-fixes'

      Hariprasad Shenai says:

      ====================
      Trivial fixes for cxgb4 driver

      This patch series updates driver description for next gen. adapters, 
updates
      firmware info., returns error for setup_rss error case, restores L1
      configuration in case of FW rejects new config, updates and aligns ethtool
      get stats settings, etc

       This patch series has been created against net-next tree and includes
      patches on cxgb4 and cxgb4vf driver.

      We have included all the maintainers of respective drivers. Kindly review
      the change and let us know in case of any review comments.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b08f2b35692e640e942deb49bbabe47a264f0023
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:57 2015 +0530

      cxgb4: Update ethtool get_drvinfo to get regdump len

      Update ethtool get_drvinfo to display regdump len and also update
      firmware string version print to display N/A in case FW isn't present

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9c673d156256f427657f0114eea981aaeefa3828
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:56 2015 +0530

      cxgb4: Use vmalloc, if kmalloc fails

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ac5fe75df57299cfbd89eb35a36d979742a69d8
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:55 2015 +0530

      cxgb4: Return error if setup_rss is called before probe

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52a5f8463b10e49da93190dd0ee24e7f1c4860fd
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:54 2015 +0530

      cxgb4/cxgb4vf: Update driver desc. to include Chelsio T6 adapter

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 43eb4e82ebf7e3442a724ab9ecd69322eccad530
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:53 2015 +0530

      cxgb4: Add info print to display number of MSI-X vectors allocated

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4116542897be9cb5eaae7fdbfd5b2ddeaaaaeaef
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:52 2015 +0530

      cxgb4: Restore L1 cfg, if FW rejects new L1 cfg settings

      In the ethtool set_settings() routine we need to remember our old L1
      Configuration in case the firmware rejects the request and then restore
      that.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9bfdad5ef555d92639a8b2a9e75e1f51ea3235d6
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:51 2015 +0530

      cxgb4: Don't disallow turning off auto-negotiation

      For {1, 10, 40} Gb/s. Prohibiting turning off autonegotiation isn't 
anywhere
      in the standard.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eed7342d4b53a697603d568ab8d10561273def42
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:50 2015 +0530

      cxgb4: Align ethtool get stat settings

      Align the ethtool get stats settings with the rest so it looks uniform

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aec15924740edc9886051593bc7769873be9498b
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Tue Oct 20 23:00:10 2015 -0700

      openvswitch: Use dev_queue_xmit for vport send.

      With use of lwtunnel, we can directly call dev_queue_xmit()
      rather than calling netdev vport send operation.
      Following change make tunnel vport code bit cleaner.

      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 99e28f18e3f4daa2091802e07ebeb4f541631320
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Tue Oct 20 20:47:46 2015 -0700

      openvswitch: Fix incorrect type use.

      Patch fixes following sparse warning.
      net/openvswitch/flow_netlink.c:583:30: warning: incorrect type in 
assignment (different base types)
      net/openvswitch/flow_netlink.c:583:30:    expected restricted __be16 
[usertype] ipv4
      net/openvswitch/flow_netlink.c:583:30:    got int

      Fixes: 6b26ba3a7d ("openvswitch: netlink attributes for IPv6 tunneling")
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b696e5e93835cee114f24b5b106c73f9f8503ec0
  Author: Helge Deller <deller@xxxxxx>
  Date:   Thu Oct 22 15:45:18 2015 +0200

      parisc: reduce syslog debug output

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit aa0bdd2995fb991f0c0f0145303803a0474c93e2
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Sat Sep 19 11:43:07 2015 +0800

      parisc: serial/mux: Convert to uart_console_device instead of open-coded

      The implementation of mux_console_device() is very similar to
      uart_console_device(). Setting .data field in mux_console then we can
      convert to use uart_console_device().

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 7bc2d40ea690a37eccc2f514c96c56fdcda626b5
  Author: Helge Deller <deller@xxxxxx>
  Date:   Tue Sep 8 15:45:32 2015 +0200

      parisc: Wire up userfaultfd syscall

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit b6096755f43c443101e6f5d3acc74efa746cb4ec
  Author: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
  Date:   Mon Sep 7 12:15:51 2015 -0400

      parisc: allocate sys_membarrier system call number

      Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Tested-by: Helge Deller <deller@xxxxxx>
      CC: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      CC: linux-api@xxxxxxxxxxxxxxx
      CC: "James E.J. Bottomley" <jejb@xxxxxxxxxxxxxxxx>
      CC: linux-parisc@xxxxxxxxxxxxxxx
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 721daebbdb9ba44756a9695878ecca8aad38009b
  Merge: 63b11e7 3911169
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 06:42:23 2015 -0700

      Merge branch 'bpf-perf'

      Alexei Starovoitov says:

      ====================
      bpf_perf_event_output helper

      Over the last year there were multiple attempts to let eBPF programs
      output data into perf events by He Kuang and Wangnan.
      The last one was:
      https://lkml.org/lkml/2015/7/20/736
      It was almost perfect with exception that all bpf programs would sent
      data into one global perf_event.
      This patch set takes different approach by letting user space
      open independent PERF_COUNT_SW_BPF_OUTPUT events, so that program
      output won't collide.

      Wangnan is working on corresponding perf patches.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 39111695b1b88a21e81983a38786d877e770da81
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 20 20:02:35 2015 -0700

      samples: bpf: add bpf_perf_event_output example

      Performance test and example of bpf_perf_event_output().
      kprobe is attached to sys_write() and trivial bpf program streams
      pid+cookie into userspace via PERF_COUNT_SW_BPF_OUTPUT event.

      Usage:
      $ sudo ./bld_x64/samples/bpf/trace_output
      recv 2968913 events per sec

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a43eec304259a6c637f4014a6d4767159b6a3aa3
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 20 20:02:34 2015 -0700

      bpf: introduce bpf_perf_event_output() helper

      This helper is used to send raw data from eBPF program into
      special PERF_TYPE_SOFTWARE/PERF_COUNT_SW_BPF_OUTPUT perf_event.
      User space needs to perf_event_open() it (either for one or all cpus) and
      store FD into perf_event_array (similar to bpf_perf_event_read() helper)
      before eBPF program can send data into it.

      Today the programs triggered by kprobe collect the data and either store
      it into the maps or print it via bpf_trace_printk() where latter is the 
debug
      facility and not suitable to stream the data. This new helper replaces
      such bpf_trace_printk() usage and allows programs to have dedicated
      channel into user space for post-processing of the raw data collected.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fa128e6a148a0a58355bd6814c6283515bbd028a
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 20 20:02:33 2015 -0700

      perf: pad raw data samples automatically

      Instead of WARN_ON in perf_event_output() on unpaded raw samples,
      pad them automatically.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 63b11e757d6dae570bc22450ec58a5b68cdf5c3c
  Author: Brenden Blanco <bblanco@xxxxxxxxxxxx>
  Date:   Tue Oct 20 16:47:33 2015 -0700

      ipvlan: read direct ifindex instead of iflink

      In the ipv4 outbound path of an ipvlan device in l3 mode, the ifindex is
      being grabbed from dev_get_iflink. This works for the physical device
      case, since as the documentation of that function notes: "Physical
      interfaces have the same 'ifindex' and 'iflink' values.".  However, if
      the master device is a veth, and the pairs are in separate net
      namespaces, the route lookup will fail with -ENODEV due to outer veth
      pair being in a separate namespace from the ipvlan master/routing
      namespace.

        ns0    |   ns1    |   ns2
       veth0a--|--veth0b--|--ipvl0

      In ipvlan_process_v4_outbound(), a packet sent from ipvl0 in the above
      configuration will pass fl.flowi4_oif == veth0a to
      ip_route_output_flow(), but *net == ns1.

      Notice also that ipv6 processing is not using iflink. Since there is a
      discrepancy in usage, fixup both v4 and v6 case to use local dev
      variable.

      Tested this with l3 ipvlan on top of veth, as well as with single
      physical interface in the top namespace.

      Signed-off-by: Brenden Blanco <bblanco@xxxxxxxxxxxx>
      Reviewed-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34e45ad9378c31ef2b59e8bd63d62f0ca8e719a3
  Author: Andrew F. Davis <afd@xxxxxx>
  Date:   Tue Oct 20 16:28:57 2015 -0500

      net: phy: dp83848: Add TI DP83848 Ethernet PHY

      Add support for the TI DP83848 Ethernet PHY device.

      The DP83848 is a highly reliable, feature rich, IEEE 802.3 compliant
      single port 10/100 Mb/s Ethernet Physical Layer Transceiver supporting
      the MII and RMII interfaces.

      Signed-off-by: Andrew F. Davis <afd@xxxxxx>
      Signed-off-by: Dan Murphy <dmurphy@xxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Acked-by: Dan Murphy <dmurphy@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dbf650b67bb4db1b95807d2aafe2d7cfafd458da
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Oct 20 13:17:40 2015 -0700

      tcp: fastopen: limit max_qlen

      Allowing an application to set whatever limit for
      the list of recently RST fastopen sessions [1] is not wise,
      as it open ways to deplete kernel memory.

      Cap the user provided limit by somaxconn sysctl,
      like listen() backlog.

      [1] https://tools.ietf.org/html/rfc7413#section-5.1

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0729a04977d497cf66234fd7f900ddcec3ef1c52
  Author: Hezi Shahmoon <hezi@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:32:24 2015 +0200

      i2c: mv64xxx: really allow I2C offloading

      Commit 00d8689b85a7 ("i2c: mv64xxx: rework offload support to fix
      several problems") completely reworked the offload support, but left a
      debugging-related "return false" at the beginning of the
      mv64xxx_i2c_can_offload() function. This has the unfortunate consequence
      that offloading is in fact never used, which wasn't really the
      intention.

      This commit fixes that problem by removing the bogus "return false".

      Fixes: 00d8689b85a7 ("i2c: mv64xxx: rework offload support to fix several 
problems")
      Signed-off-by: Hezi Shahmoon <hezi@xxxxxxxxxxx>
      [Thomas: reworked commit log and title.]
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>

  commit 83ea24fd45f8793706b9a259842ab3f144661e25
  Author: Kamlakant Patel <kamlakant.patel@xxxxxxxxxxxx>
  Date:   Thu Oct 15 18:23:32 2015 +0530

      gpio: xlp: Convert to use gpiolib irqchip helpers

      commit "325f0a (MIPS: Netlogic: Use chip_data for irq_chip methods)"
      Updates "mips/netlogic/common/irq.c" to use chip_data to store interrupt
      controller data pointer. Before this commit handler_data was used to
      store interrupt controller data which caused errors while using
      gpiochip_set_chained_irqchip.

      Update XLP GPIO driver to use the gpiolib irqchip helpers.
      And add missing depends on OF_GPIO in Kconfig.

      Signed-off-by: Kamlakant Patel <kamlakant.patel@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 58c9c87ca9dca99f269267f5aadcd051fef1637b
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 14:34:57 2015 +0200

      genirq: Make the cpuhotplug migration code less noisy

      The original arm code has a pr_debug() statement for the case where
      the irq chip has no set_affinity() callback. That's sufficient for
      debugging and we really don't want to spam dmesg with useless warnings
      for the normal case.

      Fixes: f1e0bb0ad473: "genirq: Introduce generic irq migration for cpu 
hotunplug"
      Reported-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Requested-by: Russell King <linux@xxxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Yang Yingliang <yangyingliang@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>

  commit 4eb0f7abcefad2d4c127aa7502d3122635eddab0
  Author: Jiada Wang <jiada_wang@xxxxxxxxxx>
  Date:   Tue Oct 20 11:47:11 2015 +0900

      ASoC: wm8962: mark cache_dirty flag after software reset in pm_resume

      By doing software reset of wm8962 in pm_resume, all registers which
      have already been set will be reset to default value without regmap
      interface be involved, thus driver need to mark cache_dirty flag,
      to let regcache can be updated by regcache_sync().

      Signed-off-by: Jiada Wang <jiada_wang@xxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 13972adc3240ea8b18b44906b819c622941a64b6
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 22 12:29:27 2015 +0200

      Bluetooth: Increase minor version of core module

      With the addition of support for diagnostic feature, it makes sense to
      increase the minor version of the Bluetooth core module.

      The module version is not used anywhere, but it gives a nice extra
      hint for debugging purposes.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit aeedebff6961d96e9df58799e6c3a93513d6f66b
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:27 2015 +0200

      ieee802154: 6lowpan: fix memory leak

      Looking at current situation of memory management in 6lowpan receive
      function I detected some invalid handling. After calling
      lowpan_invoke_rx_handlers we will do a kfree_skb and then NET_RX_DROP on
      error handling. We don't do this before, also on
      skb_share_check/skb_unshare which might manipulate the reference
      counters.

      After running some 'grep -r "dev_add_pack" net/' to look how others
      packet-layer receive callbacks works I detected that every subsystem do
      a kfree_skb, then NET_RX_DROP without calling skb functions which
      might manipulate the skb reference counters. This is the reason why we
      should do the same here like all others subsystems. I didn't find any
      documentation how the packet-layer receive callbacks handle NET_RX_DROP
      return values either.

      This patch will add a kfree_skb, then NET_RX_DROP handling for the
      "trivial checks", in case of skb_share_check/skb_unshare the kfree_skb
      call will be done inside these functions.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 88d07feb097b60fcca20ba63d2920b0f05a05fa0
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 10:49:39 2015 +0300

      Bluetooth: Make hci_disconnect() behave correctly for all states

      There are a few places that don't explicitly check the connection
      state before calling hci_disconnect(). To make this API do the right
      thing take advantage of the new hci_abort_conn() API and also make
      sure to only read the clock offset if we're really connected.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 89e0ccc882c47a4553698a580bec70cd90bc6319
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 10:49:38 2015 +0300

      Bluetooth: Take advantage of connection abort helpers

      Convert the various places mapping connection state to
      disconnect/cancel HCI command to use the new hci_abort_conn helper
      API.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit dcc0f0d9ce839e1cc97b95d9dac364047bd1b975
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 10:49:37 2015 +0300

      Bluetooth: Introduce hci_req helper to abort a connection

      There are several different places needing to make sure that a
      connection gets disconnected or canceled. The exact action needed
      depends on the connection state, so centralizing this logic can save
      quite a lot of code duplication.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a1857390e2a626cd44e494968fc1b41891caec66
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 22 12:06:09 2015 +0300

      Bluetooth: hci_bcm: checking for ERR_PTR instead of NULL

      bt_skb_alloc() returns NULL on error, it never returns an ERR_PTR.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4ba792e303e278052bb0ee60cce15d6d7dc15c7c
  Merge: 43e41ad e3d006c
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 22 09:33:46 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Print branch filter state in verbose mode. (Andi Kleen)

        - Fix core dump caused by per-socket/core system-wide stat. (Kan Liang)

        - Update libtraceevent KVM plugin. (Paolo Bonzini)

      Infrastructure changes:

        - Add fixdep to 'tools/build' .gitignore. (Yunlong Song)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c81d555a264bde740adc314f3931046994534106
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 09:38:35 2015 +0300

      Bluetooth: Fix crash in SMP when unpairing

      When unpairing the keys stored in hci_dev are removed. If SMP is
      ongoing the SMP context will also have references to these keys, so
      removing them from the hci_dev lists will make the pointers invalid.
      This can result in the following type of crashes:

       BUG: unable to handle kernel paging request at 6b6b6b6b
       IP: [<c11f26be>] __list_del_entry+0x44/0x71
       *pde = 00000000
       Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
       Modules linked in: hci_uart btqca btusb btintel btbcm btrtl hci_vhci 
rfcomm bluetooth_6lowpan bluetooth
       CPU: 0 PID: 723 Comm: kworker/u5:0 Not tainted 4.3.0-rc3+ #1379
       Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 
1.8.1-20150318_183358- 04/01/2014
       Workqueue: hci0 hci_rx_work [bluetooth]
       task: f19da940 ti: f1a94000 task.ti: f1a94000
       EIP: 0060:[<c11f26be>] EFLAGS: 00010202 CPU: 0
       EIP is at __list_del_entry+0x44/0x71
       EAX: c0088d20 EBX: f30fcac0 ECX: 6b6b6b6b EDX: 6b6b6b6b
       ESI: f4b60000 EDI: c0088d20 EBP: f1a95d90 ESP: f1a95d8c
        DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
       CR0: 8005003b CR2: 6b6b6b6b CR3: 319e5000 CR4: 00000690
       Stack:
        f30fcac0 f1a95db0 f82dc3e1 f1bfc000 00000000 c106524f f1bfc000 f30fd020
        f1a95dc0 f1a95dd0 f82dcbdb f1a95de0 f82dcbdb 00000067 f1bfc000 f30fd020
        f1a95de0 f1a95df0 f82d1126 00000067 f82d1126 00000006 f30fd020 f1bfc000
       Call Trace:
        [<f82dc3e1>] smp_chan_destroy+0x192/0x240 [bluetooth]
        [<c106524f>] ? trace_hardirqs_on_caller+0x14e/0x169
        [<f82dcbdb>] smp_teardown_cb+0x47/0x64 [bluetooth]
        [<f82dcbdb>] ? smp_teardown_cb+0x47/0x64 [bluetooth]
        [<f82d1126>] l2cap_chan_del+0x5d/0x14d [bluetooth]
        [<f82d1126>] ? l2cap_chan_del+0x5d/0x14d [bluetooth]
        [<f82d40ef>] l2cap_conn_del+0x109/0x17b [bluetooth]
        [<f82d40ef>] ? l2cap_conn_del+0x109/0x17b [bluetooth]
        [<f82c0205>] ? hci_event_packet+0x5b1/0x2092 [bluetooth]
        [<f82d41aa>] l2cap_disconn_cfm+0x49/0x50 [bluetooth]
        [<f82d41aa>] ? l2cap_disconn_cfm+0x49/0x50 [bluetooth]
        [<f82c0228>] hci_event_packet+0x5d4/0x2092 [bluetooth]
        [<c1332c16>] ? skb_release_data+0x6a/0x95
        [<f82ce5d4>] ? hci_send_to_monitor+0xe7/0xf4 [bluetooth]
        [<c1409708>] ? _raw_spin_unlock_irqrestore+0x44/0x57
        [<f82b3bb0>] hci_rx_work+0xf1/0x28b [bluetooth]
        [<f82b3bb0>] ? hci_rx_work+0xf1/0x28b [bluetooth]
        [<c10635a0>] ? __lock_is_held+0x2e/0x44
        [<c104772e>] process_one_work+0x232/0x432
        [<c1071ddc>] ? rcu_read_lock_sched_held+0x50/0x5a
        [<c104772e>] ? process_one_work+0x232/0x432
        [<c1047d48>] worker_thread+0x1b8/0x255
        [<c1047b90>] ? rescuer_thread+0x23c/0x23c
        [<c104bb71>] kthread+0x91/0x96
        [<c14096a7>] ? _raw_spin_unlock_irq+0x27/0x44
        [<c1409d61>] ret_from_kernel_thread+0x21/0x30
        [<c104bae0>] ? kthread_parkme+0x1e/0x1e

      To solve the issue, introduce a new smp_cancel_pairing() API that can
      be used to clean up the SMP state before touching the hci_dev lists.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit fc64361ac15318126c64193929616fc4832071a6
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 09:38:31 2015 +0300

      Bluetooth: Disable auto-connection parameters when unpairing

      For connection parameters that are left around until a disconnection
      we should at least clear any auto-connection properties. This way a
      new Add Device call is required to re-set them after calling Unpair
      Device.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e2aacd963a06fc558a809ecb62f5833e6c340b28
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 10:08:59 2015 -0400

      net: mdio-gpio: move platform data header

      This header file only contains the platform data structure definition,
      so move it to the include/linux/platform_data/ directory.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 844338e5a46f5d80566fa853c6168a78cdadab01
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 10:08:58 2015 -0400

      ARM: gemini: remove unnecessary mdio-gpio includes

      Remove the inclusion of linux/mdio-gpio.h in nas4220b, wbd111 and wbd222
      boards since mdio-gpio is not used.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 104eb270e665f4fcd8cb8c8ab4c4d4538c604e92
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Oct 20 10:42:24 2015 +0200

      net: sun4i-emac: Properly free resources on probe failure and remove

      Fix sun4i-emac not releasing the following resources:
      -iomapped memory not released on probe-failure nor on remove
      -clock not getting disabled on probe-failure nor on remove
      -sram not being released on remove

      And while at it also add error checking to the clk_prepare_enable call
      done on probe.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c6aa74d546ccb94c99a1e95fb461f8b0e9410a3e
  Author: Wu Fengguang <fengguang.wu@xxxxxxxxx>
  Date:   Tue Oct 20 14:56:00 2015 +0800

      net: hisilicon: fix ptr_ret.cocci warnings

      drivers/net/ethernet/hisilicon/hns/hnae.c:442:1-3: WARNING: 
PTR_ERR_OR_ZERO can be used

       Use PTR_ERR_OR_ZERO rather than if(IS_ERR(...)) + PTR_ERR

      Generated by: scripts/coccinelle/api/ptr_ret.cocci

      CC: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit feec0cb3f20b837f8ca36e974267918d7a4497f8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Oct 19 20:40:17 2015 -0700

      ipv6: gro: support sit protocol

      Tom Herbert added SIT support to GRO with commit
      19424e052fb4 ("sit: Add gro callbacks to sit_offload"),
      later reverted by Herbert Xu.

      The problem came because Tom patch was building GRO
      packets without proper meta data : If packets were locally
      delivered, we would not care.

      But if packets needed to be forwarded, GSO engine was not
      able to segment individual segments.

      With the following patch, we correctly set skb->encapsulation
      and inner network header. We also update gso_type.

      Tested:

      Server :
      netserver
      modprobe dummy
      ifconfig dummy0 8.0.0.1 netmask 255.255.255.0 up
      arp -s 8.0.0.100 4e:32:51:04:47:e5
      iptables -I INPUT -s 10.246.7.151 -j TEE --gateway 8.0.0.100
      ifconfig sixtofour0
      sixtofour0 Link encap:IPv6-in-IPv4
                inet6 addr: 2002:af6:798::1/128 Scope:Global
                inet6 addr: 2002:af6:798::/128 Scope:Global
                UP RUNNING NOARP  MTU:1480  Metric:1
                RX packets:411169 errors:0 dropped:0 overruns:0 frame:0
                TX packets:409414 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:20319631739 (20.3 GB)  TX bytes:29529556 (29.5 MB)

      Client :
      netperf -H 2002:af6:798::1 -l 1000 &

      Checked on server traffic copied on dummy0 and verify segments were
      properly rebuilt, with proper IP headers, TCP checksums...

      tcpdump on eth0 shows proper GRO aggregation takes place.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f3af27786913851e720bc9466d1abffcfa7aff6
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Oct 19 20:17:59 2015 -0700

      net: dummy: add more features

      While testing my SIT/GRO patch using netfilter TEE module and a dummy
      device, I found some features were missing :

      TSO IPv6, UFO, and encapsulated traffic.

      ethtool -k dummy0 now gives :
      ...
      tcp-segmentation-offload: on
        tx-tcp-segmentation: on
        tx-tcp-ecn-segmentation: on
        tx-tcp6-segmentation: on
      udp-fragmentation-offload: on
      ...
      tx-gre-segmentation: on
      tx-ipip-segmentation: on
      tx-sit-segmentation: on
      tx-udp_tnl-segmentation: on

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e754ec69ab69601420eb2ed58ece803d77c93f61
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:19:00 2015 -0700

      openvswitch: Serialize nested ct actions if provided

      If userspace provides a ct action with no nested mark or label, then the
      storage for these fields is zeroed. Later when actions are requested,
      such zeroed fields are serialized even though userspace didn't
      originally specify them. Fix the behaviour by ensuring that no action is
      serialized in this case, and reject actions where userspace attempts to
      set these fields with mask=0. This should make netlink marshalling
      consistent across deserialization/reserialization.

      Reported-by: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f0909ee3d8e3514a274121f3bf217a4920fa12d
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:18:59 2015 -0700

      openvswitch: Mark connections new when not confirmed.

      New, related connections are marked as such as part of ovs_ct_lookup(),
      but they are not marked as "new" if the commit flag is used. Make this
      consistent by setting the "new" flag whenever !nf_ct_is_confirmed(ct).

      Reported-by: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d008a1df927846788b9dc02e770f65951f98ddc
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:18:58 2015 -0700

      openvswitch: Clarify conntrack COMMIT behaviour

      The presence of this attribute does not modify the ct_state for the
      current packet, only future packets. Make this more clear in the header
      definition.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e384715e9e702704c6941c575f0e6b322132a3a
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:18:57 2015 -0700

      openvswitch: Reject ct_state masks for unknown bits

      Currently, 0-bits are generated in ct_state where the bit position is
      undefined, and matches are accepted on these bit-positions. If userspace
      requests to match the 0-value for this bit then it may expect only a
      subset of traffic to match this value, whereas currently all packets
      will have this bit set to 0. Fix this by rejecting such masks.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e2e8009ff72ad2a795b67785f3238af152146368
  Author: Renato Westphal <renatowestphal@xxxxxxxxx>
  Date:   Mon Oct 19 18:51:34 2015 -0200

      tcp: remove improper preemption check in tcp_xmit_probe_skb()

      Commit e520af48c7e5a introduced the following bug when setting the
      TCP_REPAIR sockoption:

      [ 2860.657036] BUG: using __this_cpu_add() in preemptible [00000000] 
code: daemon/12164
      [ 2860.657045] caller is __this_cpu_preempt_check+0x13/0x20
      [ 2860.657049] CPU: 1 PID: 12164 Comm: daemon Not tainted 4.2.3 #1
      [ 2860.657051] Hardware name: Dell Inc. PowerEdge R210 II/0JP7TR, BIOS 
2.0.5 03/13/2012
      [ 2860.657054]  ffffffff81c7f071 ffff880231e9fdf8 ffffffff8185d765 
0000000000000002
      [ 2860.657058]  0000000000000001 ffff880231e9fe28 ffffffff8146ed91 
ffff880231e9fe18
      [ 2860.657062]  ffffffff81cd1a5d ffff88023534f200 ffff8800b9811000 
ffff880231e9fe38
      [ 2860.657065] Call Trace:
      [ 2860.657072]  [<ffffffff8185d765>] dump_stack+0x4f/0x7b
      [ 2860.657075]  [<ffffffff8146ed91>] check_preemption_disabled+0xe1/0xf0
      [ 2860.657078]  [<ffffffff8146edd3>] __this_cpu_preempt_check+0x13/0x20
      [ 2860.657082]  [<ffffffff817e0bc7>] tcp_xmit_probe_skb+0xc7/0x100
      [ 2860.657085]  [<ffffffff817e1e2d>] tcp_send_window_probe+0x2d/0x30
      [ 2860.657089]  [<ffffffff817d1d8c>] do_tcp_setsockopt.isra.29+0x74c/0x830
      [ 2860.657093]  [<ffffffff817d1e9c>] tcp_setsockopt+0x2c/0x30
      [ 2860.657097]  [<ffffffff81767b74>] sock_common_setsockopt+0x14/0x20
      [ 2860.657100]  [<ffffffff817669e1>] SyS_setsockopt+0x71/0xc0
      [ 2860.657104]  [<ffffffff81865172>] entry_SYSCALL_64_fastpath+0x16/0x75

      Since tcp_xmit_probe_skb() can be called from process context, use
      NET_INC_STATS() instead of NET_INC_STATS_BH().

      Fixes: e520af48c7e5 ("tcp: add TCPWinProbe and TCPKeepAlive SNMP 
counters")
      Signed-off-by: Renato Westphal <renatow@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36a28b21169d28db2a3409a4e2d4b9a7563c1a00
  Merge: e535679 00db674
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 19:26:17 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf

      Pablo Neira Ayuso says:

      ====================
      Netfilter fixes for net

      The following patchset contains four Netfilter fixes for net, they are:

      1) Fix Kconfig dependencies of new nf_dup_ipv4 and nf_dup_ipv6.

      2) Remove bogus test nh_scope in IPv4 rpfilter match that is breaking
         --accept-local, from Xin Long.

      3) Wait for RCU grace period after dropping the pending packets in the
         nfqueue, from Florian Westphal.

      4) Fix sleeping allocation while holding spin_lock_bh, from Nikolay 
Borisov.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b1974ed05ea90264d534a200e8a13932ad55f8b8
  Author: Arad, Ronen <ronen.arad@xxxxxxxxx>
  Date:   Mon Oct 19 09:23:28 2015 -0700

      netlink: Rightsize IFLA_AF_SPEC size calculation

      if_nlmsg_size() overestimates the minimum allocation size of netlink
      dump request (when called from rtnl_calcit()) or the size of the
      message (when called from rtnl_getlink()). This is because
      ext_filter_mask is not supported by rtnl_link_get_af_size() and
      rtnl_link_get_size().

      The over-estimation is significant when at least one netdev has many
      VLANs configured (8 bytes for each configured VLAN).

      This patch-set "rightsizes" the protocol specific attribute size
      calculation by propagating ext_filter_mask to rtnl_link_get_af_size()
      and adding this a argument to get_link_af_size op in rtnl_af_ops.

      Bridge module already used filtering aware sizing for notifications.
      br_get_link_af_size_filtered() is consistent with the modified
      get_link_af_size op so it replaces br_get_link_af_size() in br_af_ops.
      br_get_link_af_size() becomes unused and thus removed.

      Signed-off-by: Ronen Arad <ronen.arad@xxxxxxxxx>
      Acked-by: Sridhar Samudrala <sridhar.samudrala@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e53567948f82368247b4b1a63fcab4c76ef7d51c
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:43:11 2015 -0400

      tipc: conditionally expand buffer headroom over udp tunnel

      In commit d999297c3dbbe ("tipc: reduce locking scope during packet 
reception")
      we altered the packet retransmission function. Since then, when
      restransmitting packets, we create a clone of the original buffer
      using __pskb_copy(skb, MIN_H_SIZE), where MIN_H_SIZE is the size of
      the area we want to have copied, but also the smallest possible TIPC
      packet size. The value of MIN_H_SIZE is 24.

      Unfortunately, __pskb_copy() also has the effect that the headroom
      of the cloned buffer takes the size MIN_H_SIZE. This is too small
      for carrying the packet over the UDP tunnel bearer, which requires
      a minimum headroom of 28 bytes. A change to just use pskb_copy()
      lets the clone inherit the original headroom of 80 bytes, but also
      assumes that the copied data area is of at least that size, something
      that is not always the case. So that is not a viable solution.

      We now fix this by adding a check for sufficient headroom in the
      transmit function of udp_media.c, and expanding it when necessary.

      Fixes: commit d999297c3dbbe ("tipc: reduce locking scope during packet 
reception")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7a4264a9250fc6d555ff305aa5e5168723805bb9
  Author: Andreas Schwab <schwab@xxxxxxx>
  Date:   Mon Oct 19 17:37:13 2015 +0200

      net: cavium: change NET_VENDOR_CAVIUM to bool

      CONFIG_NET_VENDOR_CAVIUM is only used to hide/show config options and to
      include subdirectories in the build, so it doesn't make sense to make it
      tristate.

      Signed-off-by: Andreas Schwab <schwab@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 45c8b7b175ceb2d542e0fe15247377bf3bce29ec
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:33:00 2015 -0400

      tipc: allow non-linear first fragment buffer

      The current code for message reassembly is erroneously assuming that
      the the first arriving fragment buffer always is linear, and then goes
      ahead resetting the fragment list of that buffer in anticipation of
      more arriving fragments.

      However, if the buffer already happens to be non-linear, we will
      inadvertently drop the already attached fragment list, and later
      on trig a BUG() in __pskb_pull_tail().

      We see this happen when running fragmented TIPC multicast across UDP,
      something made possible since
      commit d0f91938bede ("tipc: add ip/udp media type")

      We fix this by not resetting the fragment list when the buffer is non-
      linear, and by initiatlizing our private fragment list tail pointer to
      the tail of the existing fragment list.

      Fixes: commit d0f91938bede ("tipc: add ip/udp media type")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1241365f1aeb24ef0ffe82970f7c558022ddc85f
  Author: James Morse <james.morse@xxxxxxx>
  Date:   Mon Oct 19 16:31:55 2015 +0100

      openvswitch: Allocate memory for ovs internal device stats.

      "openvswitch: Remove vport stats" removed the per-vport statistics, in
      order to use the netdev's statistics fields.
      "openvswitch: Fix ovs_vport_get_stats()" fixed the export of these stats
      to user-space, by using the provided netdev_ops to collate them - but ovs
      internal devices still use an unallocated dev->tstats field to count
      packets, which are no longer exported by this api.

      Allocate the dev->tstats field for ovs internal devices, and wire up
      ndo_get_stats64 with the original implementation of
      ovs_vport_get_stats().

      On its own, "openvswitch: Fix ovs_vport_get_stats()" fixes the OOPs,
      unmasking a full-on panic on arm64:

      =============%<==============
      [<ffffffbffc00ce4c>] internal_dev_recv+0xa8/0x170 [openvswitch]
      [<ffffffbffc0008b4>] do_output.isra.31+0x60/0x19c [openvswitch]
      [<ffffffbffc000bf8>] do_execute_actions+0x208/0x11c0 [openvswitch]
      [<ffffffbffc001c78>] ovs_execute_actions+0xc8/0x238 [openvswitch]
      [<ffffffbffc003dfc>] ovs_packet_cmd_execute+0x21c/0x288 [openvswitch]
      [<ffffffc0005e8c5c>] genl_family_rcv_msg+0x1b0/0x310
      [<ffffffc0005e8e60>] genl_rcv_msg+0xa4/0xe4
      [<ffffffc0005e7ddc>] netlink_rcv_skb+0xb0/0xdc
      [<ffffffc0005e8a94>] genl_rcv+0x38/0x50
      [<ffffffc0005e76c0>] netlink_unicast+0x164/0x210
      [<ffffffc0005e7b70>] netlink_sendmsg+0x304/0x368
      [<ffffffc0005a21c0>] sock_sendmsg+0x30/0x4c
      [SNIP]
      Kernel panic - not syncing: Fatal exception in interrupt
      =============%<==============

      Fixes: 8c876639c985 ("openvswitch: Remove vport stats.")
      Signed-off-by: James Morse <james.morse@xxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f1900fb5eca2cf9b96837e4931165003918d7d29
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 08:26:05 2015 -0700

      net: Really fix vti6 with oif in dst lookups

      6e28b000825d ("net: Fix vti use case with oif in dst lookups for IPv6")
      is missing the checks on FLOWI_FLAG_SKIP_NH_OIF. Add them.

      Fixes: 42a7b32b73d6 ("xfrm: Add oif to dst lookups")
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 53387c4e22ac33d27a552b3d56bad932bd32531b
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Mon Oct 19 09:21:37 2015 -0400

      tipc: extend broadcast link window size

      The default fix broadcast window size is currently set to 20 packets.
      This is a very low value, set at a time when we were still testing on
      10 Mb/s hubs, and a change to it is long overdue.

      Commit 7845989cb4b3da1db ("net: tipc: fix stall during bclink wakeup 
procedure")
      revealed a problem with this low value. For messages of importance LOW,
      the backlog queue limit will be  calculated to 30 packets, while a
      single, maximum sized message of 66000 bytes, carried across a 1500 MTU
      network consists of 46 packets.

      This leads to the following scenario (among others leading to the same
      situation):

      1: Msg 1 of 46 packets is sent. 20 packets go to the transmit queue, 26
         packets to the backlog queue.
      2: Msg 2 of 46 packets is attempted sent, but rejected because there is
         no more space in the backlog queue at this level. The sender is added
         to the wakeup queue with a "pending packets chain size" number of 46.
      3: Some packets in the transmit queue are acked and released. We try to
         wake up the sender, but the pending size of 46 is bigger than the LOW
         wakeup limit of 30, so this doesn't happen.
      5: Subsequent acks releases all the remaining buffers. Each time we test
         for the wakeup criteria and find that 46 still is larger than 30,
         even after both the transmit and the backlog queues are empty.
      6: The sender is never woken up and given a chance to send its message.
         He is stuck.

      We could now loosen the wakeup criteria (used by link_prepare_wakeup())
      to become equal to the send criteria (used by tipc_link_xmit()), i.e.,
      by ignoring the "pending packets chain size" value altogether, or we can
      just increase the queue limits so that the criteria can be satisfied
      anyway. There are good reasons (potentially multiple waiting senders) to
      not opt for the former solution, so we choose the latter one.

      This commit fixes the problem by giving the broadcast link window a
      default value of 50 packets. We also introduce a new minimum link
      window size BCLINK_MIN_WIN of 32, which is enough to always avoid the
      described situation. Finally, in order to not break any existing users
      which may set the window explicitly, we enforce that the window is set
      to the new minimum value in case the user is trying to set it to
      anything lower.

      Fixes: 7845989cb4b3da1db ("net: tipc: fix stall during bclink wakeup 
procedure")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f89abf56abbd0e1c6e3cef9813e6d9f05383c1e
  Author: Christian Engelmayer <cengelma@xxxxxx>
  Date:   Wed Oct 21 00:50:06 2015 +0200

      btrfs: fix possible leak in btrfs_ioctl_balance()

      Commit 8eb934591f8b ("btrfs: check unsupported filters in balance
      arguments") adds a jump to exit label out_bargs in case the argument
      check fails. At this point in addition to the bargs memory, the
      memory for struct btrfs_balance_control has already been allocated.
      Ownership of bctl is passed to btrfs_balance() in the good case,
      thus the memory is not freed due to the introduced jump. Make sure
      that the memory gets freed in any case as necessary. Detected by
      Coverity CID 1328378.

      Signed-off-by: Christian Engelmayer <cengelma@xxxxxx>
      Reviewed-by: David Sterba <dsterba@xxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit c50f13f911b90a722308bffbf26187ff3890aa1e
  Merge: c2a7558 677c884
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 22 10:24:55 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      Just a crash fix for radeon and amdgpu if the user has forcibly disabled
      dpm and tries to access the pwm sysfs controls.

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: add missing dpm check for KV dpm late init
        drm/amdgpu/dpm: don't add pwm attributes if DPM is disabled
        drm/radeon/dpm: don't add pwm attributes if DPM is disabled

  commit c2a75586ff27ee7636bb2bf33ee66992a6603e49
  Merge: 37363bc 18e9345
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 22 10:24:21 2015 +1000

      Merge tag 'drm-intel-fixes-2015-10-16' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      The revert dance could use some explanation: we had stuff fixed in
      -next, and initially backported one commit to v4.3. Now, turns out we
      need more fixes, and we could cherry-pick them all without conflicts if
      we reverted the backported one first. So did that to not have to edit
      and backport them all.

      * tag 'drm-intel-fixes-2015-10-16' of 
git://anongit.freedesktop.org/drm-intel:
        drm/i915: Add primary plane to mask if it's visible
        drm/i915: Move sprite/cursor plane disable to intel_sanitize_crtc()
        drm/i915: Assign hwmode after encoder state readout
        Revert "drm/i915: Add primary plane to mask if it's visible"
        drm/i915: Deny wrapping an userptr into a framebuffer
        drm/i915: Enable DPLL VGA mode before P1/P2 divider write
        drm/i915: Restore lost DPLL register write on gen2-4
        drm/i915: Flush pipecontrol post-sync writes
        drm/i915: Fix kerneldoc for i915_gem_shrink_all

  commit 8832317f662c06f5c06e638f57bfe89a71c9b266
  Author: Vasant Hegde <hegdevasant@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:53:29 2015 +0530

      powerpc/rtas: Validate rtas.entry before calling enter_rtas()

      Currently we do not validate rtas.entry before calling enter_rtas(). This
      leads to a kernel oops when user space calls rtas system call on a powernv
      platform (see below). This patch adds code to validate rtas.entry before
      making enter_rtas() call.

        Oops: Exception in kernel mode, sig: 4 [#1]
        SMP NR_CPUS=1024 NUMA PowerNV
        task: c000000004294b80 ti: c0000007e1a78000 task.ti: c0000007e1a78000
        NIP: 0000000000000000 LR: 0000000000009c14 CTR: c000000000423140
        REGS: c0000007e1a7b920 TRAP: 0e40   Not tainted  
(3.18.17-340.el7_1.pkvm3_1_0.2400.1.ppc64le)
        MSR: 1000000000081000 <HV,ME>  CR: 00000000  XER: 00000000
        CFAR: c000000000009c0c SOFTE: 0
        NIP [0000000000000000]           (null)
        LR [0000000000009c14] 0x9c14
        Call Trace:
        [c0000007e1a7bba0] [c00000000041a7f4] avc_has_perm_noaudit+0x54/0x110 
(unreliable)
        [c0000007e1a7bd80] [c00000000002ddc0] ppc_rtas+0x150/0x2d0
        [c0000007e1a7be30] [c000000000009358] syscall_exit+0x0/0x98

      Cc: stable@xxxxxxxxxxxxxxx # v3.2+
      Fixes: 55190f88789a ("powerpc: Add skeleton PowerNV platform")
      Reported-by: NAGESWARA R. SASTRY <nasastry@xxxxxxxxxx>
      Signed-off-by: Vasant Hegde <hegdevasant@xxxxxxxxxxxxxxxxxx>
      [mpe: Reword change log, trim oops, and add stable + fixes]
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 37363bc03e0b53c45e98f34e35c75b55611417e0
  Merge: 30730c7 2a6c521
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 22 09:15:10 2015 +1000

      Merge branch 'linux-4.3' of 
git://anongit.freedesktop.org/nouveau/linux-2.6 into drm-fixes

      Just one fix from Ilia to resolve various issues that have resulted from
      buffer eviction.

      * 'linux-4.3' of git://anongit.freedesktop.org/nouveau/linux-2.6:
        drm/nouveau/gem: return only valid domain when there's only one

  commit 2a6c521bb41ce862e43db46f52e7681d33e8d771
  Author: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
  Date:   Tue Oct 20 01:15:39 2015 -0400

      drm/nouveau/gem: return only valid domain when there's only one

      On nv50+, we restrict the valid domains to just the one where the buffer
      was originally created. However after the buffer is evicted to system
      memory, we might move it back to a different domain that was not
      originally valid. When sharing the buffer and retrieving its GEM_INFO
      data, we still want the domain that will be valid for this buffer in a
      pushbuf, not the one where it currently happens to be.

      This resolves fdo#92504 and several others. These are due to suspend
      evicting all buffers, making it more likely that they temporarily end up
      in the wrong place.

      Cc: stable@xxxxxxxxxxxxxxx
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=92504
      Signed-off-by: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit 30730c7f5943b3beace1e29f7f1476e05de3da14
  Author: Adam Richter <adamrichter4@xxxxxxxxx>
  Date:   Fri Oct 16 03:33:02 2015 -0700

      drm: fix mutex leak in drm_dp_get_mst_branch_device

      In Linux 4.3-rc5, there is an error case in drm_dp_get_branch_device
      that returns without releasing mgr->lock, resulting a spew of kernel
      messages about a kernel work function possibly having leaked a mutex
      and presumably more serious adverse consequences later.  This patch
      changes the error to "goto out" to unlock the mutex before returning.

      [airlied: grabbed from drm-next as it fixes something we've seen]

      Signed-off-by: Adam J. Richter <adam_richter2004@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 8a70dd2669200ce83255ed8c5ebef7e59f9e8707
  Merge: 7f67786 ba2374f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 06:32:48 2015 +0900

      Merge tag 'for-linus-20151021' of git://git.infradead.org/intel-iommu

      Pull intel-iommu bugfix from David Woodhouse:
       "This contains a single fix, for when the IOMMU API is used to overlay
        an existing mapping comprised of 4KiB pages, with a mapping that can
        use superpages.

        For the *first* superpage in the new mapping, we were correctly¹
        freeing the old bottom-level page table page and clearing the link to
        it, before installing the superpage.  For subsequent superpages,
        however, we weren't.  This causes a memory leak, and a warning about
        setting a PTE which is already set.

        ¹ Well, not *entirely* correctly.  We just free the page table pages
          right there and then, which is wrong.  In fact they should only be
          freed *after* the IOTLB is flushed so we know the hardware will no
          longer be looking at them....  and in fact I note that the IOTLB
          flush is completely missing from the intel_iommu_map() code path,
          although it needs to be there if it's permitted to overwrite
          existing mappings.

          Fixing those is somewhat more intrusive though, and will probably
          need to wait for 4.4 at this point"

      * tag 'for-linus-20151021' of git://git.infradead.org/intel-iommu:
        iommu/vt-d: fix range computation when making room for large pages

  commit 7f67786330ba500ebd7c62ff52b5f7cc6336358f
  Merge: be0e198 08b137d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 06:31:27 2015 +0900

      Merge tag 'mmc-v4.3-rc5' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC bugfix from Ulf Hansson:
       "Here's yet another MMC fix intended for v4.3 rc7.  I don't expect to
        send any further pull requests for 4.3 rc[n].

        MMC core:
         - Don't re-tune in the reset sequence to allow re-init of the card"

      * tag 'mmc-v4.3-rc5' of git://git.linaro.org/people/ulf.hansson/mmc:
        mmc: core: Fix init_card in 52Mhz

  commit e3d006ce8180a0c025ce66bdc89bbc125f85be57
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Oct 21 15:45:13 2015 -0300

      perf annotate: Add debug message for out of bounds sample

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-q0lde9ajs84oi38nlyjcqbwg@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8b8cde49586566471d65af9a59e25d3edb941387
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 11:46:36 2015 -0700

      perf evsel: Print branch filter state with -vv

      Add a missing field to the perf_event_attr debug output.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Acked-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445366797-30894-4-git-send-email-andi@xxxxxxxxxxxxxx
      [ Print it between config2 and sample_regs_user (peterz)]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0ca81a2840f77855bbad1b9f172c545c4dc9e6a4
  Author: Doron Tsur <doront@xxxxxxxxxxxx>
  Date:   Sun Oct 11 15:58:17 2015 +0300

      IB/cm: Fix rb-tree duplicate free and use-after-free

      ib_send_cm_sidr_rep could sometimes erase the node from the sidr
      (depending on errors in the process). Since ib_send_cm_sidr_rep is
      called both from cm_sidr_req_handler and cm_destroy_id, cm_id_priv
      could be either erased from the rb_tree twice or not erased at all.
      Fixing that by making sure it's erased only once before freeing
      cm_id_priv.

      Fixes: a977049dacde ('[PATCH] IB: Add the kernel CM implementation')
      Signed-off-by: Doron Tsur <doront@xxxxxxxxxxxx>
      Signed-off-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 09dc1387c9c06cdaf55bc99b35238bd2ec0aed4b
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Wed Oct 21 21:31:49 2015 +0200

      drm/vmwgfx: Stabilize the command buffer submission code

      This commit addresses some stability problems with the command buffer
      submission code recently introduced:

      1) Make the vmw_cmdbuf_man_process() function handle reruns internally to
      avoid losing interrupts if the caller forgets to rerun on -EAGAIN.
      2) Handle default command buffer allocations using inline command buffers.
      This avoids rare allocation deadlocks.
      3) In case of command buffer errors we might lose fence submissions.
      Therefore send a new fence after each command buffer error. This will help
      avoid lengthy fence waits.

      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 17bc08f0d1b17d6d5e4967c1b430af627c5f2041
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:10 2015 +0300

      Bluetooth: Remove unnecessary hci_explicit_connect_lookup function

      There's only one user of this helper which can be replaces with a call
      to hci_pend_le_action_lookup() and a check for params->explicit_connect.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1ede9868f6577e2bd7eda1a05cd6812aff5c6c8a
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:07 2015 +0300

      Bluetooth: Remove redundant (and possibly wrong) flag clearing

      There's no need to clear the HCI_CONN_ENCRYPT_PEND flag in
      smp_failure. In fact, this may cause the encryption tracking to get
      out of sync as this has nothing to do with HCI activity.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b5c2b6214c609f2be4c020c0be90758b5feeb446
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:09 2015 +0300

      Bluetooth: Add hdev helper variable to hci_le_create_connection_cancel

      The hci_le_create_connection_cancel() function needs to use the hdev
      pointer in many places so add a variable for it to avoid the need to
      dereference the hci_conn every time.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ec182f0397e7065dabf13a99fc745fcab0bdc641
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:03 2015 +0300

      Bluetooth: Remove unnecessary indentation in unpair_device()

      Instead of doing all of the LE-specific handling in an else-branch in
      unpair_device() create a 'done' label for the BR/EDR branch to jump to
      and then remove the else-branch completely.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f5ad4ffceba0b34adb0d896a069b81fc68f2d7b6
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:02 2015 +0300

      Bluetooth: 6lowpan: Use hci_conn_hash_lookup_le() when possible

      Use the new hci_conn_hash_lookup_le() API to look up LE connections.
      This way we're guaranteed exact matches that also take into account
      the address type.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 9d4c1cc15b14b4a96ddfcfac533a12f9f527c129
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:01 2015 +0300

      Bluetooth: Use hci_conn_hash_lookup_le() when possible

      Use the new hci_conn_hash_lookup_le() API to look up LE connections.
      This way we're guaranteed exact matches that also take into account
      the address type.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1b51c7b6e878a2df6fdb5bcf51f966eb46a330e0
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:00 2015 +0300

      Bluetooth: Add hci_conn_hash_lookup_le() helper function

      Many of the existing LE connection lookups are forced to use
      hci_conn_hash_lookup_ba() which doesn't take into account the address
      type. What's worse, most of the users don't bother checking that the
      returned address type matches what was wanted.

      This patch adds a new helper API to look up LE connections based on
      their address and address type, paving the way to have the
      hci_conn_hash_lookup_ba() users converted to do more precise lookups.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 85813a7ec774b982899c82f86c52cad47588f863
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:02:59 2015 +0300

      Bluetooth: Add le_addr_type() helper function

      The mgmt code needs to convert from mgmt/L2CAP address types to HCI in
      many places. Having a dedicated helper function for this simplifies
      code by shortening it and removing unnecessary 'addr_type' variables.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ad355e383d826e3506c3caaa0fe991fd112de47b
  Merge: b10d92a 0d99749
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 21 17:46:56 2015 +0200

      Merge tag 'kvm-arm-for-v4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into kvm-master

      A late round of KVM/ARM fixes for v4.3-rc7, fixing:
       - A bug where level-triggered interrupts lowered from userspace
         are still routed to the guest
       - A memory leak an a failed initialization path
       - A build error under certain configurations
       - Several timer bugs introduced with moving the timer to the active
         state handling instead of the masking trick.

  commit 55f41297576ddb7868af2f13f3a8107178dee2d0
  Merge: 0690f4f db347f1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 21 17:03:37 2015 +0200

      Merge tag 'mvebu-fixes-4.3-2' of git://git.infradead.org/linux-mvebu into 
fixes

      Merge "mvebu fixes for 4.3 (part 2)" from Gregory CLEMENT:

      Fix wrong compatible for A385 DB AP preventing using suspend

      * tag 'mvebu-fixes-4.3-2' of git://git.infradead.org/linux-mvebu:
        ARM: mvebu: correct a385-db-ap compatible string

  commit 0690f4f2ef487259e9ce39f575c48c89745058f2
  Merge: 6701ef0 b28fec1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 21 17:02:13 2015 +0200

      Merge tag 'samsung-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung into fixes

      Merge "Samsung 2nd fixes for v4.3" from Kukjin Kim:

      - fix SOC detection of exynos thermal on exynos5260
      - fix audio card detection on Peach boards
      - fix double of_node_put() when parsing child power domains

      * tag 'samsung-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung:
        thermal: exynos: Fix register read in TMU
        ARM: dts: Fix audio card detection on Peach boards
        ARM: EXYNOS: Fix double of_node_put() when parsing child power domains

  commit 6701ef0318f76a9765a3fc762cbac405e024a8c2
  Merge: 4f1d841 57df538
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 21 17:01:14 2015 +0200

      Merge tag 'omap-for-v4.3/fixes-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Merge "Fixes for omaps for v4.3-rc cycle" from Tony Lindgren:

      - Fix oops with LPAE and moew than 2GB of memory by enabling
        ZONE_DMA for LPAE. Probably no need for stable on this one as we
        only recently ran into this with the mainline kernel

      - Fix imprecise external abort caused by bogus SRAM init. This affects
        dm814x recently merged, so no need for stable on this one AFAIK

      * tag 'omap-for-v4.3/fixes-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        ARM: OMAP2+: Fix imprecise external abort caused by bogus SRAM init
        ARM: OMAP2+: Fix oops with LPAE and more than 2GB of memory

  commit 6ac311ae8bfb47de09f349e781e26373944d2ee3
  Author: Elad Raz <eladr@xxxxxxxxxxxx>
  Date:   Mon Oct 19 15:37:25 2015 +0300

      Adding switchdev ageing notification on port bridged

      Configure ageing time to the HW for newly bridged device

      CC: Scott Feldman <sfeldma@xxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 50010c20597d14667eff0fdb628309986f195230
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Mon Oct 19 13:16:49 2015 +0300

      irda: precedence bug in irlmp_seq_hb_idx()

      This is decrementing the pointer, instead of the value stored in the
      pointer.  KASan detects it as an out of bounds reference.

      Reported-by: "Berry Cheng ç¨?å??(æ??æ·¼)" <chengmiao.cj@xxxxxxxxxxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca88ea1247dfee094e2467a3578eaec9bdf0833a
  Author: Joe Jin <joe.jin@xxxxxxxxxx>
  Date:   Mon Oct 19 13:37:17 2015 +0800

      xen-netfront: update num_queues to real created

      Sometimes xennet_create_queues() may failed to created all requested
      queues, we need to update num_queues to real created to avoid NULL
      pointer dereference.

      Signed-off-by: Joe Jin <joe.jin@xxxxxxxxxx>
      Cc: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Wei Liu <wei.liu2@xxxxxxxxxx>
      Cc: Ian Campbell <ian.campbell@xxxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6a835bb04ca34b6fd337eea0544a871ba2349b8
  Author: Gao feng <omarapazanadi@xxxxxxxxx>
  Date:   Sun Oct 18 23:35:56 2015 +0800

      vsock: fix missing cleanup when misc_register failed

      reset transport and unlock if misc_register failed.

      Signed-off-by: Gao feng <omarapazanadi@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 10be15ff6c33f1dc0a96cae6089dc2268834e568
  Merge: f3c9f95 968200f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 07:36:51 2015 -0700

      Merge branch 'mv643xx-fixes'

      Philipp Kirchhofer says:

      ====================
      net: mv643xx_eth: TSO TX data corruption fixes

      as previously discussed [1] the mv643xx_eth driver has some
      issues with data corruption when using TCP segmentation offload (TSO).

      The following patch set improves this situation by fixing two data
      corruption bugs in the TSO TX path.

      Before applying the patches repeatedly accessing large files located on
      a SMB share on my NSA325 NAS with TSO enabled resulted in different
      hash sums, which confirmed that data corruption is happening during
      file transfer. After applying the patches the hash sums were the same.

      As this is my first patch submission please feel free to point out any
      issues with the patch set.

      [1] http://thread.gmane.org/gmane.linux.network/336530
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 968200f322daccc6f08fee26fe1bb4232e460408
  Author: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:02:44 2015 +0200

      net: mv643xx_eth: Defer writing the first TX descriptor when using TSO

      To prevent a race between the TX DMA engine and the CPU the writing of the
      first transmit descriptor must be deferred until all following descriptors
      have been updated. The network card may otherwise start transmitting 
before
      all packet descriptors are set up correctly, which leads to data 
corruption
      or an aborted transmit operation.

      This deferral is already done in the non-TSO TX path, implement it also in
      the TSO TX path.

      Signed-off-by: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 91986fd3d335a2ea651bc85cf5a03f2f61a2aa34
  Author: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:02:43 2015 +0200

      net: mv643xx_eth: Ensure proper data alignment in TSO TX path

      The TX DMA engine requires that buffers with a size of 8 bytes or smaller
      must be 64 bit aligned. This requirement may be violated when doing TSO,
      as in this case larger skb frags can be broken up and transmitted in small
      parts with then inappropriate alignment.

      Fix this by checking for proper alignment before handing a buffer to the
      DMA engine. If the data is misaligned realign it by copying it into the
      TSO header data area.

      Signed-off-by: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9299b24712400d1cfe3dcf3e5dcb6cac2940df56
  Author: Dave Martin <Dave.Martin@xxxxxxx>
  Date:   Thu Jul 30 16:36:25 2015 +0100

      arm64: Constify hwcap name string arrays

      The hwcap string arrays used for generating the contents of
      /proc/cpuinfo are currently arrays of non-const pointers.

      There's no need for these pointers to be mutable, so this patch makes
      them const so that they can be moved to .rodata.

      Signed-off-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 4db8e5ea6b07ae83e4361aee3f967f7126e01fa4
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:55 2015 +0100

      arm64/kvm: Make use of the system wide safe values

      Use the system wide safe value from the new API for safer
      decisions

      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Cc: kvmarm@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Acked-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3085bb01b40676d946a13064483ab2819ae3b010
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:54 2015 +0100

      arm64/debug: Make use of the system wide safe value

      Use the system wide value of ID_AA64DFR0 to make safer decisions

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fe80f9f2da1006a4308c2bc018ee1d67f10dd8d0
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:53 2015 +0100

      arm64: Move FP/ASIMD hwcap handling to common code

      The FP/ASIMD is detected in fpsimd_init(), which is built-in
      unconditionally. Lets move the hwcap handling to the central place.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 37b01d53ceefa390d6eee7a82f3c156b64951bf3
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:52 2015 +0100

      arm64/HWCAP: Use system wide safe values

      Extend struct arm64_cpu_capabilities to handle the HWCAP detection
      and make use of the system wide value of the feature registers for
      a reliable set of HWCAPs.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit da8d02d19ffdd201af632c755a473b6df4b3e4cc
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:51 2015 +0100

      arm64/capabilities: Make use of system wide safe value

      Now that we can reliably read the system wide safe value for a
      feature register, use that to compute the system capability.
      This patch also replaces the 'feature-register-specific'
      methods with a generic routine to check the capability.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit dbb4e152b8da1f977d9d8cd7e494ab4ee3622f72
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:50 2015 +0100

      arm64: Delay cpu feature capability checks

      At the moment we run through the arm64_features capability list for
      each CPU and set the capability if one of the CPU supports it. This
      could be problematic in a heterogeneous system with differing 
capabilities.
      Delay the CPU feature checks until all the enabled CPUs are up(i.e,
      smp_cpus_done(), so that we can make better decisions based on the
      overall system capability. Once we decide and advertise the capabilities
      the alternatives can be applied. From this state, we cannot roll back
      a feature to disabled based on the values from a new hotplugged CPU,
      due to the runtime patching and other reasons. So, for all new CPUs,
      we need to make sure that they have the established system capabilities.
      Failing which, we bring the CPU down, preventing it from turning online.
      Once the capabilities are decided, any new CPU booting up goes through
      verification to ensure that it has all the enabled capabilities and also
      invokes the respective enable() method on the CPU.

      The CPU errata checks are not delayed and is still executed per-CPU
      to detect the respective capabilities. If we ever come across a non-errata
      capability that needs to be checked on each-CPU, we could introduce them 
via
      a new capability table(or introduce a flag), which can be processed per 
CPU.

      The next patch will make the feature checks use the system wide
      safe value of a feature register.

      NOTE: The enable() methods associated with the capability is scheduled
      on all the CPUs (which is the only use case at the moment). If we need
      a different type of 'enable()' which only needs to be run once on any CPU,
      we should be able to handle that when needed.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      [catalin.marinas@xxxxxxx: static variable and coding style fixes]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ce8b602c694c9482e0ffb7432cd59fa2276673fe
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:49 2015 +0100

      arm64: Refactor check_cpu_capabilities

      check_cpu_capabilities runs through a given list of caps and
      checks if the system has the cap, updates the system capability
      bitmap and also runs any enable() methods associated with them.
      All of this is not quite obvious from the name 'check'. This
      patch splits the check_cpu_capabilities into two parts :

      1) update_cpu_capabilities
       => Runs through the given list and updates the system
          wide capability map.
      2) enable_cpu_capabilities
       => Runs through the given list and invokes enable() (if any)
          for the caps enabled on the system.

      Cc: Andre Przywara <andre.przywara@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Suggested-by: Catalin Marinas <catalin.marinsa@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c1e8656cbae139c8aaf34d7b802edecbc8a1cf58
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:48 2015 +0100

      arm64: Cleanup mixed endian support detection

      Make use of the system wide safe register to decide the support
      for mixed endian.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit b3f1537893b54d0f42f52e0f4cde5e17e21f564c
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:47 2015 +0100

      arm64: Read system wide CPUID value

      Add an API for reading the safe CPUID value across the
      system from the new infrastructure.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3086d391f992984def0aa6aa4a36f54853c58536
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:46 2015 +0100

      arm64: Consolidate CPU Sanity check to CPU Feature infrastructure

      This patch consolidates the CPU Sanity check to the new infrastructure.

      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3c739b57108436211c7f798ba3de0bb0cd8ef469
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:45 2015 +0100

      arm64: Keep track of CPU feature registers

      This patch adds an infrastructure to keep track of the CPU feature
      registers on the system. For each register, the infrastructure keeps
      track of the system wide safe value of the feature bits. Also, tracks
      the which fields of a register should be matched strictly across all
      the CPUs on the system for the SANITY check infrastructure.

      The feature bits are classified into following 3 types depending on
      the implication of the possible values. This information is used to
      decide the safe value for a feature.

      LOWER_SAFE  - The smaller value is safer
      HIGHER_SAFE - The bigger value is safer
      EXACT       - We can't decide between the two, so a predefined safe_value 
is used.

      This infrastructure will be later used to make better decisions for:

       - Kernel features (e.g, KVM, Debug)
       - SANITY Check
       - CPU capability
       - ELF HWCAP
       - Exposing CPU Feature register to userspace.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      [catalin.marinas@xxxxxxx: whitespace fix]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ce98a677d897dbaac86905652292fab1eeeb2b93
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:44 2015 +0100

      arm64: Handle width of a cpuid feature

      Introduce a helper to extract cpuid feature for any given
      width.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 12d11817eaafa414eeb47af684093eb2165ebe37
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:43 2015 +0100

      arm64: Move /proc/cpuinfo handling code

      This patch moves the /proc/cpuinfo handling code:

      arch/arm64/kernel/{setup.c to cpuinfo.c}

      No functional changes

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit cdcf817b7e4b62b935d8797f7d07ea0b97760884
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:42 2015 +0100

      arm64: Move mixed endian support detection

      Move the mixed endian support detection code to cpufeature.c
      from cpuinfo.c. This also moves the update_cpu_features()
      used by mixed endian detection code, which will get more
      functionality.

      Also moves the ID register field shifts to asm/sysreg.h,
      where all the useful definitions will end up in later patches.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9cdf8ec4a86b9310111f741bbaf11df9120e0482
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:41 2015 +0100

      arm64: Move cpu feature detection code

      This patch moves the CPU feature detection code from
       arch/arm64/kernel/{setup.c to cpufeature.c}

      The plan is to consolidate all the CPU feature handling
      in cpufeature.c.

      Apart from changing pr_fmt from "alternatives" to "cpu features",
      there are no functional changes.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 4b998ff1885eecd3dc330bf057e24667c1db84a4
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:40 2015 +0100

      arm64: Delay cpuinfo_store_boot_cpu

      At the moment the boot CPU stores the cpuinfo long before the
      PERCPU areas are initialised by the kernel. This could be problematic
      as the non-boot CPU data structures might get copied with the data
      from the boot CPU, giving us no chance to detect if a particular CPU
      updated its cpuinfo. This patch delays the boot cpu store to
      smp_prepare_boot_cpu().

      Also kills the setup_processor() which no longer does meaningful
      work.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3a75578efae64b94d76eacbf8adf2a3ab13c6aa1
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:39 2015 +0100

      arm64: Delay ELF HWCAP initialisation until all CPUs are up

      Delay the ELF HWCAP initialisation until all the (enabled) CPUs are
      up, i.e, smp_cpus_done(). This is in preparation for detecting the
      common features across the CPUS and creating a consistent ELF HWCAP
      for the system.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 64f17818977d0989f7d05347670777611b295799
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:38 2015 +0100

      arm64: Make the CPU information more clear

      At early boot, we print the CPU version/revision. On a heterogeneous
      system, we could have different types of CPUs. Print the CPU info for
      all active cpus. Also, the secondary CPUs prints the message only when
      they turn online.

      Also, remove the redundant 'revision' information which doesn't
      make any sense without the 'variant' field.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit e27c5b9d23168cc2cb8fec147ae7ed1f7a2005c3
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Oct 13 18:14:19 2015 -0400

      writeback: remove broken rbtree_postorder_for_each_entry_safe() usage in 
cgwb_bdi_destroy()

      a20135ffbc44 ("writeback: don't drain bdi_writeback_congested on bdi
      destruction") added rbtree_postorder_for_each_entry_safe() which is
      used to remove all entries; however, according to Cody, the iterator
      isn't safe against operations which may rebalance the tree.  Fix it by
      switching to repeatedly removing rb_first() until empty.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: Cody P Schafer <dev@xxxxxxxxxx>
      Fixes: a20135ffbc44 ("writeback: don't drain bdi_writeback_congested on 
bdi destruction")
      Link: 
http://lkml.kernel.org/g/1443997973-1700-1-git-send-email-dev@xxxxxxxxxx
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit eb9fae328faff9807a4ab5c1834b19f34dd155d4
  Merge: c8fdc32 4f41b1c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 07:00:59 2015 -0700

      Merge branch 'tcp-rack'

      Yuchung Cheng says:

      ====================
      RACK loss detection

      RACK (Recent ACK) loss recovery uses the notion of time instead of
      packet sequence (FACK) or counts (dupthresh).

      It's inspired by the FACK heuristic in tcp_mark_lost_retrans(): when a
      limited transmit (new data packet) is sacked in recovery, then any
      retransmission sent before that newly sacked packet was sent must have
      been lost, since at least one round trip time has elapsed.

      But that existing heuristic from tcp_mark_lost_retrans()
      has several limitations:
        1) it can't detect tail drops since it depends on limited transmit
        2) it's disabled upon reordering (assumes no reordering)
        3) it's only enabled in fast recovery but not timeout recovery

      RACK addresses these limitations with a core idea: an unacknowledged
      packet P1 is deemed lost if a packet P2 that was sent later is is
      s/acked, since at least one round trip has passed.

      Since RACK cares about the time sequence instead of the data sequence
      of packets, it can detect tail drops when a later retransmission is
      s/acked, while FACK or dupthresh can't. For reordering RACK uses a
      dynamically adjusted reordering window ("reo_wnd") to reduce false
      positives on ever (small) degree of reordering, similar to the delayed
      Early Retransmit.

      In the current patch set RACK is only a supplemental loss detection
      and does not trigger fast recovery. However we are developing RACK
      to replace or consolidate FACK/dupthresh, early retransmit, and
      thin-dupack. These heuristics all implicitly bear the time notion.
      For example, the delayed Early Retransmit is simply applying RACK
      to trigger the fast recovery with small inflight.

      RACK requires measuring the minimum RTT. Tracking a global min is less
      robust due to traffic engineering pathing changes. Therefore it uses a
      windowed filter by Kathleen Nichols. The min RTT can also be useful
      for various other purposes like congestion control or stat monitoring.

      This patch has been used on Google servers for well over 1 year. RACK
      has also been implemented in the QUIC protocol. We are submitting an
      IETF draft as well.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f41b1c58a32537542f14c1150099131613a5e8a
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:47 2015 -0700

      tcp: use RACK to detect losses

      This patch implements the second half of RACK that uses the the most
      recent transmit time among all delivered packets to detect losses.

      tcp_rack_mark_lost() is called upon receiving a dubious ACK.
      It then checks if an not-yet-sacked packet was sent at least
      "reo_wnd" prior to the sent time of the most recently delivered.
      If so the packet is deemed lost.

      The "reo_wnd" reordering window starts with 1msec for fast loss
      detection and changes to min-RTT/4 when reordering is observed.
      We found 1msec accommodates well on tiny degree of reordering
      (<3 pkts) on faster links. We use min-RTT instead of SRTT because
      reordering is more of a path property but SRTT can be inflated by
      self-inflicated congestion. The factor of 4 is borrowed from the
      delayed early retransmit and seems to work reasonably well.

      Since RACK is still experimental, it is now used as a supplemental
      loss detection on top of existing algorithms. It is only effective
      after the fast recovery starts or after the timeout occurs. The
      fast recovery is still triggered by FACK and/or dupack threshold
      instead of RACK.

      We introduce a new sysctl net.ipv4.tcp_recovery for future
      experiments of loss recoveries. For now RACK can be disabled by
      setting it to 0.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 659a8ad56f490279f0efee43a62ffa1ac914a4e0
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:46 2015 -0700

      tcp: track the packet timings in RACK

      This patch is the first half of the RACK loss recovery.

      RACK loss recovery uses the notion of time instead
      of packet sequence (FACK) or counts (dupthresh). It's inspired by the
      previous FACK heuristic in tcp_mark_lost_retrans(): when a limited
      transmit (new data packet) is sacked, then current retransmitted
      sequence below the newly sacked sequence must been lost,
      since at least one round trip time has elapsed.

      But it has several limitations:
      1) can't detect tail drops since it depends on limited transmit
      2) is disabled upon reordering (assumes no reordering)
      3) only enabled in fast recovery ut not timeout recovery

      RACK (Recently ACK) addresses these limitations with the notion
      of time instead: a packet P1 is lost if a later packet P2 is s/acked,
      as at least one round trip has passed.

      Since RACK cares about the time sequence instead of the data sequence
      of packets, it can detect tail drops when later retransmission is
      s/acked while FACK or dupthresh can't. For reordering RACK uses a
      dynamically adjusted reordering window ("reo_wnd") to reduce false
      positives on ever (small) degree of reordering.

      This patch implements tcp_advanced_rack() which tracks the
      most recent transmission time among the packets that have been
      delivered (ACKed or SACKed) in tp->rack.mstamp. This timestamp
      is the key to determine which packet has been lost.

      Consider an example that the sender sends six packets:
      T1: P1 (lost)
      T2: P2
      T3: P3
      T4: P4
      T100: sack of P2. rack.mstamp = T2
      T101: retransmit P1
      T102: sack of P2,P3,P4. rack.mstamp = T4
      T205: ACK of P4 since the hole is repaired. rack.mstamp = T101

      We need to be careful about spurious retransmission because it may
      falsely advance tp->rack.mstamp by an RTT or an RTO, causing RACK
      to falsely mark all packets lost, just like a spurious timeout.

      We identify spurious retransmission by the ACK's TS echo value.
      If TS option is not applicable but the retransmission is acknowledged
      less than min-RTT ago, it is likely to be spurious. We refrain from
      using the transmission time of these spurious retransmissions.

      The second half is implemented in the next patch that marks packet
      lost using RACK timestamp.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 625a5e109a3ed6f36a1008a43069a3462b44a424
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:45 2015 -0700

      tcp: skb_mstamp_after helper

      a helper to prepare the first main RACK patch.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77c631273dc1305a89698929decafa6e43bea645
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:44 2015 -0700

      tcp: add tcp_tsopt_ecr_before helper

      a helper to prepare the main RACK patch

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit af82f4e84866ecd360a53f770d6217637116e6c1
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:43 2015 -0700

      tcp: remove tcp_mark_lost_retrans()

      Remove the existing lost retransmit detection because RACK subsumes
      it completely. This also stops the overloading the ack_seq field of
      the skb control block.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f672258391b42a5c7cc2732c9c063e56a85c8dbe
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:42 2015 -0700

      tcp: track min RTT using windowed min-filter

      Kathleen Nichols' algorithm for tracking the minimum RTT of a
      data stream over some measurement window. It uses constant space
      and constant time per update. Yet it almost always delivers
      the same minimum as an implementation that has to keep all
      the data in the window. The measurement window is tunable via
      sysctl.net.ipv4.tcp_min_rtt_wlen with a default value of 5 minutes.

      The algorithm keeps track of the best, 2nd best & 3rd best min
      values, maintaining an invariant that the measurement time of
      the n'th best >= n-1'th best. It also makes sure that the three
      values are widely separated in the time window since that bounds
      the worse case error when that data is monotonically increasing
      over the window.

      Upon getting a new min, we can forget everything earlier because
      it has no value - the new min is less than everything else in the
      window by definition and it's the most recent. So we restart fresh
      on every new min and overwrites the 2nd & 3rd choices. The same
      property holds for the 2nd & 3rd best.

      Therefore we have to maintain two invariants to maximize the
      information in the samples, one on values (1st.v <= 2nd.v <=
      3rd.v) and the other on times (now-win <=1st.t <= 2nd.t <= 3rd.t <=
      now). These invariants determine the structure of the code

      The RTT input to the windowed filter is the minimum RTT measured
      from ACK or SACK, or as the last resort from TCP timestamps.

      The accessor tcp_min_rtt() returns the minimum RTT seen in the
      window. ~0U indicates it is not available. The minimum is 1usec
      even if the true RTT is below that.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e45a3e36b363cc4c79c70f2b4f994e66543a219
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:41 2015 -0700

      tcp: apply Kern's check on RTTs used for congestion control

      Currently ca_seq_rtt_us does not use Kern's check. Fix that by
      checking if any packet acked is a retransmit, for both RTT used
      for RTT estimation and congestion control.

      Fixes: 5b08e47ca ("tcp: prefer packet timing to TS-ECR for RTT")
      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f3c9f95056acab715328ee63a80ddf5fd32c0a28
  Merge: aebd994 d88ecb3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 06:41:51 2015 -0700

      Merge branch 'smsc-energy-detect'

      Heiko Schocher says:

      ====================
      net, phy, smsc: add posibility to disable energy detect mode

      On some boards the energy enable detect mode leads in
      trouble with some switches, so make the enabling of
      this mode configurable through DT.
      Therefore the property "smsc,disable-energy-detect" is
      introduced.

      Patch 1 introduces phy-handle support for the ti,cpsw
      driver. This is needed now for the smsc phy.

      Patch 2 adds the disable energy mode functionality
      to the smsc phy

      Changes in v2:
      - add comments from Florian Fainelli
        - I did not change disable property name into enable
          because I fear to break existing behaviour
        - add smsc vendor prefix
        - remove CONFIG_OF and use __maybe_unused
        - introduce "phy-handle" ability into ti,cpsw
          driver, so I can remove bogus:
            if (!of_node && dev->parent->of_node)
                of_node = dev->parent->of_node;
          construct. Therefore new patch for the ti,cpsw
          driver is necessary.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d88ecb373bd1877acc43e13311a8e0e6daffc3d2
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Sat Oct 17 06:04:36 2015 +0200

      net: phy: smsc: disable energy detect mode

      On some boards the energy enable detect mode leads in
      trouble with some switches, so make the enabling of
      this mode configurable through DT.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e42f715264ff158478fa30eaed847f6e131366b
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Sat Oct 17 06:04:35 2015 +0200

      drivers: net: cpsw: add phy-handle parsing

      add the ability to parse "phy-handle". This
      is needed for phys, which have a DT node, and
      need to parse DT properties.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aebd99477f03950fb05b29c7248656167198bf2d
  Author: Simon Arlott <simon@xxxxxxxxxxx>
  Date:   Thu Oct 15 21:00:22 2015 +0100

      bcm63xx_enet: check 1000BASE-T advertisement configuration

      If a gigabit ethernet PHY is connected to a fast ethernet MAC,
      then it can detect 1000 support from the partner but not use it.

      This results in a forced speed of 1000 and RX/TX failure.

      Check for 1000BASE-T support and then check the advertisement
      configuration before setting the MAC speed to 1000mbit.

      Signed-off-by: Simon Arlott <simon@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c8fdc324916a864de753db6de6423b048c20cc0f
  Merge: 26440c8 a1f192c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 06:29:56 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-19

      This series contains updates to i40e and i40evf only.

      Kiran adds a spinlock around code accessing VSI MAC filter list to
      ensure that we are synchronizing access to the filter list, otherwise
      we can end up with multiple accesses at the same time which can cause
      the VSI MAC filter list to get in an unstable or corrupted state.

      Jesse fixes overlong BIT defines, where the RSS enabling call were
      mistakenly missed.  Also fixes a bug where the enable function was
      enabling the interrupt twice while trying to update the two interrupt
      throttle rate thresholds for Rx and Tx, while refactoring the IRQ
      enable function to simplify reading the flow.  Addressed the high
      CPU utilization of some small streaming workloads that the driver should
      reduce CPU in.

      Anjali fixes two X722 issues with respect to EEPROM checksum verify and
      reading NVM version info.  Fixed where a mask value was accidentally
      replaced with a bit mask causing Flow Director sideband to be broken.

      Alex Duyck fixes areas of the drivers which run from hard interrupt
      context or with interrupts already disabled in netpoll, so use
      napi_schedule_irqoff() instead of napi_schedule().

      Mitch fixes the VF drivers to not easily give up when it is not able
      to communicate with the PF driver.

      Carolyn fixes a problem where our tools MAC loopback test, after driver
      unbind would fail because the hardware was configured for multiqueue and
      unbind operation did not clear this configuration.  Also fixed a issue
      where the NVMUpdate tool gets bad data from the PHY when using the PHY
      NVM feature because of contention on the MDIO interface from getting
      PHY capability calls from the driver during regular operations.

      Catherine fixed an issue where we were checking if autoneg was allowed
      to change before checking if autoneg was changing, these checks need to
      be in the reverse order.

      Jean Sacren fixes up an function header comment to align the kernel-docs
      with the actual code.

      v2: Cleaned up the use of spin_is_locked() in patch 1 based on feedback
          from David Miller, since it always evaluates to zero on uni-processor
          builds
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ce783dc5ea3af3a213ac9b4d9d2ccfeeb9c9058
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 15:21:31 2015 +0300

      Bluetooth: Fix missing hdev locking for LE scan cleanup

      The hci_conn objects don't have a dedicated lock themselves but rely
      on the caller to hold the hci_dev lock for most types of access. The
      hci_conn_timeout() function has so far sent certain HCI commands based
      on the hci_conn state which has been possible without holding the
      hci_dev lock.

      The recent changes to do LE scanning before connect attempts added
      even more operations to hci_conn and hci_dev from hci_conn_timeout,
      thereby exposing potential race conditions with the hci_dev and
      hci_conn states.

      As an example of such a race, here there's a timeout but an
      l2cap_sock_connect() call manages to race with the cleanup routine:

      [Oct21 08:14] l2cap_chan_timeout: chan ee4b12c0 state BT_CONNECT
      [  +0.000004] l2cap_chan_close: chan ee4b12c0 state BT_CONNECT
      [  +0.000002] l2cap_chan_del: chan ee4b12c0, conn f3141580, err 111, 
state BT_CONNECT
      [  +0.000002] l2cap_sock_teardown_cb: chan ee4b12c0 state BT_CONNECT
      [  +0.000005] l2cap_chan_put: chan ee4b12c0 orig refcnt 4
      [  +0.000010] hci_conn_drop: hcon f53d56e0 orig refcnt 1
      [  +0.000013] l2cap_chan_put: chan ee4b12c0 orig refcnt 3
      [  +0.000063] hci_conn_timeout: hcon f53d56e0 state BT_CONNECT
      [  +0.000049] hci_conn_params_del: addr ee:0d:30:09:53:1f (type 1)
      [  +0.000002] hci_chan_list_flush: hcon f53d56e0
      [  +0.000001] hci_chan_del: hci0 hcon f53d56e0 chan f4e7ccc0
      [  +0.004528] l2cap_sock_create: sock e708fc00
      [  +0.000023] l2cap_chan_create: chan ee4b1770
      [  +0.000001] l2cap_chan_hold: chan ee4b1770 orig refcnt 1
      [  +0.000002] l2cap_sock_init: sk ee4b3390
      [  +0.000029] l2cap_sock_bind: sk ee4b3390
      [  +0.000010] l2cap_sock_setsockopt: sk ee4b3390
      [  +0.000037] l2cap_sock_connect: sk ee4b3390
      [  +0.000002] l2cap_chan_connect: 00:02:72:d9:e5:8b -> ee:0d:30:09:53:1f 
(type 2) psm 0x00
      [  +0.000002] hci_get_route: 00:02:72:d9:e5:8b -> ee:0d:30:09:53:1f
      [  +0.000001] hci_dev_hold: hci0 orig refcnt 8
      [  +0.000003] hci_conn_hold: hcon f53d56e0 orig refcnt 0

      Above the l2cap_chan_connect() shouldn't have been able to reach the
      hci_conn f53d56e0 anymore but since hci_conn_timeout didn't do proper
      locking that's not the case. The end result is a reference to hci_conn
      that's not in the conn_hash list, resulting in list corruption when
      trying to remove it later:

      [Oct21 08:15] l2cap_chan_timeout: chan ee4b1770 state BT_CONNECT
      [  +0.000004] l2cap_chan_close: chan ee4b1770 state BT_CONNECT
      [  +0.000003] l2cap_chan_del: chan ee4b1770, conn f3141580, err 111, 
state BT_CONNECT
      [  +0.000001] l2cap_sock_teardown_cb: chan ee4b1770 state BT_CONNECT
      [  +0.000005] l2cap_chan_put: chan ee4b1770 orig refcnt 4
      [  +0.000002] hci_conn_drop: hcon f53d56e0 orig refcnt 1
      [  +0.000015] l2cap_chan_put: chan ee4b1770 orig refcnt 3
      [  +0.000038] hci_conn_timeout: hcon f53d56e0 state BT_CONNECT
      [  +0.000003] hci_chan_list_flush: hcon f53d56e0
      [  +0.000002] hci_conn_hash_del: hci0 hcon f53d56e0
      [  +0.000001] ------------[ cut here ]------------
      [  +0.000461] WARNING: CPU: 0 PID: 1782 at lib/list_debug.c:56 
__list_del_entry+0x3f/0x71()
      [  +0.000839] list_del corruption, f53d56e0->prev is LIST_POISON2 
(00000200)

      The necessary fix is unfortunately more complicated than just adding
      hci_dev_lock/unlock calls to the hci_conn_timeout() call path.
      Particularly, the hci_conn_del() API, which expects the hci_dev lock to
      be held, performs a cancel_delayed_work_sync(&hcon->disc_work) which
      would lead to a deadlock if the hci_conn_timeout() call path tries to
      acquire the same lock.

      This patch solves the problem by deferring the cleanup work to a
      separate work callback. To protect against the hci_dev or hci_conn
      going away meanwhile temporary references are taken with the help of
      hci_dev_hold() and hci_conn_get().

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.3

  commit f8f2dc4a7127725383c93b501fcc4e47871b0a9d
  Author: Bard Liao <bardliao@xxxxxxxxxxx>
  Date:   Wed Oct 21 16:18:18 2015 +0800

      ASoC: rt298: fix wrong setting of gpio2_en

      The register value to enable gpio2 was incorrect. So fix it.

      Signed-off-by: Bard Liao <bardliao@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 53c656c4138511c2ba54df413dc29976cfa9f084
  Author: Paul Mackerras <paulus@xxxxxxxxx>
  Date:   Wed Oct 21 16:06:24 2015 +1100

      powerpc/powernv: Handle irq_happened flag correctly in off-line loop

      This fixes a bug where it is possible for an off-line CPU to fail to go
      into a low-power state (nap/sleep/winkle), and to become unresponsive to
      requests from the KVM subsystem to wake up and run a VCPU. What can
      happen is that a maskable interrupt of some kind (external, decrementer,
      hypervisor doorbell, or HMI) after we have called local_irq_disable() at
      the beginning of pnv_smp_cpu_kill_self() and before interrupts are
      hard-disabled inside power7_nap/sleep/winkle(). In this situation, the
      pending event is marked in the irq_happened flag in the PACA. This
      pending event prevents power7_nap/sleep/winkle from going to the
      requested low-power state; instead they return immediately. We don't
      deal with any of these pending event flags in the off-line loop in
      pnv_smp_cpu_kill_self() because power7_nap et al. return 0 in this case,
      so we will have srr1 == 0, and none of the processing to clear
      interrupts or doorbells will be done.

      Usually, the most obvious symptom of this is that a KVM guest will fail
      with a console message saying "KVM: couldn't grab cpu N".

      This fixes the problem by making sure we handle the irq_happened flags
      properly. First, we hard-disable before the off-line loop. Once we have
      hard-disabled, the irq_happened flags can't change underneath us. We
      unconditionally clear the DEC and HMI flags: there is no processing of
      timer interrupts while off-line, and the necessary HMI processing is all
      done in lower-level code. We leave the EE and DBELL flags alone for the
      first iteration of the loop, so that we won't fail to respond to a
      split-core request that came in just before hard-disabling. Within the
      loop, we handle external interrupts if the EE bit is set in irq_happened
      as well as if the low-power state was interrupted by an external
      interrupt. (We don't need to do the msgclr for a pending doorbell in
      irq_happened, because doorbells are edge-triggered and don't remain
      pending in hardware.) Then we clear both the EE and DBELL flags, and
      once clear, they cannot be set again (until this CPU comes online again,
      that is).

      This also fixes the debug check to not be done when we just ran a KVM
      guest or when the sleep didn't happen because of a pending event in
      irq_happened.

      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 23316316c1af0677a041c81f3ad6efb9dc470b33
  Author: Paul Mackerras <paulus@xxxxxxxxx>
  Date:   Wed Oct 21 16:03:14 2015 +1100

      powerpc: Revert "Use the POWER8 Micro Partition Prefetch Engine in KVM HV 
on POWER8"

      This reverts commit 9678cdaae939 ("Use the POWER8 Micro Partition
      Prefetch Engine in KVM HV on POWER8") because the original commit had
      multiple, partly self-cancelling bugs, that could cause occasional
      memory corruption.

      In fact the logmpp instruction was incorrectly using register r0 as the
      source of the buffer address and operation code, and depending on what
      was in r0, it would either do nothing or corrupt the 64k page pointed to
      by r0.

      The logmpp instruction encoding and the operation code definitions could
      be corrected, but then there is the problem that there is no clearly
      defined way to know when the hardware has finished writing to the
      buffer.

      The original commit attempted to work around this by aborting the
      write-out before starting the prefetch, but this is ineffective in the
      case where the virtual core is now executing on a different physical
      core from the one where the write-out was initiated.

      These problems plus advice from the hardware designers not to use the
      function (since the measured performance improvement from using the
      feature was actually mostly negative), mean that reverting the code is
      the best option.

      Fixes: 9678cdaae939 ("Use the POWER8 Micro Partition Prefetch Engine in 
KVM HV on POWER8")
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit cbf3ccd09d683abf1cacd36e3640872ee912d99b
  Author: Joerg Roedel <jroedel@xxxxxxx>
  Date:   Tue Oct 20 14:59:36 2015 +0200

      iommu/amd: Don't clear DTE flags when modifying it

      During device assignment/deassignment the flags in the DTE
      get lost, which might cause spurious faults, for example
      when the device tries to access the system management range.
      Fix this by not clearing the flags with the rest of the DTE.

      Reported-by: G. Richard Bellamy <rbellamy@xxxxxxxxxxxxx>
      Tested-by: G. Richard Bellamy <rbellamy@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit 79ebdc9536c132eb92b4bcce26daaed7f4bf359e
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:49 2015 +0200

      MAINTAINERS: Unify the microcode driver section

      Merge the AMD and Intel sections and generalize the file patterns.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-7-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c595ac2bac930ce79f336c7a7e45e1ea38abfe16
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:48 2015 +0200

      x86/microcode/intel: Move #ifdef DEBUG inside the function

      ... and save us the stub.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-6-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6f7fc44bf1eef6768f9dcb527c737ab24a3203ac
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:47 2015 +0200

      x86/microcode/amd: Remove maintainers from comments

      We have the MAINTAINERS file for that. Also, Andreas doesn't
      have the time for this work anymore.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andreas Herrmann <herrmann.der.user@xxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-5-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6b26e1bf66bb4bf1b1b9b4f27d1f324875689cf0
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:46 2015 +0200

      x86/microcode: Remove modularization leftovers

      Remove the remaining module functionality leftovers. Make
      "dis_ucode_ldr" an early_param and make it static again. Drop
      module aliases, autoloading table, description, etc.

      Bump version number, while at it.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fe055896c040df571e4ff56fb196d6845130057b
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:45 2015 +0200

      x86/microcode: Merge the early microcode loader

      Merge the early loader functionality into the driver proper. The
      diff is huge but logically, it is simply moving code from the
      _early.c files into the main driver.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9a2bc335f100a0f6ee6392b9f97ac4188d84db1d
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:44 2015 +0200

      x86/microcode: Unmodularize the microcode driver

      Make CONFIG_MICROCODE a bool. It was practically a bool already anyway,
      since early loader was forcing it to =y.

      Regardless, there's no real reason to have something be a module which
      gets built-in on the majority of installations out there. And its not
      like there's noticeable change in functionality - we still can load late
      microcode - just the module glue disappears.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-2-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3d45ac4b35cbdf942f2a45b2b927f2ef6a8bda48
  Author: Jan Beulich <JBeulich@xxxxxxxx>
  Date:   Mon Oct 19 04:35:44 2015 -0600

      timers/x86/hpet: Type adjustments

      Standardize on bool instead of an inconsistent mixture of u8 and plain 
'int'.

      Also use u32 or 'unsigned int' instead of 'unsigned long' when a 32-bit 
type
      suffices, generating slightly better code on x86-64.

      Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/5624E3A002000078000AC49A@xxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 221836e92cd5664de6fc2f1d836f6343ae5f2e43
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 10:41:17 2015 +0200

      x86/Kconfig/cpus: Fix/complete CPU type help texts

      Move the generic help text explaining each CPU type and what to
      select under the "Processor Family" prompt and not under the
      M486 option. Also, amend it with the missing options.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445244077-25120-1-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 81ffdcdd97d94110627caa81c23d5d780083731d
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:17:48 2015 +0200

      x86/mce: Fix thermal throttling reporting after kexec

      The per CPU thermal vector init code checks if the thermal
      vector is already installed and complains and bails out if it
      is.

      This happens after kexec, as kernel shut down does not clear the
      thermal vector APIC register.

      This causes two problems:

      1. So we always do not fully initialize thermal reports after
         kexec. The CPU is still likely initialized, as the previous
         kernel should have done it. But we don't set up the software
         pointer to the thermal vector, so reporting may end up with a
         unknown thermal interrupt message.

      2. Also it complains for every logical CPU, even though the
         value is actually derived from BP only.

      The problem is that we end up with one message per CPU, so on
      larger systems it becomes very noisy and messes up the otherwise
      nicely formatted CPU bootup numbers in the kernel log.

      Just remove the check. I checked the code and there's no valid
      code paths where the thermal init code for a CPU could be called
      multiple times.

      Why the kernel does not clean up this value on shutdown:

      The thermal monitoring is controlled per logical CPU thread.
      Normal shutdown code is just running on one CPU. To disable it
      we would need a broadcast NMI to all CPUs on shut down. That's
      overkill for this. So we just ignore it after kexec.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445246268-26285-9-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 53b90c0c56b502056da83d768047dcf765bac9fb
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:47 2015 +0200

      kexec/crash: Say which char is the unrecognized

      It is helpful when the crashkernel cmdline parsing routines
      actually say which character is the unrecognized one. Make them
      do so.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Baoquan He <bhe@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vivek Goyal <vgoyal@xxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-8-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6f3760570e26eefc214e641b6daeddb7106240bb
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:46 2015 +0200

      x86/setup/crash: Check memblock_reserve() retval

      memblock_reserve() can fail but the crashkernel reservation code
      doesn't check that and this can lead the user into believing
      that the crashkernel region was actually reserved. Make sure we
      check that return value and we exit early with a failure message
      in the error case.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-7-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f56d55781c1ff5663874775d0672ba954fe5634c
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:45 2015 +0200

      x86/setup/crash: Cleanup some more

      * Remove unused auto_set variable
      * Cleanup local function variable declarations
      * Reformat printk string and use pr_info()

      No functionality change.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-6-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 606134f77ce22997fd2800d5937698d85c6990d9
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:44 2015 +0200

      x86/setup/crash: Remove alignment variable

      Use a macro instead. No functionality change.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-5-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 97eac21babe47e1a8ed4cac4f8874c5746cf6e36
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:43 2015 +0200

      x86/setup: Cleanup crashkernel reservation functions

      * Shorten variable names
      * Realign code, space out for better readability

      No code changed:

        # arch/x86/kernel/setup.o:

         text    data     bss     dec     hex filename
         4543    3096   69904   77543   12ee7 setup.o.before
         4543    3096   69904   77543   12ee7 setup.o.after

      md5:
         8a1b7c6738a553ca207b56bd84a8f359  setup.o.before.asm
         8a1b7c6738a553ca207b56bd84a8f359  setup.o.after.asm

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1a6775c1a2c2ed863699403cda517916c22aeb72
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Oct 19 11:17:42 2015 +0200

      x86/amd_nb, EDAC: Rename amd_get_node_id()

      This function doesn't give us the "Node ID" as the function name
      suggests. Rather, it receives a PCI device as argument, checks
      the available F3 PCI device IDs in the system and returns the
      index of the matching Bus/Device IDs.

      Rename it to amd_pci_dev_to_node_id().

      No functional change is introduced.

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445246268-26285-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit eb6db83d105914c246ac5875be76fd4b944833d5
  Author: Baoquan He <bhe@xxxxxxxxxx>
  Date:   Mon Oct 19 11:17:41 2015 +0200

      x86/setup: Do not reserve crashkernel high memory if low reservation 
failed

      People reported that when allocating crashkernel memory using
      the ",high" and ",low" syntax, there were cases where the
      reservation of the high portion succeeds but the reservation of
      the low portion fails.

      Then kexec can load the kdump kernel successfully, but booting
      the kdump kernel fails as there's no low memory.

      The low memory allocation for the kdump kernel can fail on large
      systems for a couple of reasons. For example, the manually
      specified crashkernel low memory can be too large and thus no
      adequate memblock region would be found.

      Therefore, we try to reserve low memory for the crash kernel
      *after* the high memory portion has been allocated. If that
      fails, we free crashkernel high memory too and return. The user
      can then take measures accordingly.

      Tested-by: Joerg Roedel <jroedel@xxxxxxx>
      Signed-off-by: Baoquan He <bhe@xxxxxxxxxx>
      [ Massage text. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Young <dyoung@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Cc: yinghai@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-2-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 08b137d90eec51b0e90c42e123ca8ceb118d233f
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Mon Oct 12 17:22:23 2015 +0800

      mmc: core: Fix init_card in 52Mhz

      Suppose that we got a data crc error, and it triggers the mmc_reset.
      mmc_reset will call mmc_send_status to see if HW reset was supported.
      before issue CMD13, it will do retune, and if EMMC was in HS400 mode,
      it will reduce frequency to 52Mhz firstly, then results in card init
      was doing at 52Mhz.
      The mmc_send_status was originally only done for mmc_test, should drop
      it. And, rename the "eMMC hardware reset" to "Reset test", as we would
      also be able to use the test for SD-cards.

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Suggested-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Fixes: bd11e8bd03ca ("mmc: core: Flag re-tuning is needed on CRC errors")
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e5a9f8d04660da7ef3a98260aa74c3976f9cb4cd
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Oct 16 17:54:47 2015 +0200

      mac80211: move station statistics into sub-structs

      Group station statistics by where they're (mostly) updated
      (TX, RX and TX-status) and group them into sub-structs of
      the struct sta_info.

      Also rename the variables since the grouping now makes it
      obvious where they belong.

      This makes it easier to identify where the statistics are
      updated in the code, and thus easier to think about them.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 976bd9efdae6a844079ba4a7898a38d229ef246c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Oct 16 17:18:11 2015 +0200

      mac80211: move beacon_loss_count into ifmgd

      There's little point in keeping (and even sending to userspace)
      the beacon_loss_count value per station, since it can only apply
      to the AP on a managed-mode connection. Move the value to ifmgd,
      advertise it only in managed mode, and remove it from ethtool as
      it's available through better interfaces.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 763aa27a292113b6fd9f6ad8bf633edc9b13c98b
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Oct 16 16:55:51 2015 +0200

      mac80211: remove sta->last_ack_signal

      This file only feeds a debugfs file that isn't very useful, so remove
      it. If necessary, we can add other ways to get this information, for
      example in the NL80211_CMD_PROBE_CLIENT response.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 81c1f74de3b6a9be0006a734d3584150f9c2e295
  Merge: f8273ba bc6f9ae
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 21 11:07:55 2015 +0300

      Merge ath-next from ath.git

      Major changes:

      ath10k

      * add board 2 API support for automatically choosing correct board file
      * data path optimisations
      * disable PCI power save for qca988x and QCA99x0 due to interop reasons

      wil6210

      * BlockAckReq support
      * firmware crashdump using devcoredump
      * capture all frames with sniffer

  commit f8273bafcbc1bc04d1b139144f78f25c559f10c3
  Author: Eric Caruso <ejcaruso@xxxxxxxxxx>
  Date:   Wed Oct 14 12:34:11 2015 -0700

      brcm80211: Add support for brcm4371

      This is a new Broadcom chip and we should be able to recognize it.

      Signed-off-by: Eric Caruso <ejcaruso@xxxxxxxxxx>
      Acked-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 92121e69de8a982c0b33b359ce68657b3ec3c83d
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:21 2015 +0200

      brcmfmac: Properly set carrier state of netdev.

      Use the netif_carrier api to correctly set carrier state on the
      different modes.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 54b499d9ad10dd0ce9b4ac92507072cad0f37f7a
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:20 2015 +0200

      brcmfmac: Remove unused state AP creating.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit c443e169577c2dfb8172711ef4b765919d177429
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:19 2015 +0200

      brcmfmac: Move brcmf_c_preinit_dcmds prototype to correct file.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit bf2a7e0499b922b4d2ffc073a3d14cec93c33af1
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:18 2015 +0200

      brcmfmac: Add dump_station support to cfg80221 ops.

      With this feature it becomes possible to request a station
      assoc list.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit cae355dc90db2bd27bf5ed5400ab2a417a185faa
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:17 2015 +0200

      brcmfmac: Add RSSI information to get_station.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 124d517211e4322366f087774dadae136c6cec8b
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:16 2015 +0200

      brcmfmac: Fix station info rate information.

      Txrate and rxrate in get_station got assigned first with value
      in kbps and then divided by 100 to get it in 100kbps unit. The
      problem with that is that type of rate is u16 which resulted
      in incorrect values for high data rate values.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2b76acdbc0431a7d9e87eacb27bb537a211bed16
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:15 2015 +0200

      brcmfmac: Rework p2p attach, use single method for p2p dev creation.

      When module param p2pon is used a p2p device is created at init.
      This patch reworks how this is done by using the same method as
      for a dynamically (by user space) created p2p device.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 43569bfaf6ed0ee5b44533ee9ded7e8323734687
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:14 2015 +0200

      brcmfmac: remove conversational comment

      Removing a comment that was only useful during the review of
      the change that introduced it and which should never have been
      submitted.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 4a3462843f9f363162314ca7667e24c146c7fa71
  Author: Franky Lin <frankyl@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:13 2015 +0200

      brcmfmac: rename firmware_path to alternative_fw_path

      In brcmfmac the module parameter "firmware_path" is used as an
      alternative relative path under the search path used by firmware_class
      or ueventhelper. Rename the parameter to alternative_fw_path to avoid
      confusion.

      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Franky Lin <frankyl@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 185f0eb0b5fab0c9bfd7c5d322e2cd05b951d6e8
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:12 2015 +0200

      brcmfmac: Fix race condition between USB probe/load and disconnect.

      When a USB device gets disconnected due to for example removal
      then it is possible that it is still in the loading phase due to
      the asynchronous load routines. These routines can then possible
      access memory which has been freed. Fix this by mutex locking the
      device init phase.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ff4445a8502cdf06969540c92bb201ee47e70351
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:11 2015 +0200

      brcmfmac: expose device memory to devcoredump subsystem

      Upon PSM watchdog event received from firmware the driver will obtain
      a memory snapshot of the device and expose it to user-space through
      the devcoredump framework. This will trigger a uevent.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 26f1fad29ad973b0fb26a9ca3dcb2a73dde781aa
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Wed Oct 14 20:44:51 2015 -0400

      New driver: rtl8xxxu (mac80211)

      This is an alternate driver for a number of Realtek WiFi USB devices,
      including RTL8723AU, RTL8188CU, RTL8188RU, RTL8191CU, and RTL8192CU.
      It was written from scratch utilizing the Linux mac80211 stack.

      After spending months cleaning up the vendor provided rtl8723au
      driver, which comes with it's own 802.11 stack included, I decided to
      rewrite this driver from the bottom up.

      Many thanks to Johannes Berg for 802.11 insights and help and Larry
      Finger for help with the vendor driver.

      The full git log for the development of this driver can be found here:
      git git://git.kernel.org/pub/scm/linux/kernel/git/jes/linux.git
          branch rtl8723au-mac80211

      This driver is still under development, but has proven to be very
      stable for me. It currently supports station mode only. It has support
      for OFDM and CCK rates. It does lack certain features found in the
      staging driver, such as power management, AMPDU, and 40MHz channel
      support. In addition it does not support AD-HOC, AP, and monitor mode
      support at this point.

      The driver is known to work with the following devices:
      Lenovo Yoga (rtl8723au)
      TP-Link TL-WN823N (rtl8192cu)
      Etekcity 6R (rtl8188cu)
      Daffodil LAN03 (rtl8188cu)
      Alfa AWUS036NHR (rtl8188ru)

      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 213445b2b40e87e819c7d949ae7d97c30dcd0853
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 21 02:45:19 2015 +0200

      Bluetooth: btintel: Enable extra Intel vendor events

      The Intel Bluetooth controllers can emit extra vendor specific events in
      error conditions or for debugging purposes. To make the life easier for
      engineers, enable them by default. When the vendor_diag options has been
      enabled, then additional debug events are also enabled.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e4c534bbacab81fc67c81ae8af263a70f35ffec9
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 21 01:31:45 2015 +0200

      Bluetooth: btusb: Set manufacturer for Intel bootloader devices

      For Intel bootloader devices, set the manufacturer information so that
      it becomes possible to decode the boot process.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 98a63aaf245e2522b0ddd86f38fb83883344bcaf
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 23:25:42 2015 +0200

      Bluetooth: Introduce driver specific post init callback

      Some drivers might have to restore certain settings after the init
      procedure has been completed. This driver callback allows them to hook
      into that stage. This callback is run just before the controller is
      declared as powered up.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit aee61f7aa89bbfa48b91628291d8685aa61c970f
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 21:30:45 2015 +0200

      Bluetooth: hci_uart: Provide initial manufacturer information

      Provide an early indication about the manufacturer information so that
      it can be forwarded into monitor channel.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 0f6925fa2907df58496cabc33fa4677c635e2223
  Author: Qu Wenruo <quwenruo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 14 15:26:13 2015 +0800

      btrfs: Avoid truncate tailing page if fallocate range doesn't exceed 
inode size

      Current code will always truncate tailing page if its alloc_start is
      smaller than inode size.

      For example, the file extent layout is like:
      0 4K      8K      16K     32K
      |<-----Extent A---------------->|
      |<--Inode size: 18K---------->|

      But if calling fallocate even for range [0,4K), it will cause btrfs to
      re-truncate the range [16,32K), causing COW and a new extent.

      0 4K      8K      16K     32K
      |///////| <- Fallocate call range
      |<-----Extent A-------->|<--B-->|

      The cause is quite easy, just a careless btrfs_truncate_inode() in a
      else branch without extra judgment.
      Fix it by add judgment on whether the fallocate range is beyond isize.

      Signed-off-by: Qu Wenruo <quwenruo@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 1904be1b6bb92058c8e00063dd59df2df294e258
  Author: Steven Rostedt (Red Hat) <rostedt@xxxxxxxxxxx>
  Date:   Tue Oct 20 21:48:02 2015 -0400

      tracing: Do not allow stack_tracer to record stack in NMI

      The code in stack tracer should not be executed within an NMI as it grabs
      spinlocks and stack tracing an NMI gives the possibility of causing a
      deadlock. Although this is safe on x86_64, because it does not perform 
stack
      traces when the task struct stack is not in use (interrupts and NMIs), it
      may be an issue for NMIs on i386 and other archs that use the same stack 
as
      the NMI.

      Signed-off-by: Steven Rostedt <rostedt@xxxxxxxxxxx>

  commit 9f7378a9d6ced1784e08d3e21a9ddb769523baf2
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Wed Oct 14 12:18:47 2015 +0200

      Bluetooth: l2cap_disconnection_req priority over shutdown

      There is a L2CAP protocol race between the local peer and
      the remote peer demanding disconnection of the L2CAP link.

      When L2CAP ERTM is used, l2cap_sock_shutdown() can be called
      from userland to disconnect L2CAP. However, there can be a
      delay introduced by waiting for ACKs. During this waiting
      period, the remote peer may have sent a Disconnection Request.
      Therefore, recheck the shutdown status of the socket
      after waiting for ACKs because there is no need to do
      further processing if the connection has gone.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Harish Jenny K N <harish_kandiga@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 04ba72e6b24f1e0e2221fcd73f08782870473fa1
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Wed Oct 14 12:18:46 2015 +0200

      Bluetooth: Reorganize mutex lock in l2cap_sock_shutdown()

      This commit reorganizes the mutex lock and is now
      only protecting l2cap_chan_close(). This is now consistent
      with other places where l2cap_chan_close() is called.

      If a conn connection exists, call
      mutex_lock(&conn->chan_lock) before calling l2cap_chan_close()
      to ensure other L2CAP protocol operations do not interfere.

      Note that the conn structure has to be protected from being
      freed as it is possible for the connection to be disconnected
      whilst the locks are not held. This solution allows the mutex
      lock to be used even when the connection has just been
      disconnected.

      This commit also reduces the scope of chan locking.

      The only place where chan locking is needed is the call to
      l2cap_chan_close(chan, 0) which if necessary closes the channel.
      Therefore, move the l2cap_chan_lock(chan) and
      l2cap_chan_lock(chan) locking calls to around
      l2cap_chan_close(chan, 0).

      This allows __l2cap_wait_ack(sk, chan) to be called with no
      chan locks being held so L2CAP messaging over the ACL link
      can be done unimpaired.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Harish Jenny K N <harish_kandiga@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e7456437c15a2fd42cedd25c2b12b06876f285f0
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Wed Oct 14 12:18:45 2015 +0200

      Bluetooth: Unwind l2cap_sock_shutdown()

      l2cap_sock_shutdown() is designed to only action shutdown
      of the channel when shutdown is not already in progress.
      Therefore, reorganise the code flow by adding a goto
      to jump to the end of function handling when shutdown is
      already being actioned. This removes one level of code
      indentation and make the code more readable.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Harish Jenny K N <harish_kandiga@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 09bf420f101c9d35ca0b5f539c7f03951fd2e24d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:26 2015 +0200

      6lowpan: put mcast compression in an own function

      This patch moves the mcast compression algorithmn to an own function
      like all other compression/decompression methods in iphc.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b5af9bdbfe6d497d27e5936a7d110fc5f64e7c0d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:25 2015 +0200

      6lowpan: rework tc and flow label handling

      This patch reworks the handling of compression/decompression of traffic
      class and flow label handling. The current method is hard to understand,
      also doesn't checks if we can read the buffer from skb length.

      I tried to put the shifting operations into static inline functions and
      comment each steps which I did there to make it hopefully somewhat more
      readable. The big mess to deal with that is the that the ipv6 header
      bring the order "DSCP + ECN" but iphc uses "ECN + DSCP". Additional the
      DCSP + ECN bits are splitted in ipv6_hdr inside the priority and
      flow_lbl[0] fields.

      I tested these compressions by using fakelb 802.15.4 driver and
      manipulate the tc and flow label fields manually in function
      "__ip6_local_out" before the skb will be send to lower layers. Then I
      looked up the tc and flow label fields in wireshark on a wpan and lowpan
      interface.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c8a3e7eb98236f7c88e6deddf9f330874070fa09
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:24 2015 +0200

      6lowpan: iphc: change define values

      This patch has the main goal to delete shift operations. Instead we
      doing masks and equals afterwards. E.g. for the SAM evaluation we
      masking only the SAM value which fits in iphc1 byte, then comparing with
      all possible SAM values over a switch case statement. We will not
      shifting the SAM value to somewhat readable anymore.
      Additional this patch slighty change the naming style like RFC 6282,
      e.g. TTL to HLIM and we will drop an errno now if CID flag is set,
      because we don't support it.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 028b2a8c16c7c6a482075fe42275a44fbe5463fa
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:23 2015 +0200

      6lowpan: remove lowpan_is_addr_broadcast

      This macro is used at 802.15.4 6LoWPAN only and can be replaced by
      memcmp with the interface broadcast address.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6350047eb8dbd3dcf0ff29a637ece96db8f59d8d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:22 2015 +0200

      6lowpan: move IPHC functionality defines

      This patch removes the IPHC related defines for doing bit manipulation
      from global 6lowpan header to the iphc file which should the only one
      implementation which use these defines.

      Also move next header compression defines to their nhc implementation.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 607b0bd3f2b9ac118f2c67dbd18c55f1f5aefeb1
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:21 2015 +0200

      6lowpan: nhc: move iphc manipulation out of nhc

      This patch moves the iphc setting of next header commpression bit inside
      iphc functionality. Setting of IPHC bits should be happen at iphc.c file
      only.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 478208e3b9988adc7ec2c480f237049aaf7c4609
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:59 2015 +0200

      6lowpan: remove lowpan_fetch_skb_u8

      This patch removes the lowpan_fetch_skb_u8 function for getting the iphc
      bytes. Instead we using the generic which has a len parameter to tell
      the amount of bytes to fetch.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 8911d7748ca360ef96cb207cc5165eb9c08669e5
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:58 2015 +0200

      6lowpan: cleanup lowpan_header_decompress

      This patch changes the lowpan_header_decompress function by removing
      inklayer related information from parameters. This is currently for
      supporting short and extended address for iphc handling in 802154.
      We don't support short address handling anyway right now, but there
      exists already code for handling short addresses in
      lowpan_header_decompress.

      The address parameters are also changed to a void pointer, so 6LoWPAN
      linklayer specific code can put complex structures as these parameters
      and cast it again inside the generic code by evaluating linklayer type
      before. The order is also changed by destination address at first and
      then source address, which is the same like all others functions where
      destination is always the first, memcpy, dev_hard_header,
      lowpan_header_compress, etc.

      This patch also moves the fetching of iphc values from 6LoWPAN linklayer
      specific code into the generic branch.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a6f773891a836abfa16fcbb8af14c29c3e109336
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:57 2015 +0200

      6lowpan: cleanup lowpan_header_compress

      This patch changes the lowpan_header_compress function by removing
      unused parameters like "len" and drop static value parameters of
      protocol type. Instead we really check the protocol type inside inside
      the skb structure. Also we drop the use of IEEE802154_ADDR_LEN which is
      link-layer specific. Instead we using EUI64_ADDR_LEN which should always
      the default case for now.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit bf513fd6fc609590b7835c0dba624ccb9f8f9214
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:56 2015 +0200

      6lowpan: introduce LOWPAN_IPHC_MAX_HC_BUF_LEN

      This patch introduces the LOWPAN_IPHC_MAX_HC_BUF_LEN define which
      represent the worst-case supported IPHC buffer length. It's used to
      allocate the stack buffer space for creating the IPHC header.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit cefdb801c80736017b5a0d97a4a9f816d5a98fc4
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:55 2015 +0200

      bluetooth: 6lowpan: use lowpan dispatch helpers

      This patch adds a check if the dataroom of skb contains a dispatch value
      by checking if skb->len != 0. This patch also change the dispatch
      evaluation by the recently introduced helpers for checking the common
      6LoWPAN dispatch values for IPv6 and IPHC header.

      There was also a forgotten else branch which should drop the packet if
      no matching dispatch is available.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 71cd2aa53dbf9eb8cb954fc9e65de8dab774b7f6
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:54 2015 +0200

      mac802154: llsec: use kzfree

      This patch will use kzfree instead kfree for security related
      information which can be offered by acccident.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a6ad2a6b9cc1d9d791aee5462cfb8528f366f1d4
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Mon Oct 19 10:51:47 2015 +0300

      Bluetooth: Fix removing connection parameters when unpairing

      The commit 89cbb0638e9b7 introduced support for deferred connection
      parameter removal when unpairing by removing them only once an
      existing connection gets disconnected. However, it failed to address
      the scenario when we're *not* connected and do an unpair operation.

      What makes things worse is that most user space BlueZ versions will
      first issue a disconnect request and only then unpair, meaning the
      buggy code will be triggered every time. This effectively causes the
      kernel to resume scanning and reconnect to a device for which we've
      removed all keys and GATT database information.

      This patch fixes the issue by adding the missing call to the
      hci_conn_params_del() function to a branch which handles the case of
      no existing connection.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 3.19+

  commit 22f8e9dbf671a2f36d90d3d8723a2a0c5227fa4b
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 00:53:33 2015 +0200

      Bluetooth: btusb: Add support for latest Apple controllers

      The latest Apple Bluetooth controllers with Broadcom chip in it have
      a small design change. Instead of including a USB hub with mouse and
      keyboard devices, they are now HID interfaces on the same device.

      T:  Bus=04 Lev=02 Prnt=02 Port=04 Cnt=01 Dev#= 39 Spd=12   MxCh= 0
      D:  Ver= 2.01 Cls=ef(misc ) Sub=02 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=05ac ProdID=8290 Rev= 0.79
      S:  Manufacturer=Broadcom Corp.
      S:  Product=Bluetooth USB Host Controller
      C:* #Ifs= 6 Cfg#= 1 Atr=e0 MxPwr=  0mA
      A:  FirstIf#= 2 IfCount= 4 Cls=ff(vend.) Sub=01 Prot=01
      I:* If#= 0 Alt= 0 #EPs= 1 Cls=03(HID  ) Sub=01 Prot=01 Driver=usbhid
      E:  Ad=85(I) Atr=03(Int.) MxPS=   8 Ivl=10ms
      I:* If#= 1 Alt= 0 #EPs= 1 Cls=03(HID  ) Sub=01 Prot=02 Driver=usbhid
      E:  Ad=86(I) Atr=03(Int.) MxPS=   8 Ivl=10ms
      I:* If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 3 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 3 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 3 Alt= 3 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 3 Alt= 4 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 3 Alt= 5 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 4 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=btusb
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 5 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      The general layout of Bluetooth devices is that interface 0 is the main
      interface and interface 1 is for audio data. This design obviously moves
      it to main interface 2 and audio data on interface 3.

      Starting with the MacBookPro12,1 (early 2015 models) the new Broadcom
      BCM943602CS cards are used which show this interface layout.

      usb 4-1.5: New USB device found, idVendor=05ac, idProduct=8290
      usb 4-1.5: New USB device strings: Mfr=1, Product=2, SerialNumber=0
      usb 4-1.5: Product: Bluetooth USB Host Controller
      usb 4-1.5: Manufacturer: Broadcom Corp.
      Bluetooth: hci0: BCM: chip id 102 build 0243
      Bluetooth: hci0: BCM: product 05ac:8290
      Bluetooth: hci0: BCM20703A1 Generic USB UHE Apple 20Mhz fcbga_X87

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 49a5f782d03888e8b55ed799e57a592b76ce32f6
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 02:30:48 2015 +0200

      Bluetooth: btusb: Set early vendor info for Intel and Broadcom

      For the controllers from Intel and Broadcom (including Apple), it is
      helpful to have the information about the manufacturer send out early.

      This patch sets the hdev->manufacturer information which will be send
      out before actually calling the vendor specific hdev->setup driver
      callback.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e131d74a3afe2b44c3bc59dc4ff06bfd0481ab1a
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 02:30:47 2015 +0200

      Bluetooth: Add support setup stage internal notification event

      Before the vendor specific setup stage is triggered call back into the
      core to trigger an internal notification event. That event is used to
      send an index update to the monitor interface. With that specific event
      it is possible to update userspace with manufacturer information before
      any HCI command has been executed. This is useful for early stage
      debugging of vendor specific initialization sequences.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 18e0afab8ce3f1230ce3fef52b2e73374fd9c0e7
  Author: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
  Date:   Fri Oct 16 11:45:26 2015 +0300

      Bluetooth: ath3k: Add support of AR3012 0cf3:817b device

      T: Bus=04 Lev=02 Prnt=02 Port=04 Cnt=01 Dev#= 3 Spd=12 MxCh= 0
      D: Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs= 1
      P: Vendor=0cf3 ProdID=817b Rev=00.02
      C: #Ifs= 2 Cfg#= 1 Atr=e0 MxPwr=100mA
      I: If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      I: If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb

      BugLink: https://bugs.launchpad.net/bugs/1506615

      Signed-off-by: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit cd355ff071cd37e7197eccf9216770b2b29369f7
  Author: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
  Date:   Mon Oct 5 19:29:33 2015 +0300

      Bluetooth: ath3k: Add new AR3012 0930:021c id

      This adapter works with the existing linux-firmware.

      T:  Bus=01 Lev=01 Prnt=01 Port=03 Cnt=02 Dev#=  3 Spd=12  MxCh= 0
      D:  Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=0930 ProdID=021c Rev=00.01
      C:  #Ifs= 2 Cfg#= 1 Atr=e0 MxPwr=100mA
      I:  If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      I:  If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb

      BugLink: https://bugs.launchpad.net/bugs/1502781

      Signed-off-by: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2faf71ce90782d02e1710c12a19a2084fbbec5cc
  Author: Santtu Rekilä <sare@xxxxxxxxxx>
  Date:   Mon Oct 5 15:45:27 2015 +0300

      Bluetooth: btusb: Add support for Foxconn/Lenovo BCM43142A0 (105b:e065)

      Recently salvaged this 'BCM43142A0' WiFi/Bluetooth module from a Lenovo 
laptop
      and noticed it doesn't work automatically, because the USB IDs are missing
      from btusb.c.

      Plugging in the adapter on Linux 4.1 (dmesg):
      usb 3-3.3.3: new full-speed USB device number 90 using xhci_hcd
      usb 3-3.3.3: New USB device found, idVendor=105b, idProduct=e065
      usb 3-3.3.3: New USB device strings: Mfr=1, Product=2, SerialNumber=3
      usb 3-3.3.3: Product: BCM43142A0
      usb 3-3.3.3: Manufacturer: Broadcom Corp
      usb 3-3.3.3: SerialNumber: 0090A286559E

      /sys/kernel/debug/usb/devices:
      T:  Bus=03 Lev=03 Prnt=22 Port=02 Cnt=02 Dev#= 90 Spd=12   MxCh= 0
      D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=105b ProdID=e065 Rev= 1.12
      S:  Manufacturer=Broadcom Corp
      S:  Product=BCM43142A0
      S:  SerialNumber=0090A286559E
      C:* #Ifs= 4 Cfg#= 1 Atr=e0 MxPwr=  0mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 1 Alt= 1 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 1 Alt= 2 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 1 Alt= 3 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 1 Alt= 4 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 1 Alt= 5 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      Support for the chipset was added in commit 88f9b65 and a similar BCM43142
      based device was added in commit 8f0c304.

      To work around the issue, I got the firmware
      (BCM43142A0_001.001.011.0122.0153) off a Windows installation of Broadcom
      bluetooth driver and converted it to a .hcd -file via. hex2hcd and placed 
it
      in /lib/firmware/brcm/BCM.hcd. After that:

      $ echo "105b e065 0 19ff 0239" > /sys/bus/usb/drivers/btusb/new_id
      ...(plug in the adapter)
      usb 3-3.3.3: new full-speed USB device number 91 using xhci_hcd
      usb 3-3.3.3: New USB device found, idVendor=105b, idProduct=e065
      usb 3-3.3.3: New USB device strings: Mfr=1, Product=2, SerialNumber=3
      usb 3-3.3.3: Product: BCM43142A0
      usb 3-3.3.3: Manufacturer: Broadcom Corp
      usb 3-3.3.3: SerialNumber: 0090A286559E
      Bluetooth: hci0: BCM: chip id 70
      Bluetooth: hci0: BCM (001.001.011) build 0000
      bluetooth hci0: firmware: direct-loading firmware brcm/BCM.hcd
      Bluetooth: hci0: BCM (001.001.011) build 0154

      Bam, now it works for me!

      /sys/kernel/debug/usb/devices:
      T:  Bus=03 Lev=03 Prnt=22 Port=02 Cnt=02 Dev#= 92 Spd=12   MxCh= 0
      D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=105b ProdID=e065 Rev= 1.12
      S:  Manufacturer=Broadcom Corp
      S:  Product=BCM43142A0
      S:  SerialNumber=0090A286559E
      C:* #Ifs= 4 Cfg#= 1 Atr=e0 MxPwr=  0mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 1 Alt= 1 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 1 Alt= 2 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 1 Alt= 3 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 1 Alt= 4 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 1 Alt= 5 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      Signed-off-by: Santtu Rekilä <sare@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 660f0fc07d21114549c1862e67e78b1cf0c90c29
  Author: David Herrmann <dh.herrmann@xxxxxxxxx>
  Date:   Mon Sep 7 12:05:41 2015 +0200

      Bluetooth: hidp: fix device disconnect on idle timeout

      The HIDP specs define an idle-timeout which automatically disconnects a
      device. This has always been implemented in the HIDP layer and forced a
      synchronous shutdown of the hidp-scheduler. This works just fine, but
      lacks a forced disconnect on the underlying l2cap channels. This has been
      broken since:

          commit 5205185d461d5902325e457ca80bd421127b7308
          Author: David Herrmann <dh.herrmann@xxxxxxxxx>
          Date:   Sat Apr 6 20:28:47 2013 +0200

              Bluetooth: hidp: remove old session-management

      The old session-management always forced an l2cap error on the ctrl/intr
      channels when shutting down. The new session-management skips this, as we
      don't want to enforce channel policy on the caller. In other words, if
      user-space removes an HIDP device, the underlying channels (which are
      *owned* and *referenced* by user-space) are still left active. User-space
      needs to call shutdown(2) or close(2) to release them.

      Unfortunately, this does not work with idle-timeouts. There is no way to
      signal user-space that the HIDP layer has been stopped. The API simply
      does not support any event-passing except for poll(2). Hence, we restore
      old behavior and force EUNATCH on the sockets if the HIDP layer is
      disconnected due to idle-timeouts (behavior of explicit disconnects
      remains unmodified). User-space can still call

          getsockopt(..., SO_ERROR, ...)

      ..to retrieve the EUNATCH error and clear sk_err. Hence, the channels can
      still be re-used (which nobody does so far, though). Therefore, the API
      still supports the new behavior, but with this patch it's also compatible
      to the old implicit channel shutdown.

      Cc: <stable@xxxxxxxxxxxxxxx> # 3.10+
      Reported-by: Mark Haun <haunma@xxxxxxxxx>
      Reported-by: Luiz Augusto von Dentz <luiz.dentz@xxxxxxxxx>
      Signed-off-by: David Herrmann <dh.herrmann@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 34cea41e84d5e87a0bd4d5388adab58d0cbc9532
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 18 22:48:28 2015 +0200

      Bluetooth: btbcm: Read USB product information for Apple devices

      For the Apple Bluetooth devices, read the USB product information and
      print them. This allows for easy mapping of chip and USB details.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 8045ce2197bf61b5b82bbe38fcc5feeaf7348ad1
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 18 22:37:56 2015 +0200

      Bluetooth: btbcm: Fix firmware version number calculation

      The calculation for the firmware version number is off by one bit.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6c9d435d359898868f71e8ba03f8d5f1cbccaa69
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 14:39:27 2015 +0200

      Bluetooth: btusb: Mark BCM2045 devices to have broken link key commands

      The BCM2045 seems to have a problem with the stored link key commands
      and thus just mark them as broken.

        HCI Event: Command Complete (0x0e) plen 12
           Read Local Supported Features (0x04|0x0003) ncmd 1
           status 0x00
           Features: 0xff 0xff 0x8d 0xfe 0x8f 0xf9 0x00 0x80
        HCI Event: Command Complete (0x0e) plen 12
           Read Local Version Information (0x04|0x0001) ncmd 1
           status 0x00
           HCI Version: 2.0 (0x3) HCI Revision: 0x2000
           LMP Version: 2.0 (0x3) LMP Subversion: 0x410d
           Manufacturer: Broadcom Corporation (15)
        HCI Event: Command Complete (0x0e) plen 11
           Read Buffer Size (0x04|0x0005) ncmd 1
           status 0x00
           ACL MTU 1017:8 SCO MTU 64:0
        HCI Event: Command Complete (0x0e) plen 68
           Read Local Supported Commands (0x04|0x0002) ncmd 1
           status 0x00
           Commands: ffffff03feffcfffffffffff0300f8ff07
        HCI Event: Command Complete (0x0e) plen 4
           Delete Stored Link Key (0x03|0x0012) ncmd 1
           status 0x11 deleted 2048
           Error: Unsupported Feature or Parameter Value

      From the looks of it, this device seems genuine and not one of the
      devices that are neither Broadcom nor CSR devices in reality.

      T: Bus=04 Lev=02 Prnt=02 Port=02 Cnt=02 Dev#= 3 Spd=12 MxCh= 0
      D: Ver= 2.00 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs= 1
      P: Vendor=0a5c ProdID=2045 Rev= 1.12
      S: Manufacturer=Broadcom Corp
      S: Product=BCM2045A
      S: SerialNumber=000000000000
      C:* #Ifs= 4 Cfg#= 1 Atr=a0 MxPwr=100mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=81(I) Atr=03(Int.) MxPS= 16 Ivl=1ms
      E: Ad=82(I) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      E: Ad=02(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      I: If#= 1 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      I: If#= 1 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 17 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 17 Ivl=1ms
      I: If#= 1 Alt= 3 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 25 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 25 Ivl=1ms
      I: If#= 1 Alt= 4 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 33 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 33 Ivl=1ms
      I: If#= 1 Alt= 5 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 49 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
      E: Ad=84(I) Atr=02(Bulk) MxPS= 32 Ivl=0ms
      E: Ad=04(O) Atr=02(Bulk) MxPS= 32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=00 Driver=(none)

      Reported-and-tested-by: Julio González Mejías <juliolokooo@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 3e24767b78744c7f335ca8c485ab0a0dcec693ec
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 16:00:28 2015 +0200

      Bluetooth: btintel: Add diagnostic support for older controllers

      For the older controllers like Wilkens Peak and Stone Peak, enabling the
      traces requires to switch into manufacturer mode first. This patch does
      exactly that, but only for these older controllers.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit d8270fbb3ffe9a29d81bdaa66c81ef021ba09651
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 16:00:27 2015 +0200

      Bluetooth: btintel: Set quirk for non-persistent diagnostic settings

      For Intel controllers the diagnostics settings are not persistent over
      HCI Reset. So set the quirk to programm them again on every power up.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 7e995b9eadbe226e355b785a765fd90fe0487414
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 16:00:26 2015 +0200

      Bluetooth: Add new quirk for non-persistent diagnostic settings

      If the diagnostic settings are not persistent over HCI Reset, then this
      quirk can be used to tell the Bluetoth core about it. This will ensure
      that the settings are programmed correctly when the controller is
      powered up.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 7841d06e4398cff7d744539d1e6ea4026ceab2e5
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Sat Oct 17 00:03:38 2015 +0200

      Bluetooth: bpa10x: fix BT_HCIUART dependency

      The change to bpa10x to use the h4_recv_buf helper added a dependency
      on BT_HCIUART. This was incorrectly added to Kconfig by adding a
      'select' statement, which now in turn causes build failures
      when CONFIG_TTY is not set:

      warning: (BT_HCIBPA10X) selects BT_HCIUART which has unmet direct 
dependencies (NET && BT && TTY)
      vers/built-in.o: In function `hci_uart_tty_receive':
      fpga-mgr.c:(.text+0x282824): undefined reference to `tty_unthrottle'
      drivers/built-in.o: In function `hci_uart_tty_ioctl':
      fpga-mgr.c:(.text+0x282aa0): undefined reference to `n_tty_ioctl_helper'
      drivers/built-in.o: In function `hci_uart_flush':

      This replaces the 'select BT_HCIUART' dependency with 'depends on', which
      does not have this kind of problem. Alternatively, one could add 'depends
      on TTY', but avoiding 'select' on user-visible options is generally the
      preferred choice as that does not introduce the potential for dependency
      loops or incomplete dependency chains.

      Fixes: 91489919247a ("Bluetooth: bpa10x: Fix missing BT_HCIUART 
dependency")
      Fixes: 943cc592195e ("Bluetooth: bpa10x: Use h4_recv_buf helper for frame 
reassembly")
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 2220994e7187c15848c00c7d9dab632969533396
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 13 13:54:55 2015 +0200

      Bluetooth: btusb: Print information of Intel SfP lock states

      The lock states from Intel SfP controllers can only be read once before
      loading the firmware. So for debugging purposes, print them out.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit cad20c278085d893ebd616cd20c0747a8e9d53c7
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Mon Oct 12 13:36:19 2015 +0200

      Bluetooth: Don't use remote address type to decide IRK persistency

      There are LE devices on the market that start off by announcing their
      public address and then once paired switch to using private address.
      To be interoperable with such devices we should simply trust the fact
      that we're receiving an IRK from them to indicate that they may use
      private addresses in the future. Instead, simply tie the persistency
      to the bonding/no-bonding information the same way as for LTKs and
      CSRKs.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 581d6fd60f37be587690655de05aee200b939e06
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 16:13:51 2015 +0200

      Bluetooth: Queue diagnostic messages together with HCI packets

      Sending diagnostic messages directly to the monitor socket might cause
      issues for devices processing their messages in interrupt context. So
      instead of trying to directly forward them, queue them up with the other
      HCI packets and lets them be processed by the sockets at the same time.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit bb77543ebd2e38c08412fec7eb1e35b902c5ff77
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 16:13:50 2015 +0200

      Bluetooth: Restrict valid packet types via HCI_CHANNEL_RAW

      When using the HCI_CHANNEL_RAW, restrict the packet types to valid ones
      from the Bluetooth specification.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 8cd4f581427213e086fca601bb9d8c7ea9cfeabc
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 16:13:49 2015 +0200

      Bluetooth: Remove quirk for HCI_VENDOR_PKT filter handling

      The HCI_VENDOR_PKT quirk was needed for BPA-100/105 devices that send
      these messages. Now that there is support for proper diagnostic channel
      this quirk is no longer needed.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6d2e50d24098b1f80ad76db9a9cb9668c4bf6b50
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 14:42:08 2015 +0200

      Bluetooth: btintel: Add support for enabling tracing functionality

      For Intel controllers with firmware that allows tracing of baseband
      functionality this allows enabling it via set_diag driver callback.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 9d08f50401ac7eb32e3c9ae8c4c0a61c6b107fd1
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:23:08 2015 +0200

      Bluetooth: btusb: Add support for Broadcom LM_DIAG interface

      The Broadcom Bluetooth USB devices have a third interface that is
      dedicated for LM_DIAG messages. The If#= 2 describes this interface
      and it consists of one bulk in and one bulk endpoint.

      T:  Bus=01 Lev=01 Prnt=01 Port=01 Cnt=02 Dev#= 38 Spd=12   MxCh= 0
      D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=19ff ProdID=0239 Rev= 1.12
      S:  Manufacturer=Broadcom Corp
      S:  Product=BCM20702A0
      C:* #Ifs= 4 Cfg#= 1 Atr=e0 MxPwr=  0mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 1 Alt= 1 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 1 Alt= 2 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 1 Alt= 3 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 1 Alt= 4 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 1 Alt= 5 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=btusb
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      For all Broadcom based devices with this interface, the driver now
      claims it and schedules URBs for it. This allows to capture the
      LM_DIAG messages and allows forwarding them via hci_recv_diag into
      the diagnostic channel of the Bluetooth subsystem.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 91489919247a48ce02686520eca25e9c9200dc6f
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 19:30:05 2015 +0200

      Bluetooth: bpa10x: Fix missing BT_HCIUART dependency

      Selecting just BT_HCIUART_H4 is not enough and it also needs to select
      BT_HCIUART to avoid this warning:

      warning: (BT_HCIBPA10X) selects BT_HCIUART_H4 which has unmet direct
      dependencies (NET && BT && BT_HCIUART)

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 681ab4696062f5aa939c9e04d058732306a97176
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Tue Oct 20 12:09:13 2015 -0400

      md/raid10: submit_bio_wait() returns 0 on success

      This was introduced with 9e882242c6193ae6f416f2d8d8db0d9126bd996b
      which changed the return value of submit_bio_wait() to return != 0 on
      error, but didn't update the caller accordingly.

      Fixes: 9e882242c6 ("block: Add submit_bio_wait(), remove from md")
      Cc: stable@xxxxxxxxxxxxxxx (v3.10)
      Reported-by: Bill Kuzeja <William.Kuzeja@xxxxxxxxxxx>
      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 203d27b0226a05202438ddb39ef0ef1acb14a759
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Tue Oct 20 12:09:12 2015 -0400

      md/raid1: submit_bio_wait() returns 0 on success

      This was introduced with 9e882242c6193ae6f416f2d8d8db0d9126bd996b
      which changed the return value of submit_bio_wait() to return != 0 on
      error, but didn't update the caller accordingly.

      Fixes: 9e882242c6 ("block: Add submit_bio_wait(), remove from md")
      Cc: stable@xxxxxxxxxxxxxxx (v3.10)
      Reported-by: Bill Kuzeja <William.Kuzeja@xxxxxxxxxxx>
      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit bc1d03687b9be3a30aab8e8d78c7884449b6e511
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Oct 9 06:59:23 2015 -0400

      perf cpu_map: Fix core dump caused by per-socket/core system-wide stat

      Perf will core dump if --per-socket/core -a are applied for perf stat.

      The root cause is that cpu_map__build_map set refcnt of evlist's cpu_map
      to 1.  It should set refcnt for the newly created cpu_map, not evlist's
      cpu_map.

      Here is the example:

        # perf stat -e cycles --per-socket -a sleep 1

         Performance counter stats for 'system wide':

        S0       36         30,196,257      cycles
        S1       28         15,823,536      cycles

             1.001126828 seconds time elapsed

        *** Error in `./perf': corrupted double-linked list: 0x00000000021f9090 
***
        ======= Backtrace: =========
        /lib64/libc.so.6[0x3002e7bbe7]
        /lib64/libc.so.6[0x3002e7d2b5]
        ./perf(perf_evsel__delete+0x28)[0x485bdd]
        ./perf[0x4800e8]
        ./perf(perf_evlist__delete+0x5e)[0x482cd5]
        ./perf(cmd_stat+0xf25)[0x432328]
        ./perf[0x4768e0]
        ./perf[0x476ad6]
        ./perf[0x476b41]
        ./perf(main+0x1d0)[0x476db2]
        /lib64/libc.so.6(__libc_start_main+0xf5)[0x3002e21b45]
        ./perf[0x4202c5]

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444388363-35936-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2f465deef7ce8c722121b782dd91c284f5ae80ca
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 12:28:11 2015 +0200

      tools lib traceevent: update KVM plugin

      The format of the role word has changed through the years and the plugin
      was never updated; some VMX exit reasons were missing too.

      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: kvm@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443695293-31127-1-git-send-email-pbonzini@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ab3964ad2acfbb0dc5414d4c86fa6d8d690f27a1
  Author: Haggai Eran <haggaie@xxxxxxxxxxxx>
  Date:   Tue Oct 20 09:53:01 2015 +0300

      IB/cma: Use inner P_Key to determine netdev

      When discussing the patches to demux ids in rdma_cm instead of ib_cm, it
      was decided that it is best to use the P_Key value in the packet headers.
      However, the mlx5 and ipath drivers are currently unable to send correct
      P_Key values in GMP headers. They always send using a single P_Key that is
      set during the GSI QP initialization.

      Change the rdma_cm code to look at the P_Key value that is part of the
      packet payload as a workaround. Once the drivers are fixed this patch can
      be reverted.

      Fixes: 4c21b5bcef73 ("IB/cma: Add net_dev and private data checks to
      RDMA CM")
      Signed-off-by: Haggai Eran <haggaie@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 0174b381caf89443d92c6fe75f725f2bfeba96b6
  Author: Sasha Levin <sasha.levin@xxxxxxxxxx>
  Date:   Thu Sep 17 16:04:19 2015 -0400

      IB/ucma: check workqueue allocation before usage

      Allocating a workqueue might fail, which wasn't checked so far and would
      lead to NULL ptr derefs when an attempt to use it was made.

      Signed-off-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit b3b51f9f6f5d91cd16afaed0c22df2c56ed5f92e
  Author: Haggai Eran <haggaie@xxxxxxxxxxxx>
  Date:   Mon Sep 21 16:02:02 2015 +0300

      IB/cma: Potential NULL dereference in cma_id_from_event

      If the lookup of a listening ID failed for an AF_IB request, the code
      would try to call dev_put() on a NULL net_dev.

      Fixes: be688195bd08 ("IB/cma: Fix net_dev reference leak with failed
      requests")
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Haggai Eran <haggaie@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3909642034ffd7a8906ff3f2b2a71455bf39e7f6
  Author: Matan Barak <matanb@xxxxxxxxxxxx>
  Date:   Thu Oct 15 15:01:03 2015 +0300

      IB/core: Fix use after free of ifa

      When using ifup/ifdown while executing enum_netdev_ipv4_ips,
      ifa could become invalid and cause use after free error.
      Fixing it by protecting with RCU lock.

      Fixes: 03db3a2d81e6 ('IB/core: Add RoCE GID table management')
      Signed-off-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 625faa6a720d26fc0db9e20b48dc0dfe4c8d8ddf
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 11:49:44 2015 +0100

      clkdev: fix clk_add_alias() with a NULL alias device name

      clk_add_alias() was not correctly handling the case where alias_dev_name
      was NULL: rather than producing an entry with a NULL dev_id pointer,
      it would produce a device name of (null).  Fix this.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: 2568999835d7 ("clkdev: add clkdev_create() helper")
      Reported-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Tested-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 0d997491f814c87310a6ad7be30a9049c7150489
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Sat Oct 17 19:05:27 2015 +0200

      arm/arm64: KVM: Fix disabled distributor operation

      We currently do a single update of the vgic state when the distributor
      enable/disable control register is accessed and then bypass updating the
      state for as long as the distributor remains disabled.

      This is incorrect, because updating the state does not consider the
      distributor enable bit, and this you can end up in a situation where an
      interrupt is marked as pending on the CPU interface, but not pending on
      the distributor, which is an impossible state to be in, and triggers a
      warning.  Consider for example the following sequence of events:

      1. An interrupt is marked as pending on the distributor
         - the interrupt is also forwarded to the CPU interface
      2. The guest turns off the distributor (it's about to do a reboot)
         - we stop updating the CPU interface state from now on
      3. The guest disables the pending interrupt
         - we remove the pending state from the distributor, but don't touch
           the CPU interface, see point 2.

      Since the distributor disable bit really means that no interrupts should
      be forwarded to the CPU interface, we modify the code to keep updating
      the internal VGIC state, but always set the CPU interface pending bits
      to zero when the distributor is disabled.

      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 544c572e03174438b6656ed24a4516b9a9d5f14a
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Sat Oct 17 17:55:12 2015 +0200

      arm/arm64: KVM: Clear map->active on pend/active clear

      When a guest reboots or offlines/onlines CPUs, it is not uncommon for it
      to clear the pending and active states of an interrupt through the
      emulated VGIC distributor.  However, since the architected timers are
      defined by the architecture to be level triggered and the guest
      rightfully expects them to be that, but we emulate them as
      edge-triggered, we have to mimic level-triggered behavior for an
      edge-triggered virtual implementation.

      We currently do not signal the VGIC when the map->active field is true,
      because it indicates that the guest has already been signalled of the
      interrupt as required.  Normally this field is set to false when the
      guest deactivates the virtual interrupt through the sync path.

      We also need to catch the case where the guest deactivates the interrupt
      through the emulated distributor, again allowing guests to boot even if
      the original virtual timer signal hit before the guest's GIC
      initialization sequence is run.

      Reviewed-by: Eric Auger <eric.auger@xxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit cff9211eb1a1f58ce7f5a2d596b617928fd4be0e
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:21 2015 +0200

      arm/arm64: KVM: Fix arch timer behavior for disabled interrupts

      We have an interesting issue when the guest disables the timer interrupt
      on the VGIC, which happens when turning VCPUs off using PSCI, for
      example.

      The problem is that because the guest disables the virtual interrupt at
      the VGIC level, we never inject interrupts to the guest and therefore
      never mark the interrupt as active on the physical distributor.  The
      host also never takes the timer interrupt (we only use the timer device
      to trigger a guest exit and everything else is done in software), so the
      interrupt does not become active through normal means.

      The result is that we keep entering the guest with a programmed timer
      that will always fire as soon as we context switch the hardware timer
      state and run the guest, preventing forward progress for the VCPU.

      Since the active state on the physical distributor is really part of the
      timer logic, it is the job of our virtual arch timer driver to manage
      this state.

      The timer->map->active boolean field indicates whether we have signalled
      this interrupt to the vgic and if that interrupt is still pending or
      active.  As long as that is the case, the hardware doesn't have to
      generate physical interrupts and therefore we mark the interrupt as
      active on the physical distributor.

      We also have to restore the pending state of an interrupt that was
      queued to an LR but was retired from the LR for some reason, while
      remaining pending in the LR.

      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reported-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 4a5d69b73948d0e03cd38d77dc11edb2e707165f
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Oct 12 15:22:31 2015 +0200

      KVM: arm: use GIC support unconditionally

      The vgic code on ARM is built for all configurations that enable KVM,
      but the parent_data field that it references is only present when
      CONFIG_IRQ_DOMAIN_HIERARCHY is set:

      virt/kvm/arm/vgic.c: In function 'kvm_vgic_map_phys_irq':
      virt/kvm/arm/vgic.c:1781:13: error: 'struct irq_data' has no member named 
'parent_data'

      This flag is implied by the GIC driver, and indeed the VGIC code only
      makes sense if a GIC is present. This changes the CONFIG_KVM symbol
      to always select GIC, which avoids the issue.

      Fixes: 662d9715840 ("arm/arm64: KVM: Kill CONFIG_KVM_ARM_{VGIC,TIMER}")
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 399ea0f6bcd318af94ec8e4ffe96703ed674f22e
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Tue Oct 6 11:14:35 2015 +0300

      KVM: arm/arm64: Fix memory leak if timer initialization fails

      Jump to correct label and free kvm_host_cpu_state

      Reviewed-by: Wei Huang <wei@xxxxxxxxxx>
      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 437f9963bc4fd75889c1fe9289a92dea9124a439
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Fri Sep 25 17:00:29 2015 +0300

      KVM: arm/arm64: Do not inject spurious interrupts

      When lowering a level-triggered line from userspace, we forgot to lower
      the pending bit on the emulated CPU interface and we also did not
      re-compute the pending_on_cpu bitmap for the CPU affected by the change.

      Update vgic_update_irq_pending() to fix the two issues above and also
      raise a warning in vgic_quue_irq_to_lr if we encounter an interrupt
      pending on a CPU which is neither marked active nor pending.

        [ Commit text reworked completely - Christoffer ]

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit a2d7629048322ae62bff57f34f5f995e25ed234c
  Author: Steven Rostedt (Red Hat) <rostedt@xxxxxxxxxxx>
  Date:   Tue Oct 20 11:38:08 2015 -0400

      tracing: Have stack tracer force RCU to be watching

      The stack tracer was triggering the WARN_ON() in module.c:

       static void module_assert_mutex_or_preempt(void)
       {
       #ifdef CONFIG_LOCKDEP
        if (unlikely(!debug_locks))
                return;

        WARN_ON(!rcu_read_lock_sched_held() &&
                !lockdep_is_held(&module_mutex));
       #endif
       }

      The reason is that the stack tracer traces all function calls, and some of
      those calls happen while exiting or entering user space and idle. Some of
      these functions are called after RCU had already stopped watching, as RCU
      does not watch userspace or idle CPUs.

      If a max stack is hit, then the save_stack_trace() is called, which will
      check module addresses and call module_assert_mutex_or_preempt(), and then
      trigger the warning. Sad part is, the warning itself will also do a stack
      trace and tigger the same warning. That probably should be fixed.

      The warning was added by 0be964be0d45 "module: Sanitize RCU usage and
      locking" but this bug has probably been around longer. But it's unlikely 
to
      cause much harm, but the new warning causes the system to lock up.

      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc:"Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Steven Rostedt <rostedt@xxxxxxxxxxx>

  commit 97aff2c03a1e4d343266adadb52313613efb027f
  Author: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 10:25:58 2015 +0100

      ASoC: wm8904: Correct number of EQ registers

      There are 24 EQ registers not 25, I suspect this bug came about because
      the registers start at EQ1 not zero. The bug is relatively harmless as
      the extra register written is an unused one.

      Signed-off-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit d289619a219dd01e255d7b5e30f9171b25efea48
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Tue Oct 20 16:23:55 2015 +0200

      ALSA: hda - Fix deadlock at error in building PCM

      The HDA codec driver issues snd_hda_codec_reset() at the error path of
      PCM build.  This was needed in the earlier code base, but the recent
      rewrite to use the standard bus binding made this a deadlock:
       modprobe        D 0000000000000005     0   720    716 0x00000080
       Call Trace:
        [<ffffffff816a5dbe>] schedule+0x3e/0x90
        [<ffffffff816a61a5>] schedule_preempt_disabled+0x15/0x20
        [<ffffffff816a7ae5>] __mutex_lock_slowpath+0xb5/0x120
        [<ffffffff816a7b6b>] mutex_lock+0x1b/0x30
        [<ffffffff8148656b>] device_release_driver+0x1b/0x30
        [<ffffffff81485c15>] bus_remove_device+0x105/0x180
        [<ffffffff814822b9>] device_del+0x139/0x260
        [<ffffffffa05e0ec5>] snd_hdac_device_unregister+0x25/0x30 [snd_hda_core]
        [<ffffffffa074fa6a>] snd_hda_codec_reset+0x2a/0x70 [snd_hda_codec]
        [<ffffffffa075007b>] snd_hda_codec_build_pcms+0x18b/0x1b0 
[snd_hda_codec]
        [<ffffffffa074a44e>] hda_codec_driver_probe+0xbe/0x140 [snd_hda_codec]
        [<ffffffff81486ac4>] driver_probe_device+0x1f4/0x460
        [<ffffffff81486dc0>] __driver_attach+0x90/0xa0
        [<ffffffff81484844>] bus_for_each_dev+0x64/0xa0
        [<ffffffff814862de>] driver_attach+0x1e/0x20
        [<ffffffff81485e7b>] bus_add_driver+0x1eb/0x280
        [<ffffffff81487680>] driver_register+0x60/0xe0
        [<ffffffffa074a0da>] __hda_codec_driver_register+0x5a/0x60 
[snd_hda_codec]
        [<ffffffffa070a01e>] realtek_driver_init+0x1e/0x1000 
[snd_hda_codec_realtek]
        [<ffffffff810002f3>] do_one_initcall+0xb3/0x200
        [<ffffffff816a1fc5>] do_init_module+0x60/0x1f8
        [<ffffffff810ee5c3>] load_module+0x1653/0x1bd0
        [<ffffffff810eed48>] SYSC_finit_module+0x98/0xc0
        [<ffffffff810eed8e>] SyS_finit_module+0xe/0x10
        [<ffffffff816aa032>] entry_SYSCALL_64_fastpath+0x16/0x75

      The simple fix is just to remove this call, since we don't need to
      think about unbinding at there any longer.

      Bugzilla: https://bugzilla.suse.com/show_bug.cgi?id=948758
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 271817a3e92c0455bda5856d87eca244ad67d3a2
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Mon Oct 19 17:23:28 2015 -0400

      crypto: asymmetric_keys - Fix unaligned access in x509_get_sig_params()

      x509_get_sig_params() has the same code pattern as the one in
      pkcs7_verify() that is fixed by commit 62f57d05e287 ("crypto: pkcs7 - Fix
      unaligned access in pkcs7_verify()") so apply a similar fix here: make
      sure that desc is pointing at an algined value past the digest_size,
      and take alignment values into consideration when doing kzalloc()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 381ceef785aa3957cd78f13b9311a09a8ea8ed45
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Mon Oct 19 12:19:45 2015 +0100

      crypto: akcipher - Don't #include crypto/public_key.h as the contents 
aren't used

      Don't #include crypto/public_key.h in akcipher as the contents of the
      header aren't used and changes in a future patch cause it to fail to
      compile if CONFIG_KEYS=n.

      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 642c117b927fae34cb85ac7ff278f5fc5bb93a47
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:42 2015 +0900

      hwrng: exynos - Add Device Tree support

      Add Device Tree support for the driver. The Pseudo Random Number
      Generator module is the same in almost all of Exynos SoCs, since
      Exynos4210 (however the tests were done only on Trats2 board with
      Exynos4412). There are some differences on newer Exynos Octa
      (Exynos542x) SoCs.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit bd1dffb1424682ac5b5849e0998c26dffcd61d9e
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:41 2015 +0900

      hwrng: exynos - Fix missing configuration after suspend to RAM

      After suspend to RAM the device stopped to work with ETIMEDOUT error:

      $ dd if=/dev/hwrng of=/dev/null bs=1 count=16
      dd: reading `/dev/hwrng': Connection timed out

      In the STATUS register the bits #5 (PRNG_DONE) and #1
      (SEED_SETTING_DONE) were not set. Instead PRNG_ERROR (seventh bit) was
      high.

      After each system suspend initialize the seed to fix the error.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d7fd6075a205f19cd0c570c8b5badb8c69321d88
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:40 2015 +0900

      hwrng: exynos - Add timeout for waiting on init done

      Driver may hang waiting indefinitely for PRNG to finish its
      initialization stage. Instead of stalling return -ETIMEDOUT error.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 2b748a2f642a95c8125bfd8981d430a4e4d73e15
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:39 2015 +0900

      dt-bindings: rng: Describe Exynos4 PRNG bindings

      Document the bindings used by exynos-rng Pseudo Random Number Generator
      driver.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 6de59d453ae567c1b637ef9469c37fd8367cd1b4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:26 2015 +0100

      crypto: marvell/cesa - use __le32 for hardware descriptors

      Much of the driver uses cpu_to_le32() to convert values for descriptors
      to little endian before writing.  Use __le32 to define the hardware-
      accessed parts of the descriptors, and ensure most places where it's
      reasonable to do so use cpu_to_le32() when assigning to these.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ea1f662bde067563328ec3083884aaffb3d902d8
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:20 2015 +0100

      crypto: marvell/cesa - fix missing cpu_to_le32() in mv_cesa_dma_add_op()

      When tdma->src is freed in mv_cesa_dma_cleanup(), we convert the DMA
      address from a little-endian value prior to calling dma_pool_free().
      However, mv_cesa_dma_add_op() assigns tdma->src without first converting
      the DMA address to little endian.  Fix this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 0f3304dc18b1316bc6d32921f2a7837938f90c30
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:15 2015 +0100

      crypto: marvell/cesa - use memcpy_fromio()/memcpy_toio()

      Use the IO memcpy() functions when copying from/to MMIO memory.
      These locations were found via sparse.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 35622eae188761f30df916a6cae4fa8c942a6366
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:10 2015 +0100

      crypto: marvell/cesa - use gfp_t for gfp flags

      Use gfp_t not u32 for the GFP flags.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5d754137ab905aaaf69acf81c9c6c7005bcfe6e4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:05 2015 +0100

      crypto: marvell/cesa - use dma_addr_t for cur_dma

      cur_dma is part of the software state, not read by the hardware.
      Storing it in LE32 format is wrong, use dma_addr_t for this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b150856152cc442050ed3041e912ff0258c50f87
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:00 2015 +0100

      crypto: marvell/cesa - use readl_relaxed()/writel_relaxed()

      Use relaxed IO accessors where appropriate.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 660c40bd9837854b3d3cc75e6ddb41cc8ac32a1d
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 11:29:01 2015 +0200

      pinctrl: sh-pfc: Remove obsolete r8a7778 platform_device_id entry

      Since the removal of the r8a7778 legacy SoC code in commit
      4baadb9e05c68962 ("ARM: shmobile: r8a7778: remove obsolete setup code"),
      r8a7778 is only supported in generic DT-only ARM multi-platform builds.
      The driver doesn't need to match platform devices by name anymore, hence
      remove the corresponding platform_device_id entry.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5eb6fc210ea2f988731f54eda0497d0518b89347
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 11:27:19 2015 +0200

      pinctrl: sh-pfc: Remove obsolete r8a7779 platform_device_id entry

      Since the removal of the r8a7779 legacy SoC code in commit
      c99cd90d98a98aa1 ("ARM: shmobile: r8a7779: Remove legacy SoC code"),
      r8a7779 is only supported in generic DT-only ARM multi-platform builds.
      The driver doesn't need to match platform devices by name anymore, hence
      remove the corresponding platform_device_id entry.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 659f313dcfb9eaf4de7d415fe9fd1856252444f5
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:31 2015 +0100

      crypto: caam - fix indentation of close braces

      The kernel's coding style suggests that closing braces for initialisers
      should not be aligned to the open brace column.  The CodingStyle doc
      shows how this should be done.  Remove the additional tab.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5ec908319ab53072d3a2188e62ed2e5d7b846951
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:25 2015 +0100

      crypto: caam - only export the state we really need to export

      Avoid exporting lots of state by only exporting what we really require,
      which is the buffer containing the set of pending bytes to be hashed,
      number of pending bytes, the context buffer, and the function pointer
      state.  This reduces down the exported state size to 216 bytes from
      576 bytes.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c7556ff7e3e4f2747583bcc787f12ec9460ec3a6
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:20 2015 +0100

      crypto: caam - fix non-block aligned hash calculation

      caam does not properly calculate the size of the retained state
      when non-block aligned hashes are requested - it uses the wrong
      buffer sizes, which results in errors such as:

      caam_jr 2102000.jr1: 40000501: DECO: desc idx 5: SGT Length Error. The 
descriptor is trying to read more data than is contained in the SGT table.

      We end up here with:

      in_len 0x46 blocksize 0x40 last_bufsize 0x0 next_bufsize 0x6
      to_hash 0x40 ctx_len 0x28 nbytes 0x20

      which results in a job descriptor of:

      jobdesc@889: ed03d918: b0861c08 3daa0080 f1400000 3d03d938
      jobdesc@889: ed03d928: 00000068 f8400000 3cde2a40 00000028

      where the word at 0xed03d928 is the expected data size (0x68), and a
      scatterlist containing:

      sg@892: ed03d938: 00000000 3cde2a40 00000028 00000000
      sg@892: ed03d948: 00000000 3d03d100 00000006 00000000
      sg@892: ed03d958: 00000000 7e8aa700 40000020 00000000

      0x68 comes from 0x28 (the context size) plus the "in_len" rounded down
      to a block size (0x40).  in_len comes from 0x26 bytes of unhashed data
      from the previous operation, plus the 0x20 bytes from the latest
      operation.

      The fixed version would create:

      sg@892: ed03d938: 00000000 3cde2a40 00000028 00000000
      sg@892: ed03d948: 00000000 3d03d100 00000026 00000000
      sg@892: ed03d958: 00000000 7e8aa700 40000020 00000000

      which replaces the 0x06 length with the correct 0x26 bytes of previously
      unhashed data.

      This fixes a previous commit which erroneously "fixed" this due to a
      DMA-API bug report; that commit indicates that the bug was caused via a
      test_ahash_pnum() function in the tcrypt module.  No such function has
      ever existed in the mainline kernel.  Given that the change in this
      commit has been tested with DMA API debug enabled and shows no issue,
      I can only conclude that test_ahash_pnum() was triggering that bad
      behaviour by CAAM.

      Fixes: 7d5196aba3c8 ("crypto: caam - Correct DMA unmap size in 
ahash_update_ctx()")
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 434b421241f2d0faa7fea75f6320de00c5e3430e
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:15 2015 +0100

      crypto: caam - avoid needlessly saving and restoring caam_hash_ctx

      When exporting and importing the hash state, we will only export and
      import into hashes which share the same struct crypto_ahash pointer.
      (See hash_accept->af_alg_accept->hash_accept_parent.)

      This means that saving the caam_hash_ctx structure on export, and
      restoring it on import is a waste of resources.  So, remove this code.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 6ea30f0acfd1c269520c561b45762c0de590007f
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:10 2015 +0100

      crypto: caam - print errno code when hash registration fails

      Print the errno code when hash registration fails, so we know why the
      failure occurred.  This aids debugging.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8c07f3a8c487df241f5e809e8f6d5dd7c9d75b54
  Author: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:57 2015 +0100

      crypto: marvell/cesa - fix memory leak

      To: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>,Arnaud Ebalard 
<arno@xxxxxxxxxxxx>,Thomas Petazzoni 
<thomas.petazzoni@xxxxxxxxxxxxxxxxxx>,Jason Cooper <jason@xxxxxxxxxxxxxx>

      The local chain variable is not cleaned up if an error occurs in the 
middle
      of DMA chain creation. Fix that by dropping the local chain variable and
      using the dreq->chain field which will be cleaned up by
      mv_cesa_dma_cleanup() in case of errors.

      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Reported-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8efbc2c0f6b4e52e384ecb1714511f0194c4d56a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:52 2015 +0100

      crypto: marvell/cesa - fix first-fragment handling in 
mv_cesa_ahash_dma_last_req()

      When adding the software padding, this must be done using the first/mid
      fragment mode, and any subsequent operation needs to be a mid-fragment.
      Fix this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ab270e7055e0aa9d4dc3bf419cdfdde340174978
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:47 2015 +0100

      crypto: marvell/cesa - rearrange handling for sw padded hashes

      Rearrange the last request handling for hashes which require software
      padding.

      We prepare the padding to be appended, and then append as much of the
      padding to any existing data that's already queued up, adding an
      operation block and launching the operation.

      Any remainder is then appended as a separate operation.

      This ensures that the hardware only ever sees multiples of the hash
      block size to be operated on for software padded hashes, thus ensuring
      that the engine always indicates that it has finished the calculation.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit aee84a7e6ed515f0f217317ff261a15db4bff0bb
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:42 2015 +0100

      crypto: marvell/cesa - rearrange handling for hw finished hashes

      Rearrange the last request handling for hardware finished hashes
      by moving the generation of the fragment operation into this path.
      This results in a simplified sequence to handle this case, and
      allows us to move the software padded case further down into the
      function.  Add comments describing these parts.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 58953e15ef015ba9136b7234a7098cf827428999
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:37 2015 +0100

      crypto: marvell/cesa - rearrange last request handling

      Move the test for the last request out of mv_cesa_ahash_dma_last_req()
      to its caller, and move the mv_cesa_dma_add_frag() down into this
      function.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e41bbebddec44f7c06585f42686b2a529513fc6a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:32 2015 +0100

      crypto: marvell/cesa - avoid adding final operation within loop

      Avoid adding the final operation within the loop, but instead add it
      outside.  We combine this with the handling for the no-data case.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit bd274b10856b91f702fa767114aa7e6ac45b933d
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:26 2015 +0100

      crypto: marvell/cesa - ensure iter.base.op_len is the full op length

      When we process the last request of data, and the request contains user
      data, the loop in mv_cesa_ahash_dma_req_init() marks the first data size
      as being iter.base.op_len which does not include the size of the cache
      data.  This means we end up hashing an insufficient amount of data.

      Fix this by always including the cache size in the first operation
      length of any request.

      This has the effect that for a request containing no user data,

        iter.base.op_len === iter.src.op_offset === creq->cache_ptr

      As a result, we include one further change to use iter.base.op_len in
      the cache-but-no-user-data case to make the next change clearer.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d9bba4c3ebbc65b9113624eb1690bed776fb6106
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:21 2015 +0100

      crypto: marvell/cesa - use presence of scatterlist to determine data load

      Use the presence of the scatterlist to determine whether we should load
      any new user data to the engine.  The following shall always be true at
      this point:

        iter.base.op_len == 0 === iter.src.sg

      In doing so, we can:

      1. eliminate the test for iter.base.op_len inside the loop, which
         makes the loop operation more obvious and understandable.

      2. move the operation generation for the cache-only case.

      This prepares the code for the next step in its transformation, and also
      uncovers a bug that will be fixed in the next patch.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 0971d09a8566abd6640acdbe3fd304e67e257bd3
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:16 2015 +0100

      crypto: marvell/cesa - move mv_cesa_dma_add_frag() calls

      Move the calls to mv_cesa_dma_add_frag() into the parent function,
      mv_cesa_ahash_dma_req_init().  This is in preparation to changing
      when we generate the operation blocks, as we need to avoid generating
      a block for a partial hash block at the end of the user data.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 2f396a91d1d01a423fd87b7c6ff71600d06b9c05
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:11 2015 +0100

      crypto: marvell/cesa - always ensure mid-fragments after first-fragment

      If we add a template first-fragment operation, always update the
      template to be a mid-fragment.  This ensures that mid-fragments
      always follow on from a first fragment in every case.

      This means we can move the first to mid-fragment update code out of
      mv_cesa_ahash_dma_add_data().

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 9621288673cb2a1805eadf29b92e5bcec6a0e2e5
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:06 2015 +0100

      crypto: marvell/cesa - factor out adding an operation and launching it

      Add a helper to add the fragment operation block followed by the DMA
      entry to launch the operation.

      Although at the moment this pattern only strictly appears at one site,
      two other sites can be factored as well by slightly changing the order
      in which the DMA operations are performed.  This should be harmless as
      the only thing which matters is to have all the data loaded into SRAM
      prior to launching the operation.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8651791e5403a0e0634b76dee91b102dc4f40385
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:01 2015 +0100

      crypto: marvell/cesa - factor out first fragment decisions to helper

      Multiple locations in the driver test the operation context fragment
      type, checking whether it is a first fragment or not.  Introduce a
      mv_cesa_mac_op_is_first_frag() helper, which returns true if the
      fragment operation is for a first fragment.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c439e4eec73373c6d5b7129ece69d67978ada307
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:56 2015 +0100

      crypto: marvell/cesa - const-ify argument to mv_cesa_get_op_cfg()

      mv_cesa_get_op_cfg() does not write to its argument, it only reads.
      So, let's make it const.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d30cb2fa34829161cfa1f847049b3fcfcfeebc93
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:51 2015 +0100

      crypto: marvell/cesa - ensure template operation is initialised

      Ensure that the template operation is fully initialised, otherwise we
      end up loading data from the kernel stack into the engines, which can
      upset the hash results.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 51954a968bbedcabf2b42fec2ec51386f0dee0c4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:46 2015 +0100

      crypto: marvell/cesa - fix the bit length endianness

      The endianness of the bit length used in the final stage depends on the
      endianness of the algorithm - md5 hashes need it to be in little endian
      format, whereas SHA hashes need it in big endian format.  Use the
      previously added algorithm endianness flag to control this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit a9eb678f8addc1bfb80bacc45f6df1108fd1c0d9
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:40 2015 +0100

      crypto: marvell/cesa - add flag to determine algorithm endianness

      Rather than determining whether we're using a MD5 hash by looking at
      the digest size, switch to a cleaner solution using a per-request flag
      initialised by the method type.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 4c2b130c8ae79af734e5e57f3662e25ef4d20e8d
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:35 2015 +0100

      crypto: marvell/cesa - keep creq->state in CPU endian format at all times

      Currently, we read/write the state in CPU endian, but on the final
      request, we convert its endian according to the requested algorithm.
      (md5 is little endian, SHA are big endian.)

      Always keep creq->state in CPU native endian format, and perform the
      necessary conversion when copying the hash to the result.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 80754539ec936b0afe8a3c406b7d67612977cc71
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:23:30 2015 +0100

      crypto: marvell/cesa - easier way to get the transform

      There's an easier way to get at the hash transform - rather than
      using crypto_ahash_tfm(ahash), we can get it directly from
      req->base.tfm.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 524e56c31a6fe21e6f6f543360359e7a97dfabfb
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 09:37:41 2015 +0800

      crypto: ahash - Add crypto_ahash_blocksize

      This patch adds the missing helper crypto_ahash_blocksize which
      returns the block size of an ahash algorithm.

      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 63349d02c195030f97c9c2000bbf32539056316f
  Author: Stephan Mueller <smueller@xxxxxxxxxx>
  Date:   Sun Oct 18 12:45:18 2015 +0200

      lib/mpi: fix off by one in mpi_read_raw_from_sgl

      The patch fixes the analysis of the input data which contains an off
      by one.

      The issue is visible when the SGL contains one byte per SG entry.
      The code for checking for zero bytes does not operate on the data byte.

      Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 4a4b0bad0653a0dce876987f7487b2c5e3ecb05f
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Fri Oct 16 11:40:56 2015 -0700

      crypto: qat - fix crypto_get_instance_node function

      qat_crypto_get_instance_node function needs to handle situation when the
      first dev in the list is not started.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f02b7d0c7b433b9a8175ac9027391272877a43ce
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Fri Oct 16 17:01:51 2015 +0100

      hwrng: exynos - Fix unbalanced PM runtime get/puts

      Currently this driver calls pm_runtime_get_sync() rampantly
      but never puts anything back. This makes it impossible for the
      device to autosuspend properly; it will remain fully active
      after the first use.

      Fix in the obvious way.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Cc: Kukjin Kim <kgene@xxxxxxxxxx>
      Cc: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Tested-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 839a42af9441982311f33241529f711f23c857c8
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Thu Oct 15 20:34:53 2015 +0200

      lib/mpi: clean unused SHA1_DIGEST_LENGTH

      The define SHA1_DIGEST_LENGTH is not used anywhere, so remove it.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 69af775a18ff1d07f527b2f6caec171af5e1397e
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 10:55:44 2015 +0200

      pinctrl: sh-pfc: Stop including <linux/platform_data/gpio-rcar.h>

      This header file will be removed soon.

      Copy the helper macro RCAR_GP_PIN(), which is used by the pinctrl
      drivers only, to sh_pfc.h, and drop the #include.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit f15f30449ab252fdc9405f99d46edacc225328cf
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 10:51:02 2015 +0200

      usb: renesas_usbhs: Remove unneeded #include 
<linux/platform_data/gpio-rcar.h>

      This header file will be removed soon.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Felipe Balbi <balbi@xxxxxx>

  commit b8b47d678a5f0b5826044242780a988f8af50b22
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Mon Sep 21 16:27:23 2015 +0200

      pinctrl: sh-pfc: Rename .gpio_data[] to .pinmux_data[]

      The sh_pfc_soc_info.gpio_data[] array contains not only GPIO data, but
      also various other pinmux-related data (functions and marks).
      Every single driver already calls its local array pinmux_data[].
      Hence rename the sh_pfc_soc_info member to "pinmux_data".

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>

  commit ae7465a0972aee889d79d94dbd1e65d3fab07414
  Author: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
  Date:   Mon Oct 5 16:55:54 2015 +0200

      pinctrl: sh-pfc: r8a7778: Add bias (pull-up) pinconf support

      On this SoC there is no simple mapping of GP pins to pull-up register
      bits, so we need a table.

      Signed-off-by: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 22768fc60abbf58b04601b27796268f0363ab185
  Author: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
  Date:   Mon Oct 5 16:55:53 2015 +0200

      pinctrl: sh-pfc: Add macros defining GP ports with config flags

      PORT_GP_CFG_1 and PORT_GP_CFG_32 work like their non-CFG counterparts
      but accept an extra argument with config flags.

      Signed-off-by: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 0f7711aa300355d46e2a532d9c5cd13ca67d1b02
  Author: Koji Matsuoka <koji.matsuoka.xm@xxxxxxxxxxx>
  Date:   Sat Oct 3 02:21:49 2015 +0300

      pinctrl: sh-pfc: r8a7794: Add VIN pin groups

      Add VIN0/1 pin groups to R8A7794 PFC driver.

      Sergei:  rebased, renamed, added changelog, gathered 12  VIN1 data pins 
into
      a single pin group, added "vin1_data10" pin group, used 'union vin_data' 
and
      VIN_DATA_PIN_GROUP() macro to describe VIN1 pins, reversed the order of  
the
      VIN1 pin groups, removed unneeded empty lines, fixed  VIN1 separator 
comment.

      Signed-off-by: Koji Matsuoka <koji.matsuoka.xm@xxxxxxxxxxx>
      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 423caa52534ff15a63a8f86f8ecb99cfa8e9cbca
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 02:21:15 2015 +0300

      pinctrl: sh-pfc: r8a779[01]: Move 'union vin_data' to shared header file

      R8A7790/1 PFC  drivers use almost identical  'union vin_data' and 
completely
      identical VIN_DATA_PIN_GROUP() macro; we thus can  move them into the 
shared
      header file...

      Suggested-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 3fc89adb9fa4beff31374a4bf50b3d099d88ae83
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 18:23:57 2015 +0800

      crypto: api - Only abort operations on fatal signal

      Currently a number of Crypto API operations may fail when a signal
      occurs.  This causes nasty problems as the caller of those operations
      are often not in a good position to restart the operation.

      In fact there is currently no need for those operations to be
      interrupted by user signals at all.  All we need is for them to
      be killable.

      This patch replaces the relevant calls of signal_pending with
      fatal_signal_pending, and wait_for_completion_interruptible with
      wait_for_completion_killable, respectively.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 56a3f30e029396948989b96716f27b87e3510e0f
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Tue Oct 20 14:59:20 2015 +0100

      arm64: Make 36-bit VA depend on EXPERT

      Commit 215399392fe4 (arm64: 36 bit VA) introduced 36-bit VA support for
      the arm64 kernel when the 16KB page configuration is enabled. While this
      is a valid hardware configuration, it's not something we want to
      encourage since it reduces the memory (and I/O) range that the kernel
      can access. Make this depend on EXPERT to avoid complaints of Linux not
      mapping the whole RAM, especially on platforms following the ARM
      recommended memory map.

      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit e1d040cfcf76c1c1b5d71fc08ab577a0cf72fefd
  Author: Yunlong Song <yunlong.song@xxxxxxxxxx>
  Date:   Thu Oct 15 16:51:56 2015 +0800

      perf build: Add fixdep to .gitignore

      Commit 7c422f5572667fef0db38d2046ecce69dcf0afc8 ("tools build: Build
      fixdep helper from perf and basic libs") dynamically creates fixdep
      during the perf building. Add it to .gitignore.

      Signed-off-by: Yunlong Song <yunlong.song@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: 7c422f557266 ("tools build: Build fixdep helper from perf and 
basic libs")
      Link: 
http://lkml.kernel.org/r/1444899116-8220-1-git-send-email-yunlong.song@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 26440c835f8b1a491e2704118ac55bf87334366c
  Merge: 371f1c7 1099f86
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 20 06:08:27 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Conflicts:
        drivers/net/usb/asix_common.c
        net/ipv4/inet_connection_sock.c
        net/switchdev/switchdev.c

      In the inet_connection_sock.c case the request socket hashing scheme
      is completely different in net-next.

      The other two conflicts were overlapping changes.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3bc2159faf897bab51e4f1144b525d21823832a6
  Merge: b2c280b cb0f253
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Oct 20 12:37:45 2015 +0200

      Merge branch 'clockevents/4.4' of 
http://git.linaro.org/people/daniel.lezcano/linux into timers/core

      clockevent updates from Daniel Lezcano:

       - Remove unneeded memset in em_sti, sh_cmt and h8300 because there are 
already
         zeroed by a kzalloc (Alexey Klimov)

       - Optimize code by replacing this_cpu_ptr by container_of on the 
exynos_mct (Alexey
         Klimov)

       - Get immune from a spurious interrupt when enabling the mtk_timer 
(Daniel Lezcano)

       - Use the dynamic irq affinity to optimize wakeup and useless IPI timer 
on the imx
         timer (Lucas Stach)

       - Add new timer for Tango SoCs (Marc Gonzalez)

       - Implement the timer delay for armada-370-xp (Russell King)

       - Use GPT as clock source (Yingjoe Chen)

  commit b2c280bdd6ea31be66c9b6a666e71daa49beef75
  Merge: c8d75aa 090e2ed
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Oct 20 12:30:53 2015 +0200

      Merge branch 'fortglx/4.4/time' of 
https://git.linaro.org/people/john.stultz/linux into timers/core

      Time updates from John Stultz:

           - More 2038 work from Arnd Bergmann around ntp and pps

  commit f7d27c35ddff7c100d7a98db499ac0040149ac05
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:37:18 2015 +0300

      x86/mm, kasan: Silence KASAN warnings in get_wchan()

      get_wchan() is racy by design, it may access volatile stack
      of running task, thus it may access redzone in a stack frame
      and cause KASAN to warn about this.

      Use READ_ONCE_NOCHECK() to silence these warnings.

      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445243838-17763-3-git-send-email-aryabinin@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d976441f44bc5d48635d081d277aa76556ffbf8b
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:37:17 2015 +0300

      compiler, atomics, kasan: Provide READ_ONCE_NOCHECK()

      Some code may perform racy by design memory reads. This could be
      harmless, yet such code may produce KASAN warnings.

      To hide such accesses from KASAN this patch introduces
      READ_ONCE_NOCHECK() macro. KASAN will not check the memory
      accessed by READ_ONCE_NOCHECK(). The KernelThreadSanitizer
      (KTSAN) is going to ignore it as well.

      This patch creates __read_once_size_nocheck() a clone of
      __read_once_size(). The only difference between them is
      'no_sanitized_address' attribute appended to '*_nocheck'
      function. This attribute tells the compiler that instrumentation
      of memory accesses should not be applied to that function. We
      declare it as static '__maybe_unsed' because GCC is not capable
      to inline such function:
      https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67368

      With KASAN=n READ_ONCE_NOCHECK() is just a clone of READ_ONCE().

      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445243838-17763-2-git-send-email-aryabinin@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 43e41adc9e8c36545888d78fed2ef8d102a938dc
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:09:11 2015 +0200

      perf record: Add ability to sample call branches

      This patch add a new branch type sampling filter to perf record.
      It is named 'call' and maps to PERF_SAMPLE_BRANCH_CALL. It samples
      direct call branches only, unlike 'any_call' which includes indirect
      calls as well.

       $ perf record -j call -e cycles .....

      The man page is updated accordingly.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: khandual@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444720151-10275-5-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 24f1a79a5fc10858e05ee0bf651ec99abfc0319b
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:09:10 2015 +0200

      perf/powerpc: Add support for PERF_SAMPLE_BRANCH_CALL

      The patch catches PERF_SAMPLE_BRANCH_CALL because it is not clear whether
      this is actually supported by the hardware.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: khandual@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444720151-10275-4-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d892819faa6860d469aae71d70c336b391c25505
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:09:09 2015 +0200

      perf/x86: Add support for PERF_SAMPLE_BRANCH_CALL

      This patch enables the suport for the PERF_SAMPLE_BRANCH_CALL
      for Intel x86 processors. When the processor support LBR filtering
      this the selection is done in hardware. Otherwise, the filter is
      applied by software. Note that we chose to include zero length calls
      because they also represent calls.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: khandual@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444720151-10275-3-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c229bf9dc179d2023e185c0f705bdf68484c1e73
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:09:08 2015 +0200

      perf: Add PERF_SAMPLE_BRANCH_CALL

      Add a new branch sample type to cover only call branches (function calls).
      The current ANY_CALL included direct, indirect calls and far jumps.

      We want to be able to differentiate indirect from direct calls. Therefore
      we introduce PERF_SAMPLE_BRANCH_CALL. The implementation is up to each
      architecture.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: khandual@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444720151-10275-2-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b9511cd761faafca7a1acc059e792c1399f9d7c6
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Oct 16 16:24:05 2015 +0300

      perf/x86: Fix time_shift in perf_event_mmap_page

      Commit:

        b20112edeadf ("perf/x86: Improve accuracy of perf/sched clock")

      allowed the time_shift value in perf_event_mmap_page to be as much
      as 32.  Unfortunately the documented algorithms for using time_shift
      have it shifting an integer, whereas to work correctly with the value
      32, the type must be u64.

      In the case of perf tools, Intel PT decodes correctly but the timestamps
      that are output (for example by perf script) have lost 32-bits of
      granularity so they look like they are not changing at all.

      Fix by limiting the shift to 31 and adjusting the multiplier accordingly.

      Also update the documentation of perf_event_mmap_page so that new code
      based on it will be more future-proof.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Fixes: b20112edeadf ("perf/x86: Improve accuracy of perf/sched clock")
      Link: 
http://lkml.kernel.org/r/1445001845-13688-2-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e73e85f0593832aa583b252f9a16cf90ed6d30fa
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Sat Oct 10 20:53:15 2015 +0200

      sched: Don't scan all-offline ->cpus_allowed twice if !CONFIG_CPUSETS

      If CONFIG_CPUSETS=n then "case cpuset" changes the state and runs
      the already failed for_each_cpu() loop again for no reason.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151010185315.GA24100@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 62694cd51322262a9142e946915fc4783113ccff
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 18:36:29 2015 +0200

      sched: Move cpu_active() tests from stop_two_cpus() into 
migrate_swap_stop()

      The cpu_active() tests are not fundamentally part of stop_two_cpus(),
      move then into the scheduler where they belong.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 07f06cb3b5f6bd21374a48dbefdb431d71d53974
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 18:00:54 2015 +0200

      sched: Start stopper early

      Ensure the stopper thread is active 'early', because the load balancer
      pretty much assumes that its available. And when 'online && active' the
      load-balancer is fully available.

      Not only the numa balancing stop_two_cpus() caller relies on it, but
      also the self migration stuff does, and at CPU_ONLINE time the cpu
      really is 'free' to run anything.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151009160054.GA10176@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f0cf16cbd0659d2dd21352da9f06f3fab7a51596
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Oct 9 18:00:51 2015 +0200

      stop_machine: Kill cpu_stop_threads->setup() and cpu_stop_unpark()

      Now that we always use stop_machine_unpark() to wake the stopper
      threas up, we can kill ->setup() and fold cpu_stop_unpark() into
      stop_machine_unpark().

      And we do not need stopper->lock to set stopper->enabled = true.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151009160051.GA10169@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c00166d87e730088d919814020e96ffed129d0d1
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Oct 9 18:00:49 2015 +0200

      stop_machine: Kill smp_hotplug_thread->pre_unpark, introduce 
stop_machine_unpark()

      1. Change smpboot_unpark_thread() to check ->selfparking, just
         like smpboot_park_thread() does.

      2. Introduce stop_machine_unpark() which sets ->enabled and calls
         kthread_unpark().

      3. Change smpboot_thread_call() and cpu_stop_init() to call
         stop_machine_unpark() by hand.

      This way:

          - IMO the ->selfparking logic becomes more consistent.

          - We can kill the smp_hotplug_thread->pre_unpark() method.

          - We can easily unpark the stopper thread earlier. Say, we
            can move stop_machine_unpark() from smpboot_thread_call()
            to sched_cpu_active() as Peter suggests.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151009160049.GA10166@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d8bc853582bfd81a9c08ca6922aeb01570080ccc
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Oct 8 19:01:41 2015 +0200

      stop_machine: Change cpu_stop_queue_two_works() to rely on 
stopper->enabled

      Change cpu_stop_queue_two_works() to ensure that both CPU's have
      stopper->enabled == T or fail otherwise.

      This way stop_two_cpus() no longer needs to check cpu_active() to
      avoid the deadlock. This patch doesn't remove these checks, we will
      do this later.

      Note: we need to take both stopper->lock's at the same time, but this
      will also help to remove lglock from stop_machine.c, so I hope this
      is fine.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151008170141.GA25537@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5caa1c089aebcb83ccd5b79a3b88b0aa58288d05
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Oct 8 16:51:34 2015 +0200

      stop_machine: Introduce __cpu_stop_queue_work() and 
cpu_stop_queue_two_works()

      Preparation to simplify the review of the next change. Add two simple
      helpers, __cpu_stop_queue_work() and cpu_stop_queue_two_works() which
      simply take a bit of code from their callers.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151008145134.GA18146@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 233e7f267e580fefdeb36628b7efe8bfe056d27c
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Oct 8 16:51:31 2015 +0200

      stop_machine: Ensure that a queued callback will be called before 
cpu_stop_park()

      cpu_stop_queue_work() checks stopper->enabled before it queues the
      work, but ->enabled == T can only guarantee cpu_stop_signal_done()
      if we race with cpu_down().

      This is not enough for stop_two_cpus() or stop_machine(), they will
      deadlock if multi_cpu_stop() won't be called by one of the target
      CPU's. stop_machine/stop_cpus are fine, they rely on stop_cpus_mutex.
      But stop_two_cpus() has to check cpu_active() to avoid the same race
      with hotplug, and this check is very unobvious and probably not even
      correct if we race with cpu_up().

      Change cpu_down() pass to clear ->enabled before cpu_stopper_thread()
      flushes the pending ->works and returns with KTHREAD_SHOULD_PARK set.

      Note also that smpboot_thread_call() calls cpu_stop_unpark() which
      sets enabled == T at CPU_ONLINE stage, so this CPU can't go away until
      cpu_stopper_thread() is called at least once. This all means that if
      cpu_stop_queue_work() succeeds, we know that work->fn() will be called.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: heiko.carstens@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151008145131.GA18139@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6af597de62a365dfec6021b9796aa302044e7cc3
  Merge: 558a65b 5aa5050
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 20 10:18:16 2015 +0200

      Merge branch 'sched/urgent' into sched/core, to pick up fixes and resolve 
conflicts

      Conflicts:
        kernel/sched/fair.c

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 677b2ff4afd9996eabefc9472c701211b4b49e87
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 2 14:26:05 2015 -0700

      gpio: add a real time compliance checklist

      Add some information about real time compliance to the driver document.
      Inspired by Grygorii Strashko's real time compliance patches.

      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 6e490b0106a2118ee4c37c37847454a5c2dc6e32
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Oct 7 15:10:38 2015 +0100

      ARM, locking/atomics: Implement _relaxed variants of atomic[64]_{inc,dec}

      Now that the core code supports acquire/release/relaxed versions of
      the atomic_inc family, implement only the _relaxed flavours in the ARM
      backend so that we get all of the others for free.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444227038-12533-1-git-send-email-will.deacon@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a1a2ab2ff7040bdc9a31bfe7173913971f7d723b
  Merge: 00eb4ba 7379047
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 20 10:16:46 2015 +0200

      Merge tag 'v4.3-rc6' into locking/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5aa5050787f449e7eaef2c5ec93c7b357aa7dcdc
  Author: Luca Abeni <luca.abeni@xxxxxxxx>
  Date:   Fri Oct 16 10:06:21 2015 +0200

      sched/deadline: Fix migration of SCHED_DEADLINE tasks

      Commit:

        9d5142624256 ("sched/deadline: Reduce rq lock contention by eliminating 
locking of non-feasible target")

      broke select_task_rq_dl() and find_lock_later_rq(), because it introduced
      a comparison between the local task's deadline and dl.earliest_dl.curr of
      the remote queue.

      However, if the remote runqueue does not contain any SCHED_DEADLINE
      task its earliest_dl.curr is 0 (always smaller than the deadline of
      the local task) and the remote runqueue is not selected for pushing.

      As a result, if an application creates multiple SCHED_DEADLINE
      threads, they will never be pushed to runqueues that do not already
      contain SCHED_DEADLINE tasks.

      This patch fixes the issue by checking if dl.dl_nr_running == 0.

      Signed-off-by: Luca Abeni <luca.abeni@xxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Juri Lelli <juri.lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Wanpeng Li <wanpeng.li@xxxxxxxxxxxxxxx>
      Fixes: 9d5142624256 ("sched/deadline: Reduce rq lock contention by 
eliminating locking of non-feasible target")
      Link: 
http://lkml.kernel.org/r/1444982781-15608-1-git-send-email-luca.abeni@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0baabb385eb4bce699ddab0db015112be6cf1e6a
  Author: Frederic Weisbecker <fweisbec@xxxxxxxxx>
  Date:   Mon Oct 12 17:21:23 2015 +0200

      nohz: Revert "nohz: Set isolcpus when nohz_full is set"

      This reverts:

        8cb9764fc88b ("nohz: Set isolcpus when nohz_full is set")

      We assumed that full-nohz users always want scheduler isolation on full
      dynticks CPUs, therefore we included full-nohz CPUs on cpu_isolated_map.

      This means that tasks run by default on CPUs outside the nohz_full range
      unless their affinity is explicity overwritten.

      This suits pure isolation workloads but when the machine is needed to
      run common workloads, the available sets of CPUs to run common tasks
      becomes reduced.

      We reach an extreme case when CONFIG_NO_HZ_FULL_ALL is enabled as it
      leaves only CPU 0 for non-isolation tasks, which makes people think that
      their supercomputer regressed to 90's UP - which is true in a sense.

      Some full-nohz users appear to be interested in running normal workloads
      either before or after an isolation workload. Full-nohz isn't optimized
      toward normal workloads but it's still better than UP performance.

      We are reaching a limitation in kernel presets here. Lets revert this
      cpu_isolated_map inclusion and let userspace do its own scheduler
      isolation using cpusets or explicit affinity settings.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Reported-by: Mike Galbraith <umgwanakikbuti@xxxxxxxxx>
      Signed-off-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Alexey Dobriyan <adobriyan@xxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Chris Metcalf <cmetcalf@xxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Paul E . McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444663283-30068-1-git-send-email-fweisbec@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3e386d56bafbb6d2540b49367444997fc671ea69
  Author: Yuyang Du <yuyang.du@xxxxxxxxx>
  Date:   Tue Oct 13 09:18:23 2015 +0800

      sched/fair: Update task group's load_avg after task migration

      When cfs_rq has cfs_rq->removed_load_avg set (when a task migrates from
      this cfs_rq), we need to update its contribution to the group's load_avg.

      This should not increase tg's update too much, because in most cases, the
      cfs_rq has already decayed its load_avg.

      Tested-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Yuyang Du <yuyang.du@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444699103-20272-2-git-send-email-yuyang.du@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fde7d22e01aa0d252fc5c95fa11f0dac35a4dd59
  Author: Yuyang Du <yuyang.du@xxxxxxxxx>
  Date:   Tue Oct 13 09:18:22 2015 +0800

      sched/fair: Fix overly small weight for interactive group entities

      Commit:

        9d89c257dfb9 ("sched/fair: Rewrite runnable load and utilization 
average tracking")

      led to an overly small weight for interactive group entities. The bad case
      can be easily reproduced when a number of CPU hogs compete for the CPUs
      at the same time (thanks to Mike). This is largly because the task group's
      load average tracking cross CPUs lags behind the real changes.

      To fix this we accelerate the group share distribution process by using
      the load.weight of the cfs_rq. This may increase the entire group's
      share, but we have to do so to protect the (fragile) interactive
      tasks, especially from CPU hogs.

      Reported-by: Mike Galbraith <umgwanakikbuti@xxxxxxxxx>
      Tested-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Tested-by: Mike Galbraith <umgwanakikbuti@xxxxxxxxx>
      Signed-off-by: Yuyang Du <yuyang.du@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444699103-20272-1-git-send-email-yuyang.du@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 40d4f23f42b0e6997db5bbfba9dc6bf349e8ad81
  Merge: e9363de a4c6a3e
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 20 09:31:22 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes:

      User visible changes:

        - 'perf bench mem' now prefaults unconditionally, no sense in
          providing modes where page faults are measured. (Ingo Molnar)

        - Harmonize -l/--nr_loops accross 'perf bench'. (Ingo Molnar)

        - Various 'perf bench' consistency improvements. (Ingo Molnar)

        - Suppress libtraceevent warnings in non-verbose 'perf test' mode.
          (Namhyung Kim)

        - Move some tracepoint event test error messages to the verbose mode
          of 'perf test'. (Namhyung Kim)

        - Make 'perf help' usage message consistent with other tools. (Yunlong 
Song)

      Build fixes:

        - Fix 'perf bench' build with gcc 4.4.7. (Arnaldo Carvalho de Melo)

      Infrastructure changes:

        - 'perf stat' prep work for the 'perf stat scripting' patchkit. (Jiri 
Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit be0e1987bcb476be4fdd3dce89b6b6bf73a308a7
  Merge: ce1fad2 56b88a3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 16:20:53 2015 +0900

      Merge branch 'for-linus-4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rw/uml

      Pull UML fixes from Richard Weinberger:
       "This contains four overdue UML regression fixes"

      * 'for-linus-4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rw/uml:
        um: Fix kernel mode fault condition
        um: Fix waitpid() usage in helper code
        um: Do not rely on libc to provide modify_ldt()
        um: Fix out-of-tree build

  commit ce1fad2740c648a4340f6f6c391a8a83769d2e8c
  Merge: 1099f86 911b79c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 16:09:36 2015 +0900

      Merge branch 'keys-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs

      Pull key handling fixes from David Howells:
       "Here are two patches, the first of which at least should go upstream
        immediately:

        (1) Prevent a user-triggerable crash in the keyrings destructor when a
            negatively instantiated keyring is garbage collected.  I have also
            seen this triggered for user type keys.

        (2) Prevent the user from using requesting that a keyring be created
            and instantiated through an upcall.  Doing so is probably safe
            since the keyring type ignores the arguments to its instantiation
            function - but we probably shouldn't let keyrings be created in
            this manner"

      * 'keys-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs:
        KEYS: Don't permit request_key() to construct a new keyring
        KEYS: Fix crash when attempt to garbage collect an uninstantiated 
keyring

  commit a1f192cf70b187ab01b8b03cdeea82b8820c927a
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:17:00 2015 -0400

      i40e/i40evf: Bump i40e to 1.3.38 and i40evf to 1.3.25

      Bump.

      Change-ID: Id0a7ecaa491f88ce94c9eba4901e592a56044ee0
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6f66a484f1ff644b4600368fe3091e31b65d3c50
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Sat Sep 19 05:08:45 2015 -0600

      i40e: declare rather than initialize int object

      'err' would be overwritten immediately, so we should declare it only
      rather than initialize it to zero.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2bc11c634eaebb936345b136a196f555045a47ea
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Sat Sep 19 05:08:43 2015 -0600

      i40e: fix kernel-doc argument name

      The second argument name in the kernel-doc argument list for
      i40e_features_check() was slightly off. Fix it for the kernel doc.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 52e9689e4ef070eff1e0f9e6e84a8451b86813b5
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:59 2015 -0400

      i40e: Move error message to debug level

      There is an error coming back from get_phy_capabilities that does not
      seem to have any functional implications. We will continue looking into
      why this error message is occurring, but in the meantime, we will move it
      to debug to avoid confusion.

      Change-ID: I9091754bf62c066ddedeb249923d85606e2d68ed
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3ce12ee9d8f9ae245f38e6acbd32625d8e002c5b
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:58 2015 -0400

      i40e: Fix order of checks when enabling/disabling autoneg in ethtool

      We were previously checking if autoneg was allowed to change before
      checking if autoneg was changing. We need to do this in the other order
      or else we will erroneously return EINVAL when autoneg is not changing.

      Change-ID: Iff9f7d1c9bddc1ad1e5d227d4f42754f90155410
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a03dc368547a7a4e9fcedc6f64dd64a9ff5e0593
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:57 2015 -0400

      i40e/i40evf: Fix an accidental error with BIT_ULL replacement

      A mask value of 0x1FF was accidentally replaced with a bit mask
      causing flow director sideband to be broken.

      Change-ID: Id3387f67dd1b567b41692b570b383c58671e1eae
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8589af70d0879a68c93ef77505a6234d22b1b1a7
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:56 2015 -0400

      i40e: fix for PHY NVM interaction problem

      This patch fixes a problem where the NVMUpdate Tool, when using the PHY
      NVM feature, gets bad data from the PHY because of contention on the
      MDIO interface from get PHY capability calls from the driver during
      regular operations.  The problem is fixed by adding a check if media
      is available before calling get PHY capability function because that
      bit is not set when device is in PHY interaction mode.

      Change-ID: Ib89991b0f841808dd92410f5e8683d6ee3301cd0
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bcab2db97d2423b97b248ba35eb2277168e71fcc
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:55 2015 -0400

      i40e: Fix for Tools loopback test failing after driver load

      This patch fixes a problem where our Tools MAC Loopback test, after
      driver unbind would fail.  This was because the hw was configured
      for multiqueue and unbind operation did not clear this configuration.
      The problem is fixed by resetting this configuration in i40e_remove.

      Change-ID: I130c05138319182ed1476d3a0b5222d6a6320af9
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ee2319cf17ee64bbd0096f2f8f3f8390c93b1e39
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:54 2015 -0400

      i40e/i40evf: adjust interrupt throttle less frequently

      The adaptive ITR (interrupt throttle rate) algorithm was adjusting
      the hardware's interrupt rate too frequently.  This caused a lot
      of variation in the interrupt rate for fairly constant workloads.

      Change the code to have a counter and adjust only once every N
      number of interrupts.

      Change-ID: I0460f1f86571037484eca5aca36ac4d889cb8389
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c56625d59726ee2dc4dfd91c8b6c22098abe1ac4
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:53 2015 -0400

      i40e/i40evf: change dynamic interrupt thresholds

      The dynamic algorithm, while now working, doesn't have good
      performance in 40G mode.

      One part of this patch addresses the high CPU utilization of some small
      streaming workloads that the driver should reduce CPU in.

      It also changes the minimum ITR that the dynamic algorithm
      will settle on, causing our minimum latency to go from 12us
      to about 14us, when using adaptive mode.

      It also changes the BULK interrupt rate to allow maximum throughput
      on a 40Gb connection with a single thread of transmit, clamping
      interrupt rate to 8000 for TX makes single thread traffic go too
      slow.

      The new ULTRA bulk setting is introduced and is used
      when the Rx packet rate on this queue exceeds 40000 packets per
      second.  This value of 40000 was chosen because the automatic tuning
      of minimum ITR=20us means that a single queue can't quite achieve
      that many packets per second from a round-robin test.

      Change-ID: Icce8faa128688ca5fd2c4229bdd9726877a92ea2
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 51cc6d9fccde27310b7dfba2be268ff5b8dcf52d
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:52 2015 -0400

      i40e/i40evf: fix bug in throttle rate math

      The driver was using a value expressed in 2us increments
      for the divisor to figure out our bytes/usec values.

      Fix the usecs variable to contain a value in microseconds.

      Change-ID: I5c20493103c295d6f201947bb908add7040b7c41
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8f5e39ce9214888464d34ef7949e56bdc999b46c
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:51 2015 -0400

      i40e/i40evf: refactor IRQ enable function

      This change moves a multi-line register setting into a function
      which simplifies reading the flow of the enable function.

      This also fixes a bug where the enable function was enabling
      the interrupt twice while trying to update the two interrupt
      throttle rate thresholds for Rx and Tx.

      Change-ID: Ie308f9d0d48540204590cb9d7a5a7b1196f959bb
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit b9029e941dd66d2bc2ab529807a1eef4444f62f0
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 14:16:50 2015 -0400

      i40evf: don't give up

      When the VF driver is unable to communicate with the PF, it just gives
      up and never tries again. Aside from the obvious character flaw that
      this shows, it's also a lousy user experience.

      When PF communications fail, wait five seconds, and try again. And
      again. Don't give up, little VF driver! Your prince will come!

      Change-ID: Ia1378a39879883563b8faffce819f375821f9585
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5d3465a1e4c01be455ef00834ec365e578942d67
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Tue Sep 29 15:19:50 2015 -0700

      i40e/i40evf: use napi_schedule_irqoff()

      The i40e_intr and i40e/i40evf_msix_clean_rings functions run from hard
      interrupt context or with interrupts already disabled in netpoll.

      They can use napi_schedule_irqoff() instead of napi_schedule()

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 07f89be81fa51ec85456559d7db9bc71379a20c1
  Author: Anjali Singhai <anjali.singhai@xxxxxxxxx>
  Date:   Thu Sep 24 15:26:32 2015 -0700

      i40e: Fix basic support for X722 devices

      Acquire NVM, before issuing an AQ read nvm command for X722.
      We need to acquire the NVM before issuing an AQ read to the NVM
      otherwise we will get EBUSY from the FW. Also release when done.

      This fixes the two X722 issues with respect to eeprom checksum verify
      and reading NVM version info.

      With this patch in place, i40e driver will provide basic support
      for X722 devices.

      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d08f55585f22c38db5fcbed509a71d925e0509c1
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Wed Sep 16 19:01:08 2015 -0700

      i40evf: fix overlong BIT defines

      The defines from the RSS enabling call were mistakenly
      missed in the patches to the i40e which should have been
      to i40evf as well.

      This is a follow up to (commit ed921559886dd40528) "fix
      32 bit build warnings".

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 216590355cb0e79fa36c7220176ce850f0e3d276
  Author: Kiran Patil <kiran.patil@xxxxxxxxx>
  Date:   Wed Sep 30 14:09:03 2015 -0400

      i40e: Lock for VSI's MAC filter list

      This patch introduces a spinlock which is to be used for synchronizing
      access to VSI's MAC filter list.

      This patch also synchronizes execution of other codepaths which are
      accessing VSI's MAC filter list with execution of
      service_task:sync_vsi_filters.

      In function i40e_add_vsi, copied out LAA MAC address instead of cloning
      MAC filter entry because only MAC address is needed to remove MAC VLAN
      filter from FW/HW.

      Change-ID: I0e10ac7c715d44aa994239642aa4d57c998573a2
      Signed-off-by: Kiran Patil <kiran.patil@xxxxxxxxx>
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a4c6a3e8bbb675a601f529881c51ff226f83c3f1
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Oct 19 18:17:25 2015 -0300

      perf bench: Use named initializers in the trailer too

      To avoid this splat with gcc 4.4.7:

        cc1: warnings being treated as errors
        bench/mem-functions.c:273: error: missing initializer
        bench/mem-functions.c:273: error: (near initialization for 
â??memcpy_functions[4].descâ??)
        bench/mem-functions.c:366: error: missing initializer
        bench/mem-functions.c:366: error: (near initialization for 
â??memset_functions[4].descâ??)

      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-0s8o6tgw1pdwvdv02llb9tkd@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d2b5a315ae84d235f00761468885c466f81d7805
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:25 2015 +0200

      perf script: Check output fields only for samples

      There's no need to check sampling output fields for events without
      perf_event_attr::sample_type field set.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-51-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1fe7a30028eeccd92e6fccfbeb8c5c3811b11b64
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:15 2015 +0200

      perf cpu_map: Add data arg to cpu_map__build_map callback

      Adding data arg to cpu_map__build_map callback, so we could pass data
      along to the callback. It'll be needed in following patches to retrieve
      topology info from perf.data.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-41-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f1cbb8f35719e36803f226d1bbf08ac12cedcd76
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:14 2015 +0200

      perf cpu_map: Make cpu_map__build_map global

      We'll need to call it from perf stat in the stat_script patchkit

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-40-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 208df99ed07ca5e86ee41617e0384930fc9ca819
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:04 2015 +0200

      perf stat: Add AGGR_UNSET mode

      Adding AGGR_UNSET mode, so we could distinguish unset aggr_mode in
      following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-30-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 581cc8a2a2a00afc864840720186b0f6a38079d9
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:03 2015 +0200

      perf stat: Rename perf_stat struct into perf_stat_evsel

      It's used as the perf_evsel::priv data, so the name suits better. Also
      we'll need the perf_stat name free for more generic struct.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444992092-17897-29-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 56b88a3bf97a39d3f4f010509917b76a865a6dc8
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Sun Aug 9 22:26:33 2015 +0200

      um: Fix kernel mode fault condition

      We have to exclude memory locations <= PAGE_SIZE from
      the condition and let the kernel mode fault path catch it.
      Otherwise a kernel NULL pointer exception will be reported
      as a kernel user space access.

      Fixes: d2313084e2c (um: Catch unprotected user memory access)
      Signed-off-by: Richard Weinberger <richard@xxxxxx>

  commit 6b1873371cea13036171d03a7c1e3e59158b4505
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Sun Aug 9 21:49:07 2015 +0200

      um: Fix waitpid() usage in helper code

      If UML is executing a helper program it is using
      waitpid() with the __WCLONE flag to wait for the program
      as the helper is executed from a clone()'ed thread.
      While using __WCLONE is perfectly fine for clone()'ed
      childs it won't detect terminated childs if the helper
      has issued an execve().

      We have to use __WALL to wait for both clone()'ed and
      regular childs to detect the termination before and
      after an execve().

      Reported-and-tested-by: Thomas Meyer <thomas@xxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>

  commit 37e81a016cc847c03ea71570fea29f12ca390bee
  Author: Hans-Werner Hilse <hwhilse@xxxxxxxxx>
  Date:   Mon Jun 29 11:50:32 2015 +0200

      um: Do not rely on libc to provide modify_ldt()

      modify_ldt() was declared as an external symbol. Despite the man
      page for this syscall telling that there is no wrapper in glibc,
      since version 2.1 there actually is, so linking to the glibc
      works.

      Since modify_ldt() is not a POSIX interface, other libc
      implementations do not always provide a wrapper function.
      Even glibc headers do not provide a corresponding declaration.

      So go the recommended way to call this using syscall().

      Signed-off-by: Hans-Werner Hilse <hwhilse@xxxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>

  commit 0b5aedfe0e6654ec54f35109e1929a1cf7fc4cdd
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Sun Jun 28 22:55:26 2015 +0200

      um: Fix out-of-tree build

      Commit 30b11ee9a (um: Remove copy&paste code from init.h)
      uncovered an issue wrt. out-of-tree builds.
      For out-of-tree builds, we must not rely on relative paths.
      Before 30b11ee9a it worked by chance as no host code included
      generated header files.

      Acked-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>

  commit cb0f2538039c65f2bb64a9d427dbe9dd7d0f71a6
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 16:19:20 2015 +0100

      clocksource/drivers/armada-370-xp: Implement ARM delay timer

      Implement an ARM delay timer to be used for udelay() on Armada 37x
      platforms.  This allows us to skip the delay loop calibration at boot,
      saving 180ms on the boot time of the kernel (which is around 10%).

      It also means that udelay() will be unaffected by CPU frequency changes
      when cpufreq is enabled on these platforms.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Tested-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>

  commit 677c884ff6370add1360e2b9558285355ebe2b36
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 19 15:54:21 2015 -0400

      drm/amdgpu: add missing dpm check for KV dpm late init

      Skip dpm late init if dpm is disabled.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 27100735adbcb872854674bed1d000825f9954ac
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 19 15:49:11 2015 -0400

      drm/amdgpu/dpm: don't add pwm attributes if DPM is disabled

      PWM fan control is only available with DPM.  There is no non-DPM
      support on amdgpu, so we should never get a crash here because
      the sysfs nodes would never be created in the first place. Add the
      check just in case to be on the safe side.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 3a134ae96ca0af06804d343019b85026486e6fe1
  Author: Yunlong Song <yunlong.song@xxxxxxxxxx>
  Date:   Thu Oct 15 15:39:51 2015 +0800

      perf help: Change 'usage' to 'Usage' for consistency

      Capitalize 'usage' to make it consistent with all the other 'Usage' in
      the codes, e.g., usage_builtin.

      Signed-off-by: Yunlong Song <yunlong.song@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Ramkumar Ramachandra <artagnon@xxxxxxxxx>
      Cc: Sriram Raghunathan <sriram.r@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444894792-2338-3-git-send-email-yunlong.song@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2a7d44f47f53fa1be677f44c73d78b1bcf9c05d9
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 19 09:30:42 2015 -0400

      drm/radeon/dpm: don't add pwm attributes if DPM is disabled

      PWM fan control is only available with DPM.  If DPM disabled,
      don't expose the PWM fan controls to avoid a crash.

      Bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=92524

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit aa254af25c40d6d1cdc3f354db29eaf3e85a5ede
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:30 2015 +0200

      perf bench: Run benchmarks, don't test them

      So right now we output this text:

              memcpy: Benchmark for memcpy() functions
              memset: Benchmark for memset() functions
                 all: Test all memory access benchmarks

      But the right verb to use with benchmarks is to 'run' them, not 'test'
      them.

      So change this (and all similar texts) to:

              memcpy: Benchmark for memcpy() functions
              memset: Benchmark for memset() functions
                 all: Run all memory access benchmarks

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-15-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2f211c84ad40469c15226e899b720624fbd28e20
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:29 2015 +0200

      perf bench mem: Rename 'routine' to 'function'

      So right now there's a somewhat inconsistent mess of the benchmarking
      code and options sometimes calling benchmarked functions 'functions',
      sometimes calling them 'routines'.

      Name them 'functions' consistently.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-14-git-send-email-mingo@xxxxxxxxxx
      [ Updated perf-bench man page, pointed out by David Ahern ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b0d22e52e3d2c2b151dfaa0f6e01bafa5475344f
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:28 2015 +0200

      perf bench: Harmonize all the -l/--nr_loops options

      We have three benchmarking subsystems that specify some sort of 'number
      of loops' parameter - but all of them do it inconsistently:

       numa:              -l/--nr_loops
       sched messaging:   -l/--loops
       mem memset/memcpy: -i/--iterations

      Harmonize them to -l/--nr_loops by picking the numa variant - which is
      also the most likely one to have existing scripting which we don't want
      to break.

      Plus improve the parameter help texts to indicate the default value for
      the nr_loops variable to keep users from guessing ...

      Also propagate the naming to internal variables.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-13-git-send-email-mingo@xxxxxxxxxx
      [ Let the harmonisation reach the perf-bench man page as well ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5dd93304a5d386c73c0a59117752acdca67f857d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:27 2015 +0200

      perf bench mem: Reorganize the code a bit

      Reorder functions a bit, so that we synchronize the layout of the
      memcpy() and memset() portions of the code.

      This improves the code, especially after we'll add an strlcpy() variant
      as well.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-12-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 13b1fdce8d46027f346c0533a4323b58e2b5bad8
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:26 2015 +0200

      perf bench mem: Improve user visible strings

       - fix various typos in user visible output strings
       - make the output consistent (wrt. capitalization and spelling)
       - offer the list of routines to benchmark on '-r help'.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-11-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a69b4f741340a52d0976636a45c9976a883f03a0
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:25 2015 +0200

      perf bench mem: Fix 'length' vs. 'size' naming confusion

      So 'perf bench mem memcpy/memset' consistently uses 'len' and 'length'
      for buffer sizes - while it's really a memory buffer size. (strings have
      length.)

      Rename all affected variables.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-10-git-send-email-mingo@xxxxxxxxxx
      [ Update perf-bench man page ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e815e327604af880bdcf38cdd711dfa78627ab2a
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:24 2015 +0200

      perf bench mem: Rename 'routine' to 'routine_str'

      So bench/mem-functions.c has a 'routine' name for the routines parameter
      string, but a 'length_str' name for the length parameter string.

      We also have another entity named 'routine': 'struct routine'.

      This is inconsistent and confusing: rename 'routine' to 'routine_str'.

      Also fix typos in the --routine help text.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-9-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b14f2d357675bd7fb4e5a705ac7320a9638ecab5
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:23 2015 +0200

      perf bench mem: Change 'cycle' to 'cycles'

      So 'perf bench mem memset/memcpy' has a CPU cycles measurement method,
      but calls it 'cycle' (singular) throughout the code, which makes it
      harder to read.

      Rename all related functions, variables and options to a plural 'cycles'
      nomenclature.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-8-git-send-email-mingo@xxxxxxxxxx
      [ s/--cycle/--cycles/g in perf-bench man page ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7a46a8fd13bd60584687f417cd35935965f29ae2
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:22 2015 +0200

      perf bench: List output formatting options on 'perf bench -h'

      So 'perf bench -h' is not very helpful when printing the help line
      about the output formatting options:

          -f, --format <default>
                                    Specify format style

      There are two output format styles, 'default' and 'simple', so improve
      the help text to:

          -f, --format <default|simple>
                                    Specify the output formatting style

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-7-git-send-email-mingo@xxxxxxxxxx
      [ Removed leftovers from the mem-functions.c rename ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 6db175c7333e22ee818373cbea067e3eaa0236f7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:21 2015 +0200

      perf bench: Remove the prefaulting complication from 'perf bench mem mem*'

      So 'perf bench mem memcpy/memset' has elaborate code to measure
      memcpy()/memset() performance both with freshly allocated buffers (which
      includes initial page fault overhead) and with preallocated buffers.

      But the thing is, the resulting bandwidth results are mostly
      meaningless, because page faults dominate so much of the cost.

      It might make sense to measure cache cold vs. cache hot performance, but
      the code does not do this.

      So remove this complication, and always prefault the ranges before using
      them.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-6-git-send-email-mingo@xxxxxxxxxx
      [ Remove --no-prefault, --only-prefault from docs, noticed by David Ahern 
]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9b2fa7f3e7799a335fd839906ab4d45b7d595dc4
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:20 2015 +0200

      perf bench: Rename 'mem-memcpy.c' => 'mem-functions.c'

      So mem-memcpy.c started out as a simple memcpy() benchmark, then it grew
      memset() functionality and now I plan to add string copy benchmarks as
      well.

      This makes the file name a misnomer: rename it to the more generic
      mem-functions.c name.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-5-git-send-email-mingo@xxxxxxxxxx
      [ The "rename" was introducing __unused, wasn't removing the old file,
        and didn't update tools/perf/bench/Build, fix it ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2946f59ac31d703738c00c684613d289e8d001ea
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:19 2015 +0200

      perf bench: Eliminate unused argument from bench_mem_common()

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-4-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9abebb8a10ce93db45327bd3a4d06801e6db92f2
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 17 11:32:19 2015 +0200

      NFC: delete null dereference

      The exit label performs device_unlock(&dev->dev);, which will fail when 
dev
      is NULL, and nfc_put_device(dev);, which is not useful when dev is NULL, 
so
      just exit the function immediately.

      Problem found using scripts/coccinelle/null/deref_null.cocci

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit b43ef78145b10a3fb81a59596d562f21d9bab8d2
  Author: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
  Date:   Tue Oct 13 08:31:04 2015 +0200

      NFC: nfcwilink: Drop a useless static qualifier

      There is no need to have the 'struct nfcwilink *drv' variable static in 
the
      probe function.
      It only wastes a few bytes of memory.

      Signed-off-by: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 276197415685e2a91ce367562800cf0f8fbe482c
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:18 2015 +0200

      perf bench: Default to all routines in 'perf bench mem'

      So few people know that the --routine option to 'perf bench memcpy/memset'
      exists, and would not know that it's capable of testing the kernel's
      memcpy/memset implementations.

      Furthermore, 'perf bench mem all' will not run all routines:

        vega:~> perf bench mem all
        # Running mem/memcpy benchmark...
        Routine default (Default memcpy() provided by glibc)
        # Copying 1MB Bytes ...

             894.454383 MB/Sec
               3.844734 GB/Sec (with prefault)

        # Running mem/memset benchmark...
        Routine default (Default memset() provided by glibc)
        # Copying 1MB Bytes ...

               1.220703 GB/Sec
               9.042245 GB/Sec (with prefault)

      Because misleadingly the 'all' refers to 'all sub-benchmarks', not 'all
      sub-benchmarks and routines'.

      Fix all this by making the memcpy/memset routine to default to 'all',
      which results in all the benchmarks being run:

        triton:~> perf bench mem all
        # Running mem/memcpy benchmark...
        Routine default (Default memcpy() provided by glibc)
        # Copying 1MB Bytes ...

               1.448906 GB/Sec
               4.957170 GB/Sec (with prefault)
        Routine x86-64-unrolled (unrolled memcpy() in arch/x86/lib/memcpy_64.S)
        # Copying 1MB Bytes ...

               1.614153 GB/Sec
               4.379204 GB/Sec (with prefault)
        Routine x86-64-movsq (movsq-based memcpy() in arch/x86/lib/memcpy_64.S)
        # Copying 1MB Bytes ...

               1.570036 GB/Sec
               4.264465 GB/Sec (with prefault)
        Routine x86-64-movsb (movsb-based memcpy() in arch/x86/lib/memcpy_64.S)
        # Copying 1MB Bytes ...

               1.788576 GB/Sec
               6.554111 GB/Sec (with prefault)

        # Running mem/memset benchmark...
        Routine default (Default memset() provided by glibc)
        # Copying 1MB Bytes ...

               2.082223 GB/Sec
               9.126752 GB/Sec (with prefault)
        Routine x86-64-unrolled (unrolled memset() in arch/x86/lib/memset_64.S)
        # Copying 1MB Bytes ...

               5.710892 GB/Sec
               8.346688 GB/Sec (with prefault)
        Routine x86-64-stosq (movsq-based memset() in arch/x86/lib/memset_64.S)
        # Copying 1MB Bytes ...

               9.765625 GB/Sec
              12.520032 GB/Sec (with prefault)
        Routine x86-64-stosb (movsb-based memset() in arch/x86/lib/memset_64.S)
        # Copying 1MB Bytes ...

               9.668936 GB/Sec
              12.682630 GB/Sec (with prefault)

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Hitoshi Mitake <mitake@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-3-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 13839ec495a31844d66d487f740c07771c60a0d0
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:04:17 2015 +0200

      perf bench: Improve the 'perf bench mem memcpy' code readability

       - improve the readability of initializations
       - fix unnecessary double negations
       - fix ugly line breaks
       - fix other small details

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445241870-24854-2-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7cf6d08cafd67a34d0d78cd15baf64e214e050cb
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Oct 11 13:24:13 2015 +0200

      NFC: nxp-nci: constify nxp_nci_phy_ops structure

      The only instance of a nxp_nci_phy_ops structure is never modified.  Thus
      the declaration of the structure and all references to the structure type
      can be made const.

      Done with the help of Coccinelle.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 893a84e8180dcc37a3b0fd19d04dbe6cbc6e33db
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Fri Sep 25 10:59:04 2015 +0200

      NFC: nfcmrvl: Auto-select core module

      As I understand it, the core nfcmrvl module is useless without
      either the USB or the UART access module. So hide NFC_MRVL and select
      it automatically if either NFC_MRVL_USB or NFC_MRVL_UART is selected.

      This avoids presenting NFC_MRVL when neither NFC_MRVL_USB nor
      NFC_MRVL_UART can be selected.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Cc: Lauro Ramos Venancio <lauro.venancio@xxxxxxxxxxxxx>
      Cc: Aloisio Almeida Jr <aloisio.almeida@xxxxxxxxxxxxx>
      Cc: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 04831ae41c034db2e2922c460cc818c4a1f6e7e0
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Fri Sep 25 10:52:26 2015 +0200

      NFC: microread: Auto-select core module

      As I understand it, the core nfc_microread module is useless without
      either the I2C or the MEI access module. So hide NFC_MICROREAD and
      select it automatically if either NFC_MICROREAD_I2C or
      NFC_MICROREAD_MEI is selected.

      This avoids presenting NFC_MICROREAD when neither NFC_MICROREAD_I2C
      nor NFC_MICROREAD_MEI can be selected.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Cc: Lauro Ramos Venancio <lauro.venancio@xxxxxxxxxxxxx>
      Cc: Aloisio Almeida Jr <aloisio.almeida@xxxxxxxxxxxxx>
      Cc: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2690c730935873065175de33f59cce5bb221b9dc
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Tue Oct 20 00:23:49 2015 +0900

      perf test: Suppress libtraceevent warnings

      Currently libtraceevent emits warning on unsupported event formats.
      However it'd be better to see them only -v option is given.  To do that,
      it needs to override the warning() function which is used in the
      libtracevent.  Thus add set_warning_routine() same as set_die_routine()
      and check the verbose flag in our warning routine.

      Before:
        # perf test 5
         5: parse events tests                                       :
          Warning: [kvmmmu:kvm_mmu_get_page] bad op token {
          Warning: [kvmmmu:kvm_mmu_sync_page] bad op token {
          Warning: [kvmmmu:kvm_mmu_unsync_page] bad op token {
          Warning: [kvmmmu:kvm_mmu_prepare_zap_page] bad op token {
          Warning: [kvmmmu:fast_page_fault] function is_writable_pte not defined
          ...
         Ok

      After:
        # perf test 5
         5: parse events tests                                       : Ok

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445268229-1601-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8719138318316656988dbd422461c1addc9a9159
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Tue Oct 20 00:23:48 2015 +0900

      perf test: Silence tracepoint event failures

      Currently, when 'perf test' is run by a normal user, it'll fail to
      access tracepoint events.  The output becomes somewhat messy because it
      tries to be nice with long error messages and hints.

      IMHO this is not needed for 'perf test' by default and AFAIK 'perf test'
      uses pr_debug() rather than pr_err() for such messages so that one can
      use -v option to see further details on failed testcases if needed.

      Before:
        $ perf test
         1: vmlinux symtab matches kallsyms                          : FAILED!
         2: detect openat syscall event                              :Error:
        No permissions to read
        /sys/kernel/debug/tracing/events/syscalls/sys_enter_openat
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug/tracing'
        FAILED!
         3: detect openat syscall event on all cpus                  :Error:
        No permissions to read
        /sys/kernel/debug/tracing/events/syscalls/sys_enter_openat
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug/tracing'
        FAILED!
         ...

      After:
        $ perf test
         1: vmlinux symtab matches kallsyms                          : FAILED!
         2: detect openat syscall event                              : FAILED!
         3: detect openat syscall event on all cpus                  : FAILED!
         ...

        $ perf test -v 2
         2: detect openat syscall event                              :
        --- start ---
        test child forked, pid 30575
        Error:      No permissions to read
        /sys/kernel/debug/tracing/events/syscalls/sys_enter_openat
        Hint:  Try 'sudo mount -o remount,mode=755 /sys/kernel/debug/tracing'

        test child finished with -1
        ---- end ----
        detect openat syscall event: FAILED!

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445268229-1601-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b2117c12ab4d351cb309331ba8605a9d4e03f2f1
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Fri Sep 25 10:49:36 2015 +0200

      NFC: pn544: Auto-select core module

      As I understand it, the core nfc_pn544 module is useless without
      either the I2C or the MEI access module. So hide NFC_PN544 and
      select it automatically if either NFC_PN544_I2C or NFC_PN544_MEI is
      selected.

      This avoids presenting NFC_PN544 when neither NFC_PN544_I2C nor
      NFC_PN544_MEI can be selected.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Cc: Lauro Ramos Venancio <lauro.venancio@xxxxxxxxxxxxx>
      Cc: Aloisio Almeida Jr <aloisio.almeida@xxxxxxxxxxxxx>
      Cc: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 3c39c1a54a26c5495d48df796bc1f3fba78667f2
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:08:42 2015 +0200

      NFC: trf7970a: Add OF match table

      The Documentation/devicetree/bindings/net/nfc/trf7970a.txt DT binding doc
      lists "ti,trf7970a" as a compatible string but the corresponding driver
      does not have an OF match table. Add the table to the driver so the SPI
      core can do an OF style match.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 9f93f3e9461a30f425fdba15784db67ce878ce00
  Author: Jungseok Lee <jungseoklee85@xxxxxxxxx>
  Date:   Sat Oct 17 14:28:11 2015 +0000

      arm64: Synchronise dump_backtrace() with perf callchain

      Unlike perf callchain relying on walk_stackframe(), dump_backtrace()
      has its own backtrace logic. A major difference between them is the
      moment a symbol is recorded. Perf writes down a symbol *before*
      calling unwind_frame(), but dump_backtrace() prints it out *after*
      unwind_frame(). As a result, the last valid symbol cannot be hooked
      in case of dump_backtrace(). This patch addresses the issue as
      synchronising dump_backtrace() with perf callchain.

      A simple test and its results are as follows:

      - crash trigger

       $ sudo echo c > /proc/sysrq-trigger

      - current status

       Call trace:
       [<fffffe00003dc738>] sysrq_handle_crash+0x24/0x30
       [<fffffe00003dd2ac>] __handle_sysrq+0x128/0x19c
       [<fffffe00003dd730>] write_sysrq_trigger+0x60/0x74
       [<fffffe0000249fc4>] proc_reg_write+0x84/0xc0
       [<fffffe00001f2638>] __vfs_write+0x44/0x104
       [<fffffe00001f2e60>] vfs_write+0x98/0x1a8
       [<fffffe00001f3730>] SyS_write+0x50/0xb0

      - with this change

       Call trace:
       [<fffffe00003dc738>] sysrq_handle_crash+0x24/0x30
       [<fffffe00003dd2ac>] __handle_sysrq+0x128/0x19c
       [<fffffe00003dd730>] write_sysrq_trigger+0x60/0x74
       [<fffffe0000249fc4>] proc_reg_write+0x84/0xc0
       [<fffffe00001f2638>] __vfs_write+0x44/0x104
       [<fffffe00001f2e60>] vfs_write+0x98/0x1a8
       [<fffffe00001f3730>] SyS_write+0x50/0xb0
       [<fffffe00000939ec>] el0_svc_naked+0x20/0x28

      Note that this patch does not cover a case where MMU is disabled. The
      last stack frame of swapper, for example, has PC in a form of physical
      address. Unfortunately, a simple conversion using phys_to_virt() cannot
      cover all scenarios since PC is retrieved from LR - 4, not LR. It is
      a big tradeoff to change both head.S and unwind_frame() for only a few
      of symbols in *.S. Thus, this hunk does not take care of the case.

      Cc: AKASHI Takahiro <takahiro.akashi@xxxxxxxxxx>
      Cc: James Morse <james.morse@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Jungseok Lee <jungseoklee85@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 096b3224d5e7239ec3e5033bbc7612ac2d5dec3a
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Wed Sep 16 22:23:21 2015 +0800

      arm64: add cpu_idle tracepoints to arch_cpu_idle

      Currently, if cpuidle is disabled or not supported, powertop reports
      zero wakeups and zero events. This is due to the cpu_idle tracepoints
      are missing.

      This patch is to make cpu_idle tracepoints always available even if
      cpuidle is disabled or not supported.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 1099f86044111e9a7807f09523e42d4c9d0fb781
  Merge: 7379047 37850e3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 09:55:40 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

       1) Account for extra headroom in ath9k driver, from Felix Fietkau.

       2) Fix OOPS in pppoe driver due to incorrect socket state transition,
          from Guillaume Nault.

       3) Kill memory leak in amd-xgbe debugfx, from Geliang Tang.

       4) Power management fixes for iwlwifi, from Johannes Berg.

       5) Fix races in reqsk_queue_unlink(), from Eric Dumazet.

       6) Fix dst_entry usage in ARP replies, from Jiri Benc.

       7) Cure OOPSes with SO_GET_FILTER, from Daniel Borkmann.

       8) Missing allocation failure check in amd-xgbe, from Tom Lendacky.

       9) Various resource allocation/freeing cures in DSA< from Neil
          Armstrong.

      10) A series of bug fixes in the openvswitch conntrack support, from
          Joe Stringer.

      11) Fix two cases (BPF and act_mirred) where we have to clean the sender
          cpu stored in the SKB before transmitting.  From WANG Cong and
          Alexei Starovoitov.

      12) Disable VLAN filtering in promiscuous mode in mlx5 driver, from
          Achiad Shochat.

      13) Older bnx2x chips cannot do 4-tuple UDP hashing, so prevent this
          configuration via ethtool.  From Yuval Mintz.

      14) Don't call rt6_uncached_list_flush_dev() from rt6_ifdown() when
          'dev' is NULL, from Eric Biederman.

      15) Prevent stalled link synchronization in tipc, from Jon Paul Maloy.

      16) kcalloc() gstrings ethtool buffer before having driver fill it in,
          in order to prevent kernel memory leaking.  From Joe Perches.

      17) Fix mixxing rt6_info initialization for blackhole routes, from
          Martin KaFai Lau.

      18) Kill VLAN regression in via-rhine, from Andrej Ota.

      19) Missing pfmemalloc check in sk_add_backlog(), from Eric Dumazet.

      20) Fix spurious MSG_TRUNC signalling in netlink dumps, from Ronen Arad.

      21) Scrube SKBs when pushing them between namespaces in openvswitch,
          from Joe Stringer.

      22) bcmgenet enables link interrupts too early, fix from Florian
          Fainelli.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (92 commits)
        net: bcmgenet: Fix early link interrupt enabling
        tunnels: Don't require remote endpoint or ID during creation.
        openvswitch: Scrub skb between namespaces
        xen-netback: correctly check failed allocation
        net: asix: add support for the Billionton GUSB2AM-1G-B USB adapter
        netlink: Trim skb to alloc size to avoid MSG_TRUNC
        net: add pfmemalloc check in sk_add_backlog()
        via-rhine: fix VLAN receive handling regression.
        ipv6: Initialize rt6_info properly in ip6_blackhole_route()
        ipv6: Move common init code for rt6_info to a new function 
rt6_info_init()
        Bluetooth: Fix initializing conn_params in scan phase
        Bluetooth: Fix conn_params list update in hci_connect_le_scan_cleanup
        Bluetooth: Fix remove_device behavior for explicit connects
        Bluetooth: Fix LE reconnection logic
        Bluetooth: Fix reference counting for LE-scan based connections
        Bluetooth: Fix double scan updates
        mlxsw: core: Fix race condition in __mlxsw_emad_transmit
        tipc: move fragment importance field to new header position
        ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
        tipc: eliminate risk of stalled link synchronization
        ...

  commit 215399392fe40f33880ea9de49a1ed8ee26edd10
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:38 2015 +0100

      arm64: 36 bit VA

      36bit VA lets us use 2 level page tables while limiting the
      available address space to 64GB.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Steve Capper <steve.capper@xxxxxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 44eaacf1b8999b15cec89bd9d9cd989da4798d53
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:37 2015 +0100

      arm64: Add 16K page size support

      This patch turns on the 16K page support in the kernel. We
      support 48bit VA (4 level page tables) and 47bit VA (3 level
      page tables).

      With 16K we can map 128 entries using contiguous bit hint
      at level 3 to map 2M using single TLB entry.

      TODO: 16K supports 32 contiguous entries at level 2 to get us
      1G(which is not yet supported by the infrastructure). That should
      be a separate patch altogether.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Jeremy Linton <jeremy.linton@xxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Cc: Steve Capper <steve.capper@xxxxxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9d372c9fab34cd8803141871195141995f85c7f7
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Mon Oct 19 14:19:36 2015 +0100

      arm64: Add page size to the kernel image header

      This patch adds the page size to the arm64 kernel image header
      so that one can infer the PAGESIZE used by the kernel. This will
      be helpful to diagnose failures to boot the kernel with page size
      not supported by the CPU.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 4bf8b96ed3f7e11422d8b4f58cf43896ed02d1f6
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:35 2015 +0100

      arm64: Check for selected granule support

      Ensure that the selected page size is supported by the CPU(s). If it 
doesn't
      park it.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit db488be354bc85724d7b9523e94435fdaa761a35
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:34 2015 +0100

      arm64: Kconfig: Fix help text about AArch32 support with 64K pages

      Update the help text for ARM64_64K_PAGES to reflect the reality
      about AArch32 support.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit e25781e3dea914cc4c34c946bae5fa3d4516516f
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Oct 19 14:19:33 2015 +0100

      arm64: Simplify NR_FIX_BTMAPS calculation

      We choose NR_FIX_BTMAPS such that each slot (NR_FIX_BTMAPS * PAGE_SIZE)
      can address 256K.

      Use division to derive NR_FIX_BTMAPS rather than defining it for each
      page size.

      Signed-off-by:  Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by:  Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 755e70b7e3f189aa2503c510fb98208e477a5030
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:32 2015 +0100

      arm64: Clean config usages for page size

      We use !CONFIG_ARM64_64K_PAGES for CONFIG_ARM64_4K_PAGES
      (and vice versa) in code. It all worked well, so far since
      we only had two options. Now, with the introduction of 16K,
      these cases will break. This patch cleans up the code to
      use the required CONFIG symbol expression without the assumption
      that !64K => 4K (and vice versa)

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 6a3fd4026c0c0ac279265c2a5d228233b5bbd28f
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:31 2015 +0100

      arm64: Handle 4 level page table for swapper

      At the moment, we only support maximum of 3-level page table for
      swapper. With 48bit VA, 64K has only 3 levels and 4K uses section
      mapping. Add support for 4-level page table for swapper, needed
      by 16K pages.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c265af51c5f17ec5c0cf0d960133bd6fe5f39eb9
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:30 2015 +0100

      arm64: Calculate size for idmap_pg_dir at compile time

      Now that we can calculate the number of levels required for
      mapping a va width, reserve exact number of pages that would
      be required to cover the idmap. The idmap should be able to handle
      the maximum physical address size supported.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 686e783869d37935510b4d2c266948677be82665
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:29 2015 +0100

      arm64: Introduce helpers for page table levels

      Introduce helpers for finding the number of page table
      levels required for a given VA width, shift for a particular
      page table level.

      Convert the existing users to the new helpers. More users
      to follow.

      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Acked-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit b433dce056d3814dc4b33e5a8a533d6401ffcfb0
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:28 2015 +0100

      arm64: Handle section maps for swapper/idmap

      We use section maps with 4K page size to create the swapper/idmaps.
      So far we have used !64K or 4K checks to handle the case where we
      use the section maps.
      This patch adds a new symbol, ARM64_SWAPPER_USES_SECTION_MAPS, to
      handle cases where we use section maps, instead of using the page size
      symbols.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 87d1587bef394cd8a77dbca8cc92885fe7041b8f
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:19:27 2015 +0100

      arm64: Move swapper pagetable definitions

      Move the kernel pagetable (both swapper and idmap) definitions
      from the generic asm/page.h to a new file, asm/kernel-pgtable.h.

      This is mostly a cosmetic change, to clean up the asm/page.h to
      get rid of the arch specific details which are not needed by the
      generic code.

      Also renames the symbols to prevent conflicts. e.g,
        BLOCK_SHIFT => SWAPPER_BLOCK_SHIFT

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9254970cbbf542a0085e491810f0144a27885702
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Mon Oct 19 13:38:09 2015 +0100

      ARM: 8447/1: catch pending imprecise abort on unmask

      Install a non-faulting handler just before unmasking imprecise aborts
      and switch back to the regular one after unmasking is done.

      This catches any pending imprecise abort that the firmware/bootloader
      may have left behind that would normally crash the kernel at that point.
      As there are apparently a lot of bootlaoders out there that do such a
      thing it makes sense to handle it in the common startup code.

      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Tested-by: Tyler Baker <tyler.baker@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit c8d46ece44458a2088896d6fcae123a72bdfd429
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Mon Oct 19 09:17:40 2015 +0100

      ARM: 8446/1: amba: Remove unused callbacks for legacy system PM

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 8a603f91cc4848ab1a0458bc065aa9f64322e123
  Author: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 22:19:06 2015 +0100

      ARM: 8445/1: fix vdsomunge not to depend on glibc specific byteswap.h

      If the host toolchain is not glibc based then the arm kernel build
      fails with

        HOSTCC  arch/arm/vdso/vdsomunge
        arch/arm/vdso/vdsomunge.c:48:22: fatal error: byteswap.h: No such file 
or directory

      Observed: with omap2plus_defconfig and compile on Mac OS X with arm ELF
      cross-compiler.

      Reason: byteswap.h is a glibc only header.

      Solution: replace by private byte-swapping macros (taken from
      arch/mips/boot/elf2ecoff.c and kindly improved by Russell King)

      Tested to compile on Mac OS X 10.9.5 host.

      Signed-off-by: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
      Signed-off-by: Nathan Lynch <nathan_lynch@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 57df5380853460bc66b59a46273ce113c923d39c
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Fri Oct 16 12:23:33 2015 -0700

      ARM: OMAP2+: Fix imprecise external abort caused by bogus SRAM init

      Some omaps are producing imprecise external aborts because we are
      wrongly trying to init SRAM for device tree based booting. Only
      omap3 is still using the legacy SRAM code, so we need to make it
      omap3 specific. Otherwise we can get errors like this on at least
      dm814x:

      Unhandled fault: imprecise external abort (0xc06) at 0xc08b156c
      ...
      (omap_rev) from [<c08b12e0>] (omap_sram_init+0xf8/0x3e0)
      (omap_sram_init) from [<c08aca0c>] (omap_sdrc_init+0x10/0xb0)
      (omap_sdrc_init) from [<c08b581c>] (pdata_quirks_init+0x18/0x44)
      (pdata_quirks_init) from [<c08b5478>] (omap_generic_init+0x10/0x1c)
      (omap_generic_init) from [<c08a57e0>] (customize_machine+0x1c/0x40)
      (customize_machine) from [<c00098a4>] (do_one_initcall+0x80/0x1dc)
      (do_one_initcall) from [<c08a2ec4>] (kernel_init_freeable+0x218/0x2e8)
      (kernel_init_freeable) from [<c063a554>] (kernel_init+0x8/0xec)
      (kernel_init) from [<c000f890>] (ret_from_fork+0x14/0x24)

      Let's fix the issue by making sure omap_sdrc_init only gets called for
      omap3. To do that, we need to have compatible "ti,omap3" in the dts
      files. And let's also use "ti,omap3630" instead of "ti,omap36xx" like
      we're supposed to.

      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit bc6f9ae6043a219b5afadf0391ce77db401a966f
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:54:52 2015 +0300

      ath10k: make fw stats prints specific to firmware version

      The patch makes debug stats prints fw specific by adding a new member
      in wmi_ops. That way it's easier to add fw_stats support to 10.4 firmware.

      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Tamizh Chelvam <c_traja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 1aaf8efba0aeb25eb5858b19472badaa54a41a38
  Author: Anilkumar Kolli <akolli@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:54:51 2015 +0300

      ath10k: disable PCI PS for QCA988X and QCA99X0

      This patch disables PCI PS for QCA988X and QCA99X0, Since PCI PS is
      validated for QCA6174, let it be enabled only for QCA6174. It would be
      better to execute PCI PS related functions only for the supported devices.

      PCI time out issue is observed with QCA99X0 on x86 platform, We will
      disable PCI PS for QCA988X and QCA99X0 until PCI PS is properly 
implemented.

      Taking and releasing ps_lock is causing higher CPU consumption. Michal 
Kazior
      suggested ps_lock overhead to be reworked so that ath10k_pci_wake/sleep
      functions are called less often, i.e. move the powersave logic up (only 
during
      irq handling, tx path, submitting fw commands) but that's a bigger change 
and
      can be implemented later.

      Signed-off-by: Anilkumar Kolli <akolli@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 911b79cde95c7da0ec02f48105358a36636b7a71
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Mon Oct 19 11:20:28 2015 +0100

      KEYS: Don't permit request_key() to construct a new keyring

      If request_key() is used to find a keyring, only do the search part - 
don't
      do the construction part if the keyring was not found by the search.  We
      don't really want keyrings in the negative instantiated state since the
      rejected/negative instantiation error value in the payload is unioned with
      keyring metadata.

      Now the kernel gives an error:

        request_key("keyring", "#selinux,bdekeyring", "keyring", 
KEY_SPEC_USER_SESSION_KEYRING) = -1 EPERM (Operation not permitted)

      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>

  commit ca064bd89363a6e7e71b1c5226ff1b718957a9d4
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Mon Oct 19 10:30:05 2015 +0200

      xfrm: Fix pmtu discovery for local generated packets.

      Commit 044a832a777 ("xfrm: Fix local error reporting crash
      with interfamily tunnels") moved the setting of skb->protocol
      behind the last access of the inner mode family to fix an
      interfamily crash. Unfortunately now skb->protocol might not
      be set at all, so we fail dispatch to the inner address family.
      As a reault, the local error handler is not called and the
      mtu value is not reported back to userspace.

      We fix this by setting skb->protocol on message size errors
      before we call xfrm_local_error.

      Fixes: 044a832a7779c ("xfrm: Fix local error reporting crash with 
interfamily tunnels")
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit 558a65bc31a0c7811b34dad32f51f47c55a40000
  Author: Chuck Ebbert <cebbert.lkml@xxxxxxxxx>
  Date:   Wed Oct 14 14:31:19 2015 -0400

      sched/x86: Fix typo in __switch_to() comments

      Fix obvious mistake: FS/GS should be DS/ES.

      Signed-off-by: Chuck Ebbert <cebbert.lkml@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151014143119.78858eeb@r5
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c13dc31adb04c3f85d54d2fa13e34206f25742eb
  Merge: 7379047 39cd2dd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 19 10:09:54 2015 +0200

      Merge branch 'for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu into core/rcu

      Pull RCU updates from Paul E. McKenney:

        - Miscellaneous fixes. (Paul E. McKenney, Boqun Feng, Oleg Nesterov, 
Patrick Marlier)

        - Improvements to expedited grace periods. (Paul E. McKenney)

        - Performance improvements to and locktorture tests for percpu-rwsem.
          (Oleg Nesterov, Paul E. McKenney)

        - Torture-test changes. (Paul E. McKenney, Davidlohr Bueso)

        - Documentation updates. (Paul E. McKenney)

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a75ca545e8d57473da47ece828ad98a10727ec6f
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 14:28:53 2015 +0300

      x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels

      Declaration of memcpy() is hidden under #ifndef CONFIG_KMEMCHECK.
      In asm/efi.h under #ifdef CONFIG_KASAN we #undef memcpy(), due to
      which the following happens:

        In file included from arch/x86/kernel/setup.c:96:0:
        ./arch/x86/include/asm/desc.h: In function â??native_write_idt_entryâ??:
        ./arch/x86/include/asm/desc.h:122:2: error: implicit declaration of 
function â??memcpyâ?? [-Werror=implicit-function-declaration]   
memcpy(&idt[entry], gate, sizeof(*gate));
          ^
          cc1: some warnings being treated as errors
          make[2]: *** [arch/x86/kernel/setup.o] Error 1

      We will get rid of that #undef in asm/efi.h eventually.
      But in the meanwhile move memcpy() declaration out of #ifdefs
      to fix the build.

      Reported-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444994933-28328-1-git-send-email-aryabinin@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fcafddec4e78a7776db4b6685db6b2902d4300fc
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Fri Oct 16 00:14:29 2015 -0400

      x86/smpboot: Fix CPU #1 boot timeout

      The following commit:

        a9bcaa02a5104ac ("x86/smpboot: Remove SIPI delays from cpu_up()")

      Caused some Intel Core2 processors to time-out when bringing up CPU #1,
      resulting in the missing of that CPU after bootup.

      That patch reduced the SIPI delays from udelay() 300, 200 to udelay() 0,
      0 on modern processors.

      Several Intel(R) Core(TM)2 systems failed to bring up CPU #1 10/10 times
      after that change.

      Increasing either of the SIPI delays to udelay(1) results in
      success. So here we increase both to udelay(10).  While this may
      be 20x slower than the absolute minimum, it is still 20x to 30x
      faster than the original code.

      Tested-by: Donald Parsons <dparsons@xxxxxxxxxxxxx>
      Tested-by: Shane <shrybman@xxxxxxxxxxxx>
      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dparsons@xxxxxxxxxxxxx
      Cc: shrybman@xxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/6dd554ee8945984d85aafb2ad35793174d068af0.1444968087.git.len.brown@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f1ccd249319efca4ee4faf1d904f5a362cac7c81
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Fri Oct 16 00:14:28 2015 -0400

      x86/smpboot: Fix cpu_init_udelay=10000 corner case boot parameter 
misbehavior

      For legacy machines cpu_init_udelay defaults to 10,000.
      For modern machines it is set to 0.

      The user should be able to set cpu_init_udelay to
      any value on the cmdline, including 10,000.

      Before this patch, that was seen as "unchanged from default"
      and thus on a modern machine, the user request was ignored
      and the delay was set to 0.

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dparsons@xxxxxxxxxxxxx
      Cc: shrybman@xxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/de363cdbbcfcca1d22569683f7eb9873e0177251.1444968087.git.len.brown@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 85001089a764d6d12b47f33a8c9b49cf06cfe045
  Author: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
  Date:   Wed Oct 14 13:51:54 2015 +0100

      gpio/xilinx: enable for MIPS

      MIPSfpga uses the axi gpio controller. Enable the driver for MIPS.

      Signed-off-by: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 37850e37fcfb4dd831bc9e33221e8c49a732956f
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Sat Oct 17 14:22:46 2015 -0700

      net: bcmgenet: Fix early link interrupt enabling

      Link interrupts are enabled in init_umac(), which is too early for us to
      process them since we do not yet have a valid PHY device pointer. On
      BCM7425 chips for instance, we will crash calling phy_mac_interrupt()
      because phydev is NULL.

      Fix this by moving the link interrupts enabling in
      bcmgenet_netif_start(), under a specific function:
      bcmgenet_link_intr_enable() and while at it, update the comments
      surrounding the code.

      Fixes: 6cc8e6d4dcb36 ("net: bcmgenet: Delay PHY initialization to 
bcmgenet_open()")
      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit afc050dd8e3387f71def1d6114ecd589f16874df
  Merge: e277de5 de28a05
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 23:05:56 2015 -0700

      Merge tag 'wireless-drivers-for-davem-2015-10-17' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers

      Kalle Valo says:

      ====================
      iwlwifi:

      * mvm: flush fw_dump_wk when mvm fails to start
      * mvm: init card correctly on ctkill exit check
      * pci: add a few more PCI subvendor IDs for the 7265 series
      * fix firmware filename for 3160
      * mvm: clear csa countdown when AP is stopped
      * mvm: fix D3 firmware PN programming
      * dvm: fix D3 firmware PN programming
      * mvm: fix D3 CCMP TX PN assignment

      rtlwifi:

      * rtl8821ae: Fix system lockups on boot
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 371f1c7e0d854796adc622cc3bacfcc5fc638db1
  Merge: 7b4b000 f0a0a97
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 22:48:34 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

      Pablo Neira Ayuso says:

      ====================
      Netfilter/IPVS updates for net-next

      The following patchset contains Netfilter/IPVS updates for your net-next
      tree. Most relevantly, updates for the nfnetlink_log to integrate with
      conntrack, fixes for cttimeout and improvements for nf_queue core, they 
are:

      1) Remove useless ifdef around static inline function in IPVS, from
         Eric W. Biederman.

      2) Simplify the conntrack support for nfnetlink_queue: Merge
         nfnetlink_queue_ct.c file into nfnetlink_queue_core.c, then rename it 
back
         to nfnetlink_queue.c

      3) Use y2038 safe timestamp from nfnetlink_queue.

      4) Get rid of dead function definition in nf_conntrack, from Flavio
         Leitner.

      5) Attach conntrack support for nfnetlink_log.c, from Ken-ichirou 
MATSUZAWA.
         This adds a new NETFILTER_NETLINK_GLUE_CT Kconfig switch that
         controls enabling both nfqueue and nflog integration with conntrack.
         The userspace application can request this via NFULNL_CFG_F_CONNTRACK
         configuration flag.

      6) Remove unused netns variables in IPVS, from Eric W. Biederman and
         Simon Horman.

      7) Don't put back the refcount on the cttimeout object from xt_CT on 
success.

      8) Fix crash on cttimeout policy object removal. We have to flush out
         the cttimeout extension area of the conntrack not to refer to an 
unexisting
         object that was just removed.

      9) Make sure rcu_callback completion before removing nfnetlink_cttimeout
         module removal.

      10) Fix compilation warning in br_netfilter when no nf_defrag_ipv4 and
          nf_defrag_ipv6 are enabled. Patch from Arnd Bergmann.

      11) Autoload ctnetlink dependencies when NFULNL_CFG_F_CONNTRACK is
          requested. Again from Ken-ichirou MATSUZAWA.

      12) Don't use pointer to previous hook when reinjecting traffic via
          nf_queue with NF_REPEAT verdict since it may be already gone. This
          also avoids a deadloop if the userspace application keeps returning
          NF_REPEAT.

      13) A bunch of cleanups for netfilter IPv4 and IPv6 code from Ian Morris.

      14) Consolidate logger instance existence check in nfulnl_recv_config().

      15) Fix broken atomicity when applying configuration updates to logger
          instances in nfnetlink_log.

      16) Get rid of the .owner attribute in our hook object. We don't need
          this anymore since we're dropping pending packets that have escaped
          from the kernel when unremoving the hook. Patch from Florian Westphal.

      17) Remove unnecessary rcu_read_lock() from nf_reinject code, we always
          assume RCU read side lock from .call_rcu in nfnetlink. Also from 
Florian.

      18) Use static inline function instead of macros to define NF_HOOK() and
          NF_HOOK_COND() when no netfilter support in on, from Arnd Bergmann.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b4b000951f09cfe3604a6fdf5469894b4e75adb
  Author: santosh.shilimkar@xxxxxxxxxx <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Oct 16 22:13:21 2015 -0400

      RDS: fix rds-ping deadlock over TCP transport

      Sowmini found hang with rds-ping while testing RDS over TCP. Its
      a corner case and doesn't happen always. The issue is not reproducible
      with IB transport. Its clear from below dump why we see it with RDS TCP.

       [<ffffffff8153b7e5>] do_tcp_setsockopt+0xb5/0x740
       [<ffffffff8153bec4>] tcp_setsockopt+0x24/0x30
       [<ffffffff814d57d4>] sock_common_setsockopt+0x14/0x20
       [<ffffffffa096071d>] rds_tcp_xmit_prepare+0x5d/0x70 [rds_tcp]
       [<ffffffffa093b5f7>] rds_send_xmit+0xd7/0x740 [rds]
       [<ffffffffa093bda2>] rds_send_pong+0x142/0x180 [rds]
       [<ffffffffa0939d34>] rds_recv_incoming+0x274/0x330 [rds]
       [<ffffffff810815ae>] ? ttwu_queue+0x11e/0x130
       [<ffffffff814dcacd>] ? skb_copy_bits+0x6d/0x2c0
       [<ffffffffa0960350>] rds_tcp_data_recv+0x2f0/0x3d0 [rds_tcp]
       [<ffffffff8153d836>] tcp_read_sock+0x96/0x1c0
       [<ffffffffa0960060>] ? rds_tcp_recv_init+0x40/0x40 [rds_tcp]
       [<ffffffff814d6a90>] ? sock_def_write_space+0xa0/0xa0
       [<ffffffffa09604d1>] rds_tcp_data_ready+0xa1/0xf0 [rds_tcp]
       [<ffffffff81545249>] tcp_data_queue+0x379/0x5b0
       [<ffffffffa0960cdb>] ? rds_tcp_write_space+0xbb/0x110 [rds_tcp]
       [<ffffffff81547fd2>] tcp_rcv_established+0x2e2/0x6e0
       [<ffffffff81552602>] tcp_v4_do_rcv+0x122/0x220
       [<ffffffff81553627>] tcp_v4_rcv+0x867/0x880
       [<ffffffff8152e0b3>] ip_local_deliver_finish+0xa3/0x220

      This happens because rds_send_xmit() chain wants to take
      sock_lock which is already taken by tcp_v4_rcv() on its
      way to rds_tcp_data_ready(). Commit db6526dcb51b ("RDS: use
      rds_send_xmit() state instead of RDS_LL_SEND_FULL") which
      was trying to opportunistically finish the send request
      in same thread context.

      But because of above recursive lock hang with RDS TCP,
      the send work from rds_send_pong() needs to deferred to
      worker to avoid lock up. Given RDS ping is more of connectivity
      test than performance critical path, its should be ok even
      for transport like IB.

      Reported-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by:  Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Acked-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e277de5f3f7d6eed2a41920983c44c4df386b871
  Author: Jesse Gross <jesse@xxxxxxxxxx>
  Date:   Fri Oct 16 16:36:00 2015 -0700

      tunnels: Don't require remote endpoint or ID during creation.

      Before lightweight tunnels existed, it really didn't make sense to
      create a tunnel that was not fully specified, such as without a
      destination IP address - the resulting packets would go nowhere.
      However, with lightweight tunnels, the opposite is true - it doesn't
      make sense to require this information when it will be provided later
      on by the route. This loosens the requirements for this information.

      An alternative would be to allow the relaxed version only when
      COLLECT_METADATA is enabled. However, since there are several
      variations on this theme (such as NBMA tunnels in GRE), just dropping
      the restrictions seems the most consistent across tunnels and with
      the existing configuration.

      CC: John Linville <linville@xxxxxxxxxxxxx>
      Signed-off-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b3958b9e18140457b5600b03619e4c2e530761fe
  Author: stephen hemminger <stephen@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 16:12:34 2015 -0700

      uapi: add mpls_iptunnel.h

      Add missing rule to export mpls iptunnel header needed by iproute2

      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Acked-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dc6ef6be52154490c5c03f742e28bc781cc751b2
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 16 13:00:01 2015 -0700

      tcp: do not set queue_mapping on SYNACK

      At the time of commit fff326990789 ("tcp: reflect SYN queue_mapping into
      SYNACK packets") we had little ways to cope with SYN floods.

      We no longer need to reflect incoming skb queue mappings, and instead
      can pick a TX queue based on cpu cooking the SYNACK, with normal XPS
      affinities.

      Note that all SYNACK retransmits were picking TX queue 0, this no longer
      is a win given that SYNACK rtx are now distributed on all cpus.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 740dbc289155fdeed32438396370e70b684cd45e
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Fri Oct 16 11:08:18 2015 -0700

      openvswitch: Scrub skb between namespaces

      If OVS receives a packet from another namespace, then the packet should
      be scrubbed. However, people have already begun to rely on the behaviour
      that skb->mark is preserved across namespaces, so retain this one field.

      This is mainly to address information leakage between namespaces when
      using OVS internal ports, but by placing it in ovs_vport_receive() it is
      more generally applicable, meaning it should not be overlooked if other
      port types are allowed to be moved into namespaces in future.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a5d6f7dd300e7a3237410cc9d6d00427c18281c3
  Merge: 833b8f1 5157b8a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 22:23:33 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth

      Johan Hedberg says:

      ====================
      pull request: bluetooth 2015-10-16

      First of all, sorry for the late set of patches for the 4.3 cycle. We
      just finished an intensive week of testing at the Bluetooth UnPlugFest
      and discovered (and fixed) issues there. Unfortunately a few issues
      affect 4.3-rc5 in a way that they break existing Bluetooth LE mouse and
      keyboard support.

      The regressions result from supporting LE privacy in conjunction with
      scanning for Resolvable Private Addresses before connecting. A feature
      that has been tested heavily (including automated unit tests), but sadly
      some regressions slipped in. The UnPlugFest with its multitude of test
      platforms is a good battle testing ground for uncovering every corner
      case.

      The patches in this pull request focus only on fixing the regressions in
      4.3-rc5. The patches look a bit larger since we also added comments in
      the critical sections of the fixes to improve clarity.

      I would appreciate if we can get these regression fixes to Linus
      quickly. Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 951b5d959f1da4bae8910085a2d8d6a3d374c72d
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 16 12:00:51 2015 +0200

      net: hix5hd2_gmac: avoid integer overload warning

      BITS_RX_EN is an 'unsigned long' constant, so the ones complement of that
      has bits set that do not fit into a 32-bit variable on 64-bit 
architectures,
      which causes a harmless gcc warning:

      drivers/net/ethernet/hisilicon/hix5hd2_gmac.c: In function 
'hix5hd2_port_disable':
      drivers/net/ethernet/hisilicon/hix5hd2_gmac.c:374:2: warning: large 
integer implicitly truncated to unsigned type [-Woverflow]
        writel_relaxed(~(BITS_RX_EN | BITS_TX_EN), priv->base + PORT_EN);

      This adds a cast to (u32) to tell gcc that the code is indeed fine.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 876133d3161dcb743983d1f9e5bf247aea2fb0f1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 16 11:33:49 2015 +0200

      net: hisilicon: add OF dependency

      The HNS MDIO driver fails to build on older ARM machines that are not
      yet converted to CONFIG_OF:

      drivers/net/ethernet/hisilicon/hns_mdio.c: In function 
'hns_mdio_bus_name':
      drivers/net/ethernet/hisilicon/hns_mdio.c:405:14: error: 'OF_BAD_ADDR' 
undeclared (first use in this function)
        u64 taddr = OF_BAD_ADDR;
                    ^
      drivers/net/ethernet/hisilicon/hns_mdio.c:405:14: note: each undeclared 
identifier is reported only once for each function it appears in
      drivers/net/ethernet/hisilicon/hns_mdio.c:409:11: error: implicit 
declaration of function 'of_translate_address' 
[-Werror=implicit-function-declaration]
         taddr = of_translate_address(np, addr);
                 ^

      This clarifies the dependency to ensure we don't attempt to build these
      drivers without CONFIG_OF, but also adds a COMPILE_TEST alternative to
      give us better build coverage testing.

      Build-tested on x86 as well to ensure this actually works.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 119c7ad8084affb64b242b7c6d9d9f84b91163cb
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 16 11:30:56 2015 +0200

      net: hisilicon: include linux/vmalloc.h in dsaf

      Some configurations fail to build the hns dsaf code because of
      a missing header file:

      ethernet/hisilicon/hns/hns_dsaf_main.c: In function 'hns_dsaf_init':
      ethernet/hisilicon/hns/hns_dsaf_main.c:1096:2: error: implicit 
declaration of function 'vzalloc' [-Werror=implicit-function-declaration]
        priv->soft_mac_tbl = vzalloc(sizeof(*priv->soft_mac_tbl)

      This adds the correct #include.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a679dbbbc6a363339aad75589706ee73762b75d9
  Merge: 4639a3b 90a505b
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 19:57:12 2015 -0700

      Merge branch 'hns-fixes'

      yankejian says:

      ====================
      net: hns: fixes two bugs in hns driver

        This patchset fixes two bugs in hns driver.
        - fixes timeout when received pause frame from the connective ports
        - should be set by using ethtool -s when the devices are link down
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 90a505b9f607bf09525bb8eb766b73a658675b38
  Author: lisheng <lisheng011@xxxxxxxxxx>
  Date:   Fri Oct 16 17:03:20 2015 +0800

      net: hns: fixes a bug about timeout by pause frame

      this patch fixes the bug triggered timeout sequence. when the connective
      ports cannot accept the packets with higher speed, they will send out the
      pause frame to the Soc's mac. At that time, the driver resets the relevant
      of the Soc, then it causes the packets cannot be sent out immediately.
      this patch fixes the issue.

      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: lisheng <lisheng011@xxxxxxxxxx>
      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 20ddb1d3d0015ff77f83561a0ede7aaebf7417bf
  Author: Chenny Xu <chenny.xu@xxxxxxxxxx>
  Date:   Fri Oct 16 17:03:19 2015 +0800

      net: hns: fixes the issue by using ethtool -s

        before this patch, hns driver only permits user to set the net device
      by using ethtool -s when the device is link up. it is obviously not so
      good. it needs to be set no matter it is link up or down. so this patch
      fixes this issue.

      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: lisheng <lisheng011@xxxxxxxxxx>
      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: Chenny Xu <chenny.xu@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4639a3b522f1acec462896f1770523f380fe0157
  Merge: b89eb1f abc2b10
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 19:54:45 2015 -0700

      Merge branch 'hsi-fixes'

      huangdaode says:

      ====================
      net: hisilicon fix some bugs in HNS drivers

      This patchset fixes the two bugs in HNS driver, one is remove the hnae 
sysfs interface
      according to the review comments from Arnd Bergmann <arnd@xxxxxxxx>, 
another
      is fixing the wrong mac_id judgement bug which is found during internal 
tests.

      change log:
      v3:
       remove the hnae sysfs interface.

      v2:
        1) remove first bug fix, which is fixed in another patch submitted by
           Arnd Bergmann <arnd@xxxxxxxx>
        2) change the code sytyle according to Joe.

      v1:
       initial version.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit abc2b10eadc6587192adde6ab4050d27dda5ee8f
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:54:17 2015 +0800

      net: hisilicon fix a bug on Hisilicon Network Subsystem

      This patch fixes the wrong judgement of mac_id when get port num.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 31bbd77189a82ed0b7f167d3b8b6561898fa8a80
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:54:16 2015 +0800

      net: hisilicon rm hnae sysfs interface

      This patch removes the hns driver hnae sysfs interface according to
      Arnd's review comments.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 833b8f18adfcca04070a8a42d545a4553379d36f
  Author: Insu Yun <wuninsu@xxxxxxxxx>
  Date:   Thu Oct 15 18:02:28 2015 +0000

      xen-netback: correctly check failed allocation

      Since vzalloc can be failed in memory pressure,
      writes -ENOMEM to xenstore to indicate error.

      Signed-off-by: Insu Yun <wuninsu@xxxxxxxxx>
      Acked-by: Wei Liu <wei.liu2@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 80083a3c02ef4451edeef31a6f9afe130078f2bf
  Author: Chia-Sheng Chang <changchias@xxxxxxxxx>
  Date:   Fri Oct 16 02:00:21 2015 +0800

      net: asix: add support for the Billionton GUSB2AM-1G-B USB adapter

      Just another AX88178-based 10/100/1000 USB-to-Ethernet dongle. This one
      shows up in lsusb as: "ID 08dd:0114 Billionton Systems, Inc".

      Signed-off-by: Chia-Sheng Chang <changchias@xxxxxxxxx>
      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Luca Ceresoli <luca@xxxxxxxxxxxxxxxx>
      Cc: Christoph Jaeger <cj@xxxxxxxxx>
      Cc: "Woojung.Huh@xxxxxxxxxxxxx" <Woojung.Huh@xxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Cc: linux-usb@xxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b89eb1fcf2d4c068f088c39100f5e3067d8cccc9
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Thu Oct 15 10:37:13 2015 -0700

      net: phy: bcm-phy-lib: Fix module license issue

      The 'bcm-phy-lib.c', added as a part of the commit
      "net: phy: Add Broadcom phy library for common interfaces"
      was missing the module license. This was causing an issue
      when the library is built as a module; "module license
      'unspecified' taints kernel".

      This patch fixes the issue by adding the module license,
      author and description to the bcm-phy-lib.c file.

      Fixes: a1cba5613edf5 ("net: phy: Add Broadcom phy library for
      common interfaces")
      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit db65a3aaf29ecce2e34271d52e8d2336b97bd9fe
  Author: Arad, Ronen <ronen.arad@xxxxxxxxx>
  Date:   Thu Oct 15 01:55:17 2015 -0700

      netlink: Trim skb to alloc size to avoid MSG_TRUNC

      netlink_dump() allocates skb based on the calculated min_dump_alloc or
      a per socket max_recvmsg_len.
      min_alloc_size is maximum space required for any single netdev
      attributes as calculated by rtnl_calcit().
      max_recvmsg_len tracks the user provided buffer to netlink_recvmsg.
      It is capped at 16KiB.
      The intention is to avoid small allocations and to minimize the number
      of calls required to obtain dump information for all net devices.

      netlink_dump packs as many small messages as could fit within an skb
      that was sized for the largest single netdev information. The actual
      space available within an skb is larger than what is requested. It could
      be much larger and up to near 2x with align to next power of 2 approach.

      Allowing netlink_dump to use all the space available within the
      allocated skb increases the buffer size a user has to provide to avoid
      truncaion (i.e. MSG_TRUNG flag set).

      It was observed that with many VLANs configured on at least one netdev,
      a larger buffer of near 64KiB was necessary to avoid "Message truncated"
      error in "ip link" or "bridge [-c[ompressvlans]] vlan show" when
      min_alloc_size was only little over 32KiB.

      This patch trims skb to allocated size in order to allow the user to
      avoid truncation with more reasonable buffer size.

      Signed-off-by: Ronen Arad <ronen.arad@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 26fb342c734061859fec1bd9e987bb6b78061ef0
  Author: Li RongQing <roy.qing.li@xxxxxxxxx>
  Date:   Thu Oct 15 16:54:36 2015 +0800

      ipconfig: send Client-identifier in DHCP requests

      A dhcp server may provide parameters to a client from a pool of IP
      addresses and using a shared rootfs, or provide a specific set of
      parameters for a specific client, usually using the MAC address to
      identify each client individually. The dhcp protocol also specifies
      a client-id field which can be used to determine the correct
      parameters to supply when no MAC address is available. There is
      currently no way to tell the kernel to supply a specific client-id,
      only the userspace dhcp clients support this feature, but this can
      not be used when the network is needed before userspace is available
      such as when the root filesystem is on NFS.

      This patch is to be able to do something like "ip=dhcp,client_id_type,
      client_id_value", as a kernel parameter to enable the kernel to
      identify itself to the server.

      Signed-off-by: Li RongQing <roy.qing.li@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c8a1978e07c412f8d79b8612f45aaafe7238ca62
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:25:53 2015 -0700

      Input: sur40 - add dependency on VIDEO_V4L2

      Fix build errors due to missing Kconfig dependency.

      drivers/built-in.o: In function `sur40_disconnect':
      sur40.c:(.text+0x22be6e): undefined reference to `video_unregister_device'
      sur40.c:(.text+0x22be77): undefined reference to `v4l2_device_unregister'
      drivers/built-in.o: In function `sur40_process_video':
      sur40.c:(.text+0x22c1d4): undefined reference to `v4l2_get_timestamp'
      drivers/built-in.o: In function `sur40_probe':
      sur40.c:(.text+0x22ca82): undefined reference to `v4l2_device_register'
      sur40.c:(.text+0x22cb1a): undefined reference to `v4l2_device_unregister'
      sur40.c:(.text+0x22cbf7): undefined reference to 
`video_device_release_empty'
      sur40.c:(.text+0x22cc53): undefined reference to `__video_register_device'
      sur40.c:(.text+0x22cc90): undefined reference to `video_unregister_device'
      drivers/built-in.o: In function `sur40_vidioc_querycap':
      sur40.c:(.text+0x22ccb0): undefined reference to `video_devdata'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 7379047d5585187d1288486d4627873170d0005a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:08:42 2015 -0700

      Linux 4.3-rc6

  commit c44b325568ae58bcb10d2f5c198ec471d9ab1bce
  Merge: 81429a6 56d4b8a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 12:07:48 2015 -0700

      Merge branch 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux

      Pull i2c fixes from Wolfram Sang:
       "Here are some bugfixes for the I2C subsystem.

        Kieran found a flaw in the recently renewed wake irq handling.  Mika
        handled a user bug report where the ACPI info turned out to be
        unusable.  I updated MAINTAINERS so that such bug reports will sooner
        get to the right people.  Geert pointed me to a problem of some i2c
        drivers regarding PM which I fixed"

      * 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:
        i2c: designware: Do not use parameters from ACPI on Dell Inspiron 7348
        MAINTAINERS: add maintainers for Synopsis Designware I2C drivers
        i2c: designware-platdrv: enable RuntimePM before registering to the core
        i2c: s3c2410: enable RuntimePM before registering to the core
        i2c: rcar: enable RuntimePM before registering to the core
        i2c: return probe deferred status on dev_pm_domain_attach

  commit 56d4b8a24cef5d66f0d10ac778a520d3c2c68a48
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 12:06:54 2015 +0300

      i2c: designware: Do not use parameters from ACPI on Dell Inspiron 7348

      ACPI SSCN/FMCN methods were originally added because then the platform can
      provide the most accurate HCNT/LCNT values to the driver. However, this
      seems not to be true for Dell Inspiron 7348 where using these causes the
      touchpad to fail in boot:

        i2c_hid i2c-DLL0675:00: failed to retrieve report from device.
        i2c_designware INT3433:00: i2c_dw_handle_tx_abort: lost arbitration
        i2c_hid i2c-DLL0675:00: failed to retrieve report from device.
        i2c_designware INT3433:00: controller timed out

      The values received from ACPI are (in fast mode):

        HCNT: 72
        LCNT: 160

      this translates to following timings (input clock is 100MHz on Broadwell):

        tHIGH: 720 ns (spec min 600 ns)
        tLOW: 1600 ns (spec min 1300 ns)
        Bus period: 2920 ns (assuming 300 ns tf and tr)
        Bus speed: 342.5 kHz

      Both tHIGH and tLOW are within the I2C specification.

      The calculated values when ACPI parameters are not used are (in fast 
mode):

        HCNT: 87
        LCNT: 159

      which translates to:

        tHIGH: 870 ns (spec min 600 ns)
        tLOW: 1590 ns (spec min 1300 ns)
        Bus period 3060 ns (assuming 300 ns tf and tr)
        Bus speed 326.8 kHz

      These values are also within the I2C specification.

      Since both ACPI and calculated values meet the I2C specification timing
      requirements it is hard to say why the touchpad does not function properly
      with the ACPI values except that the bus speed is higher in this case (but
      still well below the max 400kHz).

      Solve this by adding DMI quirk to the driver that disables using ACPI
      parameters on this particulare machine.

      Reported-by: Pavel Roskin <plroskin@xxxxxxxxx>
      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Tested-by: Pavel Roskin <plroskin@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx

  commit 3bd29515d1cad26fa85a1a9b442de8816c1f5c54
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 16 15:42:55 2015 -0700

      x86/entry/32: Fix FS and GS restore in opportunistic SYSEXIT

      We either need to restore them before popping and thus changing
      ESP, or we need to adjust the offsets.  The former is simpler.

      Reported-and-tested-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 5f310f739b4c x86/entry/32: ("Re-implement SYSENTER using the new C 
path")
      Link: 
http://lkml.kernel.org/r/461e5c7d8fa3821529893a4893ac9c4bc37f9e17.1445035014.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 657c1eea0019e80685a84cbb1919794243a187c9
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 16 15:42:54 2015 -0700

      x86/entry/32: Fix entry_INT80_32() to expect interrupts to be on

      When I rewrote entry_INT80_32, I thought that int80 was an
      interrupt gate.  It's a trap gate.  *facepalm*

      Thanks to Brian Gerst for pointing out that it's better to
      change the entry code than to change the gate type.

      Suggested-by: Brian Gerst <brgerst@xxxxxxxxx>
      Reported-and-tested-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 150ac78d63af ("x86/entry/32: Switch INT80 to the new C syscall 
path")
      Link: 
http://lkml.kernel.org/r/dc09d9b574a5c1dcca996847875c73f8341ce0ad.1445035014.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f235f664a8afabccf863a5dee4777d2d7b676fda
  Author: Scot Doyle <lkml14@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 15:08:10 2015 +0000

      fbcon: initialize blink interval before calling fb_set_par

      Since commit 27a4c827c34ac4256a190cc9d24607f953c1c459
          fbcon: use the cursor blink interval provided by vt

      a PPC64LE kernel fails to boot when fbcon_add_cursor_timer uses an
      uninitialized ops->cur_blink_jiffies. Prevent by initializing
      in fbcon_init before the call to info->fbops->fb_set_par.

      Reported-and-tested-by: Alistair Popple <alistair@xxxxxxxxxxxx>
      Signed-off-by: Scot Doyle <lkml14@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> [v4.2]
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit f967fc8f165fadb72166f2bd4785094b3ca21307
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:14:56 2015 +0200

      Revert "serial: 8250_dma: don't bother DMA with small transfers"

      This reverts commit 9119fba0cfeda6d415c9f068df66838a104b87cb.

      This commit prevents from sending "big" file using Bluetooth.
      When sending a lot of data quickly through the Bluetooth interface, and
      after a variable amount of data sent, transfer fails with error:
          kernel: [  415.247453] Bluetooth: hci0 hardware error 0x00

      Found on T100TA.

      After reverting this commit, send works fine for any file size.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Fixes: 9119fba0cfed (serial: 8250_dma: don't bother DMA with small 
transfers)
      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx>
      Acked-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 324700604b04954510ddd4c6841a88a06938a28c
  Author: Vladimir Zapolskiy <vz@xxxxxxxxx>
  Date:   Sat Oct 17 11:30:15 2015 -0700

      Input: lpc32xx_ts - fix warnings caused by enabling unprepared clock

      If common clock framework is configured, the driver generates a warning,
      which is fixed by this change:

          root@devkit3250:~# cat /dev/input/touchscreen0
          ------------[ cut here ]------------
          WARNING: CPU: 0 PID: 720 at drivers/clk/clk.c:727 
clk_core_enable+0x2c/0xa4()
          Modules linked in: sc16is7xx snd_soc_uda1380
          CPU: 0 PID: 720 Comm: cat Not tainted 4.3.0-rc2+ #199
          Hardware name: LPC32XX SoC (Flattened Device Tree)
          Backtrace:
          [<>] (dump_backtrace) from [<>] (show_stack+0x18/0x1c)
          [<>] (show_stack) from [<>] (dump_stack+0x20/0x28)
          [<>] (dump_stack) from [<>] (warn_slowpath_common+0x90/0xb8)
          [<>] (warn_slowpath_common) from [<>] (warn_slowpath_null+0x24/0x2c)
          [<>] (warn_slowpath_null) from [<>] (clk_core_enable+0x2c/0xa4)
          [<>] (clk_core_enable) from [<>] (clk_enable+0x24/0x38)
          [<>] (clk_enable) from [<>] (lpc32xx_setup_tsc+0x18/0xa0)
          [<>] (lpc32xx_setup_tsc) from [<>] (lpc32xx_ts_open+0x14/0x1c)
          [<>] (lpc32xx_ts_open) from [<>] (input_open_device+0x74/0xb0)
          [<>] (input_open_device) from [<>] (evdev_open+0x110/0x16c)
          [<>] (evdev_open) from [<>] (chrdev_open+0x1b4/0x1dc)
          [<>] (chrdev_open) from [<>] (do_dentry_open+0x1dc/0x2f4)
          [<>] (do_dentry_open) from [<>] (vfs_open+0x6c/0x70)
          [<>] (vfs_open) from [<>] (path_openat+0xb4c/0xddc)
          [<>] (path_openat) from [<>] (do_filp_open+0x40/0x8c)
          [<>] (do_filp_open) from [<>] (do_sys_open+0x124/0x1c4)
          [<>] (do_sys_open) from [<>] (SyS_open+0x2c/0x30)
          [<>] (SyS_open) from [<>] (ret_fast_syscall+0x0/0x38)

      Signed-off-by: Vladimir Zapolskiy <vz@xxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 81429a6dbcbf3a01830de42dbdf0d9acbe68e1c1
  Merge: 16c8b9c 0701c53 56fd16c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 17 08:47:27 2015 -0700

      Merge branches 'irq-urgent-for-linus' and 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq/timer fixes from Thomas Gleixner:
       "irq: a fix for the new hierarchical MSI interrupt handling which
        unbreaks PCI=n configurations.

        timers: a fix for the new hrtimer clock offset update mechanism to
        ensure that the boot time offset is respected"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        genirq/msi: Do not use pci_msi_[un]mask_irq as default methods

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        timekeeping: Increment clock_was_set_seq in timekeeping_init()

  commit f0a0a978b66fea782a52b0a7075b3fa9ab27ad0a
  Merge: c8d71d0 4be3158
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Sat Oct 17 14:11:08 2015 +0200

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

      This merge resolves conflicts with 75aec9df3a78 ("bridge: Remove
      br_nf_push_frag_xmit_sk") as part of Eric Biederman's effort to improve
      netns support in the network stack that reached upstream via David's
      net-next tree.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

      Conflicts:
        net/bridge/br_netfilter_hooks.c

  commit f33e9c434b8ce833bd3dd39436bd0799c3e1d1c5
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 9 12:16:02 2015 +0530

      ARC: smp: Move default boot kick/wait code out of MCIP into common code

      For non halt-on-reset case, all cores start of simultaneously in @stext.
      Master core0 proceeds with kernel boot, while other spin-wait on
      @wake_flag being set by master once it is ready. So NO hardware assist
      is needed for master to "kick" the others.

      This patch moves this soft implementation out of mcip.c (as there is no
      hardware assist) into common smp.c

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit d0890ea5b68f63d7b8641455dc5534886fee2fa1
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 2 19:24:20 2015 +0530

      ARC: boot log: decode more mmu config items

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 964cf28f9d10f4e5229e4365258c292bc5c856b2
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 2 19:20:27 2015 +0530

      ARC: boot log: move helper macros to header for reuse

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit b598e17f6a7a3a9bb6e0953ef586ee3697b59fce
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 2 12:25:35 2015 +0530

      ARC: mm: compute TLB size as needed from ways * sets

      This frees up some bits to hold more high level info such as PAE being
      present, w/o increasing the size of already bloated cpuinfo struct

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit c583ee4fb013bcf3501b9f10c252ea44cf7c657a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Sep 29 16:01:13 2015 +0530

      ARC: mm: MMU v1..v3 only selectable for ARCompact ISA based cores

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 5c35ee642a1d1341b225808b53fc69df2245b87e
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Sep 29 16:05:48 2015 +0530

      ARC: make write_aux_reg safer against macro substitution

      It was generating warnings when called as write_aux_reg(x, paddr >> 32)

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 9fabcc636bf57dcb9c6fc5b1f34861c548944fd4
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:52:27 2015 +0530

      ARC: [arcompact] entry.S: Elide extra check/branch in exception ret path

      This is done by improving the laddering logic !

      Before:

         if Exception
            goto excep_or_pure_k_ret

         if !Interrupt(L2)
            goto l1_chk
         else
            INTERRUPT_EPILOGUE 2

       l1_chk:
         if !Interrupt(L1)  (i.e. pure kernel mode)
            goto excep_or_pure_k_ret
         else
            INTERRUPT_EPILOGUE 1

       excep_or_pure_k_ret:
         EXCEPTION_EPILOGUE

      Now:

         if !Interrupt(L1 or L2) (i.e. exception or pure kernel mode)
            goto excep_or_pure_k_ret

        ; guaranteed to be an interrupt
         if !Interrupt(L2)
            goto l1_ret
         else
            INTERRUPT_EPILOGUE 2

       ; by virtue of above, no need to chk for L1 active
       l1_ret:
          INTERRUPT_EPILOGUE 1

       excep_or_pure_k_ret:
          EXCEPTION_EPILOGUE

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 5f888087455c5199195c2ba17b91ac7285a33921
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Sun Sep 6 19:11:12 2015 +0530

      ARC: [arcompact] entry.S: Document preemption games for L2 intr

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 55a2ae775ab4fe7aefa736e0fae6b8d4bd8aaab5
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Sat Sep 5 23:08:31 2015 +0530

      ARC: [arcompact] entry.S: Improve early return from exception

      The requirement is to
       - Reenable Exceptions (AE cleared)
       - Reenable Interrupts (E1/E2 set)

      We need to do wiggle these bits into ERSTATUS and call RTIE.

      Prev version used the pre-exception STATUS32 as starting point for what
      goes into ERSTATUS. This required explicit fixups of U/DE/L bits.

      Instead, use the current (in-exception) STATUS32 as starting point.
      Being in exception handler U/DE/L can be safely assumed to be correct.
      Only AE/E1/E2 need to be fixed.

      So the new implementation is slightly better
       -Avoids read form memory
       -Is 4 bytes smaller for the typical 1 level of intr configuration
       -Depicts the semantics more clearly

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 9dbd3d9bfd56707f9b1ccc301506e2fac0e95795
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Sat Sep 5 22:47:30 2015 +0530

      ARC: [arcompact] don't check for hard isr calling local_irq_enable()

      Historically this was done by ARC IDE driver, which is long gone.
      IRQ core is pretty robust now and already checks if IRQs are enabled
      in hard ISRs. Thus no point in checking this in arch code, for every
      call of irq enabled.

      Further if some driver does do that - let it bring down the system so we
      notice/fix this sooner than covering up for sucker

      This makes local_irq_enable() - for L1 only case atleast simple enough
      so we can inline it.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit c7119d56d2755fc2770b0e2c1c4385e10f4c9161
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Oct 15 08:04:45 2015 +0530

      ARCv2: mm: THP: flush_pmd_tlb_range make SMP safe

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 722fe8fd365a08bd53e9dd105009ab810107b02d
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Feb 27 19:36:35 2015 +0530

      ARCv2: mm: THP: Implement flush_pmd_tlb_range() optimization

      Implement the TLB flush routine to evict a sepcific Super TLB entry,
      vs. moving to a new ASID on every such flush.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 12ebc1581ad114543ae822aa3a12f76072e2f902
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Feb 20 10:36:28 2015 +0530

      mm,thp: introduce flush_pmd_tlb_range

      ARCHes with special requirements for evicting THP backing TLB entries
      can implement this.

      Otherwise also, it can help optimize TLB flush in THP regime.
      stock flush_tlb_range() typically has optimization to nuke the entire
      TLB if flush span is greater than a certain threshhold, which will
      likely be true for a single huge page. Thus a single thp flush will
      invalidate the entrire TLB which is not desirable.

      e.g. see arch/arc: flush_pmd_tlb_range

      Acked-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151009100816.GC7873@node
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit bd5e88ad72b26ebf7ecb231bc22ceecd6cbdb951
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Jul 9 17:22:44 2015 +0530

      mm,thp: reduce ifdef'ery for THP in generic code

      - pgtable-generic.c: Fold individual #ifdef for each helper into a top
        level #ifdef. Makes code more readable

      - Converted the stub helpers for !THP to BUILD_BUG() vs. runtime BUG()

      Acked-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151009133450.GA8597@node
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 52585bcc2505d6f888d4ac68ca6c55f6d1ad736a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Jul 9 17:19:30 2015 +0530

      mm: group pte related helpers together

      This reduces/simplifies the diff for the next patch which moves THP
      specific code.

      No semantical changes !

      Acked-by: Kirill A. Shutemov kirill.shutemov@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442918096-17454-9-git-send-email-vgupta@xxxxxxxxxxxx
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 443a6312832fe7362edffed960204f750b230f46
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Aug 27 14:03:20 2015 +0530

      Documentation/features/vm: THP now supported by ARC

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 6ce187985f31c441f7fc10a4d265182d05bc7ad3
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Mar 12 19:48:03 2015 +0530

      ARCv2: mm: THP: boot validation/reporting

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit fe6c1b8611aa3a79a937a5e3b85a16576b6ad159
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Jul 8 18:43:47 2014 +0530

      ARCv2: mm: THP support

      MMUv4 in HS38x cores supports Super Pages which are basis for Linux THP
      support.

      Normal and Super pages can co-exist (ofcourse not overlap) in TLB with a
      new bit "SZ" in TLB page desciptor to distinguish between them.
      Super Page size is configurable in hardware (4K to 16M), but fixed once
      RTL builds.

      The exact THP size a Linx configuration will support is a function of:
       - MMU page size (typical 8K, RTL fixed)
       - software page walker address split between PGD:PTE:PFN (typical
         11:8:13, but can be changed with 1 line)

      So for above default, THP size supported is 8K * 256 = 2M

      Default Page Walker is 2 levels, PGD:PTE:PFN, which in THP regime
      reduces to 1 level (as PTE is folded into PGD and canonically referred
      to as PMD).

      Thus thp PMD accessors are implemented in terms of PTE (just like sparc)

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit c7c49b8fde26b74277188bdc6c9dca38db6fa35b
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 18:52:25 2015 -0700

      net: add pfmemalloc check in sk_add_backlog()

      Greg reported crashes hitting the following check in __sk_backlog_rcv()

        BUG_ON(!sock_flag(sk, SOCK_MEMALLOC));

      The pfmemalloc bit is currently checked in sk_filter().

      This works correctly for TCP, because sk_filter() is ran in
      tcp_v[46]_rcv() before hitting the prequeue or backlog checks.

      For UDP or other protocols, this does not work, because the sk_filter()
      is ran from sock_queue_rcv_skb(), which might be called _after_ backlog
      queuing if socket is owned by user by the time packet is processed by
      softirq handler.

      Fixes: b4b9e35585089 ("netvm: set PF_MEMALLOC as appropriate during SKB 
processing")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Greg Thelen <gthelen@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 00db674bedd68ff8b5afae9030ff5e04d45d1b4a
  Author: Nikolay Borisov <kernel@xxxxxxxx>
  Date:   Fri Oct 16 09:40:28 2015 +0300

      netfilter: ipset: Fix sleeping memory allocation in atomic context

      Commit 00590fdd5be0 introduced RCU locking in list type and in
      doing so introduced a memory allocation in list_set_add, which
      is done in an atomic context, due to the fact that ipset rcu
      list modifications are serialised with a spin lock. The reason
      why we can't use a mutex is that in addition to modifying the
      list with ipset commands, it's also being modified when a
      particular ipset rule timeout expires aka garbage collection.
      This gc is triggered from set_cleanup_entries, which in turn
      is invoked from a timer thus requiring the lock to be bh-safe.

      Concretely the following call chain can lead to "sleeping function
      called in atomic context" splat:
      call_ad -> list_set_uadt -> list_set_uadd -> kzalloc(, GFP_KERNEL).
      And since GFP_KERNEL allows initiating direct reclaim thus
      potentially sleeping in the allocation path.

      To fix the issue change the allocation type to GFP_ATOMIC, to
      correctly reflect that it is occuring in an atomic context.

      Fixes: 00590fdd5be0 ("netfilter: ipset: Introduce RCU locking in list 
type")
      Signed-off-by: Nikolay Borisov <kernel@xxxxxxxx>
      Acked-by: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit fd7cd061adcf5f7503515ba52b6a724642a839c8
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:30:13 2015 +0300

      xhci: Add spurious wakeup quirk for LynxPoint-LP controllers

      We received several reports of systems rebooting and powering on
      after an attempted shutdown. Testing showed that setting
      XHCI_SPURIOUS_WAKEUP quirk in addition to the XHCI_SPURIOUS_REBOOT
      quirk allowed the system to shutdown as expected for LynxPoint-LP
      xHCI controllers. Set the quirk back.

      Note that the quirk was originally introduced for LynxPoint and
      LynxPoint-LP just for this same reason. See:

      commit 638298dc66ea ("xhci: Fix spurious wakeups after S5 on Haswell")

      It was later limited to only concern HP machines as it caused
      regression on some machines, see both bug and commit:

      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=66171
      commit 6962d914f317 ("xhci: Limit the spurious wakeup fix only to HP 
machines")

      Later it was discovered that the powering on after shutdown
      was limited to LynxPoint-LP (Haswell-ULT) and that some non-LP HP
      machine suffered from spontaneous resume from S3 (which should
      not be related to the SPURIOUS_WAKEUP quirk at all). An attempt
      to fix this then removed the SPURIOUS_WAKEUP flag usage completely.

      commit b45abacde3d5 ("xhci: no switching back on non-ULT Haswell")

      Current understanding is that LynxPoint-LP (Haswell ULT) machines
      need the SPURIOUS_WAKEUP quirk, otherwise they will restart, and
      plain Lynxpoint (Haswell) machines may _not_ have the quirk
      set otherwise they again will restart.

      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Cc: Takashi Iwai <tiwai@xxxxxxx>
      Cc: Oliver Neukum <oneukum@xxxxxxxx>
      [Added more history to commit message -Mathias]
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 3b4739b8951d650becbcd855d7d6f18ac98a9a85
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:30:12 2015 +0300

      xhci: handle no ping response error properly

      If a host fails to wake up a isochronous SuperSpeed device from U1/U2
      in time for a isoch transfer it will generate a "No ping response error"
      Host will then move to the next transfer descriptor.

      Handle this case in the same way as missed service errors, tag the
      current TD as skipped and handle it on the next transfer event.

      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit e210c422b6fdd2dc123bedc588f399aefd8bf9de
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:30:11 2015 +0300

      xhci: don't finish a TD if we get a short transfer event mid TD

      If the difference is big enough between the bytes asked and received
      in a bulk transfer we can get a short transfer event pointing to a TRB in
      the middle of the TD. We don't want to handle the TD yet as we will anyway
      receive a new event for the last TRB in the TD.

      Hold off from finishing the TD and removing it from the list until we
      receive an event for the last TRB in the TD

      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 4301de3b0ac4614fdf629fa414fb94f598e7ad6f
  Merge: 25cb62b b94e228
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 21:15:52 2015 -0700

      Merge tag 'iio-fixes-for-4.3a' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jic23/iio into staging-linus

      Jonathan writes:

      First set of IIO fixes for the 4.3 cycle.

      * twl4030 - incorrect readings for some channels due to a failure to
        initialize a bias regulator or configure the lines for input rather than
        USB use.
      * lis3lv02 - a missunderstanding of the way the interrupts worked on this
        chip lead to activation of the wrong interrupt.
      * sca3000 - an old bug meant that memory corruption could occur in the
        hardware ring buffer readout function.
      * mxs-lradc - wrong temp offset.

  commit 16c8b9cb246474ba4522182fc0d24caddcbba0dd
  Merge: 4f3f957 a487c03
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 17:39:27 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

      Pull input fixes from Dmitry Torokhov:
       "Just two small fixups to ads7846 touchscreen controller driver and
        Cypress touchpad driver"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
        Input: cyapa - fix the copy paste error on electrodes_rx value
        Input: ads7846 - correct the value got from SPI

  commit 4f3f9573b62be8953ac3d9888c253e0744af7195
  Merge: 045ce74 e79b202
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 17:11:14 2015 -0700

      Merge tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux

      Pull clk fix from Stephen Boyd:
       "Just one revert for Armada XP devices: the conversion to
        of_clk_get_parent_name() wasn't a direct translation, so we
        revert back to of_clk_get() + __clk_get_name().

        We could make of_clk_get_parent_name() more robust, but that
        may have unintended side-effects, so we'll do that in the
        next version"

      * tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:
        Partially revert "clk: mvebu: Convert to clk_hw based provider APIs"

  commit b28fec1324bf8f5010d2c3c5d57db4115bda66d4
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sat Oct 17 08:08:56 2015 +0900

      thermal: exynos: Fix register read in TMU

      The value of emul_con was getting overwritten if the selected soc is
      SOC_ARCH_EXYNOS5260. And so as a result we were reading from the wrong
      register in the case of SOC_ARCH_EXYNOS5260.

      Fixes: 488c7455d74c ("thermal: exynos: Add the support for Exynos5433 
TMU")
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Reviewed-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>
      Acked-by: Lukasz Majewski <l.majewski@xxxxxxxxxxx>
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit ec879f1272283c040bc70e1a1fff5edbb547be59
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 17:51:26 2015 +0300

      pinctrl: baytrail: Fix compilation warnings when !CONFIG_PM

      When CONFIG_PM is not set we get following compilation warnings:

       warning: ââ?¬Ë?byt_gpio_runtime_suspendââ?¬â?¢ defined but not used 
[-Wunused-function]
       warning: ââ?¬Ë?byt_gpio_runtime_resumeââ?¬â?¢ defined but not used 
[-Wunused-function]

      Fix this by guarding byt_gpio_runtime_suspend()/byt_gpio_runtime_resume()
      with #ifdef CONFIG_PM.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit f487bbf309759153f56bac7d7ba5ee63196ce584
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 17:51:25 2015 +0300

      pinctrl: intel: Fix compilation warning when !CONFIG_PM_SLEEP

      We get following warning when CONFIG_PM_SLEEP is not set

        warning: ââ?¬Ë?intel_gpio_irq_initââ?¬â?¢ defined but not used 
[-Wunused-function]

      Since the function is only called from intel_pinctrl_resume() move it
      inside CONFIG_PM_SLEEP guard as well.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 90b665f627b18822a7bbebeff44ce730ccf74275
  Author: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 00:20:21 2015 +0300

      gpiolib: Add and use OF_GPIO_SINGLE_ENDED flag

      The flag matches the DT GPIO_SINGLE_ENDED flag and allows drivers to
      parse and use the DT flag to handle single-ended (open-drain or
      open-source) GPIOs.

      Signed-off-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 923b93e451db876d1479d3e4458fce14fec31d1c
  Author: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 00:20:20 2015 +0300

      gpiolib: Split GPIO flags parsing and GPIO configuration

      When requesting a GPIO through the legacy or the gpiod_* API the
      gpiochip request operation is first called and then the GPIO flags are
      parsed and the GPIO is configured. This prevents the gpiochip from
      rejecting the request if the flags are not supported by the device.

      To fix this split the parse-and-configure operation in two and parse
      flags before requesting the GPIO.

      Signed-off-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 11091fb0a1227d569d09353e1ce1f88694a033dc
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:39:31 2015 +0200

      pinctrl: qcom: ssbi: fix compilation with DEBUG_FS=n

      The DEBUG_FS=n #defines for the dbg_show functions were missed when
      renaming the driver from msm_ to pm8xxx_, causing it to break the build
      when DEBUG_FS isn't enabled:

        CC [M]  drivers/pinctrl/qcom/pinctrl-ssbi-gpio.o
      drivers/pinctrl/qcom/pinctrl-ssbi-gpio.c:597:14: error: 
ââ?¬Ë?pm8xxx_gpio_dbg_showââ?¬â?¢ undeclared here (not in a function)
        .dbg_show = pm8xxx_gpio_dbg_show,

      Fix this by renaming them correctly.

      Fixes: b4c45fe974bc ("pinctrl: qcom: ssbi: Family A gpio & mpp drivers")
      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Reviewed-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 98c85d583a5dee70d75faed3eb79851dd0a2e2fe
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:19 2015 +0200

      pinctrl: replace trivial implementations of gpio_chip request/free

      Replace all trivial request/free callbacks that do nothing but call into
      pinctrl code with the generic versions.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Acked-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Acked-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Eric Anholt <eric@xxxxxxxxxx>
      Acked-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Acked-by: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Acked-by: Baruch Siach <baruch@xxxxxxxxxx>
      Acked-by: Matthias Brugger <matthias.bgg@xxxxxxxxx>
      Acked-by: Lee Jones <lee@xxxxxxxxxx>
      Acked-by: Laxman Dewangan <ldewangan@xxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 31831f41bfd1e340bad66014a1b7ccd761ee51cf
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:18 2015 +0200

      gpio: pl061: use the generic request/free implementations

      Instead of storing in the chip data whether the chip uses pinctrl and
      conditionally call pinctrl_{request,free}_gpio, just don't populate
      request/free in that case.

      This makes the implementations trivial and the same as the generic
      implementations, thus we can just use them.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit da4002ee901205df4238dd9a63e5598064a0cd17
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:17 2015 +0200

      gpio: gpio-xz: use the generic request/free implementations

      Instead of storing in the chip data whether the chip uses pinctrl and
      conditionally call pinctrl_{request,free}_gpio, just don't populate
      request/free in that case.

      This makes the implementations trivial and the same as the generic
      implementations, thus we can just use them.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 203f0daafdf228a7e4e90a714a2a085884d91ea4
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:16 2015 +0200

      gpio: replace trivial implementations of request/free with generic one

      Replace all trivial request/free callbacks that do nothing but call into
      pinctrl code with the generic versions.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Reviewed-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Acked-by: James Hogan <james.hogan@xxxxxxxxxx>
      Acked-by: Stefan Agner <stefan@xxxxxxxx>
      Acked-by: Joachim Eastwood <manabian@xxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c771c2f484857f3b1fc81d180485e96b7cb67c17
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Sun Oct 11 17:34:15 2015 +0200

      gpiolib: provide generic request/free implementations

      Provide generic request/free implementations that pinctrl aware gpio
      drivers can use instead of open coding if they use a 1:1 pin to gpio
      signal mapping.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 045ce743498881b39e672da948c210c769209515
  Merge: 6aa8ca4 ba30670
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 13:03:05 2015 -0700

      Merge tag 'dm-4.3-fixes-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull device mapper fixes from Mike Snitzer:
       "Two DM target error path cleanup fixes (one for stable in DM thinp and
        one for a v4.3-rc5 thinko in DM snapshot)"

      * tag 'dm-4.3-fixes-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm thin: fix missing pool reference count decrement in pool_ctr error 
path
        dm snapshot persistent: fix missing cleanup in persistent_ctr error path

  commit 3fa508cd233da76eb00377440600f53eebfec08a
  Author: Wei Chen <Wei.Chen@xxxxxxx>
  Date:   Fri Oct 9 06:31:18 2015 +0000

      pinctrl: atlas7: support atlas7 step B changes

      The the pin groups and pin functions have been changed
      in atlas7 step B soc. We have to update the driver
      to support step B chip.

      Changes:
      1. add 5 jtag pins to IOC_TOP:
        "jtag_tdo", "jtag_tms","jtag_tck", "jtag_tdi", "jtag_trstn"
        these 5 pins can be mutiplex with other functions, so we
        have to conver these 5 pins in pinmux.
      2. add pin groups for audio digmic, audio spdif, can transceiver
        en, can transceiver stb, i2s0, i2s1 and jtag.
      3. serval pins can be located to more PADs:
        audio_uart0_urfs, audio_uart1_urfs, audio_uart2_urfs,
        audio_uart2_urxd, audio_uart2_usclk, audio_uart2_utfs,
        audio_uart2_utxd, can0_rxd, can0_txd, can1_rxd, can1_txd
        jtag_ntrst, jtag_swdiotms, jtag_tck, jtag_tdi, jtag_tdo,
        pw_cko0, pw_cko1, pw_i2s01, pw_pwm0, pw_pwm1, sd2_cdb,
        sd2_wpb, uart2_cts, uart2_rts, uart2_rxd, uart2_txd,
        uart3_cts, uart3_rts, uart3_rxd, uart3_txd, uart4_cts,
        uart4_rts, usb0_drvvbus, usb1_drvvbus.

      Because of Changes#3, some functions should have more than one
      pin groups. So we have to split the original pin group to serval
      pin groups.

      For example:
      audio_uart0 has 5 pins, on STEPA, each of these 5 pins only has
      one related PAD. But on STEPB, audio_uart0_urfs has 4 related
      PAD.
      So we place the 4 pins with one PAD into a single pin group:
        audio_uart0_basic_group.
      and place urfs pin wtih different PADs to 4 different pin groups:
        audio_uart0_urfs_group0, ..., audio_uart0_urfs_group3

      A full audio_uart0 pin group can be:
        pinctrl-0 = <&audio_uart0_basic_group &audio_uart0_urfs_group0>;
      If audio_uart0 pin group encountered some confiction, we only have
      to change the urfs group:
        pinctrl-0 = <&audio_uart0_basic_group &audio_uart0_urfs_group2>;

      Signed-off-by: Wei Chen <Wei.Chen@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 6aa8ca4df0c1e2095c3f9f6fc28d85a991787879
  Merge: 59bcce1 dc6c5fb
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:55:34 2015 -0700

      Merge branch 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes from Chris Mason:
       "I have two more bug fixes for btrfs.

        My commit fixes a bug we hit last week at FB, a combination of lots of
        hard links and an admin command to resolve inode numbers.

        Dave is adding checks to make sure balance on current kernels ignores
        filters it doesn't understand.  The penalty for being wrong is just
        doing more work (not crashing etc), but it's a good fix"

      * 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        btrfs: fix use after free iterating extrefs
        btrfs: check unsupported filters in balance arguments

  commit 59bcce121691da06c6b027088d38b76ba893e0cb
  Merge: a4c4c49 e30b757
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:47:02 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fixes from Sage Weil:
       "Just two small items from Ilya:

        The first patch fixes the RBD readahead to grab full objects.  The
        second fixes the write ops to prevent undue promotion when a cache
        tier is configured on the server side"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        rbd: use writefull op for object size writes
        rbd: set max_sectors explicitly

  commit a4c4c49a611321d1b10379f72f1267802437fc07
  Merge: 8b7b56f fa54823
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:25:54 2015 -0700

      Merge tag 'pm+acpi-4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull power management and ACPI fixes from Rafael Wysocki:
       "These fix two recent regressions (ACPICA, the generic power domains
        framework) and one crash that may happen on specific hardware
        supported since 4.1 (intel_pstate).

        Specifics:

         - Fix a regression introduced by a recent ACPICA cleanup that
           uncovered a latent bug (Lv Zheng).

         - Fix a recent regression in the generic power domains framework that
           may cause it to violate PM QoS latency constraints in some cases
           (Ulf Hansson).

         - Fix an intel_pstate driver crash on the Knights Landing chips that
           do not update the MPERF counter as often as expected by the driver
           which may result in a divide by 0 (Srinivas Pandruvada)"

      * tag 'pm+acpi-4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL)
        ACPICA: Tables: Fix FADT dependency regression
        PM / Domains: Fix validation of latency constraints in genpd governor

  commit 8b7b56f37b13323d459aeec5c5290c2141366c84
  Merge: ebb65c8 d549f54
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:19:11 2015 -0700

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Nothing too crazy or exciting:

         - two MAINTAINERS entries that I didn't see the point in delaying.
         - one drm mst fix to stop sending uninitialised data to monitors
         - two amdgpu fixes
         - one radeon mst tiling fix
         - one vmwgfx regression fix
         - one virtio warning fix.

        I have found one locking problem that needs a bit of reorg to fix, but
        I'm not sure it's worth putting in -fixes as I don't think we've seen
        it hit in the real world ever, I just found it using the virtio-gpu
        driver when working on it.  I'll possibly send it next week once I've
        time to discuss with Daniel"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/virtio: use %llu format string form atomic64_t
        MAINTAINERS: Add myself as maintainer for the gma500 driver
        MAINTAINERS: add a maintainer for the atmel-hlcdc DRM driver
        drm/amdgpu: Keep the pflip interrupts always enabled v7
        drm/amdgpu: adjust default dispclk (v2)
        drm/dp/mst: make mst i2c transfer code more robust.
        drm/radeon: attach tile property to mst connector
        drm/vmwgfx: Fix kernel NULL pointer dereference on older hardware

  commit 6a3b764b8dc781c36f0f94287df5b2ec23b8fdd7
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Fri Oct 16 12:16:21 2015 -0700

      ARM: OMAP2+: Fix oops with LPAE and more than 2GB of memory

      On boards with more than 2GB of RAM booting goes wrong with things not
      working and we're getting lots of l3 warnings:

      WARNING: CPU: 0 PID: 1 at drivers/bus/omap_l3_noc.c:147
      l3_interrupt_handler+0x260/0x384()
      44000000.ocp:L3 Custom Error: MASTER MMC6 TARGET DMM1 (Idle):
      Data Access in User mode during Functional access
      ...
      [<c044e158>] (scsi_add_host_with_dma) from [<c04705c8>]
      (ata_scsi_add_hosts+0x5c/0x18c)
      [<c04705c8>] (ata_scsi_add_hosts) from [<c046b13c>]
      (ata_host_register+0x150/0x2cc)
      [<c046b13c>] (ata_host_register) from [<c046b38c>]
      (ata_host_activate+0xd4/0x124)
      [<c046b38c>] (ata_host_activate) from [<c047f42c>]
      (ahci_host_activate+0x5c/0x194)
      [<c047f42c>] (ahci_host_activate) from [<c0480854>]
      (ahci_platform_init_host+0x1f0/0x3f0)
      [<c0480854>] (ahci_platform_init_host) from [<c047c9dc>]
      (ahci_probe+0x70/0x98)
      [<c047c9dc>] (ahci_probe) from [<c04220cc>]
      (platform_drv_probe+0x54/0xb4)

      Let's fix the issue by enabling ZONE_DMA for LPAE. Note that we need to
      limit dma_zone_size to 2GB as the rest of the RAM is beyond the 4GB limit.

      Let's also fix things for dra7 as done in similar patches in the TI tree
      by Lokesh Vutla <lokeshvutla@xxxxxx>.

      Reviewed-by: Lokesh Vutla <lokeshvutla@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit ebb65c81e1042c0d73cb73738c607da54add739a
  Merge: 3d87518 abb39bc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 12:07:43 2015 -0700

      Merge tag 'powerpc-4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixes from Michael Ellerman:
       - Re-enable CONFIG_SCSI_DH in our defconfigs
       - Remove unused os_area_db_id_video_mode
       - cxl: fix leak of IRQ names in cxl_free_afu_irqs() from Andrew
       - cxl: fix leak of ctx->irq_bitmap when releasing context via kernel API 
from Andrew
       - cxl: fix leak of ctx->mapping when releasing kernel API contexts from 
Andrew
       - cxl: Workaround malformed pcie packets on some cards from Philippe
       - cxl: Fix number of allocated pages in SPA from Christophe Lombard
       - Fix checkstop in native_hpte_clear() with lockdep from Cyril
       - Panic on unhandled Machine Check on powernv from Daniel
       - selftests/powerpc: Fix build failure of load_unaligned_zeropad test

      * tag 'powerpc-4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        selftests/powerpc: Fix build failure of load_unaligned_zeropad test
        powerpc/powernv: Panic on unhandled Machine Check
        powerpc: Fix checkstop in native_hpte_clear() with lockdep
        cxl: Fix number of allocated pages in SPA
        cxl: Workaround malformed pcie packets on some cards
        cxl: fix leak of ctx->mapping when releasing kernel API contexts
        cxl: fix leak of ctx->irq_bitmap when releasing context via kernel API
        cxl: fix leak of IRQ names in cxl_free_afu_irqs()
        powerpc/ps3: Remove unused os_area_db_id_video_mode
        powerpc/configs: Re-enable CONFIG_SCSI_DH

  commit 3d875182d7f4b27b7778c3ab6a39800d383968cb
  Merge: 69984b6 934ed25
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:42:37 2015 -0700

      Merge branch 'akpm' (patches from Andrew)

      Merge misc fixes from Andrew Morton:
       "6 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        sh: add copy_user_page() alias for __copy_user()
        lib/Kconfig: ZLIB_DEFLATE must select BITREVERSE
        mm, dax: fix DAX deadlocks
        memcg: convert threshold to bytes
        builddeb: remove debian/files before build
        mm, fs: obey gfp_mapping for add_to_page_cache()

  commit 934ed25ea505859cec5236dcb1769be5f998dd25
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 15:28:38 2015 -0700

      sh: add copy_user_page() alias for __copy_user()

      copy_user_page() is needed by DAX.  Without this we get a compile error
      for DAX on SH:

        fs/dax.c:280:2: error: implicit declaration of function 
`copy_user_page' [-Werror=implicit-function-declaration]
          copy_user_page(vto, (void __force *)vfrom, vaddr, to);
            ^

      This was done with a random config that happened to include DAX support.

      This patch has only been compile tested.

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Reported-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Cc: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Cc: Matthew Wilcox <willy@xxxxxxxxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 1fd4e5c347bfcef6ae2c31f6a2abce00f6ecaa3f
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 15:28:35 2015 -0700

      lib/Kconfig: ZLIB_DEFLATE must select BITREVERSE

      lib/built-in.o: In function `__bitrev32':
      deftree.c:(.text+0x1e799): undefined reference to `byte_rev_table'
      deftree.c:(.text+0x1e7a0): undefined reference to `byte_rev_table'
      deftree.c:(.text+0x1e7b4): undefined reference to `byte_rev_table'
      deftree.c:(.text+0x1e7c1): undefined reference to `byte_rev_table'

      Anything which uses bitrevX() has to select BITREVERSE, to grab
      lib/bitrev.o.

      Reported-by: Jim Davis <jim.epost@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 0f90cc6609c72b0bdf2aad0cb0456194dd896e19
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 15:28:32 2015 -0700

      mm, dax: fix DAX deadlocks

      The following two locking commits in the DAX code:

      commit 843172978bb9 ("dax: fix race between simultaneous faults")
      commit 46c043ede471 ("mm: take i_mmap_lock in unmap_mapping_range() for 
DAX")

      introduced a number of deadlocks and other issues which need to be fixed
      for the v4.3 kernel.  The list of issues in DAX after these commits
      (some newly introduced by the commits, some preexisting) can be found
      here:

        https://lkml.org/lkml/2015/9/25/602 (Subject: "Re: [PATCH] dax: fix 
deadlock in __dax_fault").

      This undoes most of the changes introduced by those two commits,
      essentially returning us to the DAX locking scheme that was used in
      v4.2.

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Dan Williams <dan.j.williams@xxxxxxxxx>
      Tested-by: Dave Chinner <dchinner@xxxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxxx>
      Cc: "Kirill A. Shutemov" <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Matthew Wilcox <matthew.r.wilcox@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 424cdc14138088ada1b0e407a2195b2783c6e5ef
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Thu Oct 15 15:28:29 2015 -0700

      memcg: convert threshold to bytes

      page_counter_memparse() returns pages for the threshold, while
      mem_cgroup_usage() returns bytes for memory usage.  Convert the
      threshold to bytes.

      Fixes: 3e32cb2e0a12b6915 ("memcg: rename cgroup_event to 
mem_cgroup_event").
      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Cc: Johannes Weiner <hannes@xxxxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8d740a37b92f3d4a0435fe263b32efc7f61c5efb
  Author: Riku Voipio <riku.voipio@xxxxxxxxxx>
  Date:   Thu Oct 15 15:28:26 2015 -0700

      builddeb: remove debian/files before build

      Commit 3716001bcb7f ("deb-pkg: add source package") added the ability to
      create a debian changelog file.  This exposed that previously the
      builddeb script hasn't cleared debian/files between builds.

      As debian/files keeps accumulating entries, the changes file will end up
      growing indefinelty.  With outdated entries in debian/files, builddeb
      script will exit with failure.  This regression impacts those who use
      "make deb-pkg" target to build kernel into a .deb package and never use
      "make mrproper" or other means to clean kernel tree from generated
      directories.

      To fix the regression, remove debian/files before starting build and in
      the generated clean rule.

      Fixes: 3716001bcb7f ("deb-pkg: add source package")
      Signed-off-by: Riku Voipio <riku.voipio@xxxxxxxxxx>
      Reported-by: Doug Smythies <dsmythies@xxxxxxxxx>
      Tested-by: Doug Smythies <dsmythies@xxxxxxxxx>
      Tested-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
      Acked-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: Michal Marek <mmarek@xxxxxxx>
      Cc: maximilian attems <maks@xxxxxxx>
      Cc: Chris J Arges <chris.j.arges@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 063d99b4fa762cbae9324dbbf9b6bff4b3a8cfdc
  Author: Michal Hocko <mhocko@xxxxxxxx>
  Date:   Thu Oct 15 15:28:24 2015 -0700

      mm, fs: obey gfp_mapping for add_to_page_cache()

      Commit 6afdb859b710 ("mm: do not ignore mapping_gfp_mask in page cache
      allocation paths") has caught some users of hardcoded GFP_KERNEL used in
      the page cache allocation paths.  This, however, wasn't complete and
      there were others which went unnoticed.

      Dave Chinner has reported the following deadlock for xfs on loop device:
      : With the recent merge of the loop device changes, I'm now seeing
      : XFS deadlock on my single CPU, 1GB RAM VM running xfs/073.
      :
      : The deadlocked is as follows:
      :
      : kloopd1: loop_queue_read_work
      :       xfs_file_iter_read
      :       lock XFS inode XFS_IOLOCK_SHARED (on image file)
      :       page cache read (GFP_KERNEL)
      :       radix tree alloc
      :       memory reclaim
      :       reclaim XFS inodes
      :       log force to unpin inodes
      :       <wait for log IO completion>
      :
      : xfs-cil/loop1: <does log force IO work>
      :       xlog_cil_push
      :       xlog_write
      :       <loop issuing log writes>
      :               xlog_state_get_iclog_space()
      :               <blocks due to all log buffers under write io>
      :               <waits for IO completion>
      :
      : kloopd1: loop_queue_write_work
      :       xfs_file_write_iter
      :       lock XFS inode XFS_IOLOCK_EXCL (on image file)
      :       <wait for inode to be unlocked>
      :
      : i.e. the kloopd, with it's split read and write work queues, has
      : introduced a dependency through memory reclaim. i.e. that writes
      : need to be able to progress for reads make progress.
      :
      : The problem, fundamentally, is that mpage_readpages() does a
      : GFP_KERNEL allocation, rather than paying attention to the inode's
      : mapping gfp mask, which is set to GFP_NOFS.
      :
      : The didn't used to happen, because the loop device used to issue
      : reads through the splice path and that does:
      :
      :       error = add_to_page_cache_lru(page, mapping, index,
      :                       GFP_KERNEL & mapping_gfp_mask(mapping));

      This has changed by commit aa4d86163e4 ("block: loop: switch to VFS
      ITER_BVEC").

      This patch changes mpage_readpage{s} to follow gfp mask set for the
      mapping.  There are, however, other places which are doing basically the
      same.

      lustre:ll_dir_filler is doing GFP_KERNEL from the function which
      apparently uses GFP_NOFS for other allocations so let's make this
      consistent.

      cifs:readpages_get_pages is called from cifs_readpages and
      __cifs_readpages_from_fscache called from the same path obeys mapping
      gfp.

      ramfs_nommu_expand_for_mapping is hardcoding GFP_KERNEL as well
      regardless it uses mapping_gfp_mask for the page allocation.

      ext4_mpage_readpages is the called from the page cache allocation path
      same as read_pages and read_cache_pages

      As I've noticed in my previous post I cannot say I would be happy about
      sprinkling mapping_gfp_mask all over the place and it sounds like we
      should drop gfp_mask argument altogether and use it internally in
      __add_to_page_cache_locked that would require all the filesystems to use
      mapping gfp consistently which I am not sure is the case here.  From a
      quick glance it seems that some file system use it all the time while
      others are selective.

      Signed-off-by: Michal Hocko <mhocko@xxxxxxxx>
      Reported-by: Dave Chinner <david@xxxxxxxxxxxxx>
      Cc: "Theodore Ts'o" <tytso@xxxxxxx>
      Cc: Ming Lei <ming.lei@xxxxxxxxxxxxx>
      Cc: Andreas Dilger <andreas.dilger@xxxxxxxxx>
      Cc: Oleg Drokin <oleg.drokin@xxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit fbc61a26e6b7a2ebc399559ea22df4a35ac05fcb
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Fri Sep 18 14:09:00 2015 -0700

      arm64: debug: Fix typo in debug-monitors.c

      Fix handers to handlers.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c8d71d08aa23679f56e7072358383442c6ede352
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:08 2015 +0100

      netfilter: ipv4: whitespace around operators

      This patch cleanses whitespace around arithmetical operators.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 24cebe3f29884bb8f4581c68ba7a124ade0099b0
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:07 2015 +0100

      netfilter: ipv4: code indentation

      Use tabs instead of spaces to indent code.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6c28255b46823b37d220bbb2fddfb9b23dda2fd4
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:06 2015 +0100

      netfilter: ipv4: function definition layout

      Use tabs instead of spaces to indent second line of parameters in
      function definitions.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 27951a01688c012b6c77377703fcce90cfe8b1b7
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:05 2015 +0100

      netfilter: ipv4: ternary operator layout

      Correct whitespace layout of ternary operators in the netfilter-ipv4
      code.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 19f0a602014c0dd7f1ad9e458618c333a668b15a
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:17:04 2015 +0100

      netfilter: ipv4: label placement

      Whitespace cleansing: Labels should not be indented.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 008027c31d57a22bd80dda5acc95b037634eee0f
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 9 20:45:42 2015 +0200

      netfilter: turn NF_HOOK into an inline function

      A recent change to the dst_output handling caused a new warning
      when the call to NF_HOOK() is the only used of a local variable
      passed as 'dev', and CONFIG_NETFILTER is disabled:

      net/ipv6/ip6_output.c: In function 'ip6_output':
      net/ipv6/ip6_output.c:135:21: warning: unused variable 'dev' 
[-Wunused-variable]

      The reason for this is that the NF_HOOK macro in this case does
      not reference the variable at all, and the call to dev_net(dev)
      got removed from the ip6_output function. To avoid that warning now
      and in the future, this changes the macro into an equivalent
      inline function, which tells the compiler that the variable is
      passed correctly but still unused.

      The dn_forward function apparently had the same problem in
      the past and added a local workaround that no longer works
      with the inline function. In order to avoid a regression, we
      have to also remove the #ifdef from decnet in the same patch.

      Fixes: ede2059dbaf9 ("dst: Pass net into dst->output")
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 81b4325eba6baae80a70d1af866278af38fb6cdd
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Tue Oct 13 14:33:28 2015 +0200

      netfilter: nf_queue: remove rcu_read_lock calls

      All verdict handlers make use of the nfnetlink .call_rcu callback
      so rcu readlock is already held.

      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit ed78d09d59ba9764b7454e8e1ccbb0072a55b6d7
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Tue Oct 13 14:33:27 2015 +0200

      netfilter: make nf_queue_entry_get_refs return void

      We don't care if module is being unloaded anymore since hook unregister
      handling will destroy queue entries using that hook.

      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 2ffbceb2b08f8ca0496c54a9ebcd11d25275954e
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Tue Oct 13 14:33:26 2015 +0200

      netfilter: remove hook owner refcounting

      since commit 8405a8fff3f8 ("netfilter: nf_qeueue: Drop queue entries on
      nf_unregister_hook") all pending queued entries are discarded.

      So we can simply remove all of the owner handling -- when module is
      removed it also needs to unregister all its hooks.

      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 34198710f55b5f359f43e67d9a08fe5aadfbca1b
  Author: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 13:31:24 2015 +0100

      ASoC: Add info callback for SX_TLV controls

      SX_TLV controls are intended for situations where the register behind
      the control has some non-zero value indicating the minimum gain
      and then gains increasing from there and eventually overflowing through
      zero.

      Currently every CODEC implementing these controls specifies the minimum
      as the non-zero value for the minimum and the maximum as the number of
      gain settings available.

      This means when the info callback subtracts the minimum value from the
      maximum value to calculate the number of gain levels available it is
      actually under reporting the available levels. This patch fixes this
      issue by adding a new snd_soc_info_volsw_sx callback that does not
      subtract the minimum value.

      Fixes: 1d99f2436d0d ("ASoC: core: Rework SOC_DOUBLE_R_SX_TLV add 
SOC_SINGLE_SX_TLV")
      Signed-off-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Brian Austin <brian.austin@xxxxxxxxxx>
      Tested-by: Brian Austin <brian.austin@xxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit e30b7577bf1d338ca8a273bd2f881de5a41572b7
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Wed Oct 7 17:27:17 2015 +0200

      rbd: use writefull op for object size writes

      This covers only the simplest case - an object size sized write, but
      it's still useful in tiering setups when EC is used for the base tier
      as writefull op can be proxied, saving an object promotion.

      Even though updating ceph_osdc_new_request() to allow writefull should
      just be a matter of fixing an assert, I didn't do it because its only
      user is cephfs.  All other sites were updated.

      Reflects ceph.git commit 7bfb7f9025a8ee0d2305f49bf0336d2424da5b5b.

      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Alex Elder <elder@xxxxxxxxxx>

  commit 0d9fde4fc8f59a6bd316559d267a936b0737d05a
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Wed Oct 7 16:09:35 2015 +0200

      rbd: set max_sectors explicitly

      Commit 30e2bc08b2bb ("Revert "block: remove artifical max_hw_sectors
      cap"") restored a clamp on max_sectors.  It's now 2560 sectors instead
      of 1024, but it's not good enough: we set max_hw_sectors to rbd object
      size because we don't want object sized I/Os to be split, and the
      default object size is 4M.

      So, set max_sectors to max_hw_sectors in rbd at queue init time.

      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Alex Elder <elder@xxxxxxxxxx>

  commit 3c6531c7461b80c18284d43b59791c60cd67582f
  Author: Thomas Hebb <tommyhebb@xxxxxxxxx>
  Date:   Tue Oct 6 22:56:37 2015 +0200

      pinctrl: berlin: fix BG2CD field widths

      The previous register layout was incorrect, many of the fields having
      fewer bits than were needed to represent all their modes. The new layout
      is taken from the bootloader source of a BG2CD device.

      Signed-off-by: Thomas Hebb <tommyhebb@xxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 30cefeacec3e289c00128f28b831fb251650eea6
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Fri Sep 25 12:06:02 2015 -0700

      gpio: omap: fix static checker warning

      This patch fixes below static checker warning by changing
      type of irq field in struct gpio_bank from u16 to int.

      drivers/gpio/gpio-omap.c:1191 omap_gpio_probe()
        warn: assigning (-6) to unsigned variable 'bank->irq'

      drivers/gpio/gpio-omap.c
        1188          bank->irq = platform_get_irq(pdev, 0);
        1189          if (bank->irq <= 0) {

      bank->irq is u16.

        1190                  if (!bank->irq)
        1191                          bank->irq = -ENXIO;

      Does not work.

        1192                  if (bank->irq != -EPROBE_DEFER)

      Does not work.

        1193                          dev_err(dev,
        1194                                  "can't get irq resource 
ret=%d\n", bank->irq);
        1195                  return bank->irq;
        1196          }

      Fixes: commit 89d18e3af8b9: "gpio: omap: switch to use platform_get_irq"
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c0ff971ef9acacd4d2caa508e444edad958dead9
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Thu Oct 15 19:42:23 2015 +0200

      x86/ioapic: Disable interrupts when re-routing legacy IRQs

      A sporadic hang with consequent crash is observed when booting Hyper-V 
Gen1
      guests:

       Call Trace:
        <IRQ>
        [<ffffffff810ab68d>] ? trace_hardirqs_off+0xd/0x10
        [<ffffffff8107b616>] queue_work_on+0x46/0x90
        [<ffffffff81365696>] ? add_interrupt_randomness+0x176/0x1d0
        ...
        <EOI>
        [<ffffffff81471ddb>] ? _raw_spin_unlock_irqrestore+0x3b/0x60
        [<ffffffff810c295e>] __irq_put_desc_unlock+0x1e/0x40
        [<ffffffff810c5c35>] irq_modify_status+0xb5/0xd0
        [<ffffffff8104adbb>] mp_register_handler+0x4b/0x70
        [<ffffffff8104c55a>] mp_irqdomain_alloc+0x1ea/0x2a0
        [<ffffffff810c7f10>] irq_domain_alloc_irqs_recursive+0x40/0xa0
        [<ffffffff810c860c>] __irq_domain_alloc_irqs+0x13c/0x2b0
        [<ffffffff8104b070>] alloc_isa_irq_from_domain.isra.1+0xc0/0xe0
        [<ffffffff8104bfa5>] mp_map_pin_to_irq+0x165/0x2d0
        [<ffffffff8104c157>] pin_2_irq+0x47/0x80
        [<ffffffff81744253>] setup_IO_APIC+0xfe/0x802
        ...
        [<ffffffff814631c0>] ? rest_init+0x140/0x140

      The issue is easily reproducible with a simple instrumentation: if
      mdelay(10) is put between mp_setup_entry() and mp_register_handler() calls
      in mp_irqdomain_alloc() Hyper-V guest always fails to boot when re-routing
      IRQ0. The issue seems to be caused by the fact that we don't disable
      interrupts while doing IOPIC programming for legacy IRQs and IRQ0 actually
      happens.

      Protect the setup sequence against concurrent interrupts.

      [ tglx: Make the protection unconditional and not only for legacy
                interrupts ]

      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444930943-19336-1-git-send-email-vkuznets@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1d48fb6e4aeec5946574712c512c12a053ce82c0
  Author: Antoine Ténart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 23:31:41 2015 +0200

      pinctrl: berlin: fix my family name spelling

      My family name contained an accent when I submitted the
      Berlin pinctrl series in the first place. There was an
      encoding issue when the series was applied. Fix this.

      Signed-off-by: Antoine Ténart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      [Je me rendis tous les accents aigus]
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 7ba6e4ef76c7e43101bd5e0f8987c11a8ed0d325
  Author: Bard Liao <bardliao@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:21:32 2015 +0800

      ASoC: rt298: correct index default value

      Some of the default value on rt298_index_def are incorrect. Change
      them to the correct value.

      Signed-off-by: Bard Liao <bardliao@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 9c160bbd6c298c8b4f76b245e26f78bd4bba3993
  Author: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 23:31:39 2015 +0200

      pinctrl: berlin: add explicit dependency on OF

      Berlin pinctrl drivers depends on CONFIG_OF. This patch adds
      this dependency explicitly.

      Signed-off-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d02f997d61b30ef6f89ad2f2dc4d41613c8b8b88
  Author: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 23:31:37 2015 +0200

      pinctrl: berlin: select the pinctrl driver according to the SoC used

      This patch prepares to remove the pinctrl driver selection from the
      mach-berlin Kconfig. To do so, bool is replaced by def_bool.

      Signed-off-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c55a7746111144b0fa2c27dd28098f14d4ca79ee
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:37:10 2015 +0800

      pinctrl: dt-binding: document berlin4ct SoC pinctrl

      Add berlin4ct to existing berlin pinctrl device tree binding.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Acked-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4be3158abe1e02d24f82b34101e41d662fae2185
  Merge: 125ecf4 56ade8f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 07:15:31 2015 -0700

      Merge branch 'mlxsw-spectrum'

      Jiri Pirko says:

      ====================
      mlxsw: Driver update, add initial support for Spectrum ASIC

      Purpose of this patchset is to introduce initial support for Mellanox
      Spectrum ASIC, including L2 bridge forwarding offload.

      The only non-mlxsw patch in this patchset is the first one, introducing
      pre-change upper notifier. That is used in last patch to ensure ports of
      single ASIC are not bridged into multiple bridges, as that scenario is
      currently not supported by driver.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 56ade8fe3fe1e134783f61d164305107ae01030f
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:37 2015 +0200

      mlxsw: spectrum: Add initial support for Spectrum ASIC

      Add support for new generation Mellanox Spectrum ASIC, 10/25/40/50 and
      100Gb/s Ethernet Switch.

      The initial driver implements bridge forwarding offload including
      bridge internal VLAN support, FDB static entries, FDB learning and
      HW ageing including their setup.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a4feea74cd7a8f12d9fae67014533a4220135760
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:36 2015 +0200

      mlxsw: reg: Add Switch Port VLAN MAC Learning register definition

      Since we currently do not support the offloading of 802.1D bridges, we
      need to be able to let the device know it should not learn MAC addresses
      on specific {Port, VID} pairs.

      Add the SPVMLR register, which controls the learning enablement of
      {Port, VID} pairs.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e534a56a317fa4e55419cc255d6af2683288d71c
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:35 2015 +0200

      mlxsw: reg: Add Switch Filtering Database Aging Time register definition

      Add SFDAT which is used to control switch ageing time.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f65da742d15462786533cf3ea58335aa32e3daa
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:34 2015 +0200

      mlxsw: reg: Add Switch Virtual-Port Enabling register definition

      In order for a port to support {Port, VID} to FID mapping it needs to be
      configured to a virtual port mode (as opposed to VLAN mode).

      Add the SVPE register, which enables port virtualization.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 647902397663468c2feefa9cd8097e194802a0b3
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:33 2015 +0200

      mlxsw: reg: Add Switch VID to FID Allocation register definition

      An incoming packet can be classified into a filtering identifer (FID)
      based on its VID or incoming port and VID ({Port, VID}).

      Add the SVFA register, which controls this mapping.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f1fb693a0875d0d1510cf8e84d35df2661f5a38f
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:32 2015 +0200

      mlxsw: reg: Add Switch FID Management register definition

      Filtering identifiers (FIDs) are unique identifers of bridge instances
      in the hardware.

      Add the SFMR register, which is responsible for the creation and
      configuration of these FIDs.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e059436999d797bbdb36ec41b6f6890a569cbf94
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:31 2015 +0200

      mlxsw: reg: Add shared buffer configuration registers definitions

      Add definitions of SBPR, SBCM, SBPM, SBMM and PBMC registers that are
      used to configure shared buffers.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b2e345f9a454f6e435f1a61b02f0e4f0125b94e3
  Author: Elad Raz <eladr@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:30 2015 +0200

      mlxsw: reg: Add Switch Port VID and Switch Port VLAN Membership registers 
definitions

      Add SPVID and SPVM registers responsible for default port VID
      configuration and VLAN membership of a port.

      Signed-off-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f5d88f589297a9b5fb110bf01d621d8c09fb7512
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:29 2015 +0200

      mlxsw: reg: Add Switch FDB Notification register definition

      Add SFN register which is used to poll for newly added and aged-out FDB
      entries.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 236033b33c09ea9e34ce320d5cf9ef527077d7d5
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:28 2015 +0200

      mlxsw: reg: Add Switch Filtering Database register definition

      Add the SFD register which is responsible for filtering database
      manipulation, including static and dynamic FDB entries.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d64b1592535e390cdc0605a5b8d4b6665be47003
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:27 2015 +0200

      mlxsw: item: Add MLXSW_ITEM_BUF_INDEXED helper

      Add missing item helper which allows to access char bufs on multiple
      offsets. This is needed by SFD and SFN register definitions.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b0989b5bcac950c05d72dee5f6dcad38d355b3f
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:26 2015 +0200

      mlxsw: item: Make src arg of memcpy_to helper const

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 12fd35ab8af9fe32fce6b36881461d6f62408f70
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:25 2015 +0200

      mlxsw: cmd: Introduce FID-offset flooding tables

      Packets destined to offloaded netdevs will be classified to FIDs in the
      device and flooded in case of BUM.

      The flooding table used is of type FID-offset, which allows one to
      create different flooding domains for different FIDs and specify the
      offset in the flooding table for each FID (not necessarily equal to FID
      or VID).

      Add support for this flooding table type, by exposing the configuration
      of the number of tables from this type and their size.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 453b6a8dd8338d692770bda89a52bc71c8fea2b8
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:24 2015 +0200

      mlxsw: cmd: Introduce per-FID flooding tables

      In the newly introduced Spectrum switch ASIC, packets destined to not
      offloaded netdevs will be classified to special FIDs (vFIDs) in the
      device and flooded to the CPU port.

      The flooding table used is of type per-FID, which allows one to create
      different flooding domains for different vFIDs.

      While using a simple single-entry flood table is certainly sufficient at
      this point, we do plan to offload 802.1D bridges involving VLAN
      interfaces, thus making this change necessary.

      Add support for this flooding table type, by exposing the configuration
      of the number of tables from this type and their size.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bc2055f878acb1fbbb3f3e7cb851f2e318def010
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:23 2015 +0200

      mlxsw: Enable configuration of flooding domains

      As part of the introduction of L2 offloads, allow different ports to
      join/leave the flooding domain, according to user configuration.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 573c7ba006edbecff0714db651dd3602b9d0a6a0
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 16 14:01:22 2015 +0200

      net: introduce pre-change upper device notifier

      This newly introduced netdevice notifier is called before actual change
      upper happens. That provides a possibility for notifier handlers to
      know upper change will happen and react to it, including possibility to
      forbid the change. That is valuable for drivers which can check if the
      upper device linkage is supported and forbid that in case it is not.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bb3ba9558af081c15df2677e17d31861ee689f7b
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:37:08 2015 +0800

      pinctrl: berlin: add the berlin4ct pinctrl driver

      Add the pin-controller driver for Marvell Berlin BG4CT SoC, with 
definition
      of its groups and functions. This uses the core Berlin pinctrl driver.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Acked-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 2df26ef7da6f1960622f37c2a7c57d238603f0d6
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:37:07 2015 +0800

      pinctrl: berlin: Make berlin pinctrl driver visible if COMPILE_TEST=y

      It is good to allow berlin pinctrl driver to build with COMPILE_TEST, so
      make the it menu visible when compile-testing.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Acked-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d5c79fcb193ff825e5d5759cdbbb4a16385fb08f
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Oct 16 15:37:06 2015 +0800

      pinctrl: berlin: introduce berlin_pinctrl_probe_regmap()

      This is to prepare for the next berlin4ct support, where we won't use
      simple-mfd any more.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>
      Acked-by: Antoine Tenart <antoine.tenart@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 77f3228f771506bac4b1308571a62c769552f8f8
  Author: Mark Salyzyn <salyzyn@xxxxxxxxxxx>
  Date:   Tue Oct 13 14:30:51 2015 -0700

      arm64: AArch32 user space PC alignment exception

      ARMv7 does not have a PC alignment exception. ARMv8 AArch32
      user space however can produce a PC alignment exception. Add
      handler so that we do not dump an unexpected stack trace in
      the logs.

      Signed-off-by: Mark Salyzyn <salyzyn@xxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 56fd16cabac9cd8f15e2902898a9d0cc96e2fa70
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:50:22 2015 +0200

      timekeeping: Increment clock_was_set_seq in timekeeping_init()

      timekeeping_init() can set the wall time offset, so we need to
      increment the clock_was_set_seq counter. That way hrtimers will pick
      up the early offset immediately. Otherwise on a machine which does not
      set wall time later in the boot process the hrtimer offset is stale at
      0 and wall time timers are going to expire with a delay of 45 years.

      Fixes: 868a3e915f7f "hrtimer: Make offset update smarter"
      Reported-and-tested-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Stefan Liebler <stli@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>

  commit 125ecf4b5994f17cb581af399933d0bd0b153080
  Merge: 51161aa d1d3951
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 06:41:10 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-16

      This series contains updates to e1000, e1000e, igb, igbvf, ixgbe, ixgbevf,
      i40e, i40evf and fm10k.

      Alex Duyck fixes the polling routine for i40e/i40evf were the NAPI budget
      for receive cleanup was being rounded up to 1 but the netpoll call was
      expecting no Rx to be processed as the budget passed was 0.  Also cleaned
      up IN_NETPOLL flag that was not adding any value due to the receive
      cleanup was handled in NAPI.  Added support for netpoll for i40evf as
      well.

      Jesse updates all of our drivers to use napi_complete_done() instead of
      napi_complete(), which allows us to use
      /sys/class/net/ethX/gro_flush_timeout.  Added ethtool support to control
      and report the new Interrupt Limit register, since the XL710 hardware
      has a different interrupt moderation design that can support a limit of
      total interrupts per second per vector.

      Shannon cleans up startup log entries to cut down the number by putting
      a couple behind debug flags and combining others into single line.  Added
      support to enable/disable printing VEB statistics via ethtool.

      Jingjing fixes a compile issue by adding const to functions that return
      strings that are not going to be modified.

      Greg Rose cleans up defines that were not used and were causing customer
      confusion.

      Greg Bowers adds support for setting a new bit in the Set Local LLDP MIB
      admin queue command Type field.

      Mitch fixes an issue where vlan_features field was set to the same value
      as netdev features field, but before the features were actually being
      set up, leaving the vlan_features empty.  Resolve the issue by setting
      up the netdev features first, then mask out the VLAN feature bits when
      assigning vlan_features.  Fixed VF init timing, where in some instances
      the VFs would fail to initialize the first time you loaded the driver.
      To correct this, increased the delay time for the init task and wait
      longer before giving up.

      v2: fix missing space in function header comment in patch 3, based on
          feedback from Sergei Shtylyov.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7db743c6d8bb7a08396a0ea3084fb9f8ebccc577
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Fri Oct 16 14:34:50 2015 +0100

      arm64: Minor coding style fixes for kc_offset_to_vaddr and 
kc_vaddr_to_offset

      These were introduced by commit 03875ad52fdd (arm64: add
      kc_offset_to_vaddr and kc_vaddr_to_offset macro).

      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 400143e45d39fcedb5106c3aa212746a80a61f7c
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:06 2015 +0530

      ath10k: remove htc polling for tx completion

      Since polling for tx completion is handled whenever target to host
      messages are received, removing the unnecessary polling mechanism for
      send completion at HTC level.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0da64f19f01a6dabc4a55c1ee9cef430fcb47f4a
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:05 2015 +0530

      ath10k: remove unused dl_is_polled

      Since polling for received messages not supported, remove unused
      dl_is_polled.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a70587b3389ae4a97f2b51153cc86b4c1769dcf5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:04 2015 +0530

      ath10k: configure copy engine 5 for HTT messages

      Currently target to host (T2H) HTT messages are received at copy engine 1.
      These messages are processed by HTC layer in both host and target.
      To avoid HTC level processing overhead in both host and target,
      the unused copy engine 5 is being used for receiving HTT T2H messages.
      This will speedup the receive data processing as well as htt tx 
completion.
      Hence host and target copy engine configuration tables are updated
      to enable CE5 pipe. The in-direction HTT mapping is now pointing to CE5
      for all HTT T2H.

      Moreover HTT send completion messages are polled from HTC handler
      as CE 4 is not interrupt-driven. For faster tx completion, CE4 polling
      needs to be done whenever CE pipe which transports HTT Rx (target->host)
      is processed. This avoids overhead of polling HTT messages from HTC
      layer. Servicing CE 4 faster is helping to solve "failed to transmit
      packet, dropping: -105".

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 3f0f7ed420594cc6b7eb8b43294a8ac6815a4be5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:03 2015 +0530

      ath10k: export htt tx rx handlers

      Some special copy engines delivers messages directly to HTT by
      bypassing HTC layer. Hence exporting tx_completion and rx_handler
      for delivering the data to HTT layer.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 9d9bdbb0c4099fea202ceee14000704c63338cce
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:02 2015 +0530

      ath10k: register per copy engine receive callbacks

      Register receive callbacks for every copy engines (CE) separately
      instead of having common receive handler. Some of the copy engines
      receives different type of messages (i.e HTT/HTC/pktlog) from target.
      Hence to service them accordingly, register per copy engine receive
      callbacks.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0e5b2950912e2925b8fe1666c5aa14199c809810
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:01 2015 +0530

      ath10k: register per copy engine send completion callbacks

      Register send completion callbacks for every copy engines (CE) separately
      instead of having common completion handler. Since some of the copy
      engines delivers different type of messages, per-CE callbacks help to
      service them differently.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit aed1dc8231a035af3e7ef3f7ce1bd4ed2a13db31
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 18:27:00 2015 +0530

      ath10k: export htc tx rx handlers

      Export HTC layer tx and rx handlers. This will be used by HIF layer
      for per-CE data processing. Instead of callback mechanism, HIF will
      call appropriate upper layers API directly.

      Reviewed-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit fa548237321c4469e80741f773c4f5935a68a998
  Merge: 25cb62b 62fcce9 a98f1b7 8e601a9
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Oct 16 14:32:27 2015 +0200

      Merge branches 'acpica', 'pm-domains' and 'pm-cpufreq'

      * acpica:
        ACPICA: Tables: Fix FADT dependency regression

      * pm-domains:
        PM / Domains: Fix validation of latency constraints in genpd governor

      * pm-cpufreq:
        cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL)

  commit 3b93baf56dafa2d27e4fc227990dcd3ffeb10510
  Merge: a71225e 54fa97e
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 14:22:15 2015 +0200

      Merge tag 'msi-map-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/maz/arm-platforms into irq/core

      Support for msi-map, and msi-parent update from Marc Zyngier:

      - New map-map property to describe the remapping of requester-ids,
        and the routing of MSIs to controllers
      - New hooks to make MSI domains per-device if required
      - Extension of msi-parent to provide sideband information
      - Extensive documentation for both msi-map and msi-parent

  commit ccd63ce471c9b69663783e919ca4dba9967cd690
  Author: Marc Gonzalez <marc_gonzalez@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:59:18 2015 +0200

      clocksource/drivers/tango_xtal: Add new timer for Tango SoCs

      Sigma Designs Tango platforms provide a 27 MHz crystal oscillator.
      Use it for clocksource, sched_clock, and delay_timer.

      Signed-off-by: Marc Gonzalez <marc_gonzalez@xxxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 54fa97eeb9e22b47d68b67ee00987afa7fbc2178
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 14:43:06 2015 +0100

      PCI/MSI: Allow the MSI domain to be device-specific

      So far, we've always considered that for a given PCI device, its
      MSI controller was either set by the architecture-specific
      pcibios hook, or simply inherited from the host bridge.

      This doesn't cover things like firmware-defined topologies like
      msi-map (DT) or IORT (ACPI), which can provide information about
      which MSI controller to use on a per-device basis.

      This patch adds the necessary hook into the MSI code to allow this
      feature, and provides the msi-map functionnality as a first
      implementation.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 098259eb16675a83e1d6ea31e06dc3ec152810a2
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 10:19:32 2015 +0100

      PCI: Add per-device MSI domain hook

      So far, we have considered that the MSI domain for a device was
      either set via the architecture-dependent pcibios implementation
      or inherited from the host bridge.

      As we're about to break that assumption, add pci_dev_msi_domain
      which is the equivalent of pci_host_bridge_msi_domain, but for
      a single device.

      Other than moving things around a bit, this patch on its own
      has no effect.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 82b9b4243c6d99d9e38087fa89183aa7479185e9
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 14:38:55 2015 +0100

      of/irq: Use the msi-map property to provide device-specific MSI domain

      While msi-parent is used to point to the MSI controller that
      works for all the devices behind a root complex, it doesn't
      allow configurations where each individual device can be routed
      to a separate MSI controller.

      The msi-map property provides this flexibility (and much more),
      so let's add a utility function that parses it, and return the
      corresponding MSI domain.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit a251b263346e38b9fafebeb49ada9ce894882616
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Thu Oct 1 17:05:45 2015 +0100

      of/irq: Split of_msi_map_rid to reuse msi-map lookup

      The msi-map property is also used to identify the MSI controller
      as a form of grown-up msi-parent property.

      Looking it up is complicated enough, and since of_msi_map_rid
      already implements this, let's turn it into an internal utility
      function. We'll put that to good use later on.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit deac7fc1c87f24099d7e15d8b662446497f57465
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Sep 18 14:07:40 2015 +0100

      irqchip/gic-v3-its: Parse new version of msi-parent property

      Now that 126b16e2ad98 ("Docs: dt: add generic MSI bindings")
      has made it into the tree, the time has come to get rid of the
      old hack, and to parse msi-parent in its full glory.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit c8d175883e0db09ce94b8b47bb2432b787149a6b
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Sep 18 14:07:40 2015 +0100

      PCI/MSI: Use of_msi_get_domain instead of open-coded "msi-parent" parsing

      Now that we have a function that implements the complexity of the
      "msi-parent" property parsing, switch to that.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 61c08240a103000b75dcf7ef2cf03d552aa91fa3
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Sep 18 14:07:40 2015 +0100

      of/irq: Use of_msi_get_domain instead of open-coded "msi-parent" parsing

      Now that we have a function that implements the complexity of the
      "msi-parent" property parsing, switch to that.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 48ae34fb39b0c0cfc76275e844fba5b0b04fa49e
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Sep 18 14:07:40 2015 +0100

      of/irq: Add support code for multi-parent version of "msi-parent"

      Since 126b16e2ad98 ("Docs: dt: add generic MSI bindings"),
      the definition of "msi-parent" has evolved, while maintaining
      some degree of compatibility. It can now express multiple MSI
      controllers as parents, as well as some sideband data being
      communicated to the controller.

      This patch adds the parsing of the property, iterating over
      the multiple parents until a suitable irqdomain is found.
      It can also fallback to the original parsing if the old
      binding is detected.

      This support code gets used in the subsequent patches.

      Suggested-by: Robin Murphy <robin.murphy@xxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit ccf91e68a4357e7b65a3f1f13f8af2b767213575
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Thu Oct 8 15:10:50 2015 -0700

      irqchip/gic-v3-its: Add handling of PCI requester id.

      Replace open coded generation PCI/MSI requester id with call to the
      new function pci_msi_domain_get_msi_rid() which applies the "msi-map"
      to the id value.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit b6eec9b717d4dcb39ef024b8a3b619a32468b01e
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Thu Oct 8 15:10:49 2015 -0700

      PCI/MSI: Add helper function pci_msi_domain_get_msi_rid().

      Add pci_msi_domain_get_msi_rid() to return the MSI requester id (RID).
      Initially needed by gic-v3 based systems. It will be used by follow on
      patch to drivers/irqchip/irq-gic-v3-its-pci-msi.c

      Initially supports mapping the RID via OF device tree.  In the future,
      this could be extended to use ACPI _IORT tables as well.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit d1d39516e41d7ad107e807ebeee1519c412bb0e3
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:44 2015 -0400

      i40e/i40evf: Bump i40e to 1.3.34 and i40evf to 1.3.21

      Bump.

      Change-ID: I7ec818a507554648675b9b245ced9e6b6bd9ed4e
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 628f096d8d244f54c3595a478b6e672cdb6c04ed
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:43 2015 -0400

      i40e: increase AQ work limit

      With 64 VFs, we can easily overwhelm the AQ on the PF if we have too low
      a limit on the number of AQ requests. This leads to ARQ overflow errors,
      and occasionally VFs that fail to initialize.

      Since we really only hit this condition on initial VF driver load, the
      requests that we process are lightweight, so this extra work doesn't
      cause problems for the PF driver.

      Change-ID: I620221520d8af987df6ace9ba938ffaf22107681
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3f7e5c330e19da2ac822ea1d02b744a24497e61b
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:42 2015 -0400

      i40evf: relax and stagger init timing a bit

      On some devices, in some systems, in some configurations, the VFs would
      fail to initialize the first time you loaded the driver.

      To correct this, increase the delay time for the init task slightly, and
      wait longer before giving up.

      If we enable VFs and load the VF driver in the same kernel as the PF
      driver, we can totally overwhelm the PF driver with AQ requests because
      all of the instances try to initialize at the same time.

      To help alleviate this, stagger the initial scheduling of the init task
      using the PCIe function as a multiplier. We mask off the function to
      only three bits so no instance has to wait too long.

      With these two changes, initializing 128 VFs on a single device goes
      from four minutes to just a few seconds.

      Change-ID: If3d8720c1c4e838ab36d8781d9ec295a62380936
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 48becae60f7e461b4b204e6608dc6beebe6c8aff
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:41 2015 -0400

      i40e: Recognize 1000Base_T_Optical phy type when link is up

      1000Base_T_Optical got added to the function that figures out what
      is supported when link is down but not when link is up. Add it in there
      too so that we display the correct information.

      Change-ID: I85ebcdfa7c02d898c44c673b1500552a53c8042e
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit cc7e406cb967ccc84cd2141398bba24b07d68788
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:40 2015 -0400

      i40evf: correctly populate vlan_features

      The vlan_features field was correctly being set to the same value as the
      netdev features field. However, this was being done before the features
      were actually being set up, leaving the vlan_features empty.

      Also, after a reset, vlan_features will be incorrectly assigned the
      previous netdev feature flags, which can contain VLAN feature bits. This
      makes the VLAN code angry and will cause a stack dump.

      To fix these issues, set up the netdev features first, then mask out the
      VLAN feature bits when assigning vlan_features.

      Change-ID: Ib0548869dc83cf6a841cb8697dd94c12359ba4d2
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5d38c93e7111a68fc7b9f771bf420d9e026a21de
  Author: Jingjing Wu <jingjing.wu@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:39 2015 -0400

      i40e: reset the invalid msg counter in vf when a valid msg is received

      When the number of invalid messages from a VF is exceeded, the VF
      will be disabled, due to the invalid messages.  This happens if
      other VF drivers (like DPDK) send a message through the driver's
      mailbox (aka virtchannel) interface, but the message is not
      supported by the i40e pf driver, such as CONFIG_PROMISCUOUS_MODE.

      This patch changes the num_invalid_msgs in struct i40e_vf to record
      the continuous invalid msgs, and it will be reset when a valid msg
      is received.

      Change-ID: Iaec42fd3dcdd281476b3518be23261dd46fc3718
      Signed-off-by: Jingjing Wu <jingjing.wu@xxxxxxxxx>
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ac26fc136c24edee53f1719e490d896fb07cd79b
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:37 2015 -0400

      i40e/i40evf: moderate interrupts differently

      The XL710 hardware has a different interrupt moderation design
      that can support a limit of total interrupts per second per
      vector, in addition to the "number of interrupts per second"
      controls already established in the driver.  This combination
      of hardware features allows us to set very low default latency
      settings but minimize the total CPU utilization by not
      making too many interrupts, should the user desire.

      The current driver implementation is still enabling the dynamic
      moderation in the driver, and only using the rx/tx-usecs
      limit in ethtool to limit the interrupt rate per second, by default.

      The new code implemented in this patch
      2) adds init/use of the new "Interrupt Limit" register
      3) adds ethtool knob to control/report the limits above

      Usage is ethtool -C ethx rx-usecs-high <value> Where <value> is number
      of microseconds to create a rate of 1/N interrupts per second,
      regardless of rx-usecs or tx-usecs values. Since there is a credit based
      scheme in the hardware, the rx-usecs and tx-usecs can be configured for
      very low latency for short bursts, but once the credit runs out the
      refill rate on the credits is limited by rx-usecs-high.

      Change-ID: I3a1075d3296123b0f4f50623c779b027af5b188d
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 947570e800e2ae3cbf827918a999aa88ee1600b0
  Author: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:35 2015 -0400

      i40e: Add support for non-willing Apps

      Adds support for setting a new bit in the Set Local LLDP MIB AQ command
      Type field.  When set to 1, the bit indicates to FW that Apps should be
      treated as non-willing.  When 0, FW behaves as before.

      Change-ID: I0d2101c1606c59c7188d3e6a0c7810e0f205233a
      Signed-off-by: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1cdfd88f2de89cbfffb5813dc92b7e711920c731
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:34 2015 -0400

      i40e: priv flag for controlling VEB stats

      Add an ethtool priv flag to enable and disable printing
      the VEB statistics.

      Change-ID: I7654054a3a73b08aa8310d94ee8fce6219107dd8
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d9d17cf74aed93add76c9cf648ce2f73b68ce410
  Author: Greg Rose <gregory.v.rose@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:33 2015 -0400

      i40e: Removed unused defines

      Two defines that are not used are causing customer confusion - remove
      them.

      Change-ID: Icef0325aca8e0f4fcdfc519e026bdd375e791200
      Signed-off-by: Greg Rose <gregory.v.rose@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3c5c420535ab7e25a639db16f7b2b16a70e147ec
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:32 2015 -0400

      i40e: remove read/write failed messages from nvmupdate

      Allow the nvmupdate application to decide when a read or write error
      should be exposed to the user.  Since the application needs to use
      write probes to find the ReadOnly sections on a potentially unknown NVM
      version in the HW and read probes to check the status of the last write,
      some error messages are expected, but need not be shown to the users.
      The driver doesn't know which are ignorable from real errors, so needs
      to let the application make the decision.

      Change-ID: I78fca8ab672bede11c10c820b83c26adfd536d03
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4e68adfeb91d684e5c7a0c6305af872120c71f23
  Author: Jingjing Wu <jingjing.wu@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:31 2015 -0400

      i40e/i40evf: Fix compile issue related to const string

      Add const to functions that return strings that aren't going to be
      modified. This addresses some reported compile complaints.

      Change-ID: Ic56b1e814ab4d23a50480e7fdec652445f776ee8
      Signed-off-by: Jingjing Wu <jingjing.wu@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6dec101765e442fc7f46205acdb2cf3b88879f16
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:30 2015 -0400

      i40e: generate fewer startup messages

      Cut down on the number of startup log entries by putting a couple behind
      debug flags and combining a couple others into a single line.

      Change-ID: I708089f086308f84d43f8b6f0e8a634a02d058fb
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 32b3e08fff60494cd1d281a39b51583edfd2b18f
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Sep 24 16:35:47 2015 -0700

      drivers/net/intel: use napi_complete_done()

      As per Eric Dumazet's previous patches:
      (see commit (24d2e4a50737) - tg3: use napi_complete_done())

      Quoting verbatim:
      Using napi_complete_done() instead of napi_complete() allows
      us to use /sys/class/net/ethX/gro_flush_timeout

      GRO layer can aggregate more packets if the flush is delayed a bit,
      without having to set too big coalescing parameters that impact
      latencies.
      </end quote>

      Tested
      configuration: low latency via ethtool -C ethx adaptive-rx off
                                rx-usecs 10 adaptive-tx off tx-usecs 15
      workload: streaming rx using netperf TCP_MAERTS

      igb:
      MIGRATED TCP MAERTS TEST from 0.0.0.0 (0.0.0.0) port 0 AF_INET to 
10.0.0.1 () port 0 AF_INET : demo
      ...
      Interim result:  941.48 10^6bits/s over 1.000 seconds ending at 
1440193171.589

      Alignment      Offset         Bytes    Bytes       Recvs   Bytes    Sends
      Local  Remote  Local  Remote  Xfered   Per                 Per
      Recv   Send    Recv   Send             Recv (avg)          Send (avg)
          8       8      0       0 1176930056  1475.36    797726   16384.00  
71905

      MIGRATED TCP MAERTS TEST from 0.0.0.0 (0.0.0.0) port 0 AF_INET to 
10.0.0.1 () port 0 AF_INET : demo
      ...
      Interim result:  941.49 10^6bits/s over 0.997 seconds ending at 
1440193142.763

      Alignment      Offset         Bytes    Bytes       Recvs   Bytes    Sends
      Local  Remote  Local  Remote  Xfered   Per                 Per
      Recv   Send    Recv   Send             Recv (avg)          Send (avg)
          8       8      0       0 1175182320  50476.00     23282   16384.00  
71816

      i40e:
      Hard to test because the traffic is incoming so fast (24Gb/s) that GRO
      always receives 87kB, even at the highest interrupt rate.

      Other drivers were only compile tested.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 7709b4c1fff39972b6a1b6183b593c43f1a555fb
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Thu Sep 24 09:04:38 2015 -0700

      i40evf: Add support for netpoll

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8b6503590510fd7a8b303feeaf8a45a192e2b8df
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Thu Sep 24 09:04:32 2015 -0700

      i40e/i40evf: Drop useless "IN_NETPOLL" flag

      The code in i40e and i40evf is using an "IN_NETPOLL" flag that has never
      added any value due to the fact that the Rx clean-up is handled in NAPI.
      As such the flag was set, the queue was scheduled via NAPI, and then 
polled
      from the netpoll controller and if any Rx packets were processed the were
      processed in the wrong context.

      In addition the flag itself just added an unneeded conditional to the
      hot-path so it can safely be dropped and save us a few instructions.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c67caceb864cf15731532ab25162166c228fa270
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Thu Sep 24 09:04:26 2015 -0700

      i40e/i40evf: Fix handling of napi budget

      The polling routine for i40e was rounding up the budget for Rx cleanup to
      1.  This is incorrect as the netpoll poll call is expecting no Rx to be
      processed as the budget passed was 0.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8db02d8b4089fa8098a170738e8ae7939aa8ae7a
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Thu Oct 8 15:10:48 2015 -0700

      of/irq: Add new function of_msi_map_rid()

      The device tree property "msi-map" specifies how to create the PCI
      requester id used in some MSI controllers.  Add a new function
      of_msi_map_rid() that finds the msi-map property and applies its
      translation to a given requester id.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit b531566e4dced7566dfa2e4925ec8b6a8cb7806b
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Thu Oct 8 15:10:47 2015 -0700

      Docs: dt: Add PCI MSI map bindings

      Currently msi-parent is used by a few bindings to describe the
      relationship between a PCI root complex and a single MSI controller, but
      this property does not have a generic binding document.

      Additionally, msi-parent is insufficient to describe more complex
      relationships between MSI controllers and devices under a root complex,
      where devices may be able to target multiple MSI controllers, or where
      MSI controllers use (non-probeable) sideband information to distinguish
      devices.

      This patch adds a generic binding for mapping PCI devices to MSI
      controllers. This document covers msi-parent, and a new msi-map property
      (specific to PCI*) which may be used to map devices (identified by their
      Requester ID) to sideband data for each MSI controller that they may
      target.

      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 0701c53e460ea64daf0ee789d0b08fef57800016
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 19:14:45 2015 +0100

      genirq/msi: Do not use pci_msi_[un]mask_irq as default methods

      When we create a generic MSI domain, that MSI_FLAG_USE_DEF_CHIP_OPS
      is set, and that any of .mask or .unmask are NULL in the irq_chip
      structure, we set them to pci_msi_[un]mask_irq.

      This is a bad idea for at least two reasons:
      - PCI_MSI might not be selected, kernel fails to build (yes, this is
        legitimate, at least on arm64!)
      - This may not be a PCI/MSI domain at all (platform MSI, for example)

      Either way, this looks wrong. Move the overriding of mask/unmask to
      the PCI counterpart, and panic is any of these two methods is not
      set in the core code (they really should be present).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444760085-27857-1-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1a800589052f03ce09008f82ad2c69f0af5d315a
  Merge: 8a53554 f5f3497
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Oct 16 12:03:22 2015 +0200

      Merge tag 'efi-urgent' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi into x86/urgent

      Pull EFI fix from Matt Fleming:

       - Ensure that the identity mapping in initial_page_table is updated
         to cover the entire kernel range. This fixes a triple fault on
         non-PAE kernels when booting on 32-bit EFI due to accessing an
         unmapped GDT in efi_call_phys_prolog(). (Paolo Bonzini)

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f5f3497cad8c8416a74b9aaceb127908755d020a
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 14 13:30:45 2015 +0200

      x86/setup: Extend low identity map to cover whole kernel range

      On 32-bit systems, the initial_page_table is reused by
      efi_call_phys_prolog as an identity map to call
      SetVirtualAddressMap.  efi_call_phys_prolog takes care of
      converting the current CPU's GDT to a physical address too.

      For PAE kernels the identity mapping is achieved by aliasing the
      first PDPE for the kernel memory mapping into the first PDPE
      of initial_page_table.  This makes the EFI stub's trick "just work".

      However, for non-PAE kernels there is no guarantee that the identity
      mapping in the initial_page_table extends as far as the GDT; in this
      case, accesses to the GDT will cause a page fault (which quickly becomes
      a triple fault).  Fix this by copying the kernel mappings from
      swapper_pg_dir to initial_page_table twice, both at PAGE_OFFSET and at
      identity mapping.

      For some reason, this is only reproducible with QEMU's dynamic translation
      mode, and not for example with KVM.  However, even under KVM one can 
clearly
      see that the page table is bogus:

          $ qemu-system-i386 -pflash OVMF.fd -M q35 vmlinuz0 -s -S -daemonize
          $ gdb
          (gdb) target remote localhost:1234
          (gdb) hb *0x02858f6f
          Hardware assisted breakpoint 1 at 0x2858f6f
          (gdb) c
          Continuing.

          Breakpoint 1, 0x02858f6f in ?? ()
          (gdb) monitor info registers
          ...
          GDT=     0724e000 000000ff
          IDT=     fffbb000 000007ff
          CR0=0005003b CR2=ff896000 CR3=032b7000 CR4=00000690
          ...

      The page directory is sane:

          (gdb) x/4wx 0x32b7000
          0x32b7000:    0x03398063      0x03399063      0x0339a063      
0x0339b063
          (gdb) x/4wx 0x3398000
          0x3398000:    0x00000163      0x00001163      0x00002163      
0x00003163
          (gdb) x/4wx 0x3399000
          0x3399000:    0x00400003      0x00401003      0x00402003      
0x00403003

      but our particular page directory entry is empty:

          (gdb) x/1wx 0x32b7000 + (0x724e000 >> 22) * 4
          0x32b7070:    0x00000000

      [ It appears that you can skate past this issue if you don't receive
        any interrupts while the bogus GDT pointer is loaded, or if you avoid
        reloading the segment registers in general.

        Andy Lutomirski provides some additional insight:

         "AFAICT it's entirely permissible for the GDTR and/or LDT
          descriptor to point to unmapped memory.  Any attempt to use them
          (segment loads, interrupts, IRET, etc) will try to access that memory
          as if the access came from CPL 0 and, if the access fails, will
          generate a valid page fault with CR2 pointing into the GDT or
          LDT."

        Up until commit 23a0d4e8fa6d ("efi: Disable interrupts around EFI
        calls, not in the epilog/prolog calls") interrupts were disabled
        around the prolog and epilog calls, and the functional GDT was
        re-installed before interrupts were re-enabled.

        Which explains why no one has hit this issue until now. ]

      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Reported-by: Laszlo Ersek <lersek@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      [ Updated changelog. ]

  commit 51161aa98d0aa4eb20952e16d6c6dbb1d085330e
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 16:44:00 2015 -0700

      net: Fix suspicious RCU usage in fib_rebalance

      This command:
        ip route add 192.168.1.0/24 nexthop via 10.2.1.5 dev eth1 nexthop via 
10.2.2.5 dev eth2

      generated this suspicious RCU usage message:

      [ 63.249262]
      [ 63.249939] ===============================
      [ 63.251571] [ INFO: suspicious RCU usage. ]
      [ 63.253250] 4.3.0-rc3+ #298 Not tainted
      [ 63.254724] -------------------------------
      [ 63.256401] ../include/linux/inetdevice.h:205 suspicious 
rcu_dereference_check() usage!
      [ 63.259450]
      [ 63.259450] other info that might help us debug this:
      [ 63.259450]
      [ 63.262297]
      [ 63.262297] rcu_scheduler_active = 1, debug_locks = 1
      [ 63.264647] 1 lock held by ip/2870:
      [ 63.265896] #0: (rtnl_mutex){+.+.+.}, at: [<ffffffff813ebfb7>] 
rtnl_lock+0x12/0x14
      [ 63.268858]
      [ 63.268858] stack backtrace:
      [ 63.270409] CPU: 4 PID: 2870 Comm: ip Not tainted 4.3.0-rc3+ #298
      [ 63.272478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 
1.7.5-20140531_083030-gandalf 04/01/2014
      [ 63.275745] 0000000000000001 ffff8800b8c9f8b8 ffffffff8125f73c 
ffff88013afcf301
      [ 63.278185] ffff8800bab7a380 ffff8800b8c9f8e8 ffffffff8107bf30 
ffff8800bb728000
      [ 63.280634] ffff880139fe9a60 0000000000000000 ffff880139fe9a00 
ffff8800b8c9f908
      [ 63.283177] Call Trace:
      [ 63.283959] [<ffffffff8125f73c>] dump_stack+0x4c/0x68
      [ 63.285593] [<ffffffff8107bf30>] lockdep_rcu_suspicious+0xfa/0x103
      [ 63.287500] [<ffffffff8144d752>] __in_dev_get_rcu+0x48/0x4f
      [ 63.289169] [<ffffffff8144d797>] fib_rebalance+0x3e/0x127
      [ 63.290753] [<ffffffff8144d986>] ? rcu_read_unlock+0x3e/0x5f
      [ 63.292442] [<ffffffff8144ea45>] fib_create_info+0xaf9/0xdcc
      [ 63.294093] [<ffffffff8106c12f>] ? sched_clock_local+0x12/0x75
      [ 63.295791] [<ffffffff8145236a>] fib_table_insert+0x8c/0x451
      [ 63.297493] [<ffffffff8144bf9c>] ? fib_get_table+0x36/0x43
      [ 63.299109] [<ffffffff8144c3ca>] inet_rtm_newroute+0x43/0x51
      [ 63.300709] [<ffffffff813ef684>] rtnetlink_rcv_msg+0x182/0x195
      [ 63.302334] [<ffffffff8107d04c>] ? trace_hardirqs_on+0xd/0xf
      [ 63.303888] [<ffffffff813ebfb7>] ? rtnl_lock+0x12/0x14
      [ 63.305346] [<ffffffff813ef502>] ? __rtnl_unlock+0x12/0x12
      [ 63.306878] [<ffffffff81407c4c>] netlink_rcv_skb+0x3d/0x90
      [ 63.308437] [<ffffffff813ec00e>] rtnetlink_rcv+0x21/0x28
      [ 63.309916] [<ffffffff81407742>] netlink_unicast+0xfa/0x17f
      [ 63.311447] [<ffffffff81407a5e>] netlink_sendmsg+0x297/0x2dc
      [ 63.313029] [<ffffffff813c6cd4>] sock_sendmsg_nosec+0x12/0x1d
      [ 63.314597] [<ffffffff813c835b>] ___sys_sendmsg+0x196/0x21b
      [ 63.316125] [<ffffffff8100bf9f>] ? native_sched_clock+0x1f/0x3c
      [ 63.317671] [<ffffffff8106c12f>] ? sched_clock_local+0x12/0x75
      [ 63.319185] [<ffffffff8106c397>] ? sched_clock_cpu+0x9d/0xb6
      [ 63.320693] [<ffffffff8107e2d7>] ? __lock_is_held+0x32/0x54
      [ 63.322145] [<ffffffff81159fcb>] ? __fget_light+0x4b/0x77
      [ 63.323541] [<ffffffff813c8726>] __sys_sendmsg+0x3d/0x5b
      [ 63.324947] [<ffffffff813c8751>] SyS_sendmsg+0xd/0x19
      [ 63.326274] [<ffffffff814c8f57>] entry_SYSCALL_64_fastpath+0x12/0x6f

      It looks like all of the code paths to fib_rebalance are under rtnl.

      Fixes: 0e884c78ee19 ("ipv4: L3 hash-based multipath")
      Cc: Peter Nørlund <pch@xxxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5f715c097965c0ad037f64393d0b95c50287775b
  Author: Andrej Ota <andrej@xxxxxx>
  Date:   Thu Oct 15 00:14:37 2015 +0200

      via-rhine: fix VLAN receive handling regression.

      Because eth_type_trans() consumes ethernet header worth of bytes, a call
      to read TCI from end of packet using rhine_rx_vlan_tag() no longer works
      as it's reading from an invalid offset.

      Tested to be working on PCEngines Alix board.

      Fixes: 810f19bcb862 ("via-rhine: add consistent memory barrier in vlan 
receive code.")
      Signed-off-by: Andrej Ota <andrej@xxxxxx>
      Acked-by: Francois Romieu <romieu@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac00737f4e8198f8ff5007c70af4dfe4fd47ea94
  Author: Tom Herbert <tom@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 14:40:44 2015 -0700

      bpf: Need to call bpf_prog_uncharge_memlock from bpf_prog_put

      Currently, is only called from __prog_put_rcu in the bpf_prog_release
      path. Need this to call this from bpf_prog_put also to get correct
      accounting.

      Fixes: aaac3ba95e4c8b49 ("bpf: charge user for creation of BPF maps and 
programs")
      Signed-off-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a302afe980ca6b25b2bae0b5bc816fe1dc1bb039
  Merge: 47ea032 ebb516a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 00:52:27 2015 -0700

      Merge branch 'robust_listener'

      Eric Dumazet says:

      ====================
      tcp/dccp: make our listener code more robust

      This patch series addresses request sockets leaks and listener dismantle
      phase. This survives a stress test with listeners being added/removed
      quite randomly.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebb516af60e18258aac8e80bbe068740ef1579ed
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 11:16:28 2015 -0700

      tcp/dccp: fix race at listener dismantle phase

      Under stress, a close() on a listener can trigger the
      WARN_ON(sk->sk_ack_backlog) in inet_csk_listen_stop()

      We need to test if listener is still active before queueing
      a child in inet_csk_reqsk_queue_add()

      Create a common inet_child_forget() helper, and use it
      from inet_csk_reqsk_queue_add() and inet_csk_listen_stop()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f03f2e154f52fdaa982de7e2c386737679963dc9
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 11:16:27 2015 -0700

      tcp/dccp: add inet_csk_reqsk_queue_drop_and_put() helper

      Let's reduce the confusion about inet_csk_reqsk_queue_drop() :
      In many cases we also need to release reference on request socket,
      so add a helper to do this, reducing code size and complexity.

      Fixes: 4bdc3d66147b ("tcp/dccp: fix behavior of stale SYN_RECV request 
sockets")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef84d8ce5a36d0c4a6454e7e9dff54d19f96a25f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 11:16:26 2015 -0700

      Revert "inet: fix double request socket freeing"

      This reverts commit c69736696cf3742b37d850289dc0d7ead177bb14.

      At the time of above commit, tcp_req_err() and dccp_req_err()
      were dead code, as SYN_RECV request sockets were not yet in ehash table.

      Real bug was fixed later in a different commit.

      We need to revert to not leak a refcount on request socket.

      inet_csk_reqsk_queue_drop_and_put() will be added
      in following commit to make clean inet_csk_reqsk_queue_drop()
      does not release the reference owned by caller.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b0753902d42f5cb01c33f0dec47ba2aa7ecfbb3f
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:59 2015 +0200

      s390/fpu: split fpu-internal.h into fpu internals, api, and type headers

      Split the API and FPU type definitions into separate header files
      similar to "x86/fpu: Rename fpu-internal.h to fpu/internal.h" 
(78f7f1e54b).

      The new header files and their meaning are:

      asm/fpu/types.h:
        FPU related data types, needed for 'struct thread_struct' and
        'struct task_struct'.

      asm/fpu/api.h:
        FPU related 'public' functions for other subsystems and device
        drivers.

      asm/fpu/internal.h:
        FPU internal functions mainly used to convert
        FPU register contents in signal handling.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 7de88271da98c0c6f918e4cf4aa214ac034bab00
  Merge: 53ca376 0a1f596
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 00:39:25 2015 -0700

      Merge branch 'ipv6-blackhole-route-fix'

      Martin KaFai Lau says:

      ====================
      ipv6: Initialize rt6_info properly in ip6_blackhole_route()

      This patchset ensures the rt6_info's fields are initialized properly
      in ip6_blackhole_route() where xfrm_policy is the primarily user.
      The first patch is a prep work.  The second patch is the fix.  It
      fixes d52d3997f843 ("ipv6: Create percpu rt6_info").

      Here is the oops reported by Phil Sutter <phil@xxxxxx>:

      BUG: unable to handle kernel NULL pointer dereference at 00000000000000a0
      IP: [<ffffffff8171a95e>] __ip6_datagram_connect+0x71e/0xa20
      PGD c2cb1067 PUD c2d7a067 PMD 0
      Oops: 0000 [#1] PREEMPT SMP
      Modules linked in: cmac nfs lockd grace sunrpc bridge stp llc nvidia(PO) 
snd_usb_audio snd_usbmidi_lib iTCO_wdt
      CPU: 1 PID: 2964 Comm: ping6 Tainted: P           O    4.2.1-aufs #10
      Hardware name: To Be Filled By O.E.M. To Be Filled By 
O.E.M./4Core1333-Viiv, BIOS P1.60 07/01/2008
      task: ffff8800ca62bc00 ti: ffff880129a14000 task.ti: ffff880129a14000
      RIP: 0010:[<ffffffff8171a95e>]  [<ffffffff8171a95e>] 
__ip6_datagram_connect+0x71e/0xa20
      RSP: 0018:ffff880129a17da8  EFLAGS: 00010296
      RAX: 000000000000000b RBX: 0000000000000000 RCX: 0000000000000006
      RDX: 0000000000000007 RSI: 0000000000000246 RDI: ffff88012fc8d5a0
      RBP: ffff8800cb9a9048 R08: 756e207369207472 R09: 216c6c756e207369
      R10: 0000000000000665 R11: 0000000000000006 R12: ffff8800cb9a8cf8
      R13: ffff8800cb9a8cf8 R14: 0000000000000000 R15: ffff8800cb9a8cc0
      FS:  00007fb76ad74700(0000) GS:ffff88012fc80000(0000) 
knlGS:0000000000000000
      CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      CR2: 00000000000000a0 CR3: 00000000c2dba000 CR4: 00000000000406e0
      Stack:
       ffff8800cb9a9048 ffff8800cb9a8de0 ffff8800cb9feb70 ffffffff816b2c41
       00007fb70000000b ffffea0000df7200 ffff8800cb9f5cfc ffff8800cb9a8cc0
       03fffffffe068a20 ffff8800cb9a8cc0 ffffffff817097c0 0000000100000000
      Call Trace:
       [<ffffffff816b2c41>] ? udp_lib_get_port+0x1a1/0x380
       [<ffffffff817097c0>] ? udpv6_rcv+0x20/0x20
       [<ffffffff8171ac82>] ? ip6_datagram_connect+0x22/0x40
       [<ffffffff8163ae9b>] ? SyS_connect+0x6b/0xb0
       [<ffffffff810767ac>] ? __do_page_fault+0x15c/0x380
       [<ffffffff8163a8d3>] ? SyS_socket+0x63/0xa0
       [<ffffffff81741957>] ? entry_SYSCALL_64_fastpath+0x12/0x6a
      Code: ba ae 00 00 00 48 c7 c6 7b 71 94 81 48 c7 c7 63 71 94 81 e8 6c 0f 
02 00 48 85 db 75 0e 48 c7 c7 9f 71 94 81 31 c0 e8 59 0f 02 00 <48> 83 bb a0 00 
00 00 00 75 0e 48 c7 c7 ae 71 94 81 31 c0 e8 41
      RIP  [<ffffffff8171a95e>] __ip6_datagram_connect+0x71e/0xa20
       RSP <ffff880129a17da8>
      CR2: 00000000000000a0
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a1f59620068fb82a2e2aded202e62f4bb856d52
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Thu Oct 15 16:39:58 2015 -0700

      ipv6: Initialize rt6_info properly in ip6_blackhole_route()

      ip6_blackhole_route() does not initialize the newly allocated
      rt6_info properly.  This patch:
      1. Call rt6_info_init() to initialize rt6i_siblings and rt6i_uncached

      2. The current rt->dst._metrics init code is incorrect:
         - 'rt->dst._metrics = ort->dst._metris' is not always safe
         - Not sure what dst_copy_metrics() is trying to do here
           considering ip6_rt_blackhole_cow_metrics() always returns
           NULL

         Fix:
         - Always do dst_copy_metrics()
         - Replace ip6_rt_blackhole_cow_metrics() with
           dst_cow_metrics_generic()

      3. Mask out the RTF_PCPU bit from the newly allocated blackhole route.
         This bug triggers an oops (reported by Phil Sutter) in 
rt6_get_cookie().
         It is because RTF_PCPU is set while rt->dst.from is NULL.

      Fixes: d52d3997f843 ("ipv6: Create percpu rt6_info")
      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Reported-by: Phil Sutter <phil@xxxxxx>
      Tested-by: Phil Sutter <phil@xxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Cc: Julian Anastasov <ja@xxxxxx>
      Cc: Phil Sutter <phil@xxxxxx>
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebfa45f0d952e5e7bb30a7f9daaad681de138728
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Thu Oct 15 16:39:57 2015 -0700

      ipv6: Move common init code for rt6_info to a new function rt6_info_init()

      Introduce rt6_info_init() to do the common init work for
      'struct rt6_info' (after calling dst_alloc).

      It is a prep work to fix the rt6_info init logic in the
      ip6_blackhole_route().

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Cc: Julian Anastasov <ja@xxxxxx>
      Cc: Phil Sutter <phil@xxxxxx>
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5157b8a503fa834e8569c7fed06981e3d3d53db0
  Author: Jakub Pawlowski <jpawlowski@xxxxxxxxxx>
  Date:   Fri Oct 16 10:07:54 2015 +0300

      Bluetooth: Fix initializing conn_params in scan phase

      This patch makes sure that conn_params that were created just for
      explicit_connect, will get properly deleted during cleanup.

      Signed-off-by: Jakub Pawlowski <jpawlowski@xxxxxxxxxx>
      Acked-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 9ad3e6ffe189a988389d88ce33101668cb2d54c6
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Oct 16 10:07:53 2015 +0300

      Bluetooth: Fix conn_params list update in hci_connect_le_scan_cleanup

      After clearing the params->explicit_connect variable the parameters
      may need to be either added back to the right list or potentially left
      absent from both the le_reports and the le_conns lists.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 679d2b6f9d742b3f091868bd9a0634647ce7e782
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Oct 16 10:07:52 2015 +0300

      Bluetooth: Fix remove_device behavior for explicit connects

      Devices undergoing an explicit connect should not have their
      conn_params struct removed by the mgmt Remove Device command. This
      patch fixes the necessary checks in the command handler to correct the
      behavior.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 49c509220db990ad003060db2267b9bbb597cd94
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Oct 16 10:07:51 2015 +0300

      Bluetooth: Fix LE reconnection logic

      We can't use hci_explicit_connect_lookup() since that would only cover
      explicit connections, leaving normal reconnections completely
      untouched. Not using it in turn means leaving out entries in
      pend_le_reports.

      To fix this and simplify the logic move conn params from the reports
      list to the pend_le_conns list for the duration of an explicit
      connect. Once the connect is complete move the params back to the
      pend_le_reports list. This also means that the explicit connect lookup
      function only needs to look into the pend_le_conns list.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b958f9a3e87766a88036616389eaaf3ad3bd5fc8
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Oct 16 10:07:50 2015 +0300

      Bluetooth: Fix reference counting for LE-scan based connections

      The code should never directly call hci_conn_hash_del since many
      cleanup & reference counting updates would be lost. Normally
      hci_conn_del is the right thing to do, but in the case of a connection
      doing LE scanning this could cause a deadlock due to doing a
      cancel_delayed_work_sync() on the same work callback that we were
      called from.

      Connections in the LE scanning state actually need very little cleanup
      - just a small subset of hci_conn_del. To solve the issue, refactor
      out these essential pieces into a new hci_conn_cleanup() function and
      call that from the two necessary places.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 168b8a25c0ac30f427bfe6ad547779c4c363d042
  Author: Jakub Pawlowski <jpawlowski@xxxxxxxxxx>
  Date:   Fri Oct 16 10:07:49 2015 +0300

      Bluetooth: Fix double scan updates

      When disable/enable scan command is issued twice, some controllers
      will return an error for the second request, i.e. requests with this
      command will fail on some controllers, and succeed on others.

      This patch makes sure that unnecessary scan disable/enable commands
      are not issued.

      When adding device to the auto connect whitelist when there is pending
      connect attempt, there is no need to update scan.

      hci_connect_le_scan_cleanup is conditionally executing
      hci_conn_params_del, that is calling hci_update_background_scan. Make
      the other case also update scan, and remove reduntand call from
      hci_connect_le_scan_remove.

      When stopping interleaved discovery the state should be set to stopped
      only when both LE scanning and discovery has stopped.

      Signed-off-by: Jakub Pawlowski <jpawlowski@xxxxxxxxxx>
      Acked-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 47ea0325337b166c1c8695119aa6e83cdc035ef5
  Author: Ivan Vecera <ivecera@xxxxxxxxxx>
  Date:   Thu Oct 15 21:28:52 2015 +0200

      drivers/net: get rid of unnecessary initializations in .get_drvinfo()

      Many drivers initialize uselessly n_priv_flags, n_stats, testinfo_len,
      eedump_len & regdump_len fields in their .get_drvinfo() ethtool op.
      It's not necessary as these fields is filled in ethtool_get_drvinfo().

      v2: removed unused variable
      v3: removed another unused variable

      Signed-off-by: Ivan Vecera <ivecera@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a515de660747eb01f3ef80e75bfc51ac63cfc546
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 14:28:56 2015 +0200

      cfg80211: reg: fix reg_ignore_cell_hint return type

      The return type should be enum reg_request_treatment for both
      branches of the #ifdef.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 81e925747e1c2ef2fa0316c2cd74410c65242a9e
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 14:27:04 2015 +0200

      cfg80211: reg: reduce chan_reg_rule_print_dbg() ifdef

      The function is void and static, so just ifdef its contents
      instead of duplicating the declaration.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 9f5068029274a15bf0a92f77e126fe52c3551c19
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 13:35:45 2015 +0200

      cfg80211: reg: fix antenna gain in chan_reg_rule_print_dbg()

      Printing "N/A mBi" is strange - print just "N/A" instead.

      Also add a missing opening parenthesis.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit d34265a3eebe994b3b9a0e4cabbc2dbb8436388b
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 13:05:55 2015 +0200

      cfg80211: reg: centralize freeing ignored requests

      Instead of having a lot of places that free ignored requests
      and then return REG_REQ_OK, make reg_process_hint() process
      REG_REQ_IGNORE by freeing the request, and let functions it
      calls return that instead of freeing.

      This also fixes a leak when a second (different) country IE
      hint was ignored.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 480908a7ec5f2d37d5610b7d9bc48a38f2093876
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 12:58:58 2015 +0200

      cfg80211: reg: clarify 'treatment' handling in reg_process_hint()

      This function can only deal with treatment values OK and ALREADY_SET
      so make the callees not return anything else and warn if they do.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit fd453d3c53eed367f18a0c75bd855cdfc9d6d416
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 10:22:12 2015 +0200

      cfg80211: reg: rename reg_regdb_query() to reg_query_builtin()

      The new name better reflects the functionality.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit b68630369167a7fd2c4c3d1be96430defc59fb9a
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 09:25:18 2015 +0200

      cfg80211: reg: make CRDA support optional

      If there's a built-in regulatory database, there may be little point
      in also calling out to CRDA and failing if the system is configured
      that way. Allow removing CRDA support to save ~1K kernel size.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ae23051820461bdc960b76d766e7c1e92dee2ee1
  Merge: 175f8d6 c819930
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 23:55:33 2015 -0700

      Merge branch 'tipc-link-improvements'

      Jon Maloy says:

      ====================
      tipc: some link level code improvements

      Extensive testing has revealed some weaknesses and non-optimal solutions
      in the link level code.

      This commit series addresses those issues.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c819930090fe3f74c822be765c185b3431360193
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:46 2015 -0400

      tipc: update node FSM when peer RESET message is received

      The change made in the previous commit revealed a small flaw in the way
      the node FSM is updated. When the function tipc_node_link_down() is
      called for the last link to a node, we should check whether this was
      caused by a local reset or by a received RESET message from the peer.
      In the latter case, we can directly issue a PEER_LOST_CONTACT_EVT to
      the node FSM, so that it is ready to re-establish contact. If this is
      not done, the peer node will sometimes have to go through a second
      establish cycle before the link becomes stable.

      We fix this in this commit by conditionally issuing the mentioned
      event in the function tipc_node_link_down(). We also move LINK_RESET
      FSM even away from the link_reset() function and into the caller
      function, partially because it is easier to follow the code when state
      changes are gathered at a limited number of locations, partially
      because there will be cases in future commits where we don't want the
      link to go RESET mode when link_reset() is called.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 282b3a056225b35024246f63feb91d769d714dad
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:45 2015 -0400

      tipc: send out RESET immediately when link goes down

      When a link is taken down because of a node local event, such as
      disabling of a bearer or an interface, we currently leave it to the
      peer node to discover the broken communication. The default time for
      such failure discovery is 1.5-2 seconds.

      If we instead allow the terminating link endpoint to send out a RESET
      message at the moment it is reset, we can achieve the impression that
      both endpoints are going down instantly. Since this is a very common
      scenario, we find it worthwhile to make this small modification.

      Apart from letting the link produce the said message, we also have to
      ensure that the interface is able to transmit it before TIPC is
      detached. We do this by performing the disabling of a bearer in three
      steps:

      1) Disable reception of TIPC packets from the interface in question.
      2) Take down the links, while allowing them so send out a RESET message.
      3) Disable transmission of TIPC packets on the interface.

      Apart from this, we now have to react on the NETDEV_GOING_DOWN event,
      instead of as currently the NEDEV_DOWN event, to ensure that such
      transmission is possible during the teardown phase.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 73f646cec35477b5099d7e952297cb9e1855be45
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:44 2015 -0400

      tipc: delay ESTABLISH state event when link is established

      Link establishing, just like link teardown, is a non-atomic action, in
      the sense that discovering that conditions are right to establish a link,
      and the actual adding of the link to one of the node's send slots is done
      in two different lock contexts. The link FSM is designed to help bridging
      the gap between the two contexts in a safe manner.

      We have now discovered a weakness in the implementaton of this FSM.
      Because we directly let the link go from state LINK_ESTABLISHING to
      state LINK_ESTABLISHED already in the first lock context, we are unable
      to distinguish between a fully established link, i.e., a link that has
      been added to its slot, and a link that has not yet reached the second
      lock context. It may hence happen that a manual intervention, e.g., when
      disabling an interface, causes the function tipc_node_link_down() to try
      removing the link from the node slots, decrementing its active link
      counter etc, although the link was never added there in the first place.

      We solve this by delaying the actual state change until we reach the
      second lock context, inside the function tipc_node_link_up(). This
      makes it possible for potentail callers of __tipc_node_link_down() to
      know if they should proceed or not, and the problem is solved.

      Unforunately, the situation described above also has a second problem.
      Since there by necessity is a tipc_node_link_up() call pending once
      the node lock has been released, we must defuse that call by setting
      the link back from LINK_ESTABLISHING to LINK_RESET state. This forces
      us to make a slight modification to the link FSM, which will now look
      as follows.

       +------------------------------------+
       |RESET_EVT                           |
       |                                    |
       |                             +--------------+
       |           +-----------------|   SYNCHING   |-----------------+
       |           |FAILURE_EVT      +--------------+   PEER_RESET_EVT|
       |           |                  A            |                  |
       |           |                  |            |                  |
       |           |                  |            |                  |
       |           |                  |SYNCH_      |SYNCH_            |
       |           |                  |BEGIN_EVT   |END_EVT           |
       |           |                  |            |                  |
       |           V                  |            V                  V
       |    +-------------+          +--------------+          +------------+
       |    |  RESETTING  |<---------|  ESTABLISHED |--------->| PEER_RESET |
       |    +-------------+ FAILURE_ +--------------+ PEER_    +------------+
       |           |        EVT        |    A         RESET_EVT       |
       |           |                   |    |                         |
       |           |  +----------------+    |                         |
       |  RESET_EVT|  |RESET_EVT            |                         |
       |           |  |                     |                         |
       |           |  |                     |ESTABLISH_EVT            |
       |           |  |  +-------------+    |                         |
       |           |  |  | RESET_EVT   |    |                         |
       |           |  |  |             |    |                         |
       |           V  V  V             |    |                         |
       |    +-------------+          +--------------+        RESET_EVT|
       +--->|    RESET    |--------->| ESTABLISHING |<----------------+
            +-------------+ PEER_    +--------------+
             |           A  RESET_EVT       |
             |           |                  |
             |           |                  |
             |FAILOVER_  |FAILOVER_         |FAILOVER_
             |BEGIN_EVT  |END_EVT           |BEGIN_EVT
             |           |                  |
             V           |                  |
            +-------------+                 |
            | FAILINGOVER |<----------------+
            +-------------+

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8306f99a517b91ebf8fa94d017c2c84ca62e107c
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:43 2015 -0400

      tipc: disallow packet duplicates in link deferred queue

      After the previous commits, we are guaranteed that no packets
      of type LINK_PROTOCOL or with illegal sequence numbers will be
      attempted added to the link deferred queue. This makes it possible to
      make some simplifications to the sorting algorithm in the function
      tipc_skb_queue_sorted().

      We also alter the function so that it will drop packets if one with
      the same seqeunce number is already present in the queue. This is
      necessary because we have identified weird packet sequences, involving
      duplicate packets, where a legitimate in-sequence packet may advance to
      the head of the queue without being detected and de-queued.

      Finally, we make this function outline, since it will now be called only
      in exceptional cases.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 81204c492b05274ade680c54787cd8ba234dcfd7
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:42 2015 -0400

      tipc: improve sequence number checking

      The sequence number of an incoming packet is currently only checked
      for less than, equality to, or bigger than the next expected number,
      meaning that the receive window in practice becomes one half sequence
      number cycle, or U16_MAX/2. This does not make sense, and may not even
      be safe if there are extreme delays in the network. Any packet sent by
      the peer during the ongoing cycle must belong inside his current send
      window, or should otherwise be dropped if possible.

      Since a link endpoint cannot know its peer's current send window, it
      has to base this sanity check on a worst-case assumption, i.e., that
      the peer is using a maximum sized window of 8191 packets. Using this
      assumption, we now add a check that the sequence number is not bigger
      than next_expected + TIPC_MAX_LINK_WIN. We also re-order the checks
      done, so that the receive window test is performed before the gap test.
      This way, we are guaranteed that no packet with illegal sequence numbers
      are ever added to the deferred queue.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9aa358a8109f9f33e96c3a7efb9a07631670294
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:41 2015 -0400

      tipc: simplify tipc_link_rcv() reception loop

      Currently, all packets received in tipc_link_rcv() are unconditionally
      added to the packet deferred queue, whereafter that queue is walked and
      all its buffers evaluated for delivery. This is both non-optimal and
      and makes the queue sorting function unnecessary complex.

      This commit changes the loop so that an arrived packet is evaluated
      first, and added to the deferred queue only when a sequence number gap
      is discovered. A non-empty deferred queue is walked until it is empty
      or until its head's sequence number doesn't fit.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9945e8043ef9273cfb633d930e2a5a9116009b09
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 15 14:52:40 2015 -0400

      tipc: limit usage of temporary skb list during packet reception

      During packet reception, the function tipc_link_rcv() adds its accepted
      packets to a temporary buffer queue, before finally splicing this queue
      into the lock protected input queue that will be delivered up to the
      socket layer. The purpose is to reduce potential contention on the input
      queue lock. However, since the vast majority of packets arrive in
      sequence, they will anyway be added one by one to the input queue, and
      the use of the temporary queue becomes a sub-optimization.

      The only case where this queue makes sense is when unpacking buffers
      from a bundle packet; here we want to avoid dozens of small buffers
      to be added individually to the lock-protected input queue in a tight
      loop.

      In this commit, we remove the general usage of the temporary queue,
      and keep it only for the packet unbundling case.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 175f8d6746aa4b1dac5ccf576bcbc5488ff21a36
  Author: Insu Yun <wuninsu@xxxxxxxxx>
  Date:   Thu Oct 15 12:24:09 2015 -0400

      mlx4: corretly check failed allocation

      When allocation fails, mlx4_alloc_cmd_mailbox returns -ENOMEM.
      Since there is no case that mlx4_alloc_cmd_mailbox returns NULL,
      it needs to be checked by IS_ERR, not IS_ERR_OR_NULL

      Signed-off-by: Insu Yun <wuninsu@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e87eb4051efe76b35d0a297db772f5964a001544
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 15 09:22:11 2015 -0700

      bonding: support encapsulated ipv6 TSO

      If using a sixtofour device on top of a bonding device,
      skb segmentation of TCP traffic is done right before calling
      bonding xmit, because bonding only enables TSO for IPv4.

      This patch improves single flow performance by about 120 % on my hosts,
      because segmentation is deferred right before calling slave xmit.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 181e4246b4666bc3af148c1dacb330c9be2acf76
  Merge: 96aec91 5cd16d8
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 23:28:03 2015 -0700

      Merge branch 'mlxsw-cleanups'

      Jiri Pirko says:

      ====================
      mlxsw: Driver update, cleanups

      This patchset contains various cleanups and improvements in mlxsw driver.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5cd16d8c78fd17520fff437256f0c3a4e960fd5d
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:29 2015 +0200

      mlxsw: cmd: Update CONFIG_PROFILE command documentation

      The meaning of certain parameters in the profile passed to the device
      during initialization has changed, so update their documentation
      accordingly.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 801bd3defb2eac756e6570168d0f8187781ad8ad
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:28 2015 +0200

      mlxsw: Add trap group for control packets

      Previously, we trapped flooded and control packets using the same trap
      group. This can cause flooded packets to overflow the PCI bus and
      prevent control packets (e.g. STP, LACP) from getting to the CPU.

      Solve this by splitting the RX trap group to RX and control, which allows
      us to configure a policer on the first, thereby preventing it from
      overflowing the PCI bus.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f24af330159aa1afbc6670e5786856a2a99d112c
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:27 2015 +0200

      mlxsw: Simplify traps creation

      The Host Trap Group Table (HTGT) register configures trap groups, which
      are populated with trap IDs using the Host PacKet Trap (HPKT) register.
      However, a trap ID can only be present inside one trap group (the last
      configured).

      Instead of passing both the trap group and ID for the function that
      packs HPKT, pass only the trap ID and derive from it the trap group.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebb7963f9b14bbaa07b6074579225d6338318ecb
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:26 2015 +0200

      mlxsw: Introduce mlxsw_reg_spms_vid_pack helper and use it

      Introduce separate helper for packing SPMS VIDs, as it can be used for
      multiple VIDs and not only for one as previous SPMS pack function
      provided.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fa6ad058bc77b6ae69bd4512b538245ee5db39eb
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:25 2015 +0200

      mlxsw: reg: Adjust definition of enum mlxsw_reg_sfgc_type

      Define max which would be needed later on.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36b78e8ababe6c596680d742f20bece5e8dc9820
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:24 2015 +0200

      mlxsw: reg: Remove extra space in SFGC ID define

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3f0effd16b69d84558f2e7eb7ccd0e27a43173f4
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:23 2015 +0200

      mlxsw: reg: Uppercase letters in register IDs

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6cf9dc8b77918c30260bc0f2e1853eb7d1ce34e8
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:22 2015 +0200

      mlxsw: Use dev_level_ratelimited instead of net_ratelimit & dev_level

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 18ea54454ecdd516ad11bf88d86f1994548692bf
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:21 2015 +0200

      mlxsw: core: Do not use EMADs in mlxsw_emad_fini

      Be symmetric with mlxsw_emad_init and don't use EMADs in mlxsw_emad_fini
      cleanup function. Use command interface instead.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3e2206da73e37c0fc07675b5caf25d3b26e33b7d
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:20 2015 +0200

      mlxsw: pci: Limit number of entries being sent in single MAP_FA cmd

      Firmware accepts only limited number of mapping entries for MAP_FA
      command. In order to prevent overflow, introduce a limit and in case the
      number of entries is bigger, call MAP_FA multiple times.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c85c3882ad88dd36105148912cd95084b09a5676
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:19 2015 +0200

      mlxsw: pci: Remove MLXSW_PCI_RDQS/SDQS defines and checks

      Remove strict number check of queues count as various ASICs have
      different counts.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 424e1114af94a543b3126f84ddd38742c7cfbbb6
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:18 2015 +0200

      mlxsw: pci: Do not use MLXSW_PCI_SDQS_COUNT define

      Use mlxsw_pci_sdq_count helper instead.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e4c870b1b496c90dc4fa9cf24937c7a45e84187f
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:17 2015 +0200

      mlxsw: pci: Use MLXSW_PCI_CQS_MAX instead of MLXSW_PCI_CQS_COUNT

      The count of CQs can be different for various ASICs, so just define
      maximal value and check for that.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ffe053285b77e9cd87c3b8e37f35bdb8de8172d1
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:16 2015 +0200

      mlxsw: switchx2: Use ETH_ALEN for mac address length

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 33a704a59b6618dceb4a3ec1200b879294962c88
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 17:43:15 2015 +0200

      mlxsw: Remove multicast ID configuration

      With respect to a firmware change, the Switch Multicast ID (SMID)
      register is no longer needed, so the related configuration code can be
      removed.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d549f545e690c3cbdeb33df3579eae3230eb8904
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 7 12:41:21 2015 +0200

      drm/virtio: use %llu format string form atomic64_t

      The virtgpu driver prints the last_seq variable using the %ld or
      %lu format string, which does not work correctly on all architectures
      and causes this compiler warning on ARM:

      drivers/gpu/drm/virtio/virtgpu_fence.c: In function 
'virtio_timeline_value_str':
      drivers/gpu/drm/virtio/virtgpu_fence.c:64:22: warning: format '%lu' 
expects argument of type 'long unsigned int', but argument 4 has type 'long 
long int' [-Wformat=]
        snprintf(str, size, "%lu", atomic64_read(&fence->drv->last_seq));
                            ^
      drivers/gpu/drm/virtio/virtgpu_debugfs.c: In function 
'virtio_gpu_debugfs_irq_info':
      drivers/gpu/drm/virtio/virtgpu_debugfs.c:37:16: warning: format '%ld' 
expects argument of type 'long int', but argument 3 has type 'long long int' 
[-Wformat=]
        seq_printf(m, "fence %ld %lld\n",
                      ^

      In order to avoid the warnings, this changes the format strings to %llu
      and adds a cast to u64, which makes it work the same way everywhere.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit ba2199a63df6a25ac6aa93cc197f7005ecb6781b
  Author: Patrik Jakobsson <patrik.r.jakobsson@xxxxxxxxx>
  Date:   Mon Oct 12 23:14:44 2015 +0200

      MAINTAINERS: Add myself as maintainer for the gma500 driver

      Signed-off-by: Patrik Jakobsson <patrik.r.jakobsson@xxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 99763bb85a9f99b6f58e81ee097059e2dce942bc
  Author: Boris BREZILLON <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 11:55:42 2015 +0200

      MAINTAINERS: add a maintainer for the atmel-hlcdc DRM driver

      Add myself as the maintainer of the atmel-hlcdc DRM driver.

      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Acked-by: Nicolas Ferre <nicolas.ferre@xxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 57606c73dca35f5ea0f2948e64c3ec6014e19cd0
  Merge: b2293cb f6c7aba
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 16 10:01:24 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      Just two fixes for amdgpu:
      - fix pageflip interrupt issue
      - fix display clock handling on certain fiji boards

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: Keep the pflip interrupts always enabled v7
        drm/amdgpu: adjust default dispclk (v2)

  commit b2293cb5c6356e31a1c3275b0f84919d592902c9
  Merge: ae49154 ed7d78b
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 16 08:10:21 2015 +1000

      Merge tag 'vmwgfx-fixes-4.3-151014' of 
git://people.freedesktop.org/~thomash/linux into drm-fixes

      Pull request of 2015-10-14

      * tag 'vmwgfx-fixes-4.3-151014' of 
git://people.freedesktop.org/~thomash/linux:
        drm/vmwgfx: Fix kernel NULL pointer dereference on older hardware

  commit 69984b64440729bf6b08d1ddc1b3ee8282a2c846
  Merge: 3155823 eb93ce2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 14:03:38 2015 -0700

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Will Deacon:
       "Here are a few more arm64 fixes for 4.3.  Again, nothing too
        significant, but worth having nonetheless.  The MINSIGSTKSZ update is
        a bit grotty, but the value we currently have is wrong (too small), so
        anybody using that will have issues already.  It has Arnd's ack for
        the asm-generic change.

        Summary:

         - Fix module CFLAGS setting in workaround for erratum #843419
         - Update MINSIGSTKSZ and SIGSTKSZ to match glibc
         - Wire up some new compat syscalls"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: compat: wire up new syscalls
        arm64: Fix MINSIGSTKSZ and SIGSTKSZ
        arm64: errata: use KBUILD_CFLAGS_MODULE for erratum #843419

  commit 31558237f86f6fc90eb5acf98d284a9f99aa6c10
  Merge: 58bd6e0 de7f8e3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 13:58:22 2015 -0700

      Merge tag 'pinctrl-v4.3-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl

      Pull pinctrl fixes from Linus Walleij:
       "Here are some overdue (what can I say, I was on a short vacation)
        driver fixes for the pin control subsystem:

         - Allwinner sun5i A10s had a faulty mapping

         - Freescale i.MX25 had some bad arithmetics

         - Uniphier PH1-sLD8 missed some input enable settings"

      * tag 'pinctrl-v4.3-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:
        pinctrl: uniphier: fix input enable settings for PH1-sLD8
        pinctrl: imx25: ensure that a pin with id i is at position i in the 
info array
        pinctrl: sun5i: Fix a10s pwm1 pinctrl mapping

  commit 8e601a9f97a00bab031980de34f9a81891c1f82f
  Author: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 12:34:21 2015 -0700

      cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL)

      This is a workaround for KNL platform, where in some cases MPERF counter
      will not have updated value before next read of MSR_IA32_MPERF. In this
      case divide by zero will occur. This change ignores current sample for
      busy calculation in this case.

      Fixes: b34ef932d79a (intel_pstate: Knights Landing support)
      Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
      Acked-by: Kristen Carlson Accardi <kristen@xxxxxxxxxxxxxxx>
      Cc: 4.1+ <stable@xxxxxxxxxxxxxxx> # 4.1+
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 58bd6e060260d938650687cdd8f02dfafcb51f91
  Merge: c7823b6 0b5c927
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 13:44:35 2015 -0700

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull rdma updates from Doug Ledford:
       "We have four batched up patches for the current rc kernel.

        Two of them are small fixes that are obvious.

        One of them is larger than I would like for a late stage rc pull, but
        we found an issue in the namespace lookup code related to RoCE and
        this works around the issue for now (we allow a lookup with a
        namespace to succeed on RoCE since RoCE namespaces aren't implemented
        yet).  This will go away in 4.4 when we put in support for namespaces
        in RoCE devices.

        The last one is large in terms of lines, but is all legal and no
        functional changes.  Cisco needed to update their files to be more
        specific about their license.  They had intended the files to be dual
        licensed as GPL/BSD all along, and specified that in their module
        license tag, but their file headers were not up to par.  They
        contacted all of the contributors to get agreement and then submitted
        a patch to update the license headers in the files.

        Summary:

         - Work around connection namespace lookup bug related to RoCE

         - Change usnic license to Dual GPL/BSD (was intended to be that way
           all along, but wasn't clear, permission from contributors was
           chased down)

         - Fix an issue between NFSoRDMA and mlx5 that could cause an oops

         - Fix leak of sendonly multicast groups"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/ipoib: For sendonly join free the multicast group on leave
        IB/cma: Accept connection without a valid netdev on RoCE
        xprtrdma: Don't require LOCAL_DMA_LKEY support for fastreg
        usnic: add missing clauses to BSD license

  commit c7823b6b97ddc3d9f627611557d2b5842c36b67e
  Merge: 176bed1 d4eb6de
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 13:31:00 2015 -0700

      Merge branch 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs

      Pull ext4 Kconfig description fixup from Jan Kara:
       "A small fixup in description of EXT4_USE_FOR_EXT2 config option"

      * 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs:
        ext4: Update EXT4_USE_FOR_EXT2 description

  commit 176bed1de5bf977938cad26551969eca8f0883b1
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 13:01:50 2015 -0700

      vmstat: explicitly schedule per-cpu work on the CPU we need it to run on

      The vmstat code uses "schedule_delayed_work_on()" to do the initial
      startup of the delayed work on the right CPU, but then once it was
      started it would use the non-cpu-specific "schedule_delayed_work()" to
      re-schedule it on that CPU.

      That just happened to schedule it on the same CPU historically (well, in
      almost all situations), but the code _requires_ this work to be per-cpu,
      and should say so explicitly rather than depend on the non-cpu-specific
      scheduling to schedule on the current CPU.

      The timer code is being changed to not be as single-minded in always
      running things on the calling CPU.

      See also commit 874bbfe600a6 ("workqueue: make sure delayed work run in
      local cpu") that for now maintains the local CPU guarantees just in case
      there are other broken users that depended on the accidental behavior.

      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 995e2fe9a4904c0b83c4eead7db42f5d52b09a85
  Merge: cfed1e3 874bbfe
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 15 12:58:37 2015 -0700

      Merge branch 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq

      Pull workqueue fixlet from Tejun Heo:
       "Single patch to make delayed work always be queued on the local CPU"

      This is not actually something we should guarantee, but it's something
      we by accident have historically done, and at least one call site has
      grown to depend on it.

      I'm going to fix that known broken callsite, but in the meantime this
      makes the accidental behavior be explicit, just in case there are other
      cases that might depend on it.

      * 'for-4.3-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq:
        workqueue: make sure delayed work run in local cpu

  commit 0dfc70c33409afc232ef0b9ec210535dfbf9bc61
  Author: Keith Busch <keith.busch@xxxxxxxxx>
  Date:   Thu Oct 15 13:38:48 2015 -0600

      NVMe: Fix memory leak on retried commands

      Resources are reallocated for requeued commands, so unmap and release
      the iod for the failed command.

      It's a pretty bad memory leak and causes a kernel hang if you remove a
      drive because of a busy dma pool. You'll get messages spewing like this:

        nvme 0000:xx:xx.x: dma_pool_destroy prp list 256, ffff880420dec000 busy

      and lock up pci and the driver since removal never completes while
      holding a lock.

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0.x-
      Signed-off-by: Keith Busch <keith.busch@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit fc531d9848a06e96280e60e4a5b5168de3ad5c3d
  Author: Wolfram Sang <wsa@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 15:50:15 2015 +0200

      MAINTAINERS: add maintainers for Synopsis Designware I2C drivers

      Those guys already have been helpful in the past and are actively
      working on this driver, unlike me.

      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Acked-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Acked-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Acked-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>

  commit 17b38fb89055bf5df402980c9546a8b046552f2b
  Author: Doron Tsur <doront@xxxxxxxxxxxx>
  Date:   Thu Oct 15 15:01:02 2015 +0300

      IB/core: Fix memory corruption in ib_cache_gid_set_default_gid

      When ib_cache_gid_set_default_gid is called from several threads,
      updating the table could make find_gid fail, therefore a negative
      index will be retruned and an invalid table entry will be used.
      Locking find_gid as well fixes this problem.

      Fixes: 03db3a2d81e6 ('IB/core: Add RoCE GID table management')
      Signed-off-by: Doron Tsur <doront@xxxxxxxxxxxx>
      Signed-off-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Thu Oct 15 17:21:37 2015 +0100

      KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring

      The following sequence of commands:

          i=`keyctl add user a a @s`
          keyctl request2 keyring foo bar @t
          keyctl unlink $i @s

      tries to invoke an upcall to instantiate a keyring if one doesn't already
      exist by that name within the user's keyring set.  However, if the upcall
      fails, the code sets keyring->type_data.reject_error to -ENOKEY or some
      other error code.  When the key is garbage collected, the key destroy
      function is called unconditionally and keyring_destroy() uses list_empty()
      on keyring->type_data.link - which is in a union with reject_error.
      Subsequently, the kernel tries to unlink the keyring from the keyring 
names
      list - which oopses like this:

        BUG: unable to handle kernel paging request at 00000000ffffff8a
        IP: [<ffffffff8126e051>] keyring_destroy+0x3d/0x88
        ...
        Workqueue: events key_garbage_collector
        ...
        RIP: 0010:[<ffffffff8126e051>] keyring_destroy+0x3d/0x88
        RSP: 0018:ffff88003e2f3d30  EFLAGS: 00010203
        RAX: 00000000ffffff82 RBX: ffff88003bf1a900 RCX: 0000000000000000
        RDX: 0000000000000000 RSI: 000000003bfc6901 RDI: ffffffff81a73a40
        RBP: ffff88003e2f3d38 R08: 0000000000000152 R09: 0000000000000000
        R10: ffff88003e2f3c18 R11: 000000000000865b R12: ffff88003bf1a900
        R13: 0000000000000000 R14: ffff88003bf1a908 R15: ffff88003e2f4000
        ...
        CR2: 00000000ffffff8a CR3: 000000003e3ec000 CR4: 00000000000006f0
        ...
        Call Trace:
         [<ffffffff8126c756>] key_gc_unused_keys.constprop.1+0x5d/0x10f
         [<ffffffff8126ca71>] key_garbage_collector+0x1fa/0x351
         [<ffffffff8105ec9b>] process_one_work+0x28e/0x547
         [<ffffffff8105fd17>] worker_thread+0x26e/0x361
         [<ffffffff8105faa9>] ? rescuer_thread+0x2a8/0x2a8
         [<ffffffff810648ad>] kthread+0xf3/0xfb
         [<ffffffff810647ba>] ? kthread_create_on_node+0x1c2/0x1c2
         [<ffffffff815f2ccf>] ret_from_fork+0x3f/0x70
         [<ffffffff810647ba>] ? kthread_create_on_node+0x1c2/0x1c2

      Note the value in RAX.  This is a 32-bit representation of -ENOKEY.

      The solution is to only call ->destroy() if the key was successfully
      instantiated.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Tested-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>

  commit 26ba9cd48fc0c2ff741de913270e9469506f3666
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Sep 24 17:52:52 2015 -0700

      gpio: pl061: assign the apropriate handler for irqs

      The PL061 can handle level IRQs and edge IRQs, however it is
      just utilizing handle_simple_irq() for all IRQs. Inspired by
      Stefan Agners patch to vf610, this assigns the right handler
      depending on what type is set up, and after this
      handle_bad_irq() is only used as default and if the type is
      not specified, as is done in the OMAP driver: defining the
      IRQ type is really not optional for this driver.

      The interrupt handler was just writing the interrupt clearing
      register for all lines that were high when entering the handling
      loop, this is wrong: that register is only supposed to be
      written (on a per-line basis) for edge IRQs, so this ACK
      was moved to the .irq_ack() callback as is proper.

      Tested with PL061 on the ARM RealView PB11MPCore and the
      MMC/SC card detect GPIO.

      Cc: Jonas Gorski <jogo@xxxxxxxxxxx>
      Cc: Stefan Agner <stefan@xxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4f1d841475e1f6e9e32496dda11215db56f4ea73
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Fri Oct 9 17:51:47 2015 +0200

      ARM: tegra: Comment out gpio-ranges properties

      While the addition of these properties is technically correct it unveils
      a bug with deferred probe. The problem is that the presence of the gpio-
      range property causes the gpio-tegra driver to defer probe (it needs the
      pinctrl driver to be ready). That's technically correct, but it causes a
      couple of issues:

        - The keyboard on Chromebooks stops working. The reason for that is
          that the gpio-tegra device has not registered an IRQ domain by the
          time the EC SPI device is registered, hence the interrupt number
          resolves to 0. This is technically a bug in the SPI core, since it
          should really resolve the interrupt at probe time and defer if the
          IRQ domain isn't available yet. This is similar to what's done for
          I2C and platform device already.

        - The gpio-tegra device deferring probe means that it is moved to the
          end of the dpm_list. This list defines the suspend/resume order for
          devices. However the core lacks a way to move all users of the
          gpio-tegra device to the end of the dpm_list at the same time. This
          in turn results in a subtle bug on Jetson TK1, where the gpio-keys
          device is used to expose the power key as input. The power key is a
          convenient way to wake the system from suspend. Interestingly, the
          gpio-keys device ends up getting probed at a point after gpio-tegra
          has been probed successfully from having been deferred earlier. As
          such the driver doesn't need to defer the probe itself, and hence
          the device isn't moved to the end of the dpm_list. This causes the
          gpio-tegra device to be suspended before gpio-keys, which in turn
          leaves gpio-keys unable to wake the system from suspend.

      There are patches in the works to fix both of the above issues, but they
      are too involved to make it into v4.3, so in the meantime let's fix the
      regressions by commenting out the gpio-ranges properties until the fixes
      have landed.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit b02176f30cd30acccd3b633ab7d9aed8b5da52ff
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 8 12:20:22 2015 -0400

      block: don't release bdi while request_queue has live references

      bdi's are initialized in two steps, bdi_init() and bdi_register(), but
      destroyed in a single step by bdi_destroy() which, for a bdi embedded
      in a request_queue, is called during blk_cleanup_queue() which makes
      the queue invisible and starts the draining of remaining usages.

      A request_queue's user can access the congestion state of the embedded
      bdi as long as it holds a reference to the queue.  As such, it may
      access the congested state of a queue which finished
      blk_cleanup_queue() but hasn't reached blk_release_queue() yet.
      Because the congested state was embedded in backing_dev_info which in
      turn is embedded in request_queue, accessing the congested state after
      bdi_destroy() was called was fine.  The bdi was destroyed but the
      memory region for the congested state remained accessible till the
      queue got released.

      a13f35e87140 ("writeback: don't embed root bdi_writeback_congested in
      bdi_writeback") changed the situation.  Now, the root congested state
      which is expected to be pinned while request_queue remains accessible
      is separately reference counted and the base ref is put during
      bdi_destroy().  This means that the root congested state may go away
      prematurely while the queue is between bdi_dstroy() and
      blk_cleanup_queue(), which was detected by Andrey's KASAN tests.

      The root cause of this problem is that bdi doesn't distinguish the two
      steps of destruction, unregistration and release, and now the root
      congested state actually requires a separate release step.  To fix the
      issue, this patch separates out bdi_unregister() and bdi_exit() from
      bdi_destroy().  bdi_unregister() is called from blk_cleanup_queue()
      and bdi_exit() from blk_release_queue().  bdi_destroy() is now just a
      simple wrapper calling the two steps back-to-back.

      While at it, the prototype of bdi_destroy() is moved right below
      bdi_setup_and_register() so that the counterpart operations are
      located together.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: a13f35e87140 ("writeback: don't embed root bdi_writeback_congested 
in bdi_writeback")
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Reported-and-tested-by: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/g/CAAeHK+zUJ74Zn17=rOyxacHU18SgCfC6bsYW=6kCY5GXJBwGfQ@xxxxxxxxxxxxxx
      Reviewed-by: Jan Kara <jack@xxxxxxxx>
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 81c04b943872e0332872df18cec1dec89b178b4d
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Mon Oct 12 21:23:39 2015 +0200

      nvme: use an integer value to Linux errno values

      Use a separate integer variable to hold the signed Linux errno
      values we pass back to the block layer.  Note that for pass through
      commands those might still be NVMe values, but those fit into the
      int as well.

      Fixes: f4829a9b7a61: ("blk-mq: fix racy updates of rq->errors")
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit f1c08c9bc8f475aa242270da30b6cc9232bd19e0
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Wed Oct 14 11:24:17 2015 +0200

      clocksource/drivers/imx: Allow timer irq affinity change

      Allow the timer core to change the smp affinity of the broadcast timer
      irq by setting CLOCK_EVT_FEAT_DYNIRQ flag. For this to work the timer
      core needs to be told about the used irq.

      This reduces interrupt pressure and wakeups on CPU0 as well as vastly
      reducing the number of timer broadcast IPIs.

      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 31f7987406497dc65408dee4e84e3f3cc3ffe9cd
  Author: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
  Date:   Fri Sep 4 02:49:58 2015 +0300

      clocksource/drivers/exynos_mct: Use container_of() instead of 
this_cpu_ptr()

      Since evt structure is embedded in per-CPU mevt structure it's
      definitely faster to use container_of() to get access to mevt
      if we have evt (for example as incoming function argument) instead
      of more expensive approach with this_cpu_ptr(&percpu_mct_tick).
      this_cpu_ptr() on per-CPU mevt structure leads to access to cp15
      to get cpu id and arithmetic operations.
      Container_of() is cheaper since it's just one asm instruction.
      This should work if used evt pointer is correct and owned by
      local mevt structure.

      For example, before this patch set_state_shutdown() looks like:

       4a4:     e92d4010        push    {r4, lr}
       4a8:     e3004000        movw    r4, #0
       4ac:     ebfffffe        bl      0 <debug_smp_processor_id>
       4b0:     e3003000        movw    r3, #0
       4b4:     e3404000        movt    r4, #0
       4b8:     e3403000        movt    r3, #0
       4bc:     e7933100        ldr     r3, [r3, r0, lsl #2]
       4c0:     e0844003        add     r4, r4, r3
       4c4:     e59400c0        ldr     r0, [r4, #192]  ; 0xc0
       4c8:     ebffffd4        bl      420 <exynos4_mct_tick_stop.isra.1>
       4cc:     e3a00000        mov     r0, #0
       4d0:     e8bd8010        pop     {r4, pc}

      With this patch:

       4a4:     e92d4010        push    {r4, lr}
       4a8:     e59000c0        ldr     r0, [r0, #192]  ; 0xc0
       4ac:     ebffffdb        bl      420 <exynos4_mct_tick_stop.isra.1>
       4b0:     e3a00000        mov     r0, #0
       4b4:     e8bd8010        pop     {r4, pc}

      Also, for me size of exynos_mct.o decreased from 84588 bytes
      to 83956.

      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>

  commit ba49af35be8a41af7f00a37902a2d70764078bc5
  Author: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
  Date:   Thu Sep 10 03:38:21 2015 +0300

      clocksource/drivers/h8300_*: Remove unneeded memset()s

      Memory for timer16_priv, timer8_priv and tpu_priv structs is
      allocated by devm_kzalloc() in corresponding probe functions
      of drivers.
      No need to zero it one more time.

      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 6eeb8c355fbbe66d1d52eadaa588d5651f8cb092
  Author: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
  Date:   Thu Sep 10 03:38:20 2015 +0300

      clocksource/drivers/sh_cmt: Remove unneeded memset() in sh_cmt_setup()

      Memory for cmt struct is allocated by kzalloc() in sh_cmt_setup.

      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit fdbd13105d08fed6a8201549f389e9c12021b67b
  Author: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
  Date:   Thu Sep 10 03:38:19 2015 +0300

      clocksource/drivers/em_sti: Remove unneeded memset()s

      Memory for cs and ced fields in struct em_sti_priv is allocated
      by devm_kzalloc() in the beginning of em_sti_probe() so they
      don't need to be zeroed one more time in
      em_sti_register_clocksource() and in em_sti_register_clockevent().

      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit f14665f63b92f958636b7e7610ec2c9726ea9335
  Author: Yingjoe Chen <yingjoe.chen@xxxxxxxxxxxx>
  Date:   Mon Jul 13 17:32:46 2015 +0800

      clocksource/drivers/mediatek: Use GPT as sched clock source

      When cpu is in deep idle, arch timer will stop counting. Setup GPT as
      sched clock source so it can keep counting in idle.

      Signed-off-by: Yingjoe Chen <yingjoe.chen@xxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Acked-by: Matthias Brugger <matthias.bgg@xxxxxxxxx>

  commit fc686d0037d782c994e338ecb01bfef8bbafff9f
  Author: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
  Date:   Mon Aug 24 15:14:30 2015 +0200

      clockevents/drivers/mtk: Fix spurious interrupt leading to crash

      After analysis done by Yingjoe Chen, the timer appears to have a pending
      interrupt when it is enabled.

      Fix this by acknowledging the pending interrupt when enabling the timer
      interrupt.

      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Tested-by: Yingjoe Chen <yingjoe.chen@xxxxxxxxxxxx>

  commit a787f40a9a29674d1b9146b7a35e491e7a571152
  Merge: 2e4e5da d8e1f5e
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Oct 15 17:13:26 2015 +0200

      Merge tag 'omap-for-v4.3/fixes-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Merge "Fixes for omap against v4.3-rc5" from Tony Lindgren:

      - Regulator fix for beagle-x15 to fix HDMI without a SD card being
        inserted

      - GPMC fix for showing proper timings and to allow enabling debug
        options that somehow was unselectable earlier

      - Add minimal documentation for new MMC1 dependency on
        REGULATOR_PBIAS as it may not be obvious for people with
        targeted .config files

      * tag 'omap-for-v4.3/fixes-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        Documentation: ARM: List new omap MMC requirements
        memory: omap-gpmc: dump "before" state before first modification
        memory: omap-gpmc: Fix unselectable debug option for GPMC
        ARM: dts: am57xx-beagle-x15: set VDD_SD to always-on

  commit 2e4e5da55afaf9315f2398e85424fd3824459220
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 20:32:05 2015 +0900

      ARM: dts: uniphier: fix IRQ number for devices on PH1-LD6b ref board

      The IRQ signal from external devices on this board is connected to
      the XIRQ4 pin of the SoC.  The IRQ number should be 52, not 50.

      Fixes: a5e921b4771f ("ARM: dts: uniphier: add ProXstream2 and PH1-LD6b 
SoC/board support")
      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit fb659882cc6482bd2e32ec0ab8ab7afeda649413
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Mon Oct 12 14:48:39 2015 +0100

      drivers/perf: arm_pmu: avoid CPU device_node reference leak

      of_cpu_device_node_get increments the reference count on the CPU
      device_node, so we must take care to of_node_put once we've finished
      with it.

      This patch fixes the perf IRQ probing code to avoid the leak.

      Cc: Sudeep Holla <sudeep.holla@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit a0bcbe969f564d1ec08658170dda72a1b7e9053a
  Author: Pawel Moll <pawel.moll@xxxxxxx>
  Date:   Thu Oct 15 14:32:46 2015 +0100

      bus: arm-ccn: Fix irq affinity setting on CPU migration

      When PMU context is migrating between CPUs, interrupt affinity is set as
      well. Only this should not happen when the CCN interrupt is not being
      used at all (the driver is using a hrtimer tick instead).

      Fixed now.

      Cc: <stable@xxxxxxxxxxxxxxx> # 4.2+
      Signed-off-by: Pawel Moll <pawel.moll@xxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit b20519fd5007908c6a816cab1b9db911915e9fbd
  Author: Pawel Moll <pawel.moll@xxxxxxx>
  Date:   Thu Oct 15 14:32:45 2015 +0100

      bus: arm-ccn: Handle correctly no-more-cpus case

      When migrating events the driver picks another cpu using
      cpumask_any_but() function, which returns value >= nr_cpu_ids
      when there is none available, not a negative value as the code
      assumed. Fixed now.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Pawel Moll <pawel.moll@xxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit f42d79ab67322e51b92dd7aa965e310c71352a64
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 05:02:15 2015 +0000

      blk-mq: fix use-after-free in blk_mq_free_tag_set()

      tags is freed in blk_mq_free_rq_map() and should not be used after that.
      The problem doesn't manifest if CONFIG_CPUMASK_OFFSTACK is false because
      free_cpumask_var() is nop.

      tags->cpumask is allocated in blk_mq_init_tags() so it's natural to
      free cpumask in its counter part, blk_mq_free_tags().

      Fixes: f26cdc8536ad ("blk-mq: Shared tag enhancements")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Cc: Keith Busch <keith.busch@xxxxxxxxx>
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 21d4de1469a1da20a14a745c5f49488bba417ea7
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 8 10:12:01 2015 +0300

      gpio: pl061: returning with lock held in pl061_irq_type()

      We were returning with "chip->lock" held by mistake.  It's safe to
      move the return to before we take the spinlock.

      Fixes: 1dbf7f299f90 ('gpio: pl061: detail IRQ trigger handling')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 922ec58c70cd4a1065dd3c9f94e845dc1348b533
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 09:12:49 2015 +0200

      cfg80211: reg: remove useless reg_timeout scheduling

      When the functions reg_set_rd_driver() and reg_set_rd_country_ie()
      return with an error, the calling function already restores data
      by calling restore_regulatory_settings(), so there's no need to
      also schedule a timeout (which would lead to other side effects
      such as indicating CRDA failed, which clearly isn't true.) Remove
      the scheduling.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit c7d319e542a3126bca029745735cdef5a5ca55c2
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 09:03:05 2015 +0200

      cfg80211: reg: search built-in database directly

      Instead of searching the built-in database only in the worker,
      search it directly and return an error if the entry cannot be
      found (or memory cannot be allocated.) This means that builtin
      database queries no longer rely on the timeout.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit cecbb069cce37dac754380d36c31e286a276e4c3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 08:47:34 2015 +0200

      cfg80211: reg: rename reg_call_crda to reg_query_database

      The new name is more appropriate since in the case of a built-in
      database it may not really rely on CRDA.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 25b20dbdc47f305ca31fc5eff65b8a069776f679
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 12:05:05 2015 +0200

      cfg80211: reg: fix reg_call_crda() return value bug

      The function reg_call_crda() can't actually validly return
      REG_REQ_IGNORE as it does now when calling CRDA fails since
      that return value isn't handled properly. Fix that.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 7cf374182391d67f08c0ef0519a57fb594e0f543
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 08:44:32 2015 +0200

      cfg80211: reg: remove useless non-NULL check

      There's no way that the alpha2 pointer can be NULL, so
      no point in checking that it isn't.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 8047d2616dc7ff47d34f5bc64835e060ccb5db1c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 15 16:16:09 2015 +0200

      cfg80211: fix gHz to GHz

      There's no "g" prefix, only "G" (1e9) that was clearly intended here.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit d14f6fced5f9360edca5a1325ddb7077aab1203b
  Author: Jay Cornwall <jay@xxxxxxxxxxxx>
  Date:   Wed Sep 16 14:10:03 2015 -0500

      iommu/amd: Fix BUG when faulting a PROT_NONE VMA

      handle_mm_fault indirectly triggers a BUG in do_numa_page
      when given a VMA without read/write/execute access. Check
      this condition in do_fault.

      do_fault -> handle_mm_fault -> handle_pte_fault -> do_numa_page

        mm/memory.c
        3147  static int do_numa_page(struct mm_struct *mm, struct 
vm_area_struct *vma,
        ....
        3159  /* A PROT_NONE fault should not end up here */
        3160  BUG_ON(!(vma->vm_flags & (VM_READ | VM_EXEC | VM_WRITE)));

      Signed-off-by: Jay Cornwall <jay@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit f6c7aba47bcc0b1cc2085c8d8af80f8c02f28269
  Author: Michel Dänzer <michel.daenzer@xxxxxxx>
  Date:   Thu Oct 8 17:48:04 2015 +0900

      drm/amdgpu: Keep the pflip interrupts always enabled v7

      This fixes flickering issues caused by prematurely firing pflip
      interrupts.

      v2 (chk): add commit message, fix DCE V10/V11 and DM as well
      v3: Re-enable pflip interrupt wherever we re-enable a CRTC
      v4: Enable pflip interrupt in DAL as well
      v5: drop DAL changes for upstream
      v6: (agd): only enable interrupts on crtcs that exist
      v7: (agd): integrate suggestions from Michel

      Signed-off-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 80c083c5e4dc35fa37c01f000b1393c51294b9de
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 12 10:38:02 2015 -0400

      drm/amdgpu: adjust default dispclk (v2)

      Set the default to 600Mhz if it's not set in the bios,
      and bump the default to 600Mhz if it's lower than that.

      Port of radeon commit:
      9368931db826d57b6b88b3145a00276626b48df0

      v2: clean up the code a bit

      bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=91896

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 96aec911482246a319bf457f39fa848ce436c8fd
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Oct 14 12:37:32 2015 -0500

      amd-xgbe: Use system workqueue for device restart

      A previous patch switched from using the system workqueue to the device
      workqueue for various operations. During a device restart the device
      workqueue is flushed so the restart cannot use this workqueue or else
      a deadlock results.  Move the device restart back to using the system
      workqueue.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74661bee1f524ca970086748291b3ca1b4c21ffe
  Merge: adc9048 771acac
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 06:09:58 2015 -0700

      Merge branch 'switchdev-locking'

      Jiri Pirko says:

      ====================
      switchdev: change locking

      This is something which I'm currently struggling with.
      Callers of attr_set and obj_add/del often hold not only RTNL, but also
      spinlock (bridge). So in that case, the driver implementing the op cannot 
sleep.

      The way rocker is dealing with this now is just to invoke driver operation
      and go out, without any checking or reporting of the operation status.

      Since it would be nice to at least put a warning in case the operation 
fails,
      it makes sense to do this in delayed work directly in switchdev core
      instead of implementing this in separate drivers. And that is what this 
patchset
      is introducing.

      So from now on, the locking of switchdev mod ops is consistent. Caller 
either
      holds rtnl mutex or in case it does not, caller sets defer flag, telling
      switchdev core to process the op later, in deferred queue.

      Function to force to process switchdev deferred ops can be called by op
      caller in appropriate location, for example after it releases
      spin lock, to force switchdev core to process pending ops.

      v1->v2:
      - rebased on current net-next head (including Scott's ageing patchset)
      v2->v3:
      - fixed comment s/of/or/ typo suggested by Nik
      v3->v4:
      - the actual patchset is sent instead of different branch I send in v3 :/
      v4->v5:
      - added patch to "const" attr param
      - reworked deferred ops infrastructure (mainly patch number 1 and
        internal users (patch 3 and 5)) - resolves the issue pointed out
        by John
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 771acac2ffa5957b91e881908cd4c9657978a209
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:55 2015 +0200

      switchdev: assert rtnl mutex when going over lower netdevs

      netdev_for_each_lower_dev has to be called with rtnl mutex held. So
      better enforce it in switchdev functions.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d33eeb645d59ffd14bbc6db977c3783af42dd700
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:54 2015 +0200

      rocker: remove nowait from switchdev callbacks.

      No need to avoid sleeping in switchdev callbacks now, as the switchdev
      core allows it.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 56607386e80cc7ce923592e115a3492485b47c72
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:53 2015 +0200

      bridge: defer switchdev fdb del call in fdb_del_external_learn

      Since spinlock is held here, defer the switchdev operation. Also, ensure
      that defered switchdev ops are processed before port master device
      is unlinked.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d429c5ddc5128fccd3048059ae26bb39f0d8284
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:52 2015 +0200

      switchdev: introduce possibility to defer obj_add/del

      Similar to the attr usecase, the caller knows if he is holding RTNL and is
      in atomic section. So let the called to decide the correct call variant.

      This allows drivers to sleep inside their ops and wait for hw to get the
      operation status. Then the status is propagated into switchdev core.
      This avoids silent errors in drivers.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 850d0cbc9171f63f0418afffb0d89a84db927851
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:51 2015 +0200

      switchdev: remove pointers from switchdev objects

      When object is used in deferred work, we cannot use pointers in
      switchdev object structures because the memory they point at may be 
already
      used by someone else. So rather do local copy of the value.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: John Fastabend <john.r.fastabend@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0bc05d585d381c30de3fdf955730df31593d2101
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:50 2015 +0200

      switchdev: allow caller to explicitly request attr_set as deferred

      Caller should know if he can call attr_set directly (when holding RTNL)
      or if he has to defer the att_set processing for later.

      This also allows drivers to sleep inside attr_set and report operation
      status back to switchdev core. Switchdev core then warns if status is
      not ok, instead of silent errors happening in drivers.

      Benefit from newly introduced switchdev deferred ops infrastructure.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f7fadf3047d005d17376da65aa9e5734f45a77d4
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:49 2015 +0200

      switchdev: make struct switchdev_attr parameter const for attr_set calls

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 793f40147e82cdedc80971fa7f5596d6ed1e555e
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 14 19:40:48 2015 +0200

      switchdev: introduce switchdev deferred ops infrastructure

      Introduce infrastructure which will be used internally to defer ops.
      Note that the deferred ops are queued up and either are processed by
      scheduled work or explicitly by user calling deferred_process function.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 50826874f059af9a7f1ed748528f68ea92d5039c
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Oct 14 21:15:13 2015 +0200

      crypto: n2 - set array of const as const

      Some array of const char are not set as const.
      This patch fix that.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit cac367bfc134174506a57a44834e3a608acc2f9b
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Oct 14 21:14:19 2015 +0200

      crypto: sahara - set array of const as const

      Some array of const char are not set as const.
      This patch fix that.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 19b14e7e224f1c119a1756fde02ccacefd280212
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Oct 14 21:11:00 2015 +0200

      crypto: s390/sha - replace raw value by their coresponding define

      SHA_MAX_STATE_SIZE is just the number of u32 word for SHA512.
      So replace the raw value "16" by their meaning (SHA512_DIGEST_SIZE / 4)

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 353519887ca3df97c0e60be4fdf05c44e2faca22
  Author: Stephan Mueller <smueller@xxxxxxxxxx>
  Date:   Mon Sep 21 20:59:56 2015 +0200

      crypto: keywrap - add testmgr support

      The testmanager code for symmetric ciphers is extended to allow
      verification of the IV after a cipher operation.

      In addition, test vectors for kw(aes) for encryption and decryption are
      added.

      Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 1c49678e8a35de7d009854f79337261df1e774df
  Author: Stephan Mueller <smueller@xxxxxxxxxx>
  Date:   Mon Sep 21 20:58:56 2015 +0200

      crypto: keywrap - enable compilation

      Hook keywrap source code into Kconfig and Makefile

      Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e28facde3c39005071cc5323d56539bb44efa446
  Author: Stephan Mueller <smueller@xxxxxxxxxx>
  Date:   Mon Sep 21 20:58:23 2015 +0200

      crypto: keywrap - add key wrapping block chaining mode

      This patch implements the AES key wrapping as specified in
      NIST SP800-38F and RFC3394.

      The implementation covers key wrapping without padding.

      IV handling: The caller does not provide an IV for encryption,
      but must obtain the IV after encryption which would serve as the first
      semblock in the ciphertext structure defined by SP800-38F. Conversely,
      for decryption, the caller must provide the first semiblock of the data
      as the IV and the following blocks as ciphertext.

      The key wrapping is an authenticated decryption operation. The caller
      will receive EBADMSG during decryption if the authentication failed.

      Albeit the standards define the key wrapping for AES only, the template
      can be used with any other block cipher that has a block size of 16
      bytes. During initialization of the template, that condition is checked.
      Any cipher not having a block size of 16 bytes will cause the
      initialization to fail.

      Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8a826a34a52eef9ea1cb93f49ada358fa7b0bb32
  Author: Boris BREZILLON <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Jun 16 11:46:46 2015 +0200

      crypto: testmgr - test IV value after a cipher operation

      The crypto drivers are supposed to update the IV passed to the crypto
      request before calling the completion callback.
      Test for the IV value before considering the test as successful.

      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 53ca376eec4eb635e2249c8e89093f499e180731
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 15 08:21:55 2015 +0200

      mlxsw: core: Fix race condition in __mlxsw_emad_transmit

      Under certain conditions EMAD responses can be returned from the device
      even before setting trans_active. This will cause the EMAD Rx listener
      to drop the EMAD response - as there are no active transactions - and
      timeouts will be generated.

      Fix this by setting trans_active before transmitting the EMAD skb.

      Fixes: 4ec14b7634b2 ("mlxsw: Add interface to access registers and 
process events")
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit adc9048c607a08320e87befc940955d6ffe51fac
  Author: lipeng <lipeng321@xxxxxxxxxx>
  Date:   Thu Oct 15 12:40:34 2015 +0800

      net: hisilicon: fixes a bug when using ethtool -S

      this patch fixes a bug in hns driver. when we want to get statistic info
      by using ethtool -S, it shows us there are 3 wrong counters info. because
      the strings related to the registers are wrong. it needs to modify the
      strings which give us wrong info.

      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e109a69145c059cede79236c3d44080640f23472
  Merge: f6bba8945 a85ce53
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 15 05:56:32 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-15

      This series contains updates to i40e, i40evf and ixgbe.

      Emil changes the ixgbe driver to disable LRO by default in favor or GRO.

      Mark provides two changes for ixgbe, first fixes a semaphore issue when
      a reset never completes, it is necessary to retake the semaphore before
      returning.

      Jesse fixes up a missing function header comment variable reference.  Then
      enables ethtool priv flags to control flow director at runtime.

      Neerav changes several i40e error messages to debug only since the
      messages were printing when there was no functional issue and were meant
      for debug only.

      Catherine changes the i40e driver to make only X722 support 100M SGMII,
      since it is the only device to actually support it.

      Anjali modifies the i40e/i40evf driver to add writeback on ITR offload
      support for X722 since the device has a way to work around the
      descriptor writeback issue.

      Mitch cleans up obsolete code.  Also reduces the i40evf init time by
      shortening up the delays in the init task to aid in performance in
      load/unload tests and mitigates DMAR errors in VF enable/disable tests.

      Shannon modifies i40e to allow flow director sideband when the device
      is in MFP mode and only has one partition enabled, since we still have
      plenty of interrupts for managing the flow director activity.  Also
      cleaned up flow director ATR control in debugfs since the priv flag
      has been added to our ethtool interface.  Makes several general code
      cleanups of redundant or unnecessary code for i40e.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36d48fb5766aee9717e429f772046696b215282d
  Author: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 10:39:24 2015 +0100

      i2c: designware-platdrv: enable RuntimePM before registering to the core

      The core may register clients attached to this master which may use
      funtionality from the master. So, RuntimePM must be enabled before, 
otherwise
      this will fail.

      Signed-off-by: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Acked-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx

  commit eadd709f5d2e8aebb1b7bf49460e97a68d81a9b0
  Author: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 08:24:23 2015 +0100

      i2c: s3c2410: enable RuntimePM before registering to the core

      The core may register clients attached to this master which may use
      funtionality from the master. So, RuntimePM must be enabled before, 
otherwise
      this will fail. While here, move drvdata, too.

      Signed-off-by: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
      Tested-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Acked-by: Kukjin Kim <kgene@xxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx

  commit 4f7effddf4549d57114289f273710f077c4c330a
  Author: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 10:39:25 2015 +0100

      i2c: rcar: enable RuntimePM before registering to the core

      The core may register clients attached to this master which may use
      funtionality from the master. So, RuntimePM must be enabled before, 
otherwise
      this will fail. While here, move drvdata, too.

      Reported-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx

  commit 74cedd30522819d87131715ca0e7d041748b2721
  Author: Kieran Bingham <kieranbingham@xxxxxxxxx>
  Date:   Mon Oct 12 21:54:43 2015 +0100

      i2c: return probe deferred status on dev_pm_domain_attach

      A change of return status was introduced in commit 3fffd1283927
      ("i2c: allow specifying separate wakeup interrupt in device tree")

      The commit prevents the defer status being passed up the call stack
      appropriately when dev_pm_domain_attach returns -EPROBE_DEFER.

      Catch the PROBE_DEFER and clear up the IRQ wakeup status

      Signed-off-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Fixes: 3fffd1283927 ("i2c: allow specifying separate wakeup interrupt in 
device tree")
      Reviewed-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>

  commit 941fd2e7096495c05d693efcd3141e4e79a51ff6
  Author: Dinh Nguyen <dinguyen@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 18:14:16 2015 -0500

      EDAC, altera: SoCFPGA EDAC should not look for ECC_CORR_EN

      The bootloader may or may not enable the ECC_CORR_EN bit. By
      not enabling ECC_CORR_EN, when error happens, it is the user's
      responsibility to perform a full SDRAM scrub.

      Remove the check for ECC_CORR_EN.

      Signed-off-by: Dinh Nguyen <dinguyen@xxxxxxxxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Thor Thayer <tthayer@xxxxxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444864456-21778-1-git-send-email-dinguyen@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit a85ce532f28efabda030d9065a0c2023a2003f36
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Wed Sep 9 13:37:33 2015 -0700

      ixgbe: Check for setup_internal_link method

      Only call the internal_setup_link method when it is provided. This
      check is required for newer version parts.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Darin Miller <darin.j.miller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 164f739361c962ac63aa6f7cbd48309d1bff15fb
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Thu Sep 3 17:19:02 2015 -0400

      i40e/i40evf: Bump i40e version to 1.3.28 and i40evf to 1.3.19

      Bump.

      Change-ID: I8d9a99f320af43960deba8718eee2d6de50eaf46
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c8d75aa47dd585c9538a8205e9bb9847e12cfb84
  Author: Jason Low <jason.low2@xxxxxx>
  Date:   Wed Oct 14 12:07:56 2015 -0700

      posix_cpu_timer: Reduce unnecessary sighand lock contention

      It was found while running a database workload on large systems that
      significant time was spent trying to acquire the sighand lock.

      The issue was that whenever an itimer expired, many threads ended up
      simultaneously trying to send the signal. Most of the time, nothing
      happened after acquiring the sighand lock because another thread
      had just already sent the signal and updated the "next expire" time.
      The fastpath_timer_check() didn't help much since the "next expire"
      time was updated after the threads exit fastpath_timer_check().

      This patch addresses this by having the thread_group_cputimer structure
      maintain a boolean to signify when a thread in the group is already
      checking for process wide timers, and adds extra logic in the fastpath
      to check the boolean.

      Signed-off-by: Jason Low <jason.low2@xxxxxx>
      Reviewed-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Reviewed-by: George Spelvin <linux@xxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: hideaki.kimura@xxxxxxx
      Cc: terry.rudd@xxxxxxx
      Cc: scott.norton@xxxxxxx
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444849677-29330-5-git-send-email-jason.low2@xxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d5c373eb5610686162ff50429f63f4c00c554799
  Author: Jason Low <jason.low2@xxxxxx>
  Date:   Wed Oct 14 12:07:55 2015 -0700

      posix_cpu_timer: Convert cputimer->running to bool

      In the next patch in this series, a new field 'checking_timer' will
      be added to 'struct thread_group_cputimer'. Both this and the
      existing 'running' integer field are just used as boolean values. To
      save space in the structure, we can make both of these fields booleans.

      This is a preparatory patch to convert the existing running integer
      field to a boolean.

      Suggested-by: George Spelvin <linux@xxxxxxxxxxx>
      Signed-off-by: Jason Low <jason.low2@xxxxxx>
      Reviewed: George Spelvin <linux@xxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: hideaki.kimura@xxxxxxx
      Cc: terry.rudd@xxxxxxx
      Cc: scott.norton@xxxxxxx
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444849677-29330-4-git-send-email-jason.low2@xxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 934715a191e4be0c602d39455a7a74316f274d60
  Author: Jason Low <jason.low2@xxxxxx>
  Date:   Wed Oct 14 12:07:54 2015 -0700

      posix_cpu_timer: Check thread timers only when there are active thread 
timers

      The fastpath_timer_check() contains logic to check for if any timers
      are set by checking if !task_cputime_zero(). Similarly, we can do this
      before calling check_thread_timers(). In the case where there
      are only process-wide timers, this will skip all of the computations for
      per-thread timers when there are no per-thread timers.

      As suggested by George, we can put the task_cputime_zero() check in
      check_thread_timers(), since that is more of an optization to the
      function. Similarly, we move the existing check of cputimer->running
      to check_process_timers().

      Signed-off-by: Jason Low <jason.low2@xxxxxx>
      Reviewed-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Reviewed-by: George Spelvin <linux@xxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: hideaki.kimura@xxxxxxx
      Cc: terry.rudd@xxxxxxx
      Cc: scott.norton@xxxxxxx
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444849677-29330-3-git-send-email-jason.low2@xxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7c177d994eb9637302b79e80d331f48dfbe26368
  Author: Jason Low <jason.low2@xxxxxx>
  Date:   Wed Oct 14 12:07:53 2015 -0700

      posix_cpu_timer: Optimize fastpath_timer_check()

      In fastpath_timer_check(), the task_cputime() function is always
      called to compute the utime and stime values. However, this is not
      necessary if there are no per-thread timers to check for. This patch
      modifies the code such that we compute the task_cputime values only
      when there are per-thread timers set.

      Signed-off-by: Jason Low <jason.low2@xxxxxx>
      Reviewed-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Reviewed-by: George Spelvin <linux@xxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: hideaki.kimura@xxxxxxx
      Cc: terry.rudd@xxxxxxx
      Cc: scott.norton@xxxxxxx
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444849677-29330-2-git-send-email-jason.low2@xxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 5be8308b1614947f056802cb5775307f0ad54ad2
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Sep 3 17:19:01 2015 -0400

      i40evf: speed up init

      Shorten up the delays in the init task, allowing the VF driver to
      initialize faster. This aids performance in load/unload tests and
      mitigates DMAR errors in VF enable/disable tests with absurdly short
      delays. In the real world, the VF driver will come up more quickly.

      The original values were set conservatively based on what we expected
      from the firmware in terms of performance. Now that the driver is in use
      and we know how well firmware responds to our requests, we can shorten
      these delays.

      Change-ID: Ibead77d34b19e8170e667c3f58bc14748bbc5bc9
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a916549029848f1356bf2d797e83218de53f17b2
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Sep 3 17:19:00 2015 -0400

      i40e: remove unnecessary string copy operations

      Save a little stack space and remove unnecessary strncpy() with a little
      string pointer.

      Change-ID: Id2719d34710bfc273d3bb445fec085cd04276e88
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3fced535079a6aaff2d85bd5c52ad50df0558e3d
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:59 2015 -0400

      i40e: X722 is on the IOSF bus and does not report the PCI bus info

      X722 will report Gen 1x1 in the PCI config space as it is on
      IOSF bus, so skip the PCI bus link/speed check.

      Change-ID: Icd5f5751dc7fb00dccf0d5dc5a0a644948e7062e
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3ac67d7bfa2f35cc8a52bdff39e3bbadb6e639a9
  Author: Kevin Scott <kevin.c.scott@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:58 2015 -0400

      i40e: Store off PHY capabilities

      Store off reported PHY capabilities in link_info structure.

      Change-ID: Ife0f037c26983ca985dbf79abf33f8f8791369e8
      Signed-off-by: Kevin Scott <kevin.c.scott@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 874d1a10eb1ab466f48627cdd268335a635dde52
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:57 2015 -0400

      i40e/i40evf: remove redundant declarations of a variable and a function

      Remove a variable declaration inside an if block hiding an existing
      declaration at the start of the function.

      Also remove a forward function declaration that is no longer needed due
      to code re-organization.

      Change-ID: I12954668b722718074949c93d74cd20eaacd93e4
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 106b1941ff304ad6b6b9828b24c8545814a7a4e4
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:56 2015 -0400

      i40e: remove FD atr control from debugfs

      Since the flow-director-atr priv flag was added to our ethtool interface,
      we don't need the on/off control in debugfs.

      Change-ID: Ib3b599916434ab30ccd40074e71d7a81609b5bb5
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6eae9c6a3536f3a676b54ebf82244c23d3b1019f
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:55 2015 -0400

      i40e: allow FD SB if MFP mode only has 1 partition

      Even though the device might be in MFP mode, if there's only one partition
      enabled, then we still have plenty of interrupts for managing the Flow
      Directory Sideband activity.  This patch enables FD SB in this case.
      This patch also reverses the sense of the conditional in order to remove
      the negative logic.

      Change-ID: I9edf211a6219fc8d159b4be9964f9fd7f4e00bc0
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9b28ef01003f815d9bbdb50c4208586c9246ad08
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:54 2015 -0400

      i40e: remove obsolete version check

      This version check only applies to very, very old firmware,
      that only ran on A0 hardware, which we never shipped and don't
      support in this driver anyway. Remove it, before somebody
      gets hurt.

      Change-ID: I3752d090ff488acf98ee76b075af961e9c968ee4
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1f012279163af2f1bec30de42960f0312be3a52e
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:53 2015 -0400

      i40e/i40evf: Add WB_ON_ITR offload support

      X722 has a way to work around the descriptor WB issue,
      this offload helps turn that feature on.

      Change-ID: I7ffa67622426bfca5a651417b63e3afcfeb60412
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3b6c2179eebf4536d08cf966c9f585dd95c72367
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:52 2015 -0400

      i40e: Remove 100M SGMII unless hw is X722

      Only the X722 device now supports 100M SGMII, and nothing supports
      100M on 1000Base_T.

      Change-ID: I6f44dcd818944edd40041410e6de380f4a359a0c
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8279e49531f427ae7e8db894072d91bc42d3eeb5
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:50 2015 -0400

      i40e: Change some messages from info to debug only

      There are several error messages that have been printing when there is
      no functional issue. These messages should be available at debug message
      level only.

      Change-ID: Id91e47bf942c483563995f30d8705fa53acd5aa3
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ef17178cf5abe304b2098a50f580e8c19e5084d2
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:49 2015 -0400

      i40e: use priv flags to control flow director

      Some customers wish to be able to control our hardware specific
      feature called flow director, at runtime.  This patch enables
      ethtool priv flags to control this driver/hardware specific feature.

      ethtool --set-priv-flags ethX flow-director-atr off

      NOTE: the ethtool ntuple interface controls the flow-director
            sideband rules.

      Change-ID: Iba156350b07fa2ce66f53ded51739f9a3781fe0e
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d4b2f9fe608320604748c3cb90c99b2255782935
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Sep 3 17:18:48 2015 -0400

      i40e: Add missing parameter comment to ndo_bridge_setlink

      Add nlflags to the function comment for ndo_bridge_setlink.

      Change-ID: I34c704f307f2a3f7bac3ca4b44e2a094d3d082d6
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8bf7a7b879985321c63e3ae46fee4e7f0d654ab1
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Wed Aug 26 14:10:22 2015 -0700

      ixgbe: Fix CS4227-related semaphore error on reset failure

      If the reset never completes, it is necessary to retake the
      semaphore before returning, because the caller will release
      the semaphore.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Darin Miller <darin.j.miller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 72bfd32d2f84d26aa132dd74a8eef14d039d326f
  Author: Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
  Date:   Mon Aug 24 18:08:31 2015 -0700

      ixgbe: disable LRO by default

      This patch disables LRO by default in favor of GRO.

      LRO is incompatible with forwarding and is disabled when forwarding
      is turned on which makes the default offloads of the driver
      inconsistent. LRO can still be enabled via ethtool.

      Signed-off-by: Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
      Tested-by: Darin Miller <darin.j.miller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a71225e204f5ba8b41e7bb100ca37c074861d5b1
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Oct 14 12:27:17 2015 +0100

      irqchip/gic-v2m: Add support for multiple MSI frames

      The GICv2m driver is so far limited to a single MSI frame, but
      nothing prevents an implementation from having several of them.

      This patch expands the driver to enumerate all frames, keeping
      the first one as the canonical identifier for the MSI domains.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Tested-by: Duc Dang <dhdang@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444822037-16983-3-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit db8c70ec1f9d45e530383204c57f2971df4bd334
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Oct 14 12:27:16 2015 +0100

      irqchip/gic-v3: Fix translation of LPIs after conversion to irq_fwspec

      Commit f833f57ff254 ("irqchip: Convert all alloc/xlate users from
      of_node to fwnode") converted the GICv3 driver to using irq_fwspec
      as part of its 'translate' method.

      Too bad it ended up with a copy of the GICv2 'translate' method,
      which screws up LPI translation (by not translating them at all).

      Restore the code in its original shape, and just change what is
      really required...

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Duc Dang <dhdang@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444822037-16983-2-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 6933c35a307cad0b8b847042346dde68866d3d2a
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Wed Oct 14 11:01:05 2015 +0200

      s390/dasd: fix list_del corruption after lcu changes

      A summary unit check occurs when the lcu updates the PAV configuration
      e.g. base PAV assignment or PAV mode at all. This requires the reset
      of the drivers internal pavgroups. Therefore the alias devices are
      flushed and moved via a temporary list to the active_devices list
      where they are not associated with a pavgroup. In conjunction with
      updates to the base device the pavgroup may be removed since both
      base_list and alias_list are empty. Unfortunately during alias flush
      and move to the active_device list from alias_list the pavgroup
      pointer is not deleted in the device private structure. This leads to
      a list del_corruption if another lcu_update tries to move the device
      in the non existent pavgroup.

      Fix by removing the pavgroup pointer after the alias device was moved
      to the active_devices list.

      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit db347f1a5304d68c68c52f19971924b1e5842f3c
  Author: Marcin Wojtas <mw@xxxxxxxxxxxx>
  Date:   Thu Oct 15 03:17:08 2015 +0200

      ARM: mvebu: correct a385-db-ap compatible string

      This commit enables standby support on Armada 385 DB-AP board, because
      the PM initalization routine requires "marvell,armada380" compatible
      string for all Armada 38x-based platforms.

      Beside the compatible "marvell,armada38x" was wrong and should be fixed
      in the stable kernels too.

      [gregory.clement@xxxxxxxxxxxxxxxxxx: add information, about the fixes]
      Fixes: e5ee12817e9ea ("ARM: mvebu: Add Armada 385 Access Point
      Development Board support")
      Signed-off-by: Marcin Wojtas <mw@xxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>

  commit 8cbc870829ecd8f1062f2a756683c80e2d1eae7f
  Author: Pablo Neira <pablo@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 12:47:48 2015 +0200

      netfilter: nfnetlink_log: validate dependencies to avoid breaking 
atomicity

      Check that dependencies are fulfilled before updating the logger
      instance, otherwise we can leave things in intermediate state on errors
      in nfulnl_recv_config().

      [ Ken-ichirou reports that this is also fixing missing instance refcnt 
drop
        on error introduced in his patch 914eebf2f434 ("netfilter: 
nfnetlink_log:
        autoload nf_conntrack_netlink module NFQA_CFG_F_CONNTRACK config 
flag"). ]

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Tested-by: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>

  commit 336a3b3ee925362ca720342bbae4f36b2215064a
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 12:47:47 2015 +0200

      netfilter: nfnetlink_log: consolidate check for instance in 
nfulnl_recv_config()

      This patch consolidates the check for valid logger instance once we have
      passed the command handling:

      The config message that we receive may contain the following info:

      1) Command only: We always get a valid instance pointer if we just
         created it. In case that the instance is being destroyed or the
         command is unknown, we jump to exit path of nfulnl_recv_config().
         This patch doesn't modify this handling.

      2) Config only: In this case, the instance must always exist since the
         user is asking for configuration updates. If the instance doesn't exist
         this returns -ENODEV.

      3) No command and no configs are specified: This case is rare. The
         user is sending us a config message with neither commands nor
         config options. In this case, we have to check if the instance exists
         and bail out otherwise. Before this patch, it was possible to send a
         config message with no command and no config updates for an
         unexisting instance without triggering an error. So this is the only
         case that changes.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Tested-by: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>

  commit f6bba8945e7cff591127be1f6992c3e466cfff4c
  Merge: f985c65 2b3ddf2
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 19:14:50 2015 -0700

      Merge branch 'mlx-next'

      Or Gerlitz says:

      ====================
      Mellanox driver update, Oct 14 2015

      This series contains two more patches from Eli, patch from Majd
      to support PCI error handlers and a fix from Jack to mlx4 VFs
      when probed without a provisioned mac address.

      The patch set applied on top of net-next commit bbb300e "Merge branch 
'bridge-vlan'"

      changes from V0:
        - made the health flag int --> bool to address comment from Dave on 
patch #1
        - fixed sparse warning noted by the 0-day build tests in patch #2
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2b3ddf27f48c8061f0676c5a8796008099945280
  Author: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 17:43:48 2015 +0300

      net/mlx4_core: Replace VF zero mac with random mac in mlx4_core

      By design, when no default MAC addresses are set in the Hypervisor for 
VFs,
      the VFs are passed zero-macs. When such a MAC is received by the VF, it
      generates a random MAC address and registers that MAC address
      with the Hypervisor.

      This random mac generation is currently done in the mlx4_en module.
      There is a problem, though, if the mlx4_ib module is loaded by a VF before
      the mlx4_en module. In this case, for RoCE, mlx4_ib will see the 
un-replaced
      zero-mac and register that zero-mac as part of QP1 initialization.

      Having a zero-mac in the port's MAC table creates problems for a
      Baseboard Management Console. The BMC occasionally sends packets with a
      zero-mac destination MAC. If there is a zero-mac present in the port's
      MAC table, the FW will send such BMC packets to the host driver rather 
than
      to the wire, and BMC will stop working.

      To address this problem, we move the replacement of zero-mac addresses
      with random-mac addresses to procedure mlx4_slave_cap(), which is part of 
the
      driver startup for VFs, and is before activation of mlx4_ib and mlx4_en.
      As a result, zero-mac addresses will never be registered in the port MAC 
table
      by the driver.

      In addition, when mlx4_en does initialize the net device, it needs to set
      the NET_ADDR_RANDOM flag in the netdev structure if the address was
      randomly generated. This is done so that udev on the VM does not create
      a new device name after each VF probe (VM boot and such). To accomplish 
this,
      we add a per-port flag in mlx4_dev which gets set whenever mlx4_core 
replaces
      a zero-mac with a randomly-generated mac. This flag is examined when 
mlx4_en
      initializes the net-device.

      Fix was suggested by Matan Barak <matanb@xxxxxxxxxxxx>

      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e3297246c2c8cf8548ba722da3e3a8104cdcd035
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Wed Oct 14 17:43:47 2015 +0300

      net/mlx5_core: Wait for FW readiness on startup

      On device initialization, wait till firmware indicates that that it is 
done
      with initialization before proceeding to initialize the device.

      Also update initialization segment layout to match driver/firmware
      interface definitions.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 89d44f0a6c732db23b219be708e2fe1e03ee4842
  Author: Majd Dibbiny <majd@xxxxxxxxxxxx>
  Date:   Wed Oct 14 17:43:46 2015 +0300

      net/mlx5_core: Add pci error handlers to mlx5_core driver

      This patch implement the pci_error_handlers for mlx5_core which allow the
      driver to recover from PCI error.

      Once an error is detected in the PCI, the mlx5_pci_err_detected is called
      and it:
      1) Marks the device to be in 'Internal Error' state.
      2) Dispatches an event to the mlx5_ib to flush all the outstanding cqes
      with error.
      3) Returns all the on going commands with error.
      4) Unloads the driver.

      Afterwards, the FW is reset and mlx5_pci_slot_reset is called and it
      enables the device and restore it's pci state.

      If the later succeeds, mlx5_pci_resume is called, and it loads the SW
      stack.

      Signed-off-by: Majd Dibbiny <majd@xxxxxxxxxxxx>
      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd76ee4da55abb21babfc69310d321b9cb9a32e0
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Wed Oct 14 17:43:45 2015 +0300

      net/mlx5_core: Fix internal error detection conditions

      The detection of a fatal condition has been updated to take into account
      the state reported by the device or by detecting an all ones read of the
      firmware version which indicates that the device is not accessible.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dde4b5ae65de659b9ec64bafdde0430459fcb495
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Wed Oct 14 09:23:18 2015 -0400

      tipc: move fragment importance field to new header position

      In commit e3eea1eb47a ("tipc: clean up handling of message priorities")
      we introduced a field in the packet header for keeping track of the
      priority of fragments, since this value is not present in the specified
      protocol header. Since the value so far only is used at the transmitting
      end of the link, we have not yet officially defined it as part of the
      protocol.

      Unfortunately, the field we use for keeping this value, bits 13-15 in
      in word 5, has turned out to be a poor choice; it is already used by the
      broadcast protocol for carrying the 'network id' field of the sending
      node. Since packet fragments also need to be transported across the
      broadcast protocol, the risk of conflict is obvious, and we see this
      happen when we use network identities larger than 2^13-1. This has
      escaped our testing because we have so far only been using small network
      id values.

      We now move this field to bits 0-2 in word 9, a field that is guaranteed
      to be unused by all involved protocols.

      Fixes: e3eea1eb47a ("tipc: clean up handling of message priorities")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f985c65c908f6b26c30019a83dc5ea295f5fcf62
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 06:16:49 2015 -0700

      tcp: avoid spurious SYN flood detection at listen() time

      At listen() time, there is a small window where listener is visible with
      a zero backlog, triggering a spurious "Possible SYN flooding on port"
      message.

      Nothing prevents us from setting the correct backlog.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2f34a65a61cd1ace3b53c93e8b38d2f79f4ff0d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Oct 14 05:58:38 2015 -0700

      tcp/dccp: fix potential NULL deref in __inet_inherit_port()

      As we no longer hold listener lock in fast path, it is possible that a
      child is created right after listener freed its bound port, if a close()
      is done while incoming packets are processed.

      __inet_inherit_port() must detect this and return an error,
      so that caller can free the child earlier.

      Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fb0801dcc17845ef52a19f9f9fbbb88a1a93f9b6
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Oct 14 18:30:48 2015 +0800

      net: phy: aquantia/teranetics: Convert to use module_phy_driver macro

      Use module_phy_driver macro to simplify the code a bit.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 077cb37fcf6f00a45f375161200b5ee0cd4e937b
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Wed Oct 14 01:09:40 2015 -0700

      ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings

      It seems that kernel memory can leak into userspace by a
      kmalloc, ethtool_get_strings, then copy_to_user sequence.

      Avoid this by using kcalloc to zero fill the copied buffer.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Acked-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d6ba06b8b9a947a8385769f458611d3c97410226
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Wed Oct 14 17:04:55 2015 +0100

      hwrng: stm32 - Fix build with CONFIG_PM

      Commit c6a97c42e399 ("hwrng: stm32 - add support for STM32 HW RNG")
      was inadequately tested (actually it was tested quite hard so
      incompetent would be a better description that inadequate) and does
      not compile on platforms with CONFIG_PM set.

      Fix this.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 7f0abb1f0f2b110ec38ade73c241fcba30f9112a
  Author: lipeng <lipeng321@xxxxxxxxxx>
  Date:   Wed Oct 14 10:28:57 2015 +0800

      net: hisilicon net: fix a bug about led

      this patch fixes a bug in hns driver. the link led is on at the beginning,
      but at this time the ethernet port is on down status. it needs to reset
      the led status on init sequence.

      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3074cce904a26bb645d3ee7ab5026cf7ef0a3d1
  Author: Karen Xie <kxie@xxxxxxxxxxx>
  Date:   Tue Oct 13 17:13:59 2015 -0700

      cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes

      This helps improving the latency of small packets.

      Signed-off-by: Rakesh Ranjan <rakesh@xxxxxxxxxxx>
      Signed-off-by: Karen Xie <kxie@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c3503357fb71af9b215541e1959a7db9325c1f0f
  Merge: 4568637 42160a0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 18:36:58 2015 -0700

      Merge tag 'linux-can-next-for-4.4-20151013' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next

      Marc Kleine-Budde says:

      ====================
      pull-request: can-next 2015-09-17

      this is a pull request of 4 patches for net-next/master.

      Two patches are by Gerhard Bertelsmann, fixing some problems in the
      sun4i driver. The patch by Arnd Bergmann stops using timeval for the
      CAN broadcast manager. The last patch by Alexandre Belloni removes the
      otherwise unused struct at91_can_data from the driver.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef41a2cedb14871203ee28d7a5cb5aafe4e97439
  Merge: 0f8b8e2 4633dfc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 18:34:25 2015 -0700

      Merge tag 'mac80211-for-davem-2015-10-13' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211

      Johannes Berg says:

      ====================
      Like last time, we have two small fixes:
       * fast-xmit was not doing powersave filter clearing correctly,
         disable fast-xmit while any such operations are still pending
       * a debugfs file was broken due to some infrastructure changes
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ae491542cbbbcca0ec8938c37d4079a985e58440
  Author: Dave Airlie <airlied@xxxxxxxxx>
  Date:   Wed Oct 14 18:51:17 2015 +1000

      drm/dp/mst: make mst i2c transfer code more robust.

      This zeroes the msg so no random stack data ends up getting
      sent, it also limits the function to not accepting > 4
      i2c msgs.

      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit bc8c131ccdd62d4ed4f33c6b50f92907e7c32dee
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 15 09:04:21 2015 +1000

      drm/radeon: attach tile property to mst connector

      This allows tiled monitors to work with radeon once mst is enabled.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 62fcce91049a9681fc31d068ffcfaec8d168a857
  Author: Lv Zheng <lv.zheng@xxxxxxxxx>
  Date:   Wed Oct 14 13:53:57 2015 +0800

      ACPICA: Tables: Fix FADT dependency regression

      Some logics actually relying on the existence of FADT, currently relies on
      the number of loaded tables. This false dependency can easily trigger
      regressions. One of them has been introduced by commit 8ec3f459073e
      (ACPICA: Tables: Fix global table list issues by removing fixed table).

      The commit changing the fixed table indexes results in the change of FADT
      table index, originally, it was 3 (thus the installed table count should 
be
      greater than 4), while currently it is 0 (and the installed table count 
may
      be 3).

      This patch fixes this regression by cleaning up the code. Lv Zheng.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=105351
      Fixes: 8ec3f459073e (ACPICA: Tables: Fix global table list issues by 
removing fixed table)
      Reported-and-tested-by: Meelis Roos <mroos@xxxxxxxx>
      Signed-off-by: Lv Zheng <lv.zheng@xxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit f9e5ca86eeaae430e70b05ec312372dca1055d8d
  Author: Carlo Caione <carlo@xxxxxxxxxxxx>
  Date:   Thu Oct 1 12:52:40 2015 +0200

      ARM: meson6: DTS: Fix wrong reg mapping and IRQ numbers

      The DTS erronously uses the wrong reg mapping and IRQ numbers for some
      UART, WDT and timer nodes. Fix this.

      Reported-by: John Wehle <john@xxxxxxxxx>
      Signed-off-by: Carlo Caione <carlo@xxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit e79b202c632f24f49f2eb9459b88b5fd9e332263
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Wed Oct 14 11:23:09 2015 -0700

      Partially revert "clk: mvebu: Convert to clk_hw based provider APIs"

      This partially reverts commit eca61c9ff2588e1df373e61078e1874976315839.

      Thomas reports that it causes regressions on Armada XP devices.
      This is because of_clk_get_parent_name() relies on the property
      'clock-output-names' to resolve the name of a clock's parent,
      without trying to get the clock from the framework and call
      __clk_get_name(). Given that Armada XP devices don't have the
      'clock-output-names' property, of_clk_get_parent_name() returns
      the name of the node which doesn't match the actual parent
      clock's name at all, causing CPU clocks to never link up with
      their parents.

      Reported-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit cfed1e3de4764fb5b6a02c93ec246424b3bffd21
  Merge: 9e07f98 b10d92a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 10:01:32 2015 -0700

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM fixes from Paolo Bonzini:
       "Bug fixes for system management mode emulation.

        The first two patches fix SMM emulation on Nehalem processors.  The
        others fix some cases that became apparent as work progressed on the
        firmware side"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        KVM: x86: fix RSM into 64-bit protected mode
        KVM: x86: fix previous commit for 32-bit
        KVM: x86: fix SMI to halted VCPU
        KVM: x86: clean up kvm_arch_vcpu_runnable
        KVM: x86: map/unmap private slots in __x86_set_memory_region
        KVM: x86: build kvm_userspace_memory_region in x86_set_memory_region

  commit 30f84a891bf6dc7ffb9c0d0f3361ca6375633ac1
  Author: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
  Date:   Wed Oct 14 09:49:24 2015 +0800

      EDAC: Use edac_debugfs_remove_recursive()

      debugfs_remove() is used to remove a file or a directory from the
      debugfs filesystem, but mci->debugfs might not empty.

      This can be triggered by the following sequence:

      1) Enable CONFIG_EDAC_DEBUG
      2) insmod an EDAC module (like i3000_edac or similar)
      3) rmmod this module
      4) we can see files remaining under <debugfs_mountpoint>/edac/ like
         "fake_inject", for example.

      Removing edac_core then, causes a NULL pointer dereference.

      Reported-by: Yun Wu (Abel) <wuyun.wu@xxxxxxxxxx>
      Signed-off-by: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
      Cc: Doug Thompson <dougthompson@xxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444787364-104353-1-git-send-email-tanxiaojun@xxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 9e07f98ab76fdeab5629f2f6c977f870a414f1f9
  Merge: 5b5f145 1b52e50
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 09:47:38 2015 -0700

      Merge tag 'mfd-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd

      Pull MFD fixes from Lee Jones:
       "Bug Fixes:

         - Return correct error code i.e. not zero

         - Fix build error when !CONFIG_PM_SLEEP"

      * tag 'mfd-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd:
        mfd: max77843: Fix max77843_chg_init() return on error
        mfd: intel-lpss: Fix build error when !CONFIG_PM_SLEEP

  commit 6f1f5d5f4dc39e579b3ac348277dd60ee9e44e08
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:40:10 2015 +0200

      mac80211: remove event.c

      That file contains just a single function, which itself is just a
      single statement to call a different function. Remove it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 3beea3513f6157500984dc6117fcf036b3380d7e
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:36:43 2015 +0200

      mac80211: remove cfg.h

      The file contains just a single declaration that can easily
      move to another file - remove it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit fbd6ff5ceafa9c9c39e20f5a4f8c46c0b5efb2a2
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:31:30 2015 +0200

      mac80211: move sta_set_rate_info_rx() and make it static

      There's only a single caller of this function, so it can
      be moved to the same file and made static.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a732fa700133f864c542b335e80a845fe1b80f2b
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:27:07 2015 +0200

      mac80211: clean up ieee80211_rx_h_check_dup code

      Reduce indentation a bit to make the condition more readable.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4a733ef1bea705cdc69d936b95fedab4b47fbd40
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 14 18:02:43 2015 +0200

      mac80211: remove PM-QoS listener

      As this API has never really seen any use and most drivers don't
      ever use the value derived from it, remove it.

      Change the only driver using it (rt2x00) to simply use the DTIM
      period instead of the "max sleep" time.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 5c6dcd7f3b26736a88593586fbeec28b6a1ea78d
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 18:39:40 2015 +0100

      MAINTAINERS: Update Allwinner entry and add new maintainer

      Add Chen-Yu Tsai as a co-maintainer to the ARM sunxi support.

      While we are doing so, also update the entry for new SoCs.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit 83bf6b13834d9c926905e45cdfda23fe218fc598
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Oct 13 19:46:54 2015 +0200

      ARM: ux500: modify initial levelshifter status

      commit 1d8aca9df612f5751892fb2642d72536f2f48fd0
      "ARM: ux500: fix MMC/SD card regression"
      fixed broken the level shifter: it should be default ON
      but became default OFF.

      Fixes: 1d8aca9df612 "ARM: ux500: fix MMC/SD card regression"
      Reported-and-tested-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

  commit 6391074598442b8a8d33e2cfdf277d5568b57f2d
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Oct 12 15:44:49 2015 +0200

      ARM: pxa: fix pxa3xx DFI lockup hack

      Some recently added code to avoid a bug introduced a build error
      when CONFIG_PM is disabled and a macro is hidden:

      arch/arm/mach-pxa/pxa3xx.c: In function 'pxa3xx_init':
      arch/arm/mach-pxa/pxa3xx.c:439:3: error: 'NDCR' undeclared (first use in 
this function)
         NDCR = (NDCR & ~NDCR_ND_ARB_EN) | NDCR_ND_ARB_CNTL;
         ^

      This moves the macro outside of the #ifdef so it can be
      referenced correctly.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: adf3442cc890 ("ARM: pxa: fix DFI bus lockups on startup")
      Acked-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>

  commit e639932e01c096eb280086401d8e3a597e41a3b1
  Merge: 8c80385 178b2d0
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 14 17:13:20 2015 +0200

      Merge tag 'imx-fixes-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux into fixes

      Pull "The i.MX fixes for 4.3, 2nd round:" from Shawn Guo:

      It includes a single fix for i.MX7D, which corrects the base address of
      UART2 in device tree.

      * tag 'imx-fixes-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux:
        ARM: dts: imx7d: Fix UART2 base address

  commit 8c803854ba06bcd86755c8754943041b110dd537
  Merge: d51664a 1f744fd
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 14 17:12:10 2015 +0200

      Merge tag 'berlin-fixes-for-4.3-1' of 
git://git.infradead.org/users/hesselba/linux-berlin into fixes

      Merge "Marvell Berlin fixes for v4.3 take 1" from Sebastian Hesselbarth:
      - BG2Q USB PHY compatible fix (also tagged for stable v4.2)

      * tag 'berlin-fixes-for-4.3-1' of 
git://git.infradead.org/users/hesselba/linux-berlin:
        ARM: dts: berlin: change BG2Q's USB PHY compatible

  commit d51664ab9e06225a039487990a3b051fed795137
  Merge: 25cb62b d836ace6
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 14 17:10:55 2015 +0200

      Merge tag 'mvebu-fixes-4.3-1' of git://git.infradead.org/linux-mvebu into 
fixes

      Merge "mvebu fixes for 4.3 (part 1)" from Gregory CLEMENT:

      DSA fixes for orion platform

      * tag 'mvebu-fixes-4.3-1' of git://git.infradead.org/linux-mvebu:
        ARM: orion: Fix DSA platform device after mvmdio conversion

  commit cc904f9cf26dc455cffbdf6e7eb86717e047d8ff
  Author: Lukasz Odzioba <lukasz.odzioba@xxxxxxxxx>
  Date:   Mon Oct 12 13:53:32 2015 +0200

      hwmon: (coretemp) Increase limit of maximum core ID from 32 to 128.

      A new limit selected arbitrarily as power of two greater than
      required minimum for Xeon Phi processor (72 for Knights Landing).

      Currently driver is not able to handle cores with core ID greater than 32.
      Such attempt ends up with the following error in dmesg:
      coretemp coretemp.0: Adding Core XXX failed

      Signed-off-by: Lukasz Odzioba <lukasz.odzioba@xxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 9c32e815cf9e29d5cfed738ad1cb3d07ea1bb67c
  Author: Ben Gardner <gardner.ben@xxxxxxxxx>
  Date:   Wed Oct 7 21:55:20 2015 -0500

      hwmon: (lm75) Add support for TMP75C

      The TMP75C has a different control register layout and only supports
      12-bit temperature samples (0.0625 deg C).
      The continuous sample rate is ~12 Hz.

      Signed-off-by: Ben Gardner <gardner.ben@xxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 0b056b29f28e45adaf756e579c1bf291584a87cd
  Author: Cédric Le Goater <clg@xxxxxxxxxx>
  Date:   Wed Sep 23 14:44:48 2015 +0200

      hwmon: (ibmpowernv) Add OF compatibility table entry

      Fix module autoload for IBM and Open power platforms.

      Signed-off-by: Cédric Le Goater <clg@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 47e4b5e152dd78476ed28ddeca3fd1ffe00cc3be
  Author: Sudeep Holla <sudeep.holla@xxxxxxx>
  Date:   Mon Sep 21 16:47:04 2015 +0100

      hwmon: (abx500) drop the use of IRQF_NO_SUSPEND

      The description in the driver states: "ABX500 does not provide auto ADC,
      so to monitor the required temperatures, a periodic work is used. It is
      more important to not wake up the CPU... If the chip gets too hot during
      a sleep state it's most likely due to external factors, such as the
      surrounding temperature and nothing can be done in S/W."

      So it makes no sense to keep IRQs enabled as it need not be wakeup
      source. This patch removes the use of IRQF_NO_SUSPEND flag

      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 791432cfd95bea3515f8cdfaf72ec263e5d3da80
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 16 19:32:59 2015 +0530

      hwmon: (max31790) Fix dereference of ERR_PTR

      max31790_update_device() return the error code in ERR_PTR. We were
      checking if it has returned error or not but before checking we have
      dereferenced it.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 195a4b4298a7951c845dac2b326585c66add3435
  Author: Il Han <corone.il.han@xxxxxxxxx>
  Date:   Sun Aug 30 20:44:26 2015 +0900

      hwmon: Driver for Maxim MAX31790

      The driver supports the Maxim MAX31790.

      Signed-off-by: Il Han <corone.il.han@xxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 612bece654ff6cd43160e201985be826e96b8bcb
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 12 17:32:14 2015 -0700

      um/x86: Fix build after x86 syscall changes

      I didn't realize that um didn't include x86's asm/syscall.h.
      Re-add a missing typedef.

      Reported-by: Richard Weinberger <richard@xxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 034042cc1e28 ("x86/entry/syscalls: Move syscall table declarations 
into asm/syscalls.h")
      Link: 
http://lkml.kernel.org/r/8d15b9a88f4fd49e3342757e0a34624ee5ce9220.1444696194.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit af22aa7c766d50712b9afeca53e9e4208ce6284c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 12 17:32:13 2015 -0700

      x86/asm: Remove the xyz_cfi macros from dwarf2.h

      They are currently unused, and I don't think that anyone was
      ever particularly happy with them.  They had the unfortunate
      property that they made it easy to CFI-annotate things without
      thinking about them -- when pushing, do you want to just update
      the CFA offset, or do you also want to update the saved location
      of the register being pushed?

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447bfbd10bb268b4593b32534ecefa1f4df287e.1444696194.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 893a3ec27e1dae62a904f78d53244001979748a6
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 12 17:32:12 2015 -0700

      selftests/x86: Style fixes for the 'unwind_vdso' test

      Checkpatch is really quite bad for user code like this, but it
      caught two legit style issues.

      Reported-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/3335040bdd40d2bca4b1a28a3f8b165361c801b7.1444696194.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 790a2ee2427852cff50993c98f15ed88511e9af0
  Merge: c7d77a7 0f96a99
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 14 16:05:40 2015 +0200

      Merge tag 'efi-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi into core/efi

      Pull v4.4 EFI updates from Matt Fleming:

        - Make the EFI System Resource Table (ESRT) driver explicitly
          non-modular by ripping out the module_* code since Kconfig doesn't
          allow it to be built as a module anyway. (Paul Gortmaker)

        - Make the x86 efi=debug kernel parameter, which enables EFI debug
          code and output, generic and usable by arm64. (Leif Lindholm)

        - Add support to the x86 EFI boot stub for 64-bit Graphics Output
          Protocol frame buffer addresses. (Matt Fleming)

        - Detect when the UEFI v2.5 EFI_PROPERTIES_TABLE feature is enabled
          in the firmware and set an efi.flags bit so the kernel knows when
          it can apply more strict runtime mapping attributes - Ard Biesheuvel

        - Auto-load the efi-pstore module on EFI systems, just like we
          currently do for the efivars module. (Ben Hutchings)

        - Add "efi_fake_mem" kernel parameter which allows the system's EFI
          memory map to be updated with additional attributes for specific
          memory ranges. This is useful for testing the kernel code that handles
          the EFI_MEMORY_MORE_RELIABLE memmap bit even if your firmware
          doesn't include support. (Taku Izumi)

      Note: there is a semantic conflict between the following two commits:

        8a53554e12e9 ("x86/efi: Fix multiple GOP device support")
        ae2ee627dc87 ("efifb: Add support for 64-bit frame buffer addresses")

      I fixed up the interaction in the merge commit, changing the type of
      current_fb_base from u32 to u64.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b10d92a54dac25a6152f1aa1ffc95c12908035ce
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 14 15:25:52 2015 +0200

      KVM: x86: fix RSM into 64-bit protected mode

      In order to get into 64-bit protected mode, you need to enable
      paging while EFER.LMA=1.  For this to work, CS.L must be 0.
      Currently, we load the segments before CR0 and CR4, which means
      that if RSM returns into 64-bit protected mode CS.L is already 1
      and everything breaks.

      Luckily, CS.L=0 is always the case when executing RSM, because it
      is forbidden to execute RSM from 64-bit protected mode.  Hence it
      is enough to load CR0 and CR4 first, and only then the segments.

      Fixes: 660a5d517aaab9187f93854425c4c63f4a09195c
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 25188b9986cf6b0cadcf1bc1d1693a2e9c50ed47
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 14 15:51:08 2015 +0200

      KVM: x86: fix previous commit for 32-bit

      Unfortunately I only noticed this after pushing.

      Fixes: f0d648bdf0a5bbc91da6099d5282f77996558ea4
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 62f57d05e287e950c6e1246b1dba08e12985195a
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Tue Oct 13 10:54:01 2015 -0400

      crypto: pkcs7 - Fix unaligned access in pkcs7_verify()

      On sparc, we see unaligned access messages on each modprobe[-r]:

      Kernel unaligned access at TPC[6ad9b4] pkcs7_verify [..]
      Kernel unaligned access at TPC[6a5484] crypto_shash_finup [..]
      Kernel unaligned access at TPC[6a5390] crypto_shash_update [..]
      Kernel unaligned access at TPC[10150308] sha1_sparc64_update [..]
      Kernel unaligned access at TPC[101501ac] __sha1_sparc64_update [..]

      These ware triggered by mod_verify_sig() invocations of pkcs_verify(), and
      are are being caused by an unaligned desc at (sha1, digest_size is 0x14)
              desc = digest + digest_size;

      To fix this, pkcs7_verify needs to make sure that desc is pointing
      at an aligned value past the digest_size, and kzalloc appropriately,
      taking alignment values into consideration.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5a4eea2658c933205cd014b87066f3faa2dbe7f7
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Mon Oct 12 19:47:04 2015 +0200

      crypto: ux500 - Use devm_xxx() managed function

      Using the devm_xxx() managed function to stripdown the error
      and remove code.
      In the same time, we replace request_mem_region/ioremap by the unified
      devm_ioremap_resource() function.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b0e8b3417a620e6e0a91fd526fbc6db78714198e
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Mon Oct 12 19:47:03 2015 +0200

      crypto: atmel - use devm_xxx() managed function

      Using the devm_xxx() managed function to stripdown the error and remove
      code.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit dc97fa02328b79f05a2ec1693b7596fae52c0e02
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Oct 12 15:52:34 2015 +0200

      crypto: mxs-dcp - mxs-dcp is an stmp device

      The mxs-dcp driver relies on the stmp_reset_block() helper function, which
      is provided by CONFIG_STMP_DEVICE. This symbol is always set on MXS,
      but the driver can now also be built for MXC (i.MX6), which results
      in a built error if no other driver selects STMP_DEVICE:

      drivers/built-in.o: In function `mxs_dcp_probe':
      vf610-ocotp.c:(.text+0x3df302): undefined reference to `stmp_reset_block'

      This adds the 'select', like all other stmp drivers have it.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: a2712e6c75f ("crypto: mxs-dcp - Allow MXS_DCP to be used on MX6SL")
      Acked-by: Marek Vasut <marex@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b47c9fab25fe0a2f92d32fcbb2eb55ad2111cd38
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Mon Oct 12 09:21:30 2015 +0100

      ARM: dts: stm32f429: Adopt STM32 RNG driver

      New bindings and driver have been created for STM32 series parts. This
      patch integrates this changes.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Acked-by: Maxime Coquelin <mcoquelin.stm32@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c6a97c42e399ad0d639f616e58e13f0b4ae87626
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Mon Oct 12 09:21:29 2015 +0100

      hwrng: stm32 - add support for STM32 HW RNG

      Add support for STMicroelectronics STM32 random number generator.

      The config value defaults to N, reflecting the fact that STM32 is a
      very low resource microcontroller platform and unlikely to be targeted
      by any "grown up" defconfigs.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ff90900a4b007d26d4a47abec9891bf8488a7668
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Mon Oct 12 09:21:28 2015 +0100

      dt-bindings: Document the STM32 HW RNG bindings

      This adds documentation of device tree bindings for the STM32 hardware
      random number generator.

      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Acked-by: Maxime Coquelin <mcoquelin.stm32@xxxxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit a6479ea487ca8ce11289e88a55a7e348f1ee39ac
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 21:14:22 2015 +0100

      crypto: marvell/cesa - factor out common import/export functions

      As all the import functions and export functions are virtually
      identical, factor out their common parts into a generic
      mv_cesa_ahash_import() and mv_cesa_ahash_export() respectively.  This
      performs the actual import or export, and we pass the data pointers and
      length into these functions.

      We have to switch a % const operation to do_div() in the common import
      function to avoid provoking gcc to use the expensive 64-bit by 64-bit
      modulus operation.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c3bf02a22c5369b25090d12c202ea0807d01978a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 20:43:48 2015 +0100

      crypto: marvell/cesa - fix wrong hash results

      Attempting to use the sha1 digest for openssh via openssl reveals that
      the result from the hash is wrong: this happens when we export the
      state from one socket and import it into another via calling accept().

      The reason for this is because the operation is reset to "initial block"
      state, whereas we may be past the first fragment of data to be hashed.

      Arrange for the operation code to avoid the initialisation of the state,
      thereby preserving the imported state.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e72f407ee793f1455051cfa834e758afca09e4f6
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 20:43:43 2015 +0100

      crypto: marvell/cesa - initialise struct mv_cesa_ahash_req

      When a AF_ALG fd is accepted a second time (hence hash_accept() is
      used), hash_accept_parent() allocates a new private context using
      sock_kmalloc().  This context is uninitialised.  After use of the new
      fd, we eventually end up with the kernel complaining:

      marvell-cesa f1090000.crypto: dma_pool_free cesa_padding, c0627770/0 (bad 
dma)

      where c0627770 is a random address.  Poisoning the memory allocated by
      the above sock_kmalloc() produces kernel oopses within the marvell hash
      code, particularly the interrupt handling.

      The following simplfied call sequence occurs:

      hash_accept()
        crypto_ahash_export()
          marvell hash export function
        af_alg_accept()
          hash_accept_parent()  <== allocates uninitialised struct hash_ctx
        crypto_ahash_import()
          marvell hash import function

      hash_ctx contains the struct mv_cesa_ahash_req in its req.__ctx member,
      and, as the marvell hash import function only partially initialises
      this structure, we end up with a lot of members which are left with
      whatever data was in memory prior to sock_kmalloc().

      Add zero-initialisation of this structure.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 9f5594c91e7cf5952ce39aff8b88c95a19a27e06
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 20:43:38 2015 +0100

      crypto: marvell/cesa - fix stack smashing in marvell/hash.c

      Several of the algorithms in marvell/hash.c have a statesize of zero.
      When an AF_ALG accept() on an already-accepted file descriptor to
      calls into hash_accept(), this causes:

        char state[crypto_ahash_statesize(crypto_ahash_reqtfm(req))];

      to be zero-sized, but we still pass this to:

        err = crypto_ahash_export(req, state);

      which proceeds to write to 'state' as if it was a "struct md5_state",
      "struct sha1_state" etc.  Add the necessary initialisers for the
      .statesize member.

      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c4d007bcb42b3898df5ad65a513f9120ab0eccfc
  Author: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:39:02 2015 +0200

      MAINTAINERS: add maintainers for the Marvell Crypto driver

      A new crypto driver for Marvell ARM platforms was added in
      drivers/crypto/marvell/ as part of commit f63601fd616ab ("crypto:
      marvell/cesa - add a new driver for Marvell's CESA"). This commit adds
      the relevant developers to the list of maintainers.

      Cc: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: Arnaud Ebalard <arno@xxxxxxxxxxxx>
      Cc: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Acked-by: Arnaud Ebalard <arno@xxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ea0b3984c1cc8b28de27a3bec285102b4e366a4c
  Author: Haren Myneni <haren@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 13:45:51 2015 -0700

      crypto: 842 - Add CRC and validation support

      This patch adds CRC generation and validation support for nx-842.
      Add CRC flag so that nx842 coprocessor includes CRC during compression
      and validates during decompression.

      Also changes in 842 SW compression to append CRC value at the end
      of template and checks during decompression.

      Signed-off-by: Haren Myneni <haren@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f5128432b08c3e263e1a7ce709d686b1ded51131
  Author: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
  Date:   Thu Oct 8 23:12:25 2015 +0600

      crypto: jitterentropy - remove unnecessary information from a comment

      The clocksource does not provide clocksource_register() function since
      f893598 commit (clocksource: Mostly kill clocksource_register()), so
      let's remove unnecessary information about this function from a comment.

      Signed-off-by: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
      Suggested-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 22287b0b5988b603b5f0daa282c89aaf2b877313
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Thu Oct 8 09:26:55 2015 -0700

      crypto: akcipher - Changes to asymmetric key API

      Setkey function has been split into set_priv_key and set_pub_key.
      Akcipher requests takes sgl for src and dst instead of void *.
      Users of the API i.e. two existing RSA implementation and
      test mgr code have been updated accordingly.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 2d4d1eea540b27c72488fd1914674c42473d53df
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Thu Oct 8 09:26:50 2015 -0700

      lib/mpi: Add mpi sgl helpers

      Add mpi_read_raw_from_sgl and mpi_write_to_sgl helpers.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c7d77a7980e434c3af17de19e3348157f9b9ccce
  Merge: 0ce423b 8a53554
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 14 16:05:18 2015 +0200

      Merge branch 'x86/urgent' into core/efi, to pick up a pending EFI fix

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8a53554e12e98d1759205afd7b8e9e2ea0936f48
  Author: KÅ?vágó, Zoltán <dirty.ice.hu@xxxxxxxxx>
  Date:   Mon Oct 12 15:13:56 2015 +0100

      x86/efi: Fix multiple GOP device support

      When multiple GOP devices exists, but none of them implements
      ConOut, the code should just choose the first GOP (according to
      the comments). But currently 'fb_base' will refer to the last GOP,
      while other parameters to the first GOP, which will likely
      result in a garbled display.

      I can reliably reproduce this bug using my ASRock Z87M Extreme4
      motherboard with CSM and integrated GPU disabled, and two PCIe
      video cards (NVidia GT640 and GTX980), booting from efi-stub
      (booting from grub works fine).  On the primary display the
      ASRock logo remains and on the secondary screen it is garbled
      up completely.

      Signed-off-by: KÅ?vágó, Zoltán <DirtY.iCE.hu@xxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444659236-24837-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4568637f7a20bbb1dcbf8ada56de08f6c940bcbd
  Author: yankejian <yankejian@xxxxxxxxxx>
  Date:   Tue Oct 13 09:53:45 2015 +0800

      net: hisilicon: supports promisc mode

      this patch adds support to set promisc mode. it configs the queue on
      init seq  when it is on promisc mode.and being enabled or disabled promisc
      mode by upper level user.

      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f8b8e28fb3241f9fd82ce13bac2b40c35e987e0
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Tue Oct 13 12:41:51 2015 -0400

      tipc: eliminate risk of stalled link synchronization

      In commit 6e498158a827 ("tipc: move link synch and failover to link 
aggregation level")
      we introduced a new mechanism for performing link failover and
      synchronization. We have now detected a bug in this mechanism.

      During link synchronization we use the arrival of any packet on
      the tunnel link to trig a check for whether it has reached the
      synchronization point or not. This has turned out to be too
      permissive, since it may cause an arriving non-last SYNCH packet to
      end the synch state, just to see the next SYNCH packet initiate a
      new synch state with a new, higher synch point. This is not fatal,
      but should be avoided, because it may significantly extend the
      synchronization period, while at the same time we are not allowed
      to send NACKs if packets are lost. In the worst case, a low-traffic
      user may see its traffic stall until a LINK_PROTOCOL state message
      trigs the link to leave synchronization state.

      At the same time, LINK_PROTOCOL packets which happen to have a (non-
      valid) sequence number lower than the tunnel link's rcv_nxt value will
      be consistently dropped, and will never be able to resolve the situation
      described above.

      We fix this by exempting LINK_PROTOCOL packets from the sequence number
      check, as they should be. We also reduce (but don't completely
      eliminate) the risk of entering multiple synchronization states by only
      allowing the (logically) first SYNCH packet to initiate a synchronization
      state. This works independently of actual packet arrival order.

      Fixes: commit 6e498158a827 ("tipc: move link synch and failover to link 
aggregation level")

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9363deeb286e916353f11b11d1f351c6ff54082
  Merge: 0e537fe 3a70fcd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 14 15:06:33 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Use the alternative with the most descriptive filename containing
          a vmlinux file for a given build-id, providing a better title line
          for tools such as 'annotate'. (Arnaldo Carvalho de Melo)

        - Remove help messages about previous right and left arrow keybidings, 
that
          were repurposed for horizontal scrolling. (Arnaldo Carvalho de Melo)

        - Inform how to reset the symbol filter in the hists browser. (top & 
report)
          (Arnaldo Carvalho de Melo)

        - Add 'm' key for context menu display in the hists browser, that became
          inacessible with the repurposing of the right arrow key for horizontal
          scrolling. (Namhyung Kim)

        - Use debug_frame for callchains if eh_frame is unusable. (Rabin Vicent)

      Build fixes:

        - Fix strict-aliasing breakage with gcc 4.4 in the READ_ONCE/WRITE_ONCE 
code
          adopted from the kernel tree, that builds with -fno-strict-aliasing 
while
          tools/perf/ uses -Wstrict-aliasing=3. (Jiri Olsa)

        - Fix unw_word_t pointer casts in code using libunwind for callchains,
          fixing the build in at least 32-bit MIPS systems. (Rabin Vicent)

        - Work around cross compile build problems related to fixdep. (Jiri 
Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 02a6d6136fa2a17f400a030829a6435556b3e65b
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Wed Oct 14 14:25:53 2015 +0200

      Revert "ipv4/icmp: redirect messages can use the ingress daddr as source"

      Revert the commit e2ca690b657f ("ipv4/icmp: redirect messages
      can use the ingress daddr as source"), which tried to introduce a more
      suitable behaviour for ICMP redirect messages generated by VRRP routers.
      However RFC 5798 section 8.1.1 states:

          The IPv4 source address of an ICMP redirect should be the address
          that the end-host used when making its next-hop routing decision.

      while said commit used the generating packet destination
      address, which do not match the above and in most cases leads to
      no redirect packets to be generated.

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7d1f6411b04fef2f0a260205c92e811b280ae117
  Merge: 4b418bf b4a5127
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 14 05:53:48 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-13

      This series contains updates to i40e, i40evf, ixgbe and fm10k.

      Carolyn cleans up ndo_bridge_getlink() by flagging a parameter as
      __always_unused, since it is never used.  Adds a member to the nvm_info
      struct to store OEM version info to be output either by OID or ethtool.

      Neerav cleans up a remaining bit shift to use BIT() macro.

      Mitch fixes the i40evf driver to properly handle calls to its
      ndo_set_mac_address() method.  It did not properly check to see if the
      override would be allowed by the PF driver, and it never removed the old
      address from its filter list.  Cleaned up the use of
      i40e_enable_vf_mappings() in i40e_alloc_vfs(), since it is just redundant
      since we already call it by i40e_reset_vf().  Fixed a possible panic
      in some circumstances where the firmware may fail to allocate a VSI for
      a VF by checking the return value from i40e_alloc_vf_res() and don't
      try to configure the device further if it failed.

      Greg fixes the parsing of CEE App TLVs so the caller does not have to
      consider whether the App came from a CEE or IEEE DCBx negotiation.

      Shannon moves the device ids into a standalone file due to the desire
      to write user-land drivers (and other requests) without needing the rest
      of the include files.

      Catherine adds the ability to save the module information from
      get_phy_capabilities() to be used to determine which speeds the module
      supports.  Also cleaned up the PHY structure by removing unused members
      and add the ability to store the PHY capabilities reported by the
      firmware.

      Emil modifies ixgbe to ensure that flow control packets initiated by the
      VF are dropped and reported as spoofed.

      Jacob cleans up the fm10k driver to avoid buffer overflow by using
      sprintf(), so convert to using snprintf().  Also fixed the use of an
      enum as a boolean, so check for the actual value of NETREG_UNINITIALIZED
      in case it ever changes from the current value of zero.

      v2: Dropped patch 11 of the original series, which added functions that
          were never used.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eb93ce2cb7a85368c1f1733df35aab87152db56f
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Oct 14 13:20:36 2015 +0100

      arm64: compat: wire up new syscalls

      Commit 208473c1f3ac ("ARM: wire up new syscalls") hooked up the new
      userfaultfd and membarrier syscalls for ARM, so do the same for our
      compat syscall table in arm64.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit fdbbe8e7914765aef82c696dcefc97fe462c3925
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Oct 9 12:34:23 2015 +0200

      s390/spinlock: remove unneeded serializations at unlock

      the kernel locks have aqcuire/release semantics. No operation done
      after the lock can be "moved" before the lock and no operation before
      the unlock can be moved after the unlock. But it is perfectly fine
      that memory accesses which happen code wise after unlock are performed
      within the critical section.
      On s390x, reads are in-order with other reads (PoP section
      "Storage-Operand Fetch References") and writes are in-order with
      other writes (PoP section "Storage-Operand Store References"). Writes
      are also in-order with reads to the same memory location (PoP section
      "Storage-Operand Store References"). To other CPUs (and the channel
      subsystem), reads additionally appear to be performed prior to reads or
      writes that happen after them in the conceptual sequence (PoP section
      "Relation between Operand Accesses").
      So at least as observed by other CPUs and the channel subsystem, reads
      inside the critical sections will not happen after unlock (and writes
      are in-order anyway). That's exactly what we need for "RELEASE
      operations" (memory-barriers.txt): "It guarantees that all memory
      operations before the RELEASE operation will appear to happen before the
      RELEASE operation with respect to the other components of the system."

      Suggested-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Reviewed-By: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
      [cross-reading and lot of improvements for the patch description]
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8139b89d7cc5f53cff63a72c8e226385f34a70a2
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Jul 27 12:47:40 2015 +0200

      s390/zcrypt: use system work queue for ap_scan_bus

      There is a system work queue system_long_wq for long running work.
      Use this work queue for the AP bus scan loop.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit b96a9e5140d4d6253e499bd18c35a7d085ac46e2
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Sep 14 17:28:26 2015 +0200

      s390/zcrypt: remove support for PCICC and PCICA cards

      Remove the code for really old crypt cards, PCICC and PCICA.
      These cards have been out of service for several years.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 3f3007afda8bb731a3422430752ca91ddc102e4d
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Sep 14 17:01:23 2015 +0200

      s390/zcrypt: introduce state machine for the AP bus

      Replace the two fields 'unregistered' and 'reset' with a device
      state with 5 possible values. Introduce two events for the AP devices,
      device poll and device timeout. With the state machine it is easier
      to deal with device initialization and suspend/resume. Device polling
      is simpler as well, the arkane 'flags' passing is gone.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit f58fe336009f451748c1c337f35130a320ef923d
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Sep 14 16:59:27 2015 +0200

      s390/zcrypt: use explicit return code for flushed requests

      If a AP device is removed while messages are still pending, the requests
      are cancelled by calling the message receive function with an error 
pointer
      for the reply. The message type receive handler recognize this and create
      a fake hardware error TYPE82_RSP_CODE / REP82_ERROR_MACHINE_FAILURE.
      The message with the hardware error then causes a printk and a return
      code of -EAGAIN.

      Replace the intricate scheme with an explicit return code for this 
sitation
      and avoid the error message.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit fcd0d1f637e57777fdc742adee6bfbcab5876295
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Jul 23 10:55:59 2015 +0200

      s390/zcrypt: cleanup AP bus timer code

      Set the configuration timer at the end of the ap_scan_bus function.
      Make use of setup_timer and remove some unnecessary add_timer, mod_timer
      and del_timer_sync calls. Replace the complicated timer_pending, mod_timer
      and add_timer code in ap_config_time_store with a simple mod_timer.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 83e9d5d2d45e518deb8cb843bd2e41548c6bb9b2
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Jul 17 13:43:18 2015 +0200

      s390/zcrypt: fix suspend/resume of AP bus devices

      If there are no devices on the AP bus there will not be a single
      call to the per-device ap_bus_suspend function. Even worse,
      there will not be a call to the per-device ap_bus_resume either
      and the AP will fail so resume correctly.

      Introduce a bus specific dev_pm_ops to suspend / resume the AP
      bus related things. While we are at it, simplify the power management
      code of the AP bus.

      Reviewd-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 98733791e8ea9f700ce2c6feedcbeb7c4703359e
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Jul 17 15:01:08 2015 +0200

      s390/zcrypt: fix device unregister race

      The ap_queue_messsage function will call device_unregister if the
      unregistered field of the device has been set while trying to queue
      a message. This races with other device_unregister calls, e.g. from
      the ap_scan_bus. Remove the call to device_unregister from
      ap_queue_message and let ap_scan_bus deal with it.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 889875a14f0a3205e78613b3e78ecc4efc187d74
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Jun 26 16:55:35 2015 +0200

      s390/zcrypt: fix memory leak with ap configuration data

      The ap_query_configuration function allocates the ap_config_info
      structure, but there is no code to free the structure.
      Allocate the structure in the module_init function and free it
      again in module_exit.

      While we are at it simplify a few functions in regard to the
      ap configuration data.

      Reviewed-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 6acbe21f473f5cff8a11546f090967459b63ab3e
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Jun 26 15:40:41 2015 +0200

      s390/zcrypt: remove duplicate low level functions

      ap_test_queue, ap_query_facilities, __ap_query_functions all use
      the same PQAP(TAPQ) command. Consolidate the three into a single
      ap_test_queue function that returns the AP status and the 64-bit
      result. The exception table entry for PQAP(TAPQ) can be avoided
      if the T bit for the APFT facility is set only if test_facility(15)
      indicated that the facility is present.

      Integrate ap_query_function into ap_query queue to avoid calling
      PQAP(TAPQ) twice.

      Reviewed-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 29b0a8250ba63beffba4fe3a42fa75dddf4bd06a
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Fri Oct 9 13:48:03 2015 +0200

      s390/etr,stp: fix possible deadlock on machine check

      The first level machine check handler for etr and stp machine checks may
      call queue_work() while in nmi context. This may deadlock e.g. if the
      machine check happened when the interrupted context did hold a lock, that
      also will be acquired by queue_work().
      Therefore split etr and stp machine check handling into first and second
      level handling. The second level handling will then issue the queue_work()
      call in process context which avoids the potential deadlock.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 7cc8944e13c73374b6f33b39ca24c0891c87b077
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 11:07:06 2015 +0200

      s390/pci: reshuffle struct used to write debug data

      zpci_err_insn writes stale stack content to the debugfs.

      Ensure that the struct in zpci_err_insn is ordered in a way that
      we don't have uninitialized holes in it. In addition to that
      add the packed attribute.

      Fixes: 3d8258e (s390/pci: move debug messages to debugfs)
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Gerald Schaefer <gerald.schaefer@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 48002bd5af37c3f6ac4a1484427ac52f7f184950
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Oct 8 13:51:44 2015 +0200

      s390/bitops: remove 31 bit related comments

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e4165dcbc087eaf0fa892c6eee7fce8ac0482742
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Oct 8 13:38:49 2015 +0200

      s390/cmpxchg: remove dead code

      With the removal of 31 bit support a couple of defines became unused.
      Remove them.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 004f0bba1902960e0d94d3712b94f7cdd9889ea6
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Tue Oct 6 14:45:35 2015 +0200

      s390/nmi: change type of mcck_interruption_code lowcore field

      For some unknown reason the mcck_interruption_code field is defined
      as array of two 32 bit values. Given that this actually is a 64 bit
      field according to the architecture, change the type to u64.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 92778b9920abddacf31876b3f15d8ea07edeca8d
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Tue Oct 6 16:23:39 2015 +0200

      s390/flags: use _BITUL macro

      The defines that are used in entry.S have been partially converted to
      use the _BITUL macro (setup.h). This patch converts the rest.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Reviewed-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ac25e790d9c3c9b5d34609b7dc1d60c09494c668
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Tue Oct 6 16:23:29 2015 +0200

      s390/flags: fix flag handling

      The cpu flags and pt_regs flags fields are each 64 bits in size. A flag 
can
      be set with helper functions like set_cpu_flags().

      These functions create a mask using "1U << flag". This doesn't work if 
flag
      is larger than 31, since 1U << 32 == 0.

      So fix this in case we ever will have such flag numbers.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Reviewed-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit db7e007fd61ca07e5f3b04cf2168531b074d318d
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Sat Aug 15 11:42:21 2015 +0200

      s390/udelay: make udelay have busy loop semantics

      When using systemtap it was observed that our udelay implementation is
      rather suboptimal if being called from a kprobe handler installed by
      systemtap.

      The problem observed when a kprobe was installed on lock_acquired().
      When the probe was hit the kprobe handler did call udelay, which set
      up an (internal) timer and reenabled interrupts (only the clock comparator
      interrupt) and waited for the interrupt.
      This is an optimization to avoid that the cpu is busy looping while 
waiting
      that enough time passes. The problem is that the interrupt handler still
      does call irq_enter()/irq_exit() which then again can lead to a deadlock,
      since some accounting functions may take locks as well.

      If one of these locks is the same, which caused lock_acquired() to be
      called, we have a nice deadlock.

      This patch reworks the udelay code for the interrupts disabled case to
      immediately leave the low level interrupt handler when the clock
      comparator interrupt happens. That way no C code is being called and the
      deadlock cannot happen anymore.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 0c5a69f432ba1e586ac6ae5e4311c2f1cbd051fa
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Wed Oct 7 10:54:36 2015 +0200

      s390/compiler.h Fix sparse vs. hotpatch

      sparse does not understand the s390 specific hotpatch attribute and
      floods the log with messages like
      include/uapi/linux/swab.h:92:8: error: attribute 'hotpatch': unknown 
attribute

      Let's just dont use it, if __CHECKER__ is defined.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e22cf8ca6f75a6c4fccf2d6ee818bdb1205f32e6
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Tue Oct 6 18:06:15 2015 +0200

      s390/cpumf: rework program parameter setting to detect guest samples

      The program parameter can be used to mark hardware samples with
      some token.  Previously, it was used to mark guest samples only.

      Improve the program parameter doubleword by combining two parts,
      the leftmost LPP part and the rightmost PID part.  Set the PID
      part for processes by using the task PID.
      To distinguish host and guest samples for the kernel (PID part
      is zero), the guest must always set the program paramater to a
      non-zero value.  Use the leftmost bit in the LPP part of the
      program parameter to be able to detect guest kernel samples.

      [brueckner@xxxxxxxxxxxxxxxxxx]: Split __LC_CURRENT and introduced
      __LC_LPP. Corrected __LC_CURRENT users and adjusted assembler parts.
      And updated the commit message accordingly.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 6a62b485eacaf4db26923bf9442073320fc7199a
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Oct 5 13:04:09 2015 +0200

      s390/asm: make use of the OFFSET macro to define assember constants

      The use of OFFSET instead of DEFINE makes the definitions in asm-offsets.c
      more readable. While we are at it sort the defines for struct _lowcore
      according to the field order and remove some unneeded defines.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 18d1a7f675d7fb00d247eb858020da4bee199ddf
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Oct 1 14:11:35 2015 +0200

      s390/sclp: avoid merged message output

      The sclp console and tty code currently uses several message text
      objects in a single message event to print several lines with one
      SCCB. This causes the output of these lines to be fused into a
      block which is noticeable when selecting text in the operating system
      message panel.

      Instead use several message events with a single message text object
      each to print every line on its own. This changes the SCCB layout
      from

          struct sccb_header
              struct evbuf_header
                  struct mdb_header
                      struct go
                      struct mto
                ...
                struct mto

      to

          struct sccb_header
              struct evbuf_header
                  struct mdb_header
                      struct go
                      struct mto
        ...
              struct evbuf_header
                  struct mdb_header
                      struct go
                      struct mto

      Reviewed-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 83abeffbd5dece88129a67f736bdd43a40eccbb1
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 17:02:48 2015 +0200

      s390/entry: add assembler macro to conveniently tests under mask

      Various functions in entry.S perform test-under-mask instructions
      to test for particular bits in memory.  Because test-under-mask uses
      a mask value of one byte, the mask value and the offset into the
      memory must be calculated manually.  This easily introduces errors
      and is hard to review and read.

      Introduce the TSTMSK assembler macro to specify a mask constant and
      let the macro calculate the offset and the byte mask to generate a
      test-under-mask instruction.  The benefit is that existing symbolic
      constants can now be used for tests.  Also the macro checks for
      zero mask values and mask values that consist of multiple bytes.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 0ac277790ec938087c9047bc7b1b4f30a65406cd
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 17:53:22 2015 +0200

      s390/fpu: add static FPU save area for init_task

      Previously, the init task did not have an allocated FPU save area and
      saving an FPU state was not possible.  Now if the vector extension is
      always enabled, provide a static FPU save area to save FPU states of
      vector instructions that can be executed quite early.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit b5510d9b68c33964abd938148f407ad3789e369f
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:04:41 2015 +0200

      s390/fpu: always enable the vector facility if it is available

      If the kernel detects that the s390 hardware supports the vector
      facility, it is enabled by default at an early stage.  To force
      it off, use the novx kernel parameter.  Note that there is a small
      time window, where the vector facility is enabled before it is
      forced to be off.

      With enabling the vector facility by default, the FPU save and
      restore functions can be improved.  They do not longer require
      to manage expensive control register updates to enable or disable
      the vector enablement control for particular processes.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 395e6aa1d0ffbc493a04469aa8f6751ed2aad8c5
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Sep 29 12:51:40 2015 +0200

      s390/mm: try to avoid storage key operation in ptep_set_access_flags

      The call to pgste_set_key in ptep_set_access_flags can be avoided
      if the old pte is found to be valid at the time the new access
      rights are set. The function that created the old, valid pte already
      completed the required storage key operation.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 5da7667c035f3a711ec8d0a3997254807dd8bc6d
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Sep 28 15:27:26 2015 +0200

      s390/barrier: remove unnecessary serialization in atomics and bitops

      The principles of operation states reads are in order, writes are in
      order, writes can be reordered after reads, but no reads can be
      reordered after writes.

      The atomic and bitops variantes for z196 use the interlocked-access
      facility instructions with a memory barrier before and after the
      instruction. Because of the memory ordering the first barrier is
      unnecessary and can be removed.

      Acked-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit b5a6b71b1901b9ca495f669c9ad86f2181960aba
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Aug 21 16:05:32 2015 +0200

      s390/diag: add tracepoint for diagnose calls

      To be able to analyse problems in regard to hypervisor overhead
      add a tracepoing for diagnose calls. It reports the number of
      the diagnose issued, e.g.

                  sshd-1385  [002] ....    42.701431: diagnose: nr=0x9c
                <idle>-0     [001] ..s.    43.587528: diagnose: nr=0x9c

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 1ec2772e0c3ca3159035c03165355e355efc326b
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Aug 20 17:28:44 2015 +0200

      s390/diag: add a statistic for diagnose calls

      Introduce /sys/debug/kernel/diag_stat with a statistic how many diagnose
      calls have been done by each CPU in the system.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit acdc9fc9a8121ce2ebcd7533bd72852c20b353f3
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Aug 20 12:57:33 2015 +0200

      s390/bitops: implement cache friendly test_and_set_bit_lock

      The generic implementation for test_and_set_bit_lock in 
include/asm-generic
      uses the standard test_and_set_bit operation. This is done with either a
      'csg' or a 'loag' instruction. For both version the cache line is fetched
      exclusively, even if the bit is already set. The result is an increase in
      cache traffic, for a contented lock this is a bad idea.

      Acked-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 5614dd920a02a524c9abc9573374d81f0535f18a
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Wed Apr 22 14:47:42 2015 +0200

      s390/mm: implement soft-dirty bits for user memory change tracking

      Use bit 2**1 of the pte and bit 2**14 of the pmd for the soft dirty
      bit. The fault mechanism to do dirty tracking is already in place.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit a7b7617493179a0ff76cbc0cc2eb45ad07074765
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Wed Apr 22 14:20:47 2015 +0200

      mm: add architecture primitives for software dirty bit clearing

      There are primitives to create and query the software dirty bits
      in a pte or pmd. But the clearing of the software dirty bits is done
      in common code with x86 specific page table functions.

      Add the missing architecture primitives to clear the software dirty
      bits to allow the feature to be used on non-x86 systems, e.g. the
      s390 architecture.

      Acked-by: Cyrill Gorcunov <gorcunov@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 9d49f86daba3ed22cadf01beff1b130ad25fe0bf
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 18:40:33 2015 +0200

      s390/cio: introduce pathmask_to_pos

      We often need to correlate an 8 bit path mask with the position
      in a channel path array. Introduce and use pathmask_to_pos for
      that task.

      Reviewed-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ab97d211ef1863942a90d7c93dfd563f0381ca87
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 10:29:59 2015 +0200

      s390/cio: reactivate cmf after hibernate

      During resume from hibernate we already reenable measurement block
      updates on a per device basis. In addition to that we also need to
      activate channel measurement globally using the set channel monitor
      instruction.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 45bf4b96e6aea81594e510fe5cd10190ff4e6cb1
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:53:01 2015 +0200

      s390/cio: use kmem_cache for extended measurement block allocation

      Extended measurement blocks need to be 64 byte aligned. To achieve that
      128 bytes for each measurement block are allocated and an align callback
      returns a 64 byte aligned address inside this area.

      Replace this code with kmem_cache allocations.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit a5e9ca573b5fe47aef30e9c33c31b5fe7b0dfb88
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:52:31 2015 +0200

      s390/cio: fix memleak in channel measurement

      The measurement block for the extended measurement data is not freed when
      switching off per device measurement. Free the measurement block after HW
      stopped accessing it.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 616503d1d8940049841e5b6f2ab5157f37072ed9
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:52:06 2015 +0200

      s390/cio: improve locking during cmbe allocation

      During allocation of extended measurement blocks we check if the device is
      already active for channel measurement and add the device to a list of
      devices with active channel measurement. The check is done under ccwlock
      protection and the list modification is guarded by a different lock.

      To guarantee that both states are in sync make sure that both locks
      are held during the allocation process (like it's already done for the
      "normal" measurement block allocation).

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit a6ef15652d260f754ead223d0c55434a3a39fe1d
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:51:39 2015 +0200

      s390/cio: fix use after free in cmb processing

      Devices with active channel measurement are included in a list. When a
      device is removed without deactivating channel measurement first the
      list_head is freed but still used. Fix this by making sure that
      channel measurement is deactivated during device deregistration.

      For devices that we deregister because they are no longer accessible
      deactivating channel measurement will fail. In this case we can report
      success because the FW will no longer access the measurement block.

      In addition to these steps keep an extra device reference while
      channel measurement is active.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 1bc6664bdfb949bc69a08113801e7d6acbf6bc3f
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:11:42 2015 +0200

      s390/cio: use device_lock during cmb activation

      Hold the device_lock during [de]activation of the channel measurement
      block to synchronize concurrent usage of these functions.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 279b8f9a0f3ea3399764047d487dfdd8f7bc9795
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 19:50:25 2015 +0200

      s390/cio: cleanup cmb_enable sysfs attr

      Ensure that we hold the ccwlock when accessing private data. Return errors
      that occur during measurement enabling to userspace. Apply some cleanups
      while at it.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 3c4aac86cbb3389d74152a83c89cf3a31fd7cc0b
  Author: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
  Date:   Wed Sep 16 00:54:24 2015 +0600

      s390/crash_dump: use for_each_mem_range

      The <linux/memblock.h> already provides for_each_mem_range() macro that
      iterates through memblock areas from type_a and not included in type_b.
      We can remove custom for_each_dump_mem_range() macro and use the
      for_each_mem_range() instead.

      Signed-off-by: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>

  commit 1afc82aee45c118dc8026d54a230e75ff6baee66
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Sep 11 16:32:24 2015 +0200

      s390/barrier: avoid serialization in [smp_]rmb and [smp_]wmb

      The principles of operation says:

      The storage-operand fetch references of one instruction
      occur after those of all preceding instructions and
      before those of subsequent instructions, as observed
      by other CPUs and by channel programs.
      [...]
      The CPU may fetch the operands of instructions before the
      instructions are executed.
      [...]
      The CPU may delay placing results in storage.
      [...]
      the results of one instruction are placed in storage after
      the results of all preceding instructions have been placed
      in storage and before any results of the succeeding
      instructions are stored, as observed by other CPUs and by
      the channel subsystem.

      which boils down to:
      - reads are in order
      - writes are in order
      - reads can happen earlier
      - writes can happen later

      By definition (see memory-barrier.txt) read barriers orders
      reads vs reads and write barriers orders writes agains writes.
      but neither of these orders reads vs. writes.

      That means we can implement smp_wmb,smp_rmb,wmb and rmb as
      simple compiler barriers. To avoid reviewing all driver code
      for correct barrier usage we keep dma_[rw]mb as serialization
      for now.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 33b5881d11c5d852662efb764f5054347296a062
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Sep 11 16:23:06 2015 +0200

      s390/vdso: use correct memory barrier

      By definition smp_wmb only orders writes against writes. (Finish all
      previous writes, and do not start any future write). To protect the
      vdso init code against early reads on other CPUs, let's use a full
      smp_mb at the end of vdso init. As right now smp_wmb is implemented
      as full serialization, this needs no stable backport, but this change
      will be necessary if we reimplement smp_wmb.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e0af21c56ddd592b33f74f986a2cb4478b10786e
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Sep 11 16:09:56 2015 +0200

      s390/spinlock: use correct barriers

      _raw_write_lock_wait first sets the high order bit to indicate a
      pending writer and then waits for the reader to drop to zero.
      smp_rmb by definition only orders reads against reads. Let's use
      a full smp_mb instead. As right now smp_rmb is implemented
      as full serialization, this needs no stable backport, but this
      patch will be necessary if we reimplement smp_rmb.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 9a21268360f5438796fa935e0b2e9317187ef8f4
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Fri Sep 4 13:52:44 2015 +0200

      s390/dasd: mark DASD devices as non rotational

      We were able to reduce the CPU overhead of big paging scenarios
      when announcing our paging disks as non-rotational.
      Almost all dasd devices are implemented in storage servers with
      cache, raid, striping and lots of magic. There is no point in
      optimizing the disk schedulers and swap code for a single platter
      moving arm rotational disks. Given the complexity of the setup
      and the fact that this change is mostly to disable the additional
      overhead in swap code, lets keep the other functionality unchanged
      and do not disable the this device as entropy source - unlike other
      non-rotational devices.

      Suggested-by: Christian Ehrhardt <ehrhardt@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 1330a1258dc20caa5961b07aa62482793d6f2ecf
  Author: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 09:57:24 2015 +0200

      s390/zcrypt: enable odd RSA modulus sizes in CRT format

      In the past only even modulus sizes were allowed for RSA keys in
      CRT format. This restriction was based on limited RSA key generation
      on older crypto adapters that provides only even modulus sizes. This
      restriction is not valid any more.

      Revoke restrictions that crypto requests can be serviced with odd
      RSA modulus length in CRT format.

      Signed-off-by: Ingo Tuchscherer <ingo.tuchscherer@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit b02064a9b8134e1aac4e891abf72139ca0b126ee
  Author: Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 11:57:56 2015 +0200

      s390/numa: write kernel message when emu_size has been increased

      Signed-off-by: Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8785955bbc28be446bcb2ad08cfb0599246746f7
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Oct 9 04:26:35 2015 -0700

      mwifiex: remove unnecessary NULL check

      ra_list cannot be NULL here, so remove the unnecessary NULL check.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit fe24372d1b115863905174aa3c9f988c1eb40630
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Fri Oct 9 04:26:34 2015 -0700

      mwifiex: add ndo_validate_addr netdev ops

      ndo_validate_addr is set to generic eth_validate_addr() function
      used for MAC address validation.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 505c5cb82ddf0fb6a88d1fc2fbf2386133a9ffcd
  Author: Ganapathi Bhat <gbhat@xxxxxxxxxxx>
  Date:   Fri Oct 9 04:26:33 2015 -0700

      mwifiex: fix AP VHT behaviour

      Even if hostapd configuration file contains VHT parameters,
      they were not getting reflected in beacons. The reason is
      we are resetting them before starting AP. This patch removes
      redundant BSS_STOP and SYS_RESET firmware commands before
      starting AP to fix the problem.

      Signed-off-by: Ganapathi Bhat <gbhat@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 46dbe2476c93026b20ddf36c6995e678bd867000
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Fri Oct 9 04:26:23 2015 -0700

      mwifiex: control WLAN and bluetooth coexistence modes

      By default our chip will be in spatial coexistence mode.
      This patch adds a provision to change it to timeshare mode
      via debugfs command.

      Enable timeshare coexistence mode
         echo 1 > /sys/kernel/debug/mwifiex/mlan0/timeshare_coex

      Go back to spacial coexistence mode
         echo 0 > /sys/kernel/debug/mwifiex/mlan0/timeshare_coex

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit a484804b3eb8de64a2497c484a08359f7ae28210
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Sun Oct 4 16:46:55 2015 +0800

      mwifiex: fix a comment typo

      Just fix a typo in the code comment.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Acked-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit cfa2b42b4d9a3dc10aa1e0c82213f3d30d5bcdf8
  Author: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 13:24:37 2015 +0800

      ath9k: fix QCA9561 XLNA rxgain initial

      A small bugfix for commit ede6a5e7b859 ("ath9k: Add QCA956x HW support").
      I guess I would have skipped renaming (that initial QCA956x commit has
      been there already for almost a year with the "5g" in the name) and move
      the call outside AR_SREV_9462_20_OR_LATER() to make it reachable.

      Signed-off-by: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 871d0051f06030bfddd5971ef2afc1eb7291ab4e
  Author: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 13:24:36 2015 +0800

      ath9k: rename ini_modes_rxgain_5g_xlna to ini_modes_rxgain_xlna

      rename the variable as preparation for using the array with 2.4 GHz
      band, etc.

      Signed-off-by: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 16a4ea506503343a066e9b986e4775bf472e5205
  Author: Priit Laes <plaes@xxxxxxxxx>
  Date:   Tue Sep 15 09:01:56 2015 +0300

      rtlwifi: rtl8192cu: Add missing case in rtl92cu_get_hw_reg

      Driver was reporting 'switch case not processed' after association,
      so HW_VAR_KEEP_ALIVE was added and filled similarily to other drivers.

      Positive side effect to this seems to be a bit more stable connection.

      Signed-off-by: Priit Laes <plaes@xxxxxxxxx>
      Acked-by: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ce03966a16b03e5cf1a9cbd2f42ca0fbe4118ab5
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Thu Sep 10 07:27:34 2015 -0700

      mwifiex: correction in USB8997 chipset's product ID

      For 8897 chipset, mwifiex_usb unnecessarily used to
      come into picture when wlan is supposed to be used
      via PCIe interface and USB interface is for
      bluetooth.

      This problem has been resolved for newer chipset by
      having separate USB product ids for USB-USB8997 and
      PCIe-USB8997 chipset variants. This patch ensures to
      use wlan specific product id.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Frank Huang <frankh@xxxxxxxxxxx>
      Signed-off-by: Nishant Sarmukadam <nishants@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 60a188a2715f5cf9f495bd125600453b9e9b1a55
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Thu Sep 10 07:27:33 2015 -0700

      mwifiex: remove USB8897 chipset support

      We don't have any customer using this chipset via USB
      interface. if both mwifiex_pcie and mwifiex_usb modules
      are enabled by user, sometimes mwifiex_usb wins the race
      even if user wants wlan interface to be on PCIe and
      USB for bluetooth. This patch solves the problem.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Frank Huang <frankh@xxxxxxxxxxx>
      Signed-off-by: Nishant Sarmukadam <nishants@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 406df18f1f551a7f54bc68b56cf3ceb36f50cfc4
  Author: Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx>
  Date:   Wed Jul 22 10:42:43 2015 +0200

      ath9k: Fix NF CCA limits for AR9287 and AR9227

      The FreeBSD driver [0] uses the same 2G values as for the AR9280 chips.
      Using the same values in ath9k results in much better throughput for me.

      Before this patch I had a huge amount of packet loss (sometimes up to
      40%) and the max transfer speed was somewhere around 5Mbit/s. With this
      patch applied I have zero packet loss and ten times the throughput.
      My device uses a AR9227 which is the PCI variant of the AR9287.

      [0] http://bxr.su/FreeBSD/sys/dev/ath/ath_hal/ar9002/ar9287.h

      Signed-off-by: Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 18e9345b0db9fe7bd18c3c43967789fe0a2fdb52
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 16:11:41 2015 +0200

      drm/i915: Add primary plane to mask if it's visible

      This fixes the warnings like

      "plane A assertion failure, should be disabled but not"

      that on the initial modeset during boot. This can happen if
      the primary plane is enabled by the firmware, but inheriting
      it fails because the DMAR is active or for other reasons.

      Most likely caused by

      commit 36750f284b3a4f19b304fda1bb7d6e9e1275ea8d
      Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Date:   Mon Jun 1 12:49:54 2015 +0200

          drm/i915: update plane state during init

      This is a new version of

      commit 721a09f7393de6c28a07516dccd654c6e995944a
      Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Date:   Tue Sep 15 14:28:54 2015 +0200

          drm/i915: Add primary plane to mask if it's visible

      That was reverted in order to facilitate easier backporting of some
      commits from -next to v4.3.

      Reported-by: Andreas Reis <andreas.reis@xxxxxxxxx>
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=91429
      Reported-and-tested-by: Emil Renner Berthing <kernel@xxxxxxxx>
      Tested-by: Andreas Reis <andreas.reis@xxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      [Jani: cherry-picked from -next to v4.3]
      Acked-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 0836e6d8c47416d6eb60bb68a5d7213c0c2d0d29
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 18:59:08 2015 +0300

      drm/i915: Move sprite/cursor plane disable to intel_sanitize_crtc()

      Move the sprite/cursor plane disabling to occur in intel_sanitize_crtc()
      where it belongs instead of doing it in intel_modeset_readout_hw_state().

      The plane disabling was first added in
      4cf0ebbd4fafbdf8e6431dbb315e5511c3efdc3b drm/i915: Rework plane readout.

      I got the idea from some patches from Partik and/or Maarten but those
      moved also the plane state readout to intel_sanitize_crtc() which isn't
      quite right in my opinion.

      Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Cc: Patrik Jakobsson <patrik.jakobsson@xxxxxxxxxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      References: https://bugs.freedesktop.org/show_bug.cgi?id=91910
      Reviewed-by: Patrik Jakobsson <patrik.jakobsson@xxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      [Jani: cherry-picked from -next to v4.3]
      Acked-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit c4816c7389d8dbcad036be7e5a34584289d9f590
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 18:59:07 2015 +0300

      drm/i915: Assign hwmode after encoder state readout

      The dotclock is often calculated in encoder .get_config(), so we
      shouldn't copy the adjusted_mode to hwmode until we have read out the
      dotclock.

      Gets rid of some warnings like these:
      [drm:drm_calc_timestamping_constants [drm]] *ERROR* crtc 21: Can't 
calculate constants, dotclock = 0!
      [drm:i915_get_vblank_timestamp] crtc 0 is disabled

      v2: Steal Maarten's idea to move crtc->mode etc. assignment too

      Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Cc: Patrik Jakobsson <patrik.jakobsson@xxxxxxxxxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=91428
      Reviewed-by: Patrik Jakobsson <patrik.jakobsson@xxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      [Jani: cherry-picked from -next to v4.3]
      Acked-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 2e2edebefceef201624dcc323a1f7761e0040cf5
  Author: Jani Nikula <jani.nikula@xxxxxxxxx>
  Date:   Wed Oct 14 11:29:01 2015 +0300

      Revert "drm/i915: Add primary plane to mask if it's visible"

      This reverts commit 721a09f7393de6c28a07516dccd654c6e995944a.

      There is nothing wrong with the commit per se. We had two versions of
      the commit, one in -next headed for v4.4 and this one for v4.3. Turns
      out we'll need to backport more fixes from -next, and they conflict with
      the v4.3 version. It gets messy. It will be easiest to revert this one,
      and backport all the relevant commits from -next without modifications;
      they apply cleanly after this revert.

      Requested-by: Joseph Yasi <joe.yasi@xxxxxxxxx>
      References: https://bugs.freedesktop.org/show_bug.cgi?id=91910#c4
      Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Acked-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit f1d2b4d338bf090296f67830025228872fd52513
  Author: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
  Date:   Mon Sep 7 15:59:16 2015 -0500

      rtlwifi: rtl818x: Move drivers into new realtek directory

      Now that a new mac80211-based driver for Realtek devices has been 
submitted,
      it is time to reorganize the directories. Rather than having directories
      rtlwifi and rtl818x be in drivers/net/wireless/, they will now be in
      drivers/net/wireless/realtek/. This change simplifies the directory
      structure, but does not result in any configuration changes that are
      visable to the user.

      Signed-off-by: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit dbb526ebfec1a322405b7cfcb0c46730f9865ec6
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:20 2015 +0100

      netfilter: ipv6: pointer cast layout

      Correct whitespace layout of a pointer casting.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 4305ae44a9690e35c01278fe18270d45188a61bb
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:19 2015 +0100

      netfilter: ip6_tables: improve if statements

      Correct whitespace layout of if statements.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 7e4ac676ee468108886f12a20e25795f1c330939
  Author: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:15:34 2015 +0200

      irqchip/mxs: Add Alphascale ASM9260 support

      Freescale iMX23/iMX28 and Alphascale ASM9260 have similar interrupt
      collectors. We already prepared the mxs driver to handle a different
      register layout. Add the actual ASM9260 support.

      Differences between these devices:
      - Different register offsets
      - Different count of interupt lines per register
      - ASM9260 does not provide reset bit
      - ASM9260 does not support FIQ.

      Signed-off-by: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
      Tested-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Cc: Sascha Hauer <kernel@xxxxxxxxxxxxxx>
      Cc: marc.zyngier@xxxxxxx
      Cc: jason@xxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444677334-12242-6-git-send-email-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 25e34b44313b61d7a87819498ccfd0129441604a
  Author: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:15:33 2015 +0200

      irqchip/mxs: Prepare driver for hardware with different offsets

      Alphascale asm9260 has similar functionality but different register
      offsets. To support asm9260 in the mxs driver we need to rework the
      hardcoded access mechanisms.

      - Define SET_REG and CLR_REG. These controllers support seperate CLR and
        SET offsets for each register.

      - Reimplement HW_ICOLL_INTERRUPT with SET_REG and CLR_REG to make it
        usable for both cases.

      - Instead of using icoll_base and adding the offsets at runtime,
        create a new data structure which contains base pointers to all
        required regitsters and use it.

      - Split out functionality, which is required for the init code of mxs
        and asm9260, into helper functions

      [ tglx: Massaged changelog and moved the return value change to the
                previous patch ]

      Signed-off-by: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
      Tested-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Cc: Sascha Hauer <kernel@xxxxxxxxxxxxxx>
      Cc: marc.zyngier@xxxxxxx
      Cc: jason@xxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444677334-12242-5-git-send-email-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e59a8451be1162d5a10a33e40092f1796cb8fdca
  Author: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:15:30 2015 +0200

      irqchip/mxs: Panic if ioremap or domain creation fails

      Current code will only warn and then dereference the NULL pointer or
      continue, which results in a fatal NULL pointer dereference later.

      If the initialization fails, the machine is unusable, so panic right
      away.

      [ tglx: Massaged changelog and picked the irqdomain panic from the
                next patch]

      Signed-off-by: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
      Tested-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Cc: Sascha Hauer <kernel@xxxxxxxxxxxxxx>
      Cc: marc.zyngier@xxxxxxx
      Cc: jason@xxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444677334-12242-2-git-send-email-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b4a5127b03b7f0b06dcaf08a878ffc93ad53fa82
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Aug 24 17:02:00 2015 -0700

      fm10k: do not use enum as boolean

      Check for actual value NETREG_UNINITIALIZED in case it ever changes from
      the current value of zero.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Signed-off-by: Bruce Allan <bruce.w.allan@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f6f19f8bb9afcd0e9970fe51b5affa3063af4499
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Aug 24 17:01:58 2015 -0700

      fm10k: use snprintf() instead of sprintf() to avoid buffer overflow

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Signed-off-by: Bruce Allan <bruce.w.allan@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f079fa005aae08ee0e1bc32699874ff4f02e11c1
  Author: Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
  Date:   Thu Aug 20 15:31:20 2015 -0700

      ixgbe: add flow control ethertype to the anti-spoofing filter

      This patch makes sure that flow control packets initiated by the VF are
      dropped and reported as spoofed.

      Flow control packets can be used to limit the throughput or as DOS
      attack when generated from a VF. Flow control is not supported per VF
      hence any pause frames generated from a VF are considered malicious.

      Also cleaned up indentation and some redundant comments.

      Signed-off-by: Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 06a24dd6c29a814a81595861c2cc681329c56bfc
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:55 2015 -0400

      i40e/i40evf: Bump i40e version to 1.3.25 and i40evf to 1.3.17

      Bump.

      Change-ID: If3cd42f6c1b9546beed60faf9c79faab35216f58
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit fc72dbce09989b268b20342473ddc8d77c8da350
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Tue Sep 1 11:36:30 2015 -0400

      i40e/i40evf: Refactor PHY structure and add phy_capabilities enum

      Remove unused members in the PHY structure and add a new member to store
      all the capabilities the PHY has as reported by the FW. This information
      will help us determine what speeds the device is capable of when link is
      down.

      Also add an enum to decode the PHY types the NVM is capable of.
      Use the phy_types variable to determine what phy types are possible
      when link is down instead of device id as it will be more accurate.

      When on a backplane device, we do not support changing any settings,
      however we should display all the phy_types we are capable of so if we
      see a backplane dev ID set supported and advertised purely based on
      the phy_types variable.

      Change-ID: Ia75d560f1fcd30c54cbfb7458690c5867559a930
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0a862b43acc6c5d38fd462baa9c76f9197907d73
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:53 2015 -0400

      i40e/i40evf: Add module_types and update_link_info

      Add a module_types variable to the link_info struct to save the module
      information from get_phy_capabilities. This information can be used to
      determine which speeds the module supports.

      Also add a new function update_link_info which updates the module_types
      parameter and then calls get_link_info. This function should be called
      in place of get_link_info so that the module_types variable stays
      up-to-date with the rest of the link information.

      The EAS table does not reflect the values that are actually returned,
      so instead, basing these values on the Ethernet compliance codes
      specified in table 33 of SFF-8436 as these have been accurate.

      Use the new variable in ethtool to differentiate between a 10G/1G dual
      speed fiber module and a 10G only module.

      Change-ID: Ib7585cce321319c10ce15180054c41a6cbd41389
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d72c95ea422ab63c832a13c075cb73bc87a1276e
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:50 2015 -0400

      i40e/i40evf: split device ids into a separate file

      Due to desires to write userland drivers, and other requests, without
      needing the rest of the include files, the device ids are pulled out
      into a standalone file.

      Change-ID: Ic0b047dbf9d4b0891892309c1f2079f56d9b60e8
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f0b44440148c257bb5b1872e8ff5d6591afc8f4f
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:49 2015 -0400

      i40e: update fw version text string per previous product formats

      This patch moves the internal fw version and fw api version info to be
      output in probe.  The nvm version, etrack and oem version info are now
      configured for output via ethtool -i.

      Change-ID: I05d490093a7137dbefcdef263d014d1e5c9e83d0
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 21be99ec4ed366e24d4735d230aa3086ff2bc6ed
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:48 2015 -0400

      i40e: don't panic on VSI allocation failure

      In some circumstances, the firmware may fail to allocate a VSI for a VF.
      When this happens, the driver does not react well to the bad news and
      has a panic attack.

      To fix this problem, check the return value from i40e_alloc_vf_res and
      don't try to configure the device further if it failed. Additionally,
      explicitly clear the INIT bit when we free VF resources, so that this
      bit will be in the proper state in the failure case, and won't blow up
      elsewhere.

      Change-ID: I6a20ce2b59c3458fd832032e88fa28cd42500189
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e7e6cfce16e9184497716e004fc9e714a7411ad0
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:47 2015 -0400

      i40e: remove redundant call

      This function call isn't needed here; the same function is already
      called by i40e_reset_vf.

      Change-ID: I96ccbf91b752965c9e28fe895d4c7d4c46e3ba44
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a487c03fa28286d0de42558da1aa57d82d54fc4d
  Author: Dudley Du <dudl@xxxxxxxxxxx>
  Date:   Mon Oct 12 10:16:16 2015 -0700

      Input: cyapa - fix the copy paste error on electrodes_rx value

      Fix the copy paste error on the electrodes_rx value set code which will
      cause the electrodes_rx value be always set to the value of electrodes_y.

      Reported-by: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
      Signed-off-by: Dudley Du <dudl@xxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 41c3ae8b726e07e366fdb63e0e40a33528f1c3e4
  Author: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:46 2015 -0400

      i40e: Convert CEE App TLV selector to IEEE selector

      Changes the parsing of CEE App TLVs to fill in the App selector in struct
      i40e_dcbx_config with the IEEE App selector so the caller doesn't have to
      consider whether the App came from a CEE or IEEE DCBX negotiation.

      Change-ID: Ia7d9d664cde04d2ebcc9822fd22e4929c6edab3a
      Signed-off-by: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ac24382d41cc72541d5f8810336acf98a5e6d260
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:45 2015 -0400

      i40e/i40evf: Add info to nvm info struct for OEM version data

      This patch adds a member to the nvm_info struct for oem_ver info to be
      output either by OID or ethtool.

      Change-ID: I1e5d513ae67622e2af17042924fdb4b5d6d85366
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 14e52ee26bdfd6ad00075b66089b4b63fe36fff0
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:44 2015 -0400

      i40evf: properly handle ndo_set_mac_address calls

      The driver was not correctly handling calls to its ndo_set_mac_address
      method. It did not properly check to see if the override would be
      allowed by the PF driver, and never removed the old address from its
      filter list.

      Add a new flag to the adapter struct which is set if the MAC address is
      assigned by the PF. Check this flag and don't allow the MAC address to
      be changed if it is set. Search for and properly remove the filter
      for the old MAC address when the new one is set.

      Change-ID: I817bf620c869c5a80e6a7eab65c9cbad1dc89799
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ab252253e08c16de28ec0f6da0a7ff684a8fce98
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:43 2015 -0400

      i40e: Use BIT() macro for priority map parsing

      Replace one left over (1 << up) in the i40e_dcb.c file with the BIT()
      macro.

      Change-ID: I39492a400a2cee5ac566143a5b436cc478bea0db
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9f4ffc4426c4a4b6d4a84413e13efba6a72bf81d
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:42 2015 -0400

      i40e: Make it clear a parameter is never used

      Flag the filter_mask parameter as __always_unused in the
      ndo_bridge_getlink function.

      Change-ID: Ifc1e99c7fb84bcbf81cf7b0ac891ad8ca956ffb2
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1d55aa9c350b02a0c79d901518026e3af5d5b006
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:41 2015 -0400

      i40e/i40evf: Add new link status defines

      Add the new Port link status bit and rename the link status to function
      link status.

      Change-ID: I71289327ae62638ce967b6ad40114caf998b6dab
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0e339447cf2c8b5c742f9be8e2d73bc27b7ac9c4
  Author: Jeff Johnson <jjohnson@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 09:15:53 2015 -0700

      ath10k: cleanup ath10k_mac_register() error handling

      The logic in the error-handling path of ath10k_mac_register() is
      divergent from the logic in ath10k_mac_unregister().  Update the
      ath10k_mac_register() error handling logic to align with the
      ath10k_mac_unregister() logic.

      Signed-off-by: Jeff Johnson <jjohnson@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 83cfce87d91f06e37bd38f782f0714b406a95873
  Author: Mohammed Shafi Shajakhan <mohammed@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 16:03:03 2015 +0530

      ath10k: fix cleanup in ath10k_thermal_unregister

      First remove the 'cooling_device#n' syslink created
      for ath10k and then unregsiter from the thermal subsystem(cooling)

      Signed-off-by: Mohammed Shafi Shajakhan <mohammed@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit db0984e51a187f5bbe41231af7e671cc12586346
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 11:55:59 2015 +0300

      ath10k: select board data based on BMI chip id and board id

      QCA99X0 uses radio specific board names based on chip id and
      board id combinations. We get these IDs from the target using BMI after 
otp.bin
      has been started.

      This patch reorders the call to the function ath10k_core_fetch_board_file
      so that we have OTP binary before requesting for boardid-chipid. We get 
this
      OTP data after parsing firmware-N.bin.

      [kvalo@xxxxxxxxxxxxxxxx: try BMI_PARAM_GET_EEPROM_BOARD_ID with
       all boards and detect if command is not supported]
      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0a51b343abfe2c0dbcbd9ec3c4b18bb8779fefa8
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 11:55:58 2015 +0300

      ath10k: add board 2 API support

      QCA6174 needs different board files based on board type. To make it 
easier to
      distribute multiple board files and automatically choose correct board 
file
      create a simple TLV file format following the same principles as with FW 
IEs.
      The file is named board-2.bin and contain multiple board files. Each 
board file
      then can have multiple names.

      ath10k searches for file board-N.bin (where N is the interface version 
number
      for the board file, just like we for firmware files) in /lib/firmware/*, 
for
      example for qca99x0 it will try to find it here:

      /lib/firmware/ath10k/QCA99X0/hw2.0/board-2.bin

      If ath10k doesn't find board-2.bin then it will fallback to the old 
board.bin file.

      This patch adds a simple name scheme using pci device id which for now 
will be
      used by qca6174:

      bus=%s,vendor=%04x,device=%04x,subsystem-vendor=%04x,subsystem-device=%04x

      This removes the old method of having subsystem ids in ar->spec_board_id 
and
      using that in the board file name.

      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      [kvalo@xxxxxxxxxxxxxxxx: simplified the file format, rewrote commit log, 
other smaller changes]
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 4b418bff3dae0c017126220df3e148ba8127e99a
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 13:54:38 2015 -0700

      net: vrf: Documentation update, ip commands

      Add ip commands with examples for creating VRF devics, enslaving 
interfaces
      and dumping VRF-focused data (address, neighbors, routes).

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dc6c5fb3b514221f2e9d21ee626a9d95d3418dff
  Author: Chris Mason <clm@xxxxxx>
  Date:   Tue Oct 13 14:06:48 2015 -0400

      btrfs: fix use after free iterating extrefs

      The code for btrfs inode-resolve has never worked properly for
      files with enough hard links to trigger extrefs.  It was trying to
      get the leaf out of a path after freeing the path:

        btrfs_release_path(path);
        leaf = path->nodes[0];
        item_size = btrfs_item_size_nr(leaf, slot);

      The fix here is to use the extent buffer we cloned just a little higher
      up to avoid deadlocks caused by using the leaf in the path.

      Signed-off-by: Chris Mason <clm@xxxxxx>
      cc: stable@xxxxxxxxxxxxxxx # v3.7+
      cc: Mark Fasheh <mfasheh@xxxxxxx>
      Reviewed-by: Filipe Manana <fdmanana@xxxxxxxx>
      Reviewed-by: Mark Fasheh <mfasheh@xxxxxxx>

  commit 8eb934591f8bf584969454a658f629cd06e59f3a
  Author: David Sterba <dsterba@xxxxxxxx>
  Date:   Mon Oct 12 16:55:54 2015 +0200

      btrfs: check unsupported filters in balance arguments

      We don't verify that all the balance filter arguments supplemented by
      the flags are actually known to the kernel. Thus we let it silently pass
      and do nothing.

      At the moment this means only the 'limit' filter, but we're going to add
      a few more soon so it's better to have that fixed. Also in older stable
      kernels so that it works with newer userspace tools.

      Cc: stable@xxxxxxxxxxxxxxx # 3.16+
      Signed-off-by: David Sterba <dsterba@xxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit c3643885aa8a3c7cff3ba3269337f39361d76f76
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Mon Oct 12 01:19:07 2015 -0700

      mISDN: use kstrdup() in dsp_pipeline_build

      Use kstrdup instead of strlen-kmalloc-strcpy. Remove unneeded NULL
      test, it will be tested inside kstrdup. Remove 0 length string test,
      it has been tested in the caller of dsp_pipeline_build.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4bdc3d66147b3a623b32216a45431d0cff005f50
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Oct 13 17:12:54 2015 -0700

      tcp/dccp: fix behavior of stale SYN_RECV request sockets

      When a TCP/DCCP listener is closed, its pending SYN_RECV request sockets
      become stale, meaning 3WHS can not complete.

      But current behavior is wrong :
      incoming packets finding such stale sockets are dropped.

      We need instead to cleanup the request socket and perform another
      lookup :
      - Incoming ACK will give a RST answer,
      - SYN rtx might find another listener if available.
      - We expedite cleanup of request sockets and old listener socket.

      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a98f1b78ecf325bf29c9d3d1eb38cbc9340000af
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Tue Oct 13 16:10:28 2015 +0200

      PM / Domains: Fix validation of latency constraints in genpd governor

      Commit ba2bbfbf6307 (PM / Domains: Remove intermediate states from the
      power off sequence) changed the power off sequence in genpd. That also
      required some updates regarding the validation of latency constraints in
      the genpd governor. Unfortunate that wasn't covered, so let's fix this.

      From a runtime PM and latency point of view, we need to consider the worst
      case scenario while validating latency constraints. That's typically when
      a call to pm_runtime_get_sync() needs to wait for a ongoing runtime
      suspend operation to be carried out, as it then also needs to wait for the
      device to be runtime resumed again.

      The above mentioned commit made the genpd governor's ->stop_ok() callback
      responsible of validating genpd's device's runtime suspend/resume latency.
      In other words, the constraint needs to be validated towards the relevant
      latencies present in genpd's ->runtime_suspend|resume() callbacks.

      Earlier, that included latencies from the ->stop|start() callbacks, but as
      ->save|restore_state() are now also being invoked from genpd's
      ->runtime_suspend|resume() and to comply with the worst case scenario,
      let's take also those latencies into account.

      Fixes: ba2bbfbf6307 (PM / Domains: Remove intermediate states from the 
power off sequence)
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 0b5c9279e568d90903acedc2b9b832d8d78e8288
  Author: Christoph Lameter <cl@xxxxxxxxx>
  Date:   Sun Oct 11 18:49:42 2015 -0500

      IB/ipoib: For sendonly join free the multicast group on leave

      When we leave the multicast group on expiration of a neighbor we
      do not free the mcast structure. This results in a memory leak
      that causes ib_dealloc_pd to fail and print a WARN_ON message
      and backtrace.

      Fixes: bd99b2e05c4d (IB/ipoib: Expire sendonly multicast joins)
      Signed-off-by: Christoph Lameter <cl@xxxxxxxxx>
      Tested-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3435dd08092934ee9672fc28a3ee4c2017741bd6
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 13:47:17 2015 +0300

      x86/early_printk: Set __iomem address space for IO

      There are following warnings on unpatched code:

      arch/x86/kernel/early_printk.c:198:32: warning: incorrect type in 
initializer (different address spaces)
      arch/x86/kernel/early_printk.c:198:32:    expected void [noderef] 
<asn:2>*vaddr
      arch/x86/kernel/early_printk.c:198:32:    got unsigned int [usertype] 
*<noident>
      arch/x86/kernel/early_printk.c:205:32: warning: incorrect type in 
initializer (different address spaces)
      arch/x86/kernel/early_printk.c:205:32:    expected void [noderef] 
<asn:2>*vaddr
      arch/x86/kernel/early_printk.c:205:32:    got unsigned int [usertype] 
*<noident>

      Annotate it proper.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444646837-42615-1-git-send-email-andriy.shevchenko@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ba2374fd2bf379f933773811fdb06cb6a5445f41
  Author: Christian Zander <christian@xxxxxxxxxxxxxx>
  Date:   Wed Jun 10 09:41:45 2015 -0700

      iommu/vt-d: fix range computation when making room for large pages

      In preparation for the installation of a large page, any small page
      tables that may still exist in the target IOV address range are
      removed.  However, if a scatter/gather list entry is large enough to
      fit more than one large page, the address space for any subsequent
      large pages is not cleared of conflicting small page tables.

      This can cause legitimate mapping requests to fail with errors of the
      form below, potentially followed by a series of IOMMU faults:

      ERROR: DMA PTE for vPFN 0xfde00 already set (to 7f83a4003 not 7e9e00083)

      In this example, a 4MiB scatter/gather list entry resulted in the
      successful installation of a large page @ vPFN 0xfdc00, followed by
      a failed attempt to install another large page @ vPFN 0xfde00, due to
      the presence of a pointer to a small page table @ 0x7f83a4000.

      To address this problem, compute the number of large pages that fit
      into a given scatter/gather list entry, and use it to derive the
      last vPFN covered by the large page(s).

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christian Zander <christian@xxxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit 5b5f1455272e23f4e7889cec37228802d8d01adf
  Merge: 6006d452 3be7f32
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 11:31:03 2015 -0700

      Merge tag 'nfsd-4.3-2' of git://linux-nfs.org/~bfields/linux

      Pull nfsd fixes from Bruce Fields:
       "Two nfsd fixes, one for an RDMA crash, one for a pnfs/block protocol
        bug"

      * tag 'nfsd-4.3-2' of git://linux-nfs.org/~bfields/linux:
        svcrdma: Fix NFS server crash triggered by 1MB NFS WRITE
        nfsd/blocklayout: accept any minlength

  commit 6006d4521b158e5ef48620e8c9028bba91bf985d
  Merge: 7554225 8996eaf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 10:18:54 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fixes from Herbert Xu:
       "This fixes the following issues:

         - Fix AVX detection to prevent use of non-existent AESNI.

         - Some SPARC ciphers did not set their IV size which may lead to
           memory corruption"

      * git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: ahash - ensure statesize is non-zero
        crypto: camellia_aesni_avx - Fix CPU feature checks
        crypto: sparc - initialize blkcipher.ivsize

  commit 75542253127d4e4003a5542189c53ff85e4b27b2
  Merge: 06d1ee3 5adad99
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 10:09:59 2015 -0700

      Merge tag 'iommu-fixes-v4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu

      Pull IOMMU fixes from Joerg Roedel:
       "A few fixes piled up:

         - Fix for a suspend/resume issue where PCI probing code overwrote
           dev->irq for the MSI irq of the AMD IOMMU.

         - Fix for a kernel crash when a 32 bit PCI device was assigned to a
           KVM guest.

         - Fix for a possible memory leak in the VT-d driver

         - A couple of fixes for the ARM-SMMU driver"

      * tag 'iommu-fixes-v4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu:
        iommu/amd: Fix NULL pointer deref on device detach
        iommu/amd: Prevent binding other PCI drivers to IOMMU PCI devices
        iommu/vt-d: Fix memory leak in dmar_insert_one_dev_info()
        iommu/arm-smmu: Use correct address mask for CMD_TLBI_S2_IPA
        iommu/arm-smmu: Ensure IAS is set correctly for AArch32-capable SMMUs
        iommu/io-pgtable-arm: Don't use dma_to_phys()

  commit e7a46c818564329f977f8fa157b5e9e1d0d83012
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:45 2015 +0100

      irqdomain: Documentation updates

      Update the IRQ domain documentation to reflect the changes made
      while divorcing the domain infrastructure from Device Tree.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-18-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit be5436c83ac8921f33fe07323fab03c6644ce52e
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:44 2015 +0100

      irqdomain/msi: Use fwnode instead of of_node

      As we continue to push of_node towards the outskirts of irq domains,
      let's start tackling the case of msi_create_irq_domain and its little
      friends.

      This has limited impact in both PCI/MSI, platform MSI, and a few
      drivers.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-17-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2a5e9a072da6469a37d1f0b1577416f51223c280
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:43 2015 +0100

      irqdomain: Introduce irq_domain_create_hierarchy

      As we're about to start converting the various MSI layers to
      use fwnode_handle instead of device_node, add irq_domain_create_hierarchy
      as a directly equivalent of irq_domain_add_hierarchy (which still
      exists as a compatibility interface).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-16-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 462e4fc793b1071dee7c15680218a001318060c5
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:42 2015 +0100

      acpi/gsi: Cleanup acpi_register_gsi

      As the only user of drivers/acpi/gsi.c is now using acpi_set_irq_model
      to set acpi_gsi_domain_id to something meaningful, we can always rely
      on that information to be present (its absence is an error), and
      guarantee that new interrupt controllers will use this API.

      Take this opportunity to cleanup acpi_register_gsi.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-15-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 18bd8847cdd4dac3276ae9973739c570ce37e0b7
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:41 2015 +0100

      irqchip/gic: Kill the xlate method

      We are now left with only two use models for the GIC driver:
      - Via a firmware interface, which mandates a hierarchical domain,
        and the use of the 'translate' method
      - The legacy platforms, which assume irq==hwirq, hence not using
        the 'xlate' method.

      The logical conclusion is that we can now nuke the 'xlate' method
      altogether.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-14-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 891ae7694f862c3605d037066e15ca128faa95d5
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:40 2015 +0100

      irqchip/gic: Switch ACPI support to stacked domains

      Now that the basic ACPI GSI code is irq domain aware, make sure
      that the ACPI support in the GIC doesn't pointlessly deviate from
      the DT path.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-13-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e81a7cd96bd55bb57d92486c514b7b8f8c8cd8ce
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:39 2015 +0100

      irqchip/gic: Get rid of gic_init_bases()

      Since nobody is using gic_init_bases anymore outside of the GIC
      driver itself, let's do a bit of housekeeping and remove the now
      useless entry point.

      Only gic_init() is now exposed to the rest of the kernel for the
      benefit of legacy systems.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-12-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2bc6eba4a322e70eac8cde76442c4ac90699fb39
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:38 2015 +0100

      acpi/gsi: Add acpi_set_irq_model to initialize the GSI layer

      In order to start embrassing irqdomains at the GSI level, introduce
      a new initializer:

      void acpi_set_irq_model(enum acpi_irq_model_id model,
                        struct fwnode_handle *fwnode);

      where:
      - model is the value assigned to acpi_irq_model
      - fwnode is the identifier for the irqdomain mapping
        GSI interrupts

      As nobody calls this code yet, the current code is (mostly)
      left in place.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-11-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d7f8504d234450bf10bb2eb2d4565d6e9af78e5c
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:37 2015 +0100

      acpi/gsi: Always perform an irq domain lookup

      Instead of directly passing NULL to the various irq_domain functions,
      start by looking up the domain with a domain identifier..

      As this identifier is permanently set to NULL, the lookup function will
      return the same value (no domain found) and the default will be used,
      preserving the current behaviour.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-10-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b145dcc45a6af0abfcf9b4de8006d40559c50fc6
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:36 2015 +0100

      irqdomain: Add a fwnode_handle allocator

      In order to be able to reference an irqdomain from ACPI, we need
      to be able to create an identifier, which is usually a struct
      device_node.

      This device node does't really fit the ACPI infrastructure, so
      we cunningly allocate a new structure containing a fwnode_handle,
      and return that.

      This structure doesn't really point to a device (interrupt
      controllers are not "real" devices in Linux), but as we cannot
      really deny that they exist, we create them with a new fwnode_type
      (FWNODE_IRQCHIP).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-9-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1bf4ddc46c5d6123897a54cea4ffe3e90f30600b
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:35 2015 +0100

      irqdomain: Introduce irq_domain_create_{linear, tree}

      Just like we have irq_domain_add_{linear,tree} to create a irq domain
      identified by an of_node, introduce irq_domain_create_{linear,tree}
      that do the same thing, except that they take a struct fwnode_handle.

      Existing functions get rewritten in terms of the new ones so that
      everything keeps working as before (and __irq_domain_add is now
      fwnode_handle based as well).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-8-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c0131f09de8c2d301814cac86d78f643b8ee0574
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:34 2015 +0100

      irqdomain: Introduce irq_create_fwspec_mapping

      Just like we have irq_create_of_mapping, irq_create_fwspec_mapping
      creates a IRQ domain mapping for an interrupt described in a
      struct irq_fwspec.

      irq_create_of_mapping gets rewritten in terms of the new function,
      and the hack we introduced before gets removed (now that no stacked
      irqchip uses of_phandle_args anymore).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-7-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f833f57ff25450b7161798dceaf8575a48d80249
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:33 2015 +0100

      irqchip: Convert all alloc/xlate users from of_node to fwnode

      Since we now have a generic data structure to express an
      interrupt specifier, convert all hierarchical irqchips that
      are OF based to use a fwnode_handle as part of their alloc
      and xlate (which becomes translate) callbacks.

      As most of these drivers have dependencies (they exchange IRQ
      specifiers), change them all in a single, massive patch...

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-6-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 11e4438ee330fab0f216ee7cc1b651cb2ddceb5d
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:32 2015 +0100

      irqdomain: Introduce a firmware-specific IRQ specifier structure

      So far the closest thing to a generic IRQ specifier structure is
      of_phandle_args, which happens to be pretty OF specific (the of_node
      pointer in there is quite annoying).

      Let's introduce 'struct irq_fwspec' that can be used in place of
      of_phandle_args for OF, but also for other firmware implementations
      (that'd be ACPI). This is used together with a new 'translate' method
      that is the pendent of 'xlate'.

      We convert irq_create_of_mapping to use this new structure (with a
      small hack that will be removed later).

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-5-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 130b8c6c8d86075304952241bf2365cea6489df1
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:31 2015 +0100

      irqdomain: Allow irq domain lookup by fwnode

      So far, our irq domains are still looked up by device node.
      Let's change this and allow a domain to be looked up using
      a fwnode_handle pointer.

      The existing interfaces are preserved with a couple of helpers.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-4-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f110711a6053f08731858aa91420104094188973
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:30 2015 +0100

      irqdomain: Convert irqdomain-%3Eof_node to fwnode

      Now that we have everyone accessing the of_node field via the
      irq_domain_get_of_node accessor, it is pretty easy to swap it
      for a pointer to a fwnode_handle.

      This translates into a few limited changes in __irq_domain_add,
      and an updated irq_domain_get_of_node.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-3-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 5d4c9bc7767bc86eb9a0e66df783e3fbada7dc97
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Tue Oct 13 12:51:29 2015 +0100

      irqdomain: Use irq_domain_get_of_node() instead of direct field access

      The struct irq_domain contains a "struct device_node *" field
      (of_node) that is almost the only link between the irqdomain
      and the device tree infrastructure.

      In order to prepare for the removal of that field, convert all
      users to use irq_domain_get_of_node() instead.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-and-tested-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tomasz Nowicki <tomasz.nowicki@xxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Graeme Gregory <graeme@xxxxxxxxxxx>
      Cc: Jake Oshins <jakeo@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rjw@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444737105-31573-2-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e50226b4b86755e65aef2129e94d952fee3df722
  Merge: e984977 25cb62b
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 19:00:14 2015 +0200

      Merge branch 'linus' into irq/core

      Bring in upstream updates for patches which depend on them

  commit 06d1ee32a4d25356a710b49d5e95dbdd68bdf505
  Merge: 25cb62b 7b98040
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 09:45:21 2015 -0700

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "I got a bit behind last week, so here is a delayed fixes pull:

         - a bunch of radeon/amd gpu fixes
         - some nouveau regression fixes (ppc bios reading and runtime pm fix)
         - one drm core oops fix
         - two qxl locking fixes
         - one qxl regression fix"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/nouveau/bios: fix OF loading
        drm/nouveau/fbcon: take runpm reference when userspace has an open fd
        drm/nouveau/nouveau: Disable AGP for SiS 761
        drm/nouveau/display: allow up to 16k width/height for fermi+
        drm/nouveau/bios: translate devinit pri/sec i2c bus to internal 
identifiers
        drm: Fix locking for sysfs dpms file
        drm/amdgpu: fix memory leak in amdgpu_vm_update_page_directory
        drm/amdgpu: fix 32-bit compiler warning
        drm/qxl: avoid dependency lock
        drm/qxl: avoid buffer reservation in qxl_crtc_page_flip
        drm/qxl: fix framebuffer dirty rectangle tracking.
        drm/amdgpu: flag iceland as experimental
        drm/amdgpu: check before checking pci bridge registers
        drm/amdgpu: fix num_crtc on CZ
        drm/amdgpu: restore the fbdev mode in lastclose
        drm/radeon: restore the fbdev mode in lastclose
        drm/radeon: add quirk for ASUS R7 370
        drm/amdgpu: add pm sysfs files late
        drm/radeon: add pm sysfs files late

  commit 73917739334c6509833b0403b81d4a04a8784bdf
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Oct 13 10:19:35 2015 +0200

      KVM: x86: fix SMI to halted VCPU

      An SMI to a halted VCPU must wake it up, hence a VCPU with a pending
      SMI must be considered runnable.

      Fixes: 64d6067057d9658acb8675afcfba549abdb7fc16
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 5d9bc648b94dd719022343b8675e6c4381f0c45f
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Oct 13 10:18:53 2015 +0200

      KVM: x86: clean up kvm_arch_vcpu_runnable

      Split the huge conditional in two functions.

      Fixes: 64d6067057d9658acb8675afcfba549abdb7fc16
      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit f0d648bdf0a5bbc91da6099d5282f77996558ea4
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Oct 12 13:56:27 2015 +0200

      KVM: x86: map/unmap private slots in __x86_set_memory_region

      Otherwise, two copies (one of them never populated and thus bogus)
      are allocated for the regular and SMM address spaces.  This breaks
      SMM with EPT but without unrestricted guest support, because the
      SMM copy of the identity page map is all zeros.

      By moving the allocation to the caller we also remove the last
      vestiges of kernel-allocated memory regions (not accessible anymore
      in userspace since commit b74a07beed0e, "KVM: Remove kernel-allocated
      memory regions", 2010-06-21); that is a nice bonus.

      Reported-by: Alexandre DERUMIER <aderumier@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: 9da0e4d5ac969909f6b435ce28ea28135a9cbd69
      Reviewed-by: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 1d8007bdee074fdffcf3539492d8a151a1fb3436
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Oct 12 13:38:32 2015 +0200

      KVM: x86: build kvm_userspace_memory_region in x86_set_memory_region

      The next patch will make x86_set_memory_region fill the
      userspace_addr.  Since the struct is not used untouched
      anymore, it makes sense to build it in x86_set_memory_region
      directly; it also simplifies the callers.

      Reported-by: Alexandre DERUMIER <aderumier@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: 9da0e4d5ac969909f6b435ce28ea28135a9cbd69
      Reviewed-by: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit ba30670f4d5292c4e7f7980bbd5071f7c4794cdd
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Tue Oct 13 12:04:28 2015 -0400

      dm thin: fix missing pool reference count decrement in pool_ctr error path

      Fixes: ac8c3f3df ("dm thin: generate event when metadata threshold 
passed")
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 3.10+

  commit a2a678ed4d0d6cb5f36dbabc411d60d9a4f9c435
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Tue Oct 13 13:33:08 2015 +0530

      dm snapshot persistent: fix missing cleanup in persistent_ctr error path

      If an unsupported option is given then the early return from
      persistent_ctr() leaked memory allocated for the 'pstore' and never
      destroyed the 'metadata_wq'.

      Fixes: b0d3cc011e53 ("dm snapshot: add new persistent store option to 
support overflow")
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit 42160a041db89807691b2a3fbf42e36a98b6019e
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 16:56:07 2015 +0200

      can: at91: remove at91_can_data

      struct at91_can_data was used to pass a callback to the driver, allowing 
it
      to switch the transceiver on and off. As all at91 boards are now using DT,
      this is not used anymore, remove that structure.

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit ba61a8d9d780980e8284355a0be750897e7af212
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:42 2015 +0200

      can: avoid using timeval for uapi

      The can subsystem communicates with user space using a bcm_msg_head
      header, which contains two timestamps. This is problematic for
      multiple reasons:

      a) The structure layout is currently incompatible between 64-bit
         user space and 32-bit user space, and cannot work in compat
         mode (other than x32).

      b) The timeval structure layout will change in 32-bit user
         space when we fix the y2038 overflow problem by redefining
         time_t to 64-bit, making new 32-bit user space incompatible
         with the current kernel interface.
         Cars last a long time and often use old kernels, so the actual
         users of this code are the most likely ones to migrate to y2038
         safe user space.

      This tries to work around part of the problem by changing the
      publicly visible user interface in the header, but not the binary
      interface. Fortunately, the values passed around in the structure
      are relative times and do not actually suffer from the y2038
      overflow, so 32-bit is enough here.

      We replace the use of 'struct timeval' with a newly defined
      'struct bcm_timeval' that uses the exact same binary layout
      as before and that still suffers from problem a) but not problem
      b).

      The downside of this approach is that any user space program
      that currently assigns a timeval structure to these members
      rather than writing the tv_sec/tv_usec portions individually
      will suffer a compile-time error when built with an updated
      kernel header. Fixing this error makes it work fine with old
      and new headers though.

      We could address problem a) by using '__u32' or 'int' members
      rather than 'long', but that would have a more significant
      downside in also breaking support for all existing 64-bit user
      binaries that might be using this interface, which is likely
      not acceptable.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Acked-by: Oliver Hartkopp <socketcan@xxxxxxxxxxxx>
      Cc: linux-can@xxxxxxxxxxxxxxx
      Cc: linux-api@xxxxxxxxxxxxxxx
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 3c200db56441365d964b5a983de948821f5011b9
  Author: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:58:39 2015 +0200

      can: sun4i: fix MODULE_DESCRIPTION

      This patch change description of the module.

      Signed-off-by: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 887e07be3fd2d056362a9f851f796580d7bca499
  Author: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:58:38 2015 +0200

      can: sun4i: fix arbitration lost error reporting

      This patch fixes a bug in arbitration error reporting

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 52fa1927e953d8b1fbdcf8a19dc75c1499cc3d5d
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Tue Oct 13 16:18:17 2015 +0100

      Revert "arm64: ioremap: add ioremap_cache macro"

      This reverts commit 1b6d7f8742d5d46c478f10c9e57da18d049b116d.

      This patch would conflict with Dan Williams' "tree-wide convert to
      memremap()" series (ioremap_cache replaced by arch_memremap)

      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3a70fcd3a4db56731f67f0189514953c74257944
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 13 14:43:58 2015 +0200

      tools build: Fix cross compile build

      He Kuang the new fixdep tool breaks cross compiling. The reason is it
      wouldn't get compiled under host arch, but under cross arch and failed
      to run.

      We need to add support for host side tools build, meanwhile disabling
      fixdep usage for cross arch builds.

      Reported-by: He Kuang <hekuang@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151013124358.GB9467@xxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c95f3432118c6b7a3bde63aa6eb95ccd163119eb
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 13 10:52:14 2015 +0200

      tools include: Fix strict-aliasing rules breakage

      Vinson reported build breakage with gcc 4.4 due to strict-aliasing.

         CC       util/annotate.o
       cc1: warnings being treated as errors
       util/annotate.c: In function â??disasm__purgeâ??:
       linux-next/tools/include/linux/compiler.h:66: error: dereferencing
       pointer â??res.41â?? does break strict-aliasing rules

      The reason is READ_ONCE/WRITE_ONCE code we took from kernel sources.  They
      intentionaly break aliasing rules. While this is ok for kernel because 
it's
      built with -fno-strict-aliasing, it breaks perf which is build with
      -Wstrict-aliasing=3.

      Using extra __may_alias__ type to allow aliasing in this case.

      Reported-and-tested-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Martin Liska <mliska@xxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabin@xxxxxx>
      Cc: linux-next@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151013085214.GB2705@xxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8996eafdcbad149ac0f772fb1649fbb75c482a6a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 20:43:33 2015 +0100

      crypto: ahash - ensure statesize is non-zero

      Unlike shash algorithms, ahash drivers must implement export
      and import as their descriptors may contain hardware state and
      cannot be exported as is.  Unfortunately some ahash drivers did
      not provide them and end up causing crashes with algif_hash.

      This patch adds a check to prevent these drivers from registering
      ahash algorithms until they are fixed.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 03875ad52fdde1f110f663470a45d3dcc34b8fef
  Author: yalin wang <yalin.wang2010@xxxxxxxxx>
  Date:   Mon Oct 12 14:52:59 2015 +0800

      arm64: add kc_offset_to_vaddr and kc_vaddr_to_offset macro

      This patch add kc_offset_to_vaddr() and kc_vaddr_to_offset(),
      the default version doesn't work on arm64, because arm64 kernel address
      is below the PAGE_OFFSET, like module address and vmemmap address are
      all below PAGE_OFFSET address.

      Signed-off-by: yalin wang <yalin.wang2010@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 1b6d7f8742d5d46c478f10c9e57da18d049b116d
  Author: yalin wang <yalin.wang2010@xxxxxxxxx>
  Date:   Mon Oct 12 10:28:18 2015 +0800

      arm64: ioremap: add ioremap_cache macro

      Add ioremap_cache macro, because some code will test if this macro
      is defined or not, and will generate a generric version if not defined,
      for example, memremap.c do like this.

      Signed-off-by: yalin wang <yalin.wang2010@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit cc917ab43541db3ff66d0136042686d40a1b4c9a
  Author: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 14:22:26 2015 +0100

      drm/i915: Deny wrapping an userptr into a framebuffer

      Pinning a userptr onto the hardware raises interesting questions about
      the lifetime of such a surface as the framebuffer extends that life
      beyond the client's address space. That is the hardware will need to
      keep scanning out from the backing storage even after the client wants
      to remap its address space. As the hardware pins the backing storage,
      the userptr becomes invalid and this raises a WARN when the clients
      tries to unmap its address space. The situation can be even more
      complicated when the buffer is passed between processes, between a
      client and display server, where the lifetime and hardware access is
      even more confusing. Deny it.

      Signed-off-by: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: Tvrtko Ursulin <tvrtko.ursulin@xxxxxxxxx>
      Cc: MichaÅ? Winiarski <michal.winiarski@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Tvrtko Ursulin <tvrtko.ursulin@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit c2b63374461c0986147902f719c26412d1f26fbc
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 22:08:25 2015 +0300

      drm/i915: Enable DPLL VGA mode before P1/P2 divider write

      Apparently writing the DPLL register P1/P2 divider fields won't trigger
      an actual change in the DPLL output unless VGA mode is enabled for
      prior to the register write that changes the P1/P2 dividers. The write
      with the new P1/P2 divider can itself disable VGA mode again without
      problems.

      I tested the behaviour on my 946GZ, and when manually frobbing the
      register with the display on, the behaviour is very clear. However I
      can't explain why this machine actually works. The P1/P2 divider
      changes caused by normal modesets do seem to make it through to the
      hardware somehow since I get a stable picture on the monitor with
      any resolution. Maybe it's the "three times for luck" stuff that
      somehow masks the problem, or something.

      But apparently there are machines (eg. Nick Bowler's G45) where that
      isn't the case and we fail to get the correct clock from the DPLL.

      Things used to work because we enabled VGA mode for disabled DPLLs,
      so when re-enabling the DPLL VGA mode was enabled just prior to the
      first register write, and hence the P1/P2 change went through without
      a hitch. That got changed in

      b8afb9113c51 drm/i915: Keep GMCH DPLL VGA mode always disabled

      in the name of consistency. In order to keep the consistency part,
      leave VGA mode disabled for disabled DPLLs, but turn it on just prior
      to updating the P1/P2 dividers to make sure the hardware picks up
      on the new values.

      Cc: Nick Bowler <nbowler@xxxxxxxxxx>
      Reported-by: Nick Bowler <nbowler@xxxxxxxxxx>
      Tested-by: Nick Bowler <nbowler@xxxxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 8e7a65aa70bcc1235a44e40ae0da5056525fe081
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 22:08:24 2015 +0300

      drm/i915: Restore lost DPLL register write on gen2-4

      We accidentally lost the initial DPLL register write in
      1c4e02746147 drm/i915: Fix DVO 2x clock enable on 830M

      The "three times for luck" hack probably saved us from a total
      disaster. But anyway, bring the initial write back so that the
      code actually makes some sense.

      Reported-and-tested-by: Nick Bowler <nbowler@xxxxxxxxxx>
      References: 
http://mid.gmane.org/CAN_QmVyMaArxYgEcVVsGvsMo7-6ohZr8HmF5VhkkL4i9KOmrhw@xxxxxxxxxxxxxx
      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Nick Bowler <nbowler@xxxxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 83040123fde42ec532d3b632efb5f7f84024e61d
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 13 14:01:06 2015 +0100

      arm64: kasan: fix issues reported by sparse

      Sparse reports some new issues introduced by the kasan patches:

        arch/arm64/mm/kasan_init.c:91:13: warning: no previous prototype for
        'kasan_early_init' [-Wmissing-prototypes] void __init 
kasan_early_init(void)
                   ^
        arch/arm64/mm/kasan_init.c:91:13: warning: symbol 'kasan_early_init'
        was not declared. Should it be static? [sparse]

      This patch resolves the problem by adding a prototype for
      kasan_early_init and marking the function as asmlinkage, since it's only
      called from head.S.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Acked-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 40a24488f5250d63341e74b9994159afc4589606
  Author: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 21 16:08:41 2015 +0100

      drm/i915: Flush pipecontrol post-sync writes

      In order to flush the results from in-batch pipecontrol writes (used for
      example in glQuery) before declaring the batch complete (and so declaring
      the query results coherent), we need to set the FlushEnable bit in our
      flushing pipecontrol. The FlushEnable bit "waits until all previous
      writes of immediate data from post-sync circles are complete before
      executing the next command".

      I get GPU hangs on byt without flushing these writes (running ue4).
      piglit has examples where the flush is required for correct rendering.

      Signed-off-by: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Acked-by: Daniel Vetter <daniel@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit e797e4b71777877b19b50e3d736331c947ccffe7
  Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
  Date:   Tue Oct 6 14:53:01 2015 +0200

      drm/i915: Fix kerneldoc for i915_gem_shrink_all

      I've botched this in

      commit eb0b44adc08c0be01a027eb009e9cdadc31e65a2
      Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Date:   Wed Mar 18 14:47:59 2015 +0100

          drm/i915: kerneldoc for i915_gem_shrinker.c

      so let's fix it.

      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 544d9b17f92d50132f47acd58f38992405298470
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:18 2015 +0100

      netfilter: ip6_tables: ternary operator layout

      Correct whitespace layout of ternary operators in the netfilter-ipv6
      code.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit f9527ea9b63ac861d5d992d24fdd63ee767e21db
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:17 2015 +0100

      netfilter: ipv6: whitespace around operators

      This patch cleanses whitespace around arithmetical operators.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 7695495d5a838995befd59796772c5348125c92b
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:16 2015 +0100

      netfilter: ipv6: code indentation

      Use tabs instead of spaces to indent code.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit cda219c6adb386687d64563671a5259ebf049d0e
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:15 2015 +0100

      netfilter: ip6_tables: function definition layout

      Use tabs instead of spaces to indent second line of parameters in
      function definitions.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6ac94619b66de77b39dc628099ef3260870b6c77
  Author: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 17:32:14 2015 +0100

      netfilter: ip6_tables: label placement

      Whitespace cleansing: Labels should not be indented.

      No changes detected by objdiff.

      Signed-off-by: Ian Morris <ipm@xxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 514ed62ed3f6846325d9bfb15cb5c3540547f13b
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Thu Oct 8 23:38:07 2015 +0200

      netfilter: sync with packet rx also after removing queue entries

      We need to sync packet rx again after flushing the queue entries.
      Otherwise, the following race could happen:

      cpu1: nf_unregister_hook(H) called, H unliked from lists, calls
      synchronize_net() to wait for packet rx completion.

      Problem is that while no new nf_queue_entry structs that use H can be
      allocated, another CPU might receive a verdict from userspace just before
      cpu1 calls nf_queue_nf_hook_drop to remove this entry:

      cpu2: receive verdict from userspace, lock queue
      cpu2: unlink nf_queue_entry struct E, which references H, from queue list
      cpu1: calls nf_queue_nf_hook_drop, blocks on queue spinlock
      cpu2: unlock queue
      cpu1: nf_queue_nf_hook_drop drops affected queue entries
      cpu2: call nf_reinject for E
      cpu1: kfree(H)
      cpu2: potential use-after-free for H

      Cc: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
      Fixes: 085db2c04557 ("netfilter: Per network namespace netfilter hooks.")
      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit bbb300eb976b613a8e4e666d3af39f5ab1031d22
  Merge: 4b91816 f409d0e
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 04:58:04 2015 -0700

      Merge branch 'bridge-vlan'

      Nikolay Aleksandrov says:

      ====================
      bridge: vlan: cleanups & fixes (part 3)

      Patch 01 converts the vlgrp member to use rcu as it was already used in a
      similar way so better to make it official and use all the available RCU
      instrumentation. Patch 02 fixes a bug where the vlan_list can be traversed
      without rtnl or rcu held which could lead to using freed entries.
      Patch 03 removes some redundant code that isn't needed anymore.
      Patch 04 fixes a bug reported by Ido Schimmel about the vlan_flush order
      and switchdevs, it moves it back.

      v2: patch 03 and 04 are new, couldn't escape the second synchronize_rcu()
      since the rhtable destruction can sleep
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f409d0ed87d2721e1099ce36266e98c5aea2d486
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:47:05 2015 +0200

      bridge: vlan: move back vlan_flush

      Ido Schimmel reported a problem with switchdev devices because of the
      order change of del_nbp operations, more specifically the move of
      nbp_vlan_flush() which deletes all vlans and frees vlgrp after the
      rx_handler has been unregistered. So in order to fix this move
      vlan_flush back where it was and make it destroy the rhtable after
      NULLing vlgrp and waiting a grace period to make sure noone can see it.

      Reported-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b8d02c3cace37393bf9ff0a9eaa1ee39cda1d259
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:47:04 2015 +0200

      bridge: vlan: drop unnecessary flush code

      As Ido Schimmel pointed out the vlan_vid_del() code in nbp_vlan_flush is
      unnecessary (and is actually a remnant of the old vlan code) so we can
      remove it.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9c953eff7f0ec69a52cfa87b912ab48902a0314
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:47:03 2015 +0200

      bridge: vlan: use rcu for vlan_list traversal in br_fill_ifinfo

      br_fill_ifinfo is called by br_ifinfo_notify which can be called from
      many contexts with different locks held, sometimes it relies upon
      bridge's spinlock only which is a problem for the vlan code, so use
      explicitly rcu for that to avoid problems.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 907b1e6e83ed25d9dece1e55b704581b6c127051
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 21:47:02 2015 +0200

      bridge: vlan: use proper rcu for the vlgrp member

      The bridge and port's vlgrp member is already used in RCU way, currently
      we rely on the fact that it cannot disappear while the port exists but
      that is error-prone and we might miss places with improper locking
      (either RCU or RTNL must be held to walk the vlan_list). So make it
      official and use RCU for vlgrp to catch offenders. Introduce proper vlgrp
      accessors and use them consistently throughout the code.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4b918163aecdec1c5424dcc317907282c58838df
  Merge: af37939 ca25449
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 04:55:10 2015 -0700

      Merge branch 'vrf-ipv6'

      David Ahern says:

      ====================
      net: VRF support in IPv6 stack

      Initial support for VRF in IPv6 stack. Makes IPv6 functionality on par
      with IPv4 -- ping, tcp client/server and udp client/server all work fine.
      tcpdump on vrf device and external tap (e.g., host side tap device) shows
      all packets with proper addresses. IPv6 does not need the source address
      operation like IPv4. Verified vti6 works properly in my setup as does use
      of an IPv6 address on the VRF device.

      v3
      - re-based to top of net-next (updates per net namespace changes by Eric)
      - fixed dst_entry typecasts as requested by Dave
      - added flags to inet6_rtm_getroute (IPv6 version of deaa0a6a930e)

      v2
      - fixed CONFIG_IPV6 dependency as questioned by Cong
        - if IPV6 is a module, kbuild ensures VRF is a module
        - if IPV6 is disabled IPV6 functionality is compiled out of VRF module
      - addressed comments from Nik over IRC
        - removed duplicate call to netif_is_l3_master in l3mdev_rt6_dst_by_oif
        - changed allocation flag from GFP_ATOMIC to GFP_KERNEL since it is 
init time
        - added free of rt6i_pcpu
        - check_ipv6_frame returns false only if packet is NDISC type
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca254490c8dfdaddb5df8a763774db0f4c5200c3
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:47:10 2015 -0700

      net: Add VRF support to IPv6 stack

      As with IPv4 support for VRFs added to IPv6 stack by replacing hardcoded
      table ids with possibly device specific ones and manipulating the oif in
      the flowi6. The flow flags are used to skip oif compare in nexthop lookups
      if the device is enslaved to a VRF via the L3 master device.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 35402e31366349a32b505afdfe856aeeb8d939a0
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:47:09 2015 -0700

      net: Add IPv6 support to VRF device

      Add support for IPv6 to VRF device driver. Implemenation parallels what
      has been done for IPv4.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c4850687783717fa854554965c4bc85625d0e4a8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:47:08 2015 -0700

      net: Export fib6_get_table and nd_tbl

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ccf3c8c3fe1bd4828556650ae7928da6ffb4aaf6
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 11:47:07 2015 -0700

      net: Add IPv6 support to l3mdev

      Add operations to retrieve cached IPv6 dst entry from l3mdev device
      and lookup IPv6 source address.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e332bc67cf5e5e5b71a1aec9750d0791aac65183
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Oct 12 11:02:08 2015 -0500

      ipv6: Don't call with rt6_uncached_list_flush_dev

      As originally written rt6_uncached_list_flush_dev makes no sense when
      called with dev == NULL as it attempts to flush all uncached routes
      regardless of network namespace when dev == NULL.  Which is simply
      incorrect behavior.

      Furthermore at the point rt6_ifdown is called with dev == NULL no more
      network devices exist in the network namespace so even if the code in
      rt6_uncached_list_flush_dev were to attempt something sensible it
      would be meaningless.

      Therefore remove support in rt6_uncached_list_flush_dev for handling
      network devices where dev == NULL, and only call 
rt6_uncached_list_flush_dev
       when rt6_ifdown is called with a network device.

      Fixes: 8d0b94afdca8 ("ipv6: Keep track of DST_NOCACHE routes in case of 
iface down/unregister")
      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Reviewed-by: Martin KaFai Lau <kafai@xxxxxx>
      Tested-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit af3793921d49a772ec1079449219bad4baa0bc96
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 17:55:55 2015 +0200

      bridge: fix gc_timer mod/del race condition

      commit c62987bbd8a1 ("bridge: push bridge setting ageing_time down to
      switchdev") introduced a timer race condition because the gc_timer can
      get rearmed after it's supposedly stopped and flushed in br_dev_delete()
      leading to a use of freed memory. So take rtnl to sync with bridge
      destruction when setting ageing_timer.
      Here's the trace reproduced with these two commands running in parallel:
      while :; do echo 10000 > /sys/class/net/br0/bridge/ageing_timer; done;
      while :; do brctl addbr br0; ip l set br0 up; ip l set br0 down;
      brctl delbr br0; done;

      [  300.000029] BUG: unable to handle kernel paging request at
      ffffffff811c59d3
      [  300.000263] IP: [<ffffffff810f168e>] __internal_add_timer+0x2e/0xd0
      [  300.000422] PGD 1a0f067 PUD 1a10063 PMD 10001e1
      [  300.000639] Oops: 0003 [#1] SMP
      [  300.000793] Modules linked in: bridge stp llc nfsd auth_rpcgss
      oid_registry nfs_acl nfs lockd grace fscache sunrpc crct10dif_pclmul
      crc32_pclmul crc32c_intel ghash_clmulni_intel ppdev aesni_intel
      aes_x86_64 glue_helper lrw gf128mul ablk_helper cryptd
      snd_hda_codec_generic qxl drm_kms_helper psmouse pcspkr ttm
      snd_hda_intel 9pnet_virtio evdev serio_raw joydev snd_hda_codec 9pnet
      virtio_balloon drm snd_hwdep virtio_console snd_hda_core pvpanic snd_pcm
      i2c_piix4 snd_timer acpi_cpufreq parport_pc snd parport soundcore button
      processor i2c_core ipv6 autofs4 hid_generic usbhid hid ext4 crc16
      mbcache jbd2 sg sr_mod cdrom ata_generic virtio_blk virtio_net e1000
      ehci_pci uhci_hcd ehci_hcd usbcore usb_common floppy ata_piix libata
      virtio_pci virtio_ring virtio scsi_mod
      [  300.004008] CPU: 1 PID: 1169 Comm: bash Not tainted 4.3.0-rc3+ #46
      [  300.004008] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
      [  300.004008] task: ffff880035be2200 ti: ffff88003795c000 task.ti:
      ffff88003795c000
      [  300.004008] RIP: 0010:[<ffffffff810f168e>]  [<ffffffff810f168e>]
      __internal_add_timer+0x2e/0xd0
      [  300.004008] RSP: 0018:ffff88003fd03e78  EFLAGS: 00010046
      [  300.004008] RAX: ffff88003fd0ef60 RBX: 840fc78949c08548 RCX:
      00000001ffffffff
      [  300.004008] RDX: 0000000000000000 RSI: ffffffff811c59d3 RDI:
      ffff88003fd0df00
      [  300.004008] RBP: ffff88003fd03e78 R08: 00000000ffffffff R09:
      0000000000000000
      [  300.004008] R10: 0000000000000000 R11: 0000000000000000 R12:
      ffff88003fd0df00
      [  300.004008] R13: 0000000000000000 R14: 0000000000000001 R15:
      ffffffff816032e0
      [  300.004008] FS:  00007fcbdd609700(0000) GS:ffff88003fd00000(0000)
      knlGS:0000000000000000
      [  300.004008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [  300.004008] CR2: ffffffff811c59d3 CR3: 0000000037879000 CR4:
      00000000000406e0
      [  300.004008] Stack:
      [  300.004008]  ffff88003fd03ea8 ffffffff810f1775 ffff88003c8cb958
      ffff88003fd0df00
      [  300.004008]  0000000000000000 0000000000000001 ffff88003fd03f18
      ffffffff810f28c4
      [  300.004008]  ffff88003fd0eb68 ffff88003fd0e968 ffff88003fd0e768
      ffff88003fd0df68
      [  300.004008] Call Trace:
      [  300.004008]  <IRQ>
      [  300.004008]  [<ffffffff810f1775>] cascade+0x45/0x70
      [  300.004008]  [<ffffffff810f28c4>] run_timer_softirq+0x2f4/0x340
      [  300.004008]  [<ffffffff8107e380>] __do_softirq+0xd0/0x440
      [  300.004008]  [<ffffffff8107e8a3>] irq_exit+0xb3/0xc0
      [  300.004008]  [<ffffffff815c2032>] smp_apic_timer_interrupt+0x42/0x50
      [  300.004008]  [<ffffffff815bfe37>] apic_timer_interrupt+0x87/0x90
      [  300.004008]  <EOI>
      [  300.004008]  [<ffffffff811fb80c>] ? create_object+0x13c/0x2e0
      [  300.004008]  [<ffffffff8109b23e>] ? __kernel_text_address+0x4e/0x70
      [  300.004008]  [<ffffffff8109b23e>] ? __kernel_text_address+0x4e/0x70
      [  300.004008]  [<ffffffff8101e17f>] print_context_stack+0x7f/0xf0
      [  300.004008]  [<ffffffff8101d55b>] dump_trace+0x11b/0x300
      [  300.004008]  [<ffffffff8102970b>] save_stack_trace+0x2b/0x50
      [  300.004008]  [<ffffffff811fb80c>] create_object+0x13c/0x2e0
      [  300.004008]  [<ffffffff815b2e8e>] kmemleak_alloc+0x4e/0xb0
      [  300.004008]  [<ffffffff811e475d>] kmem_cache_alloc_trace+0x18d/0x2f0
      [  300.004008]  [<ffffffff8128b139>] kernfs_fop_open+0xc9/0x380
      [  300.004008]  [<ffffffff8120214f>] do_dentry_open+0x1ff/0x2f0
      [  300.004008]  [<ffffffff8128b070>] ? kernfs_fop_release+0x70/0x70
      [  300.004008]  [<ffffffff812034f9>] vfs_open+0x59/0x60
      [  300.004008]  [<ffffffff812130de>] path_openat+0x1ce/0x1260
      [  300.004008]  [<ffffffff812154ae>] do_filp_open+0x7e/0xe0
      [  300.004008]  [<ffffffff812251ff>] ? __alloc_fd+0xaf/0x180
      [  300.004008]  [<ffffffff8120387b>] do_sys_open+0x12b/0x210
      [  300.004008]  [<ffffffff8120397e>] SyS_open+0x1e/0x20
      [  300.004008]  [<ffffffff815bf0b6>] entry_SYSCALL_64_fastpath+0x16/0x7a
      [  300.004008] Code: 66 90 48 8b 46 10 48 8b 4f 40 55 48 89 c2 48 89 e5
      48 29 ca 48 81 fa ff 00 00 00 77 20 0f b6 c0 48 8d 44 c7 68 48 8b 10 48
      85 d2 <48> 89 16 74 04 48 89 72 08 48 89 30 48 89 46 08 5d c3 48 81 fa
      [  300.004008] RIP  [<ffffffff810f168e>] __internal_add_timer+0x2e/0xd0
      [  300.004008]  RSP <ffff88003fd03e78>
      [  300.004008] CR2: ffffffff811c59d3

      Fixes: c62987bbd8a1 ("bridge: push bridge setting ageing_time down to 
switchdev")
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 87aaf2caed8496404d3809edc30d38d4a4a5d273
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 14:31:01 2015 +0200

      switchdev: check if the vlan id is in the proper vlan range

      VLANs 0 and 4095 are reserved and shouldn't be used, add checks to
      switchdev similar to the bridge. Also make sure ids above 4095 cannot
      be passed either.

      Fixes: 47f8328bb1a4 ("switchdev: add new switchdev bridge setlink")
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc02aa8e41c50f690d0bb22ed5629468483421b7
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 12 14:01:39 2015 +0200

      switchdev: enforce no pvid flag in vlan ranges

      We shouldn't allow BRIDGE_VLAN_INFO_PVID flag in VLAN ranges.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f225031fee6c39cbbf2a6c79cb150ff63f0556c
  Merge: 3bb35ac 196e373
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 04:32:50 2015 -0700

      Merge branch 'be2net-fixes'

      Sathya Perla says:

      ====================
      be2net: patch set

      Patch 1 fixes a FW image compatibility check in the driver that
      prevents certain FW images from being flashed on BE3 (not BE3-R)
      adapters.

      Patch 2 fixes a spin_lock not being released in a failure case in
      be_cmd_notify_wait().

      Patch 3 includes a workaround to pad packets that are only 32b long or 
less
      to be applicabe to BE3 too. This workaround was currently applied only to
      Skyhawk and Lancer chips. Such packets are causing BE3's TX path to stall
      on a SR-IOV config.

      Patch 4 fixes the be_cmd_get_profile_config() routine to set the pf_num
      field in the cmd request. The FW requires this field to be set for it to
      return the specific function's descriptors. If not set, the FW returns
      the descriptors of all the functions on the device. If the first 
descriptor
      is not what is being queried for, the driver will read wrong data.
      This patch fixes this issue by using the GET_CNTL_ATTRIB cmd to query the
      real pci_func_num of a function and then uses it in the GET_PROFILE_CONFIG
      cmd.

      Patch 5 completes an earlier fix that removed the vlan promisc capability
      for VFs. The earlier fix did not update the removal of this capability 
from
      the profile descriptor of the VF. This causes the VF driver to request 
this
      capability when it tries to create it's interface at probe time. This 
could
      potentailly cause the VF probe to fail if the FW enforces strict checking 
of
      the flags based on what was provisoned by the PF.  This strict checking is
      not being done by FW currently but will be fixed in a future version. This
      patch fixes this issue by updating the VF's profile descriptor so that 
they
      match the interface capability flags provisioned by the PF.

      Pls consider adding these patches to the net tree. Thanks!
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 196e3735fa66c8340d6fff9ec81f6201ffc60b7d
  Author: Kalesh AP <kalesh.purayil@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 03:47:21 2015 -0400

      be2net: remove vlan promisc capability from VF's profile descriptors

      The commit 435452aa8847 ("Prevent VFs from enabling VLAN promiscuous 
mode")
      fixed the PF driver to not include the VLAN promisc capability while
      provisioning the interface for a VF. But the fix did not remove this
      capability from the profile descriptor of the VF. This causes the VF
      driver to request this capability when it tries to create it's interface
      at probe time.  This could potentailly cause the VF probe to fail if the
      FW enforces strict checking of the flags based on what was provisoned
      by the PF.  This strict checking is not being done by FW currently but
      will be fixed in a future version. This patch fixes this issue by updating
      the VF's profile descriptor so that they match the interface capability
      flags provisioned by the PF.

      Fixes: 435452aa8847 ("Prevent VFs from enabling VLAN promiscuous mode")
      Signed-off-by: Kalesh AP <kalesh.purayil@xxxxxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 72ef3a88fa8e225301aaea296ffc95407de21986
  Author: Somnath Kotur <somnath.kotur@xxxxxxxxxx>
  Date:   Mon Oct 12 03:47:20 2015 -0400

      be2net: set pci_func_num while issuing GET_PROFILE_CONFIG cmd

      The FW requires the pf_num field in the cmd hdr to be set for it to return
      the specific function's descriptors in the GET_PROFILE_CONFIG cmd. If not
      set, the FW returns the descriptors of all the functions on the device.
      If the first descriptor is not what is being queried for, the driver will
      read wrong data. This patch fixes this issue by using the GET_CNTL_ATTRIB
      cmd to query the real pci_func_num of a function and then uses it in the
      GET_PROFILE_CONFIG cmd.

      Signed-off-by: Somnath Kotur <somnath.kotur@xxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8227e9901ded28d071f20313238e91e71d6bfdce
  Author: Suresh Reddy <Suresh.Reddy@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 03:47:19 2015 -0400

      be2net: pad skb to meet minimum TX pkt size in BE3

      On BE3 chips in SRIOV configs, the TX path stalls when a packet less
      than 32B is received from the host. A workaround to pad such packets
      already exists for the Skyhawk and Lancer chips. Use the same workaround
      for BE3 chips too.

      Signed-off-by: Suresh Reddy <suresh.reddy@xxxxxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c8845679f3b8f030f3bafcdf226ed92545fa2a9
  Author: Suresh Reddy <Suresh.Reddy@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 03:47:18 2015 -0400

      be2net: release mcc-lock in a failure case in be_cmd_notify_wait()

      The mcc/mbox lock is not being released when be_cmd_copy() returns
      an error.

      Signed-off-by: Suresh Reddy <suresh.reddy@xxxxxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ae4a9d6a6362df4e4e492c297157498d299bdb68
  Author: Kalesh AP <kalesh.purayil@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 03:47:17 2015 -0400

      be2net: fix BE3-R FW download compatibility check

      In the BE3 FW image, unlike Skyhawk's, the "asic_type_rev" field doesn't
      track the asic_rev of chip it is compatible with. When asic_type_rev
      is 0 the image is compatible only with pre-BE3-R chips (asic_rev < 0x10).
      Fix the current compatibility check to take care of this.
      We hit this issue when we try to flash old BE3 images (used prior to the
      release of BE3-R) on pre-BE3-R adapters.

      Fixes: a6e6ff6eee12f3e ("be2net: simplify UFI compatibility checking")
      Signed-off-by: Kalesh AP <kalesh.purayil@xxxxxxxxxxxxx>
      Signed-off-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3bb35ac4978977cf414893ee721f442039c4b8a4
  Author: Gerlando Falauto <gerlando.falauto@xxxxxxxxxxx>
  Date:   Mon Oct 12 09:18:41 2015 +0200

      net/fsl_pq_mdio: fix computed address for the TBI register

      commit afae5ad78b342f401c28b0bb1adb3cd494cb125a
        "net/fsl_pq_mdio: streamline probing of MDIO nodes"

      added support for different types of MDIO devices:
      1) Gianfar MDIO nodes that only map the MII registers
      2) Gianfar MDIO nodes that map the full MDIO register set
      3) eTSEC2 MDIO nodes (which map the full MDIO register set)
      4) QE MDIO nodes (which map only the MII registers)

      However, the implementation for types 1 and 4 would mistakenly assume
      a mapping of the full MDIO register set, thereby computing the address
      for the TBI register starting from the containing structure.
      The TBI register would therefore be accessed at a wrong (much bigger)
      address, not giving the expected result at all.
      This patch restores the correct behavior we had prior to the above one.

      The consequences of this bug are apparent when trying to access a PHY
      with the same address as the value contained in the initial value of
      the TBI register (normally 0); in that case you'll get answers from the
      internal TBI device (even though MDIO/MDC pins are actually *also*
      toggling on the physical bus!).
      Beware that you also need to add a fake tbi node to your device tree
      with an unused address.

      Notice how this fix is related to commit
      220669495bf8b68130a8218607147c7b74c28d2b
        "powerpc: Add TBI PHY node to first MDIO bus"

      which fixed the behavior in kernel 3.3, which was later broken by the
      above commit on kernel 3.7.

      Signed-off-by: Gerlando Falauto <gerlando.falauto@xxxxxxxxxxx>
      Cc: Timur Tabi <timur@xxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3dd03e52a410818c0818924c2ba27a43725f5e94
  Author: Gerlando Falauto <gerlando.falauto@xxxxxxxxxxx>
  Date:   Mon Oct 12 09:18:40 2015 +0200

      net/fsl_pq_mdio: check TBI address for consistency with mapped range

      When configuring the MDIO subsystem it is also necessary to configure
      the TBI register. Make sure the TBI is contained within the mapped
      register range in order to:
      a) make sure the address is computed correctly
      b) make users aware that we're actually accessing that register

      In case of error, print a message but continue anyway.

      Signed-off-by: Gerlando Falauto <gerlando.falauto@xxxxxxxxxxx>
      Cc: Timur Tabi <timur@xxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f83665d0c41f3e24602f7dd03003574f852b326f
  Merge: 241b271 5fe7f68
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 04:26:44 2015 -0700

      Merge branch 'dsa-mv88e6xxx-fix-hardware-bridging'

      Vivien Didelot says:

      ====================
      net: dsa: mv88e6xxx: fix hardware bridging

      DSA and its drivers currently hook the NETDEV_CHANGEUPPER net_device 
event in
      order to configure the VLAN map of every port.

      This VLAN map is a feature of these switch chips to hardcode and restrict 
which
      output ports a given input port can egress frames to.

      A Linux bridge is a simple untagged VLAN propagated by the bridge code 
itself.
      With a proper 802.1Q support, a driver does not need this hook anymore, 
and
      will simply program the related VLAN object.

      This patchset improves the hardware bridging code in the mv88e6xxx driver 
with
      a strict 802.1Q mode.

      Ideally, the equivalent must be done for Broadcom Starfighter 2 and 
Rocker,
      before completely getting rid of this hook.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5fe7f68016ff9dcb59632071f9abf30296bbad3c
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 18:08:38 2015 -0400

      net: dsa: mv88e6xxx: fix hardware bridging

      Playing with the VLAN map of every port to implement "hardware bridging"
      in the 88E6352 driver was a hack until full 802.1Q was supported.

      Indeed with 802.1Q port mode "Disabled" or "Fallback", this feature is
      used to restrict which output ports an input port can egress frames to.

      A Linux bridge is an untagged VLAN. With full 802.1Q support, we don't
      need this hack anymore and can use the "Secure" strict 802.1Q port mode.

      With this mode, the port-based VLAN map still needs to be configured,
      but all the logic is VTU-centric. This means that the switch only cares
      about rules described in its hardware VLAN table, which is exactly what
      Linux bridge expects and what we want.

      Note also that the hardware bridging was broken with the previous
      flexible "Fallback" 802.1Q port mode. Here's an example:

      Port0 and Port1 belong to the same bridge. If Port0 sends crafted tagged
      frames with VID 200 to Port1, Port1 receives it. Even if Port1 is in
      hardware VLAN 200, but not Port0, Port1 will still receive it, because
      Fallback mode doesn't care about invalid VID or non-member source port.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit efd29b3d8266761570fd3f440e2d5aa24c678725
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 18:08:37 2015 -0400

      net: dsa: do not warn unsupported bridge ops

      A DSA driver may not provide the port_join_bridge and port_leave_bridge
      functions, so don't warn in such case.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f02bdffca29bc41e440ac67ffd47b56834d3bf85
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 18:08:36 2015 -0400

      net: dsa: mv88e6xxx: do not support per-port FID

      Since we configure a switch chip through a Linux bridge, and a bridge is
      implemented as a VLAN, there is no need for per-port FID anymore.

      This patch gets rid of this and simplifies the driver code since we can
      now directly map all 4095 FIDs available to all VLANs.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ede8098d0fef46ae48e59fcf7088149ca424d959
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 18:08:35 2015 -0400

      net: dsa: mv88e6xxx: bridges do not need an FID

      With 88E6352 and similar switch chips, each port has a map to restrict
      which output port this input port can egress frames to.

      The current driver code implements hardware bridging using this feature,
      and assigns to a bridge group the FID of its first member.

      Now that 802.1Q is fully implemented in this driver, a Linux bridge
      which is a simple untagged VLAN, already gets its own FID.

      This patch gets rid of the per-bridge FID and explicits the usage of the
      port based VLAN map feature.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 241b271952eb319622a6cc740a72abe41fc27ad6
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Sun Oct 11 16:49:44 2015 -0400

      RDS-TCP: Reset tcp callbacks if re-using an outgoing socket in 
rds_tcp_accept_one()

      Consider the following "duelling syn" sequence between two peers A and B:
                A               B
                SYN1     -->
                        <--     SYN2
                SYN2ACK  -->

      Note that the SYN/ACK has already been sent out by TCP before
      rds_tcp_accept_one() gets invoked as part of callbacks.

      If the inet_addr(A) is numerically less than inet_addr(B),
      the arbitration scheme in rds_tcp_accept_one() will prefer the
      TCP connection triggered by SYN1, and will send a CLOSE for the
      SYN2 (just after the SYN2ACK was sent).

      Since B also follows the same arbitration scheme, it will send the SYN-ACK
      for SYN1 that will set up a healthy ESTABLISHED connection on both sides.
      B will also get a  CLOSE for SYN2, which should result in the cleanup
      of the TCP state machine for SYN2, but it should not trigger any
      stale RDS-TCP callbacks (such as ->writespace, ->state_change etc),
      that would disrupt the progress of the SYN2 based RDS-TCP  connection.

      Thus the arbitration scheme in rds_tcp_accept_one() should restore
      rds_tcp callbacks for the winner before setting them up for the
      new accept socket, and also make sure that conn->c_outgoing
      is set to 0 so that we do not trigger any reconnect attempts on the
      passive side of the tcp socket in the future, in conformance with
      commit c82ac7e69efe ("net/rds: RDS-TCP: only initiate reconnect attempt
      on outgoing TCP socket.")

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 486798001b92eacbf9f809787a6348750c174035
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Sun Oct 11 16:46:03 2015 -0400

      RDS: Invoke ->laddr_check() in rds_bind() for explicitly bound transports.

      The IP address passed to rds_bind() should be vetted by the
      transport's ->laddr_check() for a previously bound transport.
      This needs to be done to avoid cases where, for example,
      the application has asked for an IB transport,
      but the IP address passed to bind is only usable on
      ethernet interfaces.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 571f2c11b343cd6997f35a21f6caa0f78e87fc84
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 11 13:48:05 2015 +0200

      qlcnic: constify qlcnic_mbx_ops structure

      The only instance of a qlcnic_mbx_ops structure is never modified.  Thus
      the declaration of the structure and all references to the structure type
      can be made const.

      In the definition of the qlcnic_mailbox structure, the ops field is no
      longer lined up with the other fields.  This was left as is, to avoid a 
lot
      of trivial changes on the other lines.

      Done with the help of Coccinelle.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Acked-by: Sony Chacko <sony.chacko@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7ceebfe46ec026b5405416b72772ac5aa9e09e84
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Fri Oct 9 13:10:37 2015 +0200

      netfilter: nfqueue: don't use prev pointer

      Usage of -prev seems buggy.  While packet was out our hook cannot be
      removed but we have no way to know if the previous one is still valid.

      So better not use ->prev at all.  Since NF_REPEAT just asks to invoke
      same hook function again, just do so, and continue with nf_interate
      if we get an ACCEPT verdict.

      A side effect of this change is that if nf_reinject(NF_REPEAT) causes
      another REPEAT we will now drop the skb instead of a kernel loop.

      However, NF_REPEAT loops would be a bug so this should not happen anyway.

      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 61f6bba006d4e643fdff62c3d7fd4ea6ca4f468d
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 13 11:36:21 2015 +0200

      mac80211: use new cfg80211_inform_bss_frame_data() API

      The new API is more easily extensible with a metadata struct
      passed to it, use it in mac80211.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit e8d65a8d985271a102f07c7456da5b86c19ffe16
  Author: David Henningsson <david.henningsson@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 10:10:18 2015 +0200

      ALSA: hda - Fix inverted internal mic on Lenovo G50-80

      Add the appropriate quirk to indicate the Lenovo G50-80 has a stereo
      mic input where one channel has reverse polarity.

      Alsa-info available at:
      https://launchpadlibrarian.net/220846272/AlsaInfo.txt

      Cc: stable@xxxxxxxxxxxxxxx
      BugLink: https://bugs.launchpad.net/bugs/1504778
      Signed-off-by: David Henningsson <david.henningsson@xxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 42f2bb1c494543084b764e1ca253c73db910daf2
  Author: Vinod Koul <vinod.koul@xxxxxxxxx>
  Date:   Tue Oct 13 14:57:49 2015 +0530

      ALSA: hdac: Explicitly add io.h

      Compiling the hdac extended core on arm fails with below error:

        sound/hda/ext/hdac_ext_bus.c: In function 'hdac_ext_writel':
      >> sound/hda/ext/hdac_ext_bus.c:29:2: error: implicit declaration of
      >> function
      +'writel' [-Werror=implicit-function-declaration]
           writel(value, addr);
           ^
         sound/hda/ext/hdac_ext_bus.c: In function 'hdac_ext_readl':
      >> sound/hda/ext/hdac_ext_bus.c:34:2: error: implicit declaration of
      >> function
      +'readl' [-Werror=implicit-function-declaration]
           return readl(addr);

      This is fixed by explicitly including io.h

      Fixes: 99463b3a3994 - ('ALSA: hda: provide default bus io ops extended 
hdac')
      Reported-by: kbuild test robot <lkp@xxxxxxxxx>
      Suggested-by: Mark Brown <broonie@xxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit e2845c458ea27e924b0f2cbd647ba43e810305a5
  Author: Avraham Stern <avraham.stern@xxxxxxxxx>
  Date:   Mon Oct 12 09:51:35 2015 +0300

      mac80211: Do not restart scheduled scan if multiple scan plans are set

      If multiple scan plans were set for scheduled scan, do not restart
      scheduled scan on reconfig because it is possible that some scan
      plans were already completed and there is no need to run them all
      over again. Instead, notify userspace that scheduled scan stopped
      so it can configure new scan plans for scheduled scan.

      Signed-off-by: Avraham Stern <avraham.stern@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 3b06d277957c7af705a9c0cdda4b371759efb717
  Author: Avraham Stern <avraham.stern@xxxxxxxxx>
  Date:   Mon Oct 12 09:51:34 2015 +0300

      cfg80211: Add multiple scan plans for scheduled scan

      Add the option to configure multiple 'scan plans' for scheduled scan.
      Each 'scan plan' defines the number of scan cycles and the interval
      between scans. The scan plans are executed in the order they were
      configured. The last scan plan will always run infinitely and thus
      defines only the interval between scans.
      The maximum number of scan plans supported by the device and the
      maximum number of iterations in a single scan plan are advertised
      to userspace so it can configure the scan plans appropriately.

      When scheduled scan results are received there is no way to know which
      scan plan is being currently executed, so there is no way to know when
      the next scan iteration will start. This is not a problem, however.
      The scan start timestamp is only used for flushing old scan results,
      and there is no difference between flushing all results received until
      the end of the previous iteration or the start of the current one,
      since no results will be received in between.

      Signed-off-by: Avraham Stern <avraham.stern@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit af61426187cd854bffe013ca8547bd8fa3c4dfbf
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 7 15:48:26 2015 +0200

      wireless: add WNM action frame categories

      Add the WNM and unprotected WNM categories and mark the latter
      as not robust.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a4288289f585d42a19145f266e214acb165fe9b3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Oct 7 15:48:25 2015 +0200

      wireless: update robust action frame list

      Unprotected DMG and VHT action frames are not protected, reflect
      that in the list.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 6e19bc4b7091ffd26586100eee78232b44427ec7
  Author: Dmitry Shmidt <dimitrysh@xxxxxxxxxx>
  Date:   Wed Oct 7 11:32:53 2015 +0200

      nl80211: allow BSS data to include CLOCK_BOOTTIME timestamp

      For location and connectivity services, userspace would often like
      to know the time when the BSS was last seen. The current "last seen"
      value is calculated in a way that makes it less useful, especially
      if the system suspended in the meantime.

      Add the ability for the driver to report a real CLOCK_BOOTTIME stamp
      that can then be reported to userspace (if present).

      Drivers wishing to use this must be converted to the new API to call
      cfg80211_inform_bss_data() or cfg80211_inform_bss_frame_data(). They
      need to ensure the reported value is accurate enough even when the
      frame might have been buffered in the device (e.g. firmware.)

      Signed-off-by: Dmitry Shmidt <dimitrysh@xxxxxxxxxx>
      [modified to use struct, inlines]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4633dfc32c0019bed2996de9bbdbe7f3b518a44e
  Author: Mohammed Shafi Shajakhan <mohammed@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 19:20:14 2015 +0530

      mac80211: Fix hwflags debugfs file format

      Commit 30686bf7f5b3 ("mac80211: convert HW flags to unsigned long
      bitmap") accidentally removed the newline delimiter from the hwflags
      debugfs file. Fix this by adding back the newline between the HW flags.

      Cc: stable@xxxxxxxxxxxxxxx [4.2]
      Signed-off-by: Mohammed Shafi Shajakhan <mohammed@xxxxxxxxxxxxxxxx>
      [fix commit log]
      Signed-off-by: Jouni Malinen <jouni@xxxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 93f0490e5deb9445737cabf0e436f3288a4042b7
  Author: Tamizh chelvam <c_traja@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 10:40:04 2015 +0530

      Revert "mac80211: remove exposing 'mfp' to drivers"

      This reverts commit 5c48f1201744233d4f235c7dd916d5196ed20716.

      Some device drivers (ath10k) offload part of aggregation including 
AddBA/DelBA
      negotiations to firmware. In such scenario, the PMF configuration of
      the station needs to be provided to driver to enable encryption of
      AddBA/DelBA action frames.

      Signed-off-by: Tamizh chelvam <c_traja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 985f2c87a7109a42cac93f56ea595353d53a1746
  Merge: 4d57c67 6623c60
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 13 10:28:16 2015 +0200

      Merge remote-tracking branch 'net-next/master' into mac80211-next

      Merge net-next to get some driver changes that patches depend
      on (in order to avoid conflicts).

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ed7d78b2da32198ca4c70172e3b63c6b3e2c570b
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Mon Oct 12 01:49:39 2015 -0700

      drm/vmwgfx: Fix kernel NULL pointer dereference on older hardware

      The commit "drm/vmwgfx: Fix up user_dmabuf refcounting", while fixing a
      kernel crash introduced a NULL pointer dereference on older hardware.
      Fix this.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>
      Reviewed-by: Brian Paul <brianp@xxxxxxxxxx>

  commit abb39bc792aa8e9143e78a39ec13d7de1391f4b4
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Mon Oct 12 15:28:57 2015 +1100

      selftests/powerpc: Fix build failure of load_unaligned_zeropad test

      Commit 7a5692e6e533 ("arch/powerpc: provide zero_bytemask() for
      big-endian") added a call to __fls() in our word-at-a-time.h. That was
      fine for the kernel build but missed the fact that we also use
      word-at-a-time.h in a userspace test.

      Pulling in the kernel version of __fls() gets messy, so just define our
      own, it's unlikely to change often.

      Fixes: 7a5692e6e533 ("arch/powerpc: provide zero_bytemask() for 
big-endian")
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 6623c60dc28ee966cd85c6f12aa2fc3c952d0179
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 12:49:56 2015 +0200

      bridge: vlan: enforce no pvid flag in vlan ranges

      Currently it's possible for someone to send a vlan range to the kernel
      with the pvid flag set which will result in the pvid bouncing from a
      vlan to vlan and isn't correct, it also introduces problems for hardware
      where it doesn't make sense having more than 1 pvid. iproute2 already
      enforces this, so let's enforce it on kernel-side as well.

      Reported-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cbb41b91e68a302087762823136c9067138cff7c
  Author: Tillmann Heidsieck <theidsieck@xxxxxxxxx>
  Date:   Sat Oct 10 21:47:19 2015 +0200

      atm: iphase: fix misleading indention

      Fix a smatch warning:
      drivers/atm/iphase.c:1178 rx_pkt() warn: curly braces intended?

      The code is correct, the indention is misleading. In case the allocation
      of skb fails, we want to skip to the end.

      Signed-off-by: Tillmann Heidsieck <theidsieck@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21e26ff993dea9dceaf0f19cfec4bef58387b0f2
  Author: Tillmann Heidsieck <theidsieck@xxxxxxxxx>
  Date:   Sat Oct 10 21:47:18 2015 +0200

      atm: iphase: return -ENOMEM instead of -1 in case of failed kmalloc()

      Smatch complains about returning hard coded error codes, silence this
      warning.

      drivers/atm/iphase.c:115 ia_enque_rtn_q() warn: returning -1 instead of 
-ENOMEM is sloppy

      Signed-off-by: Tillmann Heidsieck <theidsieck@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8c5b83f0f255542b40a1273c32eb067ec00bb2b2
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 08:26:36 2015 -0700

      ipv6 route: use err pointers instead of returning pointer by reference

      This patch makes ip6_route_info_create return err pointer instead of
      returning the rt pointer by reference as suggested  by Dave

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 99dcc7dfb1960d5e2f1577ff3aad69dfeb6e9787
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Sat Oct 10 17:20:38 2015 +0800

      net: hns: fix the unknown phy_nterface_t type error

      This patch fix the building error reported by Jiri Pirko 
<jiri@xxxxxxxxxxx>

      drivers/net/ethernet/hisilicon/hns/hnae.h:465:2: error: unknown type
      name 'phy_interface_t'
              phy_interface_t phy_if;
        ^
      the full build log is on https://lists.01.org/pipermail/kbuild-all.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5fcd2d8be43664f1b6a5add3d21a367411add9d4
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 9 15:42:21 2015 -0700

      tun: use sk_fullsock() before reading sk->sk_tsflags

      timewait or request sockets are small and do not contain sk->sk_tsflags

      Without this fix, we might read garbage, and crash later in

      __skb_complete_tx_timestamp()
       -> sock_queue_err_skb()

      (These pseudo sockets do not have an error queue either)

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Acked-by: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b7a4609591612119869f2498732da98e4f8d5f4d
  Merge: 161642e b727759
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 19:44:22 2015 -0700

      Merge branch 'netns-defrag'

      Eric W. Biederman says:

      ====================
      net: Pass net into defragmentation

      This is the next installment of my work to pass struct net through the
      output path so the code does not need to guess how to figure out which
      network namespace it is in, and ultimately routes can have output
      devices in another network namespace.

      In netfilter and af_packet we defragment packets in the output path,
      and there is the usual amount of confusion about how to compute which
      net we are processing the packets in.  This patchset clears that
      confusion up by explicitly passing in struct net in ip_defrag,
      ip_check_defrag, and nf_ct_frag6_gather.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b72775977c39dcd380777ff5ea8041fdf67ee382
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Oct 9 13:44:55 2015 -0500

      ipv6: Pass struct net into nf_ct_frag6_gather

      The function nf_ct_frag6_gather is called on both the input and the
      output paths of the networking stack.  In particular ipv6_defrag which
      calls nf_ct_frag6_gather is called from both the the PRE_ROUTING chain
      on input and the LOCAL_OUT chain on output.

      The addition of a net parameter makes it explicit which network
      namespace the packets are being reassembled in, and removes the need
      for nf_ct_frag6_gather to guess.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 19bcf9f203c82c2028f5a0881b1f0690e3207190
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Oct 9 13:44:54 2015 -0500

      ipv4: Pass struct net into ip_defrag and ip_check_defrag

      The function ip_defrag is called on both the input and the output
      paths of the networking stack.  In particular conntrack when it is
      tracking outbound packets from the local machine calls ip_defrag.

      So add a struct net parameter and stop making ip_defrag guess which
      network namespace it needs to defragment packets in.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 37fcbab61b8ecf75cb5fd81e5809b71c270f9632
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Oct 9 13:44:53 2015 -0500

      ipv4: Only compute net once in ip_call_ra_chain

      ip_call_ra_chain is called early in the forwarding chain from
      ip_forward and ip_mr_input, which makes skb->dev the correct
      expression to get the input network device and dev_net(skb->dev) a
      correct expression for the network namespace the packet is being
      processed in.

      Compute the network namespace and store it in a variable to make the
      code clearer.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 161642e24fee40fba2c5bc2ceacc00d118a22d65
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 9 11:29:32 2015 -0700

      packet: fix match_fanout_group()

      Recent TCP listener patches exposed a prior af_packet bug :
      match_fanout_group() blindly assumes it is always safe
      to cast sk to a packet socket to compare fanout with af_packet_priv

      But SYNACK packets can be sent while attached to request_sock, which
      are smaller than a "struct sock".

      We can read non existent memory and crash.

      Fixes: c0de08d04215 ("af_packet: don't emit packet on orig fanout group")
      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Cc: Eric Leblond <eric@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e844463743095bc8b230f507de066d047c87476b
  Author: Arad, Ronen <ronen.arad@xxxxxxxxx>
  Date:   Fri Oct 9 10:35:47 2015 -0700

      rtnetlink: fix gcc -Wconversion warning

      RTA_ALIGNTO is currently define as 4. It has to be 4U to prevent warning
      for RTA_ALIGN and RTA_DATA expansions when -Wconversion gcc option is
      enabled.
      This follows NLMSG_ALIGNTO definition in <include/uapi/linux/netlink.h>.

      Signed-off-by: Ronen Arad <ronen.arad@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 991659674288dba28c2f5a3d1a0133ef4d20824a
  Merge: e2ca690 7e64e5e
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 19:39:18 2015 -0700

      Merge tag 'wireless-drivers-next-for-davem-2015-10-09' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

      Kalle Valo says:

      ====================
      Major changes:

      iwlwifi

      * some debugfs improvements
      * fix signedness in beacon statistics
      * deinline some functions to reduce size when device tracing is enabled
      * filter beacons out in AP mode when no stations are associated
      * deprecate firmwares version -12
      * fix a runtime PM vs. legacy suspend race
      * one-liner fix for a ToF bug
      * clean-ups in the rx code
      * small debugging improvement
      * fix WoWLAN with new firmware versions
      * more clean-ups towards multiple RX queues;
      * some rate scaling fixes and improvements;
      * some time-of-flight fixes;
      * other generic improvements and clean-ups;

      brcmfmac

      * rework code dealing with multiple interfaces
      * allow logging firmware console using debug level
      * support for BCM4350, BCM4365, and BCM4366 PCIE devices
      * fixed for legacy P2P and P2P device handling
      * correct set and get tx-power

      ath9k

      * add support for Outside Context of a BSS (OCB) mode

      mwifiex

      * add USB multichannel feature
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e2ca690b657f4ca5c204fcc6470d462b776d73b3
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Fri Oct 9 14:34:31 2015 +0200

      ipv4/icmp: redirect messages can use the ingress daddr as source

      This patch allows configuring how the source address of ICMP
      redirect messages is selected; by default the old behaviour is
      retained, while setting icmp_redirects_use_orig_daddr force the
      usage of the destination address of the packet that caused the
      redirect.

      The new behaviour fits closely the RFC 5798 section 8.1.1, and fix the
      following scenario:

      Two machines are set up with VRRP to act as routers out of a subnet,
      they have IPs x.x.x.1/24 and x.x.x.2/24, with VRRP holding on to
      x.x.x.254/24.

      If a host in said subnet needs to get an ICMP redirect from the VRRP
      router, i.e. to reach a destination behind a different gateway, the
      source IP in the ICMP redirect is chosen as the primary IP on the
      interface that the packet arrived at, i.e. x.x.x.1 or x.x.x.2.

      The host will then ignore said redirect, due to RFC 1122 section 3.2.2.2,
      and will continue to use the wrong next-op.

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0944d6b5a2fad9ba3b7abb2e94a6b7d40cd4a935
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Fri Oct 9 13:54:11 2015 +0200

      bridge: try switchdev op first in __vlan_vid_add/del

      Some drivers need to implement both switchdev vlan ops and
      vid_add/kill ndos. For that to work in bridge code, we need to try
      switchdev op first when adding/deleting vlan id.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3703ebe4035044dea3749fcdd1c0849937147959
  Author: wangweidong <wangweidong1@xxxxxxxxxx>
  Date:   Tue Oct 13 10:05:19 2015 +0800

      BNX2: free temp_stats_blk on error path

      In bnx2_init_board, missing free temp_stats_blk on error path when
      some operations do failed. Just add the 'kfree' operation.

      Signed-off-by: Wang Weidong <wangweidong1@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 31eb4360546b4bd890f349db01295a173c09b0fb
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Tue Oct 13 09:02:01 2015 +0900

      perf hists browser: Add 'm' key for context menu display

      With horizontal scrolling, the left/right arrow keys are used to scroll
      columns and ENTER/ESC keys are used to enter/exit menu.  However if
      callchain is recorded, the ENTER key is used to toggle callchain
      expansion so there's no way to display menu.  Use 'm' key to display the
      menu for this case.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444694521-8136-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 76973dd79fd52f187ba3df018bca65792a3d942d
  Merge: c7d39e3 d475f09
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 19:28:32 2015 -0700

      Merge branch 'setsockopt_incoming_cpu'

      Eric Dumazet says:

      ====================
      tcp: better smp listener behavior

      As promised in last patch series, we implement a better SO_REUSEPORT
      strategy, based on cpu hints if given by the application.

      We also moved sk_refcnt out of the cache line containing the lookup
      keys, as it was considerably slowing down smp operations because
      of false sharing. This was simpler than converting listen sockets
      to conventional RCU (to avoid sk_refcnt dirtying)

      Could process 6.0 Mpps SYN instead of 4.2 Mpps on my test server.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d475f090bf1c0dc2999e98bbf2e7cb2243358849
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 19:33:24 2015 -0700

      tcp: shrink tcp_timewait_sock by 8 bytes

      Reducing tcp_timewait_sock from 280 bytes to 272 bytes
      allows SLAB to pack 15 objects per page instead of 14 (on x86)

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ed53d0ab761f5c71d77c8dc05fd19c0a851200db
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 19:33:23 2015 -0700

      net: shrink struct sock and request_sock by 8 bytes

      One 32bit hole is following skc_refcnt, use it.
      skc_incoming_cpu can also be an union for request_sock rcv_wnd.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e5eb54d303b7cb1174977ca79030e135728c95e
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 19:33:22 2015 -0700

      net: align sk_refcnt on 128 bytes boundary

      sk->sk_refcnt is dirtied for every TCP/UDP incoming packet.
      This is a performance issue if multiple cpus hit a common socket,
      or multiple sockets are chained due to SO_REUSEPORT.

      By moving sk_refcnt 8 bytes further, first 128 bytes of sockets
      are mostly read. As they contain the lookup keys, this has
      a considerable performance impact, as cpus can cache them.

      These 8 bytes are not wasted, we use them as a place holder
      for various fields, depending on the socket type.

      Tested:
       SYN flood hitting a 16 RX queues NIC.
       TCP listener using 16 sockets and SO_REUSEPORT
       and SO_INCOMING_CPU for proper siloing.

       Could process 6.0 Mpps SYN instead of 4.2 Mpps

       Kernel profile looked like :
          11.68%  [kernel]  [k] sha_transform
           6.51%  [kernel]  [k] __inet_lookup_listener
           5.07%  [kernel]  [k] __inet_lookup_established
           4.15%  [kernel]  [k] memcpy_erms
           3.46%  [kernel]  [k] ipt_do_table
           2.74%  [kernel]  [k] fib_table_lookup
           2.54%  [kernel]  [k] tcp_make_synack
           2.34%  [kernel]  [k] tcp_conn_request
           2.05%  [kernel]  [k] __netif_receive_skb_core
           2.03%  [kernel]  [k] kmem_cache_alloc

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70da268b569d32a9fddeea85dc18043de9d89f89
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 19:33:21 2015 -0700

      net: SO_INCOMING_CPU setsockopt() support

      SO_INCOMING_CPU as added in commit 2c8c56e15df3 was a getsockopt() command
      to fetch incoming cpu handling a particular TCP flow after accept()

      This commits adds setsockopt() support and extends SO_REUSEPORT selection
      logic : If a TCP listener or UDP socket has this option set, a packet is
      delivered to this socket only if CPU handling the packet matches the 
specified
      one.

      This allows to build very efficient TCP servers, using one listener per
      RX queue, as the associated TCP listener should only accept flows handled
      in softirq by the same cpu.
      This provides optimal NUMA behavior and keep cpu caches hot.

      Note that __inet_lookup_listener() still has to iterate over the list of
      all listeners. Following patch puts sk_refcnt in a different cache line
      to let this iteration hit only shared and read mostly cache lines.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 186c6cfb32beae66140bc3c3fe4a519ee0234e33
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Sun Sep 27 20:37:55 2015 +0200

      perf callchains: Fix unw_word_t pointer casts

      unw_word_t is uint64_t even on 32-bit MIPS.  Cast it to uintptr_t before
      the cast to void *p to get rid of the following errors:

        util/unwind-libunwind.c: In function 'access_mem':
        util/unwind-libunwind.c:464:4: error: cast to pointer from integer of 
different size [-Werror=int-to-pointer-cast]
        util/unwind-libunwind.c:475:2: error: cast to pointer from integer of 
different size [-Werror=int-to-pointer-cast]
        cc1: all warnings being treated as errors
        make[3]: *** [util/unwind-libunwind.o] Error 1

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443379079-29133-1-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8eac1d5e9256260b9cc3bfcdd9b8b995990950f5
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Sun Sep 27 20:37:57 2015 +0200

      perf callchain: Use debug_frame if eh_frame is unusable

      When NO_LIBUNWIND_DEBUG_FRAME=0, use the .debug_frame if the .eh_frame
      doesn't contain the approprate unwind tables.

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443379079-29133-3-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c7d39e32632e5db9dc4da51198b76d8c315946ff
  Author: Edward Jee <edjee@xxxxxxxxxx>
  Date:   Thu Oct 8 14:56:49 2015 -0700

      packet: support per-packet fwmark for af_packet sendmsg

      Signed-off-by: Edward Hyunkoo Jee <edjee@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f28ea365cdefc3b4fd0373e70b0106a0cd9b4c23
  Author: Edward Jee <edjee@xxxxxxxxxx>
  Date:   Thu Oct 8 14:56:48 2015 -0700

      sock: support per-packet fwmark

      It's useful to allow users to set fwmark for an individual packet,
      without changing the socket state. The function this patch adds in
      sock layer can be used by the protocols that need such a feature.

      Signed-off-by: Edward Hyunkoo Jee <edjee@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c1bf5fe03184f782f2a6827cf314ae58834865da
  Merge: 0fa2887 bf50887
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 19:13:41 2015 -0700

      Merge branch 'bpf-unprivileged'

      Alexei Starovoitov says:

      ====================
      bpf: unprivileged

      v1-v2:
      - this set logically depends on cb patch
        "bpf: fix cb access in socket filter programs":
        http://patchwork.ozlabs.org/patch/527391/
        which is must have to allow unprivileged programs.
        Thanks Daniel for finding that issue.
      - refactored sysctl to be similar to 'modules_disabled'
      - dropped bpf_trace_printk
      - split tests into separate patch and added more tests
        based on discussion

      v1 cover letter:
      I think it is time to liberate eBPF from CAP_SYS_ADMIN.
      As was discussed when eBPF was first introduced two years ago
      the only piece missing in eBPF verifier is 'pointer leak detection'
      to make it available to non-root users.
      Patch 1 adds this pointer analysis.
      The eBPF programs, obviously, need to see and operate on kernel addresses,
      but with these extra checks they won't be able to pass these addresses
      to user space.
      Patch 2 adds accounting of kernel memory used by programs and maps.
      It changes behavoir for existing root users, but I think it needs
      to be done consistently for both root and non-root, since today
      programs and maps are only limited by number of open FDs (RLIMIT_NOFILE).
      Patch 2 accounts program's and map's kernel memory as RLIMIT_MEMLOCK.

      Unprivileged eBPF is only meaningful for 'socket filter'-like programs.
      eBPF programs for tracing and TC classifiers/actions will stay root only.

      In parallel the bpf fuzzing effort is ongoing and so far
      we've found only one verifier bug and that was already fixed.
      The 'constant blinding' pass also being worked on.
      It will obfuscate constant-like values that are part of eBPF ISA
      to make jit spraying attacks even harder.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bf5088773faffc4a052b95aa978a1660bf5f3f8d
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Wed Oct 7 22:23:23 2015 -0700

      bpf: add unprivileged bpf tests

      Add new tests samples/bpf/test_verifier:

      unpriv: return pointer
        checks that pointer cannot be returned from the eBPF program

      unpriv: add const to pointer
      unpriv: add pointer to pointer
      unpriv: neg pointer
        checks that pointer arithmetic is disallowed

      unpriv: cmp pointer with const
      unpriv: cmp pointer with pointer
        checks that comparison of pointers is disallowed
        Only one case allowed 'void *value = bpf_map_lookup_elem(..); if (value 
== 0) ...'

      unpriv: check that printk is disallowed
        since bpf_trace_printk is not available to unprivileged

      unpriv: pass pointer to helper function
        checks that pointers cannot be passed to functions that expect integers
        If function expects a pointer the verifier allows only that type of 
pointer.
        Like 1st argument of bpf_map_lookup_elem() must be pointer to map.
        (applies to non-root as well)

      unpriv: indirectly pass pointer on stack to helper function
        checks that pointer stored into stack cannot be used as part of key
        passed into bpf_map_lookup_elem()

      unpriv: mangle pointer on stack 1
      unpriv: mangle pointer on stack 2
        checks that writing into stack slot that already contains a pointer
        is disallowed

      unpriv: read pointer from stack in small chunks
        checks that < 8 byte read from stack slot that contains a pointer is
        disallowed

      unpriv: write pointer into ctx
        checks that storing pointers into skb->fields is disallowed

      unpriv: write pointer into map elem value
        checks that storing pointers into element values is disallowed
        For example:
        int bpf_prog(struct __sk_buff *skb)
        {
          u32 key = 0;
          u64 *value = bpf_map_lookup_elem(&map, &key);
          if (value)
             *value = (u64) skb;
        }
        will be rejected.

      unpriv: partial copy of pointer
        checks that doing 32-bit register mov from register containing
        a pointer is disallowed

      unpriv: pass pointer to tail_call
        checks that passing pointer as an index into bpf_tail_call
        is disallowed

      unpriv: cmp map pointer with zero
        checks that comparing map pointer with constant is disallowed

      unpriv: write into frame pointer
        checks that frame pointer is read-only (applies to root too)

      unpriv: cmp of frame pointer
        checks that R10 cannot be using in comparison

      unpriv: cmp of stack pointer
        checks that Rx = R10 - imm is ok, but comparing Rx is not

      unpriv: obfuscate stack pointer
        checks that Rx = R10 - imm is ok, but Rx -= imm is not

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aaac3ba95e4c8b496d22f68bd1bc01cfbf525eca
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Wed Oct 7 22:23:22 2015 -0700

      bpf: charge user for creation of BPF maps and programs

      since eBPF programs and maps use kernel memory consider it 'locked' memory
      from user accounting point of view and charge it against RLIMIT_MEMLOCK 
limit.
      This limit is typically set to 64Kbytes by distros, so almost all
      bpf+tracing programs would need to increase it, since they use maps,
      but kernel charges maximum map size upfront.
      For example the hash map of 1024 elements will be charged as 64Kbyte.
      It's inconvenient for current users and changes current behavior for root,
      but probably worth doing to be consistent root vs non-root.

      Similar accounting logic is done by mmap of perf_event.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1be7f75d1668d6296b80bf35dcf6762393530afc
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Wed Oct 7 22:23:21 2015 -0700

      bpf: enable non-root eBPF programs

      In order to let unprivileged users load and execute eBPF programs
      teach verifier to prevent pointer leaks.
      Verifier will prevent
      - any arithmetic on pointers
        (except R10+Imm which is used to compute stack addresses)
      - comparison of pointers
        (except if (map_value_ptr == 0) ... )
      - passing pointers to helper functions
      - indirectly passing pointers in stack to helper functions
      - returning pointer from bpf program
      - storing pointers into ctx or maps

      Spill/fill of pointers into stack is allowed, but mangling
      of pointers stored in the stack or reading them byte by byte is not.

      Within bpf programs the pointers do exist, since programs need to
      be able to access maps, pass skb pointer to LD_ABS insns, etc
      but programs cannot pass such pointer values to the outside
      or obfuscate them.

      Only allow BPF_PROG_TYPE_SOCKET_FILTER unprivileged programs,
      so that socket filters (tcpdump), af_packet (quic acceleration)
      and future kcm can use it.
      tracing and tc cls/act program types still require root permissions,
      since tracing actually needs to be able to see all kernel pointers
      and tc is for root only.

      For example, the following unprivileged socket filter program is allowed:
      int bpf_prog1(struct __sk_buff *skb)
      {
        u32 index = load_byte(skb, ETH_HLEN + offsetof(struct iphdr, protocol));
        u64 *value = bpf_map_lookup_elem(&my_map, &index);

        if (value)
        *value += skb->len;
        return 0;
      }

      but the following program is not:
      int bpf_prog1(struct __sk_buff *skb)
      {
        u32 index = load_byte(skb, ETH_HLEN + offsetof(struct iphdr, protocol));
        u64 *value = bpf_map_lookup_elem(&my_map, &index);

        if (value)
        *value += (u64) skb;
        return 0;
      }
      since it would leak the kernel address into the map.

      Unprivileged socket filter bpf programs have access to the
      following helper functions:
      - map lookup/update/delete (but they cannot store kernel pointers into 
them)
      - get_random (it's already exposed to unprivileged user space)
      - get_smp_processor_id
      - tail_call into another socket filter program
      - ktime_get_ns

      The feature is controlled by sysctl kernel.unprivileged_bpf_disabled.
      This toggle defaults to off (0), but can be set true (1).  Once true,
      bpf programs and maps cannot be accessed from unprivileged process,
      and the toggle cannot be set back to false.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d8e1f5ed11a39a68da00f05000466c4f6db4456e
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Mon Oct 12 16:19:54 2015 -0700

      Documentation: ARM: List new omap MMC requirements

      Earlier the PBIAS regulator was optional, not so with recent
      omap_hsmmc changes. To make things easier for people with
      custom .config files, let's add minimal documentation for it
      as suggested by Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>.

      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit fd820a1ec758bc25b0eb10ab5e88e6c61fbcc8aa
  Author: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
  Date:   Tue Oct 6 22:07:49 2015 +0200

      memory: omap-gpmc: dump "before" state before first modification

      When gpmc_cs_show_timings is called in gpmc_cs_set_timings()
      gpmc_cs_program_settings() was already run which modifies the CONFIG1
      register. So to be more useful do the "before" dump earlier.

      Signed-off-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Acked-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit be59b6192f43a9792f5f636b51358196ba11bbf6
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Mon Oct 12 16:19:54 2015 -0700

      memory: omap-gpmc: Fix unselectable debug option for GPMC

      Commit 63aa945b1013 ("memory: omap-gpmc: Add Kconfig option for debug")
      added a debug option for GPMC, but somehow managed to keep it 
unselectable.

      This probably happened because I had some uncommitted changes and the
      GPMC option is selected in the platform specific Kconfig.

      Let's also update the description a bit, it does not mention that
      enabling the debug option also disables the reset of GPMC controller
      during the init as pointed out by Uwe Kleine-König
      <u.kleine-koenig@xxxxxxxxxxxxxx> and Roger Quadros <rogerq@xxxxxx>.

      Fixes: 63aa945b1013 ("memory: omap-gpmc: Add Kconfig option for debug")
      Reported-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Acked-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 7e381ec6a36aa44f15fc1a76e6efb9e2cd942e61
  Author: Tomi Valkeinen <tomi.valkeinen@xxxxxx>
  Date:   Fri Sep 25 16:02:03 2015 +0300

      ARM: dts: am57xx-beagle-x15: set VDD_SD to always-on

      LDO1 regulator (VDD_SD) is connected to SoC's vddshv8. vddshv8 needs to
      be kept always powered (see commit 5a0f93c6576a ("ARM: dts: Add
      am57xx-beagle-x15"), but at the moment VDD_SD is enabled/disabled
      depending on whether an SD card is inserted or not.

      This patch sets LDO1 regulator to always-on.

      This patch has a side effect of fixing another issue, HDMI DDC not
      working when SD card is not inserted:

      Why this happens is that the tpd12s015 (HDMI level shifter/ESD
      protection chip) has LS_OE GPIO input, which needs to be enabled for the
      HDMI DDC to work. LS_OE comes from gpio6_28. The pin that provides
      gpio6_28 is powered by vddshv8, and vddshv8 comes from VDD_SD.

      So when SD card is not inserted, VDD_SD is disabled, and LS_OE stays
      off.

      The proper fix for the HDMI DDC issue would be to maybe have the pinctrl
      framework manage the pin specific power.

      Apparently this fixes also a third issue (copy paste from Kishon's
      patch):

      ldo1_reg in addition to being connected to the io lines is also
      connected to the card detect line. On card removal, omap_hsmmc
      driver does a regulator_disable causing card detect line to be
      pulled down. This raises a card insertion interrupt and once the
      MMC core detects there is no card inserted, it does a
      regulator disable which again raises a card insertion interrupt.
      This happens in a loop causing infinite MMC interrupts.

      Fixes: 5a0f93c6576a ("ARM: dts: Add am57xx-beagle-x15")
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>
      Reported-by: Louis McCarthy <compeoree@xxxxxxxxx>
      Acked-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 914eebf2f434c6c0355faa9d81b4ebdca94819c9
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Wed Oct 7 13:25:50 2015 +0900

      netfilter: nfnetlink_log: autoload nf_conntrack_netlink module 
NFQA_CFG_F_CONNTRACK config flag

      This patch enables to load nf_conntrack_netlink module if
      NFULNL_CFG_F_CONNTRACK config flag is specified.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit b8bb9baad27e455c467e8fac47eebadbe765c18f
  Author: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
  Date:   Tue Oct 13 04:32:53 2015 +0900

      ARM: dts: Fix audio card detection on Peach boards

      Since commit 2fad972d45c4 ("ARM: dts: Add mclk entry for Peach boards"),
      sound card detection is broken on peach boards and gives below errors:

      [    3.630457] max98090 7-0010: MAX98091 REVID=0x51
      [    3.634233] max98090 7-0010: use default 2.8v micbias
      [    3.640985] snow-audio sound: HiFi <-> 3830000.i2s mapping ok
      [    3.645307] max98090 7-0010: Invalid master clock frequency
      [    3.650824] snow-audio sound: ASoC: Peach-Pi-I2S-MAX98091 late_probe() 
failed: -22
      [    3.658914] snow-audio sound: snd_soc_register_card failed (-22)
      [    3.664366] snow-audio: probe of sound failed with error -22

      This patch adds missing assigned-clocks and assigned-clock-parents for
      pmu_system_controller node which is used as "mclk" for audio codec.

      Fixes: 2fad972d45c4 ("ARM: dts: Add mclk entry for Peach boards")
      Signed-off-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit 51a6256b00008a3c520f6f31bcd62cd15cb05960
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Tue Oct 13 04:32:49 2015 +0900

      ARM: EXYNOS: Fix double of_node_put() when parsing child power domains

      On each next iteration of for_each_compatible_node() the reference
      counter for current device node is already decreased by the loop
      iterator. The manual call to of_node_get() is required only on loop
      break which is not happening here.

      The double of_node_get() (with enabled CONFIG_OF_DYNAMIC) lead to
      decreasing the counter below expected, initial value.

      Fixes: fe4034a3fad7 ("ARM: EXYNOS: Add missing of_node_put() when parsing 
power domains")
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit 835da3f99d329b1160a1f7fc82c7ac81163d63d0
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 22:29:48 2015 +0200

      nvme: fix 32-bit build warning

      Compiling the nvme driver on 32-bit warns about a cast from a __u64
      variable to a pointer:

      drivers/block/nvme-core.c: In function 'nvme_submit_io':
      drivers/block/nvme-core.c:1847:4: warning: cast to pointer from integer 
of different size [-Wint-to-pointer-cast]
          (void __user *)io.addr, length, NULL, 0);

      The cast here is intentional and safe, so we can shut up the
      gcc warning by adding an intermediate cast to 'uintptr_t'.

      I had previously submitted a patch to fix this problem in the
      nvme driver, but it was accepted on the same day that two new
      warnings got added.

      For clarification, I also change the third instance of this cast
      to use uintptr_t instead of unsigned long now.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: d29ec8241c10e ("nvme: submit internal commands through the block 
layer")
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit d4a1a317e7478b70e18b9cc8eac7d29090121b6e
  Merge: b3961e8 b4a21fc ca07e9f 536b560
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Oct 12 19:25:07 2015 +0100

      Merge remote-tracking branches 'regmap/topic/atomic', 
'regmap/topic/debugfs' and 'regmap/topic/irq-hdr' into regmap-next

  commit b3961e8703cbacf45116aea44f0c1cdaf8c8b40c
  Merge: ba5890a 77792b1
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Oct 12 19:24:30 2015 +0100

      Merge tag 'regmap-offload-update-bits' into regmap-next

      regmap: Allow buses to provide a custom update_bits() operation

      Some buses provide a native _update_bits() operation which for uncached
      registers is faster than doing a read/modify/write cycle as it is a
      single bus transaction.  Add support for implementing this to regmap.

      # gpg: Signature made Tue 06 Oct 2015 16:21:47 BST using RSA key ID 
5D5487D0
      # gpg: Oops: keyid_from_fingerprint: no pubkey
      # gpg: Oops: keyid_from_fingerprint: no pubkey
      # gpg: key 00000000 occurs more than once in the trustdb
      # gpg: key 16005C11: no public key for trusted key - skipped
      # gpg: key 16005C11 marked as ultimately trusted
      # gpg: Good signature from "Mark Brown <broonie@xxxxxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <Mark.Brown@xxxxxxxxxx>"

  commit ba5890a0c7576776ada71a21d95833a2281695e2
  Merge: 25cb62b a650fdd
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Oct 12 19:24:30 2015 +0100

      Merge tag 'regmap-irq-unmask' into regmap-next

      regmap: Support for split mask and unmask interrupt registers

      This branch adds an interface for supporting devices which have separate
      mask and unmask registers.

      # gpg: Signature made Thu 17 Sep 2015 11:52:20 BST using RSA key ID 
5D5487D0
      # gpg: Oops: keyid_from_fingerprint: no pubkey
      # gpg: Oops: keyid_from_fingerprint: no pubkey
      # gpg: key 00000000 occurs more than once in the trustdb
      # gpg: key 16005C11: no public key for trusted key - skipped
      # gpg: key 16005C11 marked as ultimately trusted
      # gpg: Good signature from "Mark Brown <broonie@xxxxxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <broonie@xxxxxxxxxx>"
      # gpg:                 aka "Mark Brown <Mark.Brown@xxxxxxxxxx>"

  commit 79828b4fa835f73cdaf4bffa48696abdcbea9d02
  Merge: 721b51f 8c1a9d6
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Oct 12 18:09:27 2015 +0100

      Merge remote-tracking branch 'asoc/fix/rt5645' into asoc-fix-rt5645

  commit 4aa8e454d347a1c96a2322683a6798de7e17da5f
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Oct 12 14:02:29 2015 -0300

      perf hists browser: Inform how to reset the symbol filter

      When in the hists browser, i.e. in 'perf report' or in 'perf top', it is
      possible to press '/' and specify a substring to filter by symbol name.

      Clarify how to remove a filter by making the prompt be:

         Please enter the name of symbol you want to see.
         To remove the filter later, press / + ENTER

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-vbq2b0kyufwy6p0ctkfswcoe@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7727a92544b2a507b83fdc7d3e4b6f4545c9f364
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Oct 12 13:56:50 2015 -0300

      perf ui browsers: Remove help messages about use of right and arrow keys

      They were repurposed for horizontal scrolling, so use just ENTER/ESC in
      the help messages.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: c6c3c02dea40 ("perf hists browser: Implement horizontal scrolling")
      Link: http://lkml.kernel.org/n/tip-n5ar4qg8fs12ax4vhr3rxhxj@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dc38218e8b598a0092dae9715e603e9628203bec
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Sun Oct 11 17:17:24 2015 -0300

      perf symbols: Try the .debug/ DSO cache as a last resort

      Not as the first attempt at finding a vmlinux for the running kernel,
      this way we get a more informative filename to present in tools, it will
      check that the build-id is the same as the one previously loaded in the
      DSO in dso->build_id, reading from /sys/kernel/notes, for instance.

      E.g. in the annotation TUI, going from 'perf top', for the scsi_sg_alloc
      kernel function, in the first line:

      Before:

      scsi_sg_alloc  
/root/.debug/.build-id/28/2777c262e6b3c0451375163c9a81c893218ab1

      After:

      scsi_sg_alloc  /lib/modules/4.3.0-rc1+/build/vmlinux

      And:

        # ls -la 
/root/.debug/.build-id/28/2777c262e6b3c0451375163c9a81c893218ab1
      lrwxrwxrwx. 1 root root 81 Sep 22 16:11 
/root/.debug/.build-id/28/2777c262e6b3c0451375163c9a81c893218ab1 -> 
../../home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1
        # file 
~/.debug/home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1
      
/root/.debug/home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1:
 ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, 
BuildID[sha1]=282777c262e6b3c0451375163c9a81c893218ab1, not stripped
        #

      The same as:

        # file /lib/modules/4.3.0-rc1+/build/vmlinux
      /lib/modules/4.3.0-rc1+/build/vmlinux: ELF 64-bit LSB executable, x86-64, 
version 1 (SYSV), statically linked, 
BuildID[sha1]=282777c262e6b3c0451375163c9a81c893218ab1, not stripped

      Furthermore:

        # sha256sum /lib/modules/4.3.0-rc1+/build/vmlinux
        e7a789bbdc61029ec09140c228e1dd651271f38ef0b8416c0b7d5ff727b98be2  
/lib/modules/4.3.0-rc1+/build/vmlinux
        # sha256sum 
~/.debug/home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1
        e7a789bbdc61029ec09140c228e1dd651271f38ef0b8416c0b7d5ff727b98be2  
/root/.debug/home/git/build/v4.3.0-rc1+/vmlinux/282777c262e6b3c0451375163c9a81c893218ab1
        [root@zoo new]#

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-9y42ikzq3jisiddoi6f07n8z@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4fc57692268bf841a3cc90b3b056640de2bb1605
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Mon Oct 12 18:53:00 2015 +0300

      Documentation/features/KASAN: arm64 supports KASAN now

      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ee7f881b59de4e0e0be250fd0c5d4ade3e30ec34
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Mon Oct 12 18:52:59 2015 +0300

      ARM64: kasan: print memory assignment

      This prints out the virtual memory assigned to KASan in the
      boot crawl along with other memory assignments, if and only
      if KASan is activated.

      Example dmesg from the Juno Development board:

      Memory: 1691156K/2080768K available (5465K kernel code, 444K rwdata,
      2160K rodata, 340K init, 217K bss, 373228K reserved, 16384K cma-reserved)
      Virtual kernel memory layout:
          kasan   : 0xffffff8000000000 - 0xffffff9000000000   (    64 GB)
          vmalloc : 0xffffff9000000000 - 0xffffffbdbfff0000   (   182 GB)
          vmemmap : 0xffffffbdc0000000 - 0xffffffbfc0000000   (     8 GB 
maximum)
                    0xffffffbdc2000000 - 0xffffffbdc3fc0000   (    31 MB actual)
          fixed   : 0xffffffbffabfd000 - 0xffffffbffac00000   (    12 KB)
          PCI I/O : 0xffffffbffae00000 - 0xffffffbffbe00000   (    16 MB)
          modules : 0xffffffbffc000000 - 0xffffffc000000000   (    64 MB)
          memory  : 0xffffffc000000000 - 0xffffffc07f000000   (  2032 MB)
            .init : 0xffffffc0007f5000 - 0xffffffc00084a000   (   340 KB)
            .text : 0xffffffc000080000 - 0xffffffc0007f45b4   (  7634 KB)
            .data : 0xffffffc000850000 - 0xffffffc0008bf200   (   445 KB)

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 39d114ddc68223022c12ae3a1573912bc4b585e5
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Mon Oct 12 18:52:58 2015 +0300

      arm64: add KASAN support

      This patch adds arch specific code for kernel address sanitizer
      (see Documentation/kasan.txt).

      1/8 of kernel addresses reserved for shadow memory. There was no
      big enough hole for this, so virtual addresses for shadow were
      stolen from vmalloc area.

      At early boot stage the whole shadow region populated with just
      one physical page (kasan_zero_page). Later, this page reused
      as readonly zero shadow for some memory that KASan currently
      don't track (vmalloc).
      After mapping the physical memory, pages for shadow memory are
      allocated and mapped.

      Functions like memset/memmove/memcpy do a lot of memory accesses.
      If bad pointer passed to one of these function it is important
      to catch this. Compiler's instrumentation cannot do this since
      these functions are written in assembly.
      KASan replaces memory functions with manually instrumented variants.
      Original functions declared as weak symbols so strong definitions
      in mm/kasan/kasan.c could replace them. Original functions have aliases
      with '__' prefix in name, so we could call non-instrumented variant
      if needed.
      Some files built without kasan instrumentation (e.g. mm/slub.c).
      Original mem* function replaced (via #define) with prefixed variants
      to disable memory access checks for such files.

      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Tested-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fd2203dd3556f6553231fa026060793e67a25ce6
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Mon Oct 12 18:52:57 2015 +0300

      arm64: move PGD_SIZE definition to pgalloc.h

      This will be used by KASAN latter.

      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c9692657c0321fec7bcb3ca8c6db56c08c640ace
  Author: Manjeet Pawar <manjeet.p@xxxxxxxxxxx>
  Date:   Fri Oct 9 15:59:40 2015 +0530

      arm64: Fix MINSIGSTKSZ and SIGSTKSZ

      MINSIGSTKSZ and SIGSTKSZ for ARM64 are not correctly set in latest kernel.
      This patch fixes this issue.

      This issue is reported in LTP (testcase: sigaltstack02.c).
      Testcase failed when sigaltstack() called with stack size "MINSIGSTKSZ - 
1"
      Since in Glibc-2.22, MINSIGSTKSZ is set to 5120 but in kernel
      it is set to 2048 so testcase gets failed.

      Testcase Output:
      sigaltstack02 1  TPASS  :  stgaltstack() fails, Invalid Flag 
value,errno:22
      sigaltstack02 2  TFAIL  :  sigaltstack() returned 0, expected -1,errno:12

      Reported Issue in Glibc Bugzilla:
      Bugfix in Glibc-2.22: [Bug 16850]
      https://sourceware.org/bugzilla/show_bug.cgi?id=16850

      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Akhilesh Kumar <akhilesh.k@xxxxxxxxxxx>
      Signed-off-by: Manjeet Pawar <manjeet.p@xxxxxxxxxxx>
      Signed-off-by: Rohit Thapliyal <r.thapliyal@xxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit b6dd8e0719c0d2d01429639a11b7bc2677de240c
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Thu Oct 8 11:11:17 2015 +0100

      arm64: errata: use KBUILD_CFLAGS_MODULE for erratum #843419

      Commit df057cc7b4fa ("arm64: errata: add module build workaround for
      erratum #843419") sets CFLAGS_MODULE to ensure that the large memory
      model is used by the compiler when building kernel modules.

      However, CFLAGS_MODULE is an environment variable and intended to be
      overridden on the command line, which appears to be the case with the
      Ubuntu kernel packaging system, so use KBUILD_CFLAGS_MODULE instead.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Fixes: df057cc7b4fa ("arm64: errata: add module build workaround for 
erratum #843419")
      Reported-by: Dann Frazier <dann.frazier@xxxxxxxxxxxxx>
      Tested-by: Dann Frazier <dann.frazier@xxxxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 305d454aaa292be3a09a9d674e6c35f5b4249a13
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Thu Oct 8 20:15:18 2015 +0100

      arm64: atomics: implement native {relaxed, acquire, release} atomics

      Commit 654672d4ba1a ("locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operation") introduced a relaxed atomic API to
      Linux that maps nicely onto the arm64 memory model, including the new
      ARMv8.1 atomic instructions.

      This patch hooks up the API to our relaxed atomic instructions, rather
      than have them all expand to the full-barrier variants as they do
      currently.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c5edf9cdc4c483b9a94c03fc0b9f769bd090bf3e
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 29 13:04:26 2015 -0400

      writeback: fix incorrect calculation of available memory for memcg domains

      For memcg domains, the amount of available memory was calculated as

       min(the amount currently in use + headroom according to memcg,
           total clean memory)

      This isn't quite correct as what should be capped by the amount of
      clean memory is the headroom, not the sum of memory in use and
      headroom.  For example, if a memcg domain has a significant amount of
      dirty memory, the above can lead to a value which is lower than the
      current amount in use which doesn't make much sense.  In most
      circumstances, the above leads to a number which is somewhat but not
      drastically lower.

      As the amount of memory which can be readily allocated to the memcg
      domain is capped by the amount of system-wide clean memory which is
      not already assigned to the memcg itself, the number we want is

       the amount currently in use +
       min(headroom according to memcg, clean memory elsewhere in the system)

      This patch updates mem_cgroup_wb_stats() to return the number of
      filepages and headroom instead of the calculated available pages.
      mdtc_cap_avail() is renamed to mdtc_calc_avail() and performs the
      above calculation from file, headroom, dirty and globally clean pages.

      v2: Dummy mem_cgroup_wb_stats() implementation wasn't updated leading
          to build failure when !CGROUP_WRITEBACK.  Fixed.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: c2aa723a6093 ("writeback: implement memcg writeback domain based 
throttling")
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit d60d1bddd5b642711a237511845853755b25bf1f
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 29 12:47:53 2015 -0400

      writeback: memcg dirty_throttle_control should be initialized with 
wb->memcg_completions

      MDTC_INIT() is used to initialize dirty_throttle_control for memcg
      domains.  It used DTC_INIT_COMMON() to initialized mdtc->wb and
      ->wb_completions which is incorrect as DTC_INIT_COMMON() sets the
      latter to wb->completions instead of wb->memcg_completions.  This can
      lead to wildly incorrect results when calculating the proportion of
      dirty memory the memcg domain should get.

      Remove DTC_INIT_COMMON() and update MDTC_INIT() to initialize
      mdtc->wb_completions to wb->memcg_completions.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: c2aa723a6093 ("writeback: implement memcg writeback domain based 
throttling")
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit b817525a4a80c04e4ca44192d97a1ffa9f2be572
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Fri Oct 2 14:47:05 2015 -0400

      writeback: bdi_writeback iteration must not skip dying ones

      bdi_for_each_wb() is used in several places to wake up or issue
      writeback work items to all wb's (bdi_writeback's) on a given bdi.
      The iteration is performed by walking bdi->cgwb_tree; however, the
      tree only indexes wb's which are currently active.

      For example, when a memcg gets associated with a different blkcg, the
      old wb is removed from the tree so that the new one can be indexed.
      The old wb starts dying from then on but will linger till all its
      inodes are drained.  As these dying wb's may still host dirty inodes,
      writeback operations which affect all wb's must include them.
      bdi_for_each_wb() skipping dying wb's led to sync(2) missing and
      failing to sync the inodes belonging to those wb's.

      This patch adds a RCU protected @bdi->wb_list which lists all wb's
      beloinging to that bdi.  wb's are added on creation and removed on
      release rather than on the start of destruction.  bdi_for_each_wb()
      usages are replaced with list_for_each[_continue]_rcu() iterations
      over @bdi->wb_list and bdi_for_each_wb() and its helpers are removed.

      v2: Updated as per Jan.  last_wb ref leak in bdi_split_work_to_wbs()
          fixed and unnecessary list head severing in cgwb_bdi_destroy()
          removed.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-and-tested-by: Artem Bityutskiy <dedekind1@xxxxxxxxx>
      Fixes: ebe41ab0c79d ("writeback: implement bdi_for_each_wb()")
      Link: http://lkml.kernel.org/g/1443012552.19983.209.camel@xxxxxxxxx
      Cc: Jan Kara <jack@xxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 6fdf860f15d4a6be8f0947bad608d687fe0c7af7
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 29 12:47:51 2015 -0400

      writeback: fix bdi_writeback iteration in wakeup_dirtytime_writeback()

      wakeup_dirtytime_writeback() walks and wakes up all wb's of all bdi's;
      unfortunately, it was always waking up bdi->wb instead of the wb being
      walked.  Fix it.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: 001fe6f617b1 ("writeback: make wakeup_dirtytime_writeback() handle 
multiple bdi_writeback's")
      Reviewed-by: Jan Kara <jack@xxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 9ad18ab938375502c03cf467abecbb77264c9475
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Sep 29 12:47:50 2015 -0400

      writeback: laptop_mode_timer_fn() needs rcu_read_lock() around 
bdi_writeback iteration

      laptop_mode_timer_fn() was using bdi_for_each_wb() without the
      required RCU locking leading to the following warning.

       WARNING: CPU: 0 PID: 0 at include/linux/backing-dev.h:415 
laptop_mode_timer_fn+0x106/0x170()
       ...
       Call Trace:
        <IRQ>  [<ffffffff81480cdc>] dump_stack+0x4e/0x82
        [<ffffffff81051912>] warn_slowpath_common+0x82/0xc0
        [<ffffffff81051a0a>] warn_slowpath_null+0x1a/0x20
        [<ffffffff8115f0e6>] laptop_mode_timer_fn+0x106/0x170
        [<ffffffff810ca8e3>] call_timer_fn+0xb3/0x2f0
        [<ffffffff810cad25>] run_timer_softirq+0x205/0x370
        [<ffffffff81056854>] __do_softirq+0xd4/0x460
        [<ffffffff81056d69>] irq_exit+0x89/0xa0
        [<ffffffff8185a892>] smp_apic_timer_interrupt+0x42/0x50
        [<ffffffff81858a44>] apic_timer_interrupt+0x84/0x90
       ...

      Fix it by adding rcu_read_lock() around the iteration.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: a06fd6b10228 ("writeback: make laptop_mode_timer_fn() handle 
multiple bdi_writeback's")
      Reviewed-by: Jan Kara <jack@xxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 3be7f32878e742cf3c17b435c90e198862457706
  Author: Chuck Lever <chuck.lever@xxxxxxxxxx>
  Date:   Mon Oct 12 10:53:39 2015 -0400

      svcrdma: Fix NFS server crash triggered by 1MB NFS WRITE

      Now that the NFS server advertises a maximum payload size of 1MB
      for RPC/RDMA again, it crashes in svc_process_common() when NFS
      client sends a 1MB NFS WRITE on an NFS/RDMA mount.

      The server has set up a 259 element array of struct page pointers
      in rq_pages[] for each incoming request. The last element of the
      array is NULL.

      When an incoming request has been completely received,
      rdma_read_complete() attempts to set the starting page of the
      incoming page vector:

        rqstp->rq_arg.pages = &rqstp->rq_pages[head->hdr_count];

      and the page to use for the reply:

        rqstp->rq_respages = &rqstp->rq_arg.pages[page_no];

      But the value of page_no has already accounted for head->hdr_count.
      Thus rq_respages now points past the end of the incoming pages.

      For NFS WRITE operations smaller than the maximum, this is harmless.
      But when the NFS WRITE operation is as large as the server's max
      payload size, rq_respages now points at the last entry in rq_pages,
      which is NULL.

      Fixes: cc9a903d915c ('svcrdma: Change maximum server payload . . .')
      BugLink: https://bugzilla.linux-nfs.org/show_bug.cgi?id=270
      Signed-off-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Reviewed-by: Sagi Grimberg <sagig@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Shirley Ma <shirley.ma@xxxxxxxxxx>
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit c9322458119ecf2e5cf41dcb204aaf67238b2147
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Oct 8 14:30:15 2015 +0200

      netfilter: bridge: avoid unused label warning

      With the ARM mini2440_defconfig, the bridge netfilter code gets
      built with both CONFIG_NF_DEFRAG_IPV4 and CONFIG_NF_DEFRAG_IPV6
      disabled, which leads to a harmless gcc warning:

      net/bridge/br_netfilter_hooks.c: In function 'br_nf_dev_queue_xmit':
      net/bridge/br_netfilter_hooks.c:792:2: warning: label 'drop' defined but 
not used [-Wunused-label]

      This gets rid of the warning by cleaning up the code to avoid
      the respective #ifdefs causing this problem, and replacing them
      with if(IS_ENABLED()) checks. I have verified that the resulting
      object code is unchanged, and an additional advantage is that
      we now get compile coverage of the unused functions in more
      configurations.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: dd302b59bde0 ("netfilter: bridge: don't leak skb in error paths")
      Reviewed-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit d53195c25931a1f662f73488e604b85bc803c8f3
  Merge: 4302f5e 92240e8
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 17:35:42 2015 +0200

      Merge tag 'ipvs4-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next

      Simon Horman says:

      ====================
      Fourth Round of IPVS Updates for v4.4

      please consider these build warning cleanups from David Ahern and myself.
      They resolve some minor side effects of Eric Biederman' heroic work to
      cleanup IPVS which you recently pulled: its queued up for v4.4 so no need
      to worry about earlier kernel versions.
      ====================

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit cc4998febd567d1c671684abce5595344bd4e8b2
  Author: lucien <lucien.xin@xxxxxxxxx>
  Date:   Tue Oct 6 21:03:07 2015 +0800

      netfilter: ipt_rpfilter: remove the nh_scope test in 
rpfilter_lookup_reverse

      --accept-local  option works for res.type == RTN_LOCAL, which should be
      from the local table, but there, the fib_info's nh->nh_scope =
      RT_SCOPE_NOWHERE ( > RT_SCOPE_HOST). in fib_create_info().

        if (cfg->fc_scope == RT_SCOPE_HOST) {
                struct fib_nh *nh = fi->fib_nh;

                /* Local address is added. */
                if (nhs != 1 || nh->nh_gw)
                        goto err_inval;
                nh->nh_scope = RT_SCOPE_NOWHERE;   <===
                nh->nh_dev = dev_get_by_index(net, fi->fib_nh->nh_oif);
                err = -ENODEV;
                if (!nh->nh_dev)
                        goto failure;

      but in our rpfilter_lookup_reverse():

        if (dev_match || flags & XT_RPFILTER_LOOSE)
                return FIB_RES_NH(res).nh_scope <= RT_SCOPE_HOST;

      if nh->nh_scope > RT_SCOPE_HOST, it will fail. --accept-local option
      will never be passed.

      it seems the test is bogus and can be removed to fix this issue.

        if (dev_match || flags & XT_RPFILTER_LOOSE)
                return FIB_RES_NH(res).nh_scope <= RT_SCOPE_HOST;

      ipv6 does not have this issue.

      Signed-off-by: Xin Long <lucien.xin@xxxxxxxxx>
      Acked-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit e8f3010f7326c00368dbc057bd052bec80dfc072
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Oct 8 20:02:04 2015 +0100

      arm64/efi: isolate EFI stub from the kernel proper

      Since arm64 does not use a builtin decompressor, the EFI stub is built
      into the kernel proper. So far, this has been working fine, but actually,
      since the stub is in fact a PE/COFF relocatable binary that is executed
      at an unknown offset in the 1:1 mapping provided by the UEFI firmware, we
      should not be seamlessly sharing code with the kernel proper, which is a
      position dependent executable linked at a high virtual offset.

      So instead, separate the contents of libstub and its dependencies, by
      putting them into their own namespace by prefixing all of its symbols
      with __efistub. This way, we have tight control over what parts of the
      kernel proper are referenced by the stub.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 207918461eb0aca720fddec5da79bc71c133b9f1
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Oct 8 20:02:03 2015 +0100

      arm64: use ENDPIPROC() to annotate position independent assembler routines

      For more control over which functions are called with the MMU off or
      with the UEFI 1:1 mapping active, annotate some assembler routines as
      position independent. This is done by introducing ENDPIPROC(), which
      replaces the ENDPROC() declaration of those routines.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit d4dddfdbbc75f46d2cbab4e9f421999452617d64
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Oct 8 20:02:02 2015 +0100

      arm64/efi: remove /chosen/linux, uefi-stub-kern-ver DT property

      With the stub to kernel interface being promoted to a proper interface
      so that other agents than the stub can boot the kernel proper in EFI
      mode, we can remove the linux,uefi-stub-kern-ver field, considering
      that its original purpose was to prevent this from happening in the
      first place.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5ffdbe8bf1e485026e1c7e4714d2841553cf0b40
  Author: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
  Date:   Mon Aug 24 15:57:19 2015 +0300

      ovl: free lower_mnt array in ovl_put_super

      This fixes memory leak after umount.

      Kmemleak report:

      unreferenced object 0xffff8800ba791010 (size 8):
        comm "mount", pid 2394, jiffies 4294996294 (age 53.920s)
        hex dump (first 8 bytes):
          20 1c 13 02 00 88 ff ff                           .......
        backtrace:
          [<ffffffff811f8cd4>] create_object+0x124/0x2c0
          [<ffffffff817a059b>] kmemleak_alloc+0x7b/0xc0
          [<ffffffff811dffe6>] __kmalloc+0x106/0x340
          [<ffffffffa0152bfc>] ovl_fill_super+0x55c/0x9b0 [overlay]
          [<ffffffff81200ac4>] mount_nodev+0x54/0xa0
          [<ffffffffa0152118>] ovl_mount+0x18/0x20 [overlay]
          [<ffffffff81201ab3>] mount_fs+0x43/0x170
          [<ffffffff81220d34>] vfs_kern_mount+0x74/0x170
          [<ffffffff812233ad>] do_mount+0x22d/0xdf0
          [<ffffffff812242cb>] SyS_mount+0x7b/0xc0
          [<ffffffff817b6bee>] entry_SYSCALL_64_fastpath+0x12/0x76
          [<ffffffffffffffff>] 0xffffffffffffffff

      Signed-off-by: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Fixes: dd662667e6d3 ("ovl: add mutli-layer infrastructure")
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.0+

  commit 0f95502ad84874b3c05fc7cdd9d4d9d5cddf7859
  Author: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
  Date:   Mon Aug 24 15:57:18 2015 +0300

      ovl: free stack of paths in ovl_fill_super

      This fixes small memory leak after mount.

      Kmemleak report:

      unreferenced object 0xffff88003683fe00 (size 16):
        comm "mount", pid 2029, jiffies 4294909563 (age 33.380s)
        hex dump (first 16 bytes):
          20 27 1f bb 00 88 ff ff 40 4b 0f 36 02 88 ff ff   '......@xxxxxxx
        backtrace:
          [<ffffffff811f8cd4>] create_object+0x124/0x2c0
          [<ffffffff817a059b>] kmemleak_alloc+0x7b/0xc0
          [<ffffffff811dffe6>] __kmalloc+0x106/0x340
          [<ffffffffa01b7a29>] ovl_fill_super+0x389/0x9a0 [overlay]
          [<ffffffff81200ac4>] mount_nodev+0x54/0xa0
          [<ffffffffa01b7118>] ovl_mount+0x18/0x20 [overlay]
          [<ffffffff81201ab3>] mount_fs+0x43/0x170
          [<ffffffff81220d34>] vfs_kern_mount+0x74/0x170
          [<ffffffff812233ad>] do_mount+0x22d/0xdf0
          [<ffffffff812242cb>] SyS_mount+0x7b/0xc0
          [<ffffffff817b6bee>] entry_SYSCALL_64_fastpath+0x12/0x76
          [<ffffffffffffffff>] 0xffffffffffffffff

      Signed-off-by: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Fixes: a78d9f0d5d5c ("ovl: support multiple lower layers")
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.0+

  commit 4302f5eeb95f78da6351a38cb170943651e8599a
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 16:51:02 2015 +0200

      nfnetlink_cttimeout: add rcu_barrier() on module removal

      Make sure kfree_rcu() released objects before leaving the module removal
      exit path.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit ae2d708ed8fb8fa713fdd7eacea5df40bae6315b
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 16:51:01 2015 +0200

      netfilter: conntrack: fix crash on timeout object removal

      The object and module refcounts are updated for each conntrack template,
      however, if we delete the iptables rules and we flush the timeout
      database, we may end up with invalid references to timeout object that
      are just gone.

      Resolve this problem by setting the timeout reference to NULL when the
      custom timeout entry is removed from our base. This patch requires some
      RCU trickery to ensure safe pointer handling.

      This handling is similar to what we already do with conntrack helpers,
      the idea is to avoid bumping the timeout object reference counter from
      the packet path to avoid the cost of atomic ops.

      Reported-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 403d89ad9cc076db44c76ab75c7629497d8ddbb2
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 16:51:03 2015 +0200

      netfilter: xt_CT: don't put back reference to timeout policy object

      On success, this shouldn't put back the timeout policy object, otherwise
      we may have module refcount overflow and we allow deletion of timeout
      that are still in use.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 0399f73299f1b7e04de329050f7111b362b7eeb5
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 12 11:22:42 2015 +0200

      x86/microcode/amd: Do not overwrite final patch levels

      A certain number of patch levels of applied microcode should not
      be overwritten by the microcode loader, otherwise bad things
      will happen.

      Check those and abort update if the current core has one of
      those final patch levels applied by the BIOS. 32-bit needs
      special handling, of course.

      See https://bugzilla.suse.com/show_bug.cgi?id=913996 for more
      info.

      Tested-by: Peter KirchgeÃ?ner <pkirchgessner@xxxxxxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444641762-9437-7-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2eff73c0a11f19ff082a566e3429fbaaca7b8e7b
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 12 11:22:41 2015 +0200

      x86/microcode/amd: Extract current patch level read to a function

      Pave the way for checking the current patch level of the
      microcode in a core. We want to be able to do stuff depending on
      the patch level - in this case decide whether to update or not.
      But that will be added in a later patch.

      Drop unused local var uci assignment, while at it.

      Integrate a fix for 32-bit and CONFIG_PARAVIRT from Takashi Iwai:

       Use native_rdmsr() in check_current_patch_level() because with
       CONFIG_PARAVIRT enabled and on 32-bit, where we run before
       paging has been enabled, we cannot deref pv_info yet. Or we
       could, but we'd need to access its physical address. This way of
       fixing it is simpler. See:

         https://bugzilla.suse.com/show_bug.cgi?id=943179 for the background.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Takashi Iwai <tiwai@xxxxxxxx>:
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444641762-9437-6-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fa20a2ed6fff717839ec03b6574ea0affcb58841
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Oct 12 11:22:40 2015 +0200

      x86/ras/mce_amd_inj: Inject bank 4 errors on the NBC

      Bank 4 MCEs are logged and reported only on the node base core
      (NBC) in a socket. Refer to the D18F3x44[NbMcaToMstCpuEn] field
      in Fam10h and later BKDGs. The node base core (NBC) is the
      lowest numbered core in the node.

      This patch ensures that we inject the error on the NBC for bank
      4 errors. Otherwise, triggering #MC or APIC interrupts on a core
      which is not the NBC would not have any effect on the system,
      i.e. we would not see any relevant output on kernel logs for the
      error we just injected.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      [ Cleanup comments. ]
      [ Add a missing dependency on AMD_NB caught by Randy Dunlap. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Acked-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443190851-2172-4-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444641762-9437-5-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a1300e50529795cd605da6a015d4944a18921db0
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Oct 12 11:22:39 2015 +0200

      x86/ras/mce_amd_inj: Trigger deferred and thresholding errors interrupts

      Add the capability to trigger deferred error interrupts and
      threshold interrupts in order to test the APIC interrupt handler
      functionality for these type of errors.

      Update README section about the same too.

      Reported by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      [ Cleanup comments. ]
      [ Include asm/irq_vectors.h directly so that misc randbuilds don't fail. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443190851-2172-3-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444641762-9437-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 85c9306d44f757d2fb3b0e3e399080a025315c7f
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Oct 12 11:22:38 2015 +0200

      x86/ras/mce_amd_inj: Return early on invalid input

      Invalid inputs such as these are currently reported in dmesg as
      failing:

        $> echo sweet > flags
        [  122.079139] flags_write: Invalid flags value: et

      even though the 'flags' attribute has been updated correctly:

        $> cat flags
        sw

      This is because userspace keeps writing the remaining buffer
      until it encounters an error.

      However, the input as a whole is wrong and we should not be
      writing anything to the file. Therefore, correct flags_write()
      to return -EINVAL immediately on bad input strings.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443190851-2172-2-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444641762-9437-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1c8a47df36d72ace8cf78eb6c228aa0f8027d3c2
  Author: Miklos Szeredi <miklos@xxxxxxxxxx>
  Date:   Mon Oct 12 15:56:20 2015 +0200

      ovl: fix open in stacked overlay

      If two overlayfs filesystems are stacked on top of each other, then we 
need
      recursion in ovl_d_select_inode().

      I guess d_backing_inode() is supposed to do that.  But currently it 
doesn't
      and that functionality is open coded in vfs_open().  This is now copied
      into ovl_d_select_inode() to fix this regression.

      Reported-by: Alban Crequy <alban.crequy@xxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Fixes: 4bacc9c9234c ("overlayfs: Make f_path always point to the 
overlay...")
      Cc: David Howells <dhowells@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2+

  commit ab79efab0a0ba01a74df782eb7fa44b044dae8b5
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 18 11:45:22 2015 +0100

      ovl: fix dentry reference leak

      In ovl_copy_up_locked(), newdentry is leaked if the function exits through
      out_cleanup as this just to out after calling ovl_cleanup() - which 
doesn't
      actually release the ref on newdentry.

      The out_cleanup segment should instead exit through out2 as certainly
      newdentry leaks - and possibly upper does also, though this isn't caught
      given the catch of newdentry.

      Without this fix, something like the following is seen:

        BUG: Dentry ffff880023e9eb20{i=f861,n=#ffff880023e82d90} still in use 
(1) [unmount of tmpfs tmpfs]
        BUG: Dentry ffff880023ece640{i=0,n=bigfile}  still in use (1) [unmount 
of tmpfs tmpfs]

      when unmounting the upper layer after an error occurred in copyup.

      An error can be induced by creating a big file in a lower layer with
      something like:

        dd if=/dev/zero of=/lower/a/bigfile bs=65536 count=1 seek=$((0xf000))

      to create a large file (4.1G).  Overlay an upper layer that is too small
      (on tmpfs might do) and then induce a copy up by opening it writably.

      Reported-by: Ulrich Obergfell <uobergfe@xxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.18+

  commit 0480334fa60488d12ae101a02d7d9e1a3d03d7dd
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 18 11:45:12 2015 +0100

      ovl: use O_LARGEFILE in ovl_copy_up()

      Open the lower file with O_LARGEFILE in ovl_copy_up().

      Pass O_LARGEFILE unconditionally in ovl_copy_up_data() as it's purely for
      catching 32-bit userspace dealing with a file large enough that it'll be
      mishandled if the application isn't aware that there might be an integer
      overflow.  Inside the kernel, there shouldn't be any problems.

      Reported-by: Ulrich Obergfell <uobergfe@xxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Miklos Szeredi <miklos@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.18+

  commit 0f96a99dab366333439e110d6ad253bc7c557c09
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Wed Sep 30 23:01:56 2015 +0900

      efi: Add "efi_fake_mem" boot option

      This patch introduces new boot option named "efi_fake_mem".
      By specifying this parameter, you can add arbitrary attribute
      to specific memory range.
      This is useful for debugging of Address Range Mirroring feature.

      For example, if "efi_fake_mem=2G@4G:0x10000,2G@0x10a0000000:0x10000"
      is specified, the original (firmware provided) EFI memmap will be
      updated so that the specified memory regions have
      EFI_MEMORY_MORE_RELIABLE attribute (0x10000):

       <original>
         efi: mem36: [Conventional Memory|  |  |  |  |  |   |WB|WT|WC|UC] 
range=[0x0000000100000000-0x00000020a0000000) (129536MB)

       <updated>
         efi: mem36: [Conventional Memory|  |MR|  |  |  |   |WB|WT|WC|UC] 
range=[0x0000000100000000-0x0000000180000000) (2048MB)
         efi: mem37: [Conventional Memory|  |  |  |  |  |   |WB|WT|WC|UC] 
range=[0x0000000180000000-0x00000010a0000000) (61952MB)
         efi: mem38: [Conventional Memory|  |MR|  |  |  |   |WB|WT|WC|UC] 
range=[0x00000010a0000000-0x0000001120000000) (2048MB)
         efi: mem39: [Conventional Memory|  |  |  |  |  |   |WB|WT|WC|UC] 
range=[0x0000001120000000-0x00000020a0000000) (63488MB)

      And you will find that the following message is output:

         efi: Memory: 4096M/131455M mirrored memory

      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Xishi Qiu <qiuxishi@xxxxxxxxxx>
      Cc: Kamezawa Hiroyuki <kamezawa.hiroyu@xxxxxxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 0bbea1ce98ed44779736ecc54ca9cdbca2b95544
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Wed Sep 30 19:20:00 2015 +0900

      x86/efi: Rename print_efi_memmap() to efi_print_memmap()

      This patch renames print_efi_memmap() to efi_print_memmap() and
      make it global function so that we can invoke it outside of
      arch/x86/platform/efi/efi.c

      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Xishi Qiu <qiuxishi@xxxxxxxxxx>
      Cc: Kamezawa Hiroyuki <kamezawa.hiroyu@xxxxxxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 9ac4d5ab3e7ae6f485501cb6bf3965da34ac1bac
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 01:44:16 2015 +0100

      efi: Auto-load the efi-pstore module

      efi-pstore should be auto-loaded on EFI systems, same as efivars.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Lee, Chun-Yi <jlee@xxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit a1041713349d0b823b492d7b4ea4325d0b5666db
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Wed Sep 23 07:29:34 2015 -0700

      efi: Introduce EFI_NX_PE_DATA bit and set it from properties table

      UEFI v2.5 introduces a runtime memory protection feature that splits
      PE/COFF runtime images into separate code and data regions. Since this
      may require special handling by the OS, allocate a EFI_xxx bit to
      keep track of whether this feature is currently active or not.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit bf924863c9445174c6e118f723dc477e2b6ccc7e
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Wed Sep 9 10:08:15 2015 +0200

      efi: Add support for UEFIv2.5 Properties table

      Version 2.5 of the UEFI spec introduces a new configuration table
      called the 'EFI Properties table'. Currently, it is only used to
      convey whether the Memory Protection feature is enabled, which splits
      PE/COFF images into separate code and data memory regions.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Acked-by: Dave Young <dyoung@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 8be4432eb629a2762bad9173d6b06e6ea9c0dfcb
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Thu Aug 27 02:11:19 2015 +0900

      efi: Add EFI_MEMORY_MORE_RELIABLE support to efi_md_typeattr_format()

      UEFI spec 2.5 introduces new Memory Attribute Definition named
      EFI_MEMORY_MORE_RELIABLE. This patch adds this new attribute
      support to efi_md_typeattr_format().

      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Xishi Qiu <qiuxishi@xxxxxxxxxx>
      Cc: KAMEZAWA Hiroyuki <kamezawa.hiroyu@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit ae2ee627dc87a70910de91b791b3cd0e9c6facdd
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Tue Aug 25 16:32:55 2015 +0100

      efifb: Add support for 64-bit frame buffer addresses

      The EFI Graphics Output Protocol uses 64-bit frame buffer addresses
      but these get truncated to 32-bit by the EFI boot stub when storing
      the address in the 'lfb_base' field of 'struct screen_info'.

      Add a 'ext_lfb_base' field for the upper 32-bits of the frame buffer
      address and set VIDEO_TYPE_CAPABILITY_64BIT_BASE when the field is
      useable.

      It turns out that the reason no one has required this support so far
      is that there's actually code in tianocore to "downgrade" PCI
      resources that have option ROMs and 64-bit BARS from 64-bit to 32-bit
      to cope with legacy option ROMs that can't handle 64-bit addresses.
      The upshot is that basically all GOP devices in the wild use a 32-bit
      frame buffer address.

      Still, it is possible to build firmware that uses a full 64-bit GOP
      frame buffer address. Chad did, which led to him reporting this issue.

      Add support in anticipation of GOP devices using 64-bit addresses more
      widely, and so that efifb works out of the box when that happens.

      Reported-by: Chad Page <chad.page@xxxxxxxx>
      Cc: Pete Hawkins <pete.hawkins@xxxxxxxx>
      Acked-by: Peter Jones <pjones@xxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 7968c0e338085eba0ee2f0e0b0d833057a966679
  Author: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
  Date:   Wed Aug 26 14:24:58 2015 +0100

      efi/arm64: Clean up efi_get_fdt_params() interface

      As we now have a common debug infrastructure between core and arm64 efi,
      drop the bit of the interface passing verbose output flags around.

      Signed-off-by: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit c9494dc818755f2dd934c93faa933317fae51594
  Author: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
  Date:   Wed Aug 26 14:24:57 2015 +0100

      arm64: Use core efi=debug instead of uefi_debug command line parameter

      Now that we have an efi=debug command line option in the core code, use
      this instead of the arm64-specific uefi_debug option.

      Signed-off-by: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 12dd00e83fb83fa41dcc965cdd1e1627494348cb
  Author: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
  Date:   Wed Aug 26 14:24:56 2015 +0100

      efi/x86: Move efi=debug option parsing to core

      fed6cefe3b6e ("x86/efi: Add a "debug" option to the efi= cmdline")
      adds the DBG flag, but does so for x86 only. Move this early param
      parsing to core code.

      Signed-off-by: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit 18aefbc5cc075617b00ffefba70029541e18fd1a
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Tue Aug 25 19:00:48 2015 -0400

      drivers/firmware: Make efi/esrt.c driver explicitly non-modular

      The Kconfig for this driver is currently hidden with:

      config EFI_ESRT
              bool

      ...meaning that it currently is not being built as a module by anyone.
      Lets remove the modular code that is essentially orphaned, so that
      when reading the driver there is no doubt it is builtin-only.

      Since module_init translates to device_initcall in the non-modular
      case, the init ordering remains unchanged with this commit.

      We leave some tags like MODULE_AUTHOR for documentation purposes.

      We don't replace module.h with init.h since the file already has that.

      Cc: Peter Jones <pjones@xxxxxxxxxx>
      Cc: linux-efi@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>

  commit cdbcd239e2e264dc3ef7bc7865bcb8ec0023876f
  Merge: 6e06780 7e0abcd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 12 14:52:34 2015 +0200

      Merge branch 'x86/ras' into ras/core, to pick up changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0fa28877b26641cca56b607ccec1fcbda7ae09c6
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Oct 9 14:53:54 2015 +0200

      net: HNS: fix MDIO dependencies

      The newly introduced HNS_MDIO Kconfig symbol selects 'MDIO', but
      that is the wrong symbol as the code used by this driver is
      provided by PHYLIB rather than the MDIO driver. Also, there is
      no need to make this driver user selectable, because it is already
      selected by all drivers that need it.

      This changes the Kconfig file to select the correct library, and
      to make the option silent.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 5b904d39406 ("net: add Hisilicon Network Subsystem MDIO support")
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c577e59ed7f55be398a2a730447a7f37d72eaa57
  Author: Daniel Pieczko <dpieczko@xxxxxxxxxxxxxx>
  Date:   Fri Oct 9 10:40:35 2015 +0100

      sfc: fully reset if MC_REBOOT event received without warm_boot_count 
increment

      On EF10, MC_CMD_VPORT_RECONFIGURE can cause a CODE_MC_REBOOT event
      to be sent to a function without incrementing the (adapter-wide)
      warm_boot_count.  In this case, the reboot is not detected by the
      loop on efx_mcdi_poll_reboot(), so prepare for recovery from an MC
      reboot anyway.  When this codepath is run, the MC has always just
      rebooted, so this recovery is valid.

      The loop on efx_mcdi_poll_reboot() is still required for other MC
      reboot cases, so that actions in response to an MC reboot are
      performed, such as clearing locally calculated statistics.
      Siena NICs are unaffected by this change as the above scenario
      does not apply.

      Signed-off-by: Shradha Shah <sshah@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d5404915a92de00cc2a6bd1d1b7f923b70effbd1
  Merge: 7533ce3 d0cf57f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 12 05:20:28 2015 -0700

      Merge branch 'switchdev_ageing_time'

      Scott Feldman says:

      ====================
      switchdev: push bridge ageing_time attribute down

      Push bridge-level attributes down to switchdev drivers.  This patchset
      adds the infrastructure and then pushes, as an example, ageing_time 
attribute
      down from bridge to switchdev (rocker) driver.  Add some range-checking
      for ageing_time.

      RTNETLINK answers: Numerical result out of range

      Up until now, switchdev attrs where port-level attrs, so the netdev used 
in
      switchdev_attr_set() would be a switch port or bond of switch ports.  With
      bridge-level attrs, the netdev passed to switchdev_attr_set() is the 
bridge
      netdev.  The same recusive algo is used to visit the leaves of the stacked
      drivers to set the attr, it's just in this case we start one layer higher 
in
      the stack.  One note is not all ports in the bridge may support setting a
      bridge-level attribute, so rather than failing the entire set, we'll skip 
over
      those ports returning -EOPNOTSUPP.

      v2->v3: Per Jiri review: push only ageing_time attr down at this time, and
      don't pass raw bridge IFLA_BR_* values; rather use new switchdev attr ID 
for
      ageing_time.

      v1->v2: rebase w/ net-next
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d0cf57f9dddb50ea404bf747a3c6b22b29f82b9a
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Thu Oct 8 19:23:20 2015 -0700

      rocker: handle setting bridge ageing_time

      The FDB cleanup timer will get rescheduled to re-evaluate FDB entries
      based on new ageing_time.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c62987bbd8a1a1664f99e89e3959339350a6131e
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Thu Oct 8 19:23:19 2015 -0700

      bridge: push bridge setting ageing_time down to switchdev

      Use SWITCHDEV_F_SKIP_EOPNOTSUPP to skip over ports in bridge that don't
      support setting ageing_time (or setting bridge attrs in general).

      If push fails, don't update ageing_time in bridge and return err to user.

      If push succeeds, update ageing_time in bridge and run gc_timer now to
      recalabrate when to run gc_timer next, based on new ageing_time.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 464314ea6c119ebc22ee78453e63814453c31611
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Thu Oct 8 19:23:18 2015 -0700

      switchdev: skip over ports returning -EOPNOTSUPP when recursing ports

      This allows us to recurse over all the ports, skipping over unsupporting
      ports.  Without the change, the recursion would stop at first unsupported
      port.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f55ac58ae64cbb0315382e738681fe31837dcac0
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Thu Oct 8 19:23:17 2015 -0700

      switchdev: add bridge ageing_time attribute

      Setting the stage to push bridge-level attributes down to port driver so
      hardware can be programmed accordingly.  Bridge-level attribute example is
      ageing_time.  This is a per-bridge attribute, not a per-bridge-port attr.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7533ce3055bbe9577276a847125b156c44a5bbce
  Author: Richard Sailer <richard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 02:41:37 2015 +0200

      tcp: change type of alive from int to bool

      The alive parameter of tcp_orphan_retries, indicates
      whether the connection is assumed alive or not.
      In the function and all places calling it is used as a boolean value.

      Therefore this changes the type of alive to bool in the function
      definition and all calling locations.

      Since tcp_orphan_tries is a tcp_timer.c local function no change in
      any other file or header is necessary.

      Signed-off-by: Richard Sailer <richard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3741873b4f73b572b8f8835e6bd114e08316a160
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 10:38:52 2015 -0700

      bridge: allow adding of fdb entries pointing to the bridge device

      This patch enables adding of fdb entries pointing to the bridge device.
      This can be used to propagate mac address of vlan interfaces
      configured on top of the vlan filtering bridge.

      Before:
      $bridge fdb add 44:38:39:00:27:9f dev bridge
      RTNETLINK answers: Invalid argument

      After:
      $bridge fdb add 44:38:39:00:27:9f dev bridge

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cb50ce324e72bfd5d191d0a834a0ead1a08666b7
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Mon Oct 12 12:10:53 2015 +0100

      arm64: Fix missing #include in hw_breakpoint.c

      A prior commit used to detect the hw breakpoint ABI behaviour based on
      the target state missed the asm/compat.h include and the build fails
      with !CONFIG_COMPAT.

      Fixes: 8f48c0629049 ("arm64: hw_breakpoint: use target state to determine 
ABI behaviour")
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 6035519fcf5aa17084b41790cdc584d881d82c03
  Author: John Stultz <john.stultz@xxxxxxxxxx>
  Date:   Mon Oct 5 18:16:57 2015 -0700

      timers, kselftest: Add 'adjtick' test to validate adjtimex() tick 
adjustments

      Recently a kernel side NTP bug was fixed via the following commit:

        2619d7e9c92d ("time: Fix timekeeping_freqadjust()'s incorrect use of 
abs() instead of abs64()")

      When the bug was reported it was difficult to detect, except by
      tweaking the adjtimex tick value, and noticing how quickly the
      adjustment took:

        https://lkml.org/lkml/2015/9/1/488

      Thus this patch introduces a new test which manipulates the
      adjtimex tick value and validates that the results are what we
      expect.

      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
      Cc: Nuno Gonçalves <nunojpg@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Prarit Bhargava <prarit@xxxxxxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444094217-20258-1-git-send-email-john.stultz@xxxxxxxxxx
      [ Tidied up the code and the changelog a bit. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b9f27c0f4f7db9e5a4ba59228442a75d3177470c
  Merge: 9fc4468 25cb62b
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Oct 12 09:51:18 2015 +0200

      Merge tag 'v4.3-rc5' into timers/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9babcd7929bc8967ae3bb6093f603b93c2f9958f
  Author: Daniel Bristot de Oliveira <bristot@xxxxxxxxxx>
  Date:   Thu Oct 8 15:36:06 2015 -0300

      sched, tracing: Stop/start critical timings around the idle=poll idle loop

      When using idle=poll, the preemptoff tracer is always showing
      the idle task as the culprit for long latencies. That happens
      because critical timings are not stopped before idle loop. This
      patch stops critical timings before entering the idle loop,
      starting it again after the idle loop.

      This problem does not affect the irqsoff tracer because
      interruptions are enabled before entering the idle loop.

      Signed-off-by: Daniel Bristot de Oliveira <bristot@xxxxxxxxxx>
      Reviewed-by: Luis Claudio R. Goncalves <lgoncalv@xxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/10fc3705874aef11dbe152a068b591a7be1899b4.1444314899.git.bristot@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e9c40d257fdd58c5cc97d3fe3aa141dd23ee5e9d
  Author: Minfei Huang <mnfhuang@xxxxxxxxx>
  Date:   Tue Oct 6 02:35:55 2015 +0800

      x86/kexec: Remove obsolete 'in_crash_kexec' flag

      Previously, UV NMI used the 'in_crash_kexec' flag to determine whether
      we are in a kdump kernel or not:

        5edd19af18a36a4 ("x86, UV: Make kdump avoid stack dumps")

      But this flags was removed in the following commit:

        9c48f1c629ecfa1 ("x86, nmi: Wire up NMI handlers to new routines")

      Since it isn't used any more, remove it.

      Signed-off-by: Minfei Huang <mnfhuang@xxxxxxxxx>
      Acked-by: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: cpw@xxxxxxx
      Cc: kexec@xxxxxxxxxxxxxxxxxxx
      Cc: mhuang@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444070155-17934-1-git-send-email-mhuang@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7b98040a7718663903bb25c06c7aed9801abbd9d
  Merge: 621bd0f 25d2958
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Mon Oct 12 13:59:04 2015 +1000

      Merge branch 'linux-4.3' of 
git://anongit.freedesktop.org/git/nouveau/linux-2.6 into drm-fixes

      Nothing too crazy here, a couple of regression fixes + runpm/fbcon
      race fix.

      * 'linux-4.3' of git://anongit.freedesktop.org/git/nouveau/linux-2.6:
        drm/nouveau/bios: fix OF loading
        drm/nouveau/fbcon: take runpm reference when userspace has an open fd
        drm/nouveau/nouveau: Disable AGP for SiS 761
        drm/nouveau/display: allow up to 16k width/height for fermi+
        drm/nouveau/bios: translate devinit pri/sec i2c bus to internal 
identifiers

  commit 25d295882a1adfcdaaad85369289677b87c7c8f0
  Author: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
  Date:   Thu Oct 1 23:41:21 2015 -0400

      drm/nouveau/bios: fix OF loading

      Currently OF bios load fails for a few reasons:
       - checksum failure
       - bios size too small
       - no PCIR header
       - bios length not a multiple of 4

      In this change, we resolve all of the above by ignoring any checksum
      failures (since OF VBIOS tends not to have a checksum), and faking the
      PCIR data when loading from OF.

      Signed-off-by: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit f231976c2e8964ceaa9250e57d27c35ff03825c2
  Author: Ben Skeggs <bskeggs@xxxxxxxxxx>
  Date:   Fri Oct 2 14:03:19 2015 +1000

      drm/nouveau/fbcon: take runpm reference when userspace has an open fd

      We need to do this in order to prevent accesses to the device while it's
      powered down.  Userspace may have an mmap of the fb, and there's no good
      way (that I know of) to prevent it from touching the device otherwise.

      This fixes some nasty races between runpm and plymouth on some systems,
      which result in the GPU getting very upset and hanging the boot.

      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 953132b56a43c707979df8da7bfd00931bdfe695
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 21:19:57 2015 +0200

      drm/nouveau/nouveau: Disable AGP for SiS 761

      SiS 761 chipset does not support AGP cards but has AGP capability (for
      the onboard video). At least PC Chips A31G board using this chipset has
      an AGP-like AGPro slot that's wired to the PCI bus. Enabling AGP will
      fail (GPU lockup and software fbcon, X11 hangs).

      Add support for matching just the host bridge in nvkm_device_agp_quirks
      and add entry for SiS 761 with mode 0 (AGP disabled).

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit 5102ec3e99e271b3934a1e00bb52a2545eb7dbc5
  Author: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
  Date:   Thu Sep 17 22:31:20 2015 -0400

      drm/nouveau/display: allow up to 16k width/height for fermi+

      Signed-off-by: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit 2239b76b0b1782160d5ca91ea1653dd67aa37e8a
  Author: Ben Skeggs <bskeggs@xxxxxxxxxx>
  Date:   Tue Sep 29 12:08:35 2015 +1000

      drm/nouveau/bios: translate devinit pri/sec i2c bus to internal 
identifiers

      fdo#92013.

      Regression from "i2c: transition pad/ports away from being based on 
nvkm_object"

      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit 9fc4468d546b6eb55b0aa5b04b0c36238ebf57e7
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 09:45:30 2015 +0200

      timers: Use __fls in apply_slack()

      In apply_slack(), find_last_bit() is applied to a bitmask consisting
      of precisely BITS_PER_LONG bits. Since mask is non-zero, we might as
      well eliminate the function call and use __fls() directly. On x86_64,
      this shaves 23 bytes of the only caller, mod_timer().

      This also gets rid of Coverity CID 1192106, but that is a false
      positive: Coverity is not aware that mask != 0 implies that
      find_last_bit will not return BITS_PER_LONG.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443771931-6284-1-git-send-email-linux@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit cfed432d7f4114e16e0163bcfe65e96f0c304493
  Author: Guillaume Gomez <guillaume1.gomez@xxxxxxxxx>
  Date:   Wed Sep 23 13:19:19 2015 +0200

      clocksource: Remove return statement from void functions

      Signed-off-by: Guillaume Gomez <guillaume1.gomez@xxxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/CAAOQCfSDgmqSWDBsetau%2ByF8x0%2BDagCF_pfFw0p5xH_BKkKEog@xxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7e0abcd6b7ec1452bf4a850fccbae44043c05806
  Author: Gabriel Laskar <gabriel@xxxxxxxxxxxx>
  Date:   Tue Oct 6 16:27:35 2015 +0200

      x86/mce: Include linux/ioctl.h in uapi mce header

      asm/ioctls.h contains definition for termios, not just the _IO* macros.

      This error was found with a tool in development used to generate
      automated pretty-printing functions for ioctl decoding in strace.

      Signed-off-by: Gabriel Laskar <gabriel@xxxxxxxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444141657-14898-2-git-send-email-gabriel@xxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 4faefda97bc1be6ca909ba0fd0927ea78f37f67e
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:24:45 2015 +0300

      x86/io_apic: Make eoi_ioapic_pin() static

      We have to define internally used function as static, otherwise the 
following
      warning will be generated:

      arch/x86/kernel/apic/io_apic.c:532:6: warning: no previous prototype for 
'eoi_ioapic_pin' [-Wmissing-prototypes]

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Reviewed-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444400685-98611-1-git-send-email-andriy.shevchenko@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d1f0f6c72c14af8a27a6549e0623f7cd61805e83
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:25:41 2015 +0300

      x86/intel-mid: Make intel_mid_ops static

      The following warning is issued on unfixed code.

      arch/x86/platform/intel-mid/intel-mid.c:64:22: warning: symbol 
'intel_mid_ops' was not declared. Should it be static?

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444400741-98669-1-git-send-email-andriy.shevchenko@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 25cb62b76430a91cc6195f902e61c2cb84ade622
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 11:09:45 2015 -0700

      Linux 4.3-rc5

  commit 9a78f9c3c68c4d57f602b4100e766945d3362f4d
  Merge: 7cbbab0 95913d9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:24:32 2015 -0700

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fix from Thomas Gleixner:
       "Fix a long standing state race in finish_task_switch()"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched/core: Fix TASK_DEAD race in finish_task_switch()

  commit 7cbbab00cbbd3d36288f4d3634eb45d66d78d218
  Merge: a145164 00e6fa5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:23:52 2015 -0700

      Merge branch 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf fix from Thomas Glexiner:
       "Fix build breakage on powerpc in perf tools"

      * 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        perf tools: Fix build break on powerpc due to sample_reg_masks

  commit a145164ba86543604c54d5c1079a18d5eaabbc1b
  Merge: e3d6e0e 825fcfc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:23:00 2015 -0700

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull maintainer email update from Thomas Gleixner:
       "Change Matt Fleming's email address in the maintainers file"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        MAINTAINERS: Change Matt Fleming's email address

  commit e3d6e0e70139297977546f7af719396ebc4fe181
  Merge: 5a433f7 10abc7d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:16:59 2015 -0700

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fixes from Thomas Gleixner:
       "Three trivial commits:

         - Fix a kerneldoc regression

         - Export handle_bad_irq to unbreak a driver in next

         - Add an accessor for the of_node field so refactoring in next does
           not depend on merge ordering"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqdomain: Add an accessor for the of_node field
        genirq: Fix handle_bad_irq kerneldoc comment
        genirq: Export handle_bad_irq

  commit 5a433f7a6bc49b5745d5ccd4f1c84f57ab7013a9
  Merge: f24fe98 15e3d5a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:02:30 2015 -0700

      Merge tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

      Pull SCSI fixes from James Bottomley:
       "This is a set of three bug fixes, two of which are regressions from
        recent updates (the 3ware one from 4.1 and the device handler fixes
        from 4.2)"

      * tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:
        3w-9xxx: don't unmap bounce buffered commands
        scsi_dh: Use the correct module name when loading device handler
        libiscsi: Fix iscsi_check_transport_timeouts possible infinite loop

  commit f24fe98df8448d60867d2b81a1a67722a6568b19
  Merge: 4a06c8a a452744
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 11 09:35:51 2015 -0700

      Merge tag 'md/4.3-rc4-fix' of git://neil.brown.name/md

      Pull md bugfix from Neil Brown:
       "One bug fix for raid1/raid10.

        Very careless bug earler in 4.3-rc, now fixed :-)"

      * tag 'md/4.3-rc4-fix' of git://neil.brown.name/md:
        crash in md-raid1 and md-raid10 due to incorrect list manipulation

  commit b94e22805a2224061bb263a82b72e09544a5fbb3
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 13:10:54 2015 +0200

      iio: mxs-lradc: Fix temperature offset

      0° Kelvin is actually â??273.15°C, not -272.15°C. Fix the temperature 
offset.
      Also improve the comment explaining the calculation.

      Reported-by: Janusz Użycki <j.uzycki@xxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Acked-by: Stefan Wahren <stefan.wahren@xxxxxxxx>
      Acked-by: Marek Vasut <marex@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit 6bcfd7f8c28887a4298bc4386b02cb90c9fa0c13
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 11:16:48 2015 -0700

      tcp: fix RFS vs lockless listeners

      Before recent TCP listener patches, we were updating listener
      sk->sk_rxhash before the cloning of master socket.

      children sk_rxhash was therefore correct after the normal 3WHS.

      But with lockless listener, we no longer dirty/change listener sk_rxhash
      as it would be racy.

      We need to correctly update the child sk_rxhash, otherwise first data
      packet wont hit correct cpu if RFS is used.

      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Willem de Bruijn <willemb@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Acked-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9ef2e965e55481a52d6d91ce61977a27836268d3
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:19:53 2015 +0200

      ipv6: drop frames with attached skb->sk in forwarding

      This is a clone of commit 2ab957492d13b ("ip_forward: Drop frames with
      attached skb->sk") for ipv6.

      This commit has exactly the same reasons as the above mentioned commit,
      namely to prevent panics during netfilter reload or a misconfigured stack.

      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d9e4ce65b27694b0b70ff4d1cbbb740195fd916b
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:19:39 2015 +0200

      ipv6: gre: setup default multicast routes over PtP links

      GRE point-to-point interfaces should also support ipv6 multicast. Setting
      up default multicast routes on interface creation was forgotten. Add it.

      Bugzilla: <https://bugzilla.kernel.org/show_bug.cgi?id=103231>
      Cc: Julien Muchembled <jm@xxxxxxxxxxx>
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Nicolas Dumazet <ndumazet@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5010ea59e1b986d89023c0552fa38e32b519a617
  Merge: 6e86ac1 8057b3e
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 11 05:28:57 2015 -0700

      Merge branch 'dsa-next'

      Vivien Didelot says:

      ====================
      net: dsa: push switchdev prepare phase in FDB ops

      This patchset pushes the switchdev prepare phase for the FDB add and del
      operations down to the DSA drivers. Currently only mv88e6xxx is affected.

      Since the dump requires a bit of refactoring in the driver, it'll come in 
a
      future patchset.

      Changes in v2:
       * forward declare switchdev structs instead of fixing the dsa.h include.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8057b3e7a1cfb4da61717ba609e1ea642bb82f9b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 11:35:14 2015 -0400

      net: dsa: use switchdev obj in port_fdb_del

      For consistency with the FDB add operation, propagate the
      switchdev_obj_port_fdb structure in the DSA drivers.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f36faf26943f5f5fc1d1a7be6ce252d2ff25e1a
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 11:35:13 2015 -0400

      net: dsa: push prepare phase in port_fdb_add

      Now that the prepare phase is pushed down to the DSA drivers, propagate
      it to the port_fdb_add function.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 146a32067b3fde1424d737d7fb333eb0951e6419
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 11:35:12 2015 -0400

      net: dsa: add port_fdb_prepare

      Push the prepare phase for FDB operations down to the DSA drivers, with
      a new port_fdb_prepare function. Currently only mv88e6xxx is affected.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e86ac120e144154d345ebb5839d50b6f713149b
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 11:10:19 2015 -0400

      net: encx24j600: Fix typos in Kconfig

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7bcfeead48b6f920007ee41bc70a83b58c5ba396
  Merge: 8fae307 f640ee9
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 11 05:15:30 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-10-08

      Here's another set of Bluetooth & 802.15.4 patches for the 4.4 kernel.

      802.15.4:
       - Many improvements & fixes to the mrf24j40 driver
       - Fixes and cleanups to nl802154, mac802154 & ieee802154 code

      Bluetooth:
       - New chipset support in btmrvl driver
       - Fixes & cleanups to btbcm, btmrvl, bpa10x & btintel drivers
       - Support for vendor specific diagnostic data through common API
       - Cleanups to the 6lowpan code
       - New events & message types for monitor channel

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9468e8dc87e31f807fae04aae70380a461b95c6
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Thu Oct 8 16:19:01 2015 +0300

      bnx2x: Prevent UDP 4-tuple configurations on older adapters

      Configuring 4-tuple RSS hsahing for UDP
      [E.g., by using `ethtool -N <interface> rx-flow-hash udp4 sdfn']
      on a 57710/57711 adapter would cause it to assert as HW does not
      support such a configuration.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5edc11ab878a78eae45fb22a59a9a5554e305067
  Merge: 6ac644a bee1f75
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 11 05:08:14 2015 -0700

      Merge branch 'mlxsw-fixes'

      Jiri Pirko says:

      ====================
      mlxsw: couple of fixes

      Just a couple of small fixes.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bee1f753bfcb19660d8ad713b9dd3939630854b6
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:17:38 2015 +0200

      mlxsw: Fix bug in __mlxsw_item_bit_array_offset

      When calculating the shift needed in order to access a bit array element
      in a byte, we should multiply the index by the element size and not
      assume it is fixed at 2-bits.

      Fixes: 93c1edb27f9e ("mlxsw: Introduce Mellanox switch driver core")
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4b0c2541cbf223abd38b235146e30a3d207d3bfe
  Author: Elad Raz <eladr@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:17:37 2015 +0200

      mlxsw: switchx2: changing order of exit fallbacks

      Fixes: 31557f0f9755 ("mlxsw: Introduce Mellanox SwitchX-2 ASIC support")
      Signed-off-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fae307c8fe9789ff1f4161dcb2db0d689069448
  Author: wangweidong <wangweidong1@xxxxxxxxxx>
  Date:   Thu Oct 8 18:03:47 2015 +0800

      BNX2: fix a Null Pointer for stats_blk

      we have two processes to do:
      P1#: ifconfig eth0 down; which will call bnx2_close, then will
      , and set Null to stats_blk
      P2#: ifconfig eth0; which will call bnx2_get_stats64, it will
      use stats_blk.
      In one case:
          --P1#--                   --P2#--
                                    stats_blk(no null)
          bnx2_free_mem
          ->bp->stats_blk = NULL
                                    GET_64BIT_NET_STATS

      then it will cause 'NULL Pointer' Problem.
      it is as well with 'ethtool -S ethx'.

      Allocate the statistics block at probe time so that this problem is
      impossible

      Signed-off-by: Wang Weidong <wangweidong1@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e446f9dfe17bbaa76a1fe22912636f38be1e1af8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 8 05:01:55 2015 -0700

      net: synack packets can be attached to request sockets

      selinux needs few changes to accommodate fact that SYNACK messages
      can be attached to a request socket, lacking sk_security pointer

      (Only syncookies are still attached to a TCP_LISTEN socket)

      Adds a new sk_listener() helper, and use it in selinux and sch_fq

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported by: kernel test robot <ying.huang@xxxxxxxxxxxxxxx>
      Cc: Paul Moore <paul@xxxxxxxxxxxxxx>
      Cc: Stephen Smalley <sds@xxxxxxxxxxxxx>
      Cc: Eric Paris <eparis@xxxxxxxxxxxxxx>
      Acked-by: Paul Moore <paul@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21d11bd6f0f15c9c782d1f09557bb71f582a3f53
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 8 10:08:23 2015 +0530

      cxgb4: Enhance driver to update FW, when FW is too old

      t4_check_fw_version() can return several error codes (-EINVAL, -EBUSY,
      -EAGAIN). The present code sets the adapter state to UNINIT only if its
      an EFAULT. In all the error cases set the adapter to uninitialized state.

      In t4_check_fw_version() if call to t4_get_fw_version() fails, repeat the
      operation a few times before returning failure.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ac644a8ae2dabf884a1b01e82e32d96ffe6eee5
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Wed Oct 7 16:47:32 2015 -0700

      sch_hhf: fix return value of hhf_drop()

      Similar to commit c0afd9ce4d6a ("fq_codel: fix return value of 
fq_codel_drop()")
      ->drop() is supposed to return the number of bytes it dropped,
      but hhf_drop () returns the id of the bucket where it drops
      a packet from.

      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Cc: Terry Lam <vtlam@xxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Signed-off-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ff936a04e5f28b7e0455be0e7fa91334f89e4b44
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Wed Oct 7 10:55:41 2015 -0700

      bpf: fix cb access in socket filter programs

      eBPF socket filter programs may see junk in 'u32 cb[5]' area,
      since it could have been used by protocol layers earlier.

      For socket filter programs used in af_packet we need to clean
      20 bytes of skb->cb area if it could be used by the program.
      For programs attached to TCP/UDP sockets we need to save/restore
      these 20 bytes, since it's used by protocol layers.

      Remove SK_RUN_FILTER macro, since it's no longer used.

      Long term we may move this bpf cb area to per-cpu scratch, but that
      requires addition of new 'per-cpu load/store' instructions,
      so not suitable as a short term fix.

      Fixes: d691f9e8d440 ("bpf: allow programs to write to certain skb fields")
      Reported-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9849777d0e27cdd2902805be51da73e7c79578c
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 23:28:58 2015 +0200

      genirq: Add flag to force mask in disable_irq[_nosync]()

      If an irq chip does not implement the irq_disable callback, then we
      use a lazy approach for disabling the interrupt. That means that the
      interrupt is marked disabled, but the interrupt line is not
      immediately masked in the interrupt chip. It only becomes masked if
      the interrupt is raised while it's marked disabled. We use this to avoid
      possibly expensive mask/unmask operations for common case operations.

      Unfortunately there are devices which do not allow the interrupt to be
      disabled easily at the device level. They are forced to use
      disable_irq_nosync(). This can result in taking each interrupt twice.

      Instead of enforcing the non lazy mode on all interrupts of a irq
      chip, provide a settings flag, which can be set by the driver for that
      particular interrupt line.

      Reported-and-tested-by: Duc Dang <dhdang@xxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/alpine.DEB.2.11.1510092348370.6097@nanos

  commit 374a3a3916a70fc6236bc2b8f8ac02548a128a54
  Author: Borislav Petkov <bp@xxxxxxxxx>
  Date:   Fri Oct 9 19:08:59 2015 +0200

      x86/entry/64/compat: Document sysenter_fix_flags's reason for existence

      The code under the label can normally be inline, without the
      jumping back and forth but the latter is an optimization.

      Document that.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Acked-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151009170859.GA24266@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0ce423b6492a02be11662bfaa837dd16945aad3e
  Author: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 23:26:07 2015 +0100

      efi: Use the generic efi.memmap instead of 'memmap'

      Guenter reports that commit:

        7bf793115dd9 ("efi, x86: Rearrange efi_mem_attributes()")

      breaks the IA64 compilation with the following error:

        drivers/built-in.o: In function `efi_mem_attributes': (.text+0xde962): 
undefined reference to `memmap'

      Instead of using the (rather poorly named) global variable
      'memmap' which doesn't exist on IA64, use efi.memmap which
      points to the 'memmap' object on x86 and arm64 and which is NULL
      for IA64.

      The fact that efi.memmap is NULL for IA64 is OK because IA64
      provides its own implementation of efi_mem_attributes().

      Reported-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Jonathan Zhang <zjzhang@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151003222607.GA2682@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fcf8ab690e3decf8335c51fdabea773a3f5ea026
  Merge: 0e841b0 4f64cb6
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Sun Oct 11 10:04:51 2015 +0200

      Merge tag 'gic-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/maz/arm-platforms into irq/core

      GIC updates for Linux 4.4 from Marc Zyngier:

      - Enable basic GICv3 support on 32bit ARM (mostly for running VMs with
        more than 8 virtual CPUs)
      - arm64 changes to deal with firmware limitations that forces a GICv3
        to be used as a GICv2
      - A GICv2m erratum workaround on Applied Micro X-Gene2

  commit 825fcfce81921c9cc4ef801d844793815721e458
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Sat Oct 10 17:22:16 2015 +0100

      MAINTAINERS: Change Matt Fleming's email address

      My Intel email address will soon expire. Replace it with my
      personal address so people still know where to send patches.

      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444494136-10333-1-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4a06c8ac2fb3ef484579ce44f9b809bd310fad48
  Merge: 97d0c93 7219473
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 11:17:45 2015 -0700

      Merge tag 'usb-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

      Pull USB fixes from Greg KH:
       "Here are some small USB and PHY fixes and quirk updates for 4.3-rc5.

        Nothing major here, full details in the shortlog, and all of these
        have been in linux-next for a while"

      * tag 'usb-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:
        usb: Add device quirk for Logitech PTZ cameras
        USB: chaoskey read offset bug
        USB: Add reset-resume quirk for two Plantronics usb headphones.
        usb: renesas_usbhs: Add support for R-Car H3
        usb: renesas_usbhs: fix build warning if 64-bit architecture
        usb: gadget: bdc: fix memory leak
        phy: berlin-sata: Fix module autoload for OF platform driver
        phy: rockchip-usb: power down phy when rockchip phy probe
        phy: qcom-ufs: fix build error when the component is built as a module

  commit 97d0c931c043646abd1f4c5446a8dfcaba162004
  Merge: 91dbc04 0c556271
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 11:09:55 2015 -0700

      Merge tag 'tty-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

      Pull tty/serial driver fixes from Greg KH:
       "Here are a few bug fixes for the tty core that resolve reported
        issues, and some serial driver fixes as well (including the
        much-reported imx driver problem)

        All of these have been in linux-next with no reported problems"

      * tag 'tty-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:
        drivers/tty: require read access for controlling terminal
        serial: 8250: add uart_config entry for PORT_RT2880
        tty: fix data race on tty_buffer.commit
        tty: fix data race in tty_buffer_flush
        tty: fix data race in flush_to_ldisc
        tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
        serial: atmel: fix error path of probe function
        tty: don't leak cdev in tty_cdev_add()
        Revert "serial: imx: remove unbalanced clk_prepare"

  commit 91dbc047e9c1284634ae3570c0382c2288c5548b
  Merge: ef19df6 b1d562a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 11:03:31 2015 -0700

      Merge tag 'staging-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

      Pull staging fixes from Greg KH:
       "Here are two tiny staging tree fixes for 4.3-rc5.

        One fixes the broken speakup subsystem as reported by a user, and the
        other removes an entry in the MAINTAINERS file for a developer that
        doesn't want to be listed anymore"

      * tag 'staging-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
        staging: speakup: fix speakup-r regression
        MAINTAINERS: Remove myself as nvec co-maintainer

  commit ef19df60c9506e7ffe78d6a60048936c4e76a0a2
  Merge: bbecce8 41ada9d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 10:58:27 2015 -0700

      Merge tag 'char-misc-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

      Pull char/misc driver fixes from Greg KH:
       "Here are some small fixes for some misc drivers that resolve some
        reported issues.  All of these have been linux-next for a while"

      * tag 'char-misc-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:
        mcb: Fix error handling in mcb_pci_probe()
        mei: hbm: fix error in state check logic
        nvmem: sunxi: Check for memory allocation failure
        nvmem: core: Fix memory leak in nvmem_cell_write
        nvmem: core: Handle shift bits in-place if cell->nbits is non-zero
        nvmem: core: fix the out-of-range leak in read/write()

  commit bbecce8d764807701f2ff56b440cd5f787b0c844
  Merge: 1d8a12d da11f98
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 10:51:55 2015 -0700

      Merge git://git.linux-mips.org/pub/scm/ralf/upstream-linus

      Pull MIPS fixes from Ralf Baechle:

       - MIPS didn't define the new ioremap_uc.  Defined it as an alias for
         ioremap_uncached.

       - Replace workaround for MIPS16 build issue with a correct one.

      * git://git.linux-mips.org/pub/scm/ralf/upstream-linus:
        MIPS: Define ioremap_uc
        MIPS: UAPI: Ignore __arch_swab{16,32,64} when using MIPS16
        Revert "MIPS: UAPI: Fix unrecognized opcode WSBH/DSBH/DSHD when using 
MIPS16."

  commit 1d8a12d1de9d9d025d66c1b2a580a293cc5050e5
  Merge: daf3761 9d99c71
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 10:31:13 2015 -0700

      Merge branch 'stable/for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/konrad/swiotlb

      Pull swiotlb fixlet from Konrad Rzeszutek Wilk:
       "Enable the SWIOTLB under 32-bit PAE kernels.

        Nowadays most distros enable this due to CONFIG_HYPERVISOR|XEN=y which
        select SWIOTLB.  But for those that are not interested in
        virtualization and wanting to use 32-bit PAE kernels and wanting to
        have working DMA operations - this configures it for them"

      * 'stable/for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/konrad/swiotlb:
        swiotlb: Enable it under x86 PAE

  commit daf3761c9fcde0f4ca64321cbed6c1c86d304193
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 13:44:34 2015 -0400

      namei: results of d_is_negative() should be checked after dentry 
revalidation

      Leandro Awa writes:
       "After switching to version 4.1.6, our parallelized and distributed
        workflows now fail consistently with errors of the form:

        T34: ./regex.c:39:22: error: config.h: No such file or directory

        From our 'git bisect' testing, the following commit appears to be the
        possible cause of the behavior we've been seeing: commit 766c4cbfacd8"

      Al Viro says:
       "What happens is that 766c4cbfacd8 got the things subtly wrong.

        We used to treat d_is_negative() after lookup_fast() as "fall with
        ENOENT".  That was wrong - checking ->d_flags outside of ->d_seq
        protection is unreliable and failing with hard error on what should've
        fallen back to non-RCU pathname resolution is a bug.

        Unfortunately, we'd pulled the test too far up and ran afoul of
        another kind of staleness.  The dentry might have been absolutely
        stable from the RCU point of view (and we might be on UP, etc), but
        stale from the remote fs point of view.  If ->d_revalidate() returns
        "it's actually stale", dentry gets thrown away and the original code
        wouldn't even have looked at its ->d_flags.

        What we need is to check ->d_flags where 766c4cbfacd8 does (prior to
        ->d_seq validation) but only use the result in cases where we do not
        discard this dentry outright"

      Reported-by: Leandro Awa <lawa@xxxxxxxxxx>
      Link: https://bugzilla.kernel.org/show_bug.cgi?id=104911
      Fixes: 766c4cbfacd8 ("namei: d_is_negative() should be checked...")
      Tested-by: Leandro Awa <lawa@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.1+
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
      Acked-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 149fadf2ce82e0f8632fc1fb10a7ba6e0c977ee2
  Merge: 71419b7 670aee3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 18:39:04 2015 -0700

      Merge tag 'pm+acpi-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull power management and ACPI fixes from Rafael Wysocki:
       "These are four fixes for bugs in the devfreq and cpufreq subsystems,
        including two regression fixes (one for a recent regression and one
        for a problem introduced in 4.2).

        Specifics:

         - Two fixes for cpufreq regressions, an acpi-cpufreq driver one
           introduced during the 4.2 cycle when we started to preserve cpufreq
           directories for offline CPUs and a general one introduced recently
           (Srinivas Pandruvada).

         - Two devfreq fixes, one for a double kfree() in an error code path
           and one for a confusing sysfs-related failure (Geliang Tang, Tobias
           Jakobi)"

      * tag 'pm+acpi-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        cpufreq: prevent lockup on reading scaling_available_frequencies
        cpufreq: acpi_cpufreq: prevent crash on reading freqdomain_cpus
        PM / devfreq: fix double kfree
        PM / devfreq: Fix governor_store()

  commit 71419b7b8484531626251d56aa6d48d90e646df1
  Merge: f4ba1cf 7a5692e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 18:01:26 2015 -0700

      Merge branch 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile

      Pull strscpy powerpc fix from Chris Metcalf.

      Fix powerpc big-endian build.

      * 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile:
        arch/powerpc: provide zero_bytemask() for big-endian

  commit f4ba1cf8a40bc9f136f8e050e79a81112bf02ccd
  Merge: fe621fd 601d629
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:56:00 2015 -0700

      Merge tag 'sound-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

      Pull sound fixes from Takashi Iwai:
       "We see various small fixes, but nothing looks too scary, all are small
        gentle bug fixes:

         - Most of changes are for ASoC codecs: Realtek, SGTL5000, TAS2552,
           TLV320, WM8962

         - A couple of dwc and imx-ssi fixes

         - Usual oneliner HD-audio quirks

         - An old emux synth code fix"

      * tag 'sound-4.3-rc5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:
        MAINTAINERS: Remove wm97xx entry
        ASoC: tas2552: fix dBscale-min declaration
        ALSA: synth: Fix conflicting OSS device registration on AWE32
        ALSA: hda - Disable power_save_node for IDT 92HD73xx chips
        ALSA: hda - Apply SPDIF pin ctl to MacBookPro 12,1
        ALSA: hda: Add dock support for ThinkPad T550
        ASoC: dwc: fix dma stop transferring issue
        ASoC: dwc: correct irq clear method
        ASoC: tlv320aic3x: Prevent writing reserved registers on tlv320aic3104 
CODECs
        ASoC: rt5645: Correct the naming and setting of ADC Boost Volume Control
        ASoC: sgtl5000: fix wrong register MIC_BIAS_VOLTAGE setup on probe
        ASoC: wm8962: balance pm_runtime_enable
        ASoC: imx-ssi: Fix DAI hardware signal inversions
        ASoC: sgtl5000: fix error message output for MicBias voltage
        ASoC: db1200: Fix DAI link format for db1300 and db1550

  commit fe621fdead1165599a7422821a2923953fa1f8de
  Merge: 8140e73 9f30a04
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:33:15 2015 -0700

      Merge tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux

      Pull clk fixes from Stephen Boyd:
       "A Samsung driver fix and a handful of TI driver fixes"

      * tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:
        clk: ti: dflt: fix enable_reg validity check
        clk: ti: fix dual-registration of uart4_ick
        clk: ti: clk-7xx: Remove hardwired ABE clock configuration
        clk: samsung: fix cpu clock's flags checking

  commit 8140e73614c9f4685dbede6fd55605ee00fdb01c
  Merge: 0444555 88c6eb0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 17:25:26 2015 -0700

      Merge tag 'mmc-v4.3-rc4' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC fixes from Ulf Hansson:
       "MMC host:
         - omap_hsmmc: Fix boot regressions for omap4430
         - omap_hsmmc: Fix legacy boot regression for omap3
         - sdhci-pxav3: Fix some clock issues for Armada 38x
         - sdhci-pxav3: Fix error handling at probe
         - sdhci-of-at91: Fix clock stabilization problem"

      * tag 'mmc-v4.3-rc4' of git://git.linaro.org/people/ulf.hansson/mmc:
        mmc: sdhci-of-at91: use SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST quirk
        mmc: sdhci: add quirk SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST
        mmc: sdhci-pxav3: fix error handling of armada_38x_quirks
        mmc: sdhci-pxav3: disable clock inversion for HS MMC cards
        mmc: sdhci-pxav3: remove broken clock base quirk for Armada 38x sdhci 
driver
        mmc: host: omap_hsmmc: Fix MMC for omap3 legacy booting
        Revert "mmc: host: omap_hsmmc: use regulator_is_enabled to find pbias 
status"

  commit 0444555670350b419496686f4012b9cef808c105
  Merge: 175d58c b0d3cc0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:58:11 2015 -0700

      Merge tag 'dm-4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull dm fixes from Mike Snitzer:
       "Three stable fixes:

         - DM core AB-BA deadlock fix in the device destruction path (vs
           device creation's DM table swap).

         - DM raid fix to properly round up the region_size to the next
           power-of-2.

         - DM cache fix for a NULL pointer seen while switching from the
           "cleaner" cache policy.

        Two fixes for regressions introduced during the 4.3 merge:

         - request-based DM error propagation regressed due to incorrect
           changes introduced when adding the bi_error field to bio.

         - DM snapshot fix to only support snapshots that overflow if the
           client (e.g. lvm2) is prepared to deal with the associated
           snapshot status interface change"

      * tag 'dm-4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm snapshot: add new persistent store option to support overflow
        dm cache: fix NULL pointer when switching from cleaner policy
        dm: fix request-based dm error reporting
        dm raid: fix round up of default region size
        dm: fix AB-BA deadlock in __dm_destroy()

  commit 175d58cfed70f132b8d4df39e19267ad6094bd16
  Merge: 38aa0a5 7d35199
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:39:35 2015 -0700

      Merge branch 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes from Chris Mason:
       "These are small and assorted.  Neil's is the oldest, I dropped the
        ball thinking he was going to send it in"

      * 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        Btrfs: support NFSv2 export
        Btrfs: open_ctree: Fix possible memory leak
        Btrfs: fix deadlock when finalizing block group creation
        Btrfs: update fix for read corruption of compressed and shared extents
        Btrfs: send, fix corner case for reference overwrite detection

  commit 38aa0a59a6669af702c523e1d525b24ff5fd471b
  Merge: 5163ac7 c91aed9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:34:45 2015 -0700

      Merge tag 'nfsd-4.3-1' of git://linux-nfs.org/~bfields/linux

      Pull nfsd bugfix from Bruce Fields:
       "Just one RDMA bugfix"

      * tag 'nfsd-4.3-1' of git://linux-nfs.org/~bfields/linux:
        svcrdma: handle rdma read with a non-zero initial page offset

  commit 5163ac76370dc5298219c92a4befeb9e23de6f66
  Merge: c6fa8e6 5a37b15
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 15:54:14 2015 -0700

      Merge tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Arnd Bergmann:
       "The fixes for this week include one small patch that was years in the
        making and that finally fixes using all eight CPUs on exynos542x.

        The rest are lots of minor changes for sunxi, imx, exynos and shmobile

         - fixing the minimum voltage for Allwinner A20
         - thermal boot issue on SMDK5250.
         - invalid clock used for FIMD IOMMU.
         - audio on Renesas r8a7790/r8a7791
         - invalid clock used for FIMD IOMMU
         - LEDs on exynos5422-odroidxu3-common
         - usb pin control for imx-rex
         - imx53: fix PMIC interrupt level
         - a Makefile typo"

      * tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:
        ARM: dts: Fix wrong clock binding for sysmmu_fimd1_1 on exynos5420
        ARM: dts: Fix bootup thermal issue on smdk5250
        ARM: shmobile: r8a7791 dtsi: Add CPG/MSTP Clock Domain for sound
        ARM: shmobile: r8a7790 dtsi: Add CPG/MSTP Clock Domain for sound
        arm-cci500: Don't enable PMU driver by default
        ARM: dts: fix usb pin control for imx-rex dts
        ARM: imx53: qsrb: fix PMIC interrupt level
        ARM: imx53: include IRQ dt-bindings header
        ARM: dts: add suspend opp to exynos4412
        ARM: dts: Fix LEDs on exynos5422-odroidxu3
        ARM: EXYNOS: reset Little cores when cpu is up
        ARM: dts: Fix Makefile target for sun4i-a10-itead-iteaduino-plus
        ARM: dts: sunxi: Raise minimum CPU voltage for sun7i-a20 to meet SoC 
specifications

  commit 4f64cb65bf76fbd89c62d8e69c7bf75091950739
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:19 2015 +0100

      arm/arm64: KVM: Only allow 64bit hosts to build VGICv3

      Hardware virtualisation of GICv3 is only supported by 64bit hosts for
      the moment. Some VGICv3 bits are missing from the 32bit side, and this
      patch allows to still be able to build 32bit hosts when CONFIG_ARM_GIC_V3
      is selected.

      To this end, we introduce a new option, CONFIG_KVM_ARM_VGIC_V3, that is
      only enabled on the 64bit side. The selection is done unconditionally
      because CONFIG_ARM_GIC_V3 is always enabled on arm64.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 0b28f1db3dd2d4377c4a4dd8f85713ef44f11a25
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:18 2015 +0100

      ARM: virt: select ARM_GIC_V3

      This patch allows ARM guests to use GICv3 on an arm64 host

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit d5cd50d318f70fc62cc2e1399f5f4a0803291395
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:17 2015 +0100

      ARM: add 32bit support to GICv3

      Implement the system and memory-mapped register accesses in
      asm/arch_gicv3.h for 32bit architectures.

      This patch is a straightforward translation of the arm64 header. 64bit
      accesses are done in two times and don't need atomicity: TYPER is
      read-only, and the upper-word of IROUTER is always zero on 32bit
      architectures.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 72c971262f00185b4c6208812645c3feab4c77a3
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:16 2015 +0100

      irqchip/gic-v3: Specialize readq and writeq accesses

      On 32bit platforms, we cannot assure that an I/O ldrd or strd will be
      done atomically. Besides, an hypervisor would be unable to emulate such
      accesses.
      In order to allow the AArch32 version of the driver to split them into
      two 32bit accesses while keeping the requirement for atomic writes, this
      patch specializes the IROUTER and TYPER accesses.
      Since the latter is an ID register, it won't need to be read atomically,
      but we still avoid future confusion by using gic_read_typer instead of a
      generic gic_readq.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit f6c86a41e1dc2214363b00cc0eadb8a5401c892d
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:15 2015 +0100

      irqchip/gic-v3: Change unsigned types for AArch32 compatibility

      This patch does a few simple compatibility-related changes:
      - change the system register access prototypes to their actual size,
      - homogenise mpidr accesses with unsigned long,
      - force the 64bit register values to unsigned long long.

      Note: the list registers are 64bit on GICv3, but the AArch32 vGIC driver
      will need to split their values into two 32bit registers: LRn and LRCn.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 7936e914f7b0827c2dcfe63fbefdc21de2d61dcb
  Author: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
  Date:   Thu Oct 1 13:47:14 2015 +0100

      irqchip/gic-v3: Refactor the arm64 specific parts

      This patch moves the GICv3 system register access helpers to
      arch/arm64/. Their 32bit counterparts will need to use mrc/mcr accesses
      instead of mrs_s/msr_s.

      [maz: fixed conflict with Cavium erratum handling]
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit ee5f7d6462c56ba083d5d80aa0d69914068a59ae
  Author: Duc Dang <dhdang@xxxxxxx>
  Date:   Tue Oct 6 15:32:38 2015 -0700

      irqchip/gic-v2m: Add workaround for APM X-Gene GICv2m erratum

      APM X-Gene GICv2m implementation has an erratum where the
      MSI data needs to be the offset from the spi_start in order to
      trigger the correct MSI interrupt. This is different from the
      standard GICv2m implementation where the MSI data is the absolute
      value within the range from spi_start to (spi_start + num_spis)
      of each v2m frame.

      This patch reads MSI_IIDR register (present in all GICv2m
      implementations) to identify X-Gene GICv2m implementation and
      apply workaround to change the data portion of MSI vector.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Duc Dang <dhdang@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 6d32ab2d8a982ffd46c4dcad9739292f57bc26de
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 12:05:17 2015 +0100

      arm64: Update booting requirements for GICv3 in GICv2 mode

      The current requirements do not describe the case where a GICv3
      system gets booted with system register access disabled, and
      expect the kernel to drive GICv3 in GICv2 mode.

      Describe the expected settings for that particular case.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 76e52dd01cabc340c1a58f540c9d6bf0e79c6b23
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 12:01:16 2015 +0100

      irqchip/gic: Warn if GICv3 system registers are enabled

      When using a GICv3 in compatibility (v2) mode, having GICv3 system
      register access enabled is not really compliant with the architecture.

      Warn if the firmware (or the hypervisor) has been lazy.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 963fcd40958711cecf9e9a1a8525f88b782d6a98
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 11:50:04 2015 +0100

      arm64: cpufeatures: Check ICC_EL1_SRE.SRE before enabling 
ARM64_HAS_SYSREG_GIC_CPUIF

      As the firmware (or the hypervisor) may have disabled SRE access,
      check that SRE can actually be enabled before declaring that we
      do have that capability.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 7cabd0086acd8f204d9b11a9b0aca90d6a9fcc5b
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 11:48:01 2015 +0100

      irqchip/gic-v3: Make gic_enable_sre an inline function

      In order for gic_enable_sre to be used by the arm64 core code,
      move it to arm-gic-v3.h. As a bonus, we now also check if
      system registers have been already enabled, and return early
      if they have.

      In all cases, the function now returns a boolean indicating if
      the enabling has been successful.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit d271976dbb31c3ac5653745d03d68c4235d34119
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 30 11:39:59 2015 +0100

      arm64: el2_setup: Make sure ICC_SRE_EL2.SRE sticks before using GICv3 
sysregs

      Contrary to what was originally expected, EL3 firmware can (for whatever
      reason) disable GICv3 system register access. In this case, the kernel
      explodes very early.

      Work around this by testing if the SRE bit sticks or not. If it doesn't,
      abort the GICv3 setup, and pray that the firmware has passed a DT that
      doesn't contain a GICv3 node.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit b0d3cc011e532d8c9db76cf717bcafa53c135595
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Thu Oct 8 18:05:41 2015 -0400

      dm snapshot: add new persistent store option to support overflow

      Commit 76c44f6d80 introduced the possibly for "Overflow" to be reported
      by the snapshot device's status.  Older userspace (e.g. lvm2) does not
      handle the "Overflow" status response.

      Fix this incompatibility by requiring newer userspace code, that can
      cope with "Overflow", request the persistent store with overflow support
      by using "PO" (Persistent with Overflow) for the snapshot store type.

      Reported-by: Zdenek Kabelac <zkabelac@xxxxxxxxxx>
      Fixes: 76c44f6d80 ("dm snapshot: don't invalidate on-disk image on 
snapshot write overflow")
      Reviewed-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit 0e841b04c829f59a5d5745f98d2857f48882efe9
  Author: Chen-Yu Tsai <wens@xxxxxxxx>
  Date:   Tue Oct 6 00:42:14 2015 +0800

      irqchip/sunxi-nmi: Switch to of_io_request_and_map() from of_iomap()

      Switch to the new of_io_request_and_map() call, so the IO resource is
      properly held, and also shows up in /proc/iomem.

      Signed-off-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444063334-19832-3-git-send-email-wens@xxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2d6caaed0997f335ce341703083c989c91ad76f4
  Author: Chen-Yu Tsai <wens@xxxxxxxx>
  Date:   Tue Oct 6 00:42:13 2015 +0800

      irqchip/sunxi-nmi: Use driver name instead of DT node name for 
identification

      The device tree node name is typically "interrupt-controller", which is
      rather useless when used in printk messages and irq chip names for
      identification purposes. Use the driver name "sunxi-nmi" instead.

      While at it move the identifier from pr_err() calls to the pr_fmt macro.

      Also remove the "__func__" identifier from the error message in the
      interrupt type setting callback, sunxi_sc_nmi_set_type(). The driver
      name in the pr_fmt macro should be enough.

      Signed-off-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444063334-19832-2-git-send-email-wens@xxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit fcf1ae2f7a044cda9956ec7afb487296afff058e
  Author: Feng Wu <feng.wu@xxxxxxxxx>
  Date:   Sat Oct 3 16:20:38 2015 +0800

      genirq: Make irq_set_vcpu_affinity available for CONFIG_SMP=n

      irq_set_vcpu_affinity() is needed when CONFIG_SMP=n, so move the
      definition out of "#ifdef CONFIG_SMP"

      Suggested-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Feng Wu <feng.wu@xxxxxxxxx>
      Cc: jiang.liu@xxxxxxxxxxxxxxx
      Cc: pbonzini@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443860438-144926-1-git-send-email-feng.wu@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e509bd7da149dc34916037484cd7545b2d48a2b0
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 13:12:15 2015 +0300

      genirq: Allow migration of chained interrupts by installing default action

      When a CPU is offlined all interrupts that have an action are migrated to
      other still online CPUs. However, if the interrupt has chained handler
      installed this is not done. Chained handlers are used by GPIO drivers 
which
      support interrupts, for instance.

      When the affinity is not corrected properly we end up in situation where
      most interrupts are not arriving to the online CPUs anymore. For example 
on
      Intel Braswell system which has SD-card card detection signal connected to
      a GPIO the IO-APIC routing entries look like below after CPU1 is offlined:

        pin30, enabled , level, low , V(52), IRR(0), S(0), logical , D(03), M(1)
        pin31, enabled , level, low , V(42), IRR(0), S(0), logical , D(03), M(1)
        pin32, enabled , level, low , V(62), IRR(0), S(0), logical , D(03), M(1)
        pin5b, enabled , level, low , V(72), IRR(0), S(0), logical , D(03), M(1)

      The problem here is that the destination mask still contains both CPUs 
even
      if CPU1 is already offline. This means that the IO-APIC still routes
      interrupts to the other CPU as well.

      We solve the problem by providing a default action for chained interrupts.
      This action allows the migration code to correct affinity (as it finds
      desc->action != NULL).

      Also make the default action handler to emit a warning if for some reason 
a
      chained handler ends up calling it.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444039935-30475-1-git-send-email-mika.westerberg@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 670aee3fc7ac37ae947f8b582d87b51d5fa36524
  Merge: d61e87a 55582bc
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Oct 9 22:13:30 2015 +0200

      Merge branches 'pm-devfreq' and 'pm-cpufreq'

      * pm-devfreq:
        PM / devfreq: fix double kfree
        PM / devfreq: Fix governor_store()

      * pm-cpufreq:
        cpufreq: prevent lockup on reading scaling_available_frequencies
        cpufreq: acpi_cpufreq: prevent crash on reading freqdomain_cpus

  commit 8c3ad9cb7343dc5f61b8cf3cdbe1016c5e7c2c8b
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Fri Oct 9 15:03:26 2015 +0200

      nfsd/blocklayout: accept any minlength

      Recent Linux clients have started to send GETLAYOUT requests with
      minlength less than blocksize.

      Servers aren't really allowed to impose this kind of restriction on
      layouts; see RFC 5661 section 18.43.3 for details.

      This has been observed to cause indefinite hangs on fsx runs on some
      clients.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit 217d453d473c5ddfd140a06bf9d8575218551020
  Author: Yang Yingliang <yangyingliang@xxxxxxxxxx>
  Date:   Thu Sep 24 17:32:14 2015 +0800

      arm64: fix a migrating irq bug when hotplug cpu

      When cpu is disabled, all irqs will be migratged to another cpu.
      In some cases, a new affinity is different, the old affinity need
      to be updated and if irq_set_affinity's return value is 
IRQ_SET_MASK_OK_DONE,
      the old affinity can not be updated. Fix it by using irq_do_set_affinity.

      And migrating interrupts is a core code matter, so use the generic
      function irq_migrate_all_off_this_cpu() to migrate interrupts in
      kernel/irq/migration.c.

      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Russell King - ARM Linux <linux@xxxxxxxxxxxxxxxx>
      Cc: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Yang Yingliang <yangyingliang@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5adad9915472e180712030d730cdc476c6f8a60b
  Author: Joerg Roedel <jroedel@xxxxxxx>
  Date:   Fri Oct 9 16:23:33 2015 +0200

      iommu/amd: Fix NULL pointer deref on device detach

      When a device group is detached from its domain, the iommu
      core code calls into the iommu driver to detach each device
      individually.

      Before this functionality went into the iommu core code, it
      was implemented in the drivers, also in the AMD IOMMU
      driver as the device alias handling code.

      This code is still present, as there might be aliases that
      don't exist as real PCI devices (and are therefore invisible
      to the iommu core code).

      Unfortunatly it might happen now, that a device is unbound
      multiple times from its domain, first by the alias handling
      code and then by the iommu core code (or vice verca).

      This ends up in the do_detach function which dereferences
      the dev_data->domain pointer. When the device is already
      detached, this pointer is NULL and we get a kernel oops.

      Removing the alias code completly is not an option, as that
      would also remove the code which handles invisible aliases.
      The code could be simplified, but this is too big of a
      change outside the merge window.

      For now, just check the dev_data->domain pointer in
      do_detach and bail out if it is NULL.

      Reported-by: Andreas Hartmann <andihartmann@xxxxxxxxxx>
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit a78afccbbaa6d2df49768cabad8af28a0a84181d
  Merge: 348a65c f1e0bb0
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Fri Oct 9 16:47:34 2015 +0100

      Merge branch 'irq/for-arm' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      * 'irq/for-arm' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        genirq: Introduce generic irq migration for cpu hotunplug

  commit cbbc00be2ce3af5d708226a9563fa27cb4e6b6b8
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 22:07:31 2015 +0800

      iommu/amd: Prevent binding other PCI drivers to IOMMU PCI devices

      AMD IOMMU driver makes use of IOMMU PCI devices, so prevent binding other
      PCI drivers to IOMMU PCI devices.

      This fixes a bug reported by Boris that system suspend/resume gets broken
      on AMD platforms. For more information, please refer to:
        https://lkml.org/lkml/2015/9/26/89

      Fixes: 991de2e59090 ("PCI, x86: Implement pcibios_alloc_irq() and 
pcibios_free_irq()")
      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit e8973a889e69cb86cac08bec2863c878c0d27af9
  Author: Sarbojit Ganguly <ganguly.s@xxxxxxxxxxx>
  Date:   Fri Oct 9 12:10:02 2015 +0100

      ARM: 8443/1: Adding support for atomic half word exchange

      Since support for half-word atomic exchange was not there and Qspinlock
      on ARM requires it, modified __xchg() to add support for that as well.
      ARMv6 and lower does not support ldrex{b,h} so, added a guard code to
      prevent build breaks.

      Signed-off-by: Sarbojit Ganguly <ganguly.s@xxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit e1b8c05dccc7d3de8c49c92c41b2b5ac7d8275b2
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 16:18:09 2015 +0100

      ARM: clean up TWD after previous patch

      Rename feat_c3stop to twd_features to match the other variables in this
      file.  Initialise it with the standard features that we always support,
      and arrange to set the CLOCK_EVT_FEAT_C3STOP when appropriate.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 194444c52edd857210b3895e83ce45c64b58e251
  Author: Marc Gonzalez <marc_gonzalez@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 9 10:20:47 2015 +0100

      ARM: 8441/2: twd: Don't set CLOCK_EVT_FEAT_C3STOP unconditionally

      In 5388a6b266 ("ARM: SMP: Always enable clock event broadcast support")
      Russell noted that "the TWD local timers are unable to wake up the CPU
      when it is placed into a low power mode".

      However, some platforms do not stop the TWD block in low-power mode,
      and can thus use the TWD timer in one-shot mode, without setting up
      a broadcast device.

      Make the driver check for the "always-on" boolean property, and set
      the CLOCK_EVT_FEAT_C3STOP flag accordingly.

      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Marc Gonzalez <marc_gonzalez@xxxxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit ff5138f3af4ed61ed42e00d7d771a0502460488f
  Author: Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
  Date:   Tue Oct 6 16:40:53 2015 +0100

      ARM: 8440/1: remove obsolete documentation

      The Victor target has been removed from mainline long ago.

      Signed-off-by: Nicolas Pitre <nico@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 10abc7df9277a81971924a6c03f74e86d799daf1
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 9 15:50:11 2015 +0100

      irqdomain: Add an accessor for the of_node field

      As we're about to remove the of_node field from the irqdomain
      structure, introduce an accessor for it. Subsequent patches
      will take care of the actual repainting.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444402211-1141-1-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e3096c9c7c645279808a6bf7ac2031b1895ddffb
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 22:59:40 2015 +0200

      genirq: Fix handle_bad_irq kerneldoc comment

      A recent cleanup removed the 'irq' parameter from many functions, but
      left the documentation for this in place for at least one function.

      This removes it.

      Fixes: bd0b9ac405e1 ("genirq: Remove irq argument from irq flow handlers")
      Reported-by: kbuild test robot <lkp@xxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: kbuild-all@xxxxxx
      Cc: Austin Schuh <austin@xxxxxxxxxxxxxxxx>
      Cc: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/5400000.cD19rmgWjV@wuerfel
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 9d67dc5da59d63f746aad8f6ec4fbb86d6486f76
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 22:24:50 2015 +0200

      genirq: Export handle_bad_irq

      A cleanup of the omap gpio driver introduced a use of the
      handle_bad_irq() function in a device driver that can be
      a loadable module.

      This broke the ARM allmodconfig build:

      ERROR: "handle_bad_irq" [drivers/gpio/gpio-omap.ko] undefined!

      This patch exports the handle_bad_irq symbol in order to
      allow the use in modules.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: Austin Schuh <austin@xxxxxxxxxxxxxxxx>
      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/5847725.4IBopItaOr@wuerfel
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d49ae37c613f7cc1f4c1fd6ef073d60c32e000dd
  Merge: 4d886d6 b3c8ec3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:52:35 2015 -0700

      Merge branch 'net-non-modular'

      Paul Gortmaker says:

      ====================
      make non-modular code explicitly non-modular

      [v2: drop m68k patches that Geert converted to modules; add one ARM
       driver patch ; update net-next baseline to today; switch to ARM
       for build testing.]

      In a previous merge window, we made changes to allow better
      delineation between modular and non-modular code in commit
      0fd972a7d91d6e15393c449492a04d94c0b89351 ("module: relocate module_init
      from init.h to module.h").  This allows us to now ensure module code
      looks modular and non-modular code does not accidentally look modular
      just to avoid suffering build breakage.

      Here we target code that is, by nature of their Makefile and/or
      Kconfig settings, only available to be built-in, but implicitly
      presenting itself as being possibly modular by way of using modular
      headers, macros, and functions.

      The goal here is to remove that illusion of modularity from these
      files, but in a way that leaves the actual runtime unchanged.
      In doing so, we remove code that has never been tested and adds
      no value to the tree.  And we continue the process of expecting a
      level of consistency between the Kconfig/Makefile of code and the
      code in use itself.

      Fortuntately the net subsystem has relatively few instances, given
      the overall amount of code and drivers it contains.  For comparison
      there are over 300 instances tree wide, resulting in a possible net
      removal of on the order of 5000 lines of unused code.

      Build tested on net-next from today, on ARM, since that is the arch
      where the one ethernet driver changed here is available.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b3c8ec35a93d61fde15eefde2d54ecf2f5950f68
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 17:27:46 2015 -0400

      drivers/net/ethernet: make ti/cpsw-phy-sel.c explicitly non-modular

      The Kconfig currently controlling compilation of this code is:

      drivers/net/ethernet/ti/Kconfig:config TI_CPSW_PHY_SEL
      drivers/net/ethernet/ti/Kconfig:        bool "TI CPSW Switch Phy sel 
Support"

      ...meaning that it currently is not being built as a module by anyone.

      Lets remove the couple traces of modularity so that when reading the
      driver there is no doubt it is builtin-only.

      Since module_platform_driver() uses the same init level priority as
      builtin_platform_driver() the init ordering remains unchanged with
      this commit.

      Also note that MODULE_DEVICE_TABLE is a no-op for non-modular code.

      We also delete the MODULE_LICENSE tag etc. since all that information
      was (or is now) contained at the top of the file in the comments.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Varka Bhadram <varkabhadram@xxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 075640e364f3b46311766f0eff28bd3695637e16
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 17:27:45 2015 -0400

      net/sched: make sch_blackhole.c explicitly non-modular

      The Kconfig currently controlling compilation of this code is:

      net/sched/Kconfig:menuconfig NET_SCHED
      net/sched/Kconfig:      bool "QoS and/or fair queueing"

      ...meaning that it currently is not being built as a module by anyone.

      Lets remove the modular code that is essentially orphaned, so that
      when reading the driver there is no doubt it is builtin-only.

      Since module_init translates to device_initcall in the non-modular
      case, the init ordering remains unchanged with this commit.  We can
      change to one of the other priority initcalls (subsys?) at any later
      date, if desired.

      We also delete the MODULE_LICENSE tag since all that information
      is already contained at the top of the file in the comments.

      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36b9ad8084bd7ecf6d2241beca23e71f5f4b0cf1
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 17:27:44 2015 -0400

      net/dcb: make dcbnl.c explicitly non-modular

      The Kconfig currently controlling compilation of this code is:

      net/dcb/Kconfig:config DCB
      net/dcb/Kconfig:        bool "Data Center Bridging support"

      ...meaning that it currently is not being built as a module by anyone.

      Lets remove the modular code that is essentially orphaned, so that
      when reading the driver there is no doubt it is builtin-only.

      Since module_init translates to device_initcall in the non-modular
      case, the init ordering remains unchanged with this commit.  We can
      change to one of the other priority initcalls (subsys?) at any later
      date, if desired.

      We also delete the MODULE_LICENSE tag etc. since all that information
      is (or is now) already contained at the top of the file in the comments.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Cc: Anish Bhatt <anish@xxxxxxxxxxx>
      Cc: John Fastabend <john.r.fastabend@xxxxxxxxx>
      Cc: Shani Michaeli <shanim@xxxxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b6191aeeec1045decb5964e6b5e8c314f5982c85
  Author: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 17:27:43 2015 -0400

      net/core: make sock_diag.c explicitly non-modular

      The Makefile currently controlling compilation of this code lists
      it under "obj-y" ...meaning that it currently is not being built as
      a module by anyone.

      Lets remove the modular code that is essentially orphaned, so that
      when reading the driver there is no doubt it is builtin-only.

      Since module_init translates to device_initcall in the non-modular
      case, the init ordering remains unchanged with this commit.  We can
      change to one of the other priority initcalls (subsys?) at any later
      date, if desired.

      We can't remove module.h since the file uses other module related
      stuff even though it is not modular itself.

      We move the information from the MODULE_LICENSE tag to the top of the
      file, since that information is not captured anywhere else.  The
      MODULE_ALIAS_NET_PF_PROTO becomes a no-op in the non modular case, so
      it is removed.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Craig Gallek <kraig@xxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d886d65ed89f2572727c354162341a4c106a963
  Merge: 8cec75b 0cbf334
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:49:08 2015 -0700

      Merge branch 'net-bool'

      Yaowei Bai says:

      ====================
      net: small improvement

      This patchset makes several functions in net return bool to improve
      readability and/or simplicity because these functions only use one
      or zero as their return value.

      No functional changes.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0cbf334376d5e82d7a2f5cd234ca4f5d0843f3ea
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:29:02 2015 +0800

      net/core: lockdep_rtnl_is_held can be boolean

      This patch makes lockdep_rtnl_is_held return bool due to this
      particular function only using either one or zero as its return
      value.

      In another patch lockdep_is_held is also made return bool.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f06cc7b284f3dfb2c5decbf9fde711b50a530050
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:29:01 2015 +0800

      net/inetdevice: bad_mask can be boolean

      This patch makes bad_mask return bool due to this particular function
      only using either one or zero as its return value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c3225164cf60ccecce2459dcb5813dd798233f2d
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:29:00 2015 +0800

      net/inetdevice: inet_ifa_match can be boolean

      This patch makes inet_ifa_match return bool due to this
      particular function only using either one or zero as its return
      value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 45ae74f56162e7a017c3a4e130cf1bcd8d2d17cc
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:59 2015 +0800

      net/dccp: dccp_bad_service_code can be boolean

      This patch makes dccp_bad_service_code return bool due to these
      particular functions only using either one or zero as their return
      value.

      dccp_list_has_service is also been made return bool in this patchset.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c6119d99bf5df9403a688d267537284e9cc8bcb
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:58 2015 +0800

      net/dccp: dccp_list_has_service can be boolean

      This patch makes dccp_list_has_service return bool due to this
      particular function only using either one or zero as its return
      value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d6fbaea5f635216c9861587c4e658086cf3b1b6b
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:57 2015 +0800

      net/can: can_dropped_invalid_skb can be boolean

      This patch makes can_dropped_invalid_skb return bool due to this
      particular function only using either one or zero as its return
      value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Acked-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 875e08294911b3cb8c60416d64d990809421de29
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:56 2015 +0800

      net/nfnetlink: lockdep_nfnl_is_held can be boolean

      This patch makes lockdep_nfnl_is_held return bool to improve
      readability due to this particular function only using either
      one or zero as its return value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 35498edc6481d588feadee7e76220884d5bbca48
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:55 2015 +0800

      net/ieee80211: ieee80211_is_* can be boolean

      This patch makes ieee80211_is_* return bool to improve
      readability due to these particular functions only using either
      one or zero as their return value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61d03535e4be3a46c1e171a25458237e343195e3
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Thu Oct 8 21:28:54 2015 +0800

      net/netlink: lockdep_genl_is_held can be boolean

      This patch makes lockdep_genl_is_held return bool to improve
      readability due to this particular function only using either
      one or zero as its return value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca7beb1fa776412ff80708ae98a8467fe4c52737
  Merge: 85121d6 d5a5209
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:44:04 2015 -0700

      Merge branch 'mlx'

      Or Gerlitz says:

      ====================
      Mellanox driver update to 4.3-rc4

      Small set of fixes for net, which includes Carol's patches, a fix
      from Achiad to have the right behaviour for mlx5 Eth devices w.r.t
      VLANs in promiscuous mode, a good-bye patch from Ido who left Mellanox
      and the 1st patch from Jiri to our NIC drivers (I love one-liners)...
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d5a52095afddee121b97c4aac250f18d06803b58
  Author: Ido Shamay <idos@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:26:19 2015 +0300

      MAINTAINERS: Update mlx4_en driver entry

      Remove Ido Shamay as co-maintainer for the mlx4 Ethernet driver,
      as he no longer works for Mellanox.

      Signed-off-by: Ido Shamay <idos@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c07543431e9f3d126d083808efa0e76461d8833b
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:26:18 2015 +0300

      net/mlx5e: Disable VLAN filter in promiscuous mode

      When the device was set to promiscuous mode, we didn't disable
      VLAN filtering, which is wrong behaviour, fix that.

      Now when the device is set to promiscuous mode RX packets
      sent over any VLAN (or no VLAN tag at all) will be accepted.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 13b7938883ea6e70e7e23f30dece6f79d7a2961d
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 8 15:26:17 2015 +0300

      net/mlx5: Fix typo in mlx5_query_port_pvlc

      We used the wrong register name for querying the PVLC register

      Fixes: a124d13ef59e ('net/mlx5_core: Add more query port helpers')
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 820d39f3c497df6c8e040b8dcc7c19eeaa312701
  Author: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 15:26:15 2015 +0300

      net/mlx4_core: Avoid failing the interrupts test

      Test interrupts fails if not all completion vectors called
      request_irq. This case happens if only mlx4_en is loaded and
      we have more completion vectors than rx rings.

      Fixes: c66fa19c405a ('net/mlx4: Add EQ pool')
      Signed-off-by: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
      Acked-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8cec75bd85cc26f81e85eb20e863cc564d354113
  Merge: 1c43f75 95e1963
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:28:38 2015 -0700

      Merge branch 'mlx-next'

      Or Gerlitz says:

      ==============================
      Mellanox driver update for net-next

      Some small fixes and small enhancements from the team.

      Series applies over net-next commit acb4a6b "tcp: ensure prior synack rtx 
behavior
      with small backlogs".
      ==============================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 95e196337a3bd1a1678e794064d8097600c277de
  Author: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:14:03 2015 +0300

      net/mlx4_core: Fix resource tracker error flow in add_res_range

      The 'for' loop when undoing rb-tree insertions and list-adds in the
      error flow in add_res_range had errors, fix them.

      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a5b3c56ef792009f6aff54ba93bd86ceca3e5bfc
  Author: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 17:14:02 2015 +0300

      net/mlx4_core: Fix mailbox leak in error flow when performing update qp

      The procedure mlx4_update_qp leaks mailboxes in its error-flow, fix that.

      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba4b87aedd7123df4e4cfd1ca4dcfe8a6d756511
  Author: Ido Shamay <idos@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:14:01 2015 +0300

      net/mlx4_en: Add steering rules after RSS creation

      Changed the receive control flow in a way that steering
      rules are added only when the RSS object is already in RTR/RTS mode.
      Some optimization features, which are enabled by the device firmware,
      require this condition in order to be effective.

      Signed-off-by: Ido Shamay <idos@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac6ea6e81a80172612e0c9ef93720f371b198918
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:14:00 2015 +0300

      net/mlx5_core: Use private health thread for each device

      Use a single threaded work queue for each device in the system instead of
      using one thread for any device. This is required so we can concurrently
      process system error handling for all the devices that need that.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0144a95e2ad53a40c62148f44fb0c1f9d2a0d1e9
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:13:59 2015 +0300

      net/mlx5_core: Use accessor functions to read from device memory

      Use ioread function to read health buffer data. In addition, print the
      firmware version as a string for readability and also use dev_err to have
      the device string to be printed.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 020446e01eebc9dbe7eda038e570ab9c7ab13586
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:13:58 2015 +0300

      net/mlx5_core: Prepare cmd interface to system errors handling

      In preparation to handling system errors at the mlx5_core level, change 
the
      interface of cmd_work_handler to accept a 64 bit argument for the vector.

      This allows to encode a flag that signifies when the handler is called
      as a result of a driver logic that wishes to terminate commands that
      the hardware may not be able to terminate. Such command completions
      are detected at the handler and proper return status is encoded.

      To be able to terminate page handler commands, we make sure to set
      the corresponding bit in the bitmask.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5a7883989b1c57513bb4067ca4b42c96d449d1a5
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Thu Oct 8 17:13:57 2015 +0300

      net/mlx5_core: Improve mlx5 messages

      Improve the messages printed by the mlx5 macros to include the device
      string. In addition, prefix names used by the macros with two underscores
      to avoid possible name collisions.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1c43f75ad436bbcb4a2526551005f62985dca3ca
  Merge: df71842 ce6fcb3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 9 07:05:49 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-08

      This series contains updates to i40e and i40evf only (again).

      Jesse fixes an issue where the driver was issuing a WARN_ON during ring
      size changes because the code was cloning the rx_ring struct but not
      zeroing out the pointers before allocating new memory, so simply zero
      out the pointers.  Also reduced the function call overhead by moving
      the interrupt enable function by moving it to the header file, which it
      in turn allows us to inline it.  Also does a thorough job of code
      cleanup to fix spaces after declarations, remove unnecessary braces
      and breaks, remove another __func__ use and general code tidiness.

      Mitch adds mover verbose error messages when the number of supported VFs
      is reported in driver init and it different from the number reported in
      config space.  Updated the VF driver to now detect a reset with the
      VF_ARQLEN register since the enable bit is cleared when the VF is reset
      and it stays cleared until the VF driver processes the reset and
      re-enables the admin queue which is more reliable than using the
      VFGEN_RSTAT as previously.

      Neerav adds parsing for CEE DCBx TLVs from the LLDP MIB since there is
      a need to get the CEE DesiredCfg Tx by firmware and DCB configuration
      Rx from peer for debug and other application purposes.

      Carolyn fixes a problem where the PF's Flow Director filter table would
      have an entry that the hardware was unable to add, when this occurs an
      invalid entry gets replayed and a valid one is lost.

      Matt fixes an issue where multiple link up messages can be logged
      resulting from admin queue link status timing when link properties are
      changed.

      Shannon adds the ability to control the period link polling through
      ethtool to be able to switch it off and on for debugging link issues.

      Serey explicitly assigns the enum index for each VSI type so that the PF
      and VF always reference to the same VSI type event if the enum lists
      are different.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2bffa1503c5c06192eb1459180fac4416575a966
  Author: Joe Thornber <ejt@xxxxxxxxxx>
  Date:   Fri Oct 9 14:03:38 2015 +0100

      dm cache: fix NULL pointer when switching from cleaner policy

      The cleaner policy doesn't make use of the per cache block hint space in
      the metadata (unlike the other policies).  When switching from the
      cleaner policy to mq or smq a NULL pointer crash (in dm_tm_new_block)
      was observed.  The crash was caused by bugs in dm-cache-metadata.c
      when trying to skip creation of the hint btree.

      The minimal fix is to change hint size for the cleaner policy to 4 bytes
      (only hint size supported).

      Signed-off-by: Joe Thornber <ejt@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 55ad769fde922982533d538bdef37c90a0d82e90
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Aug 27 14:02:33 2015 +0530

      Documentation/features/vm: pte_special now supported by ARC

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 24830fc782a3a740209d39cb27abbf5a9763f61f
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Feb 16 19:01:29 2015 +0530

      ARC: mm: Introduce PTE_SPECIAL

      Needed for THP, but will also come in handy for fast GUP later

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 129cbed54a8b3f80f0eaf49acb14fe835587f6f3
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Dec 5 12:05:05 2013 +0530

      ARC: mm: pte flags comsetic cleanups, comments

      No semantical changes

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit e8a75963a4b9433dca55286e222f4dd1cc1ca76c
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Aug 28 08:39:57 2015 +0530

      ARC: mm: switch pgtable_to to pte_t *

      ARC is the only arch with unsigned long type (vs. struct page *).
      Historically this was done to avoid the page_address() calls in various
      arch hooks which need to get the virtual/logical address of the table.

      Some arches alternately define it as pte_t *, and is as efficient as
      unsigned long (generated code doesn't change)

      Suggested-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit bffb7db279abe86949dabc7e63b6c2500f472a92
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Mon Oct 5 20:46:12 2015 +0800

      ath6kl: drop unlikely behind WARN_ON()

      WARN_ON() already contain an unlikely compiler flag. Drop it.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 706452b06866f950febb91e582c1d06c03ca85ee
  Author: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
  Date:   Tue Sep 29 12:29:49 2015 +0200

      ath: fix DFS timestamp wraparound reset condition

      The DFS pattern detector ought to reset the
      detector lines when a pulse is added with
      lower time stamp than the previous (which
      indicates a TSF restart).

      This did not work so far and is fixed with
      this patch.

      The modification does not change detection
      performance within the driver, since it
      only ensures early reset (which is later
      performed by the PRI detectors anyway).
      It is relevant for synthetic tests and
      statistical evaluations, where millions
      of pulse patterns are processed and an
      early reset helps reducing load.

      Signed-off-by: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 101d1f7fbf7dbb881f808c0fdc23124051ac5da6
  Author: Colin Ian King <colin.king@xxxxxxxxxxxxx>
  Date:   Mon Sep 7 14:49:05 2015 +0100

      ath6kl: remove redundant null pointer check on send_pkt

      The check for send_pkt being NULL is redundant before the call
      to htc_reclaim_txctrl_buf, therefore it should be removed. This was
      detected by static analysis by cppcheck.

      Signed-off-by: Colin Ian King <colin.king@xxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit f13e0630826f961732f3192282a6c249bb6208c1
  Author: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:27 2015 +0300

      wil6210: Do no schedule firmware recovery during reset flow

      During reset flow, ignore firmware errors detected prior
      to the actual hardware reset as the recovery flow would
      make additional unnecessary reset.

      Signed-off-by: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7dc47258a00d026ba1268133687b3b1940e36e58
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:26 2015 +0300

      wil6210: dump firmware memory when firmware crashes

      When firmware crashes, just before firmware recovery,
      dump the firmware memory to a devcoredump device.
      The resulting dump can be read from user space to be used
      in offline crash analysis.

      Signed-off-by: Lior David <liord@xxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a3dcbae2476f2c32e8f123dd833d789f7f494711
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:25 2015 +0300

      wil6210: ratelimit Tx error message

      Situations observed when IP stack schedules lots of
      frames for Tx while no connection (connection lost,
      for example). In this case, dmesg bloated with error
      message "FW not connected", printed for every frame.

      Ratelimit this error message to avoid dmesg pollution.

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 4765332df9222b9172ce2e5172f1e8e8ffc6d554
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:24 2015 +0300

      wil6210: capture all frames in sniffer mode

      For the sniffer (monitor) mode, capture either control only or both
      control and data PHY.

      It used to be control only or data only PHY due to firmware
      issues with configuration for PHY auto-detection; but now
      it is resolved.

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a8313341c4a83d5da18aad07501119da649d58dc
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:23 2015 +0300

      wil6210: support BAR (BlockAck Req)

      BAR frames delivered to the host via Rx path; whole BAR frame
      get delivered. Advance sequence in the reorder buffer and release
      old frames, as per IEEE802.11 spec.

      Firmware will reply to BAR, driver responsibility is only reorder
      buffer management.

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 68682b4108f1254a34e40f516f9ab1f49b4754fc
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:22 2015 +0300

      wil6210: treat broadcast bssid as "disconnect all"

      Hostapd request disconnect for broadcast bssid when it
      wants to disconnect all stations from the AP.

      Detect this and really disconnect all connected stations.

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 6cc6c468381e369e6450257645cf65c67f9f4a1b
  Author: Vladimir Shulman <QCA_shulmanv@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:21 2015 +0300

      wil6210: pmc logger bug fix

      When allocating pmc descriptor, the structure is
      initially created on stack and later copied to
      the physical ring (device) memory. The descriptor
      structure must be initialized to zero to avoid
      garbage configuration, which may result in pmc
      mechanism malfunctioning.

      Signed-off-by: Vladimir Shulman <QCA_shulmanv@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit bf2f67343eedc276b8441f91d8daaef4f3ed11d0
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:20 2015 +0300

      wil6210: log firmware crash information

      Print firmware and ucode assert codes when firmware crashed.

      Signed-off-by: Lior David <liord@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 3b282bc6095f77908cb83427d93f0764e8419fdb
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:19 2015 +0300

      wil6210: Add proper handling for invalid frames on Rx

      On Rx, when invalid frame is received and dropped,
      reaping of next frames from Rx ring is stopped.

      This stops NAPI polling and re-enables the Rx interrupt.

      However, in cases where no more frames received,
      interrupt will not be triggered and rest of Rx frames
      will not be processed.

      Skip bad frames and continue to reap Rx packets when
      such frames are encountered, and add statistics for
      such frames for debug.

      Signed-off-by: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 5a813da0068dbe46b77897c955b4059c7ffee4d8
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 10:23:18 2015 +0300

      wil6210: fix warning in system power management code

      Fix compilation warning where CONFIG_PM defined while
      CONFIG_PM_SLEEP is not defined

      Report follows:

      tree:   git://github.com/kvalo/ath pending
      head:   941145fc5e5afbb120271e5dfaf37213ddb55807
      commit: df596be39294d9712e5d568063a48448031e0a9f [37/39] wil6210: system 
power management
      config: xtensa-allyesconfig (attached as .config)
      reproduce:
        wget 
https://git.kernel.org/cgit/linux/kernel/git/wfg/lkp-tests.git/plain/sbin/make.cross
 -O ~/bin/make.cross
        chmod +x ~/bin/make.cross
        git checkout df596be39294d9712e5d568063a48448031e0a9f
        # save the attached .config to linux build tree
        make.cross ARCH=xtensa

      All warnings (new ones prefixed by >>):

      >> drivers/net/wireless/ath/wil6210/pcie_bus.c:264:12: warning: 
'wil6210_suspend' defined but not used [-Wunused-function]
          static int wil6210_suspend(struct device *dev, bool is_runtime)
                     ^
      >> drivers/net/wireless/ath/wil6210/pcie_bus.c:291:12: warning: 
'wil6210_resume' defined but not used [-Wunused-function]
          static int wil6210_resume(struct device *dev, bool is_runtime)
                     ^
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 72f8cef5d1155209561b01e092ce1a04ad50c4cb
  Author: Vivek Natarajan <nataraja@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:19:34 2015 +0300

      ath10k: use station's current operating mode from assoc request

      The current number of spatial streams used by the client is advertised
      as a separate IE in assoc request. Use this information to set
      the NSS operating mode.

      Fixes: 45c9abc059fa ("ath10k: implement more versatile set_bitrate_mask").
      Signed-off-by: Vivek Natarajan <nataraja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit ab4e3db043589204041c00272f751d05b4e52c50
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:19:33 2015 +0300

      ath10k: optimize ce_lock on post rx buffer processing

      After processing received packets from copy engine, host will allocate
      new buffer and queue them back to copy engine ring for further
      packet reception. On post rx processing path, skb allocation and
      dma mapping are unnecessarily handled within ce_lock. This is affecting
      peak throughput and also causing more CPU consumption. Optimize this
      by acquiring ce_lock only when accessing copy engine ring and moving
      skb allocation out of ce_lock.

      In AP148 platform with QCA99x0 in conducted environment, UDP uplink peak
      throughput is improved from ~1320 Mbps to ~1450 Mbps and TCP uplink peak
      throughput is increased from ~1240 Mbps (70% host CPU load) to ~1300 Mbps
      (71% CPU load). Similarly ~40Mbps improvement is observed in downlink
      path.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 39b91b8144e028cbe383548f76c1f8cdb7977532
  Author: Maharaja Kennadyrajan <c_mkenna@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:19:28 2015 +0300

      ath10k: increase pci wakeup timeout to 30 ms

      It is noticed that pci wakeup time is exceeding current timeout (10ms)
      randomly which is tested on QCA988x. So, the wake up time is increased
      to 30 ms and added debug prints to log total timeout.

      Signed-off-by: Maharaja Kennadyrajan <c_mkenna@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit f5e6a9753ac2965564a14e6285a06f44043ed9c8
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:24 2015 -0700

      x86/entry: Split and inline syscall_return_slowpath()

      GCC is unable to properly optimize functions that have a very
      short likely case and a longer and register-heavier cold part --
      it fails to sink all of the register saving and stack frame
      setup code into the unlikely part.

      Help it out with syscall_return_slowpath() by splitting it into
      two parts and inline the hot part.

      Saves 6 cycles for compat syscalls.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/0f773a894ab15c589ac794c2d34ca6ba9b5335c9.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 39b48e575e92e31251b74b4b48cea2129cee90bd
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:23 2015 -0700

      x86/entry: Split and inline prepare_exit_to_usermode()

      GCC is unable to properly optimize functions that have a very
      short likely case and a longer and register-heavier cold part --
      it fails to sink all of the register saving and stack frame
      setup code into the unlikely part.

      Help it out with prepare_exit_to_usermode() by splitting it into
      two parts and inline the hot part.

      Saves 6-8 cycles for compat syscalls.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/9fc53eda4a5b924070952f12fa4ae3e477640a07.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dd636071c3d8044c802b7a365e9934724a929530
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:22 2015 -0700

      x86/entry: Use pt_regs_to_thread_info() in syscall entry tracing

      It generates simpler and faster code than current_thread_info().

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a3b6633e7dcb9f673c1b619afae602d29d27d2cf.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4aabd140f9cbe0361401a1368bac74df1010abf5
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:21 2015 -0700

      x86/entry: Hide two syscall entry assertions behind CONFIG_DEBUG_ENTRY

      This shaves a few cycles off the slow paths.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/ce383fa9e129286ce6da6e00b53acd4c9fb5d06a.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c68ca6787bdd6d2df37cf950135aa11e71af358a
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:20 2015 -0700

      x86/entry: Micro-optimize compat fast syscall arg fetch

      We're following a 32-bit pointer, and the uaccess code isn't
      smart enough to figure out that the access_ok() check isn't
      needed.

      This saves about three cycles on a cache-hot fast syscall.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/bdff034e2f23c5eb974c760cf494cb5bddce8f29.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 33c52129f45e06d9ce23e1a3d50bf9fd6770748b
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:19 2015 -0700

      x86/entry: Force inlining of 32-bit syscall code

      On systems that support fast syscalls, we only really care about
      the performance of the fast syscall path.  Forcibly inline it
      and add a likely annotation.

      This saves 4-6 cycles.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/8472036ff1f4b426b4c4c3e3d0b3bf5264407c0c.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 460d12453e1afe20416ce9536cfecb31d17a9abd
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:18 2015 -0700

      x86/entry: Make irqs_disabled checks in exit code depend on lockdep

      These checks are quite slow.  Disable them in non-lockdep
      kernels to reduce the performance hit.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/eccff2a154ae6fb50f40228901003a6e9c24f3d0.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8b13c2552ffc8e54e57598df36707183933e8e8c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:17 2015 -0700

      x86/entry: Remove unnecessary IRQ twiddling in fast 32-bit syscalls

      This is slightly messy, but it eliminates an unnecessary cli;sti
      pair.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/22f34b1096694a37326f36c53407b8dd90f37948.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 487e3bf4f77699160aa81a414200060a78a67c3d
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:16 2015 -0700

      x86/asm: Remove thread_info.sysenter_return

      It's no longer needed.

      We could reinstate something like it as an optimization, which
      would remove two cachelines from the fast syscall entry working
      set.  I benchmarked it, and it makes no difference whatsoever to
      the performance of cache-hot compat syscalls on Sandy Bridge.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/f08cc0cff30201afe9bb565c47134c0a6c1a96a2.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5f310f739b4cc343f3f087681e41bbc2f0ce902d
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:15 2015 -0700

      x86/entry/32: Re-implement SYSENTER using the new C path

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/5b99659e8be70f3dd10cd8970a5c90293d9ad9a7.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 150ac78d63afb96360dab448b7b4d33c98c8266c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:14 2015 -0700

      x86/entry/32: Switch INT80 to the new C syscall path

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a7e8d8df96838eae3208dd0441023f3ce7a81831.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 39e8701f33d65c7f51d749a5d12a1379065e0926
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:13 2015 -0700

      x86/entry/32: Open-code return tracking from fork and kthreads

      syscall_exit is going away, and return tracing is just a
      function call now, so open-code the two non-syscall 32-bit
      users.

      While we're at it, update the big register layout comment.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a6b3c472fda7cda0e368c3ccd553dea7447dfdd2.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7841b408717d4c3b1b334c8f1fef7f18c98cd2bd
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:12 2015 -0700

      x86/entry/compat: Implement opportunistic SYSRETL for compat syscalls

      If CS, SS and IP are as expected and FLAGS is compatible with
      SYSRETL, then return from fast compat syscalls (both SYSCALL and
      SYSENTER) using SYSRETL.

      Unlike native 64-bit opportunistic SYSRET, this is not invisible
      to user code: RCX and R8-R15 end up in a different state than
      shown saved in pt_regs.  To compensate, we only do this when
      returning to the vDSO fast syscall return path.  This won't
      interfere with syscall restart, as we won't use SYSRETL when
      returning to the INT80 restart instruction.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/aa15e49db33773eb10b73d73466b6d5466d7856a.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a474e67c913d3ebaf02ba9d7835d5299d226c3ed
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:11 2015 -0700

      x86/vdso/compat: Wire up SYSENTER and SYSCSALL for compat userspace

      What, you didn't realize that SYSENTER and SYSCALL were actually
      the same thing? :)

      Unlike the old code, this actually passes the ptrace_syscall_32
      test on AMD systems.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/b74615af58d785aa02d917213ec64e2022a2c796.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 710246df58041106b7de645f4b45770f8a59a269
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:10 2015 -0700

      x86/entry: Add C code for fast system call entries

      This handles both SYSENTER and SYSCALL.  The asm glue will take
      care of the differences.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/6041a58a9b8ef6d2522ab4350deb1a1945eb563f.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ee08c6bd315e70756ad2c47ee6ea708a4a882b55
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:09 2015 -0700

      x86/entry/64/compat: Migrate the body of the syscall entry to C

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a2f0fce68feeba798a24339b5a7ec1ec2dd9eaf7.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit bd2d3a3ba67ac580f6e809aac36bf942f5447f91
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:08 2015 -0700

      x86/entry: Add do_syscall_32(), a C function to do 32-bit syscalls

      System calls are really quite simple.  Add a helper to call
      a 32-bit system call.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/a77ed179834c27da436fb4a7fb23c8ee77abc11c.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit eb974c62565072e10c1422eb3205f5b611dd99a1
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:07 2015 -0700

      x86/syscalls: Give sys_call_ptr_t a useful type

      Syscalls are asmlinkage functions (on 32-bit kernels), take six
      args of type unsigned long, and return long.  Note that uml
      could probably be slightly cleaned up on top of this patch.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/4d3ecc4a169388d47009175408b2961961744e6f.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 034042cc1e2837a584cda0a5e4fc2b0a96b74543
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:06 2015 -0700

      x86/entry/syscalls: Move syscall table declarations into asm/syscalls.h

      The header was missing some compat declarations.

      Also make sys_call_ptr_t have a consistent type.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/3166aaff0fb43897998fcb6ef92991533f8c5c6c.1444091585.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8169aff611956ed360e3313e8c718f530f58f6cb
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:05 2015 -0700

      x86/entry/64/compat: Set up full pt_regs for all compat syscalls

      This is conceptually simpler.  More importantly, it eliminates
      the PTREGSCALL and execve stubs, which were not compatible with
      the C ABI.  This means that C code can call through the compat
      syscall table.

      The execve stubs are a bit subtle.  They did two things: they
      cleared some registers and they forced slow-path return.
      Neither is necessary any more: elf_common_init clears the extra
      registers and start_thread calls force_iret().

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/f95b7f7dfaacf88a8cae85bb06226cae53769287.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2ec67971faccc21ff18878552ccfe4409088c4c8
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:04 2015 -0700

      x86/entry/64/compat: Remove most of the fast system call machinery

      We now have only one code path that calls through the compat
      syscall table.  This will make it much more pleasant to change
      the pt_regs vs register calling convention, which we need to do
      to move the call into C.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/320cda5573cefdc601b955d23fbe8f36c085432d.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c5f638ac90d514202155c87aa58730e86d484d9e
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:03 2015 -0700

      x86/entry/64/compat: Remove audit optimizations

      These audit optimizations are messy and hard to maintain.  We'll
      get a similar effect from opportunistic sysret when fast compat
      system calls are re-implemented.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/0bcca79ac7ff835d0e5a38725298865b01347a82.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e62a254a1f93fcc7299497a5c7231639400b8c3c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:02 2015 -0700

      x86/entry/64/compat: Disable SYSENTER and SYSCALL32 entries

      We've disabled the vDSO helpers to call them, so turn off the
      entries entirely (temporarily) in preparation for cleaning them
      up.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/8d6e84bf651519289dc532dcc230adfabbd2a3eb.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8242c6c84a644e5f0f721e4ae2bd542f640c89f9
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:01 2015 -0700

      x86/vdso/32: Save extra registers in the INT80 vsyscall path

      The goal is to integrate the SYSENTER and SYSCALL32 entry paths
      with the INT80 path.  SYSENTER clobbers ESP and EIP.  SYSCALL32
      clobbers ECX (and, invisibly, R11).  SYSRETL (long mode to
      compat mode) clobbers ECX and, invisibly, R11.  SYSEXIT (which
      we only need for native 32-bit) clobbers ECX and EDX.

      This means that we'll need to provide ESP to the kernel in a
      register (I chose ECX, since it's only needed for SYSENTER) and
      we need to provide the args that normally live in ECX and EDX in
      memory.

      The epilogue needs to restore ECX and EDX, since user code
      relies on regs being preserved.

      We don't need to do anything special about EIP, since the kernel
      already knows where we are.  The kernel will eventually need to
      know where int $0x80 lands, so add a vdso_image entry for it.

      The only user-visible effect of this code is that ptrace-induced
      changes to ECX and EDX during fast syscalls will be lost.  This
      is already the case for the SYSENTER path.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/b860925adbee2d2627a0671fbfe23a7fd04127f8.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7bcdea4d050cbe4912854a68b93494203eec8b24
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:48:00 2015 -0700

      x86/elf/64: Clear more registers in elf_common_init()

      Before we start calling execve in contexts that honor the full
      pt_regs, we need to teach it to initialize all registers.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/65a38a9edee61a1158cfd230800c61dbd963dac5.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 29c0ce9508458ed31a9db2ed425f64c0d6d3ddfb
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:59 2015 -0700

      x86/vdso: Replace hex int80 CFI annotations with GAS directives

      Maintaining the current CFI annotations written in R'lyehian is
      difficult for most of us.  Translate them to something a little
      closer to English.

      This will remove the CFI data for kernels built with extremely
      old versions of binutils.  I think this is a fair tradeoff for
      the ability for mortals to edit the asm.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/ae3ff4ff5278b4bfc1e1dab368823469866d4b71.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f24f910884277aa6824bbc2dda4b5d0418d45c28
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:58 2015 -0700

      x86/vdso: Define BUILD_VDSO while building and emit .eh_frame in asm

      For the vDSO, user code wants runtime unwind info.  Make sure
      that, if we use .cfi directives, we generate it.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/16e29ad8855e6508197000d8c41f56adb00d7580.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7b956f035a9ef8bd3ef5490f49fc1bd834d8a70a
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:57 2015 -0700

      x86/asm: Re-add parts of the manual CFI infrastructure

      Commit:

        131484c8da97 ("x86/debug: Remove perpetually broken, unmaintainable 
dwarf annotations")

      removed all the manual DWARF annotations outside the vDSO.  It also 
removed
      the macros we used for the manual annotations.

      Re-add these macros so that we can clean up the vDSO annotations.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/4c70bb98a8b773c8ccfaabf6745e569ff43e7f65.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 621bd0f6982badd6483acb191eb7b6226a578328
  Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
  Date:   Tue Sep 29 09:56:53 2015 +0200

      drm: Fix locking for sysfs dpms file

      With atomic drivers we need to make sure that (at least in general)
      property reads hold the right locks. But the legacy dpms property is
      special and can be read locklessly. Since userspace loves to just
      randomly look at that all the time (like with "status") do that.

      To make it clear that we play tricks use the READ_ONCE compiler
      barrier (and also for paranoia).

      Note that there's not really anything bad going on since even with the
      new atomic paths we eventually end up not chasing any pointers (and
      hence possibly freed memory and other fun stuff). The locking WARNING
      has been added in

      commit 88a48e297b3a3bac6022c03babfb038f1a886cea
      Author: Rob Clark <robdclark@xxxxxxxxx>
      Date:   Thu Dec 18 16:01:50 2014 -0500

          drm: add atomic properties

      but since drivers are converting not everyone will have seen this from
      the start.

      Jens reported this and submitted a patch to just grab the
      mode_config.connection_mutex, but we can do a bit better.

      v2: Remove unused variables I failed to git add for real.

      Reference: http://mid.gmane.org/20150928194822.GA3930@xxxxxxxxx
      Reported-by: Jens Axboe <axboe@xxxxxx>
      Tested-by: Jens Axboe <axboe@xxxxxx>
      Cc: Rob Clark <robdclark@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit e87d68dd61035b52f5a4b9d91051c98893dad61e
  Merge: 266424b 7a57455
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 9 10:06:18 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      radeon and amdgpu fixes for 4.3. Highlights:
      - Move pm sysfs setup later in the driver init process to avoid
        problems with laptop scripts attempting to change pm settings
        before the driver has finished setting up the pm hardware.
      - Fix console restore if a drm app (e.g. X) is forcibly killed
      - Flag iceland support as experimental for now
      - Misc bug fixes

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: fix memory leak in amdgpu_vm_update_page_directory
        drm/amdgpu: fix 32-bit compiler warning
        drm/amdgpu: flag iceland as experimental
        drm/amdgpu: check before checking pci bridge registers
        drm/amdgpu: fix num_crtc on CZ
        drm/amdgpu: restore the fbdev mode in lastclose
        drm/radeon: restore the fbdev mode in lastclose
        drm/radeon: add quirk for ASUS R7 370
        drm/amdgpu: add pm sysfs files late
        drm/radeon: add pm sysfs files late

  commit ce6fcb3f2467902b48e59d1c866c5b4c9f6136eb
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:59 2015 -0400

      i40e: print neato new features

      To help users and developers know what compile options
      and hardware features are enabled at compile time, print
      VxLAN is available.

      Change-ID: I3162f3b7678dc725a597f964217920eb218b480b
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f578f5f453abf09e8cb4c3aaf1e0c3bdf8125493
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:58 2015 -0400

      i40e/i40evf: pass QOS handle to VF

      The VF really doesn't care about the QOS handle but it will in the
      future. Since the VF only uses TC0, send it that handle. On the VF
      side, save the handle and use it to populate the QOS params when we call
      into the client interface.

      Change-ID: I76f41b070baeaa09b19383e9168bc677837e0761
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8ed995ff6bb9c5436db64b3653a0c62a0cd18f08
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:57 2015 -0400

      i40evf: use capabilities flags properly

      Use the capabilities passed to us by the PF driver to control VF driver
      behavior. In the process, clean up the VLAN add/remove code so it's not
      a horrible morass of ifdefs.

      Change-ID: I1050eaf12b658a26fea6813047c9964163c70a73
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a5fdaf342aa2fa6679dcb87dad2f78f1309de29e
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:56 2015 -0400

      i40e: refactor code to remove indent

      I found a code indent that was avoidable because a whole function is 
inside
      an if block, reverse the if and move the code back a tab.

      Change-ID: I9989c8750ee61678fbf96a3b0fd7bf7cc7ef300a
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6995b36c0fc3dd97c1d641f9630d19db2cadf44f
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:54 2015 -0400

      i40e/i40evf: clean up some code

      Add missings spaces after declarations, remove another __func__ use,
      remove uncessary braces, remove unneeded breaks, and useless returns,
      and generally fix up some code.

      Change-ID: Ie715d6b64976c50e1c21531685fe0a2bd38c4244
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ee5c1e92dd01d372b8e054b5a7e1cc19a1d32815
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:53 2015 -0400

      i40evf: detect reset more reliably

      Using VFGEN_RSTAT to detect a VF reset is an endeavor that is fraught
      with peril. It's entirely too easy to miss a reset because none of the
      bits are sticky. By the time the VF driver reads the register, the reset
      may have been processed and cleaned up by the PF driver, leaving the
      register in the same state that it was before the reset.

      Instead, detect a reset with the VF_ARQLEN register. When the VF is
      reset, the enable bit in this register is cleared, and it stays cleared
      until the VF driver processes the reset and re-enables the admin queue.

      Because we now deal with multiple registers in the reset and watchdog
      tasks, rename the rstat_val variable to reg_val.

      Change-ID: Id1df17045c0992e607da0162d31807f7fc20d199
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 95e5613f75ac93d0547b7d2077030a5fe11af21e
  Author: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:52 2015 -0400

      i40e: Support FW CEE DCB UP to TC map nibble swap

      Changes parsing of AQ command Get CEE DCBX OPER CFG (0x0A07). Change is
      required because FW creates the oper_prio_tc nibbles reversed from those
      in the CEE Priority Group sub-TLV.

      Change-ID: I7d9d8641bb430d30e286fc3fac909866ef8a0de8
      Signed-off-by: Greg Bowers <gregory.j.bowers@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 66486cd71723b2b41b36759159b551230ab8763d
  Author: Serey Kong <serey.kong@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:41 2015 -0400

      i40e/i40evf: Explicitly assign enum index for VSI type

      Ran into an issue where PF's VSI type list was different from VF's,
      which was resulted in different enum index. The VSI type list can
      be different depending on what build flag is used for PF and VF.

      The change is to explicitly assign enum index for each VSI type
      so that PF and VF always reference to the same VSI type event if the
      enum lists are different.

      Change-ID: I8c0e5fdb515f324f7964df863a458073cf467e57
      Signed-off-by: Serey Kong <serey.kong@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9ac77266379d070c6d140ad44f86a99936497eeb
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:40 2015 -0400

      i40e: add switch for link polling

      There's been some need for controlling the periodic link polling for
      debugging link issues.  This patch enables switching it off and on
      through an ethtool private flag.  The link poll remains on by default,
      but can be turned off with
        ethtool --set-priv-flags p261p1 LinkPolling off
      and later turned back on with
        ethtool --set-priv-flags p261p1 LinkPolling on

      To check the current status, use
        ethtool --show-priv-flags p261p1

      Change-ID: I32e4ab654ff3eec90a06cf144899971b82d71c40
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c156f856ad8ba4f71bcdb2c92ba1a9effaa29ac1
  Author: Matt Jared <matthew.a.jared@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:39 2015 -0400

      i40e: Fix multiple link up messages

      This patch addresses an issue where multiple link up messages can be 
logged
      resulting from aq link status timing when link properties are changed (fc,
      speed, etc.); solved by using a single function to handle status printing
      and adding a mechanism to track whether link state (up or down) has
      actually changed.

      Change-ID: Ied6ed6e49dc397c77d992adc0bc9ed3767152b9d
      Signed-off-by: Matt Jared <matthew.a.jared@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3487b6c30c0dd2204dc31e14330097dff02d9a58
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:38 2015 -0400

      i40e: Fix for extra Flow Director filter in table after error

      This patch fixes a problem where the PF's fdir filter table would have an
      entry that the hw was unable to add. This notification happens in the hot
      path, so instead of trying to fix it then, we note the location in the
      failure case and delete it during regular fdir subtask callback. Without
      this patch, a case can occur where an invalid entry gets replayed and a
      valid one is not.

      Change-ID: I67831c183b5d0309876de807cc434809b74c9cb7
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1a9375eb7f987e9338c17504dd2b358b688b32d8
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:37 2015 -0400

      i40e/i40evf: Store CEE DCBX DesiredCfg and RemoteCfg

      This patch adds capability to query and store the CEE DCBX DesiredCfg
      and RemoteCfg data from the LLDP MIB.
      Added new member "desired_dcbx_config" in the i40e_hw data structure
      to hold CEE only DesiredCfg data.

      Change-ID: I19c550369594384eaff4cc63e690ca740231195d
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 909b2d16c41f3a56ff67342073ae5f2569d58084
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:36 2015 -0400

      i40e: Add parsing for CEE DCBX TLVs

      This patch adds parsing for CEE DCBX TLVs from the LLDP MIB.

      While the driver gets the DCB CEE operational configuration from Firmware
      using the "Get CEE DCBX Oper Config" AQ command there is a need to get
      the CEE DesiredCfg Tx by firmware and DCB configuration Rx from peer; for
      debug and other application purposes.

      Change-ID: I9140edf1a25a2852c7eff805d81e5eff6266178d
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 96c8d0738aff3ecf3e8b3253fb286685e35d93e6
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:35 2015 -0400

      i40e: add more verbose error messages

      Under certain circumstances, the device may not have enough resources to
      enable all of the VFs that it advertises in config space. Although the
      number of supported VFs is reported upon driver init, it is not obvious
      when this is different from the number reported in config space. To
      eliminate this confusion, add an error message explaining the problem.
      Additionally, move the 'Allocating VFs' message down below the error
      checks so as to prevent further confusion.

      Change-ID: I45b7efca53a7aebf7777be33a8bc9d615ae48ea1
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 02d109be3ddc9768c1c38709218648d0c48a4ea9
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:34 2015 -0400

      i40e: inline interrupt enable

      The interrupt enable function can be inlined by moving it to the header
      file, which decreases the function call overhead for a frequently called
      function.

      Change-ID: I3214cc99593725768642680e7b8ce7e9bba7e44d
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1e8efb42cf32982d68c1ceab3e3dc15a05157632
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:33 2015 -0400

      i40e: fix erroneous WARN_ON

      The driver was issuing a WARN_ON during ring size changes
      because the code was cloning the rx_ring struct but
      not zeroing out the pointers before allocating new memory.

      Zero out the pointers in the cloned copy before allocating
      new memory for them.  In this case the code was correctly
      avoiding memory leaks but still triggering the warning.

      Change-ID: I186dd493948e9b7254ab0593d4aad8b68808918d
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a452744bcbf706eac65abb4c98496a366820c60a
  Author: Mikulas Patocka <mpatocka@xxxxxxxxxx>
  Date:   Thu Oct 1 15:17:43 2015 -0400

      crash in md-raid1 and md-raid10 due to incorrect list manipulation

      The commit 55ce74d4bfe1b9444436264c637f39a152d1e5ac (md/raid1: ensure
      device failure recorded before write request returns) is causing crash in
      the LVM2 testsuite test shell/lvchange-raid.sh. For me the crash is 100%
      reproducible.

      The reason for the crash is that the newly added code in raid1d moves the
      list from conf->bio_end_io_list to tmp, then tests if tmp is non-empty and
      then incorrectly pops the bio from conf->bio_end_io_list (which is empty
      because the list was alrady moved).

      Raid-10 has a similar bug.

      Kernel Fault: Code=15 regs=000000006ccb8640 (Addr=0000000100000000)
      CPU: 3 PID: 1930 Comm: mdX_raid1 Not tainted 4.2.0-rc5-bisect+ #35
      task: 000000006cc1f258 ti: 000000006ccb8000 task.ti: 000000006ccb8000

           YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI
      PSW: 00001000000001001111111000001111 Not tainted
      r00-03  000000ff0804fe0f 000000001059d000 000000001059f818 
000000007f16be38
      r04-07  000000001059d000 000000007f16be08 0000000000200200 
0000000000000001
      r08-11  000000006ccb8260 000000007b7934d0 0000000000000001 
0000000000000000
      r12-15  000000004056f320 0000000000000000 0000000000013dd0 
0000000000000000
      r16-19  00000000f0d00ae0 0000000000000000 0000000000000000 
0000000000000001
      r20-23  000000000800000f 0000000042200390 0000000000000000 
0000000000000000
      r24-27  0000000000000001 000000000800000f 000000007f16be08 
000000001059d000
      r28-31  0000000100000000 000000006ccb8560 000000006ccb8640 
0000000000000000
      sr00-03  0000000000249800 0000000000000000 0000000000000000 
0000000000249800
      sr04-07  0000000000000000 0000000000000000 0000000000000000 
0000000000000000

      IASQ: 0000000000000000 0000000000000000 IAOQ: 000000001059f61c 
000000001059f620
       IIR: 0f8010c6    ISR: 0000000000000000  IOR: 0000000100000000
       CPU:        3   CR30: 000000006ccb8000 CR31: 0000000000000000
       ORIG_R28: 000000001059d000
       IAOQ[0]: call_bio_endio+0x34/0x1a8 [raid1]
       IAOQ[1]: call_bio_endio+0x38/0x1a8 [raid1]
       RP(r2): raid_end_bio_io+0x88/0x168 [raid1]
      Backtrace:
       [<000000001059f818>] raid_end_bio_io+0x88/0x168 [raid1]
       [<00000000105a4f64>] raid1d+0x144/0x1640 [raid1]
       [<000000004017fd5c>] kthread+0x144/0x160

      Signed-off-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Fixes: 55ce74d4bfe1 ("md/raid1: ensure device failure recorded before 
write request returns.")
      Fixes: 95af587e95aa ("md/raid10: ensure device failure recorded before 
write request returns.")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit f2dd80ecca5f06b46134f2bd811f046c503c756c
  Author: Daniel Axtens <dja@xxxxxxxxxx>
  Date:   Wed Sep 23 16:41:48 2015 +1000

      powerpc/powernv: Panic on unhandled Machine Check

      All unrecovered machine check errors on PowerNV should cause an
      immediate panic. There are 2 reasons that this is the right policy:
      it's not safe to continue, and we're already trying to reboot.

      Firstly, if we go through the recovery process and do not successfully
      recover, we can't be sure about the state of the machine, and it is
      not safe to recover and proceed.

      Linux knows about the following sources of Machine Check Errors:
      - Uncorrectable Errors (UE)
      - Effective - Real Address Translation (ERAT)
      - Segment Lookaside Buffer (SLB)
      - Translation Lookaside Buffer (TLB)
      - Unknown/Unrecognised

      In the SLB, TLB and ERAT cases, we can further categorise these as
      parity errors, multihit errors or unknown/unrecognised.

      We can handle SLB errors by flushing and reloading the SLB. We can
      handle TLB and ERAT multihit errors by flushing the TLB. (It appears
      we may not handle TLB and ERAT parity errors: I will investigate
      further and send a followup patch if appropriate.)

      This leaves us with uncorrectable errors. Uncorrectable errors are
      usually the result of ECC memory detecting an error that it cannot
      correct, but they also crop up in the context of PCI cards failing
      during DMA writes, and during CAPI error events.

      There are several types of UE, and there are 3 places a UE can occur:
      Skiboot, the kernel, and userspace. For Skiboot errors, we have the
      facility to make some recoverable. For userspace, we can simply kill
      (SIGBUS) the affected process. We have no meaningful way to deal with
      UEs in kernel space or in unrecoverable sections of Skiboot.

      Currently, these unrecovered UEs fall through to
      machine_check_expection() in traps.c, which calls die(), which OOPSes
      and sends SIGBUS to the process. This sometimes allows us to stumble
      onwards. For example we've seen UEs kill the kernel eehd and
      khugepaged. However, the process killed could have held a lock, or it
      could have been a more important process, etc: we can no longer make
      any assertions about the state of the machine. Similarly if we see a
      UE in skiboot (and again we've seen this happen), we're not in a
      position where we can make any assertions about the state of the
      machine.

      Likewise, for unknown or unrecognised errors, we're not able to say
      anything about the state of the machine.

      Therefore, if we have an unrecovered MCE, the most appropriate thing
      to do is to panic.

      The second reason is that since e784b6499d9c ("powerpc/powernv: Invoke
      opal_cec_reboot2() on unrecoverable machine check errors."), we
      attempt a special OPAL reboot on an unhandled MCE. This is so the
      hardware can record error data for later debugging.

      The comments in that commit assert that we are heading down the panic
      path anyway. At the moment this is not always true. With UEs in kernel
      space, for instance, they are marked as recoverable by the hardware,
      so if the attempt to reboot failed (e.g. old Skiboot), we wouldn't
      panic() but would simply die() and OOPS. It doesn't make sense to be
      staggering on if we've just tried to reboot: we should panic().

      Explicitly panic() on unrecovered MCEs on PowerNV.
      Update the comments appropriately.

      This fixes some hangs following EEH events on cxlflash setups.

      Signed-off-by: Daniel Axtens <dja@xxxxxxxxxx>
      Reviewed-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Reviewed-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit fdf880a60835cd1dec2563463ac63ae3084e0ddc
  Author: Cyril Bur <cyrilbur@xxxxxxxxx>
  Date:   Thu Oct 8 11:04:26 2015 +1100

      powerpc: Fix checkstop in native_hpte_clear() with lockdep

      native_hpte_clear() is called in real mode from two places:
      - Early in boot during htab initialisation if firmware assisted dump is
        active.
      - Late in the kexec path.

      In both contexts there is no need to disable interrupts are they are
      already disabled. Furthermore, locking around the tlbie() is only required
      for pre POWER5 hardware.

      On POWER5 or newer hardware concurrent tlbie()s work as expected and on 
pre
      POWER5 hardware concurrent tlbie()s could result in deadlock. This code
      would only be executed at crashdump time, during which all bets are off,
      concurrent tlbie()s are unlikely and taking locks is unsafe therefore the
      best course of action is to simply do nothing. Concurrent tlbie()s are not
      possible in the first case as secondary CPUs have not come up yet.

      Signed-off-by: Cyril Bur <cyrilbur@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit dcc909d90ccdbb73226397ff6d298f7af35b0e11
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Tue Oct 6 20:03:54 2015 +0200

      nbd: Add locking for tasks

      The timeout handling introduced in
        7e2893a16d3e (nbd: Fix timeout detection)
      introduces a race condition which may lead to killing of tasks that are
      not in nbd context anymore. This was not observed or reproducable yet.

      This patch adds locking to critical use of task_recv and task_send to
      avoid killing tasks that already left the NBD thread functions. This
      lock is only acquired if a timeout occures or the nbd device
      starts/stops.

      Reported-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Reviewed-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Fixes: 7e2893a16d3e ("nbd: Fix timeout detection")
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 55582bccdc1e89ecc973c260d46e247df675d4df
  Author: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 13:50:44 2015 -0700

      cpufreq: prevent lockup on reading scaling_available_frequencies

      When scaling_available_frequencies is read on an offlined cpu, then
      either lockup or junk values are displayed. This is caused by
      freed freq_table, which policy is using.

      Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit e25303676e18a7947185a34e26dd08cf0c0ea573
  Author: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 13:50:43 2015 -0700

      cpufreq: acpi_cpufreq: prevent crash on reading freqdomain_cpus

      When freqdomain_cpus attribute is read from an offlined cpu, it will
      cause crash. This change prevents calling cpufreq_show_cpus when
      policy driver_data is NULL.

      Crash info:

      [  170.814949] BUG: unable to handle kernel NULL pointer dereference at 
0000000000000018
      [  170.814990] IP: [<ffffffff813b2490>] _find_next_bit.part.0+0x10/0x70
      [  170.815021] PGD 227d30067 PUD 229e56067 PMD 0
      [  170.815043] Oops: 0000 [#2] SMP
      [  170.816022] CPU: 3 PID: 3121 Comm: cat Tainted: G      D    OE   
4.3.0-rc3+ #33
      ...
      ...
      [  170.816657] Call Trace:
      [  170.816672]  [<ffffffff813b2505>] ? find_next_bit+0x15/0x20
      [  170.816696]  [<ffffffff8160e47c>] cpufreq_show_cpus+0x5c/0xd0
      [  170.816722]  [<ffffffffa031a409>] show_freqdomain_cpus+0x19/0x20 
[acpi_cpufreq]
      [  170.816749]  [<ffffffff8160e65b>] show+0x3b/0x60
      [  170.816769]  [<ffffffff8129b31c>] sysfs_kf_seq_show+0xbc/0x130
      [  170.816793]  [<ffffffff81299be3>] kernfs_seq_show+0x23/0x30
      [  170.816816]  [<ffffffff81240f2c>] seq_read+0xec/0x390
      [  170.816837]  [<ffffffff8129a64a>] kernfs_fop_read+0x10a/0x160
      [  170.816861]  [<ffffffff8121d9b7>] __vfs_read+0x37/0x100
      [  170.816883]  [<ffffffff813217c0>] ? security_file_permission+0xa0/0xc0
      [  170.816909]  [<ffffffff8121e2e3>] vfs_read+0x83/0x130
      [  170.816930]  [<ffffffff8121f035>] SyS_read+0x55/0xc0
      ...
      ...
      [  170.817185] ---[ end trace bc6eadf82b2b965a ]---

      Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Cc: 4.2+ <stable@xxxxxxxxxxxxxxx> # 4.2+
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 88c6eb0e3b81a30514d21679735fa25d028c2299
  Author: ludovic.desroches@xxxxxxxxx <ludovic.desroches@xxxxxxxxx>
  Date:   Thu Sep 17 10:16:20 2015 +0200

      mmc: sdhci-of-at91: use SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST quirk

      The Atmel sdhci device needs the
      SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST quirk. Without it, the
      internal clock could never stabilised when changing the sd clock
      frequency.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit af951761d01c89eea8f1dcccf8010218e4b55817
  Author: ludovic.desroches@xxxxxxxxx <ludovic.desroches@xxxxxxxxx>
  Date:   Thu Sep 17 10:16:19 2015 +0200

      mmc: sdhci: add quirk SDHCI_QUIRK2_NEED_DELAY_AFTER_INT_CLK_RST

      The Atmel sdhci device needs a new quirk. sdhci_set_clock set the Clock
      Control Register to 0 before computing the new value and writing it.
      It disables the internal clock which causes a reset mecanism. If we
      write the new value before this reset mecanism is done, it will prevent
      the stabilisation of the internal clock, so a delay is needed. This
      delay is about 2-3 cycles of the base clock. To be safe, a 1 ms delay is
      used.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 348a65cdcbbf243073ee39d1f7d4413081ad7eab
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:25 2015 -0500

      arm64: Mark kernel page ranges contiguous

      With 64k pages, the next larger segment size is 512M. The linux
      kernel also uses different protection flags to cover its code and data.
      Because of this requirement, the vast majority of the kernel code and
      data structures end up being mapped with 64k pages instead of the larger
      pages common with a 4k page kernel.

      Recent ARM processors support a contiguous bit in the
      page tables which allows the a TLB to cover a range larger than a
      single PTE if that range is mapped into physically contiguous
      ram.

      So, for the kernel its a good idea to set this flag. Some basic
      micro benchmarks show it can significantly reduce the number of
      L1 dTLB refills.

      Add boot option to enable/disable CONT marking, as well as fix a
      bug found by Steve Capper.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      [catalin.marinas@xxxxxxx: remove CONFIG_ARM64_CONT_PTE altogether]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 202e41a1c257eb56a05b5ff5bfde06f7ae98e6eb
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:23 2015 -0500

      arm64: Make the kernel page dump utility aware of the CONT bit

      The kernel page dump utility needs to be aware of the CONT bit before
      it will break up pages ranges for display.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 06f90d2527845c4767207f54280df2c5ca11e82b
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:22 2015 -0500

      arm64: Default kernel pages should be contiguous

      The default page attributes for a PMD being broken should have the CONT 
bit
      set. Create a new definition for an early boot range of PTE's that are
      contiguous.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 93ef666a094ff9c9fc8d7cf1774ef0b92e270a75
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:21 2015 -0500

      arm64: Macros to check/set/unset the contiguous bit

      Add the supporting macros to check if the contiguous bit
      is set, set the bit, or clear it in a PTE entry.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ecf35a237a85d747ef1d6f713888c782f42064ac
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:20 2015 -0500

      arm64: PTE/PMD contiguous bit definition

      Define the bit positions in the PTE and PMD for the
      contiguous bit.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 2ff4439bb45a05433282d4fa9ca84202147819c7
  Author: Jeremy Linton <jeremy.linton@xxxxxxx>
  Date:   Wed Oct 7 12:00:19 2015 -0500

      arm64: Add contiguous page flag shifts and constants

      Add the number of pages required to form a contiguous range,
      as well as some supporting constants.

      Signed-off-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 2162d9f41e7c4778b96b8e3b97adcedbadc861f1
  Author: Marcin Wojtas <mw@xxxxxxxxxxxx>
  Date:   Tue Oct 6 03:22:37 2015 +0200

      mmc: sdhci-pxav3: fix error handling of armada_38x_quirks

      In case of armada_38x_quirks error, all clocks should be cleaned-up, same
      as after mv_conf_mbus_windows failure.

      Signed-off-by: Marcin Wojtas <mw@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Reviewed-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit fa7964147da57b2d40c2db2b6ed98fb7dc934bff
  Author: Nadav Haklai <nadavh@xxxxxxxxxxx>
  Date:   Tue Oct 6 03:22:36 2015 +0200

      mmc: sdhci-pxav3: disable clock inversion for HS MMC cards

      According to 'FE-2946959' erratum the clock inversion option is
      needed to support slow frequencies when the card input hold time
      requirement is high. This setting is not required for high speed
      MMC and might cause timing violation.

      Signed-off-by: Nadav Haklai <nadavh@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Reviewed-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 5de76bfcb1e5ac66c57b99e8e193dacac7416f0e
  Author: Nadav Haklai <nadavh@xxxxxxxxxxx>
  Date:   Tue Oct 6 03:22:35 2015 +0200

      mmc: sdhci-pxav3: remove broken clock base quirk for Armada 38x sdhci 
driver

      shci-pxav3 driver is enabling by default the
      SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN quirk. However this quirk is not
      required for Armada 38x and leads to wrong clock setting in the divider.

      Signed-off-by: Nadav Haklai <nadavh@xxxxxxxxxxx>
      Signed-off-by: Marcin Wojtas <mw@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Reviewed-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7a574557e62dc3d2d7ed55fa0b99e7d5bb403878
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Oct 8 19:28:01 2015 +0530

      drm/amdgpu: fix memory leak in amdgpu_vm_update_page_directory

      If amdgpu_ib_get() fails we returned the error code but we missed
      freeing ib.

      Cc: "Christian König" <christian.koenig@xxxxxxx>
      Cc: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Cc: Chunming Zhou <david1.zhou@xxxxxxx>
      Cc: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: "monk.liu" <monk.liu@xxxxxxx>
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 7a5692e6e533fd379081ab06fb58f3f5ee4d80bc
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Wed Oct 7 09:29:11 2015 -0400

      arch/powerpc: provide zero_bytemask() for big-endian

      For some reason, only the little-endian flavor of
      powerpc provided the zero_bytemask() implementation.

      Reported-by: Michal Sojka <sojkam1@xxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 9ad92bdff7062d9925754607f5a92b4f651fc7d3
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Wed Oct 7 13:23:29 2015 +0100

      hwrng: st - Improve FIFO size/depth description

      The original representation of FIFO size in the driver coupled with the
      ambiguity in the documentation meant that it was easy to confuse readers.
      This lead to a false positive BUG-find and subsequently time wastage
      debugging this phantom issue.

      Hopefully this patch can prevent future readers from falling into the
      same trap.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 93d649bd94e1003e2a766a59fadba0cc0089d58b
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Wed Oct 7 13:23:28 2015 +0100

      hwrng: st - Use real-world device timings for timeout

      Samples are documented to be available every 0.667us, so in theory
      the 8 sample deep FIFO should take 5.336us to fill.  However, during
      thorough testing, it became apparent that filling the FIFO actually
      takes closer to 12us.

      Also take into consideration that udelay() can behave oddly i.e. not
      delay for as long as requested.

        Suggested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>:

          "IIRC, Linus recommends a x2 factor on delays, especially
           timeouts generated by these functions.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8fd80f8ca60bdeda4f3098986e8a566ba9c0c57a
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Wed Oct 7 13:23:27 2015 +0100

      hwrng: st: dt: Fix trivial typo in node address

      DT nodes should not append their addresses with '0x'.

      Suggested-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 9d83d299549d0e121245d56954242750d0c14338
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Oct 2 14:12:58 2015 +0200

      crypto: atmel - Check for clk_prepare_enable() return value

      clk_prepare_enable() can fail so add a check for this and
      return the error code if it fails.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c6415a6016bff0b547c13cadb1d5e50e9ace2be3
  Author: Catalin Vasile <catalin.vasile@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 13:13:18 2015 +0300

      crypto: caam - add support for acipher xts(aes)

      Add support for AES working in XEX-based Tweaked-codebook mode with
      ciphertext Stealing (XTS)

      sector index - HW limitation: CAAM device supports sector index of only
      8 bytes to be used for sector index inside IV, instead of whole 16 bytes
      received on request. This represents 2 ^ 64 = 16,777,216 Tera of possible
      values for sector index.

      Signed-off-by: Cristian Hristea <cristi.hristea@xxxxxxxxx>
      Signed-off-by: Horia Geanta <horia.geanta@xxxxxxxxxxxxx>
      Signed-off-by: Alex Porosanu <alexandru.porosanu@xxxxxxxxxxxxx>
      Signed-off-by: Catalin Vasile <catalin.vasile@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit fea40451530fea9ed3efd31eb932d1855a3a6e2d
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Oct 2 08:01:02 2015 +0200

      crypto: qce - dma_map_sg can handle chained SG

      The qce driver use two dma_map_sg path according to SG are chained
      or not.
      Since dma_map_sg can handle both case, clean the code with all
      references to sg chained.

      Thus removing qce_mapsg, qce_unmapsg and qce_countsg functions.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 166db195536f380c4545a8d2fca9789402464bc8
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Thu Oct 1 16:32:50 2015 -0500

      crypto: ccp - Use module name in driver structures

      The convention is to use the name of the module in the driver structures
      that are used for registering the device. The CCP module is currently
      using a descriptive name. Replace the descriptive name with module name.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 21dc9e8f941f8693992230d189a556b220b50f5b
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Thu Oct 1 16:32:44 2015 -0500

      crypto: ccp - Change references to accelerator to offload

      The CCP is meant to be more of an offload engine than an accelerator
      engine. To avoid any confusion, change references to accelerator to
      offload.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 52948cef8406a5f75484e2922b7140bc7c17f3f9
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Thu Oct 1 16:32:38 2015 -0500

      crypto: ccp - Remove use ACPI field

      With the creation of the device_dma_is_coherent API the "use_acpi" field
      is no longer needed, so remove it.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 355eba5dda6984cbe10fa914e5cc8ef45a34cce2
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Thu Oct 1 16:32:31 2015 -0500

      crypto: ccp - Replace BUG_ON with WARN_ON and a return code

      Replace the usage of BUG_ON with WARN_ON and return an error.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 92b279070dd6c94265db32748bbeb5b583588de9
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 12:31:33 2015 +0100

      crypto: camellia_aesni_avx - Fix CPU feature checks

      We need to explicitly check the AVX and AES CPU features, as we can't
      infer them from the related XSAVE feature flags.  For example, the
      Core i3 2310M passes the XSAVE feature test but does not implement
      AES-NI.

      Reported-and-tested-by: Stéphane Glondu <glondu@xxxxxxxxxx>
      References: https://bugs.debian.org/800934
      Fixes: ce4f5f9b65ae ("x86/fpu, crypto x86/camellia_aesni_avx: 
Simplify...")
      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx> # 4.2
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit a66d7f724a96d6fd279bfbd2ee488def6b081bea
  Author: Dave Kleikamp <dave.kleikamp@xxxxxxxxxx>
  Date:   Mon Oct 5 10:08:51 2015 -0500

      crypto: sparc - initialize blkcipher.ivsize

      Some of the crypto algorithms write to the initialization vector,
      but no space has been allocated for it. This clobbers adjacent memory.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Kleikamp <dave.kleikamp@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f640ee98bbeaa169684a571e0b96bea563bb6015
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 12:35:42 2015 +0200

      Bluetooth: Fix basic debugfs entries for unconfigured controllers

      When the controller is unconfigured (for example it does not have a
      valid Bluetooth address), then the basic debugfs entries for dut_mode
      and vendor_diag are not creates. Ensure they are created in __hci_init
      and also __hci_unconf_init functions. One of them is called during setup
      stage of a new controller.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit df718423250c000ca4323a767cedc2f3219b685c
  Merge: 28335a7 3ad0040
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 05:26:44 2015 -0700

      Merge branch 'bpf_random32'

      Daniel Borkmann says:

      ====================
      BPF/random32 updates

      BPF update to split the prandom state apart, and to move the
      *once helpers to the core. For details, please see individual
      patches. Given the changes and since it's in the tree for
      quite some time, net-next is a better choice in our opinion.

      v1 -> v2:
       - Make DO_ONCE() type-safe, remove the kvec helper. Credits
         go to Alexei Starovoitov for the __VA_ARGS__ hint, thanks!
       - Add a comment to the DO_ONCE() helper as suggested by Alexei.
       - Rework prandom_init_once() helper to the new API.
       - Keep Alexei's Acked-by on the last patch.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ad0040573b0c00f88488bc31958acd07a55ee2e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:39 2015 +0200

      bpf: split state from prandom_u32() and consolidate {c, e}BPF prngs

      While recently arguing on a seccomp discussion that raw prandom_u32()
      access shouldn't be exposed to unpriviledged user space, I forgot the
      fact that SKF_AD_RANDOM extension actually already does it for some time
      in cBPF via commit 4cd3675ebf74 ("filter: added BPF random opcode").

      Since prandom_u32() is being used in a lot of critical networking code,
      lets be more conservative and split their states. Furthermore, consolidate
      eBPF and cBPF prandom handlers to use the new internal PRNG. For eBPF,
      bpf_get_prandom_u32() was only accessible for priviledged users, but
      should that change one day, we also don't want to leak raw sequences
      through things like eBPF maps.

      One thought was also to have own per bpf_prog states, but due to ABI
      reasons this is not easily possible, i.e. the program code currently
      cannot access bpf_prog itself, and copying the rnd_state to/from the
      stack scratch space whenever a program uses the prng seems not really
      worth the trouble and seems too hacky. If needed, taus113 could in such
      cases be implemented within eBPF using a map entry to keep the state
      space, or get_random_bytes() could become a second helper in cases where
      performance would not be critical.

      Both sides can trigger a one-time late init via prandom_init_once() on
      the shared state. Performance-wise, there should even be a tiny gain
      as bpf_user_rnd_u32() saves one function call. The PRNG needs to live
      inside the BPF core since kernels could have a NET-less config as well.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Chema Gonzalez <chema@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 897ece56e714a2cc64e6914cb89a362d7021b36e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:38 2015 +0200

      random32: add prandom_init_once helper for own rngs

      Add a prandom_init_once() facility that works on the rnd_state, so that
      users that are keeping their own state independent from prandom_u32() can
      initialize their taus113 per cpu states.

      The motivation here is similar to net_get_random_once(): initialize the
      state as late as possible in the hope that enough entropy has been
      collected for the seeding. prandom_init_once() makes use of the recently
      introduced prandom_seed_full_state() helper and is generic enough so that
      it could also be used on fast-paths due to the DO_ONCE().

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0dd50d1b0c003ab4f17597fe1198bb57a2fadc06
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:37 2015 +0200

      random32: add prandom_seed_full_state helper

      Factor out the full reseed handling code that populates the state
      through get_random_bytes() and runs prandom_warmup(). The resulting
      prandom_seed_full_state() will be used later on in more than the
      current __prandom_reseed() user. Fix also two minor whitespace
      issues along the way.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c90aeb948222a7b3d3391d232ec4f50fd8322ad3
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:36 2015 +0200

      once: make helper generic for calling functions once

      Make the get_random_once() helper generic enough, so that functions
      in general would only be called once, where one user of this is then
      net_get_random_once().

      The only implementation specific call is to get_random_bytes(), all
      the rest of this *_once() facility would be duplicated among different
      subsystems otherwise. The new DO_ONCE() helper will be used by prandom()
      later on, but might also be useful for other scenarios/subsystems as
      well where a one-time initialization in often-called, possibly fast
      path code could occur.

      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 46234253b9363894a254844a6550b4cc5f3edfe8
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 01:20:35 2015 +0200

      net: move net_get_random_once to lib

      There's no good reason why users outside of networking should not
      be using this facility, f.e. for initializing their seeds.

      Therefore, make it accessible from there as get_random_once().

      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d6a6aed22f91b35c14a6717d42953f260090175
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Oct 2 20:28:04 2015 +0200

      6lowpan: move shared settings to lowpan_netdev_setup

      This patch moves values for all lowpan interface to the shared
      implementation of 6lowpan. This patch also quietly fixes the forgotten
      IFF_NO_QUEUE flag for the bluetooth 6LoWPAN interface. An identically
      commit is 4afbc0d ("net: 6lowpan: convert to using IFF_NO_QUEUE") which
      wasn't changed for bluetooth 6lowpan.

      All 6lowpan interfaces should be virtual with IFF_NO_QUEUE, using EUI64
      address length, the mtu size is 1280 (IPV6_MIN_MTU) and the netdev type
      is ARPHRD_6LOWPAN.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 85121d6ee6973f98789bf7343f7f636c01e2de19
  Author: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 12:31:46 2015 -0400

      net/mlx4: Remove shared_ports variable at mlx4_enable_msi_x

      If we get MAX_MSIX interrupts would like to have each receive ring
      with his own msix interrupt line. Do not need the shared_ports
      variable at mlx4_enable_msix

      Fixes: 9293267a3e2a ('net/mlx4_core: Capping number of requested MSIXs to 
MAX_MSIX')
      Signed-off-by: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
      Acked-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 28335a7445202a3d118145a07d9138e9881ebe18
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 08:40:13 2015 -0700

      net: Do not drop to make_route if oif is l3mdev

      Commit deaa0a6a930 ("net: Lookup actual route when oif is VRF device")
      exposed a bug in __ip_route_output_key_hash for VRF devices: on FIB lookup
      failure if the oif is specified the current logic drops to make_route on
      the assumption that the route tables are wrong. For VRF/L3 master devices
      this leads to wrong dst entries and route lookups. For example:
          $ ip route ls table vrf-red
          unreachable default
          broadcast 10.2.1.0 dev eth1  proto kernel  scope link  src 10.2.1.2
          10.2.1.0/24 dev eth1  proto kernel  scope link  src 10.2.1.2
          local 10.2.1.2 dev eth1  proto kernel  scope host  src 10.2.1.2
          broadcast 10.2.1.255 dev eth1  proto kernel  scope link  src 10.2.1.2

          $ ip route get oif vrf-red 1.1.1.1
          1.1.1.1 dev vrf-red  src 10.0.0.2
              cache

      With this patch:
          $  ip route get oif vrf-red 1.1.1.1
          RTNETLINK answers: No route to host

      which is the correct response based on the default route

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9d3a6386c8238bfacf57ee9dac68ec4b40b302fe
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Wed Oct 7 10:26:38 2015 +0200

      net: mdio-octeon: Drop obsolete Kconfig advice

      "Y" was the right answer for MDIO_OCTEON when this option was only
      available on CAVIUM_OCTEON_SOC. But now that the option is visible on
      all (64-bit) systems, this piece of advice no longer makes sense. This
      helper module is selected automatically by drivers which need it
      anyway.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Fixes: a6d6786452 ("net: mdio-octeon: Modify driver to work on both 
ThunderX and Octeon")
      Cc: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Cc: Radha Mohan Chintakuntla <rchintakuntla@xxxxxxxxxx>
      Cc: David Daney <david.daney@xxxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Acked-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bcb9db49bb9da895ee809bfb2718d664dfb3ee2f
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 7 08:58:34 2015 +0200

      mlxsw: fix warnings for big-endian 32-bit dma_addr_t

      The recently added mlxsw driver produces warnings in ARM
      allmodconfig:

      drivers/net/ethernet/mellanox/mlxsw/pci.c: In function 
'mlxsw_pci_cmd_exec':
      drivers/net/ethernet/mellanox/mlxsw/pci.c:1585:59: warning: right shift 
count >= width of type [-Wshift-count-overflow]
      linux/byteorder/big_endian.h:38:51: note: in definition of macro 
'__cpu_to_be32'
      drivers/net/ethernet/mellanox/mlxsw/pci.c:76:2: note: in expansion of 
macro 'iowrite32be'

      This uses upper_32_bits() to extract the bits while avoiding that warning.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Fixes: eda6500a987a "mlxsw: Add PCI bus implementation"
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cfc81b50387086c3a1ca6d2be3c46561edfbc3b5
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 10:16:09 2015 +0200

      bpf, skb_do_redirect: clear sender_cpu before xmit

      Similar to commit c29390c6dfee ("xps: must clear sender_cpu before
      forwarding"), we also need to clear the skb->sender_cpu when moving
      from RX to TX via skb_do_redirect() due to the shared location of
      napi_id (used on RX) and sender_cpu (used on TX).

      Fixes: 27b29f63058d ("bpf: add bpf_redirect() helper")
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6bf0577374cfb6c2301dbf4934a4f23ad3d72763
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 6 20:46:07 2015 -0700

      bpf: clear sender_cpu before xmit

      Similar to commit c29390c6dfee ("xps: must clear sender_cpu before 
forwarding")
      the skb->sender_cpu needs to be cleared before xmit.

      Fixes: 3896d655f4d4 ("bpf: introduce bpf_clone_redirect() helper")
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d40496a56430eac0d330378816954619899fe303
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Tue Oct 6 17:23:47 2015 -0700

      act_mirred: clear sender cpu before sending to tx

      Similar to commit c29390c6dfee ("xps: must clear sender_cpu before 
forwarding")
      the skb->sender_cpu needs to be cleared when moving from Rx
      Tx, otherwise kernel could crash.

      Fixes: 2bd82484bb4c ("xps: fix xps for stacked devices")
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dfdd7230c5a2d9d675b4e7d6e111a8ead13cfb11
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 23:53:57 2015 +0200

      net: hns: fix 32-bit build warning

      The recently added hns driver causes a build warning in ARM
      allmodconfig builds:

      drivers/net/ethernet/hisilicon/hns/hnae.c: In function 'handles_show':
      drivers/net/ethernet/hisilicon/hns/hnae.c:452:13: warning: cast from 
pointer to integer of different size [-Wpointer-to-int-cast]
                j, (u64)h->qs[i]->io_base);
                   ^

      This removes the pointless cast and prints the pointer address using
      the "%p" format string in all three locations.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d70e53262f5cfc0b88a211ef9cbd1ca5256f4a6b
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 16:37:46 2015 -0400

      net: Microchip encx24j600 driver

      This ethernet driver supports the Micorchip enc424j600/626j600 Ethernet
      controller over a SPI bus interface. This driver makes use of the regmap 
API to
      optimize access to registers by caching registers where possible.

      Datasheet:
      http://ww1.microchip.com/downloads/en/DeviceDoc/39935b.pdf

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 494f8eb9b616590c78bb1974aed835a842f012b6
  Merge: 91d2f14 9200c27
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:46:03 2015 -0700

      Merge branch 'broadcom-iproc'

      Arun Parameswaran says:

      ====================
      Add support for Broadcom's iProc MDIO and Cygnus Ethernet PHY

      This patchset adds support for the iProc MDIO interface and the
      Broadcom Cygnus SoC's internal Ethernet PHY.

      The internal Ethernet PHY(s) in the Cygnus SoC's are accessed
      via the MDIO interface found in most of the iProc based chips.

      The patch also consolidates the common API's used by the
      Broadcom phys to a common library. Existing Broadcom phy
      drivers have been modified to use the common library API's.

      This patch series is based on Linux v4.3-rc1 and is avaliable in:
      https://github.com/Broadcom/cygnus-linux/tree/cygnus-net-phy-mdio-v3

      The Ethernet driver for the iProc family will be submitted soon,
      as will the device tree configurations for the different iProc
      family SoCs.

      Changes from v2:
      - Modified drivers/net/phy/Kconfig to modify the BCM_CYGNUS_PHY
        driver to 'depends on MDIO_BCM_IPROC' instead of 'select'.
      - Added github branch to the cover letter

      Changes from v1:
      - Updated device tree documentation for the iProc MDIO driver
        based on Florian's feedback.
      - Moved the core register defines from the Cygnus PHY driver to
        'include/linux/brcmphy.h' based on Florian's feedback.
      - Created a new patch/commit to modify the bcm7xxx phy driver
        to use the new core register defines.
      - Modified the Kconfig entry for the Broadcom PHY library to
        'tristate' instead of 'bool'
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9200c27a1cc7ac719e4c43411e5a170144ba0ac5
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:50 2015 -0700

      net: phy: bcm7xxx: Modified to use global core register defines

      Modified the bcm7xxx phy driver to remove local core register
      defines and use the common ones from "include/linux/brcmphy.h"

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e185d6997bb67068f0ca8f062a50caa2608cf1b
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:49 2015 -0700

      net: phy: Broadcom Cygnus internal Etherent PHY driver

      Add support for the Broadcom Cygnus SoCs internal PHY's.
      The PHYs are 1000M/100M/10M capable with support for 'EEE'
      and 'APD' (Auto Power Down).

      This driver supports the following Broadcom Cygnus SoCs:
       - BCM583XX (BCM58300, BCM58302, BCM58303, BCM58305)
       - BCM113XX (BCM11300, BCM11320, BCM11350, BCM11360)

      The PHY's on these SoC's require some workarounds for
      stable operation, both during configuration time and
      during suspend/resume. This driver handles the
      application of the workarounds.

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1cba5613edf50c2a213fa90c30aa10500b241b7
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:48 2015 -0700

      net: phy: Add Broadcom phy library for common interfaces

      This patch adds the Broadcom phy library to consolidate common
      interfaces shared by Broadcom phy's.

      Moved the common interfaces to the 'bcm-phy-lib.c' and updated
      the Broadcom PHY drivers to use the new APIs.

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ddc24ae1fd6ae2638365b0b824750b5b2ef13ca5
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:47 2015 -0700

      net: phy: Broadcom iProc MDIO bus driver

      This patch adds support for the Broadcom iProc MDIO bus interface.
      The MDIO interface can be found in the Broadcom iProc family Soc's.

      The MDIO bus is accessed using a combination of command and data
      registers. This MDIO driver provides access to the Etherent GPHY's
      connected to the MDIO bus.

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bb257c3813613ce11329568c21c200e95afe6fc1
  Author: Arun Parameswaran <arunp@xxxxxxxxxxxx>
  Date:   Tue Oct 6 12:25:46 2015 -0700

      dt-bindings: net: Broadcom iProc MDIO bus driver device tree binding

      Add device tree binding documentation for the Broadcom iProc MDIO
      bus driver.

      Signed-off-by: Arun Parameswaran <arunp@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 91d2f14bc38336177c2d65e0c2cbf6447133cee1
  Merge: 6b92d0c 0676651
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:38:37 2015 -0700

      Merge branch 'net/rds/4.3-v3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/ssantosh/linux

      Santosh Shilimkar says:

      ====================
      RDS: connection scalability and performance improvements

      [v4]
      Re-sending the same patches from v3 again since my repost of
      patch 05/14 from v3 was whitespace damaged.

      [v3]
      Updated patch "[PATCH v2 05/14] RDS: defer the over_batch work to
      send worker" as per David Miller's comment [4] to avoid the magic
      value usage. Patch now makes use of already available but unused
      send_batch_count module parameter. Rest of the patches are same as
      earlier version v2 [3]

      [v2]:
      Dropped "[PATCH 05/15] RDS: increase size of hash-table to 8K" from
      earlier version [1]. I plan to address the hash table scalability using
      re-sizable hash tables as suggested by David Laight and David Miller [2]

      This series addresses RDS connection bottlenecks on massive workloads and
      improve the RDMA performance almost by 3X. RDS TCP also gets a small gain
      of about 12%.

      RDS is being used in massive systems with high scalability where several
      hundred thousand end points and tens of thousands of local processes
      are operating in tens of thousand sockets. Being RC(reliable connection),
      socket bind and release happens very often and any inefficiencies in
      bind hash look ups hurts the overall system performance. RDS bin 
hash-table
      uses global spin-lock which is the biggest bottleneck. To make matter 
worst,
      it uses rcu inside global lock for hash buckets.
      This is being addressed by simply using per bucket rw lock which makes the
      locking simple and very efficient. The hash table size is still an issue 
and
      I plan to address it by using re-sizable hash tables as suggested on the 
list.

      For RDS RDMA improvement, the completion handling is revamped so that we
      can do batch completions. Both send and receive completion handlers are
      split logically to achieve the same. RDS 8K messages being one of the
      key usecase, mr pool is adapted to have the 8K mrs along with default 1M
      mrs. And while doing this, few fixes and couple of bottlenecks seen with
      rds_sendmsg() are addressed.

      Series applies against 4.3-rc1 as well net-next. Its tested on Oracle
      hardware with IB fabric for both bcopy as well as RDMA mode. RDS TCP is
      tested with iXGB NIC. Like last time, iWARP transport is untested with
      these changes. The patchset is also available at below git repo:

      git://git.kernel.org/pub/scm/linux/kernel/git/ssantosh/linux.git 
net/rds/4.3-v3

      As a side note, the IB HCA driver I used for testing misses at least 3
      important patches in upstream to see the full blown IB performance and
      am hoping to get that in mainline with help of them.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6b92d0c4a6eefd32da7ecaf6873cb7e7e7602cfa
  Merge: e28383d ede2059
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:27:13 2015 -0700

      Merge branch 'pass_net_through_output_path'

      Eric W. Biederman says:

      ====================
      net: Pass net through the output path v2

      This is the next installment of my work to pass struct net through the
      output path so the code does not need to guess how to figure out which
      network namespace it is in, and ultimately routes can have output
      devices in another network namespace.

      The first patch in this series is a fix for a bug that came in when sk
      was passed through the functions in the output path, and as such is
      probably a candidate for net.  At the same time my later patches depend
      on it so sending the fix separately would be confusing.

      The second patch in this series is another fix that for an issue that
      came in when sk was passed through the output path.  I don't think it
      needs a backport as I don't think anyone uses the path where the code
      was incorrect.

      The rest of the patchset focuses on the path from xxx_local_out to
      dst_output and in the end succeeds in passing sock_net(sk) from the
      socket a packet locally originates on to the dst->output function.

      Given the size reduction in the code I think this counts as a cleanup as
      much as feature work.

      There remain a number of helper functions (like ip option processing) to
      take care of before the network stack can support destination devices in
      other network namespaces but with this set of changes the backbone of
      the work is done.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ede2059dbaf9c6557a49d466c8c7778343b208ff
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:47 2015 -0500

      dst: Pass net into dst->output

      The network namespace is already passed into dst_output pass it into
      dst->output lwt->output and friends.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 33224b16ffccb49cf798317670389e0bfba0024c
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:46 2015 -0500

      ipv4, ipv6: Pass net into ip_local_out and ip6_local_out

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cf91a99daa4651d0c1f52b8c3d813fd44b43cada
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:45 2015 -0500

      ipv4, ipv6: Pass net into __ip_local_out and __ip6_local_out

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 57c4bf859cad9d6c4f73d8c98a95e00f156301e0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:44 2015 -0500

      ipvlan: Cache net in ipvlan_process_v4_outbound and 
ipvlan_process_v6_outbound

      Compute net once in ipvlan_process_v4_outbound and
      ipvlan_process_v6_outbound and store it in a variable so that net does
      not need to be recomputed next time it is used.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a7093fefa543afad2bf292bba163800e81a4ba33
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:43 2015 -0500

      ppp: Cache net in pptp_xmit

      Compute net and store it in a variable in pptp_xmit, so that the value
      can be reused the next time it is needed.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77589ce0f84dd99cc946fd71fe6fb44dd8220d0a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:42 2015 -0500

      ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit

      Compute net and store it in a variable in the functions
      ip_build_and_send_pkt and ip_queue_xmit so that it does not need to be
      recomputed next time it is needed.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f859b0f662493e4f53d462f5759e3c4302933077
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:41 2015 -0500

      ipv4: Cache net in iptunnel_xmit

      Store net in a variable in ip_tunnel_xmit so it does not need
      to be recomputed when it is used again.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 792883303cdb3a7edd16017d7aba53926189ef41
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:40 2015 -0500

      ipv6: Merge ip6_local_out and ip6_local_out_sk

      Stop hidding the sk parameter with an inline helper function and make
      all of the callers pass it, so that it is clear what the function is
      doing.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f8955cc468ddb7d08a0e614a45f9a82c4019b00
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:39 2015 -0500

      ipv6: Merge __ip6_local_out and __ip6_local_out_sk

      Only __ip6_local_out_sk has callers so rename __ip6_local_out_sk
      __ip6_local_out and remove the previous __ip6_local_out.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e2cb77db089796f163092326ca25512845df7a3a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:38 2015 -0500

      ipv4: Merge ip_local_out and ip_local_out_sk

      It is confusing and silly hiding a parameter so modify all of
      the callers to pass in the appropriate socket or skb->sk if
      no socket is known.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b92dacd45698e120104ff81066ceb534916090d9
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:37 2015 -0500

      ipv4: Merge __ip_local_out and __ip_local_out_sk

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ebdfba73c09d8568d891bae87c40fad43dd7f41
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:36 2015 -0500

      dst: Pass a sk into .local_out

      For consistency with the other similar methods in the kernel pass a
      struct sock into the dst_ops .local_out method.

      Simplifying the socket passing case is needed a prequel to passing a
      struct net reference into .local_out.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 13206b6bff3b15b724926a222406476bf2c23c40
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:35 2015 -0500

      net: Pass net into dst_output and remove dst_output_okfn

      Replace dst_output_okfn with dst_output

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3f5312ae620c79e877a6aa0e8894c6603a090b4e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:34 2015 -0500

      xfrm: Only compute net once in xfrm_policy_queue_process

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 850dcc4d4dd7d5da5c1b2a780c5e649c3b649545
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:33 2015 -0500

      ipv4: Fix ip_queue_xmit to pass sk into ip_local_out_sk

      After a packet has been encapsulated by a tunnel we should use the
      tunnel sockets local multicast loopback flag to control if the
      encapsulated packet should be locally loopback back.

      Pass sk into ip_local_out_sk so that in the rare case we are dealing
      with a tunneled packet whose tunnel destination address is a multicast
      address the kernel properly decides to loopback this packet.

      In practice I don't think this matters as ip_queue_xmit is used by
      tcp, l2tp and sctp none of which I am aware of uses ip level
      multicasting as they are all point to point communications protocols.
      Let's fix this before someone uses ip_queue_xmit for a tunnel protocol
      that does use multicast.

      Fixes: aad88724c9d5 ("ipv4: add a sock pointer to dst->output() path.")
      Fixes: b0270e91014d ("ipv4: add a sock pointer to ip_queue_xmit()")
      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd2874b3bbe832e90ac480971a7a8bd736b629b9
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:48:32 2015 -0500

      ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk

      In the rare case where sk != skb->sk ip_local_out_sk arranges
      to call dst->output differently if the skb is queued or not.
      This is a bug.

      Fix this bug by passing the sk parameter of ip_local_out_sk through
      from ip_local_out_sk to __ip_local_out_sk (skipping __ip_local_out).

      Fixes: 7026b1ddb6b8 ("netfilter: Pass socket pointer down through 
okfn().")
      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e28383dd28afafefb0e445354c88f7b1e99aae9d
  Merge: 61d0372 7fd0ac6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:21:09 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-07

      This series contains updates to i40e and i40evf only.

      Paul updates i40e to simply increase the amount of time we wait for a
      reset to complete since we have seen in some rare occasions the reset
      can take longer to complete.

      Shannon updates the driver to turn on Wake-on-LAN by default if it is
      enabled in the hardware config to begin with, rather than always disable
      it and wait for the user to expressly turn it on.  Added new device id's
      and support for future devices.  Fixed a possible type compare problem
      between a size and possible negative number.  Also fixed a shift value
      that was wrong, which ended up with a bad bitmask.  Did general house
      cleaning of the driver to cleanup several low lying fruit in the
      driver.  Fixed an issue where new unicast address's would be added to
      the VSI list and then immediately removed and would never actually
      make it down to the hardware.  Resolved the issue by removing the
      separation from unicast and multicast in the search for filters to be
      deleted.

      Mitch fixes an issue where the hardware would continue to access the
      memory formerly used by the rings for a VF which have been removed,
      causing memory corruption or DMAR errors.  To relieve this condition,
      explicitly stop all rings associated with each VF before releasing its
      resources.  Also fixed a panic if the driver is unable to enable MSI-X
      or its unable to acquire enough vectors, so propagate interrupt
      allocation failure information to the calling function.  Cleaned up
      opcode that is not required.

      Carolyn extends the size of the test available for the interrupt names
      so that all the descriptive data available for the Flow Director
      interrupts is not truncated.

      Catherine fixes an issue where there was a possibility of speed getting
      set to 0 if advertised is set to 0 (which is the case when autoneg is
      disabled).

      Jesse fixes the checksum on big endian machines, so added code to swap
      it correctly.  Also fixed a bug in the return from get_link_status()
      where only true or false was being returned, but false could mean
      multiple things.  So allow the caller to get all the return values
      in the call chain bubbled back to the source so that the reason for
      the failure does not get lost.

      Anjali adds statistics to keep track of how many times we ask the stack
      to linearize the SKB because the hardware cannot handle SKBs with more
      than 8 frags per segment/single packet.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c72eda0608a30ca6aa8722d4afdbd2557b3c9345
  Author: Paul Moore <pmoore@xxxxxxxxxx>
  Date:   Tue Oct 6 15:03:53 2015 -0400

      af_unix: constify the sock parameter in unix_sk()

      Make unix_sk() just like inet[6]_sk() by constify'ing the sock
      parameter.

      Signed-off-by: Paul Moore <pmoore@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61d0372028d98046176a8a36e40b78b5bbac5512
  Merge: acb4a6b 77792b1
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 04:01:28 2015 -0700

      Merge tag 'regmap-offload-update-bits' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap

      regmap: Allow buses to provide a custom update_bits() operation

      Some buses provide a native _update_bits() operation which for uncached
      registers is faster than doing a read/modify/write cycle as it is a
      single bus transaction.  Add support for implementing this to regmap.

  commit 4d57c67827d7bb79c4fcf6618bf80930808e50c6
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Tue Oct 6 00:16:53 2015 +0200

      mac80211: add missing struct ieee80211_txq tid field initialization

      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 0e537fef24d64f7bf3ef61a27edf64a8d9a5424c
  Merge: d3df65c ae93880
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 8 10:52:44 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Adding a field via 'perf report -F' that already is enabled makes
          the tool get stuck in a loop, fix it. (Jiri Olsa)

      Infrastructure changes:

        - Support PERF_RECORD_SWITCH in the python binding. (Arnaldo Carvalho 
de Melo)

        - Fix handling read() result using a signed variable, found with 
Coccinelle.
          (Andrzej Hajda)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d3df65c198dc2f1deefb73c8427b04d1bdd1b18d
  Merge: 712df65 00e6fa5
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 8 10:52:18 2015 +0200

      Merge branch 'perf/urgent' into perf/core, before pulling new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 26d46dffbe2cd0a023aa6192708f80cd796af107
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:24 2015 +0300

      Bluetooth: 6lowpan: Remove unnecessary chan_get() function

      The chan_get() function just adds unnecessary indirection to calling
      the chan_create() call. The only added value it gives is the chan->ops
      assignment, but that can equally well be done in the calling code.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0cd088fc97bbe4834e9bc9727012ecac49386849
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:23 2015 +0300

      Bluetooth: 6lowpan: Rename confusing 'pchan' variables

      The typical convention when having both a child and a parent channel
      variable is to call the former 'chan' and the latter 'pchan'. When
      there's only one variable it's called chan. Rename the 'pchan'
      variables in the 6lowpan code to follow this convention.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 630ef791ea8e4274f20b833e1977cb1b0462d3ec
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:22 2015 +0300

      Bluetooth: 6lowpan: Remove unnecessary chan_open() function

      All the chan_open() function now does is to call chan_create() so it
      doesn't really add any value.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b0c09f94ff1660a1873549b788c998284ea5fb8a
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:21 2015 +0300

      Bluetooth: 6lowpan: Remove redundant BT_CONNECTED assignment

      The L2CAP core code makes sure of setting the channel state to
      BT_CONNECTED, so there's no need for the implementation code (6lowpan
      in this case) to do it.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5d0fd77a043504dabccb66d9b5671e682868e96d
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:20 2015 +0300

      Bluetooth: 6lowpan: Remove redundant (and incorrect) MPS assignments

      The L2CAP core code already sets the local MPS to a sane value. The
      remote MPS value otoh comes from the remote side so there's no point
      in trying to hard-code it to any value.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 301de2cb6a521405cde1a2f9cdc42c5257b5725b
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Tue Oct 6 13:03:19 2015 +0300

      Bluetooth: 6lowpan: Fix imtu & omtu values

      The omtu value is determined by the remote peer so there's no point in
      trying to hard-code it to any value. The IPSP specification otoh gives
      a more reasonable value for the imtu, i.e. 1280.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 123e20b14530b57bd75e295961d2c1f8c48455bf
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Wed Oct 7 06:22:25 2015 -0700

      mmc: host: omap_hsmmc: Fix MMC for omap3 legacy booting

      Starting with commit 7d607f917008 ("mmc: host: omap_hsmmc: use
      devm_regulator_get_optional() for vmmc") MMC on omap3 stopped working
      for legacy booting.

      This is because legacy booting sets up some of the resource in the
      platform init code, and for optional regulators always seem to
      return -EPROBE_DEFER for the legacy booting.

      Let's fix the issue by checking for device tree based booting for
      now. Then when omap3 boots in device tree only mode, this patch
      can be just reverted.

      Fixes: 7d607f917008 ("mmc: host: omap_hsmmc: use
      devm_regulator_get_optional() for vmmc")
      Cc: Felipe Balbi <balbi@xxxxxx>
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Cc: Nishanth Menon <nm@xxxxxx>
      Cc: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bb2726b52f2abdf46339a2d1293f76b5d5752705
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Wed Oct 7 06:22:24 2015 -0700

      Revert "mmc: host: omap_hsmmc: use regulator_is_enabled to find pbias 
status"

      This reverts commit c55d7a0553643a7e8f120688b82b594471084d3c.

      Without reverting this commit we get "unbalanced disables for 
pbias_mmc_omap4"
      errors on omap4430. It seems that 4430 and 4460 behave in a different way 
for
      the PBIAS regulator registers and until that has been debugged further we
      cannot rely on the regulator status registers in hardare on 4430.

      Fixes: 7d607f917008 ("mmc: host: omap_hsmmc: use
      devm_regulator_get_optional() for vmmc")
      Cc: Felipe Balbi <balbi@xxxxxx>
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Cc: Nishanth Menon <nm@xxxxxx>
      Cc: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit fe806dceded462f7930f8ac4a41c5d19819e70b7
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 03:14:28 2015 +0200

      Bluetooth: Enforce packet types in hci_recv_frame driver function

      When calling the hci_recv_frame driver function check for valid packet
      types that the core should process. This should catch issues with
      drivers trying to feed vendor packet types through this interface.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 943cc592195ea458058c121d9c4d7481d0f28be1
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 03:06:53 2015 +0200

      Bluetooth: bpa10x: Use h4_recv_buf helper for frame reassembly

      The manually coded frame reassembly is actually broken. The h4_recv_buf
      helper from the UART driver is a perfect fit for frame reassembly for
      this driver. So just export that function and use it here as well.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 881f7e86a1e0322fbda42c92a36b13c44120bca2
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 03:01:44 2015 +0200

      Bluetooth: bpa10x: Add support for set_diag driver callback

      The BPA-10x devices support tracing operation. Use the set_diag driver
      callback to allow enabling and disabling that functionality.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit ddd68ec8f4847b460c9f580076eafe13b031a6fd
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 02:24:06 2015 +0200

      Bluetooth: bpa10x: Read revision information in setup stage

      For debugging pruposes, read the revision string of the BPA-10x devices
      and print it. For example one of the latest devices respond with the
      string SNIF_102,BB930,02/01/18,10:37:56.

        < HCI Command: Vendor (0x3f|0x000e) plen 1
                07                                               .
        > HCI Event: Command Complete (0x0e) plen 49
              Vendor (0x3f|0x000e) ncmd 1
                Status: Success (0x00)
                53 4e 49 46 5f 31 30 32 2c 42 42 39 33 30 2c 30  
SNIF_102,BB930,0
                32 2f 30 31 2f 31 38 2c 31 30 3a 33 37 3a 35 36  
2/01/18,10:37:56
                00 00 00 00 00 00 00 00 00 00 00 00 00           .............

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit acc649c6540ef224cc07d17c4b632da9dedfb6a2
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 01:53:55 2015 +0200

      Bluetooth: Fix interaction of HCI_QUIRK_RESET_ON_CLOSE and HCI_AUTO_OFF

      When the controller requires the HCI Reset command to be send when
      closing the transport, the HCI_AUTO_OFF needs to be accounted for. The
      current code tries to actually do that, but the flag gets cleared to
      early. So store its value and use it that stored value instead of
      checking for a flag that is always cleared.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 075e1f5e6c201111e32da99919eb052edc6d1c82
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 20:08:26 2015 +0200

      Bluetooth: hci_bcm: Enable support for set_diag driver callback

      The set_diag driver callback allows enabling and disabling the vendor
      specific diagnostic information. Since Broadcom chips have support for
      a dedicated LM_DIAG channel, hook it up accordingly.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 4b4113d6dbdbdac095743c05f694af9b7cdc9a44
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 19:52:35 2015 +0200

      Bluetooth: Add debugfs entry for setting vendor diagnostic mode

      This adds a new debugfs entry for enabling and disabling the vendor
      diagnostic mode. It is only exposed for drivers that provide the
      set_diag driver callback and actually have an option for vendor
      specific diagnostic information.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 94c58132c062855df53db9a46fb8da0b878d69f0
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 19:12:54 2015 +0200

      Bluetooth: hci_bcm: Enable parsing of LM_DIAG messages

      The Broadcom UART based controllers can send LM_DIAG messages with the
      identifier 0x07 inside the HCI stream. These messages are 63 octets in
      size and have no variable payload or length indicator.

      This patch adds correct parsing information for the h4_recv_buf handler
      and in case these packets are received, they are forwarded to the
      Bluetooth core via hci_recv_diag interface.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e875ff84079b9e7d3ce24b97e3396230d41044d4
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 16:38:35 2015 +0200

      Bluetooth: Add support for vendor specific diagnostic channel

      Introduce hci_recv_diag function for HCI drivers to allow sending vendor
      specific diagnostic messages into the Bluetooth core stack. The messages
      are not processed, but they are forwarded to the monitor channel and can
      be retrieved by user space diagnostic tools.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6c566dd5a1253f73458ce6ba6cf3830e9d38c132
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 7 15:32:13 2015 +0200

      Bluetooth: Send index information updates to monitor channel

      The Bluetooth public device address might change during controller setup
      and it makes it a lot simpler for monitoring tools if they just get told
      what the new address is. In addition include the manufacturer / company
      information of the controller. That allows for easy vendor specific HCI
      command and event handling.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 39cd2dd39a8b92ce91c4dad95f6e979c946a3942
  Merge: d2856b0 ad2ad5d 4bace73 a36a996
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 16:06:25 2015 -0700

      Merge branches 'doc.2015.10.06a', 'percpu-rwsem.2015.10.06a' and 
'torture.2015.10.06a' into HEAD

      doc.2015.10.06a:  Documentation updates.
      percpu-rwsem.2015.10.06a:  Optimization of per-CPU reader-writer 
semaphores.
      torture.2015.10.06a:  Torture-test updates.

  commit d2856b046d2ce2bfb664727cb8671ad0e371bd6c
  Merge: 7f5f873 338b0f7
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 16:05:21 2015 -0700

      Merge branches 'fixes.2015.10.06a' and 'exp.2015.10.07a' into HEAD

      exp.2015.10.07a:  Reduce OS jitter of RCU-sched expedited grace periods.
      fixes.2015.10.06a:  Miscellaneous fixes.

  commit 338b0f760e84676130c6e4d8268cb8c923b38c8c
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 00:45:02 2015 -0700

      rcu: Better hotplug handling for synchronize_sched_expedited()

      Earlier versions of synchronize_sched_expedited() can prematurely end
      grace periods due to the fact that a CPU marked as cpu_is_offline()
      can still be using RCU read-side critical sections during the time that
      CPU makes its last pass through the scheduler and into the idle loop
      and during the time that a given CPU is in the process of coming online.
      This commit therefore eliminates this window by adding additional
      interaction with the CPU-hotplug operations.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit b08517c76d764c373c232cd309ed058c98705219
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 18 12:17:29 2015 -0700

      rcu: Enable stall warnings for synchronize_rcu_expedited()

      This commit redirects synchronize_rcu_expedited()'s wait to
      synchronize_sched_expedited_wait(), thus enabling RCU CPU
      stall warnings.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit c58656382e5f2919b05913584f2c54b4f841bc9f
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 18 11:25:48 2015 -0700

      rcu: Add tasks to expedited stall-warning messages

      This commit adds task-print ability to the expedited RCU CPU stall
      warning messages in preparation for adding stall warnings to
      synchornize_rcu_expedited().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 74611ecb0fc4c850a8f89a744ce99cbf0dd43cb2
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 18 10:20:43 2015 -0700

      rcu: Add online/offline info to expedited stall warning message

      This commit makes the RCU CPU stall warning message print online/offline
      indications immediately after the CPU number.  A "O" indicates global
      offline, a "." global online, and a "o" indicates RCU believes that the
      CPU is offline for the current grace period and "." otherwise, and an
      "N" indicates that RCU believes that the CPU will be offline for the
      next grace period, and "." otherwise, all right after the CPU number.
      So for CPU 10, you would normally see "10-...:" indicating that everything
      believes that the CPU is online.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit dcdb8807ba0f5127d4dc67daeeb154edf50a93d1
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 15 19:00:31 2015 -0700

      rcu: Consolidate expedited CPU selection

      Now that sync_sched_exp_select_cpus() and sync_rcu_exp_select_cpus()
      are identical aside from the the argument to smp_call_function_single(),
      this commit consolidates them with a functional argument.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 66fe6cbee44e3f78d05882195a6a38e30b97b936
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 15 17:20:58 2015 -0700

      rcu: Prepare for consolidating expedited CPU selection

      This commit brings sync_sched_exp_select_cpus() into alignment with
      sync_rcu_exp_select_cpus(), as a first step towards consolidating them
      into one function.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 02ef3c4a2aae65a1632b27770bfea3f83ca06772
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 7 15:14:30 2015 -0700

      cpu: Remove try_get_online_cpus()

      Now that synchronize_sched_expedited() no longer uses it, there are
      no users of try_get_online_cpus() in mainline.  This commit therefore
      removes it.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 807226e2fbb504d82cd504b7b6114896db41ef63
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 7 12:03:45 2015 -0700

      rcu: Stop excluding CPU hotplug in synchronize_sched_expedited()

      Now that synchronize_sched_expedited() uses IPIs, a hook in
      rcu_sched_qs(), and the ->expmask field in the rcu_node combining
      tree, it is no longer necessary to exclude CPU hotplug.  Any
      races with CPU hotplug will be detected when attempting to send
      the IPI.  This commit therefore removes the code excluding
      CPU hotplug operations.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 83c2c735e78da1a0d994911f730f6e1d36c88d7a
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 20:43:02 2015 -0700

      rcu: Stop silencing lockdep false positive for expedited grace periods

      This reverts commit af859beaaba4 (rcu: Silence lockdep false positive
      for expedited grace periods).  Because synchronize_rcu_expedited()
      no longer invokes synchronize_sched_expedited(), ->exp_funnel_mutex
      acquisition is no longer nested, so the false positive no longer happens.
      This commit therefore removes the extra lockdep data structures, as they
      are no longer needed.

  commit 6587a23b6b9bdb47205ec96c703e5bf8a2d39701
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 16:50:39 2015 -0700

      rcu: Switch synchronize_sched_expedited() to IPI

      This commit switches synchronize_sched_expedited() from 
stop_one_cpu_nowait()
      to smp_call_function_single(), thus moving from an IPI and a pair of
      context switches to an IPI and a single pass through the scheduler.
      Of course, if the scheduler actually does decide to switch to a different
      task, there will still be a pair of context switches, but there would
      likely have been a pair of context switches anyway, just a bit later.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit ae938802443732e77d01f8d5b52b900b9327ff30
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Oct 6 17:46:46 2015 -0300

      perf python: Support the PERF_RECORD_SWITCH event

      To test it check tools/perf/python/twatch.py, after following the
      instructions there to enable context_switch, output looks like:

        [root@zoo linux]# tools/perf/python/twatch.py
        cpu: 1, pid: 31463, tid: 31463 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31463, switch_out: 0 }
        cpu: 2, pid: 31463, tid: 31496 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31496, switch_out: 0 }
        cpu: 2, pid: 31463, tid: 31496 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31496, switch_out: 1 }
        cpu: 3, pid: 31463, tid: 31527 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31527, switch_out: 0 }
        cpu: 1, pid: 31463, tid: 31463 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31463, switch_out: 1 }
        cpu: 3, pid: 31463, tid: 31527 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31527, switch_out: 1 }
        cpu: 1, pid: 31463, tid: 31463 { type: context_switch, next_prev_pid: 
31463, next_prev_tid: 31463, switch_out: 0 }
        ^CTraceback (most recent call last):
          File "tools/perf/python/twatch.py", line 67, in <module>
            main(context_switch = 1, thread = 31463)
          File "tools/perf/python/twatch.py", line 40, in main
            evlist.poll(timeout = -1)
        KeyboardInterrupt
        [root@zoo linux]#

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Guy Streeter <streeter@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-1ukistmpamc5z717k80ctcp2@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7fd0ac66c2de5767e234fea6436d28dce210da80
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:32 2015 -0400

      i40e/i40evf: remove unused opcode

      This opcode is not required. VFs that program RSS through the firmware
      do it by interacting directly with the firmware, and do not need to use
      the virtual channel for this functionality.

      Change-ID: Iaf17d2600e28ff1b6be8653f2fe9df1facd23b0e
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 313ed2d52052ad8dab9a6182cde55a832873cbea
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:31 2015 -0400

      i40evf: propagate interrupt allocation failure

      Lower level functions are properly reporting errors, and higher-level
      functions are correctly responding to errors, but the errors aren't
      actually getting through. Typically, the middle-manager function seems
      to want to shield its boss from any bad news.

      This change fixes a panic if the driver is unable to enable MSI-X or is
      unable to acquire enough vectors.

      Change-ID: Ifd5787ce92519a5d97e4b465902db930d97b71a1
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2642f02528b6e9c1e904f6e3ec902d8a2deb7af5
  Author: Neerav Parikh <neerav.parikh@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:30 2015 -0400

      i40e: Additional checks for CEE APP priority validity

      The firmware has added additional status information to allow software
      to determine if the APP priority for FCoE/iSCSI/FIP is valid or not in
      CEE DCBX mode.

      This patch adds to support those additional checks and will only add
      applications to the software table that have oper and sync bits set
      without any error.

      Change-ID: I0a76c52427dadf97d4dba4538a3068d05e4eb56b
      Signed-off-by: Neerav Parikh <neerav.parikh@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2fc3d7152ae9562c15c30ed4a766ba05a3db8200
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:29 2015 -0400

      i40e/i40evf: Add a stat to keep track of linearization count

      Keep track of how many times we ask the stack to linearize the
      skb because the HW cannot handle skbs with more than 8 frags per
      segment/single packet.

      Change-ID: If455452060963a769bbe6112cba952e79e944b52
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2f41f3358672dfda67c1e254f1e823d98e6a3099
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:20 2015 -0400

      i40e/i40evf: fix unicast mac address add

      When using something like "ip maddr add ..." to add another unicast mac
      address to the netdev, the mac address comes into the set_rx_mode handler
      in the multicast list whether it is a unicast or multicast address.
      This was confusing the code when it was trying to search for addresses
      that needed to be deleted from the VSI, because it was looking for the
      VSI unicast address in the netdev unicast list.  The result was that a
      new unicast address would get added to the VSI list and then immediately
      removed, and would never actually make it down into the hardware.

      This patch removes the separation from unicast and multicast in the search
      for filters to be deleted.  It also simplifies the logic a little with a
      jump to the bottom of the loop when an address is found.  Now it doesn't
      matter which netdev list the address is hiding in, we'll check them all.

      Change-ID: Ie3685a92427ae7d2212bf948919ce295bc7a874c
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a72a5abcb37beac163704efba6a3d33ebca4d90a
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:19 2015 -0400

      i40e: fix bug in return from get_link_status and avoid spurious link 
messages

      Previously, the driver could call this function and have only true/false
      returned, but false could mean multiple things like failure to read
      or link was down. This change allows the caller to get all return values
      in the call chain bubbled back to the source, which keeps information 
about
      failures from being lost.

      Also, in some unlikely scenarios, the firmware can become slow to respond
      to admin queue (AQ) queries for link state.  Should the AQ time out,
      the driver can detect the state and avoid a link change when there
      may have been none.

      Change-ID: Ib2ac38407b7880750fb891b392fa77457fe6c21c
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit dd38c583aea07c508caeaf979c64e267584ee067
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:18 2015 -0400

      i40e: add little endian conversion for checksum

      The checksum is not correct on big endian machines so add code to swap it
      correctly.

      Change-ID: Ic92b886d172a2cbe49f5d7eee1bc78e447023c7b
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Paul M Stillwell Jr <paul.m.stillwell.jr@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit fb43201f150300fa2c0215f00418eda9143cdab1
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:17 2015 -0400

      i40e/i40evf: give up the __func__

      During early development, we added the function name to all of the error
      strings to make debugging simpler. Now that we've released the driver,
      our users should have more comprehensible error messages. So tear the
      roof off and give up the __func__. Ow.

      Change-ID: I7e1766252c7a032b9af6520da6aff536bdfd533c
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0002e1189b594d462c7a93417f5ac8bbc22bd768
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:16 2015 -0400

      i40e: Never let speed get set to 0 in get_settings

      In ethtool, there is a possibility of speed getting set to 0
      if advertise is set to 0 (which it is when autoneg is disabled).
      We never want this to happen as the firmware will actually attempt
      to set the speed to 0 sending link down, so add an extra check
      to make sure this doesn't happen.

      Change-ID: I62e0eeee2cbf043d8e6f5c9c9f0b92794e877f01
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit fba52e21e5cad1347255d0d3600f7e4df6e69435
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:15 2015 -0400

      i40e: Fix for truncated interrupt name

      This patch extends the size of the text available for the interrupt names.
      Without this patch, all the descriptive data available for the Flow
      Director interrupts is truncated.

      Change-ID: I2ac458f23ac3b4ea8f1edf73edc283b1d3704c7f
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9e1c26e35030aa56057a69514acb17da5e81eb16
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:14 2015 -0400

      i40e/i40evf: assure clean asq status report

      There was a possibility where the asq_last_status could get through 
without
      update and thus report a previous error.  I don't think we've actually 
seen
      this happen, but this patch will help make sure it doesn't.

      Change-ID: I9e33927052a5ee6ea21f80b66d4c4b76c2760b17
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Signed-off-by: Christopher Pau <christopher.pau@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 21364bcfc7810894114ab18f5335745e374cc2ea
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:13 2015 -0400

      i40e: make i40e_init_pf_fcoe to void

      i40e_init_pf_fcoe() didn't return anything except 0, it prints enough
      error info already, and no driver logic depends on the return value,
      so this can be void.

      Change-ID: Ie6afad849857d87a7064c42c3cce14c74c2f29d8
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 725821f340184fcdd35dbd369c5058eec8a30fcb
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:12 2015 -0400

      i40e: fix bad CEE status shift value

      Fix a shift value that was wrong, ending up with a bad bitmask.  Also add
      a blank line between two sets of #defines for better readability.

      Change-ID: I3e41fa2a2ab904d3a4e6cbf13972ab0036a10601
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit df08fd4dbcc95cbc5a35745b6a77a9df0dc5776f
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:11 2015 -0400

      i40e/i40evf: fix a potential type compare issue

      Rework an if expression to assure there is no type compare problem between
      a size and a possible negative number.

      Change-ID: I4921fcc96abfcf69490efce020a9e4007f251c99
      Reported-by: Helin Zhang <helin.zhang@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bc5166b908aaa126d524b84c767323b75c17bdee
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:10 2015 -0400

      i40e/i40evf: add driver support for new device ids

      Early addition of new a device id.

      Change-ID: I61a8c8556fdf4f5714be4e4089689e374f30293c
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0325fca7577c5157da2cdf064fc3e8d38242e47c
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:09 2015 -0400

      i40e: stop VF rings

      Explicitly stop the rings belonging to each VF when disabling SR-IOV.
      Even though the VFs were gone, and the associated VSIs were removed, the
      rings were not stopped, and in some circumstances the hardware would
      continue to access the memory formerly used by the rings, causing memory
      corruption or DMAR errors, both of which would lead to general malaise
      of the kernel.

      To relieve this condition, explicitly stop all the rings associated with
      each VF before releasing its resources.

      Change-ID: I78c05d562c66e7b594b7e48d67860f49b3e5b6ec
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1d5109d18757d8d6450905275bf362819781368c
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:08 2015 -0400

      i40e: enable WoL operation if config bit show WoL capable

      The driver was disabling Wake-on-LAN by default and waiting for the user
      to expressly turn it on.  This patch has the driver turning on WoL from
      the start if enabled in the hardware config, which matches the behavior
      of our other drivers.

      Change-ID: I43faedb907f8ba4d1a61b72a7c86072b97af12b1
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 22e05bd6f7949d3e638c9f4697a2198a19fff312
  Author: Paul M Stillwell Jr <paul.m.stillwell.jr@xxxxxxxxx>
  Date:   Wed Aug 26 15:14:07 2015 -0400

      i40e: Increase the amount of time we wait for reset to be done

      In some rare cases the reset can take longer to complete so increase the
      amount of time we wait.

      Change-ID: Ib5628ec54b526a811ee33d1214fe763226406671
      Signed-off-by: Paul M Stillwell Jr <paul.m.stillwell.jr@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c3984cc994377671f18d3d719ddd86b5107457ee
  Merge: 8ace60f a54c8f0
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Wed Oct 7 13:50:17 2015 -0600

      Merge branch 'stable/for-jens-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen into for-linus

      Konrad writes:

      Please git pull an update branch to your 'for-4.3/drivers' branch (which
      oddly I don't see does not have the previous pull?)

       git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen.git 
stable/for-jens-4.3

      which has two fixes - one where we use the Xen blockfront EFI driver and
      don't release all the requests, the other if the allocation of resources
      for a particular state failed - we would go back 'Closing' and assume
      that an structure would be allocated while in fact it may not be - and
      crash.

  commit 9d99c7123c9af5f47a2037933a3ffaec3e37efad
  Author: Christian Melki <christian.melki@xxxxxxxxxx>
  Date:   Mon Oct 5 17:31:33 2015 +0200

      swiotlb: Enable it under x86 PAE

      Most distributions end up enabling SWIOTLB already with 32-bit
      kernels due to the combination of CONFIG_HYPERVISOR_GUEST|CONFIG_XEN=y
      as those end up requiring the SWIOTLB.

      However for those that are not interested in virtualization and
      run in 32-bit they will discover that: "32-bit PAE 4.2.0 kernel
      (no IOMMU code) would hang when writing to my USB disk. The kernel
      spews million(-ish messages per sec) to syslog, effectively
      "hanging" userspace with my kernel.

      Oct  2 14:33:06 voodoochild kernel: [  223.287447] nommu_map_sg:
      overflow 25dcac000+1024 of device mask ffffffff
      Oct  2 14:33:06 voodoochild kernel: [  223.287448] nommu_map_sg:
      overflow 25dcac000+1024 of device mask ffffffff
      Oct  2 14:33:06 voodoochild kernel: [  223.287449] nommu_map_sg:
      overflow 25dcac000+1024 of device mask ffffffff
      ... etc ..."

      Enabling it makes the problem go away.

      N.B. With a6dfa128ce5c414ab46b1d690f7a1b8decb8526d
      "config: Enable NEED_DMA_MAP_STATE by default when SWIOTLB is selected"
      we also have the important part of the SG macros enabled to make this
      work properly - in case anybody wants to backport this patch.

      Reported-and-Tested-by: Christian Melki <christian.melki@xxxxxxxxxx>
      Signed-off-by: Christian Melki <christian.melki@xxxxxxxxxx>
      Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>

  commit a54c8f0f2d7df525ff997e2afe71866a1a013064
  Author: Cathy Avery <cathy.avery@xxxxxxxxxx>
  Date:   Fri Oct 2 09:35:01 2015 -0400

      xen-blkfront: check for null drvdata in blkback_changed 
(XenbusStateClosing)

      xen-blkfront will crash if the check to talk_to_blkback()
      in blkback_changed()(XenbusStateInitWait) returns an error.
      The driver data is freed and info is set to NULL. Later during
      the close process via talk_to_blkback's call to xenbus_dev_fatal()
      the null pointer is passed to and dereference in blkfront_closing.

      CC: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Cathy Avery <cathy.avery@xxxxxxxxxx>
      Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>

  commit 601d62959d08a450d4666c728ddd2f47c5ba1cfe
  Merge: 225db57 e4fc141
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Wed Oct 7 20:11:21 2015 +0200

      Merge tag 'asoc-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

      ASoC: Fixes for v4.3

      Quite a few fixes here but they're all very small and driver specific,
      none of them really stand out if you aren't using the relevant hardware
      but they're all useful if you do happen to have an affected device.

  commit 15e3d5a285ab9283136dba34bbf72886d9146706
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Sat Oct 3 19:16:07 2015 +0200

      3w-9xxx: don't unmap bounce buffered commands

      3w controller don't dma map small single SGL entry commands but instead
      bounce buffer them.  Add a helper to identify these commands and don't
      call scsi_dma_unmap for them.

      Based on an earlier patch from James Bottomley.

      Fixes: 118c85 ("3w-9xxx: fix command completion race")
      Reported-by: Tóth Attila <atoth@xxxxxxxxxxxxx>
      Tested-by: Tóth Attila <atoth@xxxxxxxxxxxxx>
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Adam Radford <aradford@xxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit c6fa8e6de3dc420cba092bf155b2ed25bcd537f7
  Merge: e82fa92 62c6c61
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 18:17:46 2015 +0100

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Will Deacon:
       "This addresses a couple of issues found with RT, a broken initrd
        message in the console log and a simple performance fix for some MMC
        workloads.

        Summary:

         - A couple of locking fixes for RT kernels
         - Avoid printing bogus initrd warnings when initrd isn't present
         - Performance fix for random mmap file readahead
         - Typo fix"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: replace read_lock to rcu lock in call_break_hook
        arm64: Don't relocate non-existent initrd
        arm64: convert patch_lock to raw lock
        arm64: readahead: fault retry breaks mmap file read random detection
        arm64: debug: Fix typo in debug-monitors.c

  commit e82fa92e6208fa3d82c28bf006aea98c2cd6df1b
  Merge: 8ace60f d663bab
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 18:05:09 2015 +0100

      Merge tag 'fbdev-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tomba/linux

      Pull fbdev fixes from Tomi Valkeinen:

       - fbdev: Minor fixes to broadsheetfb, fsl-diu-fb, mb862xxfb, tridentfb,
         omapfb

       - display-timing: Fix memory leak in error path

      * tag 'fbdev-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tomba/linux:
        video: of: fix memory leak
        fbdev: broadsheetfb: fix memory leak
        OMAPDSS: panel-sony-acx565akm: Export OF module alias information
        fbdev: omap2: connector-dvi: use of_get_i2c_adapter_by_node interface
        tridentfb: Fix set_lwidth on TGUI9440 and CYBER9320
        tridentfb: fix hang on Blade3D with CONFIG_CC_OPTIMIZE_FOR_SIZE
        video: fbdev: mb862xx: Fix module autoload for OF platform driver
        video: fbdev: fsl: Fix the sleep function for FSL DIU module

  commit 00e6fa5fe15c0eccc95a9d1afc4615e467ee8dc9
  Merge: a0eeb8d 9fb4765
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 7 18:33:10 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fix from Arnaldo Carvalho de Melo:

        - Fix build break on (at least) powerpc due to sample_reg_masks, not 
being
          available for linking. (Sukadev Bhattiprolu)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1266963170f576d4d08e6310b6963e26d3ff9d1e
  Author: Sasha Levin <sasha.levin@xxxxxxxxxx>
  Date:   Wed Oct 7 11:03:28 2015 -0500

      PCI: Prevent out of bounds access in numa_node override

      63692df103e9 ("PCI: Allow numa_node override via sysfs") didn't check that
      the numa node provided by userspace is valid.  Passing a node number too
      high would attempt to access invalid memory and trigger a kernel panic.

      Fixes: 63692df103e9 ("PCI: Allow numa_node override via sysfs")
      Signed-off-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx        # v3.19+

  commit e4fc141d2a022a63c87a4851b3c688eca6a1647b
  Merge: 1e2fa4c 2d1180e 57622ae
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Oct 7 16:07:50 2015 +0100

      Merge remote-tracking branches 'asoc/fix/tlv320aic3x' and 
'asoc/fix/wm8962' into asoc-linus

  commit 1e2fa4cfdbf21b3c071e0d9739dce5aac9edcb85
  Merge: 049e6dd e74679b 924eb47 b7b01d3 ff6afc8 8c1a9d6 e256da8 e260046
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Oct 7 16:07:16 2015 +0100

      Merge remote-tracking branches 'asoc/fix/db1200', 'asoc/fix/dwc', 
'asoc/fix/imx-ssi', 'asoc/fix/maintainers', 'asoc/fix/rt5645', 
'asoc/fix/sgtl5000' and 'asoc/fix/tas2552' into asoc-linus

  commit 028423b0d8fa27c30a46da4af2a5cab230369de6
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 7 09:41:27 2015 +0200

      drm/amdgpu: fix 32-bit compiler warning

      The new amdgpu driver passes a user space pointer in a 64-bit structure
      member, which is the correct way to do it, but it attempts to
      directly cast it to a __user pointer in the kernel, which causes
      a warning in three places:

      drm/amd/amdgpu/amdgpu_cs.c: In function 'amdgpu_cs_parser_init':
      drm/amd/amdgpu/amdgpu_cs.c:180:21: warning: cast to pointer from integer 
of different size [-Wint-to-pointer-cast]
        chunk_array_user = (uint64_t __user *)(cs->in.chunks);

      This changes all three to add an intermediate cast to 'unsigned long'
      as other drivers do. This avoids the warning and works correctly on
      both 32-bit and 64-bit architectures.

      Fixes: e60b344f6c0eff ("drm/amdgpu: optimize amdgpu_parser_init")

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 70e238df1daa05366d091d75163e1b08d7f122c3
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:08 2015 +0100

      MAINTAINERS: add myself as arm perf reviewer

      As suggested by Will Deacon, add myself as a reviewer of the ARM PMU
      profiling and debugging code.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit dd06a84bf6446dab1592d4c7908a3037fbccdf1e
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:07 2015 +0100

      MAINTAINERS: update ARM PMU profiling and debugging for arm64

      Will Deacon maintains the profiling and debugging code under both
      arch/arm and arch/arm64. Update MAINTAINERS to reflect this, in
      preparation for adding myself as a reviewer of said code.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 01a507a371a35a5ee2b283af2ae7f8ed0b5e36f1
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:06 2015 +0100

      arm64: dts: juno: describe PMUs separately

      The A57 and A53 PMUs in Juno support different events, so describe them
      separately in both the Juno and Juno R1 DTs.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Liviu Dudau <liviu.dudau@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 62a4dda9d63a10e5b28943967fc936c74fa16dfb
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:05 2015 +0100

      arm64: perf: add Cortex-A57 support

      The Cortex-A57 PMU supports a few events outside of the required PMUv3
      set that are rather useful.

      This patch adds the event map data for said events.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ac82d12772158dfbc1d3827a68b317e10326bbaa
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:04 2015 +0100

      arm64: perf: add Cortex-A53 support

      The Cortex-A53 PMU supports a few events outside of the required PMUv3
      set that are rather useful.

      This patch adds the event map data for said events.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 6475b2d846176e3272351266869481a21ff47866
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Fri Oct 2 10:55:03 2015 +0100

      arm64: perf: move to shared arm_pmu framework

      Now that the arm_pmu framework has been factored out to drivers/perf we
      can make use of it for arm64, gaining support for heterogeneous PMUs
      and unifying the two codebases before they diverge further.

      The as yet unused PMU name for PMUv3 is changed to armv8_pmuv3, matching
      the style previously applied to the 32-bit PMUs.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9fb4765451f22c5e782c1590747717550bff34b2
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 17:53:49 2015 -0400

      perf tools: Fix build break on powerpc due to sample_reg_masks

      perf_regs.c does not get built on Powerpc as CONFIG_PERF_REGS is false.
      So the weak definition for 'sample_regs_masks' doesn't get picked up.

      Adding perf_regs.o to util/Build unconditionally, exposes a redefinition
      error for 'perf_reg_value()' function (due to the static inline version
      in util/perf_regs.h). So use #ifdef HAVE_PERF_REGS_SUPPORT' around that
      function.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Naveen N. Rao <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150930182836.GA27858@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8f48c0629049fdebb6e783803325bff19176d3fd
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Oct 7 11:37:36 2015 +0100

      arm64: hw_breakpoint: use target state to determine ABI behaviour

      The arm64 hw_breakpoint interface is slightly less flexible than its
      32-bit counterpart, thanks to some changes in the architecture rendering
      unaligned watchpoint addresses obselete for AArch64.

      However, in a multi-arch environment (i.e. debugging a 32-bit target
      with a 64-bit GDB under a 64-bit kernel), we need to provide a feature
      compatible interface to GDB in order for debugging to function correctly.

      This patch adds a new helper, is_compat_bp,  to our hw_breakpoint
      implementation which changes the interface behaviour based on the
      architecture of the debug target as opposed to the debugger itself.
      This allows debugged to function as expected for multi-arch
      configurations without relying on deprecated architectural behaviours
      when debugging native applications.

      Cc: Yao Qi <yao.qi@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 8ace60f8b760ff79aa2734e5e96223deae69f5f2
  Merge: 07443ce 176fc2d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 14:15:49 2015 +0100

      Merge tag 'regmap-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap

      Pull regmap fixes from Mark Brown:
       "A couple of fixes for the debugfs information on the register map,
        fixing issues with very small reads potentially causing underflows and
        wraparounds"

      * tag 'regmap-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap:
        regmap: debugfs: Don't bother actually printing when calculating max 
length
        regmap: debugfs: Ensure we don't underflow when printing access masks

  commit 07443cecdf68b4cf4c7d8ee0dbe0b2aa94c3e661
  Merge: 21f3c96 c2c80bd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 14:13:10 2015 +0100

      Merge tag 'spi-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi

      Pull spi fixes from Mark Brown:
       "A couple of very minor fixes, one for error handling in the Davinci
        driver probe function and another making the Renesas sh-msiof DT
        binding documentation correspond to what's actually implemented"

      * tag 'spi-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:
        spi: sh-msiof: Match renesas,rx-fifo-size in DT bindings doc with driver
        spi: davinci: fix handling platform_get_irq result

  commit 21f3c96188f1a1e592174bef3180d147e06f7b89
  Merge: 79c7c7a 22ca03a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 14:11:47 2015 +0100

      Merge tag 'regulator-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator

      Pull regulator fixes from Mark Brown:
       "Two fixes here, one device specific fix for axp20x and a core fix for
         cases where one regulator is supplying another which broke probe
        deferral, substituting in a dummy regulator too aggressively"

      * tag 'regulator-fix-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:
        regulator: core: Handle probe deferral from DT when resolving supplies
        regulator: axp20x: Fix enable bit indexes for DCDC4 and DCDC5

  commit acb4a6bfc80ddeea4c44074dd630f916259e909e
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Oct 6 14:49:58 2015 -0700

      tcp: ensure prior synack rtx behavior with small backlogs

      Some applications use a listen() backlog of 1.

      Prior kernels were silently enforcing a qlen_log of 4, so that we were
      sending up to /proc/sys/net/ipv4/tcp_synack_retries SYNACK messages.

      Fixes: ef547f2ac16b ("tcp: remove max_qlen_log")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 41747509b437dcca880b52a035453f5e4ba14aa4
  Merge: 6087286 ab38a7b
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 05:03:16 2015 -0700

      Merge branch 'ovs-ct-fixes'

      Joe Stringer says:

      ====================
      OVS conntrack fixes for net

      The userspace side of the Open vSwitch conntrack changes is currently
      undergoing review, which has highlighted some minor bugs in the existing
      conntrack implementation in the kernel, as well as pointing out some
      future-proofing that can be done on the interface to reduce the need for
      additional compatibility code in future.

      The biggest changes here are to the userspace API for the ct_state match
      field and the CT action. This series proposes to firstly extend the 
ct_state
      match field to 32 bits, ensuring to reject any currently unsupported bits.
      Secondly, rather than representing CT action flags within a 32-bit field,
      simply use a netlink attribute as presence of the single flag that is
      defined today. This also serves to reject unsupported ct action flag bits.

      v4: Use 12-character abbreviated hashes in commit messages.
      v3: Fully acked.
      v2: Address minor style feedback, add acks.
      v1: Initial post.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab38a7b5a4493a3658d891a8e91f9ffcb3d2defb
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 11:00:01 2015 -0700

      openvswitch: Change CT_ATTR_FLAGS to CT_ATTR_COMMIT

      Previously, the CT_ATTR_FLAGS attribute, when nested under the
      OVS_ACTION_ATTR_CT, encoded a 32-bit bitmask of flags that modify the
      semantics of the ct action. It's more extensible to just represent each
      flag as a nested attribute, and this requires no additional error
      checking to reject flags that aren't currently supported.

      Suggested-by: Ben Pfaff <blp@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fbccce5965a58d56aaed9e9acd1bec75d8a66e87
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 11:00:00 2015 -0700

      openvswitch: Extend ct_state match field to 32 bits

      The ct_state field was initially added as an 8-bit field, however six of
      the bits are already being used and use cases are already starting to
      appear that may push the limits of this field. This patch extends the
      field to 32 bits while retaining the internal representation of 8 bits.
      This should cover forward compatibility of the ABI for the foreseeable
      future.

      This patch also reorders the OVS_CS_F_* bits to be sequential.

      Suggested-by: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6f225952461b5e9b5520d0dc6e2ff0af57874fbb
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 10:59:59 2015 -0700

      openvswitch: Reject ct_state unsupported bits

      Previously, if userspace specified ct_state bits in the flow key which
      are currently undefined (and therefore unsupported), then they would be
      ignored. This could cause unexpected behaviour in future if userspace is
      extended to support additional bits but attempts to communicate with the
      current version of the kernel. This patch rectifies the situation by
      rejecting such ct_state bits.

      Fixes: 7f8a436eaa2c "openvswitch: Add conntrack action"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec0d043d05e6e3c0c2fac5de922c800c027c6386
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 10:59:58 2015 -0700

      openvswitch: Ensure flow is valid before executing ct

      The ct action uses parts of the flow key, so we need to ensure that it
      is valid before executing that action.

      Fixes: 7f8a436eaa2c "openvswitch: Add conntrack action"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b8f2257069f179c7bdedc9501c1623070c4c37bb
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 10:59:57 2015 -0700

      openvswitch: Fix skb leak in ovs_fragment()

      If ovs_fragment() was unable to fragment the skb due to an L2 header
      that exceeds the supported length, skbs would be leaked. Fix the bug.

      Fixes: 7f8a436eaa2c "openvswitch: Add conntrack action"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a7cc172a01e4a203667fb601cd80131db8d0c9a
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Tue Oct 6 10:59:56 2015 -0700

      openvswitch: Fix typos in CT headers

      These comments hadn't caught up to their implementations, fix them.

      Fixes: 7f8a436eaa2c "openvswitch: Add conntrack action"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 686a562449af96a0e8c18c6f1b87b47ff8c36de8
  Author: Yuvaraja Mariappan <ymariappan@xxxxxxxxx>
  Date:   Tue Oct 6 10:53:29 2015 -0700

      net: ipv4: tcp.c Fixed an assignment coding style issue

      Fixed an assignment coding style issue

      Signed-off-by: Yuvaraja Mariappan <ymariappan@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 60872867d83581635d7b2948a027449ef5c9be32
  Merge: 6e28b00 4d7f3e7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:56:12 2015 -0700

      Merge branch 'dsa-unbind'

      Neil Armstrong says:

      ====================
      net: dsa: complete and fix the dsa unbinding

      In order to cleanly unbind the dsa core, either as a module removal,
      or a platform device unbind, switch the allocation the their devm_
      counterparts and complete the destroy functions.

      First, the missing kfree were added, the remove function were
      completed then kfree were removed in favor to devm_ calls.

      The last patch is an way to cleanly exit the probe when no
      switch is found in the discover process.

      The patches are based on the current net.

      v3:
       - make checkpatch happy with 1/5 & 5/5
       - fix 5/5 exit path with a goto
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d7f3e757c15051b4521a59791de87ce748c0eb2
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:40:43 2015 +0100

      net: dsa: exit probe if no switch were found

      If no switch were found in dsa_setup_dst, return -ENODEV and
      exit the dsa_probe cleanly.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d4ac35d6ed82e6c96ed5c016ea46fad31294fa7a
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:40:37 2015 +0100

      net: dsa: switch to devm_ calls and remove kfree calls

      Now the kfree calls exists in the the remove functions, remove them in all
      places except the of_probe functions and replace allocation calls
      with their devm_ counterparts.

      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cbc5d90b378cd255ffedeb12f5affe243230d47e
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:40:32 2015 +0100

      net: dsa: complete dsa_switch_destroy

      When unbinding dsa, complete the dsa_switch_destroy to unregister the
      fixed link phy then cleanly unregister and destroy the net devices.

      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e410ddb89ee8e68103ea58938b4972da594e3d2d
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:40:25 2015 +0100

      net: dsa: add missing dsa_switch mdiobus remove

      To prevent memory leakage on unbinding, add missing mdiobus unregister
      and unallocation calls.

      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1023d2ec1e8bd63ede9ed1d93ebb797f650859b7
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Oct 6 15:39:53 2015 +0100

      net: dsa: add missing kfree on remove

      To prevent memory leakage on unbinding, add missing kfree calls.
      Includes minor cosmetic change to make patch clean.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 729ecbc77a1fe763de409be0307c61c1fa32cc06
  Merge: 68e4bd2 ec6674c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:52:14 2015 -0700

      Merge branch 's390-net'

      Ursula Braun says:

      ====================
      s390: qeth patches for net-next

      here are some s390 related patches for net-next. The qeth patches
      are performance optimizations in the driver. The qdio patch corrects
      a warning condition.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec6674c6382819542446b727a2bf54f3dd879ca2
  Author: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
  Date:   Tue Oct 6 15:12:29 2015 +0200

      s390/qdio: fix WARN_ON_ONCE condition

      If HiperSockets Completion Queueing is enabled, qdio always
      issues a warning, since the condition is always met.
      This patch fixes the condition in WARN_ON_ONCE that was always
      true.

      Signed-off-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fe5c802882f2eaaf5475b072f16066038754782a
  Author: Lakhvich Dmitriy <ldmitriy@xxxxxxxxxx>
  Date:   Tue Oct 6 15:12:28 2015 +0200

      s390/qeth: optimize MAC handling in rx_mode callback

      In layer2 mode of the qeth driver, MAC address lists
      from struct net_device require mapping to the OSA-card.
      The existing implementation is inefficient for lists with
      more than several MAC addresses, since for every
      ndo_set_rx_mode callback it removes all MAC addresses first,
      and then registers the current MAC address list.
      This patch changes implementation of ndo_set_rx_mode callback
      in qeth, only performing hardware registration/removal for
      new/deleted addresses. To shorten lookup of MAC addresses
      registered addresses are kept in a hashtable instead of a
      linear list.

      Signed-off-by: Lakhvich Dmitriy <ldmitriy@xxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Reviewed-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Reviewed-by: Thomas Richter <tmricht@xxxxxxxxxx>
      Tested-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9abfa8cb201b2167872654b92f567f8bff6016f4
  Author: Thomas Richter <tmricht@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:12:27 2015 +0200

      s390/qeth: switch to napi_gro_receive

      Add support for GRO (generic receive offload) in the layer 2
      part of device driver qeth. This results in a performance
      improvement when GRO and RX is turned on.

      Signed-off-by: Thomas Richter <tmricht@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 68e4bd2778fb48a98cf9db8e218ef2f3a817bafc
  Merge: deaa0a6 5d6ae47
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:49:39 2015 -0700

      Merge branch 'bridge-netlink-port-attrs'

      Nikolay Aleksandrov says:

      ====================
      bridge: netlink: complete port attribute support

      This is the second set that completes the bridge port's netlink support 
and
      makes everything from sysfs available via netlink. I've used sysfs as a
      guide of what and how to set again. I've tested setting/getting every
      option and also this time tested enabling KASAN. Again there're a few long
      line warnings about the ifla attribute names in br_port_info_size() but
      as the previous set - it's good to know what's been accounted for.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5d6ae479ab7ddf77bb22bdf739268581453ff886
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:12:02 2015 +0200

      bridge: netlink: add support for port's multicast_router attribute

      Add IFLA_BRPORT_MULTICAST_ROUTER to allow setting/getting port's
      multicast_router via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9b0c6e4deb3df91bf0aea8158ea77dc58c9d90b6
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:12:01 2015 +0200

      bridge: netlink: allow to flush port's fdb

      Add IFLA_BRPORT_FLUSH to allow flushing port's fdb similar to sysfs's
      flush.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61c0a9a83e0b12c712cd686172446aba8ea48685
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:12:00 2015 +0200

      bridge: netlink: export port's timer values

      Add the following attributes in order to export port's timer values:
      IFLA_BRPORT_MESSAGE_AGE_TIMER, IFLA_BRPORT_FORWARD_DELAY_TIMER and
      IFLA_BRPORT_HOLD_TIMER.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e08e838ac5707cb1f1294e0d53b31997a0367b99
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:59 2015 +0200

      bridge: netlink: export port's topology_change_ack and config_pending

      Add IFLA_BRPORT_TOPOLOGY_CHANGE_ACK and IFLA_BRPORT_CONFIG_PENDING to
      allow getting port's topology_change_ack and config_pending respectively
      via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 42d452c4b5e7bf0e3024fa9512ec462f70545ae5
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:58 2015 +0200

      bridge: netlink: export port's id and number

      Add IFLA_BRPORT_(ID|NO) to allow getting port's port_id and port_no
      respectively via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 96f94e7f4a216282a24819968184c881e6343692
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:57 2015 +0200

      bridge: netlink: export port's designated cost and port

      Add IFLA_BRPORT_DESIGNATED_(COST|PORT) to allow getting the port's
      designated cost and port respectively via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 80df9a2692edf7afffda9282e716e7b1df198e07
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:56 2015 +0200

      bridge: netlink: export port's bridge id

      Add IFLA_BRPORT_BRIDGE_ID to allow getting the designated bridge id via
      netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ebc7660ab4559cad10b6595e05f70562bb26dc5
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:11:55 2015 +0200

      bridge: netlink: export port's root id

      Add IFLA_BRPORT_ROOT_ID to allow getting the designated root id via
      netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit deaa0a6a930edc79081268bf23b196d0340499af
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 10:49:04 2015 -0700

      net: Lookup actual route when oif is VRF device

      If the user specifies a VRF device in a get route query the custom route
      pointing to the VRF device is returned:

          $ ip route ls table vrf-red
          unreachable default
          broadcast 10.2.1.0 dev eth1  proto kernel  scope link  src 10.2.1.2
          10.2.1.0/24 dev eth1  proto kernel  scope link  src 10.2.1.2
          local 10.2.1.2 dev eth1  proto kernel  scope host  src 10.2.1.2
          broadcast 10.2.1.255 dev eth1  proto kernel  scope link  src 10.2.1.2

          $ ip route get oif vrf-red 10.2.1.40
          10.2.1.40 dev vrf-red
              cache

      Add the flags to skip the custom route and go directly to the FIB. With
      this patch the actual route is returned:

          $ ip route get oif vrf-red 10.2.1.40
          10.2.1.40 dev eth1  src 10.2.1.2
              cache

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2579c98f0d04075ab8b041de7d5396393d2417f1
  Merge: 390a4be 5edfcee
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:29:18 2015 -0700

      Merge tag 'mac80211-next-for-davem-2015-10-05' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

      Johannes Berg says:

      ====================
      For the current cycle, we have the following right now:
       * many internal fixes, API improvements, cleanups, etc.
       * full AP client state tracking in cfg80211/mac80211 from Ayala
       * VHT support (in mac80211) for mesh
       * some A-MSDU in A-MPDU support from Emmanuel
       * show current TX power to userspace (from RafaÅ?)
       * support for netlink dump in vendor commands (myself)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 390a4bee5c2ade628565dd21fb5d8656a58f7804
  Merge: 4148987 bb191c3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:27:51 2015 -0700

      Merge branch 'l3mdev_saddr_op'

      David Ahern says:

      ====================
      net: Add saddr op to l3mdev and vrf

      First 2 patches are re-sends of patches that got lost in the ethosphere
      Tuesday; they were part of the first round of l3mdev conversions.
      Next 3 handle the source address lookup for raw and datagram sockets
      bound to a VRF device.

      The conversion to the get_saddr op also fixes locally originated TCP
      packets showing up at the VRF device. The use of the FLOWI_FLAG_L3MDEV_SRC
      flag in ip_route_connect_init was causing locally generated packets
      to skip the VRF device.

      v2
      - rebased to top of net-next per device delete fix and hash based
        multipath patches
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bb191c3e874650ae8f701885f3dd5f8ea8989b19
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:27 2015 -0700

      net: Add l3mdev saddr lookup to raw_sendmsg

      ping originated on box through a VRF device is showing up in tcpdump
      without a source address:
          $ tcpdump -n -i vrf-blue
          08:58:33.311303 IP 0.0.0.0 > 10.2.2.254: ICMP echo request, id 2834, 
seq 1, length 64
          08:58:33.311562 IP 10.2.2.254 > 10.2.2.2: ICMP echo reply, id 2834, 
seq 1, length 64

      Add the call to l3mdev_get_saddr to raw_sendmsg.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8cbb512c923d5f695ff6265b2b741b1718e3b444
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:26 2015 -0700

      net: Add source address lookup op for VRF

      Add operation to l3mdev to lookup source address for a given flow.
      Add support for the operation to VRF driver and convert existing
      IPv4 hooks to use the new lookup.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ce58d84358c7b477811b5100152fad848f936fc
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:25 2015 -0700

      net: Refactor path selection in __ip_route_output_key_hash

      VRF device needs the same path selection following lookup to set source
      address. Rather than duplicating code, move existing code into a
      function that is exported to modules.

      Code move only; no functional change.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fee6d4c777a125e56de9370db3b2bf359bf958d6
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:24 2015 -0700

      net: Add netif_is_l3_slave

      IPv6 addrconf keys off of IFF_SLAVE so can not use it for L3 slave.
      Add a new private flag and add netif_is_l3_slave function for checking
      it.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e2895a8e3824eb5611c97a015a3b6d678b4503e
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:51:23 2015 -0700

      net: Rename FLOWI_FLAG_VRFSRC to FLOWI_FLAG_L3MDEV_SRC

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e28b000825d959cb0c0b8fea8c2f132ddc516dc
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:32:51 2015 -0600

      net: Fix vti use case with oif in dst lookups for IPv6

      It occurred to me yesterday that 741a11d9e4103 ("net: ipv6: Add
      RT6_LOOKUP_F_IFACE flag if oif is set") means that xfrm6_dst_lookup
      needs the FLOWI_FLAG_SKIP_NH_OIF flag set. This latest commit causes
      the oif to be considered in lookups which is known to break vti. This
      explains why 58189ca7b274 did not the IPv6 change at the time it was
      submitted.

      Fixes: 42a7b32b73d6 ("xfrm: Add oif to dst lookups")
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4148987a5111b0c8062bd78f39a67c361f621a39
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 08:32:51 2015 -0600

      net: Fix vti use case with oif in dst lookups for IPv6

      It occurred to me yesterday that 741a11d9e4103 ("net: ipv6: Add
      RT6_LOOKUP_F_IFACE flag if oif is set") means that xfrm6_dst_lookup
      needs the FLOWI_FLAG_SKIP_NH_OIF flag set. This latest commit causes
      the oif to be considered in lookups which is known to break vti. This
      explains why 58189ca7b274 did not the IPv6 change at the time it was
      submitted.

      Fixes: 42a7b32b73d6 ("xfrm: Add oif to dst lookups")
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3e905b80b92146d8dd0bf2da3ade0944a3026597
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:19:59 2015 +0300

      gianfar: Add WAKE_UCAST and "wake-on-filer" support

      This enables eTSEC's filer (Rx parser) and the FGPI Rx
      interrupt (Filer General Purpose Interrupt) as a wakeup
      source event.

      Upon entering suspend state, the eTSEC filer is given
      a rule to match incoming L2 unicast packets.  A packet
      matching the rule will be enqueued in the Rx ring and
      a FGPI Rx interrupt will be asserted by the filer to
      wakeup the system.  Other packet types will be dropped.
      On resume the filer table is restored to the content
      before entering suspend state.
      The set of rules from gfar_filer_config_wol() could be
      extended to implement other WoL capabilities as well.

      The "fsl,wake-on-filer" DT binding enables this capability
      on certain platforms that feature the necessary power
      management infrastructure, targeting mainly printing and
      imaging applications.
      (refer to Power Management section of the SoC Ref Man)

      Cc: Li Yang <leoli@xxxxxxxxxxxxx>
      Cc: Zhao Chenhui <chenhui.zhao@xxxxxxxxxxxxx>

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70963d245ed11412658b89fe308b6188b62259c7
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:19:58 2015 +0300

      powerpc: dts: p1022si: Add fsl,wake-on-filer for eTSEC

      Enable the "wake-on-filer" (aka. wake on user defined packet)
      wake on lan capability for the eTSEC ethernet nodes.

      Cc: Li Yang <leoli@xxxxxxxxxxxxx>
      Cc: Zhao Chenhui <chenhui.zhao@xxxxxxxxxxxxx>

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 66cebb86ac77c6dff0751efa382551cab24075cd
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:19:57 2015 +0300

      doc: dt: net: Add fsl,wake-on-filer for eTSEC

      Add the "fsl,wake-on-filer" property for eTSEC nodes to
      indicate that the system has the power management
      infrastructure needed to be able to wake up the system
      via FGPI (filer, aka. h/w rx parser) interrupt.

      Cc: Li Yang <leoli@xxxxxxxxxxxxx>
      Cc: Zhao Chenhui <chenhui.zhao@xxxxxxxxxxxxx>

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04a8250b40394f34a54439c62c883322b3107bd2
  Merge: 4917a15 6b26ba3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 04:18:04 2015 -0700

      Merge branch 'ovs-ipv6-tunnel'

      Jiri Benc says:

      ====================
      openvswitch: add IPv6 tunneling support

      This builds on the previous work that added IPv6 support to lwtunnels and
      adds IPv6 tunneling support to ovs.

      To use IPv6 tunneling, there needs to be a metadata based tunnel 
net_device
      created and added to the ovs bridge. Currently, only vxlan is supported by
      the kernel, with geneve to follow shortly. There's no need nor intent to 
add
      a support for this into the vport-vxlan (etc.) compat layer.

      v3: dropped the last two patches added in v2.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6b26ba3a7d952e611dcde1f3f77ce63bcc70540a
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Mon Oct 5 13:09:47 2015 +0200

      openvswitch: netlink attributes for IPv6 tunneling

      Add netlink attributes for IPv6 tunnel addresses. This enables IPv6 
support
      for tunnels.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 00a93babd06aaad31d23384cda576ede0f586a8c
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Mon Oct 5 13:09:46 2015 +0200

      openvswitch: add tunnel protocol to sw_flow_key

      Store tunnel protocol (AF_INET or AF_INET6) in sw_flow_key. This field now
      also acts as an indicator whether the flow contains tunnel data (this was
      previously indicated by tun_key.u.ipv4.dst being set but with IPv6 
addresses
      in an union with IPv4 ones this won't work anymore).

      The new field was added to a hole in sw_flow_key.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4917a1548ff41e53d863d6845b4da1884e4282b4
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 12:11:21 2015 +0200

      bridge: netlink: make br_fill_info's frame size smaller

      When KASAN is enabled the frame size grows > 2048 bytes and we get a
      warning, so make it smaller.
      net/bridge/br_netlink.c: In function 'br_fill_info':
      >> net/bridge/br_netlink.c:1110:1: warning: the frame size of 2160 bytes
      >> is larger than 2048 bytes [-Wframe-larger-than=]

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d663baba8b16f3097ac3fb5baf97c54970d2f1ff
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 30 15:24:08 2015 +0530

      video: of: fix memory leak

      If of_parse_display_timing() fails we are printing an error message and
      jumping to the error path but we missed freeing "dt".

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 90d2c056bd85bbb47104c52e08eecf8408163a54
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Sat Oct 3 17:13:05 2015 -0700

      i40e/i40evf: set AQ count after memory allocation

      The standard way to check if the AQ is enabled is to look at the
      count field. So we should only set this field after we have
      successfully allocated memory. To do otherwise is to incite
      panic among the populace.

      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 16660f0bd942cec203eaf4de0e2ac1695bd9d32d
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 11:43:46 2015 -0700

      net: Add support for filtering neigh dump by device index

      Add support for filtering neighbor dumps by device by adding the
      NDA_IFINDEX attribute to the dump request.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 120798d2e7d1ac87365fe5ea91b074bb42ca1eff
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:30 2015 +0100

      arm64: mm: remove dsb from update_mmu_cache

      update_mmu_cache() consists of a dsb(ishst) instruction so that new user
      mappings are guaranteed to be visible to the page table walker on
      exception return.

      In reality this can be a very expensive operation which is rarely needed.
      Removing this barrier shows a modest improvement in hackbench scores and
      , in the worst case, we re-take the user fault and establish that there
      was nothing to do.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 28c6fbc3b446caf5f8d1f2d7b79e09e743158a4d
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:29 2015 +0100

      arm64: tlb: remove redundant barrier from __flush_tlb_pgtable

      __flush_tlb_pgtable is used to invalidate intermediate page table
      entries after they have been cleared and are about to be freed. Since
      pXd_clear imply memory barriers, we don't need the extra one here.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 38d96287504a2478eb538bfecfa1fddd743bb6b2
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:28 2015 +0100

      arm64: mm: kill mm_cpumask usage

      mm_cpumask isn't actually used for anything on arm64, so remove all the
      code trying to keep it up-to-date.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c2775b2ee5caca19f661ee2ab5af92462596db71
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:27 2015 +0100

      arm64: switch_mm: simplify mm and CPU checks

      switch_mm performs some checks to try and avoid entering the ASID
      allocator:

        (1) If we're switching to the init_mm (no user mappings), then simply
            set a reserved TTBR0 value with no page table (the zero page)

        (2) If prev == next *and* the mm_cpumask indicates that we've run on
            this CPU before, then we can skip the allocator.

      However, there is plenty of redundancy here. With the new ASID allocator,
      if prev == next, then we know that our ASID is valid and do not need to
      worry about re-allocation. Consequently, we can drop the mm_cpumask check
      in (2) and move the prev == next check before the init_mm check, since
      if prev == next == init_mm then there's nothing to do.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5a7862e83000ccfd36db927c6f060458fe271157
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:26 2015 +0100

      arm64: tlbflush: avoid flushing when fullmm == 1

      The TLB gather code sets fullmm=1 when tearing down the entire address
      space for an mm_struct on exit or execve. Given that the ASID allocator
      will never re-allocate a dirty ASID, this flushing is not needed and can
      simply be avoided in the flushing code.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit f3e002c24e1f3b66f6e392ecd6928b5d04672c54
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:25 2015 +0100

      arm64: tlbflush: remove redundant ASID casts to (unsigned long)

      The ASID macro returns a 64-bit (long long) value, so there is no need
      to cast to (unsigned long) before shifting prior to a TLBI operation.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5aec715d7d3122f77cabaa7578d9d25a0c1ed20e
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:24 2015 +0100

      arm64: mm: rewrite ASID allocator and MM context-switching code

      Our current switch_mm implementation suffers from a number of problems:

        (1) The ASID allocator relies on IPIs to synchronise the CPUs on a
            rollover event

        (2) Because of (1), we cannot allocate ASIDs with interrupts disabled
            and therefore make use of a TIF_SWITCH_MM flag to postpone the
            actual switch to finish_arch_post_lock_switch

        (3) We run context switch with a reserved (invalid) TTBR0 value, even
            though the ASID and pgd are updated atomically

        (4) We take a global spinlock (cpu_asid_lock) during context-switch

        (5) We use h/w broadcast TLB operations when they are not required
            (e.g. in flush_context)

      This patch addresses these problems by rewriting the ASID algorithm to
      match the bitmap-based arch/arm/ implementation more closely. This in
      turn allows us to remove much of the complications surrounding switch_mm,
      including the ugly thread flag.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 8e63d38876691756f9bc6930850f1fb77809be1b
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:23 2015 +0100

      arm64: flush: use local TLB and I-cache invalidation

      There are a number of places where a single CPU is running with a
      private page-table and we need to perform maintenance on the TLB and
      I-cache in order to ensure correctness, but do not require the operation
      to be broadcast to other CPUs.

      This patch adds local variants of tlb_flush_all and __flush_icache_all
      to support these use-cases and updates the callers respectively.
      __local_flush_icache_all also implies an isb, since it is intended to be
      used synchronously.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Acked-by: David Daney <david.daney@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fa7aae8a4257e6be7051420dac1f150c1eef721b
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:22 2015 +0100

      arm64: proc: de-scope TLBI operation during cold boot

      When cold-booting a CPU, we must invalidate any junk entries from the
      local TLB prior to enabling the MMU. This doesn't require broadcasting
      within the inner-shareable domain, so de-scope the operation to apply
      only to the local CPU.

      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Tested-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c51e97d89e526368eb697f87cd4d391b9e19f369
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 6 18:46:21 2015 +0100

      arm64: mm: remove unused cpu_set_idmap_tcr_t0sz function

      With commit b08d4640a3dc ("arm64: remove dead code"),
      cpu_set_idmap_tcr_t0sz is no longer called and can therefore be removed
      from the kernel.

      This patch removes the function and effectively inlines the helper
      function __cpu_set_tcr_t0sz into cpu_set_default_tcr_t0sz.

      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c2c80bdb9e91b412ea68f6dcc49c5d7b91e0b930
  Merge: 049e6dd 8494cde eb8d0ac
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Oct 7 11:43:39 2015 +0100

      Merge remote-tracking branches 'spi/fix/davinci' and 'spi/fix/sh-msiof' 
into spi-linus

  commit 127db024a7baee9874014dac33628253f438b4da
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Thu Sep 17 12:38:07 2015 +0300

      arm64: introduce VA_START macro - the first kernel virtual address.

      In order to not use lengthy (UL(0xffffffffffffffff) << VA_BITS) 
everywhere,
      replace it with VA_START.

      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 404268828c74ba06b1f21584b26edafb381c9d7d
  Author: Feng Kan <fkan@xxxxxxx>
  Date:   Wed Sep 23 11:55:39 2015 -0700

      arm64: copy_to-from-in_user optimization using copy template

      This patch optimize copy_to-from-in_user for arm 64bit architecture. The
      copy template is used as template file for all the copy*.S files. Minor
      change was made to it to accommodate the copy to/from/in user files.

      Signed-off-by: Feng Kan <fkan@xxxxxxx>
      Signed-off-by: Balamurugan Shanmugam <bshanmugam@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit e5c88e3f2fb35dca5f3e46d65095bf5d008595b7
  Author: Feng Kan <fkan@xxxxxxx>
  Date:   Wed Sep 23 11:55:38 2015 -0700

      arm64: Change memcpy in kernel to use the copy template file

      This converts the memcpy.S to use the copy template file. The copy
      template file was based originally on the memcpy.S

      Signed-off-by: Feng Kan <fkan@xxxxxxx>
      Signed-off-by: Balamurugan Shanmugam <bshanmugam@xxxxxxx>
      [catalin.marinas@xxxxxxx: removed tmp3(w) .req statements as they are not 
used]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit efa773fe913ff188c554ccaac577d0a1bb1dc2f4
  Author: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
  Date:   Mon Aug 24 18:01:15 2015 +0530

      arm64: defconfig: Enable samsung serial and mmc

      This patch update defconfig, adds samsung serial and
      Synopsys Designware MMC configs related to exynos SoC

      Signed-off-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 02685b1df0461ce4c23d263b66ea0aac66450d13
  Merge: 499f3aa 1c27df1
  Author: Joerg Roedel <jroedel@xxxxxxx>
  Date:   Wed Oct 7 12:23:24 2015 +0200

      Merge branch 'for-joerg/arm-smmu/fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/will/linux into iommu/fixes

  commit e892406f00e1f93d81fdb350e1bcb5cb0e5dabff
  Merge: d25b8e7 8552d85
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 7 03:01:53 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-03

      This series contains updates to i40e and i40evf, some of which are to
      resolve more Red Hat bugzilla issues.

      Jiang Liu updates the i40e and i40evf drivers to use numa_mem_id()
      instead of numa_node_id() to get the nearest node with memory which
      better supports memoryless nodes.

      Anjali fixes an issue from Dan Carpenter <dan.carpenter@xxxxxxxxxx>,
      to resolve a memory leak in X722 RSS configuration path, where we should
      free the memory allocated before exiting.

      Shannon modifies the drivers to ensure we have the spinlocks before we
      clear the ARQ and ASQ management registers.  In addition, we widen the
      locked portion insert a sanity check to ensure we are working with safe
      register values.

      Mitch fixes an issue where under certain circumstances, we can get an
      extra VF_RESOURCES message from the PF driver at runtime.  When this
      occurs, we need to parse it because our VSI may have changed and that
      will affect the relationship with the PF driver.  But this parsing also
      blows away our current MAC address, so resolve the issue by restoring
      the current MAC address from the netdev struct after we parse the
      resource message.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d25b8e74291fec2dbf3fe3df7f20289eeaa9d28f
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 18:09:07 2015 +0100

      net: dsa: better error reporting

      Add additional error reporting to the generic DSA code, so it's easier
      to debug when things go wrong.  This was useful when initially bringing
      up 88e6176 on a new board.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Reviewed-by: Andrew Lunn <andrew@xxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4bac50bace0377138fed2ac3627c1ad470ea1eca
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 18:09:01 2015 +0100

      net: dsa: mv88e6xxx: remove link polling

      The link status is polled by the generic phy layer, there's no need to
      duplicate that polling with additional polling.  This additional polling
      adds additional MDIO traffic, and races with the generic phy layer,
      resulting in missing or duplicated link status messages.

      Tested-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a6d1fa0d2b48fbae444e46e7f37a4832b2f8bdf
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:56 2015 -0700

      x86/vdso: Remove runtime 32-bit vDSO selection

      32-bit userspace will now always see the same vDSO, which is
      exactly what used to be the int80 vDSO.  Subsequent patches will
      clean it up and make it support SYSENTER and SYSCALL using
      alternatives.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/e7e6b3526fa442502e6125fe69486aab50813c32.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b611acf4736b5b00c89dcc238f640337832abcb4
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:55 2015 -0700

      x86/entry/64/compat: After SYSENTER, move STI after the NT fixup

      We eventually want to make it all the way into C code before
      enabling interrupts.  We need to rework our flags handling
      slightly to delay enabling interrupts.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/35d24d2a9305da3182eab7b2cdfd32902e90962c.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 72f924783b8a87e4454516520ffb5f35e4930371
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:54 2015 -0700

      x86/entry, locking/lockdep: Move lockdep_sys_exit() to 
prepare_exit_to_usermode()

      Rather than worrying about exactly where LOCKDEP_SYS_EXIT should
      go in the asm code, add it to prepare_exit_from_usermode() and
      remove all of the asm calls that are followed by
      prepare_exit_to_usermode().

      LOCKDEP_SYS_EXIT now appears only in the syscall fast paths.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1736ebe948b845e68120b86b89091f3ec27f5e8e.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dd27f998f0ed3c797032a82033fa191be7c61e4c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:53 2015 -0700

      x86/entry/64/compat: Fix SYSENTER's NT flag before user memory access

      Clearing NT is part of the prologue, whereas loading up arg6
      makes more sense to think about as part of syscall processing.
      Reorder them.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/19eb235828b2d2a52c53459e09f2974e15e65a35.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 04235c00b6bb72b589e99efcc18883378ee76f1b
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:52 2015 -0700

      selftests/x86: Add a test for ptrace syscall restart and arg modification

      This tests assumptions about how fast syscall works wrt pt_regs
      and, in particular, what happens if IP is decremented by 2
      during a syscall.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1c44dbfe59000ba135bbf35ccc5d2433a0b31618.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3b56aae34bc695638b8673fc8459be1837c18730
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:51 2015 -0700

      selftests/x86: Add a test for vDSO unwinding

      While the kernel itself doesn't use DWARF unwinding, user code
      expects to be able to unwind the vDSO.  The vsyscall
      (AT_SYSINFO) entry is manually CFI-annotated, and this tests
      that it unwinds correctly.

      I tested the test by incorrectly annotating __kernel_vsyscall,
      and the test indeed fails if I do that.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/8bf736d1925cdd165c0f980156a4248e55af47a1.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7e0f51cb445be8d3aee80e433ed8da4a33ad0157
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:50 2015 -0700

      x86/uaccess: Add unlikely() to __chk_range_not_ok() failure paths

      This should improve code quality a bit. It also shrinks the kernel text:

       Before:
             text     data      bss       dec    filename
         21828379  5194760  1277952  28301091    vmlinux

       After:
             text     data      bss       dec    filename
         21827997  5194760  1277952  28300709    vmlinux

      ... by 382 bytes.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/f427b8002d932e5deab9055e0074bb4e7e80ee39.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a76cf66e948afbaeda8e3ecc861f29c47a026c27
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Mon Oct 5 17:47:49 2015 -0700

      x86/uaccess: Tell the compiler that uaccess is unlikely to fault

      GCC doesn't realize that get_user(), put_user(), and their __
      variants are unlikely to fail.  Tell it.

      I noticed this while playing with the C entry code.

       Before:
             text     data      bss       dec    filename
         21828763  5194760  1277952  28301475    vmlinux.baseline

       After:
            text      data      bss       dec    filename
         21828379  5194760  1277952  28301091    vmlinux.new

      The generated code shrunk by 384 bytes.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/dc37bed7024319c3004d950d57151fca6aeacf97.1444091584.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 25a9a924c0c8723ced99179eb639e8c5372a2557
  Merge: 0b101e6 a0eeb8d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 7 11:24:24 2015 +0200

      Merge branch 'linus' into x86/asm, to pick up fixes before applying new 
changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7e64e5e66af8308725bfd03fcdf185c09b3056a7
  Merge: f79683d 0316d30
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 7 12:14:23 2015 +0300

      Merge tag 'iwlwifi-next-for-kalle-2015-10-05' of 
git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

      * more clean-ups towards multiple RX queues;
      * some rate scaling fixes and improvements;
      * some time-of-flight fixes;
      * other generic improvements and clean-ups;

  commit 79c7c7acd25689b1d7669bdb33fb3cb7c64541fe
  Merge: 3f5e4a3 990486c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 09:52:42 2015 +0100

      Merge branch 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile

      Pull strscpy fixes from Chris Metcalf :
       "This patch series fixes up a couple of architecture issues where
        strscpy wasn't configured correctly (missing on h8300, duplicating
        local and asm-generic copies on powerpc and tile).

        It also adds a use of zero_bytemask() to the final store for strscpy
        to avoid writing uninitialized data to the destination.  However, to
        make this work we had to add support for zero_bytemask() to the two
        architectures that didn't have it (alpha and tile), because they were
        providing their own local copies, but didn't provide the
        zero_bytemask() that was previously only required when building with
        CONFIG_DCACHE_WORD_ACCESS"

      [ Side note: there is still no actual users of strscpy except for the
        one preexisting use in arch/tile that predates the generic version.
        So this is all about fixing the infrastructure so that we eventually
        can start using it.  - Linus ]

      * 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile:
        strscpy: zero any trailing garbage bytes in the destination
        word-at-a-time.h: support zero_bytemask() on alpha and tile
        word-at-a-time.h: fix some Kbuild files

  commit 3f5e4a311619533bfc742f2d8e04510334dd0dd5
  Merge: a0eeb8d e5a5d92
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 09:35:15 2015 +0100

      Merge tag 'for-linus-20151006' of git://git.infradead.org/linux-mtd

      Pull MTD fixes from Brian Norris:
       "A few MTD fixes:

         - mxc_nand: a "refactoring only" change in 4.3-rc1 had some bad
           pointer (array) arithmetic.  Fix that

         - sunxi_nand:

         - Fix an old list manipulation / memory management bug in the device
           release() code path

         - Correct a few mistakes in OOB write support"

      * tag 'for-linus-20151006' of git://git.infradead.org/linux-mtd:
        mxc_nand: fix copy_spare
        mtd: nand: sunxi: fix sunxi_nand_chips_cleanup()
        mtd: nand: sunxi: fix OOB handling in ->write_xxx() functions

  commit de28a05ee28e36fa1fc68fcfc7c6cc1c6f7c270c
  Merge: 54328e6 dbf73d4
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 7 11:12:01 2015 +0300

      Merge tag 'iwlwifi-for-kalle-2015-10-05' of 
git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-fixes

      * some fixes for PN key programming when entering D3;
      * fix for CSA when the AP is stopped during a channel switch;
      * fix firmware name for 3160 devices;
      * add some new PCI IDs for 7265 devices;
      * fix CT-kill entry;
      * fix kernel panic when a sysassert occurs in the init ucode flow;

  commit a0eeb8dd34f21fddfe85b37832b5f3d02ee6e34b
  Merge: 00a3d66 39d0d3b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 08:54:22 2015 +0100

      Merge tag 'nfs-for-4.3-3' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs

      Pull NFS client bugfixes from Trond Myklebust:
       "Highlights include:

        Bugfixes:
         - Fix a use-after-free bug in the RPC/RDMA client
         - Fix a write performance regression
         - Fix up page writeback accounting
         - Don't try to reclaim unused state owners
         - Fix a NFSv4 nograce recovery hang
         - reset states to use open_stateid when returning delegation
           voluntarily
         - Fix a tracepoint NULL-pointer dereference"

      * tag 'nfs-for-4.3-3' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs:
        NFS: Fix a tracepoint NULL-pointer dereference
        nfs4: reset states to use open_stateid when returning delegation 
voluntarily
        NFSv4: Fix a nograce recovery hang
        NFSv4.1: nfs4_opendata_check_deleg needs to handle 
NFS4_OPEN_CLAIM_DELEG_CUR_FH
        NFSv4: Don't try to reclaim unused state owners
        NFS: Fix a write performance regression
        NFS: Fix up page writeback accounting
        xprtrdma: disconnect and flush cqs before freeing buffers

  commit 00a3d660cbac05af34cca149cb80fb611e916935
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 08:32:38 2015 +0100

      Revert "fs: do not prefault sys_write() user buffer pages"

      This reverts commit 998ef75ddb5709bbea0bf1506cd2717348a3c647.

      The commit itself does not appear to be buggy per se, but it is exposing
      a bug in ext4 (and Ted thinks ext3 too, but we solved that by getting
      rid of it).  It's too late in the release cycle to really worry about
      this, even if Dave Hansen has a patch that may actually fix the
      underlying ext4 problem.  We can (and should) revisit this for the next
      release.

      The problem is that moving the prefaulting later now exposes a special
      case with partially successful writes that isn't handled correctly.  And
      the prefaulting likely isn't normally even that much of a performance
      issue - it looks like at least one reason Dave saw this in his
      performance tests is that he also ran them on Skylake that now supports
      the new SMAP code, which makes the normally very cheap user space
      prefaulting noticeably more expensive.

      Bisected-and-acked-by: Ted Ts'o <tytso@xxxxxxx>
      Analyzed-and-acked-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 4108efb02daa09cbb5db048ada55a5b021b5183d
  Author: Christophe Lombard <clombard@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 7 16:07:40 2015 +1100

      cxl: Fix number of allocated pages in SPA

      The scheduled process area is currently allocated before assigning the
      correct maximum processes to the AFU, which will mean we only ever
      allocate a fixed number of pages for the scheduled process area. This
      will limit us to 958 processes with 2 x 64K pages. If we try to use more
      processes than that we'd probably overrun the buffer and corrupt memory
      or crash.

      AFUs that require three or more interrupts per process will not be
      affected as they are already limited to less processes than that, but we
      could hit it on an AFU that requires 0, 1 or 2 interrupts per process,
      or when using 4K pages.

      This patch moves the initialisation of the num_procs to before the SPA
      allocation so that enough pages will be allocated for the number of
      processes that the AFU supports.

      Signed-off-by: Christophe Lombard <clombard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.18+
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 266424b5377ed1c3033d97ed5bc4fca7d89921a1
  Author: Frediano Ziglio <fziglio@xxxxxxxxxx>
  Date:   Thu Sep 24 14:18:22 2015 +0100

      drm/qxl: avoid dependency lock

      qxl_bo_unref calls drm_gem_object_unreference_unlocked which
      locks dev->struct_mutex. However this lock could be already
      locked if the call came from qxl_gem_object_free.
      As we don't need to call qxl_bo_ref/qxl_bo_unref cause
      qxl_release_list_add will hold a reference by itself avoid
      to call them and the possible deadlock.

      Signed-off-by: Frediano Ziglio <fziglio@xxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 7eb9974f3685f36f419bf9e66cfaee92849856fe
  Author: Frediano Ziglio <fziglio@xxxxxxxxxx>
  Date:   Thu Sep 24 14:25:14 2015 +0100

      drm/qxl: avoid buffer reservation in qxl_crtc_page_flip

      This avoid a dependency lock error.
      According to https://lwn.net/Articles/548909/ users of WW mutex API
      should avoid using different context.
      When a buffer is reserved with qxl_bo_reserve a ww_mutex_lock without
      context is used. However during qxl_draw_dirty_fb different locks
      with specific context are used.
      This is detected during a machine booting with a debug kernel with lock
      dependency checking enabled.
      Like many other function in this file to avoid this problem object
      pinning is used. Once the object is pinned is not necessary to keep
      the lock so it can be released avoiding the locking problem.

      Signed-off-by: Frediano Ziglio <fziglio@xxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 60906529bec506a4bde93f04eb5e7a9dd9c42a3b
  Author: Gerd Hoffmann <kraxel@xxxxxxxxxx>
  Date:   Mon Oct 5 12:20:26 2015 +0200

      drm/qxl: fix framebuffer dirty rectangle tracking.

      Commit "c0fe07a drm/qxl: rewrite framebuffer support" has a bug in the
      dirty rectangle tracking:  Instead of ignoring an empty dirty rectangle
      when adding a new dirty region the dirty region gets extended to the
      upper left corner.  Fix it.

      Cc: linux-stable@xxxxxxxxxxxxxxx
      Signed-off-by: Gerd Hoffmann <kraxel@xxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 9bc63ca0904da3f163c01087e27952dd962d548d
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Mon Oct 5 12:43:57 2015 +0200

      Bluetooth: btbcm: Read the local name in setup stage

      The Broadcom Bluetooth controllers have the chip name included in the
      ROM firmware or later in the patchram firmware. For debugging purposes
      read the local name and print it out. This is only done during setup
      stage and only once before loading the firmware and once after loading
      the firmware.

      For the Broadcom based controllers from Apple, the name is only read once
      after determining the chip id.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 92240e8dc0d1a94ea3dde7cb19aace113dcc6cb9
  Author: Simon Horman <horms@xxxxxxxxxxxx>
  Date:   Tue Oct 6 17:09:52 2015 +0900

      ipvs: Remove possibly unused variables from ip_vs_conn_net_{init,cleanup}

      If CONFIG_PROC_FS is undefined then the arguments of proc_create()
      and remove_proc_entry() are unused. As a result the net variables of
      ip_vs_conn_net_{init,cleanup} are unused.

      net/netfilter/ipvs//ip_vs_conn.c: In function â??ip_vs_conn_net_initâ??:
      net/netfilter/ipvs//ip_vs_conn.c:1350:14: warning: unused variable 
â??netâ?? [-Wunused-variable]
      net/netfilter/ipvs//ip_vs_conn.c: In function 
â??ip_vs_conn_net_cleanupâ??:
      net/netfilter/ipvs//ip_vs_conn.c:1361:14: warning: unused variable 
â??netâ?? [-Wunused-variable]
      ...

      Resolve this by dereferencing net as needed rather than storing it
      in a variable.

      Fixes: 3d99376689ee ("ipvs: Pass ipvs not net into 
ip_vs_control_net_(init|cleanup)")
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>

  commit ed1c9f0e78b3b360ade4fb838a6099d643f3cd04
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 08:49:04 2015 -0700

      ipvs: Remove possibly unused variable from ip_vs_out

      Eric's net namespace changes in 1b75097dd7a26 leaves net unreferenced if
      CONFIG_IP_VS_IPV6 is not enabled:

      ../net/netfilter/ipvs/ip_vs_core.c: In function â??ip_vs_outâ??:
      ../net/netfilter/ipvs/ip_vs_core.c:1177:14: warning: unused variable 
â??netâ?? [-Wunused-variable]

      After the net refactoring there is only 1 user; push the reference to the
      1 user. While the line length slightly exceeds 80 it seems to be the
      best change.

      Fixes: 1b75097dd7a26("ipvs: Pass ipvs into ip_vs_out")
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      [horms: updated subject]
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d7e7f02f71bee425d651ced7ba3b316df61ab945
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 22 17:49:26 2015 +0800

      nfc: s3fwrn5: i2c: Use devm_request_threaded_irq to avoid irq leak

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Acked-by: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 45ee28570d73205e2129d995d805c7ae898e7a94
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 22 17:48:40 2015 +0800

      nfc: s3fwrn5: Make NFC_S3FWRN5 select CRYPTO

      Make NFC_S3FWRN5 select CRYPTO to fix below build errors:

      ERROR: "crypto_destroy_tfm" [drivers/nfc/s3fwrn5/s3fwrn5.ko] undefined!
      ERROR: "crypto_alloc_base" [drivers/nfc/s3fwrn5/s3fwrn5.ko] undefined!
      scripts/Makefile.modpost:91: recipe for target '__modpost' failed
      make[1]: *** [__modpost] Error 1

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Acked-by: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 879f2fea8a5a748bcbf98d2cdce9139c045505d3
  Author: Andrey Gelman <andrey.gelman@xxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:43:43 2015 -0700

      Input: ads7846 - correct the value got from SPI

      According to the touch controller spec, SPI return a 16 bit value, only 12
      bits are valid, they are bit[14-3].

      The value of MISO and MOSI can be configured when SPI is in idle mode.
      Currently this touch driver assumes the SPI bus sets the MOSI and MISO in
      low level when SPI bus is in idle mode. So the bit[15] of the value got
      from SPI bus is always 0. But when SPI bus congfigures the MOSI and MISO 
in
      high level during the SPI idle mode, the bit[15] of the value get from SPI
      is always 1. If bit[15] is not masked, we may get the wrong value.

      Mask the invalid bit to make sure the correct value gets returned.
      Regardless of the SPI bus idle configuration.

      Signed-off-by: Andrey Gelman <andrey.gelman@xxxxxxxxxxxxxx>
      Signed-off-by: Haibo Chen <haibo.chen@xxxxxxxxxxxxx>
      Signed-off-by: Igor Grinberg <grinberg@xxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 39d0d3bdf7bab3021a31e501172ac0f18947f9b3
  Author: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
  Date:   Mon Oct 5 16:43:26 2015 -0400

      NFS: Fix a tracepoint NULL-pointer dereference

      Running xfstest generic/013 with the tracepoint nfs:nfs4_open_file
      enabled produces a NULL-pointer dereference when calculating fileid and
      filehandle of the opened file.  Fix this by checking if state is NULL
      before trying to use the inode pointer.

      Reported-by: Olga Kornievskaia <aglo@xxxxxxxxx>
      Signed-off-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 753da421ba467dcabc1b8bd2accbf605d0da2ea9
  Author: Valentin Rothberg <valentinrothberg@xxxxxxxxx>
  Date:   Wed Oct 7 00:51:23 2015 +0200

      NFC: s3fwrn5: Remove superfluous cflags

      NFC_DEBUG is not defined in Kconfig and since DEBUG is not used
      anywhere in this directory, we can safely remove this line.

      Signed-off-by: Valentin Rothberg <valentinrothberg@xxxxxxxxx>
      Acked-by: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 38349665388fb079fb2bc8c46db9446dd976802a
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Tue Oct 6 11:00:17 2015 +0200

      perf tools: Fix handling read result using a signed variable

      The function can return negative value, assigning it to unsigned
      variable can cause memory corruption.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Cc: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: kernel-janitors@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444122017-16856-1-git-send-email-a.hajda@xxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1178bfd41f3ab6914eb6884875b776bc3032c9b5
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 6 14:25:12 2015 +0200

      perf tools: Use hpp_dimension__add_output to register hpp columns

      The perf_hpp__init currently does not respect sorting dimensions and the
      setup_sorting function could endup queueing same format twice. That
      screwed up the perf_hpp__list and got stuck in loop within
      perf_hpp__setup_output_field function.

        $ perf report -F +overhead

        0x00000000004c1355 in perf_hpp__is_sort_entry 
(format=format@entry=0x880440 <perf_hpp.format>) at util/sort.c:1506
        1506    {

           #0  0x00000000004c1355 in perf_hpp__is_sort_entry 
(format=format@entry=0x880440 <perf_hpp.format>) at util/sort.c:1506
           #1  0x00000000004c139d in perf_hpp__same_sort_entry 
(a=a@entry=0x880440 <perf_hpp.format>, b=b@entry=0x2bb2fe0) at util/sort.c:1380
           #2  0x00000000004f8d3c in perf_hpp__setup_output_field () at 
ui/hist.c:554
           #3  0x00000000004c1d1e in setup_sorting () at util/sort.c:1984
           #4  0x000000000042efbf in cmd_report (argc=0, argv=0x7ffea5a0e790, 
prefix=<optimized out>) at builtin-report.c:874
           #5  0x0000000000476f13 in run_builtin (p=p@entry=0x875628 
<commands+168>, argc=argc@entry=3, argv=argv@entry=0x7ffea5a0e790) at perf.c:385
           #6  0x000000000047710b in handle_internal_command (argc=3, 
argv=0x7ffea5a0e790) at perf.c:445
           #7  0x0000000000477176 in run_argv 
(argcp=argcp@entry=0x7ffea5a0e5fc, argv=argv@entry=0x7ffea5a0e5f0) at perf.c:489
           #8  0x00000000004773e7 in main (argc=3, argv=0x7ffea5a0e790) at 
perf.c:606

      Using hpp_dimension__add_output function to register the output column.
      It will also mark the dimension as taken and omit above stuck.

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444134312-29136-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit beeaaeb3684d97e89548c1b6b6275329214014df
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 6 14:25:11 2015 +0200

      perf tools: Introduce hpp_dimension__add_output function

      This function will allow to register output column from ui code and
      respect taken sort/output dimensions.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444134312-29136-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0974d2c9719a4c74fea0f6886b9922b100b903a6
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Oct 6 14:25:10 2015 +0200

      perf tools: Get rid of superfluos call to reset_dimensions

      There's no need to call reset_dimensions within __setup_output_field
      function. It's already called in its caller setup_sorting right before
      perf_hpp__init, which will be changed in following patch to respect
      taken dimension.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444134312-29136-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 990486c8af044f89bddfbde1d1cf9fde449bedbf
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Tue Oct 6 12:37:41 2015 -0400

      strscpy: zero any trailing garbage bytes in the destination

      It's possible that the destination can be shadowed in userspace
      (as, for example, the perf buffers are now).  So we should take
      care not to leak data that could be inspected by userspace.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit c753bf34c94e5ac901e625e52f47320eeec4de2d
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Tue Oct 6 14:20:45 2015 -0400

      word-at-a-time.h: support zero_bytemask() on alpha and tile

      Both alpha and tile needed implementations of zero_bytemask.

      The alpha version is untested.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 19c22f3a29fa8669c477f20a65f6c7c27108972a
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Tue Oct 6 13:35:10 2015 -0400

      word-at-a-time.h: fix some Kbuild files

      arch/tile added word-at-a-time.h after the patch that added generic-y
      entries; the generic-y entry is now stale.

      arch/h8300 is newer than the generic-y patch for word-at-a-time.h,
      and needs a generic-y entry.

      arch/powerpc seems to have gotten a generic-y entry by mistake in
      the first patch; this change removes it.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit a36a99618b1adb2d6ca0b7e08e3a656a04e477fe
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Aug 30 20:01:48 2015 -0700

      locktorture: Fix module unwind when bad torture_type specified

      The locktorture module has a list of torture types, and specifying
      a type not on this list is supposed to cleanly fail the module load.
      Unfortunately, the "fail" happens without the "cleanly".  This commit
      therefore adds the needed clean-up after an incorrect torture_type.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit a8c06024d0b557b465ad40b87ef0b51a428f99fd
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 25 17:12:09 2015 -0700

      torture: Forgive non-plural arguments

      This commit allows --bootarg instead of --bootargs, --config instead of
      --configs, and --qemu-arg instead of --qemu-args.  For those cases where
      a native English speaker might auto-correct the argument to be incorrect.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 4f441a258f7badf752b3d9b04b675869ca4e751c
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 13:13:51 2015 -0700

      rcutorture: Fix unused-function warning for torturing_tasks()

      The torturing_tasks() function is used only in kernels built with
      CONFIG_PROVE_RCU=y, so the second definition can result in unused-function
      compiler warnings.  This commit adds __maybe_unused to suppress these
      warnings.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 889d487a26de4bcd1a0a668754bcbce893969edf
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 11:37:58 2015 -0700

      rcutorture: Fix module unwind when bad torture_type specified

      The rcutorture module has a list of torture types, and specifying a
      type not on this list is supposed to cleanly fail the module load.
      Unfortunately, the "fail" happens without the "cleanly".  This commit
      therefore adds the needed clean-up after an incorrect torture_type.

      Reported-by: David Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Acked-by: David Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 4bace7344d6dbd7a1b0b801abf24ea9878064317
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Sep 11 17:59:18 2015 +0200

      rcu_sync: Cleanup the CONFIG_PROVE_RCU checks

      1. Rename __rcu_sync_is_idle() to rcu_sync_lockdep_assert() and
         change it to use rcu_lockdep_assert().

      2. Change rcu_sync_is_idle() to return rsp->gp_state == GP_IDLE
         unconditonally, this way we can remove the same check from
         rcu_sync_lockdep_assert() and clearly isolate the debugging
         code.

      Note: rcu_sync_enter()->wait_event(gp_state == GP_PASSED) needs
      another CONFIG_PROVE_RCU check, the same as is done in ->sync(); but
      this needs some simple preparations in the core RCU code to avoid the
      code duplication.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit cc5f730b41506d37a5c2826b2e801d0a59853d11
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:43:03 2015 +0200

      locking/percpu-rwsem: Clean up the lockdep annotations in 
percpu_down_read()

      Based on Peter Zijlstra's earlier patch.

      Change percpu_down_read() to use __down_read(), this way we can
      do rwsem_acquire_read() unconditionally at the start to make this
      code more symmetric and clean.

      Originally-From: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit f324a76324c97e81a6ba66a8efac20cdbffd759e
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:43:00 2015 +0200

      locking/percpu-rwsem: Fix the comments outdated by rcu_sync

      Update the comments broken by the previous change.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 001dac627ff37433d5528ffb0d897cd19c2b1e43
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:57 2015 +0200

      locking/percpu-rwsem: Make use of the rcu_sync infrastructure

      Currently down_write/up_write calls synchronize_sched_expedited()
      twice, which is evil.  Change this code to rely on rcu-sync primitives.
      This avoids the _expedited "big hammer", and this can be faster in
      the contended case or even in the case when a single thread does
      down_write/up_write in a loop.

      Of course, a single down_write() will take more time, but otoh it
      will be much more friendly to the whole system.

      To simplify the review this patch doesn't update the comments, fixed
      by the next change.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 95b19f684c61ffc9b039e02c5d1113c2d8cd7105
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:55 2015 +0200

      locking/percpu-rwsem: Make percpu_free_rwsem() after kzalloc() safe

      This is the temporary ugly hack which will be reverted later. We only
      need it to ensure that the next patch will not break "change sb_writers
      to use percpu_rw_semaphore" patches routed via the VFS tree.

      The alloc_super()->destroy_super() error path assumes that it is safe
      to call percpu_free_rwsem() after kzalloc() without percpu_init_rwsem(),
      so let's not disappoint it.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 07899a6e5f56136028c44a57ad0451e797365ac3
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:52 2015 +0200

      rcu_sync: Introduce rcu_sync_dtor()

      This commit allows rcu_sync structures to be safely deallocated,
      The trick is to add a new ->wait field to the gp_ops array.
      This field is a pointer to the rcu_barrier() function corresponding
      to the flavor of RCU in question.  This allows a new rcu_sync_dtor()
      to wait for any outstanding callbacks before freeing the rcu_sync
      structure.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit b8cab5dab15ff5c2acc3faefdde28919b0341c11
  Author: Haggai Eran <haggaie@xxxxxxxxxxxx>
  Date:   Tue Oct 6 17:56:00 2015 +0300

      IB/cma: Accept connection without a valid netdev on RoCE

      The netdev checks recently added to RDMA CM expect a valid netdev to be
      found for both InfiniBand and RoCE, but the code that find a netdev is
      only implemented for InfiniBand.

      Currently RoCE doesn't provide an API to find the netdev matching a
      given set of parameters, so this patch just disables the netdev 
enforcement
      for each incoming connections when the link layer is RoCE.

      Fixes: 4c21b5bcef73 ("IB/cma: Add net_dev and private data checks to RDMA 
CM")
      Reported-by: Kamal Heib <kamalh@xxxxxxxxxxxx>
      Signed-off-by: Haggai Eran <haggaie@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3a518b76af7bb411efe6dd090fbf098e29accb2e
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:50 2015 +0200

      rcu_sync: Add CONFIG_PROVE_RCU checks

      This commit validates that the caller of rcu_sync_is_idle() holds the
      corresponding type of RCU read-side lock, but only in kernels built
      with CONFIG_PROVE_RCU=y.  This validation is carried out via a new
      rcu_sync_ops->held() method that is checked within rcu_sync_is_idle().

      Note that although this does add code to the fast path, it only does so
      in kernels built with CONFIG_PROVE_RCU=y.

      Suggested-by: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 82e8c565be8a72957570d7da8dd9b441db7bb648
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:47 2015 +0200

      rcu_sync: Simplify rcu_sync using new rcu_sync_ops structure

      This commit adds the new struct rcu_sync_ops which holds sync/call
      methods, and turns the function pointers in rcu_sync_struct into an array
      of struct rcu_sync_ops.  This simplifies the "init" helpers by collapsing
      a switch statement and explicit multiple definitions into a simple
      assignment and a helper macro, respectively.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit cc44ca848f5e517aeca9f5eabbe13609a3f71450
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Fri Aug 21 19:42:44 2015 +0200

      rcu: Create rcu_sync infrastructure

      The rcu_sync infrastructure can be thought of as infrastructure to be
      used to implement reader-writer primitives having extremely lightweight
      readers during times when there are no writers.  The first use is in
      the percpu_rwsem used by the VFS subsystem.

      This infrastructure is functionally equivalent to

              struct rcu_sync_struct {
                      atomic_t counter;
              };

        /* Check possibility of fast-path read-side operations. */
              static inline bool rcu_sync_is_idle(struct rcu_sync_struct *rss)
              {
                      return atomic_read(&rss->counter) == 0;
              }

        /* Tell readers to use slowpaths. */
              static inline void rcu_sync_enter(struct rcu_sync_struct *rss)
              {
                      atomic_inc(&rss->counter);
                      synchronize_sched();
              }

        /* Allow readers to once again use fastpaths. */
              static inline void rcu_sync_exit(struct rcu_sync_struct *rss)
              {
                      synchronize_sched();
                      atomic_dec(&rss->counter);
              }

      The main difference is that it records the state and only calls
      synchronize_sched() if required.  At least some of the calls to
      synchronize_sched() will be optimized away when rcu_sync_enter() and
      rcu_sync_exit() are invoked repeatedly in quick succession.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 3836f5337f74fedc15981688c3c31dbf4293ae84
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Aug 30 03:29:58 2015 -0700

      torture: Consolidate cond_resched_rcu_qs() into stutter_wait()

      This commit moves cond_resched_rcu_qs() into stutter_wait(), saving
      a line and also avoiding RCU CPU stall warnings from all torture
      loops containing a stutter_wait().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 617783dd99704331e22636388c932450e02ee636
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 29 14:46:29 2015 -0700

      locktorture: Add torture tests for percpu_rwsem

      This commit adds percpu_rwsem tests based on the earlier rwsem tests.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 302707fd7cd341a23dbc448a335d432ad0069c20
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 20:21:59 2015 -0700

      locking/percpu-rwsem: Export symbols for locktorture

      This commit exports percpu_down_read(), percpu_down_write(),
      __percpu_init_rwsem(), percpu_up_read(), and percpu_up_write() to allow
      locktorture to test them when built as a module.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 095777c417db142970adeb776fa0cb10810b8122
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Jul 22 14:07:27 2015 -0700

      locktorture: Support rtmutex torturing

      Real time mutexes is one of the few general primitives
      that we do not have in locktorture. Address this -- a few
      considerations:

      o To spice things up, enable competing thread(s) to become
      rt, such that we can stress different prio boosting paths
      in the rtmutex code. Introduce a ->task_boost callback,
      only used by rtmutex-torturer. Tasks will boost/deboost
      around every 50k (arbitrarily) lock/unlock operations.

      o Hold times are similar to what we have for other locks:
      only occasionally having longer hold times (per ~200k ops).
      So we roughly do two full rt boost+deboosting ops with
      short hold times.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit f022fa88ce6abc83c6e678a890df5c1e4b0eaf89
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Tue Oct 6 19:52:37 2015 +0300

      xprtrdma: Don't require LOCAL_DMA_LKEY support for fastreg

      There is no need to require LOCAL_DMA_LKEY support as the
      PD allocation makes sure that there is a local_dma_lkey. Also
      correctly set a return value in error path.

      This caused a NULL pointer dereference in mlx5 which removed
      the support for LOCAL_DMA_LKEY.

      Fixes: bb6c96d72879 ("xprtrdma: Replace global lkey with lkey local to 
PD")
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Reviewed-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Acked-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit ad2ad5d31f90fc6fb269e9be244224cecfc8b400
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 08:18:32 2015 -0700

      documentation: Add lockless_dereference()

      The recently added lockless_dereference() macro is not present in the
      Documentation/ directory, so this commit fixes that.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit b672adf8cfb822781ab904343e5de0297ee117ed
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 11:46:00 2015 -0700

      documentation: Catch up list of torture_type options

      This commit rids the documentation of long-obsolete torture_type options
      such as rcu_sync and adds new ones such as tasks.  Also add verbiage
      noting the fact that rcutorture now concurrently tests the asynchrounous,
      synchronous, expedited synchronous, and polling grace-period primitives.

      Reported-by: David Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Acked-by: David Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 2c4ac34bc2d97f056ed3c43fa03c0737fae46fb6
  Author: Jason A. Donenfeld <Jason@xxxxxxxxx>
  Date:   Tue Aug 11 14:26:33 2015 +0200

      documentation: Correct doc to use rcu_dereference_protected

      As there is lots of misinformation and outdated information on the
      Internet about nearly all topics related to the kernel, I thought it
      would be best if I based my RCU code on the guidelines of the examples
      in the Documentation/ tree of the latest kernel. One thing that stuck
      out when reading the whatisRCU.txt document was, "interesting how we
      don't need any function to dereference rcu protected pointers when doing
      updates if a lock is held. I wonder how static analyzers will work with
      that." Then, a few weeks later, upon discovering sparse's __rcu support,
      I ran it over my code, and lo and behold, things weren't done right.
      Examining other RCU usages in the kernel reveal consistent usage of
      rcu_dereference_protected, passing in lockdep_is_held as the
      conditional. So, this patch adds that idiom to the documentation, so
      that others ahead of me won't endure the same exercise.

      Signed-off-by: Jason A. Donenfeld <Jason@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit da873def8da5883a6c04d11f73dcd836c216cf4f
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 4 11:54:04 2015 -0700

      documentation: Call out slow consoles as cause of stall warnings

      The Linux kernel outputs copious text during boot, and a slow serial
      console can result in stall warnings, particularly when messages are
      printed with interrupts disabled.  This commit adds this to the list
      of causes of RCU CPU stall warning messages.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 27566139b6e2f6cfe273e8bb0e538d7616c2ea00
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 1 10:45:26 2015 -0700

      documentation: No acquire/release for RCU readers

      Documentation/memory-barriers.txt calls out RCU as one of the sets
      of primitives associated with ACQUIRE and RELEASE.  There really
      is an association in that rcu_assign_pointer() includes a RELEASE
      operation, but a quick read can convince people that rcu_read_lock() and
      rcu_read_unlock() have ACQUIRE and RELEASE semantics, which they do not.

      This commit therefore removes RCU from this list in order to avoid
      this confusion.

      Reported-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 7f5f873c6a0772970d5fee1f364231207051ecd8
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 08:45:22 2015 -0700

      rculist: Use WRITE_ONCE() when deleting from reader-visible list

      The various RCU list-deletion macros (list_del_rcu(),
      hlist_del_init_rcu(), hlist_del_rcu(), hlist_bl_del_init_rcu(),
      hlist_bl_del_rcu(), hlist_nulls_del_init_rcu(), and hlist_nulls_del_rcu())
      do plain stores into the ->next pointer of the preceding list elemment.
      Unfortunately, the compiler is within its rights to (for example) use
      byte-at-a-time writes to update the pointer, which would fatally confuse
      concurrent readers.  This patch therefore adds the needed WRITE_ONCE()
      macros.

      KernelThreadSanitizer (KTSAN) reported the __hlist_del() issue, which
      is a problem when __hlist_del() is invoked by hlist_del_rcu().

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit e62e3f620ba8d437f4998441fc11cf3dc9d466d1
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 12:23:01 2015 -0700

      rcu: Remove deprecated rcu_lockdep_assert()

      The old rcu_lockdep_assert() was retained to ease handling of incoming
      patches, but any use will result in deprecated warnings.  However, its
      replacement, RCU_LOCKDEP_WARN(), is now upstream.  It is therefore
      time to remove rcu_lockdep_assert(), which this commit does.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 8db70b132dd57696cfc7560203a72e90c51bfdda
  Author: Patrick Marlier <patrick.marlier@xxxxxxxxx>
  Date:   Fri Sep 11 15:50:35 2015 -0700

      rculist: Make list_entry_rcu() use lockless_dereference()

      The current list_entry_rcu() implementation copies the pointer to a stack
      variable, then invokes rcu_dereference_raw() on it.  This results in an
      additional store-load pair.  Now, most compilers will emit normal store
      and load instructions, which might seem to be of negligible overhead,
      but this results in a load-hit-store situation that can cause surprisingly
      long pipeline stalls, even on modern microprocessors.  The problem is
      that it takes time for the store to get the store buffer updated, which
      can delay the subsequent load, which immediately follows.

      This commit therefore switches to the lockless_dereference() primitive,
      which does not expect the __rcu annotations (that are anyway not present
      in the list_head structure) and which, like rcu_dereference_raw(),
      does not check for an enclosing RCU read-side critical section.
      Most importantly, it does not copy the pointer, thus avoiding the
      load-hit-store overhead.

      Signed-off-by: Patrick Marlier <patrick.marlier@xxxxxxxxx>
      [ paulmck: Switched to lockless_dereference() to suppress sparse 
warnings. ]
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit c3ac7cf1847a4e68c909984f60d36adef2088e35
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 16:29:02 2015 -0700

      rcu: Add rcu_pointer_handoff()

      This commit adds an rcu_pointer_handoff() that is intended to mark
      situations where a structure's protection transitions from RCU to some
      other mechanism (locking, reference counting, whatever).  These markings
      should allow external tools to more easily spot bugs involving leaking
      pointers out of RCU read-side critical sections.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit c34d2f418485a5d710bc002e490148b8ea53f456
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 11:21:28 2015 -0700

      rcu: Correct comment for values of ->gp_state field

      This commit corrects the comment for the values of the ->gp_state field,
      which previously incorrectly said that these were for the ->gp_flags
      field.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 77f81fe08ebd99d7e0eefde42ddac06a675bc4ad
  Author: Petr Mladek <pmladek@xxxxxxxx>
  Date:   Wed Sep 9 12:09:49 2015 -0700

      rcu: Finish folding ->fqs_state into ->gp_state

      Commit commit 4cdfc175c25c89ee ("rcu: Move quiescent-state forcing
      into kthread") started the process of folding the old ->fqs_state into
      ->gp_state, but did not complete it.  This situation does not cause
      any malfunction, but can result in extremely confusing trace output.
      This commit completes this task of eliminating ->fqs_state in favor
      of ->gp_state.

      The old ->fqs_state was also used to decide when to collect dyntick-idle
      snapshots.  For this purpose, we add a boolean variable into the kthread,
      which is set on the first call to rcu_gp_fqs() for a given grace period
      and clear otherwise.

      Signed-off-by: Petr Mladek <pmladek@xxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 49f5903b473c5f63f3b57856d1bd4593db0a2eef
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 00:42:57 2015 -0700

      rcu: Move preemption disabling out of __srcu_read_lock()

      Currently, __srcu_read_lock() cannot be invoked from restricted
      environments because it contains calls to preempt_disable() and
      preempt_enable(), both of which can invoke lockdep, which is a bad
      idea in some restricted execution modes.  This commit therefore moves
      the preempt_disable() and preempt_enable() from __srcu_read_lock()
      to srcu_read_lock().  It also inserts the preempt_disable() and
      preempt_enable() around the call to __srcu_read_lock() in do_exit().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 62c6c61adbc623cdacf74b8f29c278e539060c48
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Mon Oct 5 14:32:51 2015 -0700

      arm64: replace read_lock to rcu lock in call_break_hook

      BUG: sleeping function called from invalid context at 
kernel/locking/rtmutex.c:917
      in_atomic(): 0, irqs_disabled(): 128, pid: 342, name: perf
      1 lock held by perf/342:
       #0:  (break_hook_lock){+.+...}, at: [<ffffffc0000851ac>] 
call_break_hook+0x34/0xd0
      irq event stamp: 62224
      hardirqs last  enabled at (62223): [<ffffffc00010b7bc>] 
__call_rcu.constprop.59+0x104/0x270
      hardirqs last disabled at (62224): [<ffffffc0000fbe20>] 
vprintk_emit+0x68/0x640
      softirqs last  enabled at (0): [<ffffffc000097928>] 
copy_process.part.8+0x428/0x17f8
      softirqs last disabled at (0): [<          (null)>]           (null)
      CPU: 0 PID: 342 Comm: perf Not tainted 4.1.6-rt5 #4
      Hardware name: linux,dummy-virt (DT)
      Call trace:
      [<ffffffc000089968>] dump_backtrace+0x0/0x128
      [<ffffffc000089ab0>] show_stack+0x20/0x30
      [<ffffffc0007030d0>] dump_stack+0x7c/0xa0
      [<ffffffc0000c878c>] ___might_sleep+0x174/0x260
      [<ffffffc000708ac8>] __rt_spin_lock+0x28/0x40
      [<ffffffc000708db0>] rt_read_lock+0x60/0x80
      [<ffffffc0000851a8>] call_break_hook+0x30/0xd0
      [<ffffffc000085a70>] brk_handler+0x30/0x98
      [<ffffffc000082248>] do_debug_exception+0x50/0xb8
      Exception stack(0xffffffc00514fe30 to 0xffffffc00514ff50)
      fe20:                                     00000000 00000000 c1594680 
0000007f
      fe40: ffffffff ffffffff 92063940 0000007f 0550dcd8 ffffffc0 00000000 
00000000
      fe60: 0514fe70 ffffffc0 000be1f8 ffffffc0 0514feb0 ffffffc0 0008948c 
ffffffc0
      fe80: 00000004 00000000 0514fed0 ffffffc0 ffffffff ffffffff 9282a948 
0000007f
      fea0: 00000000 00000000 9282b708 0000007f c1592820 0000007f 00083914 
ffffffc0
      fec0: 00000000 00000000 00000010 00000000 00000064 00000000 00000001 
00000000
      fee0: 005101e0 00000000 c1594680 0000007f c1594740 0000007f ffffffd8 
ffffff80
      ff00: 00000000 00000000 00000000 00000000 c1594770 0000007f c1594770 
0000007f
      ff20: 00665e10 00000000 7f7f7f7f 7f7f7f7f 01010101 01010101 00000000 
00000000
      ff40: 928e4cc0 0000007f 91ff11e8 0000007f

      call_break_hook is called in atomic context (hard irq disabled), so 
replace
      the sleepable lock to rcu lock, replace relevant list operations to rcu
      version and call synchronize_rcu() in unregister_break_hook().

      And, replace write lock to spinlock in {un}register_break_hook.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 7f21aeef722d598ba350d1834f6e4134c7b5e8de
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Aug 15 14:49:50 2015 -0700

      rcu: Add online/offline info to stall warning message

      This commit makes the RCU CPU stall warning message print online/offline
      indications immediately after a hyphen following the CPU number.  A "O"
      indicates that the global CPU-hotplug system believes that the CPU is
      online, a "o" that RCU perceived the CPU to be online at the beginning
      of the current expedited grace period, and an "N" that RCU currently
      believes that it will perceive the CPU as being online at the beginning
      of the next expedited grace period, with "." otherwise for all three
      indications.  So for CPU 10, you would normally see "10-OoN:" indicating
      that everything believes that the CPU is online.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit ee968ac61d5a3440b931375d81113e0eedfcb249
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Jul 31 08:28:35 2015 -0700

      rcu: Eliminate panic when silly boot-time fanout specified

      This commit loosens rcutree.rcu_fanout_leaf range checks
      and replaces a panic() with a fallback to compile-time values.
      This fallback is accompanied by a WARN_ON(), and both occur when the
      rcutree.rcu_fanout_leaf value is too small to accommodate the number of
      CPUs.  For example, given the current four-level limit for the rcu_node
      tree, a system with more than 16 CPUs built with CONFIG_FANOUT=2 must
      have rcutree.rcu_fanout_leaf larger than 2.

      Reported-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit bb73c52bad3666997ed2ec83c0c80c3f8ef55008
  Author: Boqun Feng <boqun.feng@xxxxxxxxx>
  Date:   Thu Jul 30 16:55:38 2015 -0700

      rcu: Don't disable preemption for Tiny and Tree RCU readers

      Because preempt_disable() maps to barrier() for non-debug builds,
      it forces the compiler to spill and reload registers.  Because Tree
      RCU and Tiny RCU now only appear in CONFIG_PREEMPT=n builds, these
      barrier() instances generate needless extra code for each instance of
      rcu_read_lock() and rcu_read_unlock().  This extra code slows down Tree
      RCU and bloats Tiny RCU.

      This commit therefore removes the preempt_disable() and preempt_enable()
      from the non-preemptible implementations of __rcu_read_lock() and
      __rcu_read_unlock(), respectively.  However, for debug purposes,
      preempt_disable() and preempt_enable() are still invoked if
      CONFIG_PREEMPT_COUNT=y, because this allows detection of sleeping inside
      atomic sections in non-preemptible kernels.

      However, Tiny and Tree RCU operates by coalescing all RCU read-side
      critical sections on a given CPU that lie between successive quiescent
      states.  It is therefore necessary to compensate for removing barriers
      from __rcu_read_lock() and __rcu_read_unlock() by adding them to a
      couple of the RCU functions invoked during quiescent states, namely to
      rcu_all_qs() and rcu_note_context_switch().  However, note that the latter
      is more paranoia than necessity, at least until link-time optimizations
      become more aggressive.

      This is based on an earlier patch by Paul E. McKenney, fixing
      a bug encountered in kernels built with CONFIG_PREEMPT=n and
      CONFIG_PREEMPT_COUNT=y.

      Signed-off-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit db3e8db45e1cbf8cc22f1083a559d78eb91ccd63
  Author: Boqun Feng <boqun.feng@xxxxxxxxx>
  Date:   Wed Jul 29 13:29:39 2015 +0800

      rcu: Use call_rcu_func_t to replace explicit type equivalents

      We have had the call_rcu_func_t typedef for a quite awhile, but we still
      use explicit function pointer types in some places.  These types can
      confuse cscope and can be hard to read.  This patch therefore replaces
      these types with the call_rcu_func_t typedef.

      Signed-off-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit b6a4ae766e3133a4db73fabc81e522d1601cb623
  Author: Boqun Feng <boqun.feng@xxxxxxxxx>
  Date:   Wed Jul 29 13:29:38 2015 +0800

      rcu: Use rcu_callback_t in call_rcu*() and friends

      As we now have rcu_callback_t typedefs as the type of rcu callbacks, we
      should use it in call_rcu*() and friends as the type of parameters. This
      could save us a few lines of code and make it clear which function
      requires an rcu callbacks rather than other callbacks as its argument.

      Besides, this can also help cscope to generate a better database for
      code reading.

      Signed-off-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 84778472e1b6a27a8931712c40e8cf31143c8f6c
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 2 01:28:44 2015 -0700

      sched: Export sched_setscheduler_nocheck

      The new locktorture rtmutex_lock tests exercise priority boosting, which
      means that they need to set some tasks to real-time priority.  To do this,
      they use sched_setscheduler_nocheck().  However, this is not exported to
      modules, which results in the following error when building locktorture
      as a module:

      ERROR: "sched_setscheduler_nocheck" [kernel/locking/locktorture.ko] 
undefined!

      This commit therefore adds an EXPORT_SYMBOL_GPL() to allow this function
      to be invoked from locktorture when built as a module.

      Reported-by: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Signed-off-by: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>

  commit 3805eade3b7c4a5ad593525703c2c82a84fd9b13
  Author: Jeff Squyres <jsquyres@xxxxxxxxx>
  Date:   Wed Sep 30 13:34:00 2015 -0700

      usnic: add missing clauses to BSD license

      The usnic_verbs kernel module was clearly marked with the following in
      its code:

        MODULE_LICENSE("Dual BSD/GPL");

      However, we accidentally left a few clauses of the BSD text out of the
      license header in all the source files.  This commit fixes that: all
      the files are properly dual BSD/GPL-licensed.  Contributors that might
      have been confused by this have been contacted to get their permission
      and are Cc:ed here.

      Cc: Benoit Taine <benoit.taine@xxxxxxx>
      Cc: Ira Weiny <ira.weiny@xxxxxxxxx>
      Cc: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Masanari Iida <standby24x7@xxxxxxxxx>
      Cc: Matan Barak <matanb@xxxxxxxxxxxx>
      Cc: Michael Wang <yun.wang@xxxxxxxxxxxxxxxx>
      Cc: Roland Dreier <roland@xxxxxxxxxxxxxxx>
      Cc: Wei Yongjun <yongjun_wei@xxxxxxxxxxxxxxxxx>
      Cc: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Cc: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Cc: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: Jeff Squyres <jsquyres@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 4ca3bc86bea23f38596ce7508f75e072839bde44
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Tue Oct 6 18:24:37 2015 +0100

      arm64: Don't relocate non-existent initrd

      When booting a kernel without an initrd, the kernel reports that it
      moves -1 bytes worth, having gone through the motions with initrd_start
      equal to initrd_end:

          Moving initrd from [4080000000-407fffffff] to [9fff49000-9fff48fff]

      Prevent this by bailing out early when the initrd size is zero (i.e. we
      have no initrd), avoiding the confusing message and other associated
      work.

      Fixes: 1570f0d7ab425c1e ("arm64: support initrd outside kernel linear 
map")
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 9a65e6866f039ff029acffc05195d54bc6ca6aeb
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Oct 6 10:52:31 2015 -0400

      drm/amdgpu: flag iceland as experimental

      These have not been tested very extensively and generally
      seem to be problematic.  Mark them as experimental for now.

      bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=92270

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 712df65ccb63da08a484bf57c40b250dfd4103a7
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Thu Sep 24 21:10:21 2015 +0900

      perf/x86/intel/uncore: Fix multi-segment problem of 
perf_event_intel_uncore

      In multi-segment system, uncore devices may belong to buses whose segment
      number is other than 0:

        ....
        0000:ff:10.5 System peripheral: Intel Corporation Xeon E5 v3/Core i7 
Scratchpad & Semaphore Registers (rev 03)
        ...
        0001:7f:10.5 System peripheral: Intel Corporation Xeon E5 v3/Core i7 
Scratchpad & Semaphore Registers (rev 03)
        ...
        0001:bf:10.5 System peripheral: Intel Corporation Xeon E5 v3/Core i7 
Scratchpad & Semaphore Registers (rev 03)
        ...
        0001:ff:10.5 System peripheral: Intel Corporation Xeon E5 v3/Core i7 
Scratchpad & Semaphore Registers (rev 03
        ...

      In that case, relation of bus number and physical id may be broken
      because "uncore_pcibus_to_physid" doesn't take account of PCI segment.
      For example, bus 0000:ff and 0001:ff uses the same entry of
      "uncore_pcibus_to_physid" array.

      This patch fixes this problem by introducing the segment-aware 
pci2phy_map instead.

      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: acme@xxxxxxxxxx
      Cc: hpa@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443096621-4119-1-git-send-email-izumi.taku@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7ce1346a6842550a3c4c453cdf1c7b81fb60b07e
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Mon Sep 28 08:30:04 2015 -0400

      perf/x86: Add Intel cstate PMUs support

      This patch adds new PMUs to support cstate related free running
      (read-only) counters. These counters may be used simultaneously by other
      tools, such as turbostat. However, it still make sense to implement them
      in perf. Because we can conveniently collect them together with other
      events, and allow to use them from tools without special MSR access
      code.

      These counters include CORE_C*_RESIDENCY and PKG_C*_RESIDENCY.
      According to counters' scope and category, two PMUs are registered with
      the perf_event core subsystem.

       - 'cstate_core': The counter is available for each physical core. The
                        counters include CORE_C*_RESIDENCY.

       - 'cstate_pkg':  The counter is available for each physical package. The
                        counters include PKG_C*_RESIDENCY.

      The events are exposed in sysfs for use by perf stat and other tools.
      The files are:

        /sys/devices/cstate_core/events/c*-residency
        /sys/devices/cstate_pkg/events/c*-residency

      These events only support system-wide mode counting.
      The /sys/devices/cstate_*/cpumask file can be used by tools to figure
      out which CPUs to monitor by default.

      The PMU type (attr->type) is dynamically allocated and is available from
      /sys/devices/core_misc/type and /sys/device/cstate_*/type.

      Sampling is not supported.

      Here is an example.

       - To caculate the fraction of time when the core is running in C6 state
         CORE_C6_time% = CORE_C6_RESIDENCY / TSC

       # perf stat -x, -e"cstate_core/c6-residency/,msr/tsc/" -C0 -- taskset -c 
0 sleep 5

         11838820015,,cstate_core/c6-residency/,5175919658,100.00
         11877130740,,msr/tsc/,5175922010,100.00

       For sleep, 99.7% of time we ran in C6 state.

       # perf stat -x, -e"cstate_core/c6-residency/,msr/tsc/" -C0 -- taskset -c 
0 busyloop

         1253316,,cstate_core/c6-residency/,4360969154,100.00
         10012635248,,msr/tsc/,4360972366,100.00

       For busyloop, 0.01% of time we ran in C6 state.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: acme@xxxxxxxxxx
      Cc: eranian@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443443404-8581-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 00eb4bab69db349c3bdc7e0b0f7e9070dafea58c
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:15 2015 -0700

      locking/rwsem: Use acquire/release semantics

      As of 654672d4ba1 (locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operations) and 6d79ef2d30e (locking, asm-generic:
      Add _{relaxed|acquire|release}() variants for 'atomic_long_t'), weakly
      ordered archs can benefit from more relaxed use of barriers when locking
      and unlocking, instead of regular full barrier semantics. While currently
      only arm64 supports such optimizations, updating corresponding locking
      primitives serves for other archs to immediately benefit as well, once the
      necessary machinery is implemented of course.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-6-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3552a07a9c4aea32cc092fadf10a186c84ed8a61
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:14 2015 -0700

      locking/mcs: Use acquire/release semantics

      As of 654672d4ba1 (locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operations) and 6d79ef2d30e (locking, asm-generic:
      Add _{relaxed|acquire|release}() variants for 'atomic_long_t'), weakly
      ordered archs can benefit from more relaxed use of barriers when locking
      and unlocking, instead of regular full barrier semantics. While currently
      only arm64 supports such optimizations, updating corresponding locking
      primitives serves for other archs to immediately benefit as well, once the
      necessary machinery is implemented of course.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-5-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 700318d1d7b38bbfe86813d9c5c18364dd941526
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:13 2015 -0700

      locking/rtmutex: Use acquire/release semantics

      As of 654672d4ba1 (locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operations) and 6d79ef2d30e (locking, asm-generic:
      Add _{relaxed|acquire|release}() variants for 'atomic_long_t'), weakly
      ordered archs can benefit from more relaxed use of barriers when locking
      and unlocking, instead of regular full barrier semantics. While currently
      only arm64 supports such optimizations, updating corresponding locking
      primitives serves for other archs to immediately benefit as well, once the
      necessary machinery is implemented of course.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-4-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 81a43adae3b943193fb3afd20a36a7482332f964
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:12 2015 -0700

      locking/mutex: Use acquire/release semantics

      As of 654672d4ba1 (locking/atomics: Add _{acquire|release|relaxed}()
      variants of some atomic operations) and 6d79ef2d30e (locking, asm-generic:
      Add _{relaxed|acquire|release}() variants for 'atomic_long_t'), weakly
      ordered archs can benefit from more relaxed use of barriers when locking
      and unlocking, instead of regular full barrier semantics. While currently
      only arm64 supports such optimizations, updating corresponding locking
      primitives serves for other archs to immediately benefit as well, once the
      necessary machinery is implemented of course.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-3-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 63ab7bd0d450b726b88fa4b932f151b98cee2557
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Wed Sep 30 13:03:11 2015 -0700

      locking/asm-generic: Add _{relaxed|acquire|release}() variants for 
inc/dec atomics

      Similar to what we have for regular add/sub calls. For now, no actual arch
      implements them, so everyone falls back to the default atomics... iow,
      nothing changes. These will be used in future primitives.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Paul E.McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443643395-17016-2-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 77792b11409c9270d98e604b4314b85ce886ac7d
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 12:38:07 2015 -0400

      regmap: Allow installing custom reg_update_bits function

      This commit allows installing a custom reg_update_bits function for cases 
where
      the hardware provides a mechanism to set or clear register bits without a
      read/modify/write cycle. Such is the case with the Microchip ENCX24J600.

      If a custom reg_update_bits function is provided, it will only be used 
against
      volatile registers.

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 82fc167c392a1700f9adbde639730ee8c8122474
  Merge: e3e72ab 049e6dd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 6 17:10:28 2015 +0200

      Merge tag 'v4.3-rc4' into locking/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5a4fd0368517bc5b5399ef958f6d30cbff492918
  Author: xiaofeng.yan <yanxiaofeng@xxxxxxxxxx>
  Date:   Wed Sep 23 14:55:59 2015 +0800

      sched/core: Remove a parameter in the migrate_task_rq() function

      The parameter "int next_cpu" in the following function is unused:

        migrate_task_rq(struct task_struct *p, int next_cpu)

      Remove it.

      Signed-off-by: xiaofeng.yan <yanxiaofeng@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442991360-31945-1-git-send-email-yanxiaofeng@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ce03e4137bb22fc560ad7a07cf4138ae2cd59f65
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Mon Oct 5 21:26:05 2015 +0800

      sched/core: Drop unlikely behind BUG_ON()

      (1) For !CONFIG_BUG cases, the bug call is a no-op, so we couldn't care
          less and the change is ok.

      (2) PPC and MIPS, which HAVE_ARCH_BUG_ON, do not rely on branch 
predictions
          as it seems to be pointless [1] and thus callers should not be trying 
to
          push an optimization in the first place.

      (3) For CONFIG_BUG and !HAVE_ARCH_BUG_ON cases, BUG_ON() contains an
          unlikely compiler flag already.

      Hence, we can drop unlikely behind BUG_ON().

        [1] http://lkml.iu.edu/hypermail/linux/kernel/1101.3/02289.html

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/6fa7125979f98bbeac26e268271769b6ca935c8d.1444051018.git.geliangtang@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1de64443d755f83af8ba8b558fded0c61afaef47
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 17:44:13 2015 +0200

      sched/core: Fix task and run queue sched_info::run_delay inconsistencies

      Mike Meyer reported the following bug:

      > During evaluation of some performance data, it was discovered thread
      > and run queue run_delay accounting data was inconsistent with the other
      > accounting data that was collected.  Further investigation found under
      > certain circumstances execution time was leaking into the task and
      > run queue accounting of run_delay.
      >
      > Consider the following sequence:
      >
      >     a. thread is running.
      >     b. thread moves beween cgroups, changes scheduling class or 
priority.
      >     c. thread sleeps OR
      >     d. thread involuntarily gives up cpu.
      >
      > a. implies:
      >
      >     thread->sched_info.last_queued = 0
      >
      > a. and b. results in the following:
      >
      >     1. dequeue_task(rq, thread)
      >
      >            sched_info_dequeued(rq, thread)
      >                delta = 0
      >
      >                sched_info_reset_dequeued(thread)
      >                    thread->sched_info.last_queued = 0
      >
      >                thread->sched_info.run_delay += delta
      >
      >     2. enqueue_task(rq, thread)
      >
      >            sched_info_queued(rq, thread)
      >
      >                /* thread is still on cpu at this point. */
      >                thread->sched_info.last_queued = task_rq(thread)->clock;
      >
      > c. results in:
      >
      >     dequeue_task(rq, thread)
      >
      >         sched_info_dequeued(rq, thread)
      >
      >             /* delta is execution time not run_delay. */
      >             delta = task_rq(thread)->clock - 
thread->sched_info.last_queued
      >
      >         sched_info_reset_dequeued(thread)
      >             thread->sched_info.last_queued = 0
      >
      >         thread->sched_info.run_delay += delta
      >
      >     Since thread was running between enqueue_task(rq, thread) and
      >     dequeue_task(rq, thread), the delta above is really execution
      >     time and not run_delay.
      >
      > d. results in:
      >
      >     __sched_info_switch(thread, next_thread)
      >
      >         sched_info_depart(rq, thread)
      >
      >             sched_info_queued(rq, thread)
      >
      >                 /* last_queued not updated due to being non-zero */
      >                 return
      >
      >     Since thread was running between enqueue_task(rq, thread) and
      >     __sched_info_switch(thread, next_thread), the execution time
      >     between enqueue_task(rq, thread) and
      >     __sched_info_switch(thread, next_thread) now will become
      >     associated with run_delay due to when last_queued was last updated.
      >

      This alternative patch solves the problem by not calling
      sched_info_{de,}queued() in {de,en}queue_task(). Therefore the
      sched_info state is preserved and things work as expected.

      By inlining the {de,en}queue_task() functions the new condition
      becomes (mostly) a compile-time constant and we'll not emit any new
      branch instructions.

      It even shrinks the code (due to inlining {en,de}queue_task()):

      $ size defconfig-build/kernel/sched/core.o 
defconfig-build/kernel/sched/core.o.orig
         text    data     bss     dec     hex filename
        64019   23378    2344   89741   15e8d 
defconfig-build/kernel/sched/core.o
        64149   23378    2344   89871   15f0f 
defconfig-build/kernel/sched/core.o.orig

      Reported-by: Mike Meyer <Mike.Meyer@xxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/20150930154413.GO3604@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b52da86e0ad58f096710977fcda856fd84da9233
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 07:48:25 2015 +0530

      sched/numa: Fix task_tick_fair() from disabling numa_balancing

      If static branch 'sched_numa_balancing' is enabled, it should kickstart
      NUMA balancing through task_tick_numa(). However the following commit:

        2a595721a1fa ("sched/numa: Convert sched_numa_balancing to a 
static_branch")

      erroneously disables this.

      Fix this anomaly by enabling task_tick_numa() when the static branch
      'sched_numa_balancing' is enabled.

      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443752305-27413-1-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e2bf1c4b17aff25f07e0d2952d8c1c66643f33fe
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:18:46 2015 +0200

      sched/core: Add preempt_count invariant check

      Ingo requested I keep my debug check for the preempt_count invariant.

      Requested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 499d79559ffe4b9c0c3031752f6a40abd532fb75
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:52:36 2015 +0200

      sched/core: More notrace annotations

      preempt_schedule_common() is marked notrace, but it does not use
      _notrace() preempt_count functions and __schedule() is also not marked
      notrace, which means that its perfectly possible to end up in the
      tracer from preempt_schedule_common().

      Steve says:

        | Yep, there's some history to this. This was originally the issue that
        | caused function tracing to go into infinite recursion. But now we have
        | preempt_schedule_notrace(), which is used by the function tracer, and
        | that function must not be traced till preemption is disabled.
        |
        | Now if function tracing is running and we take an interrupt when
        | NEED_RESCHED is set, it calls
        |
        |   preempt_schedule_common() (not traced)
        |
        | But then that calls preempt_disable() (traced)
        |
        | function tracer calls preempt_disable_notrace() followed by
        | preempt_enable_notrace() which will see NEED_RESCHED set, and it will
        | call preempt_schedule_notrace(), which stops the recursion, but
        | still calls __schedule() here, and that means when we return, we call
        | the __schedule() from preempt_schedule_common().
        |
        | That said, I prefer this patch. Preemption is disabled before calling
        | __schedule(), and we get rid of a one round recursion with the
        | scheduler.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e61bf1e43b6f8e687ce93e5d0ce85bca7e481600
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:11:35 2015 +0200

      sched/core: Kill PREEMPT_ACTIVE

      Its unused, kill the definition.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d87b7a33794f52226131f93cbc9db03274d9fecf
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:11:18 2015 +0200

      sched/core, sched/x86: Kill thread_info::saved_preempt_count

      With the introduction of the context switch preempt_count invariant,
      and the demise of PREEMPT_ACTIVE, its pointless to save/restore the
      per-cpu preemption count, it must always be 2.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit da7142e2ed735e1c1bef5a757dc55de35c65fbd6
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:11:45 2015 +0200

      sched/core: Simplify preempt_count tests

      Since we stopped setting PREEMPT_ACTIVE, there is no need to mask it
      out of preempt_count() tests.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1dc0fffc48af94513e621f95dff730ed4f7317ec
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 17:57:39 2015 +0200

      sched/core: Robustify preemption leak checks

      When we warn about a preempt_count leak; reset the preempt_count to
      the known good value such that the problem does not ripple forward.

      This is most important on x86 which has a per cpu preempt_count that is
      not saved/restored (after this series). So if you schedule with an
      invalid (!2*PREEMPT_DISABLE_OFFSET) preempt_count the next task is
      messed up too.

      Enforcing this invariant limits the borkage to just the one task.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3d8f74dd4ca1da8a1a464bbafcf679e40c2fc10f
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:09:19 2015 +0200

      sched/core: Stop setting PREEMPT_ACTIVE

      Now that nothing tests for PREEMPT_ACTIVE anymore, stop setting it.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c73464b1c8434ad4cbfd5369c3e724f3e8ffe5a4
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:06:56 2015 +0200

      sched/core: Fix trace_sched_switch()

      __trace_sched_switch_state() is the last remaining PREEMPT_ACTIVE
      user, move trace_sched_switch() from prepare_task_switch() to
      __schedule() and propagate the @preempt argument.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fc13aebab7d8f0d19d557c721a0f25cdf7ae905c
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:05:34 2015 +0200

      sched/core: Add preempt argument to __schedule()

      There is only a single PREEMPT_ACTIVE use in the regular __schedule()
      path and that is to circumvent the task->state check. Since the code
      setting PREEMPT_ACTIVE is the immediate caller of __schedule() we can
      replace this with a function argument.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 609ca066386b2e64d4c0b0f55da327654962a0c9
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 17:52:18 2015 +0200

      sched/core: Create preempt_count invariant

      Assuming units of PREEMPT_DISABLE_OFFSET for preempt_count() numbers.

      Now that TASK_DEAD no longer results in preempt_count() == 3 during
      scheduling, we will always call context_switch() with preempt_count()
      == 2.

      However, we don't always end up with preempt_count() == 2 in
      finish_task_switch() because new tasks get created with
      preempt_count() == 1.

      Create FORK_PREEMPT_COUNT and set it to 2 and use that in the right
      places. Note that we cannot use INIT_PREEMPT_COUNT as that serves
      another purpose (boot).

      After this, preempt_count() is invariant across the context switch,
      with exception of PREEMPT_ACTIVE.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b99def8b961448f5b9a550dddeeb718e3975e7a6
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:02:03 2015 +0200

      sched/core: Rework TASK_DEAD preemption exception

      TASK_DEAD is special in that the final schedule call from do_exit()
      must be done with preemption disabled.

      This means we end up scheduling with a preempt_count() higher than
      usual (3 instead of the 'expected' 2).

      Since future patches will want to rely on an invariant
      preempt_count() value during schedule, fix this up.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 87dcbc0610cb580c8eaf289f52aca3620af825f0
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 17:45:40 2015 +0200

      sched/core: Simplify INIT_PREEMPT_COUNT

      As per the following commit:

        d86ee4809d03 ("sched: optimize cond_resched()")

      we need PREEMPT_ACTIVE to avoid cond_resched() from working before
      the scheduler is set up.

      However, keeping preemption disabled should do the same thing
      already, making the PREEMPT_ACTIVE part entirely redundant.

      The only complication is !PREEMPT_COUNT kernels, where
      PREEMPT_DISABLED ends up being 0. Instead we use an unconditional
      PREEMPT_OFFSET to set preempt_count() even on !PREEMPT_COUNT
      kernels.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fe19159225d8516f3f57a5fe8f735c01684f0ddd
  Merge: c6e1e7b 95913d9
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 6 17:05:36 2015 +0200

      Merge branch 'sched/urgent' into sched/core, to pick up fixes before 
applying new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 95913d97914f44db2b81271c2e2ebd4d2ac2df83
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 14:45:09 2015 +0200

      sched/core: Fix TASK_DEAD race in finish_task_switch()

      So the problem this patch is trying to address is as follows:

              CPU0                            CPU1

              context_switch(A, B)
                                              ttwu(A)
                                                LOCK A->pi_lock
                                                A->on_cpu == 0
              finish_task_switch(A)
                prev_state = A->state  <-.
                WMB                      |
                A->on_cpu = 0;           |
                UNLOCK rq0->lock         |
                                         |    context_switch(C, A)
                                         `--  A->state = TASK_DEAD
                prev_state == TASK_DEAD
                  put_task_struct(A)
                                              context_switch(A, C)
                                              finish_task_switch(A)
                                                A->state == TASK_DEAD
                                                  put_task_struct(A)

      The argument being that the WMB will allow the load of A->state on CPU0
      to cross over and observe CPU1's store of A->state, which will then
      result in a double-drop and use-after-free.

      Now the comment states (and this was true once upon a long time ago)
      that we need to observe A->state while holding rq->lock because that
      will order us against the wakeup; however the wakeup will not in fact
      acquire (that) rq->lock; it takes A->pi_lock these days.

      We can obviously fix this by upgrading the WMB to an MB, but that is
      expensive, so we'd rather avoid that.

      The alternative this patch takes is: smp_store_release(&A->on_cpu, 0),
      which avoids the MB on some archs, but not important ones like ARM.

      Reported-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.1+
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: manfred@xxxxxxxxxxxxxxxx
      Cc: will.deacon@xxxxxxx
      Fixes: e4a52bcb9a18 ("sched: Remove rq->lock from the first half of 
ttwu()")
      Link: 
http://lkml.kernel.org/r/20150929124509.GG3816@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e79d5c0870eedce94e5f5a2ffab30511e48fa144
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Oct 6 09:38:45 2015 -0400

      drm/amdgpu: check before checking pci bridge registers

      Make sure we are not the root device before attempting to
      read the pcie bridge registers to check the pcie gen speeed.

      Fixes a crash when the device is passed through to a VM.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit d836ace65ee98d7079bc3c5afdbcc0e27dca20a3
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Sat Oct 3 13:03:47 2015 -0700

      ARM: orion: Fix DSA platform device after mvmdio conversion

      DSA expects the host_dev pointer to be the device structure associated
      with the MDIO bus controller driver. First commit breaking that was
      c3a07134e6aa ("mv643xx_eth: convert to use the Marvell Orion MDIO
      driver"), and then, it got completely under the radar for a while.

      Reported-by: Frans van de Wiel <fvdw@xxxxxxx>
      Fixes: c3a07134e6aa ("mv643xx_eth: convert to use the Marvell Orion MDIO 
driver")
      CC: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>

  commit 50887bd139b83ce4489ed865a04bf1be5559c4ad
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 04:19:54 2015 +0000

      dm: fix request-based dm error reporting

      end_clone_bio() is a endio callback for clone bio and should check
      and save the clone's bi_error for error reporting.  However,
      4246a0b63bd8 ("block: add a bi_error field to struct bio") changed
      the function to check the original bio's bi_error, which is 0.

      Without this fix, clone's error is ignored and reported to the
      original request as success.  Thus data corruption will be observed.

      Fixes: 4246a0b63bd8 ("block: add a bi_error field to struct bio")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit f6702681a0af186db8518793fbe46f45cce967dd
  Merge: 3ec20e2 98dd166
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 15:05:02 2015 +0100

      Merge tag 'for-linus-4.3b-rc4-tag' of 
git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip

      Pull xen bug fixes from David Vrabel:

       - Fix VM save performance regression with x86 PV guests

       - Make kexec work in x86 PVHVM guests (if Xen has the soft-reset ABI)

       - Other minor fixes.

      * tag 'for-linus-4.3b-rc4-tag' of 
git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip:
        x86/xen/p2m: hint at the last populated P2M entry
        x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when 
sanitizing map
        x86/xen: Support kexec/kdump in HVM guests by doing a soft reset
        xen/x86: Don't try to write syscall-related MSRs for PV guests
        xen: use correct type for HYPERVISOR_memory_op()

  commit 3ec20e2e618314a798c81a974455b0a47e2af435
  Merge: 3c68319 daad0bf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:59:36 2015 +0100

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

      Pull s390 fixes from Martin Schwidefsky:
       "Three bug fixes and an update to the default configuration"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:
        s390/defconfig: set SCSI_DH=y
        s390/vtime: correct scaled cputime of partially idle CPUs
        s390/boot/decompression: disable floating point in decompressor
        s390/numa: use correct type for node_to_cpumask_map

  commit 7d35199e15b82a4d1a20049153b03e6258ce79f7
  Author: NeilBrown <neilb@xxxxxxx>
  Date:   Fri May 8 10:16:23 2015 +1000

      BTRFS: support NFSv2 export

      The "fh_len" passed to ->fh_to_* is not guaranteed to be that same as
      that returned by encode_fh - it may be larger.

      With NFSv2, the filehandle is fixed length, so it may appear longer
      than expected and be zero-padded.

      So we must test that fh_len is at least some value, not exactly equal
      to it.

      Signed-off-by: NeilBrown <neilb@xxxxxxx>
      Acked-by: David Sterba <dsterba@xxxxxxx>

  commit e5fffbac4a49270e4976d71a0e054c0cf3ef4f8e
  Author: chandan <chandan@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 22:14:25 2015 +0530

      Btrfs: open_ctree: Fix possible memory leak

      After reading one of chunk or tree root tree's root node from disk, if the
      root node does not have EXTENT_BUFFER_UPTODATE flag set, we fail to 
release
      the memory used by the root node. Fix this.

      Signed-off-by: Chandan Rajendra <chandan@xxxxxxxxxxxxxxxxxx>

  commit 3c68319b28474055481824032e6730c28404116f
  Merge: 049e6dd 616a539
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 14:30:21 2015 +0100

      Merge branch 'for-next' of git://git.samba.org/sfrench/cifs-2.6

      Pull CIFS fixes from Steve French:
       "Two fixes for problems pointed out by automated tools.

        Thanks PaX/grsecurity team and Dan Carpenter (and the Smatch tool)"

      * 'for-next' of git://git.samba.org/sfrench/cifs-2.6:
        [CIFS] Update cifs version number
        [SMB3] Do not fall back to SMBWriteX in set_file_size error cases
        [SMB3] Missing null tcon check

  commit 21c4c073f14509d685ed219aa3c76362a7bfa0ac
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 06:25:43 2015 -0700

      Revert "regmap: Allow installing custom reg_update_bits function"

      This reverts commit 7741c373cf3ea1f5383fa97fb7a640a429d3dd7c.

  commit 6a27a6c3be95d382cd158c5705c1840be291f28f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 06:25:36 2015 -0700

      Revert "net: Microchip encx24j600 driver"

      This reverts commit 04fbfce7a222327b97ca165294ef19f0faa45960.

  commit c664bc6d946d253077f3a5d5ca6769492de59e04
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 06:25:29 2015 -0700

      Revert "net: encx24j600_exit() can be static"

      This reverts commit 9886ce2b9d4e5a8bb3d78d0f7eff3c0f1ed58d67.

  commit 98dd166ea3a3c3b57919e20d9b0d1237fcd0349d
  Author: David Vrabel <david.vrabel@xxxxxxxxxx>
  Date:   Mon Sep 7 17:14:08 2015 +0100

      x86/xen/p2m: hint at the last populated P2M entry

      With commit 633d6f17cd91ad5bf2370265946f716e42d388c6 (x86/xen: prepare
      p2m list for memory hotplug) the P2M may be sized to accomdate a much
      larger amount of memory than the domain currently has.

      When saving a domain, the toolstack must scan all the P2M looking for
      populated pages.  This results in a performance regression due to the
      unnecessary scanning.

      Instead of reporting (via shared_info) the maximum possible size of
      the P2M, hint at the last PFN which might be populated.  This hint is
      increased as new leaves are added to the P2M (in the expectation that
      they will be used for populated entries).

      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+

  commit 5a37b15378659168e1874463ab012f26dcbaf309
  Merge: b0d5811 56e86dd
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 14:31:53 2015 +0200

      Merge tag 'renesas-fixes-for-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas into fixes

      Merge "Renesas ARM Based SoC Fixes for v4.3" from Simon Horman

      * Add Add CPG/MSTP Clock Domain for sound on r8a779[01] SoCs.
        This allows sound to work once again.

      * tag 'renesas-fixes-for-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas:
        ARM: shmobile: r8a7791 dtsi: Add CPG/MSTP Clock Domain for sound
        ARM: shmobile: r8a7790 dtsi: Add CPG/MSTP Clock Domain for sound

  commit b0d58113e55dca8b95161be30e1a15703ecf9a2a
  Merge: c6722dd f594297
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 14:30:14 2015 +0200

      Merge tag 'sunxi-fixes-for-4.3' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mripard/linux into fixes

      Merge "Allwinner fixes for 4.3" from Maxime Ripard:

      Two patches, one that fixes one of the DT build, and the other raising the
      voltage of the lowest OPP of the A20 to remain within the SoC operating
      boundaries

      * tag 'sunxi-fixes-for-4.3' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mripard/linux:
        ARM: dts: Fix Makefile target for sun4i-a10-itead-iteaduino-plus
        ARM: dts: sunxi: Raise minimum CPU voltage for sun7i-a20 to meet SoC 
specifications

  commit c6722ddce0bdf16bfdd7e80dd5fef78e75eca535
  Merge: a73b4db 4776dbb
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Oct 6 14:26:32 2015 +0200

      Merge tag 'samsung-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung into fixes

      Merge "Samsung fixes for v4.3" from Kukjin Kim:

      - fix invalid clock used for FIMD IOMMU
      - fix thermal boot issue smdk5250-smdk5250
      - fix S2R on exynos4412 trats2 boards
      - fix LEDs on exynos5422-odroidxu3-common
      - fix booting of all 8 cores on exynos542x

      * tag 'samsung-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung:
        ARM: dts: Fix wrong clock binding for sysmmu_fimd1_1 on exynos5420
        ARM: dts: Fix bootup thermal issue on smdk5250
        ARM: dts: add suspend opp to exynos4412
        ARM: dts: Fix LEDs on exynos5422-odroidxu3
        ARM: EXYNOS: reset Little cores when cpu is up

  commit 683b95e8071603b4e945cb26dcae0308457ec478
  Author: Peter Oh <poh@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:40 2015 +0300

      ath10k: use pre-allocated DMA buffer in Tx

      ath10k driver is using dma_pool_alloc per packet and dma_pool_free
      in coresponding at Tx completion.
      Use of pre-allocated DMA buffer in Tx will improve saving CPU resource
      by 5% while it consumes about 56KB memory more as trade off.

      Signed-off-by: Peter Oh <poh@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit bc27e8cddda69daa324318ffe3d2e1badad07775
  Author: Peter Oh <poh@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:39 2015 +0300

      ath10k: use Rx decap mode configured when driver registered

      ath10k is using Native WiFi mode as default mode for both of
      Tx and Rx path, but it could be changed when driver registers
      with a module parameter for specific purpose such as mesh.

      The Rx decap mode sent to firmware during WMI initialization should
      use the same mode that driver configured at its registration stage
      in case of using raw mode, so that host driver receives MAC frame
      header containing necessary fields such as QoS and Mesh Control
      and uses them in right way to make data traffic work.

      Signed-off-by: Peter Oh <poh@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 295426669cd68efc84657e6ee426499cfb54346e
  Author: Maharaja Kennadyrajan <c_mkenna@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:38 2015 +0300

      ath10k: implement debugfs interface for Transmit Power Control stats

      The Transmit Power Control (TPC) dump will show the power control values 
for
      each rate which makes it easier to debug calibration problems.

      Example usage:

      # cat /sys/kernel/debug/ieee80211/phy0/ath10k/tpc_stats
      TPC config for channel  5180  mode  10

      CTL             = 0x10 Reg. Domain              = 58
      Antenna Gain    = 1    Reg. Max Antenna Gain    = 0
      Power Limit     = 34   Reg. Max Power           = 34
      Num tx chains   = 3    Num supported rates      = 155

      **********CDD POWER TABLE*******

      No.  Preamble Rate_code tpc_valu1 tpc_value2 tpc_value3
      0       CCK     0x40       0            0       0
      1       CCk     0x41       0            0       0

      [...]

      154     HTCUP   0x 0       24           0       0
      **********STBC POWER TABLE******
      No.  Preamble Rate_code tpc_valu1 tpc_value2 tpc_value3
      0       CCK     0x40       0            0       0

      [...]

      154     HTCUP   0x 0       24           24      0
      **********TXBF POWER TABLE******

      is used to dump the tx power control stats.

      Signed-off-by: Maharaja Kennadyrajan <c_mkenna@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 3b8fc902e33e65dd859c0f974c0097b177eeb695
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:37 2015 +0300

      ath10k: add a_sle32_to_cpu()

      Copy a_sle32_to_cpu() from ath6kl so that we can easily handle signed 
__le32
      values. This is needed in struct wmi_pdev_tpc_config_event.

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 2a995088c5aec38db6ffbac96c404f75c7dd9d2c
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:37 2015 +0300

      ath10k: split an unnecessary long line

      from checkpatch:

      drivers/net/wireless/ath/ath10k/mac.c:1113: line over 90 characters

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 9a14969fa1674d2215d6d9f171ed323bd3ebb39d
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:36 2015 +0300

      ath10k: fix whitespace usage

      checkpatch found:

      drivers/net/wireless/ath/ath10k/core.c:574: Blank lines aren't necessary 
before a close brace '}'
      drivers/net/wireless/ath/ath10k/mac.c:4067: Missing a blank line after 
declarations
      drivers/net/wireless/ath/ath10k/mac.c:4083: Missing a blank line after 
declarations
      drivers/net/wireless/ath/ath10k/mac.c:4084: spaces required around that 
'>>=' (ctx:WxV)
      drivers/net/wireless/ath/ath10k/pci.c:1507: Missing a blank line after 
declarations

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 92438a2cdb5d152d152ca7c449b033c255b977b4
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:36 2015 +0300

      ath10k: remove void function return statements

      drivers/net/wireless/ath/ath10k/wmi.c:3023: void function return 
statements are not generally useful

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b9e284e515af75e72043bb802cfb52cd9bd04450
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:35 2015 +0300

      ath10k: brace style fixes

      drivers/net/wireless/ath/ath10k/htt_tx.c:457: braces {} are not necessary 
for single statement blocks
      drivers/net/wireless/ath/ath10k/htt_tx.c:545: braces {} are not necessary 
for single statement blocks
      drivers/net/wireless/ath/ath10k/mac.c:200: braces {} are not necessary 
for single statement blocks

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 617b0f4d4a69962e0e86604f889d6af9e8f4150d
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:35 2015 +0300

      ath10k: indentation fixes

      checkpatch found:

      drivers/net/wireless/ath/ath10k/core.c:513: Alignment should match open 
parenthesis
      drivers/net/wireless/ath/ath10k/core.c:1266: code indent should use tabs 
where possible
      drivers/net/wireless/ath/ath10k/core.c:1267: code indent should use tabs 
where possible
      drivers/net/wireless/ath/ath10k/core.c:1268: code indent should use tabs 
where possible
      drivers/net/wireless/ath/ath10k/core.c:1269: code indent should use tabs 
where possible
      drivers/net/wireless/ath/ath10k/mac.c:4659: Alignment should match open 
parenthesis
      drivers/net/wireless/ath/ath10k/mac.c:6271: Alignment should match open 
parenthesis
      drivers/net/wireless/ath/ath10k/pci.c:2260: Alignment should match open 
parenthesis
      drivers/net/wireless/ath/ath10k/wmi.c:3510: Alignment should match open 
parenthesis

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit be62e92a5b2b5960b494fc81ce27611240016821
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:56:34 2015 +0300

      ath10k: fix checkpatch warning about logical continuations

      checkpatch found:

      drivers/net/wireless/ath/ath9k/core.c:490: Logical continuations should 
be on the previous line

      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit ff6afc8d0df0347901e862e622b1efaeb6f1fe5d
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Oct 2 18:07:09 2015 +0100

      MAINTAINERS: Remove wm97xx entry

      Neither myself or Liam is especially interested in this driver any more
      and the devices are already covered by the general ex-Wolfson entry so
      just remove this.

      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Acked-by: Liam Girdwood <liam.r.girdwood@xxxxxxxxxxxxxxx>

  commit da11f98fd018319f65af9c10174ccc829207d937
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 6 00:56:56 2015 +0100

      MIPS: Define ioremap_uc

      All architectures must now define ioremap_uc(), but MIPS currently
      only has ioremap_nocache().

      Fixes: 4c73e8926623 ("arch/*/io.h: Add ioremap_uc() to all architectures")
      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: Luis R. Rodriguez <mcgrof@xxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11263/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 22ca03a3ad63bb08d543af462b741b6bf2c329ed
  Merge: 6710f22 6b3600b
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Tue Oct 6 12:00:42 2015 +0100

      Merge remote-tracking branch 'regulator/fix/axp20x' into regulator-linus

  commit 6710f223433588af582c0e4dbecbca72a36c4594
  Merge: 049e6dd 0642312
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Tue Oct 6 12:00:38 2015 +0100

      Merge remote-tracking branch 'regulator/fix/core' into regulator-linus

  commit e2600460bc3aa14ca1df86318a327cbbabedf9a8
  Author: Andreas Dannenberg <dannenberg@xxxxxx>
  Date:   Mon Oct 5 15:00:14 2015 -0500

      ASoC: tas2552: fix dBscale-min declaration

      The minimum volume level for the TAS2552 (control register value 0x00)
      is -7dB however the driver declares it as -0.07dB.

      Running amixer before the patch reports:
      dBscale-min=-0.07dB,step=1.00dB,mute=0

      Running amixer with the patch applied reports:
      dBscale-min=-7.00dB,step=1.00dB,mute=0

      Signed-off-by: Andreas Dannenberg <dannenberg@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit d79e6801b1868ff65f4c956d782946c6221a4c1d
  Author: Philippe Bergheaud <felix@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:23:33 2015 +1000

      cxl: Workaround malformed pcie packets on some cards

      This works around a pcie host bridge defect on some cards, that can cause
      malformed Transaction Layer Packet (TLP) errors to be erroneously 
reported.

      The upper nibble of the vendor section PSL revision is used to distinguish
      between different cards. The affected ones have it set to 0.

      Signed-off-by: Philippe Bergheaud <felix@xxxxxxxxxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit e1a58320a38dfa72be48a0f1a3a92273663ba6db
  Author: Stephen Smalley <sds@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 12:55:20 2015 -0400

      x86/mm: Warn on W^X mappings

      Warn on any residual W+X mappings after setting NX
      if DEBUG_WX is enabled.  Introduce a separate
      X86_PTDUMP_CORE config that enables the code for
      dumping the page tables without enabling the debugfs
      interface, so that DEBUG_WX can be enabled without
      exposing the debugfs interface.  Switch EFI_PGT_DUMP
      to using X86_PTDUMP_CORE so that it also does not require
      enabling the debugfs interface.

      On success it prints this to the kernel log:

        x86/mm: Checked W+X mappings: passed, no W+X pages found.

      On failure it prints a warning and a count of the failed pages:

        ------------[ cut here ]------------
        WARNING: CPU: 1 PID: 1 at arch/x86/mm/dump_pagetables.c:226 
note_page+0x610/0x7b0()
        x86/mm: Found insecure W+X mapping at address 
ffffffff81755000/__stop___ex_table+0xfa8/0xabfa8
        [...]
        Call Trace:
         [<ffffffff81380a5f>] dump_stack+0x44/0x55
         [<ffffffff8109d3f2>] warn_slowpath_common+0x82/0xc0
         [<ffffffff8109d48c>] warn_slowpath_fmt+0x5c/0x80
         [<ffffffff8106cfc9>] ? note_page+0x5c9/0x7b0
         [<ffffffff8106d010>] note_page+0x610/0x7b0
         [<ffffffff8106d409>] ptdump_walk_pgd_level_core+0x259/0x3c0
         [<ffffffff8106d5a7>] ptdump_walk_pgd_level_checkwx+0x17/0x20
         [<ffffffff81063905>] mark_rodata_ro+0xf5/0x100
         [<ffffffff817415a0>] ? rest_init+0x80/0x80
         [<ffffffff817415bd>] kernel_init+0x1d/0xe0
         [<ffffffff8174cd1f>] ret_from_fork+0x3f/0x70
         [<ffffffff817415a0>] ? rest_init+0x80/0x80
        ---[ end trace a1f23a1e42a2ac76 ]---
        x86/mm: Checked W+X mappings: FAILED, 171 W+X pages found.

      Signed-off-by: Stephen Smalley <sds@xxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1444064120-11450-1-git-send-email-sds@xxxxxxxxxxxxx
      [ Improved the Kconfig help text and made the new option default-y
        if CONFIG_DEBUG_RODATA=y, because it already found buggy mappings,
        so we really want people to have this on by default. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 38a413cbc2b2834683b21823d964bc2d2f0abb82
  Merge: 55696b1 9ffecb1
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 6 10:56:54 2015 +0200

      Merge tag 'v4.3-rc3' into x86/mm, to pick up fixes before applying new 
changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1c748dc2cbbe45d48572e395e11be677fbf7a28c
  Merge: e3b0ac1 27bf90b
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 6 09:04:10 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Switch the default callchain output mode to 'graph,0.5,caller', to 
make it
          look like the default for other tools, reducing the learning curve for
          people used to 'caller' based viewing. (Arnaldo Carvalho de Melo)

        - Implement column based horizontal scrolling in the hists browser 
(top, report),
          making it possible to use the TUI for things like 'perf mem report' 
where
          there are many more columns than can fit in a terminal. (Arnaldo 
Carvalho de Melo)

        - Support sorting by symbol_iaddr with perf.data files produced by
          'perf mem record'. (Don Zickus)

        - Display DATA_SRC sample type bit, i.e. when running 'perf evlist -v' 
the
          "DATA_SRC" wasn't appearing when set, fix it to look like: (Jiri Olsa)

            cpu/mem-loads/pp: ...SNIP... sample_type: 
IP|TID|TIME|ADDR|CPU|PERIOD|DATA_SRC

        - Introduce the 'P' event modifier, meaning 'max precision level, 
please', i.e.:

           $ perf record -e cycles:P usleep 1

          Is now similar to:

           $ perf record usleep 1

          Useful, for instance, when specifying multiple events. (Jiri Olsa)

        - Make 'perf -v' and 'perf -h' work. (Jiri Olsa)

        - Fail properly when pattern matching fails to find a tracepoint, i.e.
          '-e non:existent' was being correctly handled, with a proper error 
message
          about that not being a valid event, but '-e non:existent*' wasn't,
          fix it. (Jiri Olsa)

      Infrastructure changes:

        - Separate arch specific entries in 'perf test' and add an 'Intel CQM' 
one
          to be fun on x86 only. (Matt Fleming)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0a837fe4724713ef701e47d6bfab98a5efaff3eb
  Author: Peter Nørlund <pch@xxxxxxxxxxxx>
  Date:   Tue Oct 6 07:24:47 2015 +0200

      ipv4: Fix compilation errors in fib_rebalance

      This fixes

      net/built-in.o: In function `fib_rebalance':
      fib_semantics.c:(.text+0x9df14): undefined reference to `__divdi3'

      and

      net/built-in.o: In function `fib_rebalance':
      net/ipv4/fib_semantics.c:572: undefined reference to `__aeabi_ldivmod'

      Fixes: 0e884c78ee19 ("ipv4: L3 hash-based multipath")

      Signed-off-by: Peter Nørlund <pch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 855591d2f7d1ff7eb18b60ce2be494e3bfe27fb8
  Author: Tom Lendacky <thomas.lendacky@xxxxxxx>
  Date:   Mon Oct 5 10:51:03 2015 -0500

      amd-xgbe: Check for successful buffer allocation before use

      The kasprintf function can return NULL if the allocation fails. Check for
      successful allocation before attempting to use the returned buffer.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d9a0540a79f87456907f2ce031f058cf745c5bff
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Sat Oct 3 13:13:13 2015 +0100

      Btrfs: fix deadlock when finalizing block group creation

      Josef ran into a deadlock while a transaction handle was finalizing the
      creation of its block groups, which produced the following trace:

        [260445.593112] fio             D ffff88022a9df468     0  8924   4518 
0x00000084
        [260445.593119]  ffff88022a9df468 ffffffff81c134c0 ffff880429693c00 
ffff88022a9df488
        [260445.593126]  ffff88022a9e0000 ffff8803490d7b00 ffff8803490d7b18 
ffff88022a9df4b0
        [260445.593132]  ffff8803490d7af8 ffff88022a9df488 ffffffff8175a437 
ffff8803490d7b00
        [260445.593137] Call Trace:
        [260445.593145]  [<ffffffff8175a437>] schedule+0x37/0x80
        [260445.593189]  [<ffffffffa0850f37>] btrfs_tree_lock+0xa7/0x1f0 [btrfs]
        [260445.593197]  [<ffffffff810db7c0>] ? prepare_to_wait_event+0xf0/0xf0
        [260445.593225]  [<ffffffffa07eac44>] btrfs_lock_root_node+0x34/0x50 
[btrfs]
        [260445.593253]  [<ffffffffa07eff6b>] btrfs_search_slot+0x88b/0xa00 
[btrfs]
        [260445.593295]  [<ffffffffa08389df>] ? free_extent_buffer+0x4f/0x90 
[btrfs]
        [260445.593324]  [<ffffffffa07f1a06>] 
btrfs_insert_empty_items+0x66/0xc0 [btrfs]
        [260445.593351]  [<ffffffffa07ea94a>] ? btrfs_alloc_path+0x1a/0x20 
[btrfs]
        [260445.593394]  [<ffffffffa08403b9>] 
btrfs_finish_chunk_alloc+0x1c9/0x570 [btrfs]
        [260445.593427]  [<ffffffffa08002ab>] 
btrfs_create_pending_block_groups+0x11b/0x200 [btrfs]
        [260445.593459]  [<ffffffffa0800964>] do_chunk_alloc+0x2a4/0x2e0 [btrfs]
        [260445.593491]  [<ffffffffa0803815>] find_free_extent+0xa55/0xd90 
[btrfs]
        [260445.593524]  [<ffffffffa0803c22>] btrfs_reserve_extent+0xd2/0x220 
[btrfs]
        [260445.593532]  [<ffffffff8119fe5d>] ? account_page_dirtied+0xdd/0x170
        [260445.593564]  [<ffffffffa0803e78>] 
btrfs_alloc_tree_block+0x108/0x4a0 [btrfs]
        [260445.593597]  [<ffffffffa080c9de>] ? btree_set_page_dirty+0xe/0x10 
[btrfs]
        [260445.593626]  [<ffffffffa07eb5cd>] __btrfs_cow_block+0x12d/0x5b0 
[btrfs]
        [260445.593654]  [<ffffffffa07ebbff>] btrfs_cow_block+0x11f/0x1c0 
[btrfs]
        [260445.593682]  [<ffffffffa07ef8c7>] btrfs_search_slot+0x1e7/0xa00 
[btrfs]
        [260445.593724]  [<ffffffffa08389df>] ? free_extent_buffer+0x4f/0x90 
[btrfs]
        [260445.593752]  [<ffffffffa07f1a06>] 
btrfs_insert_empty_items+0x66/0xc0 [btrfs]
        [260445.593830]  [<ffffffffa07ea94a>] ? btrfs_alloc_path+0x1a/0x20 
[btrfs]
        [260445.593905]  [<ffffffffa08403b9>] 
btrfs_finish_chunk_alloc+0x1c9/0x570 [btrfs]
        [260445.593946]  [<ffffffffa08002ab>] 
btrfs_create_pending_block_groups+0x11b/0x200 [btrfs]
        [260445.593990]  [<ffffffffa0815798>] 
btrfs_commit_transaction+0xa8/0xb40 [btrfs]
        [260445.594042]  [<ffffffffa085abcd>] ? btrfs_log_dentry_safe+0x6d/0x80 
[btrfs]
        [260445.594089]  [<ffffffffa082bc84>] btrfs_sync_file+0x294/0x350 
[btrfs]
        [260445.594115]  [<ffffffff8123e29b>] vfs_fsync_range+0x3b/0xa0
        [260445.594133]  [<ffffffff81023891>] ? 
syscall_trace_enter_phase1+0x131/0x180
        [260445.594149]  [<ffffffff8123e35d>] do_fsync+0x3d/0x70
        [260445.594169]  [<ffffffff81023bb8>] ? syscall_trace_leave+0xb8/0x110
        [260445.594187]  [<ffffffff8123e600>] SyS_fsync+0x10/0x20
        [260445.594204]  [<ffffffff8175de6e>] 
entry_SYSCALL_64_fastpath+0x12/0x71

      This happened because the same transaction handle created a large number
      of block groups and while finalizing their creation (inserting new items
      and updating existing items in the chunk and device trees) a new metadata
      extent had to be allocated and no free space was found in the current
      metadata block groups, which made find_free_extent() attempt to allocate
      a new block group via do_chunk_alloc(). However at do_chunk_alloc() we
      ended up allocating a new system chunk too and exceeded the threshold
      of 2Mb of reserved chunk bytes, which makes do_chunk_alloc() enter the
      final part of block group creation again (at
      btrfs_create_pending_block_groups()) and attempt to lock again the root
      of the chunk tree when it's already write locked by the same task.

      Similarly we can deadlock on extent tree nodes/leafs if while we are
      running delayed references we end up creating a new metadata block group
      in order to allocate a new node/leaf for the extent tree (as part of
      a CoW operation or growing the tree), as btrfs_create_pending_block_groups
      inserts items into the extent tree as well. In this case we get the
      following trace:

        [14242.773581] fio             D ffff880428ca3418     0  3615   3100 
0x00000084
        [14242.773588]  ffff880428ca3418 ffff88042d66b000 ffff88042a03c800 
ffff880428ca3438
        [14242.773594]  ffff880428ca4000 ffff8803e4b20190 ffff8803e4b201a8 
ffff880428ca3460
        [14242.773600]  ffff8803e4b20188 ffff880428ca3438 ffffffff8175a437 
ffff8803e4b20190
        [14242.773606] Call Trace:
        [14242.773613]  [<ffffffff8175a437>] schedule+0x37/0x80
        [14242.773656]  [<ffffffffa057ff07>] btrfs_tree_lock+0xa7/0x1f0 [btrfs]
        [14242.773664]  [<ffffffff810db7c0>] ? prepare_to_wait_event+0xf0/0xf0
        [14242.773692]  [<ffffffffa0519c44>] btrfs_lock_root_node+0x34/0x50 
[btrfs]
        [14242.773720]  [<ffffffffa051ef6b>] btrfs_search_slot+0x88b/0xa00 
[btrfs]
        [14242.773750]  [<ffffffffa0520a06>] btrfs_insert_empty_items+0x66/0xc0 
[btrfs]
        [14242.773758]  [<ffffffff811ef4a2>] ? kmem_cache_alloc+0x1d2/0x200
        [14242.773786]  [<ffffffffa0520ad1>] btrfs_insert_item+0x71/0xf0 [btrfs]
        [14242.773818]  [<ffffffffa052f292>] 
btrfs_create_pending_block_groups+0x102/0x200 [btrfs]
        [14242.773850]  [<ffffffffa052f96e>] do_chunk_alloc+0x2ae/0x2f0 [btrfs]
        [14242.773934]  [<ffffffffa0532825>] find_free_extent+0xa55/0xd90 
[btrfs]
        [14242.773998]  [<ffffffffa0532c22>] btrfs_reserve_extent+0xc2/0x1d0 
[btrfs]
        [14242.774041]  [<ffffffffa0532e38>] btrfs_alloc_tree_block+0x108/0x4a0 
[btrfs]
        [14242.774078]  [<ffffffffa051a5cd>] __btrfs_cow_block+0x12d/0x5b0 
[btrfs]
        [14242.774118]  [<ffffffffa051abff>] btrfs_cow_block+0x11f/0x1c0 [btrfs]
        [14242.774155]  [<ffffffffa051e8c7>] btrfs_search_slot+0x1e7/0xa00 
[btrfs]
        [14242.774194]  [<ffffffffa0528021>] ? 
__btrfs_free_extent.isra.70+0x2e1/0xcb0 [btrfs]
        [14242.774235]  [<ffffffffa0520a06>] btrfs_insert_empty_items+0x66/0xc0 
[btrfs]
        [14242.774274]  [<ffffffffa051994a>] ? btrfs_alloc_path+0x1a/0x20 
[btrfs]
        [14242.774318]  [<ffffffffa052c433>] 
__btrfs_run_delayed_refs+0xbb3/0x1020 [btrfs]
        [14242.774358]  [<ffffffffa052f404>] 
btrfs_run_delayed_refs.part.78+0x74/0x280 [btrfs]
        [14242.774391]  [<ffffffffa052f627>] btrfs_run_delayed_refs+0x17/0x20 
[btrfs]
        [14242.774432]  [<ffffffffa05be236>] commit_cowonly_roots+0x8d/0x2bd 
[btrfs]
        [14242.774474]  [<ffffffffa059d07f>] ? 
__btrfs_run_delayed_items+0x1cf/0x210 [btrfs]
        [14242.774516]  [<ffffffffa05adac3>] ? 
btrfs_qgroup_account_extents+0x83/0x130 [btrfs]
        [14242.774558]  [<ffffffffa0544c40>] 
btrfs_commit_transaction+0x590/0xb40 [btrfs]
        [14242.774599]  [<ffffffffa0589b9d>] ? btrfs_log_dentry_safe+0x6d/0x80 
[btrfs]
        [14242.774642]  [<ffffffffa055ac54>] btrfs_sync_file+0x294/0x350 [btrfs]
        [14242.774650]  [<ffffffff8123e29b>] vfs_fsync_range+0x3b/0xa0
        [14242.774657]  [<ffffffff81023891>] ? 
syscall_trace_enter_phase1+0x131/0x180
        [14242.774663]  [<ffffffff8123e35d>] do_fsync+0x3d/0x70
        [14242.774669]  [<ffffffff81023bb8>] ? syscall_trace_leave+0xb8/0x110
        [14242.774675]  [<ffffffff8123e600>] SyS_fsync+0x10/0x20
        [14242.774681]  [<ffffffff8175de6e>] entry_SYSCALL_64_fastpath+0x12/0x71

      Fix this by never recursing into the finalization phase of block group
      creation and making sure we never trigger the finalization of block group
      creation while running delayed references.

      Reported-by: Josef Bacik <jbacik@xxxxxx>
      Fixes: 00d80e342c0f ("Btrfs: fix quick exhaustion of the system array in 
the superblock")
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit 808f80b46790f27e145c72112189d6a3be2bc884
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Mon Sep 28 09:56:26 2015 +0100

      Btrfs: update fix for read corruption of compressed and shared extents

      My previous fix in commit 005efedf2c7d ("Btrfs: fix read corruption of
      compressed and shared extents") was effective only if the compressed
      extents cover a file range with a length that is not a multiple of 16
      pages. That's because the detection of when we reached a different range
      of the file that shares the same compressed extent as the previously
      processed range was done at extent_io.c:__do_contiguous_readpages(),
      which covers subranges with a length up to 16 pages, because
      extent_readpages() groups the pages in clusters no larger than 16 pages.
      So fix this by tracking the start of the previously processed file
      range's extent map at extent_readpages().

      The following test case for fstests reproduces the issue:

        seq=`basename $0`
        seqres=$RESULT_DIR/$seq
        echo "QA output created by $seq"
        tmp=/tmp/$$
        status=1        # failure is the default!
        trap "_cleanup; exit \$status" 0 1 2 3 15

        _cleanup()
        {
            rm -f $tmp.*
        }

        # get standard environment, filters and checks
        . ./common/rc
        . ./common/filter

        # real QA test starts here
        _need_to_be_root
        _supported_fs btrfs
        _supported_os Linux
        _require_scratch
        _require_cloner

        rm -f $seqres.full

        test_clone_and_read_compressed_extent()
        {
            local mount_opts=$1

            _scratch_mkfs >>$seqres.full 2>&1
            _scratch_mount $mount_opts

            # Create our test file with a single extent of 64Kb that is going to
            # be compressed no matter which compression algo is used (zlib/lzo).
            $XFS_IO_PROG -f -c "pwrite -S 0xaa 0K 64K" \
                $SCRATCH_MNT/foo | _filter_xfs_io

            # Now clone the compressed extent into an adjacent file offset.
            $CLONER_PROG -s 0 -d $((64 * 1024)) -l $((64 * 1024)) \
                $SCRATCH_MNT/foo $SCRATCH_MNT/foo

            echo "File digest before unmount:"
            md5sum $SCRATCH_MNT/foo | _filter_scratch

            # Remount the fs or clear the page cache to trigger the bug in
            # btrfs. Because the extent has an uncompressed length that is a
            # multiple of 16 pages, all the pages belonging to the second range
            # of the file (64K to 128K), which points to the same extent as the
            # first range (0K to 64K), had their contents full of zeroes instead
            # of the byte 0xaa. This was a bug exclusively in the read path of
            # compressed extents, the correct data was stored on disk, btrfs
            # just failed to fill in the pages correctly.
            _scratch_remount

            echo "File digest after remount:"
            # Must match the digest we got before.
            md5sum $SCRATCH_MNT/foo | _filter_scratch
        }

        echo -e "\nTesting with zlib compression..."
        test_clone_and_read_compressed_extent "-o compress=zlib"

        _scratch_unmount

        echo -e "\nTesting with lzo compression..."
        test_clone_and_read_compressed_extent "-o compress=lzo"

        status=0
        exit

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>
      Tested-by: Timofey Titovets <nefelim4ag@xxxxxxxxx>

  commit b786f16ac3c5d4f7a5fd136656b6a1301b29b73b
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Sat Sep 26 15:30:23 2015 +0100

      Btrfs: send, fix corner case for reference overwrite detection

      When the inode given to did_overwrite_ref() matches the current progress
      and has a reference that collides with the reference of other inode that
      has the same number as the current progress, we were always telling our
      caller that the inode's reference was overwritten, which is incorrect
      because the other inode might be a new inode (different generation number)
      in which case we must return false from did_overwrite_ref() so that its
      callers don't use an orphanized path for the inode (as it will never be
      orphanized, instead it will be unlinked and the new inode created later).

      The following test case for fstests reproduces the issue:

        seq=`basename $0`
        seqres=$RESULT_DIR/$seq
        echo "QA output created by $seq"

        tmp=/tmp/$$
        status=1        # failure is the default!
        trap "_cleanup; exit \$status" 0 1 2 3 15

        _cleanup()
        {
            rm -fr $send_files_dir
            rm -f $tmp.*
        }

        # get standard environment, filters and checks
        . ./common/rc
        . ./common/filter

        # real QA test starts here
        _supported_fs btrfs
        _supported_os Linux
        _require_scratch
        _need_to_be_root

        send_files_dir=$TEST_DIR/btrfs-test-$seq

        rm -f $seqres.full
        rm -fr $send_files_dir
        mkdir $send_files_dir

        _scratch_mkfs >>$seqres.full 2>&1
        _scratch_mount

        # Create our test file with a single extent of 64K.
        mkdir -p $SCRATCH_MNT/foo
        $XFS_IO_PROG -f -c "pwrite -S 0xaa 0 64K" $SCRATCH_MNT/foo/bar \
            | _filter_xfs_io

        _run_btrfs_util_prog subvolume snapshot -r $SCRATCH_MNT \
            $SCRATCH_MNT/mysnap1
        _run_btrfs_util_prog subvolume snapshot $SCRATCH_MNT \
            $SCRATCH_MNT/mysnap2

        echo "File digest before being replaced:"
        md5sum $SCRATCH_MNT/mysnap1/foo/bar | _filter_scratch

        # Remove the file and then create a new one in the same location with
        # the same name but with different content. This new file ends up
        # getting the same inode number as the previous one, because that inode
        # number was the highest inode number used by the snapshot's root and
        # therefore when attempting to find the a new inode number for the new
        # file, we end up reusing the same inode number. This happens because
        # currently btrfs uses the highest inode number summed by 1 for the
        # first inode created once a snapshot's root is loaded (done at
        # fs/btrfs/inode-map.c:btrfs_find_free_objectid in the linux kernel
        # tree).
        # Having these two different files in the snapshots with the same inode
        # number (but different generation numbers) caused the btrfs send code
        # to emit an incorrect path for the file when issuing an unlink
        # operation because it failed to realize they were different files.
        rm -f $SCRATCH_MNT/mysnap2/foo/bar
        $XFS_IO_PROG -f -c "pwrite -S 0xbb 0 96K" \
            $SCRATCH_MNT/mysnap2/foo/bar | _filter_xfs_io

        _run_btrfs_util_prog subvolume snapshot -r $SCRATCH_MNT/mysnap2 \
            $SCRATCH_MNT/mysnap2_ro

        _run_btrfs_util_prog send $SCRATCH_MNT/mysnap1 -f $send_files_dir/1.snap
        _run_btrfs_util_prog send -p $SCRATCH_MNT/mysnap1 \
            $SCRATCH_MNT/mysnap2_ro -f $send_files_dir/2.snap

        echo "File digest in the original filesystem after being replaced:"
        md5sum $SCRATCH_MNT/mysnap2_ro/foo/bar | _filter_scratch

        # Now recreate the filesystem by receiving both send streams and verify
        # we get the same file contents that the original filesystem had.
        _scratch_unmount
        _scratch_mkfs >>$seqres.full 2>&1
        _scratch_mount

        _run_btrfs_util_prog receive -vv $SCRATCH_MNT -f $send_files_dir/1.snap
        _run_btrfs_util_prog receive -vv $SCRATCH_MNT -f $send_files_dir/2.snap

        echo "File digest in the new filesystem:"
        # Must match the digest from the new file.
        md5sum $SCRATCH_MNT/mysnap2_ro/foo/bar | _filter_scratch

        status=0
        exit

      Reported-by: Martin Raiber <martin@xxxxxxxxxxxx>
      Fixes: 8b191a684968 ("Btrfs: incremental send, check if orphanized dir 
inode needs delayed rename")
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit 27bf90bf0690f55c3679bcc4c325823cf1cfd19d
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 21:31:17 2015 +0200

      perf tools: Fail properly in case pattern matching fails to find 
tracepoint

      Currently we dont fail properly when pattern matching fails to find any
      tracepoint.

      Current behaviour:

        $ perf record -e 'sched:krava*' sleep 1
        WARNING: event parser found nothinginvalid or unsupported event: 
'sched:krava*'
        Run 'perf list' for a list of valid events

        usage: perf record [<options>] [<command>]
           or: perf record [<options>] -- <command> [<options>]

      This patch change:

        $ perf record -e 'sched:krava*' sleep 1
        event syntax error: 'sched:krava*'
                             \___ unknown tracepoint

        Error:  File /sys/kernel/debug/tracing/events/sched/krava* not found.
        Hint:   Perhaps this kernel misses some CONFIG_ setting to enable this 
feature?.

        Run 'perf list' for a list of valid events

         usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

      Reported-by: Daniel Bristot de Oliveira <bristot@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444073477-3181-1-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c6c3c02dea4034431110923ffd8e296ebfbdbe1b
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Aug 11 17:22:43 2015 -0300

      perf hists browser: Implement horizontal scrolling

      Do it using the recently introduced ui_brower scrolling mode, setting
      ui_browser.columns to the number of sort columns and then, when
      rendering each line, skipping as many initial columns as the user
      pressed the right arrow.

      As the user presses the left arrow, the ui_browser code will remove the
      scrolling counter and the left scrolling takes place.

      The right arrow key was an alias for ENTER, so people used to press it
      may get a bit annoyed at first, sorry! Ditto for ESC and the left key.

      Callchains can be left as is or we can, when rendering the Symbol
      column, store the at what position on the screen it is and then
      using ui_browser__gotorc() to print it from there, i.e. the callchain
      would move around with the symbol.

      Leaving it as is, i.e. at a fixed position, close to the left, saves
      precious screen real state for it, so I'm inclined to leave it as is
      now.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ccqq9sabgfge5dwbqjwh71ij@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit faae6f690eecb82b6d9d9f2112f5b51ac37d4acb
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Aug 11 17:14:40 2015 -0300

      perf ui browser: Optional horizontal scrolling key binding

      If the classes derived from ui_browser want to do some sort of
      horizontal scrolling, they have just to set ui_browser->columns to
      the number of columns available.

      Those columns can be the number of characters on the screen, if what is
      desired is to scroll character by character, or the number of columns in
      a spreadsheet like table.

      This is what the hist_browser will do, skipping ui_browser->horiz_scroll
      columns when rendering each of its lines.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-q6a22bpmpgcr1awgzrmd4jrs@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit def02db0d662b0edd83f80e3c18f660fc414decb
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Oct 5 17:05:35 2015 -0300

      perf callchain: Switch default to 'graph,0.5,caller'

      Which is the most common default found in other similar tools.

      Requested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: https://www.youtube.com/watch?v=nXaxk27zwlk
      Link: http://lkml.kernel.org/n/tip-v8lq36aispvdwgxdmt9p9jd9@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 035827e9f2bd71a280f4eb58c65811d377ab2217
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Mon Oct 5 15:40:21 2015 +0100

      perf tests: Add Intel CQM test

      Peter reports that it's possible to trigger a WARN_ON_ONCE() in the
      Intel CQM code by combining a hardware event and an Intel CQM
      (software) event into a group. Unfortunately, the perf tools are not
      able to create this bundle and we need to manually construct a test
      case.

      For posterity, record Peter's proof of concept test case in tools/perf
      so that it presents a model for how we can perform architecture
      specific tests, or "arch tests", in perf in the future.

      The particular issue triggered in the test case is that when the
      counter for the hardware event overflows and triggers a PMI we'll read
      both the hardware event and the software event counters.
      Unfortunately, for CQM that involves performing an IPI to read the CQM
      event counters on all sockets, which in NMI context triggers the
      WARN_ON_ONCE().

      Reported-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kanaka Juvva <kanaka.d.juvva@xxxxxxxxx>
      Cc: Vikas Shivappa <vikas.shivappa@xxxxxxxxx>
      Cc: Vince Weaver <vince@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1437490509-15373-1-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/n/tip-3p4ra0u8vzm7m289a1m799kf@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d8b167f9d8af817073ee35cf904e2e527465dbc1
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Mon Oct 5 15:40:20 2015 +0100

      perf tests: Move x86 tests into arch directory

      Move out the x86-specific tests into tools/perf/arch/x86/tests and
      define an 'arch_tests' array, which is the list of tests that only apply
      to the build architecture.

      We can also now begin to get rid of some of the #ifdef code that is
      present in the generic perf tests.

      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kanaka Juvva <kanaka.d.juvva@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Vikas Shivappa <vikas.shivappa@xxxxxxxxx>
      Cc: Vince Weaver <vince@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-9s68h4ptg06ah0lgnjz55mqn@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 31b6753f95320260b160935d0e9c0b29f096ab57
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Mon Oct 5 15:40:19 2015 +0100

      perf tests: Add arch tests

      Tests that only make sense for some architectures currently live in
      the same place as the generic tests. Move out the x86-specific tests
      into tools/perf/arch/x86/tests and define an 'arch_tests' array, which
      is the list of tests that only apply to the build architecture.

      The main idea is to encourage developers to add arch tests to build
      out perf's test coverage, without dumping everything in
      tools/perf/tests.

      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kanaka Juvva <kanaka.d.juvva@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Vikas Shivappa <vikas.shivappa@xxxxxxxxx>
      Cc: Vince Weaver <vince@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-p4uc1c15ssbj8xj7ku5slpa6@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a1853e2c6f8ed488adcd84fb162c5b3f0b674d9b
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:09 2015 +0200

      perf tools: Handle -h and -v options

      Adding handling for '-h' and '-v' options to invoke help and version
      command respectively.

      Current behaviour is:

         $ perf -v
         Unknown option: -v

          Usage: perf [--version] [--help] [OPTIONS] COMMAND [ARGS]
         $ perf -h
         Unknown option: -h

          Usage: perf [--version] [--help] [OPTIONS] COMMAND [ARGS]

      New behaviour:

        $ perf -h

         usage: perf [--version] [--help] [OPTIONS] COMMAND [ARGS]

         The most commonly used perf commands are:
           annotate        Read perf.data (created by perf record) and display 
annotated code
           archive         Create archive with object files with build-ids 
found in perf.data file
           bench           General framework for benchmark suites
         ...

        $ perf -v
        perf version 4.3.rc3.gc99e32

      Updated man page.

      Requested-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-10-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b34b3bf0798633cc248b682f5b4f6509739ce234
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:08 2015 +0200

      perf tools: Setup proper width for symbol_iaddr field

      We need to properly initialize column width for symbol_iaddr field, so
      all symbols could fit in the column.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-9-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 28e6db205b3ed3f1d86a00c69b3304190377da5f
  Author: Don Zickus <dzickus@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:07 2015 +0200

      perf tools: Add support for sorting on the iaddr

      Sorting on 'symbol' gives to broad a resolution as it can cover a range
      of IP address.  Use the iaddr instead to get proper sorting on IP
      addresses.  Need to use the 'mem_sort' feature of perf record.

      New sort option is: symbol_iaddr, header label is 'Code Symbol'.

        $ perf mem report --stdio -F +symbol_iaddr
        # Overhead       Samples  Code Symbol              Local Weight
        # ........  ............  ........................ ............
        #
            54.08%             1  [k] nmi_handle           192
             4.51%             1  [k] finish_task_switch   16
             3.66%             1  [.] malloc               13
             3.10%             1  [.] __strcoll_l          11

      Signed-off-by: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-8-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ddd83c9717ef8204f17cc63d6dcb5053d472caee
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:06 2015 +0200

      perf tests: Add parsing test for 'P' modifier

      We cant test 'P' modifier gets properly parsed, the functionality test
      itself is beyond this suite.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-7-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7f94af7a489fada17d28cc60e8f4409ce216bd6d
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:05 2015 +0200

      perf tools: Introduce 'P' modifier to request max precision

      The 'P' will cause the event to get maximum possible detected precise
      level.

      Following record:
        $ perf record -e cycles:P ...

      will detect maximum precise level for 'cycles' event and use it.

      Commiter note:

      Testing it:

        $ perf record -e cycles:P usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.013 MB perf.data (9 samples) ]
        $ perf evlist
        cycles:P
        $ perf evlist -v
        cycles:P: size: 112, { sample_period, sample_freq }: 4000, sample_type:
        IP|TID|TIME|PERIOD, disabled: 1, inherit: 1, mmap: 1, comm: 1, freq: 1,
        enable_on_exec: 1, task: 1, precise_ip: 2, sample_id_all: 1, mmap2: 1,
        comm_exec: 1
        $

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-6-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 45cf6c33f95448752dd3d5531388429c3a5012d0
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:04 2015 +0200

      perf tools: Export perf_event_attr__set_max_precise_ip()

      It'll be used in following patch.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-5-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5ec4502d774699194952209ff3ebe65d2472e15a
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:03 2015 +0200

      perf annotate: Fix sizeof_sym_hist overflow issue

      The annotated_source::sizeof_sym_hist could easily overflow int size,
      resulting in crash in __symbol__inc_addr_samples.

      Changing its type int size_t as was probably intended from beginning
      based on the initialization code in symbol__alloc_hist.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 84422592e58f6f1ea03688fcf92143bbc095fa88
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:02 2015 +0200

      perf evlist: Display DATA_SRC sample type bit

      Adding DATA_SRC bit_name call to display sample_type properly.

         $ perf evlist -v
         cpu/mem-loads/pp: ...SNIP... sample_type: 
IP|TID|TIME|ADDR|CPU|PERIOD|DATA_SRC, ...

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ccb5597f9ba11b67b8aa8c6f4682675eceee0e21
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 5 20:06:01 2015 +0200

      tools lib api fs: No need to use PATH_MAX + 1

      Because there's no point, PATH_MAX is big enough.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444068369-20978-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 06766513232d1619ac84e87b1d839d3fcc23a540
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Thu Sep 10 21:20:57 2015 -0700

      RDS: IB: split mr pool to improve 8K messages performance

      8K message sizes are pretty important usecase for RDS current
      workloads so we make provison to have 8K mrs available from the pool.
      Based on number of SG's in the RDS message, we pick a pool to use.

      Also to make sure that we don't under utlise mrs when say 8k messages
      are dominating which could lead to 8k pull being exhausted, we fall-back
      to 1m pool till 8k pool recovers for use.

      This helps to at least push ~55 kB/s bidirectional data which
      is a nice improvement.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 41a4e9646229801624e38f7a1cc53033a0affdb1
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sat Sep 19 13:06:08 2015 -0400

      RDS: IB: use max_mr from HCA caps than max_fmr

      All HCA drivers seems to popullate max_mr caps and few of
      them do both max_mr and max_fmr.

      Hence update RDS code to make use of max_mr.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 67161e250a28de5cdafa99a3b659b1e2e269fd7e
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sat Sep 19 17:21:22 2015 -0400

      RDS: IB: mark rds_ib_fmr_wq static

      Fix below warning by marking rds_ib_fmr_wq static

      net/rds/ib_rdma.c:87:25: warning: symbol 'rds_ib_fmr_wq' was not 
declared. Should it be static?

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 26139dc1dbf79fd1ae1e2766a1f66b0728bd67b3
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Tue Sep 15 18:20:35 2015 -0700

      RDS: IB: use already available pool handle from ibmr

      rds_ib_mr already keeps the pool handle which it associates
      with. Lets use that instead of round about way of fetching
      it from rds_ib_device.

      No functional change.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 2e1d6b813ac146db1e33ebb9b90441012dde4952
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sun Sep 13 22:34:37 2015 -0700

      RDS: IB: fix the rds_ib_fmr_wq kick call

      RDS IB mr pool has its own workqueue 'rds_ib_fmr_wq', so we need
      to use queue_delayed_work() to kick the work. This was hurting
      the performance since pool maintenance was less often triggered
      from other path.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 9441c973e1e0e9885537a3a86020fe8e121e9a98
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sat Sep 19 14:01:09 2015 -0400

      RDS: IB: handle rds_ibdev release case instead of crashing the kernel

      Just in case we are still handling the QP receive completion while the
      rds_ibdev is released, drop the connection instead of crashing the kernel.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 0c28c04500cf956c82d542c199f5bddabd590af3
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sun Sep 6 02:18:51 2015 -0400

      RDS: IB: split send completion handling and do batch ack

      Similar to what we did with receive CQ completion handling, we split
      the transmit completion handler so that it lets us implement batched
      work completion handling.

      We re-use the cq_poll routine and makes use of RDS_IB_SEND_OP to
      identify the send vs receive completion event handler invocation.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit f4f943c958a2869b0601092857c1cf0e485d3ce8
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Sun Sep 6 02:18:51 2015 -0400

      RDS: IB: ack more receive completions to improve performance

      For better performance, we split the receive completion IRQ handler. That
      lets us acknowledge several WCE events in one call. We also limit the WC
      to max 32 to avoid latency. Acknowledging several completions in one call
      instead of several calls each time will provide better performance since
      less mutual exclusion locks are being performed.

      In next patch, send completion is also split which re-uses the poll_cq()
      and hence the code is moved to ib_cm.c

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit db6526dcb51b054961a2d96ba43dec23e38818b3
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Sep 11 15:44:29 2015 -0700

      RDS: use rds_send_xmit() state instead of RDS_LL_SEND_FULL

      In Transport indepedent rds_sendmsg(), we shouldn't make decisions based
      on RDS_LL_SEND_FULL which is used to manage the ring for RDMA based
      transports. We can safely issue rds_send_xmit() and the using its
      return value take decision on deferred work. This will also fix
      the scenario where at times we are seeing connections stuck with
      the LL_SEND_FULL bit getting set and never cleared.

      We kick krdsd after any time we see -ENOMEM or -EAGAIN from the
      ring allocation code.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 4bebdd7a4d2960b2ff6c40b27156d041ea270765
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Thu Sep 10 11:57:14 2015 -0700

      RDS: defer the over_batch work to send worker

      Current process gives up if its send work over the batch limit.
      The work queue will get  kicked to finish off any other requests.
      This fixes remainder condition from commit 443be0e5affe ("RDS: make
      sure not to loop forever inside rds_send_xmit").

      The restart condition is only for the case where we reached to
      over_batch code for some other reason so just retrying again
      before giving up.

      While at it, make sure we use already available 'send_batch_count'
      parameter instead of magic value. The batch count threshold value
      of 1024 came via commit 443be0e5affe ("RDS: make sure not to loop
      forever inside rds_send_xmit"). The idea is to process as big a
      batch as we can but at the same time we don't hold other waiting
      processes for send. Hence back-off after the send_batch_count
      limit (1024) to avoid soft-lock ups.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit abffa6f3b1578d5991545f6998ca7ee70b830e94
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Wed Sep 30 19:23:12 2015 +0100

      arm64: convert patch_lock to raw lock

      When running kprobe test on arm64 rt kernel, it reports the below warning:

      root@qemu7:~# modprobe kprobe_example
      BUG: sleeping function called from invalid context at 
kernel/locking/rtmutex.c:917
      in_atomic(): 0, irqs_disabled(): 128, pid: 484, name: modprobe
      CPU: 0 PID: 484 Comm: modprobe Not tainted 4.1.6-rt5 #2
      Hardware name: linux,dummy-virt (DT)
      Call trace:
      [<ffffffc0000891b8>] dump_backtrace+0x0/0x128
      [<ffffffc000089300>] show_stack+0x20/0x30
      [<ffffffc00061dae8>] dump_stack+0x1c/0x28
      [<ffffffc0000bbad0>] ___might_sleep+0x120/0x198
      [<ffffffc0006223e8>] rt_spin_lock+0x28/0x40
      [<ffffffc000622b30>] __aarch64_insn_write+0x28/0x78
      [<ffffffc000622e48>] aarch64_insn_patch_text_nosync+0x18/0x48
      [<ffffffc000622ee8>] aarch64_insn_patch_text_cb+0x70/0xa0
      [<ffffffc000622f40>] aarch64_insn_patch_text_sync+0x28/0x48
      [<ffffffc0006236e0>] arch_arm_kprobe+0x38/0x48
      [<ffffffc00010e6f4>] arm_kprobe+0x34/0x50
      [<ffffffc000110374>] register_kprobe+0x4cc/0x5b8
      [<ffffffbffc002038>] kprobe_init+0x38/0x7c [kprobe_example]
      [<ffffffc000084240>] do_one_initcall+0x90/0x1b0
      [<ffffffc00061c498>] do_init_module+0x6c/0x1cc
      [<ffffffc0000fd0c0>] load_module+0x17f8/0x1db0
      [<ffffffc0000fd8cc>] SyS_finit_module+0xb4/0xc8

      Convert patch_lock to raw loc kto avoid this issue.

      Although the problem is found on rt kernel, the fix should be applicable 
to
      mainline kernel too.

      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 5edfcee5ed73eb9537987c4ddb6bf062b6943b73
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Fri Sep 25 08:42:00 2015 +0200

      mac80211: make ieee80211_new_mesh_header return unsigned

      The function returns always non-negative values.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a29a9a585b2840a205f085a34dfd65c75e86f7c3
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Mon Oct 5 11:50:46 2015 +0900

      netfilter: nfnetlink_log: allow to attach conntrack

      This patch enables to include the conntrack information together
      with the packet that is sent to user-space via NFLOG, then a
      user-space program can acquire NATed information by this NFULA_CT
      attribute.

      Including the conntrack information is optional, you can set it
      via NFULNL_CFG_F_CONNTRACK flag with the NFULA_CFG_FLAGS attribute
      like NFQUEUE.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 224a05975ebbbdf507c65043f8aba280ccb39e6e
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Mon Oct 5 11:49:56 2015 +0900

      netfilter: ctnetlink: add const qualifier to nfnl_hook.get_ct

      get_ct as is and will not update its skb argument, and users of
      nfnl_ct_hook is currently only nfqueue, we can add const qualifier.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>

  commit 83f3e94d3477d79e603a1cf4c3e0c14da0f02688
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Mon Oct 5 11:48:47 2015 +0900

      netfilter: Kconfig rename QUEUE_CT to GLUE_CT

      Conntrack information attaching infrastructure is now generic and
      update it's name to use `glue' in previous patch. This patch updates
      Kconfig symbol name and adding NF_CT_NETLINK dependency.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit a4b4766c3cebb4018167e06b863d8e95b7274757
  Author: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
  Date:   Mon Oct 5 11:47:13 2015 +0900

      netfilter: nfnetlink_queue: rename related to nfqueue attaching conntrack 
info

      The idea of this series of patch is to attach conntrack information to
      nflog like nfqueue has already done. nfqueue conntrack info attaching
      basis is generic, rename those names to generic one, glue.

      Signed-off-by: Ken-ichirou MATSUZAWA <chamas@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 0647e708344f4bf8b9e3f1855361c597f93d084d
  Author: Flavio Leitner <fbl@xxxxxxxxxxxx>
  Date:   Wed Sep 30 10:23:50 2015 -0300

      netfilter: remove dead code

      Remove __nf_conntrack_find() from headers.

      Fixes: dcd93ed4cd1 ("netfilter: nf_conntrack: remove dead code")
      Signed-off-by: Flavio Leitner <fbl@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 569ba74a7ba69f46ce2950bf085b37fea2408385
  Author: Mark Salyzyn <salyzyn@xxxxxxxxxxx>
  Date:   Mon Sep 21 21:39:50 2015 +0100

      arm64: readahead: fault retry breaks mmap file read random detection

      This is the arm64 portion of commit 45cac65b0fcd ("readahead: fault
      retry breaks mmap file read random detection"), which was absent from
      the initial port and has since gone unnoticed. The original commit says:

      > .fault now can retry.  The retry can break state machine of .fault.  In
      > filemap_fault, if page is miss, ra->mmap_miss is increased.  In the 
second
      > try, since the page is in page cache now, ra->mmap_miss is decreased.  
And
      > these are done in one fault, so we can't detect random mmap file access.
      >
      > Add a new flag to indicate .fault is tried once.  In the second try, 
skip
      > ra->mmap_miss decreasing.  The filemap_fault state machine is ok with 
it.

      With this change, Mark reports that:

      > Random read improves by 250%, sequential read improves by 40%, and
      > random write by 400% to an eMMC device with dm crypto wrapped around it.

      Cc: Shaohua Li <shli@xxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Wu Fengguang <fengguang.wu@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Salyzyn <salyzyn@xxxxxxxxxxx>
      Signed-off-by: Riley Andrews <riandrews@xxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 95485fdc64b1067e0e88d8c7980eb57994ad450e
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Fri Sep 18 22:09:00 2015 +0100

      arm64: debug: Fix typo in debug-monitors.c

      Fix comment typo: s/handers/handlers/

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit b28b1e826f818c30ea732ba751bbecb202dd32a7
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Sun Oct 4 19:38:14 2015 +0200

      netfilter: nfnetlink_queue: use y2038 safe timestamp

      The __build_packet_message function fills a nfulnl_msg_packet_timestamp
      structure that uses 64-bit seconds and is therefore y2038 safe, but
      it uses an intermediate 'struct timespec' which is not.

      This trivially changes the code to use 'struct timespec64' instead,
      to correct the result on 32-bit architectures.

      This is a copy and paste of Arnd's original patch for nfnetlink_log.

      Suggested-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 2b5b1a01a77f0e24b77680fce5245a582cb96330
  Merge: 32f40c5 b59f2e3
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:25:54 2015 +0200

      Merge tag 'ipvs3-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next

      Simon Horman says:

      ====================
      Third Round of IPVS Updates for v4.4

      please consider this build fix from Eric Biederman which resolves
      a build problem introduced in is excellent work to cleanup IPVS which
      you recently pulled: its queued up for v4.4 so no need to worry
      about earlier kernel versions.

      I have another minor cleanup, to fix a build warning, pending.
      However, I wanted to send this one to you now as its hit nf-next,
      net-next and in turn next, and a slow trickle of bug reports are 
appearing.
      ====================

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 225db5762dc1a35b26850477ffa06e5cd0097243
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Mon Oct 5 16:55:09 2015 +0200

      ALSA: synth: Fix conflicting OSS device registration on AWE32

      When OSS emulation is loaded on ISA SB AWE32 chip, we get now kernel
      warnings like:
        WARNING: CPU: 0 PID: 2791 at fs/sysfs/dir.c:31 
sysfs_warn_dup+0x51/0x80()
        sysfs: cannot create duplicate filename 
'/devices/isa/sbawe.0/sound/card0/seq-oss-0-0'

      It's because both emux synth and opl3 drivers try to register their
      OSS device object with the same static index number 0.  This hasn't
      been a big problem until the recent rewrite of device management code
      (that exposes sysfs at the same time), but it's been an obvious bug.

      This patch works around it just by using a different index number of
      emux synth object.  There can be a more elegant way to fix, but it's
      enough for now, as this code won't be touched so often, in anyway.

      Reported-and-tested-by: Michael Shell <list1@xxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit f79683ded69aeb041ee9b814d7611f47b6a89881
  Merge: 1f9c6e1 b8402d8
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Mon Oct 5 17:22:54 2015 +0300

      Merge ath-next from ath.git

      Major changes in ath10k:

      * add spectral scan support for 10.4 firmware
      * add qca6164 support
      * implement mesh support using firmware raw mode

  commit 26d0c21db1fd1679fcf07863741c13ba5ce37a65
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Mon Oct 5 10:15:14 2015 -0400

      drm/amdgpu: fix num_crtc on CZ

      Hw only has 3 crtcs.  copy paste typo.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 83ffe99f52b8f269b31b21524adcd13b165f7703
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Fri Oct 2 14:56:34 2015 -0700

      openvswitch: Fix ovs_vport_get_stats()

      Not every device has dev->tstats set. So when OVS tries to calculate
      vport stats it causes kernel panic. Following patch fixes it by
      using standard API to get net-device stats.

      ---8<---
      Unable to handle kernel paging request at virtual address 766b4008
      Internal error: Oops: 96000005 [#1] PREEMPT SMP
      Modules linked in: vport_vxlan vxlan ip6_udp_tunnel udp_tunnel tun bridge 
stp llc openvswitch ipv6
      CPU: 7 PID: 1108 Comm: ovs-vswitchd Not tainted 4.3.0-rc3+ #82
      PC is at ovs_vport_get_stats+0x150/0x1f8 [openvswitch]
      <snip>
      Call trace:
       [<ffffffbffc0859f8>] ovs_vport_get_stats+0x150/0x1f8 [openvswitch]
       [<ffffffbffc07cdb0>] ovs_vport_cmd_fill_info+0x140/0x1e0 [openvswitch]
       [<ffffffbffc07cf0c>] ovs_vport_cmd_dump+0xbc/0x138 [openvswitch]
       [<ffffffc00045a5ac>] netlink_dump+0xb8/0x258
       [<ffffffc00045ace0>] __netlink_dump_start+0x120/0x178
       [<ffffffc00045dd9c>] genl_family_rcv_msg+0x2d4/0x308
       [<ffffffc00045de58>] genl_rcv_msg+0x88/0xc4
       [<ffffffc00045cf24>] netlink_rcv_skb+0xd4/0x100
       [<ffffffc00045dab0>] genl_rcv+0x30/0x48
       [<ffffffc00045c830>] netlink_unicast+0x154/0x200
       [<ffffffc00045cc9c>] netlink_sendmsg+0x308/0x364
       [<ffffffc00041e10c>] sock_sendmsg+0x14/0x2c
       [<ffffffc000420d58>] SyS_sendto+0xbc/0xf0
      Code: aa1603e1 f94037a4 aa1303e2 aa1703e0 (f9400465)

      Reported-by: Tomasz Sawicki <tomasz.sawicki@xxxxxxxxxxxxxxxxxxxxxxx>
      Fixes: 8c876639c98 ("openvswitch: Remove vport stats.")
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0cdf5640e4f6940bdbbefee4bb0adb7dffb185ec
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 18:42:00 2015 +0200

      ebpf: include perf_event only where really needed

      Commit ea317b267e9d ("bpf: Add new bpf map type to store the pointer
      to struct perf_event") added perf_event.h to the main eBPF header, so
      it gets included for all users. perf_event.h is actually only needed
      from array map side, so lets sanitize this a bit.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4560cdff03a76348ee5fae48e3c7914e4de2db5b
  Author: Nicolas Schichan <nschichan@xxxxxxxxxx>
  Date:   Fri Oct 2 17:06:47 2015 +0200

      ARM: net: support BPF_ALU | BPF_MOD instructions in the BPF JIT.

      For ARMv7 with UDIV instruction support, generate an UDIV instruction
      followed by an MLS instruction.

      For other ARM variants, generate code calling a C wrapper similar to
      the jit_udiv() function used for BPF_ALU | BPF_DIV instructions.

      Some performance numbers reported by the test_bpf module (the duration
      per filter run is reported in nanoseconds, between "jitted:<x>" and
      "PASS":

      ARMv7 QEMU nojit: test_bpf: #3 DIV_MOD_KX jited:0 2196 PASS
      ARMv7 QEMU jit:           test_bpf: #3 DIV_MOD_KX jited:1 104 PASS
      ARMv5 QEMU nojit: test_bpf: #3 DIV_MOD_KX jited:0 2176 PASS
      ARMv5 QEMU jit:           test_bpf: #3 DIV_MOD_KX jited:1 1104 PASS
      ARMv5 kirkwood nojit:     test_bpf: #3 DIV_MOD_KX jited:0 1103 PASS
      ARMv5 kirkwood jit:       test_bpf: #3 DIV_MOD_KX jited:1 311 PASS

      Signed-off-by: Nicolas Schichan <nschichan@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8690f47d6e76d4300eeb316ba4773f7de3da63f7
  Author: Nicolas Schichan <nschichan@xxxxxxxxxx>
  Date:   Fri Oct 2 15:39:12 2015 +0200

      ARM: net: make BPF_LD | BPF_IND instruction trigger r_X initialisation to 
0.

      Without this patch, if the only instructions using r_X are of the
      BPF_LD | BPF_IND type, r_X would not be reset to 0, using whatever
      value was there when entering the jited code. With this patch, r_X
      will be correctly marked as used so it will be reset to 0 in the
      prologue code.

      This fix also makes the test "LD_IND byte default X" pass in the
      test_bpf module when the ARM JIT is enabled.

      Signed-off-by: Nicolas Schichan <nschichan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit df7b6015421babdf0fe7c0061dcc0bddf8ebab09
  Merge: bab1899 6a57081
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 06:58:51 2015 -0700

      Merge branch 'asix-rx-mem-handling'

      Mark Craske says:

      ====================
      Improve ASIX RX memory allocation error handling

      The ASIX RX handler algorithm is weak on error handling.
      There is a design flaw in the ASIX RX handler algorithm because the
      implementation for handling RX Ethernet frames for the DUB-E100 C1 can
      have Ethernet frames spanning multiple URBs. This means that payload data
      from more than 1 URB is sometimes needed to fill the socket buffer with a
      complete Ethernet frame. When the URB with the start of an Ethernet frame
      is received then an attempt is made to allocate a socket buffer. If the
      memory allocation fails then the algorithm sets the buffer pointer member
      to NULL and the function exits (no crash yet). Subsequently, the RX hander
      is called again to process the next URB which assumes there is a socket
      buffer available and the kernel crashes when there is no buffer.

      This patchset implements an improvement to the RX handling algorithm to
      avoid a crash when no memory is available for the socket buffer.

      The patchset will apply cleanly to the net-next master branch but the
      created kernel has not been tested. The driver was tested on ARM kernels
      v3.8 and v3.14 for a commercial product.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6a570814cd430fa5ef4f278e8046dcf12ee63f13
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:08 2015 +0100

      asix: Continue processing URB if no RX netdev buffer

      Avoid a loss of synchronisation of the Ethernet Data header 32-bit
      word due to a failure to get a netdev socket buffer.

      The ASIX RX handling algorithm returned 0 upon a failure to get
      an allocation of a netdev socket buffer. This causes the URB
      processing to stop which potentially causes a loss of synchronisation
      with the Ethernet Data header 32-bit word. Therefore, subsequent
      processing of URBs may be rejected due to a loss of synchronisation.
      This may cause additional good Ethernet frames to be discarded
      along with outputting of synchronisation error messages.

      Implement a solution which checks whether a netdev socket buffer
      has been allocated before trying to copy the Ethernet frame into
      the netdev socket buffer. But continue to process the URB so that
      synchronisation is maintained. Therefore, only a single Ethernet
      frame is discarded when no netdev socket buffer is available.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3f30b158eba5c604b6e0870027eef5d19fc9271d
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:07 2015 +0100

      asix: On RX avoid creating bad Ethernet frames

      When RX Ethernet frames span multiple URB socket buffers,
      the data stream may suffer a discontinuity which will cause
      the current Ethernet frame in the netdev socket buffer
      to be incomplete. This frame needs to be discarded instead
      of appending unrelated data from the current URB socket buffer
      to the Ethernet frame in the netdev socket buffer. This avoids
      creating a corrupted Ethernet frame in the netdev socket buffer.

      A discontinuity can occur when the previous URB socket buffer
      held an incomplete Ethernet frame due to truncation or a
      URB socket buffer containing the end of the Ethernet frame
      was missing.

      Therefore, add a sanity test for when an Ethernet frame
      spans multiple URB socket buffers to check that the remaining
      bytes of the currently received Ethernet frame point to
      a good Data header 32-bit word of the next Ethernet
      frame. Upon error, reset the remaining bytes variable to
      zero and discard the current netdev socket buffer.
      Assume that the Data header is located at the start of
      the current socket buffer and attempt to process the next
      Ethernet frame from there. This avoids unnecessarily
      discarding a good URB socket buffer that contains a new
      Ethernet frame.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9a5ccd8e039eef53336e45d01c7d8a1acbd36b47
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:06 2015 +0100

      asix: Simplify asix_rx_fixup_internal() netdev alloc

      The code is checking that the Ethernet frame will fit into a
      netdev allocated socket buffer within the constraints of MTU size,
      Ethernet header length plus VLAN header length.

      The original code was checking rx->remaining each loop of the while
      loop that processes multiple Ethernet frames per URB and/or Ethernet
      frames that span across URBs. rx->remaining decreases per while loop
      so there is no point in potentially checking multiple times that the
      Ethernet frame (remaining part) will fit into the netdev socket buffer.

      The modification checks that the size of the Ethernet frame will fit
      the netdev socket buffer before allocating the netdev socket buffer.
      This avoids grabbing memory and then deciding that the Ethernet frame
      is too big and then freeing the memory.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3bfc69abf802f56901ffd83bb66b7dd7644ddcc3
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:05 2015 +0100

      asix: Tidy-up 32-bit header word synchronisation

      Tidy-up the Data header 32-bit word synchronisation logic in
      asix_rx_fixup_internal() by removing redundant logic tests.

      The code is looking at the following cases of the Data header
      32-bit word that is present before each Ethernet frame:

      a) all 32 bits of the Data header word are in the URB socket buffer
      b) first 16 bits of the Data header word are at the end of the URB
         socket buffer
      c) last 16 bits of the Data header word are at the start of the URB
         socket buffer eg. split_head = true

      Note that the lifetime of rx->split_head exists outside of the
      function call and is accessed per processing of each URB. Therefore,
      split_head being true acts on the next URB to be processed.

      To check for b) the offset will be 16 bits (2 bytes) from the end of
      the buffer then indicate split_head is true.
      To check for c) split_head must be true because the first 16 bits
      have been found.
      To check for a) else c)

      Note that the || logic of the old code included the state
      (skb->len - offset == sizeof(u16) && rx->split_head) which is not
      possible because the split_head cannot be true whilst checking for b).
      This is because the split_head indicates that the first 16 bits have
      been found and that is not possible whilst checking for the first 16
      bits. Therefore simplify the logic.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b0378f517fa1a32b5c8384248d2f8bf79c7c2ae
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Fri Oct 2 14:29:04 2015 +0100

      asix: Rename remaining and size for clarity

      The Data header synchronisation is easier to understand
      if the variables "remaining" and "size" are renamed.

      Therefore, the lifetime of the "remaining" variable exists
      outside of asix_rx_fixup_internal() and is used to indicate
      any remaining pending bytes of the Ethernet frame that need
      to be obtained from the next socket buffer. This allows an
      Ethernet frame to span across multiple socket buffers.

      "size" is now local to asix_rx_fixup_internal() and contains
      the size read from the Data header 32-bit word.

      Add "copy_length" to hold the number of the Ethernet frame
      bytes (maybe a part of a full frame) that are to be copied
      out of the socket buffer.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Mark Craske <Mark_Craske@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bab18991871545dfbd10c931eb0fe8f7637156a9
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:17:33 2015 +0200

      bpf, seccomp: prepare for upcoming criu support

      The current ongoing effort to dump existing cBPF seccomp filters back
      to user space requires to hold the pre-transformed instructions like
      we do in case of socket filters from sk_attach_filter() side, so they
      can be reloaded in original form at a later point in time by utilities
      such as criu.

      To prepare for this, simply extend the bpf_prog_create_from_user()
      API to hold a flag that tells whether we should store the original
      or not. Also, fanout filters could make use of that in future for
      things like diag. While fanout filters already use bpf_prog_destroy(),
      move seccomp over to them as well to handle original programs when
      present.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
      Cc: Pavel Emelyanov <xemul@xxxxxxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Tested-by: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8b7530b15c3332220a081035ab467c9359aff409
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 2 16:59:34 2015 -0400

      drm/amdgpu: restore the fbdev mode in lastclose

      restore the fbdev state if a drm app like X is killed.

      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 8c70e1cda04b966b50ddfefafbd0ea376ed8edd5
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 2 16:52:58 2015 -0400

      drm/radeon: restore the fbdev mode in lastclose

      restore the fbdev state if a drm app like X is killed.

      Tested-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 598c12d0ba6de9060f04999746eb1e015774044b
  Author: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 13:18:22 2015 +0300

      ovs: do not allocate memory from offline numa node

      When openvswitch tries allocate memory from offline numa node 0:
      stats = kmem_cache_alloc_node(flow_stats_cache, GFP_KERNEL | __GFP_ZERO, 
0)
      It catches VM_BUG_ON(nid < 0 || nid >= MAX_NUMNODES || !node_online(nid))
      [ replaced with VM_WARN_ON(!node_online(nid)) recently ] in linux/gfp.h
      This patch disables numa affinity in this case.

      Signed-off-by: Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 93d08b6966cf730ea669d4d98f43627597077153
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 12:06:03 2015 +0200

      bpf: fix panic in SO_GET_FILTER with native ebpf programs

      When sockets have a native eBPF program attached through
      setsockopt(sk, SOL_SOCKET, SO_ATTACH_BPF, ...), and then try to
      dump these over getsockopt(sk, SOL_SOCKET, SO_GET_FILTER, ...),
      the following panic appears:

        [49904.178642] BUG: unable to handle kernel NULL pointer dereference at 
(null)
        [49904.178762] IP: [<ffffffff81610fd9>] sk_get_filter+0x39/0x90
        [49904.182000] PGD 86fc9067 PUD 531a1067 PMD 0
        [49904.185196] Oops: 0000 [#1] SMP
        [...]
        [49904.224677] Call Trace:
        [49904.226090]  [<ffffffff815e3d49>] sock_getsockopt+0x319/0x740
        [49904.227535]  [<ffffffff812f59e3>] ? sock_has_perm+0x63/0x70
        [49904.228953]  [<ffffffff815e2fc8>] ? release_sock+0x108/0x150
        [49904.230380]  [<ffffffff812f5a43>] ? 
selinux_socket_getsockopt+0x23/0x30
        [49904.231788]  [<ffffffff815dff36>] SyS_getsockopt+0xa6/0xc0
        [49904.233267]  [<ffffffff8171b9ae>] entry_SYSCALL_64_fastpath+0x12/0x71

      The underlying issue is the very same as in commit b382c0865600
      ("sock, diag: fix panic in sock_diag_put_filterinfo"), that is,
      native eBPF programs don't store an original program since this
      is only needed in cBPF ones.

      However, sk_get_filter() wasn't updated to test for this at the
      time when eBPF could be attached. Just throw an error to the user
      to indicate that eBPF cannot be dumped over this interface.
      That way, it can also be known that a program _is_ attached (as
      opposed to just return 0), and a different (future) method needs
      to be consulted for a dump.

      Fixes: 89aa075832b0 ("net: sock: allow eBPF programs to be attached to 
sockets")
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a15afd2eaceceff5be4c8b7166f01c1a68e9642
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Thu Oct 1 15:21:08 2015 -0700

      vrf: fix a kernel warning

      This fixes:

       tried to remove device ip6gre0 from (null)
       ------------[ cut here ]------------
       kernel BUG at net/core/dev.c:5219!
       invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC
       CPU: 3 PID: 161 Comm: kworker/u8:2 Not tainted 4.3.0-rc2+ #1142
       Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
       Workqueue: netns cleanup_net
       task: ffff8800d784a9c0 ti: ffff8800d74a4000 task.ti: ffff8800d74a4000
       RIP: 0010:[<ffffffff817f0797>]  [<ffffffff817f0797>] 
__netdev_adjacent_dev_remove+0x40/0xec
       RSP: 0018:ffff8800d74a7a98  EFLAGS: 00010282
       RAX: 000000000000002a RBX: 0000000000000000 RCX: 0000000000000000
       RDX: ffff88011adcf701 RSI: ffff88011adccbf8 RDI: ffff88011adccbf8
       RBP: ffff8800d74a7ab8 R08: 0000000000000001 R09: 0000000000000000
       R10: ffffffff81d190ff R11: 00000000ffffffff R12: ffff8800d599e7c0
       R13: 0000000000000000 R14: ffff8800d599e890 R15: ffffffff82385e00
       FS:  0000000000000000(0000) GS:ffff88011ac00000(0000) 
knlGS:0000000000000000
       CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
       CR2: 00007ffd6f003000 CR3: 000000000220c000 CR4: 00000000000006e0
       Stack:
        0000000000000000 ffff8800d599e7c0 0000000000000b00 ffff8800d599e8a0
        ffff8800d74a7ad8 ffffffff817f0861 0000000000000000 ffff8800d599e7c0
        ffff8800d74a7af8 ffffffff817f088f 0000000000000000 ffff8800d599e7c0
       Call Trace:
        [<ffffffff817f0861>] __netdev_adjacent_dev_unlink+0x1e/0x35
        [<ffffffff817f088f>] __netdev_adjacent_dev_unlink_neighbour+0x17/0x41
        [<ffffffff817f56e6>] netdev_upper_dev_unlink+0x6c/0x13d
        [<ffffffff81674a3d>] vrf_del_slave+0x26/0x7d
        [<ffffffff81674ac3>] vrf_device_event+0x2f/0x34
        [<ffffffff81098c40>] notifier_call_chain+0x75/0x9c
        [<ffffffff81098fa2>] raw_notifier_call_chain+0x14/0x16
        [<ffffffff817ee129>] call_netdevice_notifiers_info+0x52/0x59
        [<ffffffff817f179d>] call_netdevice_notifiers+0x13/0x15
        [<ffffffff817f6f18>] rollback_registered_many+0x14f/0x24f
        [<ffffffff817f70f2>] unregister_netdevice_many+0x19/0x64
        [<ffffffff819a2455>] ip6gre_exit_net+0x163/0x177
        [<ffffffff817eb019>] ops_exit_list+0x44/0x55
        [<ffffffff817ebcb7>] cleanup_net+0x193/0x226
        [<ffffffff81091e1c>] process_one_work+0x26c/0x4d8
        [<ffffffff81091d20>] ? process_one_work+0x170/0x4d8
        [<ffffffff81092296>] worker_thread+0x1df/0x2c2
        [<ffffffff810920b7>] ? process_scheduled_works+0x2f/0x2f
        [<ffffffff810920b7>] ? process_scheduled_works+0x2f/0x2f
        [<ffffffff81097a20>] kthread+0xd4/0xdc
        [<ffffffff810bc523>] ? trace_hardirqs_on_caller+0x17d/0x199
        [<ffffffff8109794c>] ? __kthread_parkme+0x83/0x83
        [<ffffffff81a5240f>] ret_from_fork+0x3f/0x70
        [<ffffffff8109794c>] ? __kthread_parkme+0x83/0x83

      Fixes: 93a7e7e837af ("net: Remove the now unused vrf_ptr")
      Cc: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 33db4125ec745426c3483d6817d8f7ea5324cd05
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Thu Oct 1 15:00:37 2015 -0700

      openvswitch: Rename LABEL->LABELS

      Conntrack LABELS (plural) are exposed by conntrack; rename the OVS name
      for these to be consistent with conntrack.

      Fixes: c2ac667 "openvswitch: Allow matching on conntrack label"
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9193d60d363e4dff75ff6d43a48f22be26d59c7
  Author: Andrey Vagin <avagin@xxxxxxxxxx>
  Date:   Fri Oct 2 00:05:36 2015 +0300

      net/unix: fix logic about sk_peek_offset

      Now send with MSG_PEEK can return data from multiple SKBs.

      Unfortunately we take into account the peek offset for each skb,
      that is wrong. We need to apply the peek offset only once.

      In addition, the peek offset should be used only if MSG_PEEK is set.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx> (maintainer:NETWORKING
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx> (commit_signer:1/14=7%)
      Cc: Aaron Conole <aconole@xxxxxxxxxx>
      Fixes: 9f389e35674f ("af_unix: return data from multiple SKBs on recv() 
with MSG_PEEK flag")
      Signed-off-by: Andrey Vagin <avagin@xxxxxxxxxx>
      Tested-by: Aaron Conole <aconole@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 215c90afb9ea633026273d81ac9c9ece2b1acd58
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Thu Oct 1 11:37:43 2015 -0700

      act_mirred: always release tcf hash

      Align with other tc actions.

      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6bd00b850635abb0044e06101761533c8beba79c
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Thu Oct 1 11:37:42 2015 -0700

      act_mirred: fix a race condition on mirred_list

      After commit 1ce87720d456 ("net: sched: make cls_u32 lockless")
      we began to release tc actions in a RCU callback. However,
      mirred action relies on RTNL lock to protect the global
      mirred_list, therefore we could have a race condition
      between RCU callback and netdevice event, which caused
      a list corruption as reported by Vinson.

      Instead of relying on RTNL lock, introduce a spinlock to
      protect this list.

      Note, in non-bind case, it is still called with RTNL lock,
      therefore should disable BH too.

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: John Fastabend <john.fastabend@xxxxxxxxx>
      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0316d30ea3e66379cd30ed70a114bc282159bb4c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri May 22 13:41:07 2015 +0200

      iwlwifi: mvm: add minimal multi-RXQ infrastructure

      Since the new multi-queue capability depends on a new firmware API,
      we can already add some code for it. If the new API is present, a
      new opmode ops struct is used that handles the new rx_rss method.

      For now, only restructure the RX handling to distinguish between
      the two. Future patches will convert the new infrastructure to
      actually use the new RX descriptor layout.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit d3f555f493b037eb688adda6d8a682e9b69211ed
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 16 12:21:32 2015 +0200

      iwlwifi: size firmware flags memory correctly

      Instead of relying on a hard-coded constant of a maximum of 64 API and
      capability bits, add a new enum value after the others that will then
      always track the number of used bits in the API/capabilities. We thus
      no longer need to maintain the maximum number, and on 32-bit platforms
      even (currently) reduce the number of bits kept in memory.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit fe96cc73c9f405a0bdc90504048235dfd0384582
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 24 22:19:43 2015 +0200

      iwlwifi: mvm: make threshold temperatures unsigned

      There's no need to have negative threshold temperatures, so make
      them unsigned to avoid signedness warnings in debugfs.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 91fac940896b345d10e503ed7e1f54f85b3b9318
  Author: Moshe Harel <moshe.harel@xxxxxxxxx>
  Date:   Wed Sep 2 12:45:12 2015 +0300

      iwlwifi: nvm: add nvm phy_sku section to debugfs

      The only NVM section not captured in debugfs.

      Signed-off-by: Moshe Harel <moshe.harel@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit e6c21be665cab08325ee1f99e76497b5ffa924a9
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 24 22:15:02 2015 +0200

      iwlwifi: mvm: fix signedness warnings in ToF debugfs

      Using an int* instead of u32* as the kstrtou32() output argument
      obviously results in signedness warnings, change that.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 1191f646bb913feba4239a7ca45e5edb09324869
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Sat Sep 19 23:48:45 2015 +0300

      iwlwifi: mvm: rs: dynamically switch between 80MHz and 20MHz in some 
scenarios

      This is a tweak which has been shown to improve performance when
      moving away from the AP while working in 80Mhz.
      When RS decides to go down to 80MHz SISO MCS0 instead switch to 20MHz 
MCS4.
      Go back to 80MHz MCS1 if RS can sustain 20MHz MCS5.

      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 7c0ebd7870ce212d370a97d3d8ff5129edcc2323
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 22 12:28:42 2015 +0200

      iwlwifi: mvm: minor rx code cleanup

      Clean up variable initialisation slightly.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 5736b7eba362ee304335808325ad60e2249ac670
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 22 10:51:17 2015 +0200

      iwlwifi: remove IWL3165_UCODE_API_OK and _MIN

      As the 3165 device uses the same firmware as 7265-D and currently
      all 7000 series (including 3160/3165) use the same API versions
      remove IWL3165_UCODE_API_OK and _MIN. We might have to put them
      back if firmware support ever splits, but in that case might also
      have to add a different MODULE_FIRMWARE statement.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit ed21a384bbd2b011289dd1b5cab7eebc7ebeda11
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Mon Sep 21 20:03:22 2015 +0300

      iwlwifi: mvm: rs: fix success ratio comparison in rs_get_best_rate

      success_ratio is actually 128 * SR in percentage while
      IWL_MVM_RS_SR_NO_DECREASE is 85%. Fix this by using RS_PERCENT().
      This bug caused the if branch to be always executed. This in turn
      led to always selecting a rate, following a column switch, in which
      the expected throughput would exceed the best expected current throughput.
      In some scenarios where the success ratio isn't >85% such a rate
      could be too aggressive leading us to avoid the new column.
      This has the potential of causing sub optimal performance.

      Reported-by: Moshe Harel <moshe.harel@xxxxxxxxx>
      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 40ce5ed1e9d5c80819733c4fdc40a2b6c531d981
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Sat Sep 19 23:54:38 2015 +0300

      iwlwifi: mvm: rs: minor indentation fix

      Indentation was off a bit. Fix it.

      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit dfa1325a0865da0509f045ddc4c99b8653517f6b
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Sat Sep 19 23:46:32 2015 +0300

      iwlwifi: mvm: rs: remove overflowing debug message

      This message isn't very useful and creates clutter.
      Remove it.

      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit cc60c6e92907d7d1380353b46d7db9826a3622f2
  Author: Eyal Shapira <eyal@xxxxxxxxxx>
  Date:   Sat Sep 19 23:37:45 2015 +0300

      iwlwifi: mvm: rs: improve rate debug messages

      Pretty print the rate full details to ease debugging.

      Signed-off-by: Eyal Shapira <eyalx.shapira@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit ceef91c89480dd18bb3ac51e91280a233d0ca41f
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 4 11:27:25 2015 +0200

      iwlwifi: mvm: stop using DEVICE_POWER_FLAGS_CAM_MSK

      The firmware has always treated these two bits to mean that
      powersave is enabled when POWER_SAVE_ENA is set and CAM is
      clear; it doesn't use them in any non-combined way.

      Therefore, it's pointless to send it two bits, and the API
      should be cleaned up. Prepare the driver by removing the CAM
      bit and using only POWER_SAVE_ENA to indicate whether PS is
      enabled or not.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 5c1156efebc6b76b4a7daec844c19d2ce1d7bb03
  Author: Liad Kaufman <liad.kaufman@xxxxxxxxx>
  Date:   Wed Jul 22 17:59:53 2015 +0300

      iwlwifi: mvm: support enabling a queue with a given ssn

      When enabling a queue, the default SSN is 0.

      Allow determining what that SSN should be, if required. This
      can happen, for example, if a queue gets reconfigured.

      Signed-off-by: Liad Kaufman <liad.kaufman@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 4ecafae9e56802575c3b0c45ecf3dedecd3fd9e3
  Author: Liad Kaufman <liad.kaufman@xxxxxxxxx>
  Date:   Tue Jul 14 13:36:18 2015 +0300

      iwlwifi: mvm: support using multiple ACs on single HW queue

      "DQA" is shorthand for "dynamic queue allocation", with the
      idea of allocating queues per-RA/TID on-demand rather than
      using shared queues statically allocated per vif. The goal
      of this is to enable future features (like GO PM) and to
      improve performance measurements of TX traffic.

      When RA/TID streams can't be neatly sorted into different AC
      queues, DQA allows sharing queues for the same RA. This means
      that DQA allows different ACs may reach the same HW queue.

      Update the code to allow such queue sharing by having a mapping
      between the HW queue and the mac80211 queues using it (as this
      could be more than one queue).

      Signed-off-by: Liad Kaufman <liad.kaufman@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 56882e6cab432508c79b350d7842af3abac9c7d3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri May 22 11:33:12 2015 +0200

      iwlwifi: transport: track number of allocated queues

      As the transport will decide how many queues (and MSI-X vectors)
      to allocate, add a field to indicate that to the op-mode so it
      can size/allocate its own data structures appropriately.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit a190430c5eeaff1b3a0cfc05d3572650b3bd3beb
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri May 22 10:52:26 2015 +0200

      iwlwifi: op-mode API: add rx_rss method

      Upcoming hardware will have the ability to do L3 hashing for RSS,
      directing data packets (and perhaps some associated metadata and
      management notifications) to different MSI-X vectors.

      In this case, it makes no sense to go through the full RX dispatch
      since it's already known that only a subset of the possibilities
      can come in, requiring a new receive method. In addition this must
      know which queue the packet was received on.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 1939089300cb4709dec2b268db649adfdefdb7bc
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 3 14:53:09 2015 +0200

      iwlwifi: mvm: remove PHY RX from handlers

      Treat PHY RX specially, since it's actually pretty frequent,
      doesn't need all the notication etc. code, and will have a
      different handler in future hardware.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 5ac15be8fa5193206f5c47172a63cf83bec91f66
  Author: Assaf Krauss <assaf.krauss@xxxxxxxxx>
  Date:   Wed Sep 16 11:47:14 2015 +0300

      iwlwifi: mvm: Improve debugfs tof robustness

      Return a proper error when wrong parameters are passed to debugfs
      tof_range_request.

      Signed-off-by: Assaf Krauss <assaf.krauss@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 9ef2b8befb5acf499ac60e2a18dfa3e41194ba6e
  Author: Gregory Greenman <gregory.greenman@xxxxxxxxx>
  Date:   Mon Jul 20 07:44:44 2015 +0300

      iwlwifi: mvm: ToF - fill bssid of responder configuration

      The command needs to have the AP interfaces BSSID (which corresponds
      to its address).

      Signed-off-by: Gregory Greenman <gregory.greenman@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 3e0fa50575dbc83e57ceee7c413ff9b4e09a9a80
  Author: Assaf Krauss <assaf.krauss@xxxxxxxxx>
  Date:   Wed Sep 16 11:44:55 2015 +0300

      iwlwifi: mvm: Fix tof debugfs formats (dec vs. hex)

      Make some input formats more natural, e.g. bandwidth and periods
      are more natural in decimal than in hexadecimal.

      Signed-off-by: Assaf Krauss <assaf.krauss@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit fec31ffffa6e05845ab13908d0ac0d5a10816836
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Oct 1 18:25:42 2015 -0700

      i40e: fix offload of GRE tunnels

      The driver still was not offloading TSO on GRE tunnels because
      it forgot to set the GSO_GRE flag, causing lots of retransmits.

      This fixes generic GRE traffic (like a tunnel added like below)
      whereas before it would get 1Gb/s or less, now on a 10G adapter
      it gets 8.7Gb/s.

      ip ad ad 11.1.0.2/24 dev ens2f0
      ip l set ens2f0 up
      ip link add gre2 type gretap remote 11.1.0.1 local 11.1.0.2 dev ens2f0
      ip l set gre2 up
      ip ad ad 192.168.124.2/24 dev gre2
      ping 192.168.124.1
      netperf -H 192.168.124.1

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d2dd52bf3f6dc5fa2587e79f0a46ade3d5951ddd
  Merge: 181a422 76d164f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 04:29:06 2015 -0700

      Merge tag 'wireless-drivers-for-davem-2015-10-01' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers

      Kalle Valo says:

      ====================
      pull-request: wireless-drivers 2015-10-01

      ath9k:

      * declare required extra tx headroom

      ath10k:

      * fix DMA related firmware crashes on multiple devices

      rt2800usb:

      * add usb ID 1b75:3070 for Airlive WT-2000USB

      b43:

      * probe bcma core (device) rev 0x15
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 78856ac0dd33036ae08a18b644e9fa40b30ee011
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Mon Oct 5 13:07:47 2015 +0200

      Revert "gpio-sysfs: Use gpio descriptor name instead of gpiochip names 
array"

      This reverts commit ddd5404007b8496f20ad2efe1147e102e6226634.

      We need to preserve only using this naming strategy for names
      coming from chip->names[], the descripor->name field is for the
      new interface.

  commit 181a4224acdfb993a21f987f8617b5c8d7bc654e
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Oct 1 16:25:43 2015 +0200

      ipv4: fix reply_dst leakage on arp reply

      There are cases when the created metadata reply is not used. Ensure the
      allocated memory is freed also in such cases.

      Fixes: 63d008a4e9ee ("ipv4: send arp replies to the correct tunnel")
      Reported-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dbf73d4a8bb8f4e1d1f3edd3be825692279e2ef3
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Wed Sep 30 12:26:23 2015 +0200

      iwlwifi: mvm: flush fw_dump_wk when mvm fails to start

      FW dump may be triggered when running init ucode, for example due to a
      sysassert. In this case fw_dump_wk may run after mvm is freed, resulting
      in a kernel panic.
      Fix it by flushing the work.

      Fixes: 01b988a708af ("iwlwifi: mvm: allow to collect debug data when 
restart is disabled")
      Cc: <stable@xxxxxxxxxxxxxxx> [3.18+]
      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 2306c704ce280c97a60d1f45333b822b40281dea
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 1 05:39:26 2015 -0700

      inet: fix race in reqsk_queue_unlink()

      reqsk_timer_handler() tests if icsk_accept_queue.listen_opt
      is NULL at its beginning.

      By the time it calls inet_csk_reqsk_queue_drop() and
      reqsk_queue_unlink(), listener might have been closed and
      inet_csk_listen_stop() had called reqsk_queue_yank_acceptq()
      which sets icsk_accept_queue.listen_opt to NULL

      We therefore need to correctly check listen_opt being NULL
      after holding syn_wait_lock for proper synchronization.

      Fixes: fa76ce7328b2 ("inet: get rid of central tcp/dccp listener timer")
      Fixes: b357a364c57c ("inet: fix possible panic in reqsk_queue_unlink()")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8695a144da9e500a5a60fa34c06694346ec1048f
  Author: Raanan Avargil <raanan.avargil@xxxxxxxxx>
  Date:   Thu Oct 1 04:48:53 2015 -0700

      tcp/dccp: fix old style declarations

      Iâ??m using the compilation flag -Werror=old-style-declaration, which
      requires that the â??inlineâ?? word would come at the beginning of the 
code
      line.

      $ make drivers/net/ethernet/intel/e1000e/e1000e.ko
      ...
      include/net/inet_timewait_sock.h:116:1: error: â??inlineâ?? is not at
      beginning of declaration [-Werror=old-style-declaration]
      static void inline inet_twsk_schedule(struct inet_timewait_sock *tw, int
      timeo)

      include/net/inet_timewait_sock.h:121:1: error: â??inlineâ?? is not at
      beginning of declaration [-Werror=old-style-declaration]
      static void inline inet_twsk_reschedule(struct inet_timewait_sock *tw,
      int timeo)

      Fixes: ed2e92394589 ("tcp/dccp: fix timewait races in timer handling")
      Signed-off-by: Raanan Avargil <raanan.avargil@xxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9886ce2b9d4e5a8bb3d78d0f7eff3c0f1ed58d67
  Author: kbuild test robot <lkp@xxxxxxxxx>
  Date:   Thu Oct 1 20:26:20 2015 +0800

      net: encx24j600_exit() can be static

      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04fbfce7a222327b97ca165294ef19f0faa45960
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 07:43:21 2015 -0400

      net: Microchip encx24j600 driver

      This ethernet driver supports the Micorchip enc424j600/626j600 Ethernet
      controller over a SPI bus interface. This driver makes use of the regmap 
API to
      optimize access to registers by caching registers where possible.

      Datasheet:
      http://ww1.microchip.com/downloads/en/DeviceDoc/39935b.pdf

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7741c373cf3ea1f5383fa97fb7a640a429d3dd7c
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 07:43:20 2015 -0400

      regmap: Allow installing custom reg_update_bits function

      This commit allows installing a custom reg_update_bits function for cases 
where
      the hardware provides a mechanism to set or clear register bits without a
      read/modify/write cycle. Such is the case with the Microchip ENCX24J600.

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1a3fe0b2b6778b7866e2b3f5c9a299d5e9bbd89c
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Wed Sep 30 11:19:55 2015 +0300

      iwlwifi: mvm: init card correctly on ctkill exit check

      During the CT-kill exit flow, the card is powered up and partially
      initialized to check if the temperature is already low enough.
      Unfortunately the init bails early because the CT-kill flag is set.
      Make the code bail early only for HW RF-kill, as was intended by the
      author. CT-kill is self-imposed and is not really RF-kill.

      Fixes: 31b8b343e019 ("iwlwifi: fix RFkill while calibrating")
      Cc: <stable@xxxxxxxxxxxxxxx> [3.18+]
      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit f08f625876476b6c4a87834dc86e3b927f4697d2
  Author: Luca Coelho <luciano.coelho@xxxxxxxxx>
  Date:   Tue Sep 22 09:44:39 2015 +0300

      iwlwifi: pci: add a few more PCI subvendor IDs for the 7265 series

      Add 3 new subdevice IDs for the 0x095A device ID and 2 for the 0x095B
      device ID.

      Cc: <stable@xxxxxxxxxxxxxxxx> [3.13+]
      Reported-by: Jeremy <jeremy.bomkamp@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit b5a48134f8af08f5243328f8a0b05fc5ae7cf343
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 22 10:47:27 2015 +0200

      iwlwifi: fix firmware filename for 3160

      The MODULE_FIRMWARE() for 3160 should be using the 7260 version as
      it's done in the device configuration struct instead of referencing
      IWL3160_UCODE_API_OK which doesn't even exist.

      Cc: <stable@xxxxxxxxxxxxxxx> [3.8+]
      Reported-by: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit e9cb0327b26dd7ba43a3b7a05b4b62219decf42d
  Author: Avraham Stern <avraham.stern@xxxxxxxxx>
  Date:   Mon Aug 31 11:08:27 2015 +0300

      iwlwifi: mvm: clear csa countdown when AP is stopped

      The csa_countdown flag was not cleared when the AP is stopped.
      As a result, if the AP was stopped after csa_countdown had started,
      all the folowing channel switch commands would fail.
      Fix that by clearing the csa_countdown flag when the AP is stopped.

      Cc: <stable@xxxxxxxxxxxxxxx> [3.17+]
      Signed-off-by: Avraham Stern <avraham.stern@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 937317c7c1097aa878a5000e3aab616eb5c590c0
  Author: Govindarajulu Varadarajan <_govind@xxxxxxx>
  Date:   Thu Oct 1 14:18:47 2015 +0530

      enic: do hang reset only in case of tx timeout

      The current code invokes hang reset in case of error interrupt. We should
      hang reset only in case of tx timeout. This because of the way hang reset
      is implemented in firmware. Hang reset takes more firmware resources than
      soft reset. Adaptor does not generate error interrupt in case of tx
      timeout.

      Hang reset only in case of tx timeout, in .ndo_tx_timeout. Do soft reset
      otherwise. Introduce deferred work, enic_tx_hang_reset, to do hang reset.

      Signed-off-by: Govindarajulu Varadarajan <_govind@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc809237e1f215141165f221ad729803d88bcbbe
  Author: Govindarajulu Varadarajan <_govind@xxxxxxx>
  Date:   Thu Oct 1 14:18:46 2015 +0530

      enic: handle spurious error interrupt

      Some of the enic adaptors are know to generate spurious interrupts. When
      error interrupt is generated, driver just resets the device. This patch
      resets the device only when an error is occurred.

      Signed-off-by: Govindarajulu Varadarajan <_govind@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2cf5eb3ab7bb7f2e3a70edcef236cd62c87db030
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 15 14:36:09 2015 +0200

      iwlwifi: mvm: fix D3 firmware PN programming

      The code to send the RX PN data (for each TID) to the firmware
      has a devastating bug: it overwrites the data for TID 0 with
      all the TID data, leaving the remaining TIDs zeroed. This will
      allow replays to actually be accepted by the firmware, which
      could allow waking up the system.

      Cc: <stable@xxxxxxxxxxxxxxx> [3.1+]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 5bd166872d8f99f156fac191299d24f828bb2348
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 15 14:36:09 2015 +0200

      iwlwifi: dvm: fix D3 firmware PN programming

      The code to send the RX PN data (for each TID) to the firmware
      has a devastating bug: it overwrites the data for TID 0 with
      all the TID data, leaving the remaining TIDs zeroed. This will
      allow replays to actually be accepted by the firmware, which
      could allow waking up the system.

      Cc: <stable@xxxxxxxxxxxxxxx> [3.1+]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 2905f5bb1cad66a37d142c4370d23d9e9632368e
  Merge: 40e1068 8541225
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:48:45 2015 -0700

      Merge branch 'cxgb4-next'

      Hariprasad Shenai says:

      ====================
      cxgb4: Trivial fixes for cxgb4

      Fixes the following issues
      Don't read non existent T4/T5/T6 adapter registers for ethtool dump.
      For T4, dont read mailbox control registers. Adds new devlog faility and
      report correct link speed for unsupported ones.

      This patch series has been created against net-next tree and includes
      patches on cxgb4 driver.

      We have included all the maintainers of respective drivers. Kindly review
      the change and let us know in case of any review comments.
      ====================

      Acked-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 85412255ef4fcccf52e0408d61cf8a75828a6800
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 1 13:48:48 2015 +0530

      cxgb4: Report correct link speed for unsupported ones

      When we get garbage from the firmware with weird Port Speeds,
      etc. we should emit a warning regarding unsupported speeds rather than
      use the bogus default of "10Mbps" which isn't even an option in the
      firmware Port Information message

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit da4976e17bff3bb7538090c36750b9875da67b5e
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 1 13:48:47 2015 +0530

      cxgb4: Adds a new Device Log Facility FW_DEVLOG_FACILITY_CF

      The firmware team added a new Device Log Facility FW_DEVLOG_FACILITY_CF,
      but the driver has been decoding Device Log messages with that Facility as
      "(NULL)", fixing it.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b3695540ba5d8cf032f30533d53786b31af271f5
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 1 13:48:46 2015 +0530

      cxgb4: For T4, don't read the Firmware Mailbox Control register

      T4 doesn't have the Shadow copy of the register which we can read without
      side effect. So don't read mbox control register for T4 adapter

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8119c018000bcc2d56e74f5459b7ff1902f96ff8
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Thu Oct 1 13:48:45 2015 +0530

      cxgb4 : Update T4/T5/T6 register ranges

      Update T4/T5/T6 adapter register ranges so that it doesn't read non
      existent registers when dumped using ethtool

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6645d5e441db9121793421d477255f4242b3dbf3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 15 09:58:53 2015 +0200

      iwlwifi: mvm: fix D3 CCMP TX PN assignment

      When going into/coming out of D3, the TX PN must be programmed into
      and restored from the firmware respectively. The restore was broken
      due to my previous commit to move PN assignment into the driver.
      Sending the PN to the firmware still worked since we now use the
      counter that's shared with mac80211, but accessing it through the
      mac80211 API makes no sense now.

      Fix this by reading/writing the counter directly. This actually
      simplifies the code since we don't need to round-trip through the
      key_seq structure.

      Fixes: ca8c0f4bede6 ("iwlwifi: mvm: move TX PN assignment for CCMP to the 
driver")
      Cc: <stable@xxxxxxxxxxxxxxx> [4.1+]
      Reported-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 33a8316d9cda4368e7cb477fff36c9ee35d4164e
  Author: Vladimir Zapolskiy <vz@xxxxxxxxx>
  Date:   Thu Oct 1 00:37:43 2015 +0300

      net: lpc_eth: fix warnings caused by enabling unprepared clock

      If common clock framework is configured, the driver generates warnings,
      which are fixed by this change:

          WARNING: CPU: 0 PID: 1 at linux/drivers/clk/clk.c:727 
clk_core_enable+0x2c/0xa4()
          Modules linked in:
          CPU: 0 PID: 1 Comm: swapper Not tainted 4.3.0-rc2+ #141
          Hardware name: LPC32XX SoC (Flattened Device Tree)
          Backtrace:
          [<>] (dump_backtrace) from [<>] (show_stack+0x18/0x1c)
          [<>] (show_stack) from [<>] (dump_stack+0x20/0x28)
          [<>] (dump_stack) from [<>] (warn_slowpath_common+0x90/0xb8)
          [<>] (warn_slowpath_common) from [<>] (warn_slowpath_null+0x24/0x2c)
          [<>] (warn_slowpath_null) from [<>] (clk_core_enable+0x2c/0xa4)
          [<>] (clk_core_enable) from [<>] (clk_enable+0x24/0x38)
          [<>] (clk_enable) from [<>] (lpc_eth_drv_probe+0xfc/0x99c)
          [<>] (lpc_eth_drv_probe) from [<>] (platform_drv_probe+0x50/0xa0)
          [<>] (platform_drv_probe) from [<>] (driver_probe_device+0x18c/0x408)
          [<>] (driver_probe_device) from [<>] (__driver_attach+0x70/0x94)
          [<>] (__driver_attach) from [<>] (bus_for_each_dev+0x74/0x98)
          [<>] (bus_for_each_dev) from [<>] (driver_attach+0x20/0x28)
          [<>] (driver_attach) from [<>] (bus_add_driver+0x11c/0x248)
          [<>] (bus_add_driver) from [<>] (driver_register+0xa4/0xe8)
          [<>] (driver_register) from [<>] 
(__platform_driver_register+0x50/0x64)
          [<>] (__platform_driver_register) from [<>] 
(lpc_eth_driver_init+0x18/0x20)
          [<>] (lpc_eth_driver_init) from [<>] (do_one_initcall+0x11c/0x1dc)
          [<>] (do_one_initcall) from [<>] (kernel_init_freeable+0x10c/0x1d4)
          [<>] (kernel_init_freeable) from [<>] (kernel_init+0x10/0xec)
          [<>] (kernel_init) from [<>] (ret_from_fork+0x14/0x24)

      Signed-off-by: Vladimir Zapolskiy <vz@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 40e106801e3b6629ec8026ab80985902d180502e
  Merge: 7e2832f b1842ff
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:39:31 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/net-next

      Eric W. Biederman says:

      ====================
      net: Pass net through ip fragmention

      This is the next installment of my work to pass struct net through the
      output path so the code does not need to guess how to figure out which
      network namespace it is in, and ultimately routes can have output
      devices in another network namespace.

      This round focuses on passing net through ip fragmentation which we seem
      to call from about everywhere.  That is the main ip output paths, the
      bridge netfilter code, and openvswitch.  This has to happend at once
      accross the tree as function pointers are involved.

      First some prep work is done, then ipv4 and ipv6 are converted and then
      temporary helper functions are removed.
      ====================

      Acked-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7e2832f17f9bec41643d420d55efd96b09d1fb45
  Merge: 393159e 76b29ef
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:34:59 2015 -0700

      Merge branch 'rds-perf'

      Sowmini Varadhan says:

      ====================
      RDS: RDS-TCP perf enhancements

      A 3-part patchset that (a) improves current RDS-TCP perf
      by 2X-3X and (b) refactors earlier robustness code for
      better observability/scaling.

      Patch 1 is an enhancment of earlier robustness fixes
      that had used separate sockets for client and server endpoints to
      resolve race conditions. It is possible to have an equivalent
      solution that does not use 2 sockets. The benefit of a
      single socket solution is that it results in more predictable
      and observable behavior for the underlying TCP pipe of an
      RDS connection

      Patches 2 and 3 are simple, straightforward perf bug fixes
      that align the RDS TCP socket with other parts of the kernel stack.

      v2: fix kbuild-test-robot warnings, comments from  Sergei Shtylov
          and Santosh Shilimkar.
      ====================

      Acked-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76b29ef120f5b845f862de08b92c7d2317b50907
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Wed Sep 30 16:54:09 2015 -0400

      RDS-TCP: Set up MSG_MORE and MSG_SENDPAGE_NOTLAST as appropriate in 
rds_tcp_xmit

      For the same reasons as commit 2f5338442425 ("tcp: allow splice() to
      build full TSO packets") and commit 35f9c09fe9c7 ("tcp: tcp_sendpages()
      should call tcp_push() once"), rds_tcp_xmit may have multiple pages to
      send, so use the MSG_MORE and MSG_SENDPAGE_NOTLAST as hints to
      tcp_sendpage()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1edd6a14d24f21b8b478970c63a243a08e2b55b0
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Wed Sep 30 16:54:08 2015 -0400

      RDS-TCP: Do not bloat sndbuf/rcvbuf in rds_tcp_tune

      Using the value of RDS_TCP_DEFAULT_BUFSIZE (128K)
      clobbers efficient use of TSO because it inflates the size_goal
      that is computed in tcp_sendmsg/tcp_sendpage and skews packet
      latency, and the default values for these parameters actually
      results in significantly better performance.

      In request-response tests using rds-stress with a packet size of
      100K with 16 threads (test parameters -q 100000 -a 256 -t16 -d16)
      between a single pair of IP addresses achieves a throughput of
      6-8 Gbps. Without this patch, throughput maxes at 2-3 Gbps under
      equivalent conditions on these platforms.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3b20fc389705a4c959adebc494578cb99bb8be9e
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Wed Sep 30 16:54:07 2015 -0400

      RDS: Use a single TCP socket for both send and receive.

      Commit f711a6ae062c ("net/rds: RDS-TCP: Always create a new rds_sock
      for an incoming connection.") modified rds-tcp so that an incoming SYN
      would ignore an existing "client" TCP connection which had the local
      port set to the transient port.  The motivation for ignoring the existing
      "client" connection in f711a6ae was to avoid race conditions and an
      endless duel of reconnect attempts triggered by a restart/abort of one
      of the nodes in the TCP connection.

      However, having separate sockets for active and passive sides
      is avoidable, and the simpler model of a single TCP socket for
      both send and receives of all RDS connections associated with
      that tcp socket makes for easier observability. We avoid the race
      conditions from f711a6ae by attempting reconnects in rds_conn_shutdown
      if, and only if, the (new) c_outgoing bit is set for RDS_TRANS_TCP.
      The c_outgoing bit is initialized in __rds_conn_create().

      A side-effect of re-using the client rds_connection for an incoming
      SYN is the potential of encountering duelling SYNs, i.e., we
      have an outgoing RDS_CONN_CONNECTING socket when we get the incoming
      SYN. The logic to arbitrate this criss-crossing SYN exchange in
      rds_tcp_accept_one() has been modified to emulate the BGP state
      machine: the smaller IP address should back off from the connection 
attempt.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6194bcf03e40bc6b6094f11289d87b605fb326d
  Author: David B. Robins <linux@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:20:04 2015 -0400

      net: usb: asix: Fix crash on skb alloc failure

      If asix_rx_fixup_internal() fails to allocate rx->ax_skb, it will return
      but not clear rx->size. rx points to driver private data. A later call
      assumes that nonzero size means ax_skb was allocated and passes a null
      ax_skb to skb_put. Changed allocation failure return to clear size first.

      Found testing board with AX88772B devices.

      Signed-off-by: David B. Robins <linux@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 393159e917242c39a5c07173914a0e2a2367ee69
  Merge: ac8cfc7 5078984
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:23:40 2015 -0700

      Merge branch 'xgbe-next'

      Tom Lendacky says:

      ====================
      amd-xgbe: AMD XGBE driver updates 2015-09-30

      The following patches are included in this driver update series:

      - Remove unneeded semi-colon
      - Follow the DT/ACPI precedence used by the device_ APIs
      - Add ethtool support for getting and setting the msglevel
      - Add ethtool support error and debug messages
      - Simplify the hardware FIFO assignment calculations
      - Add receive buffer unavailable statistic
      - Use the device workqueue instead of the system workqueue
      - Remove the use of a link state bit

      This patch series is based on net-next.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 50789845cfc37d5331b56e1a566ddc95aeac0a7d
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:53:22 2015 -0500

      amd-xgbe: Remove the XGBE_LINK state bit

      The XGBE_LINK bit is used just to determine whether to call the
      netif_carrier_on/off functions. Rather than define and use this bit,
      just call the functions. The netif_carrier_ok function can be used in
      place of checking the XGBE_LINK bit in the future.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit afb43e8a0af18fa959e9ef09abfa969c3c83f4ef
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:53:16 2015 -0500

      amd-xgbe: Use device workqueue instead of system workqueue

      The driver creates, flushes and destroys a device workqueue but queues
      work to the system workqueue. Switch from using the system workqueue to
      the device workqueue.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 72c9ac4e1f4faf1f4e7252319ab8af2517891ae5
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:53:10 2015 -0500

      amd-xgbe: Add receive buffer unavailable statistic

      Add a statistic that tracks how many times an interrupt is generated for
      a receive buffer not being available to the hardware which prevents the
      hardware from being able to DMA the received data.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9c439e4b730f0d519821527afd697e6af99a67ab
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:53:03 2015 -0500

      amd-xgbe: Simplify calculation and setting of queue fifos

      The calculation of the Tx and Rx fifo sizes can be calculated rather
      than hardcoded in a switch statement. Additionally, the per-queue fifo
      sizes can be calculated rather than hardcoded using if/else if statements
      that can possibly underutilize the available fifo area.

      Change the code to calculate the fifo sizes and the per-queue fifo sizes
      to simplify the code and make best use of the available fifo.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e5dd8b81107881f8928378a38f6e47aa2da62c37
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:52:57 2015 -0500

      amd-xgbe: Add ethtool error and debug messages

      Add error and dynamic debug messages to various ethtool functions in
      the driver while also removing the DBGPR debug print calls. Also, change
      the message level for some error messages from alert to err.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 349fb2d7008caa752919e394fb202545b5f72c67
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:52:51 2015 -0500

      amd-xgbe: Add ethtool support for setting the msglevel

      Provide the ethtool functions to support getting and setting the
      msglevel for the driver.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 47f2e6c27553d9a164bb0067f4c1f9bbba388c2e
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:52:45 2015 -0500

      amd-xgbe: Use proper DT / ACPI precedence checking

      Device tree presence takes precedence over ACPI in the device_* APIs.
      The amd-xgbe driver should follow the same precedence. Update the check
      on whether to use DT / ACPI to follow this.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3947d78a547845fa5a129a39ce0abac2352f7a3a
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Sep 30 08:52:38 2015 -0500

      amd-xgbe: Remove an unneeded semicolon on a switch statement

      Remove an unneeded semicolon at the end of a switch statement block.

      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac8cfc7bb836835bd68c3ab9da242747e9df9542
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Sep 30 06:18:23 2015 -0700

      tcp: restore fastopen operations

      I accidentally cleared fastopenq.max_qlen in reqsk_queue_alloc()
      while max_qlen can be set before listen() is called,
      using TCP_FASTOPEN socket option for example.

      Fixes: 0536fcc039a8 ("tcp: prepare fastopen code for upcoming listener 
changes")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77946de51bd165d55306a47410dd6757d93bc394
  Merge: 0735573 3ef0a25
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:16:49 2015 -0700

      Merge branch 'net-y2038'

      Arnd Bergmann says:

      ====================
      net: assorted y2038 changes

      This is a set of changes for network drivers and core code to
      get rid of the use of time_t and derived data structures.

      I have a longer set of patches that enables me to build kernels
      with the time_t definition removed completely as a help to find
      y2038 overflow issues. This is the subset for networking that
      contains all code that has a reasonable way of fixing at the
      moment and that is either commonly used (in one of the defconfigs)
      or that blocks building a whole subsystem.

      Most of the patches in this series should be noncontroversial,
      but the last two that I marked [RFC] are a bit tricky and
      need input from people that are more familiar with the code than
      I am. All 12 patches are independent of one another and can
      be applied in any order, so feel free to pick all that look
      good.

      Patches that are not included here are:

       - disabling less common device drivers that I don't have a fix
         for yet, this includes
        drivers/net/ethernet/brocade/bna/bfa_ioc.c
        drivers/net/ethernet/qlogic/netxen/netxen_nic_hw.c
        drivers/net/ethernet/tile/tilegx.c
        drivers/net/hamradio/baycom_ser_fdx.c
        drivers/net/wireless/ath/ath10k/core.h
        drivers/net/wireless/ath/ath9k/
        drivers/net/wireless/ath/ath9k/
        drivers/net/wireless/atmel.c
        drivers/net/wireless/prism54/isl_38xx.c
        drivers/net/wireless/rt2x00/rt2x00debug.c
        drivers/net/wireless/rtlwifi/
        drivers/net/wireless/ti/wlcore/
        drivers/staging/ozwpan/
        net/atm/mpoa_caches.c
        net/atm/mpoa_proc.c
        net/dccp/probe.c
        net/ipv4/tcp_probe.c
        net/netfilter/nfnetlink_queue_core.c
        net/netfilter/nfnetlink_queue_core.c
        net/netfilter/xt_time.c
        net/openvswitch/flow.c
        net/sctp/probe.c
        net/sunrpc/auth_gss/
        net/sunrpc/svcauth_unix.c
        net/vmw_vsock/af_vsock.c
         We'll get there eventually, or we an add a dependency to ensure
         they are not built on 32-bit kernels that need to survive
         beyond 2038. Most of these should be really easy to fix.

       - recvmmsg/sendmmsg system calls: patches have been sent out
         as part of the syscall series, need a little more work and
         review

       - SIOCGSTAMP/SIOCGSTAMPNS/ ioctl calls: tricky, need to discuss
         with some folks at kernel summit

       - SO_RCVTIMEO/SO_SNDTIMEO/SO_TIMESTAMP/SO_TIMESTAMPNS socket
         opt: similar and related to the ioctl

       - mmapped packet socket: need to create v4 of the API, nontrivial

       - pktgen: sends 32-bit timestamps over network, need to find out
         if using unsigned stamps is good enough

       - af_rxpc: similar to pktgen, uses 32-bit times for deadlines

       - ppp ioctl: patch is being worked on, nontrivial but doable
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ef0a25bf9ef318615c810e24d244d55c09806d7
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:40 2015 +0200

      net: sctp: avoid incorrect time_t use

      We want to avoid using time_t in the kernel because of the y2038
      overflow problem. The use in sctp is not for storing seconds at
      all, but instead uses microseconds and is passed as 32-bit
      on all machines.

      This patch changes the type to u32, which better fits the use.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Neil Horman <nhorman@xxxxxxxxxxxxx>
      Cc: linux-sctp@xxxxxxxxxxxxxxx
      Acked-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3dd7669f1f13772d0a846dee58379399f163729c
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:39 2015 +0200

      ipv6: use ktime_t for internal timestamps

      The ipv6 mip6 implementation is one of only a few users of the
      skb_get_timestamp() function in the kernel, which is both unsafe
      on 32-bit architectures because of the 2038 overflow, and slightly
      less efficient than the skb_get_ktime() based approach.

      This converts the function call and the mip6_report_rate_limiter
      structure that stores the time stamp, eliminating all uses of
      timeval in the ipv6 code.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Alexey Kuznetsov <kuznet@xxxxxxxxxxxxx>
      Cc: James Morris <jmorris@xxxxxxxxx>
      Cc: Hideaki YOSHIFUJI <yoshfuji@xxxxxxxxxxxxxx>
      Cc: Patrick McHardy <kaber@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6389ecbc5f3ddc5860aab22bd7f7e1a8aeb3165
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:38 2015 +0200

      nfnetlink: use y2038 safe timestamp

      The __build_packet_message function fills a nfulnl_msg_packet_timestamp
      structure that uses 64-bit seconds and is therefore y2038 safe, but
      it uses an intermediate 'struct timespec' which is not.

      This trivially changes the code to use 'struct timespec64' instead,
      to correct the result on 32-bit architectures.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Cc: Patrick McHardy <kaber@xxxxxxxxx>
      Cc: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
      Cc: netfilter-devel@xxxxxxxxxxxxxxx
      Cc: coreteam@xxxxxxxxxxxxx
      Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70ba07b675b53782ad366ebc4d3a00eab9a06bc9
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 17:32:01 2015 +0200

      atm: remove 'struct zatm_t_hist'

      The zatm_t_hist structure is not used anywhere in the kernel, but is
      exported to user space. As we are trying to eliminate uses of time_t
      in the kernel for y2038 compatibility, the current definition triggers
      checking tools because it contains 'struct timeval'.

      As pointed out by Chas Williams, the only user of this structure was
      the ZATM_GETHIST ioctl command that has been removed a long time ago,
      and we can remove the structure as well without breaking any user
      space.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Chas Williams <3chas3@xxxxxxxxx>
      Cc: linux-atm-general@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 84b00607aeb8f139a11c93036e1c0ee03dde5634
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:36 2015 +0200

      mac80211: use ktime_get_seconds

      The mac80211 code uses ktime_get_ts to measure the connected time.
      As this uses monotonic time, it is y2038 safe on 32-bit systems,
      but we still want to deprecate the use of 'timespec' because most
      other users are broken.

      This changes the code to use ktime_get_seconds() instead, which
      avoids the timespec structure and is slightly more efficient.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
      Cc: linux-wireless@xxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52f4f91893955c359885d022b2142e2326f020a1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:35 2015 +0200

      mwifiex: avoid gettimeofday in ba_threshold setting

      mwifiex_get_random_ba_threshold() uses a complex homegrown implementation
      to generate a pseudo-random number from the current time as returned
      from do_gettimeofday().

      This currently requires two 32-bit divisions plus a couple of other
      computations that are eventually discarded as only eight bits of
      the microsecond portion are used at all.

      We could replace this with a call to get_random_bytes(), but that
      might drain the entropy pool too fast if this is called for each
      packet.

      Instead, this patch converts it to use ktime_get_ns(), which is a
      bit faster than do_gettimeofday(), and then uses a similar algorithm
      as before, but in a way that takes both the nanosecond and second
      portion into account for slightly-more-but-still-not-very-random
      pseudorandom number.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Cc: Nishant Sarmukadam <nishants@xxxxxxxxxxx>
      Cc: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
      Cc: linux-wireless@xxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e253fb74d66428597bd272b2614e8564b882b14c
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:34 2015 +0200

      mwifiex: use ktime_get_real for timestamping

      The mwifiex_11n_aggregate_pkt() function creates a ktime_t from
      a timeval returned by do_gettimeofday, which is slow and causes
      an overflow in 2038 on 32-bit architectures.

      This solves both problems by using the appropriate ktime_get_real()
      function.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Cc: Nishant Sarmukadam <nishants@xxxxxxxxxxx>
      Cc: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
      Cc: linux-wireless@xxxxxxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 40c9b0796d46523fffb93e46ed8c691456146743
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:33 2015 +0200

      net: igb: avoid using timespec

      We want to deprecate the use of 'struct timespec' on 32-bit
      architectures, as it is will overflow in 2038. The igb
      driver uses it to read the current time, and can simply
      be changed to use ktime_get_real_ts64() instead.

      Because of hardware limitations, there is still an overflow
      in year 2106, which we cannot really avoid, but this documents
      the overflow.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Cc: intel-wired-lan@xxxxxxxxxxxxxxxx
      Reviewed-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a6241551d20e982dba8fc6c88b0a021456ea7b4
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:32 2015 +0200

      net: stmmac: avoid using timespec

      We want to deprecate the use of 'struct timespec' on 32-bit
      architectures, as it is will overflow in 2038. The stmmac
      driver uses it to read the current time, and can simply
      be changed to use ktime_get_real_ts64() instead.

      Because of hardware limitations, there is still an overflow
      in year 2106, which we cannot really avoid, but this documents
      the overflow.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Giuseppe Cavallaro <peppe.cavallaro@xxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit be7ccdc36ba4815ca71b0ac6df898237a912b3ac
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Sep 30 13:26:31 2015 +0200

      net: fec: avoid timespec use

      The fec_ptp_enable_pps uses an open-coded implementation of 
ns_to_timespec,
      which will be removed eventually as it is not y2038-safe on 32-bit
      architectures. Two more instances of the same code in this file were
      already converted to use the safe ns_to_timespec64 in commit 6630514fcee
      ("ptp: fec: use helpers for converting ns to timespec"), this changes
      the last one as well.

      The seconds portion here is actually unused and we could just remove the
      timespec variable, but using ns_to_timespec64 can still be better as the
      implementation can be hand-optimized in the future.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Cc: Fugang Duan <b38611@xxxxxxxxxxxxx>
      Cc: Luwei Zhou <b45643@xxxxxxxxxxxxx>
      Cc: Frank Li <Frank.Li@xxxxxxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74910ea49dd7878ff8b1847ef3a370ba64110bcc
  Merge: 9dc80a7 7253054
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:07:02 2015 -0700

      Merge tag 'linux-can-fixes-for-4.3-20150930' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can

      Marc Kleine-Budde says:

      ====================
      pull-request: can 2015-09-30

      this is a pull request of a single patch for 4.3.

      The patch is by Stephane Grosjean and add support for the peak OEM PCI 
card to
      the peak_pci driver by adding its device ID.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9dc80a74313d2741e053a650942818a86f234fc9
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Wed Sep 30 03:48:50 2015 -0700

      amd-xgbe: fix potential memory leak in xgbe-debugfs

      Added kfree() to avoid the memory leak when debugfs_create_dir() fails.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Acked-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e6740165b8f7f06d8caee0fceab3fb9d790a6fed
  Author: Guillaume Nault <g.nault@xxxxxxxxxxxx>
  Date:   Wed Sep 30 11:45:33 2015 +0200

      ppp: don't override sk->sk_state in pppoe_flush_dev()

      Since commit 2b018d57ff18 ("pppoe: drop PPPOX_ZOMBIEs in pppoe_release"),
      pppoe_release() calls dev_put(po->pppoe_dev) if sk is in the
      PPPOX_ZOMBIE state. But pppoe_flush_dev() can set sk->sk_state to
      PPPOX_ZOMBIE _and_ reset po->pppoe_dev to NULL. This leads to the
      following oops:

      [  570.140800] BUG: unable to handle kernel NULL pointer dereference at 
00000000000004e0
      [  570.142931] IP: [<ffffffffa018c701>] pppoe_release+0x50/0x101 [pppoe]
      [  570.144601] PGD 3d119067 PUD 3dbc1067 PMD 0
      [  570.144601] Oops: 0000 [#1] SMP
      [  570.144601] Modules linked in: l2tp_ppp l2tp_netlink l2tp_core 
ip6_udp_tunnel udp_tunnel pppoe pppox ppp_generic slhc loop crc32c_intel 
ghash_clmulni_intel jitterentropy_rng sha256_generic hmac drbg ansi_cprng 
aesni_intel aes_x86_64 ablk_helper cryptd lrw gf128mul glue_helper acpi_cpufreq 
evdev serio_raw processor button ext4 crc16 mbcache jbd2 virtio_net virtio_blk 
virtio_pci virtio_ring virtio
      [  570.144601] CPU: 1 PID: 15738 Comm: ppp-apitest Not tainted 4.2.0 #1
      [  570.144601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), 
BIOS Debian-1.8.2-1 04/01/2014
      [  570.144601] task: ffff88003d30d600 ti: ffff880036b60000 task.ti: 
ffff880036b60000
      [  570.144601] RIP: 0010:[<ffffffffa018c701>]  [<ffffffffa018c701>] 
pppoe_release+0x50/0x101 [pppoe]
      [  570.144601] RSP: 0018:ffff880036b63e08  EFLAGS: 00010202
      [  570.144601] RAX: 0000000000000000 RBX: ffff880034340000 RCX: 
0000000000000206
      [  570.144601] RDX: 0000000000000006 RSI: ffff88003d30dd20 RDI: 
ffff88003d30dd20
      [  570.144601] RBP: ffff880036b63e28 R08: 0000000000000001 R09: 
0000000000000000
      [  570.144601] R10: 00007ffee9b50420 R11: ffff880034340078 R12: 
ffff8800387ec780
      [  570.144601] R13: ffff8800387ec7b0 R14: ffff88003e222aa0 R15: 
ffff8800387ec7b0
      [  570.144601] FS:  00007f5672f48700(0000) GS:ffff88003fc80000(0000) 
knlGS:0000000000000000
      [  570.144601] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [  570.144601] CR2: 00000000000004e0 CR3: 0000000037f7e000 CR4: 
00000000000406a0
      [  570.144601] Stack:
      [  570.144601]  ffffffffa018f240 ffff8800387ec780 ffffffffa018f240 
ffff8800387ec7b0
      [  570.144601]  ffff880036b63e48 ffffffff812caabe ffff880039e4e000 
0000000000000008
      [  570.144601]  ffff880036b63e58 ffffffff812cabad ffff880036b63ea8 
ffffffff811347f5
      [  570.144601] Call Trace:
      [  570.144601]  [<ffffffff812caabe>] sock_release+0x1a/0x75
      [  570.144601]  [<ffffffff812cabad>] sock_close+0xd/0x11
      [  570.144601]  [<ffffffff811347f5>] __fput+0xff/0x1a5
      [  570.144601]  [<ffffffff811348cb>] ____fput+0x9/0xb
      [  570.144601]  [<ffffffff81056682>] task_work_run+0x66/0x90
      [  570.144601]  [<ffffffff8100189e>] prepare_exit_to_usermode+0x8c/0xa7
      [  570.144601]  [<ffffffff81001a26>] syscall_return_slowpath+0x16d/0x19b
      [  570.144601]  [<ffffffff813babb1>] int_ret_from_sys_call+0x25/0x9f
      [  570.144601] Code: 48 8b 83 c8 01 00 00 a8 01 74 12 48 89 df e8 8b 27 
14 e1 b8 f7 ff ff ff e9 b7 00 00 00 8a 43 12 a8 0b 74 1c 48 8b 83 a8 04 00 00 
<48> 8b 80 e0 04 00 00 65 ff 08 48 c7 83 a8 04 00 00 00 00 00 00
      [  570.144601] RIP  [<ffffffffa018c701>] pppoe_release+0x50/0x101 [pppoe]
      [  570.144601]  RSP <ffff880036b63e08>
      [  570.144601] CR2: 00000000000004e0
      [  570.200518] ---[ end trace 46956baf17349563 ]---

      pppoe_flush_dev() has no reason to override sk->sk_state with
      PPPOX_ZOMBIE. pppox_unbind_sock() already sets sk->sk_state to
      PPPOX_DEAD, which is the correct state given that sk is unbound and
      po->pppoe_dev is NULL.

      Fixes: 2b018d57ff18 ("pppoe: drop PPPOX_ZOMBIEs in pppoe_release")
      Tested-by: Oleksii Berezhniak <core@xxxxxxxxx>
      Signed-off-by: Guillaume Nault <g.nault@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 07355737a8badd951e6b72aa8609a2d6eed0a7e7
  Merge: 2472186 79a1315
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 03:00:26 2015 -0700

      Merge branch 'ipv4-multipath-hash'

      Peter Nørlund says:

      ====================
      ipv4: Hash-based multipath routing

      When the routing cache was removed in 3.6, the IPv4 multipath algorithm 
changed
      from more or less being destination-based into being quasi-random 
per-packet
      scheduling. This increases the risk of out-of-order packets and makes it
      impossible to use multipath together with anycast services.

      This patch series replaces the old implementation with flow-based load
      balancing based on a hash over the source and destination addresses.

      Distribution of the hash is done with thresholds as described in RFC 2992.
      This reduces the disruption when a path is added/remove when having more 
than
      two paths.

      To futher the chance of successful usage in conjuction with anycast, ICMP
      error packets are hashed over the inner IP addresses. This ensures that 
PMTU
      will work together with anycast or load-balancers such as IPVS.

      Port numbers are not considered since fragments could cause problems with
      anycast and IPVS. Relying on the DF-flag for TCP packets is also 
insufficient,
      since ICMP inspection effectively extracts information from the opposite
      flow which might have a different state of the DF-flag. This is also why 
the
      RSS hash is not used. These are typically based on the NDIS RSS spec which
      mandates TCP support.

      Measurements of the additional overhead of a two-path multipath
      (p_mkroute_input excl. __mkroute_input) on a Xeon X3550 (4 cores, 
2.66GHz):

      Original per-packet: ~394 cycles/packet
      L3 hash:              ~76 cycles/packet

      Changes in v5:
      - Fixed compilation error

      Changes in v4:
      - Functions take hash directly instead of func ptr
      - Added inline hash function
      - Added dummy macros to minimize ifdefs
      - Use upper 31 bits of hash instead of lower

      Changes in v3:
      - Multipath algorithm is no longer configurable (always L3)
      - Added random seed to hash
      - Moved ICMP inspection to isolated function
      - Ignore source quench packets (deprecated as per RFC 6633)

      Changes in v2:
      - Replaced 8-bit xor hash with 31-bit jenkins hash
      - Don't scale weights (since 31-bit)
      - Avoided unnecesary renaming of variables
      - Rely on DF-bit instead of fragment offset when checking for 
fragmentation
      - upper_bound is now inclusive to avoid overflow
      - Use a callback to postpone extracting flow information until necessary
      - Skipped ICMP inspection entirely with L4 hashing
      - Handle newly added sysctl ignore_routes_with_linkdown
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79a131592dbb81a2dba208622a2ffbfc53f28bc0
  Author: Peter Nørlund <pch@xxxxxxxxxxxx>
  Date:   Wed Sep 30 10:12:22 2015 +0200

      ipv4: ICMP packet inspection for multipath

      ICMP packets are inspected to let them route together with the flow they
      belong to, minimizing the chance that a problematic path will affect flows
      on other paths, and so that anycast environments can work with ECMP.

      Signed-off-by: Peter Nørlund <pch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0e884c78ee19e902f300ed147083c28a0c6302f0
  Author: Peter Nørlund <pch@xxxxxxxxxxxx>
  Date:   Wed Sep 30 10:12:21 2015 +0200

      ipv4: L3 hash-based multipath

      Replaces the per-packet multipath with a hash-based multipath using
      source and destination address.

      Signed-off-by: Peter Nørlund <pch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2472186f58ee1e4b9ca194245fef03931f6de90a
  Merge: 3e087ca a1a5344
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 5 02:46:26 2015 -0700

      Merge branch 'tcp-listener-fixes-and-improvement'

      Eric Dumazet says:

      ====================
      tcp: lockless listener fixes and improvement

      This fixes issues with TCP FastOpen vs lockless listeners,
      and SYNACK being attached to request sockets.

      Then, last patch brings performance improvement for
      syncookies generation and validation.

      Tested under a 4.3 Mpps SYNFLOOD attack, new perf profile looks
      like :
          12.11%  [kernel]  [k] sha_transform
           5.83%  [kernel]  [k] tcp_conn_request
           4.59%  [kernel]  [k] __inet_lookup_listener
           4.11%  [kernel]  [k] ipt_do_table
           3.91%  [kernel]  [k] tcp_make_synack
           3.05%  [kernel]  [k] fib_table_lookup
           2.74%  [kernel]  [k] sock_wfree
           2.66%  [kernel]  [k] memcpy_erms
           2.12%  [kernel]  [k] tcp_v4_rcv
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1a5344ddbe8fd3e080013b317ac9a664490cfdf
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:11 2015 -0700

      tcp: avoid two atomic ops for syncookies

      inet_reqsk_alloc() is used to allocate a temporary request
      in order to generate a SYNACK with a cookie. Then later,
      syncookie validation also uses a temporary request.

      These paths already took a reference on listener refcount,
      we can avoid a couple of atomic operations.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 004a5d0140ce1d05c1f5fce5df4baa2717a330e0
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:10 2015 -0700

      net: use sk_fullsock() in __netdev_pick_tx()

      SYN_RECV & TIMEWAIT sockets are not full blown, they do not have a
      sk_dst_cache pointer.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e7eadb4de9e645e1b34539dc4128240b1e5f71dc
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:09 2015 -0700

      ipv6: inet6_sk() should use sk_fullsock()

      SYN_RECV & TIMEWAIT sockets are not full blown, they do not have a pinet6
      pointer.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit caf3f2676aaad395903d24a54e22f8ac4bc4823d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:08 2015 -0700

      inet: ip_skb_dst_mtu() should use sk_fullsock()

      SYN_RECV & TIMEWAIT sockets are not full blown,
      do not even try to call ip_sk_use_pmtu() on them.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7656d842de93fd2d2de7b403062cad757cadf1df
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Oct 4 21:08:07 2015 -0700

      tcp: fix fastopen races vs lockless listener

      There are multiple races that need fixes :

      1) skb_get() + queue skb + kfree_skb() is racy

      An accept() can be done on another cpu, data consumed immediately.
      tcp_recvmsg() uses __kfree_skb() as it is assumed all skb found in
      socket receive queue are private.

      Then the kfree_skb() in tcp_rcv_state_process() uses an already freed skb

      2) tcp_reqsk_record_syn() needs to be done before tcp_try_fastopen()
      for the same reasons.

      3) We want to send the SYNACK before queueing child into accept queue,
      otherwise we might reintroduce the ooo issue fixed in
      commit 7c85af881044 ("tcp: avoid reorders for TFO passive connections")

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 71a0a72456b48de972d7ed613b06a22a3aa9057f
  Author: Yousong Zhou <yszhou4tech@xxxxxxxxx>
  Date:   Sat Sep 26 13:41:43 2015 +0800

      MIPS: UAPI: Ignore __arch_swab{16,32,64} when using MIPS16

      Some GCC versions (e.g. 4.8.3) can incorrectly inline a function with
      MIPS32 instructions into another function with MIPS16 code [1], causing
      the assembler to genereate incorrect binary code or fail right away
      complaining about unrecognized opcode.

      In the case of __arch_swab{16,32}, when inlined by the compiler with
      flags `-mips32r2 -mips16 -Os', the assembler can fail with the following
      error.

          {standard input}:79: Error: unrecognized opcode `wsbh $2,$2'

      For performance concerns and to workaround the issue already existing in
      older compilers, just ignore these 2 functions when compiling with
      mips16 enabled.

       [1] Inlining nomips16 function into mips16 function can result in
           undefined builtins, 
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=55777

      Signed-off-by: Yousong Zhou <yszhou4tech@xxxxxxxxx>
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11241/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1bb3bf6226eedee453902e5cf8899ee548f43840
  Author: Yousong Zhou <yszhou4tech@xxxxxxxxx>
  Date:   Sat Sep 26 13:41:42 2015 +0800

      Revert "MIPS: UAPI: Fix unrecognized opcode WSBH/DSBH/DSHD when using 
MIPS16."

      This reverts commit e0d8b2ec532852d4b5aabcec3e7611848c32237d.

      For at least GCC 4.8.3, adding nomips16 function attribute still cannot
      prevent it from being inlined in mips16 context.  So revert it first in
      preparation for a better workaround.

       [1] Inlining nomips16 function into mips16 function can result in
           undefined builtins, 
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=55777

      Signed-off-by: Yousong Zhou <yszhou4tech@xxxxxxxxx>
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11240/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit bb7436093717d3ccaeaf28438be763b30a794ad8
  Author: Nicolas Iooss <nicolas.iooss_linux@xxxxxxx>
  Date:   Sat Sep 12 12:04:51 2015 +0200

      iwlwifi: mvm: fix tof.h header guard

      Commit ce7929186a39 ("iwlwifi: mvm: add basic Time of Flight (802.11mc
      FTM) support") created drivers/net/wireless/iwlwifi/mvm/tof.h with a
      broken header guard:

          #ifndef __tof
          #define __tof_h__

          ...

          #endif /* __tof_h__ */

      Use __tof_h__ in the first line.

      Signed-off-by: Nicolas Iooss <nicolas.iooss_linux@xxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit f82c83397beac5c829bfcb3ea6bb4bfdbac79209
  Author: Ilan Peer <ilan.peer@xxxxxxxxx>
  Date:   Thu Sep 10 12:54:38 2015 +0300

      iwlwifi: mvm: Correctly update MAC context on add/del station

      Commit "iwlwifi: mvm: don't ask beacons when AP vif and no
      assoc sta" directly called iwl_mvm_mac_ctxt_cmd_ap() to update the
      MAC context when adding/removing a station. However, this ignores
      the case that the vif is actually a P2P GO.

      Fix this by calling iwl_mvm_mac_ctxt_changed() that handles P2P GO
      case as well.

      Signed-off-by: Ilan Peer <ilan.peer@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 69191afef3c889992de643af7c318c9a8a1750c0
  Author: Liad Kaufman <liad.kaufman@xxxxxxxxx>
  Date:   Tue Sep 1 18:50:22 2015 +0300

      iwlwifi: mvm: fix default disabled aggs in sta

      For the ADD_STA command, when the flag for aggregation
      disabling is set, there is a bitmap indicated what TIDs
      are disabling aggregations and what aren't. Currently, by
      default, all TIDs allow for aggregations since the value
      we begin with is 0.

      Change this default value to 0xffff so all TIDs don't
      allow aggregations until explicitly turned on.

      Signed-off-by: Liad Kaufman <liad.kaufman@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit acf9de3dfb2c9c00d94c3d614980006947ed2b7f
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 4 20:54:35 2015 +0200

      iwlwifi: enable tracing by default

      Tracing, if disabled at runtime, has very low overhead with
      great returns on debugging. It therefore makes sense to have
      it enabled by default (if the kernel enables EVENT_TRACING).

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 7b9aebf0e507108daba3516f28cfd78fce80c176
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 8 17:03:20 2015 +0200

      MAINTAINERS: iwlwifi: update contact email

      The ilw@xxxxxxxxxxxxxxx address is being phased out, replace
      it with the new address.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit a6449126518d908f0d706cce85c9bf243342b7b0
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Sep 1 14:15:17 2015 +0200

      iwlwifi: mvm: correct skip-over-DTIM implementation

      The formula used in D0i3 should also be used in D3, instead of
      the hardcoded value.

      Additionally, the formula is actually wrong - if the calculation
      yields 0 then 1 should be used instead of disabling entirely.
      Also need to add 1 since the firmware needs 3 to skip 2, etc.

      To make all this clearer, centralize the calculation into a
      single function.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit bb35dc14182c16e9646f6323cce25f3cfe3ba593
  Author: Moshe Harel <moshe.harel@xxxxxxxxx>
  Date:   Sun Sep 6 16:50:33 2015 +0300

      iwlwifi: nvm: force 1x1 antenna in Series 8000

      This is a workaround to an OTP bug. In Series 8000 1x1, the OTP
      0xA052 defines 2x2 antenna configuration. This workaround overrides
      the decision based on HW id and MIMO disabled bit which is correct
      in the OTP and set to disabled.

      Signed-off-by: Moshe Harel <moshe.harel@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 09eef3307e6d55afbdc4cebc8aeacbbb0a7337f6
  Author: Aviya Erenfeld <aviya.erenfeld@xxxxxxxxx>
  Date:   Tue Sep 1 19:34:38 2015 +0300

      iwlwifi: mvm: move DTS command and notification to new group

      Move the DTS measurement command and notification from short
      command header to the new PHY command group for firmware
      supporting the extended command headers.

      Signed-off-by: Aviya Erenfeld <aviya.erenfeld@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit f32517bf1ae0a2de72b3f27200233bd3ad65bfeb
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 14:20:28 2015 +0300

      gpio: pca953x: support ACPI devices found on Galileo Gen2

      This patch adds a support of the expandes found on Intel Galileo Gen2 
board.
      The platform information comes from ACPI.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c6664149af2939b8bbaef0711b3ca5469bed33fb
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 14:20:27 2015 +0300

      gpio: pca953x: store driver_data for future use

      Instead of using id->driver_data directly we copied it to the internal
      structure. This will help to adapt driver for ACPI use.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 22db3cbcf9f91eef848db0986869822b4bf27193
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:34:03 2015 +0200

      Bluetooth: Send transport open and close monitor events

      When the core starts or shuts down the actual HCI transport, send a new
      monitor event that indicates that this is happening. These new events
      correspond to HCI_DEV_OPEN and HCI_DEV_CLOSE events.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e9ca8bf157f2b45f8f670517c96da313083ee9b2
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:34:02 2015 +0200

      Bluetooth: Move handling of HCI_RUNNING flag into core

      Setting and clearing of HCI_RUNNING flag in each and every driver is
      just duplicating the same code all over the place. So instead of having
      the driver do it in their hdev->open and hdev->close callbacks, set it
      globally in the core transport handling.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 73d0d3c8671190ea982a8e79a7c79fbfe88f8f47
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:34:01 2015 +0200

      Bluetooth: Move HCI_RUNNING check into hci_send_frame

      In all callbacks for hdev->send the status of HCI_RUNNING is checked. So
      instead of repeating that code in every driver, move the check into the
      hci_send_frame function before calling hdev->send.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 4a3f95b7b62e50a1e42e42ba6571ec9e747f4861
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:34:00 2015 +0200

      Bluetooth: Introduce HCI_DEV_OPEN and HCI_DEV_CLOSE events

      When opening the HCI transport via hdev->open send HCI_DEV_OPEN event
      and when closing the HCI transport via hdev->close send HCI_DEV_CLOSE.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit ed1b28a48b6c4e206bd88f5758393261710566f2
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 4 23:33:59 2015 +0200

      Bluetooth: Limit userspace exposure of stack internal events

      The stack internal events that are exposed to userspace should be
      limited to HCI_DEV_REG, HCI_DEV_UNREG, HCI_DEV_UP and HCI_DEV_DOWN.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit b224d3ff717cc3af91a4ec74d863a176d79331af
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 3 12:01:08 2015 +0200

      Bluetooth: btbcm: Send HCI Reset before sending Apple specific commands

      The commit 7bee8b08c428 allows the Read Verbose Config Info to fail
      gracefully and not cause the controller setup to abort. It seems the
      reason that command failed in the first place was the missing HCI Reset
      to bring the controller in full Bluetooth mode.

      Apple Bluetooth controllers start out in HID mode and when in that mode
      the Read Verbose Config Info command is not allowed. Sending HCI Reset
      switches the controller into full HCI mode.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 8d2402605b85be860808961cd82fdc4bd8bc1704
  Author: Heiner Kallweit <hkallweit1@xxxxxxxxx>
  Date:   Wed Sep 30 23:52:36 2015 +0200

      gpio: generic: use error pointers

      Use the ERRPTR standard way to return an error code in a pointer
      thus simplifiying the code.

      Signed-off-by: Heiner Kallweit <hkallweit1@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 43960b4731d3450fe82105c40ee19d487622e427
  Author: Heiner Kallweit <hkallweit1@xxxxxxxxx>
  Date:   Wed Sep 30 23:51:08 2015 +0200

      gpio: generic: modernize remapping

      Replace devm_request_mem_region / devm_ioremap with devm_ioremap_resource.

      Signed-off-by: Heiner Kallweit <hkallweit1@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit cf3f2a2c8bae0db72233629c9da9d9f617b3f8af
  Author: Heiner Kallweit <hkallweit1@xxxxxxxxx>
  Date:   Wed Sep 30 23:50:20 2015 +0200

      gpio: generic: improve error handling in bgpio_map

      If bgpio_map returns NULL then err should always be set.

      Signed-off-by: Heiner Kallweit <hkallweit1@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 41ada9df7f340998e810dcda21a00da5f75c4147
  Author: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
  Date:   Mon Aug 24 10:18:38 2015 +0200

      mcb: Fix error handling in mcb_pci_probe()

      If a MCB PCI Carrier device is IO mapped insted of memory-mapped,
      the memory of the PCI device is still not unmapped.

      Also the patch adds deallocation of the bus
      if chameleon_parse_cells() fails.

      Found by Linux Driver Verification project (linuxtesting.org).

      Signed-off-by: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
      Signed-off-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 3e087caa23ef36370bfb925d3bbca78e8302d3ce
  Merge: 68d4e52 0f963b7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 4 16:46:14 2015 -0700

      Merge branch 'bridge-netlink'

      Nikolay Aleksandrov says:

      ====================
      bridge: complete netlink support

      This set completes the bridge device's netlink support and makes it
      possible to view and configure everything that can be configured via
      sysfs. I have tested all of these (setting and getting). There're a few
      longer line warnings about the br_get_size() ifla comments but I think we
      should have them to know what has been accounted for. I have used the 
sysfs
      interface as a guide of what and how to set. As usual I'll send the
      corresponding iproute2 patches later.
      The bridge port's netlink interface will be completed after this set gets
      applied in some form.

      This patch-set is on top of my last vlan cleanups set:
      http://www.spinics.net/lists/netdev/msg346005.html
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f963b7592ef9e054974b6672b86ec1edd84b4bc
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:47 2015 +0200

      bridge: netlink: add support for default_pvid

      Add IFLA_BR_VLAN_DEFAULT_PVID to allow setting/getting bridge's
      default_pvid via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 93870cc02a0af4392401713d14235accafc752bc
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:46 2015 +0200

      bridge: netlink: add support for netfilter tables config

      Add support to allow getting/setting netfilter tables settings.
      Currently these are IFLA_BR_NF_CALL_IPTABLES, IFLA_BR_NF_CALL_IP6TABLES
      and IFLA_BR_NF_CALL_ARPTABLES.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7e4df51eb35deedd3ba8d4db92a6c36fb7eff90a
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:45 2015 +0200

      bridge: netlink: add support for igmp's intervals

      Add support to set/get all of the igmp's configurable intervals via
      netlink. These currently are:
      IFLA_BR_MCAST_LAST_MEMBER_INTVL
      IFLA_BR_MCAST_MEMBERSHIP_INTVL
      IFLA_BR_MCAST_QUERIER_INTVL
      IFLA_BR_MCAST_QUERY_INTVL
      IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
      IFLA_BR_MCAST_STARTUP_QUERY_INTVL

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b89e6babad4b7ca7298ad863c6c83dc76b0abdef
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:44 2015 +0200

      bridge: netlink: add support for multicast_startup_query_count

      Add IFLA_BR_MCAST_STARTUP_QUERY_CNT to allow setting/getting
      br->multicast_startup_query_count via netlink. Also align the ifla
      comments.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79b859f573d6afa64e328cc7f50ad7a209e0c92d
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:43 2015 +0200

      bridge: netlink: add support for multicast_last_member_count

      Add IFLA_BR_MCAST_LAST_MEMBER_CNT to allow setting/getting
      br->multicast_last_member_count via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 858079fdae16421d4908722140346cfdddedf343
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:42 2015 +0200

      bridge: netlink: add support for igmp's hash_max

      Add IFLA_BR_MCAST_HASH_MAX to allow setting/getting br->hash_max via
      netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 431db3c050af0be72b3b01fa7484982f35cb268f
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:41 2015 +0200

      bridge: netlink: add support for igmp's hash_elasticity

      Add IFLA_BR_MCAST_HASH_ELASTICITY to allow setting/getting
      br->hash_elasticity via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba062d7cc6a09a8194eba975d5ee635378a55bfc
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:40 2015 +0200

      bridge: netlink: add support for multicast_querier

      Add IFLA_BR_MCAST_QUERIER to allow setting/getting br->multicast_querier
      via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 295141d9049bdf4fa316b325d2e2501b210dbe06
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:39 2015 +0200

      bridge: netlink: add support for multicast_query_use_ifaddr

      Add IFLA_BR_MCAST_QUERY_USE_IFADDR to allow setting/getting
      br->multicast_query_use_ifaddr via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 89126327f921bd278c72284d38428443bbef344f
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:38 2015 +0200

      bridge: netlink: add support for multicast_snooping

      Add IFLA_BR_MCAST_SNOOPING to allow enabling/disabling multicast
      snooping via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a9a6bc70f5f70b3835b081e401b469b88c7c8a3a
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:37 2015 +0200

      bridge: netlink: add support for multicast_router

      Add IFLA_BR_MCAST_ROUTER to allow setting and retrieving
      br->multicast_router when igmp snooping is enabled.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 150217c688217e549ef8a36ea4f6718977373765
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:36 2015 +0200

      bridge: netlink: add fdb flush

      Simple attribute that flushes the bridge's fdb.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 111189abc5c3f0ea6f516a6c3e8d8c3a2cf391d9
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:35 2015 +0200

      bridge: netlink: add group_addr support

      Add IFLA_BR_GROUP_ADDR attribute to allow setting and retrieving the
      group_addr via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d76bd14e0f759040efc8ce142dd6d1f9eca33d39
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:34 2015 +0200

      bridge: netlink: export all timers

      Export the following bridge timers (also exported via sysfs):
      IFLA_BR_HELLO_TIMER, IFLA_BR_TCN_TIMER, IFLA_BR_TOPOLOGY_CHANGE_TIMER,
      IFLA_BR_GC_TIMER via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ed4163098e3090bb7b51421bde977e355275a554
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:33 2015 +0200

      bridge: netlink: export topology_change and topology_change_detected

      Add IFLA_BR_TOPOLOGY_CHANGE and IFLA_BR_TOPOLOGY_CHANGE_DETECTED and
      export them via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 684dd248bee8c73eadb90706123bf1494d3218b8
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:32 2015 +0200

      bridge: netlink: export root path cost

      Add IFLA_BR_ROOT_PATH_COST and export it via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8762ba680fe8d41b444fc92f90ce7194b2b8303b
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:31 2015 +0200

      bridge: netlink: export root port

      Add IFLA_BR_ROOT_PORT and export it via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7599a2201fc71cdca16a92d350f14cce8730e03f
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:30 2015 +0200

      bridge: netlink: export bridge id

      Add IFLA_BR_BRIDGE_ID and export br->bridge_id via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5127c81f84de0dd643d5840a2c7de571bc6aceb3
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:29 2015 +0200

      bridge: netlink: export root id

      Add IFLA_BR_ROOT_ID and export br->designated_root via netlink. For this
      purpose add struct ifla_bridge_id that would represent struct bridge_id.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7910228b6bb35f3c8e0bc72a8d84c29616cb1b90
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 14:23:28 2015 +0200

      bridge: netlink: add group_fwd_mask support

      Add IFLA_BR_GROUP_FWD_MASK attribute to allow setting and retrieving the
      group_fwd_mask via netlink.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 68d4e5208291ac8bd7d47d992f353da31a2e1484
  Merge: e96f78a 6be144f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 4 16:43:56 2015 -0700

      Merge branch 'bridge-vlan'

      Nikolay Aleksandrov says:

      ====================
      bridge: vlan: cleanups & fixes (part 2)

      This is the second follow-up set with one fix (patch 01) and more cleanups
      (patches 02,03 and 04). These are minor compared to the previous ones and
      should be the last before taking on the optimization changes on the
      fast-path.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6be144f62f64c8a67e11b2f8b86c7bf390b87411
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:05:13 2015 +0200

      bridge: vlan: use br_vlan_should_use to simplify __vlan_add/del

      The checks that lead to num_vlans change are always what
      br_vlan_should_use checks for, namely if the vlan is only a context or
      not and depending on that it's either not counted or counted
      as a real/used vlan respectively.
      Also give better explanation in br_vlan_should_use's comment.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2ffdf508d278d48ccb928238846df352db21f4eb
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:05:12 2015 +0200

      bridge: vlan: drop master_flags from __vlan_add

      There's only one user now and we can include the flag directly.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8ed289fab843fbc9251aa2f5c3d416f09b5fc7e
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:05:11 2015 +0200

      bridge: vlan: use br_vlan_(get|put)_master to deal with refcounts

      Introduce br_vlan_(get|put)_master which take a reference (or create the
      master vlan first if it didn't exist) and drop a reference respectively.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 586c2b573ee4c2c4ba03e16318a16614ebf876f8
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:05:10 2015 +0200

      bridge: vlan: use rcu list for the ordered vlan list

      When I did the conversion to rhashtable I missed the required locking of
      one important user of the vlan list - br_get_link_af_size_filtered()
      which is called:
      br_ifinfo_notify() -> br_nlmsg_size() -> br_get_link_af_size_filtered()
      and the notifications can be sent without holding rtnl. Before this
      conversion the function relied on using rcu and since we already use rcu 
to
      destroy the vlans, we can simply migrate the list to use the rcu helpers.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7e1008048a97148d3aecae742f66fb2f944644c
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Sun Oct 4 22:44:12 2015 +0200

      ALSA: hda - Disable power_save_node for IDT 92HD73xx chips

      The recent widget power saving introduced some unavoidable click
      noises on old IDT 92HD73xx chips while it still seems working on the
      compatible new chips.  In the bugzilla, we tried lots of tests and
      workarounds, but they didn't help much.  So, let's disable the feature
      for these specific chips as the least (but safest) fix.

      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=104981
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 32f40c5fa730fa598e500dfbaab8aabc39c56f96
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 22:53:54 2015 +0100

      netfilter: rename nfnetlink_queue_core.c to nfnetlink_queue.c

      Now that we have integrated the ct glue code into nfnetlink_queue without
      introducing dependencies with the conntrack code.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit b7bd1809e0784435791657502bc0d8280ad6f7ea
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 22:53:44 2015 +0100

      netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.c

      The original intention was to avoid dependencies between nfnetlink_queue 
and
      conntrack without ifdef pollution. However, we can achieve this by moving 
the
      conntrack dependent code into ctnetlink and keep some glue code to access 
the
      nfq_ct indirection from nfqueue.

      After this patch, the nfq_ct indirection is always compiled in the 
netfilter
      core to avoid polluting nfqueue with ifdefs. Thus, if nf_conntrack is not
      compiled this results in only 8-bytes of memory waste in x86_64.

      This patch also adds ctnetlink_nfqueue_seqadj() to avoid that the nf_conn
      structure layout if exposed to nf_queue, which creates another dependency 
with
      nf_conntrack at compilation time.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit b1d562acc78f0af46de0dfe447410bc40bdb7ece
  Author: covici@xxxxxxxxxxxxxx <covici@xxxxxxxxxxxxxx>
  Date:   Wed May 20 05:44:11 2015 -0400

      staging: speakup: fix speakup-r regression

      Here is a patch to make speakup-r work again.

      It broke in 3.6 due to commit 4369c64c79a22b98d3b7eff9d089196cd878a10a
      "Input: Send events one packet at a time)

      The problem was that the fakekey.c routine to fake a down arrow no
      longer functioned properly and putting the input_sync fixed it.

      Fixes: 4369c64c79a22b98d3b7eff9d089196cd878a10a
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Acked-by: Samuel Thibault <samuel.thibault@xxxxxxxxxxxx>
      Signed-off-by: John Covici <covici@xxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8b581e4995288e8948f770f3e9fc568492cfd2dd
  Author: Julian Andres Klode <jak@xxxxxxxxxxxxx>
  Date:   Sun Sep 13 17:23:27 2015 +0200

      MAINTAINERS: Remove myself as nvec co-maintainer

      My device broke a long time ago, so I do not have any
      chance of testing things or any reason to continue
      maintaining it.

      Signed-off-by: Julian Andres Klode <jak@xxxxxxxxxxxxx>
      Signed-off-by: Marc Dietrich <marvin24@xxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 0c55627167870255158db1cde0d28366f91c8872
  Author: Jann Horn <jann@xxxxxxxxx>
  Date:   Sun Oct 4 19:29:12 2015 +0200

      drivers/tty: require read access for controlling terminal

      This is mostly a hardening fix, given that write-only access to other
      users' ttys is usually only given through setgid tty executables.

      Signed-off-by: Jann Horn <jann@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 3c5a0357fdb3a9116a48dbdb0abb91fd23fbff80
  Author: Mans Rullgard <mans@xxxxxxxxx>
  Date:   Fri Oct 2 17:50:31 2015 +0100

      serial: 8250: add uart_config entry for PORT_RT2880

      This adds an entry to the uart_config table for PORT_RT2880
      enabling rx/tx FIFOs.  The UART is actually a Palmchip BK-3103
      which is found in several devices from Alchemy/RMI, Ralink, and
      Sigma Designs.

      Signed-off-by: Mans Rullgard <mans@xxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit facd885c75067c2a88b72622dfb0fa4b9510da5e
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Thu Sep 17 17:17:10 2015 +0200

      tty: fix data race on tty_buffer.commit

      Race on buffer data happens when newly committed data is
      picked up by an old flush work in the following scenario:
      __tty_buffer_request_room does a plain write of tail->commit,
      no barriers were executed before that.
      At this point flush_to_ldisc reads this new value of commit,
      and reads buffer data, no barriers in between.
      The committed buffer data is not necessary visible to flush_to_ldisc.

      Similar bug happens when tty_schedule_flip commits data.

      Update commit with smp_store_release and read commit with
      smp_load_acquire, as it is commit that signals data readiness.
      This is orthogonal to the existing synchronization on tty_buffer.next,
      which is required to not dismiss a buffer with unconsumed data.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Reviewed-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 9e6b7cd7e77d4ca43b57c726d9bfa86d06e0567f
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Thu Sep 17 17:17:09 2015 +0200

      tty: fix data race in tty_buffer_flush

      tty_buffer_flush frees not acquired buffers.
      As the result, for example, read of b->size in tty_buffer_free
      can return garbage value which will lead to a huge buffer
      hanging in the freelist. This is just the benignest
      manifestation of freeing of a not acquired object.
      If the object is passed to kfree, heap can be corrupted.

      Acquire visibility over the buffer before freeing it.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Reviewed-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 7098296a362a96051fa120abf48f0095818b99cd
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Thu Sep 17 17:17:08 2015 +0200

      tty: fix data race in flush_to_ldisc

      flush_to_ldisc reads port->itty and checks that it is not NULL,
      concurrently release_tty sets port->itty to NULL. It is possible
      that flush_to_ldisc loads port->itty once, ensures that it is
      not NULL, but then reloads it again and uses. The second load
      can already return NULL, which will cause a crash.

      Use READ_ONCE to read port->itty.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Reviewed-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit e81107d4c6bd098878af9796b24edc8d4a9524fd
  Author: Kosuke Tatsukawa <tatsu@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 08:27:05 2015 +0000

      tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c

      My colleague ran into a program stall on a x86_64 server, where
      n_tty_read() was waiting for data even if there was data in the buffer
      in the pty.  kernel stack for the stuck process looks like below.
       #0 [ffff88303d107b58] __schedule at ffffffff815c4b20
       #1 [ffff88303d107bd0] schedule at ffffffff815c513e
       #2 [ffff88303d107bf0] schedule_timeout at ffffffff815c7818
       #3 [ffff88303d107ca0] wait_woken at ffffffff81096bd2
       #4 [ffff88303d107ce0] n_tty_read at ffffffff8136fa23
       #5 [ffff88303d107dd0] tty_read at ffffffff81368013
       #6 [ffff88303d107e20] __vfs_read at ffffffff811a3704
       #7 [ffff88303d107ec0] vfs_read at ffffffff811a3a57
       #8 [ffff88303d107f00] sys_read at ffffffff811a4306
       #9 [ffff88303d107f50] entry_SYSCALL_64_fastpath at ffffffff815c86d7

      There seems to be two problems causing this issue.

      First, in drivers/tty/n_tty.c, __receive_buf() stores the data and
      updates ldata->commit_head using smp_store_release() and then checks
      the wait queue using waitqueue_active().  However, since there is no
      memory barrier, __receive_buf() could return without calling
      wake_up_interactive_poll(), and at the same time, n_tty_read() could
      start to wait in wait_woken() as in the following chart.

              __receive_buf()                         n_tty_read()
      ------------------------------------------------------------------------
      if (waitqueue_active(&tty->read_wait))
      /* Memory operations issued after the
         RELEASE may be completed before the
         RELEASE operation has completed */
                                              add_wait_queue(&tty->read_wait, 
&wait);
                                              ...
                                              if (!input_available_p(tty, 0)) {
      smp_store_release(&ldata->commit_head,
                        ldata->read_head);
                                              ...
                                              timeout = wait_woken(&wait,
                                                TASK_INTERRUPTIBLE, timeout);
      ------------------------------------------------------------------------

      The second problem is that n_tty_read() also lacks a memory barrier
      call and could also cause __receive_buf() to return without calling
      wake_up_interactive_poll(), and n_tty_read() to wait in wait_woken()
      as in the chart below.

              __receive_buf()                         n_tty_read()
      ------------------------------------------------------------------------
                                              spin_lock_irqsave(&q->lock, 
flags);
                                              /* from add_wait_queue() */
                                              ...
                                              if (!input_available_p(tty, 0)) {
                                              /* Memory operations issued after 
the
                                                 RELEASE may be completed 
before the
                                                 RELEASE operation has 
completed */
      smp_store_release(&ldata->commit_head,
                        ldata->read_head);
      if (waitqueue_active(&tty->read_wait))
                                              __add_wait_queue(q, wait);
                                              
spin_unlock_irqrestore(&q->lock,flags);
                                              /* from add_wait_queue() */
                                              ...
                                              timeout = wait_woken(&wait,
                                                TASK_INTERRUPTIBLE, timeout);
      ------------------------------------------------------------------------

      There are also other places in drivers/tty/n_tty.c which have similar
      calls to waitqueue_active(), so instead of adding many memory barrier
      calls, this patch simply removes the call to waitqueue_active(),
      leaving just wake_up*() behind.

      This fixes both problems because, even though the memory access before
      or after the spinlocks in both wake_up*() and add_wait_queue() can
      sneak into the critical section, it cannot go past it and the critical
      section assures that they will be serialized (please see "INTER-CPU
      ACQUIRING BARRIER EFFECTS" in Documentation/memory-barriers.txt for a
      better explanation).  Moreover, the resulting code is much simpler.

      Latency measurement using a ping-pong test over a pty doesn't show any
      visible performance drop.

      Signed-off-by: Kosuke Tatsukawa <tatsu@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8f1bd8f2ad2358d6a88c115481ff3e69817d1bde
  Author: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
  Date:   Wed Sep 23 08:57:40 2015 +0200

      serial: atmel: fix error path of probe function

      If atmel_init_gpios fails the port has already been marked as busy (in
      line 2629), so this must be undone in the error path.

      This bug was introduced because I created the patch that finally
      became 722ccf416ac2 ("serial: atmel: fix error handling when
      mctrl_gpio_init fails") on top of 3.19 which didn't have commit
      6fbb9bdf0f3f ("tty/serial: at91: fix error handling in
      atmel_serial_probe()") yet.

      Signed-off-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Fixes: 722ccf416ac2 ("serial: atmel: fix error handling when 
mctrl_gpio_init fails")
      Acked-by: Nicolas Ferre <nicolas.ferre@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit c1a752ba2d6b8a52879c7ab637cff38359ea9827
  Author: Leon Yu <chianglungyu@xxxxxxxxx>
  Date:   Mon Sep 7 13:08:37 2015 +0000

      tty: don't leak cdev in tty_cdev_add()

      Commit a3a10ce3429e ("Avoid usb reset crashes by making tty_io cdevs truly
      dynamic") which mixes using cdev_alloc() and cdev_init() is problematic.
      Subsequent call to cdev_init() after cdev_alloc() sets kobj release method
      from cdev_dynamic_release() to cdev_default_release() and thus makes it
      impossible to free allocated cdev.

      This patch also consolidates error path of cdev_add() as cdev can also 
leak
      here if things went wrong.

      Signed-off-by: Leon Yu <chianglungyu@xxxxxxxxx>
      Fixes: a3a10ce3429e ("Avoid usb reset crashes by making tty_io cdevs 
truly dynamic")
      Acked-by: Richard Watts <rrw@xxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 0c727a42043f79db210cdde0366f9137b9c6bf5a
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Tue Aug 18 12:43:12 2015 -0300

      Revert "serial: imx: remove unbalanced clk_prepare"

      This reverts commit 9e7b399d6528eac33a6fbfceb2b92af209c3454d.

      Commit ("9e7b399d6528ea") causes the following warning and sometimes
      also hangs the system:

      ------------[ cut here ]------------
       WARNING: CPU: 0 PID: 0 at kernel/locking/mutex.c:868 
mutex_trylock+0x20c/0x22c()
       DEBUG_LOCKS_WARN_ON(in_interrupt())
       Modules linked in:
      CPU: 0 PID: 0 Comm: swapper/0 Not tainted 
4.2.0-rc7-next-20150818-00001-g14418a6 #4
      Hardware name: Freescale i.MX6 Quad/DualLite (Device Tree)
      Backtrace:
      [<80012f08>] (dump_backtrace) from [<800130a4>] (show_stack+0x18/0x1c)
      r6:00000364 r5:00000000 r4:00000000 r3:00000000
      [<8001308c>] (show_stack) from [<807902b8>] (dump_stack+0x88/0xa4)
      [<80790230>] (dump_stack) from [<8002a604>] 
(warn_slowpath_common+0x80/0xbc)
      r5:807945c4 r4:80ab3b50
      [<8002a584>] (warn_slowpath_common) from [<8002a6e4>] 
(warn_slowpath_fmt+0x38/0x40)
      r8:00000000 r7:8131100c r6:8054c3cc r5:8131300c r4:80b0a570
      [<8002a6b0>] (warn_slowpath_fmt) from [<807945c4>] 
(mutex_trylock+0x20c/0x22c)
      r3:8095d0d8 r2:8095ab28
      [<807943b8>] (mutex_trylock) from [<8054c3cc>] 
(clk_prepare_lock+0x14/0xf4)
      r7:8131100c r6:be3f0c80 r5:00000037 r4:be3f0c80
      [<8054c3b8>] (clk_prepare_lock) from [<8054dbfc>] (clk_prepare+0x18/0x30)
      r5:00000037 r4:be3f0c80
      [<8054dbe4>] (clk_prepare) from [<8036a600>] 
(imx_console_write+0x30/0x244)
      r4:812d0bc8 r3:8132b9a4

      To reproduce the problem we only need to let the board idle for something
      like 30 seconds.

      Tested on a imx6q-sabresd.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Reviewed-by: Eduardo Valentin <edubezval@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 049e6dde7e57f0054fdc49102e7ef4830c698b46
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 16:57:17 2015 +0100

      Linux 4.3-rc4

  commit 30c44659f4a3e7e1f9f47e895591b4b40bf62671
  Merge: 15ecf9a 30059d4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 16:31:13 2015 +0100

      Merge branch 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile

      Pull strscpy string copy function implementation from Chris Metcalf.

      Chris sent this during the merge window, but I waffled back and forth on
      the pull request, which is why it's going in only now.

      The new "strscpy()" function is definitely easier to use and more secure
      than either strncpy() or strlcpy(), both of which are horrible nasty
      interfaces that have serious and irredeemable problems.

      strncpy() has a useless return value, and doesn't NUL-terminate an
      overlong result.  To make matters worse, it pads a short result with
      zeroes, which is a performance disaster if you have big buffers.

      strlcpy(), by contrast, is a mis-designed "fix" for strlcpy(), lacking
      the insane NUL padding, but having a differently broken return value
      which returns the original length of the source string.  Which means
      that it will read characters past the count from the source buffer, and
      you have to trust the source to be properly terminated.  It also makes
      error handling fragile, since the test for overflow is unnecessarily
      subtle.

      strscpy() avoids both these problems, guaranteeing the NUL termination
      (but not excessive padding) if the destination size wasn't zero, and
      making the overflow condition very obvious by returning -E2BIG.  It also
      doesn't read past the size of the source, and can thus be used for
      untrusted source data too.

      So why did I waffle about this for so long?

      Every time we introduce a new-and-improved interface, people start doing
      these interminable series of trivial conversion patches.

      And every time that happens, somebody does some silly mistake, and the
      conversion patch to the improved interface actually makes things worse.
      Because the patch is mindnumbing and trivial, nobody has the attention
      span to look at it carefully, and it's usually done over large swatches
      of source code which means that not every conversion gets tested.

      So I'm pulling the strscpy() support because it *is* a better interface.
      But I will refuse to pull mindless conversion patches.  Use this in
      places where it makes sense, but don't do trivial patches to fix things
      that aren't actually known to be broken.

      * 'strscpy' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile:
        tile: use global strscpy() rather than private copy
        string: provide strscpy()
        Make asm/word-at-a-time.h available on all architectures

  commit 84dfe03ae2112b817d5221575d59ba616dc0c3e2
  Author: Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
  Date:   Mon Sep 21 11:45:32 2015 +0300

      mei: hbm: fix error in state check logic

      Use || instead && in state check.
      The latter is bogus and leads to following warning:

      drivers/misc/mei/hbm.c:1212:46: warning: logical â??andâ?? of mutually 
exclusive tests is always false [-Wlogical-op]

      Fixes: 70ef835c84b3 ("mei: support for dynamic clients")
      Reported-by: David Binderman <dcb314@xxxxxxxxxxx>
      Signed-off-by: Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
      Signed-off-by: Tomas Winkler <tomas.winkler@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit fb727077b04f768d0c79d9aa29e958262a9e3d9e
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:36:31 2015 +0100

      nvmem: sunxi: Check for memory allocation failure

      The sunxi_sid driver doesn't check for kmalloc return status before
      derefencing the returned pointer, which could lead to a NULL pointer
      dereference if kmalloc failed. Check for its return code to make sure it
      deosn't happen.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit ace22170655f61d82fff95e57d673bf847a32a03
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Sep 30 13:36:10 2015 +0100

      nvmem: core: Fix memory leak in nvmem_cell_write

      A tmp buffer is allocated if cell->bit_offset || cell->nbits.
      So the tmp buffer needs to be freed at the same condition to avoid leak.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit cbf854ab36870b931aeba4edd954015b7c3005a2
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Sep 30 13:35:15 2015 +0100

      nvmem: core: Handle shift bits in-place if cell->nbits is non-zero

      It's pointless to test (cell->bit_offset || cell->bit_offset).
      nvmem_shift_read_buffer_in_place() should be called when
      (cell->bit_offset || cell->nbits).

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 7c806883e143dc60439e6bdb3589700ebed1efaa
  Author: ZhengShunQian <zhengsq@xxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:33:56 2015 +0100

      nvmem: core: fix the out-of-range leak in read/write()

      The position to read/write must be less than max
      register size.

      Signed-off-by: ZhengShunQian <zhengsq@xxxxxxxxxxxxxx>
      Acked-by: Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
      Signed-off-by: Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 15ecf9a986e2678f5de36ead23b89235612fc03f
  Merge: 0d87708 da6fb7a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 11:47:28 2015 +0100

      Merge tag 'md/4.3-fixes' of git://neil.brown.name/md

      Pull md fixes from Neil Brown:
       "Assorted fixes for md in 4.3-rc.

        Two tagged for -stable, and one is really a cleanup to match and
        improve kmemcache interface.

      * tag 'md/4.3-fixes' of git://neil.brown.name/md:
        md/bitmap: don't pass -1 to bitmap_storage_alloc.
        md/raid1: Avoid raid1 resync getting stuck
        md: drop null test before destroy functions
        md: clear CHANGE_PENDING in readonly array
        md/raid0: apply base queue limits *before* disk_stack_limits
        md/raid5: don't index beyond end of array in need_this_block().
        raid5: update analysis state for failed stripe
        md: wait for pending superblock updates before switching to read-only

  commit 0d8770815f70cf41b69a82ede272b026dbb2df7d
  Merge: 3e519dd d218af7
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 11:41:58 2015 +0100

      Merge branch 'upstream' of 
git://git.linux-mips.org/pub/scm/ralf/upstream-linus

      Pull MIPS updates from Ralf Baechle:
       "This week's round of MIPS fixes:
         - Fix JZ4740 build
         - Fix fallback to GFP_DMA
         - FP seccomp in case of ENOSYS
         - Fix bootmem panic
         - A number of FP and CPS fixes
         - Wire up new syscalls
         - Make sure BPF assembler objects can properly be disassembled
         - Fix BPF assembler code for MIPS I"

      * 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus:
        MIPS: scall: Always run the seccomp syscall filters
        MIPS: Octeon: Fix kernel panic on startup from memory corruption
        MIPS: Fix R2300 FP context switch handling
        MIPS: Fix octeon FP context switch handling
        MIPS: BPF: Fix load delay slots.
        MIPS: BPF: Do all exports of symbols with FEXPORT().
        MIPS: Fix the build on jz4740 after removing the custom gpio.h
        MIPS: CPS: #ifdef on CONFIG_MIPS_MT_SMP rather than CONFIG_MIPS_MT
        MIPS: CPS: Don't include MT code in non-MT kernels.
        MIPS: CPS: Stop dangling delay slot from has_mt.
        MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
        MIPS: Wire up userfaultfd and membarrier syscalls.

  commit 3e519dde1e8a73e59b0eab52575a14a2986283b6
  Merge: 2cf3082 791c76d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 4 11:40:09 2015 +0100

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fixes from Thomas Gleixner:
       "This update contains:

         - Fix for a long standing race affecting /proc/irq/NNN

         - One line fix for ARM GICV3-ITS counting the wrong data

         - Warning silencing in ARM GICV3-ITS.  Another GCC trying to be
           overly clever issue"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqchip/gic-v3-its: Count additional LPIs for the aliased devices
        irqchip/gic-v3-its: Silence warning when its_lpi_alloc_chunks gets 
inlined
        genirq: Fix race in register_irq_proc()

  commit d218af78492a36a4ae607c08fedfb59258440314
  Author: Markos Chandras <markos.chandras@xxxxxxxxxx>
  Date:   Fri Sep 25 08:17:42 2015 +0100

      MIPS: scall: Always run the seccomp syscall filters

      The MIPS syscall handler code used to return -ENOSYS on invalid
      syscalls. Whilst this is expected, it caused problems for seccomp
      filters because the said filters never had the change to run since
      the code returned -ENOSYS before triggering them. This caused
      problems on the chromium testsuite for filters looking for invalid
      syscalls. This has now changed and the seccomp filters are always
      run even if the syscall is invalid. We return -ENOSYS once we
      return from the seccomp filters. Moreover, similar codepaths have
      been merged in the process which simplifies somewhat the overall
      syscall code.

      Signed-off-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11236/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 72194739f54607bbf8cfded159627a2015381557
  Author: Vincent Palatin <vpalatin@xxxxxxxxxxxx>
  Date:   Thu Oct 1 14:10:22 2015 -0700

      usb: Add device quirk for Logitech PTZ cameras

      Add a device quirk for the Logitech PTZ Pro Camera and its sibling the
      ConferenceCam CC3000e Camera.
      This fixes the failed camera enumeration on some boot, particularly on
      machines with fast CPU.

      Tested by connecting a Logitech PTZ Pro Camera to a machine with a
      Haswell Core i7-4600U CPU @ 2.10GHz, and doing thousands of reboot cycles
      while recording the kernel logs and taking camera picture after each boot.
      Before the patch, more than 7% of the boots show some enumeration transfer
      failures and in a few of them, the kernel is giving up before actually
      enumerating the webcam. After the patch, the enumeration has been correct
      on every reboot.

      Signed-off-by: Vincent Palatin <vpalatin@xxxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 1d5c47f555c5ae050fad22e4a99f88856cae5d05
  Author: Alexander Inyukhin <shurick@xxxxxxxxxxxxxx>
  Date:   Sat Sep 26 15:24:21 2015 +0300

      USB: chaoskey read offset bug

      Rng reads in chaoskey driver could return the same data under
      the certain conditions.

      Signed-off-by: Alexander Inyukhin <shurick@xxxxxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8484bf2981b3d006426ac052a3642c9ce1d8d980
  Author: Yao-Wen Mao <yaowen@xxxxxxxxxx>
  Date:   Mon Aug 31 14:24:09 2015 +0800

      USB: Add reset-resume quirk for two Plantronics usb headphones.

      These two headphones need a reset-resume quirk to properly resume to
      original volume level.

      Signed-off-by: Yao-Wen Mao <yaowen@xxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8552d85442dd814d733f67592627ea55f7cbfb01
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Aug 31 19:54:51 2015 -0400

      i40evf: don't blow away MAC address

      Under certain circumstances, we can get an extra VF_RESOURCES message
      from the PF driver at runtime. When this happens, we need to parse it
      because our VSI may have changed out from underneath us, and that will
      affect our relationship with the PF driver.

      However, parsing the resources message also blows away our current MAC
      address in the hardware struct, usually with all zeros. When this
      happens, the next time the interface is opened, it will have no MAC
      address and will a) not work and b) complain.

      Fix this issue by restoring the current MAC address from the netdev
      struct after we parse the resource message.

      Change-ID: I6cd1b624fc20432f81dc901166c8de195b8e0e65
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 24408e7ae677cea4e44ce6869a1b803820839471
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Mon Sep 28 14:12:38 2015 -0400

      i40e/i40evf: grab the AQ spinlocks before clearing registers

      Make sure we have the spinlocks before we clear the ARQ and ASQ management
      registers.  Also, widen the locked portion and make a sanity check earlier
      in the send function to be sure we're working with safe register values.

      Change-ID: I34b56044b33461ed780f3d2de8d62826cdf933f9
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 126b63d9d3aa99a90381ed168a885989dd33cf15
  Author: Anjali Singhai <anjali.singhai@xxxxxxxxx>
  Date:   Mon Aug 24 13:26:53 2015 -0700

      i40e: Fix a memory leak in X722 rss config path

      In any case free the memory allocated before exiting.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 27ca2753500537b8f3f3aba43558d68e2e8439a1
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Aug 17 11:19:03 2015 +0800

      i40evf: Use numa_mem_id() to better support memoryless node

      Function i40e_clean_rx_irq() tries to reuse memory pages allocated
      from the nearest node. To better support memoryless node, use
      numa_mem_id() instead of numa_node_id() to get the nearest node with
      memory.

      This change should only affect performance.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8dc5562e4e2b8255d2ea5d472a7fa25d5aa20da4
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Aug 17 11:19:02 2015 +0800

      i40e: Use numa_mem_id() to better support memoryless node

      Function i40e_clean_rx_irq() tries to reuse memory pages allocated
      from the nearest node. To better support memoryless node, use
      numa_mem_id() instead of numa_node_id() to get the nearest node with
      memory.

      This change should only affect performance.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 616a5399b8f11a526cedcbaeb68bc0a1b08a3f43
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Sat Oct 3 16:54:17 2015 -0500

      [CIFS] Update cifs version number

      Update modinfo cifs.ko version number to 2.08

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>

  commit e96f78ab2703f3b0d512f6b469bc685d2ef20475
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sat Oct 3 06:27:28 2015 -0700

      tcp/dccp: add SLAB_DESTROY_BY_RCU flag for request sockets

      Before letting request sockets being put in TCP/DCCP regular
      ehash table, we need to add either :

      - SLAB_DESTROY_BY_RCU flag to their kmem_cache
      - add RCU grace period before freeing them.

      Since we carefully respected the SLAB_DESTROY_BY_RCU protocol
      like ESTABLISH and TIMEWAIT sockets, use it here.

      req_prot_init() being only used by TCP and DCCP, I did not add
      a new slab_flags into their rsk_prot, but reuse prot->slab_flags

      Since all reqsk_alloc() users are correctly dealing with a failure,
      add the __GFP_NOWARN flag to avoid traces under pressure.

      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d06f107bcd828a6c3ecd4a7d449d5d0c0dba0326
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Thu Oct 1 18:16:21 2015 +0200

      Bluetooth: btintel: Add iBT register access over HCI support

      Add regmap ibt to support Intel Bluetooth silicon register access
      over HCI. Intel BT/FM combo chip allows to read/write some registers
      (e.g. FM registers) via its HCI interface.

      Read/Write operations are performed via a HCI transaction composed of
      a HCI command (host->controller) followed by a HCI command complete
      event (controller->host). Read/Write Command opcodes can be specified
      to the regmap init function.
      We define data formats which are intel/vendor specific.

      Register Read/Write HCI command payload (Host):
      Field: | REG ADDR | MODE | DATA_LEN | DATA... |
      size:  |   32b    |  8b  |    8b    |  8b*    |

      Register Read HCI command complete event payload (Controller):
      Field: | CMD STATUS | REG ADDR | DATA... |
      size:  |     8b     |   32b    |  8b*    |

      Register Write HCI command complete event payload (Controller):
      Field: | CMD_STATUS |
      size:  |     8b     |

      Since this payload is HCI encapsulated, Little Endian byte order is
      used.

      Write/Read Example:

      If we write 0x0000002a at address 0x00008c04, with opcode_write 0xfc5d,
      The resulting transaction is (btmon trace):

      < HCI Command (0x3f|0x005d) plen 10 [hci0]
              04 8c 00 00 02 04 2a 00 00 00
      > HCI Event (0x0e) plen 4
            Unknown (0x3f|0x005d) ncmd 1
              00

      Then, if we read the same register with opcode_read 0xfc5e:

      < HCI Command (0x3f|0x005e) plen 6 [hci0]
              04 8c 00 00 02 04
      > HCI Event (0x0e) plen 12 [hci0]
            Unknown (0x3f|0x005e) ncmd 1
              00 04 8c 00 00 2a 00 00 00

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 9a431bd5a26ca7db8ab251a75e006aa8b145718e
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Jun 25 10:44:08 2015 +0100

      ARM: make highpte an expert option

      When highmem is enabled, there's little reason not to also enable
      highpte support as well.  Rather than leaving this to chance, make
      it an expert option, and default it to be enabled if highmem is
      enabled.  Add some help text to the option while we're here.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 63ce446c9b5787a94ed875bab20772e1a2b3092f
  Author: Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
  Date:   Sun Sep 13 03:30:11 2015 +0100

      ARM: 8433/1: add a VMSPLIT_3G_OPT config option

      Mimicking the same config option on x86, this allows for 1GB systems to
      have their RAM entirely mapped as low memory.

      Signed-off-by: Nicolas Pitre <nico@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 0768330d46435f324a0b4860c889057524af17c2
  Author: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
  Date:   Tue Sep 22 17:12:10 2015 +0100

      ARM: 8439/1: Fix backtrace generation when IPI is masked

      Currently on ARM when <SysRq-L> is triggered from an interrupt handler
      (e.g. a SysRq issued using UART or kbd) the main CPU will wedge for ten
      seconds with interrupts masked before issuing a backtrace for every CPU
      except itself.

      The new backtrace code introduced by commit 96f0e00378d4 ("ARM: add
      basic support for on-demand backtrace of other CPUs") does not work
      correctly when run from an interrupt handler because IPI_CPU_BACKTRACE
      is used to generate the backtrace on all CPUs but cannot preempt the
      current calling context.

      This can be fixed by detecting that the calling context cannot be
      preempted and issuing the backtrace directly in this case. Issuing
      directly leaves us without any pt_regs to pass to nmi_cpu_backtrace()
      so we also modify the generic code to call dump_stack() when its
      argument is NULL.

      Acked-by: Hillf Danton <hillf.zj@xxxxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Daniel Thompson <daniel.thompson@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 001bf455d20645190beb98ff4ee450dfea1b7eb2
  Author: Doug Anderson <armlinux@xxxxxxxxxxxxxx>
  Date:   Wed Sep 2 03:39:19 2015 +0100

      ARM: 8428/1: kgdb: Fix registers on sleeping tasks

      Dumping registers from other sleeping tasks in KGDB was totally
      failing for me.  All registers were reported as 0 in many cases.

      The code was using task_pt_regs(task) to try to get other thread
      registers.  This doesn't appear to be the right place to look.  From
      my tests, I saw non-zero values in this structure when we were looking
      at a kernel thread that had a userspace task associated with it, but
      it contained the register values from the userspace task.  So even in
      the cases where registers weren't reported as 0 we were still not
      showing the right thing.

      Instead of using task_pt_regs(task) let's use task_thread_info(task).
      This is the same place that is referred to when doing a dump of all
      sleeping task stacks (kdb_show_stack() -> show_stack() ->
      dump_backtrace() -> unwind_backtrace() -> thread_saved_sp()).

      As further evidence that this is the right thing to do, you can find
      the following comment in "gdbstub.c" right before it calls
      sleeping_thread_to_gdb_regs():
        Pull stuff saved during switch_to; nothing else is accessible (or
        even particularly relevant).  This should be enough for a stack
        trace.
      ...and if you look at switch_to() it only saves r4-r11, sp and lr.
      Those are the same registers that I'm getting out of the
      task_thread_info().

      With this change you can use "info thread" to see all tasks in the
      kernel and you can switch to other tasks and examine them in gdb.

      Signed-off-by: Doug Anderson <dianders@xxxxxxxxxxxx>
      Tested-by: Stephen Boyd <sboyd@xxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 7e31210349e9e03a9a4dff31ab5f2bc83e8e84f5
  Author: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
  Date:   Fri Aug 28 09:42:09 2015 +0100

      ARM: 8427/1: dma-mapping: add support for offset parameter in dma_mmap()

      IOMMU-based dma_mmap() implementation lacked proper support for offset
      parameter used in mmap call (it always assumed that mapping starts from
      offset zero). This patch adds support for offset parameter to IOMMU-based
      implementation.

      Signed-off-by: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx  # v3.6+
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 371f0f085f629fc0f66695f572373ca4445a67ad
  Author: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
  Date:   Fri Aug 28 09:41:39 2015 +0100

      ARM: 8426/1: dma-mapping: add missing range check in dma_mmap()

      dma_mmap() function in IOMMU-based dma-mapping implementation lacked
      a check for valid range of mmap parameters (offset and buffer size), what
      might have caused access beyond the allocated buffer. This patch fixes
      this issue.

      Signed-off-by: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx  # v3.6+
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit db695c0509d6ec9046ee5e4c520a19fa17d9fce2
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 19:34:28 2015 +0100

      ARM: remove user cmpxchg syscall

      Mark Brand reports that a NEEDS_SYSCALL_FOR_CMPXCHG enabled kernel would
      open a security hole in the ghost syscall used to implement cmpxchg, as
      it fails to validate the user pointer.

      However, in order for this option to be enabled, you'd need to be
      building a pre-ARMv6 kernel with SMP support.  There is only one system
      known which fits that, which is an early ARM SMP FPGA implementation
      based on the ARM926T.

      In any case, the Kconfig does not allow SMP to be enabled for pre-ARMv6
      systems.

      Moreover, even if NEEDS_SYSCALL_FOR_CMPXCHG were to be enabled, the
      kernel would not build as __ARM_NR_cmpxchg64 is not defined.

      The simple answer is to remove the buggy code.

      Reported-by: Mark Brand <markbrand@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 6f56a68d0bed16c13e9ec958cd28acbc2991d495
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Tue Sep 15 00:11:30 2015 +0100

      ARM: 8438/1: Add unwinding to __clear_user_std()

      Add unwinding annotations so that unwinding from this function
      works properly.

      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit b97b272e72ae07a04a664685c876439215bdeb74
  Author: Maninder Singh <maninder1.s@xxxxxxxxxxx>
  Date:   Mon Sep 14 15:59:26 2015 +0100

      ARM: 8436/1: hw_breakpoint: remove unnecessary header

      Header <asm/kdebug.h> is not needed for arm/hw_breakpoint.c, so remove
      the pointless #include.

      Signed-off-by: Maninder Singh <maninder1.s@xxxxxxxxxxx>
      Reviewed-by: Vaneet Narang <v.narang@xxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 63c27ae7981e5c28abfe97ca5f6ef92a5070ce7a
  Author: Felipe Balbi <balbi@xxxxxx>
  Date:   Fri Oct 2 20:33:36 2015 +0100

      ARM: 8434/2: Revert "7655/1: smp_twd: make twd_local_timer_of_register() 
no-op for nosmp"

      This reverts commit 904464b91eca8c665acea033489225af02eeb75a.

      The problem pointed out by commit 904464b91eca ("ARM: 7655/1:
      smp_twd: make twd_local_timer_of_register() no-op for nosmp")
      doesn't exist anymore.

      We can safely boot with nosmp and the warning won't show up.

      The other side benefit of this patch is that TWD has a chance
      to probe on single-core A9 systems such as AM437x which sport
      TWD.

      While at that, also drop SMP dependency from TWD's Kconfig entry.

      Cc: Shawn Guo <shawn.guo@xxxxxxxxxx>
      Cc: Dirk Behme <dirk.behme@xxxxxxxxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 2cf30826bbc6c940568be07e8fab0aee02165cf8
  Merge: 37cc7ab f4b4aae
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 10:53:05 2015 -0400

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Ingo Molnar:
       "Fixes all around the map: W+X kernel mapping fix, WCHAN fixes, two
        build failure fixes for corner case configs, x32 header fix and a
        speling fix"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/headers/uapi: Fix __BITS_PER_LONG value for x32 builds
        x86/mm: Set NX on gap between __ex_table and rodata
        x86/kexec: Fix kexec crash in syscall kexec_file_load()
        x86/process: Unify 32bit and 64bit implementations of get_wchan()
        x86/process: Add proper bound checks in 64bit get_wchan()
        x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels
        x86/hyperv: Fix the build in the !CONFIG_KEXEC_CORE case
        x86/cpufeatures: Correct spelling of the HWP_NOTIFY flag

  commit 37cc7ab1d2c317cc989b8aa0224cfc5f0478ccbd
  Merge: a758379 67dfae0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 10:51:41 2015 -0400

      Merge branch 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer fixes from Ingo Molnar:
       "An abs64() fix in the watchdog driver, and two clocksource driver
        NO_IRQ assumption fixes"

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        clocksource: Fix abs() usage w/ 64bit values
        clocksource/drivers/keystone: Fix bad NO_IRQ usage
        clocksource/drivers/rockchip: Fix bad NO_IRQ usage

  commit a758379b031f50b9def094aad071ef547a5cb335
  Merge: 14f97d9 0ce3cc0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 10:46:41 2015 -0400

      Merge branch 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull EFI fixes from Ingo Molnar:
       "Two EFI fixes: one for x86, one for ARM, fixing a boot crash bug that
        can trigger under newer EFI firmware"

      * 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        arm64/efi: Fix boot crash by not padding between EFI_MEMORY_RUNTIME 
regions
        x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at 
runtime, instead of top-down

  commit 14f97d9713283adfadf2193e287e21d079f72ee7
  Merge: 978ab6a ccf03d6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 10:39:31 2015 -0400

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Bunch of fixes all over the place, all pretty small: amdgpu, i915,
        exynos, one qxl and one vmwgfx.

        There is also a bunch of mst fixes, I left some cleanups in the series
        as I didn't think it was worth splitting up the tested series"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux: (37 commits)
        drm/dp/mst: add some defines for logical/physical ports
        drm/dp/mst: drop cancel work sync in the mstb destroy path (v2)
        drm/dp/mst: split connector registration into two parts (v2)
        drm/dp/mst: update the link_address_sent before sending the link 
address (v3)
        drm/dp/mst: fixup handling hotplug on port removal.
        drm/dp/mst: don't pass port into the path builder function
        drm/radeon: drop radeon_fb_helper_set_par
        drm: handle cursor_set2 in restore_fbdev_mode
        drm/exynos: Staticize local function in exynos_drm_gem.c
        drm/exynos: fimd: actually disable dp clock
        drm/exynos: dp: remove suspend/resume functions
        drm/qxl: recreate the primary surface when the bo is not primary
        drm/amdgpu: only print meaningful VM faults
        drm/amdgpu/cgs: remove import_gpu_mem
        drm/i915: Call non-locking version of drm_kms_helper_poll_enable(), v2
        drm: Add a non-locking version of drm_kms_helper_poll_enable(), v2
        drm/vmwgfx: Fix a command submission hang regression
        drm/exynos: remove unused mode_fixup() code
        drm/exynos: remove decon_mode_fixup()
        drm/exynos: remove fimd_mode_fixup()
        ...

  commit 4236e2a1ad679f3b57b23ba333f261b514814f4f
  Merge: 28117b0 9c70d7c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 05:16:50 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-30

      This series contains updates to i40e and i40evf only.

      Vasily Averin provides a couple of rtnl lock/unlock fixes for both i40e
      and i40evf.

      Shannon provides several updates and fixes, first fixes up a type clash
      in i40e_aq_rc_to_posix(), where the error codes are signed values, so we
      need to treat them as such.  Then fixes up a padding issue where an
      extra byte is added in i40e_aqc_get_cee_dcb_cfg_v1_resp to directly
      acknowledge the padding.  Updated i40e to keep debugfs register read
      and writes from accessing outside of the io-remapped space.  Added
      support and device id for another 20 GbE device.

      Jesse fixes the transmit hand workaround code for ARM that was causing
      Tx hangs to still occur occasionally when there really was no hang.  Then
      fixed the receive dropped counter to show up in netstat interface.
      Refactor the interrupt enable function since it was always making the
      caller add the base_vector from the VSI struct which is already passed
      to the function.  Fix kbuild warnings found in 0day build infrastructure
      by adding a harmless cast to a dev_info(), also fix 32 bit build
      warnings found by sparse.

      Greg fixed a configuration error that results if a port VLAN is set
      for a VF before the VF driver is loaded, so that when the VF driver is
      loaded the port VLAN is ignored.

      Mitch fixes the use of QOS field consistently in
      i40e_ndo_set_vf_port_vlan().  Modified the init timing of the driver
      to increase stability on load/unload and SR-IOV enable/disable cycles.

      Anjali updates i40e to not collect VEB stats if they are disabled in the
      hardware for performance reasons.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 28117b08e55a70322389c4366751b35a2bb9d393
  Merge: f8e1100 22d4df8
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 05:05:30 2015 -0700

      Merge branch 'ravb-r8a7795'

      Simon Horman says:

      ====================
      ravb: Add support for r8a7795 SoC

      please consider this series for net-next.
      It enhances the ravb driver to support the r8a7795 SoC.

      Changes:

      * Dropped RFC prefix
      * Details in changelog of individual patches

      Base:

      * net-next/master

      Availability:

      To aid review of this in conjunction with other EtherAVB changes
      the following branches are available in my renesas tree on kernel.org.

      * me/r8a7795-ravb-driver-v4: this series
      * me/r8a7795-ravb-pfc-v2: r8a7795 sh-pfc update for EthernetAVB
      * me/r8a7795-ravb-integration-v4: enable EthernetAVB on r8a7795
      * me/r8a7795-ravb-driver-and-integration-v4.runtime:
            the above three branches with their runtime dependencies
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 22d4df8ff3a3cc7251671d129a7185c66a929ddc
  Author: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
  Date:   Wed Sep 30 15:15:55 2015 +0900

      ravb: Add support for r8a7795 SoC

      This patch supports the r8a7795 SoC by:
      - Using two interrupts
        + One for E-MAC
        + One for everything else
        + Both can be handled by the existing common interrupt handler, which
          affords a simpler update to support the new SoC. In future some
          consideration may be given to implementing multiple interrupt handlers
      - Limiting the phy speed to 100Mbit/s for the new SoC;
        at this time it is not clear how this restriction may be lifted
        but I hope it will be possible as more information comes to light

      Signed-off-by: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
      [horms: reworked]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 619f3bd2e1f24dd6221e563e051c798844b83a93
  Author: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
  Date:   Wed Sep 30 15:15:54 2015 +0900

      ravb: Document binding for r8a7795 SoC

      This patch updates the ravb binding to support the r8a7795 SoC by:
      - Adding a compat string for the new hardware
      - Adding 25 named interrupts to binding for the new SoC;
        older SoCs continue to use a single multiplexed interrupt

      The example is also updated to reflect the r8a7795 as this is the
      more complex case.

      Based on work by Kazuya Mizuguchi and others.

      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e2dbb33ad9545de6859747b92556a74a81bed8f5
  Author: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
  Date:   Wed Sep 30 15:15:53 2015 +0900

      ravb: Provide dev parameter to DMA API

      This patch is in preparation for using this driver on arm64 where the
      implementation of __dma_alloc_coherent fails if a device parameter is not
      provided.

      Signed-off-by: Kazuya Mizuguchi <kazuya.mizuguchi.ks@xxxxxxxxxxx>
      Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Signed-off-by: Masaru Nagai <masaru.nagai.vx@xxxxxxxxxxx>
      [horms: squashed into a single patch]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f3a6bd393c2c5d0e6b16624ba99a1c5fa07bdb0b
  Author: Simon Horman <horms+renesas@xxxxxxxxxxxx>
  Date:   Wed Sep 30 15:15:52 2015 +0900

      phylib: Add phy_set_max_speed helper

      Add a helper to allow ethernet drivers to limit the speed of a phy
      (that they are attached to).

      This mainly involves factoring out the business-end of
      of_set_phy_supported() and exporting a new symbol.

      This code seems to be open coded in several places, in several different
      variants.

      It is is envisaged that this will be used in situations where setting the
      "max-speed" property in DT is not appropriate, e.g. because the maximum
      speed is not a property of the phy hardware.

      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8e1100afc4f362e94c2d4a3231f16c77beb6d1b
  Merge: bd8762b 754f1e6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 05:02:50 2015 -0700

      Merge branch 'bpf-updates'

      Daniel Borkmann says:

      ====================
      BPF updates

      Some minor updates to {cls,act}_bpf to retrieve routing realms
      and to make skb->priority writable.

      Thanks!

      v1 -> v2:
       - Dropped preclassify patch for now from the series as the
         rest is pretty much independent of it
       - Rest unchanged, only rebased and already posted Acked-by's kept
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 754f1e6a36c9b42525de223ee1ba628dcafbad41
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 01:41:52 2015 +0200

      sched, bpf: make skb->priority writable

      {cls,act}_bpf can now set the skb->priority from an eBPF program based
      on various critera, so that for example classful qdiscs like multiq can
      update the skb's priority during enqueue time and further push it down
      into subsequent qdiscs.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c46646d0484f5d08e2bede9b45034ba5b8b489cc
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 01:41:51 2015 +0200

      sched, bpf: add helper for retrieving routing realms

      Using routing realms as part of the classifier is quite useful, it
      can be viewed as a tag for one or multiple routing entries (think of
      an analogy to net_cls cgroup for processes), set by user space routing
      daemons or via iproute2 as an indicator for traffic classifiers and
      later on processed in the eBPF program.

      Unlike actions, the classifier can inspect device flags and enable
      netif_keep_dst() if necessary. tc actions don't have that possibility,
      but in case people know what they are doing, it can be used from there
      as well (e.g. via devs that must keep dsts by design anyway).

      If a realm is set, the handler returns the non-zero realm. User space
      can set the full 32bit realm for the dst.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a91263d520246b63c63e75ddfb072ee6a853fe15
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 01:41:50 2015 +0200

      ebpf: migrate bpf_prog's flags to bitfield

      As we need to add further flags to the bpf_prog structure, lets migrate
      both bools to a bitfield representation. The size of the base structure
      (excluding insns) remains unchanged at 40 bytes.

      Add also tags for the kmemchecker, so that it doesn't throw false
      positives. Even in case gcc would generate suboptimal code, it's not
      being accessed in performance critical paths.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bd8762bec95ed81d5b81390ff23c5f83345cb536
  Merge: c3fc7ac 9e8f4a5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 04:49:48 2015 -0700

      Merge branch 'switchdev-obj'

      Jiri Pirko says:

      ====================
      switchdev: bring back switchdev_obj

      Second version of the patch extends to a patchset. Basically this patchset
      brings object structure back which disappeared with recent Vivien's 
patchset.
      Also it does a bit of naming changes in order to get the things in line.
      Also, object id is put back into object structure.
      Thanks to Scott and Vivien for review and suggestions.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e8f4a548ab4710002c23c94c4b1bbde91b5e335
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:46 2015 +0200

      switchdev: push object ID back to object structure

      Suggested-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 648b4a995a057187ddd77cdb181e6a0b24ab2959
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:45 2015 +0200

      switchdev: bring back switchdev_obj and use it as a generic object param

      Replace "void *obj" with a generic structure. Introduce couple of
      helpers along that.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52ba57cfdc4c90da3bf996dfbe0c5feb731eb477
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:44 2015 +0200

      switchdev: rename switchdev_obj_fdb to switchdev_obj_port_fdb

      Make the struct name in sync with object id name.

      Suggested-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f24f3095dcedaa4eb4719eee2bed738fe2ce4a0
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:43 2015 +0200

      switchdev: rename switchdev_obj_vlan to switchdev_obj_port_vlan

      Make the struct name in sync with object id name.

      Suggested-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f86839874a50c9ee2009567d2f312b1e1949e24
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:42 2015 +0200

      switchdev: rename SWITCHDEV_ATTR_* enum values to SWITCHDEV_ATTR_ID_*

      To be aligned with obj.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 57d80838dae55c1bc6ca629e471c84100513079a
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:03:41 2015 +0200

      switchdev: rename SWITCHDEV_OBJ_* enum values to SWITCHDEV_OBJ_ID_*

      Suggested-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dd2bdd7072de328bfb88e45d372371a1fa189e87
  Merge: 02899e7 f9fef61
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 13:39:40 2015 +0200

      Merge tag 'phy-for-4.3-rc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kishon/linux-phy into usb-linus

      Kishon writes:

      phy: for 4.3-rc

      *) Fix compiler error in qcom-ufs when it is built as module
      *) Power down rockchip-usb PHY during probe to save power consumption
      *) Fix module autoload for berlin-sata PHY driver

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit c3fc7ac9a0b978ee8538058743d21feef25f7b33
  Merge: f6d3125 e994b2f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 3 04:32:52 2015 -0700

      Merge branch 'tcp-lockless-listener'

      Eric Dumazet says:

      ====================
      tcp/dccp: lockless listener

      TCP listener refactoring : this is becoming interesting !

      This patch series takes the steps to use normal TCP/DCCP ehash
      table to store SYN_RECV requests, instead of the private per-listener
      hash table we had until now.

      SYNACK skb are now attached to their syn_recv request socket,
      so that we no longer heavily modify listener sk_wmem_alloc.

      listener lock is no longer held in fast path, including
      SYNCOOKIE mode.

      During my tests, my server was able to process 3,500,000
      SYN packets per second on one listener and still had available
      cpu cycles.

      That is about 2 to 3 order of magnitude what we had with older kernels.

      This effort started two years ago and I am pleased to reach expectations.

      We'll probably extend SO_REUSEPORT to add proper cpu/numa affinities,
      so that heavy duty TCP servers can get proper siloing thanks to 
multi-queues
      NIC.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e994b2f0fb9229aeff5eea9541320bd7b2ca8714
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:39 2015 -0700

      tcp: do not lock listener to process SYN packets

      Everything should now be ready to finally allow SYN
      packets processing without holding listener lock.

      Tested:

      3.5 Mpps SYNFLOOD. Plenty of cpu cycles available.

      Next bottleneck is the refcount taken on listener,
      that could be avoided if we remove SLAB_DESTROY_BY_RCU
      strict semantic for listeners, and use regular RCU.

          13.18%  [kernel]  [k] __inet_lookup_listener
           9.61%  [kernel]  [k] tcp_conn_request
           8.16%  [kernel]  [k] sha_transform
           5.30%  [kernel]  [k] inet_reqsk_alloc
           4.22%  [kernel]  [k] sock_put
           3.74%  [kernel]  [k] tcp_make_synack
           2.88%  [kernel]  [k] ipt_do_table
           2.56%  [kernel]  [k] memcpy_erms
           2.53%  [kernel]  [k] sock_wfree
           2.40%  [kernel]  [k] tcp_v4_rcv
           2.08%  [kernel]  [k] fib_table_lookup
           1.84%  [kernel]  [k] tcp_openreq_init_rwin

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 92d6f176fdcce1a9c22a59d754c924168fdf2ce4
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:38 2015 -0700

      tcp/dccp: add a reschedule point in inet_csk_listen_stop()

      If a listener with thousands of children in accept queue
      is dismantled, it can take a while to close all of them.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef547f2ac16bd9d77a780a0e7c70857e69e8f23f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:37 2015 -0700

      tcp: remove max_qlen_log

      This control variable was set at first listen(fd, backlog)
      call, but not updated if application tried to increase or decrease
      backlog. It made sense at the time listener had a non resizeable
      hash table.

      Also rounding to powers of two was not very friendly.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 10cbc8f179177c1a6d5f56a46ebddc8f602ce5ac
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:36 2015 -0700

      tcp/dccp: remove struct listen_sock

      It is enough to check listener sk_state, no need for an extra
      condition.

      max_qlen_log can be moved into struct request_sock_queue

      We can remove syn_wait_lock and the alignment it enforced.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca6fb06518836ef9b65dc0aac02ff97704d52a05
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:35 2015 -0700

      tcp: attach SYNACK messages to request sockets instead of listener

      If a listen backlog is very big (to avoid syncookies), then
      the listener sk->sk_wmem_alloc is the main source of false
      sharing, as we need to touch it twice per SYNACK re-transmit
      and TX completion.

      (One SYN packet takes listener lock once, but up to 6 SYNACK
      are generated)

      By attaching the skb to the request socket, we remove this
      source of contention.

      Tested:

       listen(fd, 10485760); // single listener (no SO_REUSEPORT)
       16 RX/TX queue NIC
       Sustain a SYNFLOOD attack of ~320,000 SYN per second,
       Sending ~1,400,000 SYNACK per second.
       Perf profiles now show listener spinlock being next bottleneck.

          20.29%  [kernel]  [k] queued_spin_lock_slowpath
          10.06%  [kernel]  [k] __inet_lookup_established
           5.12%  [kernel]  [k] reqsk_timer_handler
           3.22%  [kernel]  [k] get_next_timer_interrupt
           3.00%  [kernel]  [k] tcp_make_synack
           2.77%  [kernel]  [k] ipt_do_table
           2.70%  [kernel]  [k] run_timer_softirq
           2.50%  [kernel]  [k] ip_finish_output
           2.04%  [kernel]  [k] cascade

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1b33bc3e9e903f7293f7dfe80a875b2a5d0305aa
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:34 2015 -0700

      ipv6: remove obsolete inet6 functions

      inet6_csk_search_req() and inet6_csk_reqsk_queue_hash_add()
      no longer exist.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 81b496b31a4331415b6a644b485a329ec0b45155
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:33 2015 -0700

      tcp/dccp: shrink struct listen_sock

      We no longer use hash_rnd, nr_table_entries and syn_table[]

      For a listener with a backlog of 10 millions sockets, this
      saves 80 MBytes of vmalloced memory.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 079096f103faca2dd87342cca6f23d4b34da8871
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:32 2015 -0700

      tcp/dccp: install syn_recv requests into ehash table

      In this patch, we insert request sockets into TCP/DCCP
      regular ehash table (where ESTABLISHED and TIMEWAIT sockets
      are) instead of using the per listener hash table.

      ACK packets find SYN_RECV pseudo sockets without having
      to find and lock the listener.

      In nominal conditions, this halves pressure on listener lock.

      Note that this will allow for SO_REUSEPORT refinements,
      so that we can select a listener using cpu/numa affinities instead
      of the prior 'consistent hash', since only SYN packets will
      apply this selection logic.

      We will shrink listen_sock in the following patch to ease
      code review.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Ying Cai <ycai@xxxxxxxxxx>
      Cc: Willem de Bruijn <willemb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2feda34192a379f8b35a7c6c5826b2f23e884f32
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:31 2015 -0700

      tcp/dccp: remove inet_csk_reqsk_queue_added() timeout argument

      This is no longer used.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aa3a0c8ce651b5e16124866b0a10d1b90b9ef022
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:30 2015 -0700

      tcp: get_openreq[46]() changes

      When request sockets are no longer in a per listener hash table
      but on regular TCP ehash, we need to access listener uid
      through req->rsk_listener

      get_openreq6() also gets a const for its request socket argument.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9cfd08601f49a4536e4407286b5f07b24293e474
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:29 2015 -0700

      tcp: remove BUG_ON() in tcp_check_req()

      Once listener is lockless, its sk_state can change anytime.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba8e275a457397ab06f3567cf7bef0d78a43ae7e
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:28 2015 -0700

      tcp: cleanup tcp_v[46]_inbound_md5_hash()

      We'll soon have to call tcp_v[46]_inbound_md5_hash() twice.
      Also add const attribute to the socket, as it might be the
      unlocked listener for SYN packets.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b267cdd1075d28501b7c05c7aeb8466775505e8d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:27 2015 -0700

      tcp/dccp: init sk_prot and call sk_node_init() in reqsk_alloc()

      We plan to use generic functions to insert request sockets
      into ehash table.

      sk_prot needs to be set (to retrieve sk_prot->h.hashinfo)
      sk_node needs to be cleared.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 38cb52455c2c3e8b5751350a3fb32e43e82e129a
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:26 2015 -0700

      tcp: call sk_mark_napi_id() on the child, not the listener

      This fixes a typo : We want to store the NAPI id on child socket.
      Presumably nobody really uses busy polling, on short lived flows.

      Fixes: 3d97379a67486 ("tcp: move sk_mark_napi_id() at the right place")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8d2675f1e464aa5cedda63849adecffd8d33fead
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:25 2015 -0700

      tcp: move synflood_warned into struct request_sock_queue

      long term plan is to remove struct listen_sock when its hash
      table is no longer there.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aac065c50aba0c534a929aeb687eb68c58e523b8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:24 2015 -0700

      tcp: move qlen/young out of struct listen_sock

      qlen_inc & young_inc were protected by listener lock,
      while qlen_dec & young_dec were atomic fields.

      Everything needs to be atomic for upcoming lockless listener.

      Also move qlen/young in request_sock_queue as we'll get rid
      of struct listen_sock eventually.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fff1f3001cc58b5064a0f1154a7ac09b76f29c44
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 2 11:43:23 2015 -0700

      tcp: add a spinlock to protect struct request_sock_queue

      struct request_sock_queue fields are currently protected
      by the listener 'lock' (not a real spinlock)

      We need to add a private spinlock instead, so that softirq handlers
      creating children do not have to worry with backlog notion
      that the listener 'lock' carries.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 02899e7a95844ff1f12d2b4795906c7bf5aab276
  Merge: 9ffecb1 f5f6afa
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 13:22:56 2015 +0200

      Merge tag 'fixes-for-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-linus

      Felipe writes:

      usb: fixes for v4.3-rc4

      A memory leak fix for the BCD UDC driver, a build
      warning fix on Renesas and a new device ID for R-Car H3.

      Nothing major.

      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 90b3b37383fd083481655d5529686ca4eda4da2b
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 13:46:19 2015 +0200

      EDAC, ppc4xx_edac: Fix module autoload for OF platform driver

      This platform driver has an OF device ID table but the OF module alias
      information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Reviewed-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150917114619.GA13145@xxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit eda7d0f38aaf50dbb2a2de15e8db386c4f6f65fc
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Sat Aug 8 22:16:42 2015 +0300

      iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()

      "num_read" is in byte units but we are write u16s so we end up write
      twice as much as intended.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Cc: <Stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit 61fd56309165d4790f99462d893b099f0b07312a
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Wed Sep 2 21:02:58 2015 +0200

      iio: st_accel: fix interrupt handling on LIS3LV02

      This accelerometer accidentally either emits a DRDY signal or an
      IRQ signal. Accidentally I activated the IRQ signal as I thought
      it was analogous to the interrupt generator on other ST
      accelerometers. This was wrong. After this patch generic_buffer
      gives a nice stream of accelerometer readings.

      Fixes: 3acddf74f807778f "iio: st-sensors: add support for lis3lv02d 
accelerometer"
      Cc: Denis CIOCCA <denis.ciocca@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: <Stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit 7cc97d77ee8a90a6389b96a62472cddc02475ffc
  Author: Adam YH Lee <adam.yh.lee@xxxxxxxxx>
  Date:   Tue Aug 4 11:15:48 2015 -0700

      iio: adc: twl4030: Fix ADC[3:6] readings

      MADC[3:6] reads incorrect values without these two following changes:

      - enable the 3v1 bias regulator for ADC[3:6]
      - configure ADC[3:6] lines as input, not as USB

      Signed-off-by: Adam YH Lee <adam.yh.lee@xxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit e8ff581f7ac2bc3b8886094b7ca635dcc4d1b0e9
  Author: John Flatness <john@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 17:07:49 2015 -0400

      ALSA: hda - Apply SPDIF pin ctl to MacBookPro 12,1

      The MacBookPro 12,1 has the same setup as the 11 for controlling the
      status of the optical audio light. Simply apply the existing workaround
      to the subsystem ID for the 12,1.

      [sorted the fixup entry by tiwai]

      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=105401
      Signed-off-by: John Flatness <john@xxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit d05ea7da0e8f6df3c62cfee75538f347cb3d89ef
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:09:54 2015 -0700

      ALSA: hda: Add dock support for ThinkPad T550

      Much like all the other Lenovo laptops, add a quirk to make
      sound work with docking.

      Reported-and-tested-by: lacknerflo@xxxxxxxxx
      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 54328e64047a54b8fc2362c2e1f0fa16c90f739f
  Author: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
  Date:   Fri Oct 2 11:44:30 2015 -0500

      rtlwifi: rtl8821ae: Fix system lockups on boot

      In commit 1277fa2ab2f9 ("rtlwifi: Remove the clear interrupt routine from 
all
      drivers"), the code that cleared all interrupt enable bits before setting 
them
      was removed for all PCI drivers. This fixed an issue that caused TX to be
      blocked for 3-5 seconds. On some RTL8821AE units, this change causes soft
      lockups to occur on boot. For that reason, the portion of the earlier 
commit
      that applied to rtl8821ae is reverted. Kernels 4.1 and newer are affected.

      See http://marc.info/?l=linux-wireless&m=144373370103285&w=2 and
      https://bugzilla.opensuse.org/show_bug.cgi?id=944978 for two cases where
      this regression affected user systems. Note that this bug does not appear 
on
      any of the developer's setups. For those users whose systems are affected
      by the TX blockage, but do not lock up on boot, a module parameter is 
added
      to disable the interrupt clear

      Fixes: 1277fa2ab2f9 ("rtlwifi: Remove the clear interrupt routine from 
all drivers")
      Signed-off-by: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
      Cc: Stable <stable@xxxxxxxxxxxxxxx> [V4.1+]
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit e3b0ac1b7a8a590440a2030e7d10d48c59ab8a2a
  Merge: c2365b9 19afd10
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Oct 3 08:20:14 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

       - Do event name substring search as last resort in 'perf list'.
         (Arnaldo Carvalho de Melo)

         E.g.:

          # perf list clock

          List of pre-defined events (to be used in -e):

           cpu-clock                                          [Software event]
           task-clock                                         [Software event]

           uncore_cbox_0/clockticks/                          [Kernel PMU event]
           uncore_cbox_1/clockticks/                          [Kernel PMU event]

           kvm:kvm_pvclock_update                             [Tracepoint event]
           kvm:kvm_update_master_clock                        [Tracepoint event]
           power:clock_disable                                [Tracepoint event]
           power:clock_enable                                 [Tracepoint event]
           power:clock_set_rate                               [Tracepoint event]
           syscalls:sys_enter_clock_adjtime                   [Tracepoint event]
           syscalls:sys_enter_clock_getres                    [Tracepoint event]
           syscalls:sys_enter_clock_gettime                   [Tracepoint event]
           syscalls:sys_enter_clock_nanosleep                 [Tracepoint event]
           syscalls:sys_enter_clock_settime                   [Tracepoint event]
           syscalls:sys_exit_clock_adjtime                    [Tracepoint event]
           syscalls:sys_exit_clock_getres                     [Tracepoint event]
           syscalls:sys_exit_clock_gettime                    [Tracepoint event]
           syscalls:sys_exit_clock_nanosleep                  [Tracepoint event]
           syscalls:sys_exit_clock_settime                    [Tracepoint event]

       - Reduce min 'perf stat --interval-print/-I' to 10ms. (Kan Liang)

         perf stat --interval in action:

         # perf stat -e cycles -I 50 -a usleep $((200 * 1000))
         print interval < 100ms. The overhead percentage could be high in some 
cases. Please proceed with caution.
         #   time                    counts unit events
            0.050233636         48,240,396      cycles
            0.100557098         35,492,594      cycles
            0.150804687         39,295,112      cycles
            0.201032269         33,101,961      cycles
            0.201980732            786,379      cycles
        #

       - Allow for max_stack greater than PERF_MAX_STACK_DEPTH, as when
         synthesizing callchains from Intel PT data. (Adrian Hunter)

       - Allow probing on kmodules without DWARF. (Masami Hiramatsu)

       - Fix a segfault when processing a perf.data file with callchains using
         "perf report --call-graph none". (Namhyung Kim)

       - Fix unresolved COMMs in 'perf top' when -s comm is used. (Namhyung Kim)

       - Register idle thread in 'perf top'. (Namhyung Kim)

       - Change 'record.samples' type to unsigned long long, fixing output of
         number of samples in 32-bit architectures. (Yang Shi)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 21d19f87d483fbac66ca24863b8c8d52a7ab539d
  Author: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
  Date:   Sat Oct 3 05:02:28 2015 +0200

      NFC: nci: Use __nci_request for exported routines

      Since we do not know in which context drivers will call these
      routines, they should use the unlocked version of nci_request,
      i.e. __nci_request.
      It is up to drivers to know/decide if they need to take the
      req_lock mutex before calling those routines. When being called
      from the NCI setup routine there is no need to do so as ops->setup
      is called under req_lock.

      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 69c308e2bcc303ab3eebb9b554de598dd4597b75
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 21:07:18 2015 +0900

      pinctrl: pinconf-generic: add "input-schmitt" DT property

      PIN_CONFIG_INPUT_SCHMITT is defined in enum_pin_config_param,
      but the corresponding DT property is missing.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 3c4b23dd71ea6f68be9731b68877fbc05f4fb693
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 21:07:17 2015 +0900

      pinctrl: pinconf-generic: sort pin configuration params alphabetically

      Currently, the dt_params array in drivers/pinctrl/pinconf-generic.c
      is not sorted in the same order as the enum pin_config_param in
      include/linux/pinctrl/pinconf-generic.h.

      Sort enum pin_config_param, conf_items, dt_params, alphabetically
      for consistency.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 2db8aba860c70478f6af18c410a3e513a2d2f541
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Tue Sep 29 12:55:44 2015 +0200

      gpio: pca953x: Add TI TCA9539 support

      The TCA9539 is almost identical to the PCA9555 and software-compatible
      with this driver. It exposes 16 general purpose I/O pins in two 8-bit
      configurations.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 7474f23dd05713dacc5f22d309913c96bce1c92b
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Sep 26 22:18:20 2015 +0200

      gpio: max730x: eliminate double free

      The function __max730x_remove is called from the remove functions of
      drivers/gpio/gpio-max7300.c and drivers/gpio/gpio-max7301.c.  In both
      cases, the probe function allocates ts using devm_kzalloc.  Explicitly
      freeing such a value with kfree will cause a double free.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Reviewed-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 978ab6a009e6691375a0b6f8a44ebbb471a64b6d
  Merge: 5634347 62d7846
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 17:53:25 2015 -0400

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

      Pull input layer fixes from Dmitry Torokhov:
       "Fixes for two recent regressions (in Synaptics PS/2 and uinput
        drivers) and some more driver fixups"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
        Revert "Input: synaptics - fix handling of disabling gesture mode"
        Input: psmouse - fix data race in __ps2_command
        Input: elan_i2c - add all valid ic type for i2c/smbus
        Input: zhenhua - ensure we have BITREVERSE
        Input: omap4-keypad - fix memory leak
        Input: serio - fix blocking of parport
        Input: uinput - fix crash when using ABS events
        Input: elan_i2c - expand maximum product_id form 0xFF to 0xFFFF
        Input: elan_i2c - add ic type 0x03
        Input: elan_i2c - don't require known iap version
        Input: imx6ul_tsc - fix controller name
        Input: imx6ul_tsc - use the preferred method for kzalloc()
        Input: imx6ul_tsc - check for negative return value
        Input: imx6ul_tsc - propagate the errors
        Input: walkera0701 - fix abs() calculations on 64 bit values
        Input: mms114 - remove unneded semicolons
        Input: pm8941-pwrkey - remove unneded semicolon
        Input: fix typo in MT documentation
        Input: cyapa - fix address of Gen3 devices in device tree documentation

  commit 89092fb0701d3b4070ade6d0aa04640720f52fbd
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 28 11:41:13 2015 +0200

      pinctrl: at91-pio4: irq argument as been removed from irq flow handlers

      Irq argument as been removed from irq flow handlers so use the irq
      descriptor to retrieve data we need.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 3fd550c6b3cb364a0d3f0e4abf64618b998dc6b4
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 28 11:41:12 2015 +0200

      pinctrl: at91-pio4: use irq_set_handler_locked

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a169400b506e98bb90a92c7211f4bed751341750
  Author: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 11:11:09 2015 -0500

      pinctrl: freescale: imx: imx7d iomuxc-lpsr devicetree bindings

      Add iomuxc-lpsr devicetree bindings documentation
      Provide documentation context as well an example on
      pheriperals that could use pad from either iomuxc controller
      supported by iMX7D SoC

      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 978fd1d7265aee0d8be501f416017d029e6977a7
  Author: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 11:11:08 2015 -0500

      pinctrl: freescale: imx7d: support iomux lpsr controller

      iMX7D has two iomuxc controllers, iomuxc controller similar as
      previous iMX SoC generation and iomuxc-lpsr which provides low
      power state rentetion capabilities on gpios that are part of
      iomuxc-lpsr

      Add iomuxc-lpsr gpio group id's

      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 26d8cde5260b5d0236d50501b6ef1a444774b33b
  Author: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 16:06:00 2015 -0500

      pinctrl: freescale: imx: add shared input select reg support

      - Add shared input select register support
      - imx7d has two iomux controllers iomuxc and iomuxc-lpsr
        which share select_input register for daisy chain settings

      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e7b37a522aa92da5f47106aa07b6c1fc58bfd922
  Author: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 16:05:59 2015 -0500

      pinctrl: freescale: imx: allow mux_reg offset zero

      Allow mux_reg offset zero to be a valid pin_id, on imx7d
      mux_conf reg offset is zero for iomuxc-lspr controller

      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aa6555622cdf443f0b001352fdc3afb6e7bce20d
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Fri Oct 2 10:47:29 2015 +0300

      nl802154: Missing return in nl802154_add_llsec_key()

      There was a missing return here so it meant that often
      ieee802154_llsec_parse_key_id() was not called.

      Fixes: a26c5fd7622d ('nl802154: add support for security layer')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 67dfae0cd72fec5cd158b6e5fb1647b7dbe0834c
  Author: John Stultz <john.stultz@xxxxxxxxxx>
  Date:   Mon Sep 14 18:05:20 2015 -0700

      clocksource: Fix abs() usage w/ 64bit values

      This patch fixes one cases where abs() was being used with 64-bit
      nanosecond values, where the result may be capped at 32-bits.

      This potentially could cause watchdog false negatives on 32-bit
      systems, so this patch addresses the issue by using abs64().

      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Prarit Bhargava <prarit@xxxxxxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442279124-7309-2-git-send-email-john.stultz@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2b02ec79004388a8c65e227bc289ed891b5ac8c6
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 2 16:12:07 2015 -0400

      drm/radeon: add quirk for ASUS R7 370

      Bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=92260

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit fa022a9b65d2886486a022fd66b20c823cd76ad9
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Wed Sep 30 17:05:40 2015 -0400

      drm/amdgpu: add pm sysfs files late

      They were added relatively early in the driver init process
      which meant that in some cases the driver was not finished
      initializing before external tools tried to use them which
      could result in a crash depending on the timing.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 51a4726b04e880fdd9b4e0e58b13f70b0a68a7f5
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Wed Sep 30 16:45:52 2015 -0400

      drm/radeon: add pm sysfs files late

      They were added relatively early in the driver init process
      which meant that in some cases the driver was not finished
      initializing before external tools tried to use them which
      could result in a crash depending on the timing.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 450fa54cfd66e3dda6eda26256637ee8928af12a
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Fri Sep 25 12:28:03 2015 -0700

      gpio: omap: convert to use generic irq handler

      This patch converts TI OMAP GPIO driver to use generic irq handler
      instead of chained IRQ handler. This way OMAP GPIO driver will be
      compatible with RT kernel where it will be forced thread IRQ handler
      while in non-RT kernel it still will be executed in HW IRQ context.
      As part of this change the IRQ wakeup configuration is applied to
      GPIO Bank IRQ as it now will be under control of IRQ PM Core during
      suspend.

      There are also additional benefits:
       - on-RT kernel there will be no complains any more about PM runtime usage
         in atomic context  "BUG: sleeping function called from invalid 
context";
       - GPIO bank IRQs will appear in /proc/interrupts and its usage statistic
          will be  visible;
       - GPIO bank IRQs could be configured through IRQ proc_fs interface and,
         as result, could be a part of IRQ balancing process if needed;
       - GPIO bank IRQs will be under control of IRQ PM Core during
         suspend to RAM.

      Disadvantage:
       - additional runtime overhed as call chain till
         omap_gpio_irq_handler() will be longer now
       - necessity to use wa_lock in omap_gpio_irq_handler() to W/A warning
         in handle_irq_event_percpu()
         WARNING: CPU: 1 PID: 35 at kernel/irq/handle.c:149 
handle_irq_event_percpu+0x51c/0x638()

      This patch doesn't fully follows recommendations provided by Sebastian
      Andrzej Siewior [1], because It's required to go through and check all
      GPIO IRQ pin states as fast as possible and pass control to 
handle_level_irq
      or handle_edge_irq. handle_level_irq or handle_edge_irq will perform 
actions
      specific for IRQ triggering type and wakeup corresponding registered
      threaded IRQ handler (at least it's expected to be threaded).
      IRQs can be lost if handle_nested_irq() will be used, because excecution
      time of some pin specific GPIO IRQ handler can be very significant and
      require accessing ext. devices (I2C).

      Idea of such kind reworking was also discussed in [2].

      [1] http://www.spinics.net/lists/linux-omap/msg120665.html
      [2] http://www.spinics.net/lists/linux-omap/msg119516.html

      Tested-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: Austin Schuh <austin@xxxxxxxxxxxxxxxx>
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Acked-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 19afd10410957b1c808c2c49a88e6dd8b23aa894
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Oct 2 05:04:34 2015 -0400

      perf stat: Reduce min --interval-print to 10ms

      The --interval-print parameter was limited to 100ms. However, for
      example, 10ms is required to do sophisticated bandwidth analysis using
      uncore events.

      The test shows that the overhead of the system-wide uncore monitoring
      with 10ms interval is only ~2%. So this patch reduces the minimal
      interval-print allowd to 10ms.

      But 10ms may not work well for all cases. For example, when the
      cpus/threads number is very large, for system-wide core event monitoring
      the overhead could be high.

      To handle this issue, a warning will be displayed when the
      interval-print is set between 10ms to 100ms. So users can make a
      decision according to their specific cases.

       # perf stat -e uncore_imc_1/cas_count_read/ -a --interval-print 10 -- 
sleep 1

       print interval < 100ms. The overhead percentage could be high in some
       cases. Please proceed with caution.
       #           time             counts unit events
            0.010200451               0.10 MiB  uncore_imc_1/cas_count_read/
            0.020475117               0.02 MiB  uncore_imc_1/cas_count_read/
            0.030692800               0.01 MiB  uncore_imc_1/cas_count_read/
            0.040948161               0.02 MiB  uncore_imc_1/cas_count_read/
            0.051159564               0.00 MiB  uncore_imc_1/cas_count_read/

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443776674-42511-1-git-send-email-kan.liang@xxxxxxxxx
      [ Added warning about overhead when using sub 100ms intervals to the man 
page ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8dbb09570d16929fefd492410d60a918bc18ad5b
  Merge: 5e99b53 72c0217
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 15:49:33 2015 -0400

      Merge tag 'nfs-rdma-for-4.3-2' of 
git://git.linux-nfs.org/projects/anna/nfs-rdma

      NFS: NFSoRDMA bugfix

      Fixes a use-after-free bug.

      Signed-off-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>

  commit 5e99b532bb95f8e6bf39f4500f0caef070bac16d
  Author: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 13:14:37 2015 -0400

      nfs4: reset states to use open_stateid when returning delegation 
voluntarily

      When the client goes to return a delegation, it should always update any
      nfs4_state currently set up to use that delegation stateid to instead
      use the open stateid. It already does do this in some cases,
      particularly in the state recovery code, but not currently when the
      delegation is voluntarily returned (e.g. in advance of a RENAME).  This
      causes the client to try to continue using the delegation stateid after
      the DELEGRETURN, e.g. in LAYOUTGET.

      Set the nfs4_state back to using the open stateid in
      nfs4_open_delegation_recall, just before clearing the
      NFS_DELEGATED_STATE bit.

      Signed-off-by: Jeff Layton <jeff.layton@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit e92c1e0d40c50472f80820bd829645ce9fefd6c1
  Author: Benjamin Coddington <bcodding@xxxxxxxxxx>
  Date:   Thu Oct 1 09:17:33 2015 -0400

      NFSv4: Fix a nograce recovery hang

      Since commit 5cae02f42793130e1387f4ec09c4d07056ce9fa5 an OPEN_CONFIRM 
should
      have a privileged sequence in the recovery case to allow nograce recovery 
to
      proceed for NFSv4.0.

      Signed-off-by: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 72d79ff83c34d430a9f7f72c45717905762ef4d9
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:44:54 2015 -0400

      NFSv4.1: nfs4_opendata_check_deleg needs to handle 
NFS4_OPEN_CLAIM_DELEG_CUR_FH

      We need to warn against broken NFSv4.1 servers that try to hand out
      delegations in response to NFS4_OPEN_CLAIM_DELEG_CUR_FH.

      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 4a0954ef347de7409ddf8f8153d893827d3feba8
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:11:16 2015 -0400

      NFSv4: Don't try to reclaim unused state owners

      Currently, we don't test if the state owner is in use before we try to
      recover it. The problem is that if the refcount is zero, then the
      state owner will be waiting on the lru list for garbage collection.
      The expectation in that case is that if you bump the refcount, then
      you must also remove the state owner from the lru list. Otherwise
      the call to nfs4_put_state_owner will corrupt that list by trying
      to add our state owner a second time.

      Avoid the whole problem by just skipping state owners that hold no
      state.

      Reported-by: Andrew W Elble <aweits@xxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 8fa4592a14ebb3c22a21d846d1e4f65dab7d1a7c
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 18:38:27 2015 -0400

      NFS: Fix a write performance regression

      If all other conditions in nfs_can_extend_write() are met, and there
      are no locks, then we should be able to assume close-to-open semantics
      and the ability to extend our write to cover the whole page.

      With this patch, the xfstests generic/074 test completes in 242s instead
      of >1400s on my test rig.

      Fixes: bd61e0a9c852 ("locks: convert posix locks to file_lock_context")
      Cc: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 40f90271a835478e5910dc84f32b8e25885419a4
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 11:36:38 2015 -0400

      NFS: Fix up page writeback accounting

      Currently, we are crediting all the calls to nfs_writepages_callback()
      (i.e. the nfs_writepages() callback) to nfs_writepage(). Aside from
      being inconsistent with the behaviour of the equivalent readpage/readpages
      accounting, this also means that we cannot distinguish between bulk writes
      and single page writebacks (which confuses the 'nfsiostat -p' tool).

      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 9f065194e2a505bb6fd23946b410a0036e9de2ca
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Tue Sep 29 14:49:43 2015 -0700

      perf record: Change 'record.samples' type to unsigned long long

      When run "perf record -e", the number of samples showed up is wrong on 
some
      32 bit systems, i.e. powerpc and arm.

      For example, run the below commands on 32 bit powerpc:

        perf probe -x /lib/libc.so.6 malloc
        perf record -e probe_libc:malloc -a ls perf.data
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.036 MB perf.data 
(13829241621624967218 samples) ]

      Actually, "perf script" just shows 21 samples. The number of samples is 
also
      absurd since samples is long type, but it is printed as PRIu64.

      Build test ran on x86-64, x86, aarch64, arm, mips, ppc and ppc64.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Cc: linaro-kernel@xxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443563383-4064-1-git-send-email-yang.shi@xxxxxxxxxx
      [ Bumped the 'hits' var used together with record.samples to 'unsigned 
long long' too ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1a8ac29cbffc261f6d7c92e573878110a7dcbd94
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Fri Oct 2 21:58:32 2015 +0900

      perf probe: Allow probing on kmodules without dwarf

      Allow probing on kernel modules when 'perf' is built without debuginfo
      support.

      Currently perf-probe --module requires linking with libdw, but this
      doesn't make sense.

      E.g.
        ----
        # make NO_DWARF=1
        # ./perf probe -m pcspkr pcspkr_event%return
          Error: unknown switch `m'
        ----

      With this patch
        ----
        # ./perf probe -m pcspkr pcspkr_event%return
        Added new event:
          probe:pcspkr_event   (on pcspkr_event%return in pcspkr)

        You can now use it in all perf tools, such as:

                perf record -e probe:pcspkr_event -aR sleep 1
        ----

      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20151002125832.18617.78721.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5634347dee31373a8faf084f4cdbf6d5ea0b03a4
  Merge: b55a97e ee556d0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 14:54:16 2015 -0400

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Catalin Marinas:

       - Fix for transparent huge page change_protection() logic which was
         inadvertently changing a huge pmd page into a pmd table entry.

       - Function graph tracer panic fix caused by the return_to_handler code
         corrupting the multi-regs function return value (composite types).

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: ftrace: fix function_graph tracer panic
        arm64: Fix THP protection change logic

  commit b55a97e759c9e9efdce0470f520026383c514a13
  Merge: 83dc311 95bc06e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 14:51:46 2015 -0400

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k

      Pull m68k updates from Geert Uytterhoeven:
       "Summary:
         - Fix for accidental modification of arguments of syscall functions
         - Wire up new syscalls
         - Update defconfigs"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k:
        m68k/defconfig: Update defconfigs for v4.3-rc1
        m68k: Define asmlinkage_protect
        m68k: Wire up membarrier
        m68k: Wire up userfaultfd
        m68k: Wire up direct socket calls

  commit 791c76d58465a248cbd1ee422c8075cb90fa615f
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 16:44:06 2015 +0100

      irqchip/gic-v3-its: Count additional LPIs for the aliased devices

      When configuring the interrupt mapping for a new device, we
      iterate over all the possible aliases to account for their
      maximum MSI allocation. This was introduced by e8137f4f5088
      ("irqchip: gicv3-its: Iterate over PCI aliases to generate ITS 
configuration").

      Turns out that the code doing that is a bit braindead, and repeatedly
      accounts for the same device over and over.

      Fix this by counting the actual alias that is passed to us by the
      core code.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Alex Shi <alex.shi@xxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: David Daney <ddaney.cavm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443800646-8074-3-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c8415b9470727f70afce8607d4fe521789aa6c1c
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Fri Oct 2 16:44:05 2015 +0100

      irqchip/gic-v3-its: Silence warning when its_lpi_alloc_chunks gets inlined

      More agressive inlining in recent versions of GCC have uncovered
      a new set of warnings:

       drivers/irqchip/irq-gic-v3-its.c: In function its_msi_prepare:
        drivers/irqchip/irq-gic-v3-its.c:1148:26: warning: lpi_base may be used
          uninitialized in this function [-Wmaybe-uninitialized]
           dev->event_map.lpi_base = lpi_base;
                                ^
       drivers/irqchip/irq-gic-v3-its.c:1116:6: note: lpi_base was declared here
        int lpi_base;
              ^
       drivers/irqchip/irq-gic-v3-its.c:1149:25: warning: nr_lpis may be used
        uninitialized in this function [-Wmaybe-uninitialized]
         dev->event_map.nr_lpis = nr_lpis;
                                 ^
       drivers/irqchip/irq-gic-v3-its.c:1117:6: note: nr_lpis was declared here
        int nr_lpis;
              ^
      The warning is fairly benign (there is no code path that could
      actually use uninitialized variables), but let's silence it anyway
      by zeroing the variables on the error path.

      Reported-by: Alex Shi <alex.shi@xxxxxxxxxx>
      Tested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: David Daney <ddaney.cavm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443800646-8074-2-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 83dc311ce0b430ee8e37e62976e6753bfd022004
  Merge: 27728bf 7b09a1b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 14:46:15 2015 -0400

      Merge tag 'dmaengine-fix-4.3-rc4' of 
git://git.infradead.org/users/vkoul/slave-dma

      Pull dmaengine fixes from Vinod Koul:
       "This contains fixes spread throughout the drivers, and also fixes one
        more instance of privatecnt in dmaengine.

        Driver fixes summary:
         - bunch of pxa_dma fixes for reuse of descriptor issue, residue and
           no-requestor
         - odd fixes in xgene, idma, sun4i and zxdma
         - at_xdmac fixes for cleaning descriptor and block addr mode"

      * tag 'dmaengine-fix-4.3-rc4' of 
git://git.infradead.org/users/vkoul/slave-dma:
        dmaengine: pxa_dma: fix residue corner case
        dmaengine: pxa_dma: fix the no-requestor case
        dmaengine: zxdma: Fix off-by-one for testing valid pchan request
        dmaengine: at_xdmac: clean used descriptor
        dmaengine: at_xdmac: change block increment addressing mode
        dmaengine: dw: properly read DWC_PARAMS register
        dmaengine: xgene-dma: Fix overwritting DMA tx ring
        dmaengine: fix balance of privatecnt
        dmaengine: sun4i: fix unsafe list iteration
        dmaengine: idma64: improve residue estimation
        dmaengine: xgene-dma: fix handling xgene_dma_get_ring_size result
        dmaengine: pxa_dma: fix initial list move

  commit 27728bf04b99a0abc5c27343c06e18379f57c726
  Merge: 36f8daf 0bf6cd5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 14:40:57 2015 -0400

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull block fixes from Jens Axboe:
       "Another week, another round of fixes.

        These have been brewing for a bit and in various iterations, but I
        feel pretty comfortable about the quality of them.  They fix real
        issues.  The pull request is mostly blk-mq related, and the only one
        not fixing a real bug, is the tag iterator abstraction from Christoph.
        But it's pretty trivial, and we'll need it for another fix soon.

        Apart from the blk-mq fixes, there's an NVMe affinity fix from Keith,
        and a single fix for xen-blkback from Roger fixing failure to free
        requests on disconnect"

      * 'for-linus' of git://git.kernel.dk/linux-block:
        blk-mq: factor out a helper to iterate all tags for a request_queue
        blk-mq: fix racy updates of rq->errors
        blk-mq: fix deadlock when reading cpu_list
        blk-mq: avoid inserting requests before establishing new mapping
        blk-mq: fix q->mq_usage_counter access race
        blk-mq: Fix use after of free q->mq_map
        blk-mq: fix sysfs registration/unregistration race
        blk-mq: avoid setting hctx->tags->cpumask before allocation
        NVMe: Set affinity after allocating request queues
        xen/blkback: free requests on disconnection

  commit fa52ceabc2a3e70431a82bca2bc547a15eaf19df
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Oct 2 15:28:16 2015 -0300

      perf list: Honour 'event_glob' whem printing selectable PMUs

      Some PMUs, like the 'intel_bts' one can be used as an event name, i.e.:

        $ perf record -e intel_bts:// usleep 1

      Is a valid event name.

      But the code printing such PMUs was not honouring the 'event_glob'
      parameter, so the following line was always appearing:

        $ intel_bts//                                        [Kernel PMU event]

      Fix it:

        $ [acme@felicio linux]$ perf list data

        List of pre-defined events (to be used in -e):

          uncore_imc/data_reads/                             [Kernel PMU event]
          uncore_imc/data_writes/                            [Kernel PMU event]

        $

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ajb71858n7q7ao77b8pyy74w@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9f30a04d768f64280dc0c40b730746e82f298d88
  Merge: 9e294bf 7aba4f5
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:15:13 2015 -0700

      Merge branch 'for-4.3-rc/ti-clk-fixes' of 
https://github.com/t-kristo/linux-pm into clk-fixes

      Pull fixes from Tero Kristo:

      "A few TI clock driver fixes to pull against 4.3-rc"

      * 'for-4.3-rc/ti-clk-fixes' of https://github.com/t-kristo/linux-pm: (3 
commits)
        clk: ti: dflt: fix enable_reg validity check
        clk: ti: fix dual-registration of uart4_ick
        clk: ti: clk-7xx: Remove hardwired ABE clock configuration

  commit 62d78461447198b49383f20301aaa15fe97dfa4f
  Author: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
  Date:   Fri Oct 2 10:31:32 2015 -0700

      Revert "Input: synaptics - fix handling of disabling gesture mode"

      This reverts commit e51e38494a8ecc18650efb0c840600637891de2c: we
      actually do want the device to work in extended W mode, as this is the
      mode that allows us receiving multiple contact information.

      Cc: stable@xxxxxxxxxxxxxxx

  commit 66803dd9198cb57a4b7ed4a6846a63ab1d59a2e0
  Author: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 17:40:42 2015 +1300

      MIPS: Octeon: Fix kernel panic on startup from memory corruption

      During development it was found that a number of builds would panic
      during the kernel init process, more specifically in 'delayed_fput()'.
      The panic showed the kernel trying to access a memory address of
      '0xb7fdc00' while traversing the 'delayed_fput_list' structure.
      Comparing this memory address to the value of the pointer used on
      builds that did not panic confirmed that the pointer on crashing
      builds must have been corrupted at some stage earlier in the init
      process.

      By traversing the list earlier and earlier in the code it was found
      that 'plat_mem_setup()' was responsible for corrupting the list.
      Specifically the line:

          memory = cvmx_bootmem_phy_alloc(mem_alloc_size,
                        __pa_symbol(&__init_end), -1,
                        0x100000,
                        CVMX_BOOTMEM_FLAG_NO_LOCKING);

      Which would eventually call:

          cvmx_bootmem_phy_set_size(new_ent_addr,
                cvmx_bootmem_phy_get_size
                (ent_addr) -
                (desired_min_addr -
                        ent_addr));

      Where 'new_ent_addr'=0x4800000 (the address of 'delayed_fput_list')
      and the second argument (size)=0xb7fdc00 (the address causing the
      kernel panic). The job of this part of 'plat_mem_setup()' is to
      allocate chunks of memory for the kernel to use. At the start of
      each chunk of memory the size of the chunk is written, hence the
      value 0xb7fdc00 is written onto memory at 0x4800000, therefore the
      kernel panics when it goes back to access 'delayed_fput_list' later
      on in the initialisation process.

      On builds that were not crashing it was found that the compiler had
      placed 'delayed_fput_list' at 0x4800008, meaning it wasn't corrupted
      (but something else in memory was overwritten).

      As can be seen in the first function call above the code begins to
      allocate chunks of memory beginning from the symbol '__init_end'.
      The MIPS linker script (vmlinux.lds.S) however defines the .bss
      section to begin after '__init_end'. Therefore memory within the
      .bss section is allocated to the kernel to use (System.map shows
      'delayed_fput_list' and other kernel structures to be in .bss).

      To stop the kernel panic (and the .bss section being corrupted)
      memory should begin being allocated from the symbol '_end'.

      Signed-off-by: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
      Acked-by: David Daney <david.daney@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: aleksey.makarov@xxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11251/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 085c2f25d36ef4a69bb1dab933daee0692426f15
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Mon Sep 21 10:07:42 2015 -0700

      MIPS: Fix R2300 FP context switch handling

      Commit 1a3d59579b9f ("MIPS: Tidy up FPU context switching") removed FP
      context saving from the asm-written resume function in favour of reusing
      existing code to perform the same task. However it only removed the FP
      context saving code from the r4k_switch.S implementation of resume.
      Remove it from the r2300_switch.S implementation too in order to prevent
      attempting to save the FP context twice, which would likely lead to an
      exception from the second save because the FPU had already been disabled
      by the first save.

      This patch has only been build tested, using rbtx49xx_defconfig.

      Fixes: 1a3d59579b9f ("MIPS: Tidy up FPU context switching")
      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Manuel Lauss <manuel.lauss@xxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11167/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 0fa24340f7c88d2814547d8d24d5e3a1803009cc
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Mon Sep 21 10:07:41 2015 -0700

      MIPS: Fix octeon FP context switch handling

      Commit 1a3d59579b9f ("MIPS: Tidy up FPU context switching") removed FP
      context saving from the asm-written resume function in favour of reusing
      existing code to perform the same task. However it only removed the FP
      context saving code from the r4k_switch.S implementation of resume.
      Octeon uses its own implementation in octeon_switch.S, so remove FP
      context saving there too in order to prevent attempting to save context
      twice. That formerly led to an exception from the second save as follows
      because the FPU had already been disabled by the first save:

          do_cpu invoked from kernel context![#1]:
          CPU: 0 PID: 2 Comm: kthreadd Not tainted 4.3.0-rc2-dirty #2
          task: 800000041f84a008 ti: 800000041f864000 task.ti: 800000041f864000
          $ 0   : 0000000000000000 0000000010008ce1 0000000000100000 
ffffffffbfffffff
          $ 4   : 800000041f84a008 800000041f84ac08 800000041f84c000 
0000000000000004
          $ 8   : 0000000000000001 0000000000000000 0000000000000000 
0000000000000001
          $12   : 0000000010008ce3 0000000000119c60 0000000000000036 
800000041f864000
          $16   : 800000041f84ac08 800000000792ce80 800000041f84a008 
ffffffff81758b00
          $20   : 0000000000000000 ffffffff8175ae50 0000000000000000 
ffffffff8176c740
          $24   : 0000000000000006 ffffffff81170300
          $28   : 800000041f864000 800000041f867d90 0000000000000000 
ffffffff815f3fa0
          Hi    : 0000000000fa8257
          Lo    : ffffffffe15cfc00
          epc   : ffffffff8112821c resume+0x9c/0x200
          ra    : ffffffff815f3fa0 __schedule+0x3f0/0x7d8
          Status: 10008ce2        KX SX UX KERNEL EXL
          Cause : 1080002c (ExcCode 0b)
          PrId  : 000d0601 (Cavium Octeon+)
          Modules linked in:
          Process kthreadd (pid: 2, threadinfo=800000041f864000, 
task=800000041f84a008, tls=0000000000000000)
          Stack : ffffffff81604218 ffffffff815f7e08 800000041f84a008 
ffffffff811681b0
                    800000041f84a008 ffffffff817e9878 0000000000000000 
ffffffff81770000
                    ffffffff81768340 ffffffff81161398 0000000000000001 
0000000000000000
                    0000000000000000 ffffffff815f4424 0000000000000000 
ffffffff81161d68
                    ffffffff81161be8 0000000000000000 0000000000000000 
0000000000000000
                    0000000000000000 0000000000000000 0000000000000000 
ffffffff8111e16c
                    0000000000000000 0000000000000000 0000000000000000 
0000000000000000
                    0000000000000000 0000000000000000 0000000000000000 
0000000000000000
                    0000000000000000 0000000000000000 0000000000000000 
0000000000000000
                    0000000000000000 0000000000000000 0000000000000000 
0000000000000000
                    ...
          Call Trace:
          [<ffffffff8112821c>] resume+0x9c/0x200
          [<ffffffff815f3fa0>] __schedule+0x3f0/0x7d8
          [<ffffffff815f4424>] schedule+0x34/0x98
          [<ffffffff81161d68>] kthreadd+0x180/0x198
          [<ffffffff8111e16c>] ret_from_kernel_thread+0x14/0x1c

      Tested using cavium_octeon_defconfig on an EdgeRouter Lite.

      Fixes: 1a3d59579b9f ("MIPS: Tidy up FPU context switching")
      Reported-by: Aaro Koskinen <aaro.koskinen@xxxxxxxxx>
      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Aleksey Makarov <aleksey.makarov@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Chandrakala Chavva <cchavva@xxxxxxxxxxxxxxxxxx>
      Cc: David Daney <david.daney@xxxxxxxxxx>
      Cc: Leonid Rosenboim <lrosenboim@xxxxxxxxxxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11166/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 924eb475126fd6bc23c475ac742a69fc466c0b75
  Author: yitian <yitian.bu@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 22:43:17 2015 +0800

      ASoC: dwc: fix dma stop transferring issue

      Designware I2S uses tx empty and rx available signals as the DMA
      handshaking signals. during music playing, if XRUN occurs,
      i2s_stop() function will be executed and both tx and rx irq are
      masked, when music continues to be played, i2s_start() is executed
      but both tx and rx irq are not unmasked which cause I2S stop
      sending DMA handshaking signal to DMA controller, and it finally
      causes music playing will be stopped once XRUN occurs for the first
      time.

      [On list discussion suggests this may be partly a race condition on slow
      systems -- broonie]

      Signed-off-by: Yitian Bu <yitian.bu@xxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 042745ee53a0a7c1f5aff191a4a24213c6dcfb52
  Author: Mikulas Patocka <mpatocka@xxxxxxxxxx>
  Date:   Fri Oct 2 11:17:37 2015 -0400

      dm raid: fix round up of default region size

      Commit 3a0f9aaee028 ("dm raid: round region_size to power of two")
      intended to make sure that the default region size is a power of two.
      However, the logic in that commit is incorrect and sets the variable
      region_size to 0 or 1, depending on whether min_region_size is a power
      of two.

      Fix this logic, using roundup_pow_of_two(), so that region_size is
      properly rounded up to the next power of two.

      Signed-off-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Fixes: 3a0f9aaee028 ("dm raid: round region_size to power of two")
      Cc: stable@xxxxxxxxxxxxxxx # v3.8+
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit f6d3125fa3c2f55ddf7cf69365c41089de6cfae6
  Merge: 2dc6a03 36f8daf
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 2 07:21:25 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Conflicts:
        net/dsa/slave.c

      net/dsa/slave.c simply had overlapping changes.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d61e87ac53292a3138b4354b687558973686b6ca
  Merge: 9ffecb1 6d3cbfa
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Oct 2 15:23:42 2015 +0200

      Merge tag 'pull_req_4.3_rc4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mzx/devfreq into pm-devfreq

      Pull devfreq fixes for v4.3-rc5 from MyungJoo Ham.

      * tag 'pull_req_4.3_rc4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mzx/devfreq:
        PM / devfreq: fix double kfree
        PM / devfreq: Fix governor_store()

  commit aca82d1cbb49af34b69ecd4571a0fe48ad9247c1
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Fri Sep 25 12:28:02 2015 -0700

      gpio: omap: move pm runtime in irq_chip.irq_bus_lock/sync_unlock

      The PM runtime API can't be used in atomic contex on -RT even if
      it's configured as irqsafe. As result, below error report can
      be seen when PM runtime API called from IRQ chip's callbacks
      irq_startup/irq_shutdown/irq_set_type, because they are
      protected by RAW spinlock:

      BUG: sleeping function called from invalid context at 
kernel/locking/rtmutex.c:917
      in_atomic(): 1, irqs_disabled(): 128, pid: 96, name: insmod
      3 locks held by insmod/96:
       #0:  (&dev->mutex){......}, at: [<c04752c8>] __driver_attach+0x54/0xa0
       #1:  (&dev->mutex){......}, at: [<c04752d4>] __driver_attach+0x60/0xa0
       #2:  (class){......}, at: [<c00a408c>] __irq_get_desc_lock+0x60/0xa4
      irq event stamp: 1834
      hardirqs last  enabled at (1833): [<c06ab2a4>] 
_raw_spin_unlock_irqrestore+0x88/0x90
      hardirqs last disabled at (1834): [<c06ab068>] 
_raw_spin_lock_irqsave+0x2c/0x64
      softirqs last  enabled at (0): [<c003d220>] 
copy_process.part.52+0x410/0x19d8
      softirqs last disabled at (0): [<  (null)>]   (null)
      Preemption disabled at:[<  (null)>]   (null)

      CPU: 1 PID: 96 Comm: insmod Tainted: G        W  O    
4.1.3-rt3-00618-g57e2387-dirty #184
      Hardware name: Generic DRA74X (Flattened Device Tree)
      [<c00190f4>] (unwind_backtrace) from [<c0014734>] (show_stack+0x20/0x24)
      [<c0014734>] (show_stack) from [<c06a62ec>] (dump_stack+0x88/0xdc)
      [<c06a62ec>] (dump_stack) from [<c006ca44>] (___might_sleep+0x198/0x2a8)
      [<c006ca44>] (___might_sleep) from [<c06ab6d4>] (rt_spin_lock+0x30/0x70)
      [<c06ab6d4>] (rt_spin_lock) from [<c04815ac>] 
(__pm_runtime_resume+0x68/0xa4)
      [<c04815ac>] (__pm_runtime_resume) from [<c04123f4>] 
(omap_gpio_irq_type+0x188/0x1d8)
      [<c04123f4>] (omap_gpio_irq_type) from [<c00a64e4>] 
(__irq_set_trigger+0x68/0x130)
      [<c00a64e4>] (__irq_set_trigger) from [<c00a7bc4>] 
(irq_set_irq_type+0x44/0x6c)
      [<c00a7bc4>] (irq_set_irq_type) from [<c00abbf8>] 
(irq_create_of_mapping+0x120/0x174)
      [<c00abbf8>] (irq_create_of_mapping) from [<c0577b74>] 
(of_irq_get+0x48/0x58)
      [<c0577b74>] (of_irq_get) from [<c0540a14>] (i2c_device_probe+0x54/0x15c)
      [<c0540a14>] (i2c_device_probe) from [<c04750dc>] 
(driver_probe_device+0x184/0x2c8)
      [<c04750dc>] (driver_probe_device) from [<c0475310>] 
(__driver_attach+0x9c/0xa0)
      [<c0475310>] (__driver_attach) from [<c0473238>] 
(bus_for_each_dev+0x7c/0xb0)
      [<c0473238>] (bus_for_each_dev) from [<c0474af4>] 
(driver_attach+0x28/0x30)
      [<c0474af4>] (driver_attach) from [<c0474760>] 
(bus_add_driver+0x154/0x200)
      [<c0474760>] (bus_add_driver) from [<c0476348>] 
(driver_register+0x88/0x108)
      [<c0476348>] (driver_register) from [<c0541600>] 
(i2c_register_driver+0x3c/0x90)
      [<c0541600>] (i2c_register_driver) from [<bf003018>] 
(pcf857x_init+0x18/0x24 [gpio_pcf857x])
      [<bf003018>] (pcf857x_init [gpio_pcf857x]) from [<c000998c>] 
(do_one_initcall+0x128/0x1e8)
      [<c000998c>] (do_one_initcall) from [<c06a4220>] 
(do_init_module+0x6c/0x1bc)
      [<c06a4220>] (do_init_module) from [<c00dd0c8>] 
(load_module+0x18e8/0x21c4)
      [<c00dd0c8>] (load_module) from [<c00ddaa0>] (SyS_init_module+0xfc/0x158)
      [<c00ddaa0>] (SyS_init_module) from [<c000ff40>] 
(ret_fast_syscall+0x0/0x54)

      The IRQ chip interface defines only two callbacks which are executed in
      non-atomic contex - irq_bus_lock/irq_bus_sync_unlock, so lets move
      PM runtime calls there.

      Tested-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: Austin Schuh <austin@xxxxxxxxxxxxxxxx>
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Acked-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ee1635180a8437b8ea4ea2233fd3d3ab1ae95a49
  Author: Robin Gong <b38343@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:53:57 2015 -0500

      pinctrl: freescale: imx: fix system crash if enable two pinctl instances

      Fix system chrash caused by groups whose number is smaller than the number
      of groups of the last pinctl instance which is not initialized.

      iMX7D supports two iomux controllers (iomuxc-lpsr and iomuxc) on probing
      the second instance (iomuxc) the chrash below occurs.

      Uncompressing Linux... done, booting the kernel.
      [    0.000000] Booting Linux on physical CPU 0x0
      [    0.000000] Linux version 4.2.0-next-20150901-00006-gebfa43c 
(aalonso@bluefly)
      [    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7)
      [    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasin 
instruction cache
      [    0.000000] Machine model: Freescale i.MX7 SabreSD Board
      [    0.661012] [<802a6cb0>] (strcmp) from [<802cc80c>] 
(imx_dt_node_to_map+0x58/0x208)
      [    0.668879] [<802cc80c>] (imx_dt_node_to_map) from [<802cbe24>] 
(pinctrl_dt_to_map+0x174/0x2b0)
      [    0.677654] [<802cbe24>] (pinctrl_dt_to_map) from [<802c8f18>] 
(pinctrl_get+0x100/0x424)
      [    0.685878] [<802c8f18>] (pinctrl_get) from [<802c9510>] 
(pinctrl_register+0x26c/0x480)
      [    0.694104] [<802c9510>] (pinctrl_register) from [<802ccf3c>] 
(imx_pinctrl_probe+0x580/0x6e8)
      [    0.702706] [<802ccf3c>] (imx_pinctrl_probe) from [<80351b58>] 
(platform_drv_probe+0x44/0xa4)
      [    0.711455] [<80351b58>] (platform_drv_probe) from [<803503ec>] 
(driver_probe_device+0x174/0x2b4)
      [    0.720405] [<803503ec>] (driver_probe_device) from [<803505fc>] 
(__driver_attach+0x8c/0x90)
      [    0.728982] [<803505fc>] (__driver_attach) from [<8034e930>] 
(bus_for_each_dev+0x6c/0xa0)
      [    0.737381] [<8034e930>] (bus_for_each_dev) from [<8034fb88>] 
(bus_add_driver+0x148/0x1f0)
      [    0.745804] [<8034fb88>] (bus_add_driver) from [<80350c00>] 
(driver_register+0x78/0xf8)
      [    0.753880] [<80350c00>] (driver_register) from [<800097d0>] 
(do_one_initcall+0x8c/0x1d4)
      [    0.762282] [<800097d0>] (do_one_initcall) from [<80987dac>] 
(kernel_init_freeable+0x144/0x1e4)
      [    0.771061] [<80987dac>] (kernel_init_freeable) from [<806d9c7c>] 
(kernel_init+0x8/0xe8)
      [    0.779285] [<806d9c7c>] (kernel_init) from [<8000f628>] 
(ret_from_fork+0x14/0x2c)
      [    0.786981] Code: e3520000 e5e32001 1afffffb e12fff1e (e4d03001)

      Signed-off-by: Robin Gong <b38343@xxxxxxxxxxxxx>
      Signed-off-by: Adrian Alonso <aalonso@xxxxxxxxxxxxx>
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 36f8dafe52b0d0726edd5102900e37192f1d3c65
  Merge: 8c25ab8 031277d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 08:03:04 2015 -0400

      Merge tag 'mmc-v4.3-rc3' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC fixes from Ulf Hansson:
       "Here are some mmc fixes intended for v4.3 rc4:

        MMC core:
         - Allow users of mmc_of_parse() to succeed when CONFIG_GPIOLIB is
           unset
         - Prevent infinite loop of re-tuning for CRC-errors for CMD19 and
           CMD21

         MMC host:
         - pxamci: Fix issues with card detect
         - sunxi: Fix clk-delay settings"

      * tag 'mmc-v4.3-rc3' of git://git.linaro.org/people/ulf.hansson/mmc:
        mmc: core: fix dead loop of mmc_retune
        mmc: pxamci: fix card detect with slot-gpio API
        mmc: sunxi: Fix clk-delay settings
        mmc: core: Don't return an error for CD/WP GPIOs when GPIOLIB is unset

  commit de4e882f3fbef586304837518c424787bdfca8b8
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Fri Sep 25 11:14:09 2015 +0200

      pinctrl: at91-pio4: add PM stuff

      Allow GPIOs to be configured as wakeup sources. When going to suspend,
      disable all GPIO irqs excepting the one configured as wakeup sources.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 8c25ab8b5a04a7c559aa8fd4cabe5fc4463b8ada
  Merge: bde17b9 15bbdec
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 07:59:29 2015 -0400

      Merge git://git.infradead.org/intel-iommu

      Pull IOVA fixes from David Woodhouse:
       "The main fix here is the first one, fixing the over-allocation of
         size-aligned requests.  The other patches simply make the existing
        IOVA code available to users other than the Intel VT-d driver, with no
        functional change.

        I concede the latter really *should* have been submitted during the
        merge window, but since it's basically risk-free and people are
        waiting to build on top of it and it's my fault I didn't get it in, I
        (and they) would be grateful if you'd take it"

      * git://git.infradead.org/intel-iommu:
        iommu: Make the iova library a module
        iommu: iova: Export symbols
        iommu: iova: Move iova cache management to the iova library
        iommu/iova: Avoid over-allocating when size-aligned

  commit 69d301fdd19635a39cb2b78e53fdd625b7a27924
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Sep 24 15:05:45 2015 -0700

      gpio: add DT bindings for existing consumer flags

      It is customary for GPIO controllers to support open drain/collector
      and open source/emitter configurations. Add standard GPIO line flags
      to account for this and augment the documentation to say that these
      are the most generic bindings.

      Several people approached me to add new flags to the lines, and this
      makes sense, but let's first bind up the most common cases before we
      start to add exotic stuff.

      Thanks to H. Nikolaus Schaller for ideas on how to encode single-ended
      wiring such as open drain/source and open collector/emitter.

      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit b8664924e8071b67b99f05b13e669e20104d7709
  Author: Diego Elio Pettenò <flameeyes@xxxxxxxxxxxx>
  Date:   Mon Sep 21 18:24:24 2015 +0200

      gpio: add GPIO support for IT87xx, replacing gpio-it8761e

      This patch adds support for the GPIOs found on the ITE super-I/O chips
      IT87xx.

      Signed-off-by: Diego Elio Pettenò <flameeyes@xxxxxxxxxxxx>
      Signed-off-by: Christophe Vu-Brugier <cvubrugier@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 48b5953ed826224a1332f2fd784d37d5f084ca9c
  Author: Dirk Behme <dirk.behme@xxxxxxxxx>
  Date:   Tue Aug 18 18:02:32 2015 +0200

      gpio: gpiolib: don't compare an unsigned for >= 0

      The parameter offset is an unsigned, so it makes no sense to compare
      it for >= 0. Fix the compiler warning regarding this by removing this
      comparison.

      As the macro GPIO_OFFSET_VALID is only used at this single place, simplify
      the code by dropping the macro completely and dropping the invert, too.

      No functional change.

      Signed-off-by: Dirk Behme <dirk.behme@xxxxxxxxx>
      Acked-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 633a5065939ae75a07bc37c110399a3faf065147
  Author: Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 16:59:01 2015 +0100

      gpio: arizona: add support for WM8998 and WM1814

      Signed-off-by: Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c75a37720480819291ebca0db7fab4e87c46f73d
  Author: Nicholas Krause <xerofoify@xxxxxxxxx>
  Date:   Wed Aug 26 17:52:19 2015 -0400

      gpio: Fix error checking in the function device_pca957x_init

      This fixes error checking in the function device_pca957x_init
      to properly check and return error code values from the calls
      to the function pca953x_write_regs if they fail as to properly
      signal callers when a error occurs due a failure when writing
      registers for this gpio based device.

      Signed-off-by: Nicholas Krause <xerofoify@xxxxxxxxx>
      Reviewed-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 49a5bd880cb63fba9f4589a89d68b8a255062a5f
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Tue Sep 1 11:38:02 2015 +0200

      gpio: ath79: Convert to the state container design pattern

      Turn the ath79 driver into a true driver supporting multiple
      instances. While at it also removed unneed includes and make use of
      the BIT() macro.

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9f3538280301bb953bf159d5ce9fc1f41482aa4c
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Fri Aug 28 14:48:56 2015 -0700

      gpio: msm: Remove unused driver

      Remove this driver now that Bjorn has introduced a pinctrl driver
      for msm8660 and the dts files have been updated with the pinctrl
      compatibles.

      Cc: Andy Gross <agross@xxxxxxxxxxxxxx>
      Reviewed-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit fa9795d1121e18a6ee2d0f8b2e837f51d63d4b00
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Aug 27 14:26:46 2015 +0200

      gpio: zynq: use container_of() to get state container

      The state container of the Zynq GPIO driver is sometimes
      extracted from the gpio_chip exploiting the fact that offsetof()
      the struct gpio_chip inside the struct zynq_gpio is 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct zynq_gpio in front of struct gpio_chip,
      things will break. Using proper container_of() avoids this
      problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Also replace some explicit container_of() calls with the helper
      function.

      Cc: Lars-Peter Clausen <lars@xxxxxxxxxx>
      Cc: Ezra Savard <ezra.savard@xxxxxxxxxx>
      Cc: Michal Simek <michal.simek@xxxxxxxxxx>
      Acked-by: Harini Katakam <harinik@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 2f930643c581f3fe45568f24a8aba93af46ff287
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Aug 27 14:13:46 2015 +0200

      gpio: vf610: use container_of() to get state container

      The state container of the vf610 GPIO driver is sometimes
      extracted from the gpio_chip exploiting the fact that offsetof()
      the struct gpio_chip inside the struct vf610_gpio_port is 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct vf610_gpio_port in front of struct gpio_chip,
      things will break. Using proper container_of() avoids this
      problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Also replace some explicit container_of() calls with the helper
      function.

      Acked-by: Stefan Agner <stefan@xxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 218f1f8b50aef5438fd95a4e3d64549bf9c459c3
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Aug 25 11:26:04 2015 +0200

      gpio: sx150x: use container_of() to get state container

      The state container of the sx150x GPIO driver is sometimes
      extracted from the gpio_chip exploiting the fact that offsetof()
      the struct gpio_chip inside the struct sx150x_chip is 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct sx150_chip in front of struct gpio_chip, things
      will break. Using proper container_of() avoids this problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Cc: Wei Chen <Wei.Chen@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 231d51b8a4d5b24e72112bbc73fdcc38759a26e3
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Aug 25 10:54:12 2015 +0200

      gpio: altera: use container_of() to get state container

      The state container of the Altera GPIO driver is extracted from
      the gpio_chip exploiting the fact that offsetof() the
      struct gpio_chip inside the struct of_mm_gpio_chip are both 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct altera_gpio_chip in front of
      struct of_mm_gpio_chip, things will break. Using proper
      container_of() avoids this problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Cc: Tien Hock Loh <thloh@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4843289e60e16bed00b7c3b910e67fb06214631a
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Aug 25 10:40:23 2015 +0200

      gpio: etraxfs: use container_of() to get state container

      The state container of the etraxfs GPIO driver is extracted from
      the gpio_chip exploiting the fact that offsetof() the
      struct gpio_chip inside the struct bgpio_chip are both 0, so
      the container_of() is in practice a noop. However if a member
      is added to struct etraxfs_gpio_chip in front of
      struct bgpio_chip, things will break. Using proper container_of()
      avoids this problem.

      Semantically this is a noop, the compiler will optimize it away,
      but syntactically it makes me happier.

      Acked-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 1dbf7f299f90dc4b45e2322a3af843ad65e1501b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Thu Sep 17 14:21:25 2015 +0200

      gpio: pl061: detail IRQ trigger handling

      I couldn't follow this code flow. Make it dirt simple to figure
      out what is going on and get proper debug prints. Warn if we
      set up an IRQ without any trigger. Should make no semantic
      difference.

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4730f33f0d822fd8d0f5d2229793a5df674fed5c
  Author: Vishnu Patekar <vishnupatekar0510@xxxxxxxxx>
  Date:   Tue Sep 22 23:38:55 2015 +0800

      pinctrl: sunxi: add allwinner A83T PIO controller support

      Allwinner A83T soc port controller has 8 ports.
      It has 3 IRQ banks namely PB, PG, PH.
      Pinmuxing are different for some pins as compared to
      sun8i A23 and A33.

      Signed-off-by: Vishnu Patekar <vishnupatekar0510@xxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e86c62066e7be8b9f5284842ca8347991dd02edf
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 21:26:47 2015 +0900

      pinctrl: uniphier: add SD card pinmux settings

      Add SD card pinmux settings for PH1-LD4, PH1-Pro4, PH1-sLD8,
      PH1-Pro5, ProXstream2, and PH1-LD6b SoCs.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit be2cbd4dbbe63cfb6888f6ce96f1ac87eddae513
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:31 2015 +0200

      pinctrl: samsung: Remove unneded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e44118997523cc62c893ba019a1fd3e0c43d6877
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:30 2015 +0200

      pinctrl: mediatek: Remove unneded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Hongzhou Yang <hongzhou.yang@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5c99c0ffa4ee284961a0214b171748df0edf16f4
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:29 2015 +0200

      pinctrl: sunxi: Remove unneeded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 14316c4ca9675ee086e3635b58340aaa7f6976e5
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:28 2015 +0200

      pinctrl: mxs: Remove unneded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 1978c5ec0f8310df856a4a725048635725b673fa
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:27 2015 +0200

      pinctrl: tz1090-pdc: Remove unneded semicolons

      They aren't needed and are just creating null statements so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 916888838441e13155495f4d7e812e3bb0f5b875
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:28:26 2015 +0200

      pinctrl: tz1090: Remove unneded semicolons

      They aren't needed and are just creating null statements so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit de7f8e3e6b1bb6e3e400bf675e4052fa3d927987
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 21:26:46 2015 +0900

      pinctrl: uniphier: fix input enable settings for PH1-sLD8

      Currently, input enable settings are missing from the PH1-sLD8
      pinctrl driver.  (All the entries in the pin table are set to
      UNIPHIER_PIN_IECTRL_NONE).

      Fill the table with correct values.

      Fixes: 95372f9dc892 ("pinctrl: UniPhier: add UniPhier PH1-sLD8 pinctrl 
driver")
      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9911a2d5e9d14e39692b751929a92cb5a1d9d0e0
  Author: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
  Date:   Wed Sep 23 16:35:09 2015 +0200

      pinctrl: imx25: ensure that a pin with id i is at position i in the info 
array

      The code in pinctrl-imx.c only works correctly if in the
      imx_pinctrl_soc_info passed to imx_pinctrl_probe we have:

        info->pins[i].number = i
        conf_reg(info->pins[i]) = 4 * i

      (which conf_reg(pin) being the offset of the pin's configuration
      register).

      When the imx25 specific part was introduced in b4a87c9b966f ("pinctrl:
      pinctrl-imx: add imx25 pinctrl driver") we had:

        info->pins[i].number = i + 1
        conf_reg(info->pins[i]) = 4 * i

      . Commit 34027ca2bbc6 ("pinctrl: imx25: fix numbering for pins") tried
      to fix that but made the situation:

        info->pins[i-1].number = i
        conf_reg(info->pins[i-1]) = 4 * i

      which is hardly better but fixed the error seen back then.

      So insert another reserved entry in the array to finally yield:

        info->pins[i].number = i
        conf_reg(info->pins[i]) = 4 * i

      Fixes: 34027ca2bbc6 ("pinctrl: imx25: fix numbering for pins")
      Signed-off-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d50a9e1b6de45db883f594cea0ecd1379fd3f669
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Sat Sep 19 17:56:44 2015 -0400

      pinctrl: sun5i: Fix a10s pwm1 pinctrl mapping

      The comment for PG14 mux setting 3 already correctly states that this
      muxes PG13 to pwm1, but the text ascociated with it said uart3, fix this.

      Note that we use "pwm" rather then "pwm1" to be consistent with pwm0
      where the mux setting is also simply called "pwm" and to be consistent
      with sun4i/sun7i which do the same.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4873867e5f2bd90faad861dd94865099fc3140f3
  Author: Yitian Bu <buyitian@xxxxxxxxx>
  Date:   Fri Oct 2 15:18:41 2015 +0800

      ASoC: dwc: correct irq clear method

      from Designware I2S datasheet, tx/rx XRUN irq is cleared by
      reading register TOR/ROR, rather than by writing into them.

      Signed-off-by: Yitian Bu <yitian.bu@xxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit ee556d00cf20012e889344a0adbbf809ab5015a3
  Author: Li Bin <huawei.libin@xxxxxxxxxx>
  Date:   Wed Sep 30 10:49:55 2015 +0800

      arm64: ftrace: fix function_graph tracer panic

      When function graph tracer is enabled, the following operation
      will trigger panic:

      mount -t debugfs nodev /sys/kernel
      echo next_tgid > /sys/kernel/tracing/set_ftrace_filter
      echo function_graph > /sys/kernel/tracing/current_tracer
      ls /proc/

      ------------[ cut here ]------------
      [  198.501417] Unable to handle kernel paging request at virtual address 
cb88537fdc8ba316
      [  198.506126] pgd = ffffffc008f79000
      [  198.509363] [cb88537fdc8ba316] *pgd=00000000488c6003, 
*pud=00000000488c6003, *pmd=0000000000000000
      [  198.517726] Internal error: Oops: 94000005 [#1] SMP
      [  198.518798] Modules linked in:
      [  198.520582] CPU: 1 PID: 1388 Comm: ls Tainted: G
      [  198.521800] Hardware name: linux,dummy-virt (DT)
      [  198.522852] task: ffffffc0fa9e8000 ti: ffffffc0f9ab0000 task.ti: 
ffffffc0f9ab0000
      [  198.524306] PC is at next_tgid+0x30/0x100
      [  198.525205] LR is at return_to_handler+0x0/0x20
      [  198.526090] pc : [<ffffffc0002a1070>] lr : [<ffffffc0000907c0>] 
pstate: 60000145
      [  198.527392] sp : ffffffc0f9ab3d40
      [  198.528084] x29: ffffffc0f9ab3d40 x28: ffffffc0f9ab0000
      [  198.529406] x27: ffffffc000d6a000 x26: ffffffc000b786e8
      [  198.530659] x25: ffffffc0002a1900 x24: ffffffc0faf16c00
      [  198.531942] x23: ffffffc0f9ab3ea0 x22: 0000000000000002
      [  198.533202] x21: ffffffc000d85050 x20: 0000000000000002
      [  198.534446] x19: 0000000000000002 x18: 0000000000000000
      [  198.535719] x17: 000000000049fa08 x16: ffffffc000242efc
      [  198.537030] x15: 0000007fa472b54c x14: ffffffffff000000
      [  198.538347] x13: ffffffc0fada84a0 x12: 0000000000000001
      [  198.539634] x11: ffffffc0f9ab3d70 x10: ffffffc0f9ab3d70
      [  198.540915] x9 : ffffffc0000907c0 x8 : ffffffc0f9ab3d40
      [  198.542215] x7 : 0000002e330f08f0 x6 : 0000000000000015
      [  198.543508] x5 : 0000000000000f08 x4 : ffffffc0f9835ec0
      [  198.544792] x3 : cb88537fdc8ba316 x2 : cb88537fdc8ba306
      [  198.546108] x1 : 0000000000000002 x0 : ffffffc000d85050
      [  198.547432]
      [  198.547920] Process ls (pid: 1388, stack limit = 0xffffffc0f9ab0020)
      [  198.549170] Stack: (0xffffffc0f9ab3d40 to 0xffffffc0f9ab4000)
      [  198.582568] Call trace:
      [  198.583313] [<ffffffc0002a1070>] next_tgid+0x30/0x100
      [  198.584359] [<ffffffc0000907bc>] ftrace_graph_caller+0x6c/0x70
      [  198.585503] [<ffffffc0000907bc>] ftrace_graph_caller+0x6c/0x70
      [  198.586574] [<ffffffc0000907bc>] ftrace_graph_caller+0x6c/0x70
      [  198.587660] [<ffffffc0000907bc>] ftrace_graph_caller+0x6c/0x70
      [  198.588896] Code: aa0003f5 2a0103f4 b4000102 91004043 (885f7c60)
      [  198.591092] ---[ end trace 6a346f8f20949ac8 ]---

      This is because when using function graph tracer, if the traced
      function return value is in multi regs ([x0-x7]), return_to_handler
      may corrupt them. So in return_to_handler, the parameter regs should
      be protected properly.

      Cc: <stable@xxxxxxxxxxxxxxx> # 3.18+
      Signed-off-by: Li Bin <huawei.libin@xxxxxxxxxx>
      Acked-by: AKASHI Takahiro <takahiro.akashi@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 12597e4539e60975d934ae42a33e765d1857bf04
  Merge: b4b05b9 819fd4b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 2 02:25:01 2015 -0700

      Merge branch 'sh-pfc-for-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/renesas-drivers into devel

  commit 819fd4bfcc84805c48291de511c917596e911ffa
  Author: Takeshi Kihara <takeshi.kihara.df@xxxxxxxxxxx>
  Date:   Tue Sep 15 14:49:15 2015 +0900

      pinctrl: sh-pfc: r8a7795: add EtherAVB support

      This patch adds EthernetAVB

      Based on a much lager patch by Takeshi Kihara which was
      originally posted by Kuninori Morimoto.

      Signed-off-by: Takeshi Kihara <takeshi.kihara.df@xxxxxxxxxxx>
      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      [horms: extracted from a larger patch;
              corrected swapped {MATCH,CAPTURE_A} pins]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 9b132ba3e31773ad9371f4a296c5a99ac483fb40
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Fri Sep 18 01:54:25 2015 +0000

      pinctrl: sh-pfc: r8a7795: add Audio SSI pin support

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit c33a7fe39975f64edbbbfafcaef268fb162d5d63
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Fri Sep 18 01:54:02 2015 +0000

      pinctrl: sh-pfc: r8a7795: add Audio clock pin support

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 2544ef72306a34344cc636272d8567f5682ca4fb
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Fri Sep 18 01:53:33 2015 +0000

      pinctrl: sh-pfc: r8a7795: add I2C pin support

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit ff8459a5061670960f944fcefc4b69af77e14739
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Sep 3 02:52:07 2015 +0000

      pinctrl: sh-pfc: r8a7795: add SCIFx support

      This patch adds SCIF0/1/2/3/4/5

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      [Morimoto-san: Updated]
      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 0b0ffc96dbe30fa9d966a6f8a9ce9f276fd4007f
  Author: Takeshi Kihara <takeshi.kihara.df@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:51:49 2015 +0000

      pinctrl: sh-pfc: Initial R8A7795 PFC support

      Add PFC base support for the R8A7795 SoC.

      Signed-off-by: Takeshi Kihara <takeshi.kihara.df@xxxxxxxxxxx>
      [Morimoto-san: updated]
      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 5451d09259d59e37430575676e3344cf41735b33
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:51:21 2015 +0000

      pinctrl: sh-pfc: remove unused PINMUX_IPSR_MODSEL_DATA()

      Now, all PINMUX_IPSR_MODSEL_DATA() are replased to PINMUX_IPSR_MSEL()
      Let's remove unused PINMUX_IPSR_MODSEL_DATA()

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 759151401c9dc2e929b34c8d7d863c78c8240496
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:50:58 2015 +0000

      pinctrl: sh-pfc: r8a7779: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit af5132dd12c5a1fab0c2500168dfed2cbf6179b6
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:50:38 2015 +0000

      pinctrl: sh-pfc: r8a7790: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 13ce3c39d0c45fe32398b90422c78f7a8a2b8970
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:50:16 2015 +0000

      pinctrl: sh-pfc: r8a7791: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit adedb87fb61f5a418a1aabdb989bc0f55895e44f
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:49:56 2015 +0000

      pinctrl: sh-pfc: r8a7794: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 3d8c120be3fc003c0a0a8dc5a0e77f2dbd20ee68
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:49:36 2015 +0000

      pinctrl: sh-pfc: sh7734: use PINMUX_IPSR_MSEL()

      Now, PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA() are same.

      Current PFC driver is very difficult to read, because macro names are
      using different length.

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can use PINMUX_IPSR_MSEL() instead
      of PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 2b67bccb478773347717d21781cf2bfd6db5c9fd
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Thu Sep 3 02:49:14 2015 +0000

      pinctrl: sh-pfc: modify PINMUX_IPSR_MSEL() macro order

      The difference between PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA()
      are FN_xxx order, and PINMUX_IPSR_MSEL() is used only from r8a7778.
      Now it r8a7778 works correctly with PINMUX_IPSR_MODSEL_DATA() order.
      This means we can merge PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA().

      Current PFC driver is very difficult to read, because macro names are
      using different length. Especially PINMUX_IPSR_MODSEL_DATA() is well
      used macro

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)
        PINMUX_IPSR_MODSEL_DATA(ipsr, ...)

      It can be readable if we can merge
      PINMUX_IPSR_MSEL() and PINMUX_IPSR_MODSEL_DATA()

        PINMUX_IPSR_NOGP(ispr, ...)
        PINMUX_IPSR_DATA(ipsr, ...)
        PINMUX_IPSR_NOGM(ispr, ...)
        PINMUX_IPSR_NOFN(ipsr, ...)
        PINMUX_IPSR_MSEL(ipsr, ...)

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 4adeabd042422ceecd7605961d785c5c3edab9e1
  Author: Laurent Pinchart <laurent.pinchart+renesas@xxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 10:08:13 2015 +0300

      pinctrl: sh-pfc: Remove hardcoded IRQ numbers

      Now that all ARM-based Renesas SoCs use multiplatform kernels only the
      hardcoded IRQ numbers can be dropped as they're dynamically allocated.

      Signed-off-by: Laurent Pinchart 
<laurent.pinchart+renesas@xxxxxxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>

  commit 90d066130f69533fb16b395be3de613903575e69
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Aug 27 22:07:23 2015 +0200

      pinctrl: sh-pfc: Get rid of CONFIG_ARCH_SHMOBILE_LEGACY

      Shmobile is all multiplatform these days, so get rid of the reference to
      CONFIG_ARCH_SHMOBILE_LEGACY.

      Move the legacy code to do the non-DT mapping between GPIOs and pins
      inside the existing #ifdef CONFIG_SUPERH section.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9e214614532a6bd7e90bdcdc778b041647cc4036
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Sep 10 14:17:03 2015 +0200

      pinctrl: sh-pfc: r8a7791/r8a7793: Correct SCIFB1_B SCK MOD_SEL value

      When using serial port SCIFB1_B, transmit works, but nothing is
      received.

      Receive fails because the SCIFB1_SCK_B settings configure the wrong
      value for the sel_scifb1 field in the Module Select Register (MOD_SEL),
      due to an ambiguity in the R-Car M2-W and M2-N datasheets.

      Tested on r8a7791/koelsch using pins 53 (TXD) and 72 (RXD) on EXIO
      Connector A.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 48a7b99d75b4f48fb001057a8390a839e70e7acc
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Wed Aug 26 19:53:58 2015 +0200

      pinctrl: sh-pfc: r8a7794: Remove bogus SCIF0 SCK pin data

      SCIF0 on R-Car E2 does not have an SCK pin.

      "SCIF_CLK" is the (H)SCIF baud rate generation clock pin, which is not
      yet supported.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 56f891b46d37e8c7b04db660d6e9ad05e586203c
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 15:55:19 2015 +0200

      pinctrl: sh-pfc: Confine legacy function GPIOs to SH

      Legacy function GPIOs are no longer used on ARM since commit
      a27c5cd1a08cc95c ("sh-pfc: sh73a0: Remove function GPIOs").
      Extract its setup code into a separate function, and make all function
      GPIO related code and data depend on CONFIG_SUPERH.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>

  commit 57106e5ca55bea70e3e296a3e7546aefe0d1dabe
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 15:55:18 2015 +0200

      pinctrl: sh-pfc: Remove empty gpio_function_free()

      gpio_chip.free() is optional, and can just be left unimplemented.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 18fab3995e8a6c4e3ffe2adced0ffa76eebdc989
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 15:55:17 2015 +0200

      pinctrl: sh-pfc: Stop calling gpiochip_add_pin_range() on DT platforms

      On platforms where the PFC/GPIO controller is instantiated from DT, the
      mapping between GPIOs and pins is set up using the "gpio-ranges"
      property in DT.

      Hence stop setting up the mapping from C code on DT platforms.
      This code is still used for SH or ARM-legacy platforms.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>

  commit 0c5d187828588dd1b36cb93b4481a8db467ef3e8
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 09:48:57 2015 +0200

      MIPS: BPF: Fix load delay slots.

      The entire bpf_jit_asm.S is written in noreorder mode because "we know
      better" according to a comment.  This also prevented the assembler from
      throwing in the required NOPs for MIPS I processors which have no
      load-use interlock, thus the load's consumer might end up using the
      old value of the register from prior to the load.

      Fixed by putting the assembler in reorder mode for just the affected
      load instructions.  This is not enough for gas to actually try to be
      clever by looking at the next instruction and inserting a nop only
      when needed but as the comment said "we know better", so getting gas
      to unconditionally emit a NOP is just right in this case and prevents
      adding further ifdefery.

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit f4b4aae1828855db761bf998ce37d3062b1d6446
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 01:40:43 2015 +0100

      x86/headers/uapi: Fix __BITS_PER_LONG value for x32 builds

      On x32, gcc predefines __x86_64__ but long is only 32-bit.  Use
      __ILP32__ to distinguish x32.

      Fixes this compiler error in perf:

        tools/include/asm-generic/bitops/__ffs.h: In function '__ffs':
        tools/include/asm-generic/bitops/__ffs.h:19:8: error: right shift count 
>= width of type [-Werror=shift-count-overflow]
          word >>= 32;
               ^

      This isn't sufficient to build perf for x32, though.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/1443660043.2730.15.camel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit da6fb7a9e5bd6f04f7e15070f630bdf1ea502841
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Oct 1 16:03:38 2015 +1000

      md/bitmap: don't pass -1 to bitmap_storage_alloc.

      Passing -1 to bitmap_storage_alloc() causes page->index to be set to
      -1, which is quite problematic.

      So only pass ->cluster_slot if mddev_is_clustered().

      Fixes: b97e92574c0b ("Use separate bitmaps for each nodes in the cluster")
      Cc: stable@xxxxxxxxxxxxxxx (v4.1+)
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit e8ff8bf09ff49733534ff3cee91bde030186055f
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Wed Sep 16 10:20:05 2015 -0400

      md/raid1: Avoid raid1 resync getting stuck

      close_sync() needs to set conf->next_resync to a large, but safe value
      below MaxSector and use it to determine whether or not to set
      start_next_window in wait_barrier()

      Solution suggested by Neil Brown.

      Reported-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Tested-by: Xiao Ni <xni@xxxxxxxxxx>
      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 644df1a85fc4b0c7a16800f55717261546f4e651
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:10 2015 +0200

      md: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit d4929add83ad4660b1824a9282ab5dd4d60140fa
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Fri Sep 18 10:20:12 2015 -0700

      md: clear CHANGE_PENDING in readonly array

      If faulty disks of an array are more than allowed degraded number, the
      array enters error handling. It will be marked as read-only with
      MD_CHANGE_PENDING/RECOVERY_NEEDED set. But currently recovery doesn't
      clear CHANGE_PENDING bit for read-only array.  If MD_CHANGE_PENDING is
      set for a raid5 array, all returned IO will be hold on a list till the
      bit is clear. But recovery nevery clears this bit, the IO is always in
      pending state and nevery finish. This has bad effects like upper layer
      can't get an IO error and the array can't be stopped.

      Fixes: c3cce6cda162 ("md/raid5: ensure device failure recorded before 
write request returns.")
      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 66eefe5de11db1e0d8f2edc3880d50e7c36a9d43
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Sep 24 15:47:47 2015 +1000

      md/raid0: apply base queue limits *before* disk_stack_limits

      Calling e.g. blk_queue_max_hw_sectors() after calls to
      disk_stack_limits() discards the settings determined by
      disk_stack_limits().
      So we need to make those calls first.

      Fixes: 199dc6ed5179 ("md/raid0: update queue parameter in a safer 
location.")
      Cc: stable@xxxxxxxxxxxxxxx (v2.6.35+ - please apply with 199dc6ed5179).
      Reported-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 36707bb2e7c6730d79d6cdc6d1475d3d7e94c518
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Sep 24 15:25:36 2015 +1000

      md/raid5: don't index beyond end of array in need_this_block().

      When need_this_block probably shouldn't be called when there
      are more than 2 failed devices, we really don't want it to try
      indexing beyond the end of the failed_num[] of fdev[] arrays.

      So limit the loops to at most 2 iterations.

      Reported-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxx>

  commit ebda780bce8d58ec0abab157397c9e099c41a05f
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Fri Sep 18 10:20:13 2015 -0700

      raid5: update analysis state for failed stripe

      handle_failed_stripe() makes the stripe fail, eg, all IO will return
      with a failure, but it doesn't update stripe_head_state. Later
      handle_stripe() has special handling for raid6 for handle_stripe_fill().
      That check before handle_stripe_fill() doesn't skip the failed stripe
      and we get a kernel crash in need_this_block.  This patch clear the
      analysis state to make sure no functions wrongly called after
      handle_failed_stripe()

      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 88724bfa68be792c1487d759e87568c36ac1a1cc
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Sep 24 14:00:51 2015 +1000

      md: wait for pending superblock updates before switching to read-only

      If a superblock update is pending, wait for it to complete before
      letting md_set_readonly() switch to readonly.
      Otherwise we might lose important information about a device having
      failed.

      For external arrays, waiting for superblock updates can wait on
      user-space, so in that case, just return an error.

      Reported-and-tested-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit ab76f7b4ab2397ffdd2f1eb07c55697d19991d10
  Author: Stephen Smalley <sds@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 09:04:22 2015 -0400

      x86/mm: Set NX on gap between __ex_table and rodata

      Unused space between the end of __ex_table and the start of
      rodata can be left W+x in the kernel page tables.  Extend the
      setting of the NX bit to cover this gap by starting from
      text_end rather than rodata_start.

        Before:
        ---[ High Kernel Mapping ]---
        0xffffffff80000000-0xffffffff81000000          16M                      
         pmd
        0xffffffff81000000-0xffffffff81600000           6M     ro         PSE   
  GLB x  pmd
        0xffffffff81600000-0xffffffff81754000        1360K     ro               
  GLB x  pte
        0xffffffff81754000-0xffffffff81800000         688K     RW               
  GLB x  pte
        0xffffffff81800000-0xffffffff81a00000           2M     ro         PSE   
  GLB NX pmd
        0xffffffff81a00000-0xffffffff81b3b000        1260K     ro               
  GLB NX pte
        0xffffffff81b3b000-0xffffffff82000000        4884K     RW               
  GLB NX pte
        0xffffffff82000000-0xffffffff82200000           2M     RW         PSE   
  GLB NX pmd
        0xffffffff82200000-0xffffffffa0000000         478M                      
         pmd

        After:
        ---[ High Kernel Mapping ]---
        0xffffffff80000000-0xffffffff81000000          16M                      
         pmd
        0xffffffff81000000-0xffffffff81600000           6M     ro         PSE   
  GLB x  pmd
        0xffffffff81600000-0xffffffff81754000        1360K     ro               
  GLB x  pte
        0xffffffff81754000-0xffffffff81800000         688K     RW               
  GLB NX pte
        0xffffffff81800000-0xffffffff81a00000           2M     ro         PSE   
  GLB NX pmd
        0xffffffff81a00000-0xffffffff81b3b000        1260K     ro               
  GLB NX pte
        0xffffffff81b3b000-0xffffffff82000000        4884K     RW               
  GLB NX pte
        0xffffffff82000000-0xffffffff82200000           2M     RW         PSE   
  GLB NX pmd
        0xffffffff82200000-0xffffffffa0000000         478M                      
         pmd

      Signed-off-by: Stephen Smalley <sds@xxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443704662-3138-1-git-send-email-sds@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e3c41e37b0f4b18cbd4dac76cbeece5a7558b909
  Author: Lee, Chun-Yi <joeyli.kernel@xxxxxxxxx>
  Date:   Tue Sep 29 20:58:57 2015 +0800

      x86/kexec: Fix kexec crash in syscall kexec_file_load()

      The original bug is a page fault crash that sometimes happens
      on big machines when preparing ELF headers:

          BUG: unable to handle kernel paging request at ffffc90613fc9000
          IP: [<ffffffff8103d645>] 
prepare_elf64_ram_headers_callback+0x165/0x260

      The bug is caused by us under-counting the number of memory ranges
      and subsequently not allocating enough ELF header space for them.
      The bug is typically masked on smaller systems, because the ELF header
      allocation is rounded up to the next page.

      This patch modifies the code in fill_up_crash_elf_data() by using
      walk_system_ram_res() instead of walk_system_ram_range() to correctly
      count the max number of crash memory ranges. That's because the
      walk_system_ram_range() filters out small memory regions that
      reside in the same page, but walk_system_ram_res() does not.

      Here's how I found the bug:

      After tracing prepare_elf64_headers() and 
prepare_elf64_ram_headers_callback(),
      the code uses walk_system_ram_res() to fill-in crash memory regions 
information
      to the program header, so it counts those small memory regions that
      reside in a page area.

      But, when the kernel was using walk_system_ram_range() in
      fill_up_crash_elf_data() to count the number of crash memory regions,
      it filters out small regions.

      I printed those small memory regions, for example:

        kexec: Get nr_ram ranges. vaddr=0xffff880077592258 paddr=0x77592258, 
sz=0xdc0

      Based on the code in walk_system_ram_range(), this memory region
      will be filtered out:

        pfn = (0x77592258 + 0x1000 - 1) >> 12 = 0x77593
        end_pfn = (0x77592258 + 0xfc0 -1 + 1) >> 12 = 0x77593
        end_pfn - pfn = 0x77593 - 0x77593 = 0  <=== if (end_pfn > pfn) is FALSE

      So, the max_nr_ranges that's counted by the kernel doesn't include
      small memory regions - causing us to under-allocate the required space.
      That causes the page fault crash that happens in a later code path
      when preparing ELF headers.

      This bug is not easy to reproduce on small machines that have few
      CPUs, because the allocated page aligned ELF buffer has more free
      space to cover those small memory regions' PT_LOAD headers.

      Signed-off-by: Lee, Chun-Yi <jlee@xxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Baoquan He <bhe@xxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Cc: Takashi Iwai <tiwai@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Cc: Vivek Goyal <vgoyal@xxxxxxxxxx>
      Cc: kexec@xxxxxxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: <stable@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443531537-29436-1-git-send-email-jlee@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7aba4f5201d1b7b3ddb0b03883d9edf69851ddad
  Author: Suman Anna <s-anna@xxxxxx>
  Date:   Tue Sep 29 17:37:47 2015 -0500

      clk: ti: dflt: fix enable_reg validity check

      The default clock enabling functions for TI clocks -
      omap2_dflt_clk_enable() and omap2_dflt_clk_disable() perform a
      NULL check for the enable_reg field of the clk_hw_omap structure.
      This enable_reg field however is merely a combination of the index
      of the master IP module, and the offset from the master IP module's
      base address. A value of 0 is perfectly valid, and the current error
      checking will fail in these cases. The issue was found when trying
      to enable the iva2_ck clock on OMAP3 platforms.

      So, switch the check to use IS_ERR. This correction is similar to the
      logic used in commit c807dbedb5e5 ("clk: ti: fix ti_clk_get_reg_addr
      error handling").

      Fixes: 9f37e90efaf0 ("clk: ti: dflt: move support for default gate 
clock..")
      Signed-off-by: Suman Anna <s-anna@xxxxxx>
      Signed-off-by: Tero Kristo <t-kristo@xxxxxx>

  commit 19e79687de22f23bcfb5e79cce3daba20af228d1
  Author: Ben Dooks <ben.dooks@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 15:01:08 2015 +0100

      clk: ti: fix dual-registration of uart4_ick

      On the OMAP AM3517 platform the uart4_ick gets registered
      twice, causing any power management to /dev/ttyO3 to fail
      when trying to wake the device up.

      This solves the following oops:

      [] Unhandled fault: external abort on non-linefetch (0x1028) at 0xfa09e008
      [] PC is at serial_omap_pm+0x48/0x15c
      [] LR is at _raw_spin_unlock_irqrestore+0x30/0x5c

      Fixes: aafd900cab87 ("CLK: TI: add omap3 clock init file")
      Cc: stable@xxxxxxxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: sboyd@xxxxxxxxxxxxxx
      Cc: linux-clk@xxxxxxxxxxxxxxx
      Cc: linux-omap@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ben Dooks <ben.dooks@xxxxxxxxxxxxxxx>
      Signed-off-by: Tero Kristo <t-kristo@xxxxxx>

  commit 4b3061b39132cba0c31b0eb767a9faeedf9437fc
  Author: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
  Date:   Mon Aug 24 10:35:02 2015 +0300

      clk: ti: clk-7xx: Remove hardwired ABE clock configuration

      The ABE related clocks should be configured via DT and not have it wired
      inside of the kernel.

      Fixes: a74c52def9ab ("clk: ti: clk-7xx: Correct ABE DPLL configuration")
      Signed-off-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Tero Kristo <t-kristo@xxxxxx>

  commit ccf03d6995fa4b784f5b987726ba98f4859bf326
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 1 16:28:25 2015 +1000

      drm/dp/mst: add some defines for logical/physical ports

      This just removes the magic number.

      Acked-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 274d83524895fe41ca8debae4eec60ede7252bb5
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Wed Sep 30 10:39:42 2015 +1000

      drm/dp/mst: drop cancel work sync in the mstb destroy path (v2)

      Since 9eb1e57f564d4e6e10991402726cc83fe0b9172f
      drm/dp/mst: make sure mst_primary mstb is valid in work function

      we validate the mstb structs in the work function, and doing
      that takes a reference. So we should never get here with the
      work function running using the mstb device, only if the work
      function hasn't run yet or is running for another mstb.

      So we don't need to sync the work here, this was causing
      lockdep spew as below.

      [  +0.000160] =============================================
      [  +0.000001] [ INFO: possible recursive locking detected ]
      [  +0.000002] 3.10.0-320.el7.rhel72.stable.backport.3.x86_64.debug #1 
Tainted: G        W      ------------
      [  +0.000001] ---------------------------------------------
      [  +0.000001] kworker/4:2/1262 is trying to acquire lock:
      [  +0.000001]  ((&mgr->work)){+.+.+.}, at: [<ffffffff810b29a5>] 
flush_work+0x5/0x2e0
      [  +0.000007]
      but task is already holding lock:
      [  +0.000001]  ((&mgr->work)){+.+.+.}, at: [<ffffffff810b57e4>] 
process_one_work+0x1b4/0x710
      [  +0.000004]
      other info that might help us debug this:
      [  +0.000001]  Possible unsafe locking scenario:

      [  +0.000002]        CPU0
      [  +0.000000]        ----
      [  +0.000001]   lock((&mgr->work));
      [  +0.000002]   lock((&mgr->work));
      [  +0.000001]
       *** DEADLOCK ***

      [  +0.000001]  May be due to missing lock nesting notation

      [  +0.000002] 2 locks held by kworker/4:2/1262:
      [  +0.000001]  #0:  (events_long){.+.+.+}, at: [<ffffffff810b57e4>] 
process_one_work+0x1b4/0x710
      [  +0.000004]  #1:  ((&mgr->work)){+.+.+.}, at: [<ffffffff810b57e4>] 
process_one_work+0x1b4/0x710
      [  +0.000003]
      stack backtrace:
      [  +0.000003] CPU: 4 PID: 1262 Comm: kworker/4:2 Tainted: G        W      
------------   3.10.0-320.el7.rhel72.stable.backport.3.x86_64.debug #1
      [  +0.000001] Hardware name: LENOVO 20EGS0R600/20EGS0R600, BIOS GNET71WW 
(2.19 ) 02/05/2015
      [  +0.000008] Workqueue: events_long drm_dp_mst_link_probe_work 
[drm_kms_helper]
      [  +0.000001]  ffffffff82c26c90 00000000a527b914 ffff88046399bae8 
ffffffff816fe04d
      [  +0.000004]  ffff88046399bb58 ffffffff8110f47f ffff880461438000 
0001009b840fc003
      [  +0.000002]  ffff880461438a98 0000000000000000 0000000804dc26e1 
ffffffff824a2c00
      [  +0.000003] Call Trace:
      [  +0.000004]  [<ffffffff816fe04d>] dump_stack+0x19/0x1b
      [  +0.000004]  [<ffffffff8110f47f>] __lock_acquire+0x115f/0x1250
      [  +0.000002]  [<ffffffff8110fd49>] lock_acquire+0x99/0x1e0
      [  +0.000002]  [<ffffffff810b29a5>] ? flush_work+0x5/0x2e0
      [  +0.000002]  [<ffffffff810b29ee>] flush_work+0x4e/0x2e0
      [  +0.000002]  [<ffffffff810b29a5>] ? flush_work+0x5/0x2e0
      [  +0.000004]  [<ffffffff81025905>] ? native_sched_clock+0x35/0x80
      [  +0.000002]  [<ffffffff81025959>] ? sched_clock+0x9/0x10
      [  +0.000002]  [<ffffffff810da1f5>] ? local_clock+0x25/0x30
      [  +0.000002]  [<ffffffff8110dca9>] ? mark_held_locks+0xb9/0x140
      [  +0.000003]  [<ffffffff810b4ed5>] ? __cancel_work_timer+0x95/0x160
      [  +0.000002]  [<ffffffff810b4ee8>] __cancel_work_timer+0xa8/0x160
      [  +0.000002]  [<ffffffff810b4fb0>] cancel_work_sync+0x10/0x20
      [  +0.000007]  [<ffffffffa0160d17>] 
drm_dp_destroy_mst_branch_device+0x27/0x120 [drm_kms_helper]
      [  +0.000006]  [<ffffffffa0163968>] drm_dp_mst_link_probe_work+0x78/0xa0 
[drm_kms_helper]
      [  +0.000002]  [<ffffffff810b5850>] process_one_work+0x220/0x710
      [  +0.000002]  [<ffffffff810b57e4>] ? process_one_work+0x1b4/0x710
      [  +0.000005]  [<ffffffff810b5e5b>] worker_thread+0x11b/0x3a0
      [  +0.000003]  [<ffffffff810b5d40>] ? process_one_work+0x710/0x710
      [  +0.000002]  [<ffffffff810beced>] kthread+0xed/0x100
      [  +0.000003]  [<ffffffff810bec00>] ? insert_kthread_work+0x80/0x80
      [  +0.000003]  [<ffffffff817121d8>] ret_from_fork+0x58/0x90

      v2: add flush_work.

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit d9515c5ec1a20c77d83471e634ad9bb12deb0eac
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Wed Sep 16 17:55:23 2015 +1000

      drm/dp/mst: split connector registration into two parts (v2)

      In order to cache the EDID properly for tiled displays, we
      need to retrieve it before we register the connector with
      userspace, otherwise userspace can call get resources
      and try and get the edid before we've even cached it.

      This fixes some problems when hotplugging mst monitors,
      with X/mutter running. As mutter seems to get 0 modes
      for one of the monitors in the tile.

      v2: fix warning in radeon
      handle tile setting in cached path rather than
      get edid path.

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 68d8c9fc91a0f63a2a10ccf7adf56f69125c11c1
  Author: Dave Airlie <airlied@xxxxxxxxx>
  Date:   Sun Sep 6 18:53:00 2015 +1000

      drm/dp/mst: update the link_address_sent before sending the link address 
(v3)

      Update the state before sending the msg to close it.

      v2: reset value if return indicates we haven't send the msg.
      v3: just clean the code up.
      Pointed out by Adam J Richter on

      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=91481

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit df4839fdc9b3c922586b945f062f38cbbda022bb
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Wed Sep 16 10:37:28 2015 +1000

      drm/dp/mst: fixup handling hotplug on port removal.

      output ports should always have a connector, unless
      in the rare case connector allocation fails in the
      driver.

      In this case we only need to teardown the pdt,
      and free the struct, and there is no need to
      send a hotplug msg.

      In the case were we add the port to the destroy
      list we need to send a hotplug if we destroy
      any connectors, so userspace knows to reprobe
      stuff.

      this patch also handles port->connector allocation
      failing which should be a rare event, but makes
      the code consistent.

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 1c960876be7cffd2798a9e2be090e0a5afaee895
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Wed Sep 16 11:04:49 2015 +1000

      drm/dp/mst: don't pass port into the path builder function

      This is unnecessary and it makes it easier to see what is needed
      from port.

      also add blank line to make things nicer.

      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 0c6dadbe79c54818ed4c268297b663f0c4d1ef98
  Author: Alex Deucher <alexdeucher@xxxxxxxxx>
  Date:   Wed Sep 30 14:47:38 2015 -0400

      drm/radeon: drop radeon_fb_helper_set_par

      It was just a wrapper around drm_fb_helper_set_par that
      called cursor_set2 in addition.  Now that the core handles
      this, drop this radeon specific version.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 03f9abb28c3e10a1d0e08df8bca69e0606b23ea6
  Author: Alex Deucher <alexdeucher@xxxxxxxxx>
  Date:   Wed Sep 30 14:47:37 2015 -0400

      drm: handle cursor_set2 in restore_fbdev_mode

      If a driver uses the cursor_set2 crtc callback rather than
      cursor_set, use that.  This fixes the fbdev helper for drivers
      that use cursor_set2.

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 646200a041203f440fb6fcf9cacd9efeda9de74c
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Mon Sep 28 17:21:07 2015 -0500

      [SMB3] Do not fall back to SMBWriteX in set_file_size error cases

      The error paths in set_file_size for cifs and smb3 are incorrect.

      In the unlikely event that a server did not support set file info
      of the file size, the code incorrectly falls back to trying SMBWriteX
      (note that only the original core SMB Write, used for example by DOS,
      can set the file size this way - this actually  does not work for the more
      recent SMBWriteX).  The idea was since the old DOS SMB Write could set
      the file size if you write zero bytes at that offset then use that if
      server rejects the normal set file info call.

      Fortunately the SMBWriteX will never be sent on the wire (except when
      file size is zero) since the length and offset fields were reversed
      in the two places in this function that call SMBWriteX causing
      the fall back path to return an error. It is also important to never call
      an SMB request from an SMB2/sMB3 session (which theoretically would
      be possible, and can cause a brief session drop, although the client
      recovers) so this should be fixed.  In practice this path does not happen
      with modern servers but the error fall back to SMBWriteX is clearly wrong.

      Removing the calls to SMBWriteX in the error paths in cifs_set_file_size

      Pointed out by PaX/grsecurity team

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>
      Reported-by: PaX Team <pageexec@xxxxxxxxxxx>
      CC: Emese Revfy <re.emese@xxxxxxxxx>
      CC: Brad Spengler <spender@xxxxxxxxxxxxxx>
      CC: Stable <stable@xxxxxxxxxxxxxxx>

  commit bde17b90dd9712cb61a7ab0c1ccd0f7f6aa57957
  Merge: 1bca100 676bd99
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 22:20:11 2015 -0400

      Merge branch 'akpm' (patches from Andrew)

      Merge misc fixes from Andrew Morton:
       "12 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        dmapool: fix overflow condition in pool_find_page()
        thermal: avoid division by zero in power allocator
        memcg: remove pcp_counter_lock
        kprobes: use _do_fork() in samples to make them work again
        drivers/input/joystick/Kconfig: zhenhua.c needs BITREVERSE
        memcg: make mem_cgroup_read_stat() unsigned
        memcg: fix dirty page migration
        dax: fix NULL pointer in __dax_pmd_fault()
        mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy 
a fault
        mm/slab: fix unexpected index mapping result of 
kmalloc_size(INDEX_NODE+1)
        userfaultfd: remove kernel header include from uapi header
        arch/x86/include/asm/efi.h: fix build failure

  commit 1bca1000fa71a1092947b4a51928abe80a3316d2
  Merge: 3deaa4f eb6d1c2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 22:06:40 2015 -0400

      Merge tag 'pm+acpi-4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull power management and ACPI fixes from Rafael Wysocki:
       "These are fixes mostly, for a few changes made in this cycle (the
        intel_idle driver, the OPP library, the ACPI EC driver, turbostat) and
        for some issues that have just been discovered (ACPI PCI IRQ
        management, PCI power management documentation, turbostat), with a
        couple of cleanups on top of them.

        Specifics:

         - intel_idle driver fixup for the recently added Skylake chips
           support (Len Brown).

         - Operating Performance Points (OPP) library fix related to the
           recently added support for new DT bindings and a fix for a typo in
           a comment (Viresh Kumar, Stephen Boyd).

         - ACPI EC driver fix for a recently introduced memory leak in an
           error code path (Lv Zheng).

         - ACPI PCI IRQ management fix for the issue where an ISA IRQ is
           shared with a PCI device which requires it to be configured in a
           different way and may cause an interrupt storm to happen as a
           result with an extra ACPI SCI IRQ handling simplification on top of
           it (Jiang Liu).

         - Update of the PCI power management documentation that became
           outdated and started to actively confuse the readers to make it
           actually reflect the code (Rafael J Wysocki).

         - turbostat fixes including an IVB Xeon regression fix (related to
           the --debug command line option), Skylake adjustment for the TSC
           running at a frequency that doesn't match the base one exactly, and
           a Knights Landing quirk to account for the fact that it only
           updates APERF and MPERF every 1024 clock cycles plus bumping up the
           turbostat version number (Len Brown, Hubert Chrzaniuk)"

      * tag 'pm+acpi-4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        tools/power turbosat: update version number
        tools/power turbostat: SKL: Adjust for TSC difference from base 
frequency
        tools/power turbostat: KNL workaround for %Busy and Avg_MHz
        tools/power turbostat: IVB Xeon: fix --debug regression
        ACPI / PCI: Remove duplicated penalty on SCI IRQ
        ACPI, PCI, irq: Do not share PCI IRQ with ISA IRQ
        ACPI / EC: Fix a memory leak issue in acpi_ec_query()
        PM / OPP: Fix typo modifcation -> modification
        PCI / PM: Update runtime PM documentation for PCI devices
        PM / OPP: of_property_count_u32_elems() can return errors
        intel_idle: Skylake Client Support - updated

  commit 6d3cbfa718eeedd70efb9eb04ce9b261b6fa5b7b
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Thu Oct 1 22:18:19 2015 +0800

      PM / devfreq: fix double kfree

      When device_register() fails, kfree(devfreq) is called already in
      devfreq_dev_release(), hence there is no need to call kfree(devfreq)
      in err_dev again.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 3deaa4f531506a12ac4860ccd83cb6cbcb15a7eb
  Merge: ccf70dd b84f787
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 21:55:35 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

      1) Fix regression in SKB partial checksum handling, from Pravin B
         Shalar.

      2) Fix VLAN inside of VXLAN handling in i40e driver, from Jesse
         Brandeburg.

      3) Cure softlockups during accept() in SCTP, from Karl Heiss.

      4) MSG_PEEK should return multiple SKBs worth of data in AF_UNIX, from
         Aaron Conole.

      5) IPV6 erroneously ignores output interface specifier in lookup key for
         route lookups, fix from David Ahern.

      6) In Marvell DSA driver, forward unknown frames to CPU port, from
         Andrew Lunn.

      7) Mission flow flag initializations in some code paths, from David
         Ahern.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net:
        net: Initialize flow flags in input path
        net: dsa: fix preparation of a port STP update
        testptp: Silence compiler warnings on ppc64
        net/mlx4: Handle return codes in mlx4_qp_attach_common
        dsa: mv88e6xxx: Enable forwarding for unknown to the CPU port
        skbuff: Fix skb checksum partial check.
        net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is set
        net sysfs: Print link speed as signed integer
        bna: fix error handling
        af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag
        af_unix: Convert the unix_sk macro to an inline function for type safety
        net: sctp: Don't use 64 kilobyte lookup table for four elements
        l2tp: protect tunnel->del_work by ref_count
        net/ibm/emac: bump version numbers for correct work with ethtool
        sctp: Prevent soft lockup when sctp_accept() is called during a timeout 
event
        sctp: Whitespace fix
        i40e/i40evf: check for stopped admin queue
        i40e: fix VLAN inside VXLAN
        r8169: fix handling rtl_readphy result
        net: hisilicon: fix handling platform_get_irq result

  commit 676bd99178cd962ed24ffdad222b7069d330a969
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Thu Oct 1 15:37:19 2015 -0700

      dmapool: fix overflow condition in pool_find_page()

      If a DMA pool lies at the very top of the dma_addr_t range (as may
      happen with an IOMMU involved), the calculated end address of the pool
      wraps around to zero, and page lookup always fails.

      Tweak the relevant calculation to be overflow-proof.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: Sumit Semwal <sumit.semwal@xxxxxxxxxx>
      Cc: Sakari Ailus <sakari.ailus@xxxxxx>
      Cc: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 44241628bb207ec211bebd156aaf69470d90c209
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Thu Oct 1 15:37:16 2015 -0700

      thermal: avoid division by zero in power allocator

      During boot I get a div by zero Oops regression starting in v4.3-rc3.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Reviewed-by: Javi Merino <javi.merino@xxxxxxx>
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Cc: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit ef510194cefe0cd369ef73419cd65b0a5bb4fb5b
  Author: Greg Thelen <gthelen@xxxxxxxxxx>
  Date:   Thu Oct 1 15:37:13 2015 -0700

      memcg: remove pcp_counter_lock

      Commit 733a572e66d2 ("memcg: make mem_cgroup_read_{stat|event}() iterate
      possible cpus instead of online") removed the last use of the per memcg
      pcp_counter_lock but forgot to remove the variable.

      Kill the vestigial variable.

      Signed-off-by: Greg Thelen <gthelen@xxxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Acked-by: Johannes Weiner <hannes@xxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 54aea4542980a3ed580426a81c5af799df4d610d
  Author: Petr Mladek <pmladek@xxxxxxxx>
  Date:   Thu Oct 1 15:37:11 2015 -0700

      kprobes: use _do_fork() in samples to make them work again

      Commit 3033f14ab78c ("clone: support passing tls argument via C rather
      than pt_regs magic") introduced _do_fork() that allowed to pass @tls
      parameter.

      The old do_fork() is defined only for architectures that are not ready
      to use this way and do not define HAVE_COPY_THREAD_TLS.

      Let's use _do_fork() in the kprobe examples to make them work again on
      all architectures.

      Signed-off-by: Petr Mladek <pmladek@xxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Thiago Macieira <thiago.macieira@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 09a59a9d57a9d6f49510c93304d6e105deb83b93
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:37:08 2015 -0700

      drivers/input/joystick/Kconfig: zhenhua.c needs BITREVERSE

      It uses bitrev8(), so it must ensure that lib/bitrev.o gets included in
      vmlinux.

      Cc: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Cc: yalin wang <yalin.wang2010@xxxxxxxxx>
      Cc: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 484ebb3b8c8b27dd2171696462a3116edb9ff801
  Author: Greg Thelen <gthelen@xxxxxxxxxx>
  Date:   Thu Oct 1 15:37:05 2015 -0700

      memcg: make mem_cgroup_read_stat() unsigned

      mem_cgroup_read_stat() returns a page count by summing per cpu page
      counters.  The summing is racy wrt.  updates, so a transient negative
      sum is possible.  Callers don't want negative values:

       - mem_cgroup_wb_stats() doesn't want negative nr_dirty or nr_writeback.
         This could confuse dirty throttling.

       - oom reports and memory.stat shouldn't show confusing negative usage.

       - tree_usage() already avoids negatives.

      Avoid returning negative page counts from mem_cgroup_read_stat() and
      convert it to unsigned.

      [akpm@xxxxxxxxxxxxxxxxxxxx: fix old typo while we're in there]
      Signed-off-by: Greg Thelen <gthelen@xxxxxxxxxx>
      Cc: Johannes Weiner <hannes@xxxxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>      [4.2+]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 0610c25daa3e76e38ad5a8fae683a89ff9f71798
  Author: Greg Thelen <gthelen@xxxxxxxxxx>
  Date:   Thu Oct 1 15:37:02 2015 -0700

      memcg: fix dirty page migration

      The problem starts with a file backed dirty page which is charged to a
      memcg.  Then page migration is used to move oldpage to newpage.

      Migration:
       - copies the oldpage's data to newpage
       - clears oldpage.PG_dirty
       - sets newpage.PG_dirty
       - uncharges oldpage from memcg
       - charges newpage to memcg

      Clearing oldpage.PG_dirty decrements the charged memcg's dirty page
      count.

      However, because newpage is not yet charged, setting newpage.PG_dirty
      does not increment the memcg's dirty page count.  After migration
      completes newpage.PG_dirty is eventually cleared, often in
      account_page_cleaned().  At this time newpage is charged to a memcg so
      the memcg's dirty page count is decremented which causes underflow
      because the count was not previously incremented by migration.  This
      underflow causes balance_dirty_pages() to see a very large unsigned
      number of dirty memcg pages which leads to aggressive throttling of
      buffered writes by processes in non root memcg.

      This issue:
       - can harm performance of non root memcg buffered writes.
       - can report too small (even negative) values in
         memory.stat[(total_)dirty] counters of all memcg, including the root.

      To avoid polluting migrate.c with #ifdef CONFIG_MEMCG checks, introduce
      page_memcg() and set_page_memcg() helpers.

      Test:
          0) setup and enter limited memcg
          mkdir /sys/fs/cgroup/test
          echo 1G > /sys/fs/cgroup/test/memory.limit_in_bytes
          echo $$ > /sys/fs/cgroup/test/cgroup.procs

          1) buffered writes baseline
          dd if=/dev/zero of=/data/tmp/foo bs=1M count=1k
          sync
          grep ^dirty /sys/fs/cgroup/test/memory.stat

          2) buffered writes with compaction antagonist to induce migration
          yes 1 > /proc/sys/vm/compact_memory &
          rm -rf /data/tmp/foo
          dd if=/dev/zero of=/data/tmp/foo bs=1M count=1k
          kill %
          sync
          grep ^dirty /sys/fs/cgroup/test/memory.stat

          3) buffered writes without antagonist, should match baseline
          rm -rf /data/tmp/foo
          dd if=/dev/zero of=/data/tmp/foo bs=1M count=1k
          sync
          grep ^dirty /sys/fs/cgroup/test/memory.stat

                             (speed, dirty residue)
                   unpatched                       patched
          1) 841 MB/s 0 dirty pages          886 MB/s 0 dirty pages
          2) 611 MB/s -33427456 dirty pages  793 MB/s 0 dirty pages
          3) 114 MB/s -33427456 dirty pages  891 MB/s 0 dirty pages

          Notice that unpatched baseline performance (1) fell after
          migration (3): 841 -> 114 MB/s.  In the patched kernel, post
          migration performance matches baseline.

      Fixes: c4843a7593a9 ("memcg: add per cgroup dirty page accounting")
      Signed-off-by: Greg Thelen <gthelen@xxxxxxxxxx>
      Reported-by: Dave Hansen <dave.hansen@xxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Acked-by: Johannes Weiner <hannes@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>      [4.2+]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8346c416d17bf5b4ea1508662959bb62e73fd6a5
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:36:59 2015 -0700

      dax: fix NULL pointer in __dax_pmd_fault()

      Commit 46c043ede471 ("mm: take i_mmap_lock in unmap_mapping_range() for
      DAX") moved some code in __dax_pmd_fault() that was responsible for
      zeroing newly allocated PMD pages.  The new location didn't properly set
      up 'kaddr', so when run this code resulted in a NULL pointer BUG.

      Fix this by getting the correct 'kaddr' via bdev_direct_access().

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Reported-by: Dan Williams <dan.j.williams@xxxxxxxxx>
      Reviewed-by: Dan Williams <dan.j.williams@xxxxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Matthew Wilcox <willy@xxxxxxxxxxxxxxx>
      Cc: "Kirill A. Shutemov" <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Dave Chinner <david@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 2f84a8990ebbe235c59716896e017c6b2ca1200f
  Author: Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:36:57 2015 -0700

      mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a 
fault

      SunDong reported the following on

        https://bugzilla.kernel.org/show_bug.cgi?id=103841

        I think I find a linux bug, I have the test cases is constructed. I
        can stable recurring problems in fedora22(4.0.4) kernel version,
        arch for x86_64.  I construct transparent huge page, when the parent
        and child process with MAP_SHARE, MAP_PRIVATE way to access the same
        huge page area, it has the opportunity to lead to huge page copy on
        write failure, and then it will munmap the child corresponding mmap
        area, but then the child mmap area with VM_MAYSHARE attributes, child
        process munmap this area can trigger VM_BUG_ON in set_vma_resv_flags
        functions (vma - > vm_flags & VM_MAYSHARE).

      There were a number of problems with the report (e.g.  it's hugetlbfs that
      triggers this, not transparent huge pages) but it was fundamentally
      correct in that a VM_BUG_ON in set_vma_resv_flags() can be triggered that
      looks like this

         vma ffff8804651fd0d0 start 00007fc474e00000 end 00007fc475e00000
         next ffff8804651fd018 prev ffff8804651fd188 mm ffff88046b1b1800
         prot 8000000000000027 anon_vma           (null) vm_ops ffffffff8182a7a0
         pgoff 0 file ffff88106bdb9800 private_data           (null)
         flags: 
0x84400fb(read|write|shared|mayread|maywrite|mayexec|mayshare|dontexpand|hugetlb)
         ------------
         kernel BUG at mm/hugetlb.c:462!
         SMP
         Modules linked in: xt_pkttype xt_LOG xt_limit [..]
         CPU: 38 PID: 26839 Comm: map Not tainted 4.0.4-default #1
         Hardware name: Dell Inc. PowerEdge R810/0TT6JF, BIOS 2.7.4 04/26/2012
         set_vma_resv_flags+0x2d/0x30

      The VM_BUG_ON is correct because private and shared mappings have
      different reservation accounting but the warning clearly shows that the
      VMA is shared.

      When a private COW fails to allocate a new page then only the process
      that created the VMA gets the page -- all the children unmap the page.
      If the children access that data in the future then they get killed.

      The problem is that the same file is mapped shared and private.  During
      the COW, the allocation fails, the VMAs are traversed to unmap the other
      private pages but a shared VMA is found and the bug is triggered.  This
      patch identifies such VMAs and skips them.

      Signed-off-by: Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx>
      Reported-by: SunDong <sund_sky@xxxxxxx>
      Reviewed-by: Michal Hocko <mhocko@xxxxxxxx>
      Cc: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Hugh Dickins <hughd@xxxxxxxxxx>
      Cc: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Reviewed-by: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 03a2d2a3eafe4015412cf4e9675ca0e2d9204074
  Author: Joonsoo Kim <js1304@xxxxxxxxx>
  Date:   Thu Oct 1 15:36:54 2015 -0700

      mm/slab: fix unexpected index mapping result of kmalloc_size(INDEX_NODE+1)

      Commit description is copied from the original post of this bug:

        http://comments.gmane.org/gmane.linux.kernel.mm/135349

      Kernels after v3.9 use kmalloc_size(INDEX_NODE + 1) to get the next
      larger cache size than the size index INDEX_NODE mapping.  In kernels
      3.9 and earlier we used malloc_sizes[INDEX_L3 + 1].cs_size.

      However, sometimes we can't get the right output we expected via
      kmalloc_size(INDEX_NODE + 1), causing a BUG().

      The mapping table in the latest kernel is like:
          index = {0,   1,  2 ,  3,  4,   5,   6,   n}
           size = {0,   96, 192, 8, 16,  32,  64,   2^n}
      The mapping table before 3.10 is like this:
          index = {0 , 1 , 2,   3,  4 ,  5 ,  6,   n}
          size  = {32, 64, 96, 128, 192, 256, 512, 2^(n+3)}

      The problem on my mips64 machine is as follows:

      (1) When configured DEBUG_SLAB && DEBUG_PAGEALLOC && DEBUG_LOCK_ALLOC
          && DEBUG_SPINLOCK, the sizeof(struct kmem_cache_node) will be "150",
          and the macro INDEX_NODE turns out to be "2": #define INDEX_NODE
          kmalloc_index(sizeof(struct kmem_cache_node))

      (2) Then the result of kmalloc_size(INDEX_NODE + 1) is 8.

      (3) Then "if(size >= kmalloc_size(INDEX_NODE + 1)" will lead to "size
          = PAGE_SIZE".

      (4) Then "if ((size >= (PAGE_SIZE >> 3))" test will be satisfied and
          "flags |= CFLGS_OFF_SLAB" will be covered.

      (5) if (flags & CFLGS_OFF_SLAB)" test will be satisfied and will go to
          "cachep->slabp_cache = kmalloc_slab(slab_size, 0u)", and the result
          here may be NULL while kernel bootup.

      (6) Finally,"BUG_ON(ZERO_OR_NULL_PTR(cachep->slabp_cache));" causes the
          BUG info as the following shows (may be only mips64 has this problem):

      This patch fixes the problem of kmalloc_size(INDEX_NODE + 1) and removes
      the BUG by adding 'size >= 256' check to guarantee that all necessary
      small sized slabs are initialized regardless sequence of slab size in
      mapping table.

      Fixes: e33660165c90 ("slab: Use common kmalloc_index/kmalloc_size...")
      Signed-off-by: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Reported-by: Liuhailong <liu.hailong6@xxxxxxxxxx>
      Acked-by: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 9ff42d10c3b3e26d9555878f31b9a2e5c24efa57
  Author: Andre Przywara <andre.przywara@xxxxxxx>
  Date:   Thu Oct 1 15:36:51 2015 -0700

      userfaultfd: remove kernel header include from uapi header

      As include/uapi/linux/userfaultfd.h is a user visible header file, it
      should not include kernel-exclusive header files.

      So trying to build the userfaultfd test program from the selftests
      directory fails, since it contains a reference to linux/compiler.h.  As
      it turns out, that header is not really needed there, so we can simply
      remove it to fix that issue.

      Signed-off-by: Andre Przywara <andre.przywara@xxxxxxx>
      Cc: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit a523841ee4e506fa1f05ff3a85b1e6d8176a3d4d
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Thu Oct 1 15:36:48 2015 -0700

      arch/x86/include/asm/efi.h: fix build failure

      With KMEMCHECK=y, KASAN=n:

        arch/x86/platform/efi/efi.c:673:3: error: implicit declaration of 
function `memcpy' [-Werror=implicit-function-declaration]
        arch/x86/platform/efi/efi_64.c:139:2: error: implicit declaration of 
function `memcpy' [-Werror=implicit-function-declaration]
        arch/x86/include/asm/desc.h:121:2: error: implicit declaration of 
function `memcpy' [-Werror=implicit-function-declaration]

      Don't #undef memcpy if KASAN=n.

      Fixes: 769a8089c1fd ("x86, efi, kasan: #undef memset/memcpy/memmove per 
arch")
      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Reported-by: Sedat Dilek <sedat.dilek@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 2dc6a0303b89de4c92b44f5278d61b6b6c9c20eb
  Merge: 4bf1b54 248234c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 18:24:12 2015 -0700

      Merge branch 'bridge_vlan_cleanups_fixes'

      Nikolay Aleksandrov says:

      ====================
      bridge: vlan: cleanups & fixes

      This is the first follow-up set, patch 01 reduces the default rhashtable
      size and the number of locks that can be allocated. Patch 02 and 04 fix
      possible null pointer dereferences due to the new ordering and
      initialization on port add/del, and patch 03 moves the "pvid" member in
      the net_bridge_vlan_group struct in order to simplify code (similar to how
      it was with the older struct). Patch 05 fixes adding a vlan on a port 
which
      is pvid and doesn't have a global context yet.
      Please review carefully, I think this is the first use of rhashtable's
      "locks_mul" member in the tree and I'd like to make sure it's correct.
      Another thing that needs special attention is the nbp_vlan_flush() move
      after the rx_handler unregister.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 248234ca029710fbad6423c48f98c2a6ea9582fb
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:55 2015 +0200

      bridge: vlan: don't pass flags when creating context only

      We should not pass the original flags when creating a context vlan only
      because they may contain some flags that change behaviour in the bridge.
      The new global context should be with minimal set of flags, so pass 0
      and let br_vlan_add() set the master flag only.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 263344e64c0a2ac0e409a1a3f27effb6d57b853e
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:54 2015 +0200

      bridge: vlan: fix possible null ptr derefs on port init and deinit

      When a new port is being added we need to make vlgrp available after
      rhashtable has been initialized and when removing a port we need to
      flush the vlans and free the resources after we're sure noone can use
      the port, i.e. after it's removed from the port list and synchronize_rcu
      is executed.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77751ee8aec3e1748e0d1471ccbfc008793e88a6
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:53 2015 +0200

      bridge: vlan: move pvid inside net_bridge_vlan_group

      One obvious way to converge more code (which was also used by the
      previous vlan code) is to move pvid inside net_bridge_vlan_group. This
      allows us to simplify some and remove other port-specific functions.
      Also gives us the ability to simply pass the vlan group and use all of the
      contained information.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 468e7944589c7f096bb4ea14db17980aa6c2766c
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:52 2015 +0200

      bridge: vlan: fix possible null vlgrp deref while registering new port

      While a new port is being initialized the rx_handler gets set, but the
      vlans get initialized later in br_add_if() and in that window if we
      receive a frame with a link-local address we can try to dereference
      p->vlgrp in:
      br_handle_frame() -> br_handle_local_finish() -> br_should_learn()

      Fix this by checking vlgrp before using it.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8af78b6487856d8a896ba15e9255b8e5fa91eb5f
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:16:51 2015 +0200

      bridge: vlan: adjust rhashtable initial size and hash locks size

      As Stephen pointed out the default initial size is more than we need, so
      let's start small (4 elements, thus nelem_hint = 3). Also limit the hash
      locks to the number of CPUs as we don't need any write-side scaling and
      this looks like the minimum.

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec403b89e3152f93199b7b1813148bcdf6829311
  Merge: 62886a3 b94be97
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 2 10:47:29 2015 +1000

      Merge tag 'drm-intel-fixes-2015-10-01' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      a few i915 fixes for v4.3.

      * tag 'drm-intel-fixes-2015-10-01' of 
git://anongit.freedesktop.org/drm-intel:
        drm/i915: Call non-locking version of drm_kms_helper_poll_enable(), v2
        drm: Add a non-locking version of drm_kms_helper_poll_enable(), v2
        drm/i915: Consider HW CSB write pointer before resetting the sw read 
pointer
        drm/i915/skl: Don't call intel_prepare_ddi when encoder list isn't yet 
initialized.

  commit 62886a367b59d7740f9db89fd418ab3e450ab7c7
  Merge: 8e592ea 575f9c8
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 2 10:46:51 2015 +1000

      Merge tag 'vmwgfx-fixes-4.3-151001' of 
git://people.freedesktop.org/~thomash/linux into drm-fixes

      A single commit to fix a command submission hang regression.

      Pull request of 2015-10-01

      * tag 'vmwgfx-fixes-4.3-151001' of 
git://people.freedesktop.org/~thomash/linux:
        drm/vmwgfx: Fix a command submission hang regression

  commit 8e592eab0401bd70a8ba8534b903145855a7b703
  Merge: 5b63864 cda3742
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 2 10:46:18 2015 +1000

      Merge branch 'exynos-drm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos into drm-fixes

         This pull request includes regression fixups, build warnings, and
         trivial cleanups which mostly remove some codes not used anymore.

      * 'exynos-drm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos:
        drm/exynos: Staticize local function in exynos_drm_gem.c
        drm/exynos: fimd: actually disable dp clock
        drm/exynos: dp: remove suspend/resume functions
        drm/exynos: remove unused mode_fixup() code
        drm/exynos: remove decon_mode_fixup()
        drm/exynos: remove fimd_mode_fixup()
        drm/exynos: rotator: Clock control is unused if !PM
        drm/exynos: fimc: Clock control is unused if !PM
        drm/exynos: Suspend/resume is unused if !PM
        drm/exynos: create a fake mmap offset with gem creation
        drm/exynos: remove call to drm_gem_free_mmap_offset()
        drm/exynos: Remove useless EXPORT_SYMBOL_GPLs
        drm/exynos: cleanup line feed in exynos_drm_gem_get_ioctl
        drm/exynos: cleanup function calling written twice
        drm/exynos: staticize exynos_drm_gem_init()
        drm/exynos: remove unnecessary NULL assignment
        drm/exynos: fix missed calling of drm_prime_gem_destroy()
        drm/exynos: fix layering violation of address

  commit 5b6386419c4f78526afe1615668b6444d7b66fd7
  Merge: 8d0d940 3e4e380
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 2 10:35:22 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      radeon and amdgpu fixes for 4.3.
      - backlight s/r fixes
      - typo fix from Dan
      - vm debugging fix
      - remove import_gpu_mem after discussion with Daniel

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: only print meaningful VM faults
        drm/amdgpu/cgs: remove import_gpu_mem
        drm/amdgpu:  Restore LCD backlight level on resume
        drm/radeon: Restore LCD backlight level on resume (>= R5xx)
        drm/amdgpu: signedness bug in amdgpu_cs_parser_init()

  commit ccf70ddcbe9984cee406be2bacfedd5e4776919d
  Merge: 46c8217 d292242
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 16:43:25 2015 -0400

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM fixes from Paolo Bonzini:
       "(Relatively) a lot of reverts, mostly.

        Bugs have trickled in for a new feature in 4.2 (MTRR support in
        guests) so I'm reverting it all; let's not make this -rc period busier
        for KVM than it's been so far.  This covers the four reverts from me.

        The fifth patch is being reverted because Radim found a bug in the
        implementation of stable scheduler clock, *but* also managed to
        implement the feature entirely without hypervisor support.  So instead
        of fixing the hypervisor side we can remove it completely; 4.4 will
        get the new implementation"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS
        Update KVM homepage Url
        Revert "KVM: SVM: use NPT page attributes"
        Revert "KVM: svm: handle KVM_X86_QUIRK_CD_NW_CLEARED in svm_get_mt_mask"
        Revert "KVM: SVM: Sync g_pat with guest-written PAT value"
        Revert "KVM: x86: apply guest MTRR virtualization on host reserved 
pages"
        Revert "KVM: x86: zero kvmclock_offset when vcpu0 initializes kvmclock 
system MSR"

  commit 46c8217c4a54c17dd4c000ad804fa1e223a10578
  Merge: f97b870 2866196
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 16:38:52 2015 -0400

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull rdma fixes from Doug Ledford:
       - Fixes for mlx5 related issues
       - Fixes for ipoib multicast handling

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/ipoib: increase the max mcast backlog queue
        IB/ipoib: Make sendonly multicast joins create the mcast group
        IB/ipoib: Expire sendonly multicast joins
        IB/mlx5: Remove pa_lkey usages
        IB/mlx5: Remove support for IB_DEVICE_LOCAL_DMA_LKEY
        IB/iser: Add module parameter for always register memory
        xprtrdma: Replace global lkey with lkey local to PD

  commit eb6d1c287ae1f7221248d5be26a5b1560073c09e
  Merge: 01351eb e9a7bed e1a2d49 a9062dc
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Oct 1 22:30:47 2015 +0200

      Merge branches 'pm-cpuidle', 'pm-opp' and 'pm-tools'

      * pm-cpuidle:
        intel_idle: Skylake Client Support - updated

      * pm-opp:
        PM / OPP: Fix typo modifcation -> modification
        PM / OPP: of_property_count_u32_elems() can return errors

      * pm-tools:
        tools/power turbosat: update version number
        tools/power turbostat: SKL: Adjust for TSC difference from base 
frequency
        tools/power turbostat: KNL workaround for %Busy and Avg_MHz
        tools/power turbostat: IVB Xeon: fix --debug regression

  commit 01351eb23c5047895c14c91a898546c289a3c35c
  Merge: dd953d3 15b94fa
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Oct 1 22:30:35 2015 +0200

      Merge branch 'acpi-ec'

      * acpi-ec:
        ACPI / EC: Fix a memory leak issue in acpi_ec_query()

  commit dd953d318daad9a3c1f9a6bf31430bf40163051e
  Merge: 9ffecb1 a836006 d323efc
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Oct 1 22:30:12 2015 +0200

      Merge branches 'pm-pci' and 'acpi-pci'

      * pm-pci:
        PCI / PM: Update runtime PM documentation for PCI devices

      * acpi-pci:
        ACPI / PCI: Remove duplicated penalty on SCI IRQ
        ACPI, PCI, irq: Do not share PCI IRQ with ISA IRQ

  commit 1f744fd317dc55cadd7132c57c499e3117aea01d
  Author: Thomas Hebb <tommyhebb@xxxxxxxxx>
  Date:   Thu Oct 1 21:00:00 2015 +0200

      ARM: dts: berlin: change BG2Q's USB PHY compatible

      Currently, BG2Q shares a compatible with BG2. This is incorrect, since
      BG2 and BG2Q use different USB PLL dividers. In reality, BG2Q shares a
      divider with BG2CD. Change BG2Q's USB PHY compatible string to reflect
      that.

      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2.0-
      Signed-off-by: Thomas Hebb <tommyhebb@xxxxxxxxx>
      Signed-off-by: Sebastian Hesselbarth <sebastian.hesselbarth@xxxxxxxxx>

  commit 1378889c563a2938d231203ed36c041af183b798
  Author: Paul Mackerras <paulus@xxxxxxxxxx>
  Date:   Sat Sep 26 10:19:15 2015 +1000

      scsi_dh: Use the correct module name when loading device handler

      This fixes a bug in recent kernels which results in failure to boot
      on systems that have multipath SCSI disks.  I observed this failure
      on a POWER8 server where all the disks are multipath SCSI disks.
      The symptoms are several messages like this on the console:

      [    3.018700] device-mapper: table: 253:0: multipath: error attaching 
hardware handler
      [    3.018828] device-mapper: ioctl: error adding target to table

      and the system does not find its disks, and therefore fails to boot.

      Bisection revealed that the bug was introduced in commit 566079c849cf,
      "dm-mpath, scsi_dh: request scsi_dh modules in scsi_dh, not dm-mpath".
      The specific reason for the failure is that where we previously loaded
      the "scsi_dh_alua" module, we are now trying to load the "alua" module,
      which doesn't exist.

      To fix this, we change the request_module call in scsi_dh_lookup()
      to prepend "scsi_dh_" to the name, just like the old code in
      drivers/md/dm-mpath.c:parse_hw_handler() used to do.

      [jejb: also fixes issue spotted by Sasha Levin that formatting
      characters could be passed in via sysfs and cause issues with
      request_module()]

      Fixes: 566079c849cf
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxxx>
      Cc: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 1a541b4e3cd6f5795022514114854b3e1345f24e
  Author: Steve Capper <steve.capper@xxxxxxxxxx>
  Date:   Thu Oct 1 13:06:07 2015 +0100

      arm64: Fix THP protection change logic

      6910fa1 ("arm64: enable PTE type bit in the mask for pte_modify") fixes
      a problem whereby a large block of PROT_NONE mapped memory is
      incorrectly mapped as block descriptors when mprotect is called.

      Unfortunately, a subtle bug was introduced by this fix to the THP logic.

      If one mmaps a large block of memory, then faults it such that it is
      collapsed into THPs; resulting calls to mprotect on this area of memory
      will lead to incorrect table descriptors being written instead of block
      descriptors. This is because pmd_modify calls pte_modify which is now
      allowed to modify the type of the page table entry.

      This patch reverts commit 6910fa16dbe142f6a0fd0fd7c249f9883ff7fc8a, and
      fixes the problem it was trying to address by adjusting PAGE_NONE to
      represent a table entry. Thus no change in pte type is required when
      moving from PROT_NONE to a different protection.

      Fixes: 6910fa16dbe1 ("arm64: enable PTE type bit in the mask for 
pte_modify")
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+
      Cc: Feng Kan <fkan@xxxxxxx>
      Reported-by: Ganapatrao Kulkarni <Ganapatrao.Kulkarni@xxxxxxxxxxxxxxxxxx>
      Tested-by: Ganapatrao Kulkarni <gkulkarni@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Steve Capper <steve.capper@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 090e2edb4171dae4872c4eaae972dd3ccf96d4a8
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:32 2015 +0200

      net: sfc: avoid using timespec

      The sfc driver internally uses a time format based on 32-bit (unsigned)
      seconds and 32-bit nanoseconds. This means it will overflow in 2106,
      but the value we pass into it is a signed 32-bit tv_sec that already
      overflows in 2038 to a negative value.

      This patch changes the logic to use the lower 32 bits of the timespec64
      tv_sec in efx_ptp_ns_to_s_ns, which will have the correct value beyond 
the overflow.
      While this does not change any of the register values, it lets us
      keep using the driver after we deprecate the use of the timespec type
      in the kernel.

      In the efx_ptp_process_times function, the change to use timespec64
      is similar, in that the tv_sec portion is ignored anyway and we only
      care about the nanosecond portion that remains unchanged.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit ade1bdffe90e59cd257cb9bd4f5abe4de5f14911
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:31 2015 +0200

      ntp/pps: use y2038 safe types in pps_event_time

      The pps_event_time uses two 'timespec' structures internally, which
      suffer from the y2038 problem. The uses of this structure are
      fairly self-contained in the pps code, so this replaces them all at
      once.

      Unfortunately, this includes the sfc ethernet driver aside from the
      pps subsystem, so we change that one as well. Both touch the
      same data structure, and there probably is no good way to split
      the patch into smaller units.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit 5fd96c421ff2c76ec441aa4139c3b87dfea93e3a
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:30 2015 +0200

      ntp: use timespec64 in sync_cmos_clock

      The sync_cmos_clock has one use of struct timespec, which we want to
      eventually replace with timespec64 or similar in the kernel. There
      is no way this one can overflow, but the conversion to timespec64
      is trivial and has no other dependencies.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit 071eee45b1650d53d21c636d344bdcebd4577ed2
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:29 2015 +0200

      ntp/pps: replace getnstime_raw_and_real with 64-bit version

      There is exactly one caller of getnstime_raw_and_real in the kernel,
      which is the pps_get_ts function. This changes the caller and
      the implementation to work on timespec64 types rather than timespec,
      to avoid the time_t overflow on 32-bit architectures.

      For consistency with the other new functions (ktime_get_seconds,
      ktime_get_real_*, ...), I'm renaming the function to
      ktime_get_raw_and_real_ts64.

      We still need to convert from the internal 64-bit type to 32 bit
      types in the caller, but this conversion is now pushed out from
      getnstime_raw_and_real to pps_get_ts. A follow-up patch changes
      the remaining pps code to completely avoid the conversion.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit 7ec88e4be461590b5a3817460c34603f76d9b3ae
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Sep 28 22:21:28 2015 +0200

      ntp/pps: use timespec64 for hardpps()

      There is only one user of the hardpps function in the kernel, so
      it makes sense to atomically change it over to using 64-bit
      timestamps for y2038 safety. In the hardpps implementation,
      we also need to change the pps_normtime structure, which is
      similar to struct timespec and also requires a 64-bit
      seconds portion.

      This introduces two temporary variables in pps_kc_event() to
      do the conversion, they will be removed again in the next step,
      which seemed preferable to having a larger patch changing it
      all at the same time.

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>

  commit b1842ffddf8941aee4fcd95594bf62d3dc2867cc
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Thu Oct 1 11:41:42 2015 -0500

      ipv6: Add missing newline to __xfrm6_output_finish

      Add a newline between variable declarations and the code.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 1b52e50f2a402a266f1ba2281f0a57e87637a047
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 14:26:54 2015 +0200

      mfd: max77843: Fix max77843_chg_init() return on error

      If i2c_new_dummy() fails in max77843_chg_init(), an PTR_ERR(NULL) is
      returned which is 0. So the function was wrongly returning a success
      value instead of an error code.

      Cc: stable@xxxxxxxxxxxxxxx # 4.1
      Fixes: c7f585fe46d8 ("mfd: max77843: Add max77843 MFD driver core driver")
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>

  commit 47b91923ea41288751e83a5b080576085a831333
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 11:32:47 2015 +0300

      mfd: intel-lpss: Fix build error when !CONFIG_PM_SLEEP

      Jim Davis reported the compilation error with a random configuration which
      apparently has CONFIG_PM=y and CONFIG_PM_SLEEP=n. With that conditions we 
have
      missed definition of INTEL_LPSS_SLEEP_PM_OPS macro. Add it here.

      Reported-by: Jim Davis <jim.epost@xxxxxxxxx>
      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>

  commit 9e7e2b0a6a005941a6854cdabae19c3d9e069dbe
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:54:53 2015 +0300

      genirq: Remove unused functions irqd_[set|clr]_chained_irq_inprogress()

      These two functions are not used anywhere in the kernel source tree so
      remove them.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443704093-36837-2-git-send-email-mika.westerberg@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 92068d17c20b218bf1e24505a3e08495476b0ebf
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:54:52 2015 +0300

      genirq: Fix typo in documentation of enumeration field name

      It should say IRQ_NESTED_THREAD instead of IRQ_NESTED_TRHEAD.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443704093-36837-1-git-send-email-mika.westerberg@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit dbc67409fa912ba063dfa956af0543af1258fc97
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 1 12:12:22 2015 -0300

      perf list: Do event name substring search as last resort when no events 
found

      Before:

        # perf list _alloc_ | head -10
        #

      After:

        # perf list _alloc_ | head -10
          ext4:ext4_alloc_da_blocks                          [Tracepoint event]
          ext4:ext4_get_implied_cluster_alloc_exit           [Tracepoint event]
          kmem:kmem_cache_alloc_node                         [Tracepoint event]
          kmem:mm_page_alloc_extfrag                         [Tracepoint event]
          kmem:mm_page_alloc_zone_locked                     [Tracepoint event]
          xen:xen_mmu_alloc_ptpage                           [Tracepoint event]
        #

      And it works for all types of events:

        # perf list br

        List of pre-defined events (to be used in -e):

          branch-instructions OR branches                    [Hardware event]
          branch-misses                                      [Hardware event]

          branch-load-misses                                 [Hardware cache 
event]
          branch-loads                                       [Hardware cache 
event]

          branch-instructions OR cpu/branch-instructions/    [Kernel PMU event]
          branch-misses OR cpu/branch-misses/                [Kernel PMU event]

          filelock:break_lease_block                         [Tracepoint event]
          filelock:break_lease_noblock                       [Tracepoint event]
          filelock:break_lease_unblock                       [Tracepoint event]
          syscalls:sys_enter_brk                             [Tracepoint event]
          syscalls:sys_exit_brk                              [Tracepoint event]

        #

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-qieivl18jdemoaghgndj36e6@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2a708cff93f1845b9239bc7d6310aef54e716c6a
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 08:31:51 2015 +0000

      dm: fix AB-BA deadlock in __dm_destroy()

      __dm_destroy() takes io_barrier SRCU lock (dm_get_live_table) and
      suspend_lock in reverse order.  Doing so can cause AB-BA deadlock:

        __dm_destroy                    dm_swap_table
        ---------------------------------------------------
                                        mutex_lock(suspend_lock)
        dm_get_live_table()
          srcu_read_lock(io_barrier)
                                        dm_sync_table()
                                          synchronize_srcu(io_barrier)
                                            .. waiting for dm_put_live_table()
        mutex_lock(suspend_lock)
          .. waiting for suspend_lock

      Fix this by taking the locks in proper order.

      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Fixes: ab7c7bb6f4ab ("dm: hold suspend_lock while suspending device 
during device deletion")
      Acked-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit a51e80d002b63bbdaff3229f3ebf4fbb53c75c33
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Thu Oct 1 22:26:44 2015 +0800

      irqchip/i8259: Convert to use irq_set_chained_handler_and_data

      Chained irq handlers usually set up handler data as well. We now have
      a function to set both under irq_desc->lock. Replace the two calls
      with one.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: http://lkml.kernel.org/r/1443709604.12993.0.camel@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit bebcb8dab6bac53b6a61a896db03781d1992cadb
  Merge: 26c21dd f1e0bb0
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Thu Oct 1 16:14:24 2015 +0200

      Merge branch 'irq/for-arm' into irq/core

      Bring in the change which we offered arm[64] folks to pull into their
      trees.

  commit 9196d9676fe790975fdb1fc03230629139c6ea8e
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Wed Sep 30 05:40:00 2015 -0700

      crypto: qat - remove unneeded variable

      Remove unneeded variable val_indx.
      Issue found by a static analyzer.

      Reported-by: Giovanni Cabiddu <giovanni.cabiddu@xxxxxxxxx>
      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit def14bfaf30d5d5a4a8fe5bf600ce09232e688c0
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Wed Sep 30 05:38:39 2015 -0700

      crypto: qat - add support for ctr(aes) and xts(aes)

      Add support for ctr and xts encryption modes.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ecdd6bed292fda02a3e3997307ac228edcab0b22
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Sun Sep 27 22:47:05 2015 +0800

      crypto: skcipher - blkcipher and ablkcipher should it be static

      Fixes the following sparse warnings:

       crypto/skcipher.c:94:5:
       warning: symbol 'crypto_init_skcipher_ops_blkcipher'
       was not declared. Should it be static?

       crypto/skcipher.c:185:5:
       warning: symbol 'crypto_init_skcipher_ops_ablkcipher'
       was not declared. Should it be static?

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 284a0f6e87b0721e1be8bca419893902d9cf577a
  Author: John Haxby <john.haxby@xxxxxxxxxx>
  Date:   Thu Sep 24 18:24:35 2015 +0100

      crypto: testmgr - Disable fips-allowed for authenc() and des() ciphers

      No authenc() ciphers are FIPS approved, nor is ecb(des).
      After the end of 2015, ansi_cprng will also be non-approved.

      Signed-off-by: John Haxby <john.haxby@xxxxxxxxxx>
      Acked-by: Stephan Mueller <smueller@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 640eec52abbcb962804e8ff0c69e9802b0b726c0
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Sep 23 13:55:28 2015 +0200

      crypto: sahara - dma_map_sg can handle chained SG

      The sahara driver use two dma_map_sg path according to SG are chained
      or not.
      Since dma_map_sg can handle both case, clean the code with all
      references to sg chained.

      Thus removing the sahara_sha_unmap_sg function.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 13fb8fd7a81923f7a64b4e688fe0bdaf1ea26adf
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Sep 23 13:55:27 2015 +0200

      crypto: caam - dma_map_sg can handle chained SG

      The caam driver use two dma_map_sg path according to SG are chained
      or not.
      Since dma_map_sg can handle both case, clean the code with all
      references to sg chained.

      Thus removing dma_map_sg_chained, dma_unmap_sg_chained
      and __sg_count functions.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b8a011d41c988aeb9aa199eb80ccd5179b5940c1
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Sep 23 13:55:25 2015 +0200

      crypto: talitos - dma_map_sg can handle chained SG

      The talitos driver use two dma_map_sg path
      according to SG are chained or not.
      Since dma_map_sg can handle both case, clean the code with all
      references to sg chained.

      Thus removing talitos_map_sg, talitos_unmap_sg_chain
      and sg_count functions.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit be2cfac07619a8f97fe3aae39f095e9e33decd99
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Tue Sep 22 11:57:47 2015 -0700

      crypto: qat - remove empty functions and turn qat_uregister fn to void

      Some code cleanups after crypto API changes:
      - Change qat_algs_unregister to a void function to keep it consistent
        with qat_asym_algs_unregister.
      - Remove empty functions qat_algs_init & qat_algs_exit.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 1e16a8f11669c98a0adf5fb5f8522aebc1f69f71
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:45:44 2015 +0200

      MIPS: BPF: Do all exports of symbols with FEXPORT().

      FEXPORT also marks the symbol as code using .type symbol, @function.
      Without objdump -d will output only a hexdump for code following the
      affected symbols.

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d2922422c48df93f3edff7d872ee4f3191fefb08
  Author: Dirk Müller <dmueller@xxxxxxxx>
  Date:   Thu Oct 1 13:43:42 2015 +0200

      Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS

      The cpu feature flags are not ever going to change, so warning
      everytime can cause a lot of kernel log spam
      (in our case more than 10GB/hour).

      The warning seems to only occur when nested virtualization is
      enabled, so it's probably triggered by a KVM bug.  This is a
      sensible and safe change anyway, and the KVM bug fix might not
      be suitable for stable releases anyway.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dirk Mueller <dmueller@xxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 0edd453368c6b9cdb756bde2b6675bb0d5d0eb0a
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:48 2015 +0300

      perf callchain: Allow for max_stack greater than PERF_MAX_STACK_DEPTH

      Adjust the validation to allow for max_stack greater than
      PERF_MAX_STACK_DEPTH.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-18-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 208e7607459477432d3df52c32d4b961a96d4a94
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Sep 30 13:34:00 2015 +0900

      perf report: Fix a bug on "--call-graph none" option

      The patch f9db0d0f1b2c ("perf callchain: Allow disabling call graphs
      per event") added an ability to enable/disable callchain recording per
      event.  But it had a problem when the enablement setting is changed at
      'perf report' time using -g/--call-graph option.

      For example, the following scenario will get a segfault.

        $ perf record -ag sleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.500 MB perf.data (2555 samples) ]

        $ perf report -g none
        perf: Segmentation fault
        -------- backtrace --------
        perf[0x53a98a]
        /usr/lib/libc.so.6(+0x335af)[0x7f4e91df95af]

      This is because callchain_param.sort() callback was not set but it
      tried to call the function as it had the PERF_SAMPLE_CALLCHAIN bit.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Fixes: f9db0d0f1b2c ("perf callchain: Allow disabling call graphs per 
event")
      Link: 
http://lkml.kernel.org/r/1443587640-24242-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c53d138d41a7f33cf085762c64b4b61e8d223e1c
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Sep 30 10:45:26 2015 +0900

      perf top: Register idle thread

      The perf top didn't add the idle/swapper thread to the machine's thread
      list and its comm was displayed as ':0'.  Fix it.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443577526-3240-3-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4b37af595742977f1bdd8c0fd0f3e6e55b36e7b7
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Sep 30 10:45:25 2015 +0900

      perf top: Fix unresolved comm when -s comm is used

      The perf top uses 'dso,symbol' sort keys by default so it overlooked a
      problem in task's comm resolving.  When the sort key contains 'comm',
      some task's comm is not shown properly.  This is because the
      perf_top__mmap_read_idx() checks the cpumode value improperly.

      The cpumode value of non-sample events are 0 (PERF_RECORD_MISC_CPUMODE_
      UNKNOWN) so the events will be ignored by the switch statement.  This 
patch
      allows it for non-sample events.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443577526-3240-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e5bed564485b340d87f2d8945643a393e55b8225
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Sep 30 10:45:24 2015 +0900

      perf record: Allocate area for sample_id_hdr in a synthesized comm event

      A previous patch added a synthesized comm event for forked child process
      but it missed that the event should contain area for sample_id_hdr at
      the end.  It worked by accident since the perf_event union contains
      bigger event structs like mmap_events.

      This patch fixes it by dynamically allocating event struct including
      those area like in perf_event__synthesize_thread_map().

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443577526-3240-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f1e0bb0ad473a32d1b7e6d285ae9f7e47710bb5e
  Author: Yang Yingliang <yangyingliang@xxxxxxxxxx>
  Date:   Thu Sep 24 17:32:13 2015 +0800

      genirq: Introduce generic irq migration for cpu hotunplug

      ARM and ARM64 have almost identical code for migrating interrupts on
      cpu hotunplug. Provide a generic version which can be used by both.

      The new code addresses a shortcoming in the ARM[64] variants which
      fails to update the affinity change in some cases. The solution for
      this is to use the core function irq_do_set_affinity() instead of open
      coding it.

      [ tglx: Added copyright notice and license boilerplate. Rewrote
                subject and changelog. ]

      Signed-off-by: Yang Yingliang <yangyingliang@xxxxxxxxxx>
      Acked-by: Russell King - ARM Linux <linux@xxxxxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443087135-17044-2-git-send-email-yangyingliang@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 038161dea1eaeee80341134e2675b24656a71b59
  Author: Dirk Müller <dmueller@xxxxxxxx>
  Date:   Thu Oct 1 13:46:01 2015 +0200

      Update KVM homepage Url

      The old one appears to be a generic catch all page, which
      is unhelpful.

      Signed-off-by: Dirk Mueller <dmueller@xxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit f97b870eced0ec562f953d32eda03906c7dacad6
  Merge: 9522f47 7c7feb2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 07:57:27 2015 -0400

      Merge tag 'upstream-4.3-rc4' of git://git.infradead.org/linux-ubifs

      Pull UBI/UBIFS fixes from Richard Weinberger:
       "This contains three bug fixes for both UBI and UBIFS"

      * tag 'upstream-4.3-rc4' of git://git.infradead.org/linux-ubifs:
        UBI: return ENOSPC if no enough space available
        UBI: Validate data_size
        UBIFS: Kill unneeded locking in ubifs_init_security

  commit 9522f476d932eb23ebf8dbbc6b4e2f966f3fe911
  Merge: dd36d73 0266715
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 07:50:08 2015 -0400

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

      Pull key signing fixes from James Morris:
       "Keyrings and modsign fixes from David Howells"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:
        MODSIGN: Change from CMS to PKCS#7 signing if the openssl is too old
        X.509: Don't strip leading 00's from key ID when constructing key 
description
        KEYS: Remove unnecessary header #inclusions from extract-cert.c
        KEYS: Fix race between key destruction and finding a keyring by name

  commit 5f509239eccc9d118d3474a22e78b3da1ceefe02
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Oct 1 08:03:06 2015 +0200

      ieee802154: handle datagram variables as u16

      This reverts commit 9abc378c66e3d6f437eed77c1c534cbc183523f7
      ("ieee802154: 6lowpan: change datagram var types").

      The reason is that I forgot the IPv6 fragmentation here. Our MTU of
      lowpan interface is 1280 and skb->len should not above of that. If we
      reach a payload above 1280 in IPv6 header then we have a IPv6
      fragmentation above 802.15.4 6LoWPAN fragmentation. The type "u16" was
      fine, instead I added now a WARN_ON_ONCE if skb->len is above MTU which
      should never happen otherwise IPv6 on minimum MTU size is broken.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit fc07e76ac7ffa3afd621a1c3858a503386a14281
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 13:20:22 2015 +0200

      Revert "KVM: SVM: use NPT page attributes"

      This reverts commit 3c2e7f7de3240216042b61073803b61b9b3cfb22.
      Initializing the mapping from MTRR to PAT values was reported to
      fail nondeterministically, and it also caused extremely slow boot
      (due to caching getting disabled---bug 103321) with assigned devices.

      Reported-by: Markus Trippelsdorf <markus@xxxxxxxxxxxxxxx>
      Reported-by: Sebastian Schuette <dracon@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit bcf166a9942c3aabd8b752a7c38a49f57c54cfb8
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 13:19:55 2015 +0200

      Revert "KVM: svm: handle KVM_X86_QUIRK_CD_NW_CLEARED in svm_get_mt_mask"

      This reverts commit 5492830370171b6a4ede8a3bfba687a8d0f25fa5.
      It builds on the commit that is being reverted next.

      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 625422f60c55bbc368b8568ff925770b36bfc189
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 13:28:15 2015 +0200

      Revert "KVM: SVM: Sync g_pat with guest-written PAT value"

      This reverts commit e098223b789b4a618dacd79e5e0dad4a9d5018d1,
      which has a dependency on other commits being reverted.

      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 606decd67049217684e3cb5a54104d51ddd4ef35
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 13:12:47 2015 +0200

      Revert "KVM: x86: apply guest MTRR virtualization on host reserved pages"

      This reverts commit fd717f11015f673487ffc826e59b2bad69d20fe5.
      It was reported to cause Machine Check Exceptions (bug 104091).

      Reported-by: harn-solo@xxxxxx
      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit b2f73922d119686323f14fbbe46587f863852328
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 30 15:59:17 2015 +0200

      fs/proc, core/debug: Don't expose absolute kernel addresses via wchan

      So the /proc/PID/stat 'wchan' field (the 30th field, which contains
      the absolute kernel address of the kernel function a task is blocked in)
      leaks absolute kernel addresses to unprivileged user-space:

              seq_put_decimal_ull(m, ' ', wchan);

      The absolute address might also leak via /proc/PID/wchan as well, if
      KALLSYMS is turned off or if the symbol lookup fails for some reason:

      static int proc_pid_wchan(struct seq_file *m, struct pid_namespace *ns,
                                struct pid *pid, struct task_struct *task)
      {
              unsigned long wchan;
              char symname[KSYM_NAME_LEN];

              wchan = get_wchan(task);

              if (lookup_symbol_name(wchan, symname) < 0) {
                      if (!ptrace_may_access(task, PTRACE_MODE_READ))
                              return 0;
                      seq_printf(m, "%lu", wchan);
              } else {
                      seq_printf(m, "%s", symname);
              }

              return 0;
      }

      This isn't ideal, because for example it trivially leaks the KASLR offset
      to any local attacker:

        fomalhaut:~> printf "%016lx\n" $(cat /proc/$$/stat | cut -d' ' -f35)
        ffffffff8123b380

      Most real-life uses of wchan are symbolic:

        ps -eo pid:10,tid:10,wchan:30,comm

      and procps uses /proc/PID/wchan, not the absolute address in 
/proc/PID/stat:

        triton:~/tip> strace -f ps -eo pid:10,tid:10,wchan:30,comm 2>&1 | grep 
wchan | tail -1
        open("/proc/30833/wchan", O_RDONLY)     = 6

      There's one compatibility quirk here: procps relies on whether the
      absolute value is non-zero - and we can provide that functionality
      by outputing "0" or "1" depending on whether the task is blocked
      (whether there's a wchan address).

      These days there appears to be very little legitimate reason
      user-space would be interested in  the absolute address. The
      absolute address is mostly historic: from the days when we
      didn't have kallsyms and user-space procps had to do the
      decoding itself via the System.map.

      So this patch sets all numeric output to "0" or "1" and keeps only
      symbolic output, in /proc/PID/wchan.

      ( The absolute sleep address can generally still be profiled via
        perf, by tasks with sufficient privileges. )

      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Acked-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150930135917.GA3285@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0ce3cc008ec04258b6a6314b09f1a6012810881a
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Sep 25 23:02:19 2015 +0100

      arm64/efi: Fix boot crash by not padding between EFI_MEMORY_RUNTIME 
regions

      The new Properties Table feature introduced in UEFIv2.5 may
      split memory regions that cover PE/COFF memory images into
      separate code and data regions. Since these regions only differ
      in the type (runtime code vs runtime data) and the permission
      bits, but not in the memory type attributes (UC/WC/WT/WB), the
      spec does not require them to be aligned to 64 KB.

      Since the relative offset of PE/COFF .text and .data segments
      cannot be changed on the fly, this means that we can no longer
      pad out those regions to be mappable using 64 KB pages.
      Unfortunately, there is no annotation in the UEFI memory map
      that identifies data regions that were split off from a code
      region, so we must apply this logic to all adjacent runtime
      regions whose attributes only differ in the permission bits.

      So instead of rounding each memory region to 64 KB alignment at
      both ends, only round down regions that are not directly
      preceded by another runtime region with the same type
      attributes. Since the UEFI spec does not mandate that the memory
      map be sorted, this means we also need to sort it first.

      Note that this change will result in all EFI_MEMORY_RUNTIME
      regions whose start addresses are not aligned to the OS page
      size to be mapped with executable permissions (i.e., on kernels
      compiled with 64 KB pages). However, since these mappings are
      only active during the time that UEFI Runtime Services are being
      invoked, the window for abuse is rather small.

      Tested-by: Mark Salter <msalter@xxxxxxxxxx>
      Tested-by: Mark Rutland <mark.rutland@xxxxxxx> [UEFI 2.4 only]
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Mark Salter <msalter@xxxxxxxxxx>
      Reviewed-by: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.0+
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443218539-7610-3-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a5caa209ba9c29c6421292e7879d2387a2ef39c9
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Fri Sep 25 23:02:18 2015 +0100

      x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at 
runtime, instead of top-down

      Beginning with UEFI v2.5 EFI_PROPERTIES_TABLE was introduced
      that signals that the firmware PE/COFF loader supports splitting
      code and data sections of PE/COFF images into separate EFI
      memory map entries. This allows the kernel to map those regions
      with strict memory protections, e.g. EFI_MEMORY_RO for code,
      EFI_MEMORY_XP for data, etc.

      Unfortunately, an unwritten requirement of this new feature is
      that the regions need to be mapped with the same offsets
      relative to each other as observed in the EFI memory map. If
      this is not done crashes like this may occur,

        BUG: unable to handle kernel paging request at fffffffefe6086dd
        IP: [<fffffffefe6086dd>] 0xfffffffefe6086dd
        Call Trace:
         [<ffffffff8104c90e>] efi_call+0x7e/0x100
         [<ffffffff81602091>] ? virt_efi_set_variable+0x61/0x90
         [<ffffffff8104c583>] efi_delete_dummy_variable+0x63/0x70
         [<ffffffff81f4e4aa>] efi_enter_virtual_mode+0x383/0x392
         [<ffffffff81f37e1b>] start_kernel+0x38a/0x417
         [<ffffffff81f37495>] x86_64_start_reservations+0x2a/0x2c
         [<ffffffff81f37582>] x86_64_start_kernel+0xeb/0xef

      Here 0xfffffffefe6086dd refers to an address the firmware
      expects to be mapped but which the OS never claimed was mapped.
      The issue is that included in these regions are relative
      addresses to other regions which were emitted by the firmware
      toolchain before the "splitting" of sections occurred at
      runtime.

      Needless to say, we don't satisfy this unwritten requirement on
      x86_64 and instead map the EFI memory map entries in reverse
      order. The above crash is almost certainly triggerable with any
      kernel newer than v3.13 because that's when we rewrote the EFI
      runtime region mapping code, in commit d2f7cbe7b26a ("x86/efi:
      Runtime services virtual mapping"). For kernel versions before
      v3.13 things may work by pure luck depending on the
      fragmentation of the kernel virtual address space at the time we
      map the EFI regions.

      Instead of mapping the EFI memory map entries in reverse order,
      where entry N has a higher virtual address than entry N+1, map
      them in the same order as they appear in the EFI memory map to
      preserve this relative offset between regions.

      This patch has been kept as small as possible with the intention
      that it should be applied aggressively to stable and
      distribution kernels. It is very much a bugfix rather than
      support for a new feature, since when EFI_PROPERTIES_TABLE is
      enabled we must map things as outlined above to even boot - we
      have no way of asking the firmware not to split the code/data
      regions.

      In fact, this patch doesn't even make use of the more strict
      memory protections available in UEFI v2.5. That will come later.

      Suggested-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reported-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chun-Yi <jlee@xxxxxxxx>
      Cc: Dave Young <dyoung@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: James Bottomley <JBottomley@xxxxxxxx>
      Cc: Lee, Chun-Yi <jlee@xxxxxxxx>
      Cc: Leif Lindholm <leif.lindholm@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Jones <pjones@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443218539-7610-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 95c2b17534654829db428f11bcf4297c059a2a7e
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 12:23:56 2015 +0100

      genirq: Fix race in register_irq_proc()

      Per-IRQ directories in procfs are created only when a handler is first
      added to the irqdesc, not when the irqdesc is created.  In the case of
      a shared IRQ, multiple tasks can race to create a directory.  This
      race condition seems to have been present forever, but is easier to
      hit with async probing.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/1443266636.2004.2.camel@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2d1180e36905bf92892e265c662e5e597be01505
  Author: Rick Mann <rmann@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:24:53 2015 -0700

      ASoC: tlv320aic3x: Prevent writing reserved registers on tlv320aic3104 
CODECs

      The current code writes a set of registers that are reserved on the
      tlc320aic3104. The change skips those registers for that IC.

      Signed-off-by: Rick Mann <rmann@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 8c1a9d6323abf0fb1e5dad96cf3f1c783505ea5a
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Thu Oct 1 14:47:09 2015 +0800

      ASoC: rt5645: Correct the naming and setting of ADC Boost Volume Control

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 06423121d9eba0a56b9341cf82b88479017bce14
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Thu Oct 1 10:59:48 2015 +0100

      regulator: core: Handle probe deferral from DT when resolving supplies

      When resolving regulator-regulator supplies we ignore probe deferral
      returns from regulator_dev_lookup() (such as are generated for DT when
      we can see a supply is registered) and just fall back to the dummy
      regulator if there are full constraints (as is the case for DT).  This
      means that probe deferral is broken for DT systems, fix that by paying
      attention to -EPROBE_DEFER return codes like we do -ENODEV.

      A further patch will simplify this further, this is a minimal fix for
      the specific issue.

      Fixes: 9f7e25edb1575a6d2 (regulator: core: Handle full constraints 
systems when resolving supplies)
      Reported-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx>
      Tested-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonnie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit a7e705af524d165fe7bc303aee82225c66734885
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Thu Oct 1 10:55:29 2015 +0800

      x86/irq: Drop unlikely before IS_ERR_OR_NULL

      IS_ERR_OR_NULL already contain an unlikely compiler flag. Drop it.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/03d18502ed7ed417f136c091f417d2d88c147ec6.1443667610.git.geliangtang@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c2365b9388e8ec19305e3f449c1826e7493d156d
  Author: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
  Date:   Thu Oct 1 14:22:02 2015 +0530

      perf/x86/intel/uncore: Do not use macro DEFINE_PCI_DEVICE_TABLE()

      The DEFINE_PCI_DEVICE_TABLE() macro is deprecated. Use
      'struct pci_device_id' instead of DEFINE_PCI_DEVICE_TABLE(),
      with the goal of getting rid of this macro completely.

      This Coccinelle semantic patch performs this transformation:

        @@
        identifier a;
        declarer name DEFINE_PCI_DEVICE_TABLE;
        initializer i;
        @@
        - DEFINE_PCI_DEVICE_TABLE(a)
        + const struct pci_device_id a[] = i;

      Signed-off-by: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20151001085201.GA16939@localhost
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit daad0bf1491e5321c76a6ba4ccf50a4991494aa8
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 18:30:06 2015 +0200

      s390/defconfig: set SCSI_DH=y

      Fix this warning:
      arch/s390/configs/performance_defconfig:380:warning: symbol value 'm' 
invalid for SCSI_DH

      Introduced via 086b91d052ebe4ead5d28021afe3bdfd70af15bf
      (scsi_dh: integrate into the core SCSI code)

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 0bf6cd5b9531bcc29c0a5e504b6ce2984c6fd8d8
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Sun Sep 27 21:01:51 2015 +0200

      blk-mq: factor out a helper to iterate all tags for a request_queue

      And replace the blk_mq_tag_busy_iter with it - the driver use has been
      replaced with a new helper a while ago, and internal to the block we
      only need the new version.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit f4829a9b7a61e159367350008a608b062c4f6840
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Sun Sep 27 21:01:50 2015 +0200

      blk-mq: fix racy updates of rq->errors

      blk_mq_complete_request may be a no-op if the request has already
      been completed by others means (e.g. a timeout or cancellation), but
      currently drivers have to set rq->errors before calling
      blk_mq_complete_request, which might leave us with the wrong error value.

      Add an error parameter to blk_mq_complete_request so that we can
      defer setting rq->errors until we known we won the race to complete the
      request.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit e98d6d6203552ebd1e80ac17de857547efa37fba
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:45 2015 +0300

      Bluetooth: hci_bcm: Do not test ACPI companion in bcm_acpi_probe()

      This device has always ACPI companion because driver supports only ACPI
      enumeration. Therefore there is no need to test it in bcm_acpi_probe() and
      we can pass it directly to acpi_dev_get_resources() (which will return
      -EINVAL in case of NULL argument is passed).

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4d1c4558028ff0b7dbc1e24c319f478658f0620d
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:44 2015 +0300

      Bluetooth: hci_bcm: Remove needless looking code

      Tree wide grep for "hci_bcm" doesn't reveal there is any code registering
      this platform device and "struct acpi_device_id" use for passing the
      platform data looks a debug/test code leftover to me.

      I'm assuming this driver effectively supports only ACPI enumeration and
      thus test for ACPI_HANDLE() and platform data can be removed.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5fbae60d43652edc005f1a690345ec7e290def8e
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:43 2015 +0300

      Bluetooth: hci_bcm: Remove needless acpi_match_device() call

      There is no need to call acpi_match_device() in driver's probe path and
      verify does it find a match to given ACPI _HIDs in .acpi_match_table as
      driver/platform/acpi core code has found the match prior calling the 
probe.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5be00284dc85dadd5241833fbca645c19baebebb
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:42 2015 +0300

      Bluetooth: hci_bcm: Handle possible error from acpi_dev_get_resources()

      Driver doesn't handle possible error from acpi_dev_get_resources(). Test 
it
      and return the error code in case of error.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 09dbf1b7847ca09afb4616021fdc928452511888
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:26:41 2015 +0300

      Bluetooth: hci_bcm: Add missing acpi_dev_free_resource_list()

      Caller of acpi_dev_get_resources() should free the constructed resource
      list by calling the acpi_dev_free_resource_list() in order to avoid memory
      leak.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5b235dc2647e4977b17b5c41d959d0f455831c3f
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Fri Sep 4 14:29:16 2015 +0200

      MIPS: Fix the build on jz4740 after removing the custom gpio.h

      Somehow the wrong version of the patch to remove the use of custom
      gpio.h on mips has been merged. This patch add the missing fixes for a
      build error on jz4740 because linux/gpio.h doesn't provide any machine
      specfics definitions anymore.

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Lars-Peter Clausen <lars@xxxxxxxxxx>
      Cc: Brian Norris <computersforpeace@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11089/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 4bc6a58fcbf63dc3da9870c41eeab1bd030bc585
  Merge: 9c17dbc 7f8d1ad
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 1 09:03:57 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes:

      User visible changes:

        - By default use the most precise "cycles" hw counter available, i.e.
          when the user doesn't specify any event, it will try using cycles:ppp,
          cycles:pp, etc. (Arnaldo Carvalho de Melo)

        - Remove blank lines, headers when piping output in 'perf list', so 
that it can
          be sanely used with 'wc -l', etc. (Arnaldo Carvalho de Melo)

        - Amend documentation about max_stack and synthesized callchains. 
(Adrian Hunter)

        - Fix 'perf probe -l' for probes added to kernel module functions. 
(Masami Hiramatsu)

      Build fixes:

        - Fix shadowed declarations that break the build on older distros. 
(Jiri Olsa)

        - Fix build break on powerpc due to sample_reg_masks. (Sukadev 
Bhattiprolu)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 95c632f4e4e6365a20397f4fd04dcf27aab02958
  Merge: 4ac86a6 7ba7805
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 1 09:02:11 2015 +0200

      Merge remote-tracking branch 'tglx/x86/urgent' into x86/urgent

      Pick up the WCHAN fixes from Thomas.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 23270e160dd5d240dbf73722c1df9ff3044d7bc9
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 16:28:52 2015 +0300

      Bluetooth: hci_intel: Cleanup the device probe code

      There is some unneeded code in "hci_intel" probing. First
      acpi_match_device() call is needless as driver/platform/acpi core code has
      already done the matching before calling the probe and the driver does not
      use the returned pointer to matching _HID other than checking is it NULL.

      Then tree wide grep for "hci_intel" doesn't reveal that there is any code
      registering this platform device so it looks this device is always backed
      with ACPI companion so also ACPI_HANDLE() test can be removed.

      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b59f2e31b8abda3d63c53ea7672a219639ded61b
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 28 10:23:27 2015 -0500

      ipvs: Don't protect ip_vs_addr_is_unicast with CONFIG_SYSCTL

      I arranged the code so that the compiler can remove the unecessary bits
      in ip_vs_leave when CONFIG_SYSCTL is unset, and removed an explicit
      CONFIG_SYSCTL.

      Unfortunately when rebasing my work on top of that of Alex Gartrell I
      missed the fact that the newly added function ip_vs_addr_is_unicast was
      surrounded by CONFIG_SYSCTL.

      So remove the now unnecessary CONFIG_SYSCTL guards around
      ip_vs_addr_is_unicast.  It is causing build failures today when
      CONFIG_SYSCTL is not selected and any self respecting compiler will
      notice that sysctl_cache_bypass is always false without CONFIG_SYSCTL
      and not include the logic from the function ip_vs_addr_is_unicast in
      the compiled code.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit cda374253f862bd0f43edda6935a48294fe8ed3e
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Thu Oct 1 14:21:40 2015 +0900

      drm/exynos: Staticize local function in exynos_drm_gem.c

      The exynos_drm_gem_mmap_buffer() is not used outside so make it static.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 3c79fb8c9424a24bf812b9a8cb4f19b781052b0b
  Author: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 18:40:54 2015 -0300

      drm/exynos: fimd: actually disable dp clock

      fimd_dp_clock_enable() was setting the always to enabled,
      this patch fix this to actually use the value that is set to 'val'.

      Reported-by: Emilio López <emilio.lopez@xxxxxxxxxxxxxxx>
      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 148ba09c465cc54d8e68f041bf9a30332b315c39
  Author: Inki Dae <inki.dae@xxxxxxxxxxx>
  Date:   Wed Sep 30 20:12:29 2015 +0900

      drm/exynos: dp: remove suspend/resume functions

      This patch removes unnecessary pm suspend/resume functions.

      All kms sub drivers will be controlled by top of Exynos drm driver
      and connector dpms so these sub drivers shouldn't have their own
      pm interfaces.

      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>
      Reviewed-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>

  commit 8d0d94015e96b8853c4f7f06eac3f269e1b3d866
  Author: Fabiano Fidêncio <fidencio@xxxxxxxxxx>
  Date:   Thu Sep 24 15:18:34 2015 +0200

      drm/qxl: recreate the primary surface when the bo is not primary

      When disabling/enabling a crtc the primary area must be updated
      independently of which crtc has been disabled/enabled.

      Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1264735

      Signed-off-by: Fabiano Fidêncio <fidencio@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 7b09a1bba4091a9d208481d7831682a1f3061ab9
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Wed Sep 30 19:42:15 2015 +0200

      dmaengine: pxa_dma: fix residue corner case

      A very tiny temporal window exists in the residue calculation where :
       - upon entering residue calculation, the transfer is ongoing
       - when reading the current transfer pointer, it just changed to
         the "finisher/linker" descriptor

      In this case, the residue returned is the whole transfer length instead
      of 0. Fix it.

      This appears almost in one extreme case, where the driver is used
      by older clients which inquire for residue in interrupt context, such
      as the smsc91x ethernet driver, in a tight loop :
        interrupt_handler()
          dmaengine_submit()
          do {
            dmaengine_tx_status()
          } while (residue > 0 || status != DMA_ERROR)

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit e87ffbdf06971a80ad2a11217200bdd936195af1
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Wed Sep 30 19:42:14 2015 +0200

      dmaengine: pxa_dma: fix the no-requestor case

      A very small number of devices don't use the flow control offered by
      requestor lines. In these specific cases, the pxa dma driver should be
      aware of that and not try to use a requestor line.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit aa3ee5f569fda51e54c224c0df60e187e9c5e582
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Sat Sep 26 17:15:47 2015 +0800

      dmaengine: zxdma: Fix off-by-one for testing valid pchan request

      The valid pchan range is 0 ~ d->dma_requests - 1.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Reviewed-by: Jun Nie <jun.nie@xxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 0be2136b67067617b36c70e525d7534108361e36
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Tue Sep 15 15:39:11 2015 +0200

      dmaengine: at_xdmac: clean used descriptor

      When putting back a descriptor to the free descs list, some fields are
      not set to 0, it can cause bugs if someone uses it without having this
      in mind.
      Descriptor are not put back one by one so it is easier to clean
      descriptors when we request them.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx #4.2
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit a1cf09031e641d3cceaca4a4dd20ef6a785bc9b3
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 15:36:00 2015 +0200

      dmaengine: at_xdmac: change block increment addressing mode

      The addressing mode we were using was not only incrementing the address at
      each microblock, but also at each data boundary, which was severely 
slowing
      the transfer, without any benefit since we were not using the data stride.

      Switch to the micro block increment only in order to get back to an
      acceptable performance level.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Fixes: 6007ccb57744 ("dmaengine: xdmac: Add interleaved transfer support")
      Cc: stable@xxxxxxxxxxxxxxx #4.2
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 5f81b95fe2a2de4ec51d46ffd04fa40dfc0cb26a
  Author: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
  Date:   Wed Sep 30 11:58:07 2015 +1000

      cxl: fix leak of ctx->mapping when releasing kernel API contexts

      When a context is created via the kernel API, ctx->mapping is allocated
      within the kernel and thus needs to be freed when the context is freed.
      reclaim_ctx() attempts to do this for contexts with the ctx->kernelapi 
flag
      set, but afu_release() (which can be called from the kernel API through
      cxl_fd_release()) sets ctx->mapping to NULL before calling
      cxl_context_free() to free the context.

      Add a check to afu_release() so that the mappings in contexts created via
      the kernel API are left alone so reclaim_ctx() can free them.

      Reported-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Fixes: 6f7f0b3df6d4 ("cxl: Add AFU virtual PHB and kernel API")
      Signed-off-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 52adee580d3c71a0dfabc3168597421981d68b86
  Author: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
  Date:   Wed Sep 30 11:58:06 2015 +1000

      cxl: fix leak of ctx->irq_bitmap when releasing context via kernel API

      At present, ctx->irq_bitmap is freed in afu_release_irqs(), which is 
called
      from afu_release() via cxl_context_detach().

      Move the freeing of ctx->irq_bitmap from afu_release_irqs() to
      reclaim_ctx() (called through cxl_context_free()) so it's freed when
      releasing a context via the kernel API (cxl_release_context()) or the
      userspace API (afu_release()).

      Reported-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Fixes: 6f7f0b3df6d4 ("cxl: Add AFU virtual PHB and kernel API")
      Signed-off-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 8dde152ea34860403c839598bdef3f07239eb25a
  Author: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
  Date:   Wed Sep 30 11:58:05 2015 +1000

      cxl: fix leak of IRQ names in cxl_free_afu_irqs()

      cxl_free_afu_irqs() doesn't free IRQ names when it releases an AFU's IRQ
      ranges. The userspace API equivalent in afu_release_irqs() calls
      afu_irq_name_free() to release the IRQ names.

      Call afu_irq_name_free() in cxl_free_afu_irqs() to release the IRQ names.
      Make afu_irq_name_free() non-static to allow this.

      Reported-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Fixes: 6f7f0b3df6d4 ("cxl: Add AFU virtual PHB and kernel API")
      Signed-off-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Signed-off-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 6ece90f9a13e2592cbd6634f74bcb306169b5ab6
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:10:05 2015 +0200

      netfilter: fix Kconfig dependencies for nf_dup_ipv{4,6}

      net/built-in.o: In function `nf_dup_ipv4': (.text+0xed24d): undefined 
reference to `nf_conntrack_untracked'
      net/built-in.o: In function `nf_dup_ipv4': (.text+0xed267): undefined 
reference to `nf_conntrack_untracked'
      net/built-in.o: In function `nf_dup_ipv6': (.text+0x158aef): undefined 
reference to `nf_conntrack_untracked'
      net/built-in.o: In function `nf_dup_ipv6': (.text+0x158b09): undefined 
reference to `nf_conntrack_untracked'

      Reported-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 7f8d1ade1b19f684ed3a7c4fb1dc5d347127b438
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 17:49:49 2015 -0300

      perf tools: By default use the most precise "cycles" hw counter available

      If the user doesn't specify any event, try the most precise "cycles"
      available, i.e. start by "cycles:ppp" and go on removing "p" till it
      works.

      E.g.

        $ perf record usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.017 MB perf.data (11 samples) ]
        $ perf evlist
        cycles:pp
        $ perf evlist -v
        cycles:pp: size: 112, { sample_period, sample_freq }: 4000, sample_type:
        IP|TID|TIME|PERIOD, disabled: 1, inherit: 1, mmap: 1, comm: 1, freq: 1,
        enable_on_exec: 1, task: 1, precise_ip: 2, sample_id_all: 1,
        exclude_guest: 1, mmap2: 1, comm_exec: 1
        $ grep 'model name' /proc/cpuinfo | head -1
        model name      : Intel(R) Core(TM) i7-3667U CPU @ 2.00GHz
        $

      When 'cycles' appears explicitely is specified this will not be tried,
      i.e. the user has full control of the level of precision to be used:

        $ perf record -e cycles usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.016 MB perf.data (9 samples) ]
        $ perf evlist
        cycles
        $ perf evlist -v
        cycles: size: 112, { sample_period, sample_freq }: 4000, sample_type:
        IP|TID|TIME|PERIOD, disabled: 1, inherit: 1, mmap: 1, comm: 1, freq: 1,
        enable_on_exec: 1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2:
        1, comm_exec: 1
        $

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: https://www.youtube.com/watch?v=nXaxk27zwlk
      Link: http://lkml.kernel.org/n/tip-b1ywebmt22pi78vjxau01wth@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dfc431cbdc3a3c0556f1cd462d724d107cc15a9e
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 17:13:26 2015 -0300

      perf list: Remove blank lines, headers when piping output

      So that one can, for instance, use it with wc -l:

        # perf list *:*write* | wc -l
        60

      Or to look for the "bio" tracepoints, without 'perf list' headers:

        # perf list *:*bio* | head
          block:block_bio_backmerge                          [Tracepoint event]
          block:block_bio_bounce                             [Tracepoint event]
          block:block_bio_complete                           [Tracepoint event]
          block:block_bio_frontmerge                         [Tracepoint event]
          block:block_bio_queue                              [Tracepoint event]
          block:block_bio_remap                              [Tracepoint event]
        #

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ts7sc0x8u4io4cifzkup4j44@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 6cca13bdf5a5d561a855259689874e0c7266eec3
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:37 2015 +0900

      perf probe: Improve error message when %return is on inlined function

      perf probe shows more precisely message when it finds given
      %return target function is inlined.

      Without this fix:
        ----
        # ./perf probe -V getname_flags%return
        Return probe must be on the head of a real function.
        Debuginfo analysis failed.
          Error: Failed to show vars.
        ----

      With this fix:
        ----
        # ./perf probe -V getname_flags%return
        Failed to find "getname_flags%return",
         because getname_flags is an inlined function and has no return point.
        Debuginfo analysis failed.
          Error: Failed to show vars.
        ----

      Suggested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164137.3733.55055.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 20f49859c785183d5296670a10dace454131274b
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:35 2015 +0900

      perf probe: Fix a segfault bug in debuginfo_cache

      perf probe --list will get a segfault if the first kprobe event is on a
      module and the second or latter one is on the kernel.

      e.g.
        ----
        # ./perf probe -q -m pcspkr pcspkr_event
        # ./perf probe -q vfs_read
        # ./perf probe -l
        Segmentation fault (core dumped)
        ----

      This is because the debuginfo_cache fails to handle NULL module name,
      which causes segfault on strcmp. (Note that strcmp("something", NULL)
      always causes segfault)

      To fix this debuginfo_cache__open always translates the NULL module name
      to "kernel" (this is correct, because NULL module name means opening the
      debuginfo for the kernel)

        ----
        # ./perf probe -l
          probe:pcspkr_event   (on pcspkr_event@drivers/input/misc/pcspkr.c
          in pcspkr)
          probe:vfs_read       (on vfs_read@ksrc/linux-3/fs/read_write.c)
        ----

      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164135.3733.23993.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9b239a12bc872f212cefbaee4d028c838abe6ff3
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:33 2015 +0900

      perf probe: Show correct source lines of probes on kmodules

      Perf probe always failed to find appropriate line numbers because of
      failing to find .text start address offset from debuginfo.

      e.g.
        ----
        # ./perf probe -m pcspkr pcspkr_event:5
        Added new events:
          probe:pcspkr_event   (on pcspkr_event:5 in pcspkr)
          probe:pcspkr_event_1 (on pcspkr_event:5 in pcspkr)

        You can now use it in all perf tools, such as:

                perf record -e probe:pcspkr_event_1 -aR sleep 1

        # ./perf probe -l
        Failed to find debug information for address ffffffffa031f006
        Failed to find debug information for address ffffffffa031f016
          probe:pcspkr_event   (on pcspkr_event+6 in pcspkr)
          probe:pcspkr_event_1 (on pcspkr_event+22 in pcspkr)
        ----

      This fixes the above issue as below.
      1. Get the relative address of the symbol in .text by using
         map->start.
      2. Adjust the address by adding the offset of .text section
         in the kernel module binary.

      With this fix, perf probe -l shows lines correctly.
        ----
        # ./perf probe -l
          probe:pcspkr_event   (on pcspkr_event:5@drivers/input/misc/pcspkr.c 
in pcspkr)
          probe:pcspkr_event_1 (on pcspkr_event:5@drivers/input/misc/pcspkr.c 
in pcspkr)
        ----

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164132.3733.24643.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9135949ddd9d0d8d73a2f441912508d25a4a82a2
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:28 2015 +0900

      perf probe: Begin and end libdwfl report session correctly

      Fix a trival bug about libdwfl usage of the report session, it should
      explicitly begin and end a report session around dwfl_report_offline().

      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164128.3733.59876.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 663b1151f2d674e2004c015cbe9995749033c49a
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Thu Oct 1 01:41:30 2015 +0900

      perf probe: Fix to remove dot suffix from second or latter events

      Fix to remove dot suffix (e.g. .const, .isra) from the second or latter
      events which has suffix numbers.

      Since the previous commit 35a23ff928b0 ("perf probe: Cut off the gcc
      optimization postfixes from function name") didn't care about the suffix
      numbered events, therefore we'll have an error when we add additional
      events on the same dot suffix functions.

      e.g.
        ----
        # ./perf probe -f -a get_sigframe.isra.2.constprop.3 \
         -a get_sigframe.isra.2.constprop.3
        Failed to write event: Invalid argument
          Error: Failed to add events.
        ----

      This fixes above issue as below:
        ----
        # ./perf probe -f -a get_sigframe.isra.2.constprop.3 \
         -a get_sigframe.isra.2.constprop.3
        Added new events:
          probe:get_sigframe   (on get_sigframe.isra.2.constprop.3)
          probe:get_sigframe_1 (on get_sigframe.isra.2.constprop.3)

        You can now use it in all perf tools, such as:

                perf record -e probe:get_sigframe_1 -aR sleep 1

        ----

      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150930164130.3733.26573.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f845086a8ed49e657a750f87f85966d75c8a9645
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 13:02:08 2015 -0300

      tools lib symbol: Introduce kallsyms2elf_type

      Map 't', 'T' (text, local, global), 'w' and 'W' (weak text, local,
      global) as STT_FUNC, and the rest as STT_OBJECT

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-sbwcixulpc5v1xuxn3xvm0nn@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8e947f1e84fd1588f66e5f2ea69c80647de72cd4
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 12:42:07 2015 -0300

      tools lib symbol: Rename kallsyms2elf_type to kallsyms2elf_binding

      It is about binding, not type, we have just a letter in kallsyms that
      should map both for the ELF type (STT_FUNC, etc) and to the ELF
      symbol binding (STB_WEAK, STB_GLOBAL, etc), so rename it now before
      introducing kallsyms2_elf_type()

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-uu5vj343ms1q2wm55690on6v@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a5e813c68649366aaa3f785772b00ea6ccad7b8d
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 11:54:04 2015 -0300

      perf machine: Add method for common kernel_map(FUNCTION) operation

      And it is also a step in the direction of killing the separation of data
      and text maps in map_groups.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-rrds86kb3wx5wk8v38v56gw8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 77e65977495cd6f6fcfacd8c16bdd9c8c18a1d72
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 30 11:08:58 2015 -0300

      perf machine: Use machine__kernel_map() thoroughly

      In places where we were using its open coded equivalent.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-khkdugcdoqy3tkszm3jdxgbe@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit eb56db54326f910348defbee2803ec0675a664b2
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 17:53:49 2015 -0400

      perf tools: Fix build break on powerpc due to sample_reg_masks

      The perf_regs.c file does not get built on Powerpc as CONFIG_PERF_REGS
      is false.  So the weak definition for 'sample_regs_masks' doesn't get
      picked up.

      Adding perf_regs.o to util/Build unconditionally, exposes a redefinition
      error for 'perf_reg_value()' function (due to the static inline version
      in util/perf_regs.h). So use #ifdef HAVE_PERF_REGS_SUPPORT' around that
      function.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Dominik Dingel <dingel@xxxxxxxxxxxxxxxxxx>
      Cc: Naveen N. Rao <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150930182836.GA27858@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 40862a7b793945c7080d1566ca3dc6249f3c6354
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 29 11:52:37 2015 +0300

      perf report: Amend documentation about max_stack and synthesized 
callchains

      The --max_stack option was added as an optimization to reduce processing 
time,
      so people specifying --max-stack might get a increased processing time if
      combined with synthesized callchains, but otherwise no real harm.

      A warning about setting both --max_stack and the synthesized callchains 
max
      depth seems like overkill.  Amend the documentation.

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: http://lkml.kernel.org/r/560A5155.4060105@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b7f9ff5654d53fa47e0b5ff20f834f3e7a611846
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 29 17:34:46 2015 -0300

      perf maps: Introduce maps__find_symbol_by_name()

      Out of map_groups__find_symbol_by_name(), so that we can turn this later
      one first into a call to maps__find_symbol_by_name(MAP__FUNCTION) +
      MAP__VARIABLE, and then to just one call, we'll merge MAP__FUNCTION with
      MAP__VARIABLE maps, to simplify the code.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-pvkar0jacqn92g148u9sqttt@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 272ed29a91aea4397c05157dea7210dd7e81557a
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Sep 29 17:05:31 2015 +0200

      perf tools: Fix shadowed declaration in parse-events.c

      The error variable breaks build on CentOS 6.7, due to a collision with a
      global error symbol:

          CC       util/parse-events.o
        cc1: warnings being treated as errors
        util/parse-events.c:419: error: declaration of â??errorâ?? shadows a 
global
        declaration
        util/util.h:135: error: shadowed declaration is here
        util/parse-events.c: In function â??add_tracepoint_multi_eventâ??:
        ...

      Using different argument names instead to fix it.

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: linux-tip-commits@xxxxxxxxxxxxxxx
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150929150531.GI27383@xxxxxxxxxxxxxxxx
      [ Fix one more case, at line 770 ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 45633a169571e81835ec53fe0c089dd20f3195f1
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Tue Sep 29 16:53:12 2015 +0200

      tools: Fix shadowed declaration in err.h

      The error variable breaks build on CentOS 6.7, due to collision with
      global error symbol:

          CC       util/evlist.o
        cc1: warnings being treated as errors
        In file included from util/evlist.c:28:
        tools/include/linux/err.h: In function â??ERR_PTRâ??:
        tools/include/linux/err.h:34: error: declaration of â??errorâ?? shadows 
a global declaration
        util/util.h:135: error: shadowed declaration is here

      Using 'error_' name instead to fix it.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-i9mdgdbrgauy3fe76s9rd125@xxxxxxxxxxxxxx
      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      [ Use 'error_' instead of 'err' to, visually, not diverge too much from 
include/linux/err.h ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dae0f305d61b07933a129dfe975342f3177277d5
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Mon Sep 28 14:23:57 2015 +0200

      x86/signal: Deinline get_sigframe, save 240 bytes

      This function compiles to 277 bytes of machine code and has 4 callsites.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443443037-22077-4-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c368ef2866adbfc0e90fdecc09e3b3fe2cddcd14
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Mon Sep 28 14:23:56 2015 +0200

      x86: Deinline early_console_register, save 403 bytes

      This function compiles to 60 bytes of machine code.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443443037-22077-3-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e6e5f84092b1f3a8733c20e26838af4e21a4854f
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Mon Sep 28 14:23:55 2015 +0200

      x86/e820: Deinline e820_type_to_string, save 126 bytes

      This function compiles to 102 bytes of machine code. It has two
      callsites.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443443037-22077-2-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7ba78053aacb89998a052843e3c56983c31d57f0
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 08:38:23 2015 +0000

      x86/process: Unify 32bit and 64bit implementations of get_wchan()

      The stack layout and the functionality is identical. Use the 64bit
      version for all of x86.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Borislav Petkov <bp@xxxxxxxxx>
      Reviewed-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Cc: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150930083302.779694618@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit eddd3826a1a0190e5235703d1e666affa4d13b96
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 08:38:22 2015 +0000

      x86/process: Add proper bound checks in 64bit get_wchan()

      Dmitry Vyukov reported the following using trinity and the memory
      error detector AddressSanitizer
      
(https://code.google.com/p/address-sanitizer/wiki/AddressSanitizerForKernel).

      [ 124.575597] ERROR: AddressSanitizer: heap-buffer-overflow on
      address ffff88002e280000
      [ 124.576801] ffff88002e280000 is located 131938492886538 bytes to
      the left of 28857600-byte region [ffffffff81282e0a, ffffffff82e0830a)
      [ 124.578633] Accessed by thread T10915:
      [ 124.579295] inlined in describe_heap_address
      ./arch/x86/mm/asan/report.c:164
      [ 124.579295] #0 ffffffff810dd277 in asan_report_error
      ./arch/x86/mm/asan/report.c:278
      [ 124.580137] #1 ffffffff810dc6a0 in asan_check_region
      ./arch/x86/mm/asan/asan.c:37
      [ 124.581050] #2 ffffffff810dd423 in __tsan_read8 ??:0
      [ 124.581893] #3 ffffffff8107c093 in get_wchan
      ./arch/x86/kernel/process_64.c:444

      The address checks in the 64bit implementation of get_wchan() are
      wrong in several ways:

       - The lower bound of the stack is not the start of the stack
         page. It's the start of the stack page plus sizeof (struct
         thread_info)

       - The upper bound must be:

             top_of_stack - TOP_OF_KERNEL_STACK_PADDING - 2 * sizeof(unsigned 
long).

         The 2 * sizeof(unsigned long) is required because the stack pointer
         points at the frame pointer. The layout on the stack is: ... IP FP
         ... IP FP. So we need to make sure that both IP and FP are in the
         bounds.

      Fix the bound checks and get rid of the mix of numeric constants, u64
      and unsigned long. Making all unsigned long allows us to use the same
      function for 32bit as well.

      Use READ_ONCE() when accessing the stack. This does not prevent a
      concurrent wakeup of the task and the stack changing, but at least it
      avoids TOCTOU.

      Also check task state at the end of the loop. Again that does not
      prevent concurrent changes, but it avoids walking for nothing.

      Add proper comments while at it.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Based-on-patch-from: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reviewed-by: Borislav Petkov <bp@xxxxxxxxx>
      Reviewed-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Andrey Konovalov <andreyknvl@xxxxxxxxxx>
      Cc: Kostya Serebryany <kcc@xxxxxxxxxx>
      Cc: Alexander Potapenko <glider@xxxxxxxxxx>
      Cc: kasan-dev <kasan-dev@xxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Wolfram Gloger <wmglo@xxxxxxxxxxxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150930083302.694788319@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ca07e9f3cb929548feee8b16715983a4ed009eb6
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:30:27 2015 +0200

      regmap: debugfs: simplify regmap_reg_ranges_read_file() slightly

      By printing the newline character to entry, we can avoid accounting
      for it manually in several places.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 20991cdb26ffc51030223320a6dd266f4fc28fbd
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:30:26 2015 +0200

      regmap: debugfs: use memcpy instead of snprintf

      Since we know the length of entry and that there's room enough in the
      output buffer, using memcpy instead of snprintf is simpler and
      cheaper.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit e34dc490713f8d9dfbbb5bb56d966d90a9344131
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 20:30:25 2015 +0200

      regmap: debugfs: use snprintf return value in 
regmap_reg_ranges_read_file()

      Calling strlen() no less than three times on entry is silly. Since
      we're formatting into a buffer with plenty of room, there's no chance
      of truncation, so snprintf() has actually returned the value we want,
      meaning we don't even have to call strlen once.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 09907ca630047bbeaa96de0102df7a6cc3a966cd
  Merge: d786ad3 e02ae38
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 30 21:20:39 2015 +0200

      Merge branch 'x86/for-kvm' into x86/apic

      Pull in the apic change which is provided for kvm folks to pull into
      their tree.

  commit e02ae3871355194a61b03a07d96fd71e81d7eff9
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Sep 28 12:26:31 2015 +0200

      x86/x2apic: Make stub functions available even if !CONFIG_X86_LOCAL_APIC

      Some CONFIG_X86_X2APIC functions, especially x2apic_enabled(), are not
      declared if !CONFIG_X86_LOCAL_APIC.  However, the same stubs that work
      for !CONFIG_X86_X2APIC are okay even if there is no local APIC support
      at all.

      Avoid the introduction of #ifdefs by moving the x2apic declarations
      completely outside the CONFIG_X86_LOCAL_APIC block.  (Unfortunately,
      diff generation messes up the actual change that this patch makes).
      There is no semantic change because CONFIG_X86_X2APIC depends on
      CONFIG_X86_LOCAL_APIC.

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: Feng Wu <feng.wu@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443435991-35750-1-git-send-email-pbonzini@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d786ad32c305ca0f6be1924558866fe9f901e291
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Tue Sep 29 22:37:02 2015 +0200

      x86/apic: Deinline various functions

      __x2apic_disable: 178 bytes, 3 calls
      __x2apic_enable: 117 bytes, 3 calls
      __smp_spurious_interrupt: 110 bytes, 2 calls
      __smp_error_interrupt: 208 bytes, 2 calls

      Reduces code size by about 850 bytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443559022-23793-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 26c21dd9885a2d8a4f4d539917c4877ffd399286
  Author: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
  Date:   Wed Sep 30 12:03:07 2015 +0200

      irqchip/renesas-intc-irqpin: r8a7778 IRLM setup support

      Works the same as on r8a7779.

      Signed-off-by: Ulrich Hecht <ulrich.hecht+renesas@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443607387-19147-1-git-send-email-geert+Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e256da84a04ea31c3c215997c847609af224e8f4
  Author: Gianluca Renzi <gianlucarenzi@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 21:33:41 2015 +0200

      ASoC: sgtl5000: fix wrong register MIC_BIAS_VOLTAGE setup on probe

      Signed-off-by: Gianluca Renzi <gianlucarenzi@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 57622aef86d21d459e937c72f578050ff4a91af5
  Author: Jiada Wang <jiada_wang@xxxxxxxxxx>
  Date:   Wed Sep 30 13:54:13 2015 +0900

      ASoC: wm8962: balance pm_runtime_enable

      pm_runtime_enable is called in probe to enable runtime PM
      for wm8962 codec, but pm_runtime_disable isn't called in remove
      callback, nor is called in error path if probe fails after runtime
      PM is enabled, this causes unbalanced pm_runtime_enable.

      This patch Adds pm_runtime_disable in remove callback and error path,
      to balance pm_runtime_enable.

      Signed-off-by: Jiada Wang <jiada_wang@xxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit dd36d7393d6310b0c1adefb22fba79c3cf8a577c
  Merge: d4e842b 3cef072
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:13:55 2015 -0400

      Merge git://www.linux-watchdog.org/linux-watchdog

      Pull watchdog fixes from Wim Van Sebroeck:
       "This fixes:

         - module autoload for 3 OF platform drivers
         - poweroff behaviour on bcm2835 watchdog device
         - I2C dependencies for iTCO_wdt.c"

      * git://www.linux-watchdog.org/linux-watchdog:
        watchdog: iTCO: Fix dependencies on I2C
        watchdog: bcm2835: Fix poweroff behaviour
        watchdog: Fix module autoload for OF platform driver

  commit d4e842be2b697eb61c8863fe4b080bf0688198a2
  Merge: 70c8a00 f491e70
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:11:42 2015 -0400

      Merge tag 'hwmon-for-linus-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging

      Pull hwmin fixes from Guenter Roeck:
       "Fix module autoload for various drivers"

      * tag 'hwmon-for-linus-v4.3-rc4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:
        hwmon: (pwm-fan) Fix module autoload for OF platform driver
        hwmon: (gpio-fan) Fix module autoload for OF platform driver
        hwmon: (abx500) Fix module autoload for OF platform driver

  commit 874bbfe600a660cba9c776b3957b1ce393151b76
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Wed Sep 30 09:05:30 2015 -0700

      workqueue: make sure delayed work run in local cpu

      My system keeps crashing with below message. vmstat_update() schedules a 
delayed
      work in current cpu and expects the work runs in the cpu.
      schedule_delayed_work() is expected to make delayed work run in local 
cpu. The
      problem is timer can be migrated with NO_HZ. __queue_work() queues work in
      timer handler, which could run in a different cpu other than where the 
delayed
      work is scheduled. The end result is the delayed work runs in different 
cpu.
      The patch makes __queue_delayed_work records local cpu earlier. Where the 
timer
      runs doesn't change where the work runs with the change.

      [   28.010131] ------------[ cut here ]------------
      [   28.010609] kernel BUG at ../mm/vmstat.c:1392!
      [   28.011099] invalid opcode: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
      [   28.011860] Modules linked in:
      [   28.012245] CPU: 0 PID: 289 Comm: kworker/0:3 Tainted: G        
W4.3.0-rc3+ #634
      [   28.013065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), 
BIOS 1.7.5-20140709_153802- 04/01/2014
      [   28.014160] Workqueue: events vmstat_update
      [   28.014571] task: ffff880117682580 ti: ffff8800ba428000 task.ti: 
ffff8800ba428000
      [   28.015445] RIP: 0010:[<ffffffff8115f921>]  
[<ffffffff8115f921>]vmstat_update+0x31/0x80
      [   28.016282] RSP: 0018:ffff8800ba42fd80  EFLAGS: 00010297
      [   28.016812] RAX: 0000000000000000 RBX: ffff88011a858dc0 
RCX:0000000000000000
      [   28.017585] RDX: ffff880117682580 RSI: ffffffff81f14d8c 
RDI:ffffffff81f4df8d
      [   28.018366] RBP: ffff8800ba42fd90 R08: 0000000000000001 
R09:0000000000000000
      [   28.019169] R10: 0000000000000000 R11: 0000000000000121 
R12:ffff8800baa9f640
      [   28.019947] R13: ffff88011a81e340 R14: ffff88011a823700 
R15:0000000000000000
      [   28.020071] FS:  0000000000000000(0000) 
GS:ffff88011a800000(0000)knlGS:0000000000000000
      [   28.020071] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
      [   28.020071] CR2: 00007ff6144b01d0 CR3: 00000000b8e93000 
CR4:00000000000006f0
      [   28.020071] Stack:
      [   28.020071]  ffff88011a858dc0 ffff8800baa9f640 
ffff8800ba42fe00ffffffff8106bd88
      [   28.020071]  ffffffff8106bd0b 0000000000000096 
0000000000000000ffffffff82f9b1e8
      [   28.020071]  ffffffff829f0b10 0000000000000000 
ffffffff81f18460ffff88011a81e340
      [   28.020071] Call Trace:
      [   28.020071]  [<ffffffff8106bd88>] process_one_work+0x1c8/0x540
      [   28.020071]  [<ffffffff8106bd0b>] ? process_one_work+0x14b/0x540
      [   28.020071]  [<ffffffff8106c214>] worker_thread+0x114/0x460
      [   28.020071]  [<ffffffff8106c100>] ? process_one_work+0x540/0x540
      [   28.020071]  [<ffffffff81071bf8>] kthread+0xf8/0x110
      [   28.020071]  [<ffffffff81071b00>] ?kthread_create_on_node+0x200/0x200
      [   28.020071]  [<ffffffff81a6522f>] ret_from_fork+0x3f/0x70
      [   28.020071]  [<ffffffff81071b00>] ?kthread_create_on_node+0x200/0x200

      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v2.6.31+

  commit 70c8a00a09076ca2683ef24356fad2e55f93a427
  Merge: b9a5322 7c4f1c6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 13:01:35 2015 -0400

      Merge branch 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RCU fixes from Ingo Molnar:
       "Two RCU fixes:

         - work around bug with recent GCC versions.

         - fix false positive lockdep splat"

      * 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        rcu: Suppress lockdep false positive for rcp->exp_funnel_mutex
        rcu: Change _wait_rcu_gp() to work around GCC bug 67055

  commit b9a532277938798b53178d5a66af6e2915cb27cf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 12:48:40 2015 -0400

      Initialize msg/shm IPC objects before doing ipc_addid()

      As reported by Dmitry Vyukov, we really shouldn't do ipc_addid() before
      having initialized the IPC object state.  Yes, we initialize the IPC
      object in a locked state, but with all the lockless RCU lookup work,
      that IPC object lock no longer means that the state cannot be seen.

      We already did this for the IPC semaphore code (see commit e8577d1f0329:
      "ipc/sem.c: fully initialize sem_array before making it visible") but we
      clearly forgot about msg and shm.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Manfred Spraul <manfred@xxxxxxxxxxxxxxxx>
      Cc: Davidlohr Bueso <dbueso@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3e4e3805643445b71b7ee1b84892e43d004e24e2
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Sep 10 15:00:39 2015 +0200

      drm/amdgpu: only print meaningful VM faults

      Port of radeon commit 9b7d786b900baf7c0d1a7e211570aef1cb27590f.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 2392eec65c493c3f49a1f23f4af713e3c68cf6f5
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Sep 29 10:35:45 2015 -0400

      drm/amdgpu/cgs: remove import_gpu_mem

      It was added for completeness, but we don't have any users
      for it yet.  Daniel noted that it may be racy. Remove it.

      Change-Id: I5f5546f8911a4f294008a62dc86a73f3face38d1
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 9b9acde7e887e057568cd077d9c3377d2cb9aa5b
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Tue Feb 11 19:34:25 2014 -0800

      RDS: Use per-bucket rw lock for bind hash-table

      One global lock protecting hash-tables with 1024 buckets isn't
      efficient and it shows up in a massive systems with truck
      loads of RDS sockets serving multiple databases. The
      perf data clearly highlights the contention on the rw
      lock in these massive workloads.

      When the contention gets worse, the code gets into a state where
      it decides to back off on the lock. So while it has disabled interrupts,
      it sits and backs off on this lock get. This causes the system to
      become sluggish and eventually all sorts of bad things happen.

      The simple fix is to move the lock into the hash bucket and
      use per-bucket lock to improve the scalability.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 28126959882d3ec4745f2ec800f3a1d74368b2fe
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Feb 3 11:08:50 2012 -0500

      RDS: fix rds_sock reference bug while doing bind

      One need to take rds socket reference while using it and release it
      once done with it. rds_add_bind() code path does not do that so
      lets fix it.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 8b0a6b461e2ccc95363e0547aa4f43ba2e02b096
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Feb 3 11:09:23 2012 -0500

      RDS: make socket bind/release locking scheme simple and more efficient

      RDS bind and release locking scheme is very inefficient. It
      uses RCU for maintaining the bind hash-table which is great but
      it also needs to hold spinlock for [add/remove]_bound(). So
      overall usecase, the hash-table concurrent speedup doesn't pay off.
      In fact blocking nature of synchronize_rcu() makes the RDS
      socket shutdown too slow which hurts RDS performance since
      connection shutdown and re-connect happens quite often to
      maintain the RC part of the protocol.

      So we make the locking scheme simpler and more efficient by
      replacing spin_locks with reader/writer locks and getting rid
      off rcu for bind hash-table.

      In subsequent patch, we also covert the global lock with per-bucket
      lock to reduce the global lock contention.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit 59fe4606748f7016e9e02bbd26da185f8620661a
  Author: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Feb 3 11:09:23 2012 -0500

      RDS: use kfree_rcu in rds_ib_remove_ipaddr

      synchronize_rcu() slowing down un-necessarily the socket shutdown
      path. It is used just kfree() the ip addresses in rds_ib_remove_ipaddr()
      which is perfect usecase for kfree_rcu();

      So lets use that to gain some speedup.

      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>

  commit f5f6afa85aa82a8ee59072f2d09f2b381f24c871
  Author: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
  Date:   Tue Sep 29 18:21:19 2015 +0900

      usb: renesas_usbhs: Add support for R-Car H3

      This patch adds a compatible string to support for R-Car H3.

      Since the HS-USB controller of R-Car H3 is almost the same specification
      with R-Car Gen2 (these have 16 pipes and usb-dmac), this patch
      sets the "type" of renesas_usbhs_driver_param to USBHS_TYPE_RCAR_GEN2.

      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 9ae7ce00cc1353155b1914bfc40e8362efef7d1c
  Author: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
  Date:   Tue Sep 29 18:21:18 2015 +0900

      usb: renesas_usbhs: fix build warning if 64-bit architecture

      This patch fixes the following warning if 64-bit architecture environment:

      ./drivers/usb/renesas_usbhs/common.c:496:25: warning: cast from pointer 
to integer of different size [-Wpointer-to-int-cast]
        dparam->type = of_id ? (u32)of_id->data : 0;

      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 7022cfdfe07dcfccc294f04de5f75e0a37b16174
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sat Sep 26 15:01:06 2015 +0530

      usb: gadget: bdc: fix memory leak

      If dma_pool_alloc() fails we are jumping to fail and releasing all the
      bd_tables which have been added to the chain but we missed freeing this
      bd_table which was just allocated and still not added to the chain of
      bd_table.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 7a63076d9a31a6c2073da45021eeb4f89d2a8b56
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Wed Aug 5 15:42:38 2015 -0700

      MIPS: CPS: #ifdef on CONFIG_MIPS_MT_SMP rather than CONFIG_MIPS_MT

      The CONFIG_MIPS_MT symbol can be selected by CONFIG_MIPS_VPE_LOADER in
      addition to CONFIG_MIPS_MT_SMP. We only want MT code in the CPS SMP boot
      vector if we're using MT for SMP. Thus switch the config symbol we ifdef
      against to CONFIG_MIPS_MT_SMP.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.16+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/10867/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit a5b0f6db0e6cf6224e50f6585e9c8f0c2d38a8f8
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Wed Aug 5 15:42:37 2015 -0700

      MIPS: CPS: Don't include MT code in non-MT kernels.

      The MT-specific code in mips_cps_boot_vpes can safely be omitted from
      kernels which don't support MT, with the default VPE==0 case being used
      as it would be after the has_mt (Config3.MT) check failed at runtime.
      Discarding the code entirely will save us a few bytes & allow cleaner
      handling of MT ASE instructions by later patches.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.16+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/10866/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1e5fb282f8eda889776ee83f9214d5df9edaa26d
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Wed Aug 5 15:42:36 2015 -0700

      MIPS: CPS: Stop dangling delay slot from has_mt.

      The has_mt macro ended with a branch, leaving its callers with a delay
      slot that would be executed if Config3.MT is not set. However it would
      not be executed if Config3 (or earlier Config registers) don't exist
      which makes it somewhat inconsistent at best. Fill the delay slot in the
      macro & fix the mips_cps_boot_vpes caller appropriately.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.16+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/10865/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 53960059d56ecef67d4ddd546731623641a3d2d1
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Fri Mar 27 08:33:43 2015 +0000

      MIPS: dma-default: Fix 32-bit fall back to GFP_DMA

      If there is a DMA zone (usually 24bit = 16MB I believe), but no DMA32
      zone, as is the case for some 32-bit kernels, then massage_gfp_flags()
      will cause DMA memory allocated for devices with a 32..63-bit
      coherent_dma_mask to fall back to using __GFP_DMA, even though there may
      only be 32-bits of physical address available anyway.

      Correct that case to compare against a mask the size of phys_addr_t
      instead of always using a 64-bit mask.

      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Fixes: a2e715a86c6d ("MIPS: DMA: Fix computation of DMA flags from 
device's coherent_dma_mask.")
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: <stable@xxxxxxxxxxxxxxx> # 2.6.36+
      Patchwork: https://patchwork.linux-mips.org/patch/9610/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 72d38b19781de457def0a62dfaa50134fc6e15f0
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Fri Sep 18 16:41:36 2015 +0200

      s390/vtime: correct scaled cputime of partially idle CPUs

      The calculation for the SMT scaling factor for a hardware thread
      which has been partially idle needs to disregard the cycles spent
      by the other threads of the core while the thread is idle.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 4a2fa2b8a861b095f6d495dc006e9d47df177594
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Wed Sep 30 13:02:05 2015 +0000

      Bluetooth: hci_h5: clean up hci_h5 code

      This patch fixes checkpatch warnings:
      - Comparison to NULL could be re-written
      - no space required after a cast

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b94be972538f4523f09243af7c726158f0bfae33
  Author: Egbert Eich <eich@xxxxxxx>
  Date:   Wed Sep 23 16:13:01 2015 +0200

      drm/i915: Call non-locking version of drm_kms_helper_poll_enable(), v2

      drm_kms_helper_poll_enable() is called from a context in
      intel_hpd_irq_storm_disable() where the the mode_config mutex is
      already locked.
      When this function was converted to lock this mutex in
      commit 8c4ccc4ab6f6 ("drm/probe-helper: Grab mode_config.mutex
      in poll_init/enable") a deadlock occurred.
      Call the newly implemented non-locking version of this function.

      Changes since v1:
      - use function name suffix '_locked' for the function that
        is to be called from a locked context.

      Signed-off-by: Egbert Eich <eich@xxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 239ede3c0213f152a1bab083af7d7bbb39e0d3d5
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Wed Sep 30 12:27:46 2015 +0000

      Bluetooth: btuart_cs: remove obsolete header

      Use <linux/io.h> instead of <asm/io.h>, fixes checkpatch
      Warning;

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4ad640e99e5e5514d623210bc937e665ffd8f43f
  Author: Egbert Eich <eich@xxxxxxx>
  Date:   Wed Sep 23 16:13:00 2015 +0200

      drm: Add a non-locking version of drm_kms_helper_poll_enable(), v2

      drm_kms_helper_poll_enable() was converted to lock the mode_config
      mutex in commit 8c4ccc4ab6f64e859d4ff8d7c02c2ed2e956e07f
      ("drm/probe-helper: Grab mode_config.mutex in poll_init/enable").

      This disregarded the cases where this function is called from a context
      where this mutex is already locked.

      Add a non-locking version as well.

      Changes since v1:
      - use function name suffix '_locked' for the function that
        is to be called from a locked context.

      Signed-off-by: Egbert Eich <eich@xxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 031277d4d33d33f0174fbb569ca8f68238175617
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Wed Sep 30 17:37:18 2015 +0800

      mmc: core: fix dead loop of mmc_retune

      When get a CRC error, start the mmc_retune, it will issue CMD19/CMD21
      to do tune, assume there were 10 clock phase need to try, phase 0 to
      phase 6 is ok, phase 7 to phase 9 is NG, we try it from 0 to 9, so
      the last CMD19/CMD21 will get CRC error, host->need_retune was set and
      cause mmc_retune was called, then dead loop of mmc_retune

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Fixes: bd11e8bd03ca ("mmc: core: Flag re-tuning is needed on CRC errors")
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 575f9c8604e0b4c7b36fb41fc5fd280a3c336906
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Tue Sep 29 07:49:56 2015 -0700

      drm/vmwgfx: Fix a command submission hang regression

      When we're out of command buffer space, we turn on the command buffer
      processed irq without re-checking for finished command buffers afterwards.
      This might lead to a missed irq and the command submission process waiting
      forever for space.

      Fix this by rerunning the command buffer submission handler whenever we're
      out of command space. This ensures both that we don't needlessly turn on
      the irq, and that if we decide to turn on the irq, we recheck for finished
      command buffers before going to sleep.

      Reported-and-tested-by: Bryan Li <ldexin@xxxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 9c70d7cebfec558e07a2ab0f2d5f5a80a821ecf5
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Aug 13 18:54:31 2015 -0700

      i40e: fix 32 bit build warnings

      Sparse found some issues with 32 bit compilation, which probably should
      at least work without warning.  Not only that, but the code was wrong.
      Thanks sparse!!

      And thanks to the kbuild robot zero day testing for finding this issue.

      $ make ARCH=i386 M=drivers/net/ethernet/intel/i40e C=2 
CF="-D__CHECK_ENDIAN__"
        CHECK   drivers/net/ethernet/intel/i40e/i40e_main.c
        include/linux/etherdevice.h:79:32: warning: restricted __be16 degrades 
to integer
        drivers/net/ethernet/intel/i40e/i40e_main.c:7565:17: warning: shift too 
big (32) for type unsigned long
        drivers/net/ethernet/intel/i40e/i40e_main.c:7565:17: warning: shift too 
big (42) for type unsigned long
        drivers/net/ethernet/intel/i40e/i40e_main.c:7565:17: warning: shift too 
big (39) for type unsigned long
        drivers/net/ethernet/intel/i40e/i40e_main.c:7565:17: warning: shift too 
big (40) for type unsigned long

      CC: kbuild-all@xxxxxx
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e88ae667ecccf104311ec1a34536bd1e8a0fe6f7
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Aug 13 18:54:26 2015 -0700

      i40e: fix kbuild warnings

      The 0day build infrastructure found some issues in i40e, this
      removes the warnings by adding a harmless cast to a dev_info.

      CC: kbuild-all@xxxxxx
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9b32b0b5dded7382c00595180bd5ce4f2f8c3d9b
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Aug 13 15:11:32 2015 -0700

      i40evf: tweak init timing

      This patch tweaks the init timing of the driver just a little bit to
      increase stability on load/unload and SR-IOV enable/disable cycles.

      First, run the init_task loop a little quicker in order to reduce
      overall init time.

      Second, stagger the start of the init task based on the device's
      PCIe function ID. This lessens the impact on the firmware when a
      whole bunch of VFs are initialized simultaneously, e.g. enabling
      SR-IOV without the VF driver blacklisted. For single VFs assigned
      to VMs this will have no effect as the function ID will always be 0.

      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e908f81562b1367ac3ab3d156db3dcbbe07479f6
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:42 2015 -0400

      i40e: warn on double free

      Down was requesting queue disables, but then exited immediately without
      waiting for the queues to actually disable. This could allow any
      function called after i40evf_down to run immediately, including
      i40evf_up, and causes a memory leak.

      This issue has been fixed in a recent refactor of the reset code, but
      add a couple WARN_ONs in the slow path to help us recognize if we
      reintroduce this issue or if we missed any cases.

      Change-ID: I27b6b5c9a79c1892f0ba453129f116bc32647dd0
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 7845548de7e4b49451f0eed77f690e579c428417
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:41 2015 -0400

      i40e: refactor interrupt enable

      The interrupt enable function was always making the caller add
      the base_vector from the VSI struct which is already passed to
      the function. Just collapse the math into the helper function.

      Change-ID: I54ef33aa7ceebc3231c3cc48f7b39fd0c3ff5806
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d1a8d275340470b89fa3a3f7c47433caf1286336
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:40 2015 -0400

      i40e: Strip VEB stats if they are disabled in HW

      Due to performance reasons, VEB stats have been disabled in the hw. This
      patch adds code to check for that condition before accumulating these
      stats.

      Change-ID: I7d805669476fedabb073790403703798ae5d878e
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 48a3b512e8c0703884dd1b3afd85a295ecd36b5f
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:39 2015 -0400

      i40e/i40evf: add new device id 1588

      Add new device id and support for another 20Gb device.

      Change-ID: Ib1b61e5bb6201d84953f97cade39a6e3369c2cf2
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 201991004da2c88e780ec58c93c960d0223c3687
  Author: Greg Rose <gregory.v.rose@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:38 2015 -0400

      i40e: Remove useless message

      Remove a useless message that blathers on whenever a vxlan port is 
deleted.

      Change-ID: If63fb8cf38e56cf433b68e498f11389de51919ba
      Signed-off-by: Greg Rose <gregory.v.rose@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2ac8b675d9466b397f94aa1ead575d39b71b5055
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:37 2015 -0400

      i40e: limit debugfs io ops

      Don't let the debugfs register read and write commands try to access
      outside of the ioremapped space.  While we're at it, remove the use of
      a misleading constant.

      Change-ID: Ifce2893e232c65c7a76c23532c658f298218a81b
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f7fc2f2eb11fe808df330df42a9429aa5b804388
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:36 2015 -0400

      i40e: use QOS field consistently

      In i40e_ndo_set_vf_port_vlan, we were using the QOS value
      inconsistently, sometimes shifting it, sometimes not. Do the shift-and-
      or operation correctly, once, and use the result consistently everywhere
      in the function.

      Change-ID: I46f062f3edc90a8a017ecec9137f4d1ab0ab9e41
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 96fc7a9cee671f10e14aaca44833696a71f1ebdb
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Wed Sep 30 14:24:31 2015 +0200

      MIPS: Wire up userfaultfd and membarrier syscalls.

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d8201e200a7474d391fd24ca811b0375e6694387
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:35 2015 -0400

      i40e: count drops in netstat interface

      The i40e rx_dropped counter was not showing up in netstat -i.
      Add the right counter to be updated with the stats.

      Change-ID: I4dd552e9995836099184f9d9a08e90edb591155f
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0deda86836e489fe43a33e8d899319bd0ed985a4
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:34 2015 -0400

      i40e/i40evf: fix Tx hang workaround code

      The arm writeback (arm_wb) code is used for kicking the Tx ring to
      make sure any pending work is completed even if interrupts are
      disabled. It was running when it didn't need to, and not clearing
      the ring->arm_wb state after it was set.  This caused Tx hangs
      to still occur occasionally when there really was no hang.
      Fix this by resetting the variable right after it was used.

      Change-ID: I7bf75d552ba9c4bd203d40615213861a24bb5594
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 17351401fec6df1e6032054cd3c2ea03ad917a92
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:32 2015 -0400

      i40e: fixup padding issue in get_cee_dcb_cfg_v1_resp

      The struct i40e_aqc_get_cee_dcb_cfg_v1_resp was originally defined with
      word boundary layout issues, which most compilers deal with by silently
      adding padding, making the actual struct larger than designed.
      This patch adds an extra byte in fields reserved3 and reserved4 to 
directly
      acknowledge that padding.

      Because the struct doesn't actually change in size or layout, this doesn't
      constitute a change in the API.

      Change-ID: I53fa4741b73fa255621232a85fba000b0e223015
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit d9b68f8aba0ae3f9ab6c5dec4ae1052b7e26c53c
  Author: Greg Rose <gregory.v.rose@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:31 2015 -0400

      i40e: Fix a port VLAN configuration bug

      If a port VLAN is set for a given virtual function (VF) before the VF
      driver is loaded then a configuration error results in which the port
      VLAN is ignored when the VF driver is subsequently loaded.  This causes
      the VF's MAC/VLAN filters to not use the correct VLAN filter.  This
      patch ensures that the port VLAN filter is considered at the right time
      during configuration of the VF's MAC/VLAN filters.

      Change-ID: I28f404cbc21a4c6d70a7980b87c77f13f06685a4
      Signed-off-by: Greg Rose <gregory.v.rose@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1fa89a4b3b0b646ee9cb04eb890a3398eae0dc85
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:30 2015 -0400

      i40e/i40evf: fix up type clash in i40e_aq_rc_to_posix conversion

      The error code sent into i40e_aq_rc_to_posix() are signed values, so we
      really need to treat them as such.

      Change-ID: I3d1ae0ee9ae0b1b6f5fc424f8b8cc58b0ea93203
      Reported-by: Helin Zhang <helin.zhang@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4c4935a964e29da61390122f0a5c9f36e8ae081d
  Author: Vasily Averin <vvs@xxxxxxxxxxxxx>
  Date:   Wed Jul 8 15:04:26 2015 +0300

      i40e: rtnl_lock called twice in i40e_pci_error_resume()

      Signed-off-by: Vasily Averin <vvs@xxxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f2a1c3680c1d9e2a1f9e68ce13f1130e587d28cf
  Author: Vasily Averin <vvs@xxxxxxxxxxxxx>
  Date:   Tue Jul 7 18:53:38 2015 +0300

      i40evf: missing rtnl_unlock in i40evf_resume()

      Signed-off-by: Vasily Averin <vvs@xxxxxxxxxxxxx>
      Tested-by: Andrews Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1c64f147d3cc9bbafe091a7b335ea3ec700186f0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 30 10:20:11 2015 +0200

      ieee802154: 6lowpan: add tx/rx stats

      This patch adds support for increment transmit and receive stats. The
      meaning of these stats are IPv6 based, which shows the stats after
      running the 6lowpan adaptation layer (uncompression/compression,
      fragmentation handling) on receive and before the adaptation layer
      when transmit.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4bc8fbc95e0d831e5e3800ecc8a8d5acac79c9a8
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 30 10:20:10 2015 +0200

      ieee802154: 6lowpan: don't skip first dsn while fragmentation

      This patch fixes the data frame sequence numer (dsn) while 6lowpan
      fragmentation for frag1. Currently we create one 802.15.4 header at
      first, then check if it's match into one frame and at the end construct
      many fragments and calling wpan_dev_hard_header for each of them,
      inclusive for the first fragment. This will make the first generated
      header to garbage, instead we copying this header for frag1 instead of
      generate a new one which skips one dsn.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 72d53b116264d5e570f610b3971dae4721aa5c0f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 30 10:20:09 2015 +0200

      ieee802154: 6lowpan: change datagram var types

      This patch changes datagram size variable from u16 type to unsigned int.
      The reason is that an IPv6 header has an MAX_UIN16 payload length, but
      the datagram size is payload + IPv6 header length. This avoids overflows
      at some places.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5f2ebb3b59c81a461ffd4921d12e9f6e09c32945
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 19:59:48 2015 +0200

      mac802154: check on len instead mac_len

      This patch change the length check to len instead of mac_len for
      checking if the frame control field is available to dereference.
      We need to change it because I saw issues with af_packet raw sockets
      and the mrf24j40 which calls this functionality. The raw socket
      functionality doesn't set the mac_len but resets the skb_mac_header to
      skb->data which is still correct. The issue occur at mrf24j40 only,
      because the driver need to evaluate the fc fields.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b40988c438c2405a177ae54ff4baa08c720c296f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 12:36:26 2015 +0200

      ieee802154: change mtu size behaviour

      This patch changes the mtu size of 802.15.4 interfaces. The current
      setting is the meaning of the maximum transport unit with mac header,
      which is 127 bytes according 802.15.4. The linux meaning of the mtu size
      field is the maximum payload of a mac frame. Like in ethernet, which is
      1500 bytes.

      We have dynamic length of mac frames in 802.15.4, this is why we assume
      the minimum header length which is hard_header_len. This contains fc and
      sequence fields. These can evaluated by driver layer without additional
      checks. We currently don't support to set the FCS from userspace, so we
      need to subtract this from mtu size as well.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit d58a2fa903c18f97aac30cd3c4c8a378a2c647c4
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 09:00:26 2015 +0200

      mac802154: add comments for llsec issues

      While doing a little test with the llsec implementation I saw these
      issues. We should move decryption and encruption somewhere else,
      otherwise while capturing with wireshark the mac header shows secuirty
      fields but the payload is plaintext.

      A complete other issue is what doing with HardMAC drivers where the
      payload is always plaintext. I think we need a special handling then in
      userspace. We currently doesn't support any HardMAC transceivers, so we
      should fix the first issue for SoftMAC transceivers.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a26c5fd7622d4951425131d54a8c99f076fe2068
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 09:00:25 2015 +0200

      nl802154: add support for security layer

      This patch adds support for accessing mac802154 llsec implementation
      over nl802154. I added for a new Kconfig entry to provide this
      functionality CONFIG_IEEE802154_NL802154_EXPERIMENTAL. This interface is
      still in development. It provides to change security parameters and
      add/del/dump entries of security tables. Later we can add also a get to
      get an entry by unique identifier.

      Cc: Phoebe Buckheister <phoebe.buckheister@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1ee06ef1596dcc5858ea29ef9faf0f29e139dfcc
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 09:00:24 2015 +0200

      nl802154: use nla_get_le64 for get extended addr

      This patch uses the nla_get_le64 function instead of doing a force
      converting to le64.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c648a0138b8f79b6cb4bd092dfab761e4becb1c2
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 28 09:00:23 2015 +0200

      netlink: add nla_get for le32 and le64

      This patch adds missing inline wrappers for nla_get_le32 and
      nla_get_le64. The 802.15.4 MAC byteorder is little endian and we keep
      the byteorder for fields like address configuration in the same
      byteorder as it comes from the MAC layer.

      To provide these fields for nl802154 userspace applications, we need
      these inline wrappers for netlink.

      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 7253054e5d05233063c48f57ac02283bd35753d8
  Author: Stephane Grosjean <s.grosjean@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 30 12:42:35 2015 +0200

      can: peak_pci: add unused device id. in devices table

      While new PEAK_PCIE_OEM_ID has been defined since 3.17, no corresponding
      entry has been added in the peak_pci_tbl[] of the peak_pci CAN driver.

      This patch enables now users of the PCAN-PCI Express OEM card to run the
      peak_pci driver too.

      Signed-off-by: Stephane Grosjean <s.grosjean@xxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 6bea0f6d1c47b07be88dfd93f013ae05fcb3d8bf
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:57:03 2015 +0300

      dmaengine: dw: properly read DWC_PARAMS register

      In case we have less than maximum allowed channels (8) and 
autoconfiguration is
      enabled the DWC_PARAMS read is wrong because it uses different arithmetic 
to
      what is needed for channel priority setup.

      Re-do the caclulations properly. This now works on AVR32 board well.

      Fixes: fed2574b3c9f (dw_dmac: introduce software emulation of LLP 
transfers)
      Cc: yitian.bu@xxxxxxxxxxxxxx
      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 10d97d5869f9a50eb3142c7ee562ecc5b5b33f5b
  Author: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 17:59:19 2015 -0300

      drm/exynos: remove unused mode_fixup() code

      CRTC's mode_fixup() isn't used anymore in exynos, remove it.

      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 208d7ee3c89e5e94627aa33331b15dd4df814707
  Author: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 17:59:18 2015 -0300

      drm/exynos: remove decon_mode_fixup()

      The only thing mode_fixup was doing was set the adjusted_mode->vrefresh to
      60, but it already has the value of 60 when the decon_mode_fixup() is
      called. That means this call is actually pointless and can be removed.

      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 50bbfbffa5c894def440ce8157dfe53e60960d35
  Author: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 17:59:17 2015 -0300

      drm/exynos: remove fimd_mode_fixup()

      The only thing mode_fixup was doing was set the adjusted_mode->vrefresh to
      60, but it already has the value of 60 when the fimd_mode_fixup() is
      called. That means this call is actually pointless and can be removed.

      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit ee08b59d47d859ed0a11ab331a3fbc5ab3b56100
  Author: Rameshwar Prasad Sahu <rsahu@xxxxxxx>
  Date:   Wed Sep 16 13:33:23 2015 +0530

      dmaengine: xgene-dma: Fix overwritting DMA tx ring

      This patch fixes an over flow issue with the TX ring descriptor. Each
      descriptor is 32B in size and an operation requires 2 of these
      descriptors.

      Signed-off-by: Rameshwar Prasad Sahu <rsahu@xxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 214fc4e423ff38b41b60db2209cf49b4e9a7209b
  Author: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
  Date:   Thu Sep 24 12:03:35 2015 +0300

      dmaengine: fix balance of privatecnt

      dma_release_channel() decrements privatecnt counter and almost all 
dma_get*
      function increments it with the exception of dma_get_slave_channel().
      In most cases this does not cause issue since normally the channel is not
      requested and released, but if a driver requests DMA channel via
      dma_get_slave_channel() and releases the channel the privatecnt will be
      unbalanced and this will prevent for example getting channel for memcpy.

      Signed-off-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 85a82038b2744f87cb297f93ddecd04a8c2979bd
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Thu Sep 24 12:14:15 2015 +0200

      drm/exynos: rotator: Clock control is unused if !PM

      Protect the rotator_clk_crtl() function with an #ifdef CONFIG_PM guard
      to avoid "defined but not used" warnings.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Reviewed-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 641a2fef39369c27df887e82cd63aee3de93f511
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Thu Sep 24 12:14:14 2015 +0200

      drm/exynos: fimc: Clock control is unused if !PM

      Protect the fimc_clk_ctrl() function with an #ifdef CONFIG_PM guard to
      avoid "defined but not used" warnings.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Reviewed-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 7082947eff3b1ddbb5d320331c846a5a2fc88261
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Thu Sep 24 12:14:13 2015 +0200

      drm/exynos: Suspend/resume is unused if !PM

      Protect the suspend and resume callbacks with an #ifdef CONFIG_PM_SLEEP
      guard to avoid "defined but not used" warnings.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 48cf53f4343ae12ddc1c60dbe116161ecf7a2885
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Tue Jul 28 17:53:23 2015 +0900

      drm/exynos: create a fake mmap offset with gem creation

      Don't create a fake mmap offset in exynos_drm_gem_dumb_map_offset. If
      not, it will call drm_gem_create_mmap_offset whenever user requests
      DRM_IOCTL_MODE_MAP_DUMB ioctl.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 8755556fbbdd1a6af21a3c4d9ce8f451e999e457
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Fri Sep 25 18:10:32 2015 +0900

      drm/exynos: remove call to drm_gem_free_mmap_offset()

      The drm_gem_object_release() function already performs this cleanup,
      so there is no reason to do it explicitly.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit b9e71911f34616276399da3dc1abc47797be2396
  Author: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
  Date:   Wed Sep 9 12:55:25 2015 -0300

      drm/exynos: Remove useless EXPORT_SYMBOL_GPLs

      All the user of these functions are inside exynos-drm driver and
      you don't need to export the symbols for that case.

      Signed-off-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Gustavo Padovan <gustavo.padovan@xxxxxxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit b4cfd4ddfb555c8cda7b0aa55c0e37522f8e01e4
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:29:35 2015 +0900

      drm/exynos: cleanup line feed in exynos_drm_gem_get_ioctl

      The beginning of statement in function is next line of a brace.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 333e8e58b0bed137e940ac92c2af3f3aa4603504
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:29:34 2015 +0900

      drm/exynos: cleanup function calling written twice

      By if statment, some function callings are written twice. It needs
      several line feed by indentation in if statment. Make to one function
      calling from outside if statment.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit b319dc6a61518cc02ae21afb383901236009aab1
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:29:33 2015 +0900

      drm/exynos: staticize exynos_drm_gem_init()

      The exynos_drm_gem_init() is used only in exynos_drm_gem.c file. Make it
      static and don't export it.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 0269b1a17f8f887c02ae37affef884e1ffda3df6
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:29:32 2015 +0900

      drm/exynos: remove unnecessary NULL assignment

      They will be freed right or was freed already, so NULL assignment is
      unnecessary.

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 7c93537a47e15e04064158ccdbe28f88ee61170c
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:14:54 2015 +0900

      drm/exynos: fix missed calling of drm_prime_gem_destroy()

      When obj->import_attach is existed, code calling drm_prime_gem_destroy()
      was removed from commit 67e93c808b48 ("drm/exynos: stop copying sg
      table"), and it's a fault.

      The drm_prime_gem_destroy() is cleanup function which GEM drivers need
      to call when they use drm_gem_prime_import() to import dma-bufs, so
      exynos-drm driver using drm_gem_prime_import() needs calling
      drm_prime_gem_destroy().

      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 5e0fb1f9eb754eed8432392bfdc100ef295676cd
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 16 14:16:45 2015 +0900

      drm/exynos: fix layering violation of address

      There is no guarantee that DMA addresses are the same as physical
      addresses, but dma_to_pfn() knows how to convert a dma_addr_t to a PFN
      which can then be converted to a struct page.

      Suggested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Signed-off-by: Inki Dae <inki.dae@xxxxxxxxxxx>

  commit 4d370b74e7ce175f26654fe2db49db342566cdc8
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sat Sep 26 14:22:10 2015 +0530

      fbdev: broadsheetfb: fix memory leak

      We have requested the firmware and it was loaded but we missed releasing
      it both on success and error.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 4ac86a6dcec1c3878de9747bf5a2aa4455be69e3
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Tue Sep 29 19:40:14 2015 +0300

      x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels

      With KMEMCHECK=y, KASAN=n we get this build failure:

        arch/x86/platform/efi/efi.c:673:3:    error: implicit declaration of 
function â??memcpyâ?? [-Werror=implicit-function-declaration]
        arch/x86/platform/efi/efi_64.c:139:2: error: implicit declaration of 
function â??memcpyâ?? [-Werror=implicit-function-declaration]
        arch/x86/include/asm/desc.h:121:2:    error: implicit declaration of 
function â??memcpyâ?? [-Werror=implicit-function-declaration]

      Don't #undef memcpy if KASAN=n.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Reported-by: Sedat Dilek <sedat.dilek@xxxxxxxxx>
      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 769a8089c1fd ("x86, efi, kasan: #undef memset/memcpy/memmove per 
arch")
      Link: 
http://lkml.kernel.org/r/1443544814-20122-1-git-send-email-ryabinin.a.a@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ccf79c238f1a06a801b4c4449b9bc8a42be2c7bc
  Merge: 1e03474 9ffecb1
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 30 09:29:27 2015 +0200

      Merge tag 'v4.3-rc3' into x86/urgent, before applying dependent fix

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 40482e64b0b84388561b00b880eeca7000f72d38
  Author: Emilio López <emilio@xxxxxxxxxxxxx>
  Date:   Sun Sep 13 17:15:53 2015 -0300

      dmaengine: sun4i: fix unsafe list iteration

      Currently, sun4i_dma_free_contract iterates over lists and frees memory
      as it goes through them, causing reads to recently freed memory to
      be performed. Fix this by using the safe version of the iterator, so
      freed memory is not referenced at all.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Emilio López <emilio@xxxxxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 184e16d79d38634cbb7b7c1cd3832caf89595c9a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 14 20:14:45 2015 -0500

      openvswitch: Remove ovs_vport_output_sk

      This was a compatibility function needed while the ipv4 and ipv6
      fragmentation code was being modified to pass a struct net through
      them.  Now that is complete this function has no more users so remove
      it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 75aec9df3a7895747a0d022b7c83a1dfb2adf942
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 14 13:46:16 2015 -0500

      bridge: Remove br_nf_push_frag_xmit_sk

      Now that this compatability function no longer has any callers remove it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 7d8c6e391575ee86c870b88635a163743fca9eac
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Jun 12 22:12:04 2015 -0500

      ipv6: Pass struct net through ip6_fragment

      Signed-off-by: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>

  commit 694869b3c5440e0d821583ec8811b6cb5d03742d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Jun 12 21:55:31 2015 -0500

      ipv4: Pass struct net through ip_fragment

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit c559cd3ad32ba729bb810283c5fc6838d2473c2e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 14 20:10:28 2015 -0500

      openvswitch: Pass net into ovs_fragment

      In preparation for the ipv4 and ipv6 fragmentation code taking a net
      parameter pass a struct net into ovs_fragment where the v4 and v6
      fragmentation code is called.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 188515fbc6b18e6bc6f2fa4629f1a77308197371
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 14 20:08:51 2015 -0500

      openvswitch: Pass net into ovs_vport_output

      When struct net starts being passed through the ipv4 and ipv6 fragment
      routines ovs_vport_output will need to take a net parameter.
      Prepare ovs_vport_output before that is needed and introduce
      ovs_vport_output_skk for the call sites that still need the old
      calling conventions.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>

  commit 4776dbb3583d10969f991cc89da781884c15979d
  Merge: 1605b60 c7d2ecd
  Author: Kukjin Kim <kgene@xxxxxxxxxx>
  Date:   Wed Sep 30 15:42:39 2015 +0900

      Merge tag 'samsung-fixes-4.3' of http://github.com/krzk/linux into 
v4.3-samsung-fixes

      Fixes for Exynos (DT and mach code):
      1. Finally fix booting of all 8 cores on Exynos Octa (Exynos542x): all
         8 cores are booting and can be used. The fix, based on vendor
         code and bootloader behavior, is as for time being only
         for MCPM enabled path.
      2. Fix thermal boot issue on SMDK5250.
      3. Fix invalid clock used for FIMD IOMMU.

  commit 1e034743e918d195d339af340ae933727c072bce
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Wed Sep 23 12:02:57 2015 +0200

      x86/hyperv: Fix the build in the !CONFIG_KEXEC_CORE case

      Recent changes in the Hyper-V driver:

        b4370df2b1f5 ("Drivers: hv: vmbus: add special crash handler")

      broke the build when CONFIG_KEXEC_CORE is not set:

        arch/x86/built-in.o: In function `hv_machine_crash_shutdown':
        arch/x86/kernel/cpu/mshyperv.c:112: undefined reference to 
`native_machine_crash_shutdown'

      Decorate all kexec related code with #ifdef CONFIG_KEXEC_CORE.

      Reported-by: Jim Davis <jim.epost@xxxxxxxxx>
      Reported-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: devel@xxxxxxxxxxxxxxxxxxxxxx
      Cc: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Cc: Haiyang Zhang <haiyangz@xxxxxxxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443002577-25370-1-git-send-email-vkuznets@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 14a21e7ba8cf6eab968310c92ca19a00f13ce3d9
  Author: Tobias Jakobi <tjakobi@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 20:23:52 2015 +0200

      PM / devfreq: Fix governor_store()

      Writing the currently set governor into sysfs currently
      seems to fail.
      Fix this by setting the return code to zero before
      leaving governor_store().

      Signed-off-by: Tobias Jakobi <tjakobi@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit b84f78782052ee4516903e5d0566a5eee365b771
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 19:07:07 2015 -0700

      net: Initialize flow flags in input path

      The fib_table_lookup tracepoint found 2 places where the flowi4_flags is
      not initialized.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4bf1b54f9df7ced4869f7dfd0bdf5eb22aa98447
  Merge: b8d866a c1444c6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:46:21 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

      Pablo Neira Ayuso says:

      ====================
      Netfilter/IPVS updates for net-next

      The following pull request contains Netfilter/IPVS updates for net-next
      containing 90 patches from Eric Biederman.

      The main goal of this batch is to avoid recurrent lookups for the netns
      pointer, that happens over and over again in our Netfilter/IPVS code. The 
idea
      consists of passing netns pointer from the hook state to the relevant 
functions
      and objects where this may be needed.

      You can find more information on the IPVS updates from Simon Horman's 
commit
      merge message:

      c3456026adc0 ("Merge tag 'ipvs2-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next";).

      Exceptionally, this time, I'm not posting the patches again on netdev, 
Eric
      already Cc'ed this mailing list in the original submission. If you need 
me to
      make, just let me know.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 57a47532c4312159935c98b7f1cf0e62296b9171
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 14:17:54 2015 -0400

      net: dsa: fix preparation of a port STP update

      Because of the default 0 value of ret in dsa_slave_port_attr_set, a
      driver may return -EOPNOTSUPP from the commit phase of a STP state,
      which triggers a WARN() from switchdev.

      This happened on a 6185 switch which does not support hardware bridging.

      Fixes: 3563606258cf ("switchdev: convert STP update to switchdev attr 
set")
      Reported-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b8d866ac6aa45147b84f3f67b124b82bee675e9f
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:38:36 2015 -0400

      net: dsa: fix preparation of a port STP update

      Because of the default 0 value of ret in dsa_slave_port_attr_set, a
      driver may return -EOPNOTSUPP from the commit phase of a STP state,
      which triggers a WARN() from switchdev.

      This happened on a 6185 switch which does not support hardware bridging.

      Reported-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21fdd092acc7ebda0dfe682008592eb79c382707
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 09:32:03 2015 -0700

      net: Add support for filtering neigh dump by master device

      Add support for filtering neighbor dumps by master device by adding
      the NDA_MASTER attribute to the dump request. A new netlink flag,
      NLM_F_DUMP_FILTERED, is added to indicate the kernel supports the
      request and output is filtered as requested.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5172393522e4b2caf1af638076c3c0cd74313ae3
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 21:24:05 2015 -0700

      tcp: fix tcp_v6_md5_do_lookup prototype

      tcp_v6_md5_do_lookup() now takes a const socket, even if
      CONFIG_TCP_MD5SIG is not set.

      Fixes: b83e3deb974c ("tcp: md5: constify tcp_md5_do_lookup() socket 
argument")
      From: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eef50d466a47bb6a57f2e55a9415c716c463255b
  Merge: 79b0eb2 44bbcf5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:32:00 2015 -0700

      Merge branch 'switchdev-callback'

      Vivien Didelot says:

      ====================
      net: switchdev: use specific switchdev_obj_*

      This patchset changes switchdev add, del, dump operations from this:

          int     (*switchdev_port_obj_add)(struct net_device *dev,
                                            struct switchdev_obj *obj,
                                            struct switchdev_trans *trans);
          int     (*switchdev_port_obj_del)(struct net_device *dev,
                                            struct switchdev_obj *obj);
          int     (*switchdev_port_obj_dump)(struct net_device *dev,
                                            struct switchdev_obj *obj);

      to something similar to the notifier_call callback of a notifier_block:

          int     (*switchdev_port_obj_add)(struct net_device *dev,
                                            enum switchdev_obj_id id,
                                            const void *obj,
                                            struct switchdev_trans *trans);
          int     (*switchdev_port_obj_del)(struct net_device *dev,
                                            enum switchdev_obj_id id,
                                            const void *obj);
          int     (*switchdev_port_obj_dump)(struct net_device *dev,
                                             enum switchdev_obj_id id, void 
*obj,
                                             int (*cb)(void *obj));

      This allows the caller to pass and expect back a specific switchdev_obj_*
      structure (e.g. switchdev_obj_fdb) instead of the generic switchdev_obj 
one.

      This will simplify pushing the callback function down to the drivers.

      The first 3 patches get rid of the dev parameter of the dump callback, 
since it
      is not always neeeded (e.g. vlan_dump) and some drivers (such as DSA 
drivers)
      may not have easy access to it.

      Patches 4 and 5 implement the change in the switchdev operations and its 
users.

      Patch 6 extracts the inner switchdev_obj_* structures from switchdev_obj 
and
      removes this last one.

      v2: fix error spotted by kbuild (extra ';' inline 
switchdev_port_obj_dump).
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 44bbcf5c4a19a8be43ba35ca7e22310e171f022c
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:18 2015 -0400

      net: switchdev: extract struct switchdev_obj_*

      Now that switchdev and its drivers directly use specific switchdev_obj_*
      structures, move them out of the switchdev_obj union and get rif of this
      outer structure.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab06900230181b5a717b1e1a39c44e96f6292e71
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:17 2015 -0400

      net: switchdev: abstract object in add/del ops

      Similar to the notifier_call callback of a notifier_block, change the
      function signature of switchdev add and del operations to:

          int switchdev_port_obj_add/del(struct net_device *dev,
                                         enum switchdev_obj_id id, void *obj);

      This allows the caller to pass a specific switchdev_obj_* structure
      instead of the generic switchdev_obj one.

      Drivers implementation of these operations and switchdev have been
      changed accordingly.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 25f07adc473f05f850efc9414b9da3374563015f
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:16 2015 -0400

      net: switchdev: pass callback to dump operation

      Similar to the notifier_call callback of a notifier_block, change the
      function signature of switchdev dump operation to:

          int switchdev_port_obj_dump(struct net_device *dev,
                                      enum switchdev_obj_id id, void *obj,
                                      int (*cb)(void *obj));

      This allows the caller to pass and expect back a specific
      switchdev_obj_* structure instead of the generic switchdev_obj one.

      Drivers implementation of dump operation can now expect this specific
      structure and call the callback with it. Drivers have been changed
      accordingly.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03d5fb18626aff95426a380aef0d1c6904cac7c9
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:15 2015 -0400

      net: switchdev: remove dev from switchdev_obj cb

      The net_device associated to a dump operation does not have to be passed
      to the callback. switchdev stores it in a superset struct, if needed.

      Also some drivers (such as DSA drivers) may not have easy access to it.

      This will simplify pushing the callback function down to the drivers.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e02a06b2a7c6e8b43c60ed8e0181172231af13d7
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:14 2015 -0400

      net: switchdev: move dev in switchdev_fdb_dump

      The FDB dump callback requires the related net_device so move it to the
      struct switchdev_fdb_dump superset instead of using a callback param.

      With this done, it'll be simpler to change the dump function signature.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e23b002b23dfdcd12ca982fbc57dcb071a1fee62
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 12:07:13 2015 -0400

      net: switchdev: remove dev in port_vlan_dump_put

      The static switchdev_port_vlan_dump_put function does not need the
      net_device parameter, so remove it.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9ae6d4935e3df35a23bbbe531c6b9ff314e7fd0f
  Author: Thomas Huth <thuth@xxxxxxxxxx>
  Date:   Tue Sep 29 17:45:28 2015 +0200

      testptp: Silence compiler warnings on ppc64

      When compiling Documentation/ptp/testptp.c the following compiler
      warnings are printed out:

      Documentation/ptp/testptp.c: In function â??mainâ??:
      Documentation/ptp/testptp.c:367:11: warning: format â??%lldâ?? expects 
argument
          of type â??long long intâ??, but argument 3 has type â??__s64â?? 
[-Wformat=]
                 event.t.sec, event.t.nsec);
                 ^
      Documentation/ptp/testptp.c:505:5: warning: format â??%lldâ?? expects 
argument
          of type â??long long intâ??, but argument 2 has type â??__s64â?? 
[-Wformat=]
           (pct+2*i)->sec, (pct+2*i)->nsec);
           ^
      Documentation/ptp/testptp.c:507:5: warning: format â??%lldâ?? expects 
argument
          of type â??long long intâ??, but argument 2 has type â??__s64â?? 
[-Wformat=]
           (pct+2*i+1)->sec, (pct+2*i+1)->nsec);
           ^
      Documentation/ptp/testptp.c:509:5: warning: format â??%lldâ?? expects 
argument
          of type â??long long intâ??, but argument 2 has type â??__s64â?? 
[-Wformat=]
           (pct+2*i+2)->sec, (pct+2*i+2)->nsec);

      This happens because __s64 is by default defined as "long" on ppc64,
      not as "long long". However, to fix these warnings, it's possible to
      define the __SANE_USERSPACE_TYPES__ so that __s64 gets defined to
      "long long" on ppc64, too.

      Signed-off-by: Thomas Huth <thuth@xxxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 23860f103b53e764a3cbbf615d08f88362a28295
  Author: Robb Manes <rmanes@xxxxxxxxxx>
  Date:   Tue Sep 29 11:03:37 2015 -0400

      net/mlx4: Handle return codes in mlx4_qp_attach_common

      Both new_steering_entry() and existing_steering_entry() return values
      based on their success or failure, but currently they fall through
      silently.  This can make troubleshooting difficult, as we were unable
      to tell which one of these two functions returned errors or
      specifically what code was returned.  This patch remedies that
      situation by passing the return codes to err, which is returned by
      mlx4_qp_attach_common() itself.

      This also addresses a leak in the call to mlx4_bitmap_free() as well.

      Signed-off-by: Robb Manes <rmanes@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79b0eb2aadfefaecb34c84453bd44d3264c4c781
  Merge: 4905287 6153348
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:11:13 2015 -0700

      Merge branch 'm68k-netdev-modular'

      Geert Uytterhoeven says:

      ====================
      net: m68k: Allow modular build

      This patch series makes the remaining m68k Ethernet drivers modular.
      It's an alternative to the last 3 patches of Paul Gortmaker's series
      "[PATCH net-next 0/6] make non-modular code explicitly non-modular".

      Note that "[PATCH 5/5] net: macmace: Allow modular build" depends on
      "[PATCH 4/5] m68k/mac: Export Peripheral System Controller (PSC) base
      address to modules". Feel free to take the dependency through the netdev
      tree to avoid modular build breakage.

      This was compile-tested only (mac_defconfig + allmodconfig) due to lack
      of hardware.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6153348f5e0cc6e162918c20e05534981aa5504c
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:06 2015 +0200

      net: macmace: Allow modular build

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a77cdaaf2dbc69743bc22354f81bc4ec5e452d40
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:05 2015 +0200

      m68k/mac: Export Peripheral System Controller (PSC) base address to 
modules

      If CONFIG_MACMACE=m:

          ERROR: psc [drivers/net/ethernet/apple/macmace.ko] undefined!

      Add the missing export to fix this.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 18785040b088c0d90713606b57a8b1bd4834ec04
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:04 2015 +0200

      net: hplance: Allow modular build

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 93a82ca2f3c642becc3d824ba79be98084f76519
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:03 2015 +0200

      net: 7990: Export lance_poll() to modules

      If CONFIG_HPLANCE=m and CONFIG_NET_POLL_CONTROLLER=y:

          ERROR: "lance_poll" [drivers/net/ethernet/amd/hplance.ko] undefined!

      Add the missing export to fix this.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3a3a7f3b7fbd3c2f2ca2f2bf76363a1abbd5ba94
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 10:24:02 2015 +0200

      net: mac8390: Allow modular build

      The modular driver supports only one card, just like the built-in
      driver.

      Note that this limitation is a problem which affects all Nubus card
      drivers, because they have to do all their own bus matching, because
      Nubus still lacks the necessary driver model support.

      Suggested-by: Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4905287138f60e86198620c72b570d3d265a71ea
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Tue Sep 29 01:53:48 2015 +0200

      dsa: mv88e6xxx: Fix unsigned/signed issue

      commit dea870242a9c ("dsa: mv88e6xxx: Allow speed/duplex of port to be
      configured") leads to the following static checker warning:

              drivers/net/dsa/mv88e6xxx.c:585 mv88e6xxx_adjust_link()
              warn: unsigned 'ret' is never less than zero.

      drivers/net/dsa/mv88e6xxx.c
         573  void mv88e6xxx_adjust_link(struct dsa_switch *ds, int port,
         574                             struct phy_device *phydev)
         575  {
         576          struct mv88e6xxx_priv_state *ps = ds_to_priv(ds);
         577          u32 ret, reg;
         578
         579          if (!phy_is_pseudo_fixed_link(phydev))
         580                  return;
         581
         582          mutex_lock(&ps->smi_mutex);
         583
         584          ret = _mv88e6xxx_reg_read(ds, REG_PORT(port), 
PORT_PCS_CTRL);
         585          if (ret < 0)

      Make ret an int, which is the return type for _mv88e6xxx_reg_read()

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c047a1f918af75e572a19ba0581c3e3e202ed698
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Tue Sep 29 01:50:56 2015 +0200

      dsa: mv88e6xxx: Enable forwarding for unknown to the CPU port

      Frames destined to an unknown address must be forwarded to the CPU
      port. Otherwise incoming ARP, dhcp leases, etc, do not work.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f82ff596c7a8917b21100117646c719017ce8fe4
  Merge: e6934f3 9478d12
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:41:10 2015 -0700

      Merge branch 'L3_master_device'

      David Ahern says:

      ====================
      net: L3 master device

      The VRF device is essentially a Layer 3 master device used to associate
      netdevices with a specific routing table and to influence FIB lookups
      via 'ip rules' and controlling the oif/iif used for the lookup.

      This series generalizes the VRF into L3 master device, l3mdev. Similar
      to switchdev it has a Kconfig option and separate set of operations
      in net_device allowing it to be completely compiled out if not wanted.
      The l3mdev methods rely on the 'master' aspect and use of
      netdev_master_upper_dev_get_rcu to retrieve the master device from a
      given netdevice if it is enslaved to an L3_MASTER.

      The VRF device is converted to use the l3mdev operations. At the end the
      vrf_ptr is no longer and removed, as are all direct references to VRF.
      The end result is a much simpler implementation for VRF.

      Thanks to Nikolay for suggestions (eg., use of the master linkage which
      is the key to making this work) and to Roopa, Andy and Shrijeet for
      early reviews.

      v3
      - added license header to l3mdev.c

      - export symbols in l3mdev.c for use with GPL modules

      - removed netdevice header from l3mdev.h (not needed) and fixed
        typo in comment

      v2
      - rebased to top of net-next
      - addressed Niks comments (checking master, removing extra lines, and
        flipping the order of patches 1 and 2)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9478d12d33ad12d29c5343ae7346b51bc1f4c5a9
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:18 2015 -0700

      net: Move netif_index_is_l3_master to l3mdev.h

      Change CONFIG dependency to CONFIG_NET_L3_MASTER_DEV as well.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec539514e56284b21c47468f23f7d01ff882f51b
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:17 2015 -0700

      net: Remove vrf header file

      Move remaining structs to VRF driver and delete the vrf header file.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 93a7e7e837af6846052481da974320c19ab82e5c
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:16 2015 -0700

      net: Remove the now unused vrf_ptr

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e1ed7058b3c79b085cf5b1529698a157499074c
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:15 2015 -0700

      net: Replace calls to vrf_dev_get_rth

      Replace calls to vrf_dev_get_rth with l3mdev_get_rtable.
      The check on the flow flags is handled in the l3mdev operation.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3236b0042ba6555b45d75b6be12922922e17d66e
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:14 2015 -0700

      net: Replace vrf_dev_table and friends

      Replace calls to vrf_dev_table and friends with l3mdev_fib_table
      and kin.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 385add906b6155e8bc64035ad56fb8ccfef925f7
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:13 2015 -0700

      net: Replace vrf_master_ifindex{, _rcu} with l3mdev equivalents

      Replace calls to vrf_master_ifindex_rcu and vrf_master_ifindex with either
      l3mdev_master_ifindex_rcu or l3mdev_master_ifindex.

      The pattern:
          oif = vrf_master_ifindex(dev) ? : dev->ifindex;
      is replaced with
          oif = l3mdev_fib_oif(dev);

      And remove the now unused vrf macros.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ee15ee5d94f5837260e7fa539ffd1b50952079c4
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:12 2015 -0700

      net: Add support for l3mdev ops to VRF driver

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1b69c6d0ae90b7f1a4f61d5c8209d5cb7a55f849
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:11 2015 -0700

      net: Introduce L3 Master device abstraction

      L3 master devices allow users of the abstraction to influence FIB lookups
      for enslaved devices. Current API provides a means for the master device
      to return a specific FIB table for an enslaved device, to return an
      rtable/custom dst and influence the OIF used for fib lookups.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 007979eaf94d1c888d8c7cf8a5250c2c6c9bd98e
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:07:10 2015 -0700

      net: Rename IFF_VRF_MASTER to IFF_L3MDEV_MASTER

      Rename IFF_VRF_MASTER to IFF_L3MDEV_MASTER and update the name of the
      netif_is_vrf and netif_index_is_vrf macros.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 178b2d09afc05a46f68b190c6594f3a429bc2385
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 16:18:12 2015 -0300

      ARM: dts: imx7d: Fix UART2 base address

      The UART2 memory space starts at address 0x30890000 (UART2_URXD).

      Fix it so that UART2 can be used.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Fixes: 949673450291 ("ARM: dts: add imx7d soc dtsi file")
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Shawn Guo <shawnguo@xxxxxxxxxx>

  commit 4fa9a3f6b616fd9f2555d9d0c04513a942750986
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Fri Sep 25 12:14:48 2015 +1000

      powerpc/ps3: Remove unused os_area_db_id_video_mode

      This struct is unused, which is now a build error with gcc 6:

        error: 'os_area_db_id_video_mode' defined but not used

      There doesn't seem to be any good reason to keep it around so remove it,
      it's in the history if anyone needs it.

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit e6934f3ec00b04234acb24a1a2c28af59763d3b5
  Merge: 4c7e622 0536fcc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 16:53:10 2015 -0700

      Merge branch 'listener-refactoring-preparations'

      Eric Dumazet says:

      ====================
      tcp: listener refactoring preparations

      This patch series makes changes to TCP/DCCP stacks so that
      we can switch listener code to lockless mode.

      This is done by marking const the listener socket in all
      appropriate paths.

      FastOpen code had to be changed to not dynamically allocate
      a very small structure to make code simpler for following changes.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0536fcc039a8926ec12ec587f41a83f7acafeb82
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:52 2015 -0700

      tcp: prepare fastopen code for upcoming listener changes

      While auditing TCP stack for upcoming 'lockless' listener changes,
      I found I had to change fastopen_init_queue() to properly init the object
      before publishing it.

      Otherwise an other cpu could try to lock the spinlock before it gets
      properly initialized.

      Instead of adding appropriate barriers, just remove dynamic memory
      allocations :
      - Structure is 28 bytes on 64bit arches. Using additional 8 bytes
        for holding a pointer seems overkill.
      - Two listeners can share same cache line and performance would suffer.

      If we really want to save few bytes, we would instead dynamically allocate
      whole struct request_sock_queue in the future.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2985aaac010ebd5e562ce1a22cc61acbb0e40cf2
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:51 2015 -0700

      tcp: constify tcp_syn_flood_action() socket argument

      tcp_syn_flood_action() will soon be called with unlocked socket.
      In order to avoid SYN flood warning being emitted multiple times,
      use xchg().
      Extend max_qlen_log and synflood_warned fields in struct listen_sock
      to u32

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f964629e3338d9e5a78c9b354380d5a1e2fa4617
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:50 2015 -0700

      tcp: constify tcp_v{4|6}_route_req() sock argument

      These functions do not change the listener socket.
      Goal is to make sure tcp_conn_request() is not messing with
      listener in a racy way.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3f684b4b1f1c86e3a6ac63389d1032e239fddd79
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:49 2015 -0700

      tcp: cookie_init_sequence() cleanups

      Some common IPv4/IPv6 code can be factorized.
      Also constify cookie_init_sequence() socket argument.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c27171e66d94f9121fc00e87407ca7103bb6649
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:48 2015 -0700

      tcp/dccp: constify syn_recv_sock() method sock argument

      We'll soon no longer hold listener socket lock, these
      functions do not modify the socket in any way.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c28c6f045945f53e842467bf0e86c5fac051643d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:47 2015 -0700

      tcp: constify tcp_create_openreq_child() socket argument

      This method does not touch the listener socket.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 54105f98f544ec5305bf1fad292ca454ad55ef67
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:46 2015 -0700

      dccp: constify dccp_create_openreq_child() sock argument

      socket no longer needs to be read/write

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 87e002b21aafccfe71faeec62f3543d30600a518
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:45 2015 -0700

      net: constify sk_gfp_atomic() sock argument

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1ce31c9e08997ea0fa62be0a7437f868be173f13
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:44 2015 -0700

      inet: constify __inet_inherit_port() sock argument

      socket is not touched, make it const.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2432c4fa5e3c4c06df6efe0c406b6f575829a7b
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:43 2015 -0700

      inet: constify inet_csk_route_child_sock() socket argument

      The socket points to the (shared) listener.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f76b33c32b1913dd8909d8509f2726b1661aa6b1
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:42 2015 -0700

      dccp: use inet6_csk_route_req() helper

      Before changing dccp_v6_request_recv_sock() sock argument
      to const, we need to get rid of security_sk_classify_flow(),
      and it seems doable by reusing inet6_csk_route_req() helper.

      We need to add a proto parameter to inet6_csk_route_req(),
      not assume it is TCP.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 72ab4a86f7a260d4c2a320b49662da107ce77a81
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:41 2015 -0700

      tcp: remove tcp_rcv_state_process() tcp_hdr argument

      Factorize code to get tcp header from skb. It makes no sense
      to duplicate code in callers.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bda07a64c09c44ced789dbb815c71854f0c59839
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:40 2015 -0700

      tcp: remove unused len argument from tcp_rcv_state_process()

      Once we realize tcp_rcv_synsent_state_process() does not use
      its 'len' argument and we get rid of it, then it becomes clear
      this argument is no longer used in tcp_rcv_state_process()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a00e74442bac5ad19a929d097370da7e07540ea6
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 29 07:42:39 2015 -0700

      tcp/dccp: constify send_synack and send_reset socket argument

      None of these functions need to change the socket, make it
      const.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 31b33dfb0a144469dd805514c9e63f4993729a48
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Mon Sep 28 17:24:25 2015 -0700

      skbuff: Fix skb checksum partial check.

      Earlier patch 6ae459bda tried to detect void ckecksum partial
      skb by comparing pull length to checksum offset. But it does
      not work for all cases since checksum-offset depends on
      updates to skb->data.

      Following patch fixes it by validating checksum start offset
      after skb-data pointer is updated. Negative value of checksum
      offset start means there is no need to checksum.

      Fixes: 6ae459bda ("skbuff: Fix skb checksum flag on skb pull")
      Reported-by: Andrew Vagin <avagin@xxxxxxxx>
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c7e622ddf07388d72e15b97a88d260a5a168e37
  Merge: 0f50c10 0d75396
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 16:27:47 2015 -0700

      Merge branch 'ipv4-routing-cleanups'

      Alexander Duyck says:

      ====================
      Minor IPv4 routing cleanups

      These patches just contain some minor cleanups to address a few minor
      issues.  The first and the third mostly just improve readability.  The
      second patch should improve the performance for multicast destination
      addresses that do not have a localhost source IP address by avoiding some
      unnecessary dereferences.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0d7539603bba77b72679d53e7d7eb84c16dd76d8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 11:10:44 2015 -0700

      net: Remove martian_source_keep_err goto label

      err is initialized to -EINVAL when it is declared. It is not reset until
      fib_lookup which is well after the 3 users of the martian_source jump. So
      resetting err to -EINVAL at martian_source label is not needed.

      Removing that line obviates the need for the martian_source_keep_err label
      so delete it.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 75fea73dce4ed7c1725f9f5c0adf5aecc8d0fcfd
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Mon Sep 28 11:10:38 2015 -0700

      net: Swap ordering of tests in ip_route_input_mc

      This patch just swaps the ordering of one of the conditional tests in
      ip_route_input_mc.  Specifically it swaps the testing for the source
      address to see if it is loopback, and the test to see if we allow a
      loopback source address.

      The reason for swapping these two tests is because it is much faster to
      test if an address is loopback than it is to dereference several pointers
      to get at the net structure to see if the use of loopback is allowed.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2094acbb714e24e464c810c2d8fa57493fcb25a6
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Mon Sep 28 11:10:31 2015 -0700

      net/ipv4: Pass proto as u8 instead of u16 in ip_check_mc_rcu

      This patch updates ip_check_mc_rcu so that protocol is passed as a u8
      instead of a u16.

      The motivation is just to avoid any unneeded type transitions since some
      systems will require an instruction to zero extend a u8 field to a u16.
      Also it makes it a bit more readable as to the fact that protocol is a u8
      so there are no byte ordering changes needed to pass it.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 218c1f76b8b25d6dc9d01443f071cb618e206b0c
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Tue Sep 29 15:54:58 2015 -0700

      Input: psmouse - fix data race in __ps2_command

      The data race happens on ps2dev->cmdcnt and ps2dev->cmdbuf contents.
      __ps2_command reads that data concurrently with the interrupt handler. As
      the result, for example, if a response arrives just after the timeout,
      __ps2_command can copy out garbage from ps2dev->cmdbuf but then see that
      ps2dev->cmdcnt is 0 and return success.

      Stop the interrupt handler with serio_pause_rx() before reading the
      results.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 741a11d9e4103a8e1c590ef1280143fe654e4e33
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 10:12:13 2015 -0700

      net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is set

      Wolfgang reported that IPv6 stack is ignoring oif in output route lookups:

          With ipv6, ip -6 route get always returns the specific route.

          $ ip -6 r
          2001:db8:e2::1 dev enp2s0  proto kernel  metric 256
          2001:db8:e2::/64 dev enp2s0  metric 1024
          2001:db8:e3::1 dev enp3s0  proto kernel  metric 256
          2001:db8:e3::/64 dev enp3s0  metric 1024
          fe80::/64 dev enp3s0  proto kernel  metric 256
          default via 2001:db8:e3::255 dev enp3s0  metric 1024

          $ ip -6 r get 2001:db8:e2::100
          2001:db8:e2::100 from :: dev enp2s0  src 2001:db8:e3::1  metric 0
              cache

          $ ip -6 r get 2001:db8:e2::100 oif enp3s0
          2001:db8:e2::100 from :: dev enp2s0  src 2001:db8:e3::1  metric 0
              cache

      The stack does consider the oif but a mismatch in rt6_device_match is not
      considered fatal because RT6_LOOKUP_F_IFACE is not set in the flags.

      Cc: Wolfgang Nothdurft <netdev@xxxxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f50c10d2683fd2b8a3908c779c5f29bcb3c2174
  Author: Liviu Dudau <Liviu.Dudau@xxxxxxx>
  Date:   Mon Sep 28 17:51:51 2015 +0100

      RESEND: [PATCH v3 net-next] sky2: use random address if EEPROM is bad

      On some embedded systems the EEPROM does not contain a valid MAC address.
      In that case it is better to fallback to a generated mac address and
      let init scripts fix the value later.

      Reported-by: Liviu Dudau <Liviu.Dudau@xxxxxxx>
      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      [Changed handcoded setup to use eth_hw_addr_random() and to save new 
address into HW]
      Signed-off-by: Liviu Dudau <Liviu.Dudau@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 822d54b9c2c18271239ad7d928f1e9c702676592
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Mon Sep 28 09:16:17 2015 -0700

      netpoll: Drop budget parameter from NAPI polling call hierarchy

      For some reason we were carrying the budget value around between the
      various calls to napi->poll.  If for example one of the drivers called had
      a bug in which it returned a non-zero value for work this could result in
      the budget value becoming negative.

      Rather than carry around a value of budget that is 0 or less we can 
instead
      just loop through and pass 0 to each napi->poll call.  If any driver
      returns a value for work done that is non-zero then we can report that
      driver and continue rather than allowing a bad actor to make the budget
      value negative and pass that negative value to napi->poll.

      Note, the only actual change here is that instead of letting budget become
      negative we are keeping it at 0 regardless of the value returned for work
      since it should not be possible for the polling routine to do any actual
      work with a budget of 0.  So if the polling routine returns a non-0 value
      we are just reporting it and continuing with a budget of 0 rather than
      letting that work value be subtracted from the budget of 0.

      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 75c261b51ba19f0791de608f0acfb94956f78c76
  Author: Alexander Stein <alexander.stein@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 15:05:33 2015 +0200

      net sysfs: Print link speed as signed integer

      Otherwise 4294967295 (MBit/s) (-1) will be printed when there is no link.
      Documentation/ABI/testing/sysfs-class-net does not state if this shall be
      signed or unsigned.
      Also remove the now unused variable fmt_udec.

      Signed-off-by: Alexander Stein <alexander.stein@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c52b1da538800a30f030eeb697366c23daf2ef3
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 28 10:49:48 2015 +0200

      bna: fix error handling

      Several functions can return negative value in case of error,
      so their return type should be fixed as well as type of variables
      to which this value is assigned.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3504bb639ec793c181de6e33a205fc8ca6cf32bf
  Merge: 2103d6b 9f389e3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 13:47:08 2015 -0700

      Merge branch 'af_unix_MSG_PEEK'

      Aaron Conole says:

      ====================
      af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag

      This patch set implements a bugfix for kernel.org bugzilla #12323, 
allowing
      MSG_PEEK to return all queued data on the unix domain socket, not just the
      data contained in a single SKB.

      This is the v3 version of this patch, which includes a suggested 
modification
      by Eric Dumazet to convert the unix_sk() conversion macro to a static 
inline
      function. These patches are independent and can be applied separately.

      This set was tested over a 24-hour period, utilizing a loop continually
      executing the bugzilla issue attached python code. It was instrumented 
with
      a pr_err_once() ([   13.798683] unix: went there at least one time).

      v2->v3:
       - Added Eric Dumazet's suggestion for #define to static inline
       - Fixed an issue calling unix_state_lock() with an invalid argument

      v3->v4:
       - Eliminated an XXX comment
       - Changed from goto unlock to explicit unix_state_unlock() and break
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f389e35674f5b086edd70ed524ca0f287259725
  Author: Aaron Conole <aconole@xxxxxxxxxx>
  Date:   Sat Sep 26 18:50:43 2015 -0400

      af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag

      AF_UNIX sockets now return multiple skbs from recv() when MSG_PEEK flag
      is set.

      This is referenced in kernel bugzilla #12323 @
      https://bugzilla.kernel.org/show_bug.cgi?id=12323

      As described both in the BZ and lkml thread @
      http://lkml.org/lkml/2008/1/8/444 calling recv() with MSG_PEEK on an
      AF_UNIX socket only reads a single skb, where the desired effect is
      to return as much skb data has been queued, until hitting the recv
      buffer size (whichever comes first).

      The modified MSG_PEEK path will now move to the next skb in the tree
      and jump to the again: label, rather than following the natural loop
      structure. This requires duplicating some of the loop head actions.

      This was tested using the python socketpair python code attached to
      the bugzilla issue.

      Signed-off-by: Aaron Conole <aconole@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4613012db1d911f80897f9446a49de817b2c4c47
  Author: Aaron Conole <aconole@xxxxxxxxxx>
  Date:   Sat Sep 26 18:50:42 2015 -0400

      af_unix: Convert the unix_sk macro to an inline function for type safety

      As suggested by Eric Dumazet this change replaces the
      #define with a static inline function to enjoy
      complaints by the compiler when misusing the API.

      Signed-off-by: Aaron Conole <aconole@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2594e9064a57634efc146ff4e89a5de562e05011
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 19:00:11 2015 +0200

      bridge: vlan: add per-vlan struct and move to rhashtables

      This patch changes the bridge vlan implementation to use rhashtables
      instead of bitmaps. The main motivation behind this change is that we
      need extensible per-vlan structures (both per-port and global) so more
      advanced features can be introduced and the vlan support can be
      extended. I've tried to break this up but the moment net_port_vlans is
      changed and the whole API goes away, thus this is a larger patch.
      A few short goals of this patch are:
      - Extensible per-vlan structs stored in rhashtables and a sorted list
      - Keep user-visible behaviour (compressed vlans etc)
      - Keep fastpath ingress/egress logic the same (optimizations to come
        later)

      Here's a brief list of some of the new features we'd like to introduce:
      - per-vlan counters
      - vlan ingress/egress mapping
      - per-vlan igmp configuration
      - vlan priorities
      - avoid fdb entries replication (e.g. local fdb scaling issues)

      The structure is kept single for both global and per-port entries so to
      avoid code duplication where possible and also because we'll soon 
introduce
      "port0 / aka bridge as port" which should simplify things further
      (thanks to Vlad for the suggestion!).

      Now we have per-vlan global rhashtable (bridge-wide) and per-vlan port
      rhashtable, if an entry is added to a port it'll get a pointer to its
      global context so it can be quickly accessed later. There's also a
      sorted vlan list which is used for stable walks and some user-visible
      behaviour such as the vlan ranges, also for error paths.
      VLANs are stored in a "vlan group" which currently contains the
      rhashtable, sorted vlan list and the number of "real" vlan entries.
      A good side-effect of this change is that it resembles how hw keeps
      per-vlan data.
      One important note after this change is that if a VLAN is being looked up
      in the bridge's rhashtable for filtering purposes (or to check if it's an
      existing usable entry, not just a global context) then the new helper
      br_vlan_should_use() needs to be used if the vlan is found. In case the
      lookup is done only with a port's vlan group, then this check can be
      skipped.

      Things tested so far:
      - basic vlan ingress/egress
      - pvids
      - untagged vlans
      - undef CONFIG_BRIDGE_VLAN_FILTERING
      - adding/deleting vlans in different scenarios (with/without global ctx,
        while transmitting traffic, in ranges etc)
      - loading/removing the module while having/adding/deleting vlans
      - extracting bridge vlan information (user ABI), compressed requests
      - adding/deleting fdbs on vlans
      - bridge mac change, promisc mode
      - default pvid change
      - kmemleak ON during the whole time

      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74b3112e95073b351e3b0b9799795bc76f8415fa
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Sep 29 13:53:30 2015 -0400

      drm/amdgpu:  Restore LCD backlight level on resume

      Instead of only enabling the backlight (which seems to set it to max
      brightness), just re-set the current backlight level, which also takes
      care of enabling the backlight if necessary.

      Port of radeon commit:
      drm/radeon: Restore LCD backlight level on resume (>= R5xx)

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 191988e0bd3875526464e3a601edf29f2a3118ae
  Merge: 8a4683a f864288
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 11:51:41 2015 -0700

      Merge branch 'mvneta_percpu_irq'

      Gregory CLEMENT says:

      ====================
      net: mvneta: Switch to per-CPU irq and make rxq_def useful

      As stated in the first version: "this patchset reworks the Marvell
      neta driver in order to really support its per-CPU interrupts, instead
      of faking them as SPI, and allow the use of any RX queue instead of
      the hardcoded RX queue 0 that we have currently."

      Following the review which has been done, Maxime started adding the
      CPU hotplug support. I continued his work a few weeks ago and here is
      the result.

      Since the 1st version the main change is this CPU hotplug support, in
      order to validate it I powered up and down the CPUs while performing
      iperf. I ran the tests during hours: the kernel didn't crash and the
      network interfaces were still usable. Of course it impacted the
      performance, but continuously power down and up the CPUs is not
      something we usually do.

      I also reorganized the series, the 3 first patches should go through
      the irq subsystem, whereas the 4 others should go to the network
      subsystem.

      However, there is a runtime dependency between the two parts. Patch 5
      depend on the patch 3 to be able to use the percpu irq.

      Thanks,

      Gregory

      PS: Thanks to Willy who gave me some pointers on how to deal with the
      NAPI.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f864288544802ae68b20da293e1b861230852dba
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:38 2015 +0200

      net: mvneta: Statically assign queues to CPUs

      Since the switch to per-CPU interrupts, we lost the ability to set which
      CPU was going to receive our RX interrupt, which was now only the CPU on
      which the mvneta_open function was run.

      We can now assign our queues to their respective CPUs, and make sure only
      this CPU is going to handle our traffic.

      This also paves the road to be able to change that at runtime, and later 
on
      to support RSS.

      [gregory.clement@xxxxxxxxxxxxxxxxxx]: hardened the CPU hotplug support.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d893665728f3cc79f7719df50c4345d200bb293c
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:37 2015 +0200

      net: mvneta: Allow different queues

      The mvneta driver allows to change the default RX queue trough the rxq_def
      kernel parameter.

      However, the current code doesn't allow to have any value but 0. It is
      actively checked for in the driver's probe because the drivers makes a
      number of assumption and takes a number of shortcuts in order to just use
      that RX queue.

      Remove these limitations in order to be able to specify any available
      queue.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 12bb03b436dad56692e9a103ed26156156bef5d2
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:36 2015 +0200

      net: mvneta: Handle per-cpu interrupts

      Now that our interrupt controller is allowing us to use per-CPU 
interrupts,
      actually use it in the mvneta driver.

      This involves obviously reworking the driver to have a CPU-local NAPI
      structure, and report for incoming packet using that structure.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2502d0ef272da7058ef303b849a2c8dc324c2e2e
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:35 2015 +0200

      net: mvneta: Fix CPU_MAP registers initialisation

      The CPU_MAP register is duplicated for each CPUs at different addresses,
      each instance being at a different address.

      However, the code so far was using CONFIG_NR_CPUS to initialise the 
CPU_MAP
      registers for each registers, while the SoCs embed at most 4 CPUs.

      This is especially an issue with multi_v7_defconfig, where CONFIG_NR_CPUS
      is currently set to 16, resulting in writes to registers that are not
      CPU_MAP.

      Fixes: c5aff18204da ("net: mvneta: driver for Marvell Armada 370/XP 
network unit")
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.8+
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 080481f97f425f89440386d02201c1d014f9e0dc
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:34 2015 +0200

      irqchip: armada-370-xp: Rework per-cpu interrupts handling

      The MPIC driver currently has a list of interrupts to handle as per-cpu.

      Since the timer, fabric and neta interrupts were the only per-cpu
      interrupts in the system, we can now remove the switch and just check for
      the hardware irq number to determine whether a given interrupt is per-cpu
      or not.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aec2e2ad1786eb07814ae60988e0e306cd24a6cc
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:33 2015 +0200

      irq: Export per-cpu irq allocation and de-allocation functions

      Some drivers might use the per-cpu interrupts and still might be built as 
a
      module. Export request_percpu_irq an free_percpu_irq to these user, which
      also make it consistent with enable/disable_percpu_irq that were exported.

      Reported-by: Willy Tarreau <w@xxxxxx>
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1b7febd725a2cdfc8ac245b7b7437ce4b91aecb
  Author: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:09:32 2015 +0200

      genirq: Fix the documentation of request_percpu_irq

      The documentation of request_percpu_irq is confusing and suggest that the
      interrupt is not enabled at all, while it is actually enabled on the local
      CPU.

      Clarify that.

      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 99c221df33fbfa1b30e15dee879eb0a9ae1be353
  Author: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:42:37 2015 +0900

      irqchip/renesas-irqc: Move over to nested generic chip

      Convert the IRQC driver to rely on GENERIC_IRQ_CHIP and
      set IRQ_GC_INIT_NESTED_LOCK to enable nested locking.

      Signed-off-by: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
      Cc: jason@xxxxxxxxxxxxxx
      Cc: geert+renesas@xxxxxxxxx
      Cc: horms@xxxxxxxxxxxx
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150928094237.32552.83434.sendpatchset@little-apple
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e7dbe2da5e8e247c6e62a0894935d94d7153ed16
  Author: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 18:42:28 2015 +0900

      irqchip/renesas-irqc: Add r8a7795 INTC-EX DT documentation

      For some reason the name of the external interrupt controller
      has changed name with r8a7795, so use "intc-ex" instead of "irqc"
      as r8a7795 compat string to follow the friendly documentation.

      Signed-off-by: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
      Reviewed-by: horms@xxxxxxxxxxxx
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: jason@xxxxxxxxxxxxxx
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150928094228.32552.83336.sendpatchset@little-apple
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c1444c6357217cea405415b4c96491d4057b0746
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 16:52:51 2015 -0500

      bridge: Pass net into br_validate_ipv4 and br_validate_ipv6

      The network namespace is easiliy available in state->net so use it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 5f5d74d723146c5b97c7318b5851af15b30e3304
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:31 2015 -0500

      ipv6: Pass struct net into ip6_route_me_harder

      Don't make ip6_route_me_harder guess which network namespace
      it is routing in, pass the network namespace in.

      Signed-off-by: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit e45f50660ee5fd38a540afabb7c0f65d063db631
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:30 2015 -0500

      ipv4: Pass struct net into ip_route_me_harder

      Don't make ip_route_me_harder guess which network namespace
      it is routing in, pass the network namespace in.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6a1d689d9f2953975df937be020ae60fa10a73c1
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:29 2015 -0500

      netfilter: ipt_SYNPROXY: Pass snet into synproxy_send_tcp

      ip6t_SYNPROXY already does this and this is needed so that we have a
      struct net that can be passed down into ip_route_me_harder, so
      that ip_route_me_harder can stop guessing it's context.

      Along the way pass snet into synproxy_send_client_synack as this
      is the only caller of synprox_send_tcp that is not passed snet
      already.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit d815d90bbbc08777c0e3a36f57b97fc4a4fb3150
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:28 2015 -0500

      netfilter: Push struct net down into nf_afinfo.reroute

      The network namespace is needed when routing a packet.
      Stop making nf_afinfo.reroute guess which network namespace
      is the proper namespace to route the packet in.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 372892ec1151c895c7dec362f3246f089690cfc7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 15:07:27 2015 -0500

      ipv4: Push struct net down into nf_send_reset

      This is needed so struct net can be pushed down into
      ip_route_me_harder.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 4281f46ef839050d2ef60348f661eb463c21cc2e
  Author: Michel Dänzer <michel.daenzer@xxxxxxx>
  Date:   Mon Sep 28 18:16:31 2015 +0900

      drm/radeon: Restore LCD backlight level on resume (>= R5xx)

      Instead of only enabling the backlight (which seems to set it to max
      brightness), just re-set the current backlight level, which also takes
      care of enabling the backlight if necessary.

      Only the radeon_atom_encoder_dpms_dig part tested on a Kaveri laptop,
      the radeon_atom_encoder_dpms_avivo part is only compile tested.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 54313503f9a3c34a9e45aad7654976b7f50b9ae7
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Fri Sep 25 14:36:55 2015 +0300

      drm/amdgpu: signedness bug in amdgpu_cs_parser_init()

      The "i" variable should be signed or it leads to a crash in the error
      handling code.

      Fixes: 1d263474c441 ('drm/amdgpu: unwind properly in 
amdgpu_cs_parser_init()')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 60de074ba1e8f327db19bc33d8530131ac01695d
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:25 2015 +0900

      blk-mq: fix deadlock when reading cpu_list

      CPU hotplug handling for blk-mq (blk_mq_queue_reinit) acquires
      all_q_mutex in blk_mq_queue_reinit_notify() and then removes sysfs
      entries by blk_mq_sysfs_unregister().  Removing sysfs entry needs to
      be blocked until the active reference of the kernfs_node to be zero.

      On the other hand, reading blk_mq_hw_sysfs_cpu sysfs entry (e.g.
      /sys/block/nullb0/mq/0/cpu_list) acquires all_q_mutex in
      blk_mq_hw_sysfs_cpus_show().

      If these happen at the same time, a deadlock can happen.  Because one
      can wait for the active reference to be zero with holding all_q_mutex,
      and the other tries to acquire all_q_mutex with holding the active
      reference.

      The reason that all_q_mutex is acquired in blk_mq_hw_sysfs_cpus_show()
      is to avoid reading an imcomplete hctx->cpumask.  Since reading sysfs
      entry for blk-mq needs to acquire q->sysfs_lock, we can avoid deadlock
      and reading an imcomplete hctx->cpumask by protecting q->sysfs_lock
      while hctx->cpumask is being updated.

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 5778322e67ed34dc9f391a4a5cbcbb856071ceba
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:23 2015 +0900

      blk-mq: avoid inserting requests before establishing new mapping

      Notifier callbacks for CPU_ONLINE action can be run on the other CPU
      than the CPU which was just onlined.  So it is possible for the
      process running on the just onlined CPU to insert request and run
      hw queue before establishing new mapping which is done by
      blk_mq_queue_reinit_notify().

      This can cause a problem when the CPU has just been onlined first time
      since the request queue was initialized.  At this time ctx->index_hw
      for the CPU, which is the index in hctx->ctxs[] for this ctx, is still
      zero before blk_mq_queue_reinit_notify() is called by notifier
      callbacks for CPU_ONLINE action.

      For example, there is a single hw queue (hctx) and two CPU queues
      (ctx0 for CPU0, and ctx1 for CPU1).  Now CPU1 is just onlined and
      a request is inserted into ctx1->rq_list and set bit0 in pending
      bitmap as ctx1->index_hw is still zero.

      And then while running hw queue, flush_busy_ctxs() finds bit0 is set
      in pending bitmap and tries to retrieve requests in
      hctx->ctxs[0]->rq_list.  But htx->ctxs[0] is a pointer to ctx0, so the
      request in ctx1->rq_list is ignored.

      Fix it by ensuring that new mapping is established before onlined cpu
      starts running.

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Jens Axboe <axboe@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 0e6263682014d480b8d7b8c10287f4536066b54f
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:22 2015 +0900

      blk-mq: fix q->mq_usage_counter access race

      CPU hotplug handling for blk-mq (blk_mq_queue_reinit) accesses
      q->mq_usage_counter while freezing all request queues in all_q_list.
      On the other hand, q->mq_usage_counter is deinitialized in
      blk_mq_free_queue() before deleting the queue from all_q_list.

      So if CPU hotplug event occurs in the window, percpu_ref_kill() is
      called with q->mq_usage_counter which has already been marked dead,
      and it triggers warning.  Fix it by deleting the queue from all_q_list
      earlier than destroying q->mq_usage_counter.

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit a723bab3d7529133f71fc8a5e96f86e3639a0d13
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:21 2015 +0900

      blk-mq: Fix use after of free q->mq_map

      CPU hotplug handling for blk-mq (blk_mq_queue_reinit) updates
      q->mq_map by blk_mq_update_queue_map() for all request queues in
      all_q_list.  On the other hand, q->mq_map is released before deleting
      the queue from all_q_list.

      So if CPU hotplug event occurs in the window, invalid memory access
      can happen.  Fix it by releasing q->mq_map in blk_mq_release() to make
      it happen latter than removal from all_q_list.

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Suggested-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 4593fdbe7a2f44d5e64c627c715dd0bcec9bdf14
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:20 2015 +0900

      blk-mq: fix sysfs registration/unregistration race

      There is a race between cpu hotplug handling and adding/deleting
      gendisk for blk-mq, where both are trying to register and unregister
      the same sysfs entries.

      null_add_dev
          --> blk_mq_init_queue
              --> blk_mq_init_allocated_queue
                  --> add to 'all_q_list' (*)
          --> add_disk
              --> blk_register_queue
                  --> blk_mq_register_disk (++)

      null_del_dev
          --> del_gendisk
              --> blk_unregister_queue
                  --> blk_mq_unregister_disk (--)
          --> blk_cleanup_queue
              --> blk_mq_free_queue
                  --> del from 'all_q_list' (*)

      blk_mq_queue_reinit
          --> blk_mq_sysfs_unregister (-)
          --> blk_mq_sysfs_register (+)

      While the request queue is added to 'all_q_list' (*),
      blk_mq_queue_reinit() can be called for the queue anytime by CPU
      hotplug callback.  But blk_mq_sysfs_unregister (-) and
      blk_mq_sysfs_register (+) in blk_mq_queue_reinit must not be called
      before blk_mq_register_disk (++) and after blk_mq_unregister_disk (--)
      is finished.  Because '/sys/block/*/mq/' is not exists.

      There has already been BLK_MQ_F_SYSFS_UP flag in hctx->flags which can
      be used to track these sysfs stuff, but it is only fixing this issue
      partially.

      In order to fix it completely, we just need per-queue flag instead of
      per-hctx flag with appropriate locking.  So this introduces
      q->mq_sysfs_init_done which is properly protected with all_q_mutex.

      Also, we need to ensure that blk_mq_map_swqueue() is called with
      all_q_mutex is held.  Since hctx->nr_ctx is reset temporarily and
      updated in blk_mq_map_swqueue(), so we should avoid
      blk_mq_register_hctx() seeing the temporary hctx->nr_ctx value
      in CPU hotplug handling or adding/deleting gendisk .

      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Ming Lei <tom.leiming@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 1356aae08338f1c19ce1c67bf8c543a267688fc3
  Author: Akinobu Mita <akinobu.mita@xxxxxxxxx>
  Date:   Sun Sep 27 02:09:19 2015 +0900

      blk-mq: avoid setting hctx->tags->cpumask before allocation

      When unmapped hw queue is remapped after CPU topology is changed,
      hctx->tags->cpumask has to be set after hctx->tags is setup in
      blk_mq_map_swqueue(), otherwise it causes null pointer dereference.

      Fixes: f26cdc8536 ("blk-mq: Shared tag enhancements")
      Signed-off-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Cc: Keith Busch <keith.busch@xxxxxxxxx>
      Cc: Ming Lei <tom.leiming@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit c91aed9896946721bb30705ea2904edb3725dd61
  Author: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 16:46:06 2015 -0500

      svcrdma: handle rdma read with a non-zero initial page offset

      The server rdma_read_chunk_lcl() and rdma_read_chunk_frmr() functions
      were not taking into account the initial page_offset when determining
      the rdma read length.  This resulted in a read who's starting address
      and length exceeded the base/bounds of the frmr.

      The server gets an async error from the rdma device and kills the
      connection, and the client then reconnects and resends.  This repeats
      indefinitely, and the application hangs.

      Most work loads don't tickle this bug apparently, but one test hit it
      every time: building the linux kernel on a 16 core node with 'make -j
      16 O=/mnt/0' where /mnt/0 is a ramdisk mounted via NFSRDMA.

      This bug seems to only be tripped with devices having small fastreg page
      list depths.  I didn't see it with mlx4, for instance.

      Fixes: 0bf4828983df ('svcrdma: refactor marshalling logic')
      Signed-off-by: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
      Tested-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit b7b01d345b83602a42b6ff02cacb9d9ada5ecd0a
  Author: Benoît Thébaudeau <benoit@xxxxxxxxxxx>
  Date:   Tue Sep 29 17:59:14 2015 +0200

      ASoC: imx-ssi: Fix DAI hardware signal inversions

      SND_SOC_DAIFMT_{IB|NB}_{IF|NF} are defined as inverting or not BCLK or
      FRM relatively to what is standard for the specified DAI hardware audio
      format. Consequently, the absolute polarities of these signals cannot be
      derived only from these settings as this driver did. The format has to
      be taken into account too.

      This fixes inverted left/right channels in I²S mode.

      Signed-off-by: Benoît Thébaudeau <benoit@xxxxxxxxxxx>
      Acked-by: Nicolin Chen <nicoleotsuka@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit eb8d0ac4afd8b15ac88f8a50342b32774ff881ed
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Mon Sep 28 15:28:03 2015 +0200

      spi: sh-msiof: Match renesas,rx-fifo-size in DT bindings doc with driver

      Commit fe78d0b7691c0274 ("spi: sh-msiof: Fix FIFO size to 64 word from
      256 word") changed the default RX FIFO size on R-Car Gen2 SoCs in the
      driver code, but forgot to update the DT bindings documentation.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 6b3600b4ba0810c84437cf76556d9afbd55c1bfc
  Author: Chen-Yu Tsai <wens@xxxxxxxx>
  Date:   Sat Sep 26 21:21:12 2015 +0800

      regulator: axp20x: Fix enable bit indexes for DCDC4 and DCDC5

      The enable bit indexes for DCDC4 and DCDC5 regulators are off by 1.

      We haven't run into any problems with this since either the regulators
      aren't defined in the DT and aren't used, or all the DCDC regulators
      have the "always-on" property set, as they are almost always used
      for system critical loads.

      Signed-off-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit fb97d75b038659998257f7dd767d8229dce50b74
  Author: Gianluca Renzi <gianlucarenzi@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 21:33:42 2015 +0200

      ASoC: sgtl5000: fix error message output for MicBias voltage

      Cc: Liam Girdwood <lgirdwood@xxxxxxxxx>
      Cc: Takashi Iwai <tiwai@xxxxxxxx>
      Cc: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Cc: alsa-devel@xxxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Gianluca Renzi <gianlucarenzi@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 076cdcb12f784b2057f172b5caca641fafa67cdf
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 24 16:14:55 2015 +0200

      mac80211: use bool argument to ieee80211_send_nullfunc

      Instead of int with 0/1, use bool with false/true for the
      powersave argument to ieee80211_send_nullfunc().

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 90d13e8f5b3c2445f481be4a2012a1861337f718
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Sep 24 16:13:07 2015 +0200

      mac80211: reduce indentation by inlining a check

      Instead of nesting two if statements, inline the second
      check into the first if statement and to indentation.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 50f36ae61a5b65ba4612a5d2aa696c8ac5b6c988
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Thu Sep 24 14:59:48 2015 +0200

      mac80211: fix tx sequence number assignment with software queue + 
fast-xmit

      When using software queueing, tx sequence number assignment happens at
      ieee80211_tx_dequeue time, so the fast-xmit codepath must not do that.

      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 44674d9c2267f454f38df7b2395939bfa911f92e
  Author: Ayala Beker <ayala.beker@xxxxxxxxx>
  Date:   Wed Sep 23 10:41:27 2015 +0200

      mac80211: advertise support for full station state in AP mode

      This enables adding stations in unauthenticated mode, just after
      receiving the first authentication frame; which in turn allows
      sending a negative authentication reply if the station cannot be
      added.

      In addition init rate control for unassociated station only when
      it becomes associated, prior to that low rates will be used.

      Signed-off-by: Ayala Beker <ayala.beker@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 47edb11b522561658fe719e56aa69a3c3098a3fe
  Author: Ayala Beker <ayala.beker@xxxxxxxxx>
  Date:   Mon Sep 21 15:49:53 2015 +0300

      cfg80211: allow changing station capabilities for unassociated stations

      Currently, cfg80211 rejects capability updates for existing entries
      and as a result it's impossible to update entries that were added
      unassociated, but that is necessary to go through the full station
      states from userspace, adding a station before authentication etc.

      Fix this by allowing updates to capabilities for stations that the
      driver (or mac80211) assigned unassociated state. Drivers setting
      the full station state support flag must use the new station type
      for proper operation.

      Signed-off-by: Ayala Beker <ayala.beker@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit d0a77c6569abe29d921148c45f598bc796084226
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 23 10:42:28 2015 +0200

      mac80211: allow writing TX PN in debugfs

      For certain tests, for example replay detection, it can be useful
      to be able to influence/set the PN used in outgoing packets. Make
      it possible to change the TX PN in debugfs.

      For now, this doesn't support TKIP since I haven't needed it, but
      there's no reason it couldn't be added if necessary.

      Note that this must be used very carefully: it could, for example,
      be used to make "valid replays" where the PN reuse happens on a
      different TID. This couldn't be done by an attacker since the TID
      is protected as part of the AAD.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 416eb9fc29469f036c85b412edf89774d6b34b0f
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Wed Sep 23 14:18:36 2015 +0200

      mac80211: Deinline drv_get/set/reset_tsf()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining these functions have sizes and callsite counts
      as follows:

      drv_get_tsf: 634 bytes, 6 calls
      drv_set_tsf: 626 bytes, 2 calls
      drv_reset_tsf: 617 bytes, 2 calls

      Total size reduction is about 4.2 kbytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 6db96838971eb4c8ae6285795188f391e97d47c3
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Wed Sep 23 14:18:35 2015 +0200

      mac80211: Deinline drv_ampdu_action()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining the function size is 755 bytes and there are
      6 callsites.

      Total size reduction is about 3.3 kbytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 42677ed33a8b6995e6af2ec15643840afcf1c48b
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Wed Sep 23 14:18:34 2015 +0200

      mac80211: Deinline drv_switch_vif_chanctx()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining the function size is 821 bytes and there are
      2 callsites, reducing code size by about 800 bytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      [adjust code-style a bit]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 0e5c371aa05522ac14e91ddee0522ad855e12d02
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 23 14:02:47 2015 +0200

      mac80211: improve __rate_control_send_low warning

      If there are no supported rates in the rate mask with the required
      flags, we warn, but it's not clear which part causes the warning.

      Add the relevant data to the warning to understand why it happens.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a0c391b1345cfaecfb24c3c07378d80f6168fb61
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 23 10:29:20 2015 +0200

      mac80211: minstrel[_ht]: remove non-ascii debugfs characters

      Replace the average symbol by "avg" to avoid being warned about the
      non-ASCII symbol all the time, line up the columns properly.

      (I changed my mind - the warnings are getting annoying)

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 27392719541c89595a5c03d49b599ddfe009e6b8
  Author: Eliad Peller <eliadx.peller@xxxxxxxxx>
  Date:   Mon Sep 21 15:50:26 2015 +0300

      mac80211: don't tear down aggregation on suspend in case of wowlan->any

      In case of "any" wowlan trigger, there is no reason to tear down
      aggregations, as we want the device to continue working normally.

      Similarly, there's no reason to tear down aggregations on resume,
      as they should have been torn down on suspend if needed.
      However, since the reconfiguration flow is shared with HW restart,
      tear down aggregations on reconfiguration when we are not resuming.

      To keep things working after non-wowlan suspend, keep clearing the
      WLAN_STA_BLOCK_BA flag.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 9f0e13546ef5773b7059b531a667ec47a5f897ee
  Author: Fu, Zhonghui <zhonghui.fu@xxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 10:40:14 2015 +0800

      net/wireless: enable wiphy device to suspend/resume asynchronously

      Now, PM core supports asynchronous suspend/resume mode for devices
      during system suspend/resume, and the power state transition of one
      device may be completed in separate kernel thread. PM core ensures
      all power state transition timing dependency between devices. This
      patch enables wiphy device to suspend/resume asynchronously. This can
      take advantage of multicore and improve system suspend/resume speed.

      Signed-off-by: Zhonghui Fu <zhonghui.fu@xxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 9aae296a6208188fb40da987efb6bcd92f4fb169
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 15:19:38 2015 +0200

      mac80211: Deinline drv_add/remove/change_interface()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining these functions have sizes and callsite counts
      as follows:

      drv_add_interface: 638 bytes, 5 calls
      drv_remove_interface: 611 bytes, 6 calls
      drv_change_interface: 658 bytes, 1 call

      Total size reduction is about 9 kbytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4fbd572c29bd184146e8adf52631db193c4e34b9
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 15:19:35 2015 +0200

      mac80211: Deinline drv_sta_rc_update()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining the function size is 706 bytes and there are
      2 callsites, reducing code size by about 700 bytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit b23dcd4aca1854cda520def01731ad035cae94d8
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 15:19:34 2015 +0200

      mac80211: Deinline drv_conf_tx()

      With this .config: http://busybox.net/~vda/kernel_config_ALLYES_Os,
      after deinlining the function size is 785 bytes and there are
      7 callsites.

      Total size reduction is about 3.5 kbytes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: John Linville <linville@xxxxxxxxxxxxx>
      CC: Michal Kazior <michal.kazior@xxxxxxxxx>
      CC: Johannes Berg <johannes.berg@xxxxxxxxx>
      CC: linux-wireless@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 35afa588624c4f9e19a0edfbb51769b59c90bb0d
  Author: Helmut Schaa <helmut.schaa@xxxxxxxxxxxxxx>
  Date:   Wed Sep 9 09:46:32 2015 +0200

      mac80211: Copy tx'ed beacons to monitor mode

      When debugging wireless powersave issues on the AP side it's quite helpful
      to see our own beacons that are transmitted by the hardware/driver. 
However,
      this is not that easy since beacons don't pass through the regular TX 
queues.

      Preferably drivers would call ieee80211_tx_status also for tx'ed beacons
      but that's not always possible. Hence, just send a copy of each beacon
      generated by ieee80211_beacon_get_tim to monitor devices when they are
      getting fetched by the driver.

      Also add a HW flag IEEE80211_HW_BEACON_TX_STATUS that can be used by
      drivers to indicate that they report TX status for beacons.

      Signed-off-by: Helmut Schaa <helmut.schaa@xxxxxxxxxxxxxx>
      (with a fix from Christian Lamparted rolled in)
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 499f3aa4323775d5320bdf7ccc26576c54a54169
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Fri Sep 18 16:27:07 2015 +0530

      iommu/vt-d: Fix memory leak in dmar_insert_one_dev_info()

      We are returning NULL if we are not able to attach the iommu
      to the domain but while returning we missed freeing info.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit fbef168fec837ae26c8725737cd4b49dc8a0f917
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Tue Sep 29 15:05:44 2015 +0200

      Bluetooth: Add hci_cmd_sync function

      Send a HCI command and wait for command complete event.
      This function serializes the requests by grabbing the req_lock.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit adc0b7fbf6fe9967505c0254d9535ec7288186ae
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Mon Sep 28 22:47:42 2015 +0200

      s390/boot/decompression: disable floating point in decompressor

      my gcc 5.1 used an ldgr instruction with a register != 0,2,4,6 for
      spilling/filling into a floating point register in our decompressor.

      This will cause an AFP-register data exception as the decompressor
      did not setup the additional floating point registers via cr0.
      That causes a program check loop that looked like a hang with
      one "Uncompressing Linux... " message (directly booted via kvm)
      or a loop of "Uncompressing Linux... " messages (when booted via
      zipl boot loader).

      The offending code in my build was

         48e400:       e3 c0 af ff ff 71       lay     %r12,-1(%r10)
      -->48e406:       b3 c1 00 1c             ldgr    %f1,%r12
         48e40a:       ec 6c 01 22 02 7f       clij    %r6,2,12,0x48e64e

      but gcc could do spilling into an fpr at any function. We can
      simply disable floating point support at that early stage.

      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Acked-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit bdf7344e14d826d0df438a55fc51146d179e198d
  Author: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
  Date:   Sun Sep 20 07:00:35 2015 -0700

      clocksource/drivers/keystone: Fix bad NO_IRQ usage

      The current code assumes the 'irq_of_parse_and_map' will return NO_IRQ in 
case
      of failure. Unfortunately, the NO_IRQ is not consistent across the 
different
      architectures and we must not rely on it.

      NO_IRQ is equal to '-1' on ARM and 'irq_of_parse_and_map' returns '0' in 
case
      of an error. Hence, the latter won't be detected and will lead to a crash.

      Fix this by just checking 'irq' is different from zero.

      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit ccc42592d436d021d17f86729d24806f30dbad25
  Author: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
  Date:   Sun Sep 20 07:00:10 2015 -0700

      clocksource/drivers/rockchip: Fix bad NO_IRQ usage

      The current code assumes the 'irq_of_parse_and_map' will return NO_IRQ in 
case
      of failure. Unfortunately, the NO_IRQ is not consistent across the 
different
      architectures and we must not rely on it.

      NO_IRQ is equal to '-1' on ARM and 'irq_of_parse_and_map' returns '0' in 
case
      of an error. Hence, the latter won't be detected and will lead to a crash.

      Fix this by just checking 'irq' is different from zero.

      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 6b7464b703e3147b54dcb1032dfa10244f5a4d56
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Sep 28 06:44:31 2015 -0500

      Documentation/EDAC: Add reference documents section for amd64_edac

      This section used to be in amd64_edac.h. Move it here as it is a more
      natural place to put all documentation-related info. Add links to the
      BKDGs while at it.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Cc: linux-doc@xxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443440671-2400-1-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 1a8bc7707edb7c90478012076beb9207ab67d8d1
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Sep 28 06:43:13 2015 -0500

      EDAC, amd64_edac: Update copyright and remove changelog

      Git provides us all the changelogs anyway. So trim the comments section
      here. Update the copyrights info while at it.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443440593-2316-3-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit da92110dfdfacfdb0e3be06040a14d96c23be5d0
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Sep 28 06:43:12 2015 -0500

      EDAC, amd64_edac: Extend scrub rate support to F15hM60h

      The scrub rate control register has moved to function 2 in PCI config
      space and is at a different offset on family 0x15, models 0x60 and
      later. The minimum recommended scrub rate has also changed. (Refer to
      D18F2x1c9_dct[1:0][DramScrub] in Fam15hM60h BKDG).

      Adjust set_scrub_rate() and get_scrub_rate() functions to accommodate
      this.

      Tested on F15hM60h, Fam15h, models 00h-0fh and Fam10h systems.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443440593-2316-2-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      [ Cleanup conditionals. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 7c7feb2ebfc9c0552c51f0c050db1d1a004faac5
  Author: shengyong <shengyong1@xxxxxxxxxx>
  Date:   Mon Sep 28 17:57:19 2015 +0000

      UBI: return ENOSPC if no enough space available

      UBI: attaching mtd1 to ubi0
      UBI: scanning is finished
      UBI error: init_volumes: not enough PEBs, required 706, available 686
      UBI error: ubi_wl_init: no enough physical eraseblocks (-20, need 1)
      UBI error: ubi_attach_mtd_dev: failed to attach mtd1, error -12 <= NOT 
ENOMEM
      UBI error: ubi_init: cannot attach mtd1

      If available PEBs are not enough when initializing volumes, return -ENOSPC
      directly. If available PEBs are not enough when initializing WL, return
      -ENOSPC instead of -ENOMEM.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Sheng Yong <shengyong1@xxxxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>
      Reviewed-by: David Gstir <david@xxxxxxxxxxxxx>

  commit 281fda27673f833a01d516658a64d22a32c8e072
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Tue Sep 22 23:58:07 2015 +0200

      UBI: Validate data_size

      Make sure that data_size is less than LEB size.
      Otherwise a handcrafted UBI image is able to trigger
      an out of bounds memory access in ubi_compare_lebs().

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Richard Weinberger <richard@xxxxxx>
      Reviewed-by: David Gstir <david@xxxxxxxxxxxxx>

  commit cf6f54e3f133229f02a90c04fe0ff9dd9d3264b4
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Wed Jul 8 11:46:36 2015 +0200

      UBIFS: Kill unneeded locking in ubifs_init_security

      Fixes the following lockdep splat:
      [    1.244527] =============================================
      [    1.245193] [ INFO: possible recursive locking detected ]
      [    1.245193] 4.2.0-rc1+ #37 Not tainted
      [    1.245193] ---------------------------------------------
      [    1.245193] cp/742 is trying to acquire lock:
      [    1.245193]  (&sb->s_type->i_mutex_key#9){+.+.+.}, at: 
[<ffffffff812b3f69>] ubifs_init_security+0x29/0xb0
      [    1.245193]
      [    1.245193] but task is already holding lock:
      [    1.245193]  (&sb->s_type->i_mutex_key#9){+.+.+.}, at: 
[<ffffffff81198e7f>] path_openat+0x3af/0x1280
      [    1.245193]
      [    1.245193] other info that might help us debug this:
      [    1.245193]  Possible unsafe locking scenario:
      [    1.245193]
      [    1.245193]        CPU0
      [    1.245193]        ----
      [    1.245193]   lock(&sb->s_type->i_mutex_key#9);
      [    1.245193]   lock(&sb->s_type->i_mutex_key#9);
      [    1.245193]
      [    1.245193]  *** DEADLOCK ***
      [    1.245193]
      [    1.245193]  May be due to missing lock nesting notation
      [    1.245193]
      [    1.245193] 2 locks held by cp/742:
      [    1.245193]  #0:  (sb_writers#5){.+.+.+}, at: [<ffffffff811ad37f>] 
mnt_want_write+0x1f/0x50
      [    1.245193]  #1:  (&sb->s_type->i_mutex_key#9){+.+.+.}, at: 
[<ffffffff81198e7f>] path_openat+0x3af/0x1280
      [    1.245193]
      [    1.245193] stack backtrace:
      [    1.245193] CPU: 2 PID: 742 Comm: cp Not tainted 4.2.0-rc1+ #37
      [    1.245193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), 
BIOS rel-1.7.5-0-ge51488c-20140816_022509-build35 04/01/2014
      [    1.245193]  ffffffff8252d530 ffff88007b023a38 ffffffff814f6f49 
ffffffff810b56c5
      [    1.245193]  ffff88007c30cc80 ffff88007b023af8 ffffffff810a150d 
ffff88007b023a68
      [    1.245193]  000000008101302a ffff880000000000 00000008f447e23f 
ffffffff8252d500
      [    1.245193] Call Trace:
      [    1.245193]  [<ffffffff814f6f49>] dump_stack+0x4c/0x65
      [    1.245193]  [<ffffffff810b56c5>] ? console_unlock+0x1c5/0x510
      [    1.245193]  [<ffffffff810a150d>] __lock_acquire+0x1a6d/0x1ea0
      [    1.245193]  [<ffffffff8109fa78>] ? __lock_is_held+0x58/0x80
      [    1.245193]  [<ffffffff810a1a93>] lock_acquire+0xd3/0x270
      [    1.245193]  [<ffffffff812b3f69>] ? ubifs_init_security+0x29/0xb0
      [    1.245193]  [<ffffffff814fc83b>] mutex_lock_nested+0x6b/0x3a0
      [    1.245193]  [<ffffffff812b3f69>] ? ubifs_init_security+0x29/0xb0
      [    1.245193]  [<ffffffff812b3f69>] ? ubifs_init_security+0x29/0xb0
      [    1.245193]  [<ffffffff812b3f69>] ubifs_init_security+0x29/0xb0
      [    1.245193]  [<ffffffff8128e286>] ubifs_create+0xa6/0x1f0
      [    1.245193]  [<ffffffff81198e7f>] ? path_openat+0x3af/0x1280
      [    1.245193]  [<ffffffff81195d15>] vfs_create+0x95/0xc0
      [    1.245193]  [<ffffffff8119929c>] path_openat+0x7cc/0x1280
      [    1.245193]  [<ffffffff8109ffe3>] ? __lock_acquire+0x543/0x1ea0
      [    1.245193]  [<ffffffff81088f20>] ? sched_clock_cpu+0x90/0xc0
      [    1.245193]  [<ffffffff81088c00>] ? calc_global_load_tick+0x60/0x90
      [    1.245193]  [<ffffffff81088f20>] ? sched_clock_cpu+0x90/0xc0
      [    1.245193]  [<ffffffff811a9cef>] ? __alloc_fd+0xaf/0x180
      [    1.245193]  [<ffffffff8119ac55>] do_filp_open+0x75/0xd0
      [    1.245193]  [<ffffffff814ffd86>] ? _raw_spin_unlock+0x26/0x40
      [    1.245193]  [<ffffffff811a9cef>] ? __alloc_fd+0xaf/0x180
      [    1.245193]  [<ffffffff81189bd9>] do_sys_open+0x129/0x200
      [    1.245193]  [<ffffffff81189cc9>] SyS_open+0x19/0x20
      [    1.245193]  [<ffffffff81500717>] entry_SYSCALL_64_fastpath+0x12/0x6f

      While the lockdep splat is a false positive, becuase path_openat holds 
i_mutex
      of the parent directory and ubifs_init_security() tries to acquire i_mutex
      of a new inode, it reveals that taking i_mutex in ubifs_init_security() is
      in vain because it is only being called in the inode allocation path
      and therefore nobody else can see the inode yet.

      Cc: stable@xxxxxxxxxxxxxxx # 3.20-
      Reported-and-tested-by: Boris Brezillon 
<boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Reviewed-and-tested-by: Dongsheng Yang <yangds.fnst@xxxxxxxxxxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>
      Signed-off-by: dedekind1@xxxxxxxxx

  commit 6b98f2bec580c0d8329c547d692ad6c9b927da3e
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 20:14:41 2015 +1000

      powerpc/configs: Re-enable CONFIG_SCSI_DH

      Commit 086b91d052eb ("scsi_dh: integrate into the core SCSI code")
      changed CONFIG_SCSI_DH from tristate to bool.

      Our defconfigs have CONFIG_SCSI_DH=m, which the kconfig machinery warns
      us is invalid, but instead of converting it to =y it leaves it unset.
      This means we loose the CONFIG_SCSI_DH code and everything that depends
      on it.

      So convert the values in the defconfigs to =y.

      Fixes: 086b91d052eb ("scsi_dh: integrate into the core SCSI code")
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit fd546ee6a7dc4b71ebc6d1205bf72ea3c1c7030a
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sat Sep 26 21:41:01 2015 +0200

      mmc: pxamci: fix card detect with slot-gpio API

      Move pxamci to mmc slot-gpio API to fix interrupt request.

      It fixes the case where the card detection is on a gpio expander, on I2C
      for example on zylonite board. In this case, the card detect netsted
      interrupt is called from a threaded interrupt. The request_irq() fails,
      because a hard irq cannot be a nested interrupt from a threaded
      interrupt (set __setup_irq()).

      This was tested on zylonite and mioa701 boards.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Cc: Petr Cvek <petr.cvek@xxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 51424b2860670ec20e1dd5177fe70ab4b6fd7a5b
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Wed Sep 23 22:06:48 2015 +0200

      mmc: sunxi: Fix clk-delay settings

      In recent allwinner kernel sources the mmc clk-delay settings have been
      slightly tweaked, and for sun9i they are completely different then what
      we are using.

      This commit brings us in sync with what allwinner does, fixing problems
      accessing sdcards on some A33 devices (and likely others).

      For pre sun9i hardware this makes the following changes:
      -At 400Khz change the sample delay from 7 to 0 (introduced in A31 sdk)
      -At 50 Mhz change the sample delay from 5 to 4 (introduced in A23 sdk)

      This also drops the clk-delay calculation for clocks > 50 MHz, we do
      not need this as we've: mmc->f_max = 50000000, and the delays in the
      old code were not correct (at 100 MHz the delay must be a multiple of 60,
      at 200 MHz a multiple of 120).

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 43934ece2ea72c1dd279c0b0478c1a036d5d77ee
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Mon Sep 14 12:18:55 2015 +0200

      mmc: core: Don't return an error for CD/WP GPIOs when GPIOLIB is unset

      When CONFIG_GPIOLIB is unset, its stubs will return -ENOSYS. That means
      when the mmc core parses DT for CD/WP GPIOs via mmc_of_parse(), -ENOSYS
      becomes propagated to the caller. Typically this means that the mmc host
      driver fails to probe.

      As the CD/WP GPIOs are already treated as optional, let's extend that to
      cover the case when CONFIG_GPIOLIB is unset.

      Reported-by: Michal Simek <michal.simek@xxxxxxxxxx>
      Fixes: 16b23787fc70 ("mmc: sdhci-of-arasan: Call OF parsing for MMC")
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Tested-by: Michal Simek <michal.simek@xxxxxxxxxx>
      Acked-by: Venu Byravarasu <vbyravarasu@xxxxxxxxxx>

  commit 4e077237cfb6ab13701d504060d3ae248b191e6e
  Author: Michael Rossberg <michael.rossberg@xxxxxxxxxxxxx>
  Date:   Tue Sep 29 11:25:08 2015 +0200

      xfrm: Fix state threshold configuration from userspace

      Allow to change the replay threshold (XFRMA_REPLAY_THRESH) and expiry
      timer (XFRMA_ETIMER_THRESH) of a state without having to set other
      attributes like replay counter and byte lifetime. Changing these other
      values while traffic flows will break the state.

      Signed-off-by: Michael Rossberg <michael.rossberg@xxxxxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit c386578f1cdb4dac230395a951f88027f64346e3
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Tue Sep 29 11:40:49 2015 +0200

      xfrm: Let the flowcache handle its size by default.

      The xfrm flowcache size is limited by the flowcache limit
      (4096 * number of online cpus) and the xfrm garbage collector
      threshold (2 * 32768), whatever is reached first. This means
      that we can hit the garbage collector limit only on systems
      with more than 16 cpus. On such systems we simply refuse
      new allocations if we reach the limit, so new flows are dropped.
      On syslems with 16 or less cpus, we hit the flowcache limit.
      In this case, we shrink the flow cache instead of refusing new
      flows.

      We increase the xfrm garbage collector threshold to INT_MAX
      to get the same behaviour, independent of the number of cpus.

      The xfrm garbage collector threshold can still be set below
      the flowcache limit to reduce the memory usage of the flowcache.

      Tested-by: Dan Streetman <dan.streetman@xxxxxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit 0266715155379820c5c626e2cd4b8c91751036bc
  Merge: 3225031 283e8ba
  Author: James Morris <james.l.morris@xxxxxxxxxx>
  Date:   Tue Sep 29 19:19:09 2015 +1000

      Merge tag 'keys-fixes-20150925' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into for-linus

      Keyrings fixes from David Howells, for current Linus.

  commit 8ac2a1704a9f315d490ca1050b8fe8367644e675
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:39 2015 +0200

      irqchip/gicv3-its: Use new jump label API

      Use newly introduced jump label API.

      Make this a separate patch for easier backporting to older kernels of
      the errata patch set.

      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zygnier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-7-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 94100970743365a9f9e186520e77ef56c492058d
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:38 2015 +0200

      irqchip/gicv3-its: Workaround for Cavium ThunderX errata 22375, 24313

      This implements two gicv3-its errata workarounds for ThunderX. Both
      with small impact affecting only ITS table allocation.

       erratum 22375: only alloc 8MB table size
       erratum 24313: ignore memory access type

      The fixes are in ITS initialization and basically ignore memory access
      type and table size provided by the TYPER and BASER registers.

      Signed-off-by: Ganapatrao Kulkarni <gkulkarni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zygnier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-6-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 67510ccafb9d69e79079b5cd6c9959025bc02061
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:37 2015 +0200

      irqchip/gicv3-its: Add HW revision detection and configuration

      Some GIC revisions require an individual configuration to esp. add
      workarounds for HW bugs. This patch implements generic code to parse
      the hw revision provided by an IIDR register value and runs specific
      code if hw matches. A function is added that reads the IIDR registers
      for ITS (GITS_IIDR) and then goes through a list of init functions to
      be called for specific versions. Same could be done for GICV3
      (GICD_IIDR), but there are no users yet for it.

      The patch is needed to implement workarounds for HW errata in Cavium's
      ThunderX GICV3 ITS.

      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zygnier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-5-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit c14e36733b8a63894db9ca0b486ce14299ef2fda
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:36 2015 +0200

      irqchip/gicv3-its: Read typer register outside the loop

      No need to read the typer register in the loop. Values do not change.

      This patch is basically a prerequisite for a follow-on patch that adds
      errata code for Cavium ThunderX. It moves the calculation of the
      number of id entries to the beginning of the function close to other
      setup values that are needed to allocate the its table. Now we have a
      central location to modify the setup parameters and the errata code
      can be implemented in a single block.

      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-4-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 6d4e11c5e2e8cd54a035ba395bf8ccfa7e22cfd8
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:35 2015 +0200

      irqchip/gicv3: Workaround for Cavium ThunderX erratum 23154

      This patch implements Cavium ThunderX erratum 23154.

      The gicv3 of ThunderX requires a modified version for reading the IAR
      status to ensure data synchronization. Since this is in the fast-path
      and called with each interrupt, runtime patching is used using jump
      label patching for smallest overhead (no-op). This is the same
      technique as used for tracepoints.

      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zygnier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-3-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 30f2136346cab91e1ffd9ee6370d76809f20487a
  Author: Robert Richter <rrichter@xxxxxxxxxx>
  Date:   Mon Sep 21 22:58:34 2015 +0200

      irqchip/gicv3-its: Add range check for number of allocated pages

      The number of pages for the its table may exceed the maximum of 256.
      Adding a range check and limitting the number to its maximum.

      Based on a patch from Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>.

      Signed-off-by: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442869119-1814-2-git-send-email-rric@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1f9c6e1bc1ba5f8a10fcd6e99d170954d7c6d382
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Mon Sep 21 19:19:53 2015 +0300

      mwifiex: fix mwifiex_rdeeprom_read()

      There were several bugs here.

      1)  The done label was in the wrong place so we didn't copy any
          information out when there was no command given.

      2)  We were using PAGE_SIZE as the size of the buffer instead of
          "PAGE_SIZE - pos".

      3)  snprintf() returns the number of characters that would have been
          printed if there were enough space.  If there was not enough space
          (and we had fixed the memory corruption bug #2) then it would result
          in an information leak when we do simple_read_from_buffer().  I've
          changed it to use scnprintf() instead.

      I also removed the initialization at the start of the function, because
      I thought it made the code a little more clear.

      Fixes: 5e6e3a92b9a4 ('wireless: mwifiex: initial commit for Marvell 
mwifiex driver')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2b8fa9e870b7dd4ea30a0c72e3a134533552278f
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 15:44:25 2015 +0200

      airo: Implement netif_carrier_on/off

      Add calls to netif_carrier_on and netif_carrier_off

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 4a0f2ea79797642341020eae5918871db94fc769
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 15:44:24 2015 +0200

      airo: fix IW_AUTH_ALG_OPEN_SYSTEM

      IW_AUTH_ALG_OPEN_SYSTEM is ambiguous in set_auth for WEP as
      wpa_supplicant uses it for both no encryption and WEP open system.
      Cache the last mode set (only of these two) and use it here.

      This allows wpa_supplicant to work with unencrypted APs.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit cf75496b6fc2fd8dd74633b0f49f4fa3f58f36e1
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Sep 21 09:55:26 2015 +0200

      ssb: make ssb_pcmcia_switch_core static

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 264c7708c9ceabfd10c70f942bb2910976ca92ff
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Sep 21 09:47:20 2015 +0200

      ssb: drop declaration of non existing ssb_sdio_hardware_setup

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 7b1647bc1a44422ee9d67d4d2b5d3ab12d2c5bee
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Sep 21 09:47:19 2015 +0200

      ssb: make ssb_sdio_switch_core static

      It's used locally only.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 44f3fd2700eee30e03fe9da6258b73d53bc037c5
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Sep 21 09:47:18 2015 +0200

      ssb: unexport ssb_bus_pcibus_register

      It isn't used anywhere out of ssb code and we don't (plan to) build
      pcihost_wrapper.c as a separated module.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 69b5f4da26362912e7e56e48c8e1df7fde281e58
  Author: Hauke Mehrtens <hauke@xxxxxxxxxx>
  Date:   Sat Sep 19 14:43:50 2015 +0200

      bcma: add support for population subnodes also when build as module

      of_default_bus_match_table was not exported earlier, so it could only
      be accessed by code compiled into the kernel. A new function
      of_platform_default_populate() was added which uses
      of_default_bus_match_table and this function is also exported. This way
      it is possible to create a bus with the content of
      of_default_bus_match_table and we can remove the hacks from bcma.

      Signed-off-by: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit a32be01772525eba2001be23a570d9e31c58273d
  Author: Hauke Mehrtens <hauke@xxxxxxxxxx>
  Date:   Sat Sep 19 12:47:20 2015 +0200

      brcmfmac: include linux/atomic.h

      brcmfmac uses atomic_or() and other atomic_* functions, but does not
      include linux/atomic.h. This file gets included by some other header
      file so this normally does not cause problems.

      Signed-off-by: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Acked-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 29b93c0e3c3891e3ba6e38a71997bdad8a2aa457
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:19 2015 +0200

      brcmfmac: Accept events when TDLS is used in combination with p2p.

      TDLS events are mapped back to primary interface but when p2p is in
      use then this fails because the check was incorrect by checking
      bsscfg number. Which can be different when a p2p device has been
      created.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit cb8dc71f516a98908de7de9be381ef9b571742e2
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:18 2015 +0200

      brcmfmac: Fix TDLS setup by properly handling p2p noif.

      There is a workaround needed for p2p device setup which breaks tdls
      functionality. This patch fixes that by properly signalling fweh that
      p2p device setup is ongoing.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 55acca90da52b85299c033354e51ddaa7b73e019
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:17 2015 +0200

      brcmfmac: Add support for the BCM4365 and BCM4366 PCIE devices.

      This patch adds support for the BCM4365 and BCM4366 11ac Wave2
      PCIE devices.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit a2044d91d9d25a0e9e2abb43ca90cceee032f6ee
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:16 2015 +0200

      brcmfmac: Fix race condition bug when deleting p2p interface.

      When p2p device interface gets deleted by deinitialising discovery
      it will result in an event which removes the interface, but that is
      also done by delete p2p interface code. This results in race
      condition which sometimes results in lockup/crash. With this patch
      the delete device interface will wait for the event (with timeout)
      removing the possible race condition. Also on the stop device call
      from cfg80211 the deinitialisation of the discovery device should
      be avoided as it can result in a similar situation.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 8268c2011d255b547a9093977e728af5cf16d69e
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:15 2015 +0200

      brcmfmac: Add module parameter to disable features.

      For debugging purpose it is very handy to be able to disable
      features. It has happened a few times that new features turned
      out not always being properly detected for all devices/firmwares.
      Making it possible to disable the feature with a module parameter
      will make testing/debugging easier.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 35a3cbcc49b5422fbfe7d655952888a3d29b45ed
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:14 2015 +0200

      brcmfmac: Fix p2p bug for older firmwares.

      Some devices with older firmwares are reporting new p2p device
      interface with the wrong type. Accept this type to get p2p
      working for these devices.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit d1bb34c128f59c30b75b96ef60f5f00cdbe9ca0e
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:13 2015 +0200

      brcmfmac: Only handle p2p_stop_device if vif is valid

      In some situations it is possible that vif has been removed while
      cfg80211 invokes the p2p_stop_device handler. This will result in
      crash.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9831bcb987df4aff6a1d85975f1dda4c654f298d
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:12 2015 +0200

      brcmfmac: Deleting of p2p device is leaking memory.

      When a p2p device gets deleted, the memory for the vif is not being
      released. This is solved by reorganizing the cleanup path and
      properly freeing the memory.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 178e9ef9b6c619b1b3de354f21692a0ad1071116
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:11 2015 +0200

      brcmfmac: Workaround in change vif for wpa_supplicant support.

      Different wpa_supplicants have different behavior and expectations
      regarding the change_virtual_intf behavior. This patch implements
      a workaround for the different versions and possible brcmfmac
      configuration.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 43e55a2a1cf05afcc4b9d4fc214ccb4a53447cb1
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:10 2015 +0200

      brcmfmac: Make p2pon module param always available.

      p2pon module param is currently under define BRCMDBG. Though it is
      a needed option for older versions of the wpa_supplicant which do not
      support the P2P_DEVICE interface.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9f64df940cfe734156ec434807611e014278b359
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:09 2015 +0200

      brcmfmac: Fix bug in flowring management.

      The hash index stored in the flowrings is of type u16 but gets
      stored in u8. This can result in incorrect indexing and possibly
      result in crashes. This patch fixes the type.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ae7c03f68ee24e51f3ded9265715405df72812ba
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:08 2015 +0200

      brcmfmac: Inform p2p module about p2pon through API

      When the p2pon module param is used then p2p attach will initialize
      p2p device iface in the firmware, but it is doing that by checking
      data. It is cleaner to pass the p2pon information to p2p by API.
      This information is also needed for other patch.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 6ea696eb4e2646e8f2440e2090f3d165a21ff02f
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:07 2015 +0200

      brcmfmac: Only assign primary netdev to if2bss array.

      The if2bss allows for translation of ifidx to bssidx which has a 1:n
      relation. Therefor only the first (primary) netdev should be
      assigned in this array. This fixes the p2pon=1 module param usage.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 60dc35ef9ffdf8810b98cc09abb02378023818c2
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:06 2015 +0200

      brcmfmac: Fix set and get tx-power functions.

      Implementation of tx-power (get and set) related functions are
      still assuming mW interface. This is wrong as functions use dbm
      (or mbm) nowadays. As a result a tx power configuration could
      result in wrong power configuration.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit e3c92cb2eea395c9fbec7ceb678626565cbac0fe
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:05 2015 +0200

      brcmfmac: Add support for the BCM4350 PCIE device.

      This patch adds support fo the BRCM4350 2x2 11ac PCIE device.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2b5d348ee786dd875b3aa8536a97ff6f6421d018
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Fri Sep 18 22:08:04 2015 +0200

      brcmfmac: Fix exception handling.

      In some exception situations the ifp->vif was not properly assigned
      which could result in crash.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 735ab6bfc03878e6b41feb1f14da750a951854ad
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:18 2015 -0700

      mwifiex: complete usb tx data with multi endpoints

      This patch do the work to TX data with specific USB
      endpoint. At the same time, update data_sent flag
      according to multi port status. And is_port_ready
      API is added for BSS interface to check if current
      used usb data endpoint is available or not.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 7e4e5d2cd0817b91eb07c7abe297012bf76616ea
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:17 2015 -0700

      mwifiex: add usb multi endpoints resync support

      This patch add support for usb multi endpoints resync.
      Once multi channel event is received from firmware,
      update usb_mc_setp flag to block TX data until setup is over.
      And available data endpoint will be attached to BSS interface.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 308fe29ef24394e4db66d80c7a23e3e5640aca74
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:16 2015 -0700

      mwifiex: add usb tx data multi endpoints support

      This patch add support for USB interface to TX data
      with different endpoint. And previous TX information
      are saved in new designed structure.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2b0f997db43f01370503d88b5fbec9a350a7955f
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:15 2015 -0700

      mwifiex: add usb multi channel event process support

      This patch add multi channel event process for USB multi tx data 
endpoints.
      Driver receives firmware multi channel event only in case that new
      connection is setup or interface is disconnect. Different BSS interface
      need update used usb endpoint.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit d941444321f6b84bdd36d8d24eef10171c9ab981
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:14 2015 -0700

      mwifiex: move usb specific data_sent update to usb.c

      This patch move data_sent flag update to usb.c file.
      >From now all data_sent update cases only happened in specific file:
      sdio.c, usb.c, pcie.c. Outside ot these files, it is only allowed
      to check the value of data_ent.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit d22871db0172eba2bba2e7ff8373f682c9b001cd
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:13 2015 -0700

      mwifiex: fix tx data_sent issue for usb interface

      This patch fix missing tx data_sent flag update for usb interface.
      Except USB interface, data_sent flag has been updated in specific
      file such as sdio.c and pcie.c. So only USB interface type need check
      when TX data completed.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 17090beec26ea5bd064c67e2707151722d9d88d6
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:12 2015 -0700

      mwifiex: Suppress -ENOSR error for data traffic on USB

      We have preallocated buffer pool for Tx data. During high
      data traffic, all buffers are submitted to USB and driver needs
      to wait until one of the buffers get available for next Tx
      packet.

      "data: -ENOSR is returned" errors is expected in this case. Let's
      lower the priority of this message.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 70c5ad7e20c1426d14f6e722da0972b2c9163db7
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:11 2015 -0700

      mwifiex: correct paused tx data packet counter

      This patch fixes observed issues while updating counter for
      number of paused data packets in wmm queue when trying to
      delete packet or delete station entry.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 14d9c11c91a606fed65eaae2455423a23bb4ae59
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:10 2015 -0700

      mwifiex: avoid memsetting PCIe event buffer

      Preallocated PCIe buffer is being reused for all PCIe interface
      events. Physical address of the buffer is shared with firmware
      so that it can perform DMA on it. As event length is specified
      in the header, there should not be a problem if the buffer gets
      overwritten.
      We will save some cycles by avoiding memset everytime while
      submitting the buffer to firmware.

      Fixes: 2728cecdc7d6bf3d21(mwifiex: corrections in PCIe event skb)
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 17e524b1b60f4390d24a51d9524d1648cf5d1447
  Author: Aniket Nagarnaik <aniketn@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:09 2015 -0700

      mwifiex: fix NULL pointer dereference during hidden SSID scan

      This NULL pointer dereference is observed during suspend resume
      stress test. All pending commands are cancelled when system goes
      into suspend state. There a corner case in which host may receive
      response for last scan command after this and try to trigger extra
      active scan for hidden SSIDs.

      The issue is fixed by adding a NULL check to skip that extra scan.

      Fixes: 2375fa2b36feaf34 (mwifiex: fix unable to connect hidden SSID..)
      Cc: <stable@xxxxxxxxxxxxxxx> [v4.2+]
      Signed-off-by: Aniket Nagarnaik <aniketn@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2c3da961268ff7f4a6c958fee081c58aef2e5c1d
  Author: Aniket Nagarnaik <aniketn@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:08 2015 -0700

      mwifiex: don't always include ht/vht info in tdls confirm frame

      Current TDLS implementation always includes ht/vht information
      in tdls setup confirm frame which causes teardown by legacy
      peer station after TDLS handshake. We will inclue ht/vht
      capabilities in tdls setup confirm frame only if peer station
      supports it to fix this problem.

      Signed-off-by: Aniket Nagarnaik <aniketn@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 02421dd3f6af1b6becb6d9a690a2b70c73c03a7a
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:07 2015 -0700

      mwifiex: NULL check for cfg80211_inform_bss()

      cfg80211_inform_bss would return null in some cases, such as
      memory allocation failure.

      This patch adds sanity check for this case, to avoid possible
      issues when above corner case is hit.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9a9053c3420fcc5779319e4ea267c6dcbf8d7c04
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:06 2015 -0700

      mwifiex: fix driver init failure under memory pressure

      64k Tx and Rx buffers are allocated during driver initialization
      for SDIO level data aggregations. When host is under memory
      pressure situation, kzalloc() request for 64k may fail.

      We will try allocating 32k buffers and disable our rx single port
      aggreagation feature in this situation.

      If the allocation still fails, we will disable our sdio multport
      aggregation feature as well. In this way, we will transmit and
      receive packets one by one, thus reduce the demand for big
      memory.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit e3ad3d5b6ab2a9876773fe99d9d1866d3c1744ae
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:05 2015 -0700

      mwifiex: minor corrections in multiport aggregation code

      This patch includes below changes
      1) Check if multiport aggregation feature flag while doing rx
      length validation check.
      2) Reset buffer size variables when buffers are freed.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 0a252abb6ad75260353a28c08b904c2c9d258d2c
  Author: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:04 2015 -0700

      mwifiex: update amsdu tx packet time stamp

      This patch fixes the issue of delay time in A-MSDU tx packet.
      In generated new A-MSDU packet, the time stamp is initialized to zero.
      Choose the time of first MSDU packet as aggregated packet's time.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 65405c51bb2e9d2a348f5402443e31f82411aabb
  Author: Xinming Hu <huxm@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:32:03 2015 -0700

      mwifiex: fix typo in del_virtual_intf() function

      Interface counters should be incremented in add_virtual_intf()
      and decremented in del_virtual_intf() function. This patch
      corrects it.

      Signed-off-by: Xinming Hu <huxm@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 32677b25849f627aba27235f4cbf65663a0cc1a6
  Author: Guodong Xu <guodong.xu@xxxxxxxxxx>
  Date:   Fri Sep 18 20:37:27 2015 +0800

      wlcore: align reg_ch_conf_last[] to 64bit

      Align fields reg_ch_conf_last and reg_ch_conf_pending of
      struct wl1271{} to 64bit.

      Without this, on 64bit ARM, wlcore_set_pending_regdomain_ch() fails at
      the point it calls set_bit(ch_bit_idx, (long*)wl->reg_ch_conf_pending);
      Here is the error message while doing iw wlan0 scan or connect:

      [   10.666857] wlcore: IRQ work
      [   10.670046] wlcore: intr: 0x40 (fw_rx_counter = 1, drv_rx_counter = 0, 
tx_results_counter = 0)
      [   10.678697] wlcore: WL1271_ACX_INTR_DATA
      [   10.682810] Unhandled fault: alignment fault (0x96000021) at 
0xffffffc037a817f4
      [   10.690139] Internal error: : 96000021 [#1] PREEMPT SMP
      [   10.695366] Modules linked in:
      [   10.698437] CPU: 3 PID: 894 Comm: irq/60-wl18xx Tainted: G        W    
   4.2.0-rc6-linaro-hikey #2
      [   10.707501] Hardware name: HiKey Development Board (DT)
      [   10.712733] task: ffffffc03a9d1680 ti: ffffffc039e18000 task.ti: 
ffffffc039e18000
      [   10.720239] PC is at set_bit+0x14/0x30
      [   10.724002] LR is at wlcore_set_pending_regdomain_ch+0x40/0x4c

      Signed-off-by: Guodong Xu <guodong.xu@xxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9c17dbc6eb73bdd8a6aaea1baefd37ff78d86148
  Merge: 18ab2cd e637d17
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Sep 29 09:43:46 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

        - Accept a zero --itrace period, meaning "as often as possible".  In 
the case
          of Intel PT that is the same as a period of 1 and a unit of 
'instructions'
          (i.e.  --itrace=i1i). (Adrian Hunter)

        - Harmonize itrace's synthesized callchains with the existing 
--max-stack
          tool option. (Adrian Hunter)

        - Allow time to be displayed in nanoseconds in 'perf script'. (Adrian 
Hunter)

        - Fix potential infinite loop when handling Intel PT timestamps. 
(Adrian Hunter)

        - Slighly improve Intel PT debug logging. (Adrian Hunter)

        - Warn when AUX data has been lost, just like when processing 
PERF_RECORD_LOST.
          (Adrian Hunter)

        - Further document export-to-postgresql.py script. (Adrian Hunter)

        - Add option to synthesize branch stack from auxtrace data. (Adrian 
Hunter)

        - Use equivalent logic to avoid using dso->kernel. (Arnaldo Carvalho de 
Melo)

        - Show proper error messages when parsing bad terms for hw/sw events. 
(He Kuang)

        - Tracepoint event parsing improvements. (He Kuang)

        - Store tracing mountpoint for better error message. (Jiri Olsa)

        - Add fixdep to tools/build, bringing it closer to the kernel 
counterpart, from
          where it is being lifted. (Jiri Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 862a336c8302695cbac6d8d752ee9a2429487478
  Author: Jan Kaisrlik <kaisrja1@xxxxxxxxxxx>
  Date:   Thu Sep 17 14:03:46 2015 +0200

      ath9k: Add support for OCB mode

      The patch adds support for "outside the context of a BSS"(OCB) mode
      to ath9k driver and extends debugfs files by OCB ralated information.

      This patch was tested on AR9380-AL1A cards.

      Signed-off-by: Jan Kaisrlik <kaisrja1@xxxxxxxxxxx>
      Cc: Michal Sojka <sojkam1@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit c452d944bee09c8c2529d965f10999d80991402a
  Author: Hiroaki KAWAI <hiroaki.kawai@xxxxxxxxx>
  Date:   Thu Sep 10 18:04:45 2015 +0000

      carl9170: fix bad rssi reading

      Fix rssi calculation error which was introduced in otus to ar9170
      porting.

      Signed-off-by: Hiroaki KAWAI <hiroaki.kawai@xxxxxxxxx>
      Acked-by: Christian Lamparter <chunkeey@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 76ea6fdbeb2540ea8a06189b519175ee5616ab56
  Author: Geoff Levand <geoff@xxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:56:42 2015 -0700

      net/wireless/wl18xx: Add missing MODULE_FIRMWARE

      Fixes the output of 'modinfo --field firmware'.

      Signed-off-by: Geoff Levand <geoff@xxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 61d36370e24bb5d8f83481aa6f76fc05385c75c9
  Author: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 10:56:09 2015 +0800

      ath9k: enable hw manual peak calibration for QCA9561

      This patch fix https://lists.openwrt.org/pipermail/openwrt-devel/
      2015-August/034979.html. As the peak detect calibration is set
      incorrectly.

      Signed-off-by: Miaoqing Pan <miaoqing@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 36925e52c5ac9d10a553d1339e13a61bfbdd4ba4
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Mon Aug 31 10:46:45 2015 -0700

      mwifiex: Make mwifiex_dbg a function, reduce object size

      The mwifiex_dbg macro has two tests that could be consolidated
      into a function reducing overall object size ~10KB (~4%).

      So convert the macro into a function.

      $ size drivers/net/wireless/mwifiex/built-in.o* (x86-64 defconfig)
         text      data     bss     dec     hex filename
       233102      8628    4809  246539   3c30b 
drivers/net/wireless/mwifiex/built-in.o.new
       243949      8628    4809  257386   3ed6a 
drivers/net/wireless/mwifiex/built-in.o.old

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 07fe2e38c7fd19dc6a5468d0661fc75586ce9ca4
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Aug 27 16:14:06 2015 +0200

      brcmfmac: Reset PCIE devices after recognition.

      When PCIE type devices are being FW reloaded without being properly
      reset then the device ends up in a locked state, requiring the
      device to be completely powered down. This patch adds a reset
      through watchdog at the moment the device (cores) has been
      recognized. This will solve warm reboot issues.

      Cc: Rafal Milecki <zajec5@xxxxxxxxx>
      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 95ef12394a4d002c7ed3bcbed224f3391792a02b
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:04 2015 +0200

      brcmfmac: introduce brcmf_net_detach() function

      In case of error during brcmf_bus_start() the network interfaces were
      freed using free_netdev(). However, the interfaces may have additional
      memory allocated which is not freed. The netdev has destructor set to
      brcmf_cfg80211_free_netdev() which frees the additional memory if
      allocated and call free_netdev(). The brcmf_net_detach() either calls
      brcmf_cfg80211_free_netdev() directly or uses unregister_netdev() when
      struct net_device::reg_state indicates the netdev was registered.

      Reported-by: Daniel (Deognyoun) Kim <dekim@xxxxxxxxxxxx>
      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit c67d41ba6ff3a4be9aecb9df202e05e149832df5
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:03 2015 +0200

      brcmfmac: change prototype for brcmf_fws_hdrpull()

      Instead of passing ifidx and drvr just pass struct brcmf_if pointer
      which holds both parameters.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 03cca20a6ee15b25487b4992eda2c3bf08d1f1c1
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:02 2015 +0200

      brcmfmac: remove ifidx parameter from brcmf_fws_txstatus_suppressed()

      The brcmf_fws_txstatus_suppressed() function prototype specifies an
      ifidx parameter which is not used within the function implementation.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 9d6c1dc4f9136227b39faf98ae46d0228fe1fa19
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:01 2015 +0200

      brcmfmac: add dedicated debug level for firmware console logging

      Both PCIe and SDIO devices have the possibility to log the firmware
      console output in kernel log. For PCIe it is logged when PCIE debug
      level is enabled. For SDIO it is logged when user specifies a non-zero
      console interval through debugfs. This patch tries to make it a
      bit more consistent. The firmware console output is only logged when
      FWCON debug level is enabled.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Pontus Fuchs <pontusf@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 291da87b69109924e6ee526606a783668d2232e0
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:15:00 2015 +0200

      brcmfmac: add mapping for interface index to bsscfg index

      Because the P2P Device interface in firmware uses the same interface
      index as the primary interface we use the bsscfg index as index in the
      struct brcmf_pub::iflist. However, in the data path we get the interface
      index and not the bsscfg index. So we need a mapping of interface index
      to bsscfg index, which can be determined upon handle adding the interface.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 054e68add65972af20dbf0848e25c80828c5cd60
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:59 2015 +0200

      brcmfmac: pass struct brcmf_if instance in brcmf_txfinalize()

      Most call sites of brcmf_txfinalize already have struct brcmf_if
      instance so pass that to brcmf_txfinalize() as the function
      needs it anyway.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 46f3b6ee483898095906023e1ba3af2bddc38af9
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:58 2015 +0200

      brcmfmac: use brcmf_get_ifp() to map ifidx to struct brcmf_if instance

      The knowledge on how to map the interface index to a struct brcmf_if
      instance is in brcmf_get_ifp() so use that function when only the
      interface index is known instead of accessing brcmf_pub::iflist
      directly.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ddddfed2f9d8422fd5bb5080aa95e478832c0130
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:57 2015 +0200

      brcmfmac: correct detection of p2pdev interface event

      The p2pdev interface is setup in firmware resulting in a interface
      event. This event has role and no-if flag. When role is p2p client
      and no-if flag is set it indicates that this is the p2pdev interface.
      This info is used in handling the event and adding interface in the
      driver.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 1c626cf472fce757a69a4c70f038867907b5b808
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:56 2015 +0200

      brcmfmac: only call brcmf_cfg80211_detach() when attach was successful

      In brcmf_bus_start() the function brcmf_cfg80211_attach() is called which
      may fail. If this happens we should not call brcmf_cfg80211_detach() in
      the failure path as it will result in NULL pointer dereference:

        brcmf_fweh_activate_events: Set event_msgs error (-5)
        brcmf_bus_start: failed: -5
        brcmf_sdio_firmware_callback: dongle is not responding
        BUG: unable to handle kernel NULL pointer dereference at 
0000000000000068
        IP: [<ffffffff811e8f08>] kernfs_find_ns+0x18/0xd0
        PGD 0
        Oops: 0000 [#1] SMP
        Modules linked in: brcmfmac(O) brcmutil(O) cfg80211 auth_rpcgss
        CPU: 1 PID: 45 Comm: kworker/1:1 Tainted: G           O
        Hardware name: Dell Inc. Latitude E6410/07XJP9, BIOS A07 02/15/2011
        Workqueue: events request_firmware_work_func
        task: ffff880036c09ac0 ti: ffff880036dd4000 task.ti: ffff880036dd4000
        RIP: 0010:[<ffffffff811e8f08>]  [<ffffffff811e8f08>] 
kernfs_find_ns+0x18/0xd0
        RSP: 0018:ffff880036dd7a28  EFLAGS: 00010246
        RAX: ffff880036c09ac0 RBX: 0000000000000000 RCX: 000000007fffffff
        RDX: 0000000000000000 RSI: ffffffff816578b9 RDI: 0000000000000000
        RBP: ffff880036dd7a48 R08: 0000000000000000 R09: ffff880036c0b340
        R10: 00000000000002ec R11: ffff880036dd7b08 R12: ffffffff816578b9
        R13: 0000000000000000 R14: ffffffff816578b9 R15: ffff8800c6c87000
        FS:  0000000000000000(0000) GS:ffff88012bc40000(0000) 
knlGS:0000000000000000
        CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
        CR2: 0000000000000068 CR3: 0000000001a0b000 CR4: 00000000000006e0
        Stack:
         0000000000000000 ffffffff816578b9 0000000000000000 ffff8800c0d003c8
         ffff880036dd7a78 ffffffff811e8ff5 0000000ffffffff1 ffffffff81a9b060
         ffff8800c789f880 ffff8800c0d00000 ffff880036dd7a98 ffffffff811ebe0d
        Call Trace:
         [<ffffffff811e8ff5>] kernfs_find_and_get_ns+0x35/0x60
         [<ffffffff811ebe0d>] sysfs_unmerge_group+0x1d/0x60
         [<ffffffff81404ef2>] dpm_sysfs_remove+0x22/0x60
         [<ffffffff813f9db9>] device_del+0x49/0x240
         [<ffffffff815da768>] rfkill_unregister+0x58/0xc0
         [<ffffffffa06bd91b>] wiphy_unregister+0xab/0x2f0 [cfg80211]
         [<ffffffffa0742fe3>] brcmf_cfg80211_detach+0x23/0x50 [brcmfmac]
         [<ffffffffa074d986>] brcmf_detach+0x86/0xe0 [brcmfmac]
         [<ffffffffa0757de8>] brcmf_sdio_remove+0x48/0x120 [brcmfmac]
         [<ffffffffa0758ed9>] brcmf_sdiod_remove+0x29/0xd0 [brcmfmac]
         [<ffffffffa0759031>] brcmf_ops_sdio_remove+0xb1/0x110 [brcmfmac]
         [<ffffffffa001c267>] sdio_bus_remove+0x37/0x100 [mmc_core]
         [<ffffffff813fe026>] __device_release_driver+0x96/0x130
         [<ffffffff813fe0e3>] device_release_driver+0x23/0x30
         [<ffffffffa0754bc8>] brcmf_sdio_firmware_callback+0x2a8/0x5d0 
[brcmfmac]
         [<ffffffffa074deaf>] brcmf_fw_request_nvram_done+0x15f/0x5e0 [brcmfmac]
         [<ffffffff8140142f>] ? devres_add+0x3f/0x50
         [<ffffffff810642b5>] ? usermodehelper_read_unlock+0x15/0x20
         [<ffffffff81400000>] ? platform_match+0x70/0xa0
         [<ffffffff8140f400>] request_firmware_work_func+0x30/0x60
         [<ffffffff8106828c>] process_one_work+0x14c/0x3d0
         [<ffffffff8106862a>] worker_thread+0x11a/0x450
         [<ffffffff81068510>] ? process_one_work+0x3d0/0x3d0
         [<ffffffff8106d692>] kthread+0xd2/0xf0
         [<ffffffff8106d5c0>] ? kthread_create_on_node+0x180/0x180
         [<ffffffff815ed35f>] ret_from_fork+0x3f/0x70
         [<ffffffff8106d5c0>] ? kthread_create_on_node+0x180/0x180
        Code: e9 40 fe ff ff 48 89 d8 eb 87 66 0f 1f 84 00 00 00 00 00 66 66 66 
66
        90 55 48 89 e5 41 56 49 89 f6 41 55 49 89 d5 31 d2 41 54 53 <0f> b7
        47 68 48 8b 5f 48 66 c1 e8 05 83 e0 01 4d 85 ed 0f b6 c8
        RIP  [<ffffffff811e8f08>] kernfs_find_ns+0x18/0xd0
         RSP <ffff880036dd7a28>
        CR2: 0000000000000068
        ---[ end trace 87d6ec0d3fe46740 ]---

      Reported-by: Daniel (Deognyoun) Kim <dekim@xxxxxxxxxxxx>
      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ee6e3a3414a48425211f9292b8bfc4524c666c41
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:55 2015 +0200

      brcmfmac: change parameters for brcmf_remove_interface()

      Just pass the interface to be removed, ie. the struct brcmf_if instance.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 796cfb65e3ed01a9b08e3a0b93e34120c54bbbd2
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:54 2015 +0200

      brcmfmac: make brcmf_proto_hdrpull() return struct brcmf_if instance

      Avoid spreading the ifidx in the driver, but have it return the
      struct brcmf_if instance.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 75effb03ee8e4c9d4bbc909118ce5444b047dfde
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Wed Aug 26 22:14:53 2015 +0200

      brcmfmac: consolidate ifp lookup in driver core

      In rx path the firmware provide an interface index which is used to
      map to a struct brcmf_if instance. However, this involves some trick
      that is done in two places. This is changed by having driver core
      providing brcmf_get_ifp() function.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit c7d2ecd9f64c351cb4d551f1f472d0fc09c3cae8
  Author: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
  Date:   Wed Sep 23 16:41:55 2015 +0900

      ARM: dts: Fix wrong clock binding for sysmmu_fimd1_1 on exynos5420

      The sysmmu_fimd1_1 should bind the clock CLK_SMMU_FIMD1M1, not the clock
      CLK_SMMU_FIMD1M0. CLK_SMMU_FIMD1M0 is a clock for the sysmmu_fimd1_0.

      This wrong clock binding causes the problem that is blocked in iommu_map
      function when IOMMU is enabled and exynos-drm driver tries to allocate
      buffer via DMA mapping API on Odroid-XU3 board.

      Fixes: b70045167815 ("ARM: dts: add sysmmu nodes for exynos5420")
      Signed-off-by: Joonyoung Shim <jy0922.shim@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Reviewed-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>

  commit f404e7a730c59f58bc1e9a3142cfdf7ec2d29f3d
  Author: Yadwinder Singh Brar <yadi.brar01@xxxxxxxxx>
  Date:   Sun Aug 23 13:59:48 2015 +0900

      ARM: dts: Fix bootup thermal issue on smdk5250

      With default config on smdk5250 latest tree throws below message:

      [    2.226049] thermal thermal_zone0: critical temperature reached(224 
C),shutting down
      [    2.227840] reboot: Failed to start orderly shutdown: forcing the issue

      and hangs randomly because it reads wrong temperature value.

      I can't figure out any direct relation between LDO10 and TMU from board
      schematics which I have. So making LDO10 always-on to fix issue for now.

      Signed-off-by: Yadwinder Singh Brar <yadi.brar01@xxxxxxxxx>
      [pankaj.dubey: resubmitted after rebasing to latest kgene tree]
      Signed-off-by: Pankaj Dubey <pankaj.dubey@xxxxxxxxxxx>
      Tested-by: Pankaj Dubey <pankaj.dubey@xxxxxxxxxxx>
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>

  commit 2103d6b818fcdae15ffa04cf385f770e6c3892c3
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Mon Sep 28 14:34:04 2015 +0200

      net: sctp: Don't use 64 kilobyte lookup table for four elements

      Seemingly innocuous sctp_trans_state_to_prio_map[] array
      is way bigger than it looks, since
      "[SCTP_UNKNOWN] = 2" expands into "[0xffff] = 2" !

      This patch replaces it with switch() statement.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      CC: Vlad Yasevich <vyasevich@xxxxxxxxx>
      CC: Neil Horman <nhorman@xxxxxxxxxxxxx>
      CC: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
      CC: linux-sctp@xxxxxxxxxxxxxxx
      CC: netdev@xxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx
      Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
      Acked-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8a4683a5e06efda7e1f327213678d4dcafc0d894
  Author: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
  Date:   Mon Sep 28 12:47:14 2015 +0200

      net: help compiler generate better code in eth_get_headlen

      Noticed that the compiler (gcc version 4.8.5 20150623 (Red Hat 4.8.5-4) 
(GCC))
      generated suboptimal assembler code in eth_get_headlen().

      This early return coding style is usually not an issue, on super scalar 
CPUs,
      but the compiler choose to put the return statement after this very 
unlikely
      branch, thus creating larger jump down to the likely code path.

      Performance wise, I could measure slightly less L1-icache-load-misses
      and less branch-misses, and an improvement of 1 nanosec with an 
IP-forwarding
      use-case with 257 bytes packets with ixgbe (CPU i7-4790K @ 4.00GHz).

      Signed-off-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 06a15f51cf3618e32a73871ee6a547ef7fd902b5
  Author: Alexander Couzens <lynxis@xxxxxxx>
  Date:   Mon Sep 28 11:32:42 2015 +0200

      l2tp: protect tunnel->del_work by ref_count

      There is a small chance that tunnel_free() is called before 
tunnel->del_work scheduled
      resulting in a zero pointer dereference.

      Signed-off-by: Alexander Couzens <lynxis@xxxxxxx>
      Acked-by: James Chapman <jchapman@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d2e1339f40db753286ca0a92c92a847e08c5d2de
  Author: Bendik Rønning Opstad <bro.devel@xxxxxxxxx>
  Date:   Wed Sep 23 18:49:53 2015 +0200

      tcp: Fix CWV being too strict on thin streams

      Application limited streams such as thin streams, that transmit small
      amounts of payload in relatively few packets per RTT, can be prevented
      from growing the CWND when in congestion avoidance. This leads to
      increased sojourn times for data segments in streams that often transmit
      time-dependent data.

      Currently, a connection is considered CWND limited only after having
      successfully transmitted at least one packet with new data, while at the
      same time failing to transmit some unsent data from the output queue
      because the CWND is full. Applications that produce small amounts of
      data may be left in a state where it is never considered to be CWND
      limited, because all unsent data is successfully transmitted each time
      an incoming ACK opens up for more data to be transmitted in the send
      window.

      Fix by always testing whether the CWND is fully used after successful
      packet transmissions, such that a connection is considered CWND limited
      whenever the CWND has been filled. This is the correct behavior as
      specified in RFC2861 (section 3.1).

      Cc: Andreas Petlund <apetlund@xxxxxxxxx>
      Cc: Carsten Griwodz <griff@xxxxxxxxx>
      Cc: Jonas Markussen <jonassm@xxxxxxxxxx>
      Cc: Kenneth Klette Jonassen <kennetkl@xxxxxxxxxx>
      Cc: Mads Johannessen <madsjoh@xxxxxxxxxx>
      Signed-off-by: Bendik Rønning Opstad <bro.devel+kernel@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Tested-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Tested-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5e2a5ebc3f94027d0f2ffd33d3f3adbc856775d3
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Mon Sep 28 10:26:53 2015 +0530

      cxgb4: Add HW timesptamp support for RX

      Adds support for ethtool get time stamp ioctl, which is used by
      tcpdump to get the supported time stamp types

      eg: tcpdump -i eth5 -J
      Time stamp types for eth5 (use option -j to set):
        host (Host)
        adapter_unsynced (Adapter, not synced with system time)

      Adds support for adapter unsynced mode, by adding SIOCSHWTSTAMP support
      in driver.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e4600d69ffc7c0ce9759532e2c10056bf1c0a1a7
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Sun Sep 27 15:22:44 2015 +0800

      net: Fix Hisilicon Network Subsystem Support Compilation

      This patch fixes the compilation error with arm allmodconfig, this error
      generated due to unavailability of readq() on 32-bit platform which was
      found during net-next daily compilation. In the same time, fix all the
      hns drivers compilation warnings.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: zhaungyuzeng <Yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: kenneth Lee <liguozhu@xxxxxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1273bc573ab13b9c76053fe0403dca7d8acffa78
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sat Sep 26 20:49:20 2015 +0200

      net: irda: pxaficp_ir: dmaengine conversion

      Convert pxaficp_ir to dmaengine. As pxa architecture is shifting from
      raw DMA registers access to pxa_dma dmaengine driver, convert this
      driver to dmaengine.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Tested-by: Petr Cvek <petr.cvek@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 89fa57244aa170bb344cdb5be35afdeefc219fbd
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sat Sep 26 20:49:19 2015 +0200

      net: irda: pxaficp_ir: convert to readl and writel

      Convert the pxa IRDA driver to readl and writel primitives, and remove
      another set of direct registers access. This leaves only the DMA
      registers access, which will be dealt with dmaengine conversion.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Tested-by: Petr Cvek <petr.cvek@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit be01891e4606bc6aaa2b12fbade1aca8eb467a16
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sat Sep 26 20:49:18 2015 +0200

      net: irda: pxaficp_ir: use sched_clock() for time management

      Instead of using directly the OS timer through direct register access,
      use the standard sched_clock(), which will end up in OSCR reading
      anyway.

      This is a first step for direct access register removal and machine
      specific code removal from this driver.

      This commit changes the behavior, as previously the minimum turnaround
      time was counted in 76ns steps, while with this patch it is counted in
      microsecond steps. The strictly equal formula would have been :
            while ((sched_clock() - si->last_clk) * 76 < mtt)

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b40f709a1b3100a1a9dbd824303c68757f2e25e
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 18:31:32 2015 -0300

      net: fec: Remove unneeded FEATURES_NEED_QUIESCE definition

      There is no need to have FEATURES_NEED_QUIESCE defined as we
      can simply use NETIF_F_RXCSUM instead as done in other parts
      of the driver.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 17fb0b2b90568182bc969cbe0d76fa07079267e4
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 15:22:54 2015 -0600

      net: Remove redundant oif checks in rt6_device_match

      The oif has already been checked that it is non-zero; the 2 additional
      checks on oif within that if (oif) {...} block are redundant.

      CC: YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 49d28b5642444d82bd23b9333785480d265420d1
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 21:13:48 2015 +0000

      lan78xx: Return 0 when lan78xx_suspend() has no error.

      lan78xx_suspend() may return non-zero from lan78xx_write_reg() in some 
scenario.
      Fix to return 0 when lan78xx_suspend() has no error.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 661dfc65f7981481ba2e31aaa702371e82336e56
  Author: Ivan Mikhaylov <ivan@xxxxxxxxxx>
  Date:   Fri Sep 25 11:52:27 2015 +0400

      net/ibm/emac: bump version numbers for correct work with ethtool

      The size of the MAC register dump used to be the size specified by the
      reg property in the device tree.  Userland has no good way of finding
      out that size, and it was not specified consistently for each MAC type,
      so ethtool would end up printing junk at the end of the register dump
      if the device tree didn't match the size it assumed.

      Using the new version numbers indicates unambiguously that the size of
      the MAC register dump is dependent only on the MAC type.

      Fixes: 5369c71f7ca2 ("net/ibm/emac: fix size of emac dump memory areas")
      Signed-off-by: Ivan Mikhaylov <ivan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 366f02d873575ccbcdc5f6d90698dbbe4f80f134
  Merge: 4de61ba 171bb2c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 22:19:56 2015 -0700

      Merge branch 'mlx5-next'

      Or Gerlitz says:

      ====================
      Mellanox mlx5 driver update

      Bunch of changes from the team, while warming engines for the
      upcoming SRIOV support.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 171bb2c560f45c0427ca3776a4c8f4e26e559400
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:16 2015 +0300

      net/mlx5_core: Update health syndromes

      Update new health monitored syndromes and their descriptions.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 78ccb25861d76a8fc5c678d762180e6918834200
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:15 2015 +0300

      net/mlx5_core: Fix wrong name in struct

      The name refers to syndrome so uset ext_synd instread of ext_sync.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a31208b1e11df334d443ec8cace7636150bb8ce2
  Author: Majd Dibbiny <majd@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:14 2015 +0300

      net/mlx5_core: New init and exit flow for mlx5_core

      In the new flow, we separate the pci initialization and teardown from the
      initialization and teardown of the other resources.

      init_one calls mlx5_pci_init that handles the pci resources 
initialization.
      It then calls mlx5_load_one to initialize the remainder of the resources.

      When removing a device, remove_one is invoked. However, now remove_one
      calls mlx5_unload_one to free all the resources except the pci resources.
      When mlx5_unload_one returns, mlx5_pci_close is called to free the pci
      resources.

      The above separation will allow us to implement the pci error handlers and
      suspend and resume callbacks.

      Signed-off-by: Majd Dibbiny <majd@xxxxxxxxxxxx>
      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a8ffe63e60dde2f2f05fa92dad48f6106d62f9a3
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:13 2015 +0300

      net/mlx5_core: Fix notification of page supplement error

      Some errors did not result with notifying firmware that the page request
      could not be fulfilled. Fix this and put the notification logic into a
      separate function.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit be87544de8df2b1eb34bcb5e32691287d96f9ec4
  Author: Eli Cohen <eli@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:12 2015 +0300

      net/mlx5_core: Fix async commands return code

      In case of async command completion, the error code returned should take
      into account the command completion status.

      Signed-off-by: Eli Cohen <eli@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6c3dbd2d722a6010010ad99a6890a56178385bb8
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:11 2015 +0300

      net/mlx5_core: Remove redundant "err" variable usage

      Cosmetic change.
      Do not use the an err variable just to assign and return it.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 97909302f9739c4c5664bc6fc19237ec19d53c02
  Author: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:10 2015 +0300

      net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands

      Used the output mailbox format for input mailbox.

      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 343b29f308d0a9c12579feec9d244ffc53ae99c3
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Fri Sep 25 10:49:09 2015 +0300

      net/mlx5e: Priv state flag not rolled-back upon netdev open error

      The private mlx5 state flag that indicates that the netdev is
      opened is set at the beginning of the netdev open flow.
      In case an error occured later in the mlx5 netdev open flow, this
      flag was not cleared, remaining set although the actual set is
      closed.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4de61ba234c0d5834bfec1cbe180008b9d2e1827
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Fri Sep 25 08:45:43 2015 +0200

      tools: bpf_jit_disasm: make get_last_jit_image return unsigned

      The function returns always non-negative values.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7c85af8810448d8ef59331be51e482413b5f503d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Sep 24 17:16:05 2015 -0700

      tcp: avoid reorders for TFO passive connections

      We found that a TCP Fast Open passive connection was vulnerable
      to reorders, as the exchange might look like

      [1] C -> S S <FO ...> <request>
      [2] S -> C S. ack request <options>
      [3] S -> C . <answer>

      packets [2] and [3] can be generated at almost the same time.

      If C receives the 3rd packet before the 2nd, it will drop it as
      the socket is in SYN_SENT state and expects a SYNACK.

      S will have to retransmit the answer.

      Current OOO avoidance in linux is defeated because SYNACK
      packets are attached to the LISTEN socket, while DATA packets
      are attached to the children. They might be sent by different cpus,
      and different TX queues might be selected.

      It turns out that for TFO, we created a child, which is a
      full blown socket in TCP_SYN_RECV state, and we simply can attach
      the SYNACK packet to this socket.

      This means that at the time tcp_sendmsg() pushes DATA packet,
      skb->ooo_okay will be set iff the SYNACK packet had been sent
      and TX completed.

      This removes the reorder source at the host level.

      We also removed the export of tcp_try_fastopen(), as it is no
      longer called from IPv6.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 51359bfc5b7111cada4d10e71b4dcdd1085e1a8f
  Merge: 43ae93a 635682a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 21:03:40 2015 -0700

      Merge branch 'sctp-accept-deadlock'

      Karl Heiss says:

      ====================
      sctp: Fix SCTP deadlock

      These patches fix a deadlock during accept() of an SCTP connection.

      The first patch fixes whitespace issues.

      The second patch actually fixes the deadlock race.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 635682a14427d241bab7bbdeebb48a7d7b91638e
  Author: Karl Heiss <kheiss@xxxxxxxxx>
  Date:   Thu Sep 24 12:15:07 2015 -0400

      sctp: Prevent soft lockup when sctp_accept() is called during a timeout 
event

      A case can occur when sctp_accept() is called by the user during
      a heartbeat timeout event after the 4-way handshake.  Since
      sctp_assoc_migrate() changes both assoc->base.sk and assoc->ep, the
      bh_sock_lock in sctp_generate_heartbeat_event() will be taken with
      the listening socket but released with the new association socket.
      The result is a deadlock on any future attempts to take the listening
      socket lock.

      Note that this race can occur with other SCTP timeouts that take
      the bh_lock_sock() in the event sctp_accept() is called.

       BUG: soft lockup - CPU#9 stuck for 67s! [swapper:0]
       ...
       RIP: 0010:[<ffffffff8152d48e>]  [<ffffffff8152d48e>] _spin_lock+0x1e/0x30
       RSP: 0018:ffff880028323b20  EFLAGS: 00000206
       RAX: 0000000000000002 RBX: ffff880028323b20 RCX: 0000000000000000
       RDX: 0000000000000000 RSI: ffff880028323be0 RDI: ffff8804632c4b48
       RBP: ffffffff8100bb93 R08: 0000000000000000 R09: 0000000000000000
       R10: ffff880610662280 R11: 0000000000000100 R12: ffff880028323aa0
       R13: ffff8804383c3880 R14: ffff880028323a90 R15: ffffffff81534225
       FS:  0000000000000000(0000) GS:ffff880028320000(0000) 
knlGS:0000000000000000
       CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
       CR2: 00000000006df528 CR3: 0000000001a85000 CR4: 00000000000006e0
       DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
       DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
       Process swapper (pid: 0, threadinfo ffff880616b70000, task 
ffff880616b6cab0)
       Stack:
       ffff880028323c40 ffffffffa01c2582 ffff880614cfb020 0000000000000000
       <d> 0100000000000000 00000014383a6c44 ffff8804383c3880 ffff880614e93c00
       <d> ffff880614e93c00 0000000000000000 ffff8804632c4b00 ffff8804383c38b8
       Call Trace:
       <IRQ>
       [<ffffffffa01c2582>] ? sctp_rcv+0x492/0xa10 [sctp]
       [<ffffffff8148c559>] ? nf_iterate+0x69/0xb0
       [<ffffffff814974a0>] ? ip_local_deliver_finish+0x0/0x2d0
       [<ffffffff8148c716>] ? nf_hook_slow+0x76/0x120
       [<ffffffff814974a0>] ? ip_local_deliver_finish+0x0/0x2d0
       [<ffffffff8149757d>] ? ip_local_deliver_finish+0xdd/0x2d0
       [<ffffffff81497808>] ? ip_local_deliver+0x98/0xa0
       [<ffffffff81496ccd>] ? ip_rcv_finish+0x12d/0x440
       [<ffffffff81497255>] ? ip_rcv+0x275/0x350
       [<ffffffff8145cfeb>] ? __netif_receive_skb+0x4ab/0x750
       ...

      With lockdep debugging:

       =====================================
       [ BUG: bad unlock balance detected! ]
       -------------------------------------
       CslRx/12087 is trying to release lock (slock-AF_INET) at:
       [<ffffffffa01bcae0>] sctp_generate_timeout_event+0x40/0xe0 [sctp]
       but there are no more locks to release!

       other info that might help us debug this:
       2 locks held by CslRx/12087:
       #0:  (&asoc->timers[i]){+.-...}, at: [<ffffffff8108ce1f>] 
run_timer_softirq+0x16f/0x3e0
       #1:  (slock-AF_INET){+.-...}, at: [<ffffffffa01bcac3>] 
sctp_generate_timeout_event+0x23/0xe0 [sctp]

      Ensure the socket taken is also the same one that is released by
      saving a copy of the socket before entering the timeout event
      critical section.

      Signed-off-by: Karl Heiss <kheiss@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f05940e61845951517eda02a28ccc091888aaab9
  Author: Karl Heiss <kheiss@xxxxxxxxx>
  Date:   Thu Sep 24 12:15:06 2015 -0400

      sctp: Whitespace fix

      Fix indentation in sctp_generate_heartbeat_event.

      Signed-off-by: Karl Heiss <kheiss@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 43ae93a93e8c95c5e6389dc8e11704712b1ab2e9
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Mon Sep 28 17:31:26 2015 -0700

      i40e/i40evf: check for stopped admin queue

      It's possible that while we are waiting for the spinlock, another
      entity (that owns the spinlock) has shut down the admin queue.
      If we then attempt to use the queue, we will panic.

      Add a check for this condition on the receive side. This matches
      an existing check on the send queue side.

      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c4bbac3913c0d649898a0d767728a585869a7d7d
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Mon Sep 28 11:21:48 2015 -0700

      i40e: fix VLAN inside VXLAN

      Previously to this patch, the hardware was removing
      VLAN tags from the inner header of VXLAN packets.  The
      hardware configuration can be changed to leave the
      packet alone since that is what the linux stack
      expects for this type of VLAN in VXLAN packet.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eae93fe4ff88ec0979a00c440a1aa63f92c8f367
  Merge: 34c2d9f cbfe360
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 28 20:56:02 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-28

      This series contains updates to i40e, i40evf and igb to resolve issues
      seen and reported by Red Hat.

      Kiran moves i40e_get_head() in preparation for the refactor of the Tx
      timeout logic, so that it can be used in other areas of the driver.
      Refactored the driver timeout logic by issuing a writeback request via
      a software interrupt to the hardware the first time the driver detects
      a hang.  This was due to the driver being too aggressive in resetting a
      hung queue.

      Shannon adds the GRE protocol to the transmit checksum encoding.

      Anjali fixes an issue of forcing writeback too often, which caused us to
      not benefit from NAPI.  We now disable force writeback in the clean
      routine for X710 and XL710 adapters.  The X722 adapters do not enable
      interrupt to force a writeback and benefit from WB_ON_ITR and so force
      WB is left enabled for those adapters.  Fixed a possible deadlock issue
      where sync_vsi_filters() can be called directly under RTNL or through
      the timer subtask without RTNL.  So update the flow to see if we are
      already under RTNL before trying to grab it.

      Stefan Assmann provides a fix for igb where SR-IOV was not getting
      enabled properly and we ran into a NULL pointer if the max_vfs module
      parameter is specified.  This is prevented by setting the
      IGB_FLAG_HAS_MSIX bit before calling igb_probe_vfs().

      v2: added "i40e: Fix for recursive RTNL lock during PROMISC change" patch
          to the series, as it resolves another issues seen and reported by
          Red Hat.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cbfe360a1541a32e9e28f8f8ac925d2b7979d767
  Author: Stefan Assmann <sassmann@xxxxxxxxx>
  Date:   Thu Sep 17 14:46:10 2015 +0200

      igb: assume MSI-X interrupts during initialization

      In igb_sw_init() the sequence of calls was changed from
      igb_init_queue_configuration()
      igb_init_interrupt_scheme()
      igb_probe_vfs()
      to
      igb_probe_vfs()
      igb_init_queue_configuration()
      igb_init_interrupt_scheme()

      This results in adapter->flags not having the IGB_FLAG_HAS_MSIX bit set
      during igb_probe_vfs()->igb_enable_sriov(). Therefore SR-IOV does not
      get enabled properly and we run into a NULL pointer if the max_vfs
      module parameter is specified (adapter->vf_data does not get allocated,
      crash on accessing the structure).

      [    7.419348] BUG: unable to handle kernel NULL pointer dereference at 
0000000000000048
      [    7.419367] IP: [<ffffffffa02161c6>] igb_reset+0xe6/0x5d0 [igb]
      [    7.419370] PGD 0
      [    7.419373] Oops: 0002 [#1] SMP
      [    7.419381] Modules linked in: ahci(+) libahci igb(+) i40e(+) vxlan 
ip6_udp_tunnel udp_tunnel megaraid_sas(+) ixgbe(+) mdio
      [    7.419385] CPU: 0 PID: 4 Comm: kworker/0:0 Not tainted 4.2.0+ #153
      [    7.419387] Hardware name: Dell Inc. PowerEdge R720/0C4Y3R, BIOS 1.6.0 
03/07/2013
      [...]
      [    7.419431] Call Trace:
      [    7.419442]  [<ffffffffa0217236>] igb_probe+0x8b6/0x1340 [igb]
      [    7.419447]  [<ffffffff814c7f15>] local_pci_probe+0x45/0xa0

      Prevent this by setting the IGB_FLAG_HAS_MSIX bit before calling
      igb_probe_vfs(). The real interrupt capabilities will be checked during
      igb_init_interrupt_scheme() so this is safe to do.

      Signed-off-by: Stefan Assmann <sassmann@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 56e86dd4bbeb66a7ad67e20fa045c6f51b4da571
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Aug 20 01:25:20 2015 +0000

      ARM: shmobile: r8a7791 dtsi: Add CPG/MSTP Clock Domain for sound

      797a0626e08c ("ARM: shmobile: r8a7791 dtsi: Add CPG/MSTP Clock Domain")
      added CPG/MSTP clock-cells domain support, but it was missing sound
      support. This patch adds it.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Tested-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      [horms: updated commit id referred to in changelog]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit 6507c4efd2ca4a3dccedbc5b4724f9faabf97fca
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Aug 20 01:24:44 2015 +0000

      ARM: shmobile: r8a7790 dtsi: Add CPG/MSTP Clock Domain for sound

      484adb005886 ("ARM: shmobile: r8a7790 dtsi: Add CPG/MSTP Clock Domain")
      added CPG/MSTP clock-cells domain support, but it was missing sound
      support. This patch adds it.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Tested-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      [horms: Updated commit id referred to in changelog]
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit 30e2561b95295258890b4e0366ce867e04d34a97
  Author: Anjali Singhai <anjali.singhai@xxxxxxxxx>
  Date:   Mon Sep 28 13:37:12 2015 -0700

      i40e: Fix for recursive RTNL lock during PROMISC change

      The sync_vsi_filters function can be called directly under RTNL
      or through the timer subtask without one. This was causing a deadlock.

      If sync_vsi_filters is called from a thread which held the lock,
      and in another thread the PROMISC setting got changed we would
      be executing the PROMISC change in the thread which already held
      the lock alongside the other filter update. The PROMISC change
      requires a reset if we are on a VEB, which requires it to be called
      under RTNL.

      Earlier the driver would call reset for PROMISC change without
      checking if we were already under RTNL and would try to grab it
      causing a deadlock. This patch changes the flow to see if we are
      already under RTNL before trying to grab it.

      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Signed-off-by: Kiran Patil <kiran.patil@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5804474311912c1b80601a1afee052e8df962cd4
  Author: Anjali Singhai <anjali.singhai@xxxxxxxxx>
  Date:   Fri Sep 25 18:26:13 2015 -0700

      i40e: Fix RS bit update in Tx path and disable force WB workaround

      This patch fixes the issue of forcing WB too often causing us to not
      benefit from NAPI.

      Without this patch we were forcing WB/arming interrupt too often taking
      away the benefits of NAPI and causing a performance impact.

      With this patch we disable force WB in the clean routine for X710
      and XL710 adapters. X722 adapters do not enable interrupt to force
      a WB and benefit from WB_ON_ITR and hence force WB is left enabled
      for those adapters.
      For XL710 and X710 adapters if we have less than 4 packets pending
      a software Interrupt triggered from service task will force a WB.

      This patch also changes the conditions for setting RS bit as described
      in code comments. This optimizes when the HW does a tail bump and when
      it does a WB. It also optimizes when we do a wmb.

      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c1d1791dc8b2a13c316a4e163552804361a786a4
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Sep 25 19:26:04 2015 +0000

      i40e: add GRE tunnel type to csum encoding

      Make sure the Tx checksum encoder knows about GRE protocol and sets the
      descriptor flag appropriately.

      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit b03a8c1f4c0c6f95f5addaf4a13dd3aa118c3c1a
  Author: Kiran Patil <kiran.patil@xxxxxxxxx>
  Date:   Thu Sep 24 18:13:15 2015 -0400

      i40e/i40evf: refactor tx timeout logic

      This patch modifies the driver timeout logic by issuing a writeback
      request via a software interrupt to the hardware the first time the
      driver detects a hang. The driver was too aggressive in resetting a hung
      queue, so back that off by removing logic to down the netdevice after
      too many hangs, and move the function to the service task.

      Change-ID: Ife100b9d124cd08cbdb81ab659008c1b9abbedea
      Signed-off-by: Kiran Patil <kiran.patil@xxxxxxxxx>
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1e6d6f8c1b07a5874444c3a403eb24427e8b39d3
  Author: Kiran Patil <kiran.patil@xxxxxxxxx>
  Date:   Thu Sep 24 15:43:02 2015 -0400

      i40e: Move i40e_get_head into header file

      i40e_get_head needs to be called in multiple files in a further patch,
      prepare by moving the function into a header file.

      Signed-off-by: Kiran Patil <kiran.patil@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 22ef28b43f2c70edf5618918a49cbda84795c0a5
  Author: duson <dusonlin@xxxxxxxxxx>
  Date:   Mon Sep 28 17:17:01 2015 -0700

      Input: elan_i2c - add all valid ic type for i2c/smbus

      Signed-off-by: Duson Lin <dusonlin@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit d3b367bc26ea2e07a83fe73f0ccbddd729cb1f9a
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 16:38:07 2015 -0700

      Input: zhenhua - ensure we have BITREVERSE

      It uses bitrev8(), so it must ensure that lib/bitrev.o gets included in
      vmlinux.

      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit a73b4db2a23f0bf9f98b0cb59fb1b8da26959be3
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Sep 28 15:57:24 2015 +0100

      arm-cci500: Don't enable PMU driver by default

      Disable building CCI-500 PMU driver by default.

      Reported-by: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Punit Agrawal <punit.agrawal@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: arm@xxxxxxxxxx
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit cb311494bbf08c531c4d019513f0999ea2a251f2
  Merge: 9ffecb1 0af8221
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Mon Sep 28 16:30:19 2015 -0700

      Merge tag 'imx-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux into fixes

      The i.MX fixes for 4.3:
       - One fix for i.MX6 Rex Pro board to remove a duplicated pinctrl entry
         which causes error for USB pinctrl setup.
       - Fix MC34708 PMIC interrupt level for imx53-qsrb board.

      * tag 'imx-fixes-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux:
        ARM: dts: fix usb pin control for imx-rex dts
        ARM: imx53: qsrb: fix PMIC interrupt level
        ARM: imx53: include IRQ dt-bindings header

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit d79bdc7f004404204a6ac07785f8d6717070ecdb
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Mon Sep 28 15:59:22 2015 -0700

      Input: omap4-keypad - fix memory leak

      If omap4_keypad_parse_dt() fails we returned the error code but we
      missed releasing keypad_data.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit e637d17757a10732fa5d573c18f20b3cd4d31245
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Mon Sep 28 03:52:16 2015 +0000

      perf tools: Enable event_config terms to tracepoint events

      This patch enables config terms for tracepoint perf events. Valid terms
      for tracepoint events are 'call-graph' and 'stack-size', so we can use
      different callgraph settings for each event and eliminate unnecessary
      overhead.

      Here is an example for using different call-graph config for each
      tracepoint.

        $ perf record -e syscalls:sys_enter_write/call-graph=fp/
                      -e syscalls:sys_exit_write/call-graph=no/
                      dd if=/dev/zero of=test bs=4k count=10

        $ perf report --stdio

        #
        # Total Lost Samples: 0
        #
        # Samples: 13  of event 'syscalls:sys_enter_write'
        # Event count (approx.): 13
        #
        # Children      Self  Command  Shared Object       Symbol
        # ........  ........  .......  ..................  
......................
        #
            76.92%    76.92%  dd       libpthread-2.20.so  [.] __write_nocancel
                         |
                         ---__write_nocancel

            23.08%    23.08%  dd       libc-2.20.so        [.] write
                         |
                         ---write
                            |
                            |--33.33%-- 0x2031342820736574
                            |
                            |--33.33%-- 0xa6e69207364726f
                            |
                             --33.33%-- 0x34202c7320393039
        ...

        # Samples: 13  of event 'syscalls:sys_exit_write'
        # Event count (approx.): 13
        #
        # Children      Self  Command  Shared Object       Symbol
        # ........  ........  .......  ..................  
......................
        #
            76.92%    76.92%  dd       libpthread-2.20.so  [.] __write_nocancel
            23.08%    23.08%  dd       libc-2.20.so        [.] write
             7.69%     0.00%  dd       [unknown]           [.] 
0x0a6e69207364726f
             7.69%     0.00%  dd       [unknown]           [.] 
0x2031342820736574
             7.69%     0.00%  dd       [unknown]           [.] 
0x34202c7320393039

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1443412336-120050-4-git-send-email-hekuang@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 865582c3f48e12b7ab9e260161868313e4a37f44
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Mon Sep 28 03:52:15 2015 +0000

      perf tools: Adds the tracepoint name parsing support

      Adds rules for parsing tracepoint names. Change rules of tracepoint which
      derives from PE_NAMEs into tracepoint names directly, so adding more rules
      based on tracepoint names will be easier.

      Changes v2-v3:
         - Change __event_legacy_tracepoint label in bison file to 
tracepoint_name
         - Fix formats error.

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1443412336-120050-3-git-send-email-hekuang@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ffeb883e5662e94b14948078e85812261277ad67
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Mon Sep 28 03:52:14 2015 +0000

      perf tools: Show proper error message for wrong terms of hw/sw events

      Show proper error message and show valid terms when wrong config terms
      is specified for hw/sw type perf events.

      This patch makes the original error format function formats_error_string()
      more generic, which only outputs the static config terms for hw/sw perf
      events, and prepends pmu formats for pmu events.

      Before this patch:

        $ perf record -e 'cpu-clock/freqx=200/' -a sleep 1
        invalid or unsupported event: 'cpu-clock/freqx=200/'
        Run 'perf list' for a list of valid events

         usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events

      After this patch:

        $ perf record -e 'cpu-clock/freqx=200/' -a sleep 1
        event syntax error: 'cpu-clock/freqx=200/'
                                       \___ unknown term

        valid terms: 
config,config1,config2,name,period,freq,branch_type,time,call-graph,stack-size

        Run 'perf list' for a list of valid events

         usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1443412336-120050-2-git-send-email-hekuang@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0b8891a8e62cb537b65ebc55cfbbb4ec22333c44
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Mon Sep 28 03:52:13 2015 +0000

      perf tools: Adds the config_term callback for different type events

      Currently, function config_term() is used for checking config terms of
      all types of events, while unknown terms is not reported as an error
      because pmu events have valid terms in sysfs.

      But this is wrong when unknown terms are specificed to hw/sw events.
      This patch Adds the config_term callback so we can use separate check
      routines for each type of events.

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1443412336-120050-1-git-send-email-hekuang@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ba11ba65e02836c475427ae199adfc2d8cc4a900
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:56 2015 +0300

      perf intel-pt: Add mispred-all config option to aid use with autofdo

      autofdo incorrectly expects branch flags to include either mispred or
      predicted.  In fact mispred = predicted = 0 is valid and means the flags
      are not supported, which they aren't by Intel PT.

      To make autofdo work, add a config option which will cause Intel PT
      decoder to set the mispred flag on all branches.

      Below is an example of using Intel PT with autofdo.  The example is
      also added to the Intel PT documentation.  It requires autofdo
      (https://github.com/google/autofdo) and gcc version 5.  The bubble
      sort example is from the AutoFDO tutorial 
(https://gcc.gnu.org/wiki/AutoFDO/Tutorial)
      amended to take the number of elements as a parameter.

        $ gcc-5 -O3 sort.c -o sort_optimized
        $ ./sort_optimized 30000
        Bubble sorting array of 30000 elements
        2254 ms

        $ cat ~/.perfconfig
        [intel-pt]
                mispred-all

        $ perf record -e intel_pt//u ./sort 3000
        Bubble sorting array of 3000 elements
        58 ms
        [ perf record: Woken up 2 times to write data ]
        [ perf record: Captured and wrote 3.939 MB perf.data ]
        $ perf inject -i perf.data -o inj --itrace=i100usle --strip
        $ ./create_gcov --binary=./sort --profile=inj --gcov=sort.gcov 
-gcov_version=1
        $ gcc-5 -O3 -fauto-profile=sort.gcov sort.c -o sort_autofdo
        $ ./sort_autofdo 30000
        Bubble sorting array of 30000 elements
        2155 ms

      Note there is currently no advantage to using Intel PT instead of LBR,
      but that may change in the future if greater use is made of the data.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-26-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f56fb9864c501dc85ebe40af5bf925dd07d990c0
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:55 2015 +0300

      perf inject: Add --strip option to strip out non-synthesized events

      Add a new option --strip which is used with --itrace to strip out
      non-synthesized events.  This results in a perf.data file that is
      simpler for external tools to parse.  In particular, this can be used to
      prepare a perf.data file for consumption by autofdo.

      A subsequent patch makes a change to Intel PT also to enable use with
      autofdo and gives an example of that use.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-25-git-send-email-adrian.hunter@xxxxxxxxx
      [ Made it use perf_evlist__remove() + perf_evsel__delete() ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 73117308f953afb60a1383725b7d5372feeb2433
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:54 2015 +0300

      perf inject: Remove more aux-related stuff when processing instruction 
traces

      perf inject can process instruction traces (using the --itrace option)
      which removes aux-related events and replaces them with the requested
      synthesized events.

      However there are still some leftovers, namely PERF_RECORD_ITRACE_START
      events and the original evsel (selected event) e.g. intel_pt//

      For the sake of completeness, remove them too.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-24-git-send-email-adrian.hunter@xxxxxxxxx
      [ Made it use perf_evlist__remove() + perf_evsel__delete() ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4768230ad57d4e4fc6d36c44e98e0062c89b0dc0
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:53 2015 +0300

      perf evlist: Add perf_evlist__remove()

      Add a counterpart to perf_evlist__add() that does the opposite and
      deletes the evsel.

      This will be used by perf inject to remove unwanted evsels.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-23-git-send-email-adrian.hunter@xxxxxxxxx
      [ Renamed it from perf_evlist__del() to perf_evlist__remove() and removed 
the perf_evsel__delete() call ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dddcf6abbf5946f9ec1183dd2099cede6dbe12fc
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:52 2015 +0300

      perf evlist: Add perf_evlist__id2evsel_strict()

      perf_evlist__id2evsel_strict() is the same as perf_evlist__id2evsel()
      except that it ensures that the id must match.

      This will be used by perf inject to find a specific evsel that is to be
      deleted, hence the need to match exactly.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-22-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3c5b645faee7afbd417f6127694adbd26778a9eb
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:51 2015 +0300

      perf script: Make scripting_max_stack value allow for synthesized 
callchains

      perf script has a setting to set the maximum stack depth when processing
      callchains.  The setting defaults to the hard-coded maximum definition
      PERF_MAX_STACK_DEPTH which is 127.

      It is possible, when processing instruction traces, to synthesize
      callchains.  Synthesized callchains do not have the kernel size
      limitation and are whatever size the user requests, although validation
      presently prevents the user requested a value greater that 1024.  The
      default value is 16.

      To allow for synthesized callchains, make the scripting_max_stack value
      at least the same size as the synthesized callchain size.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-21-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 44cbe7295c3808977159f500a5bcdebf12a7db5f
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:50 2015 +0300

      perf scripting python: Allow for max_stack greater than 
PERF_MAX_STACK_DEPTH

      Use the scripting_max_stack value to allow for values greater than
      PERF_MAX_STACK_DEPTH.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-20-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 03cd1fed2b8730271d3a8dbabd87989abddc33c4
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:49 2015 +0300

      perf script: Add a setting for maximum stack depth

      Add a setting for maximum stack depth in preparation for allowing for
      synthesized callchains.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-19-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 96b40f3c05f36e061fd4dde920b9e9c795a88b69
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:47 2015 +0300

      perf hists: Allow for max_stack greater than PERF_MAX_STACK_DEPTH

      Use the max_stack value instead of PERF_MAX_STACK_DEPTH so that
      arbitrary-sized callchains can be supported.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-17-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 188bb5e2ce112463428994f91291e5df6fc05521
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:46 2015 +0300

      perf report: Make max_stack value allow for synthesized callchains

      perf report has an option (--max-stack) to set the maximum stack depth
      when processing callchains.  The option defaults to the hard-coded
      maximum definition PERF_MAX_STACK_DEPTH which is 127.  The intention of
      the option is to allow the user to reduce the processing time by
      reducing the amount of the callchain that is processed.

      It is also possible, when processing instruction traces, to synthesize
      callchains.  Synthesized callchains do not have the kernel size
      limitation and are whatever size the user requests, although validation
      presently prevents the user requested a value greater that 1024.  The
      default value is 16.

      To allow for synthesized callchains, make the max_stack value at least
      the same size as the synthesized callchain size.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-16-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f14445ee72c59f32aa5cbf4d0f0330a5f62a752d
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:45 2015 +0300

      perf intel-pt: Support generating branch stack

      Add support for generating branch stack context for PT samples.  The
      decoder reports a configurable number of branches as branch context for
      each sample. Internally it keeps track of them by using a simple sliding
      window.  We also flush the last branch buffer on each sample to avoid
      overlapping intervals.

      This is useful for:

      - Reporting accurate basic block edge frequencies through the perf
        report branch view
      - Using with --branch-history to get the wider context of samples
      - Other users of LBRs

      Also the Documentation is updated.

      Examples:

        Record with Intel PT:

                perf record -e intel_pt//u ls

        Branch stacks are used by default if synthesized so:

                perf report --itrace=ile

        is the same as:

                perf report --itrace=ile -b

        Branch history can be requested also:

                perf report --itrace=igle --branch-history

      Based-on-patch-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-15-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 385e33063fb963f5cccb0a37fe539319b6481fa5
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:44 2015 +0300

      perf intel-pt: Move branch filter logic

      intel_pt_synth_branch_sample() skips synthesizing if the branch does not
      match the branch filter.  That logic was sitting in the middle of the
      function but is more efficiently placed at the start of the function, so
      move it.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-14-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 051a01b9a2c1c1ef3049973a43d9ed4ddcc946f3
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:43 2015 +0300

      perf inject: Set branch stack feature flag when synthesizing branch stacks

      The branch stack feature flag is set by 'perf record' when recording
      data that contains branch stacks.  Consequently, when 'perf inject'
      synthesizes branch stacks, the feature flag should be set also.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-13-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f86225db3aa0e394915af45eea1c3cca6f3e2dba
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:42 2015 +0300

      perf report: Skip events with null branch stacks

      A non-synthesized event might not have a branch stack if branch stacks
      have been synthesized (using itrace options).

      An example of that is when Intel PT records sched_switch events for
      decoding purposes.  Those sched_switch events do not have branch stacks
      even though the Intel PT decoder may be synthesizing other events that
      do due to the itrace options.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-12-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fb9fab66e6e3ee737e521c899684c6d684b24a22
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:41 2015 +0300

      perf report: Also do default setup for synthesized branch stacks

      The 'perf report' tool will default to displaying branch stacks (-b
      option) if they are present.  Make that also happen for synthesized
      branch stacks.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-11-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c7eced63f2f67bd06ceb2269062416db9d81d29d
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:40 2015 +0300

      perf report: Adjust sample type validation for synthesized branch stacks

      perf report looks at event sample types to determine if branch stacks
      have been sampled.  Adjust the validation to know about instruction
      tracing options.

      This change allows the use of the -b option which otherwise would
      complain with an error like:

        Error:
        Selected -b but no branch data. Did you call perf record without -b?
        # To display the perf.data header info,
        # please use --header/--header-only options.
        #

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-10-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 601897b54c7ed492a89b262dccd7c6f7faf12b30
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:39 2015 +0300

      perf auxtrace: Add option to synthesize branch stacks on samples

      Add AUX area tracing option 'l' to synthesize branch stacks on samples
      just like sample type PERF_SAMPLE_BRANCH_STACK.  This is taken into use
      by Intel PT in a subsequent patch.

      Based-on-patch-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-9-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 35ca01c117da9b8e5b60204f730cdde414735596
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:38 2015 +0300

      perf tools: Add more documentation to export-to-postgresql.py script

      Add some comments to the script and some 'views' to the created database
      that better illustrate the database structure and how it can be used.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-8-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a38f48e300f9dac30a9b2d2ce958c8dbd7def351
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:37 2015 +0300

      perf session: Warn when AUX data has been lost

      By default 'perf record' will postprocess the perf.data file to
      determine build-ids.  When that happens, the number of lost perf events
      is displayed.

      Make that also happen for AUX events.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-7-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 83e1986032dfcd3f9e9fc0d06e11d9153edae19b
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:36 2015 +0300

      perf script: Allow time to be displayed in nanoseconds

      Add option --ns to display time to 9 decimal places.  That is useful in
      some cases, for example when using Intel PT cycle accurate mode.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-6-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 116f349c5bf8c7aec4047dd6e06c310354b46e4f
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:35 2015 +0300

      perf intel-pt: Make logging slightly more efficient

      Logging is only used for debugging. Use macros to save calling into the
      functions only to return immediately when logging is not enabled.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-5-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9992c2d50a73f442653968a98a9e5f3bf4e769e9
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:34 2015 +0300

      perf intel-pt: Fix potential loop forever

      TSC packets contain only 7 bytes of TSC.  The 8th byte is assumed to
      change so infrequently that its value can be inferred.  However the
      logic must cater for a 7 byte wraparound, which it does by adding 1 to
      the top byte.

      The existing code was doing that with a while loop even though the
      addition should only need to be done once.  That logic won't work (will
      loop forever) if TSC wraps around at the 8th byte.  Theoretically that
      would take at least 10 years, unless something else went wrong.

      And what else could go wrong.  Well, if the chunks of trace data are
      processed out of order, it will make it look like the 7-byte TSC has
      gone backwards (i.e. wrapped).  If that happens 256 times then stuck in
      the while loop it will be.

      Fix that by getting rid of the unnecessary while loop.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-4-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d062ac16f53d1a24047bcc9eded5514a71c363b8
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:33 2015 +0300

      perf report: Fix sample type validation for synthesized callchains

      Processing instruction tracing data (e.g. Intel PT) can synthesize
      callchains e.g.

        $ perf record -e intel_pt//u uname
        $ perf report --stdio --itrace=ige

      However perf report's callgraph option gets extra validation, so:

        $ perf report --stdio --itrace=ige -gflat
        Error:
        Selected -g or --branch-history but no callchain data. Did
        you call 'perf record' without -g?
        # To display the perf.data header info,
        # please use --header/--header-only options.
        #

      Fix the validation to know about instruction tracing options so
      above command works.

      A side-effect of the change is that the default option to
      accumulate the callchain of child functions comes into force.
      To get the previous behaviour the --no-children option can be
      used e.g.

             $ perf report --stdio --itrace=ige -gflat --no-children

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e1791347b5d57d13326cf0114df1a3f3b1c4ca24
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Sep 25 16:15:32 2015 +0300

      perf auxtrace: Fix 'instructions' period of zero

      Instruction tracing options (i.e. --itrace) include an option for
      sampling instructions at an arbitrary period. e.g.

        --itrace=i10us

      means make an 'instructions' sample for every 10us of trace.

      Currently the logic does not distinguish between a period of
      zero and no period being specified at all, so it gets treated
      as the default period which is 100000.  That doesn't really
      make sense.

      Fix it so that zero period is accepted and treated as meaning
      "as often as possible".

      In the case of Intel PT that is the same as a period of 1 and
      a unit of 'instructions' (i.e. --itrace=i1i).

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443186956-18718-2-git-send-email-adrian.hunter@xxxxxxxxx
      [ Add a few lines describing this in the Documentation/intel-pt.txt file ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 7c422f5572667fef0db38d2046ecce69dcf0afc8
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:34:02 2015 +0200

      tools build: Build fixdep helper from perf and basic libs

      Adding the fixdep target into the Makefile.include to ease up building of
      fixdep helper, that needs to be built before we dive in to the build 
itself.
      The user can invoke the fixdep target to build the helper.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-8-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 324c824ade1cad094a21e6177b9aa7977146feeb
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:34:01 2015 +0200

      perf tools: Rename the 'single_dep' target to 'prepare'

      And use the new 'prepare' target for the $(PERF_IN) target.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-7-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9fb81323eb3085b6a47fe81d78541958ae7eaea3
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:34:00 2015 +0200

      tools build: Make the fixdep helper part of the build process

      Making the fixdep helper to be invoked within dep-cmd.

      Each user of the build framework needs to make sure fixdep exists before
      executing the build itself.

      If the build doesn't find fixdep, it falls back to the old style
      dependency tracking.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-6-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 275e2d95591e2714d6b541d4e26959381d6b2705
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:33:59 2015 +0200

      tools build: Move dependency copy into function

      So it's easier to add more functionality in the following commit.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-5-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9f7ef9854e800bc3bab3d9a527e8f8f960eec1a6
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:33:58 2015 +0200

      tools build: Add fixdep dependency helper

      For dependency tracking we currently use targets that fall out of the
      gcc -MD command. We store this info in the .cmd file and include as
      makefile during the build.

      This format put object as target and all the c and header files as
      dependencies, like:

        util/abspath.o: util/abspath.c /usr/include/stdc-predef.h util/cache.h \
         /usr/include/bits/wordsize.h /usr/include/gnu/stubs.h \
         ...

      If any of those dependency header files (krava.h below) is removed the
      build fails on:

        make[1]: *** No rule to make target 'krava.h', needed by 'inc.o'.  Stop.

      This patch adds fixdep helper, that is used by kbuild to alter the shape
      of the object dependencies like:

        source_util/abspath.o := util/abspath.c

        deps_util/abspath.o := \
          /usr/include/stdc-predef.h \
          util/cache.h \
          ...

        util/abspath.o: $(deps_util/abspath.o)

        $(deps_util/abspath.o):

      With this format the header removal won't make the build fail, because
      it'll be picked up by the last empty target defined for each header.

      As previously mentioned the fixdep tool is taken from kbuild. It's not
      complete backport, only the part that alters the standard dependency
      info was taken, the part that adds the CONFIG_* dependency logic will be
      probably taken later on.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Kai Germaschewski <kai.germaschewski@xxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0c00c3fb4e4a6ff714b7ad864f58e0fb33b3534c
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:33:57 2015 +0200

      tools build: Add test for missing include

      The current build framework fails to cope with header file removal. The
      reason is that the removed header file stays in the .cmd file target
      rule and forces the build to fail.

      This issue is fixed and explained in the following patches.

      Adding a new build test that simulates header removal.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ab6201d09b1840c7ffcd6606c1d3dae68b8b3048
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 23 12:33:56 2015 +0200

      tools build: Add Makefile.include

      To ease up build framework code setup for users.

      More shared code will be added in the following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443004442-32660-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dc240c5dc2a02e335c5bcb50ad3a1274818c8609
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sat Sep 19 16:47:07 2015 +0200

      tools lib api fs: Store tracing mountpoint for better error message

      Storing the actual tracing path mountpoint to display correct
      error message hint ('Hint:' line). The error hint rediscovers
      mountpoints, but it could be different from what we actually
      used in tracing path.

      Before we'd display debugfs mount even though tracefs was used:
        $ perf record -e sched:sched_krava ls
        event syntax error: 'sched:sched_krava'
                             \___ can't access trace events

        Error:  No permissions to read 
/sys/kernel/debug/tracing/events/sched/sched_krava
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug'
        ...

      After this change, correct mountpoint is displayed:
        $ perf record -e sched:sched_krava ls
        event syntax error: 'sched:sched_krava'
                             \___ can't access trace events

        Error:  No permissions to read 
/sys/kernel/debug/tracing/events/sched/sched_krava
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug/tracing'
        ...

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442674027-19427-1-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ab9c2bdc8947482057b81258c0128952763661cb
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 23 15:45:20 2015 -0300

      perf tools: Use __map__is_kernel() when synthesizing kernel module mmap 
records

      Equivalent and removes one more case of using dso->kernel.

        # perf record -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.768 MB perf.data (30 samples) ]

      Before:

        [root@zoo ~]# perf script --show-task --show-mmap | head -3
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: 
[0xffffffff81000000(0x1f000000) @ 0xffffffff81000000]: x [kernel.kallsyms]_text
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: [0xffffffffa0000000(0xa000) 
@ 0]: x /lib/modules/4.3.0-rc1+/kernel/drivers/acpi/video.ko
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: [0xffffffffa000a000(0x5000) 
@ 0]: x /lib/modules/4.3.0-rc1+/kernel/drivers/i2c/algos/i2c-algo-bit.ko
        #

        # perf script --show-task --show-mmap | head -3
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: 
[0xffffffff81000000(0x1f000000) @ 0xffffffff81000000]: x [kernel.kallsyms]_text
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: [0xffffffffa0000000(0xa000) 
@ 0]: x /lib/modules/4.3.0-rc1+/kernel/drivers/acpi/video.ko
         swapper 0 [0] 0.0: PERF_RECORD_MMAP -1/0: [0xffffffffa000a000(0x5000) 
@ 0]: x /lib/modules/4.3.0-rc1+/kernel/drivers/i2c/algos/i2c-algo-bit.ko
        #

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-b65xe578dwq22mzmmj5y94wr@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 045b80dd03403b8e61a29460987c231317ebfbd4
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 23 15:38:55 2015 -0300

      perf hists browser: Use the map to determine if a DSO is being used as a 
kernel

      The map is what should say if an ELF (or some other format) image is
      being used for some particular purpose, as a kernel, host or guest.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-zufousvfar0710p4qj71c32d@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit cfc5acd4c80b875d2f739d6a93562034aee5563f
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 23 15:15:54 2015 -0300

      perf top: Filter symbols based on __map__is_kernel(map)

      Instead of using dso->kernel, this is equivalent at the moment,
      and helps in reducing the accesses to dso->kernel.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-1pc2v63iphtifovw3bv0bo1v@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 64c98e7f49100b637cd20a6c63508caed6bbba7a
  Author: Malcolm Crossley <malcolm.crossley@xxxxxxxxxx>
  Date:   Mon Sep 28 11:36:52 2015 +0100

      x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing 
map

      Sanitizing the e820 map may produce extra E820 entries which would result 
in
      the topmost E820 entries being removed. The removed entries would 
typically
      include the top E820 usable RAM region and thus result in the domain 
having
      signicantly less RAM available to it.

      Fix by allowing sanitize_e820_map to use the full size of the allocated 
E820
      array.

      Signed-off-by: Malcolm Crossley <malcolm.crossley@xxxxxxxxxx>
      Reviewed-by: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>

  commit 3225031fbeb1e32b269a82eccd815128267a4bfe
  Merge: 097f70b 3a48d13
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 12:27:18 2015 -0400

      Merge branch 'stable' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile

      Pull arch/tile bugfix from Chris Metcalf:
       "This fixes a bug in 'make allmodconfig'"

      * 'stable' of 
git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile:
        tile: fix build failure

  commit 3a48d13d76c0088a988a2e4f5b4d94872bdf58f3
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Mon Sep 7 20:06:57 2015 +0530

      tile: fix build failure

      When building with allmodconfig the build was failing with the error:

      arch/tile/kernel/usb.c:70:1: warning: data definition has no type or 
storage class [enabled by default]
      arch/tile/kernel/usb.c:70:1: error: type defaults to 'int' in declaration 
of 'arch_initcall' [-Werror=implicit-int]
      arch/tile/kernel/usb.c:70:1: warning: parameter names (without types) in 
function declaration [enabled by default]
      arch/tile/kernel/usb.c:63:19: warning: 'tilegx_usb_init' defined but not 
used [-Wunused-function]

      Include linux/module.h to resolve the build failure.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 72c021738252dde5849d575a650239d6404930ee
  Author: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 12:24:23 2015 -0500

      xprtrdma: disconnect and flush cqs before freeing buffers

      Otherwise a FRMR completion can cause a touch-after-free crash.

      In xprt_rdma_destroy(), call rpcrdma_buffer_destroy() only after calling
      rpcrdma_ep_destroy().

      In rpcrdma_ep_destroy(), disconnect the cm_id first which should flush the
      qp, then drain the cqs, then destroy the qp, and finally destroy the cqs.

      Signed-off-by: Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx>
      Tested-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Signed-off-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>

  commit d0c9c93019e9b61f21ac22a5c23749873adc0038
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 24 13:59:27 2015 -0600

      EDAC: Don't allow empty DIMM labels

      Updating dimm_label to an empty string does not make much sense. Change
      the sysfs dimm_label store operation to fail a request when an input
      string is empty.

      Suggested-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: elliott@xxxxxxx
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/1443124767.25474.172.camel@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit dfc53c5e73f8b73abf920241e45eab87335ae742
  Author: Michel Thierry <michel.thierry@xxxxxxxxx>
  Date:   Mon Sep 28 13:25:12 2015 +0100

      drm/i915: Consider HW CSB write pointer before resetting the sw read 
pointer

      A previous commit resets the Context Status Buffer (CSB) read pointer in
      ring init
          commit c0a03a2e4c4e ("drm/i915: Reset CSB read pointer in ring init")

      This is generally correct, but this pointer is not reset after
      suspend/resume in some platforms (cht). In this case, the driver should
      read the register value instead of resetting the sw read counter to 0.
      Otherwise we process old events, leading to unwanted pre-emptions or
      something worse.

      But in other platforms (bdw) and also during GPU reset or power up, the
      CSBWP is reset to 0x7 (an invalid number), and in this case the read
      pointer should be set to 5 (the interrupt code will increment this
      counter one more time, and will start reading from CSB[0]).

      v2: When the CSB registers are reset, the read pointer needs to be set
      to 5, otherwise the first write (CSB[0]) won't be read (Mika).
      Replace magic numbers with GEN8_CSB_ENTRIES (6) and GEN8_CSB_PTR_MASK
      (0x07).

      Cc: Mika Kuoppala <mika.kuoppala@xxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.0+
      Signed-off-by: Lei Shen <lei.shen@xxxxxxxxx>
      Signed-off-by: Deepak S <deepak.s@xxxxxxxxx>
      Signed-off-by: Michel Thierry <michel.thierry@xxxxxxxxx>
      Reviewed-by: Mika Kuoppala <mika.kuoppala@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 0b34a166f291d255755be46e43ed5497cdd194f2
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Fri Sep 25 11:59:52 2015 +0200

      x86/xen: Support kexec/kdump in HVM guests by doing a soft reset

      Currently there is a number of issues preventing PVHVM Xen guests from
      doing successful kexec/kdump:

        - Bound event channels.
        - Registered vcpu_info.
        - PIRQ/emuirq mappings.
        - shared_info frame after XENMAPSPACE_shared_info operation.
        - Active grant mappings.

      Basically, newly booted kernel stumbles upon already set up Xen
      interfaces and there is no way to reestablish them. In Xen-4.7 a new
      feature called 'soft reset' is coming. A guest performing kexec/kdump
      operation is supposed to call SCHEDOP_shutdown hypercall with
      SHUTDOWN_soft_reset reason before jumping to new kernel. Hypervisor
      (with some help from toolstack) will do full domain cleanup (but
      keeping its memory and vCPU contexts intact) returning the guest to
      the state it had when it was first booted and thus allowing it to
      start over.

      Doing SHUTDOWN_soft_reset on Xen hypervisors which don't support it is
      probably OK as by default all unknown shutdown reasons cause domain
      destroy with a message in toolstack log: 'Unknown shutdown reason code
      5. Destroying domain.'  which gives a clue to what the problem is and
      eliminates false expectations.

      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>

  commit 2ecf91b6d8b0ee8ef38aa7ea2a0fe0cd57b6ca50
  Author: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
  Date:   Mon Sep 21 09:09:28 2015 -0400

      xen/x86: Don't try to write syscall-related MSRs for PV guests

      For PV guests these registers are set up by hypervisor and thus
      should not be written by the guest. The comment in xen_write_msr_safe()
      says so but we still write the MSRs, causing the hypervisor to
      print a warning.

      Signed-off-by: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>

  commit 24f775a6605a8ffc697c0767fc7ea85656ddb958
  Author: Juergen Gross <jgross@xxxxxxxx>
  Date:   Fri Sep 4 14:50:33 2015 +0200

      xen: use correct type for HYPERVISOR_memory_op()

      HYPERVISOR_memory_op() is defined to return an "int" value. This is
      wrong, as the Xen hypervisor will return "long".

      The sub-function XENMEM_maximum_reservation returns the maximum
      number of pages for the current domain. An int will overflow for a
      domain configured with 8TB of memory or more.

      Correct this by using the correct type.

      Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
      Signed-off-by: David Vrabel <david.vrabel@xxxxxxxxxx>

  commit 868e87ccda2461cafd4a0d39f1486eb8f4a9a6f9
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 28 10:31:50 2015 +0100

      ARM: make RiscPC depend on MMU

      RiscPC fails to build if MMU is disabled:

      arch/arm/mach-rpc/ecard.c: In function 'ecard_init_pgtables':
      arch/arm/mach-rpc/ecard.c:229:2: error: implicit declaration of function 
'pgd_offset' [-Werror=implicit-function-declaration]

      arrange for RiscPC to depend on MMU.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 9bac175d8ed0b1dd3d3611c0713666b724eeace3
  Author: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
  Date:   Fri Sep 18 17:54:30 2015 +0200

      Revert "KVM: x86: zero kvmclock_offset when vcpu0 initializes kvmclock 
system MSR"

      Shifting pvclock_vcpu_time_info.system_time on write to KVM system time
      MSR is a change of ABI.  Probably only 2.6.16 based SLES 10 breaks due
      to its custom enhancements to kvmclock, but KVM never declared the MSR
      only for one-shot initialization.  (Doc says that only one write is
      needed.)

      This reverts commit b7e60c5aedd2b63f16ef06fde4f81ca032211bc5.
      And adds a note to the definition of PVCLOCK_COUNTS_FROM_ZERO.

      Signed-off-by: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
      Acked-by: Marcelo Tosatti <mtosatti@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit a913718812d5998b3af2b6d6b5f0be4a09caebb1
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Mon Sep 28 08:03:24 2015 +0000

      Bluetooth: hci_qca: Changed unsigned long to bool

      'retransmit' being set in HCI_IBS_TX_WAKING case, using bool would be
      efficient. Initialize local bool to false.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 3cef072d3bbd4344823545e50d8cb240a6d4635d
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Fri Sep 11 06:28:08 2015 -0700

      watchdog: iTCO: Fix dependencies on I2C

      If I2C is built as module, the iTCO watchdog driver must be built as 
module
      as well. I2C_I801 must only be selected if I2C is configured.

      This fixes the following build errors, seen if I2C=m and ITCO_WDT=y.

      i2c-i801.c:(.text+0x2bf055): undefined reference to `i2c_del_adapter'
      i2c-i801.c:(.text+0x2c13e0): undefined reference to `i2c_add_adapter'
      i2c-i801.c:(.text+0x2c17bd): undefined reference to `i2c_new_device'

      Fixes: 2a7a0e9bf7b3 ("watchdog: iTCO_wdt: Add support for TCO on Intel 
Sunrisepoint")
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Wim Van Sebroeck <wim@xxxxxxxxx>

  commit 898e6861ff7cfc9f539b57859a27fbd1fe4298ae
  Author: Noralf Trønnes <noralf@xxxxxxxxxxx>
  Date:   Wed Jun 17 16:04:04 2015 +0200

      watchdog: bcm2835: Fix poweroff behaviour

      Currently poweroff/halt results in a reboot on the Raspberry Pi.
      The firmware uses the RSTS register to know which partiton to
      boot from. The partiton value is spread into bits
      0, 2, 4, 6, 8, 10. Partiton 63 is a special partition used by
      the firmware to indicate halt.

      The firmware made this change in 19 Aug 2013 and was matched
      by the downstream commit:
      Changes for new NOOBS multi partition booting from gsh

      Signed-off-by: Noralf Trønnes <noralf@xxxxxxxxxxx>
      Tested-by: Stephen Warren <swarren@xxxxxxxxxxxxx>
      Acked-by: Stephen Warren <swarren@xxxxxxxxxxxxx>
      Reviewed-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Wim Van Sebroeck <wim@xxxxxxxxx>

  commit c73318f43d3967e3ce810665d9c74a7d238d24d1
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 13:06:09 2015 +0200

      watchdog: Fix module autoload for OF platform driver

      These platform drivers have a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Reviewed-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Wim Van Sebroeck <wim@xxxxxxxxx>

  commit 6e06780a98f149f131d46c1108d4ae27f05a9357
  Author: Ashok Raj <ashok.raj@xxxxxxxxx>
  Date:   Mon Sep 28 09:21:43 2015 +0200

      x86/mce: Don't clear shared banks on Intel when offlining CPUs

      It is not safe to clear global MCi_CTL banks during CPU offline
      or suspend/resume operations. These MSRs are either
      thread-scoped (meaning private to a thread), or core-scoped
      (private to threads in that core only), or with a socket scope:
      visible and controllable from all threads in the socket.

      When we offline a single CPU, clearing those MCi_CTL bits will
      stop signaling for all the shared, i.e., socket-wide resources,
      such as LLC, iMC, etc.

      In addition, it might be possible to compromise the integrity of
      an Intel Secure Guard eXtentions (SGX) system if the attacker
      has control of the host system and is able to inject errors
      which would be otherwise ignored when MCi_CTL bits are cleared.

      Hence on SGX enabled systems, if MCi_CTL is cleared, SGX gets
      disabled.

      Tested-by: Serge Ayoun <serge.ayoun@xxxxxxxxx>
      Signed-off-by: Ashok Raj <ashok.raj@xxxxxxxxx>
      [ Cleanup text. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441391390-16985-1-git-send-email-ashok.raj@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0d44975d1e2791f6df2b84b182f49d815ba3c9e0
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Sat Sep 26 14:47:17 2015 +0200

      x86/kgdb: Replace bool_int_array[NR_CPUS] with bitmap

      Straigntforward conversion from:

          int was_in_debug_nmi[NR_CPUS]

      to:

          DECLARE_BITMAP(was_in_debug_nmi, NR_CPUS)

      Saves about 2 kbytes in BSS for NR_CPUS=512.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jason Wessel <jason.wessel@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443271638-2568-1-git-send-email-dvlasenk@xxxxxxxxxx
      [ Tidied up the code a bit. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit bc5f2ab11ca6dda4a4826e7e78d5365d7c3e1569
  Author: Rodrigo Vivi <rodrigo.vivi@xxxxxxxxx>
  Date:   Wed Sep 23 11:32:36 2015 -0700

      drm/i915/skl: Don't call intel_prepare_ddi when encoder list isn't yet 
initialized.

      In case something goes wrong with power well initialization we were 
calling
      intel_prepare_ddi during boot while encoder list isnt't initilized.

      [    9.618747] i915 0000:00:02.0: Invalid ROM contents
      [    9.631446] [drm] failed to find VBIOS tables
      [    9.720036] BUG: unable to handle kernel NULL pointer dereference at 
00000000
      00000058
      [    9.721986] IP: [<ffffffffa014eb72>] ddi_get_encoder_port+0x82/0x190 
[i915]
      [    9.723736] PGD 0
      [    9.724286] Oops: 0000 [#1] PREEMPT SMP
      [    9.725386] Modules linked in: intel_powerclamp snd_hda_intel(+) 
coretemp crc
      32c_intel snd_hda_codec snd_hda_core serio_raw snd_pcm snd_timer i915(+) 
parport
      _pc parport pinctrl_sunrisepoint pinctrl_intel nfsd nfs_acl
      [    9.730635] CPU: 0 PID: 497 Comm: systemd-udevd Not tainted 
4.3.0-rc2-eywa-10
      967-g72de2cfd-dirty #2
      [    9.732785] Hardware name: Intel Corporation Cannonlake Client 
platform/Skyla
      ke DT DDR4 RVP8, BIOS CNLSE2R1.R00.X021.B00.1508040310 08/04/2015
      [    9.735785] task: ffff88008a704700 ti: ffff88016a1ac000 task.ti: 
ffff88016a1a
      c000
      [    9.737584] RIP: 0010:[<ffffffffa014eb72>]  [<ffffffffa014eb72>] 
ddi_get_enco
      der_port+0x82/0x190 [i915]
      [    9.739934] RSP: 0000:ffff88016a1af710  EFLAGS: 00010296
      [    9.741184] RAX: 000000000000004e RBX: ffff88008a9edc98 RCX: 
0000000000000001
      [    9.742934] RDX: 000000000000004e RSI: ffffffff81fc1e82 RDI: 
00000000ffffffff
      [    9.744634] RBP: ffff88016a1af730 R08: 0000000000000000 R09: 
0000000000000578
      [    9.746333] R10: 0000000000001065 R11: 0000000000000578 R12: 
fffffffffffffff8
      [    9.748033] R13: ffff88016a1af7a8 R14: ffff88016a1af794 R15: 
0000000000000000
      [    9.749733] FS:  00007eff2e1e07c0(0000) GS:ffff88016fc00000(0000) 
knlGS:00000
      00000000000
      [    9.751683] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [    9.753083] CR2: 0000000000000058 CR3: 000000016922b000 CR4: 
00000000003406f0
      [    9.754782] Stack:
      [    9.755332]  ffff88008a9edc98 ffff88008a9ed800 ffffffffa01d07b0 
00000000fffb9
      09e
      [    9.757232]  ffff88016a1af7d8 ffffffffa0154ea7 0000000000000246 
ffff88016a370
      080
      [    9.759182]  ffff88016a370080 ffff88008a9ed800 0000000000000246 
ffff88008a9ed
      c98
      [    9.761132] Call Trace:
      [    9.761782]  [<ffffffffa0154ea7>] intel_prepare_ddi+0x67/0x860 [i915]
      [    9.763332]  [<ffffffff81a56996>] ? 
_raw_spin_unlock_irqrestore+0x26/0x40
      [    9.765031]  [<ffffffffa00fad01>] ? gen9_read32+0x141/0x360 [i915]
      [    9.766531]  [<ffffffffa00b43e1>] skl_set_power_well+0x431/0xa80 [i915]
      [    9.768181]  [<ffffffffa00b4a63>] skl_power_well_enable+0x13/0x20 
[i915]
      [    9.769781]  [<ffffffffa00b2188>] intel_power_well_enable+0x28/0x50 
[i915]
      [    9.771481]  [<ffffffffa00b4d52>] intel_display_power_get+0x92/0xc0 
[i915]
      [    9.773180]  [<ffffffffa00b4fcb>] 
intel_display_set_init_power+0x3b/0x40 [i91
      5]
      [    9.774980]  [<ffffffffa00b5170>] 
intel_power_domains_init_hw+0x120/0x520 [i9
      15]
      [    9.776780]  [<ffffffffa0194c61>] i915_driver_load+0xb21/0xf40 [i915]

      So let's protect this case.

      My first attempt was to remove the intel_prepare_ddi, but Daniel had 
pointed out
      this is really needed to restore those registers values. And Imre pointed 
out
      that this case was without the flag protection and this was actually 
where things
      were going bad. So I've just checked and this indeed solves my issue.

      The regressing intel_prepare_ddi call was added in

      commit 1d2b9526a790d55b7ae870934a74937081f62de2
      Author: Damien Lespiau <damien.lespiau@xxxxxxxxx>
      Date:   Fri Mar 6 18:50:53 2015 +0000

          drm/i915/skl: Restore the DDI translation tables when enabling PW1

      Cc: Imre Deak <imre.deak@xxxxxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Rodrigo Vivi <rodrigo.vivi@xxxxxxxxx>
      Reviewed-by: Imre Deak <imre.deak@xxxxxxxxx>
      [Jani: regression reference]
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 95bc06ef049b808a067327bd8490b608b47e3870
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Sun Sep 13 11:24:02 2015 +0200

      m68k/defconfig: Update defconfigs for v4.3-rc1

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>

  commit 8474ba74193d302e8340dddd1e16c85cc4b98caf
  Author: Andreas Schwab <schwab@xxxxxxxxxxxxxx>
  Date:   Wed Sep 23 23:12:09 2015 +0200

      m68k: Define asmlinkage_protect

      Make sure the compiler does not modify arguments of syscall functions.
      This can happen if the compiler generates a tailcall to another
      function.  For example, without asmlinkage_protect sys_openat is compiled
      into this function:

      sys_openat:
        clr.l %d0
        move.w 18(%sp),%d0
        move.l %d0,16(%sp)
        jbra do_sys_open

      Note how the fourth argument is modified in place, modifying the register
      %d4 that gets restored from this stack slot when the function returns to
      user-space.  The caller may expect the register to be unmodified across
      system calls.

      Signed-off-by: Andreas Schwab <schwab@xxxxxxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 7f843dab134b7ce8804b67cca2271267d3a0213d
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Sun Sep 13 11:49:13 2015 +0200

      m68k: Wire up membarrier

      $ ./membarrier_test
      membarrier MEMBARRIER_CMD_QUERY syscall available.
      membarrier: MEMBARRIER_CMD_SHARED success.
      membarrier: tests done!
      $

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Greg Ungerer <gerg@xxxxxxxxxxx>

  commit b92858f2be96f49c483436e851a4667543ab5768
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Sun Sep 6 12:01:40 2015 +0200

      m68k: Wire up userfaultfd

      $ ./userfaultfd 10 99
      nr_pages: 2560, nr_pages_per_cpu: 2560
      bounces: 98, mode: racing, userfaults: 1121
      bounces: 97, mode: rnd, userfaults: 977
      bounces: 96, mode:, userfaults: 1119
      bounces: 95, mode: rnd racing ver poll, userfaults: 1040
      bounces: 94, mode: racing ver poll, userfaults: 1022
      bounces: 93, mode: rnd ver poll, userfaults: 946
      bounces: 92, mode: ver poll, userfaults: 1115
      bounces: 91, mode: rnd racing poll, userfaults: 977
      bounces: 90, mode: racing poll, userfaults: 899
      bounces: 89, mode: rnd poll, userfaults: 881
      bounces: 88, mode: poll, userfaults: 1069
      bounces: 87, mode: rnd racing ver, userfaults: 1114
      bounces: 86, mode: racing ver, userfaults: 1109
      bounces: 85, mode: rnd ver, userfaults: 1165
      bounces: 84, mode: ver, userfaults: 1107
      bounces: 83, mode: rnd racing, userfaults: 1134
      bounces: 82, mode: racing, userfaults: 1105
      bounces: 81, mode: rnd, userfaults: 1323
      bounces: 80, mode:, userfaults: 1103
      bounces: 79, mode: rnd racing ver poll, userfaults: 909
      bounces: 78, mode: racing ver poll, userfaults: 1095
      bounces: 77, mode: rnd ver poll, userfaults: 951
      bounces: 76, mode: ver poll, userfaults: 1099
      bounces: 75, mode: rnd racing poll, userfaults: 1035
      bounces: 74, mode: racing poll, userfaults: 1097
      bounces: 73, mode: rnd poll, userfaults: 1159
      bounces: 72, mode: poll, userfaults: 1042
      bounces: 71, mode: rnd racing ver, userfaults: 848
      bounces: 70, mode: racing ver, userfaults: 1093
      bounces: 69, mode: rnd ver, userfaults: 892
      bounces: 68, mode: ver, userfaults: 1091
      bounces: 67, mode: rnd racing, userfaults: 1219
      bounces: 66, mode: racing, userfaults: 1089
      bounces: 65, mode: rnd, userfaults: 988
      bounces: 64, mode:, userfaults: 1087
      bounces: 63, mode: rnd racing ver poll, userfaults: 882
      bounces: 62, mode: racing ver poll, userfaults: 984
      bounces: 61, mode: rnd ver poll, userfaults: 701
      bounces: 60, mode: ver poll, userfaults: 1071
      bounces: 59, mode: rnd racing poll, userfaults: 1137
      bounces: 58, mode: racing poll, userfaults: 1032
      bounces: 57, mode: rnd poll, userfaults: 911
      bounces: 56, mode: poll, userfaults: 1079
      bounces: 55, mode: rnd racing ver, userfaults: 1106
      bounces: 54, mode: racing ver, userfaults: 1077
      bounces: 53, mode: rnd ver, userfaults: 886
      bounces: 52, mode: ver, userfaults: 1075
      bounces: 51, mode: rnd racing, userfaults: 1101
      bounces: 50, mode: racing, userfaults: 1073
      bounces: 49, mode: rnd, userfaults: 1070
      bounces: 48, mode:, userfaults: 1071
      bounces: 47, mode: rnd racing ver poll, userfaults: 1077
      bounces: 46, mode: racing ver poll, userfaults: 910
      bounces: 45, mode: rnd ver poll, userfaults: 1063
      bounces: 44, mode: ver poll, userfaults: 1028
      bounces: 43, mode: rnd racing poll, userfaults: 1043
      bounces: 42, mode: racing poll, userfaults: 1065
      bounces: 41, mode: rnd poll, userfaults: 912
      bounces: 40, mode: poll, userfaults: 1063
      bounces: 39, mode: rnd racing ver, userfaults: 880
      bounces: 38, mode: racing ver, userfaults: 1061
      bounces: 37, mode: rnd ver, userfaults: 1144
      bounces: 36, mode: ver, userfaults: 1059
      bounces: 35, mode: rnd racing, userfaults: 967
      bounces: 34, mode: racing, userfaults: 1057
      bounces: 33, mode: rnd, userfaults: 1076
      bounces: 32, mode:, userfaults: 1055
      bounces: 31, mode: rnd racing ver poll, userfaults: 997
      bounces: 30, mode: racing ver poll, userfaults: 1053
      bounces: 29, mode: rnd ver poll, userfaults: 968
      bounces: 28, mode: ver poll, userfaults: 978
      bounces: 27, mode: rnd racing poll, userfaults: 1008
      bounces: 26, mode: racing poll, userfaults: 1049
      bounces: 25, mode: rnd poll, userfaults: 900
      bounces: 24, mode: poll, userfaults: 1047
      bounces: 23, mode: rnd racing ver, userfaults: 988
      bounces: 22, mode: racing ver, userfaults: 1045
      bounces: 21, mode: rnd ver, userfaults: 1027
      bounces: 20, mode: ver, userfaults: 1043
      bounces: 19, mode: rnd racing, userfaults: 1017
      bounces: 18, mode: racing, userfaults: 1041
      bounces: 17, mode: rnd, userfaults: 979
      bounces: 16, mode:, userfaults: 1039
      bounces: 15, mode: rnd racing ver poll, userfaults: 1134
      bounces: 14, mode: racing ver poll, userfaults: 1037
      bounces: 13, mode: rnd ver poll, userfaults: 1046
      bounces: 12, mode: ver poll, userfaults: 1035
      bounces: 11, mode: rnd racing poll, userfaults: 1060
      bounces: 10, mode: racing poll, userfaults: 1033
      bounces: 9, mode: rnd poll, userfaults: 1003
      bounces: 8, mode: poll, userfaults: 929
      bounces: 7, mode: rnd racing ver, userfaults: 964
      bounces: 6, mode: racing ver, userfaults: 1029
      bounces: 5, mode: rnd ver, userfaults: 1053
      bounces: 4, mode: ver, userfaults: 1027
      bounces: 3, mode: rnd racing, userfaults: 863
      bounces: 2, mode: racing, userfaults: 1025
      bounces: 1, mode: rnd, userfaults: 1043
      bounces: 0, mode:, userfaults: 950

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Greg Ungerer <gerg@xxxxxxxxxxx>

  commit 5b3f33eb408ad06acf59b09fe0550bf3756e320a
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Sun Sep 6 11:59:27 2015 +0200

      m68k: Wire up direct socket calls

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Greg Ungerer <gerg@xxxxxxxxxxx>

  commit 18ab2cd3ee9d52dc64c5ae984146a261a328c4e8
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Sun Sep 27 23:25:50 2015 +0800

      perf/core, perf/x86: Change needlessly global functions and a variable to 
static

      Fixes various sparse warnings.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/70c14234da1bed6e3e67b9c419e2d5e376ab4f32.1443367286.git.geliangtang@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6afc0c269c3d20cde05515b00ede00e91fee0be5
  Merge: 968d712 097f70b
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Sep 28 08:06:57 2015 +0200

      Merge branch 'linus' into perf/core, to pick up fixes before applying new 
changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7c4f1c694bf84eac538bee3e411aed10ae617d46
  Merge: 9ffecb1 19a5ecd
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Sep 28 08:03:52 2015 +0200

      Merge branch 'for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu into core/urgent

      Pull RCU fixes from Paul E. McKenney, for two regressions
      introduced in this merge window:

        - Fix bug with recent GCCs.
        - Fix false positive lockdep splat.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 34c2d9fb0498c066afbe610b15e18995fd8be792
  Author: Ian Wilson <iwilson@xxxxxxxxxxx>
  Date:   Thu Sep 24 11:20:11 2015 -0700

      bridge: Allow forward delay to be cfgd when STP enabled

      Allow bridge forward delay to be configured when Spanning Tree is enabled.

      Signed-off-by: Ian Wilson <iwilson@xxxxxxxxxxx>
      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1a5e251996e1b602f2ddc9261ee9de0ca1875bfa
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sun Sep 27 17:13:55 2015 -0700

      Input: serio - fix blocking of parport

      If parkbd_allocate_serio() fails to allocate memory we are releasing the
      parport but we missed unregistering the device. As a result this device
      with exclusive access to that parport remains registered. And no other
      device will be able to use that parport even though this driver has
      failed to load.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit e5a5d92d9dc36055b971d79e408e345f5ce88701
  Author: Eric Benard <eric@xxxxxxxxxx>
  Date:   Wed Sep 23 17:07:28 2015 +0200

      mxc_nand: fix copy_spare

      it was broken by 35d5d20efad8a04c8c002c7f31241dff973977a6
      "mtd: mxc_nand: cleanup copy_spare function"

      else we get the following error :
      [   22.709507] ubi0: attaching mtd3
      [   23.613470] ubi0: scanning is finished
      [   23.617278] ubi0: empty MTD device detected
      [   23.623219] Unhandled fault: imprecise external abort (0x1c06) at 
0x9e62f0ec
      [   23.630291] pgd = 9df80000
      [   23.633005] [9e62f0ec] *pgd=8e60041e(bad)
      [   23.637064] Internal error: : 1c06 [#1] SMP ARM
      [   23.641605] Modules linked in:
      [   23.644687] CPU: 0 PID: 99 Comm: ubiattach Not tainted 4.2.0-dirty #22
      [   23.651222] Hardware name: Freescale i.MX53 (Device Tree Support)
      [   23.657322] task: 9e687300 ti: 9dcfc000 task.ti: 9dcfc000
      [   23.662744] PC is at memcpy16_toio+0x4c/0x74
      [   23.667026] LR is at mxc_nand_command+0x484/0x640
      [   23.671739] pc : [<803f9c08>]    lr : [<803faeb0>]    psr: 60000013
      [   23.671739] sp : 9dcfdb10  ip : 9e62f0ea  fp : 9dcfdb1c
      [   23.683222] r10: a09c1000  r9 : 0000001a  r8 : ffffffff
      [   23.688453] r7 : ffffffff  r6 : 9e674810  r5 : 9e674810  r4 : 000000b6
      [   23.694985] r3 : a09c16a4  r2 : a09c16a4  r1 : a09c16a4  r0 : 0000ffff
      [   23.701521] Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  
Segment user
      [   23.708662] Control: 10c5387d  Table: 8df80019  DAC: 00000015
      [   23.714413] Process ubiattach (pid: 99, stack limit = 0x9dcfc210)
      [   23.720514] Stack: (0x9dcfdb10 to 0x9dcfe000)
      [   23.724881] db00:                                     9dcfdb6c 
9dcfdb20 803faeb0 803f9bc8
      [   23.733069] db20: 803f227c 803f9b74 ffffffff 9e674810 9e674810 
9e674810 00000040 9e62f010
      [   23.741255] db40: 803faa2c 9e674b40 9e674810 803faa2c 00000400 
803faa2c 00000000 9df42800
      [   23.749441] db60: 9dcfdb9c 9dcfdb70 803f2024 803faa38 9e4201cc 
00000000 803f0a78 9e674b40
      [   23.757627] db80: 803f1f80 9e674810 00000400 00000400 9dcfdc14 
9dcfdba0 803f3bd8 803f1f8c
      [   23.765814] dba0: 9e4201cc 00000000 00000580 00000000 00000000 
800718c0 0000007f 00001000
      [   23.774000] dbc0: 9df42800 000000e0 00000000 00000000 9e4201cc 
00000000 00000000 00000000
      [   23.782186] dbe0: 00000580 00000580 00000000 9e674810 9dcfdc20 
9dcfdce8 9df42800 00580000
      [   23.790372] dc00: 00000000 00000400 9dcfdc6c 9dcfdc18 803f3f94 
803f39a4 9dcfdc20 00000000
      [   23.798558] dc20: 00000000 00000400 00000000 00000000 00000000 
00000000 9df42800 00000000
      [   23.806744] dc40: 9dcfdd0c 00580000 00000000 00000400 00000000 
9df42800 9dee1000 9d802000
      [   23.814930] dc60: 9dcfdc94 9dcfdc70 803eb63c 803f3f38 00000400 
9dcfdce8 9df42800 dead4ead
      [   23.823116] dc80: 803eb5f4 00000000 9dcfdcc4 9dcfdc98 803e82ac 
803eb600 00000400 9dcfdce8
      [   23.831301] dca0: 9df42800 00000400 9dee0000 00000000 00000400 
00000000 9dcfdd1c 9dcfdcc8
      [   23.839488] dcc0: 80406048 803e8230 00000400 9dcfdce8 9df42800 
9dcfdc78 00000008 00000000
      [   23.847673] dce0: 00000000 00000000 00000000 00000004 00000000 
9df42800 9dee0000 00000000
      [   23.855859] dd00: 9d802030 00000000 9dc8b214 9d802000 9dcfdd44 
9dcfdd20 804066cc 80405f50
      [   23.864047] dd20: 00000400 9dc8b200 9d802030 9df42800 9dee0000 
9dc8b200 9dcfdd84 9dcfdd48
      [   23.872233] dd40: 8040a544 804065ac 9e401c80 000080d0 9dcfdd84 
00000001 800fc828 9df42400
      [   23.880418] dd60: 00000000 00000080 9dc8b200 9dc8b200 9dc8b200 
9dee0000 9dcfdddc 9dcfdd88
      [   23.888605] dd80: 803fb560 8040a440 9dcfddc4 9dcfdd98 800f1428 
9dee1000 a0acf000 00000000
      [   23.896792] dda0: 00000000 ffffffff 00000006 00000000 9dee0000 
9dee0000 00005600 00000080
      [   23.904979] ddc0: 9dc8b200 a0acf000 9dc8b200 8112514c 9dcfde24 
9dcfdde0 803fc08c 803fb4f0
      [   23.913165] dde0: 9e401c80 00000013 9dcfde04 9dcfddf8 8006bbf8 
8006ba00 9dcfde24 00000000
      [   23.921351] de00: 9dee0000 00000065 9dee0000 00000001 9dc8b200 
8112514c 9dcfde84 9dcfde28
      [   23.929538] de20: 8040afa0 803fb948 ffffffff 00000000 9dc8b214 
9dcfde40 800f1428 800f11dc
      [   23.937724] de40: 9dc8b21c 9dc8b20c 9dc8b204 9dee1000 9dc8b214 
8069bb60 fffff000 fffff000
      [   23.945911] de60: 9e7b5400 00000000 9dee0000 9dee1000 00001000 
9e7b5400 9dcfdecc 9dcfde88
      [   23.954097] de80: 803ff1bc 8040a630 9dcfdea4 9dcfde98 00000800 
00000800 9dcfdecc 9dcfdea8
      [   23.962284] dea0: 803e8f6c 00000000 7e87ab70 9e7b5400 80113e30 
00000003 9dcfc000 00000000
      [   23.970470] dec0: 9dcfdf04 9dcfded0 804008cc 803feb98 ffffffff 
00000003 00000000 00000000
      [   23.978656] dee0: 00000000 00000000 9e7cb000 9dc193e0 7e87ab70 
9dd92140 9dcfdf7c 9dcfdf08
      [   23.986842] df00: 80113b5c 8040080c 800fbed8 8006bbf0 9e7cb000 
00000003 9e7cb000 9dd92140
      [   23.995029] df20: 9dc193e0 9dd92148 9dcfdf4c 9dcfdf38 8011022c 
800fbe78 8000f9cc 9e687300
      [   24.003216] df40: 9dcfdf6c 9dcfdf50 8011f798 8007ffe8 7e87ab70 
9dd92140 00000003 9dd92140
      [   24.011402] df60: 40186f40 7e87ab70 9dcfc000 00000000 9dcfdfa4 
9dcfdf80 80113e30 8011373c
      [   24.019588] df80: 7e87ab70 7e87ab70 7e87aea9 00000036 8000fb84 
9dcfc000 00000000 9dcfdfa8
      [   24.027775] dfa0: 8000f9a0 80113e00 7e87ab70 7e87ab70 00000003 
40186f40 7e87ab70 00000000
      [   24.035962] dfc0: 7e87ab70 7e87ab70 7e87aea9 00000036 00000000 
00000000 76fd1f70 00000000
      [   24.044148] dfe0: 76f80f8c 7e87ab28 00009810 76f80fc4 60000010 
00000003 00000000 00000000
      [   24.052328] Backtrace:
      [   24.054806] [<803f9bbc>] (memcpy16_toio) from [<803faeb0>] 
(mxc_nand_command+0x484/0x640)
      [   24.062996] [<803faa2c>] (mxc_nand_command) from [<803f2024>] 
(nand_write_page+0xa4/0x154)
      [   24.071264]  r10:9df42800 r9:00000000 r8:803faa2c r7:00000400 
r6:803faa2c r5:9e674810
      [   24.079180]  r4:9e674b40
      [   24.081738] [<803f1f80>] (nand_write_page) from [<803f3bd8>] 
(nand_do_write_ops+0x240/0x444)
      [   24.090180]  r8:00000400 r7:00000400 r6:9e674810 r5:803f1f80 
r4:9e674b40
      [   24.096970] [<803f3998>] (nand_do_write_ops) from [<803f3f94>] 
(nand_write+0x68/0x88)
      [   24.104804]  r10:00000400 r9:00000000 r8:00580000 r7:9df42800 
r6:9dcfdce8 r5:9dcfdc20
      [   24.112719]  r4:9e674810
      [   24.115287] [<803f3f2c>] (nand_write) from [<803eb63c>] 
(part_write+0x48/0x50)
      [   24.122514]  r10:9d802000 r9:9dee1000 r8:9df42800 r7:00000000 
r6:00000400 r5:00000000
      [   24.130429]  r4:00580000
      [   24.132989] [<803eb5f4>] (part_write) from [<803e82ac>] 
(mtd_write+0x88/0xa0)
      [   24.140129]  r5:00000000 r4:803eb5f4
      [   24.143748] [<803e8224>] (mtd_write) from [<80406048>] 
(ubi_io_write+0x104/0x65c)
      [   24.151235]  r7:00000000 r6:00000400 r5:00000000 r4:9dee0000
      [   24.156968] [<80405f44>] (ubi_io_write) from [<804066cc>] 
(ubi_io_write_ec_hdr+0x12c/0x190)
      [   24.165323]  r10:9d802000 r9:9dc8b214 r8:00000000 r7:9d802030 
r6:00000000 r5:9dee0000
      [   24.173239]  r4:9df42800
      [   24.175798] [<804065a0>] (ubi_io_write_ec_hdr) from [<8040a544>] 
(ubi_early_get_peb+0x110/0x1f0)
      [   24.184587]  r6:9dc8b200 r5:9dee0000 r4:9df42800
      [   24.189262] [<8040a434>] (ubi_early_get_peb) from [<803fb560>] 
(create_vtbl+0x7c/0x238)
      [   24.197271]  r10:9dee0000 r9:9dc8b200 r8:9dc8b200 r7:9dc8b200 
r6:00000080 r5:00000000
      [   24.205187]  r4:9df42400
      [   24.207746] [<803fb4e4>] (create_vtbl) from [<803fc08c>] 
(ubi_read_volume_table+0x750/0xa64)
      [   24.216187]  r10:8112514c r9:9dc8b200 r8:a0acf000 r7:9dc8b200 
r6:00000080 r5:00005600
      [   24.224103]  r4:9dee0000
      [   24.226662] [<803fb93c>] (ubi_read_volume_table) from [<8040afa0>] 
(ubi_attach+0x97c/0x152c)
      [   24.235103]  r10:8112514c r9:9dc8b200 r8:00000001 r7:9dee0000 
r6:00000065 r5:9dee0000
      [   24.243018]  r4:00000000
      [   24.245579] [<8040a624>] (ubi_attach) from [<803ff1bc>] 
(ubi_attach_mtd_dev+0x630/0xbac)
      [   24.253673]  r10:9e7b5400 r9:00001000 r8:9dee1000 r7:9dee0000 
r6:00000000 r5:9e7b5400
      [   24.261588]  r4:fffff000
      [   24.264148] [<803feb8c>] (ubi_attach_mtd_dev) from [<804008cc>] 
(ctrl_cdev_ioctl+0xcc/0x1cc)
      [   24.272589]  r10:00000000 r9:9dcfc000 r8:00000003 r7:80113e30 
r6:9e7b5400 r5:7e87ab70
      [   24.280505]  r4:00000000
      [   24.283070] [<80400800>] (ctrl_cdev_ioctl) from [<80113b5c>] 
(do_vfs_ioctl+0x42c/0x6c4)
      [   24.291077]  r6:9dd92140 r5:7e87ab70 r4:9dc193e0
      [   24.295753] [<80113730>] (do_vfs_ioctl) from [<80113e30>] 
(SyS_ioctl+0x3c/0x64)
      [   24.303066]  r10:00000000 r9:9dcfc000 r8:7e87ab70 r7:40186f40 
r6:9dd92140 r5:00000003
      [   24.310981]  r4:9dd92140
      [   24.313549] [<80113df4>] (SyS_ioctl) from [<8000f9a0>] 
(ret_fast_syscall+0x0/0x54)
      [   24.321123]  r9:9dcfc000 r8:8000fb84 r7:00000036 r6:7e87aea9 
r5:7e87ab70 r4:7e87ab70
      [   24.328957] Code: e1c300b0 e1510002 e1a03001 1afffff9 (e89da800)
      [   24.335066] ---[ end trace ab1cb17887f21bbb ]---
      [   24.340249] Unhandled fault: imprecise external abort (0x1c06) at 
0x7ee8bcf0
      [   24.347310] pgd = 9df3c000
      [   24.350023] [7ee8bcf0] *pgd=8dcbf831, *pte=8eb3334f, *ppte=8eb3383f
      Segmentation fault

      Fixes: 35d5d20efad8 ("mtd: mxc_nand: cleanup copy_spare function")
      Signed-off-by: Eric Bénard <eric@xxxxxxxxxx>
      Reviewed-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Reviewed-by: Baruch Siach <baruch@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>

  commit 097f70b3c4d84ffccca15195bdfde3a37c0a7c0f
  Merge: e3be426 e060f6e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 18:22:34 2015 -0400

      Merge branch 'upstream' of 
git://git.linux-mips.org/pub/scm/ralf/upstream-linus

      Pull MIPS fixes from Ralf Baechle:
       - Properly setup irq handling for ATH79 platforms
       - Fix bootmem mapstart calculation for contiguous maps
       - Handle little endian and older CPUs correct in BPF
       - Fix console for Fulong 2E systems
       - Handle FTLB correctly on R6 CPUs
       - Fixes for CM, GIC and MAAR support code

      * 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus:
        MIPS: Initialise MAARs on secondary CPUs
        MIPS: print MAAR configuration during boot
        MIPS: mm: compile maar_init unconditionally
        irqchip: mips-gic: Fix pending & mask reads for MIPS64 with 32b GIC.
        irqchip: mips-gic: Convert CPU numbers to VP IDs.
        MIPS: CM: Provide a function to map from CPU to VP ID.
        MIPS: Fix FTLB detection for R6
        MIPS: cpu-features: Add cpu_has_ftlb
        MIPS: ATH79: Add irq chip ar7240-misc-intc
        MIPS: ATH79: Set missing irq ack handler for ar7100-misc-intc irq chip
        MIPS: BPF: Fix build on pre-R2 little endian CPUs
        MIPS: BPF: Avoid unreachable code on little endian
        MIPS: bootmem: Fix mapstart calculation for contiguous maps
        MIPS: Fix console output for Fulong2e system

  commit e3be4266d3488cbbaddf7fcc661f4473db341e46
  Merge: 73f479b 2530e39
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 12:51:39 2015 -0400

      Merge branch 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf fixes from Thomas Gleixner:
       "Another pile of fixes for perf:

         - Plug overflows and races in the core code

         - Sanitize the flow of the perf syscall so we error out before
           handling the more complex and hard to undo setups

         - Improve and fix Broadwell and Skylake hardware support

         - Revert a fix which broke what it tried to fix in perf tools

         - A couple of smaller fixes in various places of perf tools"

      * 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        perf tools: Fix copying of /proc/kcore
        perf intel-pt: Remove no_force_psb from documentation
        perf probe: Use existing routine to look for a kernel module by 
dso->short_name
        perf/x86: Change test_aperfmperf() and test_intel() to static
        tools lib traceevent: Fix string handling in heterogeneous arch 
environments
        perf record: Avoid infinite loop at buildid processing with no samples
        perf: Fix races in computing the header sizes
        perf: Fix u16 overflows
        perf: Restructure perf syscall point of no return
        perf/x86/intel: Fix Skylake FRONTEND MSR extrareg mask
        perf/x86/intel/pebs: Add PEBS frontend profiling for Skylake
        perf/x86/intel: Make the CYCLE_ACTIVITY.* constraint on Broadwell more 
specific
        perf tools: Bool functions shouldn't return -1
        tools build: Add test for presence of __get_cpuid() gcc builtin
        tools build: Add test for presence of numa_num_possible_cpus() in 
libnuma
        Revert "perf symbols: Fix mismatched declarations for elf_getphdrnum"
        perf stat: Fix per-pkg event reporting bug

  commit 73f479b243fe71a0fa82d21a21ac25d8932b88d5
  Merge: fc11a9c de9b8f5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 12:50:27 2015 -0400

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fix from Thomas Gleixner:
       "A single bug fix for the scheduler to prevent dequeueing of the idle
        task when setting the cpus allowed mask"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched: Fix crash trying to dequeue/enqueue the idle thread

  commit fc11a9c5dad78d2c9e8a4b7d4b386bff724d9ec3
  Merge: 9ffecb1 21199f2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 12:47:20 2015 -0400

      Merge branch 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull locking fix from Thomas Gleixner:
       "A single bugfix for lockdep to preserve the pinning counter when
        rebuilding the lock stack"

      * 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        locking/lockdep: Fix hlock->pin_count reset on lock stack rebuilds

  commit a9062dcec3697db5bdf064311ad097c469fd87ec
  Merge: 9ffecb1 af71b98
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Sun Sep 27 15:25:22 2015 +0200

      Merge branch 'turbostat' of 
https://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux into pm-tools

      Pull turbostat updates for v4.3 from Len Brown.

      * 'turbostat' of 
https://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux:
        tools/power turbosat: update version number
        tools/power turbostat: SKL: Adjust for TSC difference from base 
frequency
        tools/power turbostat: KNL workaround for %Busy and Avg_MHz
        tools/power turbostat: IVB Xeon: fix --debug regression

  commit e9a7bed40cbc09eee4b7a15509726a44565805be
  Merge: 9ffecb1 135919a
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Sun Sep 27 15:24:27 2015 +0200

      Merge branch 'cpuidle' of 
https://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux into pm-cpuidle

      Pull an intel_idle update for v4.3 from Len Brown.

      * 'cpuidle' of https://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux:
        intel_idle: Skylake Client Support - updated

  commit b8402d827fbb288f4ecee585e151bab5a81b3c58
  Author: Janusz Dziedzic <janusz.dziedzic@xxxxxxxxx>
  Date:   Thu Sep 17 08:17:33 2015 +0200

      ath10k: fix MSI-X registering for qca99x0

      In case of qca99x0 and MSI-X supported/enabled we
      failed during interrupts registering with message:

      ath10k_pci 0000:04:00.0: failed to request MSI-X ce irq 50: -22

      Issue/fix was reproduced/tested using Dell Latitude E6430 laptop.

      Signed-off-by: Janusz Dziedzic <janusz.dziedzic@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit bd4a41e6dee43b5b00876e37d42abffa298d63fe
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 13:19:00 2015 +0530

      ath10k: fix ldpc param for fixed rate

      ldpc is not configured for fixed rates. This blocks auto rate vs fixed
      rate performance comparison. Since firmware is considering ldpc vdev
      param for fixed rate selection, it has to be configured to enable ldpc
      for fixed rates.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 44acedb00b6d4b56ddab04362ccfa133b0d3b013
  Author: Peter Oh <poh@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:29:08 2015 +0300

      ath: use PRI value given by spec for fixed PRI

      PRI value is used as divider when DFS detector analyzes candidate
      radar pulses.
      If PRI deviation is big from its origin PRI, DFS detector could miss
      valid radar reports since HW often misses detecting radar pulses and
      causes long interval value of pulses.

      For instance from practical results, if runtime PRI is calculated as
      1431 for fixed PRI value of 1428 and delta timestamp logs 15719,
      the modular remainder will be 1409 and the delta between the remainder
      and runtime PRI is 22 that is bigger than PRI tolerance which is 16.
      As a result this radar report will be ignored even though it's valid.

      By using spec defined PRI for fixed PRI, we can correct this error.

      Signed-off-by: Peter Oh <poh@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b0b252278082787eec54098556566d4d68b8126c
  Author: Peter Oh <poh@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:29:07 2015 +0300

      ath: fix incorrect PPB on JAPAN chirp radar

      The number of pulses per burst on Japan chirp radar is
      between 1 and 3. The previous value, 20, is representing
      number of bursts, but since current DFS detector is using
      pulse detection other than bursts, use the pulse number
      for correct radar detection.
      Also using the highest number helps to avoid false detection.

      Signed-off-by: Peter Oh <poh@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit e060f6ed281669b6d2f22d8dafd664b532386918
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Fri Sep 25 08:59:38 2015 -0700

      MIPS: Initialise MAARs on secondary CPUs

      MAARs should be initialised on each CPU (or rather, core) in the system
      in order to achieve consistent behaviour & performance. Previously they
      have only been initialised on the boot CPU which leads to performance
      problems if tasks are later scheduled on a secondary CPU, particularly
      if those tasks make use of unaligned vector accesses where some CPUs
      don't handle any cases in hardware for non-speculative memory regions.
      Fix this by recording the MAAR configuration from the boot CPU and
      applying it to secondary CPUs as part of their bringup.

      Reported-by: Doug Gilmore <doug.gilmore@xxxxxxxxxx>
      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Hemmo Nieminen <hemmo.nieminen@xxxxxx>
      Cc: Alex Smith <alex.smith@xxxxxxxxxx>
      Cc: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11239/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 651ca7f4dab77f07fdac9cfb68bcab6bd2b7f827
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Fri Sep 25 08:59:37 2015 -0700

      MIPS: print MAAR configuration during boot

      Verifying that the MAAR configuration is as expected is useful when
      debugging the performance of a system. Print out the memory regions
      configured via MAAR along with their attributes.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11238/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit def3ab5d0a0fe53026c2495b054dcc46cf923dac
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Fri Sep 25 08:59:36 2015 -0700

      MIPS: mm: compile maar_init unconditionally

      maar_init was previously only compiled when CONFIG_NEED_MULTIPLE_NODES
      was not set, which has been fine since it is only called from the
      standard implementation of mem_init which has the same condition. In
      preparation for calling it from the SMP startup code on secondary CPUs,
      move maar_init outside of the #ifndef such that it is always compiled.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11237/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d77d5ac9c9b5abf45aeb6e12930fab832e5c81d1
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:29:11 2015 -0700

      irqchip: mips-gic: Fix pending & mask reads for MIPS64 with 32b GIC.

      gic_handle_shared_int reads the GIC interrupt pending & mask registers
      directly into a bitmap, which is defined as an array of unsigned longs.
      The GIC pending registers may be 32 bits wide if the CM is older than
      CM3, regardless of the bit width of the CPU, but for MIPS64 kernels
      the unsigned longs in the bitmap will be 64 bits wide. In this case we
      need to perform 2 x 32 bit reads per 64 bit unsigned long in order to
      avoid missing interrupts.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11213/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit ab41f6c8620a6e65df4ee19d284c97efdd3d9b63
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:29:10 2015 -0700

      irqchip: mips-gic: Convert CPU numbers to VP IDs.

      Make use of the mips_cm_vp_id function to convert from Linux CPU numbers
      to the VP IDs used by hardware, which are not identical in all systems.
      Without doing so we map interrupts to incorrect VP(E)s.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11212/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 7573b94e08aeb5b814e2f277210bdcdf21a83869
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:29:09 2015 -0700

      MIPS: CM: Provide a function to map from CPU to VP ID.

      The VP ID of a given CPU may not match up with the CPU number used by
      Linux. For example, if the width of the VP part of the VP ID is wider
      than log2(number of VPs per core) and the system has multiple cores then
      this will be the case. Alternatively, if a pre-r6 system implements the
      MT ASE with multiple VPEs per core and Linux is built without support
      for the MT ASE then the numbers won't match up either. Provide a
      function to convert from CPU number to VP ID.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11211/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 9ffecb10283508260936b96022d4ee43a7798b4c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 07:50:08 2015 -0400

      Linux 4.3-rc3

  commit 162e6df47c4f80c87cb617ec473eca015df454ca
  Merge: 5a6bdf0 83c133c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:51:42 2015 -0400

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Thomas Gleixner:
       "Two bugfixes from Andy addressing at least some of the subtle NMI
        related wreckage which has been reported by Sasha Levin"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/nmi/64: Fix a paravirt stack-clobbering bug in the NMI code
        x86/paravirt: Replace the paravirt nop with a bona fide empty function

  commit 5a6bdf06bbd022db25d9935273b409c337c48a6b
  Merge: c905929 d32dc9a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:50:23 2015 -0400

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fix from Thomass Gleixner:
       "A bugfix for the atmel aic5 irq chip driver which caches the wrong
        data and thereby breaking resume"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqchip/atmel-aic5: Use per chip mask caches in mask/unmask()

  commit c905929ac9b94061b2c8226c5e47a26d30ed7ea1
  Merge: 685b5f1 274e91b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:48:48 2015 -0400

      Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM fixes from Russell King:
       "Just two fixes: wire up the new system calls added during the last
        merge window, and fix another user access site"

      * 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm:
        ARM: alignment: fix alignment handling for uaccess changes
        ARM: wire up new syscalls

  commit 685b5f1de6405bf87e38fed7c893a1de0a8d3218
  Merge: 69ea8b8 e46fc90
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:45:18 2015 -0400

      Merge tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Olof Johansson:
       "Our first real batch of fixes this release cycle.  Nothing really
        concerning, and diffstat is a bit inflated due to some DT contents
        moving around on STi platforms.

        There's a collection of them here:

         - A fixup for a build breakage that hits on arm64 allmodconfig in
           QCOM SCM firmware drivers
         - MMC fixes for OMAP that had quite a bit of breakage this merge
           window.
         - Misc build/warning fixes on PXA and OMAP
         - A couple of minor fixes for Beagleboard X15 which is now starting
           to see a few more users in the wild"

      * tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (31 commits)
        ARM: sti: dt: adapt DT to fix probe/bind issues in DRM driver
        ARM: dts: fix omap2+ address translation for pbias
        firmware: qcom: scm: Add function stubs for ARM64
        ARM: dts: am57xx-beagle-x15: use palmas-usb for USB2
        ARM: omap2plus_defconfig: enable GPIO_PCA953X
        ARM: dts: omap5-uevm.dts: fix i2c5 pinctrl offsets
        ARM: OMAP2+: AM43XX: Enable autoidle for clks in am43xx_init_late
        ARM: dts: am57xx-beagle-x15: Update Phy supplies
        ARM: pxa: balloon3: Fix build error
        ARM: dts: Fixup model name for HP t410 dts
        ARM: dts: DRA7: fix a typo in ethernet
        ARM: omap2plus_defconfig: make PCF857x built-in
        ARM: dts: Use ti,pbias compatible string for pbias
        ARM: OMAP5: Cleanup options for SoC only build
        ARM: DRA7: Select missing options for SoC only build
        ARM: OMAP2+: board-generic: Remove stale of_irq macros
        ARM: OMAP4+: PM: erratum is used by OMAP5 and DRA7 as well
        ARM: dts: omap3-igep: Move eth IRQ pinmux to IGEPv2 common dtsi
        ARM: dts: am57xx-beagle-x15: Add wakeup irq for mcp79410
        ARM: dts: am335x-phycore-som: Fix mpu voltage
        ...

  commit 69ea8b857782ea56d9db01e2f57f9067abd3f013
  Merge: d8cc397 8862714
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 27 06:42:54 2015 -0400

      Merge branch 'for-next' of git://git.samba.org/sfrench/cifs-2.6

      Pull CIFS fixes from Steve French:
       "Four fixes from testing at the recent SMB3 Plugfest including two
        important authentication ones (one fixes authentication problems to
        some popular servers when clock times differ more than two hours
        between systems, the other fixes Kerberos authentication for SMB3)"

      * 'for-next' of git://git.samba.org/sfrench/cifs-2.6:
        fix encryption error checks on mount
        [SMB3] Fix sec=krb5 on smb3 mounts
        cifs: use server timestamp for ntlmv2 authentication
        disabling oplocks/leases via module parm enable_oplocks broken for SMB3

  commit 72521ea07c0af37b8cb21228368128191c3f1a58
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:00:24 2015 +0200

      r8169: fix handling rtl_readphy result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f26bf06beae70175eda91e893190784bd1bcc7c0
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:00:15 2015 +0200

      net: hisilicon: fix handling platform_get_irq result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f3504372963fb65d2386f8a2210a557d7cc01d9
  Merge: 8b7a704 b1be00a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Sep 26 22:40:56 2015 -0700

      Merge branch 'vxlan-ipv4-ipv6'

      Jiri Benc says:

      ====================
      vxlan: support both IPv4 and IPv6 sockets

      Note: this needs net merged into net-next in order to apply.

      It's currently not easy enough to work with metadata based vxlan tunnels. 
In
      particular, it's necessary to create separate network interfaces for IPv4
      and IPv6 tunneling. Assigning an IPv6 address to an IPv4 interface is
      allowed yet won't do what's expected. With route based tunneling, one has 
to
      pay attention to use the vxlan interface opened with the correct family.
      Other users of this (openvswitch) would need to always create two vxlan
      interfaces.

      Furthermore, there's no sane API for creating an IPv6 vxlan metadata based
      interface.

      This patchset simplifies this by opening both IPv4 and IPv6 socket if the
      vxlan interface has the metadata flag (IFLA_VXLAN_COLLECT_METADATA) set.
      Assignment of addresses etc. works as expected after this.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b1be00a6c39fda2ec380e168d7bcf96fb8c9da42
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 24 13:50:02 2015 +0200

      vxlan: support both IPv4 and IPv6 sockets in a single vxlan device

      For metadata based vxlan interface, open both IPv4 and IPv6 socket. This 
is
      much more user friendly: it's not necessary to create two vxlan interfaces
      and pay attention to using the right one in routing rules.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 205f356d165033443793a97a668a203a79a8723a
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 24 13:50:01 2015 +0200

      vxlan: make vxlan_sock_add and vxlan_sock_release complementary

      Make vxlan_sock_add both alloc the socket and attach it to vxlan_dev. Let
      vxlan_sock_release accept vxlan_dev as its parameter instead of 
vxlan_sock.

      This makes vxlan_sock_add and vxlan_sock release complementary. It reduces
      code duplication in the next patch.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8b7a7048220f86547db31de0abe1ea6dd2cfa892
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 11:38:22 2015 +0100

      8139cp: Fix GSO MSS handling

      When fixing the TSO support I noticed we just mask ->gso_size with the
      MSSMask value and don't care about the consequences.

      Provide a .ndo_features_check() method which drops the NETIF_F_TSO
      feature for any skb which would exceed the maximum, and thus forces it
      to be segmented by software.

      Then we can stop the masking in cp_start_xmit(), and just WARN if the
      maximum is exceeded, which should now never happen.

      Finally, Francois Romieu noticed that we didn't even have the right
      value for MSSMask anyway; it should be 0x7ff (11 bits) not 0xfff.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5a58f227790faded5a3ef6075f3ddd65093e0f86
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:46:09 2015 +0100

      8139cp: Enable offload features by default

      I fixed TSO. Hardware checksum and scatter/gather also appear to be
      working correctly both on real hardware and in QEMU's emulation.

      Let's enable them by default and see if anyone screams...

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e46fc90ec2612ef7578c6e3e28ad477a116e24da
  Merge: b8ba826 385877c
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Sat Sep 26 22:23:26 2015 -0700

      Merge tag 'pxa-fixes-v4.3' of https://github.com/rjarzmik/linux into fixes

      ARM: pxa: fixes for v4.3

      These fixes are mainly regression fixes triggered by irq changes,
      common clock framework introduction and sound side-effect of
      other platforms.

      * tag 'pxa-fixes-v4.3' of https://github.com/rjarzmik/linux:
        ARM: pxa: balloon3: Fix build error
        ARM: pxa: ssp: Fix build error by removing originally incorrect DT 
binding
        ARM: pxa: fix DFI bus lockups on startup

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit b8ba826f8d9587fe830d29a0d03abb5b1e0a76e5
  Merge: fe5b275 9a5e3f2
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Sat Sep 26 22:22:31 2015 -0700

      Merge tag 'omap-for-v4.3/fixes-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Fixes for omaps for v4.3-rc cycle:

      - Two more patches to fix most of the MMC regressions with the
        PBIAS regulator changes. At least two MMC driver related issues
        still seems to remain for omap3 legacy booting and omap4 duovero.
        Note that the dts changes depend on a recent regulator fix, and
        are based on the regulator commit now in mainline kernel

      - Enable autoidle for am43xx clocks to prevent clocks from staying
        always on

      - Fix i2c5 pinctrl offsets for omap5-uevm

      - Enable PCA953X as that's needed for HDMI to work on omap5

      - Update phy supplies for beagle x15 beta board

      - Use palmas-usb for on beagle x15 to start using the related
        driver that recently got merged

      * tag 'omap-for-v4.3/fixes-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        ARM: dts: fix omap2+ address translation for pbias
        ARM: dts: am57xx-beagle-x15: use palmas-usb for USB2
        ARM: omap2plus_defconfig: enable GPIO_PCA953X
        ARM: dts: omap5-uevm.dts: fix i2c5 pinctrl offsets
        ARM: OMAP2+: AM43XX: Enable autoidle for clks in am43xx_init_late
        ARM: dts: am57xx-beagle-x15: Update Phy supplies
        regulator: pbias: program pbias register offset in pbias driver
        ARM: omap2plus_defconfig: Enable MUSB DMA support
        ARM: DRA752: Add ID detect for ES2.0
        ARM: OMAP3: vc: fix 'or' always true warning
        ARM: OMAP2+: Fix booting if no timer parent clock is available
        ARM: OMAP2+: omap-device: fix race deferred probe of omap_hsmmc vs 
omap_device_late_init

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit d8cc3972b2178f9fe532306330f76bf51cb0d8bd
  Merge: c91d707 09185e2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 21:05:23 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fixes from Herbert Xu:
       "This fixes the following issues:

         - check the return value of platform_get_irq as signed int in xgene.

         - skip adf_dev_restore on virtual functions in qat.

         - fix double-free with backlogged requests in marvell_cesa"

      * git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        hwrng: xgene - fix handling platform_get_irq
        crypto: qat - VF should never trigger SBR on PH
        crypto: marvell - properly handle CRYPTO_TFM_REQ_MAY_BACKLOG-flagged 
requests

  commit c91d7072952993f96896c2fc9868f55924e7ba6c
  Merge: bcba282 673681ca
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 21:02:42 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending

      Pull SCSI target fixes from Nicholas Bellinger:
       "This includes a iser-target series from Jenny + Sagi @ Mellanox that
        addresses the few remaining active I/O shutdown bugs, along with a
        patch to support zero-copy for immediate data payloads that gives a
        nice performance improvement for small block WRITEs.

        Also included are some recent >= v4.2 regression bug-fixes.  The most
        notable is a RCU conversion regression for SPC-3 PR registrations, and
        recent removal of obsolete RFC-3720 markers that introduced a login
        regression bug with MSFT iSCSI initiators.

        Thanks to everyone who has been testing + reporting bugs for v4.x"

      * git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending:
        iscsi-target: Avoid OFMarker + IFMarker negotiation
        target: Make TCM_WRITE_PROTECT failure honor D_SENSE bit
        target: Fix target_sense_desc_format NULL pointer dereference
        target: Propigate backend read-only to core_tpg_add_lun
        target: Fix PR registration + APTPL RCU conversion regression
        iser-target: Skip data copy if all the command data comes as immediate
        iser-target: Change the recv buffers posting logic
        iser-target: Fix pending connections handling in target stack shutdown 
sequnce
        iser-target: Remove np_ prefix from isert_np members
        iser-target: Remove unused variables
        iser-target: Put the reference on commands waiting for unsol data
        iser-target: remove command with state ISTATE_REMOVE

  commit bcba282ab399eec1c8b8dcb49c43a33813971913
  Merge: fb740f9 b473197
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 21:00:28 2015 -0400

      Merge tag 'usb-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

      Pull USB fixes from Greg KH:
       "Here are some USB driver fixes for 4.3-rc3.

        There's the usual assortment of new device ids, combined with xhci and
        gadget driver fixes.  Full details in the shortlog.  All of these have
        been in linux-next with no reported problems"

      * tag 'usb-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (34 commits)
        MAINTAINERS: remove amd5536udc USB gadget driver maintainer
        USB: whiteheat: fix potential null-deref at probe
        xhci: init command timeout timer earlier to avoid deleting it 
uninitialized
        xhci: change xhci 1.0 only restrictions to support xhci 1.1
        usb: xhci: exit early in xhci_setup_device() if we're halted or dying
        usb: xhci: stop everything on the first call to xhci_stop
        usb: xhci: Clear XHCI_STATE_DYING on start
        usb: xhci: lock mutex on xhci_stop
        xhci: Move xhci_pme_quirk() behind #ifdef CONFIG_PM
        xhci: give command abortion one more chance before killing xhci
        usb: Use the USB_SS_MULT() macro to get the burst multiplier.
        usb: dwc3: gadget: Fix BUG in RT config
        usb: musb: fix cppi channel teardown for isoch transfer
        usb: phy: isp1301: Export I2C module alias information
        usb: gadget: drop null test before destroy functions
        usb: gadget: dummy_hcd: in transfer(), return data sent, not limit
        usb: gadget: dummy_hcd: fix rescan logic for transfer
        usb: gadget: dummy_hcd: fix unneeded else-if condition
        usb: gadget: dummy_hcd: emulate sending zlp in packet logic
        usb: musb: dsps: fix polling in device-only mode
        ...

  commit fb740f9bab3b3c049d6207b148e45de05163b6e5
  Merge: b11e7b8 f7a7651
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 20:58:38 2015 -0400

      Merge tag 'tty-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

      Pull serial driver fix from Greg KH:
       "Here is one serial driver fix for 4.3-rc3 that resolves a module
        loading issue due to splitting up of the 8250 driver into smaller
        pieces.  It's been in linux-next with no reported problems"

      * tag 'tty-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:
        tty: serial: Add missing module license for 8250_base.ko

  commit b11e7b81bf94f633ae44f12a3d2e198277781952
  Merge: 7c1efea 74c600e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 20:56:50 2015 -0400

      Merge tag 'staging-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

      Pull staging driver fixes from Greg KH:
       "Here are some tiny staging driver and documentation fixes for 4.3-rc3.

        All of these resolve reported issues that people have found and have
        been in the linux-next tree for a while with no problems"

      * tag 'staging-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
        MAINTAINERS: Update email address for Martyn Welch
        staging: ion: fix corruption of ion_import_dma_buf
        staging: dgap: Remove myself from the MAINTAINERS file
        staging: most: Add dependency to HAS_IOMEM
        staging: unisys: remove reference of visorutil
        staging: unisys: visornic: handle error return from device registration
        staging: unisys: stop device registration before visorbus registration
        staging: unisys: visorbus: Unregister driver on error
        staging: unisys: visornic: Fix receive bytes statistics
        staging: unisys: unregister netdev when create debugfs fails
        staging: fbtft: replace master->setup() with spi_setup()
        staging: fbtft: fix 9-bit SPI support detection
        staging/lustre: change Lustre URLs and mailing list
        staging/android: Update ION TODO per LPC discussion
        Staging: most: MOST and MOSTCORE should depend on HAS_DMA
        staging: most: fix HDM_USB dependencies and build errors

  commit 7c1efeae6d7d7b1ba10453e35ee4c2de1d814c2b
  Merge: 64b796e 2110d70
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 20:54:53 2015 -0400

      Merge tag 'driver-core-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

      Pull driver core fix from Greg KH:
       "Here is one driver core fix for 4.3-rc3 that resolves a reported oops"

      * tag 'driver-core-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core:
        cpu/cacheinfo: Fix teardown path

  commit 64b796e23172850cab313e2e411b58fd391eec95
  Merge: 518a7cb 5031403
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 20:53:15 2015 -0400

      Merge tag 'char-misc-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

      Pull char/misc driver fixes from Greg KH:
       "Here's some tiny char and misc driver fixes that resolve some reported
        errors for 4.3-rc3.

        All of these have been in linux-next with no problems for a while"

      * tag 'char-misc-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:
        extcon: Fix attached value returned by is_extcon_changed
        Drivers: hv: vmbus: fix init_vp_index() for reloading hv_netvsc
        mei: fix debugfs files leak on error path
        thunderbolt: Allow loading of module on recent Apple MacBooks with 
thunderbolt 2 controller

  commit 4963ed48f2c20196d51a447ee87dc2815584fee4
  Merge: 4d54d86 518a7cb
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Sep 26 16:08:27 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Conflicts:
        net/ipv4/arp.c

      The net/ipv4/arp.c conflict was one commit adding a new
      local variable while another commit was deleting one.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f6c5b079cb37f01463a643182815c00aa5263f2
  Merge: e904cf6 7c014e3
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Sat Sep 26 21:25:18 2015 +0300

      Merge tag 'iwlwifi-next-for-kalle-2015-09-21' of 
git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

      * some debugfs improvements;
      * fix signedness in beacon statistics;
      * deinline some functions to reduce size when device tracing is enabled;
      * filter beacons out in AP mode when no stations are associated;
      * deprecate firmwares version -12;
      * fix a runtime PM vs. legacy suspend race;
      * one-liner fix for a ToF bug;
      * clean-ups in the rx code;
      * small debugging improvement;
      * fix WoWLAN with new firmware versions;

  commit 76d164f582150fd0259ec0fcbc485470bcd8033e
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Thu Sep 17 14:29:07 2015 +0300

      ath10k: fix DMA related firmware crashes on multiple devices

      Some platforms really don't like DMA bursts of 256 bytes, and this
      causes the firmware to crash when sending beacons.
      Also, changing this based on the firmware version does not seem to make
      much sense, so use 128 bytes for all versions.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit c6ea46c6d3df06599daddbf3311744f3130e186c
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Wed Sep 9 07:16:42 2015 +0200

      b43: probe bcma core (device) rev 0x15

      OpenWrt user reported b43 doesn't probe wireless core on SoC BCM5356A1:
      [    0.000000] bcma: bus0: Found chip with id 0x5356, rev 0x01 and 
package 0x04
      it is because this chip uses different 802.11 core revison than others:
      [    0.000000] bcma: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 
0x812, rev 0x15, class 0x0)

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 910367e374b97fad6ae31f74198ca537e2f3cfe5
  Author: Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
  Date:   Mon Aug 31 10:55:05 2015 +0200

      rt2800usb: add usb ID 1b75:3070 for Airlive WT-2000USB

      Brand: Airlive (Ovislink Corp.)
      Name: Turbo-G USB Adaptor
      Model: WT-2000USB
      USB ID: 1b75:3070

      Reported-and-tested-by: Michael Coates <michlinux@xxxxxxxxxxx>
      Signed-off-by: Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 029cd0370241641eb70235d205aa0b90c84dce44
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:59:46 2015 +0200

      ath9k: declare required extra tx headroom

      ath9k inserts padding between the 802.11 header and the data area (to
      align it). Since it didn't declare this extra required headroom, this
      led to some nasty issues like randomly dropped packets in some setups.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ff9f84b7d79ddccab4c293c9d3e289f95ae594f7
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Sat Sep 26 09:48:58 2015 -0500

      [SMB3] Missing null tcon check

      Pointed out by Dan Carpenter via smatch code analysis tool

      CC: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>

  commit af71b980c0d20586cc331b617c47094a8ec7e1db
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Sat Sep 26 09:49:55 2015 -0400

      tools/power turbosat: update version number

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit 518a7cb6980cd640c7f979d29021ad870f60d7d7
  Merge: d4a748a bdb06cb
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 06:01:33 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

       1) When we run a tap on netlink sockets, we have to copy mmap'd SKBs
          instead of cloning them.  From Daniel Borkmann.

       2) When converting classical BPF into eBPF, fix the setting of the
          source reg to BPF_REG_X.  From Tycho Andersen.

       3) Fix igmpv3/mldv2 report parsing in the bridge multicast code, from
          Linus Lussing.

       4) Fix dst refcounting for ipv6 tunnels, from Martin KaFai Lau.

       5) Set NLM_F_REPLACE flag properly when replacing ipv6 routes, from
          Roopa Prabhu.

       6) Add some new cxgb4 PCI device IDs, from Hariprasad Shenai.

       7) Fix headroom tests and SKB leaks in ipv6 fragmentation code, from
          Florian Westphal.

       8) Check DMA mapping errors in bna driver, from Ivan Vecera.

       9) Several 8139cp bug fixes (dev_kfree_skb_any in interrupt context,
          misclearing of interrupt status in TX timeout handler, etc.) from
          David Woodhouse.

      10) In tipc, reset SKB header pointer after skb_linearize(), from Erik
          Hugne.

      11) Fix autobind races et al. in netlink code, from Herbert Xu with
          help from Tejun Heo and others.

      12) Missing SET_NETDEV_DEV in sunvnet driver, from Sowmini Varadhan.

      13) Fix various races in timewait timer and reqsk_queue_hadh_req, from
          Eric Dumazet.

      14) Fix array overruns in mac80211, from Johannes Berg and Dan
          Carpenter.

      15) Fix data race in rhashtable_rehash_one(), from Dmitriy Vyukov.

      16) Fix race between poll_one_napi and napi_disable, from Neil Horman.

      17) Fix byte order in geneve tunnel port config, from John W Linville.

      18) Fix handling of ARP replies over lightweight tunnels, from Jiri
          Benc.

      19) We can loop when fib rule dumps cross multiple SKBs, fix from Wilson
          Kok and Roopa Prabhu.

      20) Several reference count handling bug fixes in the PHY/MDIO layer
          from Russel King.

      21) Fix lockdep splat in ppp_dev_uninit(), from Guillaume Nault.

      22) Fix crash in icmp_route_lookup(), from David Ahern.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (116 commits)
        net: Fix panic in icmp_route_lookup
        net: update docbook comment for __mdiobus_register()
        ppp: fix lockdep splat in ppp_dev_uninit()
        net: via/Kconfig: GENERIC_PCI_IOMAP required if PCI not selected
        phy: marvell: add link partner advertised modes
        net: fix net_device refcounting
        phy: add phy_device_remove()
        phy: fixed-phy: properly validate phy in fixed_phy_update_state()
        net: fix phy refcounting in a bunch of drivers
        of_mdio: fix MDIO phy device refcounting
        phy: add proper phy struct device refcounting
        phy: fix mdiobus module safety
        net: dsa: fix of_mdio_find_bus() device refcount leak
        phy: fix of_mdio_find_bus() device refcount leak
        ip6_tunnel: Reduce log level in ip6_tnl_err() to debug
        ip6_gre: Reduce log level in ip6gre_err() to debug
        fib_rules: fix fib rule dumps across multiple skbs
        bnx2x: byte swap rss_key to comply to Toeplitz specs
        net: revert "net_sched: move tp->root allocation into fw_init()"
        lwtunnel: remove source and destination UDP port config option
        ...

  commit 2530e39947d80901e8c56f1c1950437eb9f48354
  Merge: 7e5560a b5cabbc
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 26 08:15:52 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

        - Fix copying of /proc/kcore made to the ~/.debug/ DSO cache to allow 
using
          objdump with kcore files. (Adrian Hunter)

        - Fix adding perf probes in kernel module functions. (Arnaldo Carvalho 
de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a2b7b74945dbfe5d734eafe8aa52f9f1f8bc6931
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Sat Sep 26 00:12:38 2015 -0400

      tools/power turbostat: SKL: Adjust for TSC difference from base frequency

      On a Skylake with 1500MHz base frequency,
      the TSC runs at 1512MHz.

      This is because the TSC is no longer in the n*100 MHz BCLK domain,
      but is now in the m*24MHz crystal clock domain. (24 MHz * 63 = 1512 MHz)

      This adds error to several calculations in turbostat,
      unless the TSC sample sizes are adjusted for this difference.

      Note that calculations in the time domain are immune
      from this issue, as the timing sub-system has already
      calibrated the TSC against a known wall clock.

      AVG_MHz = APERF_delta/measurement_interval

        need no adjustment.  APERF_delta is in the BCLK domain,
        and measurement_interval is in the time domain.

      TSC_MHz  =  TSC_delta/measurement_interval

        needs no adjustment -- as we really do want to report
        the actual measured TSC delta here, and measurement_interval
        is in the accurate time domain.

      %Busy = MPERF_delta/TSC_delta

        needs adjustment to use TSC_BCLK_DOMAIN_delta.
        TSC_BCLK_DOMAIN_delta = TSC_delta * base_hz / tsc_hz

      Bzy_MHz = TSC_delta/APERF_delta/MPERF_delta/measurement_interval

        need adjustment as above.

      No other metrics in turbostat need to be adjusted.

      Before:

           CPU Avg_MHz   %Busy Bzy_MHz TSC_MHz
             -     550   24.84    2216    1512
             0    2191   98.73    2219    1514
             2       0    0.01    2130    1512
             1       9    0.43    2016    1512
             3       2    0.08    2016    1512

      After:

           CPU Avg_MHz   %Busy Bzy_MHz TSC_MHz
             -     550   25.05    2198    1512
             0    2190   99.62    2199    1512
             2       0    0.01    2152    1512
             1       9    0.46    2000    1512
             3       2    0.10    2000    1512

      Note that in this example, the "Before" Bzy_MHz
      was reported as exceeding the 2200 max turbo rate.
      Also, even a pinned spin loop would not be reported
      as over 99% busy.

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit b2b34dfe4d9aa4c468fc363b3b666974783ed1f9
  Author: Hubert Chrzaniuk <hubert.chrzaniuk@xxxxxxxxx>
  Date:   Mon Sep 14 13:31:00 2015 +0200

      tools/power turbostat: KNL workaround for %Busy and Avg_MHz

      KNL increments APERF and MPERF every 1024 clocks.
      This is compliant with the architecture specification,
      which requires that only the ratio of APERF/MPERF need be valid.

      However, turbostat takes advantage of the fact that these
      two MSRs increment every un-halted clock
      at the actual and base frequency:

      AVG_MHz = APERF_delta/measurement_interval

      %Busy = MPERF_delta/TSC_delta

      This quirk is needed for these calculations to also work on KNL,
      which would otherwise show a value 1024x smaller than expected.

      Signed-off-by: Hubert Chrzaniuk <hubert.chrzaniuk@xxxxxxxxx>
      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit 756357b8e4b072fd5ee86421f794e071a348802b
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Fri Sep 25 21:12:39 2015 -0400

      tools/power turbostat: IVB Xeon: fix --debug regression

      Staring in Linux-4.3-rc1,
      commit 6fb3143b561c ("tools/power turbostat: dump CONFIG_TDP")
      touches MSR 0x648, which is not supported on IVB-Xeon.
      This results in "turbostat --debug" exiting on those systems:

      turbostat: /dev/cpu/2/msr offset 0x648 read failed: Input/output error

      Remove IVB-Xeon from the list of machines supporting with that MSR.

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit bdb06cbf77cb01911694cc9076ffa8196b7b9b61
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:31:29 2015 -0600

      net: Fix panic in icmp_route_lookup

      Andrey reported a panic:

      [ 7249.865507] BUG: unable to handle kernel pointer dereference at 
000000b4
      [ 7249.865559] IP: [<c16afeca>] icmp_route_lookup+0xaa/0x320
      [ 7249.865598] *pdpt = 0000000030f7f001 *pde = 0000000000000000
      [ 7249.865637] Oops: 0000 [#1]
      ...
      [ 7249.866811] CPU: 0 PID: 0 Comm: swapper/0 Not tainted
      4.3.0-999-generic #201509220155
      [ 7249.866876] Hardware name: MSI MS-7250/MS-7250, BIOS 080014  08/02/2006
      [ 7249.866916] task: c1a5ab00 ti: c1a52000 task.ti: c1a52000
      [ 7249.866949] EIP: 0060:[<c16afeca>] EFLAGS: 00210246 CPU: 0
      [ 7249.866981] EIP is at icmp_route_lookup+0xaa/0x320
      [ 7249.867012] EAX: 00000000 EBX: f483ba48 ECX: 00000000 EDX: f2e18a00
      [ 7249.867045] ESI: 000000c0 EDI: f483ba70 EBP: f483b9ec ESP: f483b974
      [ 7249.867077]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
      [ 7249.867108] CR0: 8005003b CR2: 000000b4 CR3: 36ee07c0 CR4: 000006f0
      [ 7249.867141] Stack:
      [ 7249.867165]  320310ee 00000000 00000042 320310ee 00000000 c1aeca00
      f3920240 f0c69180
      [ 7249.867268]  f483ba04 f855058b a89b66cd f483ba44 f8962f4b 00000000
      e659266c f483ba54
      [ 7249.867361]  8004753c f483ba5c f8962f4b f2031140 000003c1 ffbd8fa0
      c16b0e00 00000064
      [ 7249.867448] Call Trace:
      [ 7249.867494]  [<f855058b>] ? e1000_xmit_frame+0x87b/0xdc0 [e1000e]
      [ 7249.867534]  [<f8962f4b>] ? tcp_in_window+0xeb/0xb10 [nf_conntrack]
      [ 7249.867576]  [<f8962f4b>] ? tcp_in_window+0xeb/0xb10 [nf_conntrack]
      [ 7249.867615]  [<c16b0e00>] ? icmp_send+0xa0/0x380
      [ 7249.867648]  [<c16b102f>] icmp_send+0x2cf/0x380
      [ 7249.867681]  [<f89c8126>] nf_send_unreach+0xa6/0xc0 [nf_reject_ipv4]
      [ 7249.867714]  [<f89cd0da>] reject_tg+0x7a/0x9f [ipt_REJECT]
      [ 7249.867746]  [<f88c29a7>] ipt_do_table+0x317/0x70c [ip_tables]
      [ 7249.867780]  [<f895e0a6>] ? __nf_conntrack_find_get+0x166/0x3b0
      [nf_conntrack]
      [ 7249.867838]  [<f895eea8>] ? nf_conntrack_in+0x398/0x600 [nf_conntrack]
      [ 7249.867889]  [<f84c0035>] iptable_filter_hook+0x35/0x80 
[iptable_filter]
      [ 7249.867933]  [<c16776a1>] nf_iterate+0x71/0x80
      [ 7249.867970]  [<c1677715>] nf_hook_slow+0x65/0xc0
      [ 7249.868002]  [<c1681811>] __ip_local_out_sk+0xc1/0xd0
      [ 7249.868034]  [<c1680f30>] ? ip_forward_options+0x1a0/0x1a0
      [ 7249.868066]  [<c1681836>] ip_local_out_sk+0x16/0x30
      [ 7249.868097]  [<c1684054>] ip_send_skb+0x14/0x80
      [ 7249.868129]  [<c16840f4>] ip_push_pending_frames+0x34/0x40
      [ 7249.868163]  [<c16844a2>] ip_send_unicast_reply+0x282/0x310
      [ 7249.868196]  [<c16a0863>] tcp_v4_send_reset+0x1b3/0x380
      [ 7249.868227]  [<c16a1b63>] tcp_v4_rcv+0x323/0x990
      [ 7249.868257]  [<c16776a1>] ? nf_iterate+0x71/0x80
      [ 7249.868289]  [<c167dc2b>] ip_local_deliver_finish+0x8b/0x230
      [ 7249.868322]  [<c167df4c>] ip_local_deliver+0x4c/0xa0
      [ 7249.868353]  [<c167dba0>] ? ip_rcv_finish+0x390/0x390
      [ 7249.868384]  [<c167d88c>] ip_rcv_finish+0x7c/0x390
      [ 7249.868415]  [<c167e280>] ip_rcv+0x2e0/0x420
      ...

      Prior to the VRF change the oif was not set in the flow struct, so the
      VRF support should really have only added the vrf_master_ifindex lookup.

      Fixes: 613d09b30f8b ("net: Use VRF device index for lookups on TX")
      Cc: Andrey Melnikov <temnota.am@xxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 59f069789c98678710ed30a4be0daa3546ec82c7
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:56:56 2015 +0100

      net: update docbook comment for __mdiobus_register()

      Update the docbook comment for __mdiobus_register() to include the new
      module owner argument.  This resolves a warning found by the 0-day
      builder.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b4731977243c1ae9cfd8b3971ffc15425b7d7545
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 20:45:27 2015 -0700

      MAINTAINERS: remove amd5536udc USB gadget driver maintainer

      Thomas can no longer work on the driver, so he asked me to mark the
      MAINTAINER entry as "Orphan" with the hope that someone else would
      someday pick it up.

      Cc: Thomas Dahlmann <dahlmann.thomas@xxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 2866196f294954ce9fa226825c8c1eaa64c7da8a
  Author: Doug Ledford <dledford@xxxxxxxxxx>
  Date:   Fri Sep 25 22:30:24 2015 -0400

      IB/ipoib: increase the max mcast backlog queue

      When performing sendonly joins, we queue the packets that trigger
      the join until the join completes.  This may take on the order of
      hundreds of milliseconds.  It is easy to have many more than three
      packets come in during that time.  Expand the maximum queue depth
      in order to try and prevent dropped packets during the time it
      takes to join the multicast group.

      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit d323efc786910bcc0c8f8b9f97780c70544ac4df
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:02:46 2015 +0800

      ACPI / PCI: Remove duplicated penalty on SCI IRQ

      Now we have dedicated interface acpi_penalize_sci_irq() to penalize
      ISA IRQ used by ACPI SCI, so remove duplicated code to penalize ACPI SCI
      in acpi_irq_penalty_init().

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 5ebc76035303016ec41bb752bec156ea9fde7c34
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:02:45 2015 +0800

      ACPI, PCI, irq: Do not share PCI IRQ with ISA IRQ

      Avoid IRQs occupied by ISA IRQs when allocating IRQs for PCI link devices,
      otherwise it may cause interrupt storm due to incompatible pin attributes.

      This issue was triggered on a KVM virtual machine, which
       1) uses IRQ9 for SCI in high level mode.
       2) defines an PCI interrupt link device (LNKS) with IRQ9 as the only
          possible irq.
       3) has an PCI device referring to link device LNKS.
      So it causes interrupt storm when enabling the PCI device because PCI IRQ
      works in low level mode.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Acked-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 15b94fa32a422f4b97dc34e4b7060ec83d10bee5
  Author: Lv Zheng <lv.zheng@xxxxxxxxx>
  Date:   Thu Sep 24 14:54:40 2015 +0800

      ACPI / EC: Fix a memory leak issue in acpi_ec_query()

      When query handler is not found, "result" is actually stil 0, and
      "struct acpi_ec_query" is not NULL, so the deletion code of
      "struct acpi_ec_query" at the end of the function cannot be invoked.
      As a consequence, memory leak can be observed.

      The issue is introduced by this commit:
        Commit: 02b771b64b73226052d6e731a0987db3b47281e9
        Subject: ACPI / EC: Fix an issue caused by the serialized _Qxx

      This patch fixes such memory leakage.

      Fixes: 02b771b64b73 (ACPI / EC: Fix an issue caused by the serialized 
_Qxx evaluations)
      Signed-off-by: Lv Zheng <lv.zheng@xxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit d4a748a10e50d95992ae67677f1a1a13e2d6ed47
  Merge: 03e8f64 9badce0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 16:20:55 2015 -0700

      Merge branch 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup

      Pull another cgroup fix from Tejun Heo:
       "The cgroup writeback support got inadvertently enabled for traditional
        hierarchies revealing two regressions which are currently being worked
        on.  It shouldn't have been enabled on traditional hierarchies, so
        disable it on them.  This is enough to make the regressions go away
        for people who aren't experimenting with cgroup"

      * 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup:
        cgroup, writeback: don't enable cgroup writeback on traditional 
hierarchies

  commit e1a2d49cd5ef551c51be95cc037033e9e582b0cd
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Thu Sep 24 12:28:44 2015 -0700

      PM / OPP: Fix typo modifcation -> modification

      Reported-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 4d54d86546f62c7c4a0fe3b36a64c5e3b98ce1a9
  Merge: 6ea29da 1b70e97
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 13:00:40 2015 -0700

      Merge branch 'listener-sock-const'

      Eric Dumazet says:

      ====================
      dccp/tcp: constify listener sock

      Another patch bomb to prepare lockless TCP/DCCP LISTEN handling.

      SYNACK retransmits are built and sent without listener socket
      being locked. Soon, initial SYNACK packets will have same property.

      This series makes sure we did not something wrong with this model,
      by adding a const qualifier in all the paths taken from synack building
      and transmit, for IPv4/IPv6 and TCP/dccp.

      The only potential problem was the rewrite of ecn bits for connections
      with DCTCP as congestion module, but this was a very minor one.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1b70e977cef6ce7e7411c9bbec21f9adc8e29097
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:24 2015 -0700

      inet: constify inet_rtx_syn_ack() sock argument

      SYNACK packets are sent on behalf on unlocked listeners
      or fastopen sockets. Mark socket as const to catch future changes
      that might break the assumption.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ea3bea3a1d38aab1542176b2ff11a99ce3db9656
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:23 2015 -0700

      tcp/dccp: constify rtx_synack() and friends

      This is done to make sure we do not change listener socket
      while sending SYNACK packets while socket lock is not held.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 802885fc0400d0166a6b65d1844b61696aecbb10
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:22 2015 -0700

      dccp: constify dccp_make_response() socket argument

      Like tcp_make_synack() the only time we might change the socket is
      when calling sock_wmalloc(), which is using atomic operation to
      update sk->sk_wmem_alloc

      Also use MAX_DCCP_HEADER as both IPv4/IPv6 use this value for max_header.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f935dbedc49a5044ebff08b47eef35a2f2bbe92
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:21 2015 -0700

      tcp: constify tcp_v{4|6}_send_synack() socket argument

      This documents fact that listener lock might not be held
      at the time SYNACK are sent.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1c1e9d2b67897316770fc8a2e1acdd9f2787838d
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:20 2015 -0700

      ipv6: constify ip6_xmit() sock argument

      This is to document that socket lock might not be held at this point.

      skb_set_owner_w() and ipv6_local_error() are using proper atomic ops
      or spinlocks, so we promote the socket to non const when calling them.

      netfilter hooks should never assume socket lock is held,
      we also promote the socket to non const.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5d062de7f8ea1ca7c635957ff1144fba815ba34c
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:19 2015 -0700

      tcp: constify tcp_make_synack() socket argument

      listener socket is not locked when tcp_make_synack() is called.

      We better make sure no field is written.

      There is one exception : Since SYNACK packets are attached to the listener
      at this moment (or SYN_RECV child in case of Fast Open),
      sock_wmalloc() needs to update sk->sk_wmem_alloc, but this is done using
      atomic operations so this is safe.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ac705b1805863b1899e85f641bb265f9e6e9d99
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:18 2015 -0700

      tcp: remove tcp_ecn_make_synack() socket argument

      SYNACK packets might be sent without holding socket lock.

      For DCTCP/ECN sake, we should call INET_ECN_xmit() while
      socket lock is owned, and only when we init/change congestion control.

      This also fixies a bug if congestion module is changed from
      dctcp to another one on a listener : we now clear ECN bits
      properly.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 37bfbdda0b036a3720924e04c0171d9038159c2c
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:17 2015 -0700

      tcp: remove tcp_synack_options() socket argument

      We do not use the socket in this function.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cfe673b0ae4754ffc051482f4a948b67ddbeec10
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:16 2015 -0700

      ip: constify ip_build_and_send_pkt() socket argument

      This function is used to build and send SYNACK packets,
      possibly on behalf of unlocked listener socket.

      Make sure we did not miss a write by making this socket const.

      We no longer can use ip_select_ident() and have to either
      set iph->id to 0 or directly call __ip_select_ident()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b83e3deb974ca2c11e21256fe602e517afb83247
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:15 2015 -0700

      tcp: md5: constify tcp_md5_do_lookup() socket argument

      When TCP new listener is done, these functions will be called
      without socket lock being held. Make sure they don't change
      anything.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e3f5d727d60939c890a6e86944da52b3a1625ce
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:14 2015 -0700

      inet: constify ip_dont_fragment() arguments

      ip_dont_fragment() can accept const socket and dst

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 30d50c61df94bc8d7700272ea09a716e0af8b58b
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:13 2015 -0700

      ipv6: constify inet6_csk_route_req() socket argument

      socket is not modified, make it const so that callers can
      do the same if they need.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3aef934f4d4b97532c333d9c1f5f73fb80aeb459
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:12 2015 -0700

      ipv6: constify ip6_dst_lookup_{flow|tail}() sock arguments

      ip6_dst_lookup_flow() and ip6_dst_lookup_tail() do not touch
      socket, lets add a const qualifier.

      This will permit the same change in inet6_csk_route_req()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e5895bc600ccba1fde4ea0741813f9c33b5b4021
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:11 2015 -0700

      inet: constify inet_csk_route_req() socket argument

      This is used by TCP listener core, and listener socket shall
      not be modified by inet_csk_route_req().

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6f9c961546699ff8bc5e1c1c52200616867ec68a
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:10 2015 -0700

      inet: constify ip_route_output_flow() socket argument

      Very soon, TCP stack might call inet_csk_route_req(), which
      calls inet_csk_route_req() with an unlocked listener socket,
      so we need to make sure ip_route_output_flow() is not trying to
      change any field from its socket argument.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b1964b5fce389a5660139ca39c25ff294da07b4f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:09 2015 -0700

      tcp: constify tcp_openreq_init_rwin()

      Soon, listener socket wont be locked when tcp_openreq_init_rwin()
      is called. We need to read socket fields once, as their value
      could change under us.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b40cf18ef7961b6d67732e234780586590510ce1
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Sep 25 07:39:08 2015 -0700

      tcp: constify listener socket in tcp_v[46]_init_req()

      Soon, listener socket spinlock will no longer be held,
      add const arguments to tcp_v[46]_init_req() to make clear these
      functions can not mess socket fields.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f438c6138ac5739ce16c8db04689e438d65dfe6
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 25 09:03:14 2015 +0000

      Bluetooth: btmrvl: Comparison to NULL re-written

      NOT NULL comparison modified to be readable, reported
      by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 58a89ecaca53736aa465170530acea4f8be34ab4
  Author: Guillaume Nault <g.nault@xxxxxxxxxxxx>
  Date:   Thu Sep 24 12:54:01 2015 +0200

      ppp: fix lockdep splat in ppp_dev_uninit()

      ppp_dev_uninit() locks all_ppp_mutex while under rtnl mutex protection.
      ppp_create_interface() must then lock these mutexes in that same order
      to avoid possible deadlock.

      [  120.880011] ======================================================
      [  120.880011] [ INFO: possible circular locking dependency detected ]
      [  120.880011] 4.2.0 #1 Not tainted
      [  120.880011] -------------------------------------------------------
      [  120.880011] ppp-apitest/15827 is trying to acquire lock:
      [  120.880011]  (&pn->all_ppp_mutex){+.+.+.}, at: [<ffffffffa0145f56>] 
ppp_dev_uninit+0x64/0xb0 [ppp_generic]
      [  120.880011]
      [  120.880011] but task is already holding lock:
      [  120.880011]  (rtnl_mutex){+.+.+.}, at: [<ffffffff812e4255>] 
rtnl_lock+0x12/0x14
      [  120.880011]
      [  120.880011] which lock already depends on the new lock.
      [  120.880011]
      [  120.880011]
      [  120.880011] the existing dependency chain (in reverse order) is:
      [  120.880011]
      [  120.880011] -> #1 (rtnl_mutex){+.+.+.}:
      [  120.880011]        [<ffffffff81073a6f>] lock_acquire+0xcf/0x10e
      [  120.880011]        [<ffffffff813ab18a>] mutex_lock_nested+0x56/0x341
      [  120.880011]        [<ffffffff812e4255>] rtnl_lock+0x12/0x14
      [  120.880011]        [<ffffffff812d9d94>] register_netdev+0x11/0x27
      [  120.880011]        [<ffffffffa0147b17>] ppp_ioctl+0x289/0xc98 
[ppp_generic]
      [  120.880011]        [<ffffffff8113b367>] do_vfs_ioctl+0x4ea/0x532
      [  120.880011]        [<ffffffff8113b3fd>] SyS_ioctl+0x4e/0x7d
      [  120.880011]        [<ffffffff813ad7d7>] 
entry_SYSCALL_64_fastpath+0x12/0x6f
      [  120.880011]
      [  120.880011] -> #0 (&pn->all_ppp_mutex){+.+.+.}:
      [  120.880011]        [<ffffffff8107334e>] __lock_acquire+0xb07/0xe76
      [  120.880011]        [<ffffffff81073a6f>] lock_acquire+0xcf/0x10e
      [  120.880011]        [<ffffffff813ab18a>] mutex_lock_nested+0x56/0x341
      [  120.880011]        [<ffffffffa0145f56>] ppp_dev_uninit+0x64/0xb0 
[ppp_generic]
      [  120.880011]        [<ffffffff812d5263>] 
rollback_registered_many+0x19e/0x252
      [  120.880011]        [<ffffffff812d5381>] rollback_registered+0x29/0x38
      [  120.880011]        [<ffffffff812d53fa>] 
unregister_netdevice_queue+0x6a/0x77
      [  120.880011]        [<ffffffffa0146a94>] ppp_release+0x42/0x79 
[ppp_generic]
      [  120.880011]        [<ffffffff8112d9f6>] __fput+0xec/0x192
      [  120.880011]        [<ffffffff8112dacc>] ____fput+0x9/0xb
      [  120.880011]        [<ffffffff8105447a>] task_work_run+0x66/0x80
      [  120.880011]        [<ffffffff81001801>] 
prepare_exit_to_usermode+0x8c/0xa7
      [  120.880011]        [<ffffffff81001900>] 
syscall_return_slowpath+0xe4/0x104
      [  120.880011]        [<ffffffff813ad931>] int_ret_from_sys_call+0x25/0x9f
      [  120.880011]
      [  120.880011] other info that might help us debug this:
      [  120.880011]
      [  120.880011]  Possible unsafe locking scenario:
      [  120.880011]
      [  120.880011]        CPU0                    CPU1
      [  120.880011]        ----                    ----
      [  120.880011]   lock(rtnl_mutex);
      [  120.880011]                                lock(&pn->all_ppp_mutex);
      [  120.880011]                                lock(rtnl_mutex);
      [  120.880011]   lock(&pn->all_ppp_mutex);
      [  120.880011]
      [  120.880011]  *** DEADLOCK ***

      Fixes: 8cb775bc0a34 ("ppp: fix device unregistration upon netns deletion")
      Reported-by: Sedat Dilek <sedat.dilek@xxxxxxxxx>
      Tested-by: Sedat Dilek <sedat.dilek@xxxxxxxxx>
      Signed-off-by: Guillaume Nault <g.nault@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21343ac21ec7d871e94e98e288f3398a4207d9c0
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 24 15:46:53 2015 +0530

      net: via/Kconfig: GENERIC_PCI_IOMAP required if PCI not selected

      The builds of allmodconfig of avr32 is failing with:

      drivers/net/ethernet/via/via-rhine.c:1098:2: error: implicit declaration
      of function 'pci_iomap' [-Werror=implicit-function-declaration]
      drivers/net/ethernet/via/via-rhine.c:1119:2: error: implicit declaration
      of function 'pci_iounmap' [-Werror=implicit-function-declaration]

      The generic empty pci_iomap and pci_iounmap is used only if CONFIG_PCI
      is not defined and CONFIG_GENERIC_PCI_IOMAP is defined.

      Add GENERIC_PCI_IOMAP in the dependency list for VIA_RHINE as we are
      getting build failure when CONFIG_PCI and CONFIG_GENERIC_PCI_IOMAP both
      are not defined.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ea29da1d04f56e167ec8cc5ed15e927997d9d67
  Author: Michal KubeÄ?ek <mkubecek@xxxxxxx>
  Date:   Thu Sep 24 10:59:05 2015 +0200

      net: remove unused argument of __netdev_find_adj()

      The __netdev_find_adj() helper does not use its first argument, only the
      device to find and list to walk through.

      Signed-off-by: Michal Kubecek <mkubecek@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 119e359c6f2254b3b0724f951e786f19405d2299
  Merge: f37db85 008aa6a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 12:27:23 2015 -0700

      Merge branch 'l2tp-module-autoloading'

      Stephen Hemminger says:

      ====================
      l2tp: module autoloading

      With L2TP it was necessary to manually load modules
      which is a nuisance and not required with other tunneling
      protocols. This set of patches adds the aliases and module
      load hook to get rid of the necessity of modprobing.
      ====================

      Acked-By: James Chapman <jchapman@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 008aa6a4faac36fe623ff5a1ba753dc9b0d8102e
  Author: stephen hemminger <stephen@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:33:36 2015 -0700

      l2tp: remove references to modprobe in documentation

      No longer need explicit modprobe's and update to use ip instead
      of deprecated ifconfig command.

      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 163c2e252fa658ac26edda78d2a9e3939f7d10e5
  Author: stephen hemminger <stephen@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:33:35 2015 -0700

      l2tp: auto load IP modules

      When creating a IP encapsulated tunnel the necessary l2tp module
      should be loaded. It already works for UDP encapsulation, it just
      doesn't work for direct IP encap.

      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f1f39f91102733bcde2462c6a138f636ee541ea8
  Author: stephen hemminger <stephen@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:33:34 2015 -0700

      l2tp: auto load type modules

      It should not be necessary to do explicit module loading when
      configuring L2TP. Modules should be loaded as needed instead
      (as is done already with netlink and other tunnel types).

      This patch adds a new module alias type and code to load
      the sub module on demand.

      Signed-off-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f37db85d0c1eb6e4e8460cf7a13cfba42bfc2cb0
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Wed Sep 23 18:19:58 2015 -0700

      net: dsa: Set a "dsa" device_type

      Provide a device_type information for slave network devices created by
      DSA, this is useful for user-space application to easily locate/search
      for devices of a specific kind.

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 357cd64c18404309aabefb82019b12773de31a12
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 00:07:17 2015 +0100

      phy: marvell: add link partner advertised modes

      Read the standard link partner advertisment registers and store it in
      phydev->lp_advertising, so ethtool can report this information to
      userspace via ethtool.  Zero it as per genphy if autonegotiation is
      disabled.  Tested with a Marvell 88E1512 PHY.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03e8f644868f147e021e8660346890e731c2e435
  Merge: 101688f 2b9dbef
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 12:08:41 2015 -0700

      Merge branch 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes from Chris Mason:
       "This is an assorted set I've been queuing up:

        Jeff Mahoney tracked down a tricky one where we ended up starting IO
        on the wrong mapping for special files in btrfs_evict_inode.  A few
        people reported this one on the list.

        Filipe found (and provided a test for) a difficult bug in reading
        compressed extents, and Josef fixed up some quota record keeping with
        snapshot deletion.  Chandan killed off an accounting bug during DIO
        that lead to WARN_ONs as we freed inodes"

      * 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        Btrfs: keep dropped roots in cache until transaction commit
        Btrfs: Direct I/O: Fix space accounting
        btrfs: skip waiting on ordered range for special files
        Btrfs: fix read corruption of compressed and shared extents
        Btrfs: remove unnecessary locking of cleaner_mutex to avoid deadlock
        Btrfs: don't initialize a space info as full to prevent ENOSPC

  commit c3852ab0e606212de523c1fb1e15adbf9f431619
  Author: Doug Ledford <dledford@xxxxxxxxxx>
  Date:   Fri Sep 25 14:35:01 2015 -0400

      IB/ipoib: Make sendonly multicast joins create the mcast group

      Since IPoIB should, as much as possible, emulate how multicast
      sends work on Ethernet for regular TCP/IP apps, there should be
      no requirement to subscribe to a multicast group before your
      sends are properly sent.  However, due to the difference in how
      multicast is handled on InfiniBand, we must join the appropriate
      multicast group before we can send to it.  Previously we tried
      not to trigger the auto-create feature of the subnet manager when
      doing this because we didn't have tracking of these sendonly
      groups and the auto-creation might never get undone.  The previous
      patch added timing to these sendonly joins and allows us to
      leave them after a reasonable idle expiration time.  So supply
      all of the information needed to auto-create group.

      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit bd99b2e05c4df2a428e5c9dd338289089d0e26df
  Author: Christoph Lameter <cl@xxxxxxxxx>
  Date:   Thu Sep 24 12:00:05 2015 -0500

      IB/ipoib: Expire sendonly multicast joins

      On neighbor expiration, check to see if the neighbor was actually a
      sendonly multicast join, and if so, leave the multicast group as we
      expire the neighbor.

      Signed-off-by: Christoph Lameter <cl@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 101688f534fd322520678a184fdfedc7a21741fc
  Merge: ddff42e 500d701
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:33:52 2015 -0700

      Merge tag 'nfs-for-4.3-2' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs

      Pull NFS client bugfixes from Trond Myklebust:
       "Highlights include:

        Stable patches:
         - fix v4.2 SEEK on files over 2 gigs
         - Fix a layout segment reference leak when pNFS I/O falls back to 
inband I/O.
         - Fix recovery of recalled read delegations

        Bugfixes:
         - Fix a case where NFSv4 fails to send CLOSE after a server reboot
         - Fix sunrpc to wait for connections to complete before retrying
         - Fix sunrpc races between transport connect/disconnect and shutdown
         - Fix an infinite loop when layoutget fail with BAD_STATEID
         - nfs/filelayout: Fix NULL reference caused by double freeing of 
fh_array
         - Fix a bogus WARN_ON_ONCE() in O_DIRECT when layout 
commit_through_mds is set
         - Fix layoutreturn/close ordering issues"

      * tag 'nfs-for-4.3-2' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs:
        NFS41: make close wait for layoutreturn
        NFS: Skip checking ds_cinfo.buckets when lseg's commit_through_mds is 
set
        NFSv4.x/pnfs: Don't try to recover stateids twice in layoutget
        NFSv4: Recovery of recalled read delegations is broken
        NFS: Fix an infinite loop when layoutget fail with BAD_STATEID
        NFS: Do cleanup before resetting pageio read/write to mds
        SUNRPC: xs_sock_mark_closed() does not need to trigger socket autoclose
        SUNRPC: Lock the transport layer on shutdown
        nfs/filelayout: Fix NULL reference caused by double freeing of fh_array
        SUNRPC: Ensure that we wait for connections to complete before retrying
        SUNRPC: drop null test before destroy functions
        nfs: fix v4.2 SEEK on files over 2 gigs
        SUNRPC: Fix races between socket connection and destroy code
        nfs: fix pg_test page count calculation
        Failing to send a CLOSE if file is opened WRONLY and server reboots on 
a 4.x mount

  commit ddff42e5926bc0fcfcbc7d035cdbc325c36351bc
  Merge: 966966a 7f57d80
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:25:30 2015 -0700

      Merge tag 'sound-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

      Pull sound fixes from Takashi Iwai:
       "This ended up with a larger set of fixes than wished, unfortunately.

        As diffstat shows, the majority of changes are for various ASoC
        drivers (Realtek, Wolfson codec drivers, etc), in addition to a couple
        of HD-audio regression fixes.  All these are reasonably small and
        nothing to scare much"

      * tag 'sound-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound: (29 commits)
        ALSA: hda - Disable power_save_node for Thinkpads
        ALSA: hda/tegra - async probe for avoiding module loading deadlock
        ASoC: rt5645: Prevent the pop sound in case of playback and the jack is 
plugging
        ASoC: rt5645: Increase the delay time to remove the pop sound
        ASoC: rt5645: Use the type SOC_DAPM_SINGLE_AUTODISABLE to prevent the 
weird sound in runtime of power up
        ASoC: pxa: pxa2xx-ac97: fix dma requestor lines
        MAINTAINERS: Update website and git repo for Wolfson Microelectronics
        ASoC: fsl_ssi: Fix checking of dai format for AC97 mode
        ASoC: wm0010: fix error path
        ASoC: wm0010: fix memory leak
        ASoC: wm8960: correct the max register value of mic boost pga
        ASoC: wm8962: remove 64k sample rate support
        ASoC: davinci-mcasp: Fix devm_kasprintf format string
        ASoC: fix broken pxa SoC support
        ASoC: davinci-mcasp: Set .symmetric_rates = 1 in snd_soc_dai_driver
        ASoC: au1x: psc-i2s: Fix unused variable 'ret' warning
        ASoC: SPEAr: Make SND_SPEAR_SOC select SND_SOC_GENERIC_DMAENGINE_PCM
        ASoC: mediatek: Increase periods_min in capture
        ASoC: davinci-mcasp: Revise the FIFO threshold calculation
        ASoC: wm8960: correct gain value for input PGA and add microphone PGA
        ...

  commit 966966a630d936310ebb0f9bfe9e23a662d00454
  Merge: b6d980f de24c18
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:16:53 2015 -0700

      Merge tag 'pci-v4.3-fixes-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci

      Pull PCI fixes from Bjorn Helgaas:
       "These are fixes for things we merged for v4.3 (VPD, MSI, and bridge
        window management), and a new Renesas R8A7794 SoC device ID.

        Details:

        Resource management:
         - Revert pci_read_bridge_bases() unification (Bjorn Helgaas)
         - Clear IORESOURCE_UNSET when clipping a bridge window (Bjorn
           Helgaas)

        MSI:
         - Fix MSI IRQ domains for VFs on virtual buses (Alex Williamson)

        Renesas R-Car host bridge driver:
         - Add R8A7794 support (Sergei Shtylyov)

        Miscellaneous:
         - Fix devfn for VPD access through function 0 (Alex Williamson)
         - Use function 0 VPD only for identical functions (Alex Williamson)"

      * tag 'pci-v4.3-fixes-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci:
        PCI: rcar: Add R8A7794 support
        PCI: Use function 0 VPD for identical functions, regular VPD for others
        PCI: Fix devfn for VPD access through function 0
        PCI/MSI: Fix MSI IRQ domains for VFs on virtual buses
        PCI: Clear IORESOURCE_UNSET when clipping a bridge window
        PCI: Revert "PCI: Call pci_read_bridge_bases() from core instead of 
arch code"

  commit 8494cdea2223b66491df1264619e2205b4487913
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:00:10 2015 +0200

      spi: davinci: fix handling platform_get_irq result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit b6d980f49342cbf823ef72fee8a572e43d43bcf8
  Merge: 57cb635 920552b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 10:51:40 2015 -0700

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM fixes from Paolo Bonzini:
       "AMD fixes for bugs introduced in the 4.2 merge window, and a few PPC
        bug fixes too"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        KVM: disable halt_poll_ns as default for s390x
        KVM: x86: fix off-by-one in reserved bits check
        KVM: x86: use correct page table format to check nested page table 
reserved bits
        KVM: svm: do not call kvm_set_cr0 from init_vmcb
        KVM: x86: trap AMD MSRs for the TSeg base and mask
        KVM: PPC: Book3S: Take the kvm->srcu lock in 
kvmppc_h_logical_ci_load/store()
        KVM: PPC: Book3S HV: Pass the correct trap argument to 
kvmhv_commence_exit
        KVM: PPC: Book3S HV: Fix handling of interrupted VCPUs
        kvm: svm: reset mmu on VCPU reset

  commit 438470b84c119f4910ebf1fdd26738c8d9881b24
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 24 13:06:04 2015 -0600

      EDAC: Fix sysfs dimm_label store operation

      Sysfs "dimm_label" and "chX_dimm_label" nodes have the following issues
      in their store operation:

       1) A newline-terminated input string causes redundant newlines:

        # echo "test" > /sys/bus/mc0/devices/dimm0/dimm_label
        # cat  /sys/bus/mc0/devices/dimm0/dimm_label
        test

        #  od -bc /sys/bus/mc0/devices/dimm0/dimm_label
        0000000 164 145 163 164 012 012
                  t   e   s   t  \n  \n
        0000006

       2) The original label string (31 characters) cannot be stored due to
          an improper size check:

        # echo "CPU_SrcID#0_Ha#0_Chan#0_DIMM#0" > 
/sys/bus/mc0/devices/dimm0/dimm_label
        # cat /sys/bus/mc0/devices/dimm0/dimm_label

        # od -bc /sys/bus/mc0/devices/dimm0/dimm_label
         0000000 012 012
                  \n  \n
         0000002

       3) An input string longer than the buffer size results a wrong label
          info as it allows a retry with the remaining string:

        # echo "CPU_SrcID#0_Ha#0_Chan#0_DIMM#0_TEST" > 
/sys/bus/mc0/devices/dimm0/dimm_label
        # cat  /sys/bus/mc0/devices/dimm0/dimm_label
        _TEST

      Fix these issues by making the following changes:
       1) Replace a newline character at the end by setting a null. It also
          assures that the string is null-terminated in the label buffer.
       2) Check the label buffer size with 'sizeof(dimm->label)'.
       3) Fail a request if its string exceeds the label buffer size.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Acked-by: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Robert Elliott <elliott@xxxxxxx>
      Link: http://lkml.kernel.org/r/1443121564.25474.160.camel@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 1ea62c59c80090dd4621911e1b7853c379da5fd7
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Tue Sep 22 08:58:02 2015 -0600

      EDAC: Fix sysfs dimm_label show operation

      After

        7d375bffa524 ("sb_edac: Fix support for systems with two home agents 
per socket")

      sysfs "dimm_label" and "chX_dimm_label" show their label string without a
      newline "\n" at the end.

        [root@orange ~]# cat /sys/bus/mc0/devices/dimm0/dimm_label
        CPU_SrcID#0_Ha#0_Chan#0_DIMM#0[root@orange ~]#

        [root@orange ~]# cat 
/sys/devices/system/edac/mc/mc0/csrow0/ch0_dimm_label
        CPU_SrcID#0_Ha#0_Chan#0_DIMM#0[root@orange ~]#

      The label strings now have 31 characters, which are the same as
      EDAC_MC_LABEL_LEN. Since the snprintf()s in channel_dimm_label_show()
      and dimmdev_label_show() limit the whole length by EDAC_MC_LABEL_LEN,
      the newline in the format "%s\n" is ignored.

        [root@orange ~]# od -bc /sys/bus/mc0/devices/dimm0/dimm_label
        0000000 103 120 125 137 123 162 143 111 104 043 060 137 110 141 043 060
                  C   P   U   _   S   r   c   I   D   #   0   _   H   a   #   0
        0000020 137 103 150 141 156 043 060 137 104 111 115 115 043 060 000
                  _   C   h   a   n   #   0   _   D   I   M   M   #   0  \0
        0000037

      Fix it by using 'sizeof(dimm->label) + 1' as the whole length in the
      snprintf()s in channel_dimm_label_show() and dimmdev_label_show().

      Reported-by: Robert Elliott <elliott@xxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Acked-by: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442933883-21587-2-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 57cb635c5cb6eea54af02aea5edd003b6b2715a7
  Merge: ced255c d6eb71a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 10:11:26 2015 -0700

      Merge tag 'powerpc-4.3-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixes from Michael Ellerman:
       - Wire up sys_membarrier()
       - cxl: Fix lockdep warning while creating afu_err_buff from Vaibhav

      * tag 'powerpc-4.3-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        cxl: Fix lockdep warning while creating afu_err_buff attribute
        powerpc: Wire up sys_membarrier()

  commit 536b5603e7a3c75c7d2e0c1c56980690909b12d3
  Merge: 6ff33f3 b4fe8ba
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Sep 25 10:01:09 2015 -0700

      Merge tag 'ib-mfd-regmap-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd into regmap-irq-hdr

      Immutable branch between MFD and Regmap due for v4.3

  commit b4b05b9af35e4ba8aee4fc8fcfc4175c7feb3544
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sat Aug 29 01:25:01 2015 +0200

      pinctrl: mediatek: Consistently use the BIT() macro

      The mediatek pinctrl driver uses the BIT() macro instead of open
      coding 1 << n in all but one place. Replace this occurrence with
      the BIT() macro for consistency.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Matthias Brugger <matthias.bgg@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e74679b38c9417c1c524081121cdcdb36f82264d
  Author: Lars-Peter Clausen <lars@xxxxxxxxxx>
  Date:   Fri Sep 25 11:07:04 2015 +0200

      ASoC: db1200: Fix DAI link format for db1300 and db1550

      Commit b4508d0f95fa ("ASoC: db1200: Use static DAI format setup") switched
      the db1200 driver over to using static DAI format setup instead of a
      callback function. But the commit only added the dai_fmt field to one of
      the three DAI links in the driver. This breaks audio on db1300 and db1550.

      Add the two missing dai_fmt settings to fix the issue.

      Fixes: b4508d0f95fa ("ASoC: db1200: Use static DAI format setup")
      Reported-by: Manuel Lauss <manuel.lauss@xxxxxxxxx>
      Tested-by: Manuel Lauss <manuel.lauss@xxxxxxxxx>
      Signed-off-by: Lars-Peter Clausen <lars@xxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit c5ce767088a5ab7a051006c7c1f6e2c2ab9f460d
  Author: Xing Zheng <zhengxing@xxxxxxxxxxxxxx>
  Date:   Fri Aug 28 13:46:47 2015 +0800

      pinctrl: rockchip: add support for the rk3036

      Many parts of pinctrl rk3036 are similar to rk2928's.

      Signed-off-by: Xing Zheng <zhengxing@xxxxxxxxxxxxxx>
      Reviewed-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 283e8ba2dfde54f8f27d7d0f459a07de79a39d55
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 25 16:31:46 2015 +0100

      MODSIGN: Change from CMS to PKCS#7 signing if the openssl is too old

      The sign-file.c program actually uses CMS rather than PKCS#7 to sign a 
file
      since that allows the target X.509 certificate to be specified by
      subjectKeyId rather than by issuer + serialNumber.

      However, older versions of the OpenSSL crypto library (such as may be 
found
      in CentOS 5.11) don't support CMS.  Assume everything prior to
      OpenSSL-1.0.0 doesn't support CMS and switch to using PKCS#7 in that case.

      Further, the pre-1.0.0 OpenSSL only supports PKCS#7 signing with SHA1, so
      give an error from the sign-file script if the caller requests anything
      other than SHA1.

      The compiler gives the following error with an OpenSSL crypto library
      that's too old:

        HOSTCC  scripts/sign-file
      scripts/sign-file.c:23:25: fatal error: openssl/cms.h: No such file or 
directory
       #include <openssl/cms.h>

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Acked-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit e7c87bef7de2417b219d4dbfe8d33a0098a8df54
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 25 16:31:46 2015 +0100

      X.509: Don't strip leading 00's from key ID when constructing key 
description

      Don't strip leading zeros from the crypto key ID when using it to 
construct
      the struct key description as the signature in kernels up to and including
      4.2 matched this aspect of the key.  This means that 1 in 256 keys won't
      actually match if their key ID begins with 00.

      The key ID is stored in the module signature as binary and so must be
      converted to text in order to invoke request_key() - but it isn't stripped
      at this point.

      Something like this is likely to be observed in dmesg when the key is 
loaded:

      [    1.572423] Loaded X.509 cert 'Build time autogenerated kernel
          key: 62a7c3d2da278be024da4af8652c071f3fea33'

      followed by this when we try and use it:

        [    1.646153] Request for unknown module key 'Build time autogenerated
          kernel key: 0062a7c3d2da278be024da4af8652c071f3fea33' err -11

      The 'Loaded' line should show an extra '00' on the front of the hex 
string.

      This problem should not affect 4.3-rc1 and onwards because there the key
      should be matched on one of its auxiliary identities rather than the key
      struct's description string.

      Reported-by: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Reported-by: Andy Whitcroft <apw@xxxxxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>

  commit 292c6091353475d94e2cfb49c29906e88ee967ba
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 25 16:31:45 2015 +0100

      KEYS: Remove unnecessary header #inclusions from extract-cert.c

      Remove headers #included unnecessarily from extract-cert.c lest they cause
      compilation of the tool to fail against an older OpenSSL library.

      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Acked-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit 94c4554ba07adbdde396748ee7ae01e86cf2d8d7
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Fri Sep 25 16:30:08 2015 +0100

      KEYS: Fix race between key destruction and finding a keyring by name

      There appears to be a race between:

       (1) key_gc_unused_keys() which frees key->security and then calls
           keyring_destroy() to unlink the name from the name list

       (2) find_keyring_by_name() which calls key_permission(), thus accessing
           key->security, on a key before checking to see whether the key usage 
is 0
           (ie. the key is dead and might be cleaned up).

      Fix this by calling ->destroy() before cleaning up the core key data -
      including key->security.

      Reported-by: Petr Matousek <pmatouse@xxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>

  commit 81fb5e26a9d05674c048803a20cb8f08a1b1c9b8
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:34:24 2015 +0300

      IB/mlx5: Remove pa_lkey usages

      Since mlx5 driver cannot rely on registration using the
      reserved lkey (global_dma_lkey) it used to allocate a private
      physical address lkey for each allocated pd.
      Commit 96249d70dd70 ("IB/core: Guarantee that a local_dma_lkey
      is available") just does it in the core layer so we can go ahead
      and use that.

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit c6790aa9f4fdc26b1246ba36da2fd749663beb65
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:34:23 2015 +0300

      IB/mlx5: Remove support for IB_DEVICE_LOCAL_DMA_LKEY

      Commit 96249d70dd70 ("IB/core: Guarantee that a local_dma_lkey
      is available") allows ULPs that make use of the local dma key to keep
      working as before by allocating a DMA MR with local permissions and
      converted these consumers to use the MR associated with the PD
      rather then device->local_dma_lkey.

      ConnectIB has some known issues with memory registration
      using the local_dma_lkey (SEND, RDMA, RECV seems to work ok).

      Thus don't expose support for it (remove device->local_dma_lkey
      setting), and take advantage of the above commit such that no regression
      is introduced to working systems.

      The local_dma_lkey support will be restored in CX4 depending on FW
      capability query.

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3cffd930171518821595839c5ce7036894ef0d74
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:34:22 2015 +0300

      IB/iser: Add module parameter for always register memory

      This module parameter forces memory registration even for
      a continuous memory region. It is true by default as sending
      an all-physical rkey with remote permissions might be insecure.

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit bb6c96d72879fe1f674a804eb95b891def4ace61
  Author: Chuck Lever <chuck.lever@xxxxxxxxxx>
  Date:   Thu Sep 24 10:34:21 2015 +0300

      xprtrdma: Replace global lkey with lkey local to PD

      The core API has changed so that devices that do not have a global
      DMA lkey automatically create an mr, per-PD, and make that lkey
      available. The global DMA lkey interface is going away in favor of
      the per-PD DMA lkey.

      The per-PD DMA lkey is always available. Convert xprtrdma to use the
      device's per-PD DMA lkey for regbufs, no matter which memory
      registration scheme is in use.

      Signed-off-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: linux-nfs <linux-nfs@xxxxxxxxxxxxxxx>
      Acked-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 310b7cec8ea32dcd4e9978423717ce78dd89d45d
  Merge: e116a64 1f93e4a
  Author: Doug Ledford <dledford@xxxxxxxxxx>
  Date:   Fri Sep 25 10:46:07 2015 -0400

      Merge tag 'v4.3-rc2' into k.o/for-4.3-v1

      Linux 4.3-rc2

  commit 05bd7762faac386c224b159607fdaf65e5760672
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 25 09:05:04 2015 +0000

      Bluetooth: btuart_cs: Comparison to NULL re-written

      NOT NULL comparison modified to be readable, reported
      by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 7a1dc788e5c754685e3491c637875d8368bea42d
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 25 09:02:18 2015 +0000

      Bluetooth: bt3c_cs: Comparison to NULL re-written

      NOT NULL comparison modified to be readable, reported
      by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b5cabbcbd157a4bf5a92dfc85134999a3b55342d
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Thu Sep 24 13:05:22 2015 +0300

      perf tools: Fix copying of /proc/kcore

      A copy of /proc/kcore containing the kernel text can be made to the
      buildid cache. e.g.

        perf buildid-cache -v -k /proc/kcore

      To workaround objdump limitations, a copy is also made when annotating
      against /proc/kcore.

      The copying process stops working from libelf about v1.62 onwards (the
      problem was found with v1.63).

      The cause is that a call to gelf_getphdr() in kcore__add_phdr() fails
      because additional validation has been added to gelf_getphdr().

      The use of gelf_getphdr() is a misguided attempt to get default
      initialization of the Gelf_Phdr structure.  That should not be
      necessary because every member of the Gelf_Phdr structure is
      subsequently assigned.  So just remove the call to gelf_getphdr().

      Similarly, a call to gelf_getehdr() in gelf_kcore__init() can be
      removed also.

      Committer notes:

      Note to stable@xxxxxxxxxx, from Adrian in the cover letter for this
      patchkit:

      The "Fix copying of /proc/kcore" problem goes back to v3.13 if you think
      it is important enough for stable.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443089122-19082-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 043cba96915b9728b9d52c04954de5d1ce61be32
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Wed Sep 23 17:41:01 2015 -0700

      arm64, EDAC: Add L3/SoC DT subnodes to the APM X-Gene SoC EDAC node

      Add L3/SoC DT subnodes to the APM X-Gene SoC EDAC node.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Duc Dang <dhdang@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Iyappan Subramanian <isubramanian@xxxxxxx>
      Cc: jcm@xxxxxxxxxx
      Cc: Keyur Chudgar <kchudgar@xxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: mchehab@xxxxxxxxxxxxxxx
      Cc: patches@xxxxxxx
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Rameshwar Prasad Sahu <rsahu@xxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Tanmay Inamdar <tinamdar@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Y Vo <yvo@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443055261-8613-5-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 597ee40722bf05195f91a41e88e15b79bdab152c
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Thu Sep 24 13:05:21 2015 +0300

      perf intel-pt: Remove no_force_psb from documentation

      no_force_psb was dropped as a late change to the kernel driver.
      Consequently, remove it from the documentation.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443089122-19082-2-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f864b79ba247b0735d7423ca62d9ac5bdce74eac
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Wed Sep 23 17:41:00 2015 -0700

      EDAC, xgene: Add SoC support

      Add support for the SoC component.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: ijc+devicetree@xxxxxxxxxxxxxx
      Cc: jcm@xxxxxxxxxx
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: mark.rutland@xxxxxxx
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: patches@xxxxxxx
      Cc: robh+dt@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443055261-8613-4-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 266fa2b22294909ddf6e7d2f8acfe07adf9fd978
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 24 11:24:18 2015 -0300

      perf probe: Use existing routine to look for a kernel module by 
dso->short_name

      We have map_groups__find_by_name() to look at the list of modules that
      are in place for a given machine, so use it instead of traversing the
      machine dso list, which also includes DSOs for userspace.

      When merging the user and kernel DSO lists a bug was introduced where
      'perf probe' stopped being able to add probes to modules using its short
      name:

        # perf probe -m usbnet --add usbnet_start_xmit
        usbnet_start_xmit is out of .text, skip it.
          Error: Failed to add events.
        #

      With this fix it works again:

        # perf probe -m usbnet --add usbnet_start_xmit
        Added new event:
          probe:usbnet_start_xmit (on usbnet_start_xmit in usbnet)

        You can now use it in all perf tools, such as:

                perf record -e probe:usbnet_start_xmit -aR sleep 1
        #

      Reported-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Fixes: 3d39ac538629 ("perf machine: No need to have two DSOs lists")
      Link: http://lkml.kernel.org/r/20150924015008.GE1897@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9bc1c0c0ec14dcdb6df2c7a39dbaecb383a46681
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Thu Sep 24 10:38:07 2015 -0700

      EDAC, xgene: Fix possible sprintf() overflow issue

      Replace sprintf() with snprintf() to avoid possible string array
      overflow.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: ijc+devicetree@xxxxxxxxxxxxxx
      Cc: jcm@xxxxxxxxxx
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: mark.rutland@xxxxxxx
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: patches@xxxxxxx
      Cc: robh+dt@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443116287-11752-1-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 9347473c7d8218c795b5a73d8d94aa53657d9e29
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Wed Sep 23 17:40:59 2015 -0700

      EDAC, xgene: Add L3 support

      Add EDAC support for the L3 component.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: ijc+devicetree@xxxxxxxxxxxxxx
      Cc: jcm@xxxxxxxxxx
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: mark.rutland@xxxxxxx
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: patches@xxxxxxx
      Cc: robh+dt@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443055261-8613-3-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 3498355eec32cc8307655890916741e8a3419182
  Author: Loc Ho <lho@xxxxxxx>
  Date:   Wed Sep 23 17:40:58 2015 -0700

      EDAC, Documentation: Update X-Gene EDAC binding for L3/SoC subnodes

      Update documentation for the APM X-Gene SoC EDAC DTS binding for L3/SoC
      subnodes.

      Signed-off-by: Loc Ho <lho@xxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: jcm@xxxxxxxxxx
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: mchehab@xxxxxxxxxxxxxxx
      Cc: patches@xxxxxxx
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1443055261-8613-2-git-send-email-lho@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit f9fef6181a9590261c296be9e2a19b6aa3c13ba7
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 18:21:49 2015 +0200

      phy: berlin-sata: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit 08db7e5cbfc0ec3fa4f6ed483dc663afeae7ce16
  Author: huang lin <hl@xxxxxxxxxxxxxx>
  Date:   Fri Jul 17 15:29:25 2015 +0800

      phy: rockchip-usb: power down phy when rockchip phy probe

      rockchip phy are enable when soc reset, to save power consumption,
      we disable it when probe, and enable each phy when it use

      Signed-off-by: huang lin <hl@xxxxxxxxxxxxxx>
      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit 65d49b3d7068525117f8e1458f0496732d02fe15
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Sep 2 11:32:17 2015 +0300

      phy: qcom-ufs: fix build error when the component is built as a module

      Export the following functions in order to avoid build errors
      when the component PHY_QCOM_UFS is compiled as a module:

      ERROR: "ufs_qcom_phy_disable_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_enable_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_is_pcs_ready"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_disable_iface_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_start_serdes"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_calibrate_phy"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_enable_dev_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_set_tx_lane_enable"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_disable_dev_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_save_controller_version"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_enable_iface_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      make[1]: *** [__modpost] Error 1

      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit 920552b213e3dc832a874b4e7ba29ecddbab31bc
  Author: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 12:34:53 2015 +0200

      KVM: disable halt_poll_ns as default for s390x

      We observed some performance degradation on s390x with dynamic
      halt polling. Until we can provide a proper fix, let's enable
      halt_poll_ns as default only for supported architectures.

      Architectures are now free to set their own halt_poll_ns
      default value.

      Signed-off-by: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 58c95070da3a504fbeca7939435bbb062cb96ea3
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Sep 22 10:15:59 2015 +0200

      KVM: x86: fix off-by-one in reserved bits check

      29ecd6601904 ("KVM: x86: avoid uninitialized variable warning",
      2015-09-06) introduced a not-so-subtle problem, which probably
      escaped review because it was not part of the patch context.

      Before the patch, leaf was always equal to iterator.level.  After,
      it is equal to iterator.level - 1 in the call to is_shadow_zero_bits_set,
      and when is_shadow_zero_bits_set does another "-1" the check on
      reserved bits becomes incorrect.  Using "iterator.level" in the call
      fixes this call trace:

      WARNING: CPU: 2 PID: 17000 at arch/x86/kvm/mmu.c:3385 
handle_mmio_page_fault.part.93+0x1a/0x20 [kvm]()
      Modules linked in: tun sha256_ssse3 sha256_generic drbg binfmt_misc ipv6 
vfat fat fuse dm_crypt dm_mod kvm_amd kvm crc32_pclmul aesni_intel aes_x86_64 
lrw gf128mul glue_helper ablk_helper cryptd fam15h_power amd64_edac_mod k10temp 
edac_core amdkfd amd_iommu_v2 radeon acpi_cpufreq
      [...]
      Call Trace:
        dump_stack+0x4e/0x84
        warn_slowpath_common+0x95/0xe0
        warn_slowpath_null+0x1a/0x20
        handle_mmio_page_fault.part.93+0x1a/0x20 [kvm]
        tdp_page_fault+0x231/0x290 [kvm]
        ? emulator_pio_in_out+0x6e/0xf0 [kvm]
        kvm_mmu_page_fault+0x36/0x240 [kvm]
        ? svm_set_cr0+0x95/0xc0 [kvm_amd]
        pf_interception+0xde/0x1d0 [kvm_amd]
        handle_exit+0x181/0xa70 [kvm_amd]
        ? kvm_arch_vcpu_ioctl_run+0x68b/0x1730 [kvm]
        kvm_arch_vcpu_ioctl_run+0x6f6/0x1730 [kvm]
        ? kvm_arch_vcpu_ioctl_run+0x68b/0x1730 [kvm]
        ? preempt_count_sub+0x9b/0xf0
        ? mutex_lock_killable_nested+0x26f/0x490
        ? preempt_count_sub+0x9b/0xf0
        kvm_vcpu_ioctl+0x358/0x710 [kvm]
        ? __fget+0x5/0x210
        ? __fget+0x101/0x210
        do_vfs_ioctl+0x2f4/0x560
        ? __fget_light+0x29/0x90
        SyS_ioctl+0x4c/0x90
        entry_SYSCALL_64_fastpath+0x16/0x73
      ---[ end trace 37901c8686d84de6 ]---

      Reported-by: Borislav Petkov <bp@xxxxxxxxx>
      Tested-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 6fec21449a62702a582cecbb0b351363e039c95e
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Sep 22 23:02:14 2015 +0200

      KVM: x86: use correct page table format to check nested page table 
reserved bits

      Intel CPUID on AMD host or vice versa is a weird case, but it can
      happen.  Handle it by checking the host CPU vendor instead of the
      guest's in reset_tdp_shadow_zero_bits_mask.  For speed, the
      check uses the fact that Intel EPT has an X (executable) bit while
      AMD NPT has NX.

      Reported-by: Borislav Petkov <bp@xxxxxxxxx>
      Tested-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 79a8059d244e99454e474902e4325ee9b50e9178
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Sep 21 07:46:55 2015 +0200

      KVM: svm: do not call kvm_set_cr0 from init_vmcb

      kvm_set_cr0 may want to call kvm_zap_gfn_range and thus access the
      memslots array (SRCU protected).  Using a mini SRCU critical section
      is ugly, and adding it to kvm_arch_vcpu_create doesn't work because
      the VMX vcpu_create callback calls synchronize_srcu.

      Fixes this lockdep splat:

      ===============================
      [ INFO: suspicious RCU usage. ]
      4.3.0-rc1+ #1 Not tainted
      -------------------------------
      include/linux/kvm_host.h:488 suspicious rcu_dereference_check() usage!

      other info that might help us debug this:
      rcu_scheduler_active = 1, debug_locks = 0
      1 lock held by qemu-system-i38/17000:
       #0:  (&(&kvm->mmu_lock)->rlock){+.+...}, at: 
kvm_zap_gfn_range+0x24/0x1a0 [kvm]

      [...]
      Call Trace:
       dump_stack+0x4e/0x84
       lockdep_rcu_suspicious+0xfd/0x130
       kvm_zap_gfn_range+0x188/0x1a0 [kvm]
       kvm_set_cr0+0xde/0x1e0 [kvm]
       init_vmcb+0x760/0xad0 [kvm_amd]
       svm_create_vcpu+0x197/0x250 [kvm_amd]
       kvm_arch_vcpu_create+0x47/0x70 [kvm]
       kvm_vm_ioctl+0x302/0x7e0 [kvm]
       ? __lock_is_held+0x51/0x70
       ? __fget+0x101/0x210
       do_vfs_ioctl+0x2f4/0x560
       ? __fget_light+0x29/0x90
       SyS_ioctl+0x4c/0x90
       entry_SYSCALL_64_fastpath+0x16/0x73

      Reported-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 54b5b34eded2f068e8db181dec78be07b288dcfc
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 25 07:59:18 2015 +0000

      Bluetooth: bluecard: Comparison to NULL could be re-written

      replaced 'not null' comparison that is readable, reported by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0b101e62afe626ecae60173f92f1e0ec72151653
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Thu Sep 24 14:02:29 2015 +0200

      x86/asm: Force inlining of cpu_relax()

      On x86, cpu_relax() simply calls rep_nop(), which generates one
      instruction, PAUSE (aka REP NOP).

      With this config:

        http://busybox.net/~vda/kernel_config_OPTIMIZE_INLINING_and_Os

      gcc-4.7.2 does not always inline rep_nop(): it generates several
      copies of this:

        <rep_nop> (16 copies, 194 calls):
             55                      push   %rbp
             48 89 e5                mov    %rsp,%rbp
             f3 90                   pause
             5d                      pop    %rbp
             c3                      retq

      See: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=66122

      This patch fixes this via s/inline/__always_inline/
      on rep_nop() and cpu_relax().

      ( Forcing inlining only on rep_nop() causes GCC to
        deinline cpu_relax(), with almost no change in generated code).

            text     data      bss       dec     hex filename
        88118971 19905208 36421632 144445811 89c1173 vmlinux.before
        88118139 19905208 36421632 144444979 89c0e33 vmlinux

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443096149-27291-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7e5560a5648ab2bce7199c73b9c2a51b846f5541
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Thu Sep 24 04:48:53 2015 -0700

      perf/x86: Change test_aperfmperf() and test_intel() to static

      Fixes the following sparse warnings:

       arch/x86/kernel/cpu/perf_event_msr.c:13:6: warning: symbol
       'test_aperfmperf' was not declared. Should it be static?

       arch/x86/kernel/cpu/perf_event_msr.c:18:6: warning: symbol
       'test_intel' was not declared. Should it be static?

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/4588e8ab09638458f2451af572827108be3b4a36.1443123796.git.geliangtang@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3f2c5085ed99b6ad233cf77009c2f4f898b2f7c8
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Tue Sep 1 15:41:06 2015 -0700

      x86/sched/64: Don't save flags on context switch (reinstated)

      This reinstates the following commit:

        2c7577a75837 ("sched/x86_64: Don't save flags on context switch")

      which was reverted in:

        512255a2ad2c ("Revert 'sched/x86_64: Don't save flags on context 
switch'")

      Historically, Linux has always saved and restored EFLAGS across
      context switches.  As far as I know, the only reason to do this
      is because of the NT flag.  In particular, if something calls
      switch_to() with the NT flag set, then we don't want to leak the
      NT flag into a different task that might try to IRET and fail
      because NT is set.

      Before this commit:

        8c7aa698baca ("x86_64, entry: Filter RFLAGS.NT on entry from userspace")

      we could run system call bodies with NT set.  This would be a DoS or 
possibly
      privilege escalation hole if scheduling in such a system call would leak
      NT into a different task.

      Importantly, we don't need to worry about NT being set while
      preemptible or across page faults.  The only way we can schedule
      due to preemption or a page fault is in an interrupt entry that
      nests inside the SYSENTER prologue.  The CPU will clear NT when
      entering through an interrupt gate, so we won't schedule with NT
      set.

      The only other interesting flags are IOPL and AC.  Allowing
      switch_to() to change IOPL has no effect, as the value loaded
      during kernel execution doesn't matter at all except between a
      SYSENTER entry and the subsequent PUSHF, and anythign that
      interrupts in that window will restore IOPL on return.

      If we call __switch_to() with AC set, we have bigger problems.

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/d4440fdc2a89247bffb7c003d2a9a2952bd46827.1441146105.git.luto@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9c9ab385bc6c3f0787f742d5e9baf04063d9697a
  Merge: 93f13a9 bcee19f
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 25 09:28:58 2015 +0200

      Merge branch 'linus' into x86/asm, to refresh the tree before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 673681cafa99776e334c3e61cafa2cf115950c32
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 22:32:14 2015 -0700

      iscsi-target: Avoid OFMarker + IFMarker negotiation

      This patch fixes a v4.2+ regression introduced by commit c04a6091
      that removed support for obsolete sync-and-steering markers usage
      as originally defined in RFC-3720.

      The regression would involve attempting to send OFMarker=No +
      IFMarker=No keys during opertional negotiation login phase,
      including when initiators did not actually propose these keys.

      The result for MSFT iSCSI initiators would be random junk in
      TCP stream after the last successful login request was been sent
      signaling the move to full feature phase (FFP) operation.

      To address this bug, go ahead and avoid negotiating these keys
      by default unless the initiator explicitly proposes them, but
      still respond to them with 'No' if they are proposed.

      Reported-by: Dragan MilivojeviÄ? <galileo@xxxxxxxxxxx>
      Bisected-by: Christophe Vu-Brugier <cvubrugier@xxxxxxxxxxx>
      Tested-by: Christophe Vu-Brugier <cvubrugier@xxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit 8fa3a867486f85df66eba8c4df85804d3309c6ad
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 20:23:53 2015 -0700

      target: Make TCM_WRITE_PROTECT failure honor D_SENSE bit

      This patch changes transport_lookup_cmd_lun() to obtain
      se_lun->lun_ref + se_cmd->se_device rcu_dereference during
      TCM_WRITE_PROTECT -> CHECK_CONDITION failure status.

      Do this to ensure the active control D_SENSE mode page bit
      is being honored.

      Reported-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Reviewed-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit f3bb467ff64b2598d023b3a07592748fa7768b6a
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 23:07:45 2015 -0700

      target: Fix target_sense_desc_format NULL pointer dereference

      This patch allows target_sense_desc_format() to be called without a
      valid se_device pointer, which can occur during an early exception
      ahead of transport_lookup_cmd_lun() setting up se_cmd->se_device.

      This addresses a v4.3-rc1 specific NULL pointer dereference
      regression introduced by commit 4e4937e8.

      Cc: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Cc: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit eeeb9522231118138be418ff527dc8c9050f4707
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 17:27:35 2015 -0700

      target: Propigate backend read-only to core_tpg_add_lun

      This patch adds a DF_READ_ONLY flag that is used by IBLOCK to
      signal when a backend has been set to read-only mode, in order
      to propigate read-only status up to core_tpg_add_lun() for all
      future LUN fabric exports.

      With this is place, existing emulation for reporting read-only
      in spc_emulate_modesense() and normal transport_lookup_cmd_lun()
      TCM_WRITE_PROTECTED status checking just works as expected.

      Reported-by: Joeue Deng <joeue404@xxxxxxxxx>
      Reported-by: Andy Grover <agrover@xxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit 3ccd6e83df8a0d4a664edeecc453c4fa046395fb
  Author: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 02:30:46 2015 -0700

      target: Fix PR registration + APTPL RCU conversion regression

      This patch fixes a v4.2+ regression introduced by commit 79dc9c9e86
      where lookup of t10_pr_registration->pr_reg_deve and associated
      ->pr_kref get was missing from __core_scsi3_do_alloc_registration(),
      which is responsible for setting DEF_PR_REG_ACTIVE.

      This would result in REGISTER operations completing successfully,
      but subsequent core_scsi3_pr_seq_non_holder() checking would fail
      with !DEF_PR_REG_ACTIVE -> RESERVATION CONFLICT status.

      Update __core_scsi3_add_registration() to drop ->pr_kref reference
      after registration and any optional ALL_TG_PT=1 processing has
      completed.  Update core_scsi3_decode_spec_i_port() to release
      the new parent local_pr_reg->pr_kref as well.

      Also, update __core_scsi3_check_aptpl_registration() to perform
      the same target_nacl_find_deve() lookup + ->pr_kref get, now that
      __core_scsi3_add_registration() expects to drop the reference.

      Finally, since there are cases when se_dev_entry->se_lun_acl can
      still be dereferenced in core_scsi3_lunacl_undepend_item() while
      holding ->pr_kref, go ahead and move explicit rcu_assign_pointer()
      NULL assignments within core_disable_device_list_for_node() until
      after orig->pr_comp finishes.

      Reported-by: Scott L. Lykens <scott@xxxxxxxxxx>
      Tested-by: Scott L. Lykens <scott@xxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Cc: Hannes Reinecke <hare@xxxxxxx>
      Cc: Lee Duncan <lduncan@xxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2+
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit b626ef0128d254d33ee43c51d68f577bbec370ac
  Merge: 17a10c9 9861f72
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 23:04:53 2015 -0700

      Merge branch 'phy-mdio-refcnt'

      Russell King says:

      ====================
      Phy, mdiobus, and netdev struct device fixes

      The third version of this series fixes the build error which David
      identified, and drops the broken changes for the Cavium Thunger BGX
      ethernet driver as this driver requires some complex changes to
      resolve the leakage - and this is best done by people who can test
      the driver.

      Compared to v2, the only patch which has changed is patch 6
        "net: fix phy refcounting in a bunch of drivers"

      I _think_ I've been able to build-test all the drivers touched by
      that patch to some degree now, though several of them needed the
      Kconfig hacked to allow it (not all had || COMPILE_TEST clause on
      their dependencies.)

      Previous cover letters below:

      This is the second version of the series, with the comments David had
      on the first patch fixed up.  Original series description with updated
      diffstat below.

      While looking at the DSA code, I noticed we have a
      of_find_net_device_by_node(), and it looks like users of that are
      similarly buggy - it looks like net/dsa/dsa.c is the only user.  Fix
      that too.

      Hi,

      While looking at the phy code, I identified a number of weaknesses
      where refcounting on device structures was being leaked, where
      modules could be removed while in-use, and where the fixed-phy could
      end up having unintended consequences caused by incorrect calls to
      fixed_phy_update_state().

      This patch series resolves those issues, some of which were discovered
      with testing on an Armada 388 board.  Not all patches are fully tested,
      particularly the one which touches several network drivers.

      When resolving the struct device refcounting problems, several different
      solutions were considered before settling on the implementation here -
      one of the considerations was to avoid touching many network drivers.
      The solution here is:

        phy_attach*() - takes a refcount
        phy_detach*() - drops the phy_attach refcount

      Provided drivers always attach and detach their phys, which they should
      already be doing, this should change nothing, even if they leak a 
refcount.

        of_phy_find_device() and of_* functions which use that take
        a refcount.  Arrange for this refcount to be dropped once
        the phy is attached.

      This is the reason why the previous change is important - we can't drop
      this refcount taken by of_phy_find_device() until something else holds
      a reference on the device.  This resolves the leaked refcount caused by
      using of_phy_connect() or of_phy_attach().

      Even without the above changes, these drivers are leaking by calling
      of_phy_find_device().  These drivers are addressed by adding the
      appropriate release of that refcount.

      The mdiobus code also suffered from the same kind of leak, but thankfully
      this only happened in one place - the mdio-mux code.

      I also found that the try_module_get() in the phy layer code was utterly
      useless: phydev->dev.driver was guaranteed to always be NULL, so
      try_module_get() was always being called with a NULL argument.  I proved
      this with my SFP code, which declares its own MDIO bus - the module use
      count was never incremented irrespective of how I set the MDIO bus up.
      This allowed the MDIO bus code to be removed from the kernel while there
      were still PHYs attached to it.

      One other bug was discovered: while using in-band-status with mvneta, it
      was found that if a real phy is attached with in-band-status enabled,
      and another ethernet interface is using the fixed-phy infrastructure, the
      interface using the fixed-phy infrastructure is configured according to
      the other interface using the in-band-status - which is caused by the
      fixed-phy code not verifying that the phy_device passed in is actually
      a fixed-phy device, rather than a real MDIO phy.

      Lastly, having mdio_bus reversing phy_device_register() internals seems
      like a layering violation - it's trivial to move that code to the phy
      device layer.
      ====================

      Tested-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9861f72074c77a8a065622c1be7e9c4277e600eb
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:33 2015 +0100

      net: fix net_device refcounting

      of_find_net_device_by_node() uses class_find_device() internally to
      lookup the corresponding network device.  class_find_device() returns
      a reference to the embedded struct device, with its refcount
      incremented.

      Add a comment to the definition in net/core/net-sysfs.c indicating the
      need to drop this refcount, and fix the DSA code to drop this refcount
      when the OF-generated platform data is cleaned up and freed.  Also
      arrange for the ref to be dropped when handling errors.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 38737e490d4ea91660d3cec83ef88c4e6d360ae4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:28 2015 +0100

      phy: add phy_device_remove()

      Add a phy_device_remove() function to complement phy_device_register(),
      which undoes the effects of phy_device_register() by removing the phy
      device from visibility, but not freeing it.

      This allows these details to be moved out of the mdio bus code into
      the phy code where this action belongs.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d618bf2bfd2a095644c852ebea16f5a981f9d875
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:23 2015 +0100

      phy: fixed-phy: properly validate phy in fixed_phy_update_state()

      Validate that the phy_device passed into fixed_phy_update_state() is a
      fixed-phy device before walking the list of phys for a fixed phy at the
      same address.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04d53b20fe44afe635b3d4438b437f7a12927e9a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:18 2015 +0100

      net: fix phy refcounting in a bunch of drivers

      of_phy_find_device() increments the phy struct device refcount, which
      we need to properly balance.  Add code to network drivers using this
      function to ensure that the struct device refcount is correctly
      balanced.

      For xgene, looking back in the history, we should be able to use
      of_phy_connect() with a zero flags argument for the DT case as this is
      how the driver used to operate prior to de7b5b3d790a ("net: eth: xgene:
      change APM X-Gene SoC platform ethernet to support ACPI").

      This leaves the Cavium Thunder BGX unfixed; fixing this driver is a
      complicated task, one which the maintainers need to be involved with.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f018ae7a8c576345d56a0cd40d86c0574a2eb360
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:13 2015 +0100

      of_mdio: fix MDIO phy device refcounting

      bus_find_device() is defined as:

       * This is similar to the bus_for_each_dev() function above, but it
       * returns a reference to a device that is 'found' for later use, as
       * determined by the @match callback.

      and it does indeed return a reference-counted pointer to the device:

              while ((dev = next_device(&i)))
                      if (match(dev, data) && get_device(dev))
                                              ^^^^^^^^^^^^^^^
                              break;
              klist_iter_exit(&i);
              return dev;

      What that means is that when we're done with the struct device, we must
      drop that reference.  Neither of_phy_connect() nor of_phy_attach() did
      this when phy_connect_direct() or phy_attach_direct() failed.

      With our previous patch, phy_connect_direct() and phy_attach_direct()
      take a new refcount on the phy device when successful, so we can drop
      our local reference immediatley after these functions, whether or not
      they succeeded.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7322967bc1bd97ac9c49ecea19e5a1f681ca27ee
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:08 2015 +0100

      phy: add proper phy struct device refcounting

      Take a refcount on the phy struct device when the phy device is attached
      to a network device, and drop it after it's detached.  This ensures that
      a refcount is held on the phy device while the device is being used by
      a network device, thereby preventing the phy_device from being
      unexpectedly kfree()'d by phy_device_release().

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3e3aaf649416988ca8be4ad2c52dc24d8be7b46e
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:36:02 2015 +0100

      phy: fix mdiobus module safety

      Re-implement the mdiobus module refcounting to ensure that we actually
      ensure that the mdiobus module code does not go away while we might call
      into it.

      The old scheme using bus->dev.driver was buggy, because bus->dev is a
      class device which never has a struct device_driver associated with it,
      and hence the associated code trying to obtain a refcount did nothing
      useful.

      Instead, take the approach that other subsystems do: pass the module
      when calling mdiobus_register(), and record that in the mii_bus struct.
      When we need to increment the module use count in the phy code, use
      this stored pointer.  When the phy is deteched, drop the module
      refcount, remembering that the phy device might go away at that point.

      This doesn't stop the mii_bus going away while there are in-use phys -
      it merely stops the underlying code vanishing.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e496ae690b2faff751e1849fb97b060615e21f28
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:35:57 2015 +0100

      net: dsa: fix of_mdio_find_bus() device refcount leak

      Current users of of_mdio_find_bus() leak a struct device refcount, as
      they fail to clean up the reference obtained inside class_find_device().

      Fix the DSA code to properly refcount the returned MDIO bus by:
      1. taking a reference on the struct device whenever we assign it to
         pd->chip[x].host_dev.
      2. dropping the reference when we overwrite the existing reference.
      3. dropping the reference when we free the data structure.
      4. dropping the initial reference we obtained after setting up the
         platform data structure, or on failure.

      In step 2 above, where we obtain a new MDIO bus, there is no need to
      take a reference on it as we would only have to drop it immediately
      after assignment again, iow:

        put_device(cd->host_dev);       /* drop original assignment ref */
        cd->host_dev = get_device(&mdio_bus_switch->dev); /* get our ref */
        put_device(&mdio_bus_switch->dev); /* drop of_mdio_find_bus ref */

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a136442131443d929d2d8d243157824de4dfbae8
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:35:52 2015 +0100

      phy: fix of_mdio_find_bus() device refcount leak

      of_mdio_find_bus() leaks a struct device refcount, caused by using
      class_find_device() and not realising that the device reference has
      its refcount incremented:

       * Note, you will need to drop the reference with put_device() after use.
      ...
              while ((dev = class_dev_iter_next(&iter))) {
                      if (match(dev, data)) {
                              get_device(dev);
                              break;
                      }

      Update the comment, and arrange for the phy code to drop this refcount
      when disposing of a reference to it.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4110b282059c6ddefe874b718756bbc3bc2db515
  Merge: aee2f54 f623ab7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 22:59:23 2015 -0700

      Merge branch 'switchdev-transaction-item-queue'

      Jiri Pirko says:

      ====================
      switchdev: transaction item queue and cleanup
      ====================

      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f623ab7f51b1bfb523c9cd492747392abf3c4421
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:49 2015 +0200

      switchdev: reduce transaction phase enum down to a boolean

      Now, since we have only 2 values for transaction phase, just use bool.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79a62eb22a5fa4ee5e1f21af5e1f19f493dac5e0
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:48 2015 +0200

      dsa: use prepare/commit switchdev transaction helpers

      The enum is going to disappear, use the helpers instead.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f6467cf229a0e8a7580401b07de2a76e4c8618d
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:47 2015 +0200

      switchdev: remove "ABORT" transaction phase

      No longer used by drivers, as transaction queue with item destructors
      takes care of abort phase internally in switchdev code. So kill it.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2b8a61a6fd5fdd161ae16e4f76bfb09d6de95ddd
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:46 2015 +0200

      switchdev: remove "NONE" transaction phase

      Shouldn't have been there in the first place. Now it is unused, kill it.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac3dbc68a4a74e74f4604207d01456d075394a64
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:45 2015 +0200

      rocker: use switchdev transaction queue for allocated memory

      Benefit from previously introduced transaction item queue infrastructure
      and remove rocker specific transaction memory management.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76c6f945cc8ec92918ab5459eaa0958dedbfbcfe
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:44 2015 +0200

      rocker: push struct switchdev_trans down through rocker code

      There will be needed to have switchdev_trans available down in the call
      chain, so propagate it instead of trans phase enum. This enum will be
      removed anyway. Also, use prepare/commit phase check helpers to get
      information about current phase of transaction.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8bdb427206f077cdb567bf34da2e7212ecb2603c
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:43 2015 +0200

      switchdev: add switchdev_trans_ph_prepare/commit helpers

      Add helpers which should be used int attr_set/obj_add switchdev ops to
      check the phase of transaction.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8db83486e316ff50f97961a82b614985645508e
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:42 2015 +0200

      switchdev: move transaction phase enum under transaction structure

      Before it disappears completely, move transaction phase enum under
      transaction structure and make attr/obj structures a bit cleaner.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7ea6eb3f56f45cf4babae8b9a7421868e5005f17
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:41 2015 +0200

      switchdev: introduce transaction item queue for attr_set and obj_add

      Now, the memory allocation in prepare/commit state is done separatelly
      in each driver (rocker). Introduce the similar mechanism in generic
      switchdev code, in form of queue. That can be used not only for memory
      allocations, but also for different items. Abort item destruction
      is handled as well.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 69f5df491e0becb75d2d795add7481a35218d657
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Thu Sep 24 10:02:40 2015 +0200

      switchdev: rename "trans" to "trans_ph".

      This is temporary, name "trans" will be used for something else and
      "trans_ph" will eventually disappear.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ced255c0c5fb9ab52c9465982f23b1c14005ef8b
  Merge: 4401555 97584d1
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 20:14:26 2015 -0700

      Merge branch 'next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux

      Pull thermal management fixes from Zhang Rui:

       - Power allocator governor changes to allow binding on thermal zones
         with missing power estimates information.  From Javi Merino.

       - Add compile test flags on thermal drivers that allow it without
         producing compilation errors.  From Eduardo Valentin.

       - Fixes around memory allocation on cpu_cooling.  From Javi Merino.

       - Fix on db8500 cpufreq code to allow autoload.  From Luis de
         Bethencourt.

       - Maintainer entries for cpu cooling device

      * 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux:
        thermal: power_allocator: exit early if there are no cooling devices
        thermal: power_allocator: don't require tzp to be present for the 
thermal zone
        thermal: power_allocator: relax the requirement of two passive trip 
points
        thermal: power_allocator: relax the requirement of a sustainable_power 
in tzp
        thermal: Add a function to get the minimum power
        thermal: cpu_cooling: free power table on error or when unregistering
        thermal: cpu_cooling: don't call kcalloc() under rcu_read_lock
        thermal: db8500_cpufreq_cooling: Fix module autoload for OF platform 
driver
        thermal: cpu_cooling: Add MAINTAINERS entry
        thermal: ti-soc: Kconfig fix to avoid menu showing wrongly
        thermal: ti-soc: allow compile test
        thermal: qcom_spmi: allow compile test
        thermal: exynos: allow compile test
        thermal: armada: allow compile test
        thermal: dove: allow compile test
        thermal: kirkwood: allow compile test
        thermal: rockchip: allow compile test
        thermal: spear: allow compile test
        thermal: hisi: allow compile test
        thermal: Fix thermal_zone_of_sensor_register to match documentation

  commit 0b23a1ece9be2c3e04c3b8d3594a1ada1fa1ae50
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 11:55:36 2015 +0300

      dmaengine: idma64: improve residue estimation

      The residue calculation may provide a wrong estimation when the transfer 
is
      started. There are possible scenarios we have to separate:

        1) the transfer is not started yet; residue is equal to the total
           length;

        2) the transfer is just started (first chunk is ongoing); residue is
           equal to the total length without already transfered bytes;

        3) the transfer is ongoing and we already sent few chunks of data;
           residue is equal to the total length without fully transfered chunks
           and already sent bytes.

      Mistakenly the calculation in cases 2) and 3) was done in the similar way 
and
      the result is equal to -bytes that have been transfered, i.e. quite big 
since
      size_t type can't keep negative values.

      Rewrite the calculation algorithm to be one pass and have a correct 
result.

      Besides above in case user asks for a status of the active DMA descriptor
      without pausing an ongoing transfer the residue will be estimated based 
on the
      register value, though it's still racy. Since the transfer is active the 
value
      is continuously being changed. Here we have to read two registers at a 
time. To
      minimize an error make those reads close to each other.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit c1492b4c541e3a382b60f1b5879cd3c4d246ad31
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:00:17 2015 +0200

      dmaengine: xgene-dma: fix handling xgene_dma_get_ring_size result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/assign_signed_to_unsigned.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2046107

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit aebf5a67db8dbacbc624b9c652b81f5460b15eff
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Mon Sep 21 11:06:32 2015 +0200

      dmaengine: pxa_dma: fix initial list move

      Since the commit to have an allocated list of virtual descriptors was
      reverted, the pxa_dma driver is broken, as it assumes the descriptor is
      placed on the allocated list upon allocation.

      Fix the issue in pxa_dma by making an allocated virtual descriptor a
      singleton.

      Fixes: 8c8fe97b2b8a ("Revert "dmaengine: virt-dma: don't always free 
descriptor upon completion"")
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit a8360062ccfb4b891d3013d0e55826c8bcb02bfb
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Sep 18 03:08:40 2015 +0200

      PCI / PM: Update runtime PM documentation for PCI devices

      Section 3.2 "Device Runtime Power Management" of pci.txt has become
      outdated, so update it to correctly reflect the current code flow.

      Also update the comment in local_pci_probe() to document the fact
      that pm_runtime_put_noidle() is not the only runtime PM helper
      function that can be used to decrement the device's runtime PM
      usage counter in .probe().

      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Acked-by: Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>

  commit 4401555a98601a3de7cc876ceeac1d5d09f617e6
  Merge: cc8b8fa a13f18f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 17:46:38 2015 -0700

      Merge tag 'devicetree-fixes-for-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux

      Pull DeviceTree fixes from Rob Herring:
       - Silence bogus warning for of_irq_parse_pci
       - Fix typo in ARM idle-states binding doc and dts files
       - Various minor binding documentation updates

      * tag 'devicetree-fixes-for-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux:
        Documentation: arm: Fix typo in the idle-states bindings examples
        gpio: mention in DT binding doc that <name>-gpio is deprecated
        of_pci_irq: Silence bogus "of_irq_parse_pci() failed ..." messages.
        devicetree: bindings: Extend the bma180 bindings with bma250 info
        of: thermal: Mark cooling-*-level properties optional
        of: thermal: Fix inconsitency between cooling-*-state and 
cooling-*-level
        Docs: dt: add #msi-cells to GICv3 ITS binding
        of: add vendor prefix for Socionext Inc.

  commit 680168a58a9315e1301f4ebb062244470d4919b0
  Author: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
  Date:   Tue Sep 22 09:35:31 2015 -0700

      PM / OPP: of_property_count_u32_elems() can return errors

      of_property_count_u32_elems() will never return 0, but a -ve error value
      of a positive count. And so the current !count check is wrong.

      Also, a missing "opp-microvolt" property isn't a problem and so we need
      to do of_find_property() separately to confirm that.

      Fixes: 274659029c9d (PM / OPP: Add support to parse "operating-points-v2" 
bindings)
      Signed-off-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Reviewed-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit fe5b2756c1acbfc2d9df380523ef6320e69bb166
  Merge: 79a313f a797451
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Thu Sep 24 16:51:43 2015 -0700

      Merge tag 'v4.3-rockchip32-dtsfixes1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip into fixes

      Add the ddc-i2c-bus reference to the veyron hdmi nodes,
      so that they can read the edid of connected displays.

      * tag 'v4.3-rockchip32-dtsfixes1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip:
        ARM: dts: Add ddc i2c reference to veyron

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit 79a313f5a587eae14a0f96df5d819c2fe266e3e9
  Author: Benjamin Gaignard <benjamin.gaignard@xxxxxxxxxx>
  Date:   Wed Sep 23 21:48:03 2015 +0200

      ARM: sti: dt: adapt DT to fix probe/bind issues in DRM driver

      STI drm drivers probe and bind using component framework was incorrect.
      In addition to drivers fix DT update is needed to make all sub-components
      become childs of sti-display-subsystem.

      Signed-off-by: Benjamin Gaignard <benjamin.gaignard@xxxxxxxxxx>
      Signed-off-by: Maxime Coquelin <maxime.coquelin@xxxxxx>
      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit bc13b23323b6a6c710ba2c7125866554e8bee84b
  Merge: 54c3cf6 50b956f
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Thu Sep 24 16:48:43 2015 -0700

      Merge tag 'qcom-fixes-for-4.3-rc1' of 
git://codeaurora.org/quic/kernel/agross-msm into fixes

      Qualcomm fixes for v4.3-rc1

      * Add SCM function call stubs on ARM64

      * tag 'qcom-fixes-for-4.3-rc1' of 
git://codeaurora.org/quic/kernel/agross-msm:
        firmware: qcom: scm: Add function stubs for ARM64

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit c3456026adc0b22baae75e2617f370866d98b8ce
  Merge: aee2f54 57781c1
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Fri Sep 25 01:37:21 2015 +0200

      Merge tag 'ipvs2-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next

      Simon Horman says:

      ====================
      Second Round of IPVS Updates for v4.4

      please consider these bug fixes and extensive clean-ups of IPVS
      from Eric Biederman for v4.4.

      His excellent description of the changes, which is part of an even larger
      set of clean-up work, is as follows:

        I am gradually working my way through the netfilter stack passing struct
        down into the netfilter hooks and from the netfilter hooks and from 
there
        down into the functions that actually care.  This removes the need for
        netfilter functions to guess how to figure out how to compute which
        network namespace they are in and instead provides a simple and reliable
        method to do so.

        The cleanups stand on their own but this is part of a larger effort to
        have routes with an output device that is not in the current network
        namespace.

        The IPVS code has been a bit more of a challenge than most.  Just 
passing
        struct net through to where it is needed did not feel clean to me.  The
        practical issue is that the ipvs code in most places actually wants
        struct netns_ipvs and not struct net.

        So as part of this process I have turned the relationship between struct
        net and the structs netns_ipvs, ip_vs_conn_param, ip_vs_conn, and
        ip_vs_service inside out.  I have modified the ipvs functions to take a
        struct netns_ipvs not a struct net.  The net is code with fewer
        conversions from one type of structure to another.  I did wind up adding
        a struct netns_ipvs parameter to quite a few functions that did not have
        it before so I could pass the structure down from the netfilter hooks to
        where it is actually needed to avoid guessing.

        I have broken up the work in a bunch of small patches so there is at
        least a chance and reviewing that each step I took is correct.  The
        series compiles at each step so bisecting it should not be a problem if
        something weird comes up.

        The first two changes in this series are actually bug fixes.  The first
        is a compile fix for a bug in sctp that came in, in the last round of
        ipvs changes merged into nf-next.  The second fixes an older bug where 
in
        pathological circumstances the wrong network namespace could be used 
when
        a proc file is written to.

        The rest of the patchset is a bunch of boring changes getting pushing
        struct netns_ipvs (and by extension ipvs->net) where it needs to be.
        Either by replacing struct net pointers or adding new struct netns_ipvs
        pointers.  With a handful of other minor cleanups (like removing
        skb_net).

      I have decided include the bug fixes in this pull request. Patch one
      relates to a bug that was added to nf-next recently and is thus not
      applicable to nf . Patch two could arguably be promoted to a fix for v4.3
      and stable though it does not appear to be severe enough to warrant that
      course of action; let me know if you would like me to reconsider.
      ====================

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 9a5e3f27d1b8ca349b79e8b5fe1874eeeedb6f45
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Fri Sep 4 17:38:24 2015 +0530

      ARM: dts: fix omap2+ address translation for pbias

      "ARM: dts: <omap2/omap4/omap5/dra7>: add minimal l4 bus
      layout with control module support" moved pbias_regulator dt node
      from being a child node of ocp to be the child node of
      'syscon'. Since 'syscon' doesn't have the 'ranges' property,
      address translation fails while trying to convert the address
      to resource. Fix it here by populating 'ranges' property in
      syscon dt node.

      Fixes: 72b10ac00eb1 ("ARM: dts: omap24xx: add minimal l4 bus
      layout with control module support")

      Fixes: 7415b0b4c645 ("ARM: dts: omap4: add minimal l4 bus layout
      with control module support")

      Fixes: ed8509edddeb ("ARM: dts: omap5: add minimal l4 bus
      layout with control module support")

      Fixes: d919501feffa ("ARM: dts: dra7: add minimal l4 bus
      layout with control module support")

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      [tony@xxxxxxxxxxx: fixed omap3 pbias to work]
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 4bbc2bc1a4e81c1a3522b3bd9d43fffd2eca8c9e
  Merge: 84ad1ba b9c9364
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Thu Sep 24 16:23:20 2015 -0700

      Merge commit 'b8c93646fd5c' into omap-for-v4.3/fixes

  commit 17a10c9215b39a5ea8faeb241759c1aee6553919
  Author: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 25 11:01:47 2015 +1200

      ip6_tunnel: Reduce log level in ip6_tnl_err() to debug

      Currently error log messages in ip6_tnl_err are printed at 'warn'
      level. This is different to other tunnel types which don't print
      any messages. These log messages don't provide any information that
      couldn't be deduced with networking tools. Also it can be annoying
      to have one end of the tunnel go down and have the logs fill with
      pointless messages such as "Path to destination invalid or inactive!".

      This patch reduces the log level of these messages to 'dbg' level to
      bring the visible behaviour into line with other tunnel types.

      Signed-off-by: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a13f18f59d2646754cda3662a9e215ff43e7a7d5
  Author: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
  Date:   Thu Sep 24 15:53:56 2015 +0100

      Documentation: arm: Fix typo in the idle-states bindings examples

      The idle-states bindings mandate that the entry-method string
      in the idle-states node must be "psci" for ARM v8 64-bit systems,
      but the examples in the bindings report a wrong entry-method string.
      Owing to this typo, some dts in the kernel wrongly defined the
      entry-method property, since they likely cut and pasted the example
      definition without paying attention to the bindings definitions.

      This patch fixes the typo in the DT idle states bindings examples and
      respective dts in the kernel so that the bindings and related dts
      files are made compliant.

      Signed-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Cc: Howard Chen <howard.chen@xxxxxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit e7ae65ced7dd71aa3dc29bda7a94ac82d9ea7751
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 14:57:25 2015 +0200

      gpio: mention in DT binding doc that <name>-gpio is deprecated

      The gpiolib supports parsing DT properties of the form <name>-gpio but it
      was only added for compatibility with older DT bindings that got it wrong
      and should not be used in newer bindings.

      The commit that added support for this was:

      dd34c37aa3e8 ("gpio: of: Allow -gpio suffix for property names")

      but didn't update the documentation to explain this so it's been a source
      of confusion. So let's make this clear in the GPIO DT binding doc.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit aee2f545f0a12399cc6bbe134d69b8994582b694
  Merge: d8ed625 21dd560
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:39:09 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-23

      This series contains updates to ixgbe only.

      Mark provides all the changes in this series, first clears the destination
      location for I2C data initially so that the received data will not be
      corrupted by previous attempts.  Then reduced the pauses/delays in the
      PHY detection when no SFP is present by reducing the number of retires,
      once an SFP is detected, the "normal" number of retries in PHY detection
      will be used.  Added support for X55EM_x SFP+ dual-speed, and fixed 1G and
      10G link stability for X550EM_x by configuring the CS4227 correctly by
      moving code to ixgbe_setup_mac_link_sfp_x550em().  Added functionality to
      reset CS4227, since on some platforms the CS4227 does not initialize
      properly.  Next reduces the SFP polling rate, due to when an SFP is not
      present, the I2C timeouts that result are very costly.  So prevent the
      SFP polling from being done more than once every two seconds.  Added
      support for I2C bus MUX.  Fixed the setting of RDRXCTL register which
      should fall through X540 and 82599, not 82598.  In addition, added small
      packet padding support in X550 by setting RDRXCTL.PSP when the driver is
      in SRIOV mode.  Fixed a known hardware issue where the PCI transactions
      pending bit sticks high when there are pending transactions, so
      workaround the issue by wait and then continue with our reset flow.
      Added a new device ID for X550EM device with SFPs.  Provided a fix with
      the DCA setup, which was suggested by Alex Duyck <aduyck@xxxxxxxxxxxx>,
      by making it so that we always set the relaxed ordering bits related to
      the DCA registers even if DCA is not enbaled.  Then moves the
      configuration out of the ixgbe_down() and into ixgbe_configure() before
      enabling the transmit and receive rings.  This ensures that DCA is
      configured correctly before starting the processing of packets.
      Fixed VM-to-VM loopback mode which requires that FCRTH be set, but
      the datasheets did not specify what the value should be.  It has now
      been determined that the correct value should be RXPBSIZE - (24*1024).
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc8b8faea417bd264d23fa5d017da52b75bbdf94
  Merge: bfbaa60 fd03420
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:37:06 2015 -0700

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Most of the GPU drivers people were at XDC last week, so I didn't get
        much to send, so I let it rollover until this week.

        Also Alex was away for 3 weeks so amdgpu/radeon got a bit more stuff
        than usual in one go.

        I've been trying to figure out some 4.2 issues with i915 still (that
        are fixed in 4.3, but bisecting ends up in a merge commit).  Hopefully
        next week I or i915 people can work that out"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux: (46 commits)
        drm: Allow also control clients to check the drm version
        drm/vmwgfx: Fix uninitialized return in vmw_kms_helper_dirty()
        drm/vmwgfx: Fix uninitialized return in vmw_cotable_unbind()
        drm/layerscape: fix handling fsl_dcu_drm_plane_index result
        drm/mgag200: Fix driver_load error handling
        drm/mgag200: Fix error handling paths in fbdev driver
        drm/qxl: only report first monitor as connected if we have no state
        drm/radeon: add quirk for MSI R7 370
        drm/amdgpu: Sprinkle drm_modeset_lock_all to appease locking checks
        drm/radeon: Sprinkle drm_modeset_lock_all to appease locking checks
        drm/amdgpu: sync ce and me with SWITCH_BUFFER(2)
        drm/amdgpu: integer overflow in amdgpu_mode_dumb_create()
        drm/amdgpu: info leak in amdgpu_gem_metadata_ioctl()
        drm/amdgpu: integer overflow in amdgpu_info_ioctl()
        drm/amdgpu: unwind properly in amdgpu_cs_parser_init()
        drm/amdgpu: Fix max_vblank_count value for current display engines
        drm/amdgpu: use kmemdup rather than duplicating its implementation
        drm/amdgpu: fix UVD suspend and resume for VI APU
        drm/amdgpu: fix the UVD suspend sequence order
        drm/amdgpu: make UVD handle checking more strict
        ...

  commit deccbe80be947fa89bca18510699893c38856f38
  Merge: a46496c babc305e2
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 15:36:20 2015 -0700

      Merge tag 'mac80211-for-davem-2015-09-22' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211

      Johannes Berg says:

      ====================
      Just two small fixes:
       * VHT MCS mask array overrun, reported by Dan Carpenter
       * reset CQM history to always get a notification, from Sara Sharon
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a46496ce38eeb401344d5623c1960dbf2f1769be
  Author: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 16:58:31 2015 +1200

      ip6_gre: Reduce log level in ip6gre_err() to debug

      Currently error log messages in ip6gre_err are printed at 'warn'
      level. This is different to most other tunnel types which don't
      print any messages. These log messages don't provide any information
      that couldn't be deduced with networking tools. Also it can be annoying
      to have one end of the tunnel go down and have the logs fill with
      pointless messages such as "Path to destination invalid or inactive!".

      This patch reduces the log level of these messages to 'dbg' level to
      bring the visible behaviour into line with other tunnel types.

      Signed-off-by: Matt Bennett <matt.bennett@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 41fc014332d91ee90c32840bf161f9685b7fbf2b
  Author: Wilson Kok <wkok@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 21:40:22 2015 -0700

      fib_rules: fix fib rule dumps across multiple skbs

      dump_rules returns skb length and not error.
      But when family == AF_UNSPEC, the caller of dump_rules
      assumes that it returns an error. Hence, when family == AF_UNSPEC,
      we continue trying to dump on -EMSGSIZE errors resulting in
      incorrect dump idx carried between skbs belonging to the same dump.
      This results in fib rule dump always only dumping rules that fit
      into the first skb.

      This patch fixes dump_rules to return error so that we exit correctly
      and idx is correctly maintained between skbs that are part of the
      same dump.

      Signed-off-by: Wilson Kok <wkok@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit de24c18c0faca5ebd618e1cb87f5489745e40475
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 12 02:06:09 2015 +0300

      PCI: rcar: Add R8A7794 support

      Add Renesas R8A7794 SoC support to the Renesas R-Car gen2 PCI driver.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <helgaas@xxxxxxxxxx>
      Acked-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit da2d03ea27f6ed9d2005a67b20dd021ddacf1e4d
  Author: Alex Williamson <alex.williamson@xxxxxxxxxx>
  Date:   Tue Sep 15 22:24:46 2015 -0600

      PCI: Use function 0 VPD for identical functions, regular VPD for others

      932c435caba8 ("PCI: Add dev_flags bit to access VPD through function 0")
      added PCI_DEV_FLAGS_VPD_REF_F0.  Previously, we set the flag on every
      non-zero function of quirked devices.  If a function turned out to be
      different from function 0, i.e., it had a different class, vendor ID, or
      device ID, the flag remained set but we didn't make VPD accessible at all.

      Flip this around so we only set PCI_DEV_FLAGS_VPD_REF_F0 for functions 
that
      are identical to function 0, and allow regular VPD access for any other
      functions.

      [bhelgaas: changelog, stable tag]
      Fixes: 932c435caba8 ("PCI: Add dev_flags bit to access VPD through 
function 0")
      Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <helgaas@xxxxxxxxxx>
      Acked-by: Myron Stowe <myron.stowe@xxxxxxxxxx>
      Acked-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx

  commit 9d9240756e63dd87d6cbf5da8b98ceb8f8192b55
  Author: Alex Williamson <alex.williamson@xxxxxxxxxx>
  Date:   Tue Sep 15 11:17:21 2015 -0600

      PCI: Fix devfn for VPD access through function 0

      Commit 932c435caba8 ("PCI: Add dev_flags bit to access VPD through 
function
      0") passes PCI_SLOT(devfn) for the devfn parameter of pci_get_slot().
      Generally this works because we're fairly well guaranteed that a PCIe
      device is at slot address 0, but for the general case, including
      conventional PCI, it's incorrect.  We need to get the slot and then 
convert
      it back into a devfn.

      Fixes: 932c435caba8 ("PCI: Add dev_flags bit to access VPD through 
function 0")
      Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <helgaas@xxxxxxxxxx>
      Acked-by: Myron Stowe <myron.stowe@xxxxxxxxxx>
      Acked-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx

  commit 38ea72bdb65df2f40ec77b2c9d1413e7f5e34465
  Author: Alex Williamson <alex.williamson@xxxxxxxxxx>
  Date:   Fri Sep 18 15:08:54 2015 -0600

      PCI/MSI: Fix MSI IRQ domains for VFs on virtual buses

      SR-IOV creates a virtual bus where bus->self is NULL.  When we add VFs and
      scan for an MSI domain, pci_set_bus_msi_domain() dereferences bus->self,
      which causes a kernel NULL pointer dereference oops.

      Scan up to the parent bus until we find a real bridge where we can get the
      MSI domain.

      [bhelgaas: changelog]
      Fixes: 44aa0c657e3e ("PCI/MSI: Add hooks to populate the msi_domain 
field")
      Tested-by: Joerg Roedel <joro@xxxxxxxxxx>
      Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx>
      Signed-off-by: Bjorn Helgaas <helgaas@xxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit d8ed625044cdede8661324074aaad7459a1e3c7a
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 22 20:44:17 2015 -0700

      tcp: factorize sk_txhash init

      Neal suggested to move sk_txhash init into tcp_create_openreq_child(),
      called both from IPv4 and IPv6.

      This opportunity was missed in commit 58d607d3e52f ("tcp: provide
      skb->hash to synack packets")

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d682d2bdc30650a5c7ce9908ab83ab674b658744
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 22 17:04:58 2015 -0700

      bnx2x: byte swap rss_key to comply to Toeplitz specs

      After a good amount of debugging, I found bnx2x was byte swaping
      the 40 bytes of rss_key.

      If we byte swap the key, then bnx2x generates hashes matching
      MSDN specs as documented in (Verifying the RSS Hash Calculation)

      https://msdn.microsoft.com/en-us/library/windows/hardware/ff571021%
      28v=vs.85%29.aspx

      It is mostly a non issue, unless we want to mix different NIC
      in a host, and want consistent hashing among all of them, ie
      if they all use the boot time generated rss key, or if some application
      is choosing specific tuple(s) so that incoming traffic lands into known
      rx queue(s).

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d8aecb10115497f6cdf841df8c88ebb3ba25fa28
  Author: WANG Cong <xiyou.wangcong@xxxxxxxxx>
  Date:   Tue Sep 22 17:01:11 2015 -0700

      net: revert "net_sched: move tp->root allocation into fw_init()"

      fw filter uses tp->root==NULL to check if it is the old method,
      so it doesn't need allocation at all in this case. This patch
      reverts the offending commit and adds some comments for old
      method to make it obvious.

      Fixes: 33f8b9ecdb15 ("net_sched: move tp->root allocation into fw_init()")
      Reported-by: Akshat Kakkar <akshat.1984@xxxxxxxxx>
      Cc: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Cong Wang <xiyou.wangcong@xxxxxxxxx>
      Acked-by: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bfbaa60d186d81207e61e7f4337fa442860aef72
  Merge: d5fc4f5 012572d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 14:31:40 2015 -0700

      Merge branch 'akpm' (patches from Andrew)

      Merge misc fixes from Andrew Morton:
       "15 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        ocfs2/dlm: fix deadlock when dispatch assert master
        membarrier: clean up selftest
        vmscan: fix sane_reclaim helper for legacy memcg
        lib/iommu-common.c: do not try to deref a null iommu->lazy_flush() 
pointer when n < pool->hint
        x86, efi, kasan: #undef memset/memcpy/memmove per arch
        mm: migrate: hugetlb: putback destination hugepage to active list
        mm, dax: VMA with vm_ops->pfn_mkwrite wants to be write-notified
        userfaultfd: register uapi generic syscall (aarch64)
        userfaultfd: selftest: don't error out if pthread_mutex_t isn't 
identical
        userfaultfd: selftest: return an error if BOUNCE_VERIFY fails
        userfaultfd: selftest: avoid my_bcmp false positives with powerpc
        userfaultfd: selftest: only warn if __NR_userfaultfd is undefined
        userfaultfd: selftest: headers fixup
        userfaultfd: selftests: vm: pick up sanitized kernel headers
        userfaultfd: revert "userfaultfd: waitqueue: add nr wake parameter to 
__wake_up_locked_key"

  commit 8fe79c60a2932b8c8e1a55ac6847467dcd41af0e
  Merge: d5b8d64 b194f30c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 24 14:31:37 2015 -0700

      Merge branch 'lwt_arp'

      Jiri Benc says:

      ====================
      lwtunnel: make it really work, for IPv4

      One of the selling points of lwtunnel was the ability to specify the 
tunnel
      destination using routes. However, this doesn't really work currently, as
      ARP and ndisc replies are not handled correctly. ARP and ndisc replies 
won't
      have tunnel metadata attached, thus they will be sent out with the default
      parameters or not sent at all, either way never reaching the requester.

      Most of the egress tunnel parameters can be inferred from the ingress
      metada. The only and important exception is UDP ports. This patchset 
infers
      the egress data from the ingress data and disallow settings of UDP ports 
in
      tunnel routes. If there's a need for different UDP ports, a new interface
      needs to be created for each port combination. Note that it's still 
possible
      to specify the UDP ports to use, it just needs to be done while creating 
the
      vxlan/geneve interface.

      This covers only ARPs. IPv6 ndisc has the same problem but is harder to
      solve, as there's already dst attached to outgoing skbs. Ideas to solve 
this
      are welcome.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b194f30c61efb0767a98f47a64530baa8b731670
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Tue Sep 22 18:12:12 2015 +0200

      lwtunnel: remove source and destination UDP port config option

      The UDP tunnel config is asymmetric wrt. to the ports used. The source and
      destination ports from one direction of the tunnel are not related to the
      ports of the other direction. We need to be able to respond to ARP 
requests
      using the correct ports without involving routing.

      As the consequence, UDP ports need to be fixed property of the tunnel
      interface and cannot be set per route. Remove the ability to set ports per
      route. This is still okay to do, as no kernel has been released with these
      attributes yet.

      Note that the ability to specify source and destination ports is preserved
      for other users of the lwtunnel API which don't use routes for tunnel key
      specification (like openvswitch).

      If in the future we rework ARP handling to allow port specification, the
      attributes can be added back.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 63d008a4e9ee86614ca5671b7f3ba447df007190
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Tue Sep 22 18:12:11 2015 +0200

      ipv4: send arp replies to the correct tunnel

      When using ip lwtunnels, the additional data for xmit (basically, the 
actual
      tunnel to use) are carried in ip_tunnel_info either in dst->lwtstate or in
      metadata dst. When replying to ARP requests, we need to send the reply to
      the same tunnel the request came from. This means we need to construct
      proper metadata dst for ARP replies.

      We could perform another route lookup to get a dst entry with the correct
      lwtstate. However, this won't always ensure that the outgoing tunnel is 
the
      same as the incoming one, and it won't work anyway for IPv4 duplicate
      address detection.

      The only thing to do is to "reverse" the ip_tunnel_info.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 729bf329c79684327a55c33cdf21222543a1e5f1
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Wed Sep 23 09:20:55 2015 +0200

      net: axinet: Use of_property_read_u32 instead of open-coding it

      Use of_property_read_u32 instead of of_get_property with return value
      checks and endianness conversion.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Reviewed-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e734a42f046104f798195042e5a4d4b357f0b3fb
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Wed Sep 23 09:20:02 2015 +0200

      net: ll_temac: Use of_property_read_u32 instead of open-coding it

      Use of_property_read_u32 to read the "clock-frequency" property instead
      of using of_get_property with return value checks.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Reviewed-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d5b8d6404395641987db76e28334cae4cef771ae
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Mon Sep 21 16:47:09 2015 +0100

      net: gianfar: remove misuse of IRQF_NO_SUSPEND flag

      The device is set as wakeup capable using proper wakeup API but the
      driver misuses IRQF_NO_SUSPEND to set the interrupt as wakeup source
      which is incorrect.

      This patch removes the use of IRQF_NO_SUSPEND flags replacing it with
      enable_irq_wake instead.

      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Cc: Kevin Hao <haokexin@xxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Acked-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ae459bdaaeebc632b16e54dcbabb490c6931d61
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Tue Sep 22 12:57:53 2015 -0700

      skbuff: Fix skb checksum flag on skb pull

      VXLAN device can receive skb with checksum partial. But the checksum
      offset could be in outer header which is pulled on receive. This results
      in negative checksum offset for the skb. Such skb can cause the assert
      failure in skb_checksum_help(). Following patch fixes the bug by setting
      checksum-none while pulling outer header.

      Following is the kernel panic msg from old kernel hitting the bug.

      ------------[ cut here ]------------
      kernel BUG at net/core/dev.c:1906!
      RIP: 0010:[<ffffffff81518034>] skb_checksum_help+0x144/0x150
      Call Trace:
      <IRQ>
      [<ffffffffa0164c28>] queue_userspace_packet+0x408/0x470 [openvswitch]
      [<ffffffffa016614d>] ovs_dp_upcall+0x5d/0x60 [openvswitch]
      [<ffffffffa0166236>] ovs_dp_process_packet_with_key+0xe6/0x100 
[openvswitch]
      [<ffffffffa016629b>] ovs_dp_process_received_packet+0x4b/0x80 
[openvswitch]
      [<ffffffffa016c51a>] ovs_vport_receive+0x2a/0x30 [openvswitch]
      [<ffffffffa0171383>] vxlan_rcv+0x53/0x60 [openvswitch]
      [<ffffffffa01734cb>] vxlan_udp_encap_recv+0x8b/0xf0 [openvswitch]
      [<ffffffff8157addc>] udp_queue_rcv_skb+0x2dc/0x3b0
      [<ffffffff8157b56f>] __udp4_lib_rcv+0x1cf/0x6c0
      [<ffffffff8157ba7a>] udp_rcv+0x1a/0x20
      [<ffffffff8154fdbd>] ip_local_deliver_finish+0xdd/0x280
      [<ffffffff81550128>] ip_local_deliver+0x88/0x90
      [<ffffffff8154fa7d>] ip_rcv_finish+0x10d/0x370
      [<ffffffff81550365>] ip_rcv+0x235/0x300
      [<ffffffff8151ba1d>] __netif_receive_skb+0x55d/0x620
      [<ffffffff8151c360>] netif_receive_skb+0x80/0x90
      [<ffffffff81459935>] virtnet_poll+0x555/0x6f0
      [<ffffffff8151cd04>] net_rx_action+0x134/0x290
      [<ffffffff810683d8>] __do_softirq+0xa8/0x210
      [<ffffffff8162fe6c>] call_softirq+0x1c/0x30
      [<ffffffff810161a5>] do_softirq+0x65/0xa0
      [<ffffffff810687be>] irq_exit+0x8e/0xb0
      [<ffffffff81630733>] do_IRQ+0x63/0xe0
      [<ffffffff81625f2e>] common_interrupt+0x6e/0x6e

      Reported-by: Anupam Chanda <achanda@xxxxxxxxxx>
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd03420b5624617a708fb9b13634b41b37c22cfa
  Merge: 0a3579e cd67d22
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Sep 25 06:52:37 2015 +1000

      Merge tag 'drm-intel-fixes-2015-09-24' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      a few drm/i915 fixes, including a fix to the recent regression
      reported by Sedat Dilek

      * tag 'drm-intel-fixes-2015-09-24' of 
git://anongit.freedesktop.org/drm-intel:
        drm/i915/bios: handle MIPI Sequence Block v3+ gracefully
        drm/i915: Add primary plane to mask if it's visible
        drm/i915: workaround bad DSL readout v3
        drm/i915: fix kernel-doc warnings in intel_audio.c

  commit 9badce000e2ce68ba74838a3cd356dde58221c2f
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Wed Sep 23 17:07:29 2015 -0400

      cgroup, writeback: don't enable cgroup writeback on traditional 
hierarchies

      inode_cgwb_enabled() gates cgroup writeback support.  If it returns
      true, each inode is attached to the corresponding memory domain which
      gets mapped to io domain.  It currently only tests whether the
      filesystem and bdi support cgroup writeback; however, cgroup writeback
      support doesn't work on traditional hierarchies and thus it should
      also test whether memcg and iocg are on the default hierarchy.

      This caused traditional hierarchy setups to hit the cgroup writeback
      path inadvertently and ended up creating separate writeback domains
      for each memcg and mapping them all to the root iocg uncovering a
      couple issues in the cgroup writeback path.

      cgroup writeback was never meant to be enabled on traditional
      hierarchies.  Make inode_cgwb_enabled() test whether both memcg and
      iocg are on the default hierarchy.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: Artem Bityutskiy <dedekind1@xxxxxxxxx>
      Reported-by: Dexuan Cui <decui@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/g/1443012552.19983.209.camel@xxxxxxxxx
      Link: 
http://lkml.kernel.org/g/f30d4a6aa8a546ff88f73021d026a453@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

  commit 38cf595b195552276e1cf1826434e05782de4be8
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Tue Sep 22 18:57:13 2015 +0200

      ipv6: remove unused neigh parameter from ndisc functions

      Since commit 12fd84f4383b1 ("ipv6: Remove unused neigh argument for
      icmp6_dst_alloc() and its callers."), the neigh parameter of ndisc_send_na
      and ndisc_send_ns is unused.

      CC: YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>
      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 92c14d9b5ee86fd6cf136c01b6a87353522aebdd
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Tue Sep 22 18:56:43 2015 +0200

      genetlink: simplify genl_notify

      The genl_notify function has too many arguments for no real reason - all
      callers use genl_info to get them anyway. Just pass the genl_info down to
      genl_notify.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit da314c9923fed553a007785a901fd395b7eb6c19
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 11:38:56 2015 +0800

      netlink: Replace rhash_portid with bound

      On Mon, Sep 21, 2015 at 02:20:22PM -0400, Tejun Heo wrote:
      >
      > store_release and load_acquire are different from the usual memory
      > barriers and can't be paired this way.  You have to pair store_release
      > and load_acquire.  Besides, it isn't a particularly good idea to

      OK I've decided to drop the acquire/release helpers as they don't
      help us at all and simply pessimises the code by using full memory
      barriers (on some architectures) where only a write or read barrier
      is needed.

      > depend on memory barriers embedded in other data structures like the
      > above.  Here, especially, rhashtable_insert() would have write barrier
      > *before* the entry is hashed not necessarily *after*, which means that
      > in the above case, a socket which appears to have set bound to a
      > reader might not visible when the reader tries to look up the socket
      > on the hashtable.

      But you are right we do need an explicit write barrier here to
      ensure that the hashing is visible.

      > There's no reason to be overly smart here.  This isn't a crazy hot
      > path, write barriers tend to be very cheap, store_release more so.
      > Please just do smp_store_release() and note what it's paired with.

      It's not about being overly smart.  It's about actually understanding
      what's going on with the code.  I've seen too many instances of
      people simply sprinkling synchronisation primitives around without
      any knowledge of what is happening underneath, which is just a recipe
      for creating hard-to-debug races.

      > > @@ -1539,7 +1546,7 @@ static int netlink_bind(struct socket *sock, 
struct sockaddr *addr,
      > >               }
      > >       }
      > >
      > > -     if (!nlk->portid) {
      > > +     if (!nlk->bound) {
      >
      > I don't think you can skip load_acquire here just because this is the
      > second deref of the variable.  That doesn't change anything.  Race
      > condition could still happen between the first and second tests and
      > skipping the second would lead to the same kind of bug.

      The reason this one is OK is because we do not use nlk->portid or
      try to get nlk from the hash table before we return to user-space.

      However, there is a real bug here that none of these acquire/release
      helpers discovered.  The two bound tests here used to be a single
      one.  Now that they are separate it is entirely possible for another
      thread to come in the middle and bind the socket.  So we need to
      repeat the portid check in order to maintain consistency.

      > > @@ -1587,7 +1594,7 @@ static int netlink_connect(struct socket *sock, 
struct sockaddr *addr,
      > >           !netlink_allowed(sock, NL_CFG_F_NONROOT_SEND))
      > >               return -EPERM;
      > >
      > > -     if (!nlk->portid)
      > > +     if (!nlk->bound)
      >
      > Don't we need load_acquire here too?  Is this path holding a lock
      > which makes that unnecessary?

      Ditto.

      ---8<---
      The commit 1f770c0a09da855a2b51af6d19de97fb955eca85 ("netlink:
      Fix autobind race condition that leads to zero port ID") created
      some new races that can occur due to inconcsistencies between the
      two port IDs.

      Tejun is right that a barrier is unavoidable.  Therefore I am
      reverting to the original patch that used a boolean to indicate
      that a user netlink socket has been bound.

      Barriers have been added where necessary to ensure that a valid
      portid and the hashed socket is visible.

      I have also changed netlink_insert to only return EBUSY if the
      socket is bound to a portid different to the requested one.  This
      combined with only reading nlk->bound once in netlink_bind fixes
      a race where two threads that bind the socket at the same time
      with different port IDs may both succeed.

      Fixes: 1f770c0a09da ("netlink: Fix autobind race condition that leads to 
zero port ID")
      Reported-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Nacked-by: Tejun Heo <tj@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7f57d803ee03730d570dc59a9e3e4842b58dd5cc
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Thu Sep 24 17:36:51 2015 +0200

      ALSA: hda - Disable power_save_node for Thinkpads

      Lenovo Thinkpads with recent Realtek codecs seem suffering from click
      noises at power transition since the introduction of widget power
      saving in 4.1 kernel.  Although this might be solved by some delays in
      appropriate points, as a quick workaround, just disable the
      power_save_node feature for now.  The gain it gives is relatively
      small, and this makes the situation back to pre 4.1 time.

      This patch ended up with a bit more code changes than usual because
      the existing fixup for Thinkpads is highly chained.  Instead of adding
      yet another chain, combine a few of them into a single fixup entry, as
      a gratis cleanup.

      Bugzilla: https://bugzilla.suse.com/show_bug.cgi?id=943982
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 1ce3cbe2ab4074ca5196e74a45665a2cd87bbdb1
  Merge: 8351044 ed14ee0
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Thu Sep 24 20:48:01 2015 +0200

      Merge tag 'asoc-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

      ASoC: Fixes for v4.3

      A disappointingly large set of fixes, though none of them very big and
      very widely spread over many different drivers.  Nothing especially
      stands out, it's mostly all device specific and relatively minor.

  commit c2d5ecfaeafdedfb997a466c654c7029c511f43d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Sep 24 09:37:11 2015 +0200

      mac802154: iface: assume big endian for af_packet

      The callback "create" and "parse" from header_ops are called from
      netdev core upper-layer functionality, like af_packet. These callbacks
      assumes big endian for addresses and we should not introduce a special
      byteordering handling for ieee802154 over af_packet in userspace.

      We have an identical issue with setting the mac address which also
      assumes big endian byteordering.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f856f21dbcd162a53e30987a91d75d5ab54a7f80
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Sep 24 09:37:10 2015 +0200

      ieee802154: remove unnecessary includes

      This patch removes some unnecessary includes from ieee802154 header,
      which was introduced by commit b609fb54adfa ("ieee802154: add helpers for
      frame control checks").

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit d5fc4f555d7d29f9c868e7505e08bcd7676bc943
  Merge: bbad822 711e020
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 11:40:58 2015 -0700

      Merge tag 'spi-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi

      Pull spi fixes from Mark Brown:
       "A disappointingly large collection of fixes for SPI issues, though
        almost all in drivers (and there mainly the newly added Mediatek
        driver) and the core fixes are documentation and error handling.

        The driver fixes are all of the usual 'important if you see them'
        variety"

      * tag 'spi-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:
        spi: xtensa-xtfpga: fix register endianness
        spi: meson: Fix module autoload for OF platform driver
        spi: mediatek: fix wrong error return value on probe
        spi: fix kernel-doc warnings in spi.h
        spi: spidev: fix possible NULL dereference
        spi: atmel: remove warning when !CONFIG_PM_SLEEP
        spi: bcm2835: BUG: fix wrong use of PAGE_MASK
        spi: mediatek: fix spi cs polarity error
        spi: Fix documentation of spi_alloc_master()
        spi: spi-pxa2xx: Check status register to determine if SSSR_TINT is 
disabled
        spi: Mediatek: Document devicetree bindings update for spi bus
        spi: mediatek: fix spi clock usage error
        spi: mediatek: remove clk_disable_unprepare()

  commit 2900ea609616c2651dec65312beeb2a6e536bc50
  Author: Seth Jennings <sjenning@xxxxxxxxxx>
  Date:   Wed Aug 5 13:16:01 2015 -0500

      EDAC, sb_edac: Fix TAD presence check for sbridge_mci_bind_devs()

      In commit

        7d375bffa524 ("sb_edac: Fix support for systems with two home agents 
per socket")

      NUM_CHANNELS was changed to 8 and the channel space was renumerated to
      handle EN, EP, and EX configurations.

      The *_mci_bind_devs() functions - except for sbridge_mci_bind_devs() -
      got a new device presence check in the form of saw_chan_mask. However,
      sbridge_mci_bind_devs() still uses the NUM_CHANNELS for loop.

      With the increase in NUM_CHANNELS, this loop fails at index 4 since
      SB only has 4 TADs.  This results in the following error on SB machines:

        EDAC sbridge: Some needed devices are missing
        EDAC sbridge: Couldn't find mci handler
        EDAC sbridge: Couldn't find mci handle

      This patch adapts the saw_chan_mask logic for sbridge_mci_bind_devs() as
      well.

      After this patch:

        EDAC MC0: Giving out device to module sbridge_edac.c controller Sandy 
Bridge Socket#0: DEV 0000:3f:0e.0 (POLLED)
        EDAC MC1: Giving out device to module sbridge_edac.c controller Sandy 
Bridge Socket#1: DEV 0000:7f:0e.0 (POLLED)

      Signed-off-by: Seth Jennings <sjenning@xxxxxxxxxx>
      Acked-by: Aristeu Rozanski <aris@xxxxxxxxxx>
      Acked-by: Tony Luck <tony.luck@xxxxxxxxx>
      Tested-by: Borislav Petkov <bp@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438798561-10180-1-git-send-email-sjenning@xxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit eb24d061f4b80338672b7d38ee6331896f0a7710
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Sep 24 19:40:33 2015 +0200

      mrf24j40: remove trailing semicolon

      This patch removes a trailing semicolon which was introduced by commit
      d3f1bc3 ("mrf24j40: add cca mode support") and reported by kbuild test
      robot.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit bbad8220c6ce21edf2144f997e5ba476f5117b33
  Merge: 5146c8e 16651fc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 11:10:03 2015 -0700

      Merge tag 'regulator-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator

      Pull regulator fixes from Mark Brown:
       "A collection of fixes that came in since I tagged the merge window
        pull request for v4.3:

         - Error handling fixes in the core

         - Fixes to a couple of TI drivers for device specific issues

         - Several fixes for module autoloading"

      * tag 'regulator-fix-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:
        regulator: vexpress: Fix module autoload for OF platform driver
        regulator: gpio: Fix module autoload for OF platform driver
        regulator: anatop: Fix module autoload for OF platform driver
        regulator: core: Correct return value check in regulator_resolve_supply
        regulator: tps65218: Fix missing zero typo
        regulator: pbias: program pbias register offset in pbias driver
        regulator: core: fix possible NULL dereference

  commit 5146c8e4dfce5e6c671791b39d5f3c04bbd08715
  Merge: bcee19f 586b286
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 24 11:04:22 2015 -0700

      Merge tag 'dm-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull device mapper fixes from Mike Snitzer:
       "Two stable@ fixes:

         - DM thinp fix to properly advertise discard support as disabled for
           thin devices backed by a thin-pool with discard support disabled.

         - DM crypt fix to prevent the creation of bios that violate the
           underlying block device's max_segments limits.  This fixes a
           relatively long-standing NCQ SSD corruption issue reported against
           dm-crypt ever since the dm-crypt cpu parallelization patches were
           merged back in 4.0"

      * tag 'dm-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm crypt: constrain crypt device's max_segment_size to PAGE_SIZE
        dm thin: disable discard support for thin devices if pool's is disabled

  commit f881bab038c9667deab19a85d8666029cbfa6f2c
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Wed Sep 23 16:20:43 2015 -0700

      gpio: keep the GPIO line names internal

      This refactors the changes to the GPIO line naming mechanism to
      not have so widespread effects, instead we conclude the patch series
      by having created a name attribute in the GPIO descriptor, that need
      not be globally unique, and it will be initialized from the old
      .names array in struct gpio_chip if it exists, then used in the legacy
      sysfs code like the array was used previously.

      The associated changes to name lines from the device tree are
      controversial and need to stand alone from this. Resulting changes:

      1. Remove the export and the header for the gpio_name_to_desc() as so
      far the only use is inside gpiolib.c. Staticize gpio_name_to_desc()
      and move it above the only function using it.

      2. Only print a warning if there are two GPIO lines with the same name.
      The reason is to preserve current behaviour: before the previous
      changes to the naming mechanism this would not reject probing the
      driver, instead the error would occur when trying to export the line
      in sysfs, so restore this behaviour, but print a friendly warning
      if names collide.

      Cc: Johan Hovold <johan@xxxxxxxxxx>
      Cc: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ced433e2a4a0f11362c149daf802157ffb65ee20
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:11:02 2015 +0200

      gpiolib: Add gpio name information to /sys/kernel/debug/gpio

      Add some information about gpio names to the debugfs gpio file. name and
      label of a GPIO are then displayed next to each other. This way it is
      easy to see what the real name of GPIO is and what the driver requested
      it for.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      [Dropped unsolicited sysfs ABI patch hunk]
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ddd5404007b8496f20ad2efe1147e102e6226634
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:11:01 2015 +0200

      gpio-sysfs: Use gpio descriptor name instead of gpiochip names array

      The name is now stored in the gpio descriptor as well, for example to
      allow to store names from DT. This patch changes the sysfs gpio files
      to use the gpio descriptor name.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5f3ca7329b049b40667a190ddf14b69afdb91576
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:11:00 2015 +0200

      gpiolib: Use GPIO name from names array for gpio descriptor

      This patch adds GPIO names to the GPIO descriptors when initializing the
      gpiochip. It also introduces a check whether any of the new names will
      conflict with an existing GPIO name.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c0017ed71966a19ec40c7bc900d4338ddfbc4105
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:10:59 2015 +0200

      gpio: Introduce gpio descriptor 'name'

      The latest gpio hogging mechanism assigns each gpio a 'line-name' in the
      devicetree. The 'name' field is different from the 'label' field.
      'label' is only used for requested GPIOs to describe its current use by
      driver or userspace.

      The 'name' field describes the GPIO itself, not the use. This is most
      likely identical to the label in the schematic on the GPIO line and
      should help to find this particular GPIO.

      This is equivalent to the gpiochip->names array. However names should be
      stored in the GPIO descriptor. We will use gpiochip->names in the future
      only as initializer for the GPIO descriptors for drivers that assign
      GPIO names hardcoded. All other GPIO names will be parsed from DT and
      directly assigned to the GPIO descriptor.

      This patch adds a helper function to find gpio descriptors by name
      instead of gpio number.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit fd7337fdb9bce420033c28af4c07b73e34e692c1
  Author: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
  Date:   Fri Aug 14 16:10:58 2015 +0200

      gpiolib-of: Rename gpio_hog functions to be generic

      The gpio hogging functions are currently only used for gpio-hogging. But
      these functions are widely generic ones which parse gpio device nodes in
      the DT.

      Signed-off-by: Markus Pargmann <mpa@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit b4fe8ba7a310da6a2b99e3abe67c7815198cde49
  Author: Qipeng Zha <qipeng.zha@xxxxxxxxx>
  Date:   Tue Sep 15 00:39:17 2015 +0800

      regmap: Add generic macro to define regmap_irq

      Add REGMAP_IRQ_REG macro in regmap.h to define regmap_irq
      structure easily for other driver module.

      Signed-off-by: Qipeng Zha <qipeng.zha@xxxxxxxxx>
      Acked-by: Mark Brown <broonie@xxxxxxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>

  commit f7418bc10d8402798ee3add5ef0ed5f33266a2bb
  Author: Felix Fietkau <nbd@xxxxxxxxxxx>
  Date:   Thu Sep 24 14:59:49 2015 +0200

      mac80211: fix handling of PS filtering with fast-xmit

      Fixes dropped packets in the tx path in case a non-PS station triggers
      the tx filter.

      Signed-off-by: Felix Fietkau <nbd@xxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit e88ab30d3669f08e94e66e7f926713be93af97fc
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:11 2015 +0200

      Bluetooth: hci_bcm: Add suspend/resume runtime PM functions

      Adds autosuspend runtime functionality to BCM UART driver.
      Autosuspend is enabled at end of bcm_setup.

      bcm_device_lock is used for system sleep functions as they can be
      called at any time.
      bcm_device_lock is not held for runtime suspend functions as this
      is only enabled as long as platform device is opened.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 7649faff1cfe4f76dabf78cd53d659d39f65b3c1
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:10 2015 +0200

      Bluetooth: Remove useless rx_lock spinlock

      rx_lock spinlock is only used in hci_uart_tty_receive() which is the
      receive_buf ldisc callback.

      hci_uart_tty_receive() is protected from re-entrance by its only
      caller (flush_to_ldisc() in drivers/tty/tty_buffer.c) which held a
      mutex (buf->lock) for this section.
      This lock allows "safe use of the line discipline's receive_buf()
      method by excluding the buffer work and any pending flush from using
      the flip buffer." (comments from tty_buffer_lock_exclusive() in
      drivers/tty/tty_buffer.c)

      So, no need to double protect this resource with rx_lock.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b7a622a249736b36c0bf4c3f986ed431281d5e98
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:09 2015 +0200

      Bluetooth: hci_bcm: Prepare PM runtime support

      Change some CONFIG_PM_SLEEP to CONFIG_PM as hu and is_suspended parameters
      will be used during PM runtime callbacks.

      Add bcm_suspend_device() and bcm_resume_device() which performs link
      management for PM callbacks.
      These functions will be used for runtime management.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5cebdfea32b89911d4540440c1c2854a1a3d591e
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:08 2015 +0200

      Bluetooth: hci_bcm: Fix IRQ polarity for T100

      ACPI table for BCM2E39 of T100TA is not correct.
      Set correct irq_polarity for this device.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 594b31ea7dc6101519deee1b31483fce2e1a7414
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 18:18:07 2015 +0200

      Bluetooth: Add BT_WARN and bt_dev_warn logging macros

      Add warning logging macros to bluetooth subsystem logs.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0af822110871400908d5b6f83a8908c45f881d8f
  Author: Felipe F. Tonello <eu@xxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 18:40:32 2015 +0100

      ARM: dts: fix usb pin control for imx-rex dts

      This fixes a duplicated pin control causing this error:

      imx6q-pinctrl 20e0000.iomuxc: pin MX6Q_PAD_GPIO_1 already
      requested by regulators:regulator@2; cannot claim for 2184000.usb
      imx6q-pinctrl 20e0000.iomuxc: pin-137 (2184000.usb) status -22
      imx6q-pinctrl 20e0000.iomuxc: could not request pin 137
      (MX6Q_PAD_GPIO_1) from group usbotggrp  on device 20e0000.iomuxc
      imx_usb 2184000.usb: Error applying setting, reverse things
      back
      imx6q-pinctrl 20e0000.iomuxc: pin MX6Q_PAD_EIM_D31 already
      requested by regulators:regulator@1; cannot claim for 2184200.usb
      imx6q-pinctrl 20e0000.iomuxc: pin-52 (2184200.usb) status -22
      imx6q-pinctrl 20e0000.iomuxc: could not request pin 52 (MX6Q_PAD_EIM_D31)
      from group usbh1grp  on device 20e0000.iomuxc
      imx_usb 2184200.usb: Error applying setting, reverse things
      back

      Signed-off-by: Felipe F. Tonello <eu@xxxxxxxxxxxxxxxxx>
      Fixes: e2047e33f2bd ("ARM: dts: add initial Rex Pro board support")
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Shawn Guo <shawnguo@xxxxxxxxxx>

  commit 83510441bc08bee201c0ded9d81da6dfd008d69a
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Thu Sep 24 11:00:18 2015 +0200

      ALSA: hda/tegra - async probe for avoiding module loading deadlock

      The Tegra HD-audio controller driver causes deadlocks when loaded as a
      module since the driver invokes request_module() at binding with the
      codec driver.  This patch works around it by deferring the probe in a
      work like Intel HD-audio controller driver does.  Although hovering
      the codec probe stuff into udev would be a better solution, it may
      cause other regressions, so let's try this band-aid fix until the more
      proper solution gets landed.

      Reported-by: Thierry Reding <treding@xxxxxxxxxx>
      Tested-by: Thierry Reding <treding@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 4bdb4629867babb7a3d93548aa69a4ef07fc36c0
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:12:34 2015 +0200

      OMAPDSS: panel-sony-acx565akm: Export OF module alias information

      Drivers needs to export the OF id table and this be built into
      the module or udev won't have the necessary information to autoload
      the driver module when the device is registered via OF.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit ad38cc5f6d4f2c74ed69e2c017691e428549b2bd
  Author: Vladimir Zapolskiy <vladimir_zapolskiy@xxxxxxxxxx>
  Date:   Tue Sep 15 16:12:33 2015 +0300

      fbdev: omap2: connector-dvi: use of_get_i2c_adapter_by_node interface

      This change is needed to properly lock I2C bus driver, which serves DDC.

      Prior to this change i2c_put_adapter() is misused, which may lead to
      an overflow over zero of I2C bus driver user counter.

      Signed-off-by: Vladimir Zapolskiy <vladimir_zapolskiy@xxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 23aa4db78aa7da994ae12d85acf7413ba2517946
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 21:37:26 2015 +0200

      tridentfb: Fix set_lwidth on TGUI9440 and CYBER9320

      According to X.Org driver, chips older than TGUI9660 have only 1 width bit
      in AddColReg. Touching the 2nd one causes I2C/DDC to fail on TGUI9440.

      Set only 1 bit of width in AddColReg on TGUI9440 and CYBER9320.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 7f2ea957c1152a7b57c22af2ae603bf66965c06e
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 24 21:37:25 2015 +0200

      tridentfb: fix hang on Blade3D with CONFIG_CC_OPTIMIZE_FOR_SIZE

      When the kernel is compiled with -Os (CONFIG_CC_OPTIMIZE_FOR_SIZE), 
tridentfb
      hangs the machine upon load with Blade3D cards unless acceleration is 
disabled.

      This is caused by memcpy() which copies data byte-by-byte (rep movsb) when
      compiled with -Os. The card does not like that - it requires 32-bit 
access.

      Use iowrite_32() instead.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Krzysztof Helt <krzysztof.h1@xxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 8e9191ac7b29a250b2baab7069ea9cc614c5133c
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 20:46:09 2015 +0200

      video: fbdev: mb862xx: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit d4eb6dee471250661a5183a7336b18c85990e26d
  Author: Jean Delvare <jdelvare@xxxxxxx>
  Date:   Thu Sep 24 12:38:22 2015 +0200

      ext4: Update EXT4_USE_FOR_EXT2 description

      Configuration option EXT4_USE_FOR_EXT2 has no effect on ext3 support.
      Support for ext3 is always included now.

      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>
      Fixes: c290ea01ab ("fs: Remove ext3 filesystem driver")
      Cc: Jan Kara <jack@xxxxxxx>
      Cc: Theodore Ts'o <tytso@xxxxxxx>
      Cc: Andreas Dilger <adilger.kernel@xxxxxxxxx>
      Signed-off-by: Jan Kara <jack@xxxxxxxx>

  commit 274e91b81ed22957b510ad2988359584eea95dae
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 11:06:30 2015 +0100

      ARM: alignment: fix alignment handling for uaccess changes

      Jonathan Liu reports that the recent addition of CPU_SW_DOMAIN_PAN
      causes wpa_supplicant to die due to the following kernel oops:

      Unhandled fault: page domain fault (0x81b) at 0x001017a2
      pgd = ee1b8000
      [001017a2] *pgd=6ebee831, *pte=6c35475f, *ppte=6c354c7f
      Internal error: : 81b [#1] SMP ARM
      Modules linked in: rt2800usb rt2x00usb rt2800librt2x00lib crc_ccitt 
mac80211
      CPU: 1 PID: 202 Comm: wpa_supplicant Not tainted 4.3.0-rc2 #1
      Hardware name: Allwinner sun7i (A20) Family
      task: ec872f80 ti: ee364000 task.ti: ee364000
      PC is at do_alignment_ldmstm+0x1d4/0x238
      LR is at 0x0
      pc : [<c001d1d8>]    lr : [<00000000>]    psr: 600c0113
      sp : ee365e18  ip : 00000000  fp : 00000002
      r10: 001017a2  r9 : 00000002  r8 : 001017aa
      r7 : ee365fb0  r6 : e8820018  r5 : 001017a2  r4 : 00000003
      r3 : d49e30e0  r2 : 00000000  r1 : ee365fbc  r0 : 00000000
      Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none[   
34.393106] Control: 10c5387d  Table: 6e1b806a  DAC: 00000051
      Process wpa_supplicant (pid: 202, stack limit = 0xee364210)
      Stack: (0xee365e18 to 0xee366000)
      ...
      [<c001d1d8>] (do_alignment_ldmstm) from [<c001d510>] 
(do_alignment+0x1f0/0x904)
      [<c001d510>] (do_alignment) from [<c00092a0>] (do_DataAbort+0x38/0xb4)
      [<c00092a0>] (do_DataAbort) from [<c0013d7c>] (__dabt_usr+0x3c/0x40)
      Exception stack(0xee365fb0 to 0xee365ff8)
      5fa0:                                     00000000 56c728c0 001017a2 
d49e30e0
      5fc0: 775448d2 597d4e74 00200800 7a9e1625 00802001 00000021 b6deec84 
00000100
      5fe0: 08020200 be9f4f20 0c0b0d0a b6d9b3e0 600c0010 ffffffff
      Code: e1a0a005 e1a0000c 1affffe8 e5913000 (e4ea3001)
      ---[ end trace 0acd3882fcfdf9dd ]---

      This is caused by the alignment handler not being fixed up for the
      uaccess changes, and userspace issuing an unaligned LDM instruction.
      So, fix the problem by adding the necessary fixups.

      Reported-by: Jonathan Liu <net147@xxxxxxxxx>
      Tested-by: Jonathan Liu <net147@xxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit e03dc19ba9c7ebc48cedc9cb797fa42dff302565
  Author: Jason Jin <Jason.Jin@xxxxxxxxxxxxx>
  Date:   Fri Aug 14 13:54:09 2015 +0800

      video: fbdev: fsl: Fix the sleep function for FSL DIU module

      For deep sleep, the diu module will power off, when wake up
      from the deep sleep, the registers need to be reinitialized.

      Signed-off-by: Jason Jin <Jason.Jin@xxxxxxxxxxxxx>
      Signed-off-by: Wang Dongsheng <dongsheng.wang@xxxxxxxxxxxxx>
      Acked-by: Timur Tabi <timur@xxxxxxxx>
      Signed-off-by: Tomi Valkeinen <tomi.valkeinen@xxxxxx>

  commit 0a3579e39dd0412b3ff932e32ae7a22a604200f0
  Merge: e4b35f9 30c6466
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Sep 24 18:36:04 2015 +1000

      Merge tag 'vmwgfx-fixes-4.3-150924' of 
git://people.freedesktop.org/~thomash/linux into drm-fixes

      Pull request of 2015-09-24

      Vmwgfx fixes for 4.3:
       - A couple of uninitialized variable fixes by Christian Engelmayer
       - A TTM fix for a bug that causes problems with the new vmwgfx device 
init
       - A vmwgfx refcounting fix
       - A vmwgfx iomem caching fix
       - A DRM change to allow also control clients to read the drm driver 
version.

      * tag 'vmwgfx-fixes-4.3-150924' of 
git://people.freedesktop.org/~thomash/linux:
        drm: Allow also control clients to check the drm version
        drm/vmwgfx: Fix uninitialized return in vmw_kms_helper_dirty()
        drm/vmwgfx: Fix uninitialized return in vmw_cotable_unbind()
        drm/vmwgfx: Only build on X86
        drm/ttm: Fix memory space allocation v2
        drm/vmwgfx: Map the fifo as cached
        drm/vmwgfx: Fix up user_dmabuf refcounting

  commit 30c64664f110f76064e364cb5dd385edc3751ba5
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Tue Sep 15 01:11:42 2015 -0700

      drm: Allow also control clients to check the drm version

      This should be harmless.
      Vmware will, due to old infrastructure reasons, be using a privileged
      control client to supply GUI layout information rather than obtaining
      it from the device. That control client will be needing access to DRM
      version information.

      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Brian Paul <brianp@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>
      Acked-by: David Herrmann <dh.herrmann@xxxxxxxxx>

  commit f3b8c0caca02001565cb14b845bf90f59dea8213
  Author: Christian Engelmayer <cengelma@xxxxxx>
  Date:   Sat Sep 19 00:32:24 2015 +0200

      drm/vmwgfx: Fix uninitialized return in vmw_kms_helper_dirty()

      Function vmw_kms_helper_dirty() uses the uninitialized variable ret as
      return value. Make the result deterministic and directly return as the
      variable is unused anyway. Detected by Coverity CID 1324255.

      Signed-off-by: Christian Engelmayer <cengelma@xxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>
      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>

  commit 158ecc39185b885420e5136b803b29be2bbec7fb
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Wed Sep 23 12:49:01 2015 +0200

      x86/fpu: Fixup uninitialized feature_name warning

      Hand in &feature_name to cpu_has_xfeatures() as it is supposed
      to. Fixes an uninitialized warning.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: brgerst@xxxxxxxxx
      Cc: dvlasenk@xxxxxxxxxx
      Cc: fenghua.yu@xxxxxxxxx
      Cc: luto@xxxxxxxxxxxxxx
      Cc: tim.c.chen@xxxxxxxxxxxxxxx
      Fixes: d91cab78133d ("x86/fpu: Rename XSAVE macros")
      Link: http://lkml.kernel.org/r/20150923104901.GA3538@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 49558b471369e790650df8706b5608fee27af42c
  Author: Christian Engelmayer <cengelma@xxxxxx>
  Date:   Sat Sep 19 00:31:10 2015 +0200

      drm/vmwgfx: Fix uninitialized return in vmw_cotable_unbind()

      Function vmw_cotable_unbind() uses the uninitialized variable ret as
      return value. Make the result deterministic and directly return as
      the variable is unused anyway. Detected by Coverity CID 1324256.

      Signed-off-by: Christian Engelmayer <cengelma@xxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>
      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>

  commit 21dd560162d4bbf98cc81b303bfa19740ae5b964
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Tue Aug 11 13:11:58 2015 -0700

      ixgbe: Advance version to 4.2.1

      With the addition of X550em_x SFP+ support, the driver is now
      functionally equivalent to what will be the 4.2.1 driver when
      released, so change the version to match.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit c5846ba44500293d290eb2a31bd344565f237ad3
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:27:56 2015 -0700

      ixgbe: X540 thermal warning interrupt not a GPI

      The X540 thermal interrupt (IXGBE_EIMS_TS) is not an SDP, so it
      doesn't need to be enabled in ixgbe_setup_gpie(). In fact the
      value is simply not for the GPIE register at all.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bc1fc64fd2d9093496e5b04c6d94d26bfa629c9c
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:27:51 2015 -0700

      ixgbe: Fix FCRTH value in VM-to-VM loopback mode

      The 82599 and X540 datasheets require that FCRTH be "set" for Tx
      switching (VM-to-VM loopback) but it did not previously specify what
      the value should be set to. It has now been determined that
      the correct value is RXPBSIZE - (24*1024).

      This setting is also required for later devices.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3507a9b8c9d1684b5095c97f587ee46184e590da
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:27:46 2015 -0700

      ixgbe: Only clear adapter_stopped if ixgbe_setup_fc succeeded

      A logic error here results in the adapter_stopped flag only being
      cleared when ixgbe_setup_fc returns an error. Correct the logic.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 9de7605ea2389d5ab86d6fbb3f1a11b87665a35c
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:27:41 2015 -0700

      ixgbe: Correct several flaws with with DCA setup

      This change does two things. First, it makes it so that we always
      set the relaxed ordering bits related to the DCA registers even if
      DCA is not enabled. Second, it moves the configuration out of the
      ixgbe_down function and into the ixgbe_configure function before
      enabling the Rx and Tx rings. This ensures that DCA is configured
      correctly before starting to process packets.

      Thanks to Alex Duyck for this fix.

      CC: Alex Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 018d7146eee1942f27675bdabf9b43586bfaef72
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:19:19 2015 -0700

      ixgbe: Add new X550EM SFP+ device ID

      Add new device ID for X550EM device with SFPs.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 7fc151035487916b266257c2e7b8b6cb2a5cd04f
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:19:14 2015 -0700

      ixgbe: Update ixgbe_disable_pcie_master flow for X550*

      This patch skips the PCI transactions pending check in
      ixgbe_disable_pcie_master. This is done to addresses a known HW
      issue where the PCI transactions pending bit sticks high when there
      are pending transactions. HW engineering instructed to workaround
      this issue by wait and then continue with our reset flow.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 88627148400e37b4bff197285d348fc05c9de013
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Tue Sep 22 03:16:27 2015 -0500

      fix encryption error checks on mount

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>

  commit f961ddae164a5288a62146aae191da7bc1ecedb4
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:19:09 2015 -0700

      ixgbe: Add small packet padding support for X550

      This patch sets RDRXCTL.PSP when the driver is in SRIOV mode which
      enables padding of small packets.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ceb1b0b9b4d1089e9f2731a314689ae17784c861
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Thu Sep 24 00:52:37 2015 -0500

      [SMB3] Fix sec=krb5 on smb3 mounts

      Kerberos, which is very important for security, was only enabled for
      CIFS not SMB2/SMB3 mounts (e.g. vers=3.0)

      Patch based on the information detailed in
      http://thread.gmane.org/gmane.linux.kernel.cifs/10081/focus=10307
      to enable Kerberized SMB2/SMB3

      a) SMB2_negotiate: enable/use decode_negTokenInit in SMB2_negotiate
      b) SMB2_sess_setup: handle Kerberos sectype and replicate Kerberos
         SMB1 processing done in sess_auth_kerberos

      Signed-off-by: Noel Power <noel.power@xxxxxxxx>
      Signed-off-by: Jim McDonough <jmcd@xxxxxxxxx>
      CC: Stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>

  commit 052a1a724338bbf4721f8b4d7de8486701fc37cb
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:19:04 2015 -0700

      ixgbe: Correct setting of RDRXCTL register for X550* devices

      Setting the X550* RDRXCTL register should fall through into X540
      and 82599, not 82598.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5967fe225686bcae17352de172573964a15b17d5
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:59 2015 -0700

      ixgbe: Correct error path in semaphore handling

      The timeout path is supposed to release the semaphore, so do that.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 449e21a92411ba35bfa68b4464aa7dbd1f705d28
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:53 2015 -0700

      ixgbe: Add I2C bus mux support

      Take control of an I2C mux that selects which SFP is attached to
      the I2C bus. The control of the mux is captured in the taking and
      releasing of the related semaphore. Because only port 1 can control
      the mux, port 1 always leaves the mux set to select port 0.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 58e7cd24d474c87763387f606e403012f562760b
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:48 2015 -0700

      ixgbe: Limit SFP polling rate

      Reduce the frequency of polling for SFP modules. Because the
      service task sometimes runs at high rates, we can poll for
      SFPs too often. When an SFP is not present, the I2C timeouts
      that result are very costly. So, prevent SFP polling from
      being done more than once every two seconds. To reduce latency,
      the poll time is cleared in a couple of cases to permit the
      next service task execution to poll the SFP module.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 69eec0c2fa8781a6abae96af1f11069e1965cbfe
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:43 2015 -0700

      ixgbe: Allow SFP+ on more than 82598 and 82599

      Since SFP+ can be used with some X550 devices, permit them to be
      detected.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 542b6eecf4c3640f15a84ff89525131d421e7c8c
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:38 2015 -0700

      ixgbe: Add logic to reset CS4227 when needed

      On some hardware platforms, the CS4227 does not initialize properly.
      Detect those cases and reset it appropriately.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e23f33367882450c66f7de8805b98ce7665a7ba9
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:33 2015 -0700

      ixgbe: Fix 1G and 10G link stability for X550EM_x SFP+

      Configures the CS4227 correctly for both 1G and 10G operation,
      by moving the code to ixgbe_setup_mac_link_sfp_x550em(). It
      needs to be in this function because we need both the module
      type and the speed, and this is the only function in the init
      flow that knows the speed. In contrast,
      ixgbe_setup_sfp_modules_X550em() does not know the speed, so we
      can't do anything useful here. This is a fundamental difference
      from the previous flow, and is due to the way the CS4227 is
      implemented.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6d373a1bbb99bdfb9ce820aec9ae5f2e02c8891f
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:28 2015 -0700

      ixgbe: Add X550EM_x dual-speed SFP+ support

      This patch adds X550EM_x SFP+ dual-speed support. 82599 fiber link
      code was moved from ixgbe_82599.c to ixgbe_common.c for use by
      X550EM. SFP MAC link code is added to x550EM.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 56f6ed1ce13b0cb85ae9537f839df7c4ba1f5369
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:22 2015 -0700

      ixgbe: Allow reduced delays during SFP detection

      Reduce the number of retries during PHY detection. This reduces
      pauses when no SFP is present. Once an SFP is detected, the normal
      retry count will be used.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6ee8c9a70d65ee37251465348501a067138050d7
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:17 2015 -0700

      ixgbe: Clear I2C destination location

      Clear the destination location for I2C data initially so that
      the received data will not be affected by previous attempts.
      This could have returned wrong data in certain retry sequences.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 57781c1ceead5a3c1cd3ae11834226ef1de21cb5
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:03:01 2015 -0500

      ipvs: Pass ipvs into ip_vs_gather_frags

      This will be needed later when the network namespace guessing is
      removed from ip_defrag.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 9cfdd75b7c049895317aebb0e27f8112e7e31593
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:03:00 2015 -0500

      ipvs: Remove skb_sknet

      This function adds no real value and it obscures what the code is doing.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7c6c21ee94452081a5219667851d2084a45c5009
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:59 2015 -0500

      ipvs: Remove skb_net

      This hack has no more users so remove it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7d1f88eca0ae7228bdbd971f060603b3a1270693
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:58 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_protocol_net_(init|cleanup)

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 69f390934b26154573fc7c360645ced8b0c7871a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:57 2015 -0500

      ipvs: Remove net argument from ip_vs_tcp_conn_listen

      The argument is unnecessary and in practice confusing,
      and has caused the callers to do all manner of silly things.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit a43d1a6b97433f7774436307708516ee06592c54
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:56 2015 -0500

      ipvs: Pass ipvs through ip_vs_route_me_harder into sysctl_snat_reroute

      This removes the need to use the hack skb_net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7b5f689a2c25fbae66683071e895e444658b0eef
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:55 2015 -0500

      ipvs: Pass ipvs into ip_vs_out_icmp and ip_vs_out_icmp_v6

      This removes the need to compute ipvs with the hack 
"net_ipvs(skb_net(skb))"

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6f2bcea9917d85ff78b3a497e4a96b77b7bc2dd0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:54 2015 -0500

      ipvs: Pass ipvs into ip_vs_in_icmp and ip_vs_in_icmp_v6

      With ipvs passed into ip_vs_in_icmp and ip_vs_in_icmp_v6
      they no longer need to call the hack that is skb_net.

      Additionally ipvs_in_icmp no longer needs to call dev_net(skb->dev)
      and can use the ipvs->net instead.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6e385bb3efdbfaf09b564b93b2a834006802de84
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:53 2015 -0500

      ipvs: Pass ipvs into ip_vs_in

      Derive ipvs from state->net in the callers of ip_vs_in and pass it
      into ip_vs_out.  Removing the need to use the hack skb_net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1b75097dd7a2680d2e209fe452b6fab01a511fb1
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:52 2015 -0500

      ipvs: Pass ipvs into ip_vs_out

      Derive ipvs from state->net in the callers of ip_vs_out and pass it
      into ip_vs_out.  Removing the need to use the hack skb_net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 2300f0451e5fa5016330a5f7878db2ca0858b836
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:51 2015 -0500

      ipvs: Pass ipvs not net into sysctl_nat_icmp_send

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 51efbcbbb29708f8b588fda6cca42d26710f14fd
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:50 2015 -0500

      ipvs: Simplify ipvs and net access in ip_vs_leave

      Stop using the hack skb_net(skb) to compute the network namespace.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 570329487437d4531eb806accdf98726923367ae
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:49 2015 -0500

      ipvs: Wrap sysctl_cache_bypass and remove ifdefs in ip_vs_leave

      With sysctl_cache_bypass now a compile time constant the compiler can
      figue out that it can elimiate all of the code that depends on
      sysctl_cache_bypass being true.

      Also remove the duplicate computation of net previously necessitated
      by #ifdef CONFIG_SYSCTL

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7c08d78e6f122039ab98edf74c3c7b4b15c9fa1d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:48 2015 -0500

      ipvs: Better derivation of ipvs in ip_vs_in_stats and ip_vs_out_stats

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 20868a40d0a6d88467d95fb0e5b0448e6a0c83a0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:47 2015 -0500

      ipvs: Pass ipvs into ensure_mtu_is adequate

      This allows two different ways for computing/guessing net to be
      removed from ensure_mtu_is_adequate.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit f5745f8ae6bd1ac5e59031b2e3e91fcbf4b30c5b
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:46 2015 -0500

      ipvs: Pass ipvs into __ip_vs_get_out_rt_v6

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ecfe87b884dc0ed352b783ad2d7787a5883c60ea
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:45 2015 -0500

      ipvs: Pass ipvs into __ip_vs_get_out_rt

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 361c3f529332b28408ba7f8e8a4fa3ac23c855ff
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:44 2015 -0500

      ipvs: Better derivation of ipvs in ip_vs_tunnel_xmit

      Don't use "net_ipvs(skb_net(skb))" as skb_net is a bad hack.  Instead
      use cp->ipvs and ipvs->net for the net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d8f44c335a1111d647f41e9fa6ae65b18db112e4
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:43 2015 -0500

      ipvs: Pass ipvs into .conn_schedule and ip_vs_try_to_schedule

      This moves the hack "net_ipvs(skb_net(skb))" up one level where it
      will be easier to remove.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 2f3edc6a5bb2a570f491e8e8a4a16526aff3675b
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:42 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_conn_net_init and 
ip_vs_conn_net_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d889717aaf15475e2bfba76320ecd1e8290f6bc8
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:41 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_conn_net_flush

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 754b81a35710e02ffada4d80095318a3e57acd48
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:40 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_conn_hashkey

      Use the address of struct netns_ipvs in the hash not the address of
      struct net.  Both addresses are equally valid candidates and by using
      the address of struct netns_ipvs there becomes no need deal with
      struct net in this part of the code.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0cf705c8c2e8333aff5b472cfff13f9542620500
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:39 2015 -0500

      ipvs: Pass ipvs into conn_out_get

      Move the hack of relying on "net_ipvs(skb_net(skb))" to derive the
      ipvs up a layer.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ab161976421585812bcdab6592852b1b5b7dec1f
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:38 2015 -0500

      ipvs: Pass ipvs into .conn_in_get and ip_vs_conn_in_get_proto

      Stop relying on "net_ipvs(skb_net(skb))" to derive the ipvs as
      skb_net is a hack.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit f5099dd4d98a8cc4ef1003378a4812597cfba4c6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:37 2015 -0500

      ipvs: Pass ipvs into ip_vs_conn_fill_param_proto

      Move the ugly hack net_ipvs(skb_net(skb)) up a layer in the call stack
      so it is easier to remove.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1281a9c2d181a932ae2f59f5711ae087a58f1c13
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:36 2015 -0500

      ipvs: Pass ipvs not net into init_netns and exit_netns

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit c70bd6800abf1fe78d5fca2146f91831e94324d1
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:35 2015 -0500

      ipvs: Pass ipvs not net into [un]register_ip_vs_proto_netns

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b5dd212cc147603372d39dbe52480d687c98da7d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:34 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_app_net_init and ip_vs_app_net_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 09858708e68c7d9900e631e1e6e91a882e59518d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:33 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_app_inc_release

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 9f8128a56ef241753ea038e92948fe13beacf59f
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:32 2015 -0500

      ipvs: Pass ipvs not net to register_ip_vs_app and unregister_ip_vs_app

      Also move the tests for net_ipvs being NULL into __ip_vs_ftp_init
      and __ip_vs_ftp_exit.  The only places where they possibly make
      sense.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3250dc9c52045dd3f38297d1e189cc147a8db884
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:31 2015 -0500

      ipvs: Pass ipvs not net to register_ip_vs_app_inc

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit a080ce38a0b9746ef61af93c0cc300d9131bc8c8
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:30 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_app_inc_new

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 19648918fbf245ab2dda8c7842c9a83fd412ac35
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:29 2015 -0500

      ipvs: Pass ipvs not net into register_app and unregister_app

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit a4dd0360c623e5beac011f3674ff7e13b35b5b05
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:28 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_estimator_net_init and 
ip_vs_estimator_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 70a131a2c815935ecb3b5fa5cb53e6244823d5ff
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:27 2015 -0500

      ipvs: Pass ipvs not net to estimation_timer

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3d99376689ee40d4e88c90d26588268a4fccb383
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:26 2015 -0500

      ipvs: Pass ipvs not net into ip_vs_control_net_(init|cleanup)

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 8b8237a5814d96e2740e9f74ca37688b46625314
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:25 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_control_net_(init|cleanup)_sysctl

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 423b55954de222380a6b63c5b6ae7b6686e98e63
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:24 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_random_drop_entry

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0f34d54bf48892f23e2abef2f9fd8d0237db4623
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:23 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_start_estimator aned ip_vs_stop_estimator

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit cacd1e60f1f2fb863b2272b8557c4fb0d3bc69e9
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:22 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_set_config

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ebea1f7c0b8c0bb02045c87e4b548a31fc5612a6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:21 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_sync_net_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 802cb43703d080bd6269578bf6747189b654cc24
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:20 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_sync_net_init

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1fc12004d2fdb31c1b5db58d51a19bc145f6fcf7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:19 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_proc_sync_conn

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 4f30665bac73cba452fe49f97c51e663b9fec34c
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:18 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_proc_conn

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b61a8c1a40c2a9417eb6f710cce54353d195c9c7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:17 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_sync_conn

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 72e9481e28e4f982b91a58ebce86d27b395d8789
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:16 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_sync_conn_v0

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7d537f3ab7694709981498c37233a0874d18c639
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:15 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_process_message

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 37b68e6ded49c0b7e7434a4ecd17c5553e576b4d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:14 2015 -0500

      ipvs: Store ipvs not net in struct ip_vs_sync_thread_data

      In practice struct netns_ipvs is as meaningful as struct net and more
      useful as it holds the ipvs specific data.  So store a pointer to
      struct netns_ipvs.

      Update the accesses of tinfo->net to access tinfo->ipvs->net instead.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit fd124e2f8bb2ff94a1547a8f1d9741e7ffef1bbb
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:13 2015 -0500

      ipvs: Pass ipvs not net to make_receive_sock

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 68c76b6aa0e02b727e931cd9ce7d969e94a8e845
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:12 2015 -0500

      ipvs: Pass ipvs not net to make_send_sock

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b3cf3cbfb57c273cf9f88230416fcc5b97287862
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:11 2015 -0500

      ipvs: Pass ipvs not net to stop_sync_thread

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6ac121d710697cee894d6981b804583b0a66ed38
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:10 2015 -0500

      ipvs: Pass ipvs not net to start_sync_thread

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit df04ffb766a6eca2805d77e4f38beb7a9764c384
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:09 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_del_daemon

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d8443c5f2b6524bbad465073330f6dba458f8871
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:08 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_new_daemon

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 34c2f5146c6567843b6507aaedd794725ba91496
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:07 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_find_service

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 613fb830b75d6cd0f41f8365d031d10346ac637d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:06 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_genl_parse_service

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit af5403419d1c14bdae11eee55083a0ae308c6ecf
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:05 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_get_timeouts

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 08fff4c3576451cdb33bf1606c90a27c222aae73
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:04 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_get_dest_entries

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b2876b7773f3dbd3989d6e1dbeb2cbe879d84fbd
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:03 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_get_service_entries

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit f1faa1e7495445444c3227f698dacee50176ace0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:02 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_set_timeout

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 18d6ade63c8d796c272e2b4922d649cf108d7980
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:01 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_proto_data_get

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit a47b4300801978745bca9fd08d848b9024eed797
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:02:00 2015 -0500

      ipvs: Cache ipvs in ip_vs_in_icmp and ip_vs_in_icmp_v6

      Storte the value of net_ipvs in a variable named ipvs so that when
      there are more users struct netns_ipvs in ip_vs_in_cmp and
      ip_vs_in_icmp_v6 they won't need to compute the value again.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit c60856c687d601e908950289f5b3917253e98cb6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:59 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_zero_all

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 56d2169b7734f9b5cb2a4e66887ce6dc33d53632
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:58 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_service_net_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ef7c599d91172d388463c61da6d47d5bb002ca4d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:57 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_flush

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 5060bd8307fcfbd405c6038228e8927e593b2008
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:56 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_add_service

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit cd58278bd4a409af4619bb1d7dc4d80dc3017a50
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:55 2015 -0500

      ipvs: Cache ipvs in ip_vs_genl_set_cmd

      Compute ipvs early in ip_vs_genl_set_cmd and use the cached value to
      access ipvs->sync_state.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 8e743f1b455d40dd34dd76a234e3a01427a7d123
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:54 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_dest_trash_expire

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 79ac82e0aaff327383beb860150fb2a85aa7b743
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:53 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_del_dest

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6c0e14f507364d6a87bb7ce349ba2d97c2ea9480
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:52 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_trash_cleanup

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit dc2add6f2e35916afd6ffcd7819a06ce9b28063d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:51 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_find_dest

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 48aed1b029597d5f33316b1e978392fe30814f8d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:50 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_has_real_service

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0a4fd6ce92460ec325f7e56813645e4308da170e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:49 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_service_find

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit bb2e2a8c957fd1ae323b84d8a1c3268233669f83
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:48 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_service_find

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ba61f39034dc296990fa2dd7a9c2720f49beee1e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:47 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_svc_hashkey

      Use the address of ipvs not the address of net when computing the
      hash value.  This removes an unncessary dependency on struct net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1ed8b947806155c1898c1af7c664aff1690ca22e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:46 2015 -0500

      ipvs: Pass ipvs not net to __ip_vs_svc_fwm_find

      ipvs is what the code actually wants to use.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit f6510b245e0b32b67d836b2ff5c0b132a58a8cbe
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:45 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_svc_fwm_hashkey

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3109d2f2d1fe068f1cc3b1f74f5022ab4aef52a7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:44 2015 -0500

      ipvs: Store ipvs not net in struct ip_vs_service

      In practice struct netns_ipvs is as meaningful as struct net and more
      useful as it holds the ipvs specific data.  So store a pointer to
      struct netns_ipvs.

      Update the accesses of param->net to access param->ipvs->net instead.

      In functions where we are searching for an svc and filtering by net
      filter by ipvs instead.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 19913dec1bc1d1aa5afe26db858507d4c3042665
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:43 2015 -0500

      ipvs: Pass ipvs not net to ip_vs_fill_conn

      ipvs is what is actually desired so change the parameter and the modify
      the callers to pass struct netns_ipvs.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit e64e2b460cedadf93d05a23e9ad397cc0386568c
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:42 2015 -0500

      ipvs: Store ipvs not net in struct ip_vs_conn_param

      In practice struct netns_ipvs is as meaningful as struct net and more
      useful as it holds the ipvs specific data.  So store a pointer to
      struct netns_ipvs.

      Update the accesses of param->net to access param->ipvs->net instead.

      When lookup up struct ip_vs_conn in a hash table replace comparisons
      of cp->net with comparisons of cp->ipvs which is possible
      now that ipvs is present in ip_vs_conn_param.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 58dbc6f2604a2cbff9e6ec144d1bb9d000a1a1ec
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:41 2015 -0500

      ipvs: Store ipvs not net in struct ip_vs_conn

      In practice struct netns_ipvs is as meaningful as struct net and more
      useful as it holds the ipvs specific data.  So store a pointer to
      struct netns_ipvs.

      Update the accesses of conn->net to access conn->ipvs->net instead.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit d484fc38124bc198b9285c80d709c9e4ee032085
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:40 2015 -0500

      ipvs: Use state->net in the ipvs forward functions

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 717e917ddfa8db628041490eb44bce5815e947fd
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:39 2015 -0500

      ipvs: Don't use current in proc_do_defense_mode

      Instead store ipvs in extra2 so that proc_do_defense_mode can easily
      find the ipvs that it's value is associated with.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1daea8ed16ae3f949eb82893cd8656f3f08125eb
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Mon Sep 21 13:01:38 2015 -0500

      ipvs: Hoist computation of ipvs earlier in sctp_conn_schedule

      The addition of sysctl_sloppy_sctp in sctp_conn_schedule resulted
      in a use of ipvs before it was computed.  Hoist the computation of
      ipvs earlier to avoid this problem.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 7bbe33ff1896d225588b37c574c0d80dbc63c657
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 13:09:32 2015 -0400

      geneve: use network byte order for destination port config parameter

      This is primarily for consistancy with vxlan and other tunnels which
      use network byte order for similar parameters.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 06e60e5912c0373b15143cc52e4a11fafeaafff3
  Author: Max Filippov <jcmvbkbc@xxxxxxxxx>
  Date:   Tue Sep 22 14:27:16 2015 +0300

      net/ethoc: support big-endian register layout

      Signed-off-by: Max Filippov <jcmvbkbc@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e4b35f952be9f5706b22e38c1925b7ac49080d72
  Merge: 14d11b8 e786547
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Sep 24 08:13:34 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      radeon and amdgpu fixes for 4.3.  It's a bit bigger than usual since
      it's 3 weeks worth of fixes since I was on vacation, then at XDC.
      - lots of stability fixes
      - suspend and resume fixes
      - GPU scheduler fixes
      - Misc other fixes

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux: (31 
commits)
        drm/radeon: add quirk for MSI R7 370
        drm/amdgpu: Sprinkle drm_modeset_lock_all to appease locking checks
        drm/radeon: Sprinkle drm_modeset_lock_all to appease locking checks
        drm/amdgpu: sync ce and me with SWITCH_BUFFER(2)
        drm/amdgpu: integer overflow in amdgpu_mode_dumb_create()
        drm/amdgpu: info leak in amdgpu_gem_metadata_ioctl()
        drm/amdgpu: integer overflow in amdgpu_info_ioctl()
        drm/amdgpu: unwind properly in amdgpu_cs_parser_init()
        drm/amdgpu: Fix max_vblank_count value for current display engines
        drm/amdgpu: use kmemdup rather than duplicating its implementation
        drm/amdgpu: fix UVD suspend and resume for VI APU
        drm/amdgpu: fix the UVD suspend sequence order
        drm/amdgpu: make UVD handle checking more strict
        drm/amdgpu: Disable UVD PG
        drm/amdgpu: more scheduler cleanups v2
        drm/amdgpu: cleanup fence queue init v2
        drm/amdgpu: rename fence->scheduler to sched v2
        drm/amdgpu: cleanup entity init
        drm/amdgpu: refine the scheduler job type conversion
        drm/amdgpu: refine the job naming for amdgpu_job and amdgpu_sched_job
        ...

  commit 14d11b8dca17f6dedf4b62d7391b9b294e3414ff
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:47 2015 +0200

      drm/layerscape: fix handling fsl_dcu_drm_plane_index result

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 728f86607d47f7d2d24d61fd30852faa66ca5aa9
  Author: Archit Taneja <architt@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:30:55 2015 +0530

      drm/mgag200: Fix driver_load error handling

      mgag200_driver_load's error path just calls the drm driver's
      driver_unload op. It isn't safe to call this because it doesn't handle
      things well if driver_load fails somewhere mid way.

      Replace the call to mgag200_driver_unload with a more finegrained
      error handling path.

      Link: http://lkml.kernel.org/r/55F6E68D.8070800@xxxxxxxxxxxxxx
      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: Dave Airlie <airlied@xxxxxxxxx>
      Cc: David Airlie <airlied@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dri-devel <dri-devel@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Archit Taneja <architt@xxxxxxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit aec9e12953e777f62acdab069656ebd9bcb6c9ba
  Author: Archit Taneja <architt@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:30:54 2015 +0530

      drm/mgag200: Fix error handling paths in fbdev driver

      Set up error handling in mgag200_fbdev_init and mgag200fb_create such that
      they release the things they allocate, rather than relying on someone
      calling mga_fbdev_destroy.

      Based on a patch by Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>

      Link: http://lkml.kernel.org/r/55F6E68D.8070800@xxxxxxxxxxxxxx
      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: Dave Airlie <airlied@xxxxxxxxx>
      Cc: David Airlie <airlied@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dri-devel <dri-devel@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Archit Taneja <architt@xxxxxxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 69e5d3f893e19613486f300fd6e631810338aa4b
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Mon Sep 14 10:28:34 2015 +1000

      drm/qxl: only report first monitor as connected if we have no state

      If the server isn't new enough to give us state, report the first
      monitor as always connected, otherwise believe the server side.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 1bb6aa56bb388ac4f7dba226aa55142fa8c65361
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Sep 22 10:57:04 2015 +0200

      net: davinci_emac: Add support for fixed-link PHY

      In case the DaVinci Emac is directly connected to a
      non-mdio PHY/device, it should be possible to provide
      a fixed link configuration in the DT.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Tested-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b6bd9b5448a9362e3ca33b21f1461baa5500520f
  Author: Shrikrishna Khare <skhare@xxxxxxxxxx>
  Date:   Mon Sep 21 20:01:29 2015 -0700

      Driver: Vmxnet3: Extend register dump support

      Signed-off-by: Shrikrishna Khare <skhare@xxxxxxxxxx>
      Signed-off-by: Bhavesh Davda <bhavesh@xxxxxxxxxx>
      Acked-by: Srividya Murali <smurali@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6015a6c137e5bb5c0484ebe546540f88d690cfd5
  Merge: 16cfbae 25b1029
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:52:02 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-22

      This series contains updates to e1000, e1000e, igbvf, ixgbe, ixgbevf and
      fm10k.

      Jacob provides several updates for fm10k, which cleans up comments and
      most notably a fix for a corner case issue with the PF/VF mailbox code.
      The issue being fm10k_mbx_reset_work clears various states about the
      mailbox, but does not clear the Tx FIFO head/tail pointers.  We also
      are not able to simply clear these pointers, as we would drop
      untransmitted messages without error.  Also adds support for extra debug
      statistics, which provides the ability to see what the PF thinks the
      VF mailboxes look like.

      Don adds support for SFP+ in X550 and support for SCTP flow director
      filters SCTP mask.

      Francois Romieu dusts off the e1000 driver and removes some dead calls
      to e1000_init_eeprom_params().

      Toshiaki Makita provides three patches to enable TSO for stacked VLAN's
      on e1000e, igbvf and ixgbevf.

      Mark provides the first of several ixgbe updates.  First updates the
      driver to accept SFP not present error for all devices, since an SFP
      can still be inserted.  Adds support for SFP insertion interrupt on
      X550EM devices with SPFs.  Adds I2C combined operations on X550EM
      (not X550) devices.  Moved the setting of lan_id to before any I2C
      eeprom access.  Lastly, set the bit bang mode in the hardware when
      performing bit banding I2C operations on X550.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 41b976414c88016e2c9d9b2f6667ee67a998d388
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:45:31 2015 +0100

      8139cp: Dump contents of descriptor ring on TX timeout

      We are seeing unexplained TX timeouts under heavy load. Let's try to get
      a better idea of what's going on.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7f4c685633e2df9ba10d49a31dda13715745db37
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:45:16 2015 +0100

      8139cp: Fix DMA unmapping of transmitted buffers

      The low 16 bits of the 'opts1' field in the TX descriptor are supposed
      to still contain the buffer length when the descriptor is handed back to
      us. In practice, at least on my hardware, they don't. So stash the
      original value of the opts1 field and get the length to unmap from
      there.

      There are other ways we could have worked out the length, but I actually
      want a stash of the opts1 field anyway so that I can dump it alongside
      the contents of the descriptor ring when we suffer a TX timeout.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a5aeee0b79fa99d8e04c98dd4e87d4f52aa497b
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:44:57 2015 +0100

      8139cp: Reduce duplicate csum/tso code in cp_start_xmit()

      We calculate the value of the opts1 descriptor field in three different
      places. With two different behaviours when given an invalid packet to
      be checksummed â?? none of them correct. Sort that out.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a3b804043f490aeec57d8ca5baccdd35e6250857
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:44:38 2015 +0100

      8139cp: Fix TSO/scatter-gather descriptor setup

      When sending a TSO frame in multiple buffers, we were neglecting to set
      the first descriptor up in TSO mode.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 26b0bad6ac3a0167792dc4ffb276c29bc597d239
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:44:06 2015 +0100

      8139cp: Fix tx_queued debug message to print correct slot numbers

      After a certain amount of staring at the debug output of this driver, I
      realised it was lying to me.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aaa0062ecf4877a26dea66bee1039c6eaf906c94
  Author: David Woodhouse <David.Woodhouse@xxxxxxxxx>
  Date:   Wed Sep 23 09:43:41 2015 +0100

      8139cp: Do not re-enable RX interrupts in cp_tx_timeout()

      If an RX interrupt was already received but NAPI has not yet run when
      the RX timeout happens, we end up in cp_tx_timeout() with RX interrupts
      already disabled. Blindly re-enabling them will cause an IRQ storm.

      (This is made particularly horrid by the fact that cp_interrupt() always
      returns that it's handled the interrupt, even when it hasn't actually
      done anything. If it didn't do that, the core IRQ code would have
      detected the storm and handled it, I'd have had a clear smoking gun
      backtrace instead of just a spontaneously resetting router, and I'd have
      at *least* two days of my life back. Changing the return value of
      cp_interrupt() will be argued about under separate cover.)

      Unconditionally leave RX interrupts disabled after the reset, and
      schedule NAPI to check the receive ring and re-enable them.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3c6cb3acee6a2350c79df29e1cfb56ad1c9a3e9e
  Merge: d3869ef 8ceaf36
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:37:38 2015 -0700

      Merge branch 'netcp-fixes'

      Murali Karicheri says:

      ====================
      net: netcp: a set of bug fixes

      This patch series fixes a set of issues in netcp driver seen during 
internal
      testing of the driver. While at it, do some clean up as well.

      The fixes are tested on K2HK, K2L and K2E EVMs and the boot up logs can be
      seen at

       http://pastebin.ubuntu.com/12533100/
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ceaf361ffd131e835aef1e6cdb1d5ba70702617
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:11 2015 -0400

      net: netcp: fix deadlock reported by lockup detector

      A deadlock trace is seen in netcp driver with lockup detector enabled.
      The trace log is provided below for reference. This patch fixes the
      bug by removing the usage of netcp_modules_lock within ndo_ops functions.
      ndo_{open/close/ioctl)() is already called with rtnl_lock held. So there
      is no need to hold another mutex for serialization across processes on
      multiple cores.  So remove use of netcp_modules_lock mutex from these
      ndo ops functions.

      ndo_set_rx_mode() shouldn't be using a mutex as it is called from atomic
      context. In the case of ndo_set_rx_mode(), there can be call to this API
      without rtnl_lock held from an atomic context. As the underlying modules
      are expected to add address to a hardware table, it is to be protected
      across concurrent updates and hence a spin lock is used to synchronize
      the access. Same with ndo_vlan_rx_add_vid() & ndo_vlan_rx_kill_vid().

      Probably the netcp_modules_lock is used to protect the module not being
      removed as part of rmmod. Currently this is not fully implemented and
      assumes the interface is brought down before doing rmmod of modules.
      The support for rmmmod while interface is up is expected in a future
      patch set when additional modules such as pa, qos are added. For now
      all of the tests such as if up/down, reboot, iperf works fine with this
      patch applied.

      Deadlock trace seen with lockup detector enabled is shown below for
      reference.

      [   16.863014] ======================================================
      [   16.869183] [ INFO: possible circular locking dependency detected ]
      [   16.875441] 4.1.6-01265-gfb1e101 #1 Tainted: G        W
      [   16.881176] -------------------------------------------------------
      [   16.887432] ifconfig/1662 is trying to acquire lock:
      [   16.892386]  (netcp_modules_lock){+.+.+.}, at: [<c03e8110>]
      netcp_ndo_open+0x168/0x518
      [   16.900321]
      [   16.900321] but task is already holding lock:
      [   16.906144]  (rtnl_mutex){+.+.+.}, at: [<c053a418>] 
devinet_ioctl+0xf8/0x7e4
      [   16.913206]
      [   16.913206] which lock already depends on the new lock.
      [   16.913206]
      [   16.921372]
      [   16.921372] the existing dependency chain (in reverse order) is:
      [   16.928844]
      -> #1 (rtnl_mutex){+.+.+.}:
      [   16.932865]        [<c06023f0>] mutex_lock_nested+0x68/0x4a8
      [   16.938521]        [<c04c5758>] register_netdev+0xc/0x24
      [   16.943831]        [<c03e65c0>] netcp_module_probe+0x214/0x2ec
      [   16.949660]        [<c03e8a54>] netcp_register_module+0xd4/0x140
      [   16.955663]        [<c089654c>] keystone_gbe_init+0x10/0x28
      [   16.961233]        [<c000977c>] do_one_initcall+0xb8/0x1f8
      [   16.966714]        [<c0867e04>] kernel_init_freeable+0x148/0x1e8
      [   16.972720]        [<c05f9994>] kernel_init+0xc/0xe8
      [   16.977682]        [<c0010038>] ret_from_fork+0x14/0x3c
      [   16.982905]
      -> #0 (netcp_modules_lock){+.+.+.}:
      [   16.987619]        [<c006eab0>] lock_acquire+0x118/0x320
      [   16.992928]        [<c06023f0>] mutex_lock_nested+0x68/0x4a8
      [   16.998582]        [<c03e8110>] netcp_ndo_open+0x168/0x518
      [   17.004064]        [<c04c48f0>] __dev_open+0xa8/0x10c
      [   17.009112]        [<c04c4b74>] __dev_change_flags+0x94/0x144
      [   17.014853]        [<c04c4c3c>] dev_change_flags+0x18/0x48
      [   17.020334]        [<c053a9fc>] devinet_ioctl+0x6dc/0x7e4
      [   17.025729]        [<c04a59ec>] sock_ioctl+0x1d0/0x2a8
      [   17.030865]        [<c0142844>] do_vfs_ioctl+0x41c/0x688
      [   17.036173]        [<c0142ae4>] SyS_ioctl+0x34/0x5c
      [   17.041046]        [<c000ff60>] ret_fast_syscall+0x0/0x54
      [   17.046441]
      [   17.046441] other info that might help us debug this:
      [   17.046441]
      [   17.054434]  Possible unsafe locking scenario:
      [   17.054434]
      [   17.060343]        CPU0                    CPU1
      [   17.064862]        ----                    ----
      [   17.069381]   lock(rtnl_mutex);
      [   17.072522]                                lock(netcp_modules_lock);
      [   17.078875]                                lock(rtnl_mutex);
      [   17.084532]   lock(netcp_modules_lock);
      [   17.088366]
      [   17.088366]  *** DEADLOCK ***
      [   17.088366]
      [   17.094279] 1 lock held by ifconfig/1662:
      [   17.098278]  #0:  (rtnl_mutex){+.+.+.}, at: [<c053a418>]
      devinet_ioctl+0xf8/0x7e4
      [   17.105774]
      [   17.105774] stack backtrace:
      [   17.110124] CPU: 1 PID: 1662 Comm: ifconfig Tainted: G        W
      4.1.6-01265-gfb1e101 #1
      [   17.118637] Hardware name: Keystone
      [   17.122123] [<c00178e4>] (unwind_backtrace) from [<c0013cbc>]
      (show_stack+0x10/0x14)
      [   17.129862] [<c0013cbc>] (show_stack) from [<c05ff450>]
      (dump_stack+0x84/0xc4)
      [   17.137079] [<c05ff450>] (dump_stack) from [<c0068e34>]
      (print_circular_bug+0x210/0x330)
      [   17.145161] [<c0068e34>] (print_circular_bug) from [<c006ab7c>]
      (validate_chain.isra.35+0xf98/0x13ac)
      [   17.154372] [<c006ab7c>] (validate_chain.isra.35) from [<c006da60>]
      (__lock_acquire+0x52c/0xcc0)
      [   17.163149] [<c006da60>] (__lock_acquire) from [<c006eab0>]
      (lock_acquire+0x118/0x320)
      [   17.171058] [<c006eab0>] (lock_acquire) from [<c06023f0>]
      (mutex_lock_nested+0x68/0x4a8)
      [   17.179140] [<c06023f0>] (mutex_lock_nested) from [<c03e8110>]
      (netcp_ndo_open+0x168/0x518)
      [   17.187484] [<c03e8110>] (netcp_ndo_open) from [<c04c48f0>]
      (__dev_open+0xa8/0x10c)
      [   17.195133] [<c04c48f0>] (__dev_open) from [<c04c4b74>]
      (__dev_change_flags+0x94/0x144)
      [   17.203129] [<c04c4b74>] (__dev_change_flags) from [<c04c4c3c>]
      (dev_change_flags+0x18/0x48)
      [   17.211560] [<c04c4c3c>] (dev_change_flags) from [<c053a9fc>]
      (devinet_ioctl+0x6dc/0x7e4)
      [   17.219729] [<c053a9fc>] (devinet_ioctl) from [<c04a59ec>]
      (sock_ioctl+0x1d0/0x2a8)
      [   17.227378] [<c04a59ec>] (sock_ioctl) from [<c0142844>]
      (do_vfs_ioctl+0x41c/0x688)
      [   17.234939] [<c0142844>] (do_vfs_ioctl) from [<c0142ae4>]
      (SyS_ioctl+0x34/0x5c)
      [   17.242242] [<c0142ae4>] (SyS_ioctl) from [<c000ff60>]
      (ret_fast_syscall+0x0/0x54)
      [   17.258855] netcp-1.0 2620110.netcp eth0: Link is Up - 1Gbps/Full - 
flow
      control off
      [   17.271282] BUG: sleeping function called from invalid context at
      kernel/locking/mutex.c:616
      [   17.279712] in_atomic(): 1, irqs_disabled(): 0, pid: 1662, name: 
ifconfig
      [   17.286500] INFO: lockdep is turned off.
      [   17.290413] Preemption disabled at:[<  (null)>]   (null)
      [   17.295728]
      [   17.297214] CPU: 1 PID: 1662 Comm: ifconfig Tainted: G        W
      4.1.6-01265-gfb1e101 #1
      [   17.305735] Hardware name: Keystone
      [   17.309223] [<c00178e4>] (unwind_backtrace) from [<c0013cbc>]
      (show_stack+0x10/0x14)
      [   17.316970] [<c0013cbc>] (show_stack) from [<c05ff450>]
      (dump_stack+0x84/0xc4)
      [   17.324194] [<c05ff450>] (dump_stack) from [<c06023b0>]
      (mutex_lock_nested+0x28/0x4a8)
      [   17.332112] [<c06023b0>] (mutex_lock_nested) from [<c03e9840>]
      (netcp_set_rx_mode+0x160/0x210)
      [   17.340724] [<c03e9840>] (netcp_set_rx_mode) from [<c04c483c>]
      (dev_set_rx_mode+0x1c/0x28)
      [   17.348982] [<c04c483c>] (dev_set_rx_mode) from [<c04c490c>]
      (__dev_open+0xc4/0x10c)
      [   17.356724] [<c04c490c>] (__dev_open) from [<c04c4b74>]
      (__dev_change_flags+0x94/0x144)
      [   17.364729] [<c04c4b74>] (__dev_change_flags) from [<c04c4c3c>]
      (dev_change_flags+0x18/0x48)
      [   17.373166] [<c04c4c3c>] (dev_change_flags) from [<c053a9fc>]
      (devinet_ioctl+0x6dc/0x7e4)
      [   17.381344] [<c053a9fc>] (devinet_ioctl) from [<c04a59ec>]
      (sock_ioctl+0x1d0/0x2a8)
      [   17.388994] [<c04a59ec>] (sock_ioctl) from [<c0142844>]
      (do_vfs_ioctl+0x41c/0x688)
      [   17.396563] [<c0142844>] (do_vfs_ioctl) from [<c0142ae4>]
      (SyS_ioctl+0x34/0x5c)
      [   17.403873] [<c0142ae4>] (SyS_ioctl) from [<c000ff60>]
      (ret_fast_syscall+0x0/0x54)
      [   17.413772] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
      udhcpc (v1.20.2) started
      Sending discover...
      [   18.690666] netcp-1.0 2620110.netcp eth0: Link is Up - 1Gbps/Full - 
flow
      control off
      Sending discover...
      [   22.250972] netcp-1.0 2620110.netcp eth0: Link is Up - 1Gbps/Full - 
flow
      control off
      [   22.258721] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
      [   22.265458] BUG: sleeping function called from invalid context at
      kernel/locking/mutex.c:616
      [   22.273896] in_atomic(): 1, irqs_disabled(): 0, pid: 342, name: 
kworker/1:1
      [   22.280854] INFO: lockdep is turned off.
      [   22.284767] Preemption disabled at:[<  (null)>]   (null)
      [   22.290074]
      [   22.291568] CPU: 1 PID: 342 Comm: kworker/1:1 Tainted: G        W
      4.1.6-01265-gfb1e101 #1
      [   22.300255] Hardware name: Keystone
      [   22.303750] Workqueue: ipv6_addrconf addrconf_dad_work
      [   22.308895] [<c00178e4>] (unwind_backtrace) from [<c0013cbc>]
      (show_stack+0x10/0x14)
      [   22.316643] [<c0013cbc>] (show_stack) from [<c05ff450>]
      (dump_stack+0x84/0xc4)
      [   22.323867] [<c05ff450>] (dump_stack) from [<c06023b0>]
      (mutex_lock_nested+0x28/0x4a8)
      [   22.331786] [<c06023b0>] (mutex_lock_nested) from [<c03e9840>]
      (netcp_set_rx_mode+0x160/0x210)
      [   22.340394] [<c03e9840>] (netcp_set_rx_mode) from [<c04c9d18>]
      (__dev_mc_add+0x54/0x68)
      [   22.348401] [<c04c9d18>] (__dev_mc_add) from [<c05ab358>]
      (igmp6_group_added+0x168/0x1b4)
      [   22.356580] [<c05ab358>] (igmp6_group_added) from [<c05ad2cc>]
      (ipv6_dev_mc_inc+0x4f0/0x5a8)
      [   22.365019] [<c05ad2cc>] (ipv6_dev_mc_inc) from [<c058f0d0>]
      (addrconf_dad_work+0x21c/0x33c)
      [   22.373460] [<c058f0d0>] (addrconf_dad_work) from [<c0042850>]
      (process_one_work+0x214/0x8d0)
      [   22.381986] [<c0042850>] (process_one_work) from [<c0042f54>]
      (worker_thread+0x48/0x4bc)
      [   22.390071] [<c0042f54>] (worker_thread) from [<c004868c>]
      (kthread+0xf0/0x108)
      [   22.397381] [<c004868c>] (kthread) from [<c0010038>]

      Trace related to incorrect usage of mutex inside ndo_set_rx_mode

      [   24.086066] BUG: sleeping function called from invalid context at
      kernel/locking/mutex.c:616
      [   24.094506] in_atomic(): 1, irqs_disabled(): 0, pid: 1682, name: 
ifconfig
      [   24.101291] INFO: lockdep is turned off.
      [   24.105203] Preemption disabled at:[<  (null)>]   (null)
      [   24.110511]
      [   24.112005] CPU: 2 PID: 1682 Comm: ifconfig Tainted: G        W
      4.1.6-01265-gfb1e101 #1
      [   24.120518] Hardware name: Keystone
      [   24.124018] [<c00178e4>] (unwind_backtrace) from [<c0013cbc>]
      (show_stack+0x10/0x14)
      [   24.131772] [<c0013cbc>] (show_stack) from [<c05ff450>]
      (dump_stack+0x84/0xc4)
      [   24.138989] [<c05ff450>] (dump_stack) from [<c06023b0>]
      (mutex_lock_nested+0x28/0x4a8)
      [   24.146908] [<c06023b0>] (mutex_lock_nested) from [<c03e9840>]
      (netcp_set_rx_mode+0x160/0x210)
      [   24.155523] [<c03e9840>] (netcp_set_rx_mode) from [<c04c483c>]
      (dev_set_rx_mode+0x1c/0x28)
      [   24.163787] [<c04c483c>] (dev_set_rx_mode) from [<c04c490c>]
      (__dev_open+0xc4/0x10c)
      [   24.171531] [<c04c490c>] (__dev_open) from [<c04c4b74>]
      (__dev_change_flags+0x94/0x144)
      [   24.179528] [<c04c4b74>] (__dev_change_flags) from [<c04c4c3c>]
      (dev_change_flags+0x18/0x48)
      [   24.187966] [<c04c4c3c>] (dev_change_flags) from [<c053a9fc>]
      (devinet_ioctl+0x6dc/0x7e4)
      [   24.196145] [<c053a9fc>] (devinet_ioctl) from [<c04a59ec>]
      (sock_ioctl+0x1d0/0x2a8)
      [   24.203803] [<c04a59ec>] (sock_ioctl) from [<c0142844>]
      (do_vfs_ioctl+0x41c/0x688)
      [   24.211373] [<c0142844>] (do_vfs_ioctl) from [<c0142ae4>]
      (SyS_ioctl+0x34/0x5c)
      [   24.218676] [<c0142ae4>] (SyS_ioctl) from [<c000ff60>]
      (ret_fast_syscall+0x0/0x54)
      [   24.227156] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 99f8ef5dc6546ac28cc7a03ff8301bc72fe5527e
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:10 2015 -0400

      net: netcp: allocate buffers to desc before re-enable interrupt

      Currently netcp_rxpool_refill() that refill descriptors and attached
      buffers to fdq while interrupt is enabled as part of NAPI poll. Doing
      it while interrupt is disabled could be beneficial as hardware will
      not be starved when CPU is busy with processing interrupt.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 915c5857874fc211874de1363e88f902e581e6eb
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:09 2015 -0400

      net: netcp: check for interface handle in netcp_module_probe()

      Currently netcp_module_probe() doesn't check the return value of
      of_parse_phandle() that points to the interface data for the
      module and then pass the node ptr to the module which is incorrect.
      Check for return value and free the intf_modpriv if there is error.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e558b1fbf5f43da83f91a31e595a6d65e663b100
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:08 2015 -0400

      net: netcp: add error check to netcp_allocate_rx_buf()

      Currently, if netcp_allocate_rx_buf() fails due no descriptors
      in the rx free descriptor queue, inside the netcp_rxpool_refill() function
      the iterative loop to fill buffers doesn't terminate right away. So modify
      the netcp_allocate_rx_buf() to return an error code and use it break the
      loop when there is error.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 736532a0705ffc27c14f712fa2758a7f8b15e8b4
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:07 2015 -0400

      net: netcp: move netcp_register_interface() to after attach module

      The netcp interface is not fully initialized before attach the module
      to the interface. For example, the tx pipe/rx pipe is initialized
      in ethss module as part of attach(). So until this is complete, the
      interface can't be registered.  So move registration of interface to
      net device outside the current loop that attaches the modules to the
      interface.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 156e3c21f89655f099228577005a6c656b3ceb3d
  Author: Karicheri, Muralidharan <m-karicheri2@xxxxxx>
  Date:   Wed Sep 23 13:37:06 2015 -0400

      net: netcp: remove dead code from the driver

      netcp_core is the first driver that will get initialized and the modules
      (ethss, pa etc) will then get initialized. So the code at the end of
      netcp_probe() that iterate over the modules is a dead code as the module
      list will be always be empty. So remove this code.

      Signed-off-by: Murali Karicheri <m-karicheri2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8c85151ddec66f78fbf997e35be005a322fbb9c9
  Author: WingMan Kwok <w-kwok2@xxxxxx>
  Date:   Wed Sep 23 13:37:05 2015 -0400

      net: netcp: ethss: fix error in calling sgmii api with incorrect offset

      On K2HK, sgmii module registers of slave 0 and 1 are mem
      mapped to one contiguous block, while those of slave 2
      and 3 are mapped to another contiguous block.  However,
      on K2E and K2L, sgmii module registers of all slaves are
      mem mapped to one contiguous block.  SGMII APIs expect
      slave 0 sgmii base when API is invoked for slave 0 and 1,
      and slave 2 sgmii base when invoked for other slaves.
      Before this patch, slave 0 sgmii base is always passed to
      sgmii API for K2E regardless which slave is the API invoked
      for.  This patch fixes the problem.

      Signed-off-by: WingMan Kwok <w-kwok2@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 16cfbae160c46eadf0105892b676c365b051bfc2
  Merge: 34ea90e 45ffda7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:35:59 2015 -0700

      Merge branch 'bridge_external_fdb_aging'

      Scott Feldman says:

      ====================
      bridge: don't age out externally added FDB entries

      v3: Per davem review: add del_timer_sync on rocker port remove.

      v2: Per Jiri review comment: add BR_DEFAULT_AGEING_TIME to defines

      Siva originally proposed skipping externally added FDB entries in the 
bridge's
      FDB garbage collection func, and moving the ageing of externally added 
entries
      to the port driver/device.  This broke rocker, since rocker didn't have a
      hardware (or software) mechanism for ageing out its learned FDB entries.

      This patchset reintroduces Siva's bridge driver patch to skip externally 
added
      entries and adds support in rocker so rocker can age out its own entries.
      Rocker does this using a software timer similar to the bridge's FDB 
garbage
      collection timer.  Other switchdev devices/drivers can use this software 
timer
      method or program the device to nofity aged-out entries to the driver.

      Updated switchdev.txt documentation to reflect current state-of-the-art.  
This
      removes one more XXX todo comment in switchdev.txt.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 45ffda75e145ed7a2b40f6a5de35431d7e62d1f0
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:20 2015 -0700

      switchdev: update documentation on FDB ageing_time

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dcd45e06496ca586db35949d1d92d48aab8a0a00
  Author: Siva Mannem <siva.mannem.lnx@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:19 2015 -0700

      bridge: don't age externally added FDB entries

      Signed-off-by: Siva Mannem <siva.mannem.lnx@xxxxxxxxx>
      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Acked-by: Premkumar Jonnala <pjonnala@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52fe3e2d51d27c0e68b2bea29dea0b64af2c665e
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:18 2015 -0700

      rocker: add FDB cleanup timer

      Add a timer to each rocker switch to do FDB entry cleanup by ageing out
      expired entries.  The timer scheduling algo is copied from the bridge
      driver, for the most part, to keep the firing of the timer to a minimum.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e7335703e33e7787333872a31e0f4491f9d76cac
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:17 2015 -0700

      rocker: adding port ageing_time for ageing out FDB entries

      Follow-up patcheset will allow user to change ageing_time, but for now
      just hard-code it to a fixed value (the same value used as the default
      for the bridge driver).

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a79e88d9fbbe2e3ecb9d883fb59dca7468d42d79
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:16 2015 -0700

      bridge: define some min/max/default ageing time constants

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c660496c95af93f3461c06d46fd33c0719625db
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:15 2015 -0700

      rocker: store rocker_port in fdb key rather than pport

      We'll need more info from rocker_port than just pport when we age out fdb
      entries, so store rocker_port rather than pport in each fdb entry.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a471be41f2bfe4ee3a4b38b0e5af17d0abfd3aa6
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Sep 23 08:39:14 2015 -0700

      rocker: track when FDB entry is touched.

      The entry is touched once when created, and touched again for each update.
      The touched time is used to calculate FDB entry age.

      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3869efe7a8a2298516d9af4f91487cf486ca945
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 19:45:08 2015 +0100

      Fix AF_PACKET ABI breakage in 4.2

      Commit 7d82410950aa ("virtio: add explicit big-endian support to memory
      accessors") accidentally changed the virtio_net header used by
      AF_PACKET with PACKET_VNET_HDR from host-endian to big-endian.

      Since virtio_legacy_is_little_endian() is a very long identifier,
      define a vio_le macro and use that throughout the code instead of the
      hard-coded 'false' for little-endian.

      This restores the ABI to match 4.1 and earlier kernels, and makes my
      test program work again.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2d8bff12699abc3a9bf886bb0b79f44d94d81496
  Author: Neil Horman <nhorman@xxxxxxxxxx>
  Date:   Wed Sep 23 14:57:58 2015 -0400

      netpoll: Close race condition between poll_one_napi and napi_disable

      Drivers might call napi_disable while not holding the napi instance 
poll_lock.
      In those instances, its possible for a race condition to exist between
      poll_one_napi and napi_disable.  That is to say, poll_one_napi only tests 
the
      NAPI_STATE_SCHED bit to see if there is work to do during a poll, and as 
such
      the following may happen:

      CPU0                              CPU1
      ndo_tx_timeout                    napi_poll_dev
       napi_disable                      poll_one_napi
        test_and_set_bit (ret 0)
                                  test_bit (ret 1)
         reset adapter             napi_poll_routine

      If the adapter gets a tx timeout without a napi instance scheduled, its 
possible
      for the adapter to think it has exclusive access to the hardware  (as the 
napi
      instance is now scheduled via the napi_disable call), while the netpoll 
code
      thinks there is simply work to do.  The result is parallel hardware access
      leading to corrupt data structures in the driver, and a crash.

      Additionaly, there is another, more critical race between netpoll and
      napi_disable.  The disabled napi state is actually identical to the 
scheduled
      state for a given napi instance.  The implication being that, if a napi 
instance
      is disabled, a netconsole instance would see the napi state of the device 
as
      having been scheduled, and poll it, likely while the driver was dong 
something
      requiring exclusive access.  In the case above, its fairly clear that not 
having
      the rings in a state ready to be polled will cause any number of crashes.

      The fix should be pretty easy.  netpoll uses its own bit to indicate that 
that
      the napi instance is in a state of being serviced by netpoll 
(NAPI_STATE_NPSVC).
      We can just gate disabling on that bit as well as the sched bit.  That 
should
      prevent netpoll from conducting a napi poll if we convert its set bit to a
      test_and_set_bit operation to provide mutual exclusion

      Change notes:
      V2)
        Remove a trailing whtiespace
        Resubmit with proper subject prefix

      V3)
        Clean up spacing nits

      Signed-off-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: jmaxwell@xxxxxxxxxx
      Tested-by: jmaxwell@xxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34ea90ef725405a0b431843b775fb9f4021da6ae
  Merge: e1ffc0c 5cf8ca0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:29:02 2015 -0700

      Merge branch 'cls_bpf-next'

      Daniel Borkmann says:

      ====================
      Minor cls_bpf updates

      Some minor updates resp. follow-ups on cls_bpf, please see
      individual patches for details. Will follow with the iproute2
      patch after this series.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5cf8ca0e473df01c9b78894d6e62afa2e1d1166f
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:56:48 2015 +0200

      cls_bpf: further limit exec opcodes subset

      Jamal suggested to further limit the currently allowed subset of opcodes
      that may be used by a direct action return code as the intention is not
      to replace the full action engine, but rather to have a minimal set that
      can be used in the fast-path on things like ingress for some features
      that cls_bpf supports.

      Classifiers can, of course, still be chained together that have direct
      action mode with those that have a full exec pass. For more complex
      scenarios that go beyond this minimal set here, the full tcf_exts_exec()
      path must be used.

      Suggested-by: Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef146fa40cc3af1dcb13688f41cc06a9c0deb01c
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:56:47 2015 +0200

      cls_bpf: make binding to classid optional

      The binding to a particular classid was so far always mandatory for
      cls_bpf, but it doesn't need to be. Therefore, lift this restriction
      as similarly done in other classifiers.

      Only a couple of qdiscs make use of class from the tcf_result, others
      don't strictly care, so let the user choose his needs (those that read
      out class can handle situations where it could be NULL).

      An explicit check for tcf_unbind_filter() is also not needed here, as
      the previous r->class was 0, so the xchg() will return that and
      therefore a callback to the qdisc's unbind_tcf() is skipped.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bf007d1c75aceb4e8a407f325d42ee9958049a31
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 21:56:46 2015 +0200

      cls_bpf: also dump TCA_BPF_FLAGS

      In commit 43388da42a49 ("cls_bpf: introduce integrated actions") we
      have added TCA_BPF_FLAGS. We can also retrieve this information from
      the prog, dump it back to user space as well. It's useful in tc when
      displaying/dumping filter info.

      Also, remove tp from cls_bpf_prog_from_efd(), came in as a conflict
      from a rebase and it's unused here (later work may add it along with
      a real user).

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e1ffc0cd2c2698d272121fb85fcb012994c4112c
  Merge: 927ab1d 834c952
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:27:24 2015 -0700

      Merge tag 'arcnet-cleanup-v4.3-rc2' of 
git://git.pengutronix.de/git/mgr/linux

      Michael Grzeschik says:

      ====================
      ARCNET: refactoring and cleanup

      This series cleans up the code in drivers/net/arcnet
      and include/uapi/linux/if_arcnet.h . It doesn't change
      the runtime behaviour of the code. Its only purpose
      is to improve the code maintenance and readability.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 927ab1d764565aec36ace1d017fa14c1e84f2769
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 22:20:15 2015 +0200

      sched, bpf: let stack handle !IFF_UP devs on bpf_clone_redirect

      Similarly as already the case in bpf_redirect()/skb_do_redirect()
      pair, let the stack deal with devs that are !IFF_UP.

      dev_forward_skb() as well as dev_queue_xmit() will free the skb
      and increment drop counter internally in such cases, so we can
      spare the condition in bpf_clone_redirect().

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 675ee231d960af2af3606b4480324e26797eb010
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Wed Sep 23 14:00:21 2015 -0700

      tcp: add proper TS val into RST packets

      RST packets sent on behalf of TCP connections with TS option (RFC 7323
      TCP timestamps) have incorrect TS val (set to 0), but correct TS ecr.

      A > B: Flags [S], seq 0, win 65535, options [mss 1000,nop,nop,TS val 100
      ecr 0], length 0
      B > A: Flags [S.], seq 2444755794, ack 1, win 28960, options [mss
      1460,nop,nop,TS val 7264344 ecr 100], length 0
      A > B: Flags [.], ack 1, win 65535, options [nop,nop,TS val 110 ecr
      7264344], length 0

      B > A: Flags [R.], seq 1, ack 1, win 28960, options [nop,nop,TS val 0
      ecr 110], length 0

      We need to call skb_mstamp_get() to get proper TS val,
      derived from skb->skb_mstamp

      Note that RFC 1323 was advocating to not send TS option in RST segment,
      but RFC 7323 recommends the opposite :

        Once TSopt has been successfully negotiated, that is both <SYN> and
        <SYN,ACK> contain TSopt, the TSopt MUST be sent in every non-<RST>
        segment for the duration of the connection, and SHOULD be sent in an
        <RST> segment (see Section 5.2 for details)

      Note this RFC recommends to send TS val = 0, but we believe it is
      premature : We do not know if all TCP stacks are properly
      handling the receive side :

         When an <RST> segment is
         received, it MUST NOT be subjected to the PAWS check by verifying an
         acceptable value in SEG.TSval, and information from the Timestamps
         option MUST NOT be used to update connection state information.
         SEG.TSecr MAY be used to provide stricter <RST> acceptance checks.

      In 5 years, if/when all TCP stack are RFC 7323 ready, we might consider
      to decide to send TS val = 0, if it buys something.

      Fixes: 7faee5c0d514 ("tcp: remove TCP_SKB_CB(skb)->when")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e78654799135a788a941bacad3452fbd7083e518
  Author: Maxim Sheviakov <mrader3940@xxxxxxxxx>
  Date:   Wed Sep 23 17:10:51 2015 -0400

      drm/radeon: add quirk for MSI R7 370

      Just adds the quirk for MSI R7 370 Armor 2X
      Bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=91294

      Signed-off-by: Maxim Sheviakov <mrader3940@xxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 4c7fbc39b1d58d9f4113ef962743a67bcdfe6be2
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Wed Sep 23 14:32:06 2015 -0400

      drm/amdgpu: Sprinkle drm_modeset_lock_all to appease locking checks

      In

      commit 7a3f3d6667f5f9ffd1517f6b21d64bbf5312042c
      Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Date:   Thu Jul 9 23:44:28 2015 +0200

          drm: Check locking in drm_for_each_connector

      I added locking checks to drm_for_each_connector but failed that
      through drm_helper_connector_dpms -> drm_helper_choose_encoder_dpms
      it's used in a few more places in the amdgpu resume/suspend code.

      Fix them up.

      Note that we could use the connector iterator macros in there too, but
      that's for the future.

      Port of radeon commit:
      drm/radeon: Sprinkle drm_modeset_lock_all to appease locking checks

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 6adaed5bfe4f6f0a0e027e87d5dd80bd9834d5f0
  Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
  Date:   Wed Sep 23 20:26:45 2015 +0200

      drm/radeon: Sprinkle drm_modeset_lock_all to appease locking checks

      In

      commit 7a3f3d6667f5f9ffd1517f6b21d64bbf5312042c
      Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Date:   Thu Jul 9 23:44:28 2015 +0200

          drm: Check locking in drm_for_each_connector

      I added locking checks to drm_for_each_connector but failed that
      through drm_helper_connector_dpms -> drm_helper_choose_encoder_dpms
      it's used in a few more places in the radeon resume/suspend code.

      Fix them up.

      Note that we could use the connector iterator macros in there too, but
      that's for the future.

      Reported-and-tested-by: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Alex Deucher <alexdeucher@xxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 5c3422b0b135b46c8dca9c1d909c1ae84f3561bd
  Author: monk.liu <monk.liu@xxxxxxx>
  Date:   Wed Sep 23 13:49:58 2015 +0800

      drm/amdgpu: sync ce and me with SWITCH_BUFFER(2)

      we used to adopt wait_reg_mem to let CE wait before DE finish page
      updating, but from Tonga+, CE doesn't support wait_reg_mem package so
      this logic no longer works.

      so here is another approach to do same thing:
      Insert two of SWITCH_BUFFER at both front and end of vm_flush can
      guarantee that CE not go further to process IB_const before vm_flush
      done.

      Insert two of SWITCH_BUFFER also works on CI, so remove legency method
      to sync CE and ME

      v2:
      Insert double SWITCH_BUFFER at front of vm flush as well.

      Signed-off-by: monk.liu <monk.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit 54ef0b5461c071050c61e501af5544842d61f40a
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 23 14:00:59 2015 +0300

      drm/amdgpu: integer overflow in amdgpu_mode_dumb_create()

      args->size is a u64.  arg->pitch and args->height are u32.  The
      multiplication will overflow instead of using the high 32 bits as
      intended.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 0913eab648e4fb30ddca8882e707d0fcf5b237c6
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 23 14:00:35 2015 +0300

      drm/amdgpu: info leak in amdgpu_gem_metadata_ioctl()

      There is no limit on args->data.data_size_bytes so we could read beyond
      the end of the args->data.data[] array.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reported-by: Ilja Van Sprundel <ivansprundel@xxxxxxxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 0d2edd3791bb172a59d708d5c94330bbd6050f97
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 23 14:00:12 2015 +0300

      drm/amdgpu: integer overflow in amdgpu_info_ioctl()

      The "alloc_size" calculation can overflow leading to memory corruption.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reported-by: Ilja Van Sprundel <ivansprundel@xxxxxxxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 1d263474c4416efb6d0feca98fe6d462b0d28f56
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 23 13:59:28 2015 +0300

      drm/amdgpu: unwind properly in amdgpu_cs_parser_init()

      The amdgpu_cs_parser_init() function doesn't clean up after itself but
      instead the caller uses a free everything function amdgpu_cs_parser_fini()
      on failure.  This style of error handling is often buggy.  In this
      example, we call "drm_free_large(parser->chunks[i].kdata);" when it is
      an unintialized pointer or when "parser->chunks" is NULL.

      I fixed this bug by adding unwind code so that it frees everything that
      it allocates.

      I also mode some other very minor changes:
      1) Renamed "r" to "ret".
      2) Moved the chunk_array allocation to the start of the function.
      3) Removed some initializers which are no longer needed.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reported-by: Ilja Van Sprundel <ivansprundel@xxxxxxxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 5a6adfa20b622a273205e33b20c12332aa7eb724
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Sep 22 10:06:45 2015 -0400

      drm/amdgpu: Fix max_vblank_count value for current display engines

      The value was much too low, which could cause the userspace visible
      vblank counter to move backwards when the hardware counter wrapped
      around.

      Ported from radeon commit:
      b0b9bb4dd51f396dcf843831905f729e74b0c8c0

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 71affda522bb0f43e205cf4f000e2c50261c01a6
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 17:34:39 2015 -0400

      drm/amdgpu: use kmemdup rather than duplicating its implementation

      The patch was generated using fixed coccinelle semantic patch
      scripts/coccinelle/api/memdup.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2014320

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 1f4452105ce39786be13b4636251377a30d1286a
  Author: Leo Liu <leo.liu@xxxxxxx>
  Date:   Fri Sep 11 17:09:57 2015 -0400

      drm/amdgpu: fix UVD suspend and resume for VI APU

      User space passed the same handle before suspend and after resume,
      so we have remove the session and handle destroy, and keep the
      firmware untouched.

      Signed-off-by: Leo Liu <leo.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2bd188d0167227932be3cf5b033c0e600b01291f
  Author: Leo Liu <leo.liu@xxxxxxx>
  Date:   Fri Sep 11 14:22:18 2015 -0400

      drm/amdgpu: fix the UVD suspend sequence order

      Fixes suspend issues with UVD.

      Signed-off-by: Leo Liu <leo.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 5146419e6feb99cfbc8dbf005dd2f62603e15efb
  Author: Leo Liu <leo.liu@xxxxxxx>
  Date:   Tue Sep 15 10:38:38 2015 -0400

      drm/amdgpu: make UVD handle checking more strict

      Invalid messages can crash the hw otherwise

      Ported from radeon commit a1b403da70e038ca6c6c6fe434d1d873546873a3

      Signed-off-by: Leo Liu <leo.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 1ee4478a26cf55c8f8a6219d7e99f2b48959394d
  Author: Leo Liu <leo.liu@xxxxxxx>
  Date:   Thu Sep 10 13:41:38 2015 -0400

      drm/amdgpu: Disable UVD PG

      This causes problems with multiple suspend/resume cycles.

      Signed-off-by: Leo Liu <leo.liu@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 4f839a243d3b0d8b1a14f4778a87ec4d8ddbf15f
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Tue Sep 8 20:22:31 2015 +0200

      drm/amdgpu: more scheduler cleanups v2

      Embed the scheduler into the ring structure instead of allocating it.
      Use the ring name directly instead of the id.

      v2: rebased, whitespace cleanup

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>

  commit 5ec92a7692872d656cffe010920fb49c4f51d75f
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Sep 7 18:43:02 2015 +0200

      drm/amdgpu: cleanup fence queue init v2

      Move the fence related stuff into amdgpu_fence.c

      v2: rework commit message, cause this is actually not a bug

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>

  commit 9b398fa5c24eb05fc60fafd8543cc03e9170f054
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Sep 7 18:16:49 2015 +0200

      drm/amdgpu: rename fence->scheduler to sched v2

      Just to be consistent with the other members.

      v2: rename the ring member as well.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx> (v1)
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>

  commit 0f75aee75112934bcaf42410df5c51d7194b5896
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Sep 7 18:07:14 2015 +0200

      drm/amdgpu: cleanup entity init

      Reorder the fields and properly return the kfifo_alloc error code.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>

  commit a6db8a33e164ae72fb5429ab637e8cfee057a722
  Author: Junwei Zhang <Jerry.Zhang@xxxxxxx>
  Date:   Wed Sep 9 09:21:19 2015 +0800

      drm/amdgpu: refine the scheduler job type conversion

      Use container_of rather than casting.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: David Zhou <david1.zhou@xxxxxxx>
      Signed-off-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>

  commit 4c7eb91cae88fd2aa101750d6825b4176f85ffb2
  Author: Junwei Zhang <Jerry.Zhang@xxxxxxx>
  Date:   Wed Sep 9 09:05:55 2015 +0800

      drm/amdgpu: refine the job naming for amdgpu_job and amdgpu_sched_job

      Use consistent naming across functions.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: David Zhou <david1.zhou@xxxxxxx>
      Signed-off-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>

  commit bf60efd353f68e5dec1a177b5cbe4da07c819569
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Fri Sep 4 10:47:56 2015 +0200

      drm/amdgpu: use only one reservation object for each VM v2

      Reduces the locking and fencing overhead.

      v2: add comment why we need the duplicates list in the GEM op.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit a5b750583eb4af69da1e659c7684b6d370b2ae97
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Sep 3 16:40:39 2015 +0200

      drm/amdgpu: validate duplicates in the CS as well

      This allows for multiple BOs to have the same reservation object.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 72d7668b5ba5180b651e8a07dd6ed62e4e26f207
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Sep 3 17:34:59 2015 +0200

      drm/amdgpu: export reservation_object from dmabuf to ttm (v2)

      Adds an extra argument to amdgpu_bo_create, which is only used in 
amdgpu_prime.c.

      Port of radeon commit 831b6966a60fe72d85ae3576056b4e4e0775b112.

      v2: fix up kfd.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit b7d698d7fd7d132c6ebe56d230584f2cae6c94ee
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Sep 7 12:32:09 2015 +0200

      drm/amdgpu: fix overflow on 32bit systems

      mem->start is a long, so this can overflow on 32bit systems.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 1886d1a9caed20f457dd69a926c7f8b54c2d5f48
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Aug 31 17:28:28 2015 +0200

      drm/amdgpu: remove process_job callback from the scheduler

      Just free the resources immediately after submitting the job.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit 258f3f99d514172aa5a9df15e6d6ebe33aad2f55
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Mon Aug 31 17:02:52 2015 +0200

      drm/amdgpu: move scheduler fence callback into fence v2

      And call the processed callback directly after submitting the job.

      v2: split adding error handling into separate patch.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit 27439fcac03632f2b1fd85268dc61af828c77e7b
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Wed Sep 2 12:03:06 2015 +0200

      drm/amdgpu: signal scheduler fence when hw submission fails v3

      Otherwise the resource blocked by it will never be reclaimed.

      v2: add DRM_ERROR.
      v3: fix typo in commit message

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Chunming Zhou<david1.zhou@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit 353da3c520b47272b9e3ddbc70b81be285c0b933
  Author: Chunming Zhou <david1.zhou@xxxxxxx>
  Date:   Mon Sep 7 16:06:53 2015 +0800

      drm/amdgpu: add tracepoint for scheduler (v2)

      track sched job status like the length of job queue and hw job queue.

      v2: fix build after rebase

      Signed-off-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit 20a85ff846ffed84fba8637abbb6b1c96436c0ac
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Sat Sep 5 11:59:50 2015 +0200

      drm/amdgpu: use write confirm for vm_flush()

      Make sure the CP waits for the write to be confirmed before
      invalidating.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 22c01cc48301f6974868bd4a7b03e29883da1103
  Author: Anatoli Antonovitch <anatoli.antonovitch@xxxxxxx>
  Date:   Thu Sep 3 11:13:31 2015 -0400

      drm/amdgpu: execution barrier after fence v2

      Insert wait for reg mem after EOP to fix potential issue with vm context 
switch

      v2: move wait to vm_flush() use equal instead of greater than.

      Signed-off-by: Anatoli Antonovitch <anatoli.antonovitch@xxxxxxx>
      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 3daea9e3d3ecd217a63f35e63f18ea7138f2ae17
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Sat Sep 5 11:12:27 2015 +0200

      drm/amdgpu: add option to disable semaphores

      Provide module parameter to enable/disable them. Still
      enabled by default.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 644d0e6569582872e448b1d39b9338d5e4021faa
  Author: Tom Herbert <tom@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 14:13:35 2015 -0700

      ipv6 Use get_hash_from_flowi6 for rt6 hash

      In rt6_info_hash_nhsfn replace the custom hashing over flowi6 that is
      using xor with a call to common function get_hash_from_flowi6.

      Signed-off-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bda4e0fb3126aca15586d165b5a15a37edc0a984
  Author: Keith Busch <keith.busch@xxxxxxxxx>
  Date:   Thu Sep 3 08:18:17 2015 -0600

      NVMe: Set affinity after allocating request queues

      The asynchronous namespace scanning caused affinity hints to be set before
      its tagset initialized, so there was no cpu mask to set the hint. This
      patch moves the affinity hint setting to after namespaces are scanned.

      Reported-by: �경� <ks0204.kim@xxxxxxxxxxx>
      Signed-off-by: Keith Busch <keith.busch@xxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit cbb4be652d374f64661137756b8f357a1827d6a4
  Author: Johan Hovold <johan@xxxxxxxxxx>
  Date:   Wed Sep 23 11:41:42 2015 -0700

      USB: whiteheat: fix potential null-deref at probe

      Fix potential null-pointer dereference at probe by making sure that the
      required endpoints are present.

      The whiteheat driver assumes there are at least five pairs of bulk
      endpoints, of which the final pair is used for the "command port". An
      attempt to bind to an interface with fewer bulk endpoints would
      currently lead to an oops.

      Fixes CVE-2015-5257.

      Reported-by: Moein Ghasemzadeh <moein@xxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit ed14ee0eea8b6808025356cecc87a8007885263f
  Merge: d86a2fe 8524bb0 ee92cfb
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:12 2015 -0700

      Merge remote-tracking branches 'asoc/fix/wm8960' and 'asoc/fix/wm8962' 
into asoc-linus

  commit d86a2fe4dc97cbbad04f5db941d9a1bb82e22b5f
  Merge: 312e0bc e4fba9b 921e546 8811191 4261786 3a0e27d f072f91
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:08 2015 -0700

      Merge remote-tracking branches 'asoc/fix/mtk', 'asoc/fix/psc', 
'asoc/fix/pxa', 'asoc/fix/spear', 'asoc/fix/sti' and 'asoc/fix/wm0010' into 
asoc-linus

  commit 312e0bce7f2d7fcf57f38f6e229a82eb4e0c2af4
  Merge: fcffa0d ab1fffe d76f419 6bd3c6f 5b64c17 f1ec5ec f0e03db
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:03 2015 -0700

      Merge remote-tracking branches 'asoc/fix/davinci', 'asoc/fix/doc', 
'asoc/fix/fsl-card', 'asoc/fix/fsl-ssi', 'asoc/fix/intel' and 
'asoc/fix/maintainers' into asoc-linus

  commit fcffa0dbb6c9144d07011531860da2f1e8a8b7cd
  Merge: 5ee84ba fce97b4
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:02 2015 -0700

      Merge remote-tracking branch 'asoc/fix/rt5645' into asoc-linus

  commit 5ee84ba8c7f5a5dd1934459acfec6108b5285940
  Merge: 1f93e4a 75881df
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 23 11:01:00 2015 -0700

      Merge remote-tracking branch 'asoc/fix/dapm' into asoc-linus

  commit fce97b4d70ad632dd9c6058622492501377bbaaa
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Wed Sep 23 14:35:30 2015 +0800

      ASoC: rt5645: Prevent the pop sound in case of playback and the jack is 
plugging

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 4f4794124e0421b080a0f1f5f1207636ba55eb85
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Wed Sep 23 14:35:29 2015 +0800

      ASoC: rt5645: Increase the delay time to remove the pop sound

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 21cb13e72b02dbbb5a02477d4dd46bc2bc1cfd08
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Wed Sep 23 14:35:28 2015 +0800

      ASoC: rt5645: Use the type SOC_DAPM_SINGLE_AUTODISABLE to prevent the 
weird sound in runtime of power up

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 50b956f3d85cdea130866f33613416431d60f396
  Author: Andy Gross <agross@xxxxxxxxxxxxxx>
  Date:   Fri Sep 11 16:01:16 2015 -0500

      firmware: qcom: scm: Add function stubs for ARM64

      This patch adds stubs for the SCM functions exposed in the QCOM SCM API.

      Signed-off-by: Andy Gross <agross@xxxxxxxxxxxxxx>
      Acked-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>

  commit adbe734b2ae5517b8659997909677687b963d73c
  Merge: bcee19f f929d42
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Wed Sep 23 10:59:44 2015 -0600

      Merge branch 'stable/for-jens-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen into for-linus

      Konrad writes:

      It has one fix that should go in and also be put in stable tree (I've
      added the CC already).

      It is a fix for a memory leak that can exposed via using UEFI
      xen-blkfront driver.

  commit f929d42ceb18a8acfd47e0e7b7d90b5d49bd9258
  Author: Roger Pau Monne <roger.pau@xxxxxxxxxx>
  Date:   Fri Sep 4 12:08:07 2015 +0200

      xen/blkback: free requests on disconnection

      This is due to  commit 86839c56dee28c315a4c19b7bfee450ccd84cd25
      "xen/block: add multi-page ring support"

      When using an guest under UEFI - after the domain is destroyed
      the following warning comes from blkback.

      ------------[ cut here ]------------
      WARNING: CPU: 2 PID: 95 at
      /home/julien/works/linux/drivers/block/xen-blkback/xenbus.c:274
      xen_blkif_deferred_free+0x1f4/0x1f8()
      Modules linked in:
      CPU: 2 PID: 95 Comm: kworker/2:1 Tainted: G        W       4.2.0 #85
      Hardware name: APM X-Gene Mustang board (DT)
      Workqueue: events xen_blkif_deferred_free
      Call trace:
      [<ffff8000000890a8>] dump_backtrace+0x0/0x124
      [<ffff8000000891dc>] show_stack+0x10/0x1c
      [<ffff8000007653bc>] dump_stack+0x78/0x98
      [<ffff800000097e88>] warn_slowpath_common+0x9c/0xd4
      [<ffff800000097f80>] warn_slowpath_null+0x14/0x20
      [<ffff800000557a0c>] xen_blkif_deferred_free+0x1f0/0x1f8
      [<ffff8000000ad020>] process_one_work+0x160/0x3b4
      [<ffff8000000ad3b4>] worker_thread+0x140/0x494
      [<ffff8000000b2e34>] kthread+0xd8/0xf0
      ---[ end trace 6f859b7883c88cdd ]---

      Request allocation has been moved to connect_ring, which is called every
      time blkback connects to the frontend (this can happen multiple times 
during
      a blkback instance life cycle). On the other hand, request freeing has not
      been moved, so it's only called when destroying the backend instance. Due 
to
      this mismatch, blkback can allocate the request pool multiple times, 
without
      freeing it.

      In order to fix it, move the freeing of requests to xen_blkif_disconnect 
to
      restore the symmetry between request allocation and freeing.

      Reported-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Signed-off-by: Roger Pau Monné <roger.pau@xxxxxxxxxx>
      Tested-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: David Vrabel <david.vrabel@xxxxxxxxxx>
      Cc: xen-devel@xxxxxxxxxxxxxxxxxxxx
      CC: stable@xxxxxxxxxxxxxxx # 4.2
      Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>

  commit 58a9c251c9a1a2f2154e40a9fe7bb81857761b24
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Wed Sep 16 15:53:29 2015 -0500

      EDAC, ghes_edac: Remove redundant memory_type array

      We already have edac_mem_types[] that enumerates the different kinds of
      memory. So, use that and remove the redundant memory_type[] array here.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442436811-23382-2-git-send-email-Aravind.Gopalakrishnan@xxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit cd67d226ebd909d239d2c6e5a6abd6e2a338d1cd
  Author: Jani Nikula <jani.nikula@xxxxxxxxx>
  Date:   Thu Sep 17 16:42:07 2015 +0300

      drm/i915/bios: handle MIPI Sequence Block v3+ gracefully

      The VBT MIPI Sequence Block version 3 has forward incompatible changes:

      First, the block size in the header has been specified reserved, and the
      actual size is a separate 32-bit value within the block. The current
      find_section() function to will only look at the size in the block
      header, and, depending on what's in that now reserved size field,
      continue looking for other sections in the wrong place.

      Fix this by taking the new block size field into account. This will
      ensure that the lookups for other sections will work properly, as long
      as the new 32-bit size does not go beyond the opregion VBT mailbox size.

      Second, the contents of the block have been completely
      changed. Gracefully refuse parsing the yet unknown data version.

      Cc: Deepak M <m.deepak@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Deepak M <m.deepak@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 500d701f336b2771d34e46da7875a4782515a652
  Author: Peng Tao <tao.peng@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 11:35:22 2015 +0800

      NFS41: make close wait for layoutreturn

      If we send a layoutreturn asynchronously before close, the close
      might reach server first and layoutreturn would fail with BADSTATEID
      because there is nothing keeping the layout stateid alive.

      Also do not pretend sending layoutreturn if we are not.

      Signed-off-by: Peng Tao <tao.peng@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit d6eb71a6d2eda21c8cd7a4dcd6207a0d94eb6ae7
  Author: Vaibhav Jain <vaibhav@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 23 08:37:59 2015 +0530

      cxl: Fix lockdep warning while creating afu_err_buff attribute

      Presently a lockdep warning is reported during creation of afu_err_buff
      bin_attribute for the afu. This is caused due to the variable attr.key
      not pointing to a static class key, hence the function lockdep_init_map
      reports this warning:

       BUG: key <some-address> not in .data!

      The patch fixes this issue by calling sysfs_attr_init on the
      attr_eb.attr structure before populating it with the afu_err_buff file
      details. This will populate the attr.key variable with a static class
      key so that lockdep_init_map stops complaining about the lockdep key not
      being static.

      Reported-by: Daniel Axtens <dja@xxxxxxxxxx>
      Signed-off-by: Vaibhav Jain <vaibhav@xxxxxxxxxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Reviewed-by: Daniel Axtens <dja@xxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 721a09f7393de6c28a07516dccd654c6e995944a
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 14:28:54 2015 +0200

      drm/i915: Add primary plane to mask if it's visible

      This fixes the warnings like

      "plane A assertion failure, should be disabled but not"

      that on the initial modeset during boot. This can happen if
      the primary plane is enabled by the firmware, but inheriting
      it fails because the DMAR is active or for other reasons.

      Most likely caused by

      commit 36750f284b3a4f19b304fda1bb7d6e9e1275ea8d
      Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Date:   Mon Jun 1 12:49:54 2015 +0200

          drm/i915: update plane state during init

      Reported-by: Andreas Reis <andreas.reis@xxxxxxxxx>
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=91429
      Reported-and-tested-by: Emil Renner Berthing <kernel@xxxxxxxx>
      Tested-by: Andreas Reis <andreas.reis@xxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 09bd1b4f814870ffa3496aca9e41938ec3ed2884
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 13:13:46 2015 +0200

      EDAC, xgene: Convert to debugfs wrappers

      Drop CONFIG_EDAC_DEBUG ifdeffery too, while at it.

      Tested-by: Loc Ho <lho@xxxxxxx>
      Cc: linux-edac@xxxxxxxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 834c952a1177721f2c0e779e3ca856b79ce27310
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Apr 22 11:47:43 2015 +0200

      arcnet: capmode: remove extra function

      This patch cleans the capmode protocol module. It removes the obsolete
      function arcnet_cap_init and replaces printk with pr_info.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit abc23ec927f217f1cc698e36d300ef80e935e805
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Apr 22 11:11:58 2015 +0200

      arcnet: arc-rawmode: reorder module functions

      This patch moves the module_init and module_exit patches to
      the end of the file. It also replaces the printk with pr_info.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit c6e1e7b5b7f031910850ddaf7bfa65ba3b4843ea
  Author: Juergen Gross <jgross@xxxxxxxx>
  Date:   Tue Sep 22 12:48:59 2015 +0200

      sched/core: Make 'sched_domain_topology' declaration static

      The 'sched_domain_topology' variable is only used within 
kernel/sched/core.c.
      Make it static.

      Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442918939-9907-1-git-send-email-jgross@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a7adb91b13c104e5ad950fbe1795aa2722f2ea0a
  Author: Kristen Carlson Accardi <kristen@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 10:51:36 2015 -0700

      x86/cpufeatures: Correct spelling of the HWP_NOTIFY flag

      Because noitification just isn't right.

      Signed-off-by: Kristen Carlson Accardi <kristen@xxxxxxxxxxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442944296-11737-1-git-send-email-kristen@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e3e72ab80a3fac0b88e07d358a2c75724ccd66b4
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 13:22:52 2015 +0200

      atomic: Implement atomic_read_ctrl()

      Provide atomic_read_ctrl() to mirror READ_ONCE_CTRL(), such that we can
      more conveniently use atomics in control dependencies.

      Since we can assume atomic_read() implies a READ_ONCE(), we must only
      emit an extra smp_read_barrier_depends() in order to upgrade to
      READ_ONCE_CTRL() semantics.

      Requested-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: oleg@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/20150918115637.GM3604@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 62e8a3258bda118f24ff462fe04cfbe75b8189b5
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 11:13:10 2015 +0200

      atomic, arch: Audit atomic_{read,set}()

      This patch makes sure that atomic_{read,set}() are at least
      {READ,WRITE}_ONCE().

      We already had the 'requirement' that atomic_read() should use
      ACCESS_ONCE(), and most archs had this, but a few were lacking.
      All are now converted to use READ_ONCE().

      And, by a symmetry and general paranoia argument, upgrade atomic_set()
      to use WRITE_ONCE().

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: james.hogan@xxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: oleg@xxxxxxxxxx
      Cc: will.deacon@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 90fe65148ea76988d8d5acbf3e578aa74129a490
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 15:04:59 2015 +0200

      atomic: Add atomic_long_t bitops

      When adding the atomic bitops, I seem to have forgotten about
      atomic_long_t, fix this.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4bbffe718fe1bfae6176a6fb783c1576b69338e5
  Merge: ac742d3 21199f2
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 23 09:52:03 2015 +0200

      Merge branch 'locking/urgent' into locking/core, to pick up fixes before 
applying new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 269b26a5ef2b10bf15f66524fa47d81c1b4dc1a1
  Author: Juri Lelli <juri.lelli@xxxxxxx>
  Date:   Wed Sep 2 11:01:36 2015 +0100

      sched/rt: Make (do_)balance_runtime() return void

      The return value of (do_)balance_runtime() is not consumed by anybody.
      Make them return void.

      Signed-off-by: Juri Lelli <juri.lelli@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441188096-23021-5-git-send-email-juri.lelli@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f52405757e4e9bddd868d6b8ca501d58f292969f
  Author: Juri Lelli <juri.lelli@xxxxxxx>
  Date:   Wed Sep 2 11:01:35 2015 +0100

      sched/deadline, locking/rtmutex: Fix open coded check in 
rt_mutex_waiter_less()

      rt_mutex_waiter_less() check of task deadlines is open coded. Since this
      is subject to wraparound bugs, make it use the correct helper.

      Reported-by: Luca Abeni <luca.abeni@xxxxxxxx>
      Signed-off-by: Juri Lelli <juri.lelli@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441188096-23021-4-git-send-email-juri.lelli@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2726d6ce389788c7fe724961a6e1bfe569560088
  Author: Juri Lelli <juri.lelli@xxxxxxx>
  Date:   Wed Sep 2 11:01:34 2015 +0100

      sched/deadline: Unify dl_time_before() usage

      Move dl_time_before() static definition in include/linux/sched/deadline.h
      so that it can be used by different parties without being re-defined.

      Reported-by: Luca Abeni <luca.abeni@xxxxxxxx>
      Signed-off-by: Juri Lelli <juri.lelli@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441188096-23021-3-git-send-email-juri.lelli@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 21199f27b430576552b26210b3194a363d7f05cd
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 16:10:40 2015 +0200

      locking/lockdep: Fix hlock->pin_count reset on lock stack rebuilds

      Various people reported hitting the "unpinning an unpinned lock"
      warning. As it turns out there are 2 places where we take a lock out
      of the middle of a stack, and in those cases it would fail to preserve
      the pin_count when rebuilding the lock stack.

      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Reported-by: Tim Spriggs <tspriggs@xxxxxxxxx>
      Tested-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: davej@xxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/20150916141040.GA11639@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 968d712a2565121b269e1037a1517916a9769423
  Merge: b572727 e803cf9
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 23 09:42:58 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Fix a segfault in 'perf probe' when removing uprobe events. (Masami 
Hiramatsu)

        - Synthesize COMM event for workloads started from the command line in 
'perf
          record' so that we can have the pid->comm mapping before we get the 
real
          PERF_RECORD_COMM switching from perf to the workload. (Namhyung Kim)

        - Fix build tools/vm/ due to removal of tools/lib/api/fs/debugfs.h.
          (Arnaldo Carvalho de Melo)

      Infrastructure changes:

        - Fix the make tarball targets by including the recently added err.h 
header in
          the perf MANIFEST file. (Jiri Olsa)

        - Don't assume that the event parser returns a non empty evlist. (Wang 
Nan)

        - Add way to disambiguate feature detection state files, needed to use
          tools/build feature detection for multiple components in a single O= 
output
          dir, which will be the case with tools/perf/ and tools/lib/bpf/.
          (Arnaldo Carvalho de Melo)

        - Fixup FEATURE_{TESTS,DISPLAY} inversion in tools/lib/bpf/. (Arnaldo 
Carvalho de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b5727270ecd807f75a8d5d1450cec39495fc794a
  Merge: 96f3eda d0d0313
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 23 09:42:11 2015 +0200

      Merge branch 'perf/urgent' into perf/core to pick up fixes before pulling 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d0d0313c2ae4bc220c4ed96ce340860a4e74a2e9
  Merge: f73e22a c2e4b24
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 23 09:41:09 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

        - Fix libtraceevent string handling in heterogeneous arch environments. 
(Kapileshwar Singh)

        - Avoid infinite loop at buildid processing with no samples in 'perf 
record'. (Mark Rutland)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 22be9cd9f22a4b2acc5fe6666ca23206ebe4d495
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Sep 22 14:21:16 2015 +0200

      s390/numa: use correct type for node_to_cpumask_map

      With CONFIG_CPUMASK_OFFSTACK=y cpumask_var_t is a pointer to a CPU mask.
      Replace the incorrect type for node_to_cpumask_map with cpumask_t.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 41b578fb0e8b930f2470d3f673b0fa279e77a7b8
  Author: Jesse Barnes <jbarnes@xxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 12:15:54 2015 -0700

      drm/i915: workaround bad DSL readout v3

      On HSW at least (still testing other platforms, but should be harmless
      elsewhere), the DSL reg reads back as 0 when read around vblank start
      time.  This ends up confusing the atomic start/end checking code, since
      it causes the update to appear as if it crossed a frame count boundary.
      Avoid the problem by making sure we don't return scanline_offset from
      the get_crtc_scanline function.  In moving the code there, I add to add
      an additional delay since it could be called and have a legitimate 0
      result for some time (depending on the pixel clock).

      v2: move hsw dsl read hack to get_crtc_scanline (Ville)
      v3: use break instead of goto (Ville)
          update comment with workaround details (Ville)

      References: https://bugs.freedesktop.org/show_bug.cgi?id=91579
      Signed-off-by: Jesse Barnes <jbarnes@xxxxxxxxxxxxxxxx>
      Reviewed-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 84286f191a01f198ccfc15759d01320e3847accd
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Apr 15 11:43:57 2015 +0200

      arcnet: com20020: replace magic numbers with readable macros

      This patch replaces all magic numbers in the driver with
      proper named macros. For the case of XTOcfg and STARTIOcmd
      it introduces the new macros.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 54a84c61823e2069da2c7ad91518ff7625129ce5
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Fri Mar 20 15:22:02 2015 +0100

      arcnet: reformat structs to C99 format

      This patch changes the macro definitions to match the C99
      formating. This improves the readability.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 4b0dad83c53b4a6a29be47dc3acc8623be36e7dd
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:14 2015 -0700

      arcnet: Remove unused arcnet_<I/O>w macros

      The word length macros are unused.  Remove them.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 8e0f295ea5e712ca30db08a4e3c496e914ee7fef
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:13 2015 -0700

      arcnet: Add com9026.h to standardize COM9026_REG_<foo>

      Deduplicate the COM9026 registers.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit e15b03625ce1aa5ca4ab782e034af7d5b56e1b19
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:12 2015 -0700

      arcnet: Remove function pointer macro indirections

      It's clearer to use function pointer calls directly instead of the
      macro indirections of ARCRESET, ACOMMAND, ASTATUS, and AINTMASK.

      Remove the now unused macros too.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit a11a5442d108357d44d34407ce2ed9d77ab424a0
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:11 2015 -0700

      arcnet: com90xx: Use arcnet_readb/writeb routines

      Simplify and make consistent the current uses of readb/writeb
      by using the newly introduced arcnet_<I/O> equivalents.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 4e2f9f1b1ff68e86871594f7321c851c4a147ea4
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:10 2015 -0700

      arcnet: arc-rimi: Use arcnet_<I/O> routines

      Simplify and make consistent the current uses of readb/writeb
      by using the newly introduced arcnet_<I/O> equivalents.

      o Add new #defines for register offsets
      o Remove old #defines that included the ioaddr
      o Remove obfuscating macros by expanding them in-place where appropriate

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 9c76aa55110a48c0db1eab4c998a5b94d9f0f852
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:09 2015 -0700

      arcnet: arcdevice.h: Add arcnet_readb and arcnet_writeb

      Use the same indirection as the other arcnet_<I/O> macros.
      Neither of these new macros add the BUS_ALIGN use for 8 bit devices
      on 16 bit busses.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 09dfbcd5d178f8e03b5a29c9f3411687ec388c91
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:08 2015 -0700

      arcnet: com90xx: Use arcnet_<I/O> routines

      Simplify and make consistent the current uses of inb/outb
      by using the newly introduced arcnet_<I/O> equivalents.

      o Add new #defines for register offsets
      o Remove old #defines that included the ioaddr
      o Remove obfuscating macros by expanding them in-place where appropriate

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit f0b9c27c0c933a6545ea57d4edbc56a4db435c84
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:07 2015 -0700

      arcnet: com90io: Use arcnet_<I/O> routines

      Simplify and make consistent the current uses of inb/outb
      by using the newly introduced arcnet_<I/O> equivalents.

      o Add new #defines for register offsets
      o Remove old #defines that included the ioaddr
      o Remove obfuscating macros by expanding them in-place where appropriate

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 0fec65130b9f11a73d74f47025491f97f82ba070
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:06 2015 -0700

      arcnet: com20020: Use arcnet_<I/O> routines

      Simplify and make consistent the current uses of inb/outb
      by using the newly introduced arcnet_<I/O> equivalents.

      o Add new #defines for register offsets
        There is an register offset, 8, that is unnamed and used as-is.
      o Remove old #defines that included the ioaddr
      o Remove obfuscating macros by expanding them in-place where appropriate
      o Create static inline com20020_set_subaddress for the SET_SUBADR macro

      There is an unused arcnet config entry CONFIGSA100_CT6001 which added a
      special #define BUS_ALIGN which was introduced but never used in fullhist 
git
      tree commit 22cfce4b82b0 ("[ARCNET]: Fixes.") in Nov 2004 for Linux 
v2.6.10.

      This BUS_ALIGN #define tries to allow 8 bit devices to work on a 16 bit
      bus by aligning addresses to 16 bit boundaries.

      Move this currently unused CONFIG_SA1100_CT6001 BUS_ALIGN macro from
      com20020.h to arcdevice.h.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit e5fcfc1f8d3cfaf432a93d39df3e5d7718c58848
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:05 2015 -0700

      arcnet: Add arcnet_<I/O> macros

      arcnet uses an I/O scheme which can align I/O addresses to word boundaries
      on different architectures.

      Add arcnet specific macros which can hide this alignment calculation.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 4e299b922c44d242ac855805aee94d938b06944f
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:04 2015 -0700

      arcnet: Make a char * array const char * const

      Might as well be specific about the use of this array.

      Add a commment questioning the indexing too.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 26c6d281688e8bb8154fa78c60e551d024f5d0b8
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:03 2015 -0700

      arcnet: Move files out of include/linux

      These #include files don't need to be in the include/linux directory
      as they can be local to drivers/net/arcnet/

      Move them and update the #include statements.

      Update the MAINTAINERS file pattern by deleting arcdevice from the
      NETWORKING block as arcnet is currently unmaintained.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit d6d7d3ed56e3bfe7fd34108dbe23f0610e3d8621
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:02 2015 -0700

      arcnet: Wrap some long lines

      Just neatening.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 83df99b50f901cb7c72cf132a83f43bbaeb01362
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:01 2015 -0700

      arcnet: Convert arcnet_dump_skb macro to static inline

      Make sure the arguments are tested appropriately when not using
      this function.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit d8101e7bec352b7b6a154ec2e428d01bddb7e5b4
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:06:00 2015 -0700

      arcnet: Remove pointer comparisons to NULL

      Use direct tests of pointer instead.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 97464eddf9fdbe02abfc44676949e07708cf557f
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:59 2015 -0700

      arcnet: Remove assignments from ifs

      Move the assignment above the if like general kernel style.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 5628d98fc5e99e29f2a480d4a7b1faba94a0d422
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:58 2015 -0700

      arcnet: Remove unnecessary OOM messages

      Alloc failures have generic stack dumps so these are redundant.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 811eafc02e16996674848d7d057909624fb0cc31
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:57 2015 -0700

      arcnet: Move EXPORT_SYMBOL after declarations

      Use the normal kernel style for EXPORT_SYMBOL.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 05a24b234b9dda3720208b74503f2cf1d05774ee
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:56 2015 -0700

      arcnet: Convert printk to pr_<level>

      Use the more current logging style.

      Remove #define VERSION, use pr_info normally.
      Add pr_fmt with "arcnet:" prefixes and KBUILD_MODNAME.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit a34c0932c3b2f28542825ffc5280d562c49ad42d
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:55 2015 -0700

      arcnet: Convert BUGMSG and BUGMSG2 to arc_prink and arc_cont

      These macros don't actually represent BUG uses but are more commonly
      used as logging macros, so use a more kernel style macro.

      Convert the BUGMSG from a netdev_ like use to actually use netdev_<level>.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 72aeea4841c037b9b3abf65859673cbd7b6664a9
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:54 2015 -0700

      arcnet: Expand odd BUGLVL macro with if and uses

      Don't hide what should be obvious.

      Make the macro a simple test instead of using if and test.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit d77510f3436e0db9b5e72fa8159ce26c3ac88d2d
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:53 2015 -0700

      arcnet: Neaten BUGMSG macro defines

      These macros are actually printk and pr_cont uses with a flag.

      Add a new BUGLVL_TEST macro which is just the "should use" test
      and not an odd "if (<foo>)" macro to simplify uses in a new patch.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit f2f0a16bf89a1bbf2f774e060de85ffbd8fff162
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:52 2015 -0700

      arcnet: Use network block comment style

      Conformity can be useful.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 5e7ef9134ce1b8ae8d686ce08b9746b32535964d
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:51 2015 -0700

      arcnet: Use include/linux path for asm

      Use the preferred kernel include path for asm paths.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 3b4e55510f3151cd906cd221f6fba5cb56b8cfed
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:50 2015 -0700

      arcnet: Coalesce string fragments

      Using coalesced strings helps grep for specific messages.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 7f5e760c1b269044a4ba1b269263beca80ae2741
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:49 2015 -0700

      arcnet: Use normal kernel brace style

      Move braces normal kernel locations.
      Add missing braces.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 01a1d5ac4e1a5890fd6c0d0ae900e1b6e4f851d6
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:48 2015 -0700

      arcnet: Add and remove blank lines

      Use a more current kernel line style.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit cb334648a10c7fa6f0f163c22602f4dc1c6d56b4
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Tue May 5 10:05:47 2015 -0700

      arcnet: Use normal kernel spacing style

      Standardized spacing is easier to read.

      git diff -w shows no differences.
      objdiff shows no differences.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 37587fadff8ce8f40a6952f0383c571a89b29d1d
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Thu Jul 30 13:22:43 2015 -0700

      arcnet: fix indentation of if_arcnet.h

      Standardized spacing is easier to read.

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit ef34cc3428a716f86ee72aa5a37fa6c0025e4363
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Wed Sep 23 09:38:13 2015 +0800

      x86/numachip: Fix timer build conflict

      Fix Numachip build conflict from:
      ce2e572 x86/numachip: Introduce Numachip2 timer mechanisms

      drivers/built-in.o:(.discard+0x1b): multiple definition of 
`__pcpu_unique_cpu_ced'
      arch/x86/built-in.o:(.discard+0xa0da): first defined here

      Ensure cpu_ced is unique by prefixing with 'numachip2'.

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Cc: <tipbuild@xxxxxxxxx>
      Cc: <kbuild-all@xxxxxx>
      Cc: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e803cf97a4f90d31bcc2c9a1ea20fe9cdc12b2f9
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Tue Sep 22 09:24:55 2015 +0900

      perf record: Synthesize COMM event for a command line workload

      When perf creates a new child to profile, the events are enabled on
      exec().  And in this case, it doesn't synthesize any event for the
      child since they'll be generated during exec().  But there's an window
      between the enabling and the event generation.

      It used to be overcome since samples are only in kernel (so we always
      have the map) and the comm is overridden by a later COMM event.
      However it won't work if events are processed and displayed before the
      COMM event overrides like in 'perf script'.  This leads to those early
      samples (like native_write_msr_safe) not having a comm but pid (like
      ':15328').

      So it needs to synthesize COMM event for the child explicitly before
      enabling so that it can have a correct comm.  But at this time, the
      comm will be "perf" since it's not exec-ed yet.

      Committer note:

      Before this patch:

        # perf record usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.017 MB perf.data (7 samples) ]
        # perf script --show-task-events
          :4429  4429 27909.079372:          1 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
          :4429  4429 27909.079375:          1 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
          :4429  4429 27909.079376:         10 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
          :4429  4429 27909.079377:        223 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
          :4429  4429 27909.079378:       6571 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
         usleep  4429 27909.079380: PERF_RECORD_COMM exec: usleep:4429/4429
         usleep  4429 27909.079381:     185403 cycles:  ffffffff810a72d3 
flush_signal_handlers (/lib/modules/4.
         usleep  4429 27909.079444:    2241110 cycles:      7fc575355be3 
_dl_start (/usr/lib64/ld-2.20.so)
         usleep  4429 27909.079875: PERF_RECORD_EXIT(4429:4429):(4429:4429)

      After:

        # perf record usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.017 MB perf.data (7 samples) ]
        # perf script --show-task
           perf     0     0.000000: PERF_RECORD_COMM: perf:8446/8446
           perf  8446 30154.038944:          1 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
           perf  8446 30154.038948:          1 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
           perf  8446 30154.038949:          9 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
           perf  8446 30154.038950:        230 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
           perf  8446 30154.038951:       6772 cycles:  ffffffff8105f45a 
native_write_msr_safe (/lib/modules/4.
         usleep  8446 30154.038952: PERF_RECORD_COMM exec: usleep:8446/8446
         usleep  8446 30154.038954:     196923 cycles:  ffffffff81766440 
_raw_spin_lock (/lib/modules/4.3.0-rc1
         usleep  8446 30154.039021:    2292130 cycles:      7f609a173dc4 memcpy 
(/usr/lib64/ld-2.20.so)
         usleep  8446 30154.039349: PERF_RECORD_EXIT(8446:8446):(8446:8446)
        #

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442881495-2928-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f6489bc2d402c0db84aa64f13b864d17f7eecb07
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 22 13:13:04 2015 -0300

      tools vm: Fix build due to removal of tools/lib/api/fs/debugfs.h

      There were some changes in how this debugfs mounting helper is
      implemented/exported and we forgot to check if there were other users
      besides perf, fix it.

      Need to do a make -C tools/ everytime we do changes to
      tools/{lib,include} and other places where we're moving things from
      tools/perf/ to be used by other tools/ living code.

      Fixed:

        $ make -C tools/vm
        make: Entering directory '/home/git/linux/tools/vm'
        make -C ../lib/api
        make[1]: Entering directory '/home/git/linux/tools/lib/api'
          CC       fd/array.o
          LD       fd/libapi-in.o
          CC       fs/fs.o
          CC       fs/tracing_path.o
          LD       fs/libapi-in.o
          CC       cpu.o
          LD       libapi-in.o
          AR       libapi.a
        make[1]: Leaving directory '/home/git/linux/tools/lib/api'
        gcc -Wall -Wextra -I../lib/ -o page-types page-types.c 
../lib/api/libapi.a
        make: Leaving directory '/home/git/linux/tools/vm'
        $

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Tested-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Fixes: 60a1133a5b39 ("tools lib api fs: Remove debugfs, tracefs and 
findfs objects")
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fbd03513bf36c4e5c2942f436f05c8eb99a3cc9e
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Sep 22 11:28:14 2015 +0200

      net: dsa: Fix Marvell Egress Trailer check

      The Marvell Egress rx trailer check must be fixed to
      correctly detect bad bits in the third byte of the
      Eggress trailer as described in the Table 28 of the
      88E6060 datasheet.
      The current code incorrectly omits to check the third
      byte and checks the fourth byte twice.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Acked-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7def0f952eccdd0edb3c504f4dab35ee0d3aba1f
  Author: Dmitriy Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Tue Sep 22 10:51:52 2015 +0200

      lib: fix data race in rhashtable_rehash_one

      rhashtable_rehash_one() uses complex logic to update entry->next field,
      after INIT_RHT_NULLS_HEAD and NULLS_MARKER expansion:

      entry->next = 1 | ((base + off) << 1)

      This can be compiled along the lines of:

      entry->next = base + off
      entry->next <<= 1
      entry->next |= 1

      Which will break concurrent readers.

      NULLS value recomputation is not needed here, so just remove
      the complex logic.

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 23eedbc2435ddd226717603c4f3c8efec7bdbb4d
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Tue Sep 22 09:29:49 2015 +0200

      ch9200: Convert to use module_usb_driver

      Converts the ch9200 driver to use the module_usb_driver() macro which
      makes the code smaller and a bit simpler.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Acked-by: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ae5f2fb1d51fa128a460bcfbe3c56d7ab8bf6a43
  Author: Jesse Gross <jesse@xxxxxxxxxx>
  Date:   Mon Sep 21 20:21:20 2015 -0700

      openvswitch: Zero flows on allocation.

      When support for megaflows was introduced, OVS needed to start
      installing flows with a mask applied to them. Since masking is an
      expensive operation, OVS also had an optimization that would only
      take the parts of the flow keys that were covered by a non-zero
      mask. The values stored in the remaining pieces should not matter
      because they are masked out.

      While this works fine for the purposes of matching (which must always
      look at the mask), serialization to netlink can be problematic. Since
      the flow and the mask are serialized separately, the uninitialized
      portions of the flow can be encoded with whatever values happen to be
      present.

      In terms of functionality, this has little effect since these fields
      will be masked out by definition. However, it leaks kernel memory to
      userspace, which is a potential security vulnerability. It is also
      possible that other code paths could look at the masked key and get
      uninitialized data, although this does not currently appear to be an
      issue in practice.

      This removes the mask optimization for flows that are being installed.
      This was always intended to be the case as the mask optimizations were
      really targetting per-packet flow operations.

      Fixes: 03f0d916 ("openvswitch: Mega flow implementation")
      Signed-off-by: Jesse Gross <jesse@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 53adc9e83028d9e35b6408231ebaf62a94a16e4d
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 21:42:59 2015 +0100

      net: dsa: actually force the speed on the CPU port

      Commit 54d792f257c6 ("net: dsa: Centralise global and port setup
      code into mv88e6xxx.") merged in the 4.2 merge window broke the link
      speed forcing for the CPU port of Marvell DSA switches.  The original
      code was:

              /* MAC Forcing register: don't force link, speed, duplex
               * or flow control state to any particular values on physical
               * ports, but force the CPU port and all DSA ports to 1000 Mb/s
               * full duplex.
               */
              if (dsa_is_cpu_port(ds, p) || ds->dsa_port_mask & (1 << p))
                      REG_WRITE(addr, 0x01, 0x003e);
              else
                      REG_WRITE(addr, 0x01, 0x0003);

      but the new code does a read-modify-write:

                      reg = _mv88e6xxx_reg_read(ds, REG_PORT(port), 
PORT_PCS_CTRL);
                      if (dsa_is_cpu_port(ds, port) ||
                          ds->dsa_port_mask & (1 << port)) {
                              reg |= PORT_PCS_CTRL_FORCE_LINK |
                                      PORT_PCS_CTRL_LINK_UP |
                                      PORT_PCS_CTRL_DUPLEX_FULL |
                                      PORT_PCS_CTRL_FORCE_DUPLEX;
                              if (mv88e6xxx_6065_family(ds))
                                      reg |= PORT_PCS_CTRL_100;
                              else
                                      reg |= PORT_PCS_CTRL_1000;

      The link speed in the PCS control register is a two bit field.  Forcing
      the link speed in this way doesn't ensure that the bit field is set to
      the correct value - on the hardware I have here, the speed bitfield
      remains set to 0x03, resulting in the speed not being forced to gigabit.

      We must clear both bits before forcing the link speed.

      Fixes: 54d792f257c6 ("net: dsa: Centralise global and port setup code 
into mv88e6xxx.")
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 08399efc631960c827cebcfe83ad7ed54ebc012b
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 10:29:09 2015 -0400

      geneve: ensure ECN info is handled properly in all tx/rx paths

      Partially due to a pre-exising "thinko", the new metadata-based tx/rx
      paths were handling ECN propagation differently than the traditional
      tx/rx paths.  This patch removes the "thinko" (involving multiple
      ip_hdr assignments) on the rx path and corrects the ECN handling on
      both the rx and tx paths.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 227b9e8708b14a8a26ef67bbbe19b13626df4a35
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:59 2015 +0200

      usbnet: remove invalid check

      skb->len is always non-negative.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7e724da64491b20257d46f100bcc6d6214c37b70
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:55 2015 +0200

      rndis_wlan: fix checking for default value

      Thresholds uses -1 to indicate that default value should be used.
      Since thresholds are unsigned sign checking makes no sense.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e79dd09b605f42d85d1a5605ad0fe96b970695e9
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:54 2015 +0200

      orinoco: fix checking for default value

      Thresholds uses -1 to indicate that default value should be used.
      Since thresholds are unsigned sign checking makes no sense.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc7514985919238ef7ce94e80f0d0ad87193de47
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:53 2015 +0200

      mwifiex: fix comparison expression

      To avoid underflows signed variables should be used in expression.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Acked-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 94926121692381247090b35ec68aed124260f05e
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:52 2015 +0200

      net: brcm80211: fix range check

      Unsigned minus constant is still unsigned so checking its sign makes no
      sense.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 23c2412d6296b4719c2c60054af00062174dd464
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:51 2015 +0200

      net: stmmac: fix type of entry variable

      Variable can store negative values.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7d2fa71048b85c29a3265a6ed3fae3a568aae49e
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:50 2015 +0200

      net/ibm/emac: fix type of phy_mode

      phy_mode can be negative.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f89642fa10bb6ec02feaa8e3d1d62df671d0207
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:49 2015 +0200

      isdn: hisax: fix frame calculation

      Difference of unsigned values is also unsigned so it does not make
      sense to check its sign.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 25b1029789f98f945a03a2d04662a94b357aacb9
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:12 2015 -0700

      ixgbe: Enable bit-banging mode on X550

      Set the bit banging mode in the hardware when performing bit banging
      I2C operations on X550. Also control the output enable on both the
      clock and data lines.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit da4ea4baf77c9e45c53671e465043ffaf26fd45d
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:07 2015 -0700

      ixgbe: Set lan_id before first I2C eeprom access

      The lan_id is being set after a previous I2C eeprom access which
      makes no sense because it needs to be set before any access. Move
      the setting to before the access.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bb5ce9a5cb6e915a2b284a8785686716823679d1
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:18:02 2015 -0700

      ixgbe: Provide unlocked I2C methods

      Most I2C accesses take and release semaphores for each access. Now
      there is a reason to perform multiple I2C operations under the same
      holding of the semaphore, so provide unlocked I2C methods for that
      purpose.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4f9e3a3de0e2fbc49c036322cb2ee656ea8b93fc
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:17:57 2015 -0700

      ixgbe: Provide I2C combined on X550EM

      Provide I2C combined operations on X550EM, not X550 devices.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit cbd45ec7aae9a20835d1a64c7a1910eb5dcec57b
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:17:51 2015 -0700

      ixgbe: Add X550EM support for SFP insertion interrupt

      Add support for the SFP insertion interrupt on X550EM devices with
      SFPs.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 29a8dca1997f880563e53e9ba0fcb50b03bd23af
  Author: Mark Rustad <mark.d.rustad@xxxxxxxxx>
  Date:   Sat Aug 8 16:17:46 2015 -0700

      ixgbe: Accept SFP not present errors on all devices

      When an SFP not present error is returned by the reset_hw method,
      accept it and go on, since an SFP can still be inserted. Previously
      it was only accepted for 82598 devices.

      Signed-off-by: Mark Rustad <mark.d.rustad@xxxxxxxxx>
      Tested-by: Phil Schmitt <phillip.j.schmitt@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0f90300f4fd30968a4d40fe47a9043be9912cb31
  Author: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
  Date:   Thu Aug 6 17:57:31 2015 +0900

      ixgbevf: Enables TSO for stacked VLAN

      Setting ndo_features_check to passthru_features_check allows the driver
      to skip the check for multiple tagged TSO packets and enables stacked
      VLAN TSO.
      Tested with 82599ES.

      Signed-off-by: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f2701b185e05d0897a47f6a14da40a068b0644ff
  Author: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
  Date:   Thu Aug 6 17:57:29 2015 +0900

      e1000e: Enable TSO for stacked VLAN

      Setting ndo_features_check to passthru_features_check allows the driver
      to skip the check for multiple tagged TSO packets and enables stacked
      VLAN TSO.
      Tested with I217-LM.

      Signed-off-by: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
      Tested-by: Aaron Brown <aaron.f.brown@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 213246d3fade6772e07138597bca0bdf9fbe754d
  Author: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
  Date:   Thu Aug 6 17:57:28 2015 +0900

      igbvf: Enable TSO for stacked VLAN

      Setting ndo_features_check to passthru_features_check allows the driver
      to skip the check for multiple tagged TSO packets and enables stacked
      VLAN TSO.
      Tested with I350.

      Signed-off-by: Toshiaki Makita <makita.toshiaki@xxxxxxxxxxxxx>
      Tested-by: Aaron Brown <aaron.f.brown@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 307723255a05242ab252dd7047d4970ab60c7dfd
  Author: Francois Romieu <romieu@xxxxxxxxxxxxx>
  Date:   Thu Aug 6 00:52:37 2015 +0200

      e1000: remove dead e1000_init_eeprom_params calls

      The device probe method e1000_probe calls e1000_init_eeprom_params
      itself so there's no reason to call it again from e1000_do_write_eeprom
      or e1000_do_read_eeprom.

      The sentence above assumes that e1000_init_eeprom_params is effective.
      e1000_init_eeprom_params depends mostly on hw->mac_type and e1000_probe
      bails out early if it can't set mac_type (see e1000_init_hw_struct, then
      e1000_set_mac_type), qed.

      Btw, if effective, the removed paths would had been deadlock prone when
      e1000_eeprom_spi was set:
      -> e1000_write_eeprom (takes e1000_eeprom_lock)
         -> e1000_do_write_eeprom
            -> e1000_init_eeprom_params
               -> e1000_read_eeprom (takes e1000_eeprom_lock)

      (same narrative with e1000_read_eeprom -> e1000_do_read_eeprom etc.)

      As a final note, the candidate deadlock above can't happen in e1000_probe
      due to the way eeprom->word_size is set / tested.

      Signed-off-by: Francois Romieu <romieu@xxxxxxxxxxxxx>
      Tested-by: Aaron Brown <aaron.f.brown@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 80043f3bf5bdb187566620a8f183c15b94e961cb
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jul 1 17:38:36 2015 -0700

      fm10k: add support for extra debug statistics

      Add a private ethtool flag to enable display of these statistics, which
      are generally less useful. However, sometimes it can be useful for
      debugging purposes. The most useful portion is the ability to see what
      the PF thinks the VF mailboxes look like.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 15aa49cb99c128e1484b6373382e264588067cab
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Fri Jun 26 08:54:07 2015 -0700

      fm10k: TRIVIAL remove unnecessary comma

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit afadfd224f53106e4fd52f3b6885a93431a5a6f5
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Fri Jun 26 08:54:06 2015 -0700

      fm10k: create "correct" header for the remote end on connect

      When we connect to the mailbox, we insert a fake disconnect header so
      that the code does not see an invalid header and thus instantly error
      every time we bring up the mailbox. However, we incorrectly record the
      tail and head from the local perspective. Since the remote end shouldn't
      have anything for us, add a "create_fake_disconnect_hdr" function which
      inverts the TAIL and HEAD fields. This enables us to connect without any
      errors of either TAIL or HEAD incorrectness, and prevents creating
      extraneous error messages. This is necessary now since mbx_reset_work
      does not actually reset the Tx FIFO head and tail pointers, thus head
      and tail might not be equivalent on a reconnect.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4b09728e9d34170c375f41d9b454f067ce39591f
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Thu Jun 25 14:43:43 2015 -0700

      fm10k: drop transmitted messages in Tx FIFO as part of reset_work

      This patch fixes a corner case issue with the PF/VF mailbox code.
      Currently, fm10k_mbx_reset_work clears various state about the mailbox.
      However, it does not clear the Tx FIFO head/tail pointers. We can't
      simply clear these pointers as we unintentionally drop untransmitted
      messages without error.

      Doing nothing results in a possible phantom re-transmission of messages,
      since we leave tx.head and tx.tail intact, but clear the tx_pulled and
      tail_len values. This means that the PF could continuously re-send a
      message which triggers a reset in the VF. Upon reset, the VF will
      re-receive the same message after a reconnect.

      If we reset the tx.head and tx.tail pointers completely, we end up
      dropping some messages that were pending before connect. This results in
      missing LPORT_MSG_READY bits, and VFs will end up reporting no link.

      However, we can resolve both issues by simply incrementing head to
      account for the already transmitted messages, before we reset tx_pulled.
      We do this via the same logic as fm10k_mbx_head_pull.

      We account for the tail_len which includes all data not yet transmitted,
      once we account for the acked data which means re-reading the HEAD
      variable from the message header. Then, we drop messages until we've
      dropped more than the new tx_pulled value. At this point, resetting
      tail_len and tx_pulled, but not tx.head and tx.tail will result in
      prevention of the phantom message. It also prevents us from dropping
      untransmitted messages upon attempting to Tx into a connect or
      disconnect header.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5532408b48834bd762ed53c22aabed5dae0748d6
  Author: Don Skidmore <donald.c.skidmore@xxxxxxxxx>
  Date:   Wed Jun 24 17:03:30 2015 -0400

      ixgbe: Add fdir support for SCTP on X550

      X550 has HW support for SCTP flow director filters SCTP mask. This
      patch adds it like we do for UDP and TCP.

      Signed-off-by: Donald C Skidmore <donald.c.skidmore@xxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a023bbd0b1a3716397d8d54ba5b95e09b8e27699
  Author: Don Skidmore <donald.c.skidmore@xxxxxxxxx>
  Date:   Wed Jun 24 16:38:53 2015 -0400

      ixgbe: Add SFP+ detection for X550 hardware

      This patch is part of the future enablement of X550 SFP+ support.  This
      HW uses different SDP so the interrupts need to be set up accordingly.

      Signed-off-by: Donald C Skidmore <donald.c.skidmore@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8427672abdc9e405f86755fad5a035511a5b1534
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:52 2015 -0700

      fm10k: remove comment about rtnl_lock around mbx operations

      This comment is no longer true due to a couple of mailbox locking
      refactors, and we now don't actually do any rtnl protected operations
      directly in the mailbox path. Remove this comment as it is factually
      incorrect and confusing.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 012572d4fc2e4ddd5c8ec8614d51414ec6cae02a
  Author: Joseph Qi <joseph.qi@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:20 2015 -0700

      ocfs2/dlm: fix deadlock when dispatch assert master

      The order of the following three spinlocks should be:
      dlm_domain_lock < dlm_ctxt->spinlock < dlm_lock_resource->spinlock

      But dlm_dispatch_assert_master() is called while holding
      dlm_ctxt->spinlock and dlm_lock_resource->spinlock, and then it calls
      dlm_grab() which will take dlm_domain_lock.

      Once another thread (for example, dlm_query_join_handler) has already
      taken dlm_domain_lock, and tries to take dlm_ctxt->spinlock deadlock
      happens.

      Signed-off-by: Joseph Qi <joseph.qi@xxxxxxxxxx>
      Cc: Joel Becker <jlbec@xxxxxxxxxxxx>
      Cc: Mark Fasheh <mfasheh@xxxxxxxx>
      Cc: "Junxiao Bi" <junxiao.bi@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 7a07b503bf249986a1eeef0351d66cac0d8bf721
  Author: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
  Date:   Tue Sep 22 14:59:20 2015 -0700

      membarrier: clean up selftest

      We don't need to specify an explicit rule in the Makefile, the implicit
      one will do the same.  The "__EXPORTED_HEADERS__" define is not needed,
      because we build the test against the installed kernel headers, not the
      in-tree kernel headers.  Re-use "$(TEST_PROGS)" in the clean target
      rather than spelling the executable name twice.  Include <unistd.h>
      rather than the rather specific <asm-generic/unistd.h>.  Include
      <syscall.h> rather than <sys/syscall.h>.  In both cases, the former
      header is located in a standard location and includes the latter.

      Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Pranith Kumar <bobby.prani@xxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d5028f9f7d8de5c375c52b98976b6f310e73398f
  Author: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 14:59:20 2015 -0700

      vmscan: fix sane_reclaim helper for legacy memcg

      The sane_reclaim() helper is supposed to return false for memcg reclaim
      if the legacy hierarchy is used, because the latter lacks dirty
      throttling mechanism, and so it did before it was accidentally broken by
      commit 33398cf2f360c ("memcg: export struct mem_cgroup").  Fix it.

      Fixes: 33398cf2f360c ("memcg: export struct mem_cgroup")
      Signed-off-by: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
      Acked-by: Tejun Heo <tj@xxxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Cc: Johannes Weiner <hannes@xxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d046b770c9fc36ccb19c27afdb8322220108cbc7
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:20 2015 -0700

      lib/iommu-common.c: do not try to deref a null iommu->lazy_flush() 
pointer when n < pool->hint

      The check for invoking iommu->lazy_flush() from iommu_tbl_range_alloc()
      has to be refactored so that we only call ->lazy_flush() if it is
      non-null.

      I had a sparc kernel that was crashing when I was trying to process some
      very large perf.data files- the crash happens when the scsi driver calls
      into dma_4v_map_sg and thus the iommu_tbl_range_alloc().

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 769a8089c1fd2fe94c13e66fe6e03d7820953ee3
  Author: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
  Date:   Tue Sep 22 14:59:17 2015 -0700

      x86, efi, kasan: #undef memset/memcpy/memmove per arch

      In not-instrumented code KASAN replaces instrumented memset/memcpy/memmove
      with not-instrumented analogues __memset/__memcpy/__memove.

      However, on x86 the EFI stub is not linked with the kernel.  It uses
      not-instrumented mem*() functions from arch/x86/boot/compressed/string.c

      So we don't replace them with __mem*() variants in EFI stub.

      On ARM64 the EFI stub is linked with the kernel, so we should replace
      mem*() functions with __mem*(), because the EFI stub runs before KASAN
      sets up early shadow.

      So let's move these #undef mem* into arch's asm/efi.h which is also
      included by the EFI stub.

      Also, this will fix the warning in 32-bit build reported by kbuild test
      robot:

        efi-stub-helper.c:599:2: warning: implicit declaration of function 
'memcpy'

      [akpm@xxxxxxxxxxxxxxxxxxxx: use 80 cols in comment]
      Signed-off-by: Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3aaa76e125c1dd58c9b599baa8c6021896874c12
  Author: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 14:59:14 2015 -0700

      mm: migrate: hugetlb: putback destination hugepage to active list

      Since commit bcc54222309c ("mm: hugetlb: introduce page_huge_active")
      each hugetlb page maintains its active flag to avoid a race condition
      betwe= en multiple calls of isolate_huge_page(), but current kernel
      doesn't set the f= lag on a hugepage allocated by migration because the
      proper putback routine isn= 't called.  This means that users could
      still encounter the race referred to by bcc54222309c in this special
      case, so this patch fixes it.

      Fixes: bcc54222309c ("mm: hugetlb: introduce page_huge_active")
      Signed-off-by: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
      Cc: Michal Hocko <mhocko@xxxxxxx>
      Cc: Andi Kleen <andi@xxxxxxxxxxxxxx>
      Cc: Hugh Dickins <hughd@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>  [4.1.x]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8a04446ab0cf4f35d9f583cd6adcbf7c534e4995
  Author: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 14:59:12 2015 -0700

      mm, dax: VMA with vm_ops->pfn_mkwrite wants to be write-notified

      For VM_PFNMAP and VM_MIXEDMAP we use vm_ops->pfn_mkwrite instead of
      vm_ops->page_mkwrite to notify abort write access.  This means we want
      vma->vm_page_prot to be write-protected if the VMA provides this vm_ops.

      A theoretical scenario that will cause these missed events is:

        On writable mapping with vm_ops->pfn_mkwrite, but without
        vm_ops->page_mkwrite: read fault followed by write access to the pfn.
        Writable pte will be set up on read fault and write fault will not be
        generated.

      I found it examining Dave's complaint on generic/080:

        http://lkml.kernel.org/g/20150831233803.GO3902@dastard

      Although I don't think it's the reason.

      It shouldn't be a problem for ext2/ext4 as they provide both pfn_mkwrite
      and page_mkwrite.

      [akpm@xxxxxxxxxxxxxxxxxxxx: add local vm_ops to avoid 80-cols mess]
      Signed-off-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Yigal Korman <yigal@xxxxxxxxxxxxx>
      Acked-by: Boaz Harrosh <boaz@xxxxxxxxxxxxx>
      Cc: Matthew Wilcox <matthew.r.wilcox@xxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxx>
      Cc: Dave Chinner <david@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 09f7298100ea9767324298ab0c7979f6d7463183
  Author: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:09 2015 -0700

      userfaultfd: register uapi generic syscall (aarch64)

      Add the userfaultfd syscalls to uapi asm-generic, it was tested with
      postcopy live migration on aarch64 with both 4k and 64k pagesize
      kernels.

      Signed-off-by: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Cc: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 5dd01be14565df814408327971775f36e55bf5e3
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:06 2015 -0700

      userfaultfd: selftest: don't error out if pthread_mutex_t isn't identical

      On ppc big endian this check fails, the mutex doesn't necessarily need
      to be identical for all pages after pthread_mutex_lock/unlock cycles.
      The count verification (outside of the pthread_mutex_t structure)
      suffices and that is retained.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit a5932bf5737f0b5caf6deaa92b062e4fe66cf5b2
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:03 2015 -0700

      userfaultfd: selftest: return an error if BOUNCE_VERIFY fails

      This will report the error in the exit code, in addition of the fprintf.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 1f5fee2cf232f9fac05b65f21107d2cf3c32092c
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:59:00 2015 -0700

      userfaultfd: selftest: avoid my_bcmp false positives with powerpc

      Keep a non-zero placeholder after the count, for the my_bcmp comparison
      of the page against the zeropage.  The lockless increment between 255 to
      256 against a lockless my_bcmp could otherwise return false positives on
      ppc32le.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Tested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 56ed8f169e225dce1f9e40f6eee2e2dabe7d06fc
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Tue Sep 22 14:58:58 2015 -0700

      userfaultfd: selftest: only warn if __NR_userfaultfd is undefined

      If __NR_userfaultfd is not yet defined by the arch, warn but still build
      and run the userfaultfd selftest successfully.

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 67f6a029b2ccf3399783a0ff2f812666f290d94f
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:58:55 2015 -0700

      userfaultfd: selftest: headers fixup

      Depend on "make headers_install" to create proper headers to include and
      provide syscall numbers.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d0a871141d07929b559f5eae9c3fc4b63d16866b
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Tue Sep 22 14:58:52 2015 -0700

      userfaultfd: selftests: vm: pick up sanitized kernel headers

      Add the usr/include subdirectory of the top-level tree to the include
      path, and make sure to include headers without relative paths to make
      sure the sanitized headers get picked up.  Otherwise the compiler will
      not be able to find the linux/compiler.h header included by the non-
      sanitized include/uapi/linux/userfaultfd.h.

      While at it, make sure to only hardcode the syscall numbers on x86 and
      PowerPC if they haven't been properly picked up from the headers.

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit ac5be6b47e8bd25b62bed2c82cda7398999f59e9
  Author: Andrea Arcangeli <aarcange@xxxxxxxxxx>
  Date:   Tue Sep 22 14:58:49 2015 -0700

      userfaultfd: revert "userfaultfd: waitqueue: add nr wake parameter to 
__wake_up_locked_key"

      This reverts commit 51360155eccb907ff8635bd10fc7de876408c2e0 and adapts
      fs/userfaultfd.c to use the old version of that function.

      It didn't look robust to call __wake_up_common with "nr == 1" when we
      absolutely require wakeall semantics, but we've full control of what we
      insert in the two waitqueue heads of the blocked userfaults.  No
      exclusive waitqueue risks to be inserted into those two waitqueue heads
      so we can as well stick to "nr == 1" of the old code and we can rely
      purely on the fact no waitqueue inserted in one of the two waitqueue
      heads we must enforce as wakeall, has wait->flags WQ_FLAG_EXCLUSIVE set.

      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Cc: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 834e465bba38f2768747bccb5f00e951e72d2bf5
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Tue Sep 22 06:54:47 2015 +0800

      NFS: Skip checking ds_cinfo.buckets when lseg's commit_through_mds is set

      When lseg's commit_through_mds is set, pnfs client always WARN once
      in nfs_direct_select_verf after checking ds_cinfo.nbuckets.

      nfs should use the DS verf except commit_through_mds is set for
      layout segment where nbuckets is zero.

      [17844.666094] ------------[ cut here ]------------
      [17844.667071] WARNING: CPU: 0 PID: 21758 at 
/root/source/linux-pnfs/fs/nfs/direct.c:174 nfs_direct_select_verf+0x5a/0x70 
[nfs]()
      [17844.668650] Modules linked in: nfs_layout_nfsv41_files(OE) nfsv4(OE) 
nfs(OE) fscache(E) nfsd(OE) xfs libcrc32c btrfs ppdev coretemp crct10dif_pclmul 
auth_rpcgss crc32_pclmul crc32c_intel nfs_acl ghash_clmulni_intel lockd 
vmw_balloon xor vmw_vmci grace raid6_pq shpchp sunrpc parport_pc i2c_piix4 
parport vmwgfx drm_kms_helper ttm drm serio_raw mptspi e1000 scsi_transport_spi 
mptscsih mptbase ata_generic pata_acpi [last unloaded: fscache]
      [17844.686676] CPU: 0 PID: 21758 Comm: kworker/0:1 Tainted: G        W  
OE   4.3.0-rc1-pnfs+ #245
      [17844.687352] Hardware name: VMware, Inc. VMware Virtual Platform/440BX 
Desktop Reference Platform, BIOS 6.00 05/20/2014
      [17844.698502] Workqueue: nfsiod rpc_async_release [sunrpc]
      [17844.699212]  0000000000000009 0000000043e58010 ffff8800454fbc10 
ffffffff813680c4
      [17844.699990]  ffff8800454fbc48 ffffffff8108b49d ffff88004eb20000 
ffff88004eb20000
      [17844.700844]  ffff880062e26000 0000000000000000 0000000000000001 
ffff8800454fbc58
      [17844.701637] Call Trace:
      [17844.725252]  [<ffffffff813680c4>] dump_stack+0x19/0x25
      [17844.732693]  [<ffffffff8108b49d>] warn_slowpath_common+0x7d/0xb0
      [17844.733855]  [<ffffffff8108b5da>] warn_slowpath_null+0x1a/0x20
      [17844.735015]  [<ffffffffa04a27ca>] nfs_direct_select_verf+0x5a/0x70 
[nfs]
      [17844.735999]  [<ffffffffa04a2b83>] nfs_direct_set_hdr_verf+0x23/0x90 
[nfs]
      [17844.736846]  [<ffffffffa04a2e17>] 
nfs_direct_write_completion+0x227/0x260 [nfs]
      [17844.737782]  [<ffffffffa04a433c>] nfs_pgio_release+0x1c/0x20 [nfs]
      [17844.738597]  [<ffffffffa0502df3>] pnfs_generic_rw_release+0x23/0x30 
[nfsv4]
      [17844.739486]  [<ffffffffa01cbbea>] rpc_free_task+0x2a/0x70 [sunrpc]
      [17844.740326]  [<ffffffffa01cbcd5>] rpc_async_release+0x15/0x20 [sunrpc]
      [17844.741173]  [<ffffffff810a387c>] process_one_work+0x21c/0x4c0
      [17844.741984]  [<ffffffff810a37cd>] ? process_one_work+0x16d/0x4c0
      [17844.742837]  [<ffffffff810a3b6a>] worker_thread+0x4a/0x440
      [17844.743639]  [<ffffffff810a3b20>] ? process_one_work+0x4c0/0x4c0
      [17844.744399]  [<ffffffff810a3b20>] ? process_one_work+0x4c0/0x4c0
      [17844.745176]  [<ffffffff810a8d75>] kthread+0xf5/0x110
      [17844.745927]  [<ffffffff810a8c80>] ? kthread_create_on_node+0x240/0x240
      [17844.747105]  [<ffffffff8172ce1f>] ret_from_fork+0x3f/0x70
      [17844.747856]  [<ffffffff810a8c80>] ? kthread_create_on_node+0x240/0x240
      [17844.748642] ---[ end trace 336a2845d42b83f0 ]---

      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit b838b39e930aa1cfd099ea82ac40ed6d6413af26
  Author: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
  Date:   Tue Sep 22 17:03:54 2015 -0500

      PCI: Clear IORESOURCE_UNSET when clipping a bridge window

      c770cb4cb505 ("PCI: Mark invalid BARs as unassigned") sets 
IORESOURCE_UNSET
      if we fail to claim a resource.  If we tried to claim a bridge window,
      failed, clipped the window, and tried to claim the clipped window, we
      failed again because of IORESOURCE_UNSET:

        pci_bus 0000:00: root bus resource [mem 0xc0000000-0xffffffff window]
        pci 0000:00:01.0: can't claim BAR 15 [mem 0xbdf00000-0xddefffff 64bit 
pref]: no compatible bridge window
        pci 0000:00:01.0: [mem size 0x20000000 64bit pref] clipped to [mem size 
0x1df00000 64bit pref]
        pci 0000:00:01.0:   bridge window [mem size 0x1df00000 64bit pref]
        pci 0000:00:01.0: can't claim BAR 15 [mem size 0x1df00000 64bit pref]: 
no address assigned

      The 00:01.0 window started as [mem 0xbdf00000-0xddefffff 64bit pref].  
That
      starts before the host bridge window [mem 0xc0000000-0xffffffff window], 
so
      we clipped the 00:01.0 window to [mem 0xc0000000-0xddefffff 64bit pref].
      But we left it marked IORESOURCE_UNSET, so the second claim failed when it
      should have succeeded.

      This means downstream devices will also fail for lack of resources, e.g.,
      in the bugzilla below,

        radeon 0000:01:00.0: Fatal error during GPU init

      Clear IORESOURCE_UNSET when we clip a bridge window.  Also clear
      IORESOURCE_UNSET in our copy of the unclipped window so we can see exactly
      what the original window was and how it now fits inside the upstream
      window.

      Fixes: c770cb4cb505 ("PCI: Mark invalid BARs as unassigned")
      Link: https://bugzilla.kernel.org/show_bug.cgi?id=85491#c47
      Based-on-patch-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Based-on-patch-by: Yinghai Lu <yinghai@xxxxxxxxxx>
      Tested-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Reviewed-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Acked-by: Yinghai Lu <yinghai@xxxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx        # v4.1+

  commit 8811191fdf7ed02ee07cb8469428158572d355a2
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Tue Sep 22 21:20:22 2015 +0200

      ASoC: pxa: pxa2xx-ac97: fix dma requestor lines

      PCM receive and transmit DMA requestor lines were reverted, breaking the
      PCM playback interface for PXA platforms using the sound/soc/ variant
      instead of the sound/arm variant.

      The commit below shows the inversion in the requestor lines.

      Fixes: d65a14587a9b ("ASoC: pxa: use snd_dmaengine_dai_dma_data")
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 83c133cf11fb0e68a51681447e372489f052d40e
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Sun Sep 20 16:32:05 2015 -0700

      x86/nmi/64: Fix a paravirt stack-clobbering bug in the NMI code

      The NMI entry code that switches to the normal kernel stack needs to
      be very careful not to clobber any extra stack slots on the NMI
      stack.  The code is fine under the assumption that SWAPGS is just a
      normal instruction, but that assumption isn't really true.  Use
      SWAPGS_UNSAFE_STACK instead.

      This is part of a fix for some random crashes that Sasha saw.

      Fixes: 9b6e6a8334d5 ("x86/nmi/64: Switch stacks on userspace NMI entry")
      Reported-and-tested-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/974bc40edffdb5c2950a5c4977f821a446b76178.1442791737.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit fc57a7c68020dcf954428869eafd934c0ab1536f
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Sun Sep 20 16:32:04 2015 -0700

      x86/paravirt: Replace the paravirt nop with a bona fide empty function

      PARAVIRT_ADJUST_EXCEPTION_FRAME generates this code (using nmi as an
      example, trimmed for readability):

          ff 15 00 00 00 00       callq  *0x0(%rip)        # 2796 <nmi+0x6>
                    2792: R_X86_64_PC32     pv_irq_ops+0x2c

      That's a call through a function pointer to regular C function that
      does nothing on native boots, but that function isn't protected
      against kprobes, isn't marked notrace, and is certainly not
      guaranteed to preserve any registers if the compiler is feeling
      perverse.  This is bad news for a CLBR_NONE operation.

      Of course, if everything works correctly, once paravirt ops are
      patched, it gets nopped out, but what if we hit this code before
      paravirt ops are patched in?  This can potentially cause breakage
      that is very difficult to debug.

      A more subtle failure is possible here, too: if _paravirt_nop uses
      the stack at all (even just to push RBP), it will overwrite the "NMI
      executing" variable if it's called in the NMI prologue.

      The Xen case, perhaps surprisingly, is fine, because it's already
      written in asm.

      Fix all of the cases that default to paravirt_nop (including
      adjust_exception_frame) with a big hammer: replace paravirt_nop with
      an asm function that is just a ret instruction.

      The Xen case may have other problems, so document them.

      This is part of a fix for some random crashes that Sasha saw.

      Reported-and-tested-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/8f5d2ba295f9d73751c33d97fda03e0495d9ade0.1442791737.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ce2e572cfe7b2fc3f0e9da4aa7bc61a2c2c51fc7
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 18:02:25 2015 +0800

      x86/numachip: Introduce Numachip2 timer mechanisms

      Add 1GHz 64-bit Numachip2 clocksource timer support for accurate
      system-wide timekeeping, as core TSCs are unsynchronised.

      Additionally, add a per-core clockevent mechanism that interrupts via the
      platform IPI vector after a programmed period.

      [ tglx: Taking it through x86 due to dependencies ]

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Acked-by: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442829745-29311-1-git-send-email-daniel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ad03a9c25d258641556c7198e26fd882c741987a
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 01:02:01 2015 +0800

      x86/numachip: Add Numachip IPI optimisations

      When sending IPIs, first check if the non-local part of the source and
      destination APIC IDs match; if so, send via the local APIC for efficiency.

      Secondly, since the AMD BIOS-kernel developer guide states IPI delivery
      will occur invarient of prior deliver status, avoid polling the delivery
      status bit for efficiency.

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Acked-by: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442768522-19217-3-git-send-email-daniel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d9d4dee6cedfa17e5eedcba242dca3091bf73bc3
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 01:02:00 2015 +0800

      x86/numachip: Add Numachip2 APIC support

      Introduce support for Numachip2 remote interrupts via detecting the right
      ACPI SRAT signature.

      Access is performed via a fixed mapping in the x86 physical address space.

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Acked-by: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442768522-19217-2-git-send-email-daniel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit db1003a719d75cebe5843a7906c02c29bec9922c
  Author: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 01:01:59 2015 +0800

      x86/numachip: Cleanup Numachip support

      Drop unused code and includes in Numachip header files and APIC driver.

      Additionally, use the 'numachip1' prefix on Numachip1-specific functions;
      this prepares for adding Numachip2 support in later patches.

      Signed-off-by: Daniel J Blueman <daniel@xxxxxxxxxxxxx>
      Acked-by: Steffen Persvold <sp@xxxxxxxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442768522-19217-1-git-send-email-daniel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 98ce94c8df762d413b3ecb849e2b966b21606d04
  Author: Peter Seiderer <ps.report@xxxxxxx>
  Date:   Thu Sep 17 21:40:12 2015 +0200

      cifs: use server timestamp for ntlmv2 authentication

      Linux cifs mount with ntlmssp against an Mac OS X (Yosemite
      10.10.5) share fails in case the clocks differ more than +/-2h:

      digest-service: digest-request: od failed with 2 proto=ntlmv2
      digest-service: digest-request: kdc failed with -1561745592 proto=ntlmv2

      Fix this by (re-)using the given server timestamp for the
      ntlmv2 authentication (as Windows 7 does).

      A related problem was also reported earlier by Namjae Jaen (see below):

      Windows machine has extended security feature which refuse to allow
      authentication when there is time difference between server time and
      client time when ntlmv2 negotiation is used. This problem is prevalent
      in embedded enviornment where system time is set to default 1970.

      Modern servers send the server timestamp in the TargetInfo Av_Pair
      structure in the challenge message [see MS-NLMP 2.2.2.1]
      In [MS-NLMP 3.1.5.1.2] it is explicitly mentioned that the client must
      use the server provided timestamp if present OR current time if it is
      not

      Reported-by: Namjae Jeon <namjae.jeon@xxxxxxxxxxx>
      Signed-off-by: Peter Seiderer <ps.report@xxxxxxx>
      Signed-off-by: Steve French <smfrench@xxxxxxxxx>
      CC: Stable <stable@xxxxxxxxxxxxxxx>

  commit e0ddde9d44e37fbc21ce893553094ecf1a633ab5
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Tue Sep 22 09:29:38 2015 -0500

      disabling oplocks/leases via module parm enable_oplocks broken for SMB3

      leases (oplocks) were always requested for SMB2/SMB3 even when oplocks
      disabled in the cifs.ko module.

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>
      Reviewed-by: Chandrika Srinivasan <chandrika.srinivasan@xxxxxxxxxx>
      CC: Stable <stable@xxxxxxxxxxxxxxx>

  commit 99cb99aa055a72d3880d8a95a71034c4d64bcf9a
  Merge: 97170ea 0a031ac5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 13:11:43 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

      Pablo Neira Ayuso says:

      ====================
      Netfilter/IPVS updates for net-next

      The following patchset contains Netfilter/IPVS updates for your net-next 
tree
      in this 4.4 development cycle, they are:

      1) Schedule ICMP traffic to IPVS instances, this introduces a new 
schedule_icmp
         proc knob to enable/disable it. By default is off to retain the old
         behaviour. Patchset from Alex Gartrell.

      I'm also including what Alex originally said for the record:

      "The configuration of ipvs at Facebook is relatively straightforward.  All
      ipvs instances bgp advertise a set of VIPs and the network prefers the
      nearest one or uses ECMP in the event of a tie.  For the uninitiated, ECMP
      deterministically and statelessly load balances by hashing the packet
      (usually a 5-tuple of protocol, saddr, daddr, sport, and dport) and using
      that number as an index (basic hash table type logic).

      The problem is that ICMP packets (which contain really important
      information like whether or not an MTU has been exceeded) will get a
      different hash value and may end up at a different ipvs instance.  With no
      information about where to route these packets, they are dropped, creating
      ICMP black holes and breaking Path MTU discovery.  Suddenly, my mom's
      pictures can't load and I'm fielding midday calls that I want nothing to 
do
      with.

      To address this, this patch set introduces the ability to schedule icmp
      packets which is gated by a sysctl net.ipv4.vs.schedule_icmp.  If set to 
0,
      the old behavior is maintained -- otherwise ICMP packets are scheduled."

      2) Add another proc entry to ignore tunneled packets to avoid routing 
loops
         from IPVS, also from Alex.

      3) Fifteen patches from Eric Biederman to:

      * Stop passing nf_hook_ops as parameter to the hook and use the state hook
        object instead all around the netfilter code, so only the private data
        pointer is passed to the registered hook function.

      * Now that we've got state->net, propagate the netns pointer to netfilter 
hook
        clients to avoid its computation over and over again. A good example of 
how
        this has been simplified is the former TEE target (now nf_dup 
infrastructure)
        since it has killed the ugly pick_net() function.

      There's another round of netns updates from Eric Biederman making the 
line. To
      avoid the patchbomb again to almost all the networking mailing list (that 
is 84
      patches) I'd suggest we send you a pull request with no patches or let me 
know
      if you prefer a better way.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b6a7175bfe570857a85b5570857e7555eff2c3a
  Merge: 3afb112 3eb4ee6
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Sep 22 22:01:46 2015 +0200

      Merge branch 'kvm-ppc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc into kvm-master

  commit 55696b1f664e52b3036f21631f9c2247b667f587
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:24 2015 -0600

      x86/mm: Fix no-change case in try_preserve_large_page()

      try_preserve_large_page() checks if new_prot is the same as
      old_prot.  If so, it simply sets do_split to 0, and returns
      with no-operation.  However, old_prot is set as a 4KB pgprot
      value while new_prot is a large page pgprot value.

      Now that old_prot is initially set from p?d_pgprot() as a
      large page pgprot value, fix it by not overwriting old_prot
      with a 4KB pgprot value.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-12-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d551aaa2f7e1387fa66093ce9914c2e91f283a50
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:23 2015 -0600

      x86/mm: Fix __split_large_page() to handle large PAT bit

      __split_large_page() is called from __change_page_attr() to change
      the mapping attribute by splitting a given large page into smaller
      pages.  This function uses pte_pfn() and pte_pgprot() for PUD/PMD,
      which do not handle the large PAT bit properly.

      Fix __split_large_page() by using the corresponding pud/pmd pfn/
      pgprot interfaces.

      Also remove '#ifdef CONFIG_X86_64', which is not necessary.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-11-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 3a19109efbfa7d887996a74257556a46e00525c2
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:22 2015 -0600

      x86/mm: Fix try_preserve_large_page() to handle large PAT bit

      try_preserve_large_page() is called from __change_page_attr() to
      change the mapping attribute of a given large page.  This function
      uses pte_pfn() and pte_pgprot() for PUD/PMD, which do not handle
      the large PAT bit properly.

      Fix try_preserve_large_page() by using the corresponding pud/pmd
      prot/pfn interfaces.

      Also remove '#ifdef CONFIG_X86_64', which is not necessary.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-10-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit daf3e35c5888e8bd6a2f5ed15ed392b2df362ecf
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:21 2015 -0600

      x86/mm: Fix gup_huge_p?d() to handle large PAT bit

      gup_huge_pud() and gup_huge_pmd() cast *pud and *pmd to *pte,
      and use pte_xxx() interfaces to obtain the flags and PFN.
      However, the pte_xxx() interface does not handle the large
      PAT bit properly for PUD/PMD.

      Fix gup_huge_pud() and gup_huge_pmd() to use pud_xxx() and
      pmd_xxx() interfaces according to their type.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-9-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 34437e67a6727885bdf6cbfd8441b1ac43a1ee65
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:20 2015 -0600

      x86/mm: Fix slow_virt_to_phys() to handle large PAT bit

      slow_virt_to_phys() calls lookup_address() to obtain *pte and
      its level.  It then calls pte_pfn() to obtain a physical address
      for any level.  However, this physical address is not correct
      when the large PAT bit is set because pte_pfn() does not mask
      the large PAT bit properly for PUD/PMD.

      Fix slow_virt_to_phys() to use pud_pfn() and pmd_pfn() for 1GB
      and 2MB mapping levels.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-8-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit da25e628c4c231a281b1c1de3168a36ab9bfe473
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:19 2015 -0600

      x86/mm: Fix page table dump to show PAT bit

      /sys/kernel/debug/kernel_page_tables does not show the PAT bit for
      PUD/PMD mappings.  This is because walk_pud_level(), walk_pmd_level()
      and note_page() mask the flags with PTE_FLAGS_MASK, which does not
      cover their PAT bit, _PAGE_PAT_LARGE.

      Fix it by replacing the use of PTE_FLAGS_MASK with p?d_flags(),
      which masks the flags properly.

      Also change to show the PAT bit as "PAT" to be consistent with
      other bits.

      Reported-by: Robert Elliott <elliott@xxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-7-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit bbac8c6deadab921f4b7d00ce675ffa4f358ec7f
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:18 2015 -0600

      x86/asm: Add pud_pgprot() and pmd_pgprot()

      pte_pgprot() returns a pgprot_t value by calling pte_flags().  Now
      that pud_flags() and pmd_flags() work specifically for the pud/pmd
      levels, define pud_pgprot() and pmd_pgprot() for PUD/PMD.

      Also update pte_pgprot() to remove the unnecessary mask with
      PTE_FLAGS_MASK as pte_flags() takes care of it.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-6-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f70abb0fc3da1b2945c92751ccda2744081bf2b7
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:17 2015 -0600

      x86/asm: Fix pud/pmd interfaces to handle large PAT bit

      Now that we have pud/pmd mask interfaces, which handle pfn & flags
      mask properly for the large PAT bit.

      Fix pud/pmd pfn & flags interfaces by replacing PTE_PFN_MASK and
      PTE_FLAGS_MASK with the pud/pmd mask interfaces.

      Suggested-by: Juergen Gross <jgross@xxxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-5-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 4be4c1fb9a754b100466ebaec50f825be0b2050b
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:16 2015 -0600

      x86/asm: Add pud/pmd mask interfaces to handle large PAT bit

      The PAT bit gets relocated to bit 12 when PUD and PMD mappings are
      used.  This bit 12, however, is not covered by PTE_FLAGS_MASK, which
      is used for masking pfn and flags for all levels.

      Add pud/pmd mask interfaces to handle pfn and flags properly by using
      P?D_PAGE_MASK when PUD/PMD mappings are used, i.e. PSE bit is set.

      Suggested-by: Juergen Gross <jgross@xxxxxxxx>
      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-4-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 832102671855f73962e7a04fdafd48b9385ea5c6
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:15 2015 -0600

      x86/asm: Move PUD_PAGE macros to page_types.h

      PUD_SHIFT is defined according to a given kernel configuration, which
      allows it be commonly used by any x86 kernels.  However, PUD_PAGE_SIZE
      and PUD_PAGE_MASK, which are set from PUD_SHIFT, are defined in
      page_64_types.h, which can be used by 64-bit kernel only.

      Move PUD_PAGE_SIZE and PUD_PAGE_MASK to page_types.h so that they can
      be used by any x86 kernels as well.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-3-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit fb535ccb30845fe0b7bd09caa37a838985b72ff9
  Author: Toshi Kani <toshi.kani@xxxxxxx>
  Date:   Thu Sep 17 12:24:14 2015 -0600

      x86/vdso32: Define PGTABLE_LEVELS to 32bit VDSO

      In case of CONFIG_X86_64, vdso32/vclock_gettime.c fakes a 32-bit
      non-PAE kernel configuration by re-defining it to CONFIG_X86_32.
      However, it does not re-define CONFIG_PGTABLE_LEVELS leaving it
      as 4 levels.

      This mismatch leads <asm/pgtable_type.h> to NOT include <asm-generic/
      pgtable-nopud.h> and <asm-generic/pgtable-nopmd.h>, which will cause
      compile errors when a later patch enhances <asm/pgtable_type.h> to
      use PUD_SHIFT and PMD_SHIFT.  These -nopud & -nopmd headers define
      these SHIFTs for the 32-bit non-PAE kernel.

      Fix it by re-defining CONFIG_PGTABLE_LEVELS to 2 levels.

      Signed-off-by: Toshi Kani <toshi.kani@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Konrad Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Robert Elliot <elliott@xxxxxxx>
      Cc: linux-mm@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442514264-12475-2-git-send-email-toshi.kani@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 43d104db596977a8fddc1e71245859a7fe85a658
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Thu Sep 17 17:49:21 2015 +0100

      MIPS: Fix FTLB detection for R6

      R6 removed the Config4.MMUExtDef field, with the low 16 bits only
      allowed to contain FTLB fields, and commit e87569cd6c57 ("MIPS:
      cpu-probe: Fix VTLB/FTLB configuration for R6") updated the probing of
      this field to assume an FTLB is always present for R6.

      However the FTLB may still be absent. The presence of those fields is
      actually specified by the MMU type in the Config.MT field, so use that
      (the new cpu_has_ftlb) to determine whether the FTLB is actually
      present.

      Fixes: e87569cd6c57 ("MIPS: cpu-probe: Fix VTLB/FTLB configuration for 
R6")
      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11160/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 2f6f31363cb7890784458d7805140687b4de5b59
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Thu Sep 17 17:49:20 2015 +0100

      MIPS: cpu-features: Add cpu_has_ftlb

      Add cpu_has_ftlb, which specifies that an FTLB is present in addition to
      the VTLB, probed based on whether Config.MT == 4 (rather than 1 for
      standard JTLB).

      This is necessary since MIPS release 6 removes Config4.MMUExtDef, so the
      presence of the FTLB fields in Config4 must be determined from Config.MT
      instead.

      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11159/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 2b9dbef272b63c561aab0a5be34fd428f7b710f5
  Author: Josef Bacik <jbacik@xxxxxx>
  Date:   Tue Sep 15 10:07:04 2015 -0400

      Btrfs: keep dropped roots in cache until transaction commit

      When dropping a snapshot we need to account for the qgroup changes.  If 
we drop
      the snapshot in all one go then the backref code will fail to find blocks 
from
      the snapshot we dropped since it won't be able to find the root in the fs 
root
      cache.  This can lead to us failing to find refs from other roots that 
pointed
      at blocks in the now deleted root.  To handle this we need to not remove 
the fs
      roots from the cache until after we process the qgroup operations.  Do 
this by
      adding dropped roots to a list on the transaction, and letting the 
transaction
      remove the roots at the same time it drops the commit roots.  This will 
keep all
      of the backref searching code in sync properly, and fixes a problem Mark 
was
      seeing with snapshot delete and qgroups.  Thanks,

      Signed-off-by: Josef Bacik <jbacik@xxxxxx>
      Tested-by: Holger Hoffstätte <holger.hoffstaette@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 19446da415e0f01d56364b700fe984cda78bca50
  Author: Alexander Couzens <lynxis@xxxxxxx>
  Date:   Sat Sep 19 06:26:20 2015 +0200

      MIPS: ATH79: Add irq chip ar7240-misc-intc

      The ar7240 misc irq chip use ack handler
      instead of ack_mask handler. All new ath79 chips use
      the ar7240 misc irq chip

      Signed-off-by: Alexander Couzens <lynxis@xxxxxxx>
      Acked-by: Alban Bedel <albeu@xxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11164/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 84dedd71cf3bc61cc65ca43a48f7252344a1bb68
  Author: Alexander Couzens <lynxis@xxxxxxx>
  Date:   Sat Sep 19 06:26:19 2015 +0200

      MIPS: ATH79: Set missing irq ack handler for ar7100-misc-intc irq chip

      The irq ack handler was forgotten while introducing OF support.
      Only ar71xx and ar933x based devices require it.

      Signed-off-by: Alexander Couzens <lynxis@xxxxxxx>
      Acked-by: Alban Bedel <albeu@xxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11163/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit b259e51f2e29390518021f9b8df55a3de42f371b
  Author: Aurelien Jarno <aurelien@xxxxxxxxxxx>
  Date:   Sat Sep 5 18:46:57 2015 +0200

      MIPS: BPF: Fix build on pre-R2 little endian CPUs

      The rotr, seh and wsbh instructions have been introduced with the R2
      ISA. Thus the current BPF code fails to build on pre-R2 little endian
      CPUs:

          CC      arch/mips/net/bpf_jit.o
          AS      arch/mips/net/bpf_jit_asm.o
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S: Assembler messages:
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:67: Error: opcode 
not supported on this processor: mips32 (mips32) `wsbh $8,$19'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:68: Error: opcode 
not supported on this processor: mips32 (mips32) `rotr $19,$8,16'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:83: Error: opcode 
not supported on this processor: mips32 (mips32) `wsbh $8,$19'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:84: Error: opcode 
not supported on this processor: mips32 (mips32) `seh $19,$8'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:151: Error: opcode 
not supported on this processor: mips32 (mips32) `wsbh $8,$12'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:153: Error: opcode 
not supported on this processor: mips32 (mips32) `rotr $19,$8,16'
        /home/aurel32/linux-4.2/arch/mips/net/bpf_jit_asm.S:164: Error: opcode 
not supported on this processor: mips32 (mips32) `wsbh $19,$12'
        /home/aurel32/linux-4.2/scripts/Makefile.build:294: recipe for target 
'arch/mips/net/bpf_jit_asm.o' failed

      Fix that by providing equivalent code for these CPUs.

      Signed-off-by: Aurelien Jarno <aurelien@xxxxxxxxxxx>
      Reviewed-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11098/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit faa9724a674e5e52316bb0d173aed16bd17d536c
  Author: Aurelien Jarno <aurelien@xxxxxxxxxxx>
  Date:   Sat Sep 5 18:46:56 2015 +0200

      MIPS: BPF: Avoid unreachable code on little endian

      On little endian, avoid generating the big endian version of the code
      by using #else in addition to #ifdef #endif. Also fix one alignment
      issue wrt delay slot.

      Signed-off-by: Aurelien Jarno <aurelien@xxxxxxxxxxx>
      Reviewed-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11097/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 9e294bf88a583825a413df408b9fe9e658fb93ac
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Fri Aug 28 13:49:35 2015 +0200

      clk: samsung: fix cpu clock's flags checking

      CLK_CPU_HAS_DIV1 and CLK_CPU_NEEDS_DEBUG_ALT_DIV masks were
      incorrectly used as a bit numbers.  Fix it.

      Tested on Exynos4210 based Origen board and on Exynos5250 based
      Arndale board.

      Cc: Tomasz Figa <tomasz.figa@xxxxxxxxx>
      Cc: Michael Turquette <mturquette@xxxxxxxxxxxx>
      Cc: Thomas Abraham <thomas.ab@xxxxxxxxxxx>
      Fixes: ddeac8d96 ("clk: samsung: add infrastructure to register cpu 
clocks")
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Reviewed-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Reviewed-by: Javier Martinez Canillas <javier@xxxxxxxxxxxx>
      Acked-by: Sylwester Nawrocki <s.nawrocki@xxxxxxxxxxx>
      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 711e020cae9cd105d81a783686cb8c8059c08b2c
  Merge: 5132361 dd85ebf b0b4855
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Tue Sep 22 09:48:41 2015 -0700

      Merge remote-tracking branches 'spi/fix/spidev' and 'spi/fix/xtfpga' into 
spi-linus

  commit 5132361cd97ed21863fb48bb8e4a0e6203a4269a
  Merge: 1f93e4a d630526 2a3fffd 0243ed4 e26d15f c9e97b3 6583d20 02bc933
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Tue Sep 22 09:48:34 2015 -0700

      Merge remote-tracking branches 'spi/fix/atmel', 'spi/fix/bcm2835', 
'spi/fix/doc', 'spi/fix/mediatek', 'spi/fix/meson', 'spi/fix/mtk' and 
'spi/fix/pxa2xx' into spi-linus

  commit 1c27df1c0a82b938d8073a60243ff62eff8056b5
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Fri Sep 18 16:12:56 2015 +0100

      iommu/arm-smmu: Use correct address mask for CMD_TLBI_S2_IPA

      Stage-2 TLBI by IPA takes a 48-bit address field, as opposed to the
      64-bit field used by the VA-based invalidation commands.

      This patch re-jigs the SMMUv3 command construction code so that the
      address field is correctly masked.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit f0c453dbcce7767cd868deb809ba68083c93954e
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Thu Aug 20 12:12:32 2015 +0100

      iommu/arm-smmu: Ensure IAS is set correctly for AArch32-capable SMMUs

      AArch32-capable SMMU implementations have a minimum IAS of 40 bits, so
      ensure that is reflected in the stage-2 page table configuration.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit ffcb6d1686ceb4a6b50776fb2597ab0e4dd79040
  Author: Robin Murphy <Robin.Murphy@xxxxxxx>
  Date:   Thu Sep 17 17:42:16 2015 +0100

      iommu/io-pgtable-arm: Don't use dma_to_phys()

      In checking whether DMA addresses differ from physical addresses, using
      dma_to_phys() is actually the wrong thing to do, since it may hide any
      DMA offset, which is precisely one of the things we are checking for.
      Simply casting between the two address types, whilst ugly, is in fact
      the appropriate course of action. Further care (and ugliness) is also
      necessary in the comparison to avoid truncation if phys_addr_t and
      dma_addr_t differ in size.

      We can also reject any device with a fixed DMA offset up-front at page
      table creation, leaving the allocation-time check for the more subtle
      cases like bounce buffering due to an incorrect DMA mask.

      Furthermore, we can then fix the hackish KConfig dependency so that
      architectures without a dma_to_phys() implementation may still
      COMPILE_TEST (or even use!) the code. The true dependency is on the
      DMA API, so use the appropriate symbol for that.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      [will: folded in selftest fix from Yong Wu]
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit f0e03dbd2d61d991bdd2d76b4e84681fe3077176
  Author: Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 15:30:33 2015 +0100

      MAINTAINERS: Update website and git repo for Wolfson Microelectronics

      Support for Wolfson Microelectronics devices is now part of Cirrus Logic
      and the relevant parts of the old opensource.wolfsonmicro.com site have
      moved to the Cirrus Logic GitHub area.

      This patch updates the website and git repo links, and also removes an
      obsolete website link for the voltage and current drivers.

      Signed-off-by: Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit b0b4855099e301c8603ea37da9a0103a96c2e0b1
  Author: Max Filippov <jcmvbkbc@xxxxxxxxx>
  Date:   Tue Sep 22 14:32:03 2015 +0300

      spi: xtensa-xtfpga: fix register endianness

      XTFPGA SPI controller has native endian registers.
      Fix register acessors so that they work in big-endian configurations.

      Signed-off-by: Max Filippov <jcmvbkbc@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 52019e406c24a98ba8c8f731c1236ff0ac3de96a
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 12:36:15 2015 +0200

      EDAC, i5100: Convert to debugfs wrappers

      This driver creates its debugfs hierarchy under the toplevel debugfs dir
      - see i5100_init() - so make it use edac_debugfs_create_dir_at( , NULL)
      because we're not breaking userspace. Oh well.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit bba3b31e440a9c16da013a5f07066b8092a16c87
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 12:27:29 2015 +0200

      EDAC, altera: Convert to debugfs wrappers

      Use the EDAC-specific wrappers. Drop CONFIG_EDAC_DEBUG ifdeffery.

      Cc: Thor Thayer <tthayer@xxxxxxxxxxxxxxxxxxxxx>
      Cc: <linux-edac@xxxxxxxxxxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 4397bcb4fa1dd285a2c6d583d1f1cbc6bd423f97
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 12:16:05 2015 +0200

      EDAC: Add debugfs wrappers

      Later patches will convert EDAC users to those.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit f7a7651fcd40a2bf29357ffeaee176fb159bcddb
  Author: Jonathan McDowell <noodles@xxxxxxxx>
  Date:   Mon Sep 21 21:23:47 2015 +0100

      tty: serial: Add missing module license for 8250_base.ko

      The split of the 8250 driver into a 8250_base/8250.ko resulted in a
      lack of a license for the 8250_base.ko module. This caused the module
      to fail to load and the kernel to be tainted. Add the appropriate
      MODULE_LICENSE to 8250_port.c, which is always compiled into
      8250_base.ko

      Signed-off-by: Jonathan McDowell <noodles@xxxxxxxx>
      Reported-by: Mikael Pettersson <mikpelinux@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 50314035d6b1e9e07753162dd3be8df81b998086
  Merge: ca1c4b7 f4513b0
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 22 08:56:13 2015 -0700

      Merge tag 'extcon-fixes-for-4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/chanwoo/extcon into 
char-misc-linus

      Chanwoo writes:

      Update extcon for v4.3-rc3

      This patches fix the following one issue:
      - Fix bug of the is_extcon_changed() which check whether specific cable is
        attached or detached.

  commit 88d3426942d748b90b051b7ef2d5d765f5f3054c
  Author: Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx>
  Date:   Thu Sep 3 08:36:35 2015 +0200

      MIPS: bootmem: Fix mapstart calculation for contiguous maps

      Commit a6335fa1 fixed the case with gap between initrd and next usable 
PFN zone,
      but broken the case when initrd is combined with usable memory into one 
region
      (in add_memory_region()). Restore the fixup initially brought in by 
f9a7febd.

      ---- error message ----
      Unpacking initramfs...
      Initramfs unpacking failed: junk in compressed archive
      BUG: Bad page state in process swapper  pfn:00261
      page:81004c20 count:0 mapcount:-127 mapping:  (null) index:0x2
      flags: 0x0()
      page dumped because: nonzero mapcount
      CPU: 0 PID: 1 Comm: swapper Not tainted 4.2.0+ #1782
      -----------------------

      Signed-off-by: Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx>
      Reported-by: Tony Wu <tung7970@xxxxxxxxx>
      Tested-by: Tony Wu <tung7970@xxxxxxxxx>
      Cc: David Daney <david.daney@xxxxxxxxxx>
      Cc: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Cc: Huacai Chen <chenhc@xxxxxxxxxx>
      Cc: Joe Perches <joe@xxxxxxxxxxx>
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11086/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit fc2ca674470bbfe11d72a20a3f19fd3dc43bfca0
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Aug 30 21:19:58 2015 -0700

      MIPS: Fix console output for Fulong2e system

      Commit 3adeb2566b9b ("MIPS: Loongson: Improve LEFI firmware interface")
      made the number of UARTs dynamic if LEFI_FIRMWARE_INTERFACE is configured.
      Unfortunately, it did not initialize the number of UARTs if
      LEFI_FIRMWARE_INTERFACE is not configured. As a result, the Fulong2e
      system has no console.

      Fixes: 3adeb2566b9b ("MIPS: Loongson: Improve LEFI firmware interface")
      Acked-by: Huacai Chen <chenhc@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Tested-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11076/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit c2e4b24ff848bb180f9b9cd873a38327cd219ad2
  Author: Kapileshwar Singh <kapileshwar.singh@xxxxxxx>
  Date:   Tue Sep 22 14:22:03 2015 +0100

      tools lib traceevent: Fix string handling in heterogeneous arch 
environments

      When a trace recorded on a 32-bit device is processed with a 64-bit
      binary, the higher 32-bits of the address need to ignored.

      The lack of this results in the output of the 64-bit pointer
      value to the trace as the 32-bit address lookup fails in find_printk().

      Before:

        burn-1778  [003]   548.600305: bputs:   0xc0046db2s: 2cec5c058d98c

      After:

        burn-1778  [003]   548.600305: bputs:   0xc0046db2s: RT throttling 
activated

      The problem occurs in PRINT_FIELD when the field is recognized as a
      pointer to a string (of the type const char *)

      Heterogeneous architectures cases below can arise and should be handled:

      * Traces recorded using 32-bit addresses processed on a 64-bit machine
      * Traces recorded using 64-bit addresses processed on a 32-bit machine

      Reported-by: Juri Lelli <juri.lelli@xxxxxxx>
      Signed-off-by: Kapileshwar Singh <kapileshwar.singh@xxxxxxx>
      Reviewed-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Javi Merino <javi.merino@xxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442928123-13824-1-git-send-email-kapileshwar.singh@xxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ac742d37180bee83bc433be087b66a17af2883b9
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 23:36:40 2015 +0200

      futex: Force hot variables into a single cache line

      futex_hash() references two global variables: the base pointer
      futex_queues and the size of the array futex_hashsize. The latter is
      marked __read_mostly, while the former is not, so they are likely to
      end up very far from each other. This means that futex_hash() is
      likely to encounter two cache misses.

      We could mark futex_queues as __read_mostly as well, but that doesn't
      guarantee they'll end up next to each other (and even if they do, they
      may still end up in different cache lines). So put the two variables
      in a small singleton struct with sufficient alignment and mark that as
      __read_mostly.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Cc: Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441834601-13633-1-git-send-email-linux@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 71f64340fc0eadd06036d0db9a511b6d726add1d
  Author: Huang Shijie <shijie.huang@xxxxxxx>
  Date:   Wed Sep 2 10:24:55 2015 +0800

      genirq: Remove the second parameter from handle_irq_event_percpu()

      Actually, we always use the first irq action of the @desc->action
      chain, so remove the second parameter from handle_irq_event_percpu()
      which makes the code more tidy.

      Signed-off-by: Huang Shijie <shijie.huang@xxxxxxx>
      Reviewed-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: peterz@xxxxxxxxxxxxx
      Cc: marc.zyngier@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441160695-19809-1-git-send-email-shijie.huang@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b55a3bb8650ddb096624175c55176d7fdbcad4ae
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 21 15:46:06 2015 +0200

      irqchip/atmel-aic5: Simplify base chip selection

      Use irq_get_domain_generic_chip() to select the base chip.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Acked-by: Nicholas Ferre <nicolas.ferre@xxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <sasha.levin@xxxxxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: <Wenyou.Yang@xxxxxxxxx>
      Cc: <jason@xxxxxxxxxxxxxx>
      Cc: <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442843173-2390-3-git-send-email-ludovic.desroches@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 414a431ad6217a03e561fcb199048141db3fc024
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 21 15:46:05 2015 +0200

      irqchip/atmel-aic5: Use explicit variable name for the base chip

      To avoid errors, use an explicit variable name when accessing the 'base'
      generic chip.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Acked-by: Nicholas Ferre <nicolas.ferre@xxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <sasha.levin@xxxxxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: <Wenyou.Yang@xxxxxxxxx>
      Cc: <jason@xxxxxxxxxxxxxx>
      Cc: <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442843173-2390-2-git-send-email-ludovic.desroches@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f94f87ab1a04629699ec1e2408dae8f3acee5dc4
  Merge: afbbd23 d32dc9a
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 22 15:56:46 2015 +0200

      Merge branch 'irq/urgent' into irq/core

      Get the urgent bugfix for aic5 as further patches depend on it.

  commit d32dc9aa10c739363c775baf4499416b2e0dc11f
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Mon Sep 21 15:46:04 2015 +0200

      irqchip/atmel-aic5: Use per chip mask caches in mask/unmask()

      When masking/unmasking interrupts, mask_cache is updated and used later
      for suspend/resume. Unfortunately, it always was the mask_cache
      associated with the first irq chip which was updated. So when performing
      resume, only irqs 0-31 could be enabled.

      Fixes: b1479ebb7720 ("irqchip: atmel-aic: Add atmel AIC/AIC5 drivers")
      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Cc: <sasha.levin@xxxxxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: <nicolas.ferre@xxxxxxxxx>
      Cc: <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <Wenyou.Yang@xxxxxxxxx>
      Cc: <jason@xxxxxxxxxxxxxx>
      Cc: <marc.zyngier@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx #3.18
      Link: 
http://lkml.kernel.org/r/1442843173-2390-1-git-send-email-ludovic.desroches@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 96d8bf75da12df17f2c861043158dad2dabfe491
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 21 16:35:43 2015 +0200

      perf tools: Add include/err.h into MANIFEST

      Otherwise the tarpkg is incomplete (tarpkg tests fails).

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: 01ca9fd41d6f ("tools: Add err.h with ERR_PTR PTR_ERR interface")
      Link: 
http://lkml.kernel.org/r/1442846143-8556-1-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 65f041bee7838e2a91dbbc0a917d9291adbb3484
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Sep 21 17:25:27 2015 -0300

      tools lib bpf: Use FEATURE_USER to allow building in the same dir as perf

      When building tools/lib/bpf as part of the tools/perf/ build process,
      which will happend when we introduce a patch wiring that up, we end up
      stomping on the feature detection caching mechanism, that uses a file in
      the output directory (O=) that is shared by libbpf and perf to check if
      something changed from one build to another that requires redoing the
      feature detection process.

      By using the recently introduced FEATURE_USER tools/build/ knob, we can
      avoid that:

      Before, every make invokation would run the feature detection:

        $ make O=/tmp/build/perf -C tools/perf
        make: Entering directory '/home/git/linux/tools/perf'
        Auto-detecting system features:
        ...                         dwarf: [ on  ]
        ...                         glibc: [ on  ]
        <SNIP>
        ...                     get_cpuid: [ on  ]
        ...                           bpf: [ on  ]

          GEN      perf-archive
          GEN      perf-with-kcore

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...                           bpf: [ on  ]
        <SNIP>

      After:

        $ make O=/tmp/build/perf -C tools/perf
        make: Entering directory '/home/git/linux/tools/perf'
          BUILD:   Doing 'make -j4' parallel build
        make: Leaving directory '/home/git/linux/tools/perf'
        $

      Because we now have two different feature detection state files:

        $ ls -la /tmp/build/perf/FEATURE-DUMP*
        -rw-rw-r--. 1 acme acme 338 Sep 21 17:25 /tmp/build/perf/FEATURE-DUMP
        -rw-rw-r--. 1 acme acme  33 Sep 21 17:25 
/tmp/build/perf/FEATURE-DUMP.libbpf
        $

      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Fixes: 1b76c13e4b36 ("bpf tools: Introduce 'bpf' library and add bpf 
feature check")
      Link: http://lkml.kernel.org/n/tip-s6ev9wfqy7pvvs58emys2g90@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 13e96db61c1c32cd4c8102a95129bb7677cc746d
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Sep 21 12:24:47 2015 -0300

      tools build: Allow setting the feature detection user

      We will use the tools/build/ autodetection in the eBPF patchkit
      and it is currently sharing the output directory with perf, that
      also uses the feature detection logic.

      As we keep state in the output directory, so that we can avoid running
      all the tests again, we need to have different filenames for the files
      used in this state, allow doing that via the FEATURE_USER variable, to
      be set alongside the existing FEATURE_{TEST,DISPLAY} variables.

      v2: Fix comment describing the FEATURE_DUMP filename to make sure where
          it is created, precisely at $(OUTPUT)FEATURE-DUMP$(FEATURE_USER).
          Pointed out by Jiri.

      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: http://lkml.kernel.org/n/tip-fdbev0vrn3x6idqc3ajbnvcb@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 20517cd9c5930c9ef580082d23073842e92249ad
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Sep 21 17:00:27 2015 -0300

      tools lib bpf: Fix up FEATURE_{TESTS,DISPLAY} usage

      When libbpf was introduced it wrongly asked for the "libelf" and "bpf"
      feature tests to be performed (via FEATURE_TESTS), while asking that
      "libbpf", "libelf-mmap", "libelf-getphdrnum" and "bpf" to have the
      result of its respective tests to be displayed (via FEATURE_DISPLAY).

      Due to another recently bug fixed in the tools/build/ infrastructure
      ("tools build: Fixup feature detection display function name") the
      results for the entries in the FEATURE_DISPLAY, for this case, were
      appearing as all succeeding, when two of them (the ones only on the
      DISPLAY) were not even being performed.

      Before:

        $ make -C tools/lib/bpf/
        make: Entering directory '/home/git/linux/tools/lib/bpf'
        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...             libelf-getphdrnum: [ OFF ]
        ...                   libelf-mmap: [ OFF ]
        ...                           bpf: [ on  ]
        <SNIP>

      After, with FEATURE_TESTS == FEATURE_DISPLAY:

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...             libelf-getphdrnum: [ on  ]
        ...                   libelf-mmap: [ on  ]
        ...                           bpf: [ on  ]
        <SNIP>

      I just inverted, so that it tests the four features but displays just
      the libelf and mmap ones, to make it more compact. So it becomes:

        $ make -C tools/lib/bpf/
        make: Entering directory '/home/git/linux/tools/lib/bpf'

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...                           bpf: [ on  ]

      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Fixes: 1b76c13e4b36 ("bpf tools: Introduce 'bpf' library and add bpf 
feature check")
      Link: http://lkml.kernel.org/n/tip-y4bd59e6j9rzzojiyeqrg2jq@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 6076e2a47cccfb3d48a8d165853c0b799c563df7
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Sep 21 11:49:51 2015 -0300

      tools build: Fixup feature detection display function name

      Cut'n'paste mistake, it should eval the name of the function
      defined right next to it, in the next line, fix it.

      Before:

        $ make -C tools/lib/bpf/
        make: Entering directory '/home/git/linux/tools/lib/bpf'

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...             libelf-getphdrnum: [ on  ]
        ...                   libelf-mmap: [ on  ]
        ...                           bpf: [ on  ]
        <SNIP>

      After:

        $ make -C tools/lib/bpf/
        make: Entering directory '/home/git/linux/tools/lib/bpf'

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...             libelf-getphdrnum: [ OFF ]
        ...                   libelf-mmap: [ OFF ]
        ...                           bpf: [ on  ]
        <SNIP>

      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Fixes: 58d4f00ff13f ("perf build: Fix feature_check name clash")
      Link: http://lkml.kernel.org/n/tip-dzu1c4sruukgfq5d5b1c4r30@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3ed769bdb2a2484fd7f9f7f3047413053aacbe21
  Author: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
  Date:   Fri Sep 18 15:54:23 2015 +0200

      timers: Fix data race in timer_stats_account_timer()

      timer_stats_account_timer() reads timer->start_site, then checks it
      for NULL and then re-reads it again, while
      timer_stats_timer_clear_start_info() can concurrently reset
      timer->start_site to NULL. This should not lead to crashes, but can
      double number of entries in timer stats as start_site is used during
      comparison, the doubled entries will have unuseful NULL start_site.

      Read timer->start_site only once in timer_stats_account_timer().

      The data race was found with KernelThreadSanitizer (KTSAN).

      Signed-off-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: andreyknvl@xxxxxxxxxx
      Cc: glider@xxxxxxxxxx
      Cc: kcc@xxxxxxxxxx
      Cc: ktsan@xxxxxxxxxxxxxxxx
      Cc: john.stultz@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442584463-69553-1-git-send-email-dvyukov@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit babc305e21ea3811d98b67437299360904ac1b6a
  Author: Sara Sharon <sara.sharon@xxxxxxxxx>
  Date:   Mon Sep 21 15:47:40 2015 +0300

      mac80211: reset CQM history upon reconfiguration

      The current behavior of notifying CQM events is inconsistent:
      Upon first configuration there is a cqm event with the current
      status according to threshold configured, regardless of signal
      stability.
      When there is reconfiguration no event is sent unless there is
      a significant change to the signal level according to the new
      configuration.

      Since the current reconfiguration behavior might cause missing
      CQM events in case the current signal did not change but is on
      the other side of the new threshold, fix that by resetting the
      stored signal level upon reconfiguration.

      Signed-off-by: Sara Sharon <sara.sharon@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 5359d112dcb081fd7a5f2de287fa995f6ba0800c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Mon Sep 14 13:56:17 2015 +0200

      Revert "mac80211: add pointer for driver use to key"

      This reverts commit f9a060f4b2003eb7350762e60dfc576447e44bad.

      No driver has turned up needing this functionality, and I've just
      implemented the functionality I wanted this for in a different
      way. Thus, remove it again, until somebody shows up with a need
      for having it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4dc792b8f098ab6327033fc97ba40163a2cd5fcc
  Author: Helmut Schaa <helmut.schaa@xxxxxxxxxxxxxx>
  Date:   Wed Sep 2 13:23:30 2015 +0200

      mac80211: Split sending tx'ed frames to monitor interfaces into its own 
function

      This allows ieee80211_tx_monitor to be used directly for sending 802.11 
frames
      to all monitor interfaces.

      Signed-off-by: Helmut Schaa <helmut.schaa@xxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit d55d0d598e6610bbfcc1f2ecd6e8af669b94783b
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Aug 31 22:59:38 2015 +0200

      nl80211: put current TX power in interface info

      Many drivers implement reading current TX power (using either cfg80211
      or ieee80211 op) but userspace can't get it using nl80211. Right now the
      only way to access it is to call some wext ioctl.
      Let's put TX power in interface info reply (callback is wdev specific)
      just like we do with current channel.
      To be consistent (e.g. NL80211_CMD_SET_WIPHY) let's use mBm as na unit.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 0edd5faeb07bfd3ec5402f9467e4c169dcd131e8
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 28 14:31:48 2015 +0200

      wireless: mark element IDs 8 and 9 reserved

      These were never used in the tree, and are marked as reserved
      in the IEEE 802.11 documentation (ANA).

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 338c17ae311e6b5a439573a4043fd2d9237cd1d5
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 28 10:52:54 2015 +0200

      mac80211: use DECLARE_EWMA for ave_beacon_signal

      It doesn't seem problematic to change the weight for the average
      beacon signal from 3 to 4, so use DECLARE_EWMA. This also makes
      the code easier to maintain since bugs like the one fixed in the
      previous patch can't happen as easily.

      With a fix from Avraham Stern to invert the sign since EMWA uses
      unsigned values only.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 8ec6d97871f37e4743678ea4a455bd59580aa0f4
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 28 10:52:53 2015 +0200

      mac80211: fix driver RSSI event calculations

      The ifmgd->ave_beacon_signal value cannot be taken as is for
      comparisons, it must be divided by since it's represented
      like that for better accuracy of the EWMA calculations. This
      would lead to invalid driver RSSI events. Fix the used value.

      Fixes: 615f7b9bb1f8 ("mac80211: add driver RSSI threshold events")
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 8e0d7fe07c3f8c2a5e3b5bdbfdf09de4da2e2dd4
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 28 10:52:52 2015 +0200

      mac80211: remove last_beacon/ave_beacon debugfs files

      These file aren't really useful:
       - if per beacon data is required then you need to use
         radiotap or similar anyway, debugfs won't help much
       - average beacon signal is reported in station info in
         nl80211 and can be looked up with iw

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit c85fb53c4fa6521352028c40ce096a808aabd389
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Thu Aug 27 09:00:18 2015 -0400

      mac80211: implement VHT support for mesh

      Implement the basics required for supporting very high throughput
      with mesh: include VHT information elements in beacons, probe
      responses, and peering action frames, and check for compatible VHT
      configurations when peering.

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit f020ae40b0c969d3fd3b320d0a05e62d5553ff72
  Author: Chun-Yeow Yeoh <yeohchunyeow@xxxxxxxxx>
  Date:   Fri Sep 4 10:58:05 2015 +0800

      mac80211: zero center freq segment 2 in VHT oper IE

      Clear the Channel Center Frequency Segment 2 in VHT operation
      IEs to avoid sending non-zero values if the SKB wasn't zeroed
      before adding the VHT operation IE.

      Signed-off-by: Chun-Yeow Yeoh <yeohchunyeow@xxxxxxxxx>
      [change commit message a bit - not necessarily just mesh related]
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 99e7ca44bb910f0cbfda5d9008e8517df0ebc939
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Sat Aug 15 22:39:51 2015 +0300

      mac80211: allow the driver to advertise A-MSDU within A-MPDU Rx support

      Drivers may be interested in receiving A-MSDU within A-MDPU.
      Not all the devices may be able to do so, make it configurable.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 46cad4b7a131a215159d889fa88d0dc71d581908
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Sat Aug 15 22:39:54 2015 +0300

      mac80211: remove direct probe step before authentication

      The direct probe step before authentication was done mostly for
      two reasons:
       1) the BSS data could be stale
       2) the beacon might not have included all IEs

      The concern (1) doesn't really seem to be relevant any more as
      we time out BSS information after about 30 seconds, and in fact
      the original patch only did the direct probe if the data was
      older than the BSS timeout to begin with. This condition got
      (likely inadvertedly) removed later though.

      Analysing this in more detail shows that since we mostly use
      data from the association response, the only real reason for
      needing the probe response was that the code validates the WMM
      parameters, and those are optional in beacons. As the previous
      patches removed that behaviour, we can now remove the direct
      probe step entirely.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit e3abc8ff0fc18b3925fd5d5c5fbd1613856f4e7c
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Sun Aug 16 11:13:22 2015 +0300

      mac80211: allow to transmit A-MSDU within A-MPDU

      Advertise the capability to send A-MSDU within A-MPDU
      in the AddBA request sent by mac80211. Let the driver
      know about the peer's capabilities.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 1b09b5568e5f46c6dfb781d7c1dfad431a6d8ec1
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sat Aug 15 22:39:50 2015 +0300

      mac80211: introduce per vif frame registration API

      Currently the cfg80211's frame registration api receives wdev, however
      mac80211 assumes per device filter configuration and ignores wdev.
      Per device filtering is too wasteful, especially for multi-channel
      devices.
      Introduce new per vif frame registration API and use it for probe
      request registrations in ieee80211_mgmt_frame_register()
      Also call directly to ieee80211_configure_filter instead of using a work
      since it is now allowed to sleep in ieee80211_mgmt_frame_register.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 7bdbe400d1b2aac116513f90b75969ad2365fba6
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Sat Aug 15 22:39:49 2015 +0300

      nl80211: support vendor dumpit commands

      In order to transfer many items in vendor commands, support the
      dumpit netlink method for them.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit dd55ab59b6234c73522dc533757e89e6a77c2c38
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sat Aug 15 22:39:48 2015 +0300

      mac80211: TDLS: check reg with IR-relax on chandef upgrade

      When checking if a TDLS chandef can be upgraded, IR-relaxation can be
      taken into account to allow more channels.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 82c0cc90d6268a3cd3ee058257d2146188326452
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sat Aug 15 22:39:46 2015 +0300

      mac80211: debugfs: add file to disallow TDLS wider-bw

      Sometimes we are interested in testing TDLS performance in a specific
      width setting. Add the ability to disable the wider-band feature, thereby
      allowing the TDLS channel width to be controlled by the BSS width.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit fc58c47ef1ace65c5c1c94f2e96578e7b04aad64
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sat Aug 15 22:04:01 2015 +0300

      mac80211: process skb_queue while scanning in HW

      Queued frames aren't processed during scan, which results in an inability
      to complete the BA session establishment until the scan ends. Since we
      can't tx frames until the BA agreement setup is complete, it might result
      in a very large latency during scan.
      Fix this by allowing to process queued skbs while scanning in HW. This
      should be ok since the devices which support hw scan should be able
      to handle tx/rx while scanning.
      During SW scan, mac80211 drops any txed frames besides probes and NDPs,
      so it is still needed to delay processing of the queued frames till the
      SW scan is done.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 8de1c63ba1ccfa8225505e60b405537c2c72673c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 21 14:13:06 2015 +0200

      wireless: make __freq_reg_info static

      As pointed out by sparse, this symbol should be static, make it so.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 2df1b131b54f431877a6665139dac805ba5ce1a5
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Aug 21 14:07:13 2015 +0200

      mac80211: fix VHT MCS mask array overrun

      The HT MCS mask has 9 bytes, the VHT one only has 8 streams.
      Split the loops to handle this correctly.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 571af55a31d3652ac1f758f116835a76d0335661
  Author: Zhen Lei <thunder.leizhen@xxxxxxxxxx>
  Date:   Tue Aug 25 14:42:53 2015 +0800

      time: Fix spelling in comments

      Signed-off-by: Zhen Lei <thunder.leizhen@xxxxxxxxxx>
      Cc: Hanjun Guo <guohanjun@xxxxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tianhong Ding <dingtianhong@xxxxxxxxxx>
      Cc: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Cc: Xinwei Hu <huxinwei@xxxxxxxxxx>
      Cc: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1440484973-13892-1-git-send-email-thunder.leizhen@xxxxxxxxxx
      [ Fixed yet another typo in one of the sentences fixed. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit afbbd23381767aec5717ce07736f3a165ef724cd
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Mon Sep 14 22:06:44 2015 +0200

      irqchip/gic: Document optional Clock and Power Domain properties

      Depending on the GIC variant, the GIC module has one or more clock
      inputs. Document the optional "clocks" and "clock-names" properties,
      and their possible values, based on the Technical Reference Manuals.
      optional.

      Add the optional "power-domains" property.

      This will allow to describe in DT the relationship between the GIC and
      the Clock and/or Power Domain topology on SoCs where this is relevant
      and needed for proper operation.

      Note: As the current GIC driver doesn't support Runtime PM yet, PM
      Domain constraints must be handled elsewhere in e.g. platform code.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442261204-30931-3-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 8709b9eb37f07193e39ae4f8f8cb59aaed9eae2e
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Mon Sep 14 22:06:43 2015 +0200

      irqchip/gic: Add arm,pl390 support

      Add support for the PrimeCell® Generic Interrupt Controller (PL390) to
      the GIC DT bindings and driver.

      Currently the GIC driver treats this GIC variant the same as other GIC
      variants, but there are differences in hardware topology (e.g. clock
      inputs).

      Sort the list of compatible values while we're at it.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442261204-30931-2-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 2a1d3ab8986d1b2f598ffc42351d94166fa0f022
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 11:01:10 2015 +0200

      genirq: Handle force threading of irqs with primary and thread handler

      Force threading of interrupts does not really deal with interrupts
      which are requested with a primary and a threaded handler. The current
      policy is to leave them alone and let the primary handler run in
      interrupt context, but we set the ONESHOT flag for those interrupts as
      well.

      Kohji Okuno debugged a problem with the SDHCI driver where the
      interrupt thread waits for a hardware interrupt to trigger, which can't
      work well because the hardware interrupt is masked due to the ONESHOT
      flag being set. He proposed to set the ONESHOT flag only if the
      interrupt does not provide a thread handler.

      Though that does not work either because these interrupts can be
      shared. So the other interrupt would rightfully get the ONESHOT flag
      set and therefor the same situation would happen again.

      To deal with this proper, we need to force thread the primary handler
      of such interrupts as well. That means that the primary interrupt
      handler is treated as any other primary interrupt handler which is not
      marked IRQF_NO_THREAD. The threaded handler becomes a separate thread
      so the SDHCI flow logic can be handled gracefully.

      The same issue was reported against 4.1-rt.

      Reported-and-tested-by: Kohji Okuno <okuno.kohji@xxxxxxxxxxxxxxxx>
      Reported-By: Michal Smucr <msmucr@xxxxxxxxx>
      Reported-and-tested-by: Nathan Sullivan <nathan.sullivan@xxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/alpine.DEB.2.11.1509211058080.5606@nanos
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7ac8bf9bc9ba82aea763ef30671a34c6a2a39922
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Sep 22 11:56:04 2015 +0200

      EDAC: Carve out debugfs functionality

      ... into a separate compilation unit and drop a couple of
      CONFIG_EDAC_DEBUG ifdefferies. Rename edac_create_debug_nodes() to
      edac_create_debugfs_nodes(), while at it.

      No functionality change.

      Cc: <linux-edac@xxxxxxxxxxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit f0ef67485f5918794143b7a85d60c1a52bc690ec
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Mon Sep 21 03:06:42 2015 -0700

      Bluetooth: btmrvl: add sd8997 chipset support

      This patch adds support for Marvell's new chipset SD8997.
      Register offsets and supported feature flags are updated.

      Signed-off-by: Zhaoyang Liu <liuzy@xxxxxxxxxxx>
      Signed-off-by: Cathy Luo <cluo@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 53d6cfa581405d0aa47a5b9ceb027bc157fddebc
  Author: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
  Date:   Mon Sep 21 03:06:41 2015 -0700

      Bluetooth: btmrvl: remove extra space in cast

      Coding style fix, extra spaces are removed to make casting
      consistent.

      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 7d840545e5b933028e7423b127459d0d5e5e04fb
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:43 2015 +0200

      mrf24j40: replace magic numbers

      This patch replaces some magic numbers with defines for register bits,
      mask and shifts.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit afaf7fdedb6cc484b4eccf48227632c7d81dcf5a
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:42 2015 +0200

      mrf24j40: change irq trigger type behaviour

      This patch changes the irq trigger type value while calling
      devm_request_irq by using IRQF_TRIGGER_LOW when no irq type was given.
      Additional we add support for change the irq polarity while hw init if
      high level or low level triggered irq type are given.

      For rising edge triggered irq's the mrf24j40 can't deal with that, this
      races at position of tx completion irq, while the irq is disabled we
      readout the irq status registers. This will resets the irq line so other
      irq's can occur. Wile readout the irq status register the irq is still
      disabled and edge triggered interrupts will be ignored.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 8ba40417401ce771769d847900f08c978bb61632
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:41 2015 +0200

      mrf24j40: add promiscuous mode support

      This patch adds support for promiscuous mode by setting promiscuous (no
      frame filtering), disable automatic ack handling and not filtering
      frames where the crc is invalid.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 00250f78896bc52fd4606c4de7e3fb174e702123
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:40 2015 +0200

      mrf24j40: add tx power support

      This patch supports setting of transmit power for the mrf24j40ma
      transceiver only. The mrf24j40mc has some amplifier to change the
      transmit power, I am currently not sure how the mapping for this
      amplifier looks like.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e33a0f96ac518d4c7ffcf98d2f030e6e23fab6b3
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:39 2015 +0200

      mrf24j40: add cca ed level support

      This patch supports handling to set the cca energy detection level for
      the mrf24j40 transceiver.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f1d781272231dc4d1cdfdce13ad3e6f3f96b7ec0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:38 2015 +0200

      mrf24j40: add cca mode support

      This patch supports cca mode handling for mrf24j40.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 2323cf38f949439bc4ac4252cf1d91d1297cce92
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:37 2015 +0200

      mrf24j40: add csma params support

      This patch adds supports to change the CSMA parameters. The datasheet
      doesn't say anything about max_be value. Seems not configurable and we
      assume the 802.15.4 default. But this value must exists because there is
      a min_be value.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 374416112bb0f83c5b4d8bb3fbb157fbe0b2814b
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:36 2015 +0200

      mrf24j40: async interrupt handling

      This patch removes the threaded irq handling and do a hardirq instead.
      We need to switch to spi_async for this step for getting the irq status
      register.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c91a301162899ee100c1eab397958cb9aef50d0c
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:35 2015 +0200

      mrf24j40: rework rx handling to async rx handling

      This patch prepares that we can do the receive handling inside interrupt
      context by using spi_async. This is necessary for introduce a
      non-threaded irq handling.

      Also we drop the bit setting for "RXDECINV" at register "BBREG1", we do
      a driectly full write of register "BBREG1", because it contains the bit
      RXDECINV only.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6844a0e4debd67c9bcf6a8fed3c7f9c24413c349
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:34 2015 +0200

      mrf24j40: rework tx handling to async tx handling

      This patch reworks the current transmit API to spi_async handling. We
      removed the error handling check, because mac802154 has no chance to
      report it. Also the transmit timeout handling can't be handled by xmit
      async handling, for this usecase we need to implement the netdev
      watchdog. These are all unlikely cases which we drop now and should be
      provided by netdev watchdog.

      We also drop the bit setting for TXNACKREQ at register TXNCON, this is
      not necessary. The TXNCON register should set only once for each frame,
      previous settings doesn't matter.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 79750ac4257763ff595a8b2cdc7ba580f0b0c8e0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:33 2015 +0200

      ieee802154: add helpers for frame control checks

      This patch introduce two static inline functions. The first to get the
      frame control field from an sk_buff. The second is for checking on the
      acknowledgment request bit on the frame control field. Later we can
      introduce more functions to check on the frame control fields.

      These will deprecate the current behaviour which requires a
      host-byteorder conversion and manually bit handling.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ab40ff7508d2f54ed03b99523493c46250649c52
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:32 2015 +0200

      mrf24j40: change to frame delivery with crc

      This patch changes the frame delivery to mac802154 with crc. This is
      useful for monitor interface types which deliver the crc to userspace.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 42c7148e06661ae0ca1bb511e1b98878b5f522f8
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:31 2015 +0200

      mrf24j40: use regmap for register access

      This patch uses the regmap functions for transceiver register settings
      where it's possible. This means everything except the hotpaths like
      receive/transmit handling.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b0156792001b7a19bc115dcc32aebb9b9a0b6a01
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:30 2015 +0200

      mrf24j40: add regmap support

      This patch introduce regmap support for short and long address space of
      mrf24j40. It's only possible to use regmap_read/write/update_bits for
      long address range. This is because I added lowlevel bus operation
      because the write operation need to set the 12th bit to mark a register
      write, but regmap only supports to set bits for register write access in
      the first byte. We use other regmap register functions than
      read/write/update_bits, so this should be fine.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 554b49493b89b068643b7360334b40d5f5ca8ff2
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:29 2015 +0200

      mrf24j40: add more register defines

      For supporting regmap, this patch will add more register defines to
      prepare a full register dump by regmap debugfs.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit d344c91280326469e5f9c5a3b1b92ef0d1c5d25f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:28 2015 +0200

      mrf24j40: add random extended addr generation

      The mrf24j40 has no source to get a permanent extended address. This
      patch will add a random generated permanent extended address source.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 766928fbf8c989f65184c3ed0d48fd3004213c46
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:27 2015 +0200

      mrf24j40: add default channel setting

      Per default mrf24j40 has the channel 11 after reset. This patch adds the
      right phy default value for the channel setting.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 2e6fd648b6b87e6a2289c875c6067acc3bd88b3e
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:26 2015 +0200

      mrf24j40: add device-tree support

      This patch adds devicetree support to mrf24j40 with proper devicetree
      compatible strings.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 78aedb6bfa43f43dacd8fc7b06452a87d33e3886
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:25 2015 +0200

      mrf24j40: remove spi settings overwrite

      This patch removes spi settings while mrf24j40 probing. These settings
      cannot be overwrite while device probing where spi controller should be
      already configured. These settings need to be setup by device tree or
      platform data.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a339e1849b9504b6e9631777e41ea2a240e58621
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:24 2015 +0200

      mrf24j40: calling ieee802154_register_hw at last

      The function ieee802154_register_hw should always called at last.
      Currently we do hardware init and such things after register hardware
      into the subsystem. It could be that the subsystem already call driver
      operations while running hardware init.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b2cfdf3c6720b9b77758ef229401f28f48c3372b
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:23 2015 +0200

      mrf24j40: use ieee802154_alloc_hw for private data

      This patch removes the own private dataroom allocation by calling
      devm_kzalloc for devrec and assign this pointer to "devrec->hw->priv".
      Instead we using like all other drivers ieee802154_alloc_hw and give the
      size for the private driver dataroom at the first argument.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c9f883f6fe66ff08ea968494709f4c0b28bc619a
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 11:24:22 2015 +0200

      mrf24j40: cleanup define identation

      This patch replaces the spaces after define by a tab.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 57c1bc7ea8a4857070722c23ce98e01f256c9306
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Mon Sep 21 09:37:54 2015 +0200

      at86rf230: support edge triggered irq

      This patch adds support for edge triggered irq types. We remove the
      locking for irq resources by enable/disable irq and allocate directly
      some heap buffer at isr. We have still a enable/disable irq path but
      this is for level-triggered irq's which need to be disabled until
      spi_async clear the irq line.

      There is usually a little race condition between "irq line cleared" and
      "enable_irq". When in this time a edge triggered irq arrived, we will
      not recognize this interrupt. This case can't happend at at86rf230. The
      reason is that we unmask TRX_END irq's only which indicates a transmit
      or receive completion, which depends on the current state.

      On Transmit:

      TRX_END arrived and transceiver is in TX_ARET_ON state again, in this
      state no other TRX_END can happen until we leave the state.

      On Receive:

      This is protected with the RX_SAFE_MODE bit which leaves the transceiver
      in RX_AACK_BUSY until we readed the framebuffer. In this state no other
      TRX_END can happen.

      Tested with RPi where I first detected issues between edge/level irq's.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 02c7b6922899621aa8e8babe27fca7b6b2e497b0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:44 2015 +0200

      mac802154: tx: add warning if MTU exceeds

      Sending over AF_PACKET RAW sockets we can sending frames which exceeds
      MTU size. To handling it correct we need to change things in AF_PACKET
      which knows on RAW sockets an additional FCS is set by hardware or
      mac802154 transmit functionality.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 87a93e4eceb495f93e3f37b100334d2641765b6c
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:43 2015 +0200

      ieee802154: change needed headroom/tailroom

      This patch cleanups needed_headroom, needed_tailroom and hard_header_len
      fields for wpan and lowpan interfaces.

      For wpan interfaces the worst case mac header len should be part of
      needed_headroom, currently this is set as hard_header_len, but
      hard_header_len should be set to the minimum header length which xmit
      call assumes and this is the minimum frame length of 802.15.4.
      The hard_header_len value will check inside send callbacl of AF_PACKET
      raw sockets.

      For lowpan interfaces, if fragmentation isn't needed the skb will
      call dev_hard_header for 802154 layer and queue it afterwards. This
      happens without new skb allocation, so we need the same headroom and
      tailroom lengths like 802154 inside 802154 6lowpan layer. At least we
      assume as minimum header length an ipv6 header size.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 838b83d63d2909f9136f3030dc4fffa8230c31da
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:42 2015 +0200

      ieee802154: introduce wpan_dev_header_ops

      The current header_ops callback structure of net device are used mostly
      from 802.15.4 upper-layers. Because this callback structure is a very
      generic one, which is also used by e.g. DGRAM AF_PACKET sockets, we
      can't make this callback structure 802.15.4 specific which is currently
      is.

      I saw the smallest "constraint" for calling this callback with
      dev_hard_header/dev_parse_header by AF_PACKET which assign a 8 byte
      array for address void pointers. Currently 802.15.4 specific protocols
      like af802154 and 6LoWPAN will assign the "struct ieee802154_addr" as
      these parameters which is greater than 8 bytes. The current callback
      implementation for header_ops.create assumes always a complete
      "struct ieee802154_addr" which AF_PACKET can't never handled and is
      greater than 8 bytes.

      For that reason we introduce now a "generic" create/parse header_ops
      callback which allows handling with intra-pan extended addresses only.
      This allows a small use-case with AF_PACKET to send "somehow" a valid
      dataframe over DGRAM.

      To keeping the current dev_hard_header behaviour we introduce a similar
      callback structure "wpan_dev_header_ops" which contains 802.15.4 specific
      upper-layer header creation functionality, which can be called by
      wpan_dev_hard_header.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a1da67b8117ddbe88c770b48b5b1527393b8c9c0
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:41 2015 +0200

      ieee802154: header_ops: fix frame control setting

      Sometimes upper-layer protocols wants to generate a new mac header by
      filling "struct ieee802154_hdr" only. These upper-layers sets for the
      address settings the source and dest fields, but not the fc fields for
      indicate the source and dest address mode. This patch changes the
      "ieee802154_hdr_push" function so the fc address fields are set
      according the source and dest fields of "struct ieee802154_hdr".

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit cdd38b219eec2e1b83c0a02d89d372f9656648eb
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Fri Sep 18 11:30:40 2015 +0200

      mac802154: llsec: fix device deletion from list

      This patch adds a missing list_del when a device description will be
      deleted.

      Cc: Phoebe Buckheister <phoebe.buckheister@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 475b9eacc5543eea922431bb8ac4ec761de0e415
  Author: Nachiket Kukade <kukaden@xxxxxxxxxxx>
  Date:   Fri Sep 18 06:40:40 2015 -0700

      Bluetooth: btmrvl: fix firmware dump issue

      First firmware dump attempt from user works fine, but firmware goes
      into bad state after this. Subsequent attempts fails.

      As required by the firmware dump implementation, this change writes
      FW_DUMP_READ_DONE value to dump ctrl register to address this issue.

      Signed-off-by: Nachiket Kukade <kukaden@xxxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6ff0966052c46efb53980b8a1add2e7b49c9f560
  Author: Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
  Date:   Sun Sep 13 03:25:26 2015 +0100

      ARM: 8432/1: move VMALLOC_END from 0xff000000 to 0xff800000

      There is a 12MB unused region in our memory map between the vmalloc and
      fixmap areas. This became unused with commit e9da6e9905e6, confirmed
      with commit 64d3b6a3f480.

      We also have a 8MB guard area before the vmalloc area.  With the default
      240MB vmalloc area size and the current VMALLOC_END definition, that
      means the end of low memory ends up at 0xef800000 which is unfortunate
      for 768MB machines where 8MB of RAM is lost to himem.

      Let's move VMALLOC_END to 0xff800000 so the guard area won't chop the
      top of the 768MB low memory area while keeping the default vmalloc area
      size unchanged and still preserving a gap between the vmalloc and fixmap
      areas.

      Signed-off-by: Nicolas Pitre <nico@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 803e3dbcb4cf80c898faccf01875f6ff6e5e76fd
  Author: Sergey Dyasly <dserrg@xxxxxxxxx>
  Date:   Wed Sep 9 16:27:18 2015 +0100

      ARM: 8430/1: use default ioremap alignment for SMP or LPAE

      16MB alignment for ioremap mappings was added by commit a069c896d0d6 
("[ARM]
      3705/1: add supersection support to ioremap()") in order to support 
supersection
      mappings. But __arm_ioremap_pfn_caller uses section and supersection 
mappings
      only in !SMP && !LPAE case. There is no need for such big alignment if 
either
      SMP or LPAE is enabled.

      After this change, ioremap will use default maximum alignment of 128 
pages.

      Link: 
https://lkml.kernel.org/g/1419328813-2211-1-git-send-email-d.safonov@xxxxxxxxxxxxxxxxxxx

      Cc: Guan Xuetao <gxt@xxxxxxxxxxxxxxx>
      Cc: Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
      Cc: James Bottomley <JBottomley@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Arnd Bergmann <arnd.bergmann@xxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Dmitry Safonov <d.safonov@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sergey Dyasly <s.dyasly@xxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit f460b6abdeeafd30c3ee737c843be17b1ceb38e5
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Aug 26 07:49:12 2015 +0100

      ARM: 8423/1: add const qualifier to smp_operations member in structures

      The core framework does not modify smp_operations structures.
      To clarify it, this commit adds 'const' qualifier to the 'ops'
      member of struct of_cpu_method and the 'smp' member of struct
      machine_desc.

      This change allows each SoC code to add 'const' qualifier to its
      smp_operation structure.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 4caa9dda388f34f957a9eb52b9f5ef1a8c975c7b
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Aug 26 07:49:11 2015 +0100

      ARM: 8424/1: add const qualifier to the argument of smp_set_ops()

      This function just copies '*ops' to 'smp_ops', so the given
      structure '*ops' is not modified at all.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit bbeb9209515989ff47802d4e5d5702178c8e42c4
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Tue Aug 25 13:52:09 2015 +0100

      ARM: 8422/1: enable imprecise aborts during early kernel startup

      This patch adds imprecise abort enable/disable macros and uses them to
      enable imprecise aborts early when starting the kernel.

      This helps in tracking down the real cause for such imprecise abort, as
      they are handled as soon as they occur. Until now those aborts would
      only be enabled when entering the userspace and as a consequence crash
      the first userspace process if any abort had been raised during kernel
      startup.

      Signed-off-by: Fabrice Gasnier <fabrice.gasnier@xxxxxx>
      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 208473c1f3ac3eccec097021eec3890f5e20fcc7
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:13:44 2015 +0100

      ARM: wire up new syscalls

      Wire up the new userfaultfd and membarrier syscalls for ARM.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit cc8e4fc0c3b5e8340bc8358990515d116a3c274c
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:46:17 2015 +0300

      xhci: init command timeout timer earlier to avoid deleting it 
uninitialized

      Don't check if timer is running with a timer_pending() before
      deleting it with del_timer_sync(), this defies the whole point of
      the sync part and can cause a possible race.

      Instead we just want to make sure the timer is initialized early enough
      before we have a chance to delete it.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Reported-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit dca7794539eff04b786fb6907186989e5eaaa9c2
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:46:16 2015 +0300

      xhci: change xhci 1.0 only restrictions to support xhci 1.1

      Some changes between xhci 0.96 and xhci 1.0 specifications forced us to
      check the hci version in code, some of these checks were implemented as
      hci_version == 1.0, which will not work with new xhci 1.1 controllers.

      xhci 1.1 behaves similar to xhci 1.0 in these cases, so change these
      checks to hci_version >= 1.0

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 448116bfa856d3c076fa7178ed96661a008a5d45
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 17:46:15 2015 +0300

      usb: xhci: exit early in xhci_setup_device() if we're halted or dying

      During quick plug/removal of OTG adapter during dual-role testing
      it can happen that xhci_alloc_device() is called for the newly
      detected device after the DRD library has called xhci_stop to
      remove the HCD.

      If that is the case, just fail early to prevent the following warning.

      [  154.732649] hub 4-0:1.0: USB hub found
      [  154.742204] hub 4-0:1.0: 1 port detected
      [  154.824458] hub 3-0:1.0: state 7 ports 1 chg 0002 evt 0000
      [  154.854609] hub 4-0:1.0: state 7 ports 1 chg 0000 evt 0000
      [  154.944430] usb 3-1: new high-speed USB device number 2 using xhci-hcd
      [  154.951009] xhci-hcd xhci-hcd.0.auto: xhci_setup_device
      [  155.038191] xhci-hcd xhci-hcd.0.auto: remove, state 4
      [  155.043315] usb usb4: USB disconnect, device number 1
      [  155.055270] xhci-hcd xhci-hcd.0.auto: xhci_stop
      [  155.060094] xhci-hcd xhci-hcd.0.auto: USB bus 4 deregistered
      [  155.066576] xhci-hcd xhci-hcd.0.auto: remove, state 1
      [  155.071710] usb usb3: USB disconnect, device number 1
      [  155.077124] xhci-hcd xhci-hcd.0.auto: xhci_setup_device
      [  155.082389] ------------[ cut here ]------------
      [  155.087690] WARNING: CPU: 0 PID: 72 at drivers/usb/host/xhci.c:3800 
xhci_setup_device+0x410/0x484 [xhci_hcd]()
      [  155.097861] Modules linked in: sd_mod usb_storage scsi_mod usb_f_ss_lb 
g_zero libcomposite ipv6 xhci_plat_hcd xhci_hcd usbcore dwc3 udc_core evdev 
ti_am335x_adc joydev kfifo_buf industrialio snd_soc_simple_cc
      [  155.146734] CPU: 0 PID: 72 Comm: kworker/0:3 Tainted: G        W       
4.1.4-00834-gcd9380b-dirty #50
      [  155.156073] Hardware name: Generic AM43 (Flattened Device Tree)
      [  155.162117] Workqueue: usb_hub_wq hub_event [usbcore]
      [  155.167249] Backtrace:
      [  155.169751] [<c0012af0>] (dump_backtrace) from [<c0012c8c>] 
(show_stack+0x18/0x1c)
      [  155.177390]  r6:c089d4a4 r5:ffffffff r4:00000000 r3:ee46c000
      [  155.183137] [<c0012c74>] (show_stack) from [<c05f7c14>] 
(dump_stack+0x84/0xd0)
      [  155.190446] [<c05f7b90>] (dump_stack) from [<c00439ac>] 
(warn_slowpath_common+0x80/0xbc)
      [  155.198605]  r7:00000009 r6:00000ed8 r5:bf27eb70 r4:00000000
      [  155.204348] [<c004392c>] (warn_slowpath_common) from [<c0043a0c>] 
(warn_slowpath_null+0x24/0x2c)
      [  155.213202]  r8:ee49f000 r7:ee7c0004 r6:00000000 r5:ee7c0158 
r4:ee7c0000
      [  155.220051] [<c00439e8>] (warn_slowpath_null) from [<bf27eb70>] 
(xhci_setup_device+0x410/0x484 [xhci_hcd])
      [  155.229816] [<bf27e760>] (xhci_setup_device [xhci_hcd]) from 
[<bf27ec10>] (xhci_address_device+0x14/0x18 [xhci_hcd])
      [  155.240415]  r10:ee598200 r9:00000001 r8:00000002 r7:00000001 
r6:00000003 r5:00000002
      [  155.248363]  r4:ee49f000
      [  155.250978] [<bf27ebfc>] (xhci_address_device [xhci_hcd]) from 
[<bf20cb94>] (hub_port_init+0x1b8/0xa9c [usbcore])
      [  155.261403] [<bf20c9dc>] (hub_port_init [usbcore]) from [<bf2101e0>] 
(hub_event+0x738/0x1020 [usbcore])
      [  155.270874]  r10:ee598200 r9:ee7c0000 r8:ee7c0038 r7:ee518800 
r6:ee49f000 r5:00000001
      [  155.278822]  r4:00000000
      [  155.281426] [<bf20faa8>] (hub_event [usbcore]) from [<c005754c>] 
(process_one_work+0x128/0x340)
      [  155.290196]  r10:00000000 r9:00000003 r8:00000000 r7:fedfa000 
r6:eeec5400 r5:ee598314
      [  155.298151]  r4:ee434380
      [  155.300718] [<c0057424>] (process_one_work) from [<c00578f8>] 
(worker_thread+0x158/0x49c)
      [  155.308963]  r10:ee434380 r9:00000003 r8:eeec5400 r7:00000008 
r6:ee434398 r5:eeec5400
      [  155.316913]  r4:eeec5414
      [  155.319482] [<c00577a0>] (worker_thread) from [<c005cc40>] 
(kthread+0xdc/0xf8)
      [  155.326765]  r10:00000000 r9:00000000 r8:00000000 r7:c00577a0 
r6:ee434380 r5:ee4441c0
      [  155.334713]  r4:00000000 r3:00000000
      [  155.338341] [<c005cb64>] (kthread) from [<c000fc08>] 
(ret_from_fork+0x14/0x2c)
      [  155.345626]  r7:00000000 r6:00000000 r5:c005cb64 r4:ee4441c0
      [  155.356108] ---[ end trace a58d34c223b190e6 ]---
      [  155.360783] xhci-hcd xhci-hcd.0.auto: Virt dev invalid for slot_id 0x1!
      [  155.574404] xhci-hcd xhci-hcd.0.auto: xhci_setup_device
      [  155.579667] ------------[ cut here ]------------

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 8c24d6d7b09deee3036ddc4f2b81b53b28c8f877
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 17:46:14 2015 +0300

      usb: xhci: stop everything on the first call to xhci_stop

      xhci_stop will be called twice, once for the shared hcd
      and again for the primary hcd.

      We stop the XHCI controller in any case so clean up
      everything on the first call else we can timeout
      waiting for pending requests to complete.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit e5bfeab0ad515b4f6df39fe716603e9dc6d3dfd0
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 17:46:13 2015 +0300

      usb: xhci: Clear XHCI_STATE_DYING on start

      For whatever reason if XHCI died in the previous instant
      then it will never recover on the next xhci_start unless we
      clear the DYING flag.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 85ac90f8953a58f6a057b727bc9db97721e3fb8e
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 17:46:12 2015 +0300

      usb: xhci: lock mutex on xhci_stop

      Else it races with xhci_setup_device

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 2b7627b73e81e5d23d5ae1490fe8e690af86e053
  Author: Tomer Barletz <barletz@xxxxxxxxx>
  Date:   Mon Sep 21 17:46:11 2015 +0300

      xhci: Move xhci_pme_quirk() behind #ifdef CONFIG_PM

      xhci_pme_quirk() is only used when CONFIG_PM is defined.
      Compiling a kernel without PM complains about this function

      [reworded commit message -Mathias]
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Tomer Barletz <barletz@xxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit a6809ffd1687b3a8c192960e69add559b9d32649
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:46:10 2015 +0300

      xhci: give command abortion one more chance before killing xhci

      We want to give the command abortion an additional try to stop
      the command ring before we completely hose xhci.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Tested-by: Vincent Pelletier <plr.vincent@xxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit ff30cbc8da425754e8ab96904db1d295bd034f27
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:46:09 2015 +0300

      usb: Use the USB_SS_MULT() macro to get the burst multiplier.

      Bits 1:0 of the bmAttributes are used for the burst multiplier.
      The rest of the bits used to be reserved (zero), but USB3.1 takes bit 7
      into use.

      Use the existing USB_SS_MULT() macro instead to make sure the mult value
      and hence max packet calculations are correct for USB3.1 devices.

      Note that burst multiplier in bmAttributes is zero based and that
      the USB_SS_MULT() macro adds one.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 01f4fd2a4f741057aaa5ba5ac3b09a42c9ada028
  Merge: ea93465 a66c275b
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 22:21:31 2015 -0700

      Merge tag 'fixes-for-v4.3-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-linus

      Felipe writes:

      usb: fixes for v4.3-rc3

      Here's the second pull request for current -rc cycle.

      A few fixes on dummy_hcd which have been around for
      longer than they should be.

      MUSB got a couple fixes, the most important of which
      is a fix to DMA channel teardown on AM335x devices.

      And DWC3 got a minor fix for when using RT-enabled
      kernels.

  commit 97170ea1823bf00cf6ed0f503129e9053a66c53a
  Author: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 20:41:44 2015 -0700

      drivers/net/ieee802154/at86rf230.c: seq_printf() now returns NULL

      Signed-off-by: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Cc: Alexander Aring <alex.aring@xxxxxxxxx>
      Cc: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Cc: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bcee19f424a0d8c26ecf2607b73c690802658b29
  Merge: ac2fc4b 0c98625
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 18:26:54 2015 -0700

      Merge branch 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup

      Pull cgroup fixes from Tejun Heo:
       "The threadgroup locking changes which went in during 4.2 devel cycle
        added write locking of a percpu_rwsem in cgroup task migration path;
        unfortunately, that involved expedited rcu syncing which turned out to
        be too slow and heavy for certain workloads.  The patchset which is
        dependent on this one didn't get committed during that devel cycle, so
        these two patches can be reverted safely.

        Oleg reworked percpu_rwsem for 4.4 so that the writer path is a lot
        lighter.  The reported issue goes away with Oleg's reworked
        percpu_rwsem and I'll reapply these patches on the for-4.4 branch so
        that they can land together with Oleg's changes"

      * 'for-4.3-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup:
        Revert "sched, cgroup: replace signal_struct->group_rwsem with a global 
percpu_rwsem"
        Revert "cgroup: simplify threadgroup locking"

  commit 35736c8165ba666b1a5f07a57f838d8ce1ac3c67
  Merge: 607cba1 cec4284
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:21:47 2015 -0700

      Merge branch 'cpsw-macid-no-of'

      Mugunthan V N says:

      ====================
      Add support for reading macid when DT macid not found

      Did a boot test on dra7-evm [1] and am437x-gp-evm [2].
      Pushed a branch [3] for others to test the patch.

      [1]: http://pastebin.ubuntu.com/12513420/
      [2]: http://pastebin.ubuntu.com/12513428/
      [3]: git://git.ti.com/~mugunthanvnm/ti-linux-kernel/linux.git 
cpsw-macid-read-support
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cec42849162c79a2677d7ec29c20e72fb9ca5666
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 21 15:56:53 2015 +0530

      arm: dts: am4372: add syscon phandle to cpsw node

      There are 2 MACIDs stored in the control module of the am4372.
      These are read by the cpsw driver if no valid MACID was found
      in the devicetree.

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a084e13e795aca7c18f39304c0c76579b4364655
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 21 15:56:52 2015 +0530

      arm: dts: dra7: add syscon phandle to cpsw node

      There are 2 MACIDs stored in the control module of the dra7.
      These are read by the cpsw driver if no valid MACID was found
      in the devicetree.

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d230a11abc97e118365b12a472ff758d867c4bac
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 21 15:56:51 2015 +0530

      drivers: net: cpsw-common: add support for reading mac address for dra7 
and am437x platforms

      Adding support for reading mac address using syscon driver for
      dra7 and am437x platforms

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b6745f6e4e63f23fd5bf46ea2745783be13a0960
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 21 15:56:50 2015 +0530

      drivers: net: cpsw: davinci_emac: move reading mac id to common file

      Moving mac address reading from ethernet driver to common
      file for better maintenance and for code reusable.

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 607cba1554cbdfd8d9f4a645f235e1dc909ba33f
  Merge: 852bcaf 6fa7da2
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 17:15:03 2015 -0700

      Merge tag 'linux-can-next-for-4.4-20150921' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next

      Marc Kleine-Budde says:

      ====================
      pull-request: can-next 2015-09-17

      this is a pull request of 8 patches for net-next/master.

      All 8 patches are by me and cleanup the flexcan driver.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e375ccda31ccc73b087134e263c48d2114534f4
  Author: Boris BREZILLON <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 18:14:43 2015 +0200

      mtd: nand: sunxi: fix sunxi_nand_chips_cleanup()

      The sunxi_nand_chips_cleanup() function is missing a call to list_del()
      which generates a double free error.

      Reported-by: Priit Laes <plaes@xxxxxxxxx>
      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.19+
      Fixes: 1fef62c1423b ("mtd: nand: add sunxi NAND flash controller support")
      Tested-by: Priit Laes <plaes@xxxxxxxxx>
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>

  commit 29c6852602e259d2c1882f320b29d5c3fec0de04
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sat Sep 19 09:48:04 2015 -0700

      inet: fix races in reqsk_queue_hash_req()

      Before allowing lockless LISTEN processing, we need to make
      sure to arm the SYN_RECV timer before the req socket is visible
      in hash tables.

      Also, req->rsk_hash should be written before we set rsk_refcnt
      to a non zero value.

      Fixes: fa76ce7328b2 ("inet: get rid of central tcp/dccp listener timer")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Ying Cai <ycai@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ed2e923945892a8372ab70d2f61d364b0b6d9054
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sat Sep 19 09:08:34 2015 -0700

      tcp/dccp: fix timewait races in timer handling

      When creating a timewait socket, we need to arm the timer before
      allowing other cpus to find it. The signal allowing cpus to find
      the socket is setting tw_refcnt to non zero value.

      As we set tw_refcnt in __inet_twsk_hashdance(), we therefore need to
      call inet_twsk_schedule() first.

      This also means we need to remove tw_refcnt changes from
      inet_twsk_schedule() and let the caller handle it.

      Note that because we use mod_timer_pinned(), we have the guarantee
      the timer wont expire before we set tw_refcnt as we run in BH context.

      To make things more readable I introduced inet_twsk_reschedule() helper.

      When rearming the timer, we can use mod_timer_pending() to make sure
      we do not rearm a canceled timer.

      Note: This bug can possibly trigger if packets of a flow can hit
      multiple cpus. This does not normally happen, unless flow steering
      is broken somehow. This explains this bug was spotted ~5 months after
      its introduction.

      A similar fix is needed for SYN_RECV sockets in reqsk_queue_hash_req(),
      but will be provided in a separate patch for proper tracking.

      Fixes: 789f558cfb36 ("tcp/dccp: get rid of central timewait timer")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Ying Cai <ycai@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c5d283acc997a1bd7bc37cddcf7d284521cffff
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Fri Sep 18 17:47:55 2015 -0400

      sunvnet: Invoke SET_NETDEV_DEV() to set up the vdev in vnet_new()

      `ls /sys/devices/channel-devices/vnet-port-0-0/net' is missing without
      this change, and applications like NetworkManager are looking in
      sysfs for the information.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 852bcafb99247abb3a2876625a3adf684c42e015
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Fri Sep 18 14:16:53 2015 -0700

      net: bcmgenet: Remove duplicate test for tx_coalesce_usecs_high

      We were checking twice for ec->tx_coalesce_usecs_high, remove the
      duplicate test.

      Reported-by: Julia Lawall <julia.lawall@xxxxxxx>
      Reported-by: kbuild-all@xxxxxx
      Fixes: 2f9130709d2c19 ("net: bcmgenet: Implement TX coalescing control 
knobs")
      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5eb8f289ac3020a9abad1c3c532ceca83284b6ed
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 16:20:32 2015 -0400

      geneve: remove vlan-related feature assignment

      The code handling vlan tag insertion was dropped in commit 371bd1061d29
      ("geneve: Consolidate Geneve functionality in single module.").  Now we
      need to drop the related vlan feature bits in the netdev structure.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9b9958229638245b5709f27c76c199a465f1496
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Sep 18 11:40:33 2015 -0700

      tcp: send loss probe after 1s if no RTT available

      This patch makes TLP to use 1 sec timer by default when RTT is
      not available due to SYN/ACK retransmission or SYN cookies.

      Prior to this change, the lack of RTT prevents TLP so the first
      data packets sent can only be recovered by fast recovery or RTO.
      If the fast recovery fails to trigger the RTO is 3 second when
      SYN/ACK is retransmitted. With this patch we can trigger fast
      recovery in 1sec instead.

      Note that we need to check Fast Open more properly. A Fast Open
      connection could be (accepted then) closed before it receives
      the final ACK of 3WHS so the state is FIN_WAIT_1. Without the
      new check, TLP will retransmit FIN instead of SYN/ACK.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Nandita Dukkipati <nanditad@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f1c28ae74bb1a34d36fca2db5161611d58b3148
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Sep 18 11:36:14 2015 -0700

      tcp: usec resolution SYN/ACK RTT

      Currently SYN/ACK RTT is measured in jiffies. For LAN the SYN/ACK
      RTT is often measured as 0ms or sometimes 1ms, which would affect
      RTT estimation and min RTT samping used by some congestion control.

      This patch improves SYN/ACK RTT to be usec resolution if platform
      supports it. While the timestamping of SYN/ACK is done in request
      sock, the RTT measurement is carefully arranged to avoid storing
      another u64 timestamp in tcp_sock.

      For regular handshake w/o SYNACK retransmission, the RTT is sampled
      right after the child socket is created and right before the request
      sock is released (tcp_check_req() in tcp_minisocks.c)

      For Fast Open the child socket is already created when SYN/ACK was
      sent, the RTT is sampled in tcp_rcv_state_process() after processing
      the final ACK an right before the request socket is released.

      If the SYN/ACK was retransmistted or SYN-cookie was used, we rely
      on TCP timestamps to measure the RTT. The sample is taken at the
      same place in tcp_rcv_state_process() after the timestamp values
      are validated in tcp_validate_incoming(). Note that we do not store
      TS echo value in request_sock for SYN-cookies, because the value
      is already stored in tp->rx_opt used by tcp_ack_update_rtt().

      One side benefit is that the RTT measurement now happens before
      initializing congestion control (of the passive side). Therefore
      the congestion control can use the SYN/ACK RTT.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4a476bd6d1d923922ec950ddc4c27b279f6901eb
  Author: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 02:25:38 2015 -0700

      usbnet: New driver for QinHeng CH9200 devices

      There's a bunch of cheap USB 10/100 devices based on QinHeng chipsets. The
      vendor driver supports the CH9100 and CH9200 devices, but the majority of
      the code is of the if (ch9100) {} else {} form, with the most significant
      difference being that CH9200 provides a real MII interface but CH9100 
fakes
      one with a bunch of global variables and magic commands. I don't have a
      CH9100, so it's probably better if someone who does provides an 
independent
      driver for it. In any case, this is a lightly cleaned up version of the
      vendor driver with all the CH9100 code dropped.

      Signed-off-by: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f8d0bbb00f120ae0de79de6952132ea5c5028bb
  Merge: a11d558 1ccb141
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 16:11:21 2015 -0700

      Merge branch 'phy-of-autoload'

      Luis de Bethencourt says:

      ====================
      net: phy: Fix module autoload for OF platform drivers

      These patches add the missing MODULE_DEVICE_TABLE() for OF to export
      the information so modules have the correct aliases built-in and
      autoloading works correctly.

      A longer explanation by Javier Canillas can be found here:
      https://lkml.org/lkml/2015/7/30/519
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1ccb141e31d0dc4c1234b0886cdc8b4399112c59
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 18:16:29 2015 +0200

      net: phy: mdio-gpio: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2f90a3070690ad80c38d650e91b96b5dcbdfe2fd
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 18:16:12 2015 +0200

      net: phy: mdio-bcm-unimac: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a11d5585edc626106d060dde447467677d220485
  Merge: 1f770c0 ebd8ebf
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 16:09:11 2015 -0700

      Merge branch 'net-of-autoload'

      Luis de Bethencourt says:

      ====================
      net: Fix module autoload for OF platform drivers

      These patches add the missing MODULE_DEVICE_TABLE() for OF to export
      the information so modules have the correct aliases built-in and
      autoloading works correctly.

      A longer explanation by Javier Canillas can be found here:
      https://lkml.org/lkml/2015/7/30/519
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebd8ebf078879973d0e8d2642253c091c23bd7d2
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:56:21 2015 +0200

      net: moxa: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 23860063706f2037008fb423820cdbd0dcd558bb
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:55:27 2015 +0200

      net: gianfar_ptp: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e8048e5595bedb1f4b20597d059d6877a710f12d
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:55:02 2015 +0200

      net: bcmgenet: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 46d5a3431f2dbb2392b501be9b9f9c2ca17737d8
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:54:30 2015 +0200

      net: systemport: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7d778fa74a88e7b5a09ba498d66bd67a7dc7df0
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:54:00 2015 +0200

      net: arc: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21fe8af40024c49af37124bc7b19c5836d25695e
  Merge: 5dcd246 91e60eb
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 16:03:05 2015 -0700

      Merge branch 's390-next'

      Ursula Braun says:

      ====================
      s390: qeth and iucv patches

      here is version 2 of some s390 related qeth patches for net-next. The 
patch by
      Thomas Richter adds a new feature to the qeth layer2 code; the remaining
      patches are minor improvements.
      Version 2 of patch 4 uses the desired indentation in function declarations
      and definitions spanning multiple lines in almost all cases. Thomas run 
into a
      conflict with the maximum number of columns once. Thus you will still see 
one
      function definition using an earlier column before the opening 
paranthesis.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 91e60eb60bdf078fc58b8d2fd1ac12f3c09bb893
  Author: Ursula Braun <ursula.braun@xxxxxxxxxx>
  Date:   Fri Sep 18 16:06:52 2015 +0200

      s390/iucv: do not use arrays as argument

      The iucv code uses arrays as arguments. Even though this does not
      really cause a problem, it could be misleading, since the compiler
      turns array arguments into just a pointer argument. To be more
      precise this patch changes the array arguments into pointers.

      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4d7def2a12386dbf56443016114c187df50e3442
  Author: Thomas Richter <tmricht@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 16:06:51 2015 +0200

      qeth: add layer 2 RX/TX checksum offloading

      Checksum offloading for send and receive is already
      supported for layer 3 (IP layer). This patch
      adds support for RX and TX hardware checksum offloading
      for layer 2 (MAC layer). The hardware calculates the checksum
      for IP UDP and TCP packets.

      This patch moves the hardware checksum offloading setup
      to the set of common functions in qeth_core_main.c.
      Layer 2 and layer 3 now simply call the same common functions.

      Also note that TX checksum offloading is always enabled.
      The device driver relies on the TCP/IP stack to make use of
      this feature.

      Signed-off-by: Thomas Richter <tmricht@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Reviewed-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 239ff408ddd8fa7a19c53ed247daec855ff11ea2
  Author: Ursula Braun <ursula.braun@xxxxxxxxxx>
  Date:   Fri Sep 18 16:06:50 2015 +0200

      qeth: move OSA portname into deprecated status

      An OSA-Express port name was required to identify a shared OSA port.
      All operating system instances that shared the port had to use the
      same port name. This requirement no longer applies.

      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 248046ba074dc3cbba4f771f08da8b430662d8ac
  Author: Lakhvich Dmitriy <ldmitriy@xxxxxxxxxx>
  Date:   Fri Sep 18 16:06:49 2015 +0200

      qeth: no write permission for readonly sysattr

      User is not allowed to write into bridge_state sysfs file.
      Fixed attribute not mislead the user

      Signed-off-by: Lakhvich Dmitriy <ldmitriy@xxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Reported-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Reviewed-by: Thomas Richter <tmricht@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9846e70b9bcd9ec11f82a47df159d1b1dfb02eee
  Author: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
  Date:   Fri Sep 18 16:06:48 2015 +0200

      qeth: remove extraneous length from %pM format

      Length specifier in the %pM format is not supported (at least, not
      documented). Remove it, and also an extraneous '&' for the array.

      Signed-off-by: Eugene Crosser <Eugene.Crosser@xxxxxxxxxx>
      Signed-off-by: Ursula Braun <ursula.braun@xxxxxxxxxx>
      Suggested-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5dcd2461073a43b2aa48ab5cfc135ba182667794
  Merge: a1ef48e 6818375
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Sep 21 16:00:44 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-09-18

      Here's the first bluetooth-next pull request for the 4.4 kernel:

       - ieee802154 cleanups & fixes
       - debugfs support for the at86rf230 driver
       - Support for quirky (seemingly counterfeit) CSR Bluetooth controllers
       - Power management and device config improvements for Intel controllers
       - Fix for devices with incorrect advertising data length
       - Fix for closing HCI user channel socket

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 16651fc2f30dfe14dcdd59cf0ccb4e1ccdba4dc7
  Merge: 4e2e986 d702ffd 2f9481e b9c9364 0f1d08d 7209fee
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Sep 21 14:16:09 2015 -0700

      Merge remote-tracking branches 'regulator/fix/anatop', 
'regulator/fix/gpio', 'regulator/fix/pbias', 'regulator/fix/tpx65218' and 
'regulator/fix/vexpress' into regulator-linus

  commit 4e2e986473f708be46bd00007621f97178bd7047
  Merge: 1f93e4a 23c3f31
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Sep 21 14:15:58 2015 -0700

      Merge remote-tracking branch 'regulator/fix/core' into regulator-linus

  commit 854f736364c659046f066a98fed2fdb10a39577a
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Sun Sep 6 07:13:17 2015 +0000

      perf tools: Don't assume that the parser returns non empty evsel list

      Don't blindly retrieve and use a last element in the lists returned by
      parse_events__scanner(), as it may have collected no entries, i.e.
      return an empty list.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441523623-152703-2-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0fb18553478dee5b3d8dc0af4f99a5288e81142f
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Wed Sep 16 21:52:42 2015 +0900

      perf probe: Fix a segfault when removing uprobe events

      Fix a segfault bug and a small mistake in perf probe -d.

      Since the "ulist" in perf_del_probe_events is never initialized,
      strlist__add(ulist, *) always causes a segfault when removing
      uprobe events by perf probe -d.

      Also, the "str" local variable is never released if fail to
      allocate the "klist". This fixes it too.

      This has been introduced by the commit e607f1426b58 ("perf probe:
      Print deleted events in cmd_probe()").

      Reported-by: Milian Wolff <milian.wolff@xxxxxxxx>
      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150916125241.4446.44805.stgit@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 50745b0a7f46f68574cd2b9ae24566bf026e7ebd
  Author: chandan <chandan@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 21:10:13 2015 +0530

      Btrfs: Direct I/O: Fix space accounting

      The following call trace is seen when generic/095 test is executed,

      WARNING: CPU: 3 PID: 2769 at 
/home/chandan/code/repos/linux/fs/btrfs/inode.c:8967 
btrfs_destroy_inode+0x284/0x2a0()
      Modules linked in:
      CPU: 3 PID: 2769 Comm: umount Not tainted 4.2.0-rc5+ #31
      Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 
1.7.5-20150306_163512-brownie 04/01/2014
       ffffffff81c08150 ffff8802ec9cbce8 ffffffff81984058 ffff8802ffd8feb0
       0000000000000000 ffff8802ec9cbd28 ffffffff81050385 ffff8802ec9cbd38
       ffff8802d12f8588 ffff8802d12f8588 ffff8802f15ab000 ffff8800bb96c0b0
      Call Trace:
       [<ffffffff81984058>] dump_stack+0x45/0x57
       [<ffffffff81050385>] warn_slowpath_common+0x85/0xc0
       [<ffffffff81050465>] warn_slowpath_null+0x15/0x20
       [<ffffffff81340294>] btrfs_destroy_inode+0x284/0x2a0
       [<ffffffff8117ce07>] destroy_inode+0x37/0x60
       [<ffffffff8117cf39>] evict+0x109/0x170
       [<ffffffff8117cfd5>] dispose_list+0x35/0x50
       [<ffffffff8117dd3a>] evict_inodes+0xaa/0x100
       [<ffffffff81165667>] generic_shutdown_super+0x47/0xf0
       [<ffffffff81165951>] kill_anon_super+0x11/0x20
       [<ffffffff81302093>] btrfs_kill_super+0x13/0x110
       [<ffffffff81165c99>] deactivate_locked_super+0x39/0x70
       [<ffffffff811660cf>] deactivate_super+0x5f/0x70
       [<ffffffff81180e1e>] cleanup_mnt+0x3e/0x90
       [<ffffffff81180ebd>] __cleanup_mnt+0xd/0x10
       [<ffffffff81069c06>] task_work_run+0x96/0xb0
       [<ffffffff81003a3d>] do_notify_resume+0x3d/0x50
       [<ffffffff8198cbc2>] int_signal+0x12/0x17

      This means that the inode had non-zero "outstanding extents" during
      eviction. This occurs because, during direct I/O a task which successfully
      used up its reserved data space would set BTRFS_INODE_DIO_READY bit and 
does
      not clear the bit after finishing the DIO write. A future DIO write could
      actually fail and the unused reserve space won't be freed because of the
      previously set BTRFS_INODE_DIO_READY bit.

      Clearing the BTRFS_INODE_DIO_READY bit in btrfs_direct_IO() caused the
      following issue,
      
|-----------------------------------+-------------------------------------|
      | Task A                            | Task B                              
|
      
|-----------------------------------+-------------------------------------|
      | Start direct i/o write on inode X.|                                     
|
      | reserve space                     |                                     
|
      | Allocate ordered extent           |                                     
|
      | release reserved space            |                                     
|
      | Set BTRFS_INODE_DIO_READY bit.    |                                     
|
      |                                   | splice()                            
|
      |                                   | Transfer data from pipe buffer to   
|
      |                                   | destination file.                   
|
      |                                   | - kmap(pipe buffer page)            
|
      |                                   | - Start direct i/o write on         
|
      |                                   |   inode X.                          
|
      |                                   |   - reserve space                   
|
      |                                   |   - dio_refill_pages()              
|
      |                                   |     - sdio->blocks_available == 0   
|
      |                                   |     - Since a kernel address is     
|
      |                                   |       being passed instead of a     
|
      |                                   |       user space address,           
|
      |                                   |       iov_iter_get_pages() returns  
|
      |                                   |       -EFAULT.                      
|
      |                                   |   - Since BTRFS_INODE_DIO_READY is  
|
      |                                   |     set, we don't release reserved  
|
      |                                   |     space.                          
|
      |                                   |   - Clear BTRFS_INODE_DIO_READY 
bit.|
      | -EIOCBQUEUED is returned.         |                                     
|
      
|-----------------------------------+-------------------------------------|

      Hence this commit introduces "struct btrfs_dio_data" to track the usage of
      reserved data space. The remaining unused "reserve space" can now be freed
      reliably.

      Signed-off-by: Chandan Rajendra <chandan@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Liu Bo <bo.li.liu@xxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 03a0e8a7c5ea29b5c4e72dfd64900b47a8fb6f2d
  Author: Boris BREZILLON <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:41:03 2015 +0200

      mtd: nand: sunxi: fix OOB handling in ->write_xxx() functions

      The USER_DATA register cannot be accessed using byte accessors on A13
      SoCs, thus triggering a bug when using memcpy_toio on this register.
      Declare an helper macros to convert an OOB buffer into a suitable
      USER_DATA value and vice-versa.

      This patch also fixes an error in the oob_required logic (some OOB data
      are not written even if the user required it) by removing the
      oob_required condition, which is perfectly valid since the core already
      fill ->oob_poi with FFs when oob_required is false.

      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.19+
      Fixes: 1fef62c1423b ("mtd: nand: add sunxi NAND flash controller support")
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>

  commit a66c275b3d5d8467d770dabd30927f5d5e857294
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Sep 21 11:08:36 2015 +0300

      usb: dwc3: gadget: Fix BUG in RT config

      Using spin_lock() in hard irq handler is pointless
      and causes a BUG() in RT (real-time) configuration
      so get rid of it.

      The reason it's pointless is because the driver is
      basically accessing register which is, anyways,
      atomic.

      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit b431ba8803666e56c1d178a421b3cbc36e8d3d33
  Author: Bin Liu <b-liu@xxxxxx>
  Date:   Mon Aug 24 15:28:37 2015 -0500

      usb: musb: fix cppi channel teardown for isoch transfer

      After a few iterations of start/stop UVC camera streaming, the streaming
      stops.

      This patch adds 250us delay in the cppi channel abort path to let cppi
      drain properly.

      Using 50us delay seems to be too aggressive, some webcams are still
      broken. 250us is the original value used in TI 3.2 kernel.

      Signed-off-by: Bin Liu <b-liu@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 8fb7ab504381b8ce4f443129e102a713bd76dfe2
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sat Sep 12 10:54:26 2015 +0200

      usb: phy: isp1301: Export I2C module alias information

      The I2C core always reports the MODALIAS uevent as "i2c:<client name"
      regardless if the device was registered using OF or platform code so
      So the driver needs to export the I2C table and this be built into
      the module or udev won't have the necessary information to auto load
      the module when the device is added.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 51b91b7e6c1516c7d3ea70acc91aac9b32ae3e72
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:09 2015 +0200

      usb: gadget: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 9a9ce1dfaef9aa15980cec22b806b39a65a9467e
  Author: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
  Date:   Tue Sep 15 16:55:32 2015 +0200

      usb: gadget: dummy_hcd: in transfer(), return data sent, not limit

      dummy_timer uses transfer() to update transfer limit. However,
      limit passed to dummy_timer changes depending on transfer type,
      so the actual limit is overwritten.

      This can cause unpredictably slow / fast bulk transfers when
      coupled with control / interrupt transfers.

      Fix by returning actual amount of data sent in transfer() and
      substracting from total.

      Signed-off-by: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit e42bd6a54b97e2a39b5004deac66a0fcd6ebbe75
  Author: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
  Date:   Tue Sep 15 16:55:31 2015 +0200

      usb: gadget: dummy_hcd: fix rescan logic for transfer

      transfer() schedules a rescan for transfers larger than
      maxpacket, which is wrong for transfers that are multiples
      of maxpacket.

      Rewrite to fix and clarify packet multiple / remainder
      transfer logic.

      Signed-off-by: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 5dda5be9d501084e8a6242e6dbeb8eea1daf01c8
  Author: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
  Date:   Tue Sep 15 16:55:30 2015 +0200

      usb: gadget: dummy_hcd: fix unneeded else-if condition

      We already know at this point that to_host is false.

      Signed-off-by: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 21c3ee93867694e8c7382ff77b4645b50d3233e9
  Author: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
  Date:   Tue Sep 15 16:55:29 2015 +0200

      usb: gadget: dummy_hcd: emulate sending zlp in packet logic

      currently, when a zlp flag is set and an urb/usb_request
      buffer is filled without a short packet, transfer() leaves
      its status at -EINPROGRESS and does not rescan for short
      packet.

      In a scenario where ep.maxpacket bytes are copied,
      URB_ZERO_PACKET is set, urb buffer is filled and usb_request
      buffer is not, transfer() returns with an urb with
      -EINPROGRESS status, which dummy_hcd treats as incomplete
      transfer.

      Check for zlp and rescan appropriately.

      Signed-off-by: Igor Kotrasinski <i.kotrasinsk@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit b8239dcc03afbd0886c1d9b91ba8fee7c6c9a6cb
  Author: Bin Liu <b-liu@xxxxxx>
  Date:   Wed Sep 16 14:49:28 2015 -0500

      usb: musb: dsps: fix polling in device-only mode

      Fix the regression caused by commit ad78c918602 ("usb: musb: dsps: just
      start polling already") which causes polling the ID pin status even in
      device-only mode.

      Fixes: ad78c918602c ("usb: musb: dsps: just start polling already")
      Signed-off-by: Bin Liu <b-liu@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit cf261fd1a444e87894c2ed8f481606ead7916fab
  Author: Sylvain Rochet <sylvain.rochet@xxxxxxxxxxxx>
  Date:   Fri Sep 18 16:58:28 2015 +0200

      usb: gadget: atmel_usba_udc: add ep capabilities support on device tree 
binding

      The recently added endpoint capabilities flags verification breaks Atmel
      USBA because the endpoint configuration was only added when the driver
      is bound using the legacy pdata interface.

      Convert endpoint configuration to new capabilities model when driver is
      bound to a device tree as well.

      Signed-off-by: Sylvain Rochet <sylvain.rochet@xxxxxxxxxxxx>
      Fixes: 47bef3865115 ("usb: gadget: atmel_usba_udc: add ep capabilities 
support")
      Signed-off-by: Nicolas Ferre <nicolas.ferre@xxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit ac2fc4b9d5b7d8e4878c6f04f947d42707f782ef
  Merge: 90a835f cbc41d0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 12:02:27 2015 -0700

      Merge tag 'renesas-sh-drivers-for-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas

      Pull SH drivers updates from Simon Horman:
       "I am sending this change after v4.3-rc1 has been released as it
        depends on SoC changes which are present in that rc release.

        Summary:

         - disable PM runtime for multi-platform ARM with genpd

         - disable legacy default PM Domain on emev2"

      * tag 'renesas-sh-drivers-for-v4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas:
        drivers: sh: Disable PM runtime for multi-platform ARM with genpd
        drivers: sh: Disable legacy default PM Domain on emev2

  commit f6c804b08ca5e04f309e88b7e8823ef8b9d054e5
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Wed Sep 16 17:37:00 2015 +0200

      ARM: at91/dt: sama5d2: add pio controller node

      Add pio4 controller node to enable pinmux and gpio.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 33d3690cf5c24261af69b5d415ae5403ee386e1f
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Wed Sep 16 17:36:59 2015 +0200

      MAINTAINERS: Add an entry for pinctrl-at91-pio4

      Add an entry for the Atmel PIO4 controller driver.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 56d794222474edef1cae2bc97732a717ab41003a
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Wed Sep 16 17:36:58 2015 +0200

      pinctrl: dt-binding: Add DT binding documentation for Atmel PIO4

      Add documentation for the Atmel PIO4 controller introduced with SAMA5D2
      chip family.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Acked-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 776180848b574c9c01217fa958f10843ffce584f
  Author: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
  Date:   Wed Sep 16 17:36:57 2015 +0200

      pinctrl: introduce driver for Atmel PIO4 controller

      Add a pinctrl/gpio driver for Atmel PIO4 controller available on SAMA5D2
      chip family.

      Signed-off-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 90a835f5d19217ad1e174e40ef35d0acf3357828
  Merge: b7f76ea 977108f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 09:53:30 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

      Pull s390 fixes from Martin Schwidefsky:
       "A couple of system call updates.  The two new system calls userfaultfd
        and membarrier have been added, as well as the 17 direct calls for the
        multiplexed socket system calls.

        In addition the system call compat wrappers have been flagged as
        notrace functions and a few wrappers could be removed.

        And bug fixes for the vector register handling, cpu_mf, suspend/resume,
        compat signals, SMT cputime accounting and the zfcp dumper"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:
        s390: wire up separate socketcalls system calls
        s390/compat: remove superfluous compat wrappers
        s390/compat: do not trace compat wrapper functions
        s390/s390x: allocate sys_membarrier system call number
        s390/configs//zfcpdump_defconfig: Remove CONFIG_MEMSTICK
        s390: wire up userfaultfd system call
        s390/vtime: correct scaled cputime for SMT
        s390/cpum_cf: Corrected return code for unauthorized counter sets
        s390/compat: correct uc_sigmask of the compat signal frame
        s390: fix floating point register corruption
        s390/hibernate: fix save and restore of vector registers

  commit 72d4736253af74147b1fa68145b2f4c61d1f37e1
  Author: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
  Date:   Sat Sep 19 11:22:57 2015 -0700

      Input: uinput - fix crash when using ABS events

      Commit b6d30968d86c45a7bb599eaca13ff048d3fa576c (Input: uinput - switch to
      using for_each_set_bit()) switched driver to use for_each_set_bit().
      However during initial write of the uinput structure that contains min/max
      data for all possible axes none of them are reflected in dev->absbit yet
      and so we were skipping over all of them and were not allocating absinfo
      memory which caused crash later when driver tried to sens EV_ABS events:

      <1>[   15.064330] BUG: unable to handle kernel NULL pointer dereference 
at 0000000000000024
      <1>[   15.064336] IP: [<ffffffff8163f142>] input_handle_event+0x232/0x4e0
      <4>[   15.064343] PGD 0
      <4>[   15.064345] Oops: 0000 [#1] SMP

      Fixes: b6d30968d86c45a7bb599eaca13ff048d3fa576c
      Cc: stable@xxxxxxxxxxxxxxx
      Reported-by: Stephen Chandler Paul <cpaul@xxxxxxxxxx>
      Tested-by: Stephen Chandler Paul <cpaul@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit ed75a14eb554995c522a3b861d4c86a7eddb2ad7
  Author: Duson Lin <dusonlin@xxxxxxxxxx>
  Date:   Mon Sep 21 09:26:46 2015 -0700

      Input: elan_i2c - expand maximum product_id form 0xFF to 0xFFFF

      In order to support more projects in the future, we expand the
      maximum product_id value form 0xFF to 0xFFFF.

      Signed-off by: Duson Lin <dusonlin@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit c84333a1c55a2d3329e8b472f59e9d1ccf5ddc1b
  Author: Duson Lin <dusonlin@xxxxxxxxxx>
  Date:   Mon Sep 21 09:24:46 2015 -0700

      Input: elan_i2c - add ic type 0x03

      The 0x03 is valid 3000 serial ic type too.

      Signed-off-by: Duson Lin <dusonlin@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 9d7b03f863f2fc8bd80e83d3a2d7e521094d290e
  Author: Daniel Drake <drake@xxxxxxxxxxxx>
  Date:   Sat Sep 19 09:49:45 2015 -0700

      Input: elan_i2c - don't require known iap version

      The Asus X456UA has an ELAN1000 touchpad with IAP version 0xe.  This is
      unknown to elan_get_fwinfo() so driver probe fails and I am left with an
      unusable touchpad.

      However, the fwinfo is not required for general driver usage, it is only
      needed if the user decides to upload new firmware.

      Adjust the driver so that we do not abort probe when we encounter
      unexpected IAP version, but rather warn user that firmware update feature
      of the driver will not work.

      Signed-off-by: Daniel Drake <drake@xxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 7c014e35a018187462f2cd6c85259e080663ba2d
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Sep 6 14:17:17 2015 +0300

      iwlwifi: mvm: add debug print for d0i3 exit indication

      In order to verify d0i3 flow, add debug print to indicate
      d0i3 exit was completed (right after tx was re-enabled),
      along with the wakeup reasons.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 183edd8484fd375d0f6d5e73b071c21b17243424
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Tue Sep 1 14:16:00 2015 +0300

      iwlwifi: mvm: configure wowlan configuration only if connected

      Recent fw version added assert to make sure wowlan configuration
      is configured only when a station is connected.

      Change the driver behavior to pass this configuration only
      if we indeed have ap station id (i.e. connected).

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit ee6dbb29377f6055093cccefc0cd0ac2670b12b3
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 2 14:53:39 2015 +0200

      iwlwifi: mvm: move RX API into its own file

      The RX API is currently mixed up into the general fw-api.h
      file, but we're going to need to extend it significantly in
      the future, so move it to its own file.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 2df5328e7853e33155312970036f05c27c189b71
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 2 14:47:16 2015 +0200

      iwlwifi: mvm: remove some unused defines from RX API

      Remove some unused values from the RX API; these were used
      with older firmware API that didn't have the RX energy API,
      support for which was removed a long time ago.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit abfd794c59c7cbfe31a5d1471e5868d4dbd74205
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 2 12:26:45 2015 +0200

      iwlwifi: mvm: remove pointless cfg_phy_cnt length check

      Since the driver can never configure the data here, this field
      will always be reported as 0 by the firmware. Even if this was
      not the case, however, it wouldn't matter since the extra data
      would be added beyond the end of the phy_info structure we use
      in the driver, so wouldn't harm anything in this code either.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 7f89a58efc0a18ec4a6eb7fdcf9ab73d426ce11f
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Sep 2 11:51:23 2015 +0200

      iwlwifi: mvm: remove useless debug message from RX

      This message is useless - it's in the good case that always
      happens so enabling it doesn't really help. Just remove it.
      There are other ways to debug this (e.g. tracing) so there's
      no need to add a message in the bad case.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit da583fdfececf69571d3b8fafed278310592eec1
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Aug 26 15:55:04 2015 +0200

      iwlwifi: mvm: make sure AP is operating for ToF

      It's possible for an AP interface to be UP but not actually
      operating (i.e. not beaconing etc.) - in this case it can't
      actually do ToF, so check for it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 38d5f66f062a65bfc436013135a817e53037ccca
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 14:03:02 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_STATS_V10 TLV flag

      This flag is set in all supported firmwares.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 9d43fa4b4a0e46881d7d4fb3bc689a17d2f72257
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:57:37 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_ASYNC_DTM TLV flag

      This flag is set in all supported firmwares.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit eb991c5ec18ba41bfa2c206c22bceae94f6f3c15
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:55:11 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_SINGLE_SCAN_EBS TLV flag

      All the supported firmwares have this flag set.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 4d31eed13f2a2234e86aa178918e129b6e33a9ee
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:52:54 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_TX_POWER_DEV TLV flag

      All the supported firmwares use the new API.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 89ced540eb3527669bac0a3239a408fb1129f0dc
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:50:59 2015 +0300

      iwlwifi: mvm: remove IWL_UCODE_TLV_API_HDC_PHASE_0 TLV flag

      All the supported firwmares support the new API.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>

  commit 97bce7e0b58dfc7d159ded329f57961868fb060b
  Author: Nicolas Iooss <nicolas.iooss_linux@xxxxxxx>
  Date:   Sun Sep 20 16:42:36 2015 +0200

      crypto: crc32c-pclmul - use .rodata instead of .rotata

      Module crc32c-intel uses a special read-only data section named .rotata.
      This section is defined for K_table, and its name seems to be a spelling
      mistake for .rodata.

      Fixes: 473946e674eb ("crypto: crc32c-pclmul - Shrink K_table to 32-bit 
words")
      Signed-off-by: Nicolas Iooss <nicolas.iooss_linux@xxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d23afa1abc54b5b7cb7c65f451378b5c0820bfe6
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Sep 18 14:57:11 2015 +0200

      crypto: sahara - replace sahara_sg_length with sg_nents_for_len

      The sahara_sg_length function of the sahara driver is the same
      as sg_nents_for_len from lib/scatterlist.c

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 76804eb846a413cd761f63ad6cdca1c8ca337678
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Sep 18 14:57:10 2015 +0200

      crypto: amcc - replace get_sg_count by sg_nents_for_len

      The get_sg_count function of amcc is the same as sg_nents_for_len from
      lib/scatterlist.c

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 1f6d79d7e011ff0b85feaecf0aed0b3949eaa1f2
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Fri Sep 18 14:57:09 2015 +0200

      crypto: bfin_crc - replace sg_count by sg_nents

      The sg_count function in bfin_crc.c is the same function as sg_nents.
      Remove the duplicate code and use sg_nents() instead.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 09185e2756a83763bcbfe51b308b85979f0de027
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:42 2015 +0200

      hwrng: xgene - fix handling platform_get_irq

      The function can return negative value.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 17762c5acee2f1f065291d2a74ebea4d0168063b
  Author: Conor McLoughlin <conor.mcloughlin@xxxxxxxxx>
  Date:   Fri Sep 18 08:59:47 2015 -0700

      crypto: qat - VF should never trigger SBR on PH

      Don't allow to trigger SBR from a VF running in VMM context.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Conor McLoughlin <conor.mcloughlin@xxxxxxxxx>
      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit cfcd2271a9076a9891014bc8e18d4fd48acccffe
  Author: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:25:36 2015 +0200

      crypto: marvell - properly handle CRYPTO_TFM_REQ_MAY_BACKLOG-flagged 
requests

      The mv_cesa_queue_req() function calls crypto_enqueue_request() to
      enqueue a request. In the normal case (i.e the queue isn't full), this
      function returns -EINPROGRESS. The current Marvell CESA crypto driver
      takes this into account and cleans up the request only if an error
      occured, i.e if the return value is not -EINPROGRESS.

      Unfortunately this causes problems with
      CRYPTO_TFM_REQ_MAY_BACKLOG-flagged requests. When such a request is
      passed to crypto_enqueue_request() and the queue is full,
      crypto_enqueue_request() will return -EBUSY, but will keep the request
      enqueued nonetheless. This situation was not properly handled by the
      Marvell CESA driver, which was anyway cleaning up the request in such
      a situation. When later on the request was taken out of the backlog
      and actually processed, a kernel crash occured due to the internal
      driver data structures for this structure having been cleaned up.

      To avoid this situation, this commit adds a
      mv_cesa_req_needs_cleanup() helper function which indicates if the
      request needs to be cleaned up or not after a call to
      crypto_enqueue_request(). This helper allows to do the cleanup only in
      the appropriate cases, and all call sites of mv_cesa_queue_req() are
      fixed to use this new helper function.

      Reported-by: Vincent Donnefort <vdonnefort@xxxxxxxxx>
      Fixes: db509a45339fd ("crypto: marvell/cesa - add TDMA support")
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2+
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Acked-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Tested-by: Vincent Donnefort <vdonnefort@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit be6ec98ddb6749bba0fc7f67bd2f89a2396805de
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 16:35:53 2015 -0700

      crypto: x86/sha - Restructure x86 sha512 glue code to expose all the 
available sha512 transforms

      Restructure the x86 sha512 glue code so we will expose sha512 transforms
      based on SSSE3, AVX or AVX2 as separate individual drivers when cpu
      provides support. This will make it easy for alternative algorithms to
      be used if desired and makes the code cleaner and easier to maintain.

      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5dda42fc89f26fb3b6312076b17feda8c397d2b8
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 16:35:23 2015 -0700

      crypto: x86/sha - Restructure x86 sha256 glue code to expose all the 
available sha256 transforms

      Restructure the x86 sha256 glue code so we will expose sha256 transforms
      based on SSSE3, AVX, AVX2 or SHA-NI extension as separate individual
      drivers when cpu provides such support. This will make it easy for
      alternative algorithms to be used if desired and makes the code cleaner
      and easier to maintain.

      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 85c66ecd6f2144c075044292359e179b20af1f2d
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 16:34:53 2015 -0700

      crypto: x86/sha - Restructure x86 sha1 glue code to expose all the 
available sha1 transforms

      Restructure the x86 sha1 glue code so we will expose sha1 transforms based
      on SSSE3, AVX, AVX2 or SHA-NI extension as separate individual drivers
      when cpu provides such support. This will make it easy for alternative
      algorithms to be used if desired and makes the code cleaner and easier
      to maintain.

      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e38b6b7fcfd11fb83dcac54a33cbca3739c45a09
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:27:26 2015 -0700

      crypto: x86/sha - Add build support for Intel SHA Extensions optimized 
SHA1 and SHA256

      This patch provides the configuration and build support to
      include and build the optimized SHA1 and SHA256 update transforms
      for the kernel's crypto library.

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 95fca7df0b4964fbe3fe159e3d6e681e6b5b7a53
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:27:20 2015 -0700

      crypto: x86/sha - glue code for Intel SHA extensions optimized SHA1 & 
SHA256

      This patch adds the glue code to detect and utilize the Intel SHA
      extensions optimized SHA1 and SHA256 update transforms when available.

      This code has been tested on Broxton for functionality.

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 600a2334e83d22e5c3f7ff2581f545bfc354d206
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:27:13 2015 -0700

      crypto: x86/sha - Intel SHA Extensions optimized SHA256 transform function

      This patch includes the Intel SHA Extensions optimized implementation
      of SHA-256 update function. This function has been tested on Broxton
      platform and measured a speed up of 3.6x over the SSSE3 implementiation
      for 4K blocks.

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c356a7e975a25e8867961c1b7a4a965d506f0a04
  Author: tim <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:26:59 2015 -0700

      crypto: x86/sha - Intel SHA Extensions optimized SHA1 transform function

      This patch includes the Intel SHA Extensions optimized implementation
      of SHA-1 update function. This function has been tested on Broxton
      platform and measured a speed up of 3.6x over the SSSE3 implementiation
      for 4K blocks.

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b8e31bf3083106e8530d6d5786e23b365b49b11b
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:57 2015 +0100

      MAINTAINERS: Add ST's Random Number Generator to the ST entry

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ba25d8b4011bc496afff65b2f28136aa141d7d6b
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:56 2015 +0100

      ARM: STi: STiH407: Enable the 2 HW Random Number Generators for STiH4{07, 
10}

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 4a4da53c408c9e1e545b60d2b07635d08a949c99
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:55 2015 +0100

      hwrng: st - Add support for ST's HW Random Number Generator

      Signed-off-by: Pankaj Dev <pankaj.dev@xxxxxx>
      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Acked-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b4a5407ea82869bf947c8a1176984f80c30e25a6
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:54 2015 +0100

      hwrng: st - Provide DT bindings for ST's Random Number Generator

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d9a53b01404fa602117220e98bb6c9b2b63f1e7f
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:53 2015 +0100

      hwrng: core - Simplify RNG switching from sysfs

      If we attempt to use sysfs to change the current RNG in the usual
      way i.e. issuing something like:

      `echo 8a8a000.rng > /sys/devices/virtual/misc/hw_random/rng_current`

      ... it will fail because the code doesn't currently take the '\n'
      into consideration.  Well, now it does.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Acked-by: Peter Korsgaard <peter@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit cb2c316b22d89072643d2685ef0eb883cae8a9de
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:52 2015 +0100

      hwrng: Kconfig - Fix device node name reference /dev/hw_random => 
/dev/hwrng

      In April 2009, commit d405640 ("Driver Core: misc: add node name support
      for misc devices.") inadvertently changed the device node name from
      /dev/hw_random to /dev/hwrng.  Since 6 years has passed since the change
      it seems unpractical to change it back, as this node name is probably
      considered ABI by now.  So instead, we'll just change the Kconfig help
      to match the current situation.

      NB: It looks like rng-tools have already been updated.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Acked-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e9e23158f2f5a0992f27d367aa1f11ba12b0b54c
  Author: Lee Jones <lee.jones@xxxxxxxxxx>
  Date:   Thu Sep 17 14:45:51 2015 +0100

      hwrng: doc - Fix device node name reference /dev/hw_random => /dev/hwrng

      In April 2009, commit d405640 ("Driver Core: misc: add node name support
      for misc devices.") inadvertently changed the device node name from
      /dev/hw_random to /dev/hwrng.  Since 6 years has passed since the change
      it seems unpractical to change it back, as this node name is probably
      considered ABI by now.  So instead, we'll just change the documentation
      to match the current situation.

      NB: It looks like rng-tools have already been updated.

      Signed-off-by: Lee Jones <lee.jones@xxxxxxxxxx>
      Acked-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 4dd17c9c8a30c8d8cd1c9d4b94f08aca4b038d3e
  Author: sudip <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 17 13:12:51 2015 +0530

      crypto: asymmetric_keys - remove always false comparison

      hour, min and sec are unsigned int and they can never be less than zero.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 3cc43a0a5cea4fe2a2107e77500d6032b9bcafde
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Wed Sep 16 05:33:06 2015 -0700

      crypto: qat - Add load balancing across devices

      Load balancing of crypto instances only used a single device.
      There was no problem with that on PF, but since there is only
      one or two instance per VF we need to loadbalance across devices.

      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 859e58055a36e7a4948df614e3c5d872ef153f36
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:54:53 2015 -0300

      crypto: caam - Remove unused JUMP_TYPE_MASK definition

      Commit a1efb01feca597b ("jump_label, locking/static_keys: Rename
      JUMP_LABEL_TYPE_* and related helpers to the static_key* pattern")
      introduced the definition of JUMP_TYPE_MASK in
      include/linux/jump_label.h causing the following name collision:

      In file included from drivers/crypto/caam/desc_constr.h:7:0,
                       from drivers/crypto/caam/ctrl.c:15:
      drivers/crypto/caam/desc.h:1495:0: warning: "JUMP_TYPE_MASK" redefined
       #define JUMP_TYPE_MASK  (0x03 << JUMP_TYPE_SHIFT)
       ^
      In file included from include/linux/module.h:19:0,
                       from drivers/crypto/caam/compat.h:9,
                       from drivers/crypto/caam/ctrl.c:11:
      include/linux/jump_label.h:131:0: note: this is the location of the 
previous definition
       #define JUMP_TYPE_MASK 1UL

      As JUMP_TYPE_MASK definition in desc.h is never used, we can safely remove
      it to avoid the name collision.

      Reported-by: Olof's autobuilder <build@xxxxxxxxx>
      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Reviewed-by: Horia Geant? <horia.geanta@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5f8741d1bfa42b7e5443f2d2035de37bd5b73978
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 18:41:33 2015 +0200

      hwrng: Fix module autoload for OF platform drivers

      This platform drivers have a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 05db0ad8656376e341db6120758d04c247c9cf2f
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Sat Sep 12 20:19:53 2015 -0300

      hwrng: mxc-rnga - Use the preferred format for kzalloc

      According to Documentation/CodingStyle:

      "The preferred form for passing a size of a struct is the following:

        p = kmalloc(sizeof(*p), ...);"

      ,so do as suggested.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit eeb322540987d42a480cf8516fb88cda46347882
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Sat Sep 12 20:19:52 2015 -0300

      hwrng: mxc-rnga - Remove unnecessary dev_info message

      There is no need to print a message simply saying that a kernel
      driver has been registered, so remove it.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c09e2cc69441ef5d99d31aa83f7d2b6239e5b9a7
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Sat Sep 12 20:19:51 2015 -0300

      hwrng: mxc-rnga - Remove uneeded initialization

      There is no need to pre-initialize variable 'err' as this
      initial value will be overwritten later on.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 1bf2138e9806ea436933d5a803547833f9524c8f
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Sat Sep 12 20:19:50 2015 -0300

      hwrng: mxc-rnga - Remove unneeded goto label

      We can simplify the code by returning the error code immediately
      instead of jumping to a goto label.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 6c5de9871a4d43bba179c6a862eeb53b5232f996
  Author: John Griffin <john.griffin@xxxxxxxxx>
  Date:   Fri Sep 11 12:26:00 2015 -0700

      crypto: qat - don't check for iommu

      In some cases we don't want iommu to be enabled but still we want to 
enable VFs.

      Signed-off-by: John Griffin <john.griffin@xxxxxxxxx>
      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 04b7d704c6160fa4e8eeffc8540575fb15142f7f
  Author: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
  Date:   Thu Sep 10 11:32:26 2015 +0530

      hwrng: octeon - Use devm_hwrng_register

      Use resource managed function devm_hwrng_register instead of
      hwrng_register to make the error-path simpler. Also, remove
      octeon_rng_remove as it is now redundant.

      Signed-off-by: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit a2712e6c75f1e95b7c31830c19191e8fa367c15a
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Wed Sep 2 12:05:18 2015 -0300

      crypto: mxs-dcp - Allow MXS_DCP to be used on MX6SL

      MX6SL has the same DCP crypto block as in MX23/MX28, so allow it to be
      built for ARCH_MXC.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 53ed2d4e56c0e4749e3481475d3520275d9e67a5
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 18:44:49 2015 +0200

      crypto: ux500 - Fix module autoload for OF platform drivers

      These platform drivers have a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c3abc0f3b606a984f864452292c423f01e57c656
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 18:44:03 2015 +0200

      crypto: picoxcell - Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 3dc1597b6b0a8d17fc56d93b5e9cf859fe681727
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 18:43:24 2015 +0200

      crypto: amcc - Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f074f7b103a915edb1edf833f96a902adeb374cf
  Author: Horia Geant? <horia.geanta@xxxxxxxxxxxxx>
  Date:   Thu Aug 27 18:38:36 2015 +0300

      crypto: tcrypt - avoid mapping from module image addresses

      The output buffer in test_ahash_speed will point to an address located
      within the tcrypt module image.
      This causes problems when trying to DMA map the buffer.
      For e.g. on ARM-based LS1021A, a page fault occurs within the
      DMA API when trying to access the struct page returned by
      virt_to_page(output):

      insmod tcrypt.ko mode=403

      testing speed of async sha1 (sha1-caam)
      test  0 (   16 byte blocks,   16 bytes per update,   1 updates):
      Unable to handle kernel paging request at virtual address f07e9080
      pgd = e58d0e00
      [f07e9080] *pgd=80000080007003, *pmd=00000000
      Internal error: Oops: 206 [#1] SMP THUMB2
      Modules linked in: tcrypt(+)
      CPU: 1 PID: 1119 Comm: insmod Not tainted 4.2.0-rc1-256134-gbf433416e675 
#1
      Hardware name: Freescale LS1021A
      task: ea063900 ti: e5a34000 task.ti: e5a34000
      PC is at dma_cache_maint_page+0x38/0xd0
      LR is at __dma_page_cpu_to_dev+0x15/0x64
      pc : [<800155a0>]    lr : [<8001564d>]    psr: 000f0033
      sp : e5a35ca0  ip : 8063df00  fp : f07e9080
      r10: 00000cd0  r9 : 8063df00  r8 : 805a2f04
      r7 : 0017f804  r6 : 00000002  r5 : ee7f9000  r4 : 00000014
      r3 : 80612d40  r2 : 01ff0080  r1 : 00000380  r0 : ee7f9000
      Flags: nzcv  IRQs on  FIQs on  Mode SVC_32  ISA Thumb  Segment user
      Control: 70c5387d  Table: e58d0e00  DAC: 9b7ede70
      Process insmod (pid: 1119, stack limit = 0xe5a34210)
      Stack: (0xe5a35ca0 to 0xe5a36000)
      [...]
      [<800155a0>] (dma_cache_maint_page) from [<8001564d>] 
(__dma_page_cpu_to_dev+0x15/0x64)
      [<8001564d>] (__dma_page_cpu_to_dev) from [<800156eb>] 
(arm_dma_map_page+0x1f/0x44)
      [<800156eb>] (arm_dma_map_page) from [<802935e3>] 
(ahash_digest+0x35f/0x510)
      [<802935e3>] (ahash_digest) from [<7f800d03>] 
(test_ahash_speed.constprop.6+0x24a/0x4e4 [tcrypt])
      [<7f800d03>] (test_ahash_speed.constprop.6 [tcrypt]) from [<7f802fd5>] 
(do_test+0x1898/0x2058 [tcrypt])
      [<7f802fd5>] (do_test [tcrypt]) from [<7f80802f>] 
(tcrypt_mod_init+0x2e/0x63 [tcrypt])
      [<7f80802f>] (tcrypt_mod_init [tcrypt]) from [<80009517>] 
(do_one_initcall+0xb3/0x134)
      [<80009517>] (do_one_initcall) from [<80351ec7>] 
(do_init_module+0x3b/0x13c)
      [<80351ec7>] (do_init_module) from [<8005cc3f>] (load_module+0x97b/0x9dc)
      [<8005cc3f>] (load_module) from [<8005cd8d>] (SyS_finit_module+0x35/0x3e)
      [<8005cd8d>] (SyS_finit_module) from [<8000d101>] 
(ret_fast_syscall+0x1/0x4c)
      Code: 1aba 0152 eb00 0b02 (5882) 0f92

      addr2line -f -i -e vmlinux 800155a0
      page_zonenum
      include/linux/mm.h:728
      page_zone
      include/linux/mm.h:881
      dma_cache_maint_page
      arch/arm/mm/dma-mapping.c:822

      Signed-off-by: Horia Geant? <horia.geanta@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 93f13a9f96771a064c716364aebc6e283b186eb8
  Author: Borislav Petkov <bp@xxxxxxxxx>
  Date:   Mon Sep 21 09:48:29 2015 +0200

      x86/entry/vsyscall: Fix undefined symbol warning

      Commit:

        3dc33bd30f3e1 ("x86/entry/vsyscall: Add CONFIG to control default")

      did the ifdef/elif thing but GCC doesn't like that:

        arch/x86/entry/vsyscall/vsyscall_64.c:44:7: warning: 
"CONFIG_LEGACY_VSYSCALL_NONE" is not defined [-Wundef]
         #elif CONFIG_LEGACY_VSYSCALL_NONE
               ^

      Use defined() instead.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150921074829.GA3550@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 793b8bf9ca17aee3b995c095058e6c4e7bd72e02
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 21:21:50 2015 +1000

      powerpc: Wire up sys_membarrier()

      The selftest passes on 64-bit LE & BE, and 32-bit.

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 95d0be61286bcc3fc987043fe3a9553adca02919
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Tue Sep 15 06:04:36 2015 -0700

      drm/i915: fix kernel-doc warnings in intel_audio.c

      Fix the following 'make htmldocs' warnings:

        .//drivers/gpu/drm/i915/intel_audio.c:439: warning: No description 
found for parameter 'intel_encoder'
        .//drivers/gpu/drm/i915/intel_audio.c:439: warning: Excess function 
parameter 'encoder' description in 'intel_audio_codec_disable'
        .//drivers/gpu/drm/i915/intel_audio.c:439: warning: No description 
found for parameter 'intel_encoder'
        .//drivers/gpu/drm/i915/intel_audio.c:439: warning: Excess function 
parameter 'encoder' description in 'intel_audio_codec_disable'

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 6fa7da249269a6146ce456c43098901c81c8afdf
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Thu Aug 27 14:24:48 2015 +0200

      can: flexcan: enable interrupts atomically at the end of 
flexcan_chip_start()

      This patch defers the writing of the interrupts bits of the CTRL register 
order
      to enables all interrupts atomically at the the of the 
flexcan_chip_start()
      function.

      Suggested-by: Torsten Lang <torsten.lang@xxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 1ba763d1d4bda61bfb9b8e5154e6cf39a3e2d0e6
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Tue Aug 25 10:39:19 2015 +0200

      can: flexcan: give member of flexcan_priv holding mailboxes a sensible 
name

      This patch gives the member of flexcan_priv holding mailboxes a sensible 
name,
      by renaming from "cantxfg" to "mb":

          struct flexcan_priv::cantxfg -> struct flexcan_priv::mb

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 89af8746dea940c66f414866eed2a964a348dc09
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Fri May 8 09:32:58 2015 +0200

      can: flexcan: use pointer to struct regs instead of void pointer for mmio 
address space

      This patch renames the pointer to the mmio address space from "base" to 
"regs"
      and changes the type from "void __iomem *" to "struct flexcan_regs 
__iomem *".

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit f377bff0235708ded5f94e581855d6bd678cd2d1
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Fri May 8 15:22:36 2015 +0200

      can: flexcan: rename feature into quirks

      This patch renames the "features" member of struct flexcan_devtype_data to
      "quirks". The corresponding defines are renamed too, to reflect what they
      actually do.

          FLEXCAN_HAS_V10_FEATURES      -> FLEXCAN_QUIRK_DISABLE_RXFG
          FLEXCAN_HAS_BROKEN_ERR_STATE  -> FLEXCAN_QUIRK_BROKEN_ERR_STATE
          FLEXCAN_HAS_MECR_FEATURES     -> FLEXCAN_QUIRK_DISABLE_MECR

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 749de6fce2dd67b40f4118bf694be37f9093c3f5
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Mon Aug 31 21:32:34 2015 +0200

      can: flexcan: flexcan_chip_start(): cleanup writing of reg_mcr

      This patch changes the order the individual bits of the mcr register in
      flexcan_chip_start() are or'ed together to match the datasheet. The inline
      documentation is adjusted accordingly.

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 8c411745dd6ddbe745ee25cd1f6db856e920e7fa
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Sat May 9 18:25:05 2015 +0200

      can: flexcan: remove unused header files

      This patch removes unused header files from the flexcan driver.

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 2785968cd122b22b289db565b7438f2200984044
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Sat May 9 17:47:52 2015 +0200

      can: headers: make header files self contained

      This patch adds the missing #include-s to the dev.h and led.h, so that 
they can
      be used without including further header files.

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 0012e5c9315c33fe8d62cb8cb87a95484d7761c1
  Author: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
  Date:   Thu Aug 6 14:53:57 2015 +0200

      can: flexcan: cleanup coding style and fix typos

      This patch fixes up the coding style to make checkpatch happier. Some 
typos are
      also fixed.

      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit f4513b065f7dbd37224226ef6e44b09eff742776
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Mon Aug 24 00:35:36 2015 +0200

      extcon: Fix attached value returned by is_extcon_changed

      is_extcon_changed should only check the idx-th bit of new, not
      the entirety of new when setting attached.

      This fixes extcon sending notifications that a cable was inserted when
      it gets removed while another cable is still connected.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>

  commit 1f770c0a09da855a2b51af6d19de97fb955eca85
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:16:50 2015 +0800

      netlink: Fix autobind race condition that leads to zero port ID

      The commit c0bb07df7d981e4091432754e30c9c720e2c0c78 ("netlink:
      Reset portid after netlink_insert failure") introduced a race
      condition where if two threads try to autobind the same socket
      one of them may end up with a zero port ID.  This led to kernel
      deadlocks that were observed by multiple people.

      This patch reverts that commit and instead fixes it by introducing
      a separte rhash_portid variable so that the real portid is only set
      after the socket has been successfully hashed.

      Fixes: c0bb07df7d98 ("netlink: Reset portid after netlink_insert failure")
      Reported-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca1c4b745779e20711322b3338f3a942a3c1224a
  Author: Dexuan Cui <decui@xxxxxxxxxxxxx>
  Date:   Thu Aug 13 17:07:03 2015 -0700

      Drivers: hv: vmbus: fix init_vp_index() for reloading hv_netvsc

      This fixes the recent commit 3b71107d73b16074afa7658f3f0fcf837aabfe24:
      Drivers: hv: vmbus: Further improve CPU affiliation logic

      Without the fix, reloading hv_netvsc hangs the guest.

      Signed-off-by: Dexuan Cui <decui@xxxxxxxxxxxxx>
      Signed-off-by: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 5964db08767fb93376c0a0ddcf975fec1c0d1bd9
  Author: Tomas Winkler <tomas.winkler@xxxxxxxxx>
  Date:   Mon Aug 24 15:27:37 2015 +0300

      mei: fix debugfs files leak on error path

      if dbgfs_dir is not set then debugfs_remove_recursive
      is not called on the error path

      Signed-off-by: Tomas Winkler <tomas.winkler@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 3ea79249e81e5ed051f2e6480cbde896d99046e8
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Fri Sep 18 13:41:09 2015 +0300

      macvtap: fix TUNSETSNDBUF values > 64k

      Upon TUNSETSNDBUF,  macvtap reads the requested sndbuf size into
      a local variable u.
      commit 39ec7de7092b ("macvtap: fix uninitialized access on
      TUNSETIFF") changed its type to u16 (which is the right thing to
      do for all other macvtap ioctls), breaking all values > 64k.

      The value of TUNSETSNDBUF is actually a signed 32 bit integer, so
      the right thing to do is to read it into an int.

      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Fixes: 39ec7de7092b ("macvtap: fix uninitialized access on TUNSETIFF")
      Reported-by: Mark A. Peloquin
      Bisected-by: Matthew Rosato <mjrosato@xxxxxxxxxxxxxxxxxx>
      Reported-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Tested-by:  Matthew Rosato <mjrosato@xxxxxxxxxxxxxxxxxx>
      Acked-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3afb1121800128aae9f5722e50097fcf1a9d4d88
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Fri Sep 18 17:33:04 2015 +0200

      KVM: x86: trap AMD MSRs for the TSeg base and mask

      These have roughly the same purpose as the SMRR, which we do not need
      to implement in KVM.  However, Linux accesses MSR_K8_TSEG_ADDR at
      boot, which causes problems when running a Xen dom0 under KVM.
      Just return 0, meaning that processor protection of SMRAM is not
      in effect.

      Reported-by: M A Young <m.a.young@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Acked-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 83cf9a2521b0934a5f9d04082c9bb4f554fddcd4
  Author: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
  Date:   Fri Sep 18 11:47:41 2015 +0200

      ip6tunnel: make rx/tx bytes counters consistent

      Like the previous patch, which fixes ipv4 tunnels, here is the ipv6 part.

      Before the patch, the external ipv6 header + gre header were included on
      tx.

      After the patch:
      $ ping -c1 192.168.6.121 ; ip -s l ls dev ip6gre1
      PING 192.168.6.121 (192.168.6.121) 56(84) bytes of data.
      64 bytes from 192.168.6.121: icmp_req=1 ttl=64 time=1.92 ms

      --- 192.168.6.121 ping statistics ---
      1 packets transmitted, 1 received, 0% packet loss, time 0ms
      rtt min/avg/max/mdev = 1.923/1.923/1.923/0.000 ms
      7: ip6gre1@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1440 qdisc noqueue 
state UNKNOWN mode DEFAULT group default
          link/gre6 20:01:06:60:30:08:c1:c3:00:00:00:00:00:00:01:23 peer 
20:01:06:60:30:08:c1:c3:00:00:00:00:00:00:01:21
          RX: bytes  packets  errors  dropped overrun mcast
          84         1        0       0       0       0
          TX: bytes  packets  errors  dropped carrier collsns
          84         1        0       0       0       0
      $ ping -c1 192.168.1.121 ; ip -s l ls dev ip6tnl1
      PING 192.168.1.121 (192.168.1.121) 56(84) bytes of data.
      64 bytes from 192.168.1.121: icmp_req=1 ttl=64 time=2.28 ms

      --- 192.168.1.121 ping statistics ---
      1 packets transmitted, 1 received, 0% packet loss, time 0ms
      rtt min/avg/max/mdev = 2.288/2.288/2.288/0.000 ms
      8: ip6tnl1@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1452 qdisc noqueue 
state UNKNOWN mode DEFAULT group default
          link/tunnel6 2001:660:3008:c1c3::123 peer 2001:660:3008:c1c3::121
          RX: bytes  packets  errors  dropped overrun mcast
          84         1        0       0       0       0
          TX: bytes  packets  errors  dropped carrier collsns
          84         1        0       0       0       0

      Signed-off-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bc22a0e2ea03b75b51a1f722f93821744b5b5ff1
  Author: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
  Date:   Fri Sep 18 11:47:40 2015 +0200

      iptunnel: make rx/tx bytes counters consistent

      This was already done a long time ago in
      commit 64194c31a0b6 ("inet: Make tunnel RX/TX byte counters more 
consistent")
      but tx path was broken (at least since 3.10).

      Before the patch the gre header was included on tx.

      After the patch:
      $ ping -c1 192.168.0.121 ; ip -s l ls dev gre1
      PING 192.168.0.121 (192.168.0.121) 56(84) bytes of data.
      64 bytes from 192.168.0.121: icmp_req=1 ttl=64 time=2.95 ms

      --- 192.168.0.121 ping statistics ---
      1 packets transmitted, 1 received, 0% packet loss, time 0ms
      rtt min/avg/max/mdev = 2.955/2.955/2.955/0.000 ms
      7: gre1@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1468 qdisc noqueue 
state UNKNOWN mode DEFAULT group default
          link/gre 10.16.0.249 peer 10.16.0.121
          RX: bytes  packets  errors  dropped overrun mcast
          84         1        0       0       0       0
          TX: bytes  packets  errors  dropped carrier collsns
          84         1        0       0       0       0

      Reported-by: Julien Meunier <julien.meunier@xxxxxxxxx>
      Signed-off-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac813744930d2af82d887ce1e51bcdb23a6c6805
  Merge: 4e3ae00 ad5001c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 22:32:20 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf

      Pablo Neira Ayuso says:

      ====================
      Netfilter fixes for net

      The following patch contains Netfilter fixes for your net tree, they are:

      1) nf_log_unregister() should only set to NULL the logger that is being
         unregistered, instead of everything else. Patch from Florian Westphal.

      2) Fix a crash when accessing physoutdev from PREROUTING in br_netfilter.
         This is partially reverting the patch to shrink nf_bridge_info to 32 
bytes.
         Also from Florian.

      3) Use existing match/target extensions in the internal nft_compat 
extension
         lists when the extension is family unspecific (ie. NFPROTO_UNSPEC).

      4) Wait for rcu grace period before leaving nf_log_unregister().
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e3ae00100945d39e1f83b7c0179a114ccf55759
  Author: Erik Hugne <erik.hugne@xxxxxxxxxxxx>
  Date:   Fri Sep 18 10:46:31 2015 +0200

      tipc: reinitialize pointer after skb linearize

      The msg pointer into header may change after skb linearization.
      We must reinitialize it after calling skb_linearize to prevent
      operating on a freed or invalid pointer.

      Signed-off-by: Erik Hugne <erik.hugne@xxxxxxxxxxxx>
      Reported-by: Tamás Végh <tamas.vegh@xxxxxxxxxxxx>
      Acked-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aab0c0e62ec4af224d1b6b40fca65055d403400b
  Author: Kevin Hao <haokexin@xxxxxxxxx>
  Date:   Fri Sep 18 15:42:30 2015 +0800

      Revert "net/phy: Add Vitesse 8641 phy ID"

      This reverts commit 1298267b548a78840bd4b3e030993ff8747ca5e6.

      That commit claim that the Vitesse VSC8641 is compatible with Vitesse
      82xx. But this is not true. It seems that all the registers used
      in Vitesse phy driver are not compatible between 8641 and 82xx.
      It does cause malfunction of the Ethernet on p1010rdb-pa board.
      So we definitely need a rework in order to support the 8641 phy
      in this driver.

      Signed-off-by: Kevin Hao <haokexin@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1ef48e1e8843e2f6be631b8cf1c21b24579b9d6
  Merge: eaf9a99 f91638a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 22:26:58 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-17

      This series contains updates to i40e and i40evf.

      Shannon provides updates to i40e and i40evf to resolve an issue with the
      nvmupdate utility.  First renames a variable name to reduce confusion and
      to differentiate it from the actual user variable.  Then added the ability
      to save the admin queue write back descriptor if a caller supplies a
      buffer for it to be saved into.  Added a new GetStatus command so that
      the NVM update tool can query the current status instead of doing fake
      write requests to probe for readiness.  Added wait states to the NVM
      update state machine to signify when waiting for an update operation to
      finish, whether we are in the middle of a set of write operations, or we
      are now idle but waiting.  Then added a facility to run admin queue
      commands through the NVM update utility in order to allow the update
      tools to interact with the firmware and do special commands needed for
      updates and configuration changes.  Also added a facility to recover the
      result of a previously run admin queue command.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7a8a8e75d505147358b225173e890ada43a267e2
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 00:21:54 2015 +0100

      8139cp: Call __cp_set_rx_mode() from cp_tx_timeout()

      Unless we reset the RX config, on real hardware I don't seem to receive
      any packets after a TX timeout.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fc27bd115b334e3ebdc682a42a47c3aea2566dcc
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 00:19:08 2015 +0100

      8139cp: Use dev_kfree_skb_any() instead of dev_kfree_skb() in 
cp_clean_rings()

      This can be called from cp_tx_timeout() with interrupts disabled.
      Spotted by Francois Romieu <romieu@xxxxxxxxxxxxx>

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eaf9a992b75a0363f15e2d5f40e3ba820098c856
  Merge: 22a3f9a 0738eff
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 21:58:23 2015 -0700

      Merge tag 'linux-can-next-for-4.4-20150917' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next

      Marc Kleine-Budde says:

      ====================
      pull-request: can-next 2015-09-17

      this is a pull request of two patches for net-next/master.

      Gerhard Bertelsmann adds support for the CAN controller found on the
      Allwinner A10/A20 SoC.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 22a3f9a2043be28cde6d272e786874ba0d6afe15
  Author: Ksenija Stanojevic <ksenija.stanojevic@xxxxxxxxx>
  Date:   Thu Sep 17 18:12:53 2015 +0200

      rxrpc: Replace get_seconds with ktime_get_seconds

      Replace time_t type and get_seconds function which are not y2038 safe
      on 32-bit systems. Function ktime_get_seconds use monotonic instead of
      real time and therefore will not cause overflow.

      Signed-off-by: Ksenija Stanojevic <ksenija.stanojevic@xxxxxxxxx>
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0315e382704817b279e5693dca8ab9d89aa20b3f
  Author: Nikola Forró <nforro@xxxxxxxxxx>
  Date:   Thu Sep 17 16:01:32 2015 +0200

      net: Fix behaviour of unreachable, blackhole and prohibit routes

      Man page of ip-route(8) says following about route types:

        unreachable - these destinations are unreachable.  Packets are disâ??
        carded and the ICMP message host unreachable is generated.  The local
        senders get an EHOSTUNREACH error.

        blackhole - these destinations are unreachable.  Packets are disâ??
        carded silently.  The local senders get an EINVAL error.

        prohibit - these destinations are unreachable.  Packets are discarded
        and the ICMP message communication administratively prohibited is
        generated.  The local senders get an EACCES error.

      In the inet6 address family, this was correct, except the local senders
      got ENETUNREACH error instead of EHOSTUNREACH in case of unreachable 
route.
      In the inet address family, all three route types generated ICMP message
      net unreachable, and the local senders got ENETUNREACH error.

      In both address families all three route types now behave consistently
      with documentation.

      Signed-off-by: Nikola Forró <nforro@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 62e3b1d01c4ebbf11702a27e0c749d27195ba043
  Merge: 812494d b5996f1
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Sep 20 21:42:58 2015 -0700

      Merge branch 'hsilicon-net-subsys'

      huangdaode says:

      ====================
      net: Hisilicon Network Subsystem support

      This is V2 of Hisilicon Network Subsystem(HNS) patchesets taking care
      about LKML comments.

      Please find out the changes from the change logs.
      This patchset is rebased on mainline kernel Linux 4.3-rc1 branch.

      [PATCH v2 1/5] Device Tree Binding Documentation
      [PATCH v2 2/5] Merge MDIO Module
      [PATCH v2 3/5] Hisilicon Network Acceleration Engine Framework
      [PATCH v2 4/5] Distributed System Area Fabric Module
      [PATCH v2 5/5] Basic Ethernet Driver Module

      Changes from V1:
      1. Remove "inline" in C file (according to LKML comment, same in below).
      2. Fix a bug about class_find_device.
      3. Change the DTS pattern on hnae, restruct it to compatible with Hi1610 
soc.
      4. Unified hip04_mdio and hip05_mdio into hns_mdio, which is more usaul 
for
         later SOCs.

      V1 Patches Reference: https://lkml.org/lkml/2015/8/14/165
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b5996f11ea5496d0445078f47d22c987888ed467
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:50 2015 +0800

      net: add Hisilicon Network Subsystem basic ethernet support

      This is to add basic ethernet support for HNS. It is one of the way to
      use the HNS acceleration engine. But most of the decoding/encoding
      capability of the AE cannot be used in this way.

      This submit contains the basic feature as a ethernet driver. More will
      be added later.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 511e6bc071db1484d1a3d1d0bd4c244cf33910ff
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:49 2015 +0800

      net: add Hisilicon Network Subsystem DSAF support

      DSAF, namely Distributed System Area Fabric, is one of the HNS
      acceleration engine implementation. This patch add DSAF driver to the
      system.

      hns_ae_adapt: the adaptor for registering the driver to HNAE framework
      hns_dsaf_mac: MAC cover interface for GE and XGE
      hns_dsaf_gmac: GE (10/100/1000G Ethernet) MAC function
      hns_dsaf_xgmac: XGE (10000+G Ethernet) MAC function
      hns_dsaf_main: the platform device driver for the whole hardware
      hns_dsaf_misc: some misc helper function, such as LED support
      hns_dsaf_ppe: packet process engine function
      hns_dsaf_rcb: ring buffer function

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6fe6611ff275522a4e4c0359e2f46cdd07780d2f
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:48 2015 +0800

      net: add Hisilicon Network Subsystem hnae framework support

      HNAE (Hisilicon Network Acceleration Engine) is a framework to provide a
      unified ring buffer interface for Hisilicon Network Acceleration
      Engines.

      With the interface, upper layer can work as ethernet driver, ODP driver
      or other service driver on purpose.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b904d39406a61c056c3fe1b45867f0161827ef1
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:47 2015 +0800

      net: add Hisilicon Network Subsystem MDIO support

      The MDIO support for Hisilicon Network Subsystem. It is used in Hislicon
      hip04, hip05 and Hi1610 SoC to control the external PHY

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fc7e37c6b2704fb0360f7ecf747d5d3012ef9632
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:51:46 2015 +0800

      net: add Hisilicon Network Subsystem support (config and documents)

      The Hisilicon Network Subsystem is a long term evolution IP which is
      supposed to be used in Hisilicon ICT SoC. The IP, which is called hns
      for short, is a TCP/IP acceleration engine, which can directly decode
      TCP/IP stream and distribute them to different ring buffers.

      HNS can be configured to work on different mode for different scenario.
      This patch make use only some of the mode to make it as standard
      ethernet NIC. The other mode will be added soon.

      The whole function has 4 kernel sub-modules:

      hnae: the HNS acceleration engine framework. It provides a abstract
      interface between the engine and the upper layers which make use of the
      engine by ring buffer.

      hns_enet_drv: a standard ethernet driver that base on the ring buffer.

      hns_dsaf: one of the implementation of HNS acceleration engine, which is
      applied on Hililicon hip05, Hi1610 and other later-on SoCs

      hns_mdio: the mdio control to the PHY, used by acceleration engine

      This submit add basic config and documents

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: Kenneth Lee <liguozhu@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <Yisen.Zhuang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 812494d9a0cacf77e0a538be18183c7b471812aa
  Author: chas williams <3chas3@xxxxxxxxx>
  Date:   Wed Sep 16 16:28:25 2015 -0400

      xen-netfront: always set num queues if possible

      If netfront connects with two (or more) queues and then reconnects with
      only one queue it fails to delete or rewrite the multi-queue-num-queues
      key and netback will try to use the wrong number of queues.

      Always write the num-queues field if the backend has multi-queue support.

      Signed-off-by: Chas Williams <3chas3@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba5ca7848be05db6235aeb703586b821aa00e381
  Author: Ivan Vecera <ivecera@xxxxxxxxxx>
  Date:   Wed Sep 16 15:27:43 2015 +0200

      bna: check for dma mapping errors

      Check for DMA mapping errors, recover from them and register them in
      ethtool stats like other errors.

      Cc: Rasesh Mody <rasesh.mody@xxxxxxxxxx>
      Signed-off-by: Ivan Vecera <ivecera@xxxxxxxxxx>
      Acked-by: Rasesh Mody <rasesh.mody@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b74c458906fc4a62f932ee8bb801d29baf15fec
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 15:16:57 2015 -0700

      rcu: Make ->cpu_no_qs be a union for aggregate OR

      This commit converts the rcu_data structure's ->cpu_no_qs field
      to a union.  The bytewise side of this union allows individual access
      to indications as to whether this CPU needs to find a quiescent state
      for a normal (.norm) and/or expedited (.exp) grace period.  The setwise
      side of the union allows testing whether or not a quiescent state is
      needed at all, for either type of grace period.

      For now, only .norm is used.  A later commit will introduce the expedited
      usage.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 0d43eb34f9aabcddf41c99b7af2d0ced33e9a3cc
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 14:17:29 2015 -0700

      rcu: Invert passed_quiesce and rename to cpu_no_qs

      This commit inverts the sense of the rcu_data structure's ->passed_quiesce
      field and renames it to ->cpu_no_qs.  This will allow a later commit to
      use an "aggregate OR" operation to test expedited as well as normal grace
      periods without added overhead.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 97c668b8e983b722e2ed765b98b05f644aff1b13
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 6 11:31:51 2015 -0700

      rcu: Rename qs_pending to core_needs_qs

      An upcoming commit needs to invert the sense of the ->passed_quiesce
      rcu_data structure field, so this commit is taking this opportunity
      to clarify things a bit by renaming ->qs_pending to ->core_needs_qs.

      So if !rdp->core_needs_qs, then this CPU need not concern itself with
      quiescent states, in particular, it need not acquire its leaf rcu_node
      structure's ->lock to check.  Otherwise, it needs to report the next
      quiescent state.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit bce5fa12aad148e15efd9bc0015dc4898b6e723b
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Aug 5 16:03:54 2015 -0700

      rcu: Move synchronize_sched_expedited() to combining tree

      Currently, synchronize_sched_expedited() uses a single global counter
      to track the number of remaining context switches that the current
      expedited grace period must wait on.  This is problematic on large
      systems, where the resulting memory contention can be pathological.
      This commit therefore makes synchronize_sched_expedited() instead use
      the combining tree in the same manner as synchronize_rcu_expedited(),
      keeping memory contention down to a dull roar.

      This commit creates a temporary function sync_sched_exp_select_cpus()
      that is very similar to sync_rcu_exp_select_cpus().  A later commit
      will consolidate these two functions, which becomes possible when
      synchronize_sched_expedited() switches from stop_one_cpu_nowait() to
      smp_call_function_single().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 8203d6d0ee784cfb2ebf89053f7fe399abc867d7
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Aug 2 13:53:17 2015 -0700

      rcu: Use single-stage IPI algorithm for RCU expedited grace period

      The current preemptible-RCU expedited grace-period algorithm invokes
      synchronize_sched_expedited() to enqueue all tasks currently running
      in a preemptible-RCU read-side critical section, then waits for all the
      ->blkd_tasks lists to drain.  This works, but results in both an IPI and
      a double context switch even on CPUs that do not happen to be running
      in a preemptible RCU read-side critical section.

      This commit implements a new algorithm that causes less OS jitter.
      This new algorithm IPIs all online CPUs that are not idle (from an
      RCU perspective), but refrains from self-IPIs.  If a CPU receiving
      this IPI is not in a preemptible RCU read-side critical section (or
      is just now exiting one), it pushes quiescence up the rcu_node tree,
      otherwise, it sets a flag that will be handled by the upcoming outermost
      rcu_read_unlock(), which will then push quiescence up the tree.

      The expedited grace period must of course wait on any pre-existing blocked
      readers, and newly blocked readers must be queued carefully based on
      the state of both the normal and the expedited grace periods.  This
      new queueing approach also avoids the need to update boost state,
      courtesy of the fact that blocked tasks are no longer ever migrated to
      the root rcu_node structure.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit b9585e940a0d78770cda8f9aebf81b17b4d19e6d
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Jul 31 16:04:45 2015 -0700

      rcu: Consolidate tree setup for synchronize_rcu_expedited()

      This commit replaces sync_rcu_preempt_exp_init1(() and
      sync_rcu_preempt_exp_init2() with sync_exp_reset_tree_hotplug()
      and sync_exp_reset_tree(), which will also be used by
      synchronize_sched_expedited(), and sync_rcu_exp_select_nodes(), which
      contains code specific to synchronize_rcu_expedited().

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 7922cd0e562cb2b8da2c8a0afda2e1c9bb4a94e2
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Jul 31 13:34:32 2015 -0700

      rcu: Move rcu_report_exp_rnp() to allow consolidation

      This is a nearly pure code-movement commit, moving rcu_report_exp_rnp(),
      sync_rcu_preempt_exp_done(), and rcu_preempted_readers_exp() so
      that later commits can make synchronize_sched_expedited() use them.
      The non-code-movement portion of this commit tags rcu_report_exp_rnp()
      as __maybe_unused to avoid build errors when CONFIG_PREEMPT=n.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit f4ecea309d3e17ba5e90082308125ad23bd5701b
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Jul 29 17:28:11 2015 -0700

      rcu: Use rsp->expedited_wq instead of sync_rcu_preempt_exp_wq

      Now that there is an ->expedited_wq waitqueue in each rcu_state structure,
      there is no need for the sync_rcu_preempt_exp_wq global variable.  This
      commit therefore substitutes ->expedited_wq for sync_rcu_preempt_exp_wq.
      It also initializes ->expedited_wq only once at boot instead of at the
      start of each expedited grace period.

      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 19a5ecde086a6a5287978b12ae948fa691b197b7
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 20 21:01:22 2015 -0700

      rcu: Suppress lockdep false positive for rcp->exp_funnel_mutex

      In kernels built with CONFIG_PREEMPT=y, synchronize_rcu_expedited()
      invokes synchronize_sched_expedited() while holding RCU-preempt's
      root rcu_node structure's ->exp_funnel_mutex, which is acquired after
      the rcu_data structure's ->exp_funnel_mutex.  The first thing that
      synchronize_sched_expedited() will do is acquire RCU-sched's rcu_data
      structure's ->exp_funnel_mutex.   There is no danger of an actual deadlock
      because the locking order is always from RCU-preempt's expedited mutexes
      to those of RCU-sched.  Unfortunately, lockdep considers both rcu_data
      structures' ->exp_funnel_mutex to be in the same lock class and therefore
      reports a deadlock cycle.

      This commit silences this false positive by placing RCU-sched's rcu_data
      structures' ->exp_funnel_mutex locks into their own lock class.

      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 66e8c57da6bf6b847a48a5a6fda59512f733ed78
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Tue Aug 25 20:45:18 2015 +0200

      rcu: Change _wait_rcu_gp() to work around GCC bug 67055

      Code like this in inline functions confuses some recent versions of gcc:

        const int n = const-expr;
        whatever_t array[n];

      For more details, see:

        https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67055#c13

      This compiler bug results in the following failure after 114b7fd4b (rcu:
      Create rcu_sync infrastructure):

        In file included from include/linux/rcupdate.h:429:0,
                          from include/linux/rcu_sync.h:5,
                          from kernel/rcu/sync.c:1:
        include/linux/rcutiny.h: In function 'rcu_barrier_sched':
        include/linux/rcutiny.h:55:20: internal compiler error: Segmentation 
fault
          static inline void rcu_barrier_sched(void)

      This commit therefore eliminates the constant local variable in favor of
      direct use of the expression.

      Reported-and-tested-by: Mark Salter <msalter@xxxxxxxxxx>
      Reported-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>

  commit 2259f960b3a9b1020dccbf948c97311ce586db1b
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 20 13:30:30 2015 -0400

      NFSv4.x/pnfs: Don't try to recover stateids twice in layoutget

      If the current open or layout stateid doesn't match the stateid used
      in the layoutget RPC call, then don't try to recover it.

      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 24311f884189d42d40354a6f38ca218eb9aeb811
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 20 10:50:17 2015 -0400

      NFSv4: Recovery of recalled read delegations is broken

      When a read delegation is being recalled, and we're reclaiming the
      cached opens, we need to make sure that we only reclaim read-only
      modes.
      A previous attempt to do this, relied on retrieving the delegation
      type from the nfs4_opendata structure. Unfortunately, as Kinglong
      pointed out, this field can only be set when performing reboot recovery.

      Furthermore, if we call nfs4_open_recover(), then we end up clobbering
      the state->flags for all modes that we're not recovering...

      The fix is to have the delegation recall code pass this information
      to the recovery call, and then refactor the recovery code so that
      nfs4_open_delegation_recall() does not need to call nfs4_open_recover().

      Reported-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Fixes: 39f897fdbd46 ("NFSv4: When returning a delegation, don't...")
      Tested-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Cc: NeilBrown <neilb@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit f491e70ccffa5d19aa51c958909320fa1f3905ed
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 18:09:55 2015 +0200

      hwmon: (pwm-fan) Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit fe5152882a45a2545d44d39fe29badc8e4f66ad3
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 18:09:28 2015 +0200

      hwmon: (gpio-fan) Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 3245acbce952cda75b2fafa8e40452ef0c4756c1
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 18:09:11 2015 +0200

      hwmon: (abx500) Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit b7f76ea2ef6739ee484a165ffbac98deb855d3d3
  Author: Jann Horn <jann@xxxxxxxxx>
  Date:   Fri Sep 18 23:41:23 2015 +0200

      security: fix typo in security_task_prctl

      Signed-off-by: Jann Horn <jann@xxxxxxxxx>
      Reviewed-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3eb4ee68254235e4f47bc0410538fcdaede39589
  Author: Thomas Huth <thuth@xxxxxxxxxx>
  Date:   Fri Sep 18 08:57:28 2015 +0200

      KVM: PPC: Book3S: Take the kvm->srcu lock in 
kvmppc_h_logical_ci_load/store()

      Access to the kvm->buses (like with the kvm_io_bus_read() and -write()
      functions) has to be protected via the kvm->srcu lock.
      The kvmppc_h_logical_ci_load() and -store() functions are missing
      this lock so far, so let's add it there, too.
      This fixes the problem that the kernel reports "suspicious RCU usage"
      when lock debugging is enabled.

      Cc: stable@xxxxxxxxxxxxxxx # v4.1+
      Fixes: 99342cf8044420eebdf9297ca03a14cb6a7085a1
      Signed-off-by: Thomas Huth <thuth@xxxxxxxxxx>
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>

  commit 7e022e717f54897e396504306d0c9b61452adf4e
  Author: Gautham R. Shenoy <ego@xxxxxxxxxxxxxxxxxx>
  Date:   Thu May 21 13:57:04 2015 +0530

      KVM: PPC: Book3S HV: Pass the correct trap argument to kvmhv_commence_exit

      In guest_exit_cont we call kvmhv_commence_exit which expects the trap
      number as the argument. However r3 doesn't contain the trap number at
      this point and as a result we would be calling the function with a
      spurious trap number.

      Fix this by copying r12 into r3 before calling kvmhv_commence_exit as
      r12 contains the trap number.

      Cc: stable@xxxxxxxxxxxxxxx # v4.1+
      Fixes: eddb60fb1443
      Signed-off-by: Gautham R. Shenoy <ego@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>

  commit 5fc3e64f941197d5b77abccbe0144b25c2c36f2f
  Author: Paul Mackerras <paulus@xxxxxxxxx>
  Date:   Fri Sep 18 13:13:44 2015 +1000

      KVM: PPC: Book3S HV: Fix handling of interrupted VCPUs

      This fixes a bug which results in stale vcore pointers being left in
      the per-cpu preempted vcore lists when a VM is destroyed.  The result
      of the stale vcore pointers is usually either a crash or a lockup
      inside collect_piggybacks() when another VM is run.  A typical
      lockup message looks like:

      [  472.161074] NMI watchdog: BUG: soft lockup - CPU#24 stuck for 22s! 
[qemu-system-ppc:7039]
      [  472.161204] Modules linked in: kvm_hv kvm_pr kvm xt_CHECKSUM 
ipt_MASQUERADE nf_nat_masquerade_ipv4 tun ip6t_rpfilter ip6t_REJECT 
nf_reject_ipv6 xt_conntrack ebtable_nat ebtable_broute bridge stp llc 
ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 
nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter 
ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat 
nf_conntrack iptable_mangle iptable_security iptable_raw ses enclosure shpchp 
rtc_opal i2c_opal powernv_rng binfmt_misc dm_service_time scsi_dh_alua radeon 
i2c_algo_bit drm_kms_helper ttm drm tg3 ptp pps_core cxgb3 ipr i2c_core mdio 
dm_multipath [last unloaded: kvm_hv]
      [  472.162111] CPU: 24 PID: 7039 Comm: qemu-system-ppc Not tainted 
4.2.0-kvm+ #49
      [  472.162187] task: c000001e38512750 ti: c000001e41bfc000 task.ti: 
c000001e41bfc000
      [  472.162262] NIP: c00000000096b094 LR: c00000000096b08c CTR: 
c000000000111130
      [  472.162337] REGS: c000001e41bff520 TRAP: 0901   Not tainted  
(4.2.0-kvm+)
      [  472.162399] MSR: 9000000100009033 <SF,HV,EE,ME,IR,DR,RI,LE>  CR: 
24848844  XER: 00000000
      [  472.162588] CFAR: c00000000096b0ac SOFTE: 1
      GPR00: c000000000111170 c000001e41bff7a0 c00000000127df00 0000000000000001
      GPR04: 0000000000000003 0000000000000001 0000000000000000 0000000000874821
      GPR08: c000001e41bff8e0 0000000000000001 0000000000000000 d00000000efde740
      GPR12: c000000000111130 c00000000fdae400
      [  472.163053] NIP [c00000000096b094] _raw_spin_lock_irqsave+0xa4/0x130
      [  472.163117] LR [c00000000096b08c] _raw_spin_lock_irqsave+0x9c/0x130
      [  472.163179] Call Trace:
      [  472.163206] [c000001e41bff7a0] [c000001e41bff7f0] 0xc000001e41bff7f0 
(unreliable)
      [  472.163295] [c000001e41bff7e0] [c000000000111170] __wake_up+0x40/0x90
      [  472.163375] [c000001e41bff830] [d00000000efd6fc0] 
kvmppc_run_core+0x1240/0x1950 [kvm_hv]
      [  472.163465] [c000001e41bffa30] [d00000000efd8510] 
kvmppc_vcpu_run_hv+0x5a0/0xd90 [kvm_hv]
      [  472.163559] [c000001e41bffb70] [d00000000e9318a4] 
kvmppc_vcpu_run+0x44/0x60 [kvm]
      [  472.163653] [c000001e41bffba0] [d00000000e92e674] 
kvm_arch_vcpu_ioctl_run+0x64/0x170 [kvm]
      [  472.163745] [c000001e41bffbe0] [d00000000e9263a8] 
kvm_vcpu_ioctl+0x538/0x7b0 [kvm]
      [  472.163834] [c000001e41bffd40] [c0000000002d0f50] 
do_vfs_ioctl+0x480/0x7c0
      [  472.163910] [c000001e41bffde0] [c0000000002d1364] SyS_ioctl+0xd4/0xf0
      [  472.163986] [c000001e41bffe30] [c000000000009260] system_call+0x38/0xd0
      [  472.164060] Instruction dump:
      [  472.164098] ebc1fff0 ebe1fff8 7c0803a6 4e800020 60000000 60000000 
60420000 8bad02e2
      [  472.164224] 7fc3f378 4b6a57c1 60000000 7c210b78 <e92d0000> 89290009 
792affe3 40820070

      The bug is that kvmppc_run_vcpu does not correctly handle the case
      where a vcpu task receives a signal while its guest vcpu is executing
      in the guest as a result of being piggy-backed onto the execution of
      another vcore.  In that case we need to wait for the vcpu to finish
      executing inside the guest, and then remove this vcore from the
      preempted vcores list.  That way, we avoid leaving this vcpu's vcore
      on the preempted vcores list when the vcpu gets interrupted.

      Fixes: ec2571650826
      Reported-by: Thomas Huth <thuth@xxxxxxxxxx>
      Tested-by: Thomas Huth <thuth@xxxxxxxxxx>
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>

  commit a42fb351ca1f340f8307468be765e3f77ddedda9
  Author: Knuth Posern <knuth@xxxxxxxxxx>
  Date:   Sun Sep 20 21:25:22 2015 +0200

      thunderbolt: Allow loading of module on recent Apple MacBooks with 
thunderbolt 2 controller

      The pci device ids listed in the thunderbolt driver are to restrictive,
      which prevents the driver from being loaded on recent Apple MacBooks
      using a thunderbolt 2 controller. In particular this prevented any
      hot-plugging functionality for thunderbolt based ethernet dongles
      (i.e. Apples thunderbolt gigabit ethernet broadcom tg3 based dongle
      Model A1433 EMC 2590).

      Changing the subvendor and subdevice to PCI_ANY_ID the thunderbolt driver
      loads and binds to the pci device 07:00.0 System peripheral:
      Intel Corporation Device 156c which is the thunderbolt 2 controller on
      the MacBookPro12,1.

      Successfully tested on MacBookPro12,1. With the patch the thunderbolt
      module gets now loaded on boot. And it provides hot-plugging support both
      for a cold-plugged and a warm-plugged ethernet dongle.

      Signed-off-by: Andreas Noever <andreas.noever@xxxxxxxxx>
      Acked-by: Knuth Posern <knuth@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 1f93e4a96c9109378204c147b3eec0d0e8100fde
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 20 14:32:34 2015 -0700

      Linux 4.3-rc2

  commit 8714d46dc5b95a6a898ec8f1e67237c7995adfc6
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Sun Sep 20 23:04:22 2015 +0800

      NFS: Fix an infinite loop when layoutget fail with BAD_STATEID

      If layouget fail with BAD_STATEID, restart should not using the old 
stateid.
      But, nfs client choose the layout stateid at first, and then the open 
stateid.

      To avoid the infinite loop of using bad stateid for layoutget,
      this patch sets the layout flag'ss NFS_LAYOUT_INVALID_STID bit to
      skip choosing the bad layout stateid.

      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 6f29b9bba7b08c6b1d6f2cc4cf750b342fc1946c
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Sun Sep 20 23:03:28 2015 +0800

      NFS: Do cleanup before resetting pageio read/write to mds

      There is a reference leak of layout segment after resetting
      pageio read/write to mds.

      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.0+
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit e4877d64f00964d86a6e4a023011cccc73899018
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 20:23:34 2015 +0200

      x86/fpu/math-emu: Add support for FISTTP instructions

      These FPU instructions were added in SSE3-enabled CPUs.

      Run-tested by booting with "no387 nofxsr" and running test
      program:

        [RUN]   Testing fisttp instructions
        [OK]    fisttp

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442600614-28428-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a58e2ecd019d9ffb9f1813faf6151716fdecbae5
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Sun Sep 20 16:03:10 2015 +0200

      x86/fpu/math-emu, selftests: Add test for FISTTP instructions

        $ ./test_FISTTP_32
        [RUN]   Testing fisttp instructions
        [OK]    fisttp

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442757790-27233-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3dc33bd30f3e1c1bcaaafa3482737694debf0f0b
  Author: Kees Cook <keescook@xxxxxxxxxxxx>
  Date:   Wed Aug 12 17:55:19 2015 -0700

      x86/entry/vsyscall: Add CONFIG to control default

      Most modern systems can run with vsyscall=none. In an effort to
      provide a way for build-time defaults to lack legacy settings,
      this adds a new CONFIG to select the type of vsyscall mapping to
      use, similar to the existing "vsyscall" command line parameter.

      Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Acked-by: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150813005519.GA11696@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9a9d8642d03a7512f78cbe7ed6a2011fad3cbca3
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 16:53:30 2015 +0200

      x86/fpu/math-emu: Add support for FCMOVcc insns

      Run-tested by booting with "no387 nofxsr" and running test
      program:

        [RUN]   Testing fcmovCC instructions
        [OK]    fcmovCC

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442588010-20055-3-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b8e4a910e576961009a87d07f6b7eff67c5c2e34
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 16:53:29 2015 +0200

      x86/fpu/math-emu: Add support for F[U]COMI[P] insns

      Run-tested by booting with "no387 nofxsr" and running test
      program:

        [RUN]   Testing f[u]comi[p] instructions

        [OK]    f[u]comi[p]

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442588010-20055-2-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4aef363e48177d451b4d263c69dd2c86437e988b
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Fri Sep 18 16:53:28 2015 +0200

      x86/fpu/math-emu: Remove define layer for undocumented opcodes

      No code changes.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442588010-20055-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 57ca6897cd134efd8914cc230f602abad431c7db
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Thu Sep 17 15:02:13 2015 +0200

      x86/fpu/math-emu, selftests: Add tests for FCMOV and FCOMI insns

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442494933-13798-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 97584d1838b7e2545c3b10aacef3327fcaa9531b
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:54 2015 +0100

      thermal: power_allocator: exit early if there are no cooling devices

      Don't waste cycles in the power allocator governor's throttle function
      if there are no cooling devices and exit early.

      This commit doesn't change any functionality, but should provide better
      performance for the odd case of a thermal zone with trip points but
      without cooling devices.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 99bc7215bc60f6cd414cf1b85cd9d52cc596cccb
  Merge: 30ec568 7ae85dc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 21:05:02 2015 -0700

      Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM fixes from Russell King:
       "Three fixes and a resulting cleanup for -rc2:

         - Andre Przywara reported that he was seeing a warning with the new
           cast inside DMA_ERROR_CODE's definition, and fixed the incorrect
           use.

         - Doug Anderson noticed that kgdb causes a "scheduling while atomic"
           bug.

         - OMAP5 folk noticed that their Thumb-2 compiled X servers crashed
           when enabling support to cover ARMv6 CPUs due to a kernel bug
           leaking some conditional context into the signal handler"

      * 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm:
        ARM: 8425/1: kgdb: Don't try to stop the machine when setting 
breakpoints
        ARM: 8437/1: dma-mapping: fix build warning with new DMA_ERROR_CODE 
definition
        ARM: get rid of needless #if in signal handling code
        ARM: fix Thumb2 signal handling when ARMv6 is enabled

  commit 30ec56824897fc70f668dcb302f08cc9080eadfa
  Merge: 009884f ae78581
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:57:45 2015 -0700

      Merge tag 'linux-kselftest-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest

      Pull kselftest fixes from Shuah Khan:
       "This update contains 7 fixes for problems ranging from build failurs
        to incorrect error reporting"

      * tag 'linux-kselftest-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest:
        selftests: exec: revert to default emit rule
        selftests: change install command to rsync
        selftests: mqueue: simplify the Makefile
        selftests: mqueue: allow extra cflags
        selftests: rename jump label to static_keys
        selftests/seccomp: add support for s390
        seltests/zram: fix syntax error

  commit 009884f384dcc71909f2b861c317da7242979f31
  Merge: d590b2d 0f40314
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:41:31 2015 -0700

      Merge tag 'pm+acpi-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull power management and ACPI updates from Rafael Wysocki:
       "Included are: a somewhat late devfreq update which however is mostly
        fixes and cleanups with one new thing only (the PPMUv2 support on
        Exynos5433), an ACPI cpufreq driver fixup and two ACPI core cleanups
        related to preprocessor directives.

        Specifics:

         - Fix a memory allocation size in the devfreq core (Xiaolong Ye).

         - Fix a mistake in the exynos-ppmu DT binding (Javier Martinez
           Canillas).

         - Add support for PPMUv2 ((Platform Performance Monitoring Unit
           version 2.0) on the Exynos5433 SoCs (Chanwoo Choi).

         - Fix a type casting bug in the Exynos PPMU code (MyungJoo Ham).

         - Assorted devfreq code cleanups and optimizations (Javi Merino,
           MyungJoo Ham, Viresh Kumar).

         - Fix up the ACPI cpufreq driver to use a more lightweight way to get
           to its private data in the ->get() callback (Rafael J Wysocki).

         - Fix a CONFIG_ prefix bug in one of the ACPI drivers and make the
           ACPI subsystem use IS_ENABLED() instead of #ifdefs in function
           bodies (Sudeep Holla)"

      * tag 'pm+acpi-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        cpufreq: acpi-cpufreq: Use cpufreq_cpu_get_raw() in ->get()
        ACPI: Eliminate CONFIG_.*{, _MODULE} #ifdef in favor of IS_ENABLED()
        ACPI: int340x_thermal: add missing CONFIG_ prefix
        PM / devfreq: Fix incorrect type issue.
        PM / devfreq: tegra: Update governor to use devfreq_update_stats()
        PM / devfreq: comments for get_dev_status usage updated
        PM / devfreq: drop comment about thermal setting max_freq
        PM / devfreq: cache the last call to get_dev_status()
        PM / devfreq: Drop unlikely before IS_ERR(_OR_NULL)
        PM / devfreq: exynos-ppmu: bit-wise operation bugfix.
        PM / devfreq: exynos-ppmu: Update documentation to support PPMUv2
        PM / devfreq: exynos-ppmu: Add the support of PPMUv2 for Exynos5433
        PM / devfreq: event: Remove incorrect property in exynos-ppmu DT binding

  commit d590b2d4bf61ab8d9ccaae033063eabe15699f9e
  Merge: e6827ba d34e210
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:17:40 2015 -0700

      Merge tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux

      Pull clk fixes from Stephen Boyd:
       "A few driver fixes for tegra, rockchip, and st SoCs and a two-liner in
        the framework to avoid oops when get_parent ops return out of range
        values on tegra platforms"

      * tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:
        drivers: clk: st: Rename st_pll3200c32_407_c0_x into st_pll3200c32_cx_x
        clk: check for invalid parent index of orphans in __clk_init()
        clk: tegra: dfll: Properly protect OPP list
        clk: rockchip: add critical clock for rk3368

  commit e6827bafd6b56fa25ec380840fe6f47e9a213fbe
  Merge: dc847d5 2338f73
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:10:30 2015 -0700

      Merge tag 'led-fixes-for-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds

      Pull LED fixes from Jacek Anaszewski:
       - fix module autoload for six OF platform drivers (aat1290, bcm6328,
         bcm6358, ktd2692, max77693, ns2)
       - aat1290: add missing static modifier
       - ipaq-micro: add missing LEDS_CLASS dependency
       - lp55xx: correct Kconfig dependecy for f/w user helper

      * tag 'led-fixes-for-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds:
        leds:lp55xx: Correct Kconfig dependency for f/w user helper
        leds: leds-ipaq-micro: Add LEDS_CLASS dependency
        leds: aat1290: add 'static' modifier to init_mm_current_scale
        leds: leds-ns2: Fix module autoload for OF platform driver
        leds: max77693: Fix module autoload for OF platform driver
        leds: ktd2692: Fix module autoload for OF platform driver
        leds: bcm6358: Fix module autoload for OF platform driver
        leds: bcm6328: Fix module autoload for OF platform driver
        leds: aat1290: Fix module autoload for OF platform driver

  commit dc847d5b4aa852c41b56c21bdc759fee13cc8f68
  Merge: 2673ee5 e116a64
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 20:04:11 2015 -0700

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull rdma fixes from Doug Ledford:
       "The new hfi1 driver in staging/rdma has had a number of fixup patches
        since being added to the tree.  This is the first batch of those fixes"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/hfi: Properly set permissions for user device files
        IB/hfi1: mask vs shift confusion
        IB/hfi1: clean up some defines
        IB/hfi1: info leak in get_ctxt_info()
        IB/hfi1: fix a locking bug
        IB/hfi1: checking for NULL instead of IS_ERR
        IB/hfi1: fix sdma_descq_cnt parameter parsing
        IB/hfi1: fix copy_to/from_user() error handling
        IB/hfi1: fix pstateinfo from returning improperly byteswapped value

  commit 2673ee565f10e0f2fdcf61f7a715e6b4ac2497dc
  Merge: 133bb59 ae4f976
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 19:13:03 2015 -0700

      Merge branch 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

      Pull libnvdimm fixes from Dan Williams:

       - a boot regression (since v4.2) fix for some ARM configurations from
         Tyler

       - regression (since v4.1) fixes for mkfs.xfs on a DAX enabled device
         from Jeff.  These are tagged for -stable.

       - a pair of locking fixes from Axel that are hidden from lockdep since
         they involve device_lock().  The "btt" one is tagged for -stable, the
         other only applies to the new "pfn" mechanism in v4.3.

       - a fix for the pmem ->rw_page() path to use wmb_pmem() from Ross.

      * 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        mm: fix type cast in __pfn_to_phys()
        pmem: add proper fencing to pmem_rw_page()
        libnvdimm: pfn_devs: Fix locking in namespace_store
        libnvdimm: btt_devs: Fix locking in namespace_store
        blockdev: don't set S_DAX for misaligned partitions
        dax: fix O_DIRECT I/O to the last block of a blockdev

  commit 133bb59585140747fd3938002670cb395f40dc76
  Merge: 590dca3 9945187
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 18:57:09 2015 -0700

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull block updates from Jens Axboe:
       "This is a bit bigger than it should be, but I could (did) not want to
        send it off last week due to both wanting extra testing, and expecting
        a fix for the bounce regression as well.  In any case, this contains:

         - Fix for the blk-merge.c compilation warning on gcc 5.x from me.

         - A set of back/front SG gap merge fixes, from me and from Sagi.
           This ensures that we honor SG gapping for integrity payloads as
           well.

         - Two small fixes for null_blk from Matias, fixing a leak and a
           capacity propagation issue.

         - A blkcg fix from Tejun, fixing a NULL dereference.

         - A fast clone optimization from Ming, fixing a performance
           regression since the arbitrarily sized bio's were introduced.

         - Also from Ming, a regression fix for bouncing IOs"

      * 'for-linus' of git://git.kernel.dk/linux-block:
        block: fix bounce_end_io
        block: blk-merge: fast-clone bio when splitting rw bios
        block: blkg_destroy_all() should clear q->root_blkg and ->root_rl.blkg
        block: Copy a user iovec if it includes gaps
        block: Refuse adding appending a gapped integrity page to a bio
        block: Refuse request/bio merges with gaps in the integrity payload
        block: Check for gaps on front and back merges
        null_blk: fix wrong capacity when bs is not 512 bytes
        null_blk: fix memory leak on cleanup
        block: fix bogus compiler warnings in blk-merge.c

  commit 590dca3a71875461e8fea3013af74386945191b2
  Author: Chris Mason <clm@xxxxxx>
  Date:   Fri Sep 18 13:35:08 2015 -0400

      fs-writeback: unplug before cond_resched in writeback_sb_inodes

      Commit 505a666ee3fc ("writeback: plug writeback in wb_writeback() and
      writeback_inodes_wb()") has us holding a plug during writeback_sb_inodes,
      which increases the merge rate when relatively contiguous small files
      are written by the filesystem.  It helps both on flash and spindles.

      For an fs_mark workload creating 4K files in parallel across 8 drives,
      this commit improves performance ~9% more by unplugging before calling
      cond_resched().  cond_resched() doesn't trigger an implicit unplug, so
      explicitly getting the IO down to the device before scheduling reduces
      latencies for anyone waiting on clean pages.

      It also cuts down on how often we use kblockd to unplug, which means
      less work bouncing from one workqueue to another.

      Many more details about how we got here:

        https://lkml.org/lkml/2015/9/11/570

      Signed-off-by: Chris Mason <clm@xxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 4b0ab51db32eba0f48b7618254742f143364a28d
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 09:52:07 2015 -0400

      SUNRPC: xs_sock_mark_closed() does not need to trigger socket autoclose

      Under all conditions, it should be quite sufficient just to mark
      the socket as disconnected. It will then be closed by the
      transport shutdown or reconnect code.

      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 79234c3db6842a3de03817211d891e0c2878f756
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 15:53:24 2015 -0400

      SUNRPC: Lock the transport layer on shutdown

      Avoid all races with the connect/disconnect handlers by taking the
      transport lock.

      Reported-by:"Suzuki K. Poulose" <suzuki.poulose@xxxxxxx>
      Acked-by: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 002801fc5372ecb725f0d7939f88ca752ce1d499
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:37:55 2015 -0700

      Input: imx6ul_tsc - fix controller name

      We should better write "Touchscreen".

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 5eab3cf3e48cf658f3432e8ba31436d5a4f6a219
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:37:31 2015 -0700

      Input: imx6ul_tsc - use the preferred method for kzalloc()

      According to Documentation/CodingStyle:

      "The preferred form for passing a size of a struct is the following:

        p = kmalloc(sizeof(*p), ...);"

      so do as suggested.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 3905de62b2624a4574776b3b7ddfa97758b75edc
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:37:08 2015 -0700

      Input: imx6ul_tsc - check for negative return value

      We should check for negative values returned by platform_get_irq().

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 6cc527b05847984990a09ef028b2f670bbc72c46
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:36:35 2015 -0700

      Input: imx6ul_tsc - propagate the errors

      imx6ul_adc_init() may fail in two cases, so we should better
      propagate the errors and make sure that the callers of
      this function also check and propagate the errors accordingly.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 46b018fa95003f8159f5fcf9b8cd89acaea34e31
  Author: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
  Date:   Sat Sep 5 10:19:38 2015 -0700

      Input: walkera0701 - fix abs() calculations on 64 bit values

      abs() function can not be used with 64 bit values, so let's switch to
      abs64(). From include/linux/kernel.h:

      /*
       * abs() handles unsigned and signed longs, ints, shorts and chars.
       * For all input types abs() returns a signed long.
       * abs() should not be used for 64-bit types (s64, u64, long long)
       * - use abs64() for those.
       */

      Reported-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 86a39bffc4e94f80527c14fe00a3acb432910ef3
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:38:39 2015 -0700

      Input: mms114 - remove unneded semicolons

      They aren't needed and are just creating null statements so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit b9ab471b71900ca8a670ecf4f1cc65b626953655
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:38:31 2015 -0700

      Input: pm8941-pwrkey - remove unneded semicolon

      It's not needed and is just creating a null statement so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit b1452723cf23c908eed2bf6baf0c23943eb0e8bf
  Author: Daniel Martin <daniel.martin@xxxxxxxxxxx>
  Date:   Sat Sep 19 11:27:19 2015 -0700

      Input: fix typo in MT documentation

      Section "Event Computation" had this:
          ...
          ABS_MT_TOOL_X := C_X
          ABS_MT_TOOL_X := C_Y

      Replace the second ABS_MT_TOOL_X with ABS_MT_TOOL_Y.

      Signed-off-by: Daniel Martin <consume.noise@xxxxxxxxx>
      Acked-by: Benjamin Tissoires <benjamin.tissoires@xxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit b0379d7aa415249ce1dab8dd2554f8845d6822ab
  Author: Dudley Du <dudl@xxxxxxxxxxx>
  Date:   Sat Sep 19 10:39:32 2015 -0700

      Input: cyapa - fix address of Gen3 devices in device tree documentation

      All of the Gen3 touchpads are fixed with I2C address 0x67, so correct the
      reg value description from 0x24 to 0x67.

      Signed-off-by: Dudley Du <dudl@xxxxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit 5b64c173cdea21105eb4794487b3d593f0a2e6c3
  Author: Adam Thomson <Adam.Thomson.Opensource@xxxxxxxxxxx>
  Date:   Wed Sep 16 10:13:19 2015 +0100

      ASoC: fsl_ssi: Fix checking of dai format for AC97 mode

      Current code incorrectly treats dai format for AC97 as bit mask
      whereas it's actually an integer value. This causes DAI formats
      other than AC97 (e.g. DSP_B) to trigger AC97 related code,
      which is incorrect and breaks functionality. This patch fixes
      the code to correctly compare values to determine AC97 or not.

      Signed-off-by: Adam Thomson <Adam.Thomson.Opensource@xxxxxxxxxxx>
      Acked-by: Timur Tabi <timur@xxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit f072f91aa7517386344476813ca0799e08fd0c35
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Fri Sep 18 16:02:21 2015 +0530

      ASoC: wm0010: fix error path

      Fix the error path so that we can free the allocated memory on the error
      path instead of releasing them individually on each error.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 2ace47be5a315def8f493ca77aa59c077ade30a1
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Fri Sep 18 16:02:20 2015 +0530

      ASoC: wm0010: fix memory leak

      We have requested for the firmware but we have missed releasing it both
      on success and on error path.
      While checking the code it turned out that the requested firmware is not
      even used. More over the same firmware is being loaded by
      wm0010_stage2_load().

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit c9e97b3cb2b80deb94c092a2022a6d385b838d84
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:42:17 2015 +0200

      spi: meson: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 7209fee89f435b69051bb6bffe7f191336ac2a5e
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:09:51 2015 +0200

      regulator: vexpress: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 2f9481e7dc0d3aacbaa07701f3ee2527f5d48301
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:09:24 2015 +0200

      regulator: gpio: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit d702ffd4d1df73b9c620af1654af42ff5b8d5c09
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 19:09:07 2015 +0200

      regulator: anatop: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 8524bb0c7ac688a3cd6ba12dae6104c54d0566b9
  Author: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:19:43 2015 +0800

      ASoC: wm8960: correct the max register value of mic boost pga

      the max register value of mic boost pga should be 3.

      Signed-off-by: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit ee92cfb030c16ddb01f6543968f13bcb61ed9da5
  Author: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 17:19:25 2015 +0800

      ASoC: wm8962: remove 64k sample rate support

      wm8962 can't support 64k sample rate. When playing a 64KHz wave file,
      'Unsupported rate 64000Hz' will be prompted.

      Signed-off-by: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 9ae3109d1d9ff367e0d0efa7073cc078edb9a372
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Sat Sep 19 07:31:47 2015 -0700

      regmap: debugfs: Remove scratch buffer for register length calculation

      Now we no longer use the scratch buffer for register length calculation
      there is no need for callers to supply one.

      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 176fc2d5770a0990eebff903ba680d2edd32e718
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Sat Sep 19 07:12:34 2015 -0700

      regmap: debugfs: Don't bother actually printing when calculating max 
length

      The in kernel snprintf() will conveniently return the actual length of
      the printed string even if not given an output beffer at all so just do
      that rather than relying on the user to pass in a suitable buffer,
      ensuring that we don't need to worry if the buffer was truncated due to
      the size of the buffer passed in.

      Reported-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit b763ec17ac762470eec5be8ebcc43e4f8b2c2b82
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Sat Sep 19 07:00:18 2015 -0700

      regmap: debugfs: Ensure we don't underflow when printing access masks

      If a read is attempted which is smaller than the line length then we may
      underflow the subtraction we're doing with the unsigned size_t type so
      move some of the calculation to be additions on the right hand side
      instead in order to avoid this.

      Reported-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit ae4f976968896f8f41b3a7aa21be6146492211e5
  Author: Tyler Baker <tyler.baker@xxxxxxxxxx>
  Date:   Sat Sep 19 03:58:10 2015 -0400

      mm: fix type cast in __pfn_to_phys()

      The various definitions of __pfn_to_phys() have been consolidated to
      use a generic macro in include/asm-generic/memory_model.h. This hit
      mainline in the form of 012dcef3f058 "mm: move __phys_to_pfn and
      __pfn_to_phys to asm/generic/memory_model.h". When the generic macro
      was implemented the type cast to phys_addr_t was dropped which caused
      boot regressions on ARM platforms with more than 4GB of memory and
      LPAE enabled.

      It was suggested to use PFN_PHYS() defined in include/linux/pfn.h
      as provides the correct logic and avoids further duplication.

      Reported-by: kernelci.org bot <bot@xxxxxxxxxxxx>
      Suggested-by: Dan Williams <dan.j.williams@xxxxxxxxx>
      Signed-off-by: Tyler Baker <tyler.baker@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 0f40314b81b765c26202cde33523e35809adbe9b
  Merge: 7dc1d36 bcb2b0b
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Sep 18 23:07:46 2015 +0200

      Merge branch 'acpi-bus'

      * acpi-bus:
        ACPI: Eliminate CONFIG_.*{, _MODULE} #ifdef in favor of IS_ENABLED()
        ACPI: int340x_thermal: add missing CONFIG_ prefix

  commit 7dc1d36e8ef8f78f9dadf0476081f3c7ff7f79be
  Merge: 6ff33f3 1f0bd44 4184a8f
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Sep 18 23:05:28 2015 +0200

      Merge branches 'pm-cpufreq' and 'pm-devfreq'

      * pm-cpufreq:
        cpufreq: acpi-cpufreq: Use cpufreq_cpu_get_raw() in ->get()

      * pm-devfreq:
        PM / devfreq: Fix incorrect type issue.
        PM / devfreq: tegra: Update governor to use devfreq_update_stats()
        PM / devfreq: comments for get_dev_status usage updated
        PM / devfreq: drop comment about thermal setting max_freq
        PM / devfreq: cache the last call to get_dev_status()
        PM / devfreq: Drop unlikely before IS_ERR(_OR_NULL)
        PM / devfreq: exynos-ppmu: bit-wise operation bugfix.
        PM / devfreq: exynos-ppmu: Update documentation to support PPMUv2
        PM / devfreq: exynos-ppmu: Add the support of PPMUv2 for Exynos5433
        PM / devfreq: event: Remove incorrect property in exynos-ppmu DT binding

  commit 0a031ac5c00d091ce1f7007f22d5881620bf0a7e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:08 2015 -0500

      netfilter: Use nf_ct_net instead of dev_net(out) in nf_nat_masquerade_ipv6

      Use nf_ct_net(ct) instead of guessing that the netdevice out can
      reliably report the network namespace the conntrack operation is
      happening in.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit c7af6483b9f7f3eaba01b2e62d3d8a70cd89bdaf
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:07 2015 -0500

      netfilter: Pass net into nf_xfrm_me_harder

      Instead of calling dev_net on a likley looking network device
      pass state->net into nf_xfrm_me_harder.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 06198b34a3e09e06d9aecaa3727e0d37206cea77
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:06 2015 -0500

      netfilter: Pass priv instead of nf_hook_ops to netfilter hooks

      Only pass the void *priv parameter out of the nf_hook_ops.  That is
      all any of the functions are interested now, and by limiting what is
      passed it becomes simpler to change implementation details.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 176971b33859135d8dbda9b79e16cb1cf615eb92
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:05 2015 -0500

      ipvs: Read hooknum from state rather than ops->hooknum

      This should be more cache efficient as state is more likely to be in
      core, and the netfilter core will stop passing in ops soon.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit a31f1adc0948930fba9ab5a111ccd735a5d864c6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:04 2015 -0500

      netfilter: nf_conntrack: Add a struct net parameter to l4_pkt_to_tuple

      As gre does not have the srckey in the packet gre_pkt_to_tuple
      needs to perform a lookup in it's per network namespace tables.

      Pass in the proper network namespace to all pkt_to_tuple
      implementations to ensure gre (and any similar protocols) can get this
      right.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit a4ffe319ae72034e3f3332698a2fd83b6f063b18
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:03 2015 -0500

      act_connmark: Remember the struct net instead of guessing it.

      Stop guessing the struct net instead of remember it.  Guessing is just
      silly and will be problematic in the future when I implement routes
      between network namespaces.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 206e8c00752fbe9cc463184236ac64b2a532cda5
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:02 2015 -0500

      netfilter: Pass net to nf_dup_ipv4 and nf_dup_ipv6

      This allows them to stop guessing the network namespace with pick_net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 88182a0e0c665cbd2f01af743c7f88e494924246
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:01 2015 -0500

      netfilter: nf_tables: Use pkt->net instead of computing net from the 
passed net_devices

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 46448d0093ba18a212e314fd9ea029e740baa476
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:33:00 2015 -0500

      netfilter: nf_tables: Pass struct net in nft_pktinfo

      nft_pktinfo is passed on the stack so this does not bloat any in core
      data structures.

      By centrally computing this information this makes maintence of the code
      simpler, and understading of the code easier.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 686c9b50809dc80cba7c2e9f809471ab40bae735
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:59 2015 -0500

      netfilter: x_tables: Use par->net instead of computing from the passed 
net devices

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 156c196f6038610770588a708b9e0f7df2ead74a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:58 2015 -0500

      netfilter: x_tables: Pass struct net in xt_action_param

      As xt_action_param lives on the stack this does not bloat any
      persistent data structures.

      This is a first step in making netfilter code that needs to know
      which network namespace it is executing in simpler.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6aa187f21ca2d8ade791f01fd8fab908b1f27673
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:57 2015 -0500

      netfilter: nf_tables: kill nft_pktinfo.ops

      - Add nft_pktinfo.pf to replace ops->pf
      - Add nft_pktinfo.hook to replace ops->hooknum

      This simplifies the code, makes it more readable, and likely reduces
      cache line misses.  Maintainability is enhanced as the details of
      nft_hook_ops are of no concern to the recpients of nft_pktinfo.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 082a758f042e1c1eb241bfc2308ddc2b4ef6840d
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:56 2015 -0500

      inet netfilter: Prefer state->hook to ops->hooknum

      The values of nf_hook_state.hook and nf_hook_ops.hooknum must be the
      same by definition.

      We are more likely to access the fields in nf_hook_state over the
      fields in nf_hook_ops so with a little luck this results in
      fewer cache line misses, and slightly more consistent code.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 6cb8ff3f1a535b1d8eb5ea318932513d08eb3da7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:55 2015 -0500

      inet netfilter: Remove hook from ip6t_do_table, arp_do_table, ipt_do_table

      The values of ops->hooknum and state->hook are guaraneted to be equal
      making the hook argument to ip6t_do_table, arp_do_table, and
      ipt_do_table is unnecessary. Remove the unnecessary hook argument.

      In the callers use state->hook instead of ops->hooknum for clarity and
      to reduce the number of cachelines the callers touch.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 97b59c3a91d5ee4777658ff2136d1fdf13bd23d0
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Fri Sep 18 14:32:54 2015 -0500

      netfilter: ebtables: Simplify the arguments to ebt_do_table

      Nearly everything thing of interest to ebt_do_table is already present
      in nf_hook_state.  Simplify ebt_do_table by just passing in the skb,
      nf_hook_state, and the table.  This make the code easier to read and
      maintenance easier.

      To support this create an nf_hook_state on the stack in ebt_broute
      (the only caller without a nf_hook_state already available).  This new
      nf_hook_state adds no new computations to ebt_broute, but does use a
      few more bytes of stack.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 36aea585a1103b8c2a1de04637b8a4326b92c254
  Merge: 47bbbb3 4e47809
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 21:03:32 2015 +0200

      Merge tag 'ipvs-for-v4.4' of 
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next

      Simon Horman says:

      ====================
      IPVS Updates for v4.4

      please consider these IPVS Updates for v4.4.

      The updates include the following from Alex Gartrell:
      * Scheduling of ICMP
      * Sysctl to ignore tunneled packets; and hence some packet-looping 
scenarios
      ====================

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit ea9346514e77951e194f6db0205866f8478753f4
  Merge: 74a0939 8315b77
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 09:56:08 2015 -0700

      Merge tag 'usb-ci-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/peter.chen/usb into usb-linus

      Peter writes:

      USB Chipidea fixes for v4.3-rc2

      - Fix the stall implementation
      - Fix device mode transfer at zynq platform
      - other small fixes

  commit 00ade1f553e3b947cd26228392ee47d6f0f550e1
  Merge: 3ae8394 ad2aa04
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 09:28:20 2015 -0700

      Merge tag 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost

      Pull virtio fixes and cleanups from Michael Tsirkin:
       "This fixes the virtio-test tool, and improves the error handling for
        virtio-ccw"

      * tag 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost:
        virtio/s390: handle failures of READ_VQ_CONF ccw
        tools/virtio: propagate V=X to kernel build
        vhost: move features to core
        tools/virtio: fix build after 4.2 changes

  commit 3ae839454e77cdc87d499a4bfd0932dec5763b55
  Merge: fadb97b 00cc163
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 09:23:08 2015 -0700

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM fixes from Paolo Bonzini:
       "Mostly stable material, a lot of ARM fixes"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm: (22 
commits)
        sched: access local runqueue directly in single_task_running
        arm/arm64: KVM: Remove 'config KVM_ARM_MAX_VCPUS'
        arm64: KVM: Remove all traces of the ThumbEE registers
        arm: KVM: Disable virtual timer even if the guest is not using it
        arm64: KVM: Disable virtual timer even if the guest is not using it
        arm/arm64: KVM: vgic: Check for !irqchip_in_kernel() when mapping 
resources
        KVM: s390: Replace incorrect atomic_or with atomic_andnot
        arm: KVM: Fix incorrect device to IPA mapping
        arm64: KVM: Fix user access for debug registers
        KVM: vmx: fix VPID is 0000H in non-root operation
        KVM: add halt_attempted_poll to VCPU stats
        kvm: fix zero length mmio searching
        kvm: fix double free for fast mmio eventfd
        kvm: factor out core eventfd assign/deassign logic
        kvm: don't try to register to KVM_FAST_MMIO_BUS for non mmio eventfd
        KVM: make the declaration of functions within 80 characters
        KVM: arm64: add workaround for Cortex-A57 erratum #852523
        KVM: fix polling for guest halt continued even if disable it
        arm/arm64: KVM: Fix PSCI affinity info return value for non valid cores
        arm64: KVM: set {v,}TCR_EL2 RES1 bits
        ...

  commit 381c02f6d8ccad8ed574630f879c40fb59715124
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Wed Sep 16 18:18:49 2015 +0100

      perf record: Avoid infinite loop at buildid processing with no samples

      If a session contains no events, we can get stuck in an infinite loop in
      __perf_session__process_events, with a non-zero file_size and 
data_offset, but
      a zero data_size.

      In this case, we can mmap the entirety of the file (consisting of the 
file and
      attribute headers), and fetch_mmaped_event will correctly refuse to read 
any
      (unmapped and non-existent) event headers. This causes
      __perf_session__process_events to unmap the file and retry with the exact 
same
      parameters, getting stuck in an infinite loop.

      This has been observed to result in an exit-time hang when counting
      rare/unschedulable events with perf record, and can be triggered 
artificially
      with the script below:

        ----
        #!/bin/sh
        printf "REPRO: launching perf\n";
        ./perf record -e software/config=9/ sleep 1 &
        PERF_PID=$!;
        sleep 0.002;
        kill -2 $PERF_PID;
        printf "REPRO: waiting for perf (%d) to exit...\n" "$PERF_PID";
        wait $PERF_PID;
        printf "REPRO: perf exited\n";
        ----

      To avoid this, have __perf_session__process_events bail out early when
      the file has no data (i.e. it has no events).

      Commiter note:

      I only managed to reproduce this when setting
      /proc/sys/kernel/kptr_restrict to '1' and changing the code to
      purposefully not process any samples and no synthesized samples, i.e.
      kptr_restrict prevents 'record' from synthesizing the kernel mmaps for
      vmlinux + modules and since it is a workload started from perf, we don't
      synthesize mmap/comm records for existing threads.

      Adrian Hunter managed to reproduce it in his environment tho.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Tested-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442423929-12253-1-git-send-email-mark.rutland@xxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e116a64fab650aed3d7b9b4db0b59c07f361bc9f
  Author: Ira Weiny <ira.weiny@xxxxxxxxx>
  Date:   Thu Sep 17 13:47:49 2015 -0400

      IB/hfi: Properly set permissions for user device files

      Some of the device files are required to be user accessible for PSM while
      most should remain accessible only by root.

      Add a parameter to hfi1_cdev_init which controls if the user should have 
access
      to this device which places it in a different class with the appropriate
      devnode callback.

      In addition set the devnode call back for the existing class to be a bit 
more
      explicit for those permissions.

      Finally remove the unnecessary null check before class_destroy

      Tested-by: Donald Dutile <ddutile@xxxxxxxxxx>
      Signed-off-by: Haralanov, Mitko (mitko.haralanov@xxxxxxxxx)
      Signed-off-by: Ira Weiny <ira.weiny@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 7d630467d7c454d801d72b58f242c373a64e39ed
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 19:03:45 2015 +0300

      IB/hfi1: mask vs shift confusion

      We are shifting by the _MASK macros instead of the _SHIFT ones.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3f2686a2665b4d06753b602fe394b5d87bc7f279
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 19:02:54 2015 +0300

      IB/hfi1: clean up some defines

      I added spaces around operators so it matches kernel style because
      normally "-1ULL" is a number and " - 1" is a subtract operation.  Also
      removed some superflous "ULL" types so "1ULL" becomes "1".

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit ebe6b2e8bc2cd06a330b3f9be8a4fa3ff44ab026
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 09:42:25 2015 +0300

      IB/hfi1: info leak in get_ctxt_info()

      The cinfo struct has a hole after the last struct member so we need to
      zero it out.  Otherwise we disclose some uninitialized stack data.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 951842b0540d2ed49ae29ba968adc496baf46556
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 09:22:51 2015 +0300

      IB/hfi1: fix a locking bug

      mutex_trylock() returns zero on failure, not EBUSY.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 50b19729ced72cfa8bb1c44fed9203f395f13991
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 09:22:20 2015 +0300

      IB/hfi1: checking for NULL instead of IS_ERR

      __get_txreq() returns an ERR_PTR() but this checks for NULL so it would
      oops on failure.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit aeef010a0f63ad0a6f993d3da30753e9a8a39ec5
  Author: Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
  Date:   Tue Sep 15 10:19:27 2015 -0400

      IB/hfi1: fix sdma_descq_cnt parameter parsing

      The boolean tests should have been or-ed.

      Reported-by: David Binderman <dcb314@xxxxxxxxxxx>
      Reviewed-by: Jubin John <jubin.john@xxxxxxxxx>
      Signed-off-by: Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit e1df0068a24ba56673183cc3bd392d8bc301d423
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Tue Sep 15 13:35:25 2015 +0300

      IB/hfi1: fix copy_to/from_user() error handling

      copy_to/from_user() returns the number of bytes which we were not able
      to copy.  It doesn't return an error code.

      Also a couple places had a printk() on error and I removed that because
      people can take advantage of it to fill /var/log/messages with spam.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit aadfc3b2042d69a6b4b8d719d4221b988d7f31a5
  Author: Ira Weiny <ira.weiny@xxxxxxxxx>
  Date:   Wed Sep 9 01:28:21 2015 -0400

      IB/hfi1: fix pstateinfo from returning improperly byteswapped value

      Byteswap link_width_downgrade_*_active values before sending on the wire. 
 In
      addition properly define the Port State Info structure.

      Reviewed-by: Dennis Dalessandro <dennis.dalessandro@xxxxxxxxx>
      Reviewed-by: Christian Gomez <christian.gomez@xxxxxxxxx>
      Signed-off-by: Rimmer, Todd <todd.rimmer@xxxxxxxxx>
      Signed-off-by: Ira Weiny <ira.weiny@xxxxxxxxx>
      Acked-by: Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit ab1fffe3a73c694d698645451ba61255ec4ba5e6
  Author: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
  Date:   Fri Sep 18 15:02:50 2015 +0300

      ASoC: davinci-mcasp: Fix devm_kasprintf format string

      The '\n' at the end of the format string is not needed. It adds an extra
      line break when doing
      cat /proc/interrupts

      Signed-off-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit fadb97b089563da69ba326f9fea6399d071462b2
  Merge: 09784fb ae80a2f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 08:11:42 2015 -0700

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq updates from Thomas Gleixner:
       "This is a rather large update post rc1 due to the final steps of
        cleanups and API changes which had to wait for the preparatory patches
        to hit your tree.

         - Regression fixes for ARM GIC irqchips

         - Regression fixes and lockdep anotations for renesas irq chips

         - The leftovers of the cleanup and preparatory patches which have
           been ignored by maintainers

         - Final conversions of the newly merged users of obsolete APIs

         - Final removal of obsolete APIs

         - Final removal of ARM artifacts which had been introduced during the
           conversion of ARM to the generic interrupt code.

         - Final split of the irq_data into chip specific and common data to
           reflect the needs of hierarchical irq domains.

         - Treewide removal of the first argument of interrupt flow handlers,
           i.e. the irq number, which is not used by the majority of handlers
           and simple to retrieve from the other argument the irq descriptor.

         - A few comment updates and build warning fixes"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (40 commits)
        arm64: Remove ununsed set_irq_flags
        ARM: Remove ununsed set_irq_flags
        sh: Kill off set_irq_flags usage
        irqchip: Kill off set_irq_flags usage
        gpu/drm: Kill off set_irq_flags usage
        genirq: Remove irq argument from irq flow handlers
        genirq: Move field 'msi_desc' from irq_data into irq_common_data
        genirq: Move field 'affinity' from irq_data into irq_common_data
        genirq: Move field 'handler_data' from irq_data into irq_common_data
        genirq: Move field 'node' from irq_data into irq_common_data
        irqchip/gic-v3: Use IRQD_FORWARDED_TO_VCPU flag
        irqchip/gic: Use IRQD_FORWARDED_TO_VCPU flag
        genirq: Provide IRQD_FORWARDED_TO_VCPU status flag
        genirq: Simplify irq_data_to_desc()
        genirq: Remove __irq_set_handler_locked()
        pinctrl/pistachio: Use irq_set_handler_locked
        gpio: vf610: Use irq_set_handler_locked
        powerpc/mpc8xx: Use irq_set_handler_locked()
        powerpc/ipic: Use irq_set_handler_locked()
        powerpc/cpm2: Use irq_set_handler_locked()
        ...

  commit 09784fb8ef79f5c5adb9c1b4d0df000354e476e7
  Merge: f240bdd 590f078
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 08:06:28 2015 -0700

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fix from Thomas Gleixner:
       "A single regression fix for the x86 dma allocator which got wreckaged
        in the merge window"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/pci/dma: Fix gfp flags for coherent DMA memory allocation

  commit f240bdd2a5b7d523ecced64c855ee2c1499f2854
  Merge: a7d5c18 400c47d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 08:01:06 2015 -0700

      Merge tag 'powerpc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixes from Michael Ellerman:

       - Fix 32-bit TCE table init in kdump kernel from Nish

       - Fix kdump with non-power-of-2 crashkernel= from Nish

       - Abort cxl_pci_enable_device_hook() if PCI channel is offline from
         Andrew

       - Fix to release DRC when configure_connector() fails from Bharata

       - Wire up sys_userfaultfd()

       - Fix race condition in tearing down MSI interrupts from Paul

       - Fix unbalanced pci_dev_get() in cxl_probe() from Daniel

       - Fix cxl build failure due to -Wunused-variable gcc behaviour change
         from Ian

       - Tell the toolchain to use ABI v2 when building an LE boot wrapper
         from Benh

       - Fix THP to recompute hash value after a failed update from Aneesh

       - 32-bit memcpy/memset: only use dcbz once cache is enabled from
         Christophe

      * tag 'powerpc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc32: memset: only use dcbz once cache is enabled
        powerpc32: memcpy: only use dcbz once cache is enabled
        powerpc/mm: Recompute hash value after a failed update
        powerpc/boot: Specify ABI v2 when building an LE boot wrapper
        cxl: Fix build failure due to -Wunused-variable behaviour change
        cxl: Fix unbalanced pci_dev_get in cxl_probe
        powerpc/MSI: Fix race condition in tearing down MSI interrupts
        powerpc: Wire up sys_userfaultfd()
        powerpc/pseries: Release DRC when configure_connector fails
        cxl: abort cxl_pci_enable_device_hook() if PCI channel is offline
        powerpc/powernv/pci-ioda: fix kdump with non-power-of-2 crashkernel=
        powerpc/powernv/pci-ioda: fix 32-bit TCE table init in kdump kernel

  commit ebae871a509d3c24b32ff67af2671dadffc58770
  Author: Igor Mammedov <imammedo@xxxxxxxxxx>
  Date:   Fri Sep 18 15:39:05 2015 +0200

      kvm: svm: reset mmu on VCPU reset

      When INIT/SIPI sequence is sent to VCPU which before that
      was in use by OS, VMRUN might fail with:

       KVM: entry failed, hardware error 0xffffffff
       EAX=00000000 EBX=00000000 ECX=00000000 EDX=000006d3
       ESI=00000000 EDI=00000000 EBP=00000000 ESP=00000000
       EIP=00000000 EFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
       ES =0000 00000000 0000ffff 00009300
       CS =9a00 0009a000 0000ffff 00009a00
       [...]
       CR0=60000010 CR2=b6f3e000 CR3=01942000 CR4=000007e0
       [...]
       EFER=0000000000000000

      with corresponding SVM error:
       KVM: FAILED VMRUN WITH VMCB:
       [...]
       cpl:            0                efer:         0000000000001000
       cr0:            0000000080010010 cr2:          00007fd7fe85bf90
       cr3:            0000000187d0c000 cr4:          0000000000000020
       [...]

      What happens is that VCPU state right after offlinig:
      CR0: 0x80050033  EFER: 0xd01  CR4: 0x7e0
        -> long mode with CR3 pointing to longmode page tables

      and when VCPU gets INIT/SIPI following transition happens
      CR0: 0 -> 0x60000010 EFER: 0x0  CR4: 0x7e0
        -> paging disabled with stale CR3

      However SVM under the hood puts VCPU in Paged Real Mode*
      which effectively translates CR0 0x60000010 -> 80010010 after

         svm_vcpu_reset()
             -> init_vmcb()
                 -> kvm_set_cr0()
                     -> svm_set_cr0()

      but from  kvm_set_cr0() perspective CR0: 0 -> 0x60000010
      only caching bits are changed and
      commit d81135a57aa6
       ("KVM: x86: do not reset mmu if CR0.CD and CR0.NW are changed")'
      regressed svm_vcpu_reset() which relied on MMU being reset.

      As result VMRUN after svm_vcpu_reset() tries to run
      VCPU in Paged Real Mode with stale MMU context (longmode page tables),
      which causes some AMD CPUs** to bail out with VMEXIT_INVALID.

      Fix issue by unconditionally resetting MMU context
      at init_vmcb() time.

        * AMD64 Architecture Programmer�s Manual,
            Volume 2: System Programming, rev: 3.25
              15.19 Paged Real Mode
        ** Opteron 1216

      Signed-off-by: Igor Mammedov <imammedo@xxxxxxxxxx>
      Fixes: d81135a57aa6
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 00cc1633816de8c95f337608a1ea64e228faf771
  Author: Dominik Dingel <dingel@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 18 11:27:45 2015 +0200

      sched: access local runqueue directly in single_task_running

      Commit 2ee507c47293 ("sched: Add function single_task_running to let a 
task
      check if it is the only task running on a cpu") referenced the current
      runqueue with the smp_processor_id.  When CONFIG_DEBUG_PREEMPT is enabled,
      that is only allowed if preemption is disabled or the currrent task is
      bound to the local cpu (e.g. kernel worker).

      With commit f78195129963 ("kvm: add halt_poll_ns module parameter") KVM
      calls single_task_running. If CONFIG_DEBUG_PREEMPT is enabled that
      generates a lot of kernel messages.

      To avoid adding preemption in that cases, as it would limit the 
usefulness,
      we change single_task_running to access directly the cpu local runqueue.

      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Suggested-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Acked-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: 2ee507c472939db4b146d545352b8a7c79ef47f8
      Signed-off-by: Dominik Dingel <dingel@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 977108f89c989b1eeb5c8d938e1e71913391eb5f
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Sep 17 18:30:36 2015 +0200

      s390: wire up separate socketcalls system calls

      As discussed on linux-arch all architectures should wire up the separate
      system calls that are hidden behind the socketcall multiplexer system 
call.

      It's just a couple more system calls and gives us a very small performance
      improvement.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 7681df456f97f21fb70f184702696d644e273d73
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Sep 17 18:30:35 2015 +0200

      s390/compat: remove superfluous compat wrappers

      A couple of compat wrapper functions are simply trampolines to the real
      system call. This happened because the compat wrapper defines will only
      sign and zero extend system call parameters which are of different size
      on s390/s390x (longs and pointers).
      All other parameters will be correctly sign and zero extended by the
      normal system call wrappers.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit a55b2ae78cfecaa5ce0384c05211606372b9496c
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Sep 17 18:30:34 2015 +0200

      s390/compat: do not trace compat wrapper functions

      Add notrace to the compat wrapper define to disable tracing of compat
      wrapper functions. These are supposed to be very small and more or less
      just a trampoline to the real system call.

      Also fix indentation.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 6818375e974aa8659c3d2b1bf4b660a2a7929077
  Author: Szymon Janc <ext.szymon.janc@xxxxxxxxx>
  Date:   Wed Sep 16 20:21:54 2015 +0200

      Bluetooth: Fix reporting incorrect EIR in device found mgmt event

      Some remote devices (ie Gigaset G-Tag) misbehave with ADV data length.
      This can lead to incorrect EIR format in device found event when
      ADV_DATA and SCAN_RSP are merged (terminator field before SCAN_RSP
      part).

      Fix this by inspecting ADV_DATA and correct its length if terminator
      is found.

      > HCI Event: LE Meta Event (0x3e) plen 42              [hci0] 32.172182
            LE Advertising Report (0x02)
              Num reports: 1
              Event type: Connectable undirected - ADV_IND (0x00)
              Address type: Public (0x00)
              Address: 7C:2F:80:94:97:5A (Gigaset Communications GmbH)
              Data length: 30
              Flags: 0x06
                LE General Discoverable Mode
                BR/EDR Not Supported
              Company: Gigaset Communications GmbH (384)
                Data: 021512348094975abbc5
              16-bit Service UUIDs (partial): 1 entry
                Battery Service (0x180f)
              RSSI: -65 dBm (0xbf)
      > HCI Event: LE Meta Event (0x3e) plen 27              [hci0] 32.172191
            LE Advertising Report (0x02)
              Num reports: 1
              Event type: Scan response - SCAN_RSP (0x04)
              Address type: Public (0x00)
              Address: 7C:2F:80:94:97:5A (Gigaset Communications GmbH)
              Data length: 15
              Name (complete): Gigaset G-tag
              RSSI: -59 dBm (0xc5)

      Note "Data length: 30" in ADV_DATA which results in 9 extra zero bytes
      after Battery Service UUID. Terminator field present in the middle of
      EIR in Device Found event resulted in userspace stop parsing EIR and
      skipping device name.

      @ Device Found: 7C:2F:80:94:97:5A (1) rssi -59 flags 0x0000
            02 01 06 0d ff 80 01 02 15 12 34 80 94 97 5a bb  ..........4...Z.
            c5 03 02 0f 18 00 00 00 00 00 00 00 00 00 0e 09  ................
            47 69 67 61 73 65 74 20 47 2d 74 61 67           Gigaset G-tag

      With this fix EIR with merged ADV_DATA and SCAN_RSP in device found
      event is properly formatted:

      @ Device Found: 7C:2F:80:94:97:5A (1) rssi -59 flags 0x0000
            02 01 06 0d ff 80 01 02 15 12 34 80 94 97 5a bb  ..........4...Z.
            c5 03 02 0f 18 0e 09 47 69 67 61 73 65 74 20 47  .......Gigaset G
            2d 74 61 67                                      -tag

      Signed-off-by: Szymon Janc <ext.szymon.janc@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e781b7f7fcc141d69f63d4eef70d249549dfaeda
  Author: Szymon Janc <ext.szymon.janc@xxxxxxxxx>
  Date:   Wed Sep 16 20:21:53 2015 +0200

      Bluetooth: Add BT_ERR_RATELIMITED

      This patch adds ratelimited version of the BT_ERR macro.

      Signed-off-by: Szymon Janc <ext.szymon.janc@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c25be94f2870bf75552a41ad8b15f756e19ffb1d
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Wed Sep 16 20:23:29 2015 +0200

      x86/asm/entry/32, selftests: Add 'test_syscall_vdso' test

      This new test checks that all x86 registers are preserved across
      32-bit syscalls. It tests syscalls through VDSO (if available)
      and through INT 0x80, normally and under ptrace.

      If kernel is a 64-bit one, high registers (r8..r15) are poisoned
      before the syscall is called and are checked afterwards.

      They must be either preserved, or cleared to zero (but r11 is
      special); r12..15 must be preserved for INT 0x80.

      EFLAGS is checked for changes too, but change there is not
      considered to be a bug (paravirt kernels do not preserve
      arithmetic flags).

      Run-tested on 64-bit kernel:

        $ ./test_syscall_vdso_32
        [RUN]   Executing 6-argument 32-bit syscall via VDSO
        [OK]    Arguments are preserved across syscall
        [NOTE]  R11 has changed:0000000000200ed7 - assuming clobbered by
        SYSRET insn [OK]        R8..R15 did not leak kernel data
        [RUN]   Executing 6-argument 32-bit syscall via INT 80
        [OK]    Arguments are preserved across syscall
        [OK]    R8..R15 did not leak kernel data
        [RUN]   Running tests under ptrace
        [RUN]   Executing 6-argument 32-bit syscall via VDSO
        [OK]    Arguments are preserved across syscall
        [OK]    R8..R15 did not leak kernel data
        [RUN]   Executing 6-argument 32-bit syscall via INT 80
        [OK]    Arguments are preserved across syscall
        [OK]    R8..R15 did not leak kernel data

      On 32-bit paravirt kernel:

        $ ./test_syscall_vdso_32
        [NOTE]  Not a 64-bit kernel, won't test R8..R15 leaks
        [RUN]   Executing 6-argument 32-bit syscall via VDSO
        [WARN]  Flags before=0000000000200ed7 id 0 00 o d i s z 0 a 0 p 1 c
        [WARN]  Flags  after=0000000000200246 id 0 00 i z 0 0 p 1
        [WARN]  Flags change=0000000000000c91 0 00 o d s 0 a 0 0 c
        [OK]    Arguments are preserved across syscall
        [RUN]   Executing 6-argument 32-bit syscall via INT 80
        [OK]    Arguments are preserved across syscall
        [RUN]   Running tests under ptrace
        [RUN]   Executing 6-argument 32-bit syscall via VDSO
        [OK]    Arguments are preserved across syscall
        [RUN]   Executing 6-argument 32-bit syscall via INT 80
        [OK]    Arguments are preserved across syscall

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Acked-by: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Will Drewry <wad@xxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442427809-2027-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e904cf6fe23022cde4e0ea9d41601411a315a3dc
  Author: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
  Date:   Sun Sep 6 13:09:01 2015 +0200

      ath9k_htc: introduce support for different fw versions

      Current kernel support only one fw name with theoretically only one
      fw version located in â??firmware/htc_[9271|7010].fwâ??. Which is ok so 
far we
      have only one fw version (1.3). After we realised new fw 1.4, we faced
      compatibility problem which was decided to solve by firmware name and
      location:
      - new firmware is located now in
        firmware/ath9k_htc/htc_[9271|7010]-1.4.0.fw
      - old version 1.3 should be on old place, so old kernel have no issues
        with it.
      - new kernels including this patch should be able to try different
        supported (min..max) fw version.
      - new kernel should be able to support old fw location too. At least for
        now.

      At same time this patch will add new module option which should allow user
      to play with development  fw version without replacing stable one. If user
      will set â??ath9k_htc use_dev_fw=1â?? module will try to find
      firmware/ath9k_htc/htc_[9271|7010]-1.dev.0.fw first and if it fails, use
      stable version: for example...1.4.0.fw.

      Signed-off-by: Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 93edc8bd7750ff3cae088bfca453ea73dc9004a4
  Author: Waiman Long <Waiman.Long@xxxxxxx>
  Date:   Fri Sep 11 14:37:34 2015 -0400

      locking/pvqspinlock: Kick the PV CPU unconditionally when _Q_SLOW_VAL

      If _Q_SLOW_VAL has been set, the vCPU state must have been vcpu_hashed.
      The extra check at the end of __pv_queued_spin_unlock() is unnecessary
      and can be removed.

      Signed-off-by: Waiman Long <Waiman.Long@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Douglas Hatch <doug.hatch@xxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Scott J Norton <scott.norton@xxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441996658-62854-3-git-send-email-Waiman.Long@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c55a6ffa6285e29f874ed403979472631ec70bff
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Mon Sep 14 00:37:24 2015 -0700

      locking/osq: Relax atomic semantics

      ... by using acquire/release for ops around the lock->tail. As such,
      weakly ordered archs can benefit from more relaxed use of barriers
      when issuing atomics.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Waiman Long <Waiman.Long@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442216244-4409-3-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6e1e5196975fb7ecc501b3fe1075b77aea2b7839
  Author: Davidlohr Bueso <dave@xxxxxxxxxxxx>
  Date:   Mon Sep 14 00:37:22 2015 -0700

      locking/qrwlock: Rename ->lock to ->wait_lock

      ... trivial, but reads a little nicer when we name our
      actual primitive 'lock'.

      Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Waiman Long <Waiman.Long@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442216244-4409-1-git-send-email-dave@xxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e58cdf585a38412f9f56c512d20e8e12637d9892
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Wed Sep 9 16:46:38 2015 -0700

      locking/Documentation/lockstat: Fix typo - lokcing -> locking

      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Jiri Kosina <trivial@xxxxxxxxxx>
      Cc: Jonathan Corbet <corbet@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441842398-25063-1-git-send-email-sboyd@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d6a367853b4340768a917a9e67127231cfd97218
  Merge: 8456799 a7d5c18
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 18 09:25:12 2015 +0200

      Merge branch 'linus' into locking/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 96f3eda67fcf2598e9d2794398e0e7ab35138ea6
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Mon Sep 14 10:14:07 2015 -0400

      perf/x86/intel: Fix static checker warning in lbr enable

      Commit deb27519bf1f ("perf/x86/intel: Fix LBR callstack issue caused
      by FREEZE_LBRS_ON_PMI") leads to the following Smatch complaint:

         warn: variable dereferenced before check 'cpuc->lbr_sel' (see line 154)

      Fix the warning.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: deb27519bf1f ("perf/x86/intel: Fix LBR callstack issue caused by 
FREEZE_LBRS_ON_PMI")
      Link: 
http://lkml.kernel.org/r/1442240047-48149-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 02386c356af0ce5bbee11ed9b23c312ca60298f0
  Merge: d71b0ad f73e22a
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 18 09:24:01 2015 +0200

      Merge branch 'perf/urgent' into perf/core, to pick up fixes before 
applying new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 79a89f92cbe31ba6bc50caf211a7ac4d97d0f35f
  Author: Leo Yan <leo.yan@xxxxxxxxxx>
  Date:   Tue Sep 15 18:56:45 2015 +0800

      sched/fair: Remove unnecessary parameter for group_classify()

      The group_classify() function does not use the "env" parameter, so remove 
it.
      Also unify code to always use group_classify() to calculate group's
      load type.

      Signed-off-by: Leo Yan <leo.yan@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442314605-14838-1-git-send-email-leo.yan@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 84fb5a182d39221b89f205365386df243135d622
  Author: Leo Yan <leo.yan@xxxxxxxxxx>
  Date:   Tue Sep 15 18:57:37 2015 +0800

      sched/fair: Polish comments for LOAD_AVG_MAX

      Macro LOAD_AVG_MAX is defined far away from the precompuated tables
      for decay calculation in code; So explicitly comments for this.

      Also fix one typo: s/LOAD_MAX_AVG/LOAD_AVG_MAX.

      Signed-off-by: Leo Yan <leo.yan@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442314657-14949-1-git-send-email-leo.yan@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4620f8c1fda2af4ccbd11e194e2dd785f7d7f279
  Author: Rik van Riel <riel@xxxxxxxxxx>
  Date:   Fri Sep 11 09:00:27 2015 -0400

      sched/numa: Limit the amount of virtual memory scanned in task_numa_work()

      Currently task_numa_work() scans up to numa_balancing_scan_size_mb worth
      of memory per invocation, but only counts memory areas that have at
      least one PTE that is still present and not marked for numa hint faulting.

      It will skip over arbitarily large amounts of memory that are either
      unused, full of swap ptes, or full of PTEs that were already marked
      for NUMA hint faults but have not been faulted on yet.

      This can cause excessive amounts of CPU use, due to there being
      essentially no upper limit on the scan rate of very large processes
      that are not yet in a phase where they are actively accessing old
      memory pages (eg. they are still initializing their data).

      Avoid that problem by placing an upper limit on the amount of virtual
      memory that task_numa_work() scans in each invocation. This can be a
      higher limit than "pages", to ensure the task still skips over unused
      areas fairly quickly.

      While we are here, also fix the "nr_pte_updates" logic, so it only
      counts page ranges with ptes in them.

      Reported-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Reported-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Signed-off-by: Rik van Riel <riel@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Mel Gorman <mgorman@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150911090027.4a7987bd@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 20f9cd2acb1d74a8bf4b4087267f586e6ecdbc03
  Author: Henrik Austad <henrik@xxxxxxxxx>
  Date:   Wed Sep 9 17:00:41 2015 +0200

      sched/core: Make policy-testing consistent

      Most of the policy-tests are done via the <class>_policy() helpers with
      the notable exception of idle. A new wrapper for valid_policy() has also
      been added to improve readability  in set_load_weight().

      This commit does not change the logical behavior of the scheduler core.

      Signed-off-by: Henrik Austad <henrik@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441810841-4756-1-git-send-email-henrik@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0c6a5b4319928b769ba81eff45bd679737a29ba1
  Merge: 006cdf0 a7d5c18
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 18 09:22:55 2015 +0200

      Merge branch 'linus' into sched/core, to pick up fixes before applying 
new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f73e22ab450140830005581c2c7ec389791a1b8d
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 20:48:22 2015 +0200

      perf: Fix races in computing the header sizes

      There are two races with the current code:

       - Another event can join the group and compute a larger header_size
         concurrently, if the smaller store wins we'll have an incorrect
         header_size set.

       - We compute the header_size after the event becomes active,
         therefore its possible to use the size before its computed.

      Remedy the first by moving the computation inside the ctx::mutex lock,
      and the second by placing it _before_ perf_install_in_context().

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a723968c0ed36db676478c3d26078f13484fe01c
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 19:06:33 2015 +0200

      perf: Fix u16 overflows

      Vince reported that its possible to overflow the various size fields
      and get weird stuff if you stick too many events in a group.

      Put a lid on this by requiring the fixed record size not exceed 16k.
      This is still a fair amount of events (silly amount really) and leaves
      plenty room for callchains and stack dwarves while also avoiding
      overflowing the u16 variables.

      Reported-by: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f55fc2a57cc9ca3b1bb4fb8eb25b6e1989e5b993
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 19:06:33 2015 +0200

      perf: Restructure perf syscall point of no return

      The exclusive_event_installable() stuff only works because its
      exclusive with the grouping bits.

      Rework the code such that there is a sane place to error out before we
      go do things we cannot undo.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dfe1f3cb312624928052413928d88b0ee3492216
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 14:54:00 2015 -0700

      perf/x86/intel: Fix Skylake FRONTEND MSR extrareg mask

      Stephane pointed out that the extrareg mask was one bit too short.
      The bubble width field was truncated by one bit. Fix that here.
      Also add some extra comments on the reserved bits inside the event
      select code.

      Reported-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441835640-21347-3-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d0dc8494cd6904f8ad035d9ad97f313948f35d0c
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 14:53:59 2015 -0700

      perf/x86/intel/pebs: Add PEBS frontend profiling for Skylake

      Skylake has a new FRONTEND_LATENCY PEBS event to accurately profile
      frontend problems (like ITLB or decoding issues).

      The new event is configured through a separate MSR, which selects
      a range of sub events.

      Define the extra MSR as a extra reg and export support for it
      through sysfs.  To avoid duplicating the existing
      tables use a new function to add new entries to existing tables.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1435707205-6676-4-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5e176213a6b2bc5146820c79542d37290434a3c4
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 14:47:02 2015 -0700

      perf/x86/intel: Make the CYCLE_ACTIVITY.* constraint on Broadwell more 
specific

      The counter constraint for CYCLE_ACTIVITY.* on Broadwell covered
      all CYCLE_ACTIVITY.* sub events, and forced them on counter 2.
      But actually only one sub event (umask 8) needs to be on counter 2,
      all others do not have any constraint.

      Only force that subevent. This fixes groups with multiple
      CYCLE_ACTIVITY.* events, for example:

        % perf stat -x, -e '{cpu/event=0xa3,umask=0x6,cmask=6/,\
        cpu/event=0xa2,umask=0x8/,\
        cpu/event=0xa3,umask=0x4,cmask=4/,cpu/event=0xb1,umask=0x1,cmask=1/}' 
true
        122150,,cpu/event=0xa3,umask=0x6,cmask=6/,846486,100.00
        16483,,cpu/event=0xa2,umask=0x8/,846486,100.00
        252280,,cpu/event=0xa3,umask=0x4,cmask=4/,846486,100.00
        233604,,cpu/event=0xb1,umask=0x1,cmask=1/,846486,100.00
        %

      Without this patch the third result would be <unsupported>

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442267222-16464-1-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit de9b8f5dcbd94bfb1d249907a635f1fb1968e19c
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Aug 13 23:09:29 2015 +0200

      sched: Fix crash trying to dequeue/enqueue the idle thread

      Sasha reports that his virtual machine tries to schedule the idle
      thread since commit 6c37067e2786 ("sched: Change the
      sched_class::set_cpus_allowed() calling context").

      Hit trace shows this happening from idle_thread_get()->init_idle(),
      which is the _second_ init_idle() invocation on that task_struct, the
      first being done through idle_init()->fork_idle(). (this code is
      insane...)

      Because we call init_idle() twice in a row, its ->sched_class ==
      &idle_sched_class and ->on_rq = TASK_ON_RQ_QUEUED. This means
      do_set_cpus_allowed() think we're queued and will call dequeue_task(),
      which is implemented with BUG() for the idle class, seeing how
      dequeueing the idle task is a daft thing.

      Aside of the whole insanity of calling init_idle() _twice_, change the
      code to call set_cpus_allowed_common() instead as this is 'obviously'
      before the idle task gets ran etc..

      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Tested-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: 6c37067e2786 ("sched: Change the sched_class::set_cpus_allowed() 
calling context")
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a6f83f00ad4b4e8a6c1cd14db495f40cf5ea7586
  Merge: a7d5c18 bf64456
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 18 07:41:56 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - When handling perf_event_open() returning EBUSY and not being able to 
opendir
          the procfs mount point we would tell the user that the oprofile 
daemon was
          found by returning -1 on as the return for a bool function, oops, fix 
it,
          found with Coccinelle. (Peter Senna Tschudin).

        - Fix per-pkg event reporting bug in 'perf stat'. (Stephane Eranian)

      Developer visible changes:

        - Fix missing prototype for function provided when it isn't present in 
the
          libelf present, fixing the build on RHEL/CentOS 5.1 systems, for 
instance.
          (Arnaldo Carvalho de Melo)

        - Detect if the gcc and libnuma have the features needed to avoid 
requiring
          the use of NO_LIBNUMA and/or NO_AUXTRACE to build on older systems.
          (Arnaldo Carvalho de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 47bbbb30b4331ec58a74a66a044341f0114b02b3
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Sep 17 16:37:13 2015 -0700

      sch_dsmark: improve memory locality

      Memory placement in sch_dsmark is silly : Better place mask/value
      in the same cache line.

      Also, we can embed small arrays in the first cache line and
      remove a potential cache miss.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2e7204d180f8efc80f27959ca9cf16fa17f67db
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Sep 17 08:38:00 2015 -0700

      tcp_cubic: do not set epoch_start in the future

      Tracking idle time in bictcp_cwnd_event() is imprecise, as epoch_start
      is normally set at ACK processing time, not at send time.

      Doing a proper fix would need to add an additional state variable,
      and does not seem worth the trouble, given CUBIC bug has been there
      forever before Jana noticed it.

      Let's simply not set epoch_start in the future, otherwise
      bictcp_update() could overflow and CUBIC would again
      grow cwnd too fast.

      This was detected thanks to a packetdrill test Neal wrote that was flaky
      before applying this fix.

      Fixes: 30927520dbae ("tcp_cubic: better follow cubic curve after idle 
period")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Cc: Jana Iyengar <jri@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit adb094e5e7285385770eb7a7c122bfc663c5e174
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 23:21:21 2015 +0900

      fjes: fix off-by-one error at fjes_hw_update_zone_task()

      Dan Carpenter reported off-by-one error of fjes at
      http://www.mail-archive.com/netdev@xxxxxxxxxxxxxxx/msg77520.html

      Actually this is a bug.
      ep_shm_info[epidx].{es_status, zone} should be update
      inside for loop.

      This patch fixes this bug.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6cf35642147103195f126d13bdc1d4c32c7c6666
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:28:31 2015 +0200

      MAINTAINERS: remove bouncing email address for qlcnic

      I got this automated message from <shahed.shaikh@xxxxxxxxxx> when 
submitting
      a qlcnic patch:

      > Shahed Shaikh is no longer with QLogic. If you require assistance please
      > contact Ariel Elior Ariel.Elior@xxxxxxxxxx

      There's no point in having a bouncing address in MAINTAINERS.

      CC: Dept-GELinuxNICDev@xxxxxxxxxx
      CC: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1bdc0b109bfa3697a9f6b71f7fed995e08a0d683
  Merge: c38f6ac ac7eccd
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 22:32:16 2015 -0700

      Merge branch 'vxlan-fixes'

      Jiri Benc says:

      ====================
      vxlan fixes

      This fixes various issues with vxlan related to IPv6.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac7eccd4d48fcc70d9fd6e4d10657bcde0a73f9f
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:14 2015 +0200

      bnx2x: track vxlan port count

      The callback for adding vxlan port can be called with the same port for
      both IPv4 and IPv6. Do not disable the offloading when the same port for
      both protocols is added and later one of them removed.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1e5b311ab2cc3baf73cdff066ab39c7466bf166b
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:13 2015 +0200

      be2net: allow offloading with the same port for IPv4 and IPv6

      The callback for adding vxlan port can be called with the same port for 
both
      IPv4 and IPv6. Do not disable the offloading if this occurs.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 378fddc281072a10b621341b9f78c902303a8fe7
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:12 2015 +0200

      qlcnic: track vxlan port count

      The callback for adding vxlan port can be called with the same port for
      both IPv4 and IPv6. Do not disable the offloading when the same port for
      both protocols is added and later one of them removed.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 057ba29bbe85e9587635e3128b26fa30fe849af9
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:11 2015 +0200

      vxlan: reject IPv6 addresses if IPv6 is not configured

      When IPv6 address is set without IPv6 configured, the vxlan socket is 
mostly
      treated as an IPv4 one but various lookus in fdb etc. still take the
      AF_INET6 into account. This creates incosistencies with weird 
consequences.

      Just reject IPv6 addresses in such case.

      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9dc2ad1008c9f91f55ec6c89ec0f8639dfc91596
  Author: Jiri Benc <jbenc@xxxxxxxxxx>
  Date:   Thu Sep 17 16:11:10 2015 +0200

      vxlan: set needed headroom correctly

      vxlan_setup is called when allocating the net_device, i.e. way before
      vxlan_newlink (or vxlan_dev_configure) is called. This means
      vxlan->default_dst is actually unset in vxlan_setup and the condition that
      sets needed_headroom always takes the else branch.

      Set the needed_headrom at the point when we have the information about
      the address family available.

      Fixes: e4c7ed415387c ("vxlan: add ipv6 support")
      Fixes: 2853af6a2ea1a ("vxlan: use dev->needed_headroom instead of 
dev->hard_header_len")
      CC: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c38f6ac74c99801360705d97244ff222ae18dc97
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 15:26:16 2015 +0200

      MAINTAINERS: add arcnet and take maintainership

      Add entry for arcnet to MAINTAINERS file and add myself as the
      maintainer of the subsystem.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
      Cc: davem@xxxxxxxxxxxxx
      Cc: joe@xxxxxxxxxxx
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 980137a20317055451a73547cf07be4ddea039ee
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 17 15:18:34 2015 +0200

      ARCNET: fix hard_header_len limit

      For arcnet the bare minimum header only contains the 4 bytes to
      specify source, dest and offset (1, 1 and 2 bytes respectively).
      The corresponding struct is struct arc_hardware.

      The struct archdr contains additionally a union of possible soft
      headers. When doing $insertusecasehere packets might well
      include short (or even no?) soft headers.

      For this reason only use arc_hardware instead of archdr to
      determine the hard_header_len for an arcnet device.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1dbb2413cbfa7db7a337081af1f4119996522156
  Merge: 34f5b00 d8949aa
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 22:25:51 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth

      Johan Hedberg says:

      ====================
      pull request: bluetooth 2015-09-17

      Here's one important patch for the 4.3-rc series that fixes an issue
      with Bluetooth LE encryption failing because of a too early check for
      the SMP context.

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 25354001d0f84f91201cb743aa52b7cac5fe4f9c
  Merge: 9110fe4 4a29645
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 22:17:14 2015 -0700

      Merge branch 'bcmgenet-irq-coalesce'

      Florian Fainelli says:

      ====================
      net: bcmgenet: Interrupt coalescing

      This patch series adds support for interrupt coalescing for GENET
      adapters.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4a29645bfe6c20f06f041109ca578a0b4156f29a
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Wed Sep 16 16:47:40 2015 -0700

      net: bcmgenet: Implement RX coalescing control knobs

      Add support for the ethtool rx-frames coalescing parameter which allows
      defining the number of RX interrupts per frames received. The RDMA
      engine supports a configurable timeout with a resolution of
      approximately 8.192 us.

      We can no longer enable the BDONE/PDONE interrupts as those would
      fire for each packet/buffer received, which would defeat the MBDONE
      interrupt purpose. The MBDONE interrupt is guaranteed to correspond to a
      PDONE/BDONE interrupt when the threshold is set to 1.

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2f9130709d2c19e2eef336bda0fb0c807cbc1f64
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Wed Sep 16 16:47:39 2015 -0700

      net: bcmgenet: Implement TX coalescing control knobs

      Configuring the ethtool tx-frames property, which translates into N
      packets before a TX interrupt is the simplest configuration scheme
      because it requires no locking neither at the softare nor hardware
      level, and is completely indepedent from the link speed. Since ethtool
      does not allow per-tx queue coalescing parameters, we apply the same
      setting to any transmit queue.

      We can no longer enable the BDONE/PDONE interrupts as those would fire
      for each packet/buffer received, which would defeat the MBDONE interrupt
      purpose. The MBDONE interrupt is guaranteed to correspond to a
      PDONE/BDONE interrupt when the threshold is set to 1, but offers
      interrupt coalescing when the value is > 1.

      Since the HW is configured to generate an interrupt when the ring
      becomes emtpy, we have to deny any timeout/timer settings coming from
      user-space to indicate we can only generate an interrupt very <N>
      packets.

      While we are at it, fix the DMA_INTR_THRESHOLD_MASK value which was off
      by one bit (0xff vs. 0x1ff).

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9110fe4a17743e5f416f7fbe01a2a83cffd807d6
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:41:19 2015 +0000

      lan78xx: Remove not defined MAC_CR_GMII_EN_ bit from MAC_CR.

      Remove not defined MAC_CR_GMII_EN_ bit from MAC_CR.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 758c5c1174343a134031ff817c19c732b3729747
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:41:14 2015 +0000

      lan78xx: Create lan78xx_get_mdix_status() and lan78xx_set_mdix_status() 
for MDIX control.

      Create lan78xx_get_mdix_status() and lan78xx_set_mdix_status() for MDIX 
control.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bdfba55e0d541a9547d737573ae11db7ed72e2bb
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:41:07 2015 +0000

      lan78xx: Remove phy defines in lan78xx.h and use defines in 
include/linux/microchipphy.h

      Remove phy defines in lan78xx.h and use defines in 
include/linux/microchipphy.h.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce85e13ad6ef47ddcd34684889dc38a9901868ef
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:40:54 2015 +0000

      lan78xx: Update to use phylib instead of mii_if_info.

      Update to use phylib instead of mii_if_info.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 05fe68c008daaa641531f3cb44c567f04bf19ef7
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:40:47 2015 +0000

      lan78xx: Add PHYLIB and MICROCHIP_PHY as default config.

      Add PHYLIB and MICROCHIP_PHY as default configuration for lan78xx.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6c595b03b1087f9f18a809ee7ce1a79c746037d5
  Author: Woojung.Huh@xxxxxxxxxxxxx <Woojung.Huh@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:40:39 2015 +0000

      lan78xx: Check device ready bit (PMT_CTL_READY_) after reset the PHY

      Check device ready bit (PMT_CTL_READY_) after reset the PHY.
      Device may not be ready even if PHY_RST_ is cleared depends on 
configuration.

      Signed-off-by: Woojung Huh <woojung.huh@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34f5b0066435ffb793049b84fafd29fa195bcf90
  Author: Sasha Levin <sasha.levin@xxxxxxxxxx>
  Date:   Wed Sep 16 15:30:21 2015 -0400

      atm: deal with setting entry before mkip was called

      If we didn't call ATMARP_MKIP before ATMARP_ENCAP the VCC descriptor is
      non-existant and we'll end up dereferencing a NULL ptr:

      [1033173.491930] kasan: GPF could be caused by NULL-ptr deref or user 
memory accessirq event stamp: 123386
      [1033173.493678] general protection fault: 0000 [#1] PREEMPT SMP 
DEBUG_PAGEALLOC KASAN
      [1033173.493689] Modules linked in:
      [1033173.493697] CPU: 9 PID: 23815 Comm: trinity-c64 Not tainted 
4.2.0-next-20150911-sasha-00043-g353d875-dirty #2545
      [1033173.493706] task: ffff8800630c4000 ti: ffff880063110000 task.ti: 
ffff880063110000
      [1033173.493823] RIP: clip_ioctl (net/atm/clip.c:320 net/atm/clip.c:689)
      [1033173.493826] RSP: 0018:ffff880063117a88  EFLAGS: 00010203
      [1033173.493828] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 
000000000000000c
      [1033173.493830] RDX: 0000000000000002 RSI: ffffffffb3f10720 RDI: 
0000000000000014
      [1033173.493832] RBP: ffff880063117b80 R08: ffff88047574d9a4 R09: 
0000000000000000
      [1033173.493834] R10: 0000000000000000 R11: 0000000000000000 R12: 
1ffff1000c622f53
      [1033173.493836] R13: ffff8800cb905500 R14: ffff8808d6da2000 R15: 
00000000fffffdfd
      [1033173.493840] FS:  00007fa56b92d700(0000) GS:ffff880478000000(0000) 
knlGS:0000000000000000
      [1033173.493843] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
      [1033173.493845] CR2: 0000000000000000 CR3: 00000000630e8000 CR4: 
00000000000006a0
      [1033173.493855] Stack:
      [1033173.493862]  ffffffffb0b60444 000000000000eaea 0000000041b58ab3 
ffffffffb3c3ce32
      [1033173.493867]  ffffffffb0b6f3e0 ffffffffb0b60444 ffffffffb5ea2e50 
1ffff1000c622f5e
      [1033173.493873]  ffff8800630c4cd8 00000000000ee09a ffffffffb3ec4888 
ffffffffb5ea2de8
      [1033173.493874] Call Trace:
      [1033173.494108] do_vcc_ioctl (net/atm/ioctl.c:170)
      [1033173.494113] vcc_ioctl (net/atm/ioctl.c:189)
      [1033173.494116] svc_ioctl (net/atm/svc.c:605)
      [1033173.494200] sock_do_ioctl (net/socket.c:874)
      [1033173.494204] sock_ioctl (net/socket.c:958)
      [1033173.494244] do_vfs_ioctl (fs/ioctl.c:43 fs/ioctl.c:607)
      [1033173.494290] SyS_ioctl (fs/ioctl.c:622 fs/ioctl.c:613)
      [1033173.494295] entry_SYSCALL_64_fastpath (arch/x86/entry/entry_64.S:186)
      [1033173.494362] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 50 09 00 00 49 8b 
9e 60 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 14 48 89 fa 48 c1 ea 03 
<0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 14 09 00
      All code

      ========
         0:   fa                      cli
         1:   48 c1 ea 03             shr    $0x3,%rdx
         5:   80 3c 02 00             cmpb   $0x0,(%rdx,%rax,1)
         9:   0f 85 50 09 00 00       jne    0x95f
         f:   49 8b 9e 60 06 00 00    mov    0x660(%r14),%rbx
        16:   48 b8 00 00 00 00 00    movabs $0xdffffc0000000000,%rax
        1d:   fc ff df
        20:   48 8d 7b 14             lea    0x14(%rbx),%rdi
        24:   48 89 fa                mov    %rdi,%rdx
        27:   48 c1 ea 03             shr    $0x3,%rdx
        2b:*  0f b6 04 02             movzbl (%rdx,%rax,1),%eax               
<-- trapping instruction
        2f:   48 89 fa                mov    %rdi,%rdx
        32:   83 e2 07                and    $0x7,%edx
        35:   38 d0                   cmp    %dl,%al
        37:   7f 08                   jg     0x41
        39:   84 c0                   test   %al,%al
        3b:   0f 85 14 09 00 00       jne    0x955

      Code starting with the faulting instruction
      ===========================================
         0:   0f b6 04 02             movzbl (%rdx,%rax,1),%eax
         4:   48 89 fa                mov    %rdi,%rdx
         7:   83 e2 07                and    $0x7,%edx
         a:   38 d0                   cmp    %dl,%al
         c:   7f 08                   jg     0x16
         e:   84 c0                   test   %al,%al
        10:   0f 85 14 09 00 00       jne    0x92a
      [1033173.494366] RIP clip_ioctl (net/atm/clip.c:320 net/atm/clip.c:689)
      [1033173.494368]  RSP <ffff880063117a88>

      Signed-off-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a7d5c189719846889c029c34e24e166a465368fa
  Merge: a8f1558 8a1513b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 21:41:02 2015 -0700

      Merge tag 'platform-drivers-x86-v4.3-2' of 
git://git.infradead.org/users/dvhart/linux-platform-drivers-x86

      Pull x86 platform driver fixes from Darren Hart:
       "Fix an issue introduced by the previous major toshiba rework.  Add a
        quirk.  Workaround a few platform specific firmware items.  One
        cleanup to wmi I inadvertently dropped from a previous pull request.

        Details:

        hp-wmi:
         - limit hotkey enable

        toshiba_acpi:
         - Fix hotkeys registration on some toshiba models
         - Fix USB Sleep and Music always disabled

        wmi:
         - Remove private %pUL implementation

        asus-nb-wmi:
         - Add wapf=4 quirk for X456UA/X456UF"

      * tag 'platform-drivers-x86-v4.3-2' of 
git://git.infradead.org/users/dvhart/linux-platform-drivers-x86:
        hp-wmi: limit hotkey enable
        toshiba_acpi: Fix hotkeys registration on some toshiba models
        toshiba_acpi: Fix USB Sleep and Music always disabled
        wmi: Remove private %pUL implementation
        asus-nb-wmi: Add wapf=4 quirk for X456UA/X456UF

  commit 1d325d217c7f190a42fb620ead20bb240fc16af0
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Wed Sep 16 17:26:14 2015 +0200

      ipv6: ip6_fragment: fix headroom tests and skb leak

      David Woodhouse reports skb_under_panic when we try to push ethernet
      header to fragmented ipv6 skbs:

       skbuff: skb_under_panic: text:c1277f1e len:1294 put:14 head:dec98000
       data:dec97ffc tail:0xdec9850a end:0xdec98f40 dev:br-lan
      [..]
      ip6_finish_output2+0x196/0x4da

      David further debugged this:
        [..] offending fragments were arriving here with skb_headroom(skb)==10.
        Which is reasonable, being the Solos ADSL card's header of 8 bytes
        followed by 2 bytes of PPP frame type.

      The problem is that if netfilter ipv6 defragmentation is used, skb_cow()
      in ip6_forward will only see reassembled skb.

      Therefore, headroom is overestimated by 8 bytes (we pulled fragment
      header) and we don't check the skbs in the frag_list either.

      We can't do these checks in netfilter defrag since outdev isn't known yet.

      Furthermore, existing tests in ip6_fragment did not consider the fragment
      or ipv6 header size when checking headroom of the fraglist skbs.

      While at it, also fix a skb leak on memory allocation -- ip6_fragment
      must consume the skb.

      I tested this e1000 driver hacked to not allocate additional headroom
      (we end up in slowpath, since LL_RESERVED_SPACE is 16).

      If 2 bytes of headroom are allocated, fastpath is taken (14 byte
      ethernet header was pulled, so 16 byte headroom available in all
      fragments).

      Reported-by: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
      Diagnosed-by: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Tested-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bde6f9ded1bd37ff27a042dcb968e104d92b02c1
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:16:39 2015 -0600

      net: Initialize table in fib result

      Sergey, Richard and Fabio reported an oops in ip_route_input_noref. e.g., 
from Richard:

      [    0.877040] BUG: unable to handle kernel NULL pointer dereference at 
0000000000000056
      [    0.877597] IP: [<ffffffff8155b5e2>] ip_route_input_noref+0x1a2/0xb00
      [    0.877597] PGD 3fa14067 PUD 3fa6e067 PMD 0
      [    0.877597] Oops: 0000 [#1] SMP
      [    0.877597] Modules linked in: virtio_net virtio_pci virtio_ring virtio
      [    0.877597] CPU: 1 PID: 119 Comm: ifconfig Not tainted 4.2.0+ #1
      [    0.877597] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
      [    0.877597] task: ffff88003fab0bc0 ti: ffff88003faa8000 task.ti: 
ffff88003faa8000
      [    0.877597] RIP: 0010:[<ffffffff8155b5e2>]  [<ffffffff8155b5e2>] 
ip_route_input_noref+0x1a2/0xb00
      [    0.877597] RSP: 0018:ffff88003ed03ba0  EFLAGS: 00010202
      [    0.877597] RAX: 0000000000000046 RBX: 00000000ffffff8f RCX: 
0000000000000020
      [    0.877597] RDX: ffff88003fab50b8 RSI: 0000000000000200 RDI: 
ffffffff8152b4b8
      [    0.877597] RBP: ffff88003ed03c50 R08: 0000000000000000 R09: 
0000000000000000
      [    0.877597] R10: 0000000000000000 R11: 0000000000000000 R12: 
ffff88003fab6f00
      [    0.877597] R13: ffff88003fab5000 R14: 0000000000000000 R15: 
ffffffff81cb5600
      [    0.877597] FS:  00007f6de5751700(0000) GS:ffff88003ed00000(0000) 
knlGS:0000000000000000
      [    0.877597] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [    0.877597] CR2: 0000000000000056 CR3: 000000003fa6d000 CR4: 
00000000000006e0
      [    0.877597] Stack:
      [    0.877597]  0000000000000000 0000000000000046 ffff88003fffa600 
ffff88003ed03be0
      [    0.877597]  ffff88003f9e2c00 697da8c0017da8c0 ffff880000000000 
000000000007fd00
      [    0.877597]  0000000000000000 0000000000000046 0000000000000000 
0000000400000000
      [    0.877597] Call Trace:
      [    0.877597]  <IRQ>
      [    0.877597]  [<ffffffff812bfa1f>] ? cpumask_next_and+0x2f/0x40
      [    0.877597]  [<ffffffff8158e13c>] arp_process+0x39c/0x690
      [    0.877597]  [<ffffffff8158e57e>] arp_rcv+0x13e/0x170
      [    0.877597]  [<ffffffff8151feec>] __netif_receive_skb_core+0x60c/0xa00
      [    0.877597]  [<ffffffff81515795>] ? __build_skb+0x25/0x100
      [    0.877597]  [<ffffffff81515795>] ? __build_skb+0x25/0x100
      [    0.877597]  [<ffffffff81521ff6>] __netif_receive_skb+0x16/0x70
      [    0.877597]  [<ffffffff81522078>] netif_receive_skb_internal+0x28/0x90
      [    0.877597]  [<ffffffff8152288f>] napi_gro_receive+0x7f/0xd0
      [    0.877597]  [<ffffffffa0017906>] virtnet_receive+0x256/0x910 
[virtio_net]
      [    0.877597]  [<ffffffffa0017fd8>] virtnet_poll+0x18/0x80 [virtio_net]
      [    0.877597]  [<ffffffff815234cd>] net_rx_action+0x1dd/0x2f0
      [    0.877597]  [<ffffffff81053228>] __do_softirq+0x98/0x260
      [    0.877597]  [<ffffffff8164969c>] do_softirq_own_stack+0x1c/0x30

      The root cause is use of res.table uninitialized.

      Thanks to Nikolay for noticing the uninitialized use amongst the maze of
      gotos.

      As Nikolay pointed out the second initialization is not required to fix
      the oops, but rather to fix a related problem where a valid lookup should
      be invalidated before creating the rth entry.

      Fixes: b7503e0cdb5d ("net: Add FIB table id to rtable")
      Reported-by: Sergey Senozhatsky <sergey.senozhatsky.work@xxxxxxxxx>
      Reported-by: Richard Alpe <richard.alpe@xxxxxxxxxxxx>
      Reported-by: Fabio Estevam <festevam@xxxxxxxxx>
      Tested-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Tested-by: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce816eb064c82ab96276969971a561db78e66164
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:35:00 2015 +0100

      solos-pci: Increase headroom on received packets

      A comment in include/linux/skbuff.h says that:

       * Various parts of the networking layer expect at least 32 bytes of
       * headroom, you should not reduce this.

      This was demonstrated by a panic when handling fragmented IPv6 packets:
      http://marc.info/?l=linux-netdev&m=144236093519172&w=2

      It's not entirely clear if that comment is still valid â?? and if it is,
      perhaps netif_rx() ought to be enforcing it with a warning.

      But either way, it is rather stupid from a performance point of view
      for us to be receiving packets into a buffer which doesn't have enough
      room to prepend an Ethernet header â?? it means that *every* incoming
      packet is going to be need to be reallocated. So let's fix that.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 88c796640eac36209efabe5e42b7b47dee58603e
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:11:22 2015 +0200

      net: ks8851: Export OF module alias information

      Drivers needs to export the OF id table and this be built into
      the module or udev won't have the necessary information to autoload
      the driver module when the device is registered via OF.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a8f155855842f04273666192d3767fa9b94aaa58
  Merge: 8e64a73 28c553d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 21:16:47 2015 -0700

      Merge branch 'akpm' (patches from Andrew)

      Merge misc fixes from ANdrew Morton:
       "8 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        revert "mm: make sure all file VMAs have ->vm_ops set"
        MAINTAINERS: update LTP mailing list
        userfaultfd: add missing mmput() in error path
        lib/string_helpers.c: fix infinite loop in string_get_size()
        alpha: lib: export __delay
        alpha: io: define ioremap_uc
        kasan: fix last shadow judgement in memory_is_poisoned_16()
        zram: fix possible use after free in zcomp_create()

  commit 28c553d0aa0acf02e18f9e008661491a4b996595
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:02:00 2015 -0700

      revert "mm: make sure all file VMAs have ->vm_ops set"

      Revert commit 6dc296e7df4c "mm: make sure all file VMAs have ->vm_ops
      set".

      Will Deacon reports that it "causes some mmap regressions in LTP, which
      appears to use a MAP_PRIVATE mmap of /dev/zero as a way to get anonymous
      pages in some of its tests (specifically mmap10 [1])".

      William Shuman reports Oracle crashes.

      So revert the patch while we work out what to do.

      Reported-by: William Shuman <wshuman3@xxxxxxxxx>
      Reported-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 0526109a24eb07984f9e79852767300c8b8144de
  Author: Cyril Hrubis <chrubis@xxxxxxx>
  Date:   Thu Sep 17 16:01:57 2015 -0700

      MAINTAINERS: update LTP mailing list

      [akpm@xxxxxxxxxxxxxxxxxxxx: Wanlong Gao has moved]
      Signed-off-by: Cyril Hrubis <chrubis@xxxxxxx>
      Cc: Jan Stancek <jstancek@xxxxxxxxxx>
      Cc: Stanislav Kholmanskikh <stanislav.kholmanskikh@xxxxxxxxxx>
      Cc: Alexey Kodanev <alexey.kodanev@xxxxxxxxxx>
      Cc: Wanlong Gao <wanlong.gao@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit c03e946fdd653c4a23e242aca83da7e9838f5b00
  Author: Eric Biggers <ebiggers3@xxxxxxxxx>
  Date:   Thu Sep 17 16:01:54 2015 -0700

      userfaultfd: add missing mmput() in error path

      This fixes a memleak if anon_inode_getfile() fails in userfaultfd().

      Signed-off-by: Eric Biggers <ebiggers3@xxxxxxxxx>
      Signed-off-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 62bef58a55dfa8ada2a22b2496c6340468ecd98a
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Thu Sep 17 16:01:51 2015 -0700

      lib/string_helpers.c: fix infinite loop in string_get_size()

      Some string_get_size() calls (e.g.:
       string_get_size(1, 512, STRING_UNITS_10, ..., ...)
       string_get_size(15, 64, STRING_UNITS_10, ..., ...)
      ) result in an infinite loop. The problem is that if size is equal to
      divisor[units]/blk_size and is smaller than divisor[units] we'll end
      up with size == 0 when we start doing sf_cap calculations:

      For string_get_size(1, 512, STRING_UNITS_10, ..., ...) case:
         ...
         remainder = do_div(size, divisor[units]); -> size is 0, remainder is 1
         remainder *= blk_size; -> remainder is 512
         ...
         size *= blk_size; -> size is still 0
         size += remainder / divisor[units]; -> size is still 0

      The caller causing the issue is sd_read_capacity(), the problem was
      noticed on Hyper-V, such weird size was reported by host when scanning
      collides with device removal.  This is probably a separate issue worth
      fixing, this patch is intended to prevent the library routine from
      infinite looping.

      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Acked-by: James Bottomley <JBottomley@xxxxxxxx>
      Cc: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Cc: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Cc: "K. Y. Srinivasan" <kys@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 14b97deddf8ddecce9f35165b667c55c73e14638
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 17 16:01:49 2015 -0700

      alpha: lib: export __delay

      __delay was not exported as a result while building with allmodconfig we
      were getting build error of undefined symbol.  __delay is being used by:
      drivers/net/phy/mdio-octeon.c

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Cc: Richard Henderson <rth@xxxxxxxxxxx>
      Cc: Ivan Kokshaysky <ink@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matt Turner <mattst88@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 969560d2afca76823cf97ec4f5c0fb7833e18553
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 17 16:01:46 2015 -0700

      alpha: io: define ioremap_uc

      ioremap_uc was not defined and as a result while building with
      allmodconfig were getting build error of: implicit declaration of
      function 'ioremap_uc'.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Cc: Richard Henderson <rth@xxxxxxxxxxx>
      Cc: Ivan Kokshaysky <ink@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matt Turner <mattst88@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8d77a6d18ae9ccfd5eee1cc551ee4ac27fd41464
  Author: Xishi Qiu <qiuxishi@xxxxxxxxxx>
  Date:   Thu Sep 17 16:01:43 2015 -0700

      kasan: fix last shadow judgement in memory_is_poisoned_16()

      The shadow which correspond 16 bytes memory may span 2 or 3 bytes.  If
      the memory is aligned on 8, then the shadow takes only 2 bytes.  So we
      check "shadow_first_bytes" is enough, and need not to call
      "memory_is_poisoned_1(addr + 15);".  But the code "if
      (likely(!last_byte))" is wrong judgement.

      e.g.  addr=0, so last_byte = 15 & KASAN_SHADOW_MASK = 7, then the code
      will continue to call "memory_is_poisoned_1(addr + 15);"

      Signed-off-by: Xishi Qiu <qiuxishi@xxxxxxxxxx>
      Acked-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Cc: Andrey Konovalov <adech.fo@xxxxxxxxx>
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Michal Marek <mmarek@xxxxxxx>
      Cc: <zhongjiang@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3aaf14da807a4e9931a37f21e4251abb8a67021b
  Author: Luis Henriques <luis.henriques@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:01:40 2015 -0700

      zram: fix possible use after free in zcomp_create()

      zcomp_create() verifies the success of zcomp_strm_{multi,single}_create()
      through comp->stream, which can potentially be pointing to memory that
      was freed if these functions returned an error.

      While at it, replace a 'ERR_PTR(-ENOMEM)' by a more generic
      'ERR_PTR(error)' as in the future zcomp_strm_{multi,siggle}_create()
      could return other error codes.  Function documentation updated
      accordingly.

      Fixes: beca3ec71fe5 ("zram: add multi stream functionality")
      Signed-off-by: Luis Henriques <luis.henriques@xxxxxxxxxxxxx>
      Acked-by: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
      Acked-by: Minchan Kim <minchan@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 41a9802fd87316ac736182e2debc579e987c8311
  Merge: f6c5333 27b29f6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 21:09:07 2015 -0700

      Merge branch 'bpf_avoid_clone'

      Alexei Starovoitov says:

      ====================
      bpf: performance improvements

      v1->v2: dropped redundant iff_up check in patch 2

      At plumbers we discussed different options on how to get rid of skb_clone
      from bpf_clone_redirect(), the patch 2 implements the best option.
      Patch 1 adds 'integrated exts' to cls_bpf to improve performance by
      combining simple actions into bpf classifier.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 27b29f63058d26c6c1742f1993338280d5a41dc6
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Sep 15 23:05:43 2015 -0700

      bpf: add bpf_redirect() helper

      Existing bpf_clone_redirect() helper clones skb before redirecting
      it to RX or TX of destination netdev.
      Introduce bpf_redirect() helper that does that without cloning.

      Benchmarked with two hosts using 10G ixgbe NICs.
      One host is doing line rate pktgen.
      Another host is configured as:
      $ tc qdisc add dev $dev ingress
      $ tc filter add dev $dev root pref 10 u32 match u32 0 0 flowid 1:2 \
         action bpf run object-file tcbpf1_kern.o section clone_redirect_xmit 
drop
      so it receives the packet on $dev and immediately xmits it on $dev + 1
      The section 'clone_redirect_xmit' in tcbpf1_kern.o file has the program
      that does bpf_clone_redirect() and performance is 2.0 Mpps

      $ tc filter add dev $dev root pref 10 u32 match u32 0 0 flowid 1:2 \
         action bpf run object-file tcbpf1_kern.o section redirect_xmit drop
      which is using bpf_redirect() - 2.4 Mpps

      and using cls_bpf with integrated actions as:
      $ tc filter add dev $dev root pref 10 \
        bpf run object-file tcbpf1_kern.o section redirect_xmit integ_act 
classid 1
      performance is 2.5 Mpps

      To summarize:
      u32+act_bpf using clone_redirect - 2.0 Mpps
      u32+act_bpf using redirect - 2.4 Mpps
      cls_bpf using redirect - 2.5 Mpps

      For comparison linux bridge in this setup is doing 2.1 Mpps
      and ixgbe rx + drop in ip_rcv - 7.8 Mpps

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: John Fastabend <john.r.fastabend@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 045efa82ff563cd4e656ca1c2e354fa5bf6bbda4
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 23:05:42 2015 -0700

      cls_bpf: introduce integrated actions

      Often cls_bpf classifier is used with single action drop attached.
      Optimize this use case and let cls_bpf return both classid and action.
      For backwards compatibility reasons enable this feature under
      TCA_BPF_FLAG_ACT_DIRECT flag.

      Then more interesting programs like the following are easier to write:
      int cls_bpf_prog(struct __sk_buff *skb)
      {
        /* classify arp, ip, ipv6 into different traffic classes
         * and drop all other packets
         */
        switch (skb->protocol) {
        case htons(ETH_P_ARP):
          skb->tc_classid = 1;
          break;
        case htons(ETH_P_IP):
          skb->tc_classid = 2;
          break;
        case htons(ETH_P_IPV6):
          skb->tc_classid = 3;
          break;
        default:
          return TC_ACT_SHOT;
        }

        return TC_ACT_OK;
      }

      Joint work with Daniel Borkmann.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4671fc6d47e0a0108fe24a4d830347d6a6ef4aa7
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 15 18:29:47 2015 -0700

      net/mlx4_en: really allow to change RSS key

      When changing rss key, we do not want to overwrite user provided key
      by the one provided by netdev_rss_key_fill(), which is the host random
      key generated at boot time.

      Fixes: 947cbb0ac242 ("net/mlx4_en: Support for configurable RSS hash 
function")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Eyal Perry <eyalpe@xxxxxxxxxxxx>
      CC: Amir Vadai <amirv@xxxxxxxxxxxx>
      Acked-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6c53334d6c6ac7088c2e7e70ff2941bfb33f52e
  Author: Junwei Zhang <martinbj2008@xxxxxxxxx>
  Date:   Fri Sep 18 00:00:05 2015 -0400

      net: only check perm protocol when register proto

      The permanent protocol nodes are at the head of the list,
      So only need check all these nodes.

      No matter the new node is permanent or not,
      insert the new node after the last permanent protocol node,

      If the new node conflicts with existing permanent node,
      return error.

      Signed-off-by: Martin Zhang <martinbj2008@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4b1b865e4e97e336316f30e32af36d71e98bdabc
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 15 15:24:28 2015 -0700

      bonding: use l4 hash if available

      If skb carries a l4 hash, no need to perform a flow dissection.

      Performance is slightly better :

      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.39012e+06
      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.39393e+06
      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.39988e+06

      After patch :

      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.43579e+06
      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.44304e+06
      lpaa5:~# ./super_netperf 200 -H lpaa6 -t TCP_RR -l 100
      2.44312e+06

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Cc: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 58d607d3e52f2b15902f58a1161da9fb3b0f6d47
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Sep 15 15:24:20 2015 -0700

      tcp: provide skb->hash to synack packets

      In commit b73c3d0e4f0e ("net: Save TX flow hash in sock and set in skbuf
      on xmit"), Tom provided a l4 hash to most outgoing TCP packets.

      We'd like to provide one as well for SYNACK packets, so that all packets
      of a given flow share same txhash, to later enable bonding driver to
      also use skb->hash to perform slave selection.

      Note that a SYNACK retransmit shuffles the tx hash, as Tom did
      in commit 265f94ff54d62 ("net: Recompute sk_txhash on negative routing
      advice") for established sockets.

      This has nice effect making TCP flows resilient to some kind of black
      holes, even at connection establish phase.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Cc: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Acked-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8a1513b49321e503fd6c8b6793e3b1f9a8a3285b
  Author: Kyle Evans <kvans32@xxxxxxxxx>
  Date:   Fri Sep 11 10:40:17 2015 -0500

      hp-wmi: limit hotkey enable

      Do not write initialize magic on systems that do not have
      feature query 0xb. Fixes Bug #82451.

      Redefine FEATURE_QUERY to align with 0xb and FEATURE2 with 0xd
      for code clearity.

      Add a new test function, hp_wmi_bios_2008_later() & simplify
      hp_wmi_bios_2009_later(), which fixes a bug in cases where
      an improper value is returned. Probably also fixes Bug #69131.

      Add missing __init tag.

      Signed-off-by: Kyle Evans <kvans32@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit f91638af0ef7cf85c204e3ebc853a35a99992e93
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Fri Aug 28 17:56:01 2015 -0400

      i40e/i40evf: Bump i40e to 1.3.21 and i40evf to 1.3.13

      Bump.

      Change-ID: If7ce84218361defa209142d1d8c6f69d48c2d7ad
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit b72dc7b19398b238698fbc5954a3c3de6cbc815d
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:51 2015 -0400

      i40e/i40evf: add get AQ result command to nvmupdate utility

      Add a facility to recover the result of a previously run AQ command.

      Change-ID: I21afec2c20c1a5e6ba60c7fbfcbedfff78c10e45
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e4c83c20f87fe1d3da6b3a7ecaf40ae8717c7842
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:50 2015 -0400

      i40e/i40evf: add exec_aq command to nvmupdate utility

      Add a facility to run AQ commands through the nvmupdate utility in order
      to allow the update tools to interact with the FW and do special
      commands needed for updates and configuration changes.

      Change-ID: I5c41523e4055b37f8e4ee479f7a0574368f4a588
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2f1b5bc844a7c13a3ec997a7ce029f27403adc57
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:49 2015 -0400

      i40e/i40evf: add wait states to NVM state machine

      This adds wait states to the NVM update state machine to signify when
      waiting for an update operation to finish, whether we're in the middle
      of a set of Write operations, or we're now idle but waiting.

      Change-ID: Iabe91d6579ef6a2ea560647e374035656211ab43
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0af8e9db2ce93d17c25a0ff0a044dfebf66ea5af
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:48 2015 -0400

      i40e/i40evf: add GetStatus command for nvmupdate

      This adds a new GetStatus command so that the NVM update tool can query
      the current status instead of doing fake write requests to probe for
      readiness.

      Change-ID: I671ec6ccd4dfc9dbac3a03b964589d693fda5cd8
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6b5c1b89c37791d89eac5f276cc095acf4f8ab6b
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Fri Aug 28 17:55:47 2015 -0400

      i40e/i40evf: add handling of writeback descriptor

      If the writeback descriptor buffer was previously created, this gives it
      to the AQ command request to be used to save the results.

      Change-ID: I8c8a1af81e6ebed6d0a15ed31697fe1a6c4e3708
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 87db27a9e21fdeb20f77a024b30b406915e083d6
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Aug 27 11:42:42 2015 -0400

      i40e/i40evf: save aq writeback for future inspection

      Add the ability to save the AdminQ write back descriptor if a
      caller supplies a buffer for it to be saved into.

      Change-ID: I3d1301d26360b39a2d66dc8569e851f54133a3af
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 79afe839ab1a5e1e9232845f430d5c500e956e8d
  Author: Shannon Nelson <shannon.nelson@xxxxxxxxx>
  Date:   Thu Jul 23 16:54:33 2015 -0400

      i40e: rename variable to prevent clash of understanding

      This code returns something that becomes the errno value from ethtool and
      passes around a pointer to an errno variable.  This patch changes the name
      slightly to differentiate it from the actual user errno variable.

      Change-ID: Idaa37845c069e66f4cea072e90f471bb2142454d
      Signed-off-by: Shannon Nelson <shannon.nelson@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bbe8373138a1fe92160a18418e7298b4c0128ff1
  Merge: a2f23e0 be10de0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 17:18:38 2015 -0700

      Merge branch 'nf_hook_netns'

      Eric W. Biederman says:

      ====================
      Passing net through the netfilter hooks

      My primary goal with this patchset and it's follow ups is to cleanup the
      network routing paths so that we do not look at the output device to
      derive the network namespace.  My plan is to pass the network namespace
      of the transmitting socket through the output path, to replace code that
      looks at the output network device today.  Once that is done we can have
      routes with output devices outside of the current network namespace.
      Which should allow reception and transmission of packets in network
      namespaces to be as fast as normal packet reception and transmission
      with early demux disabled, because it will same code path.

      Once skb_dst(skb)->dev is a little better under control I think it will
      also be possible to use rcu to cleanup the ancient hack that sets
      dst->dev to loopback_dev when a network device is removed.

      The work to get there is a series of code cleanups.  I am starting with
      passing net into the netfilter hooks and into the functions that are
      called after the netfilter hooks.  This removes from netfilter the
      need to guess which network namespace it is working on.

      To get there I perform a series of minor prep patches so the big changes
      at the end are possible to audit without getting lost in the noise.  In
      particular I have a lot of patches computing net into a local variable
      and then using it through out the function.

      So this patchset encompases removing dead code, sorting out the _sk
      functions that were added last time someone pushed a prototype change
      through the post netfilter functions.  Cleaning up individual functions
      use of the network namespace.  Passing net into the netfilter hooks.
      Passing net into the post netfilter functions.  Using state->net in
      the netfilter code where it is available and trivially usable.

      Pablo, Dave I don't know whose tree this makes more sense to go
      through.  I am assuming at least initially Pablos as netfilter is
      involved.  From what I have seen there will be a lot of back and forth
      between the netfilter code paths and the routing code paths.

      The patches are also available (against 4.3-rc1) at:
      git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/net-next.git master
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit be10de0a322ded7701a4dcce4a0ba83b3bbf42e5
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Thu Sep 17 17:21:31 2015 -0500

      netfilter: Add blank lines in callers of netfilter hooks

      In code review it was noticed that I had failed to add some blank lines
      in places where they are customarily used.  Taking a second look at the
      code I have to agree blank lines would be nice so I have added them
      here.

      Reported-by:  Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c4b51f0054ce85c0ec578ab818f0631834573eb
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:18 2015 -0500

      netfilter: Pass net into okfn

      This is immediately motivated by the bridge code that chains functions 
that
      call into netfilter.  Without passing net into the okfns the bridge code 
would
      need to guess about the best expression for the network namespace to 
process
      packets in.

      As net is frequently one of the first things computed in continuation 
functions
      after netfilter has done it's job passing in the desired network 
namespace is in
      many cases a code simplification.

      To support this change the function dst_output_okfn is introduced to
      simplify passing dst_output as an okfn.  For the moment dst_output_okfn
      just silently drops the struct net.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9dff2c966a0a79a4222553a851f17e679fc28a43
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:17 2015 -0500

      netfilter: Use nf_hook_state.net

      Instead of saying "net = dev_net(state->in?state->in:state->out)"
      just say "state->net".  As that information is now availabe,
      much less confusing and much less error prone.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 29a26a56803855a79dbd028cd61abee56237d6e5
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:16 2015 -0500

      netfilter: Pass struct net into the netfilter hooks

      Pass a network namespace parameter into the netfilter hooks.  At the
      call site of the netfilter hooks the path a packet is taking through
      the network stack is well known which allows the network namespace to
      be easily and reliabily.

      This allows the replacement of magic code like
      "dev_net(state->in?:state->out)" that appears at the start of most
      netfilter hooks with "state->net".

      In almost all cases the network namespace passed in is derived
      from the first network device passed in, guaranteeing those
      paths will not see any changes in practice.

      The exceptions are:
      xfrm/xfrm_output.c:xfrm_output_resume()         xs_net(skb_dst(skb)->xfrm)
      ipvs/ip_vs_xmit.c:ip_vs_nat_send_or_cont()      ip_vs_conn_net(cp)
      ipvs/ip_vs_xmit.c:ip_vs_send_or_cont()          ip_vs_conn_net(cp)
      ipv4/raw.c:raw_send_hdrinc()                    sock_net(sk)
      ipv6/ip6_output.c:ip6_xmit()                      sock_net(sk)
      ipv6/ndisc.c:ndisc_send_skb()                   dev_net(skb->dev) not 
dev_net(dst->dev)
      ipv6/raw.c:raw6_send_hdrinc()                   sock_net(sk)
      br_netfilter_hooks.c:br_nf_pre_routing_finish() dev_net(skb->dev) before 
skb->dev is set to nf_bridge->physindev

      In all cases these exceptions seem to be a better expression for the
      network namespace the packet is being processed in then the historic
      "dev_net(in?in:out)".  I am documenting them in case something odd
      pops up and someone starts trying to track down what happened.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04eb44890e5bb3cc855e5c0f18a05eb7311364b7
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:15 2015 -0500

      bridge: Add br_netif_receive_skb remove netif_receive_skb_sk

      netif_receive_skb_sk is only called once in the bridge code, replace
      it with a bridge specific function that calls netif_receive_skb.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f2d74cf88c625bfa723c5ffb79885c852ee1f46b
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:14 2015 -0500

      bridge: Cache net in br_nf_pre_routing_finish

      This is prep work for passing net to the netfilter hooks.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6532948b2e7b75895c1264967342ae61dc97b4a6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:13 2015 -0500

      bridge: Pass net into br_nf_push_frag_xmit

      When struct net starts being passed through the ipv4 and ipv6 fragment
      routines br_nf_push_frag_xmit will need to take a net parameter.
      Prepare br_nf_push_frag_xmit before that is needed and introduce
      br_nf_push_frag_xmit_sk for the call sites that still need the old
      calling conventions.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8d4df0b9300a2623559a8f616a152312454cada1
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:12 2015 -0500

      bridge: Pass net into br_nf_ip_fragment

      This is a prep work for passing struct net through ip_do_fragment and
      later the netfilter okfn.   Doing this independently makes the later
      code changes clearer.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit adb28c9d3371c845c7a28bfd4fb163aca0d0dc37
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:11 2015 -0500

      ipv6: Compute net once in raw6_send_hdrinc

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 19a0644ca31c7e22abdb4058ea013f1f7abf7327
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:10 2015 -0500

      ipv6: Cache net in ip6_output

      Keep net in a local variable so I can use it in NF_HOOK_COND
      when I pass struct net to all of the netfilter hooks.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 78126c41907e999979635855b6b1b24aa46f53d8
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:09 2015 -0500

      ipv6: Only compute net once in ip6_finish_output2

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9865249fd19d1416f70aa73ac7f214cbee4f6b51
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:08 2015 -0500

      ipv6: Don't recompute net in ip6_rcv

      Avoid silly redundant code

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2b4aa3cec4873005a0d5155395b34641584b3a4e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:07 2015 -0500

      net: Remove dev_queue_xmit_sk

      A function with weird arguments that it will never use to accomdate a
      netfilter callback prototype is absolutely in the core of the
      networking stack.  Frankly it does not make sense and it causes a lot
      of confusion as to why arguments that are never used are being passed
      to the function.

      As I am preparing to make a second change to arguments to the okfn even
      the names stops making sense.

      As I have removed the two callers of this function remove this confusion
      from the networking stack.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f19c578df80ad2e6b2bd9af63aa0af4bcc7470e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:06 2015 -0500

      bridge: Introduce br_send_bpdu_finish

      The function dev_queue_xmit_skb_sk is unncessary and very confusing.
      Introduce br_send_bpdu_finish to remove the need for 
dev_queue_xmit_skb_sk,
      and have br_send_bpdu_finish call dev_queue_xmit.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9e4306fd87c6ff08c9a94212d84a23c16395843
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:05 2015 -0500

      arp: Introduce arp_xmit_finish

      The function dev_queue_xmit_skb_sk is unncessary and very confusing.
      Introduce arp_xmit_finish to remove the need for dev_queue_xmit_skb_sk,
      and have arp_xmit_finish call dev_queue_xmit.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 244ba779855c2ccbb843444c2dce952ca8c1a78e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:04 2015 -0500

      ipv6: Only compute net once in ip6mr_forward2_finish

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 758ccac8e7419ae746bcda807919a547ed9cdaad
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:03 2015 -0500

      ipv4: Only compute net once in ipmr_forward_finish

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 38184b3b073bf588d809d3b2fb7370264357c289
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:02 2015 -0500

      ipv4: Only compute net once in ip_rcv_finish

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ba1bf42920b778c8c884e694e8e2aa6486c2b31
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:01 2015 -0500

      ipv4: Only compute net once in ip_finish_output2

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9479b0af489c836cc0d04b01ee5a7d48d79d3d51
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:04:00 2015 -0500

      ipv4: Explicitly compute net in ip_fragment

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 26a949dbd5595b987bf199be4442136e9288a93e
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:59 2015 -0500

      ipv4: Only compute net once in ip_do_fragment

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc4c851e4b41d668075d7cb6c71e3725bc5d4662
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:58 2015 -0500

      ipv4: Don't recompute net in ipmr_queue_xmit

      Calling dev_net(dev) for is just silly.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 88f5cc245849df73c353f7bb46e9e5749469f6d3
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:57 2015 -0500

      ipv4: Remember the net in ip_output and ip_mc_output

      This is a prepatory patch to passing net int the netfilter hooks,
      where net will be used again.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e707766ce0ca65084b60a275a7c1a9863207cfa6
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:56 2015 -0500

      ipv4: Compute net once in ip_rcv

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8e1ac7912700914e4d6d129d38ecbcff8e4f4c4
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:55 2015 -0500

      ipv4: Compute net once in ip_forward_finish

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fcad0ac2da05d5ed443acee7abd69e24e69037ca
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:54 2015 -0500

      ipv4: Compute net once in ip_forward

      Compute struct net from the input device in ip_forward before it is
      used.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5a70649e0dae02ba5090540fffce667d2300bc5a
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:53 2015 -0500

      net: Merge dst_output and dst_output_sk

      Add a sock paramter to dst_output making dst_output_sk superfluous.
      Add a skb->sk parameter to all of the callers of dst_output
      Have the callers of dst_output_sk call dst_output.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a6568b2425daffc7b21ae63b6601b57ae14b5cb8
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:52 2015 -0500

      xfrm: Remove unused afinfo method init_dst

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7a7735044e1eab1415697b3139e758d24a600099
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:51 2015 -0500

      netfilter: Pass net to nf_hook_thresh

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b11b1f652dccde707d568f4012b01a8ec5bd5f57
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:50 2015 -0500

      netfilter: Store net in nf_hook_state

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fb884253a919148677c5bf347ffb62c539370440
  Author: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
  Date:   Tue Sep 15 20:03:49 2015 -0500

      netfilter: Remove !CONFIG_NETFITLER definition of nf_hook_thresh

      The !CONFIG_NETFILTER definition of nf_hook_thresh calls okfn when
      the CONFIG_NETFITLER defintion does not, making it buggy.

      As the !CONFIG_NETFILTER defintion of nf_hook_thresh is not used remove
      it rather than fix it.

      Signed-off-by: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2f23e08b0861bd17109c1add000c4125a6c2dbc
  Merge: c4047f5 9adbac5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 16:50:36 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-09-15

      This series contains updates to ixgbe and fm10k.

      Don fixes a ixgbe issue by adding checks for systems that do not have
      SFP's to avoid incorrectly acting on interrupts that are falsely
      interpreted as SFP events.

      Alex Williamson adds a fix for ixgbe to disable SR-IOV prior to
      unregistering the netdev to avoid issues with guest OS's which do not
      support hot-unplug or their hot-unplug is broken.

      Alex Duyck update the lowest limit for adaptive interrupt interrupt
      moderation to about 12K interrupts per second for ixgbe.  This change
      increases the performance for ixgbe.  Also fixed up fm10k to remove
      the optimization that assumed that all fragments would be limited to
      page size, since that assumption is incorrect as the TCP allocator can
      provide up to a 32K page fragment.  Updated fm10k to add the MAC
      address to the list of values recorded on driver load.  Fixes fm10k
      so that we only trigger the data path reset if the fabric is ready to
      handle traffic to avoid triggering the reset unless the switch API is
      ready for us.

      Jacob updates the fm10k driver to disable the service task during
      suspend and re-enable it after we resume. If we don't do this, the
      device could be UP when you suspend and come back from resume as
      DOWN.  Also update fm10k to prevent the removal of default VID rules,
       and correctly remove the stack layers information of the VLAN, but then
      return to forwarding that VID as untagged frames.  If we deleted the VID
      rules here, we would begin dropping traffic due to VLAN membership
      violations.  Fixed fm10k to use pcie_get_minimum_link(), which is useful
      in cases where we connect to a slot at Gen3, but the slot is behind a bus
      which is only connected at Gen2.  Updated fm10k to update the netdev
      permanent address during reinit instead of up to enable users to
      immediately see the new MAC address on the VF even if the device is not
      up.  Adds the creation of VLAN interfaces on a device, even while the
      device is down for fm10k.  Fixed an issue where we request the incorrect
      MAC/VLAN combinations, and prevents us from accidentally reporting some
      frames as VLAN tagged.  Provided a couple of trivial fixes for fm10k
      to fix code style and typos in code comments.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 58189ca7b27411c3dc9a5cb9eeee0906da684c59
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 15:10:50 2015 -0700

      net: Fix vti use case with oif in dst lookups

      Steffen reported that the recent change to add oif to dst lookups breaks
      the VTI use case. The problem is that with the oif set in the flow struct
      the comparison to the nh_oif is triggered. Fix by splitting the
      FLOWI_FLAG_VRFSRC into 2 flags -- one that triggers the vrf device cache
      bypass (FLOWI_FLAG_VRFSRC) and another telling the lookup to not compare
      nh oif (FLOWI_FLAG_SKIP_NH_OIF).

      Fixes: 42a7b32b73d6 ("xfrm: Add oif to dst lookups")

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c4047f533f3cb1c57e82ad02f3aa7054406df648
  Author: Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxx>
  Date:   Tue Sep 15 18:28:00 2015 -0300

      net-sysfs: get_netdev_queue_index() cleanup

      Redo commit ed1acc8cd8c22efa919da8d300bab646e01c2dce.

      Commit 822b3b2ebfff8e9b3d006086c527738a7ca00cd0 ("net: Add max rate tx 
queue
      attribute") moved get_netdev_queue_index around, but kept the old version.
      Probably because of a reuse of the original patch from before Eric's 
change to
      that function.

      Remove one inline keyword, and no need for a loop to find
      an index into a table.

      Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxx>
      Fixes: 822b3b2ebfff ("net: Add max rate tx queue attribute")
      Acked-by:  Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Acked-by: John Fastabend <john.r.fastabend@xxxxxxxxx>
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d828755eae637c6ca39e30702e98abaf34cac146
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Tue Sep 15 17:20:09 2015 +0530

      cxgb4: add device ID for few T5 adapters

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2e64126bb0fb581b55e52e51ec451ebb0d6769c8
  Author: Phil Sutter <phil@xxxxxx>
  Date:   Tue Sep 15 10:33:07 2015 +0200

      net: qdisc: enhance default_qdisc documentation

      Aside from some lingual cleanup, point out which interfaces are not or
      partly covered by this setting.

      Signed-off-by: Phil Sutter <phil@xxxxxx>
      Acked-by: Cong Wang <cwang@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 562d897d15a6e2bab3cc9b4c172286b612834fe8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 10:50:14 2015 -0600

      net: Add documentation for VRF device

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc5706056baa3002b844ff240a1cc2199a978795
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Sep 14 11:14:50 2015 -0700

      openvswitch: Fix IPv6 exthdr handling with ct helpers.

      Static code analysis reveals the following bug:

              net/openvswitch/conntrack.c:281 ovs_ct_helper()
              warn: unsigned 'protoff' is never less than zero.

      This signedness bug breaks error handling for IPv6 extension headers when
      using conntrack helpers. Fix the error by using a local signed variable.

      Fixes:  cae3a2627520: "openvswitch: Allow attaching helpers to ct
      action"
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ec0c97959abff33a42db9081c22132bcff5b4f2
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Mon Sep 14 20:12:21 2015 +0800

      nfs/filelayout: Fix NULL reference caused by double freeing of fh_array

      If filelayout_decode_layout fail, _filelayout_free_lseg will causes
      a double freeing of fh_array.

      [ 1179.279800] BUG: unable to handle kernel NULL pointer dereference at   
        (null)
      [ 1179.280198] IP: [<ffffffffa027222d>] 
filelayout_free_fh_array.isra.11+0x1d/0x70 [nfs_layout_nfsv41_files]
      [ 1179.281010] PGD 0
      [ 1179.281443] Oops: 0000 [#1]
      [ 1179.281831] Modules linked in: nfs_layout_nfsv41_files(OE) nfsv4(OE) 
nfs(OE) fscache(E) xfs libcrc32c coretemp nfsd crct10dif_pclmul ppdev 
crc32_pclmul crc32c_intel auth_rpcgss ghash_clmulni_intel nfs_acl lockd 
vmw_balloon grace sunrpc parport_pc vmw_vmci parport shpchp i2c_piix4 vmwgfx 
drm_kms_helper ttm drm serio_raw mptspi scsi_transport_spi mptscsih e1000 
mptbase ata_generic pata_acpi [last unloaded: fscache]
      [ 1179.283891] CPU: 0 PID: 13336 Comm: cat Tainted: G           OE   
4.3.0-rc1-pnfs+ #244
      [ 1179.284323] Hardware name: VMware, Inc. VMware Virtual Platform/440BX 
Desktop Reference Platform, BIOS 6.00 05/20/2014
      [ 1179.285206] task: ffff8800501d48c0 ti: ffff88003e3c4000 task.ti: 
ffff88003e3c4000
      [ 1179.285668] RIP: 0010:[<ffffffffa027222d>]  [<ffffffffa027222d>] 
filelayout_free_fh_array.isra.11+0x1d/0x70 [nfs_layout_nfsv41_files]
      [ 1179.286612] RSP: 0018:ffff88003e3c77f8  EFLAGS: 00010202
      [ 1179.287092] RAX: 0000000000000000 RBX: ffff88001fe78900 RCX: 
0000000000000000
      [ 1179.287731] RDX: ffffea0000f40760 RSI: ffff88001fe789c8 RDI: 
ffff88001fe789c0
      [ 1179.288383] RBP: ffff88003e3c7810 R08: ffffea0000f40760 R09: 
0000000000000000
      [ 1179.289170] R10: 0000000000000000 R11: 0000000000000001 R12: 
ffff88001fe789c8
      [ 1179.289959] R13: ffff88001fe789c0 R14: ffff88004ec05a80 R15: 
ffff88004f935b88
      [ 1179.290791] FS:  00007f4e66bb5700(0000) GS:ffffffff81c29000(0000) 
knlGS:0000000000000000
      [ 1179.291580] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [ 1179.292209] CR2: 0000000000000000 CR3: 00000000203f8000 CR4: 
00000000001406f0
      [ 1179.292731] Stack:
      [ 1179.293195]  ffff88001fe78900 00000000000000d0 ffff88001fe78178 
ffff88003e3c7868
      [ 1179.293676]  ffffffffa0272737 0000000000000001 0000000000000001 
ffff88001fe78800
      [ 1179.294151]  00000000614fffce ffffffff81727671 ffff88001fe78100 
ffff88001fe78100
      [ 1179.294623] Call Trace:
      [ 1179.295092]  [<ffffffffa0272737>] filelayout_alloc_lseg+0xa7/0x2d0 
[nfs_layout_nfsv41_files]
      [ 1179.295625]  [<ffffffff81727671>] ? out_of_line_wait_on_bit+0x81/0xb0
      [ 1179.296133]  [<ffffffffa040407e>] pnfs_layout_process+0xae/0x320 
[nfsv4]
      [ 1179.296632]  [<ffffffffa03e0a01>] nfs4_proc_layoutget+0x2b1/0x360 
[nfsv4]
      [ 1179.297134]  [<ffffffffa0402983>] pnfs_update_layout+0x853/0xb30 
[nfsv4]
      [ 1179.297632]  [<ffffffffa039db24>] ? nfs_get_lock_context+0x74/0x170 
[nfs]
      [ 1179.298158]  [<ffffffffa0271807>] filelayout_pg_init_read+0x37/0x50 
[nfs_layout_nfsv41_files]
      [ 1179.298834]  [<ffffffffa03a72d9>] __nfs_pageio_add_request+0x119/0x460 
[nfs]
      [ 1179.299385]  [<ffffffffa03a6bd7>] ? 
nfs_create_request.part.9+0x37/0x2e0 [nfs]
      [ 1179.299872]  [<ffffffffa03a7cc3>] nfs_pageio_add_request+0xa3/0x1b0 
[nfs]
      [ 1179.300362]  [<ffffffffa03a8635>] readpage_async_filler+0x85/0x260 
[nfs]
      [ 1179.300907]  [<ffffffff81180cb1>] read_cache_pages+0x91/0xd0
      [ 1179.301391]  [<ffffffffa03a85b0>] ? nfs_read_completion+0x220/0x220 
[nfs]
      [ 1179.301867]  [<ffffffffa03a8dc8>] nfs_readpages+0x128/0x200 [nfs]
      [ 1179.302330]  [<ffffffff81180ef3>] __do_page_cache_readahead+0x203/0x280
      [ 1179.302784]  [<ffffffff81180dc8>] ? 
__do_page_cache_readahead+0xd8/0x280
      [ 1179.303413]  [<ffffffff81181116>] ondemand_readahead+0x1a6/0x2f0
      [ 1179.303855]  [<ffffffff81181371>] page_cache_sync_readahead+0x31/0x50
      [ 1179.304286]  [<ffffffff811750a6>] generic_file_read_iter+0x4a6/0x5c0
      [ 1179.304711]  [<ffffffffa03a0316>] ? 
__nfs_revalidate_mapping+0x1f6/0x240 [nfs]
      [ 1179.305132]  [<ffffffffa039ccf2>] nfs_file_read+0x52/0xa0 [nfs]
      [ 1179.305540]  [<ffffffff811e343c>] __vfs_read+0xcc/0x100
      [ 1179.305936]  [<ffffffff811e3d15>] vfs_read+0x85/0x130
      [ 1179.306326]  [<ffffffff811e4a98>] SyS_read+0x58/0xd0
      [ 1179.306708]  [<ffffffff8172caaf>] entry_SYSCALL_64_fastpath+0x12/0x76
      [ 1179.307094] Code: c4 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 
00 00 55 48 89 e5 41 55 41 54 53 8b 07 49 89 f4 85 c0 74 47 48 8b 06 49 89 fd 
<48> 8b 38 48 85 ff 74 22 31 db eb 0c 48 63 d3 48 8b 3c d0 48 85
      [ 1179.308357] RIP  [<ffffffffa027222d>] 
filelayout_free_fh_array.isra.11+0x1d/0x70 [nfs_layout_nfsv41_files]
      [ 1179.309177]  RSP <ffff88003e3c77f8>
      [ 1179.309582] CR2: 0000000000000000

      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 0fdea1e8a2853f79d39b8555cc9de16a7e0ab26f
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 23:43:17 2015 -0400

      SUNRPC: Ensure that we wait for connections to complete before retrying

      Commit 718ba5b87343, moved the responsibility for unlocking the socket to
      xs_tcp_setup_socket, meaning that the socket will be unlocked before we
      know that it has finished trying to connect. The following patch is based 
on
      an initial patch by Russell King to ensure that we delay clearing the
      XPRT_CONNECTING flag until we either know that we failed to initiate
      a connection attempt, or the connection attempt itself failed.

      Fixes: 718ba5b87343 ("SUNRPC: Add helpers to prevent socket create from 
racing")
      Reported-by: Russell King <linux@xxxxxxxxxxxxxxxx>
      Reported-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Tested-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Tested-by: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 37a1d3611c126fd9782ce5235791f898f053e763
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 10:18:33 2015 -0700

      ipv6: include NLM_F_REPLACE in route replace notifications

      This patch adds NLM_F_REPLACE flag to ipv6 route replace notifications.
      This makes nlm_flags in ipv6 replace notifications consistent
      with ipv4.

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
      Reviewed-by: Michal Kubecek <mkubecek@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c9e69c8c58eb8671e9f6cee728088e4c5abc9115
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Fri Aug 7 09:59:14 2015 +0200

      arch/x86/intel-mid: Use kmemdup rather than duplicating its implementation

      The patch was generated using fixed coccinelle semantic patch
      scripts/coccinelle/api/memdup.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2014320

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Cc: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438934377-4922-9-git-send-email-a.hajda@xxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 74c600e36455af85c593702670f38709ca1951ce
  Author: Martyn Welch <martyn@xxxxxxxxxxxx>
  Date:   Thu Sep 17 20:38:47 2015 +0100

      MAINTAINERS: Update email address for Martyn Welch

      I have recently left GE and the email address listed for me in the
      maintainers file is no longer valid. Updating email address.

      Signed-off-by: Martyn Welch <martyn@xxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 0738eff14d817a02ab082c392c96a1613006f158
  Author: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 13:21:22 2015 +0200

      can: Allwinner A10/A20 CAN Controller support - Kernel module

      Kernel module for Allwinner A10/A20 CAN controller.

      Signed-off-by: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit 4366bd4fa8c46b61ec0a7d564bd978cfa882692b
  Author: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 13:21:19 2015 +0200

      can: Allwinner A10/A20 CAN Controller support - Devicetree bindings

      Devicetree bindings for Allwinner A10/A20 CAN controller.

      Signed-off-by: Gerhard Bertelsmann <info@xxxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit d24c8f24ea897ae89738b865a41b0a5d70137c46
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Thu Sep 10 21:26:04 2015 +0200

      net: smc91x: convert pxa dma to dmaengine

      Convert the dma transfers to be dmaengine based, now pxa has a dmaengine
      slave driver. This makes this driver a bit more PXA agnostic.

      The driver was tested on pxa27x (mainstone) and pxa310 (zylonite),
      ie. only pxa platforms.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 17a9618e984234fda167ea5e07eae6f4f2ea2186
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:07 2015 +0200

      SUNRPC: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 306a5549355966e480e0dcacdc6b9321d153e0c0
  Author: J. Bruce Fields <bfields@xxxxxxxxxx>
  Date:   Wed Sep 16 17:21:27 2015 -0400

      nfs: fix v4.2 SEEK on files over 2 gigs

      We're incorrectly assigning a loff_t return to an int.  If SEEK_HOLE or
      SEEK_DATA returns an offset over 2^31 then the application will see a
      weird lseek() result (usually -EIO).

      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: bdcc2cd14e4e "NFSv4.2: handle NFS-specific llseek errors"
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>
      Reviewed-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 03c78827db35be20ffa71cb5ccd2cedb192f95d6
  Author: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 10:42:27 2015 -0400

      SUNRPC: Fix races between socket connection and destroy code

      When we're destroying the socket transport, we need to ensure that
      we cancel any existing delayed connection attempts, and order them
      w.r.t. the call to xs_close().

      Reported-by:"Suzuki K. Poulose" <suzuki.poulose@xxxxxxx>
      Acked-by: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit 048883e0b934d9a5103d40e209cb14b7f33d2933
  Author: Peng Tao <tao.peng@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 11:14:06 2015 +0800

      nfs: fix pg_test page count calculation

      We really want sizeof(struct page *) instead. Otherwise we limit
      maximum IO size to 64 pages rather than 512 pages on a 64bit system.

      Fixes 2e11f829(nfs: cap request size to fit a kmalloced page array).

      Cc: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Peng Tao <tao.peng@xxxxxxxxxxxxxxx>
      Fixes: 2e11f8296d22 ("nfs: cap request size to fit a kmalloced page 
array")
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit a41cbe86df3afbc82311a1640e20858c0cd7e065
  Author: Olga Kornievskaia <aglo@xxxxxxxxx>
  Date:   Mon Sep 14 19:54:36 2015 -0400

      Failing to send a CLOSE if file is opened WRONLY and server reboots on a 
4.x mount

      A test case is as the description says:
      open(foobar, O_WRONLY);
      sleep()  --> reboot the server
      close(foobar)

      The bug is because in nfs4state.c in nfs4_reclaim_open_state() a few
      line before going to restart, there is
      clear_bit(NFS4CLNT_RECLAIM_NOGRACE, &state->flags).

      NFS4CLNT_RECLAIM_NOGRACE is a flag for the client states not open
      owner states. Value of NFS4CLNT_RECLAIM_NOGRACE is 4 which is the
      value of NFS_O_WRONLY_STATE in nfs4_state->flags. So clearing it wipes
      out state and when we go to close it, â??call_closeâ?? doesnâ??t get set 
as
      state flag is not set and CLOSE doesnâ??t go on the wire.

      Signed-off-by: Olga Kornievskaia <aglo@xxxxxxxxx>
      Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>

  commit c8aa33a7114704f3f5a359893a8e1de9ea2940a5
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Wed Sep 9 15:57:59 2015 -0700

      of_pci_irq: Silence bogus "of_irq_parse_pci() failed ..." messages.

      It is perfectly legitimate for a PCI device to have an
      PCI_INTERRUPT_PIN value of zero.  This happens if the device doesn't
      use interrupts, or on PCIe devices, where only MSI/MSI-X are
      supported.

      Silence the annoying "of_irq_parse_pci() failed with rc=-19" error
      messages by moving the printing code into of_irq_parse_pci(), and only
      emitting the message for cases where PCI_INTERRUPT_PIN == 0 is not the
      cause for an early exit.

      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 31b47ae3f18b31d86f553198e624b3b38f6397a2
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Sat Sep 12 12:52:49 2015 +0200

      devicetree: bindings: Extend the bma180 bindings with bma250 info

      The bma180 / bma250 accelerometers share a driver (at least under Linux),
      so it makes sense to also have their bindings info in a single .txt.

      This commit extends the bma180 bindings with bma250 bindings, specifically
      it specifies how the 2 seperate interrupts the bma250 has must be listed
      in devicetree. The existing bma180 driver is already fully compatible
      with the specified bindings.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 9fa04fbeb78eab6f3817e444644348c46c7e2370
  Author: Punit Agrawal <punit.agrawal@xxxxxxx>
  Date:   Tue Sep 8 12:20:49 2015 +0100

      of: thermal: Mark cooling-*-level properties optional

      The cooling-{min,max}-level properties are marked as optional in
      Documentation/devicetree/bindings/cpufreq/cpufreq-dt.txt and the usage
      in various device tree matches this, i.e., some cooling device in the
      device trees provide these properties while others do not.

      Make the bindings in
      Documentation/devicetree/bindings/thermal/thermal.txt consistent with
      the cpufreq-dt bindings by marking the cooling-*-level properties as
      optional.

      Signed-off-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit eb168b70dea54578a45119fcdb3b48ad5d75fed9
  Author: Punit Agrawal <punit.agrawal@xxxxxxx>
  Date:   Tue Sep 8 12:20:48 2015 +0100

      of: thermal: Fix inconsitency between cooling-*-state and cooling-*-level

      The device trees in the kernel as well as the binding description in
      Documentation/devicetree/bindings/cpufreq/cpufreq-dt.txt use the
      cooling-{min,max}-level property.

      Fix the inconsistency with the binding description in
      Documentation/devicetree/bindings/thermal/thermal.txt by changing
      cooling-*-state properties to cooling-*-level.

      Signed-off-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit dc4dae00d82fedcd7a632f786f9f76c1f7f929a5
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Sep 7 10:49:03 2015 +0100

      Docs: dt: add #msi-cells to GICv3 ITS binding

      The GICv3 ITS uses sideband master identification data (known as a
      DeviceID) to identify which master wrote to a doorbell, and this data is
      used to determine how to react in response to the write.

      Commit 1e6db000482fa65a ("irqchip/gicv3-its: Add platform MSI support")
      added support per this binding, but failed to update the documentation.
      This patch fixes the documentation.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 8e64a7331702b7888ccf84b2b9ff46ab8e167c7f
  Merge: 2e5735f 335c258
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 12:32:40 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fixes from Sage Weil:
       "These are both fixes to the new and improved keepalive2 behavior"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        libceph: advertise support for keepalive2
        libceph: don't access invalid memory in keepalive2 path

  commit 2e5735f4c377377cb738270024083f74ee058877
  Merge: d109c4b e11fc21
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 12:25:42 2015 -0700

      Merge tag 'for-v4.3-rc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sre/linux-power-supply

      Pull power supply fixes from Sebastian Reichel:
       "twl4030-charger fixes"

      * tag 'for-v4.3-rc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sre/linux-power-supply:
        twl4030_charger: fix another compile error
        Revert "twl4030_charger: correctly handle -EPROBE_DEFER from 
devm_usb_get_phy_by_node"

  commit d7ba2a024cf19261b34825f89d30ceef9a5ff864
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Wed Jul 29 18:45:33 2015 +0900

      of: add vendor prefix for Socionext Inc.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit d34e210ed3a28050441f15228fd5ed929028d9cd
  Author: Gabriel Fernandez <gabriel.fernandez@xxxxxxxxxx>
  Date:   Wed Sep 16 09:42:59 2015 +0200

      drivers: clk: st: Rename st_pll3200c32_407_c0_x into st_pll3200c32_cx_x

      Use a generic name for this kind of PLL

      Correction in dts files are already done here:
      commit 5eb26c605909 ("ARM: STi: DT: Rename st_pll3200c32_407_c0_x into 
st_pll3200c32_cx_x")

      Signed-off-by: Gabriel Fernandez <gabriel.fernandez@xxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit bf6445631c6f00882b25516a174d5073ce0c6f81
  Author: Peter Senna Tschudin <peter.senna@xxxxxxxxx>
  Date:   Thu Sep 17 12:08:53 2015 +0200

      perf tools: Bool functions shouldn't return -1

      Returning a negative value for a boolean function seem to have the
      undesired effect of returning true. Replace -1 by false in a
      bool-returning function.

      The diff of the .s file before and after the change (for x86_64):

        3907c3907
        <       movl    $1, %ebx
        ---
        >       xorl    %ebx, %ebx

      while if -1 is replaced by true, the diff is empty.

      This issue was found by the following Coccinelle semantic patch:

        <smpl>
        @@
        identifier f;
        constant C;
        typedef bool;
        @@
        bool f (...){
        <+...
        * return -C;
        ...+>
        }
        </smpl>

      Signed-off-by: Peter Senna Tschudin <peter.senna@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Milos Vyletel <milos@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442484533-19742-1-git-send-email-peter.senna@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d109c4bb4513b8a63d56117f683901492093bfa9
  Merge: 42dc2a3 df057cc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 11:28:17 2015 -0700

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Will Deacon:
       "This addresses some problems with filesystem writeback due to the
        recently merged hardware DBM patches, which caused us to treat some
        read-only pages as dirty.

        There are also some other, less significant fixes that are described
        in the summary below:

        A mixture of fixes for regressions introduced during the merge window,
        some longer standing problems that we spotted and a couple of hardware
        errata.  The main changes are:

         - Fix fallout from the h/w DBM patches, causing filesystem writeback
           issues on both v8 and v8.1 CPUs

         - Workaround for Cortex-A53 erratum #843419 in the module loader

         - Fix for long-standing issue with compat big-endian signal handlers
           using the saved floating point state"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: errata: add module build workaround for erratum #843419
        arm64: compat: fix vfp save/restore across signal handlers in big-endian
        arm64: cpu hotplug: ensure we mask out CPU_TASKS_FROZEN in notifiers
        arm64: head.S: initialise mdcr_el2 in el2_setup
        arm64: enable generic idle loop
        arm64: pgtable: use a single bit for PTE_WRITE regardless of DBM
        arm64: Fix pte_modify() to preserve the hardware dirty information
        arm64: Fix the pte_hw_dirty() check when AF/DBM is enabled
        arm64: dma-mapping: check whether cma area is initialized or not

  commit 42dc2a3048247109b0a5ee6345226cbd3e4f6410
  Merge: 1345df2 03da3ff
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 11:01:34 2015 -0700

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Ingo Molnar:
       - misc fixes all around the map
       - block non-root vm86(old) if mmap_min_addr != 0
       - two small debuggability improvements
       - removal of obsolete paravirt op

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/platform: Fix Geode LX timekeeping in the generic x86 build
        x86/apic: Serialize LVTT and TSC_DEADLINE writes
        x86/ioapic: Force affinity setting in setup_ioapic_dest()
        x86/paravirt: Remove the unused pv_time_ops::get_tsc_khz method
        x86/ldt: Fix small LDT allocation for Xen
        x86/vm86: Fix the misleading CONFIG_VM86 Kconfig help text
        x86/cpu: Print family/model/stepping in hex
        x86/vm86: Block non-root vm86(old) if mmap_min_addr != 0
        x86/alternatives: Make optimize_nops() interrupt safe and synced
        x86/mm/srat: Print non-volatile flag in SRAT
        x86/cpufeatures: Enable cpuid for Intel SHA extensions

  commit 1345df21ac542daa9d8613f89a3f0b5f32d636f8
  Merge: c2ea72f eef7635
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 10:55:25 2015 -0700

      Merge branch 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer fixes from Ingo Molnar:
       "A fix for an abs()/abs64() bug that caused too slow NTP convergence on
        32-bit kernels, plus a removal of an obsolete clockevents driver
        facility after all users got converted during the merge window"

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        clockevents: Remove unused set_mode() callback
        time: Fix timekeeping_freqadjust()'s incorrect use of abs() instead of 
abs64()

  commit c2ea72fd869145130969d6b07273c479cf2a22f5
  Merge: a706797 5473e0c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 10:49:42 2015 -0700

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fixes from Ingo Molnar:
       "A migrate_tasks() locking fix, and a late-coming nohz change plus a
        nohz debug check"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched: 'Annotate' migrate_tasks()
        nohz: Assert existing housekeepers when nohz full enabled
        nohz: Affine unpinned timers to housekeepers

  commit 23c3f310e897837aeb8ffe8700b803cb58e7b35d
  Author: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 14:50:20 2015 +0100

      regulator: core: Correct return value check in regulator_resolve_supply

      The ret pointer passed to regulator_dev_lookup is only filled with a
      valid error code if regulator_dev_lookup returned NULL. Currently
      regulator_resolve_supply checks this ret value before it checks if a
      regulator was returned, this can result in valid regulator lookups being
      ignored.

      Fixes: 6261b06de565 ("regulator: Defer lookup of supply to regulator_get")
      Signed-off-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit a706797febf4ff60ad61f855a01707be9fc3cf4c
  Merge: 9786cff f6cf87f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 10:37:46 2015 -0700

      Merge branch 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf fixes from Ingo MOlnar:
       "Mostly tooling fixes, but also two x86 PMU driver fixes"

      * 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        perf tests: Fix software clock events test setting maps
        perf tests: Fix task exit test setting maps
        perf evlist: Fix create_syswide_maps() not propagating maps
        perf evlist: Fix add() not propagating maps
        perf evlist: Factor out a function to propagate maps for a single evsel
        perf evlist: Make create_maps() use set_maps()
        perf evlist: Make set_maps() more resilient
        perf evsel: Add own_cpus member
        perf evlist: Fix missing thread_map__put in propagate_maps()
        perf evlist: Fix splice_list_tail() not setting evlist
        perf evlist: Add has_user_cpus member
        perf evlist: Remove redundant validation from propagate_maps()
        perf evlist: Simplify set_maps() logic
        perf evlist: Simplify propagate_maps() logic
        perf top: Fix segfault pressing -> with no hist entries
        perf header: Fixup reading of HEADER_NRCPUS feature
        perf/x86/intel: Fix constraint access
        perf/x86/intel/bts: Set event->hw.itrace_started in pmu::start to match 
the new logic
        perf tools: Fix use of wrong event when processing exit events
        perf tools: Fix parse_events_add_pmu caller

  commit 335c25858218e76ef47f92ecb9d22e919d36140d
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Mon Sep 14 12:44:22 2015 +0300

      libceph: advertise support for keepalive2

      We are the client, but advertise keepalive2 anyway - for consistency,
      if nothing else.  In the future the server might want to know whether
      its clients support keepalive2.

      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Yan, Zheng <zyan@xxxxxxxxxx>

  commit 7f61f545657281a3a1b0faf68993165ebdecc51b
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Mon Sep 14 16:01:05 2015 +0300

      libceph: don't access invalid memory in keepalive2 path

      This

          struct ceph_timespec ceph_ts;
          ...
          con_out_kvec_add(con, sizeof(ceph_ts), &ceph_ts);

      wraps ceph_ts into a kvec and adds it to con->out_kvec array, yet
      ceph_ts becomes invalid on return from prepare_write_keepalive().  As
      a result, we send out bogus keepalive2 stamps.  Fix this by encoding
      into a ceph_timespec member, similar to how acks are read and written.

      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Yan, Zheng <zyan@xxxxxxxxxx>

  commit 74a093918b2296bed7136a7830821d45d3d5cb1a
  Merge: aa1471a 19ab6bc
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 09:39:39 2015 -0700

      Merge tag 'usb-serial-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial into usb-linus

      Johan writes:

      USB-serial fixes for v4.3-rc2

      Just some new ZTE device IDs.

      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>

  commit b0063dbfb031a7c728ed0d9533257e8329292cf1
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 17 12:54:30 2015 -0300

      tools build: Add test for presence of __get_cpuid() gcc builtin

      The auxtrace code needed by Intel PT uses the __get_cpuid() gcc builtin,
      that is not present in old systems, breaking the build.

      Add a test to check for that builtin and disable AUXTRACE in those
      systems.

        [acme@rhel5 linux]$  make NO_LIBPERL=1 -C tools/perf O=/tmp/build/perf 
install-bin
        make: Entering directory `/home/acme/git/linux/tools/perf'
          BUILD:   Doing 'make -j2' parallel build

        Auto-detecting system features:
        <SNIP>
        ...                          lzma: [ on  ]
        ...                     get_cpuid: [ OFF ]
        <SNIP>
        config/Makefile:630: Your gcc lacks the __get_cpuid() builtin, disables 
support for auxtrace/Intel PT, please install a newer gcc
          MKDIR    /tmp/build/perf/util/
        <SNIP>

      This fixes the build on old systems such as RHEL/CentOS 5.11.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: "Naveen N. Rao" <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Victor Kamensky <victor.kamensky@xxxxxxxxxx>
      Cc: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-d4puslul0jltoodzpx9r4sje@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f8ac8606fd3cd72183de8eec2b151ff05040c70f
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 17 12:20:28 2015 -0300

      tools build: Add test for presence of numa_num_possible_cpus() in libnuma

      The existing numa test checks only if numa.h and numa_available() are
      present, but that can be satisfied with an old libnuma that is not
      enough for the 'perf bench numa' entry, so add a test to check for that:

        [acme@rhel5 linux]$  make NO_AUXTRACE=1 NO_LIBPERL=1 -C tools/perf 
O=/tmp/build/perf install-bin
        make: Entering directory `/home/acme/git/linux/tools/perf'
          BUILD:   Doing 'make -j2' parallel build

        Auto-detecting system features:
        ...                        libelf: [ on  ]
        ...                       libnuma: [ on  ]
        ...        numa_num_possible_cpus: [ OFF ]
        ...                       libperl: [ on  ]

        <SNIP>
        config/Makefile:577: Old numa library found, disables 'perf bench numa 
mem' benchmark, please install numactl-devel/libnuma-devel/libnuma-dev >= 2.0.8
          INSTALL  binaries
        <SNIP>

      This fixes the build on old systems such as RHEL/CentOS 5.11.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: "Naveen N. Rao" <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Victor Kamensky <victor.kamensky@xxxxxxxxxx>
      Cc: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-zqriqkezppi2de2iyjin1tnc@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 179f36dde3cec0f9f05a757b68f6a58e4edbcc95
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 17 11:30:20 2015 -0300

      Revert "perf symbols: Fix mismatched declarations for elf_getphdrnum"

      This reverts commit f785f2357673d520a0b7b468973cdd197f336494.

      We have a test to check if elf_getphdrnum() is present, so, if it fails,
      we'll get:

        [acme@rhel5 linux]$ cat 
/tmp/build/perf/feature/test-libelf-getphdrnum.make.output
        cc1: warnings being treated as errors
        test-libelf-getphdrnum.c: In function â??mainâ??:
        test-libelf-getphdrnum.c:7: warning: implicit declaration of function 
â??elf_getphdrnumâ??
        [acme@rhel5 linux]$

      And this block will not be compiled:

        #ifndef HAVE_ELF_GETPHDRNUM_SUPPORT
        static int elf_getphdrnum(Elf *elf, size_t *dst)
        ...
        #endif

      So, if elf_getphdrnum() is being defined somewhere, there is a problem
      with the test that is not detecting that function, go fix it.

      Reported-by: Vinson Lee <vlee@xxxxxxxxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: "Naveen N. Rao" <naveen.n.rao@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Victor Kamensky <victor.kamensky@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-qn459fal6acvcvm50i8zxx9k@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 994518799930fc363d47cb7cf0d1abed1790bf16
  Author: Ming Lei <ming.lei@xxxxxxxxxxxxx>
  Date:   Fri Sep 18 00:06:28 2015 +0800

      block: fix bounce_end_io

      When bio bounce is involved, one new bio and its biovecs are
      cloned from the comming bio, which can be one fast-cloned bio
      from upper layer(such as dm).

      So it is obviously wrong to assume the start index of the coming(
      original) bio's io vector is zero, which can be any value between
      0 and (bi_max_vecs - 1), especially in case of bio split.

      This patch fixes Fedora's booting oops on i386, often with the
      following kernel log together:

      > [    9.026738] systemd[1]: Switching root.
      > [    9.036467] systemd-journald[149]: Received SIGTERM from PID 1
      > (systemd).
      > [    9.082262] BUG: Bad page state in process kworker/u5:1  pfn:372ac
      > [    9.083989] page:f3d32ae0 count:0 mapcount:0 mapping:f2252178
      > index:0x16a
      > [    9.085755] flags: 0x40020021(locked|lru|mappedtodisk)
      > [    9.087284] page dumped because: page still charged to cgroup
      > [    9.088772] bad because of flags:
      > [    9.089731] flags: 0x21(locked|lru)
      > [    9.090818] page->mem_cgroup:f2c3e400

      Reported-by: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Tested-by: Adam Williamson <awilliam@xxxxxxxxxx>
      Cc: Ming Lin <mlin@xxxxxxxxxx>
      Cc: Mike Snitzer <snitzer@xxxxxxxxxx>
      Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 52cc6eead9095e2faf2ec7afc013aa3af1f01ac5
  Author: Ming Lei <ming.lei@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 09:58:38 2015 -0600

      block: blk-merge: fast-clone bio when splitting rw bios

      biovecs has become immutable since v3.13, so it isn't necessary
      to allocate biovecs for the new cloned bios, then we can save
      one extra biovecs allocation/copy, and the allocation is often
      not fixed-length and a bit more expensive.

      For example, if the 'max_sectors_kb' of null blk's queue is set
      as 16(32 sectors) via sysfs just for making more splits, this patch
      can increase throught about ~70% in the sequential read test over
      null_blk(direct io, bs: 1M).

      Cc: Christoph Hellwig <hch@xxxxxxxxxxxxx>
      Cc: Kent Overstreet <kent.overstreet@xxxxxxxxx>
      Cc: Ming Lin <ming.l@xxxxxxxxxxxxxxx>
      Cc: Dongsu Park <dpark@xxxxxxxxxx>
      Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxxxxx>

      This fixes a performance regression introduced by commit 54efd50bfd,
      and allows us to take full advantage of the fact that we have immutable
      bio_vecs. Hand applied, as it rejected violently with commit
      5014c311baa2.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit ba8fe0f85e15d047686caf8a42463b592c63c98c
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:52:21 2015 -0600

      pmem: add proper fencing to pmem_rw_page()

      pmem_rw_page() needs to call wmb_pmem() on writes to make sure that the
      newly written data is durable.  This flow was added to pmem_rw_bytes()
      and pmem_make_request() with this commit:

      commit 61031952f4c8 ("arch, x86: pmem api for ensuring durability of
        persistent memory updates")

      ...the pmem_rw_page() path was missed.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 4ca8b57a0af145f4e791f21dbca6ad789da9ee8b
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Sep 16 21:25:38 2015 +0800

      libnvdimm: pfn_devs: Fix locking in namespace_store

      Always take device_lock() before nvdimm_bus_lock() to prevent deadlock.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 9786cff38a31c452e32fd2f9a479dd7d19d91712
  Merge: 1b3dfde 1975dbc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 08:45:23 2015 -0700

      Merge branch 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull locking fixes from Ingo Molnar:
       "Spinlock performance regression fix, plus documentation fixes"

      * 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        locking/static_keys: Fix up the static keys documentation
        locking/qspinlock/x86: Only emit the test-and-set fallback when 
building guest support
        locking/qspinlock/x86: Fix performance regression under unaccelerated 
VMs
        locking/static_keys: Fix a silly typo

  commit 1b3dfde386b7c72b8f5430dc40eee538eb40c948
  Merge: 7271484 31409c9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 08:44:27 2015 -0700

      Merge branch 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RCU fix from Ingo Molnar:
       "Fix a false positive warning"

      * 'core-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition

  commit 4be9c1fc3df9c3b03c9bde8aec5e44fc73996a3f
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Wed Sep 16 21:24:47 2015 +0800

      libnvdimm: btt_devs: Fix locking in namespace_store

      Always take device_lock() before nvdimm_bus_lock() to prevent deadlock.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit efe4d36a75d4dfd1a9c161b2bbf9b90beb4d9648
  Merge: 9bf9fde ef74891
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Sep 17 16:51:59 2015 +0200

      Merge tag 'kvm-arm-for-4.3-rc2-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into kvm-master

      Second set of KVM/ARM changes for 4.3-rc2

      - Workaround for a Cortex-A57 erratum
      - Bug fix for the debugging infrastructure
      - Fix for 32bit guests with more than 4GB of address space
        on a 32bit host
      - A number of fixes for the (unusual) case when we don't use
        the in-kernel GIC emulation
      - Removal of ThumbEE handling on arm64, since these have been
        dropped from the architecture before anyone actually ever
        built a CPU
      - Remove the KVM_ARM_MAX_VCPUS limitation which has become
        fairly pointless

  commit 52f5664a87474894e7da44f3b778dbe4e4c740b7
  Author: Ariel Nahum <arieln@xxxxxxxxxxxx>
  Date:   Thu Sep 3 19:49:55 2015 +0300

      libiscsi: Fix iscsi_check_transport_timeouts possible infinite loop

      Connection last_ping is not being updated when iscsi_send_nopout fails.
      Not updating the last_ping will cause firing a timer to a past time
      (last_ping + ping_tmo < current_time) which triggers an infinite loop of
      iscsi_check_transport_timeouts() and hogs the cpu.

      Fix this issue by checking the return value of iscsi_send_nopout.
      If it fails set the next_timeout to one second later.

      Signed-off-by: Ariel Nahum <arieln@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Reviewed-by: Mike Christie <michaelc@xxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 590f07874e8e3c83729b919312c65aea2533c8cf
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 07:38:36 2015 +0000

      x86/pci/dma: Fix gfp flags for coherent DMA memory allocation

      Commit 6894258eda2f reversed the order of gfp_flags adjustment in
      dma_alloc_attrs() for x86 [arch/x86/kernel/pci-dma.c] As a result,
      relevant flags set by dma_alloc_coherent_gfp_flags() are just
      discarded and cause coherent DMA memory allocation failure on some
      devices.

      Fixes: 6894258eda2f ("dma-mapping: consolidate 
dma_{alloc,free}_{attrs,coherent}")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Tested-by: Tony Luck <tony.luck@xxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Link: 
http://lkml.kernel.org/r/20150914073834.GA13077@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 6fa92e2bcf6390e64895b12761e851c452d87bd8
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 9 15:41:52 2015 +0800

      staging: ion: fix corruption of ion_import_dma_buf

      we found this issue but still exit in lastest kernel. Simply
      keep ion_handle_create under mutex_lock to avoid this race.

      WARNING: CPU: 2 PID: 2648 at drivers/staging/android/ion/ion.c:512 
ion_handle_add+0xb4/0xc0()
      ion_handle_add: buffer already found.
      Modules linked in: iwlmvm iwlwifi mac80211 cfg80211 compat
      CPU: 2 PID: 2648 Comm: TimedEventQueue Tainted: G        W    3.14.0 #7
       00000000 00000000 9a3efd2c 80faf273 9a3efd6c 9a3efd5c 80935dc9 811d7fd3
       9a3efd88 00000a58 812208a0 00000200 80e128d4 80e128d4 8d4ae00c a8cd8600
       a8cd8094 9a3efd74 80935e0e 00000009 9a3efd6c 811d7fd3 9a3efd88 9a3efd9c
      Call Trace:
        [<80faf273>] dump_stack+0x48/0x69
        [<80935dc9>] warn_slowpath_common+0x79/0x90
        [<80e128d4>] ? ion_handle_add+0xb4/0xc0
        [<80e128d4>] ? ion_handle_add+0xb4/0xc0
        [<80935e0e>] warn_slowpath_fmt+0x2e/0x30
        [<80e128d4>] ion_handle_add+0xb4/0xc0
        [<80e144cc>] ion_import_dma_buf+0x8c/0x110
        [<80c517c4>] reg_init+0x364/0x7d0
        [<80993363>] ? futex_wait+0x123/0x210
        [<80992e0e>] ? get_futex_key+0x16e/0x1e0
        [<8099308f>] ? futex_wake+0x5f/0x120
        [<80c51e19>] vpu_service_ioctl+0x1e9/0x500
        [<80994aec>] ? do_futex+0xec/0x8e0
        [<80971080>] ? prepare_to_wait_event+0xc0/0xc0
        [<80c51c30>] ? reg_init+0x7d0/0x7d0
        [<80a22562>] do_vfs_ioctl+0x2d2/0x4c0
        [<80b198ad>] ? inode_has_perm.isra.41+0x2d/0x40
        [<80b199cf>] ? file_has_perm+0x7f/0x90
        [<80b1a5f7>] ? selinux_file_ioctl+0x47/0xf0
        [<80a227a8>] SyS_ioctl+0x58/0x80
        [<80fb45e8>] syscall_call+0x7/0x7
        [<80fb0000>] ? mmc_do_calc_max_discard+0xab/0xe4

      Fixes: 83271f626 ("ion: hold reference to handle...")
      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Reviewed-by: Laura Abbott <labbott@xxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx> # 3.14+
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 989e503c929d82f34a3cae51e98cbc2745e7472c
  Author: Mark Hounschell <markh@xxxxxxxxxx>
  Date:   Tue Sep 15 08:56:10 2015 -0400

      staging: dgap: Remove myself from the MAINTAINERS file

      Removes myself from the MAINTAINERS file for the dgap driver.
      There appears to be no way to get the firmware files required
      by the dgap driver into the linux-firmware tree. The dgap
      driver is useless wihtout this firmware. This product is
      considered an obsolete product by Digi. They will not respond
      to an inquiry concerning it or its firmware.

      Signed-off-by: Mark Hounschell <markh@xxxxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 981473c74c0930190aa4651efebb9bb1f784416e
  Author: Christian Gromm <christian.gromm@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 17:33:35 2015 +0200

      staging: most: Add dependency to HAS_IOMEM

      This patch prevents the module hdm_dim2 from breaking the build in case
      HAS_IOMEM is not configured.

      Reported-by: <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Christian Gromm <christian.gromm@xxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit f5ab93fa5e79bacd83f0866ad5c3950eee279b66
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 16 22:16:38 2015 +0530

      staging: unisys: remove reference of visorutil

      commit 53490b545cb0 ("staging: unisys: move periodic_work.c into the 
visorbus directory")
      has removed the visorutil directory but missed removing the reference in
      the Makefile.

      Fixes: 53490b545cb0 ("staging: unisys: move periodic_work.c into the 
visorbus directory")
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 2110d70c5e58326a10e93cfefdc0b3686e2ada12
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Sat Aug 8 10:46:02 2015 +0200

      cpu/cacheinfo: Fix teardown path

      Philip Müller reported a hang when booting 32-bit 4.1 kernel on an AMD
      box. A fragment of the splat was enough to pinpoint the issue:

        task: f58e0000 ti: f58e8000 task.ti: f58e800
        EIP: 0060:[<c135a903>] EFLAGS: 00010206 CPU: 0
        EIP is at free_cache_attributes+0x83/0xd0
        EAX: 00000001 EBX: f589d46c ECX: 00000090 EDX: 360c2000
        ESI: 00000000 EDI: c1724a80 EBP: f58e9ec0 ESP: f58e9ea0
         DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
        CR0: 8005003b CR2: 000000ac CR3: 01731000 CR4: 000006d0

      cache_shared_cpu_map_setup() did check sibling CPUs cacheinfo descriptor
      while the respective teardown path cache_shared_cpu_map_remove() didn't.
      Fix that.

      >From tglx's version: to be on the safe side, move the cacheinfo
      descriptor check to free_cache_attributes(), thus cleaning up the
      hotplug path a little and making this even more robust.

      Reported-and-tested-by: Philip Müller <philm@xxxxxxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1
      Cc: Andre Przywara <andre.przywara@xxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: manjaro-dev@xxxxxxxxxxx
      Cc: Philip Müller <philm@xxxxxxxxxxx>
      Link: https://lkml.kernel.org/r/55B47BB8.6080202@xxxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit ef748917b529847277f07c98c55e1c0ce416449f
  Author: Ming Lei <ming.lei@xxxxxxxxxxxxx>
  Date:   Wed Sep 2 14:31:21 2015 +0800

      arm/arm64: KVM: Remove 'config KVM_ARM_MAX_VCPUS'

      This patch removes config option of KVM_ARM_MAX_VCPUS,
      and like other ARCHs, just choose the maximum allowed
      value from hardware, and follows the reasons:

      1) from distribution view, the option has to be
      defined as the max allowed value because it need to
      meet all kinds of virtulization applications and
      need to support most of SoCs;

      2) using a bigger value doesn't introduce extra memory
      consumption, and the help text in Kconfig isn't accurate
      because kvm_vpu structure isn't allocated until request
      of creating VCPU is sent from QEMU;

      3) the main effect is that the field of vcpus[] in 'struct kvm'
      becomes a bit bigger(sizeof(void *) per vcpu) and need more cache
      lines to hold the structure, but 'struct kvm' is one generic struct,
      and it has worked well on other ARCHs already in this way. Also,
      the world switch frequecy is often low, for example, it is ~2000
      when running kernel building load in VM from APM xgene KVM host,
      so the effect is very small, and the difference can't be observed
      in my test at all.

      Cc: Dann Frazier <dann.frazier@xxxxxxxxxxxxx>
      Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxxxxx>
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 34c3faa353db8f5d3ce9966cf854d5643c64c4db
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Sep 15 17:15:33 2015 +0100

      arm64: KVM: Remove all traces of the ThumbEE registers

      Although the ThumbEE registers and traps were present in earlier
      versions of the v8 architecture, it was retrospectively removed and so
      we can do the same.

      Whilst this breaks migrating a guest started on a previous version of
      the kernel, it is much better to kill these (non existent) registers
      as soon as possible.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      [maz: added commend about migration]
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 688bc577ac42ae3d07c889a1f0a72f0b23763d58
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 16 16:18:59 2015 +0100

      arm: KVM: Disable virtual timer even if the guest is not using it

      When running a guest with the architected timer disabled (with QEMU and
      the kernel_irqchip=off option, for example), it is important to make
      sure the timer gets turned off. Otherwise, the guest may try to
      enable it anyway, leading to a screaming HW interrupt.

      The fix is to unconditionally turn off the virtual timer on guest
      exit.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit c4cbba9fa078f55d9f6d081dbb4aec7cf969e7c7
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 16 16:18:59 2015 +0100

      arm64: KVM: Disable virtual timer even if the guest is not using it

      When running a guest with the architected timer disabled (with QEMU and
      the kernel_irqchip=off option, for example), it is important to make
      sure the timer gets turned off. Otherwise, the guest may try to
      enable it anyway, leading to a screaming HW interrupt.

      The fix is to unconditionally turn off the virtual timer on guest
      exit.

      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 96d4ee8aaa3cfbfadf137904f3696a9a84fab2d3
  Author: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
  Date:   Mon Sep 7 12:15:56 2015 -0400

      s390/s390x: allocate sys_membarrier system call number

      Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      CC: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      CC: linux-api@xxxxxxxxxxxxxxx
      CC: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      CC: linux-s390@xxxxxxxxxxxxxxx
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 3dc636b2dafbf05b86decc2a55989c3261ffd116
  Author: Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 18:09:20 2015 +0200

      s390/configs//zfcpdump_defconfig: Remove CONFIG_MEMSTICK

      This config option is completely irrelevant for zfcpdump and
      unfortunately causes a kernel panic on recent kernels in
      "mspro_block_init()/driver_register()".

      Signed-off-by: Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 022435713c0391020b55706c5b80fa1be44ba321
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Wed Sep 9 09:39:58 2015 +0200

      s390: wire up userfaultfd system call

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 61cc37906b45534fcc2bea03c17e135ec010b624
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Sep 10 11:18:20 2015 +0200

      s390/vtime: correct scaled cputime for SMT

      The scaled cputime is supposed to be derived from the normal per-thread
      cputime by dividing it with the average thread density in the last 
interval.

      The calculation of the scaling values for the average thread density is
      incorrect. The current, incorrect calculation:

          Ci = cycle count with i active threads
          T = unscaled cputime, sT = scaled cputime
          sT = T * (C1 + C2 + ... + Cn) / (1*C1 + 2*C2 + ... + n*Cn)

      The calculation happens to yield the correct numbers for the simple cases
      with only one Ci value not zero. But for cases with multiple Ci values not
      zero it fails. E.g. on a SMT-2 system with one thread active half the time
      and two threads active for the other half of the time it fails, the 
scaling
      factor should be 3/4 but the formula gives 2/3.

      The correct formula is

          sT = T * (C1/1 + C2/2 + ... + Cn/n) / (C1 + C2 + ... + Cn)

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 58f8e9da33eb0104f5bee3e8b3ca44e1583c78b9
  Author: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 10:52:42 2015 +0200

      s390/cpum_cf: Corrected return code for unauthorized counter sets

      Previously, the cpum_cf PMU returned -EPERM if a counter is requested and
      the counter set to which the counter belongs is not authorized.  According
      to the perf_event_open() system call manual, an error code of EPERM 
indicates
      an unsupported exclude setting or CAP_SYS_ADMIN is missing.

      Use ENOENT to indicate that particular counters are not available when the
      counter set which contains the counter is not authorized.  For generic 
events,
      this might trigger a fall back, for example, to a software event.

      Signed-off-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8d4bd0ed0439dfc780aab801a085961925ed6838
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Sep 8 15:25:39 2015 +0200

      s390/compat: correct uc_sigmask of the compat signal frame

      The uc_sigmask in the ucontext structure is an array of words to keep
      the 64 signal bits (or 1024 if you ask glibc but the kernel sigset_t
      only has 64 bits).

      For 64 bit the sigset_t contains a single 8 byte word, but for 31 bit
      there are two 4 byte words. The compat signal handler code uses a
      simple copy of the 64 bit sigset_t to the 31 bit compat_sigset_t.
      As s390 is a big-endian architecture this is incorrect, the two words
      in the 31 bit sigset_t array need to be swapped.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Reported-by: Stefan Liebler <stli@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 9380cf5a884e237fc0e2571d5adf0b43bb4412c8
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Wed Sep 9 13:15:00 2015 +0200

      s390: fix floating point register corruption

      The critical section cleanup code misses to add the offset of the
      thread_struct to the task address.
      Therefore, if the critical section code gets executed, it may corrupt
      the task struct or restore the contents of the floating point registers
      from the wrong memory location.
      Fixes d0164ee20d "s390/kernel: remove save_fpu_regs() parameter and use
      __LC_CURRENT instead".

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Reviewed-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 88d64253785936d75323c74e7126d180e26de560
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Sep 8 13:59:08 2015 +0200

      s390/hibernate: fix save and restore of vector registers

      The swsusp_arch_suspend()/swsusp_arch_resume() functions currently only
      save and restore the floating point registers. If the task that started
      the hibernation process is using vector registers they can get lost.
      To fix this just call save_fpu_regs in swsusp_arch_suspend(), the restore
      will happen automatically on return to user space.

      Reported-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ad5001cc7cdf9aaee5eb213fdee657e4a3c94776
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Thu Sep 17 13:37:00 2015 +0200

      netfilter: nf_log: wait for rcu grace after logger unregistration

      The nf_log_unregister() function needs to call synchronize_rcu() to make 
sure
      that the objects are not dereferenced anymore on module removal.

      Fixes: 5962815a6a56 ("netfilter: nf_log: use an array of loggers instead 
of list")
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit ce26d8137bc5c5b8371f91646bda969ed7f8b398
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Tue Sep 15 12:19:45 2015 +0000

      Bluetooth: hci_qca: Coding style clean up

      Cleanup patch to fix spaces required reported by checkpatch

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 10bd9731cc7257a6f53c0a208003414d872d627e
  Author: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
  Date:   Fri Sep 11 15:02:36 2015 +0000

      Bluetooth: bt3c_cs: clean up obsolete functions

      simple_strtoul is obsolete, use kstrtoul instead reported by checkpatch.

      Signed-off-by: Prasanna Karthik <mkarthi3@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 8f9d02f470f48416444ac3a1eacecdd0f743f1a7
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Thu Sep 10 17:07:00 2015 +0100

      Bluetooth: Remove SCO fragments on connection close

      SCO packet reassembler may have a fragment of SCO packet, from
      previous connection, cached and not removed when SCO connection
      is ended. Packets from new SCO connection are then going to be
      attached to that fragment, creating an invalid SCO packets.

      Controllers like Intel's WilkinsPeak are always fragmenting
      SCO packet into 3 parts (#1, #2, #3). Packet #1 contains
      SCO header and audio data, others just audio data. if there is
      a fragment cached from previous connection, i.e. #1, first
      SCO packet from new connection is going to be attached to it
      creating packet consisting of fragments #1-#1-#2. This will
      be forwarded to upper layers. After that, fragment #3 is going
      to be used as a starting point for another SCO packet.
      It does not contain a SCO header, but the code expects it,
      casts a SCO header structure on it, and reads whatever audio
      data happens to be there as SCO packet length and handle.
      From that point on, we are assembling random data into SCO
      packets. Usually it recovers quickly as initial audio data
      contains mostly zeros (muted stream), but setups of over
      4 seconds were observed.
      Issue manifests itself by printing on the console:
      Bluetooth: hci0 SCO packet for unknown connection handle 48
      Bluetooth: hci0 SCO packet for unknown connection handle 2560
      Bluetooth: hci0 SCO packet for unknown connection handle 12288
      It may also show random handles if audio data was non-zeroed.
      Hcidump shows SCO packets with random length and handles.

      Few messages with handle 0 at connection creation are OK
      for some controllers (like WilkinsPeak), as there are SCO packets
      with zeroed handle at the beginning (possible controller bug).
      Few of such messages at connection end, with a handle looking
      sane (around 256, 512, 768 ...) is also OK, as these are last
      SCO packets that were assembled and sent up, before connection
      was ended, but were not handled in time.

      This issue may still manifest itself on WilkinsPeak as it sometimes,
      at SCO connection creation, does not send third fragment of first
      SCO packet (#1-#2-#1-#2-#3...). This is a firmware bug and this
      patch does not address it.

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f755247379912f1b855f05cb44e3e2b11abdee11
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 9 21:04:15 2015 +0200

      Bluetooth: hci_intel: Enable IRQ wake capability

      We need to explicitly enable the IRQ wakeup mode to let the controller
      wake the system from sleep states (like suspend-to-ram).
      PM suspend/resume callbacks now call the generic intel device PM
      functions after enabling/disabling IRQ wake.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 30e945fb28a66bbbc00859540f79d08e76dec2e2
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 9 19:08:02 2015 +0200

      Bluetooth: hci_intel: Give priority to LPM packets

      Change the way to insert LPM packets into the txq.
      Use skb_queue_head instead of skb_queue_tail to always prioritise LPM
      packets over potential tx queue content.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 9def9afde77a298bfc6ad84a6c5a9e9523aa8bab
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Sat Sep 5 12:27:59 2015 +0200

      atusb: add handling for different chipnames

      This patch supports handling for printout different chipnames between
      atusb and rzusb. The rzusb contains an at86rf230 and atusb an at86rf231
      transceiver.

      Cc: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c5080d42db1d5d5c57274bb4235d0e50fd3a3a6d
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Sep 4 17:08:18 2015 +0200

      Bluetooth: Fix typo in smp_ah comment for hash function

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6cc4396c8829cb65e0cf182c8a13ce6b2ac66a88
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 15:35:44 2015 +0200

      Bluetooth: hci_bcm: Add wake-up capability

      Retrieve the Interruption used by BCM device, which can be declared
      as Interruption or GpioInt in the ACPI table.
      Retrieve IRQ polarity from the ACPI table to use it for host_wake_active
      parameter of Setup Sleep vendor specific command.
      Configure BCM device to wake-up the host.
      Enable IRQ wake while suspended.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e924d3d65aeef31733a84d16e3fe72531b0494b4
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Fri Sep 4 17:54:36 2015 +0200

      Bluetooth: btusb: Use btintel_load_ddc_config for device config

      btintel_load_ddc_config is now part of btintel.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1cfbabdd11b32b6312a239a80583bbc09e1c3461
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Fri Sep 4 17:54:35 2015 +0200

      Bluetooth: hci_intel: Add Device configuration

      Apply DDC parameters once controller is in operational mode.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 145f2368c5fd7962e37315ccc092670743019d08
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Fri Sep 4 17:54:34 2015 +0200

      Bluetooth: btintel: Add Device Configuration support

      btintel_load_ddc_config retrieves the ddc file and sends its content
      via DDC commands (opcode 0xfc8b).

      The ddc file should contain one or more DDC structures.
      A DDC structure is composed of the folowing fields:
      field: | DDC LEN |    DDC ID    |   DDC VALUE   |
      size:  | 1 byte  |    2 bytes   |  DDC LEN - 2  |

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a9cb0fe4895cae95b49934af6fdcc54aa04e723d
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Fri Sep 4 17:39:25 2015 +0200

      Bluetooth: hci_intel: Fix warnings due to unused lpm functions

      intel_lpm_suspend/resume are only used in case of CONFIG_PM.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0eee53cdd985772284a14b21088e7677aeca45f9
  Author: Vincent Stehlé <vincent.stehle@xxxxxxxxxxx>
  Date:   Thu Sep 3 23:08:45 2015 +0200

      Bluetooth: btintel: fix warning

      Fix compilation the following compilation warning, which happens when
      CONFIG_BT_INTEL is not set:

        drivers/bluetooth/btintel.h:98:13: warning: â??btintel_version_infoâ??
        defined but not used [-Wunused-function]
         static void btintel_version_info(struct hci_dev *hdev,
                                          struct intel_version *ver)
                     ^

      Signed-off-by: Vincent Stehlé <vincent.stehle@xxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit bfe08a875a8903c0abb1ef5d57722252d14ede2e
  Author: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 16:31:35 2015 +0200

      ieee802154: af_ieee802154: fix typo in comment.

      Signed-off-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Acked-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 29cd5ddc45d66ce41632a76bb4dc2ae37b88b9e6
  Author: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 16:31:34 2015 +0200

      ieee802154: docs: fix project name to linux-wpan as well as some typos

      Signed-off-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Acked-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5c3c4736370961a121994cffd87f4dddc95ea8f2
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Aug 27 21:49:20 2015 +0200

      at86rf230: detailed edge triggered irq warning

      This patch introduce a more detailed information why edge triggered
      irq's are currently not recommended. It could be that rising/falling
      edge detection can happen while the irq is disabled.

      Suggested-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 493bc90a96839ffde5e6216c62c025d2f9e6efc3
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Aug 27 21:49:19 2015 +0200

      at86rf230: add debugfs support

      This patch introduce debugfs support for collect trac status stats. To
      clear the stats ifdown the interface of at86rf230 and start the
      interface again.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ed4a26b0995baf10807ebb3f18fba3db2c6539fc
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Aug 27 21:49:18 2015 +0200

      at86rf230: interrupt tx with force trx_off

      To abort a TX_ARET_BUSY state it's recommended to switch into TRX_OFF
      state by doing STATE_TRX_FORCE_OFF. This patch will do always a TRX_OFF
      state change when the transceiver stucks in any state. From TRX_OFF we
      can switch to the states which are also possible by TX_ON state.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 346ce4bbddfd40aa62b899db8982c728ed3d42a5
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Aug 27 21:49:17 2015 +0200

      at86rf230: change trac status check behaviour

      When transmit is done, indicated by trx_end irq, we do first a force
      state change to TX_ON and then checking the trac status, if the trac
      status is unequal zero we do a state change to TRX_OFF.

      This patch changes to the following behaviour, we first check on trac
      status after trx_end occurs and then doing a normal change to TX_ON
      without do the state change to TRX_OFF when trac status is unequal zero.

      The reasons are that the datasheet doesn't described when the trac
      status register is cleared, we should doing to evaluate the trac status
      at first. The reason to remove the TRX_OFF change if the trac status is
      unequal to zero and it was force is the following paragraph inside The
      at86rf2xx datasheets:

      "Using FORCE_PLL_ON to interrupt an TX_ARET transaction, it is
       recommended to check register bits [7:5] of register address 0x32 for
       value 0. If this value is different, TRX_CMD sequence FORCE_TRX_OFF shall
       be used immediately followed by TRX_CMD sequence PLL_ON. This performs a
       state transition to PLL_ON."

      The meaning is here "to interrupt an TX_ARET transaction" in case of
      trx_end interrupt the "TX_ARET transaction" is already done and we don't
      interrupt the "TX_ARET transaction" by doing the change to TX_ON (PLL_ON)
      here. Additional I changed the force change to normal TX_ON which seems to
      work here.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a1d8d9a57c3389dc95698ad44284c13330235691
  Author: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 14:54:19 2015 +0200

      ieee802154: 6lowpan: use correct ESC value for dispatch

      The ESC dispatch value has some history and it originally was 0x7f in 
rfc4944
      (see section-5.1). With the release of rfc6282 this value got part of the
      LOWPAN_IPHC range and was no longer available for ESC. Instead 0x40 was 
used
      as replacement (see section-2 in rfc6282).

      We have been checking the dispatch byte in an order where IPHC would 
always be
      evaluated before ESC and thus we would never reach the ESC check as the 
IPHC
      range already covers this value.

      Signed-off-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Acked-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 776857a87ccf1ae3095d9e16fbc8a0f9d1daac7e
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 20:05:42 2015 +0200

      ieee802154: 6lowpan: fix drop return value

      This patch changes the return value of lowpan packet receive handler to
      the correct NET_RX_DROP instead RX_DROP.

      This issue was detected by sparse and reported from Marcel:
      net/ieee802154/6lowpan/rx.c:329:32:    expected int
      net/ieee802154/6lowpan/rx.c:329:32:    got restricted lowpan_rx_result ...

      Reported-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 187625e18498ff0f3738a059778a8578171f06c8
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:31 2015 +0200

      ieee802154: 6lowpan: remove tx full-size calc workaround

      This patch removes a workaround for datagram_size calculation while
      doing fragmentation on transmit.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 0c4349687fb6de660b24d3498d12e068f0320425
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:30 2015 +0200

      ieee802154: 6lowpan: remove packet type to host

      This patch remove the packet_type to host and leave the mac pkt_type.
      By running 'grep -r "pkt_type" net/ipv6', the IPv6 stack will evaluate
      this value for PACKET_BROADCAST. Instead of overwriting this value we
      will leave the mac value there which is broadcasts if the mac frame was
      a broadcast frame.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 54552d03023cfd485cedf8d7471d1554139d58aa
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:29 2015 +0200

      ieee802154: 6lowpan: check on valid 802.15.4 frame

      This patch adds frame control checks to check if the received frame is
      something which could contain a 6LoWPAN packet.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c6fdbba3eadd5af695c1290c59fe917ce8d9295f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:28 2015 +0200

      ieee802154: 6lowpan: add check for reserved dispatch

      This patch adds checks for reserved dispatch value. When we have a
      reserved dispatch value we should drop the skb immediately.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ad663600e1a8e2db1c4343bae73836f793ff4e08
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:27 2015 +0200

      ieee802154: 6lowpan: add handler for all dispatch values

      This patch adds dummy handlers for all known IEEE 802.15.4 dispatch
      values which prints a warning that we don't support these dispatches
      right now. Also we add a warning to the RX_CONTINUE case inside of
      lowpan_rx_handlers_result which should now never happend.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit faf7d36e5ecd16ab090c82d14bff31f7ab2f70e6
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:26 2015 +0200

      ieee802154: 6lowpan: add generic lowpan header check

      This patch introduce an earlier check if a 6LoWPAN frame can be valid.
      This contains at first for checking if the header contains a dispatch
      byte and isn't the nalp dispatch value, which means it isn't a 6LoWPAN
      packet. Also we add a check if we can derference the dispatch value by
      checking if skb->len is unequal zero.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 72a5e6bb5120d6464c9e7855c5a22555ede819dc
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:25 2015 +0200

      ieee820154: 6lowpan: dispatch evaluation rework

      This patch complete reworks the evaluation of 6lowpan dispatch value by
      introducing a receive handler mechanism for each dispatch value.

      A list of changes:

       - Doing uncompression on-the-fly when FRAG1 is received, this require
         some special handling for 802.15.4 lltype in generic 6lowpan branch
         for setting the payload length correct.
       - Fix dispatch mask for fragmentation.
       - Add IPv6 dispatch evaluation for FRAG1.
       - Add skb_unshare for dispatch which might manipulate the skb data
         buffer.

      Cc: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f801cf40243d8f81ac05aa7466d9d8b1e676ee7c
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:24 2015 +0200

      ieee802154: 6lowpan: earlier skb->dev switch

      We should change the skb->dev pointer earlier to the lowpan interface
      Sometimes we call iphc_decompress which also use some netdev printout
      functionality. This patch will change that the correct interface will be
      displayed in this case, which should be the lowpan interface.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 742c3afe53c5d16fa62632c34f8e2273766d3052
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:23 2015 +0200

      ieee802154: 6lowpan: trivial checks at first

      This patch moves some trivial checks at first before calling
      skb_share_check which could do some memcpy if the buffer is shared.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ad23d5b9da399c0ecbe58e16c6603c3fcdcafdbd
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:22 2015 +0200

      ieee802154: 6lowpan: cleanup pull of iphc bytes

      This patch cleanups the pull of the iphc bytes. We don't need to check
      if the skb->len contains two bytes, this will be checked by
      lowpan_fetch_skb_u8.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 989d433dca558fda85e592fc675af2a59af88858
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:21 2015 +0200

      ieee802154: 6lowpan: change if lowpan dev is running

      We don't need to check if the wpan interface is running because the
      lowpan_rcv is the packet layer receive handler for the wpan interface.

      Instead doing a check if wpan interface is running we should check if
      the lowpan interface is running before starting 6lowpan adaptation layer.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 348a882ea745039295e721ef00f1b46307fb1c88
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:20 2015 +0200

      ieee802154: 6lowpan: remove EXPORT_SYMBOL

      This function is used internally inside of ieee802154 6lowpan module
      only and not outside of any other module. We don't need to export this
      function then.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 56aeaddfbc874123c88e5b058b068ce8fca71dcd
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:19 2015 +0200

      ieee802154: 6lowpan: remove set to zero

      Internal mechanism by calling netdev_alloc which use kzalloc already
      sets these variables to zero. This patch cleanup the setup of net_device.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 2c88b5283f60d09d41b9fe03351c0d2e8eef904f
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:18 2015 +0200

      ieee802154: 6lowpan: remove check on null

      This patch removes one check on null which should be already done by
      checking before for ARPHRD_IEEE802154. All ARPHRD_IEEE802154 and
      ARPHRD_IEEE802154_MONITOR should have wdev->ieee802154_ptr, where
      ARPHRD_IEEE802154 is currently a node interface only.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 90997af7e9dc47cb12afd4170ee0d3541fb09400
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:17 2015 +0200

      ieee802154: 6lowpan: register packet layer while open

      This patch moves the open count handling while doing open of a lowpan
      interface. We need the packet handler register at first when one lowpan
      interface is up. There exists a small case when all lowpan interfaces
      are down and the 802154 packet layer is still registered. To reduce some
      overhead we will register the packet layer when the first lowpan
      interface comes up and unregister when the last interface will become 
down.

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f4606583fd8dcf15a07060dbd45a3e369144a934
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Wed Sep 2 14:21:16 2015 +0200

      ieee802154: 6lowpan: change dev vars to wdev and ldev

      Inside the IEEE 802.15.4 6LoWPAN subsystem we use two interfaces which
      are wpan and lowpan interfaces. Instead of using always the variable
      name "dev" for both we rename the "dev" variable to wdev which means the
      wpan net_device and ldev which means a lowpan net_device. This avoids
      confusing and always looking back to see which net_device is meant by
      the variable name "dev".

      Reviewed-by: Stefan Schmidt <stefan@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 517a5460a93d641e2beb362d4066f9861f108e2f
  Author: Kieran Bingham <kieranbingham@xxxxxxxxx>
  Date:   Wed Sep 2 13:51:10 2015 +0100

      Bluetooth: btmrvl: skb resource leak, and double free.

      if btmrvl_tx_pkt() is called, and the branch
        if (skb_headroom(skb) < BTM_HEADER_LEN)
      evaluates positive, a new skb is allocated via skb_realloc_headroom.

      The original skb is stored in a tmp variable, before being free'd.
      However on success, the new skb, is not free'd, nor is it
      returned to the caller which will then double-free the original skb.

      This issue exists from the original driver submission in
       commit: #132ff4e5fa8dfb71a7d99902f88043113947e972

      If this code path had been alive, it would have been noted from the
      double-free causing a panic.

      All skb's here should be allocated through bt_skb_alloc which
      adds 8 bytes as headroom, which is plenty against the 4 bytes
      pushed on by this driver.

      This code path is dead, and buggy at the same time, so the cleanest
      approach is to remove the affected branch.

      Reported by coverity (CID 113422)

      Signed-off-by: Kieran Bingham <kieranbingham@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6b3cc1db68ac83647d37f7d16f0261621eda24aa
  Author: Simon Fels <simon.fels@xxxxxxxxxxxxx>
  Date:   Wed Sep 2 12:10:12 2015 +0200

      Bluetooth: close HCI device when user channel socket gets closed

      With 9380f9eacfbbee701daa416edd6625efcd3e29e1 the order of unsetting
      the HCI_USER_CHANNEL flag of the HCI device was reverted to ensure
      the device is first closed before making it available again.

      Due to hci_dev_close checking for HCI_USER_CHANNEL being set on the
      device it was never really closed and was kept opened. We're now
      calling hci_dev_do_close directly to make sure the device is correctly
      closed and we keep the correct order to unset the flag on our device
      object.

      Signed-off-by: Simon Fels <simon.fels@xxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1b1975749f856946f716180ca94db52fb1ae3500
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 2 12:04:14 2015 +0200

      Bluetooth: hci_intel: Show error in case of invalid LPM packet size

      Don't hide this packet size error.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 74cdad37cd2410c5cec2160d031e04577948aff0
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 2 12:04:13 2015 +0200

      Bluetooth: hci_intel: Add runtime PM support

      Implement runtime PM suspend/resume callbacks.
      If LPM supported, controller is put into supsend after a delay of
      inactivity (1s). Inactivity is based on LPM idle notification and
      host TX traffic.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit aa6802df09fe324c2c19d75ab1a9a001cd7e4d4a
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 2 12:04:12 2015 +0200

      Bluetooth: hci_intel: Add PM support

      Add PM suspend/resume callbacks which call lpm_suspend/resume.
      Add LPM ack in threaded IRQ handler to notify the controller that
      resume is complete.
      Protect hci_uart against concurrent removing during suspend/resume.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 894365468ed4a569ece9de03abbf13f1af3042b8
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Wed Sep 2 12:04:11 2015 +0200

      Bluetooth: hci_intel: Implement LPM suspend/resume

      Add LPM PM suspend/resume/host_wake LPM functions.
      A LPM transaction is composed with a LPM request and ack/response.
      Host can send a LPM suspend/resume request to the controller which
      should respond with a LPM ack.
      If resume is requested by the controller (irq), host has to send a LPM
      ack once resumed.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 65ad07c9e5f3935a06517c007e90d2b2ef4829ac
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 12:13:36 2015 +0200

      Bluetooth: hci_bcm: Use bt_dev logging helpers

      Replace BT_ logging calls by the new bt_dev ones.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit bb3ea16a44c648cd5ebcf3cc88dd522f432063ab
  Author: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 12:13:35 2015 +0200

      Bluetooth: hci_bcm: Replace spinlock by mutex

      Replace spinlock by mutex to be able to use bcm_device_lock in
      sleepable context like devm_request_threaded_irq or upcomming PM support.

      Signed-off-by: Frederic Danis <frederic.danis@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f81b001a3e1c7ac42ba734de8d136a14ccb087c0
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Aug 30 23:05:32 2015 +0200

      Bluetooth: hci_qca: Fix a few tab vs spaces issues

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 67c8bde04d8587a57112993d1342c62b851b0756
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Mon Aug 31 18:34:31 2015 +0200

      Bluetooth: hci_intel: Replace spinlock with mutex

      Replace the device_intel list spinlock with a mutex.
      devm_request_threaded_irq is not atomic and upcomming PM support should
      be simpler.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f44e78a5fc5b103e4d7b04480365a128ca9184ee
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Mon Aug 31 18:34:30 2015 +0200

      Bluetooth: hci_intel: Use bt_dev logging helpers

      Replace BT_ logging calls by the new bt_dev ones.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b98469f4be5f606339233fe2da9586e2a7067ffe
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Sat Aug 29 13:38:19 2015 +0200

      Bluetooth: hci_intel: Introduce LPM support

      Enable controller Low-Power-Mode if we have a pdev to manage host
      wake-up. Once LPM is enabled, controller notifies its TX status via
      a vendor specific packet (tx_idle/tx_active).
      tx_active means that there is more data upcoming from controller.
      tx_idle means that controller can be put in suspended state.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 765ea3abd116fc6dc5f67d73fcd7010a7a88f3cc
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Sat Aug 29 13:38:18 2015 +0200

      Bluetooth: hci_intel: Retrieve host-wake IRQ

      An IRQ can be retrieved from the pdev resources. This irq will be used
      in case of LPM suspend mode to wake-up the host and resume the link.
      This resource can be declared as a GPIO-Interrupt which requires to be
      converted into IRQ.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6f558b70fb39fc8272fc513ecf191b3ad87d867b
  Author: Loic Poulain <loic.poulain@xxxxxxxxx>
  Date:   Sun Aug 30 18:16:55 2015 +0200

      Bluetooth: Add bt_dev logging macros

      Add specific bluetooth device logging macros since hci device name is
      repeatedly referred in bluetooth subsystem logs.

      Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6cafcd959599d91d0fa4615feae7f1e7ab407c4b
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Sun Aug 30 21:47:21 2015 +0300

      Bluetooth: btusb: Detect new kind of counterfeit CSR controllers

      Controllers claiming to be CSR with LMP subversion 0x0c5c don't
      actually seem to be authentic CSR controllers. They also don't have
      their USB bcdDevice value matching the LMP subversion like all other
      CSR controllers:

      HCI:

      > HCI Event: Command Complete (0x0e) plen 12
            Read Local Version Information (0x04|0x0001) ncmd 1
              Status: Success (0x00)
              HCI version: Bluetooth 2.0 (0x03) - Revision 3164 (0x0c5c)
              LMP version: Bluetooth 2.0 (0x03) - Subversion 3164 (0x0c5c)
              Manufacturer: Cambridge Silicon Radio (10)

      USB:

      T: Bus=04 Lev=01 Prnt=01 Port=01 Cnt=01 Dev#= 3 Spd=12 MxCh= 0
      D: Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=16 #Cfgs= 1
      P: Vendor=0a12 ProdID=0001 Rev= 1.34
      C:* #Ifs= 2 Cfg#= 1 Atr=80 MxPwr=100mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=81(I) Atr=03(Int.) MxPS= 16 Ivl=1ms
      E: Ad=82(I) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      E: Ad=02(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      I: If#= 1 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      I: If#= 1 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 17 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 17 Ivl=1ms

      These controllers also have the HCI_Read_Stored_Link_Key command
      broken so it's important the right quirk is set for them.

      Reported-and-tested-by: Rhobison Alves Pereira <rhobison@xxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e81be90bdafa48389028249c357a4efcd0fdce53
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Sun Aug 30 21:47:20 2015 +0300

      Bluetooth: Use BROKEN_STORED_LINK_KEY quirk for HCI_Read_Stored_Link_Key

      Some counterfeit CSR controllers also have broken behavior with the
      HCI_Read_Stored_Link_Key command:

      < HCI Command: Read Stored Link Key (0x03|0x000d) plen 7
              Address: 00:00:00:00:00:00 (OUI 00-00-00)
              Read all: 0x01
      > HCI Event: Command Complete (0x0e) plen 8
            Read Stored Link Key (0x03|0x000d) ncmd 1
              Status: Unsupported Feature or Parameter Value (0x11)
              Max num keys: 0
              Num keys: 0

      Extend the existing HCI_QUIRK_BROKEN_STORED_LINK_KEY to be also used
      for this HCI command.

      Reported-and-tested-by: Rhobison Alves Pereira <rhobison@xxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 5af82fa66a7ee8dfc29fadb487a02e2ef14ea965
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 11:34:37 2015 +0300

      ath10k: add ATH10K_FW_FEATURE_RAW_MODE_SUPPORT to 
ath10k_core_fw_feature_str[]

      This was missed in the original commit adding the flag and ath10k only 
printed "bit10":

      ath10k_pci 0000:02:00.0: qca988x hw2.0 (0x4100016c, 0x043202ff) fw 
10.2.4.70.6-2 api 3
      htt-ver 2.1 wmi-op 5 htt-op 2 cal otp max-sta 128 raw 0 hwcrypto 1 
features no-p2p,bit10

      Also add a build test to avoid this happening again.

      Fixes: ccec9038c721 ("ath10k: enable raw encap mode and software crypto 
engine")
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 9713e3de801eb9c2dd2221ba8c1dddd5bc7ba360
  Author: Michal Kazior <michal.kazior@xxxxxxxxx>
  Date:   Thu Sep 3 10:44:52 2015 +0200

      ath10k: handle IEEE80211_CHANCTX_CHANGE_WIDTH properly

      Vdevs associated with a given chanctx should be
      restarted if the bandwidth changes. Otherwise
      traffic may cease.

      This is known to fix STA CSA with bandwidths wider
      than 20MHz.

      Signed-off-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7be6d1b7625ab20e1dfde07a0c6dc77784efbb48
  Author: Michal Kazior <michal.kazior@xxxxxxxxx>
  Date:   Thu Sep 3 10:44:51 2015 +0200

      ath10k: split switch_vif_chanctx guts

      This is necessary to make vdev restarting logic
      reusable later.

      Signed-off-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 634349bae0b2a23f71cabbdb770d35fffc1aad8c
  Author: Michal Kazior <michal.kazior@xxxxxxxxx>
  Date:   Thu Sep 3 10:43:45 2015 +0200

      ath10k: move hw_scan worker queuing

      The remain_on_channel callback needs different
      timeout. Calling ieee80211_queue_work() with a
      shorter delay after calling it with a longer delay
      will not change the timer. This caused the
      offchannel timeout worker to not trigger in time
      and caused the device to stay on channel longer
      then expected. This could cause some problems and
      was be easily reproduced with `iw offchannel`
      command.

      Signed-off-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit df057cc7b4fa59e9b55f07ffdb6c62bf02e99a00
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Mar 17 12:15:02 2015 +0000

      arm64: errata: add module build workaround for erratum #843419

      Cortex-A53 processors <= r0p4 are affected by erratum #843419 which can
      lead to a memory access using an incorrect address in certain sequences
      headed by an ADRP instruction.

      There is a linker fix to generate veneers for ADRP instructions, but
      this doesn't work for kernel modules which are built as unlinked ELF
      objects.

      This patch adds a new config option for the erratum which, when enabled,
      builds kernel modules with the mcmodel=large flag. This uses absolute
      addressing for all kernel symbols, thereby removing the use of ADRP as
      a PC-relative form of addressing. The ADRP relocs are removed from the
      module loader so that we fail to load any potentially affected modules.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit bdec97a855ef1e239f130f7a11584721c9a1bf04
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Sep 15 12:07:06 2015 +0100

      arm64: compat: fix vfp save/restore across signal handlers in big-endian

      When saving/restoring the VFP registers from a compat (AArch32)
      signal frame, we rely on the compat registers forming a prefix of the
      native register file and therefore make use of copy_{to,from}_user to
      transfer between the native fpsimd_state and the compat_vfp_sigframe.

      Unfortunately, this doesn't work so well in a big-endian environment.
      Our fpsimd save/restore code operates directly on 128-bit quantities
      (Q registers) whereas the compat_vfp_sigframe represents the registers
      as an array of 64-bit (D) registers. The architecture packs the compat D
      registers into the Q registers, with the least significant bytes holding
      the lower register. Consequently, we need to swap the 64-bit halves when
      converting between these two representations on a big-endian machine.

      This patch replaces the __copy_{to,from}_user invocations in our
      compat VFP signal handling code with explicit __put_user loops that
      operate on 64-bit values and swap them accordingly.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit e56d82a116176f7af9d642b560abbbd3a2b68013
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Fri Sep 11 15:31:24 2015 +0100

      arm64: cpu hotplug: ensure we mask out CPU_TASKS_FROZEN in notifiers

      We have a couple of CPU hotplug notifiers for resetting the CPU debug
      state to a sane value when a CPU comes online.

      This patch ensures that we mask out CPU_TASKS_FROZEN so that we don't
      miss any online events occuring due to suspend/resume.

      Acked-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit b6c7bafa7d4b1398cce93e4af0a48603919fa933
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 12:47:36 2015 -0400

      ath10k: implement mesh support

      Add support for mesh to ath10k.  We simply use an AP virtual interface
      in the firmware in order to enable beaconing without TSF adoption, and
      use the raw (802.11) transmit mode.

      Due to firmware limitations, the firmware must operate in raw
      (non-native 802.11) mode.  As this is configured at firmware init time,
      a new "rawmode" modparam is added, and mesh interfaces are available
      only if rawmode=true.  The firmware must advertise support for rawmode;
      tested successfully with firmware 10.2.4.70.6-2.

      When the module is loaded with (newly implemented) modparam rawmode=1, it
      will enable operating an open mesh STA via something like the following:

          ip link set wlan0 down
          iw dev wlan0 set type mp
          ip link set wlan0 up
          iw dev wlan0 set freq 5745 80 5775
          iw dev wlan0 mesh join mesh-vht

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit bc76c28719d4333248a516fd4d469ab741b44b63
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 12:47:35 2015 -0400

      ath10k: check for encryption before adding MIC_LEN

      In the case of raw mode without nohwcrypt parameter, we
      should still make sure the frame is protected before
      adding MIC_LEN to avoid skb_under_panic errors.

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0d031c8995bcc065f9c5778069f2131f7d92d4d5
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 12:47:34 2015 -0400

      ath10k: enable monitor when OTHER_BSS requested

      By default, ath10k restricts received frames to those matching BSSID.
      When other BSS frames are requested (e.g. in mesh mode), add an internal
      monitor device so those frames are not filtered.

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a650fdd9427f1f5236f83d2d8137bea9b452fa53
  Author: Guo Zeng <Guo.Zeng@xxxxxxx>
  Date:   Thu Sep 17 05:23:21 2015 +0000

      regmap: irq: add ack_invert flag for chips using cleared bits as ack

      An user will be CSR SiRFSoC ARM chips.

      Signed-off-by: Guo Zeng <Guo.Zeng@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 7b7d1968e4c8d8392e8e63906d45d0bcad079037
  Author: Guo Zeng <Guo.Zeng@xxxxxxx>
  Date:   Thu Sep 17 05:23:20 2015 +0000

      regmap: irq: add support for chips who have separate unmask registers

      Some chips have separate unmask registers from mask registers for
      some consideration of concurrency SMP write performance. And this
      patch adds a flag for it.

      An user will be CSR SiRFSoC ARM chips.

      Signed-off-by: Guo Zeng <Guo.Zeng@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit d8949aad3eab5d396f4fefcd581773bf07b9a79e
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Fri Sep 4 12:22:46 2015 +0300

      Bluetooth: Delay check for conn->smp in smp_conn_security()

      There are several actions that smp_conn_security() might make that do
      not require a valid SMP context (conn->smp pointer). One of these
      actions is to encrypt the link with an existing LTK. If the SMP
      context wasn't initialized properly we should still allow the
      independent actions to be done, i.e. the check for the context should
      only be done at the last possible moment.

      Reported-by: Chuck Ebbert <cebbert.lkml@xxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.0+

  commit b07bb761cf6a333b2108cdbe4ffee66407189bb1
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Wed Sep 16 08:38:08 2015 -0700

      drm/vmwgfx: Only build on X86

      ioremap_cache() is currently not available on some architectures.

      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>

  commit 2338f73d407d5abe2036d92716ba25ef5279c3d2
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Mon Sep 7 14:25:01 2015 +0200

      leds:lp55xx: Correct Kconfig dependency for f/w user helper

      The commit [b67893206fc0: leds:lp55xx: fix firmware loading error]
      tries to address the firmware file handling with user helper, but it
      sets a wrong Kconfig CONFIG_FW_LOADER_USER_HELPER_FALLBACK.  Since the
      wrong option was enabled, the system got a regression -- it suffers
      from the unexpected long delays for non-present firmware files.

      This patch corrects the Kconfig dependency to the right one,
      CONFIG_FW_LOADER_USER_HELPER.  This doesn't change the fallback
      behavior but only enables UMH when needed.

      Bugzilla: https://bugzilla.opensuse.org/show_bug.cgi?id=944661
      Fixes: b67893206fc0 ('leds:lp55xx: fix firmware loading error')
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2+
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 35bfe456be3ae1e11dd63e83096c95d0c6429c51
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Mon Sep 7 17:06:05 2015 +0200

      leds: leds-ipaq-micro: Add LEDS_CLASS dependency

      Fix missing Kconfig LEDS_CLASS dependency.

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 305c324f43a2601cbeb894c17b68c8a8f3c13387
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Fri Sep 4 12:27:09 2015 +0200

      leds: aat1290: add 'static' modifier to init_mm_current_scale

      Function init_mm_current_scale is used only locally. Make it static then.

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 98f9cc7ffcf2cb5b695208a4cd4927bb41c550f3
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:36:59 2015 +0200

      leds: leds-ns2: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit e3df661ff3243ce4d1719c212ee88521e0e7811b
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:36:41 2015 +0200

      leds: max77693: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 3682c7bdf5065b99638c56adc1be1507ed5c0f0e
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:36:15 2015 +0200

      leds: ktd2692: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 01736f07cad613937db13f7483b04e8f2af81883
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:35:55 2015 +0200

      leds: bcm6358: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 6528ca19c1c8d4756b534a1ce9df4c3849f9dd04
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:35:38 2015 +0200

      leds: bcm6328: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 93a51aa406f61985d12b60f9860f949b4bf7e43d
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 23:35:07 2015 +0200

      leds: aat1290: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit aa1471a301f4c0a5988ebcafc8954990335dcf2c
  Merge: 6ff33f3 762982d
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 21:33:13 2015 -0700

      Merge tag 'fixes-for-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-linus

      Felipe writes:

      usb: fixes for v4.3-rc2

      First series of fixes for v4.3-rc cycle. The major points are
      a fix to a regression which would let gadget driver disable
      an endpoint that's already disabled and a fix to MUSB to make
      sure IRQs are masked when we're going to suspend and unmasked
      on resume.

      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 4e478098ac0ac1b6ef9a70fcdc2ec8b93f1b59a1
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Mon Sep 14 23:23:05 2015 -0700

      ipvs: add sysctl to ignore tunneled packets

      This is a way to avoid nasty routing loops when multiple ipvs instances 
can
      forward to eachother.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit e1ffceb078c6bc8a674077b29aee0926bbb54131
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Wed Aug 19 15:19:47 2015 +0200

      ARM: imx53: qsrb: fix PMIC interrupt level

      The MC34708 PMIC interrupt level is active high, but was set to
      active low in the devicetree, probably as a result of a copy and
      paste error from the QSB board.

      This caused IRQ storms and led to the kernel disabling the PMIC
      interrupt.

      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Signed-off-by: Shawn Guo <shawnguo@xxxxxxxxxx>

  commit 34adba711750b1a0eee100dda1d7fb6cfc55608f
  Author: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
  Date:   Wed Aug 19 15:19:46 2015 +0200

      ARM: imx53: include IRQ dt-bindings header

      Allows to use the more meaningful IRQ flag defines instead of
      the raw values.

      Signed-off-by: Lucas Stach <l.stach@xxxxxxxxxxxxxx>
      Signed-off-by: Shawn Guo <shawnguo@xxxxxxxxxx>

  commit 400c47d81ca383fc87d5a3937b234e23e26909fb
  Author: LEROY Christophe <christophe.leroy@xxxxxx>
  Date:   Wed Sep 16 12:04:53 2015 +0200

      powerpc32: memset: only use dcbz once cache is enabled

      memset() uses instruction dcbz to speed up clearing by not wasting time
      loading cache line with data that will be overwritten.
      Some platform like mpc52xx do no have cache active at startup and
      can therefore not use memset(). Allthough no part of the code
      explicitly uses memset(), GCC may make calls to it.

      This patch modifies memset() such that at startup, memset()
      unconditionally skip the optimised bloc that uses dcbz instruction.

      Once the initial MMU is set up, in machine_init() we patch memset()
      by replacing this inconditional jump by a NOP

      Tested-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Christophe Leroy <christophe.leroy@xxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 1cd03890ea64795e53f17a94928cca22495acb2a
  Author: LEROY Christophe <christophe.leroy@xxxxxx>
  Date:   Wed Sep 16 12:04:51 2015 +0200

      powerpc32: memcpy: only use dcbz once cache is enabled

      memcpy() uses instruction dcbz to speed up copy by not wasting time
      loading cache line with data that will be overwritten.
      Some platform like mpc52xx do no have cache active at startup and
      can therefore not use memcpy(). Allthough no part of the code
      explicitly uses memcpy(), GCC makes calls to it.

      This patch modifies memcpy() such that at startup, memcpy()
      unconditionally jumps to generic_memcpy() which doesn't use
      the dcbz instruction.

      Once the initial MMU is set up, in machine_init() we patch memcpy()
      by replacing this inconditional jump by a NOP

      Reported-by: Michal Sojka <sojkam1@xxxxxxxxxxx>
      Tested-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Christophe Leroy <christophe.leroy@xxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 84ad1bab0eebd2e2b2dd3c3db7b88cade22a6de1
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Mon Jul 27 16:10:17 2015 +0300

      ARM: dts: am57xx-beagle-x15: use palmas-usb for USB2

      The VBUS line of USB2 is connected to VBUS detect logic on
      the PMIC. Use the palmas-usb driver to report VBUS events
      to the USB driver.

      As the palmas-usb driver supports GPIO based ID reporting
      provide the GPIO for ID pin as well.

      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit f4746176f95a0d06f07ea83191375d374611e170
  Author: Grazvydas Ignotas <notasas@xxxxxxxxx>
  Date:   Wed Sep 16 01:36:20 2015 +0300

      ARM: omap2plus_defconfig: enable GPIO_PCA953X

      This enables tca6424a GPIO expander driver that in turn enables
      TPD12S015 HDMI ESD protection and level shifter on OMAP5 uevm.
      In other words, it makes HDMI work on OMAP5 uevm.

      Signed-off-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 1dbdad75074d16c3e3005180f81a01cdc04a7872
  Author: Grazvydas Ignotas <notasas@xxxxxxxxx>
  Date:   Wed Sep 16 01:34:31 2015 +0300

      ARM: dts: omap5-uevm.dts: fix i2c5 pinctrl offsets

      The i2c5 pinctrl offsets are wrong. If the bootloader doesn't set the
      pins up, communication with tca6424a doesn't work (controller timeouts)
      and it is not possible to enable HDMI.

      Fixes: 9be495c42609 ("ARM: dts: omap5-evm: Add I2c pinctrl data")
      Signed-off-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 08224a7d410699abce42674ee15a7cf37d54f340
  Author: Dave Gerlach <d-gerlach@xxxxxx>
  Date:   Tue Sep 15 14:47:34 2015 -0500

      ARM: OMAP2+: AM43XX: Enable autoidle for clks in am43xx_init_late

      Add omap2_clk_enable_autoidle_all to am43xx_init_late otherwise the call
      to omap2_clk_disable_autoidle_all in am43xx_init_early may cause some
      clocks to always stay active and prevent low power mode transitions.

      Signed-off-by: Dave Gerlach <d-gerlach@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 5005296e7408c055a02fc8be9f62218cb4b52b13
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Thu Sep 3 14:23:45 2015 -0500

      ARM: dts: am57xx-beagle-x15: Update Phy supplies

      Originally, all the SoC PHY rails were supplied by LDO3. However, as a
      result of characterization, it was determined that this posed a risk in
      extreme load  conditions. Hence the PHY rails are split between two
      different LDOs. Update the related node as a result

      LDO3/VDDA_1V8_PHYA supplies vdda_usb1, vdda_usb2, vdda_sata, vdda_usb3
      LDO4/VDDA_1V8_PHYB supplies vdda_pcie1, vdda_pcie0, vdda_hdmi, vdda_pcie

      NOTE: We break compatibility with pre-production boards with this change
      since, the PMIC LDO4 is disabled at OTP level.

      The new configuration is the plan of record and all pre-production
      boards are supposed to be replaced with the latest boards matching the
      mentioned configuration.

      Some very few 10 something boards have been created and
      stopped production till the latest modifications were done (PMIC USB
      interrupt, LDO4 etc) - and all of those boards are now getting
      scrapped.. If there are any (as per tracking information, there should
      not be any), TI should be contacted to have them replaced.

      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      [tony@xxxxxxxxxxx: updated commit about these being TI internal protos]
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 7ae85dc7687c7e7119053d83d02c560ea217b772
  Author: Doug Anderson <armlinux@xxxxxxxxxxxxxx>
  Date:   Wed Aug 26 18:26:49 2015 +0100

      ARM: 8425/1: kgdb: Don't try to stop the machine when setting breakpoints

      In (23a4e40 arm: kgdb: Handle read-only text / modules) we moved to
      using patch_text() to set breakpoints so that we could handle the case
      when we had CONFIG_DEBUG_RODATA.  That patch used patch_text().
      Unfortunately, patch_text() assumes that we're not in atomic context
      when it runs since it needs to grab a mutex and also wait for other
      CPUs to stop (which it does with a completion).

      This would result in a stack crawl if you had
      CONFIG_DEBUG_ATOMIC_SLEEP and tried to set a breakpoint in kgdb.  The
      crawl looked something like:

       BUG: scheduling while atomic: swapper/0/0/0x00010007
       CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.2.0-rc7-00133-geb63b34 #1073
       Hardware name: Rockchip (Device Tree)
        (unwind_backtrace) from [<c00133d4>] (show_stack+0x20/0x24)
        (show_stack) from [<c05400e8>] (dump_stack+0x84/0xb8)
        (dump_stack) from [<c004913c>] (__schedule_bug+0x54/0x6c)
        (__schedule_bug) from [<c054065c>] (__schedule+0x80/0x668)
        (__schedule) from [<c0540cfc>] (schedule+0xb8/0xd4)
        (schedule) from [<c0543a3c>] (schedule_timeout+0x2c/0x234)
        (schedule_timeout) from [<c05417c0>] (wait_for_common+0xf4/0x188)
        (wait_for_common) from [<c0541874>] (wait_for_completion+0x20/0x24)
        (wait_for_completion) from [<c00a0104>] (__stop_cpus+0x58/0x70)
        (__stop_cpus) from [<c00a0580>] (stop_cpus+0x3c/0x54)
        (stop_cpus) from [<c00a06c4>] (__stop_machine+0xcc/0xe8)
        (__stop_machine) from [<c00a0714>] (stop_machine+0x34/0x44)
        (stop_machine) from [<c00173e8>] (patch_text+0x28/0x34)
        (patch_text) from [<c001733c>] (kgdb_arch_set_breakpoint+0x40/0x4c)
        (kgdb_arch_set_breakpoint) from [<c00a0d68>] 
(kgdb_validate_break_address+0x2c/0x60)
        (kgdb_validate_break_address) from [<c00a0e90>] 
(dbg_set_sw_break+0x1c/0xdc)
        (dbg_set_sw_break) from [<c00a2e88>] (gdb_serial_stub+0x9c4/0xba4)
        (gdb_serial_stub) from [<c00a11cc>] (kgdb_cpu_enter+0x1f8/0x60c)
        (kgdb_cpu_enter) from [<c00a18cc>] (kgdb_handle_exception+0x19c/0x1d0)
        (kgdb_handle_exception) from [<c0016f7c>] 
(kgdb_compiled_brk_fn+0x30/0x3c)
        (kgdb_compiled_brk_fn) from [<c00091a4>] (do_undefinstr+0x1a4/0x20c)
        (do_undefinstr) from [<c001400c>] (__und_svc_finish+0x0/0x34)

      It turns out that when we're in kgdb all the CPUs are stopped anyway
      so there's no reason we should be calling patch_text().  We can
      instead directly call __patch_text() which assumes that CPUs have
      already been stopped.

      Fixes: 23a4e4050ba9 ("arm: kgdb: Handle read-only text / modules")
      Reported-by: Aapo Vienamo <avienamo@xxxxxxxxxx>
      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Reviewed-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 90cde5584a34e210850728bebee4c6fb1a7124ba
  Author: Andre Przywara <andre.przywara@xxxxxxx>
  Date:   Mon Sep 14 17:49:02 2015 +0100

      ARM: 8437/1: dma-mapping: fix build warning with new DMA_ERROR_CODE 
definition

      Commit 96231b2686b5: ("ARM: 8419/1: dma-mapping: harmonize definition
      of DMA_ERROR_CODE") changed the definition of DMA_ERROR_CODE to use
      dma_addr_t, which makes the compiler barf on assigning this to an
      "int" variable on ARM with LPAE enabled:
      *************
      In file included from /src/linux/include/linux/dma-mapping.h:86:0,
                       from /src/linux/arch/arm/mm/dma-mapping.c:21:
      /src/linux/arch/arm/mm/dma-mapping.c: In function 
'__iommu_create_mapping':
      /src/linux/arch/arm/include/asm/dma-mapping.h:16:24: warning:
      overflow in implicit constant conversion [-Woverflow]
       #define DMA_ERROR_CODE (~(dma_addr_t)0x0)
                              ^
      /src/linux/arch/arm/mm/dma-mapping.c:1252:15: note: in expansion of
      macro DMA_ERROR_CODE'
        int i, ret = DMA_ERROR_CODE;
                     ^
      *************

      Remove the actually unneeded initialization of "ret" in
      __iommu_create_mapping() and move the variable declaration inside the
      for-loop to make the scope of this variable more clear.

      Signed-off-by: Andre Przywara <andre.przywara@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 12fc7306e6ffae4e86680892f2286063d7d6eae7
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:08:49 2015 +0100

      ARM: get rid of needless #if in signal handling code

      Remove the #if statement which caused trouble for kernels that support
      both ARMv6 and ARMv7.  Older architectures do not implement these bits,
      so it should be safe to always clear them.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 1605b60ad064c7019db8ade07f0b7bdc8c197b93
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Thu Sep 17 07:46:28 2015 +0900

      ARM: dts: add suspend opp to exynos4412

      Mark 800MHz OPP as a suspend opp for Exynos4412 based
      boards so effectively cpufreq-dt driver behavior w.r.t.
      suspend frequency matches what the old exynos-cpufreq
      driver has been doing.

      This patch fixes suspend/resume support on Exynos4412 based
      Trats2 board and reboot hang on Exynos4412 based Odroid U3
      board.

      Cc: Thomas Abraham <thomas.ab@xxxxxxxxxxx>
      Cc: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: Tobias Jakobi <tjakobi@xxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Acked-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit a68371632b86d682992185ecf97316700a5a0f14
  Author: Krzysztof Kozlowski <k.kozlowski.k@xxxxxxxxx>
  Date:   Wed Sep 16 08:37:02 2015 +0900

      ARM: dts: Fix LEDs on exynos5422-odroidxu3

      The LEDs on Odroid XU3 family boards could not properly probe
      because PWM outputs were reduced only to PWM for fan. Fix it
      for Odroid XU3 and XU3-Lite boards by switching to usage of
      all 4 outputs (although the PWM for MIPI probably is redundant
      because board does not have MIPI connector available).

      This fixes warnings on dmesg:
      [    4.838712] samsung-pwm 12dd0000.pwm: tried to request PWM channel 1 
without output
      [    4.838725] leds_pwm pwmleds: unable to request PWM for green:mmc0: -22
      [    4.838767] leds_pwm: probe of pwmleds failed with error -22

      Fixes: b685d540cc26 ("ARM: dts: Add pwm-fan node for 
exynos5422-odroidxu3")
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski.k@xxxxxxxxx>
      Signed-off-by: Kukjin Kim <kgene@xxxxxxxxxx>

  commit 9054a31d603ea82c6ed4914170a8708812a16324
  Author: Mans Rullgard <mans@xxxxxxxxx>
  Date:   Sun Feb 15 12:33:49 2015 +0000

      clk: check for invalid parent index of orphans in __clk_init()

      If a mux clock is initialised (by hardware or firmware) with an
      invalid parent, its ->get_parent() can return an out of range
      index.  For example, the generic mux clock attempts to return
      -EINVAL, which due to the u8 return type ends up a rather large
      number.  Using this index with the parent_names[] array results
      in an invalid pointer and (usually) a crash in the following
      strcmp().

      This patch adds a check for the parent index being in range,
      ignoring clocks reporting invalid values.

      Signed-off-by: Mans Rullgard <mans@xxxxxxxxx>
      Tested-by: Rhyland Klein <rklein@xxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit e1595d89ae8180e0d3815cc75336ac3484de0aa0
  Author: Thierry Reding <treding@xxxxxxxxxx>
  Date:   Thu Sep 10 15:55:21 2015 +0200

      clk: tegra: dfll: Properly protect OPP list

      The OPP list needs to be protected against concurrent accesses. Using
      simple RCU read locks does the trick and gets rid of the following
      lockdep warning:

        ===============================
        [ INFO: suspicious RCU usage. ]
        4.2.0-next-20150908 #1 Not tainted
        -------------------------------
        drivers/base/power/opp.c:460 Missing rcu_read_lock() or 
dev_opp_list_lock protection!

        other info that might help us debug this:

        rcu_scheduler_active = 1, debug_locks = 0
        4 locks held by kworker/u8:0/6:
         #0:  ("%s""deferwq"){++++.+}, at: [<c0040d8c>] 
process_one_work+0x118/0x4bc
         #1:  (deferred_probe_work){+.+.+.}, at: [<c0040d8c>] 
process_one_work+0x118/0x4bc
         #2:  (&dev->mutex){......}, at: [<c03b8194>] __device_attach+0x20/0x118
         #3:  (prepare_lock){+.+...}, at: [<c054bc08>] 
clk_prepare_lock+0x10/0xf8

        stack backtrace:
        CPU: 2 PID: 6 Comm: kworker/u8:0 Not tainted 4.2.0-next-20150908 #1
        Hardware name: NVIDIA Tegra SoC (Flattened Device Tree)
        Workqueue: deferwq deferred_probe_work_func
        [<c001802c>] (unwind_backtrace) from [<c00135a4>] (show_stack+0x10/0x14)
        [<c00135a4>] (show_stack) from [<c02a8418>] (dump_stack+0x94/0xd4)
        [<c02a8418>] (dump_stack) from [<c03c6f6c>] 
(dev_pm_opp_find_freq_ceil+0x108/0x114)
        [<c03c6f6c>] (dev_pm_opp_find_freq_ceil) from [<c0551a3c>] 
(dfll_calculate_rate_request+0xb8/0x170)
        [<c0551a3c>] (dfll_calculate_rate_request) from [<c0551b10>] 
(dfll_clk_round_rate+0x1c/0x2c)
        [<c0551b10>] (dfll_clk_round_rate) from [<c054de2c>] 
(clk_calc_new_rates+0x1b8/0x228)
        [<c054de2c>] (clk_calc_new_rates) from [<c054e44c>] 
(clk_core_set_rate_nolock+0x44/0xac)
        [<c054e44c>] (clk_core_set_rate_nolock) from [<c054e4d8>] 
(clk_set_rate+0x24/0x34)
        [<c054e4d8>] (clk_set_rate) from [<c0512460>] 
(tegra124_cpufreq_probe+0x120/0x230)
        [<c0512460>] (tegra124_cpufreq_probe) from [<c03b9cbc>] 
(platform_drv_probe+0x44/0xac)
        [<c03b9cbc>] (platform_drv_probe) from [<c03b84c8>] 
(driver_probe_device+0x218/0x304)
        [<c03b84c8>] (driver_probe_device) from [<c03b69b0>] 
(bus_for_each_drv+0x60/0x94)
        [<c03b69b0>] (bus_for_each_drv) from [<c03b8228>] 
(__device_attach+0xb4/0x118)
        ata1: SATA link down (SStatus 0 SControl 300)
        [<c03b8228>] (__device_attach) from [<c03b77c8>] 
(bus_probe_device+0x88/0x90)
        [<c03b77c8>] (bus_probe_device) from [<c03b7be8>] 
(deferred_probe_work_func+0x58/0x8c)
        [<c03b7be8>] (deferred_probe_work_func) from [<c0040dfc>] 
(process_one_work+0x188/0x4bc)
        [<c0040dfc>] (process_one_work) from [<c004117c>] 
(worker_thread+0x4c/0x4f4)
        [<c004117c>] (worker_thread) from [<c0047230>] (kthread+0xe4/0xf8)
        [<c0047230>] (kthread) from [<c000f7d0>] (ret_from_fork+0x14/0x24)

      Signed-off-by: Thierry Reding <treding@xxxxxxxxxx>
      Fixes: c4fe70ada40f ("clk: tegra: Add closed loop support for the DFLL")
      [vince.h@xxxxxxxxxx: Unlock rcu on error path]
      Signed-off-by: Vince Hsu <vince.h@xxxxxxxxxx>
      [sboyd@xxxxxxxxxxxxxx: Dropped second hunk that nested the rcu
      read lock unnecessarily]
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 02d8dabc50f94353075f2f62b1047c1306e8bf92
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Thu Sep 3 15:23:40 2015 +0200

      perf stat: Fix per-pkg event reporting bug

      Per-pkg events need to be captured once per processor socket. The code
      in check_per_pkg() ensures only one value per processor package is used.
      However there is a problem with this function in case the first CPU of
      the package does not measure anything for the per-pkg event, but other
      CPUs do.

      Consider the following:

        $ create cgroup FOO; echo $$ >FOO/tasks; taskset -c 1 noploop &
        $ perf stat -a -I 1000 -e intel_cqm/llc_occupancy/ -G FOO sleep 100
          1.00000 <not counted> Bytes intel_cqm/llc_occupancy/  FOO

      The reason for this is that CPU0 in the cgroup has nothing running on it.
      Yet check_per_plg() will mark socket0 as processed and no other event
      value will be considered for the socket.

      This patch fixes the problem by having check_per_pkg() only consider
      events which actually ran.

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441286620-10117-1-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0f1d08dd6aaf7e9dd1039dce910c1f8ff58ee8c1
  Author: Andrew F. Davis <afd@xxxxxx>
  Date:   Tue Sep 15 15:34:22 2015 -0500

      regulator: tps65218: Fix missing zero typo

      Add missing zero to value. This will be needed when range checking
      is implemented.

      Signed-off-by: Andrew F. Davis <afd@xxxxxx>
      Acked-by: Dan Murphy <dmurphy@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 3c8f7710c1c44fb650bc29b6ef78ed8b60cfaa28
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Tue Sep 15 20:51:31 2015 +0200

      ASoC: fix broken pxa SoC support

      The previous fix of pxa library support, which was introduced to fix the
      library dependency, broke the previous SoC behavior, where a machine
      code binding pxa2xx-ac97 with a coded relied on :
       - sound/soc/pxa/pxa2xx-ac97.c
       - sound/soc/codecs/XXX.c

      For example, the mioa701_wm9713.c machine code is currently broken. The
      "select ARM" statement wrongly selects the soc/arm/pxa2xx-ac97 for
      compilation, as per an unfortunate fate SND_PXA2XX_AC97 is both declared
      in sound/arm/Kconfig and sound/soc/pxa/Kconfig.

      Fix this by ensuring that SND_PXA2XX_SOC correctly triggers the correct
      pxa2xx-ac97 compilation.

      Fixes: 846172dfe33c ("ASoC: fix SND_PXA2XX_LIB Kconfig warning")
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit e26d15f735f570a1178c3bba4d85e6f58e098fdd
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 14:46:45 2015 +0200

      spi: mediatek: fix wrong error return value on probe

      Commit adcbcfea15d62 ("spi: mediatek: fix spi clock usage error")
      added a new sel_clk but introduced bugs in the error paths since
      the wrong struct clk pointers are passed to PTR_ERR().

      Fixes: adcbcfea15d62 ("spi: mediatek: fix spi clock usage error")
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 0243ed44ad4a25dbd2e92ad97e5e12a1a6c72d6c
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Tue Sep 15 04:59:21 2015 -0700

      spi: fix kernel-doc warnings in spi.h

      Fix the following 'make htmldocs' warnings:

        .//include/linux/spi/spi.h:71: warning: No description found for 
parameter 'lock'
        .//include/linux/spi/spi.h:71: warning: Excess 
struct/union/enum/typedef member 'clock' description in 'spi_statistics'

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 92243b6fc8fcb16bf401b055f7a0ba79f70a4115
  Merge: a394d63 6ff33f3
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Wed Sep 16 20:44:25 2015 +0100

      Merge tag 'v4.3-rc1' into spi-fix-doc

      Linux 4.3-rc1

  commit 385877c01361401113c101ef5a80a9f0998e072b
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 1 09:52:21 2015 +0800

      ARM: pxa: balloon3: Fix build error

      irq_data_get_chip() function does not exist, call irq_desc_get_chip()
      instead.

      Fixes: 9ec97561aa6d ("ARM/pxa: Prepare balloon3_irq_handler for irq 
argument removal")
      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>

  commit 37d2dbcdcca88e392009d7cbe8617d5af0ebcb32
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:32:41 2015 -0700

      net: fix cdc-phonet.c dependency and build error

      Fix build error caused by missing Kconfig dependency:

      ERROR: "cdc_parse_cdc_header" [drivers/net/usb/cdc-phonet.ko] undefined!

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2f58514cfb374d5368c9da945f1765cd48eb0da
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Wed Aug 5 11:53:57 2015 +0100

      arm/arm64: KVM: vgic: Check for !irqchip_in_kernel() when mapping 
resources

      Until b26e5fdac43c ("arm/arm64: KVM: introduce per-VM ops"),
      kvm_vgic_map_resources() used to include a check on irqchip_in_kernel(),
      and vgic_v2_map_resources() still has it.

      But now vm_ops are not initialized until we call kvm_vgic_create().
      Therefore kvm_vgic_map_resources() can being called without a VGIC,
      and we die because vm_ops.map_resources is NULL.

      Fixing this restores QEMU's kernel-irqchip=off option to a working state,
      allowing to use GIC emulation in userspace.

      Fixes: b26e5fdac43c ("arm/arm64: KVM: introduce per-VM ops")
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      [maz: reworked commit message]
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 54c3cf65aefd5e49e58201adb3dc7595c4b3ad9f
  Merge: 6ff33f3 60fdcb8
  Author: Kevin Hilman <khilman@xxxxxxxxxx>
  Date:   Wed Sep 16 09:27:24 2015 -0700

      Merge tag 'omap-for-v4.3/fixes-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Merge "omap fixes against v4.3-rc1" from Tony Lindgren:

      Fixes for omaps against v4.3-rc1:

      - Fix long time regression on beagle for tfp410 pin muxing

      - Fix dm814x control base address typo and related Ethernet
        phy configuration

      - Fix igepv2 Ethernet pinmuxing as only some boards have it

      - Fix pbias regulator compatible values as a pending regulator
        fix needs those for MMC1 to work properly

      - Fix beagle-x15 MMC1 regulator and make pcf857x built-in

      - Fix omap5 and dra7 Kconfig options when built as the only
        SoCs selected

      - Fix PM errata for omap5 and dra7 as they too need it

      - Fix phycore mpu voltage

      Also included are a few cosmetic fixes:

      - Remove unused of_irq macros

      - Fix dra7 ethernet name

      * tag 'omap-for-v4.3/fixes-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        ARM: dts: Fixup model name for HP t410 dts
        ARM: dts: DRA7: fix a typo in ethernet
        ARM: omap2plus_defconfig: make PCF857x built-in
        ARM: dts: Use ti,pbias compatible string for pbias
        ARM: OMAP5: Cleanup options for SoC only build
        ARM: DRA7: Select missing options for SoC only build
        ARM: OMAP2+: board-generic: Remove stale of_irq macros
        ARM: OMAP4+: PM: erratum is used by OMAP5 and DRA7 as well
        ARM: dts: omap3-igep: Move eth IRQ pinmux to IGEPv2 common dtsi
        ARM: dts: am57xx-beagle-x15: Add wakeup irq for mcp79410
        ARM: dts: am335x-phycore-som: Fix mpu voltage
        ARM: dts: am57xx-beagle-x15: Fix regulator populated in MMC1 dt node
        ARM: dts: Fix dm814x control base to properly initialize Ethernet PHY
        ARM: dts: omap3-beagle: make i2c3, ddc and tfp410 gpio work again

  commit 72714841b705a5b9bccf37ee85a62352bee3a3ef
  Merge: 3025510 447e9a4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 09:16:20 2015 -0700

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull rdma driver move from Doug Ledford:
       "This is a move only, no functional changes.

        I tried to get it in prior to the rc1 release, but we were waiting on
        IBM to get back to us that they were OK with the deprecation and
        eventual removal of this driver.  That OK didn't materialize until
        last week, so integration and testing time pushed us beyond the rc1
        release.

        Summary:

         - Move ehca driver to staging/rdma and schedule for deletion"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/ehca: Deprecate driver, move to staging, schedule deletion

  commit 0c986253b939cc14c69d4adbe2b4121bdf4aa220
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Wed Sep 16 11:51:12 2015 -0400

      Revert "sched, cgroup: replace signal_struct->group_rwsem with a global 
percpu_rwsem"

      This reverts commit d59cfc09c32a2ae31f1c3bc2983a0cd79afb3f14.

      d59cfc09c32a ("sched, cgroup: replace signal_struct->group_rwsem with
      a global percpu_rwsem") and b5ba75b5fc0e ("cgroup: simplify
      threadgroup locking") changed how cgroup synchronizes against task
      fork and exits so that it uses global percpu_rwsem instead of
      per-process rwsem; unfortunately, the write [un]lock paths of
      percpu_rwsem always involve synchronize_rcu_expedited() which turned
      out to be too expensive.

      Improvements for percpu_rwsem are scheduled to be merged in the coming
      v4.4-rc1 merge window which alleviates this issue.  For now, revert
      the two commits to restore per-process rwsem.  They will be re-applied
      for the v4.4-rc1 merge window.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Link: http://lkml.kernel.org/g/55F8097A.7000206@xxxxxxxxxx
      Reported-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+

  commit f9f9e7b776142fb1c0782cade004cc8e0147a199
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Wed Sep 16 11:51:12 2015 -0400

      Revert "cgroup: simplify threadgroup locking"

      This reverts commit b5ba75b5fc0e8404e2c50cb68f39bb6a53fc916f.

      d59cfc09c32a ("sched, cgroup: replace signal_struct->group_rwsem with
      a global percpu_rwsem") and b5ba75b5fc0e ("cgroup: simplify
      threadgroup locking") changed how cgroup synchronizes against task
      fork and exits so that it uses global percpu_rwsem instead of
      per-process rwsem; unfortunately, the write [un]lock paths of
      percpu_rwsem always involve synchronize_rcu_expedited() which turned
      out to be too expensive.

      Improvements for percpu_rwsem are scheduled to be merged in the coming
      v4.4-rc1 merge window which alleviates this issue.  For now, revert
      the two commits to restore per-process rwsem.  They will be re-applied
      for the v4.4-rc1 merge window.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Link: http://lkml.kernel.org/g/55F8097A.7000206@xxxxxxxxxx
      Reported-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: "Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+

  commit 30255100d7c253c82b596a0768235d5865eee2cf
  Merge: 9efeaaf cd1faefa
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 08:49:41 2015 -0700

      Merge tag 'hwmon-for-linus-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging

      Pull hwmon fixes from Guenter Roeck:
       "Two patches for the nct6775 driver: add support for NCT6793D, and fix
        swapped registers"

      * tag 'hwmon-for-linus-v4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:
        hwmon: (nct6775) Add support for NCT6793D
        hwmon: (nct6775) Swap STEP_UP_TIME and STEP_DOWN_TIME registers for 
most chips

  commit 9efeaaf9a0c1a27c2be8b2d37c73142555702a4f
  Merge: d1291eb fa84b52
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 08:07:04 2015 -0700

      Merge tag 'pinctrl-v4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl

      Pull pin control fixes from Linus Walleij:
       "This is a first set of pin control fixes for the v4.3 series.  Nothing
        special to say, business as usual.

         - Some IS_ERR() fixes from Julia Lawall.  I always wanted the
           compiler to catch these but error pointers by nailing them as an
           err pointer intrinsic type or something seem to be a "no can do".
           In any case, cocinelle is obviously up to the task, better than
           bugs staying around.

         - Better error handling for NULL GPIO chips.

         - Fix a compile error from the big irq desc refactoring.  I'm
           surprised the fallout wasn't bigger than this"

      * tag 'pinctrl-v4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:
        pinctrl: samsung: s3c24xx: fix syntax error
        pinctrl: core: Warn about NULL gpio_chip in 
pinctrl_ready_for_gpio_range()
        pinctrl: join lines that can be a single line within 80 columns
        pinctrl: digicolor: convert null test to IS_ERR test
        pinctrl: qcom: ssbi: convert null test to IS_ERR test

  commit 9bf9fde2c98ba8362ea1d41d8bd8b32a23776e67
  Author: Jason J. Herne <jjherne@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 09:13:50 2015 -0400

      KVM: s390: Replace incorrect atomic_or with atomic_andnot

      The offending commit accidentally replaces an atomic_clear with an
      atomic_or instead of an atomic_andnot in kvm_s390_vcpu_request_handled.
      The symptom is that kvm guests on s390 hang on startup.
      This patch simply replaces the incorrect atomic_or with atomic_andnot

      Fixes: 805de8f43c20 (atomic: Replace atomic_{set,clear}_mask() usage)
      Signed-off-by: Jason J. Herne <jjherne@xxxxxxxxxxxxxxxxxx>
      Acked-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Acked-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit d1291ebd85770299857b355160864cd1a9f6e5e9
  Merge: aa57e0b 46d4f7c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 07:58:58 2015 -0700

      Merge tag 'gpio-v4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio

      Pull GPIO fixes from Linus Walleij:
       "This is the first round of GPIO fixes for v4.3.  Quite a lot of
        patches, but the influx of new stuff in the merge window was equally
        big, so I'm not surprised.

         - Return value checks and thus nicer errorpath for two drivers.

         - Make GPIO_RCAR arch neutral.

         - Propagate errors from GPIO chip ->get() vtable call.  It turned out
           these can actually fail sometimes, especially on slowpath
           controllers doing I2C traffic and similar.

         - Update documentation to be in sync with the massive changes in the
           v4.3 merge window, phew.

         - Handle deferred probe properly in the OMAP driver.

         - Get rid of surplus MODULE_ALIAS() from sx150x"

      * tag 'gpio-v4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio:
        gpio: omap: Fix GPIO numbering for deferred probe
        Documentation: gpio: Explain that <function>-gpio is also supported
        gpio: omap: Fix gpiochip_add() handling for deferred probe
        gpio: sx150x: Remove unnecessary MODULE_ALIAS()
        Documentation: gpio: board: describe the con_id parameter
        Documentation: gpio: board: add flags parameter to gpiod_get*() 
functions
        gpio: Propagate errors from chip->get()
        gpio: rcar: GPIO_RCAR doesn't relate to ARM
        gpio: mxs: need to check return value of irq_alloc_generic_chip
        gpio: mxc: need to check return value of irq_alloc_generic_chip

  commit ae80a2f2d142b97ec68434313f0263256916683d
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:25 2015 -0500

      arm64: Remove ununsed set_irq_flags

      Now that all users of set_irq_flags and custom flags are converted to
      genirq functions, the ARM specific set_irq_flags can be removed.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit eb811129ed9ea50ef2dfe8a83ddde6a16d1eb8d4
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:24 2015 -0500

      ARM: Remove ununsed set_irq_flags

      Now that all users of set_irq_flags and custom flags are converted to
      genirq functions, the ARM specific set_irq_flags can be removed.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Tested-by: Kevin Hilman <khilman@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 3e15135b98ecaa0228eb5dad42be7516cac38aa0
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:23 2015 -0500

      sh: Kill off set_irq_flags usage

      set_irq_flags is ARM specific with custom flags which have genirq
      equivalents. Convert drivers to use the genirq interfaces directly, so we
      can kill off set_irq_flags. The translation of flags is as follows:

      IRQF_VALID -> !IRQ_NOREQUEST
      IRQF_PROBE -> !IRQ_NOPROBE
      IRQF_NOAUTOEN -> IRQ_NOAUTOEN

      For IRQs managed by an irqdomain, the irqdomain core code handles clearing
      and setting IRQ_NOREQUEST already, so there is no need to do this in
      .map() functions and we can simply remove the set_irq_flags calls. Some
      users also modify IRQ_NOPROBE and this has been maintained although it
      is not clear that is really needed. There appears to be a great deal of
      blind copy and paste of this code.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Acked-by: Simon Horman <horms@xxxxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-sh@xxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1440889285-5637-4-git-send-email-robh@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit d17cab4451df1f25f3a46369e0aaeaa18390fa6b
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:22 2015 -0500

      irqchip: Kill off set_irq_flags usage

      set_irq_flags is ARM specific with custom flags which have genirq
      equivalents. Convert drivers to use the genirq interfaces directly, so we
      can kill off set_irq_flags. The translation of flags is as follows:

      IRQF_VALID -> !IRQ_NOREQUEST
      IRQF_PROBE -> !IRQ_NOPROBE
      IRQF_NOAUTOEN -> IRQ_NOAUTOEN

      For IRQs managed by an irqdomain, the irqdomain core code handles clearing
      and setting IRQ_NOREQUEST already, so there is no need to do this in
      .map() functions and we can simply remove the set_irq_flags calls. Some
      users also modify IRQ_NOPROBE and this has been maintained although it
      is not clear that is really needed. There appears to be a great deal of
      blind copy and paste of this code.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kukjin Kim <kgene@xxxxxxxxxx>
      Cc: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Cc: Stephen Warren <swarren@xxxxxxxxxxxxx>
      Cc: Lee Jones <lee@xxxxxxxxxx>
      Cc: Alexander Shiyan <shc_work@xxxxxxx>
      Cc: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Cc: linux-rpi-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-samsung-soc@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440889285-5637-3-git-send-email-robh@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ca0141de743dc7760fdfeb9210b82dadf6d9b221
  Author: Rob Herring <robh@xxxxxxxxxx>
  Date:   Sat Aug 29 18:01:21 2015 -0500

      gpu/drm: Kill off set_irq_flags usage

      set_irq_flags is ARM specific with custom flags which have genirq
      equivalents. Convert drivers to use the genirq interfaces directly, so we
      can kill off set_irq_flags. The translation of flags is as follows:

      IRQF_VALID -> !IRQ_NOREQUEST
      IRQF_PROBE -> !IRQ_NOPROBE
      IRQF_NOAUTOEN -> IRQ_NOAUTOEN

      For IRQs managed by an irqdomain, the irqdomain core code handles clearing
      and setting IRQ_NOREQUEST already, so there is no need to do this in
      .map() functions and we can simply remove the set_irq_flags calls. Some
      users also modify IRQ_NOPROBE and this has been maintained although it
      is not clear that is really needed. There appears to be a great deal of
      blind copy and paste of this code.

      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Cc: David Airlie <airlied@xxxxxxxx>
      Cc: dri-devel@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit aa57e0b281453334267e836d15cfdb933f6d6f97
  Merge: 865ca08 84cba17
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 07:53:33 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fixes from Herbert Xu:
       "This fixes the following issues:

         - The selftest overreads the IV test vector.

        - Fix potential infinite loop in sunxi-ss driver.

         - Fix powerpc build failure when VMX is set without VSX"

      * git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: testmgr - don't copy from source IV too much
        crypto: sunxi-ss - Fix a possible driver hang with ciphers
        crypto: vmx - VMX crypto should depend on CONFIG_VSX

  commit 03da3ff1cfcd7774c8780d2547ba0d995f7dc03d
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:10:03 2015 +0100

      x86/platform: Fix Geode LX timekeeping in the generic x86 build

      In 2007, commit 07190a08eef36 ("Mark TSC on GeodeLX reliable")
      bypassed verification of the TSC on Geode LX. However, this code
      (now in the check_system_tsc_reliable() function in
      arch/x86/kernel/tsc.c) was only present if CONFIG_MGEODE_LX was
      set.

      OpenWRT has recently started building its generic Geode target
      for Geode GX, not LX, to include support for additional
      platforms. This broke the timekeeping on LX-based devices,
      because the TSC wasn't marked as reliable:
      https://dev.openwrt.org/ticket/20531

      By adding a runtime check on is_geode_lx(), we can also include
      the fix if CONFIG_MGEODEGX1 or CONFIG_X86_GENERIC are set, thus
      fixing the problem.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Cc: Andres Salomon <dilinger@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Marcelo Tosatti <marcelo@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/1442409003.131189.87.camel@xxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ca09f02f122b2ecb0f5ddfc5fd47b29ed657d4fd
  Author: Marek Majtyka <marek.majtyka@xxxxxxxxx>
  Date:   Wed Sep 16 12:04:55 2015 +0200

      arm: KVM: Fix incorrect device to IPA mapping

      A critical bug has been found in device memory stage1 translation for
      VMs with more then 4GB of address space. Once vm_pgoff size is smaller
      then pa (which is true for LPAE case, u32 and u64 respectively) some
      more significant bits of pa may be lost as a shift operation is performed
      on u32 and later cast onto u64.

      Example: vm_pgoff(u32)=0x00210030, PAGE_SHIFT=12
              expected pa(u64):   0x0000002010030000
              produced pa(u64):   0x0000000010030000

      The fix is to change the order of operations (casting first onto 
phys_addr_t
      and then shifting).

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      [maz: fixed changelog and patch formatting]
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Marek Majtyka <marek.majtyka@xxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 1713e5aa05fff3951e747548b373bd2c81be4e7a
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Wed Sep 16 10:54:37 2015 +0100

      arm64: KVM: Fix user access for debug registers

      When setting the debug register from userspace, make sure that
      copy_from_user() is called with its parameters in the expected
      order. It otherwise doesn't do what you think.

      Fixes: 84e690bfbed1 ("KVM: arm64: introduce vcpu->arch.debug_ptr")
      Reported-by: Peter Maydell <peter.maydell@xxxxxxxxxx>
      Cc: Alex Bennée <alex.bennee@xxxxxxxxxx>
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit bd0b9ac405e1794d72533c3d487aa65b6b955a0c
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:42:37 2015 +0200

      genirq: Remove irq argument from irq flow handlers

      Most interrupt flow handlers do not use the irq argument. Those few
      which use it can retrieve the irq number from the irq descriptor.

      Remove the argument.

      Search and replace was done with coccinelle and some extra helper
      scripts around it. Thanks to Julia for her help!

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>

  commit b237721c5d95082a803c0be686f56d2dd1de995b
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Jun 1 16:05:43 2015 +0800

      genirq: Move field 'msi_desc' from irq_data into irq_common_data

      MSI descriptors are per-irq instead of per irqchip, so move it into
      struct irq_common_data.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1433145945-789-35-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 9df872faa7e1619e9278bec00ceaed2236533530
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Wed Jun 3 11:47:50 2015 +0800

      genirq: Move field 'affinity' from irq_data into irq_common_data

      Irq affinity mask is per-irq instead of per irqchip, so move it into
      struct irq_common_data.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1433303281-27688-1-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit af7080e040d223b5e7d0a8de28f7cea24ef017c4
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Jun 1 16:05:21 2015 +0800

      genirq: Move field 'handler_data' from irq_data into irq_common_data

      Handler data (handler_data) is per-irq instead of per irqchip, so move
      it into struct irq_common_data.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1433145945-789-13-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 449e9cae58b06be1293858ec8e5d8cb728238baa
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Jun 1 16:05:16 2015 +0800

      genirq: Move field 'node' from irq_data into irq_common_data

      NUMA node information is per-irq instead of per-irqchip, so move it into
      struct irq_common_data. Also use CONFIG_NUMA to guard 
irq_common_data.node.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Yinghai Lu <yinghai@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1433145945-789-8-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 4df7f54d16ebe9c37631182de84c4347f0e44db3
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:19:16 2015 +0200

      irqchip/gic-v3: Use IRQD_FORWARDED_TO_VCPU flag

      Get rid of the handler_data abuse.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 714665351cc718e01f0ce34ef5325932d56d8b4e
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:37:36 2015 +0200

      irqchip/gic: Use IRQD_FORWARDED_TO_VCPU flag

      Get rid of the handler_data abuse.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit fc5697126aa074c289df5e8baae28e115963023f
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:33:42 2015 +0200

      genirq: Provide IRQD_FORWARDED_TO_VCPU status flag

      Provide a irq data flag to mark an irq forwarded to a VCPU along with
      the accessor functions.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 755d119a6204974b2005a98549a48a75a7f5010b
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:37:12 2015 +0200

      genirq: Simplify irq_data_to_desc()

      Avoid the lookup of irq_desc and use the same mechanism for
      hierarchical and flat irqdomains.

      Based-on-a-patch-from: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 123236ccacc933daac3b39c5eb1f0011c70d41d8
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:54:23 2015 +0200

      genirq: Remove __irq_set_handler_locked()

      All users converted to irq_set_handler_locked()

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7c51173adde2ec520348812214704313f5b36f75
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:52:53 2015 +0200

      pinctrl/pistachio: Use irq_set_handler_locked

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor. Search and replacement was done with coccinelle:

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: linux-gpio@xxxxxxxxxxxxxxx

  commit a7147db0f5184954687546d430aed65cce483ffa
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:51:00 2015 +0200

      gpio: vf610: Use irq_set_handler_locked

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor. Search and replacement was done with coccinelle:

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: linux-gpio@xxxxxxxxxxxxxxx

  commit 9ca86b204b3c874e6ada28309f607e3aa74d60a9
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Jun 23 15:52:36 2015 +0200

      powerpc/mpc8xx: Use irq_set_handler_locked()

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Search and replacement was done with coccinelle:

      @@
      struct irq_data *d;
      expression E1;
      @@

      -__irq_set_handler_locked(d->irq, E1);
      +irq_set_handler_locked(d, E1);

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 9758a7b0e5fdd5a08bcc73540bb3b98d59295a6d
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Jun 23 15:52:34 2015 +0200

      powerpc/ipic: Use irq_set_handler_locked()

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Search and replacement was done with coccinelle:

      @@
      struct irq_data *d;
      expression E1;
      @@

      -__irq_set_handler_locked(d->irq, E1);
      +irq_set_handler_locked(d, E1);

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Anton Blanchard <anton@xxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit e9e879a3d6cecc4258294c674627045da648fab0
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Jun 23 15:52:32 2015 +0200

      powerpc/cpm2: Use irq_set_handler_locked()

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Search and replacement was done with coccinelle:

      @@
      struct irq_data *d;
      expression E1;
      @@

      -__irq_set_handler_locked(d->irq, E1);
      +irq_set_handler_locked(d, E1);

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 6b83bd941479e99f6890ed4b5c54cb1f43c7146f
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Jun 23 15:52:31 2015 +0200

      powerpc/mpc52xx: Use irq_set_handler_locked()

      Use irq_set_handler_locked() as it avoids a redundant lookup of the
      irq descriptor.

      Search and replacement was done with coccinelle:

      @@
      struct irq_data *d;
      expression E1;
      @@

      -__irq_set_handler_locked(d->irq, E1);
      +irq_set_handler_locked(d, E1);

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Julia Lawall <julia.lawall@xxxxxxx>
      Cc: Anatolij Gustschin <agust@xxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 04bb92e4b4cf06a66889d37b892b78f926faa9d4
  Author: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
  Date:   Wed Sep 16 19:31:11 2015 +0800

      KVM: vmx: fix VPID is 0000H in non-root operation

      Reference SDM 28.1:

      The current VPID is 0000H in the following situations:
      - Outside VMX operation. (This includes operation in system-management
        mode under the default treatment of SMIs and SMM with VMX operation;
        see Section 34.14.)
      - In VMX root operation.
      - In VMX non-root operation when the â??enable VPIDâ?? VM-execution 
control
        is 0.

      The VPID should never be 0000H in non-root operation when "enable VPID"
      VM-execution control is 1. However, commit 34a1cd60 ("kvm: x86: vmx:
      move some vmx setting from vmx_init() to hardware_setup()") remove the
      codes which reserve 0000H for VMX root operation.

      This patch fix it by again reserving 0000H for VMX root operation.

      Cc: stable@xxxxxxxxxxxxxxx # 3.19+
      Fixes: 34a1cd60d17f62c1f077c1478a6c2ca8c3d17af4
      Reported-by: Wincy Van <fanwenyi0529@xxxxxxxxx>
      Signed-off-by: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 36b35d5d807b7e57aff7d08e63de8b17731ee211
  Author: Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:30:08 2015 +0530

      powerpc/mm: Recompute hash value after a failed update

      If we had secondary hash flag set, we ended up modifying hash value in
      the updatepp code path. Hence with a failed updatepp we will be using
      a wrong hash value for the following hash insert. Fix this by
      recomputing hash before insert.

      Without this patch we can end up with using wrong slot number in linux
      pte. That can result in us missing an hash pte update or invalidate
      which can cause memory corruption or even machine check.

      Fixes: 6d492ecc6489 ("powerpc/THP: Add code to handle HPTE faults for 
hugepages")
      Cc: stable@xxxxxxxxxxxxxxx # v3.11+
      Signed-off-by: Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 655471f54c2e395ba29ae4156ba0f49928177cc1
  Author: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 11:24:17 2015 +1000

      powerpc/boot: Specify ABI v2 when building an LE boot wrapper

      The kernel does it, not the boot wrapper, which breaks with some
      cross compilers that still default to ABI v1.

      Fixes: 147c05168fc8 ("powerpc/boot: Add support for 64bit little endian 
wrapper")
      Cc: stable@xxxxxxxxxxxxxxx # v3.16+
      Signed-off-by: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit e902e14549e04c040fb6e15785efd35f810a223a
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:36:04 2015 +0200

      genirq: Remove __irq_set_chip_handler_name_locked()

      All users converted to irq_set_chip_handler_name_locked()

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b9a5ec33e32069a2f8af09d46266091602902bf4
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 12:32:40 2015 +0200

      pinctrl: sunxi: Use irq_set_chip_handler_name_locked()

      __irq_set_chip_handler_name_locked() is about to be replaced. Use
      irq_set_chip_handler_name_locked() instead.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: linux-gpio@xxxxxxxxxxxxxxx

  commit 62bea5bff486644ecf363fe8a1a2f6f32c614a49
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Sep 15 18:27:57 2015 +0200

      KVM: add halt_attempted_poll to VCPU stats

      This new statistic can help diagnosing VCPUs that, for any reason,
      trigger bad behavior of halt_poll_ns autotuning.

      For example, say halt_poll_ns = 480000, and wakeups are spaced exactly
      like 479us, 481us, 479us, 481us. Then KVM always fails polling and wastes
      10+20+40+80+160+320+480 = 1110 microseconds out of every
      479+481+479+481+479+481+479 = 3359 microseconds. The VCPU then
      is consuming about 30% more CPU than it would use without
      polling.  This would show as an abnormally high number of
      attempted polling compared to the successful polls.

      Acked-by: Christian Borntraeger <borntraeger@xxxxxxxxxx<
      Reviewed-by: David Matlack <dmatlack@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit ad2aa04218de9bd734d593adb0ac59854ec0cb68
  Author: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 16:35:08 2015 +0200

      virtio/s390: handle failures of READ_VQ_CONF ccw

      In virtio_ccw_read_vq_conf() the return value of ccw_io_helper()
      was not checked.
      If the configuration could not be read properly, we'd wrongly assume a
      queue size of 0.

      Let's propagate any I/O error to virtio_ccw_setup_vq() so it may
      properly fail.

      Signed-off-by: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>

  commit fd2e8d4300c56f9660679d629c449118e14c00cd
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Wed Sep 9 22:26:25 2015 +0300

      tools/virtio: propagate V=X to kernel build

      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>

  commit 4e9fa50c6ccbebef0c4a4aae84090badf81359e6
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Wed Sep 9 22:24:56 2015 +0300

      vhost: move features to core

      virtio 1 and any layout are core features, move them
      there. This fixes vhost test.

      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>

  commit 9b55613f42e8d40d5c9ccb8970bde6af4764b2ab
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 16:44:02 2015 +0100

      ARM: fix Thumb2 signal handling when ARMv6 is enabled

      When a kernel is built covering ARMv6 to ARMv7, we omit to clear the
      IT state when entering a signal handler.  This can cause the first
      few instructions to be conditionally executed depending on the parent
      context.

      In any case, the original test for >= ARMv7 is broken - ARMv6 can have
      Thumb-2 support as well, and an ARMv6T2 specific build would omit this
      code too.

      Relax the test back to ARMv6 or greater.  This results in us always
      clearing the IT state bits in the PSR, even on CPUs where these bits
      are reserved.  However, they're reserved for the IT state, so this
      should cause no harm.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: d71e1352e240 ("Clear the IT state when invoking a Thumb-2 signal 
handler")
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Tested-by: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
      Tested-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit d71b0ad8d30922ccdd0705318237e6890b4ec1b6
  Merge: a4d7109 f6cf87f
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 16 09:19:56 2015 +0200

      Merge branch 'perf/urgent' into perf/core, to resolve a conflict

      Conflicts:
        tools/perf/ui/browsers/hists.c

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a4d71093e759b7cfe0babbc6ae89c8130532f6ad
  Merge: 9059b28 bbbe6bf
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 16 09:12:07 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

      - Enhance the error reporting of tracepoint event parsing, e.g.:

          $ oldperf record -e sched:sched_switc usleep 1
          event syntax error: 'sched:sched_switc'
                               \___ unknown tracepoint
          Run 'perf list' for a list of valid events

        Now we get the much nicer:

          $ perf record -e sched:sched_switc ls
          event syntax error: 'sched:sched_switc'
                               \___ can't access trace events

          Error: No permissions to read 
/sys/kernel/debug/tracing/events/sched/sched_switc
          Hint:  Try 'sudo mount -o remount,mode=755 /sys/kernel/debug'

        And after we have those mount point permissions fixed:

          $ perf record -e sched:sched_switc ls
          event syntax error: 'sched:sched_switc'
                               \___ unknown tracepoint

          Error: File /sys/kernel/debug/tracing/events/sched/sched_switc not 
found.
          Hint:  Perhaps this kernel misses some CONFIG_ setting to enable this 
feature?.

        Now its just a matter of using what git uses to suggest alternatives 
when we
        make a typo, i.e. that it is just an 'h' missing :-)

        I.e. basically now the event parsing routing uses the strerror_open()
        routines introduced by and used in 'perf trace' work. (Jiri Olsa)

      Infrastructure changes:

      - Export init/exit_probe_symbol_maps() from 'perf probe' for use in eBPF.
        (Namhyung Kim)

      - Free perf_probe_event in cleanup_perf_probe_events(). (Namhyung Kim)

      - regs_query_register_offset() infrastructure + implementation for x86.
        First user will be the perf/eBPF code. (Wang Nan)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f6cf87f748ff9480f97ff9c5caf6d6faacf52aa1
  Merge: 91a4dc9 c5e6bd2
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Sep 16 09:06:54 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

      - Fix segfault pressing -> in 'perf top' with no hist entries. (Wang Nan)

         E.g:
        perf top -e page-faults --pid 11400 # 11400 generates no page-fault

      - Fix propagation of thread and cpu maps, that got broken when doing 
incomplete
        changes to better support events with a PMU cpu mask, leading to Intel 
PT to
        fail with an error like:

          $ perf record -e intel_pt//u uname
          Error: The sys_perf_event_open() syscall returned with
                    22 (Invalid argument) for event (sched:sched_switch).

        Because intel_pt adds that sched:sched_switch evsel to the evlist after 
the
        thread/cpu maps were propagated to the evsels, fix it. (Adrian Hunter)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8315b77d72c5f0b18ceb513303d845e73166133c
  Author: Li Jun <jun.li@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:46:32 2015 +0800

      usb: chipidea: imx: fix a typo for imx6sx

      Use imx6sx instead of imx6sl's platform flags for imx6sx.

      Fixes: e14db48dfcf3 ("usb: chipidea: imx: add runtime power management 
support")
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Li Jun <jun.li@xxxxxxxxxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit b84ee0d7f375ed7840c7c110d46eac24cf94b2a2
  Author: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:10:16 2015 +1000

      cdc: add header guards

      Signed-off-by: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1f0bd44e937468446d080b98b5669844744c24a1
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Wed Sep 16 02:17:49 2015 +0200

      cpufreq: acpi-cpufreq: Use cpufreq_cpu_get_raw() in ->get()

      cpufreq_cpu_get() called by get_cur_freq_on_cpu() is overkill,
      because the ->get() callback is always invoked in a context in
      which all of the conditions checked by cpufreq_cpu_get() are
      guaranteed to be satisfied.

      Use cpufreq_cpu_get_raw() instead of it and drop the
      corresponding cpufreq_cpu_put() from get_cur_freq_on_cpu().

      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>

  commit f0b2e563bc419df7c1b3d2f494574c25125f6aed
  Author: Jeff Moyer <jmoyer@xxxxxxxxxx>
  Date:   Fri Aug 14 16:15:32 2015 -0400

      blockdev: don't set S_DAX for misaligned partitions

      The dax code doesn't currently support misaligned partitions,
      so disable O_DIRECT via dax until such time as that support
      materializes.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Suggested-by: Boaz Harrosh <boaz@xxxxxxxxxxxxx>
      Signed-off-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit e94f5a2285fc94202a9efb2c687481f29b64132c
  Author: Jeff Moyer <jmoyer@xxxxxxxxxx>
  Date:   Fri Aug 14 16:15:31 2015 -0400

      dax: fix O_DIRECT I/O to the last block of a blockdev

      commit bbab37ddc20b (block: Add support for DAX reads/writes to
      block devices) caused a regression in mkfs.xfs.  That utility
      sets the block size of the device to the logical block size
      using the BLKBSZSET ioctl, and then issues a single sector read
      from the last sector of the device.  This results in the dax_io
      code trying to do a page-sized read from 512 bytes from the end
      of the device.  The result is -ERANGE being returned to userspace.

      The fix is to align the block to the page size before calling
      get_block.

      Thanks to willy for simplifying my original patch.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Tested-by:  Linda Knippers <linda.knippers@xxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 9adbac599a71bc25a2617850ffcaa4388dc5c20d
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:50 2015 -0700

      fm10k: fix iov_msg_mac_vlan_pf VID checks

      The VF will send a message to request multicast addresses with the
      default VID. In the current code, if the PF has statically assigned a
      VLAN to a VF, then the VF will not get the multicast addresses. Fix up
      all of the various VLAN messages to use identical checks (since each
      check was different). Also use set as a variable, so that it simplifies
      our check for whether VLAN matches the pf_vid.

      The new logic will allow set of a VLAN if it is zero, automatically
      converting to the default VID. Otherwise it will allow setting the PF
      VID, or any VLAN if PF has not statically assigned a VLAN. This is
      consistent behavior, and allows VF to request either 0 or the
      default_vid without silently failing.

      Note that we need the check for zero since VFs might not get the default
      VID message in time to actually request non-zero VLANs.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ac98100359e098d03dbd98783ca4becaf2ea7ec3
  Author: Alexander Duyck <alexander.duyck@xxxxxxxxxx>
  Date:   Wed Jun 24 13:34:49 2015 -0700

      fm10k: Only trigger data path reset if fabric is up

      This change makes it so that we only trigger the data path reset if the
      fabric is ready to handle traffic.  The general idea is to avoid
      triggering the reset unless the switch API is ready for us.  Otherwise
      we can just postpone the reset until we receive a switch ready
      notification.

      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 95f4f8da644256d8c0ff5bab2c93ba33d2a42cd8
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:48 2015 -0700

      fm10k: re-enable VF after a full reset on detection of a Malicious event

      Modify behavior of Malicious Driver Detection events. Presently, the
      hardware disables the VF queues and re-assigns them to the PF. This
      causes the VF in question to continuously Tx hang, because it assumes
      that it can transmit over the queues in question. For transient events,
      this results in continuous logging of malicious events.

      New behavior is to reset the LPORT and VF state, so that the VF will
      have to reset and re-enable itself. This does mean that malicious VFs
      will possibly be able to continue and attempt malicious events again.
      However, it is expected that system administrators will step in and
      manually remove or disable the VF in question.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5c2d642fd0cf0f4f7396dfd3754bc03f6e50e359
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:47 2015 -0700

      fm10k: TRIVIAL fix typo in fm10k_netdev.c

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e71c9318428fb16de808b497e0229994010d32a1
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:46 2015 -0700

      fm10k: send traffic on default VID to VLAN device if we have one

      This patch ensures that VLAN traffic on the default VID will go to the
      corresponding VLAN device if it exists. To do this, mask the rx_ring VID
      if we have an active VLAN on that VID.

      For this to work correctly, we need to update fm10k_process_skb_fields
      to correctly mask off the VLAN_PRIO_MASK bits and compare them
      separately, otherwise we incorrectly compare the priority bits with the
      cleared flag. This also happens to fix a related bug where having
      priority bits set causes us to incorrectly classify traffic.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6fbc6b358b3f63e701d15e9d330a3b0dbb03f802
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:44 2015 -0700

      fm10k: TRIVIAL fix up ordering of __always_unused and style

      Fix some style issues in debugfs code, and correct ordering of void and
      __always_unused. Technically, the order does not matter, but preferred
      style is to put the macro between the type and name.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 855c40fc31ca2392845558235f7e92e406936fbe
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Wed Jun 24 13:34:41 2015 -0700

      fm10k: remove is_slot_appropriate

      This function is no longer used now that we have updated fm10k_slot_warn
      functionality.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit b655a5c735867c1a80e7ceaa1f1c45d1dd34909f
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Fri Jun 19 10:56:10 2015 -0700

      fm10k: don't store sw_vid at reset

      If we store the sw_vid at reset of PF, then we accidentally prevent the
      VF from receiving the message to update its default VID. This only
      occurs if the VF is created before the PF has come up, which is the
      standard way of creating VFs when using the module parameter.

      This fixes an issue where we request the incorrect MAC/VLAN
      combinations, and prevents us from accidentally reporting some frames as
      VLAN tagged.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 3f0bdb2e2ce7db7425856686d9ccd8fd0ddf9bf0
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Fri Jun 19 10:56:09 2015 -0700

      fm10k: allow creation of VLAN interfaces even while down

      We re-sync upon going up, so there is little reason to worry about not
      syncing immediately with switch. This prevents an error that occurs if
      you add a VLAN interface while down.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0ff36676a3778d0655933ace201fca7c11b4e8b5
  Author: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
  Date:   Thu Jun 18 19:41:10 2015 -0700

      fm10k: Report MAC address on driver load

      This change adds the MAC address to the list of values recorded on driver
      load.  The MAC address represents the serial number of the unit and allows
      us to track the value should a card be replaced in a system.

      The log message should now be similar in output to that of ixgbe.

      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit aae072e363bed4e91c00d57f753c799276ddb161
  Author: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
  Date:   Tue Jun 16 11:47:12 2015 -0700

      fm10k: Don't assume page fragments are page size

      This change pulls out the optimization that assumed that all fragments
      would be limited to page size.  That hasn't been the case for some time 
now
      and to assume this is incorrect as the TCP allocator can provide up to a
      32K page fragment.

      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Acked-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit bdc7f5902d22e7297b8f0d7a8d6ed8429cdba636
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:56 2015 -0700

      fm10k: update netdev perm_addr during reinit, instead of at up

      Update the netdev permanent address during fm10k_reinit enables the user
      to immediately see the new MAC address on the VF even if the device
      isn't up. The previous code required that the device by opened before
      changes would appear.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 106c07a49506359f7663770ef33f4997d68316c1
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:55 2015 -0700

      fm10k: update fm10k_slot_warn to use pcie_get_minimum link

      This is useful in cases where we connect to a slot at Gen3, but the slot
      is behind a bus which only connected at Gen2. This generally only
      happens when a PCIe switch is in the sequence of devices, and can be
      very confusing when you see slow performance with no obvious cause.

      I am aware this patch has a few lines that break 80 characters, but
      there does not seem to be a readable way to format them to less than 80
      characters. Suggestions welcome.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 56f0569e3ab741d3c5cebc4b4c882b471df53738
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:53 2015 -0700

      fm10k: only prevent removal of default VID rules

      This allows us to correctly add a VLAN even if it matches our default
      VID. However, we don't want to remove the VID rules once that VLAN is
      deleted. Correctly remove the stack layers information of the VLAN, but
      then return to forwarding that VID as untagged frames. If we deleted the
      VID rules here, we would begin dropping traffic due to VLAN membership
      violations.

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e40296628bec7400f529927eef4bc87cb425a22a
  Author: Jacob Keller <jacob.e.keller@xxxxxxxxx>
  Date:   Mon Jun 15 15:00:51 2015 -0700

      fm10k: disable service task during suspend

      The service task reads some registers as part of its normal routine,
      even while the interface is down. Normally this is ok. However, during
      suspend we have disabled the PCI device. Due to this, registers will
      read in the same way as a surprise-remove event. Disable the service
      task while we suspend, and re-enable it after we resume. If we don't do
      this, the device could be UP when you suspend and come back from resume
      as closed (since fm10k closes the device when it gets a surprise
      remove).

      Signed-off-by: Jacob Keller <jacob.e.keller@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 8ac34f10a5ea4c7b6f57dfd52b0693a2b67d9ac4
  Author: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
  Date:   Thu Jul 30 15:19:28 2015 -0700

      ixgbe: Limit lowest interrupt rate for adaptive interrupt moderation to 
12K

      This patch updates the lowest limit for adaptive interrupt interrupt
      moderation to roughly 12K interrupts per second.

      The way I came about reaching 12K as the desired interrupt rate is by
      testing with UDP flows.  Specifically I had a simple test that ran a
      netperf UDP_STREAM test at varying sizes.  What I found was as the packet
      sizes increased the performance fell steadily behind until we were only
      able to receive at ~4Gb/s with a message size of 65507.  A bit of digging
      found that we were dropping packets for the socket in the network stack,
      and looking at things further what I found was I could solve it by 
increasing
      the interrupt rate, or increasing the rmem_default/rmem_max.  What I 
found was
      that when the interrupt coalescing resulted in more data being processed
      per interrupt than could be stored in the socket buffer we started losing
      packets and the performance dropped.  So I reached 12K based on the
      following math.

      rmem_default = 212992
      skb->truesize = 2994
      212992 / 2994 = 71.14 packets to fill the buffer

      packet rate at 1514 packet size is 812744pps
      71.14 / 812744 = 87.9us to fill socket buffer

      From there it was just a matter of choosing the interrupt rate and
      providing a bit of wiggle room which is why I decided to go with 12K
      interrupts per second as that uses a value of 84us.

      The data below is based on VM to VM over a direct assigned ixgbe 
interface.
      The test run was:
        netperf -H <ip> -t UDP_STREAM"

      Socket  Message  Elapsed      Messages                   CPU      Service
      Size    Size     Time         Okay Errors   Throughput   Util     Demand
      bytes   bytes    secs            #      #   10^6bits/sec % SS     us/KB
      Before:
      212992   65507   60.00     1100662      0     9613.4     10.89    0.557
      212992           60.00      473474            4135.4     11.27    0.576

      After:
      212992   65507   60.00     1100413      0     9611.2     10.73    0.549
      212992           60.00      974132            8508.3     11.69    0.598

      Using bare metal the data is similar but not as dramatic as the throughput
      increases from about 8.5Gb/s to 9.5Gb/s.

      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6b010e9b1f0a406d1d35202a694fa724a559bf77
  Author: Alex Williamson <alex.williamson@xxxxxxxxxx>
  Date:   Wed Jul 29 14:38:21 2015 -0600

      ixgbe: Teardown SR-IOV before unregister_netdev()

      When the .remove() callback for a PF is called, SR-IOV support for the
      device is disabled, which requires unbinding and removing the VFs.
      The VFs may be in-use either by the host kernel or userspace, such as
      assigned to a VM through vfio-pci.  In this latter case, the VFs may
      be removed either by shutting down the VM or hot-unplugging the
      devices from the VM.  Unfortunately in the case of a Windows 2012 R2
      guest, hot-unplug is broken due to the ordering of the PF driver
      teardown.  Disabling SR-IOV prior to unregister_netdev() avoids this
      issue.

      Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx>
      Acked-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Krishneil Singh <krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 4ccc650cc845476885f73660b2e6335852f0f75c
  Author: Don Skidmore <donald.c.skidmore@xxxxxxxxx>
  Date:   Wed Sep 2 13:47:54 2015 -0700

      ixgbe: fix issue with SFP events with new X550 devices

      Add checks for systems that don't have SFP's to avoid incorrectly
      acting on interrupts that are falsely interpreted as SFP events.
      This also includes a modified check generating the EICR mask to be
      more forward-looking.

      Signed-off-by: Don Skidmore <donald.c.skidmore@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 20471ed4d403a5f4de6aa0c10cd1e446f7f2b3c7
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:27 2015 +0200

      dccp: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@
      expression x;
      @@

      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);

      @@
      expression x;
      @@

      -if (x != NULL) {
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
        x = NULL;
      -}
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit adf78edac09f9640cd9676571586c4be46fb527c
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:18 2015 +0200

      net: core: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL) {
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
        x = NULL;
      -}
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 58d29e3ce903dcafacee9e355225d64922325cf0
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Sep 13 14:15:03 2015 +0200

      atm: he: drop null test before destroy functions

      Remove unneeded NULL test.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@ expression x; @@
      -if (x != NULL)
        \(kmem_cache_destroy\|mempool_destroy\|dma_pool_destroy\)(x);
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 982b527004826b40de1e821b123c70f05b41496c
  Author: Jesse Gross <jesse@xxxxxxxxxx>
  Date:   Fri Sep 11 18:38:28 2015 -0700

      openvswitch: Fix mask generation for nested attributes.

      Masks were added to OVS flows in a way that was backwards compatible
      with userspace programs that did not generate masks. As a result, it is
      possible that we may receive flows that do not have a mask and we need
      to synthesize one.

      Generating a mask requires iterating over attributes and descending into
      nested attributes. For each level we need to know the size to generate the
      correct mask. We do this with a linked table of attribute types.

      Although the logic to handle these nested attributes was there in concept,
      there are a number of bugs in practice. Examples include incomplete links
      between tables, variable length attributes being treated as nested and
      missing sanity checks.

      Signed-off-by: Jesse Gross <jesse@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 865ca084fdc68cd9b658da4b098008278da8fed3
  Author: Luck, Tony <tony.luck@xxxxxxxxx>
  Date:   Tue Sep 15 13:50:18 2015 -0700

      ia64: Enable userfaultfd and membarrier system calls

      Signed-off-by: Tony Luck <tony.luck@xxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 9fd60088ffed7573c2d409ddc63a2150a5edd5d8
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:26 2015 +0300

      iser-target: Skip data copy if all the command data comes as immediate

      Given that supporting zcopy immediate data for all IOs requires
      iser driver to use its own buffer allocations, we settle with
      avoiding data copy for IOs with data length of up to 8K (which
      is more latency sensitive anyway).

      This trims IO write latency by up to 3us and increase IOPs
      by up to 40% by saving CPU time doing sg_copy_from_buffer
      (8K IO size is the obvious winner here).

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit 4366b19ca5eb15e63d6640565ade135cf06be91a
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:25 2015 +0300

      iser-target: Change the recv buffers posting logic

      iser target batches post recv operations to avoid
      the overhead of acquiring the recv queue lock and
      posting a HW doorbell for each command.

      We change it to be per command in order to support
      zcopy immediate data for IOs that fits in the 8K
      transfer boundary (in the next patch).

      (Fix minor patch fuzz due to ib_mr removal - nab)

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit bd3792205aaeb79b994338af2e5499fa503d79c7
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:24 2015 +0300

      iser-target: Fix pending connections handling in target stack shutdown 
sequnce

      Instead of handing a connection to the iscsi stack
      for processing right after accepting (rdma_accept) we only hand
      the connection to the iscsi core after we reached to a connected
      state (ESTABLISHED CM event). This will prevent two error scenrios:

      1. race between rdma connection teardown and iscsi login sequence
         reported by Nic in: (ce9a9fc20a78a "iser-target: Fix REJECT CM event
         use-after-free OOPs")

      2. target stack shutdown sequence race with constant login attempts by
         multiple initiators.

      We address this by maintaining two queues at the isert_np level:
      - accepted: connections that were accepted but have not reached
        connected state (might get rejected, unreachable or error).
      - pending: connections in connected state, but have yet to handed
        to the iscsi core for login processing. iser connections are promoted
        to the pending queue only from the accepted queue.

      This way the iscsi core now will only handle functional iser connections
      and once we shutdown the target stack, we look for any stales that
      got left behind so we can safely release them.

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.10+
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit ed8cb0a4378c0e7035db047987fe0e7309020ab5
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:23 2015 +0300

      iser-target: Remove np_ prefix from isert_np members

      These are always referenced from np-> so no need
      for the prefix.

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit f27dfa1f0eb91494577a395e6b8a9aac2832e9cf
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:22 2015 +0300

      iser-target: Remove unused variables

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit 3e03c4b01da3e6a5f3081eb0aa252490fe83e352
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:21 2015 +0300

      iser-target: Put the reference on commands waiting for unsol data

      The iscsi target core teardown sequence calls wait_conn for
      all active commands to finish gracefully by:
      - move the queue-pair to error state
      - drain all the completions
      - wait for the core to finish handling all session commands

      However, when tearing down a session while there are sequenced
      commands that are still waiting for unsolicited data outs, we can
      block forever as these are missing an extra reference put.

      We basically need the equivalent of iscsit_free_queue_reqs_for_conn()
      which is called after wait_conn has returned. Address this by an
      explicit walk on conn_cmd_list and put the extra reference.

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.10+
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit a4c15cd957cbd728f685645de7a150df5912591a
  Author: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
  Date:   Sun Sep 6 14:52:20 2015 +0300

      iser-target: remove command with state ISTATE_REMOVE

      As documented in iscsit_sequence_cmd:
      /*
       * Existing callers for iscsit_sequence_cmd() will silently
       * ignore commands with CMDSN_LOWER_THAN_EXP, so force this
       * return for CMDSN_MAXCMDSN_OVERRUN as well..
       */

      We need to silently finish a command when it's in ISTATE_REMOVE.
      This fixes an teardown hang we were seeing where a mis-behaved
      initiator (triggered by allocation error injections) sent us a
      cmdsn which was lower than expected.

      Signed-off-by: Jenny Derzhavetz <jennyf@xxxxxxxxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.10+
      Signed-off-by: Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>

  commit d5566fd72ec1924958fcfd48b65c022c8f7eae64
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Fri Sep 11 16:48:48 2015 -0400

      rtnetlink: RTEXT_FILTER_SKIP_STATS support to avoid dumping inet/inet6 
stats

      Many commonly used functions like getifaddrs() invoke RTM_GETLINK
      to dump the interface information, and do not need the
      the AF_INET6 statististics that are always returned by default
      from rtnl_fill_ifinfo().

      Computing the statistics can be an expensive operation that impacts
      scaling, so it is desirable to avoid this if the information is
      not needed.

      This patch adds a the RTEXT_FILTER_SKIP_STATS extended info flag that
      can be passed with netlink_request() to avoid statistics computation
      for the ifinfo path.

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 892aa01df2ad67237f213c8f9d9b491e908aa910
  Author: Sjoerd Simons <sjoerd.simons@xxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 22:25:48 2015 +0200

      net: stmmac: Use msleep rather then udelay for reset delay

      The reset delays used for stmmac are in the order of 10ms to 1 second,
      which is far too long for udelay usage, so switch to using msleep.

      Practically this fixes the PHY not being reliably detected in some cases
      as udelay wouldn't actually delay for long enough to let the phy
      reliably be reset.

      Signed-off-by: Sjoerd Simons <sjoerd.simons@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d64f69b0373a7d0bcec8b5da7712977518a8f42b
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 15 14:44:29 2015 -0700

      rtnetlink: catch -EOPNOTSUPP errors from ndo_bridge_getlink

      problem reported:
        kernel 4.1.3
        ------------
        # bridge vlan
        port    vlan ids
        eth0     1 PVID Egress Untagged
                90
                91
                92
                93
                94
                95
                96
                97
                98
                99
                100

        vmbr0    1 PVID Egress Untagged
                94

        kernel 4.2
        -----------
        # bridge vlan
        port    vlan ids

      ndo_bridge_getlink can return -EOPNOTSUPP when an interfaces
      ndo_bridge_getlink op is set to switchdev_port_bridge_getlink
      and CONFIG_SWITCHDEV is not defined. This today can happen to
      bond, rocker and team devices. This patch adds -EOPNOTSUPP
      checks after calls to ndo_bridge_getlink.

      Fixes: 85fdb956726ff2a ("switchdev: cut over to new 
switchdev_port_bridge_getlink")
      Reported-by: Alexandre DERUMIER <aderumier@xxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit daf158d0d544cec80b7b30deff8cfc59a6e17610
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Tue Sep 15 22:41:21 2015 +0200

      net: mvneta: fix DMA buffer unmapping in mvneta_rx()

      This patch fixes a regression introduced by the commit a84e32894191
      ("net: mvneta: fix refilling for Rx DMA buffers"). Due to this commit
      the newly allocated Rx buffers are DMA-unmapped in place of those passed
      to the networking stack. Obviously, this causes data corruptions.

      This patch fixes the issue by ensuring that the right Rx buffers are
      DMA-unmapped.

      Reported-by: Oren Laskin <oren@xxxxxxxxxx>
      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Fixes: a84e32894191 ("net: mvneta: fix refilling for Rx DMA buffers")
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.8+
      Tested-by: Oren Laskin <oren@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 244b7f4324895e7c796cc94e8a8f70288ed20bdc
  Merge: e8684c8 70da5b5
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 14:53:46 2015 -0700

      Merge branch 'ip6tunnel_dst'

      Martin KaFai Lau says:

      ====================
      ipv6: Fix dst_entry refcnt bugs in ip6_tunnel

      v4:
      - Fix a compilation error in patch 5 when CONFIG_LOCKDEP is turned on and
        re-test it

      v3:
      - Merge a 'if else if' test in patch 4
      - Use rcu_dereference_protected in patch 5 to fix a sparse check when
        CONFIG_SPARSE_RCU_POINTER is enabled

      v2:
      - Add patch 4 and 5 to remove the spinlock

      v1:
      This patch series is to fix the dst refcnt bugs in ip6_tunnel.

      Patch 1 and 2 are the prep works.  Patch 3 is the fix.

      I can reproduce the bug by adding and removing the ip6gre tunnel
      while running a super_netperf TCP_CRR test.  I get the following
      trace by adding WARN_ON_ONCE(newrefcnt < 0) to dst_release():

      [  312.760432] ------------[ cut here ]------------
      [  312.774664] WARNING: CPU: 2 PID: 10263 at net/core/dst.c:288 
dst_release+0xf3/0x100()
      [  312.776041] Modules linked in: k10temp coretemp hwmon ip6_gre 
ip6_tunnel tunnel6 ipmi_devintf ipmi_ms\
      ghandler ip6table_filter ip6_tables xt_NFLOG nfnetlink_log nfnetlink 
xt_comment xt_statistic iptable_fil\
      ter ip_tables x_tables nfsv3 nfs_acl nfs fscache lockd grace mptctl 
netconsole autofs4 rpcsec_gss_krb5 a\
      uth_rpcgss oid_registry sunrpc ipv6 dm_mod loop iTCO_wdt 
iTCO_vendor_support serio_raw rtc_cmos pcspkr i\
      2c_i801 i2c_core lpc_ich mfd_core ehci_pci ehci_hcd e1000e mlx4_en ptp 
pps_core vxlan udp_tunnel ip6_udp\
      _tunnel mlx4_core sg button ext3 jbd mpt2sas raid_class
      [  312.785302] CPU: 2 PID: 10263 Comm: netperf Not tainted 
4.2.0-rc8-00046-g4db9b63-dirty #15
      [  312.791695] Hardware name: Quanta Freedom /Windmill-EP, BIOS F03_3B04 
09/12/2013
      [  312.792965]  ffffffff819dca2c ffff8811dfbdf6f8 ffffffff816537de 
ffff88123788fdb8
      [  312.794263]  0000000000000000 ffff8811dfbdf738 ffffffff81052646 
ffff8811dfbdf768
      [  312.795593]  ffff881203a98180 00000000ffffffff ffff88242927a000 
ffff88120a2532e0
      [  312.796946] Call Trace:
      [  312.797380]  [<ffffffff816537de>] dump_stack+0x45/0x57
      [  312.798288]  [<ffffffff81052646>] warn_slowpath_common+0x86/0xc0
      [  312.799699]  [<ffffffff8105273a>] warn_slowpath_null+0x1a/0x20
      [  312.800852]  [<ffffffff8159f9b3>] dst_release+0xf3/0x100
      [  312.801834]  [<ffffffffa03f1308>] ip6_tnl_dst_store+0x48/0x70 
[ip6_tunnel]
      [  312.803738]  [<ffffffffa03fd0b6>] ip6gre_xmit2+0x536/0x720 [ip6_gre]
      [  312.804774]  [<ffffffffa03fd40a>] ip6gre_tunnel_xmit+0x16a/0x410 
[ip6_gre]
      [  312.805986]  [<ffffffff8159934b>] dev_hard_start_xmit+0x23b/0x390
      [  312.808810]  [<ffffffff815a2f5f>] ? neigh_destroy+0xef/0x140
      [  312.809843]  [<ffffffff81599a6c>] __dev_queue_xmit+0x48c/0x4f0
      [  312.813931]  [<ffffffff81599ae3>] dev_queue_xmit_sk+0x13/0x20
      [  312.814993]  [<ffffffff815a0832>] neigh_direct_output+0x12/0x20
      [  312.817448]  [<ffffffffa021d633>] ip6_finish_output2+0x183/0x460 [ipv6]
      [  312.818762]  [<ffffffff81306fc5>] ? find_next_bit+0x15/0x20
      [  312.819671]  [<ffffffffa021fd79>] ip6_finish_output+0x89/0xe0 [ipv6]
      [  312.820720]  [<ffffffffa021fe14>] ip6_output+0x44/0xe0 [ipv6]
      [  312.821762]  [<ffffffff815c8809>] ? nf_hook_slow+0x69/0xc0
      [  312.823123]  [<ffffffffa021d232>] ip6_xmit+0x242/0x4c0 [ipv6]
      [  312.824073]  [<ffffffffa021c9f0>] ? ac6_proc_exit+0x20/0x20 [ipv6]
      [  312.825116]  [<ffffffffa024c751>] inet6_csk_xmit+0x61/0xa0 [ipv6]
      [  312.826127]  [<ffffffff815eb590>] tcp_transmit_skb+0x4f0/0x9b0
      [  312.827441]  [<ffffffff815ed267>] tcp_connect+0x637/0x7a0
      [  312.828327]  [<ffffffffa0245906>] tcp_v6_connect+0x2d6/0x550 [ipv6]
      [  312.829581]  [<ffffffff81606f05>] __inet_stream_connect+0x95/0x2f0
      [  312.830600]  [<ffffffff810ae13a>] ? hrtimer_try_to_cancel+0x1a/0xf0
      [  312.833456]  [<ffffffff812fba19>] ? timerqueue_add+0x59/0xb0
      [  312.834407]  [<ffffffff81607198>] inet_stream_connect+0x38/0x50
      [  312.835886]  [<ffffffff8157cb17>] SYSC_connect+0xb7/0xf0
      [  312.840035]  [<ffffffff810af6d3>] ? do_setitimer+0x1b3/0x200
      [  312.840983]  [<ffffffff810af75a>] ? alarm_setitimer+0x3a/0x70
      [  312.841941]  [<ffffffff8157d7ae>] SyS_connect+0xe/0x10
      [  312.842818]  [<ffffffff81659297>] entry_SYSCALL_64_fastpath+0x12/0x6a
      [  312.844206] ---[ end trace 43f3ecd86c3b1313 ]---
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70da5b5c532f0ec8aa76b4f46158da5f010f34b3
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:09 2015 -0700

      ipv6: Replace spinlock with seqlock and rcu in ip6_tunnel

      This patch uses a seqlock to ensure consistency between idst->dst and
      idst->cookie.  It also makes dst freeing from fib tree to undergo a
      rcu grace period.

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e3d5be7368107f0c27a1f8126d79b01a47e9567
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:08 2015 -0700

      ipv6: Avoid double dst_free

      It is a prep work to get dst freeing from fib tree undergo
      a rcu grace period.

      The following is a common paradigm:
      if (ip6_del_rt(rt))
        dst_free(rt)

      which means, if rt cannot be deleted from the fib tree, dst_free(rt) now.
      1. We don't know the ip6_del_rt(rt) failure is because it
         was not managed by fib tree (e.g. DST_NOCACHE) or it had already been
         removed from the fib tree.
      2. If rt had been managed by the fib tree, ip6_del_rt(rt) failure means
         dst_free(rt) has been called already.  A second
         dst_free(rt) is not always obviously safe.  The rt may have
         been destroyed already.
      3. If rt is a DST_NOCACHE, dst_free(rt) should not be called.
      4. It is a stopper to make dst freeing from fib tree undergo a
         rcu grace period.

      This patch is to use a DST_NOCACHE flag to indicate a rt is
      not managed by the fib tree.

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cdf3464e6c6bd764277cbbe992cd12da735b92fb
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:07 2015 -0700

      ipv6: Fix dst_entry refcnt bugs in ip6_tunnel

      Problems in the current dst_entry cache in the ip6_tunnel:

      1. ip6_tnl_dst_set is racy.  There is no lock to protect it:
         - One major problem is that the dst refcnt gets messed up. F.e.
           the same dst_cache can be released multiple times and then
           triggering the infamous dst refcnt < 0 warning message.
         - Another issue is the inconsistency between dst_cache and
           dst_cookie.

         It can be reproduced by adding and removing the ip6gre tunnel
         while running a super_netperf TCP_CRR test.

      2. ip6_tnl_dst_get does not take the dst refcnt before returning
         the dst.

      This patch:
      1. Create a percpu dst_entry cache in ip6_tnl
      2. Use a spinlock to protect the dst_cache operations
      3. ip6_tnl_dst_get always takes the dst refcnt before returning

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f230d1e891ba1da5953460516960894154f265db
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:06 2015 -0700

      ipv6: Rename the dst_cache helper functions in ip6_tunnel

      It is a prep work to fix the dst_entry refcnt bugs in
      ip6_tunnel.

      This patch rename:
      1. ip6_tnl_dst_check() to ip6_tnl_dst_get() to better
         reflect that it will take a dst refcnt in the next patch.
      2. ip6_tnl_dst_store() to ip6_tnl_dst_set() to have a more
         conventional name matching with ip6_tnl_dst_get().

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a3c119d392d7d7c68865fe76f5732ca9b8164d68
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Tue Sep 15 14:30:05 2015 -0700

      ipv6: Refactor common ip6gre_tunnel_init codes

      It is a prep work to fix the dst_entry refcnt bugs in ip6_tunnel.

      This patch refactors some common init codes used by both
      ip6gre_tunnel_init and ip6gre_tap_init.

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 09a77a885233e2a20dac2635a79c83ccf50a26a1
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 16:03:36 2015 +0100

      modsign: Fix GPL/OpenSSL licence incompatibility

      The GPL does not permit us to link against the OpenSSL library. Use
      LGPL for sign-file and extract-file instead.

      [ The whole "openssl isn't compatible with gpl" is really just
        fear-mongering, but there's no reason not to make modsign LGPL, so
        nobody cares.  - Linus ]

      Reported-by: Julian Andres Klode <jak@xxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Reviewed-by: Julian Andres Klode <jak@xxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit ad1e7b97b3adb91d46f3adb70a7867a50fc274cf
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:25:03 2015 -0700

      cdc: Fix build warning.

         In file included from drivers/usb/gadget/function/u_serial.h:16:0,
                          from drivers/usb/gadget/function/f_acm.c:23:
      >> include/linux/usb/cdc.h:47:5: warning: 'struct usb_interface' declared 
inside parameter list
              int buflen);
              ^
      >> include/linux/usb/cdc.h:47:5: warning: its scope is only this 
definition or declaration, which is probably not what you want

      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8b711d6db5c78a6d1969fb0fccb93daa7df53762
  Author: Joe Perches <joe@xxxxxxxxxxx>
  Date:   Wed Sep 9 17:40:56 2015 -0700

      mv643xx_eth: Neaten mv643xx_eth_program_multicast_filter

      The code around the allocation and loops are a bit obfuscated.

      Neaten it by using:

      o kcalloc with decimal count and sizeof(u32)
      o Decimal loop indexing and i++ not i += 4
      o A promiscuous block using a similar style
        to the multicast block
      o Remove unnecessary variables

      Signed-off-by: Joe Perches <joe@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 29feb66a9afbe69d3aeb2550f2e0ea20d4782ead
  Merge: 7b6ee48 e63c7a0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:47:47 2015 -0700

      Merge branch 'xgene-2nd-10gbe-port'

      Iyappan Subramanian says:

      ====================
      driver: net: xgene: Enable 2nd 10GbE port on APM X-Gene SoC

      This patch adds support for 2nd 10GbE on APM X-Gene SoC
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e63c7a0979f28bb13e06b981765dd514c01c075b
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Tue Sep 8 15:50:27 2015 -0700

      dtb: xgene: Add 2nd 10GbE node

      Adding the second 10GbE dt node for APM X-Gene SoC device tree

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 149e9ab495a4ba50fc6b52cb9b2710566adcf56e
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Tue Sep 8 15:50:26 2015 -0700

      driver: net: xgene: Add support for 2nd 10GbE port

      Adding support for the second 10GbE port on APM X-Gene SoC

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b6ee48d3f4d432bfa6c9c9662fbdbd97681240e
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:42 2015 +0200

      cdc-phonet: use common parser

      This moves cdc-phonet to the common parser for CDC users
      to reduce code duplication.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8492ed45aa5dbb5c4f0786f90ff12d8511615505
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:41 2015 +0200

      qmi-wwan: use common parser

      This moves qmi-wwan to the common parser for CDC user
      to reduce code duplication.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 823bd3433424aa959499e6fd8f2da842430a8d42
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:40 2015 +0200

      cdc-ether: switch to common CDC parser

      This patch uses the common parser to parse extra CDC
      headers in order to reduce code duplication.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77b0a099674ac1c43b631445d8d50453e4805b29
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:39 2015 +0200

      cdc-ncm: use common parser

      This moves cdc-ncm to the common parser for CDC user
      to reduce code duplication.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c40a2c8817e42273a4627c48c884b805475a733f
  Author: Oliver Neukum <oneukum@xxxxxxxx>
  Date:   Mon Sep 7 16:05:38 2015 +0200

      CDC: common parser for extra headers

      CDC drivers all implement their own parser for the extra headers.
      This patch fixes the code duplication introducing a single common
      parser in usbnet.

      Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d147ccbfc35d7d45c87fb0c767e6e40c316aa32
  Author: Mugunthan V N <mugunthanvnm@xxxxxx>
  Date:   Mon Sep 7 15:16:44 2015 +0530

      drivers: net: cpsw: Add support to drive gpios for ethernet to be 
functional

      In DRA72x EVM, by default slave 1 is connected to the onboard
      phy, but slave 2 pins are also muxed with video input module
      which is controlled by pcf857x gpio and currently to select slave
      0 to connect to phy gpio hogging is used, but with
      omap2plus_defconfig the pcf857x gpio is built as module. So when
      using NFS on DRA72x EVM, board doesn't boot as gpio hogging do
      not set proper gpio state to connect slave 0 to phy as it is
      built as module and you do not see any errors for not setting
      gpio and just mentions dhcp reply not got.

      To solve this issue, introducing "mode-gpios" in DT when gpio
      based muxing is required. This will throw a warning when gpio
      get fails and returns probe defer. When gpio-pcf857x module is
      installed, cpsw probes again and ethernet becomes functional.
      Verified this on DRA72x with pcf as module and ramdisk.

      Signed-off-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e75f3c39d33360075d6543529d40b5299f92622
  Merge: c36ba66 2b8157b
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 12:04:22 2015 -0700

      Merge branch 'dsa-mv88e6xxx-ATU'

      Vivien Didelot says:

      ====================
      net: dsa: mv88e6xxx: improve ATU move operations

      This patchset completes the set of available Address Translation Unit
      operations.

      These Marvell switches have 4 operations to flush or (re)move, all or
      only non-static MAC addresses, from the entire set of databases or from
      just a particular one.

      The first 3 patches introduce a generic _mv88e6xxx_atu_flush_move
      function. The 4 remaining patches update a few FID operations in the
      driver on setup, when a port join or leave a VLAN, or change state.

      This is a step forward improving the hardware bridging support in DSA
      and 88E6352-compatible switches.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2b8157b1c20bdac0e0b856b2cb1499c7f18f2b07
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:16 2015 -0400

      net: dsa: mv88e6xxx: remove all MACs when disabling a port

      When we're moving a port from Learning or Forwarding state to Disabled
      or Blocking or Listening state, remove all non-static MAC addresses
      mapped to this port in the entire set of databases, not only one.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f4d55d2869d86bd5dc59ff28109f7fefedc325d
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:15 2015 -0400

      net: dsa: mv88e6xxx: remove addresses when a port leaves a VLAN

      Add a new _mv88e6xxx_atu_move function to prepare the ATU data register
      for the move operation. The ports vector will contain the source port
      and destination port of the Move operation. If the destination port is
      0xF, the MAC addresses mapped to the source port are removed for the
      address database(s).

      Then add a _mv88e6xxx_atu_remove wrapper to remove the MAC addresses
      from a VLAN database that are mapped to a given port, when it leaves it.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7c400018c003d221a2db1ce46a5b88d7a37add1c
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:14 2015 -0400

      net: dsa: mv88e6xxx: flush all addresses when adding a VLAN

      When choosing an address database for a new VLAN, flush every entries,
      not only the non-static ones.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c161d0a5edf35dfbb18e859825355791dd6fb2cc
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:13 2015 -0400

      net: dsa: mv88e6xxx: flush ATU on initial setup

      Purge all MAC addresses from the entire set of address databases when
      the driver initializes the device.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7fb5e755153d7b40dd321f7c766dbd4e76c66711
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:12 2015 -0400

      net: dsa: mv88e6xxx: rework ATU Flush operation

      These Marvell switches have 4 operations to flush or (re)move, all or
      only non-static MAC addresses, from the entire set of databases or from
      just a particular one.

      The value of the EntryState bits will determine if the operation is
      either a Flush (0x0) or a Move (0xF).

      When moving entries from one port to another, entries will be removed if
      the destination port is 0xF.

      This patch renames these operations for consistency, add a new generic
      _mv88e6xxx_atu_flush_move function, and change _mv88e6xxx_flush_fid to
      use it.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 37705b731500b0ce9fb4ead21a7cdfc241a401fe
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:11 2015 -0400

      net: dsa: mv88e6xxx: extract ATU data write access

      Other ATU commands need to write the ATU data register. To ease the
      introduction of such commands, extract the ATU data write access from
      _mv88e6xxx_atu_load to its own function.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70cc99d10ca17b8688575d2579e5a2f6c4fa6f29
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:34:10 2015 -0400

      net: dsa: mv88e6xxx: extract FID write from ATU command

      Not every ATU commands apply to an FID, thus remove the FID writing from
      mv88e6xxx_atu_cmd and write it explicitly where needed, in order to ease
      introduction of such commands.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c36ba6603a1154ac617d023bbcc062a12afb258b
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 13:58:36 2015 -0700

      net: Allow user to get table id from route lookup

      rt_fill_info which is called for 'route get' requests hardcodes the
      table id as RT_TABLE_MAIN which is not correct when multiple tables
      are used. Use the newly added table id in the rtable to send back
      the correct table similar to what is done for IPv6.

      To maintain current ABI a new request flag, RTM_F_LOOKUP_TABLE, is
      added to indicate the actual table is wanted versus the hardcoded
      response.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b7503e0cdb5dbec5d201aa69d8888c14679b5ae8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 13:58:35 2015 -0700

      net: Add FIB table id to rtable

      Add the FIB table id to rtable to make the information available for
      IPv4 as it is for IPv6.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d08c4f355403840fad98d9918db51a7113f38ee8
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 13:58:34 2015 -0700

      net: Refactor rtable initialization

      All callers to rt_dst_alloc have nearly the same initialization following
      a successful allocation. Consolidate it into rt_dst_alloc.

      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 237865f195f6b10e4724ce49eeb3972641da882a
  Author: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
  Date:   Tue Sep 15 13:18:04 2015 -0500

      PCI: Revert "PCI: Call pci_read_bridge_bases() from core instead of arch 
code"

      Revert dff22d2054b5 ("PCI: Call pci_read_bridge_bases() from core instead
      of arch code").

      Reading PCI bridge windows is not arch-specific in itself, but there is 
PCI
      core code that doesn't work correctly if we read them too early.  For
      example, Hannes found this case on an ARM Freescale i.mx6 board:

        pci_bus 0000:00: root bus resource [mem 0x01000000-0x01efffff]
        pci 0000:00:00.0: PCI bridge to [bus 01-ff]
        pci 0000:00:00.0: BAR 8: no space for [mem size 0x01000000] (mem window)
        pci 0000:01:00.0: BAR 2: failed to assign [mem size 0x00200000]
        pci 0000:01:00.0: BAR 1: failed to assign [mem size 0x00004000]
        pci 0000:01:00.0: BAR 0: failed to assign [mem size 0x00000100]

      The 00:00.0 mem window needs to be at least 3MB: the 01:00.0 device needs
      0x204100 of space, and mem windows are megabyte-aligned.

      Bus sizing can increase a bridge window size, but never *decrease* it (see
      d65245c3297a ("PCI: don't shrink bridge resources")).  Prior to
      dff22d2054b5, ARM didn't read bridge windows at all, so the "original 
size"
      was zero, and we assigned a 3MB window.

      After dff22d2054b5, we read the bridge windows before sizing the bus.  The
      firmware programmed a 16MB window (size 0x01000000) in 00:00.0, and since
      we never decrease the size, we kept 16MB even though we only needed 3MB.
      But 16MB doesn't fit in the host bridge aperture, so we failed to assign
      space for the window and the downstream devices.

      I think this is a defect in the PCI core: we shouldn't rely on the 
firmware
      to assign sensible windows.

      Ray reported a similar problem, also on ARM, with Broadcom iProc.

      Issues like this are too hard to fix right now, so revert dff22d2054b5.

      Reported-by: Hannes <oe5hpm@xxxxxxxxx>
      Reported-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/CAAa04yFQEUJm7Jj1qMT57-LG7ZGtnhNDBe=PpSRa70Mj+XhW-A@xxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/55F75BB8.4070405@xxxxxxxxxxxx
      Signed-off-by: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Acked-by: Yinghai Lu <yinghai@xxxxxxxxxx>
      Acked-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>

  commit 6584d84c3e504c76ad291cc2e381bbeed59798ab
  Author: Huang Shijie <shijie.huang@xxxxxxx>
  Date:   Tue Sep 1 10:35:50 2015 +0800

      genirq: Update the comment for generic_handle_irq_desc

      __do_IRQ() was removed by commit 1c77ff2 "genirq: Remove __do_IRQ",
      but the comment referring to __do_IRQ() was left.

      Update the comment for generic_handle_irq_desc().

      Signed-off-by: Huang Shijie <shijie.huang@xxxxxxx>
      Cc: jiang.liu@xxxxxxxxxxxxxxx
      Cc: peterz@xxxxxxxxxxxxx
      Cc: rafael.j.wysocki@xxxxxxxxx
      Cc: jason@xxxxxxxxxxxxxx
      Cc: marc.zyngier@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441074950-3893-1-git-send-email-shijie.huang@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 3829c664b1eec243f2a355829efa40f0f414de8d
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:47:24 2015 +0200

      genirq: Remove stale comment

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 4cd7863ecb90010533c178fba6ecc84d5529b402
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Sep 8 19:00:36 2015 +0200

      irqchip/renesas-irqc: Propagate wake-up settings to parent

      The renesas-irqc interrupt controller is cascaded to the GIC, but its
      driver doesn't propagate wake-up settings to the parent interrupt
      controller.

      Since commit aec89ef72ba6c944 ("irqchip/gic: Enable SKIP_SET_WAKE and
      MASK_ON_SUSPEND"), the GIC driver masks interrupts during suspend, and
      wake-up through gpio-keys now fails on r8a73a4/ape6evm.

      Fix this by propagating wake-up settings to the parent interrupt
      controller. There's no need to handle irq_set_irq_wake() failures, as
      the renesas-irqc interrupt controller is always cascaded to a GIC, and
      the GIC driver always sets SKIP_SET_WAKE since the aforementioned
      commit.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Sudeep Holla <sudeep.holla@xxxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441731636-17610-3-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit f4e209cdc7a00f934007f40cf885471799073b0d
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Sep 8 19:00:35 2015 +0200

      irqchip/renesas-intc-irqpin: Propagate wake-up settings to parent

      The renesas-intc-irqpin interrupt controller is cascaded to the GIC, but
      its driver doesn't propagate wake-up settings to the parent interrupt
      controller.

      Since commit aec89ef72ba6c944 ("irqchip/gic: Enable SKIP_SET_WAKE and
      MASK_ON_SUSPEND"), the GIC driver masks interrupts during suspend, and
      wake-up through gpio-keys now fails on r8a7740/armadillo and
      sh73a0/kzm9g.

      Fix this by propagating wake-up settings to the parent interrupt
      controller. There's no need to handle irq_set_irq_wake() failures, as
      the renesas-intc-irqpin interrupt controller is always cascaded to a
      GIC, and the GIC driver always sets SKIP_SET_WAKE since the
      aforementioned commit.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Sudeep Holla <sudeep.holla@xxxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441731636-17610-2-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 769b5cf78e6c653c2f513649ee6c4e7a06723872
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Wed Sep 9 13:42:54 2015 +0200

      irqchip/renesas-intc-irqpin: Use a separate lockdep class

      The renesas-intc-irqpin interrupt controller is cascaded to the GIC.
      Hence when propagating wake-up settings to its parent interrupt
      controller, the following lockdep warning is printed:

          =============================================
          [ INFO: possible recursive locking detected ]
          4.2.0-armadillo-10725-g50fcd7643c034198 #781 Not tainted
          ---------------------------------------------
          s2ram/1179 is trying to acquire lock:
          (&irq_desc_lock_class){-.-...}, at: [<c005bb54>] 
__irq_get_desc_lock+0x78/0x94

          but task is already holding lock:
          (&irq_desc_lock_class){-.-...}, at: [<c005bb54>] 
__irq_get_desc_lock+0x78/0x94

          other info that might help us debug this:
          Possible unsafe locking scenario:

          CPU0
          ----
           lock(&irq_desc_lock_class);
           lock(&irq_desc_lock_class);

          *** DEADLOCK ***

          May be due to missing lock nesting notation

          7 locks held by s2ram/1179:
          #0:  (sb_writers#7){.+.+.+}, at: [<c00c9708>] 
__sb_start_write+0x64/0xb8
          #1:  (&of->mutex){+.+.+.}, at: [<c0125a00>] 
kernfs_fop_write+0x78/0x1a0
          #2:  (s_active#23){.+.+.+}, at: [<c0125a08>] 
kernfs_fop_write+0x80/0x1a0
          #3:  (autosleep_lock){+.+.+.}, at: [<c0058244>] 
pm_autosleep_lock+0x18/0x20
          #4:  (pm_mutex){+.+.+.}, at: [<c0057e50>] pm_suspend+0x54/0x248
          #5:  (&dev->mutex){......}, at: [<c0243a20>] 
__device_suspend+0xdc/0x240
          #6:  (&irq_desc_lock_class){-.-...}, at: [<c005bb54>] 
__irq_get_desc_lock+0x78/0x94

          stack backtrace:
          CPU: 0 PID: 1179 Comm: s2ram Not tainted 
4.2.0-armadillo-10725-g50fcd7643c034198

          Hardware name: Generic R8A7740 (Flattened Device Tree)
          [<c00129f4>] (dump_backtrace) from [<c0012bec>] (show_stack+0x18/0x1c)
          [<c0012bd4>] (show_stack) from [<c03f5d94>] (dump_stack+0x20/0x28)
          [<c03f5d74>] (dump_stack) from [<c00514d4>] 
(__lock_acquire+0x67c/0x1b88)
          [<c0050e58>] (__lock_acquire) from [<c0052df8>] 
(lock_acquire+0x9c/0xbc)
          [<c0052d5c>] (lock_acquire) from [<c03fb068>] 
(_raw_spin_lock_irqsave+0x44/0x58)
          [<c03fb024>] (_raw_spin_lock_irqsave) from [<c005bb54>] 
(__irq_get_desc_lock+0x78/0x94
          [<c005badc>] (__irq_get_desc_lock) from [<c005c3d8>] 
(irq_set_irq_wake+0x28/0x100)
          [<c005c3b0>] (irq_set_irq_wake) from [<c01e50d0>] 
(intc_irqpin_irq_set_wake+0x24/0x4c)
          [<c01e50ac>] (intc_irqpin_irq_set_wake) from [<c005c17c>] 
(set_irq_wake_real+0x3c/0x50
          [<c005c140>] (set_irq_wake_real) from [<c005c414>] 
(irq_set_irq_wake+0x64/0x100)
          [<c005c3b0>] (irq_set_irq_wake) from [<c02a19b4>] 
(gpio_keys_suspend+0x60/0xa0)
          [<c02a1954>] (gpio_keys_suspend) from [<c023b750>] 
(platform_pm_suspend+0x3c/0x5c)

      Avoid this false positive by using a separate lockdep class for INTC
      External IRQ Pin interrupts.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441798974-25716-3-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b1370658804510f6a1c0517a8ff1c9534d371edd
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Wed Sep 9 13:42:53 2015 +0200

      irqchip/renesas-irqc: Use a separate lockdep class

      The renesas-irqc interrupt controller is cascaded to the GIC. Hence when
      propagating wake-up settings to its parent interrupt controller, the
      following lockdep warning is printed:

          =============================================
          [ INFO: possible recursive locking detected ]
          4.2.0-ape6evm-10725-g50fcd7643c034198 #280 Not tainted
          ---------------------------------------------
          s2ram/1072 is trying to acquire lock:
          (&irq_desc_lock_class){-.-...}, at: [<c008d3fc>] 
__irq_get_desc_lock+0x58/0x98

          but task is already holding lock:
          (&irq_desc_lock_class){-.-...}, at: [<c008d3fc>] 
__irq_get_desc_lock+0x58/0x98

          other info that might help us debug this:
          Possible unsafe locking scenario:

          CPU0
          ----
           lock(&irq_desc_lock_class);
           lock(&irq_desc_lock_class);

          *** DEADLOCK ***

          May be due to missing lock nesting notation

          6 locks held by s2ram/1072:
          #0:  (sb_writers#7){.+.+.+}, at: [<c012eb14>] 
__sb_start_write+0xa0/0xa8
          #1:  (&of->mutex){+.+.+.}, at: [<c019396c>] 
kernfs_fop_write+0x4c/0x1bc
          #2:  (s_active#24){.+.+.+}, at: [<c0193974>] 
kernfs_fop_write+0x54/0x1bc
          #3:  (pm_mutex){+.+.+.}, at: [<c008213c>] pm_suspend+0x10c/0x510
          #4:  (&dev->mutex){......}, at: [<c02af3c4>] 
__device_suspend+0xdc/0x2cc
          #5:  (&irq_desc_lock_class){-.-...}, at: [<c008d3fc>] 
__irq_get_desc_lock+0x58/0x98

          stack backtrace:
          CPU: 0 PID: 1072 Comm: s2ram Not tainted 
4.2.0-ape6evm-10725-g50fcd7643c034198 #280
          Hardware name: Generic R8A73A4 (Flattened Device Tree)
          [<c0018078>] (unwind_backtrace) from [<c00144f0>] 
(show_stack+0x10/0x14)
          [<c00144f0>] (show_stack) from [<c0451f14>] (dump_stack+0x88/0x98)
          [<c0451f14>] (dump_stack) from [<c007b29c>] 
(__lock_acquire+0x15cc/0x20e4)
          [<c007b29c>] (__lock_acquire) from [<c007c6e0>] 
(lock_acquire+0xac/0x12c)
          [<c007c6e0>] (lock_acquire) from [<c0457c00>] 
(_raw_spin_lock_irqsave+0x40/0x54)
          [<c0457c00>] (_raw_spin_lock_irqsave) from [<c008d3fc>] 
(__irq_get_desc_lock+0x58/0x98)
          [<c008d3fc>] (__irq_get_desc_lock) from [<c008ebbc>] 
(irq_set_irq_wake+0x20/0xf8)
          [<c008ebbc>] (irq_set_irq_wake) from [<c0260770>] 
(irqc_irq_set_wake+0x20/0x4c)
          [<c0260770>] (irqc_irq_set_wake) from [<c008ec28>] 
(irq_set_irq_wake+0x8c/0xf8)
          [<c008ec28>] (irq_set_irq_wake) from [<c02cb8c0>] 
(gpio_keys_suspend+0x74/0xc0)
          [<c02cb8c0>] (gpio_keys_suspend) from [<c02ae8cc>] 
(dpm_run_callback+0x54/0x124)

      Avoid this false positive by using a separate lockdep class for IRQC
      interrupts.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441798974-25716-2-git-send-email-geert%2Brenesas@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 157add60cb35913b8a848a3d7e6456b8ed134796
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Sun Sep 13 12:14:33 2015 +0100

      irqchip/GICv2m: Fix GICv2m build warning on 32 bits

      After GICv2m was enabled for 32-bit ARM kernel, a warning popped up:

      drivers/irqchip/irq-gic-v2m.c: In function gicv2m_compose_msi_msg:
      drivers/irqchip/irq-gic-v2m.c:100:2: warning: right shift count >= width
      of type [enabled by default]
        msg->address_hi = (u32) (addr >> 32);
        ^

      This patch fixes it by using proper macros for splitting up the value.

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Stuart Yoder <stuart.yoder@xxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442142873-20213-4-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 5a9a8915c8888b615521b17d70a4342187eae60b
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Sun Sep 13 12:14:32 2015 +0100

      irqchip/gic-v3-its: Add missing cache flushes

      When the ITS is configured for non-cacheable transactions, make sure
      that the allocated, zeroed memory is flushed to the Point of
      Coherency, allowing the ITS to observe the zeros instead of random
      garbage (or even get its own data overwritten by zeros being evicted
      from the cache...).

      Fixes: 241a386c7dbb "irqchip: gicv3-its: Use non-cacheable accesses when 
no shareability"
      Reported-and-tested-by: Stuart Yoder <stuart.yoder@xxxxxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442142873-20213-3-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 12e14066f4835f5ee1ca795f0309415b54c067a9
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Sun Sep 13 12:14:31 2015 +0100

      irqchip/GIC: Add workaround for aliased GIC400

      The GICv2 architecture mandates that the two 4kB GIC regions are
      contiguous, and on two separate physical pages (so that access to
      the second page can be trapped by a hypervisor). This doesn't work
      very well when PAGE_SIZE is 64kB.

      A relatively common hack^Wway to work around this is to alias each
      4kB region over its own 64kB page. Of course in this case, the base
      address you want to use is not really the begining of the region,
      but base + 60kB (so that you get a contiguous 8kB region over two
      distinct pages).

      Normally, this would be described in DT with a new property, but
      some HW is already out there, and the firmware makes sure that
      it will override whatever you put in the GIC node. Duh. And of course,
      said firmware source code is not available, despite being based
      on u-boot.

      The workaround is to detect the case where the CPU interface size
      is set to 128kB, and verify the aliasing by checking that the ID
      register for GIC400 (which is the only GIC wired this way so far)
      is the same at base and base + 0xF000. In this case, we update
      the GIC base address and let it roll.

      And if you feel slightly sick by looking at this, rest assured that
      I do too...

      Reported-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Stuart Yoder <stuart.yoder@xxxxxxxxxxxxx>
      Cc: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442142873-20213-2-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit e4084a16bbe07957811c75dfb7c9bf25c5862ba0
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Sun Sep 13 13:37:03 2015 +0100

      platform-msi: Do not cache msi_desc in handler_data

      The current implementation of platform MSI caches the msi_desc
      pointer in irq_data::handler_data. This is a bit silly, as
      we also have irq_data::msi_desc, which is perfectly valid.

      Remove the useless assignment and simplify the whole flow.

      Reported-by: Ma Jun <majun258@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reviewed-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1442147824-20971-1-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit dc2ec62f75fd9be78d07b3b453aeb0d201ead419
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 13:34:05 2015 +0200

      net/mlx4_en: Use access helper irq_data_get_affinity_mask()

      This is a preparatory patch for moving irq_data struct members. Search
      and replace was done with coccinelle

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Amir Vadai <amirv@xxxxxxxxxxxx>

  commit da92b4eb7e2ec9866f14a0c8f453788e8052dee7
  Author: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
  Date:   Mon Jun 1 16:05:33 2015 +0800

      powerpc, irq: Use access helper irq_data_get_affinity_mask()

      Use access helper irq_data_get_affinity_mask() so we can move the
      affinity mask to irq_common_data.

      Signed-off-by: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1433145945-789-25-git-send-email-jiang.liu@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 8f4216c7d28976f7ec1b2bcbfa0a9f787133c45e
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Tue Sep 15 14:41:57 2015 +0800

      kvm: fix zero length mmio searching

      Currently, if we had a zero length mmio eventfd assigned on
      KVM_MMIO_BUS. It will never be found by kvm_io_bus_cmp() since it
      always compares the kvm_io_range() with the length that guest
      wrote. This will cause e.g for vhost, kick will be trapped by qemu
      userspace instead of vhost. Fixing this by using zero length if an
      iodevice is zero length.

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit eefd6b06b17c5478e7c24bea6f64beaa2c431ca6
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Tue Sep 15 14:41:56 2015 +0800

      kvm: fix double free for fast mmio eventfd

      We register wildcard mmio eventfd on two buses, once for KVM_MMIO_BUS
      and once on KVM_FAST_MMIO_BUS but with a single iodev
      instance. This will lead to an issue: kvm_io_bus_destroy() knows
      nothing about the devices on two buses pointing to a single dev. Which
      will lead to double free[1] during exit. Fix this by allocating two
      instances of iodevs then registering one on KVM_MMIO_BUS and another
      on KVM_FAST_MMIO_BUS.

      CPU: 1 PID: 2894 Comm: qemu-system-x86 Not tainted 3.19.0-26-generic 
#28-Ubuntu
      Hardware name: LENOVO 2356BG6/2356BG6, BIOS G7ET96WW (2.56 ) 09/12/2013
      task: ffff88009ae0c4b0 ti: ffff88020e7f0000 task.ti: ffff88020e7f0000
      RIP: 0010:[<ffffffffc07e25d8>]  [<ffffffffc07e25d8>] 
ioeventfd_release+0x28/0x60 [kvm]
      RSP: 0018:ffff88020e7f3bc8  EFLAGS: 00010292
      RAX: dead000000200200 RBX: ffff8801ec19c900 RCX: 000000018200016d
      RDX: ffff8801ec19cf80 RSI: ffffea0008bf1d40 RDI: ffff8801ec19c900
      RBP: ffff88020e7f3bd8 R08: 000000002fc75a01 R09: 000000018200016d
      R10: ffffffffc07df6ae R11: ffff88022fc75a98 R12: ffff88021e7cc000
      R13: ffff88021e7cca48 R14: ffff88021e7cca50 R15: ffff8801ec19c880
      FS:  00007fc1ee3e6700(0000) GS:ffff88023e240000(0000) 
knlGS:0000000000000000
      CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      CR2: 00007f8f389d8000 CR3: 000000023dc13000 CR4: 00000000001427e0
      Stack:
      ffff88021e7cc000 0000000000000000 ffff88020e7f3be8 ffffffffc07e2622
      ffff88020e7f3c38 ffffffffc07df69a ffff880232524160 ffff88020e792d80
       0000000000000000 ffff880219b78c00 0000000000000008 ffff8802321686a8
      Call Trace:
      [<ffffffffc07e2622>] ioeventfd_destructor+0x12/0x20 [kvm]
      [<ffffffffc07df69a>] kvm_put_kvm+0xca/0x210 [kvm]
      [<ffffffffc07df818>] kvm_vcpu_release+0x18/0x20 [kvm]
      [<ffffffff811f69f7>] __fput+0xe7/0x250
      [<ffffffff811f6bae>] ____fput+0xe/0x10
      [<ffffffff81093f04>] task_work_run+0xd4/0xf0
      [<ffffffff81079358>] do_exit+0x368/0xa50
      [<ffffffff81082c8f>] ? recalc_sigpending+0x1f/0x60
      [<ffffffff81079ad5>] do_group_exit+0x45/0xb0
      [<ffffffff81085c71>] get_signal+0x291/0x750
      [<ffffffff810144d8>] do_signal+0x28/0xab0
      [<ffffffff810f3a3b>] ? do_futex+0xdb/0x5d0
      [<ffffffff810b7028>] ? __wake_up_locked_key+0x18/0x20
      [<ffffffff810f3fa6>] ? SyS_futex+0x76/0x170
      [<ffffffff81014fc9>] do_notify_resume+0x69/0xb0
      [<ffffffff817cb9af>] int_signal+0x12/0x17
      Code: 5d c3 90 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb 48 83 ec 08 48 8b 
7f 20 e8 06 d6 a5 c0 48 8b 43 08 48 8b 13 48 89 df 48 89 42 08 <48> 89 10 48 b8 
00 01 10 00 00
       RIP  [<ffffffffc07e25d8>] ioeventfd_release+0x28/0x60 [kvm]
       RSP <ffff88020e7f3bc8>

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 85da11ca587c8eb73993a1b503052391a73586f9
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Tue Sep 15 14:41:55 2015 +0800

      kvm: factor out core eventfd assign/deassign logic

      This patch factors out core eventfd assign/deassign logic and leaves
      the argument checking and bus index selection to callers.

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 8453fecbecae26edb3f278627376caab05d9a88d
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Tue Sep 15 14:41:54 2015 +0800

      kvm: don't try to register to KVM_FAST_MMIO_BUS for non mmio eventfd

      We only want zero length mmio eventfd to be registered on
      KVM_FAST_MMIO_BUS. So check this explicitly when arg->len is zero to
      make sure this.

      Cc: stable@xxxxxxxxxxxxxxx
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit d10bcd473301888f957ec4b6b12aa3621be78d59
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Sep 2 18:49:28 2015 +0100

      arm64: head.S: initialise mdcr_el2 in el2_setup

      When entering the kernel at EL2, we fail to initialise the MDCR_EL2
      register which controls debug access and PMU capabilities at EL1.

      This patch ensures that the register is initialised so that all traps
      are disabled and all the PMU counters are available to the host. When a
      guest is scheduled, KVM takes care to configure trapping appropriately.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 2314ee4d444e28d4670ff80c84df68c25887decb
  Author: Leo Yan <leo.yan@xxxxxxxxxx>
  Date:   Fri Aug 21 04:40:22 2015 +0100

      arm64: enable generic idle loop

      Enable generic idle loop for ARM64, so can support for hlt/nohlt
      command line options to override default idle loop behavior.

      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Leo Yan <leo.yan@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit c5e6bd2ed3e81df443e4ae11e95ed71ff77bf9e5
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:59:02 2015 +0300

      perf tests: Fix software clock events test setting maps

      The test titled "Test software clock events have valid period values"
      was setting cpu/thread maps directly.  Make it use the proper function
      perf_evlist__set_maps() especially now that it also propagates the maps.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-15-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2998272275fc31fc3d478ef9c95e7eaef67dafa3
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:59:01 2015 +0300

      perf tests: Fix task exit test setting maps

      The test titled "Test number of exit event of a simple workload" was
      setting cpu/thread maps directly.  Make it use the proper function
      perf_evlist__set_maps() especially now that it also propagates the maps.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-14-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8c0498b6891d7ca5c379c6283de7fc7fe8eebe5c
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:59:00 2015 +0300

      perf evlist: Fix create_syswide_maps() not propagating maps

      Fix it by making it call perf_evlist__set_maps() instead of setting the
      maps itself.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-13-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 44c42d71c659527c81bf169808959c9339116d85
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:59 2015 +0300

      perf evlist: Fix add() not propagating maps

      If evsels are added after maps are created, then they won't have any
      maps propagated to them.  Fix that.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-12-git-send-email-adrian.hunter@xxxxxxxxx
      [ Moved the moving of propagate_maps() to the patch before, so that this
        one does _just_ the one lile fix calling in add()]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit adc0c3e87b0e1baeccabe09b6dba738f17d0e91d
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:58 2015 +0300

      perf evlist: Factor out a function to propagate maps for a single evsel

      Subsequent fixes will need a function that just propagates maps for a
      single evsel so factor it out.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-11-git-send-email-adrian.hunter@xxxxxxxxx
      [ Moved them to before perf_evlist__add() to avoid having to move it in 
the next patch ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 74bfd2b25de354feb4484c553dce4fe8d9c3b60b
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:57 2015 +0300

      perf evlist: Make create_maps() use set_maps()

      Since there is a function to set maps, perf_evlist__create_maps() should
      use it.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-10-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 934e0f2053ce299893ca48a411bf7fdc8ac6254f
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:56 2015 +0300

      perf evlist: Make set_maps() more resilient

      Make perf_evlist__set_maps() more resilient by allowing for the
      possibility that one or another of the maps isn't being changed and
      therefore should not be "put".

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-9-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fce4d296b405b03fba033a55017348bf55b10db6
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:55 2015 +0300

      perf evsel: Add own_cpus member

      perf_evlist__propagate_maps() cannot easily tell if an evsel has its own
      cpu map.  To make that simpler, keep a copy of the PMU cpu map and
      adjust the propagation logic accordingly.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-8-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b278c364b35ae940b05f6a9edf8061fc886cd09e
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:54 2015 +0300

      perf evlist: Fix missing thread_map__put in propagate_maps()

      perf_evlist__propagate_maps() incorrectly assumes evsel->threads is NULL
      before reassigning it, but it won't be NULL when perf_evlist__set_maps()
      is used to set different (or NULL) maps.  Thus thread_map__put must be
      used, which works even if evsel->threads is NULL.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-7-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f114d6eff76d20b521d8716e969e71b1f56f82b5
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:53 2015 +0300

      perf evlist: Fix splice_list_tail() not setting evlist

      Commit d49e46950772 ("perf evsel: Add a backpointer to the evlist a
      evsel is in") updated perf_evlist__add() but not
      perf_evlist__splice_list_tail().

      This illustrates that it is better if perf_evlist__splice_list_tail()
      calls perf_evlist__add() instead of duplicating the logic, so do that.
      This will also simplify a subsequent fix for propagating maps.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-6-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ec9a77a7e3346a05b1287597982d0dd09dd1c3bd
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:52 2015 +0300

      perf evlist: Add has_user_cpus member

      Subsequent patches will need to call perf_evlist__propagate_maps without
      reference to a "target".  Add evlist->has_user_cpus to record whether
      the user has specified which cpus to target (and therefore whether that
      list of cpus should override the default settings for a selected event
      i.e. the cpu maps should be propagated)

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-5-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d5bc056e73841d4bc941474a342ef9b6a207ac84
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:51 2015 +0300

      perf evlist: Remove redundant validation from propagate_maps()

      The validation checks that the values that were just assigned, got
      assigned i.e. the error can't ever happen.  Subsequent patches will call
      this code in places where errors are not being returned.  Changing those
      code paths to return this non-existent error is counter-productive, so
      just remove it.

      That in turn results in perf_evlist__set_maps not needing to return an
      error, but callers aren't checking it either, so remove that too.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-4-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 725e06b2e2754fbff61521fa76fee51cee5bcb5f
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:50 2015 +0300

      perf evlist: Simplify set_maps() logic

      Don't need to check for NULL when "putting" evlist->maps and
      evlist->threads because the "put" functions already do that.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a69b09e2342a9c144b0291b9aeb849ab7d5843bf
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Sep 8 10:58:49 2015 +0300

      perf evlist: Simplify propagate_maps() logic

      If evsel->cpus is to be reassigned then the current value must be "put",
      which works even if it is NULL.  Simplify the current logic by moving
      the "put" next to the assignment.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441699142-18905-2-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit bbbe6bf6037d77816c4a19aaf35f4cecf662b49a
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Sun Sep 6 07:13:35 2015 +0000

      perf tools: Introduce regs_query_register_offset() for x86

      regs_query_register_offset() is a helper function which converts
      register name like "%rax" to offset of a register in 'struct pt_regs',
      which is required by BPF prologue generator. Since the function is
      identical, try to reuse the code in arch/x86/kernel/ptrace.c.

      Comment inside dwarf-regs.c list the differences between this
      implementation and kernel code.

      get_arch_regstr() switches to regoffset_table and the old string table
      is dropped.

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441523623-152703-20-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 63ab024a5b6f295ca17a293ad81b7c728f49a89a
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Mon Sep 14 23:02:49 2015 -0300

      perf tools: regs_query_register_offset() infrastructure

      regs_query_register_offset() is a helper function which converts
      register name like "%rax" to offset of a register in 'struct pt_regs',
      which is required by BPF prologue generator.

      PERF_HAVE_ARCH_REGS_QUERY_REGISTER_OFFSET indicates an architecture
      supports converting name of a register to its offset in 'struct
      pt_regs'.

      HAVE_ARCH_REGS_QUERY_REGISTER_OFFSET is introduced as the corresponding
      CFLAGS of PERF_HAVE_ARCH_REGS_QUERY_REGISTER_OFFSET.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441523623-152703-19-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      [ Extracted from eBPF patches ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 196581717d85f59365dc9303685cd5b1cdf106a3
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:07 2015 +0200

      perf tools: Enhance parsing events tracepoint error output

      Enhancing parsing events tracepoint error output. Adding
      more verbose output when the tracepoint is not found or
      the tracing event path cannot be access.

        $ sudo perf record -e sched:sched_krava ls
        event syntax error: 'sched:sched_krava'
                             \___ unknown tracepoint

        Error:  File 
/sys/kernel/debug/tracing//tracing/events/sched/sched_krava not found.
        Hint:   Perhaps this kernel misses some CONFIG_ setting to enable this 
feature?.

        Run 'perf list' for a list of valid events
        ...

        $ perf record -e sched:sched_krava ls
        event syntax error: 'sched:sched_krava'
                             \___ can't access trace events

        Error:  No permissions to read 
/sys/kernel/debug/tracing//tracing/events/sched/sched_krava
        Hint:   Try 'sudo mount -o remount,mode=755 /sys/kernel/debug'

        Run 'perf list' for a list of valid events
        ...

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-6-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8dd2a1317eba2c207632dcb19adb7cb746861652
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:06 2015 +0200

      perf evsel: Propagate error info from tp_format

      Propagate error info from tp_format via ERR_PTR to get it all the way
      down to the parse-event.c tracepoint adding routines. Following
      functions now return pointer with encoded error:

        - tp_format
        - trace_event__tp_format
        - perf_evsel__newtp_idx
        - perf_evsel__newtp

      This affects several other places in perf, that cannot use pointer check
      anymore, but must utilize the err.h interface, when getting error
      information from above functions list.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-5-git-send-email-jolsa@xxxxxxxxxx
      [ Add two missing ERR_PTR() and one IS_ERR() ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e2f9f8ea6a54e252e3a94a5c2321f673b5b97360
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:05 2015 +0200

      perf tools: Propagate error info for the tracepoint parsing

      Pass 'struct parse_events_error *error' to the parse-event.c tracepoint
      adding path. It will be filled with error data in following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Reviewed-by: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 01ca9fd41d6f2ad796a6b109b5253e06b6ae6dc7
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:03 2015 +0200

      tools: Add err.h with ERR_PTR PTR_ERR interface

      Adding part of the kernel's <linux/err.h> interface:

        inline void * __must_check ERR_PTR(long error);
        inline long   __must_check PTR_ERR(__force const void *ptr);
        inline bool   __must_check IS_ERR(__force const void *ptr);

      It will be used to propagate error through pointers in following
      patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Reviewed-by: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9bae1e8c3fe5359ce17309b894f54667fd563e98
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Sep 10 11:27:05 2015 +0900

      perf probe: Export init/exit_probe_symbol_maps()

      The init/exit_symbols_maps() functions are to setup and cleanup
      necessary info for probe events.  But they need to be called from out of
      the probe code now, so this patch exports them.

      However the names are too generic, so change them to have 'probe'. :)

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441852026-28974-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a43aac299c3abc09eff856039f5b72166b780d35
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Sep 10 11:27:04 2015 +0900

      perf probe: Free perf_probe_event in cleanup_perf_probe_events()

      The cleanup_perf_probe_events() frees all resources related to a perf
      probe event.  However it only freed resources in trace probe events, not
      perf probe events.  So call clear_perf_probe_event() too.

      Reported-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441852026-28974-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2cd55c68c0a49a75433b15c7dbd1991fef81e662
  Author: Ian Munsie <imunsie@xxxxxxxxxxx>
  Date:   Tue Sep 15 15:48:34 2015 +1000

      cxl: Fix build failure due to -Wunused-variable behaviour change

      A recent change in gcc caused this build failure:

      
/var/lib/jenkins/workspace/gcc_kernel_build/linux/drivers/misc/cxl/cxl.h:72:27:
      error: â??CXL_PSL_DLCNTLâ?? defined but not used 
[-Werror=unused-const-variable]
       static const cxl_p1_reg_t CXL_PSL_DLCNTL  = {0x0060};

      Because of this gcc commit:

      Commit 1bca8cbd0c68366f07277f98ce6963e10c2aa617 by mark
      PR28901 -Wunused-variable ignores unused const initialised variables in C
      12 years ago it was decided that -Wunused-variable shouldn't warn about
      static const variables because some code used const static char rcsid[]
      strings which were never used but wanted in the code anyway. But as the
      bug points out this hides some real bugs. These days the usage of
      rcsids is not very popular anymore. So this patch changes the default
      to warn about unused static const variables in C with
      -Wunused-variable. And it adds a new option -Wno-unused-const-variable
      to turn this warning off. For C++ this new warning is off by default,
      since const variables can be used as #defines in C++. New testcases for
      the new defaults in C and C++ are included testing the new warning and
      suppressing it with an unused attribute or using
      -Wno-unused-const-variable. gcc/ChangeLog

      The cxl driver uses static consts in place of #defines in some cases
      for type safety, so this change causes the driver to fail to build on
      new copilers as these constants are not all used in every file that
      imports the header. Suppress the warning for this driver to return to
      the old behaviour of -Wunused-variable.

      Reported-by: Anton Blanchard <anton@xxxxxxxxxxx>
      Signed-off-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 2925c2fdf1e0eb642482f5b30577e9435aaa8edb
  Author: Daniel Axtens <dja@xxxxxxxxxx>
  Date:   Tue Sep 15 15:04:07 2015 +1000

      cxl: Fix unbalanced pci_dev_get in cxl_probe

      Currently the first thing we do in cxl_probe is to grab a reference
      on the pci device. Later on, we call device_register on our adapter.
      In our remove path, we call device_unregister, but we never call
      pci_dev_put. We therefore leak the device every time we do a
      reflash.

      device_register/unregister is sufficient to hold the reference.
      Therefore, drop the call to pci_dev_get.

      Here's why this is safe.
      The proposed cxl_probe(pdev) calls cxl_adapter_init:
          a) init calls cxl_adapter_alloc, which creates a struct cxl,
             conventionally called adapter. This struct contains a
             device entry, adapter->dev.

          b) init calls cxl_configure_adapter, where we set
             adapter->dev.parent = &dev->dev (here dev is the pci dev)

      So at this point, the cxl adapter's device's parent is the PCI
      device that I want to be refcounted properly.

          c) init calls cxl_register_adapter
             *) cxl_register_adapter calls device_register(&adapter->dev)

      So now we're in device_register, where dev is the adapter device, and
      we want to know if the PCI device is safe after we return.

      device_register(&adapter->dev) calls device_initialize() and then
      device_add().

      device_add() does a get_device(). device_add() also explicitly grabs
      the device's parent, and calls get_device() on it:

               parent = get_device(dev->parent);

      So therefore, device_register() takes a lock on the parent PCI dev,
      which is what pci_dev_get() was guarding. pci_dev_get() can therefore
      be safely removed.

      Fixes: f204e0b8cedd ("cxl: Driver code for powernv PCIe based cards for 
userspace access")
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Daniel Axtens <dja@xxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit c1ceb5fff01c0357de0386f87a620a4636ca68d1
  Author: Nathan Sullivan <nathan.sullivan@xxxxxx>
  Date:   Mon Aug 31 09:49:52 2015 -0500

      Documentation: bindings: add doc for zynq USB

      Document the binding for the zynq specific chipidea UDC binding.

      Signed-off-by: Nathan Sullivan <nathan.sullivan@xxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit 84bc70f94d81f1d3107dbcdafc1b193169e82131
  Author: Nathan Sullivan <nathan.sullivan@xxxxxx>
  Date:   Mon Aug 31 09:49:51 2015 -0500

      usb: chipidea: add xilinx zynq platform data

      Due to having hardware tx buffers less than 512 bytes in size, streaming
      must be enabled on the Zynq for the udc to work at all.  Add platform data
      specific to the Zynq udc, which does not set the CI_HDRC_DISABLE_STREAMING
      flag.

      Based on a patch by the same name from the Xilinx vendor tree.

      Signed-off-by: Nathan Sullivan <nathan.sullivan@xxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit 56ffa1d154c7e12af16273f0cdc42690dd05caf5
  Author: Peter Chen <peter.chen@xxxxxxxxxxxxx>
  Date:   Mon Aug 24 14:10:07 2015 +0800

      usb: chipidea: udc: using the correct stall implementation

      According to spec, there are functional and protocol stalls.

      For functional stall, it is for bulk and interrupt endpoints,
      below are cases for it:
      - Host sends SET_FEATURE request for Set-Halt, the udc driver
      needs to set stall, and return true unconditionally.
      - The gadget driver may call usb_ep_set_halt to stall certain
      endpoints, if there is a transfer in pending, the udc driver
      should not set stall, and return -EAGAIN accordingly.
      These two kinds of stall need to be cleared by host using CLEAR_FEATURE
      request (Clear-Halt).

      For protocol stall, it is for control endpoint, this stall will
      be set if the control request has failed. This stall will be
      cleared by next setup request (hardware will do it).

      It fixed usbtest (drivers/usb/misc/usbtest.c) Test 13 "set/clear halt"
      test failure, meanwhile, this change has been verified by
      USB2 CV Compliance Test and MSC Tests.

      Cc: <stable@xxxxxxxxxxxxxxx> #3.10+
      Cc: Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
      Cc: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit e30f3963f2c3c03119d71f1804bdb94ccd33580b
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Mon Sep 14 01:24:41 2015 -0700

      drm/ttm: Fix memory space allocation v2

      In the event that TTM doesn't find a compatible memory type for the
      driver's first placement choice (placement without eviction), TTM
      returns -EINVAL without trying the driver's second choice.
      This causes problems on vmwgfx when VRAM is disabled before first modeset
      and during VT switches when fbdev is not enabled.

      Fix this by also trying the driver's second choice before returning
      -EINVAL.

      v2: Also check that man->use_type is true for the driver's second choice.
      Fixes a bug where disallowed memory types could be used.

      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Brian Paul <brianp@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 9059b284caecb628fac826c2c5cc8ee85708eec1
  Merge: 8f3e568 92d424a
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Sep 15 08:50:59 2015 +0200

      Merge tag 'perf-core-for-mingo-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Add 'socket' sort entry, to sort by the processor socket in
          'perf top' and 'perf report'. (Kan Liang)

        - Introduce --socket-filter to 'perf report', for filtering by processor
          socket. (Kan Liang)

        - Add new "Zoom into Processor Socket" operation in the perf hists 
browser,
          used in 'perf top' and 'perf report'. (Kan Liang)

        - Fix the 'CPU' hist browser column width calculation. (Arnaldo 
Carvalho de Melo)

      Infrastructure changes:

        - 'perf test' fixes for the object code reading entry. (Jan Stancek)

        - Add processor socket and cpu topology 'perf test' entries. (Kan Liang)

        - Introduce more sysfs__read_TYPE() helpers. (Arnaldo Carvalho de Melo)

        - Group cpu information reading functions in tools/lib/api/cpu.[ch],
          starting with cpu__get_max_freq() from a patchkit by Kan Liang.
          (Arnaldo Carvalho de Melo)

        - Retrieve the MSR PMU type from a perf.data file header and store it
          in struct perf_env. (Kan Liang)

        - Add tools/include into CTAGS file list. (Jiri Olsa)

        - Add iterator function for perf tests. (Matt Fleming)

        - Switch to tracing_patch interface. (Jiri Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 73477bbb09e7022063d1737c7322ad2e08968c23
  Author: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
  Date:   Thu Aug 27 20:15:28 2015 +0200

      x86/fpu/math-emu: Remove !NO_UNDOC_CODE

      We always want to support all FPU opcodes, including
      undocumented ones. That define was fully justified ~20 years ago
      but not today. Let's not complicate the code with it.

      Signed-off-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1440699330-1305-1-git-send-email-dvlasenk@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1975dbc276c6ab62230cf4f9df5ddc9ff0e0e473
  Author: Jonathan Corbet <corbet@xxxxxxx>
  Date:   Mon Sep 14 17:11:05 2015 -0600

      locking/static_keys: Fix up the static keys documentation

      Fix a few small mistakes in the static key documentation and
      delete an unneeded sentence.

      Suggested-by: Jason Baron <jbaron@xxxxxxxxxx>
      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150914171105.511e1e21@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a30e577c96f59b1e1678ea5462432b09bf7d5cbc
  Author: Jeff Mahoney <jeffm@xxxxxxxx>
  Date:   Fri Sep 11 21:44:17 2015 -0400

      btrfs: skip waiting on ordered range for special files

      In btrfs_evict_inode, we properly truncate the page cache for evicted
      inodes but then we call btrfs_wait_ordered_range for every inode as well.
      It's the right thing to do for regular files but results in incorrect
      behavior for device inodes for block devices.

      filemap_fdatawrite_range gets called with inode->i_mapping which gets
      resolved to the block device inode before getting passed to
      wbc_attach_fdatawrite_inode and ultimately to inode_to_bdi.  What happens
      next depends on whether there's an open file handle associated with the
      inode.  If there is, we write to the block device, which is unexpected
      behavior.  If there isn't, we through normally and inode->i_data is used.
      We can also end up racing against open/close which can result in crashes
      when i_mapping points to a block device inode that has been closed.

      Since there can't be any page cache associated with special file inodes,
      it's safe to skip the btrfs_wait_ordered_range call entirely and avoid
      the problem.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=100911
      Tested-by: Christoph Biedl <linux-kernel.bfrz@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jeff Mahoney <jeffm@xxxxxxxx>
      Reviewed-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit bcb2b0b2bae2de744223c68521cd51c57feb486c
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Mon Sep 14 16:01:55 2015 +0100

      ACPI: Eliminate CONFIG_.*{, _MODULE} #ifdef in favor of IS_ENABLED()

      This commit removes all CONFIG_.*{,_MODULE} in ACPI code, replacing it
      with IS_ENABLED().

      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit cf3a51059efd653aa38667db799e85d77231af9d
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Mon Sep 14 16:01:54 2015 +0100

      ACPI: int340x_thermal: add missing CONFIG_ prefix

      This patch adds the missing CONFIG_ prefix to INTEL_SOC_DTS_THERMAL
      macros.

      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 005efedf2c7d0a270ffbe28d8997b03844f3e3e7
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Mon Sep 14 09:09:31 2015 +0100

      Btrfs: fix read corruption of compressed and shared extents

      If a file has a range pointing to a compressed extent, followed by
      another range that points to the same compressed extent and a read
      operation attempts to read both ranges (either completely or part of
      them), the pages that correspond to the second range are incorrectly
      filled with zeroes.

      Consider the following example:

        File layout
        [0 - 8K]                      [8K - 24K]
            |                             |
            |                             |
         points to extent X,         points to extent X,
         offset 4K, length of 8K     offset 0, length 16K

        [extent X, compressed length = 4K uncompressed length = 16K]

      If a readpages() call spans the 2 ranges, a single bio to read the extent
      is submitted - extent_io.c:submit_extent_page() would only create a new
      bio to cover the second range pointing to the extent if the extent it
      points to had a different logical address than the extent associated with
      the first range. This has a consequence of the compressed read end io
      handler (compression.c:end_compressed_bio_read()) finish once the extent
      is decompressed into the pages covering the first range, leaving the
      remaining pages (belonging to the second range) filled with zeroes (done
      by compression.c:btrfs_clear_biovec_end()).

      So fix this by submitting the current bio whenever we find a range
      pointing to a compressed extent that was preceded by a range with a
      different extent map. This is the simplest solution for this corner
      case. Making the end io callback populate both ranges (or more, if we
      have multiple pointing to the same extent) is a much more complex
      solution since each bio is tightly coupled with a single extent map and
      the extent maps associated to the ranges pointing to the shared extent
      can have different offsets and lengths.

      The following test case for fstests triggers the issue:

        seq=`basename $0`
        seqres=$RESULT_DIR/$seq
        echo "QA output created by $seq"
        tmp=/tmp/$$
        status=1        # failure is the default!
        trap "_cleanup; exit \$status" 0 1 2 3 15

        _cleanup()
        {
            rm -f $tmp.*
        }

        # get standard environment, filters and checks
        . ./common/rc
        . ./common/filter

        # real QA test starts here
        _need_to_be_root
        _supported_fs btrfs
        _supported_os Linux
        _require_scratch
        _require_cloner

        rm -f $seqres.full

        test_clone_and_read_compressed_extent()
        {
            local mount_opts=$1

            _scratch_mkfs >>$seqres.full 2>&1
            _scratch_mount $mount_opts

            # Create a test file with a single extent that is compressed (the
            # data we write into it is highly compressible no matter which
            # compression algorithm is used, zlib or lzo).
            $XFS_IO_PROG -f -c "pwrite -S 0xaa 0K 4K"        \
                            -c "pwrite -S 0xbb 4K 8K"        \
                            -c "pwrite -S 0xcc 12K 4K"       \
                            $SCRATCH_MNT/foo | _filter_xfs_io

            # Now clone our extent into an adjacent offset.
            $CLONER_PROG -s $((4 * 1024)) -d $((16 * 1024)) -l $((8 * 1024)) \
                $SCRATCH_MNT/foo $SCRATCH_MNT/foo

            # Same as before but for this file we clone the extent into a lower
            # file offset.
            $XFS_IO_PROG -f -c "pwrite -S 0xaa 8K 4K"         \
                            -c "pwrite -S 0xbb 12K 8K"        \
                            -c "pwrite -S 0xcc 20K 4K"        \
                            $SCRATCH_MNT/bar | _filter_xfs_io

            $CLONER_PROG -s $((12 * 1024)) -d 0 -l $((8 * 1024)) \
                $SCRATCH_MNT/bar $SCRATCH_MNT/bar

            echo "File digests before unmounting filesystem:"
            md5sum $SCRATCH_MNT/foo | _filter_scratch
            md5sum $SCRATCH_MNT/bar | _filter_scratch

            # Evicting the inode or clearing the page cache before reading
            # again the file would also trigger the bug - reads were returning
            # all bytes in the range corresponding to the second reference to
            # the extent with a value of 0, but the correct data was persisted
            # (it was a bug exclusively in the read path). The issue happened
            # only if the same readpages() call targeted pages belonging to the
            # first and second ranges that point to the same compressed extent.
            _scratch_remount

            echo "File digests after mounting filesystem again:"
            # Must match the same digests we got before.
            md5sum $SCRATCH_MNT/foo | _filter_scratch
            md5sum $SCRATCH_MNT/bar | _filter_scratch
        }

        echo -e "\nTesting with zlib compression..."
        test_clone_and_read_compressed_extent "-o compress=zlib"

        _scratch_unmount

        echo -e "\nTesting with lzo compression..."
        test_clone_and_read_compressed_extent "-o compress=lzo"

        status=0
        exit

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>
      Reviewed-by: Qu Wenruo<quwenruo@xxxxxxxxxxxxxx>
      Reviewed-by: Liu Bo <bo.li.liu@xxxxxxxxxx>

  commit d25ed277fbd4c20247286fda2014ae6a2b88316b
  Merge: 9c488de 3bba75a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 16:58:35 2015 -0700

      Merge tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux

      Pull clk fixes from Stephen Boyd:
       "A couple build fixes for drivers introduced in the merge window and a
        handful of patches to add more critical clocks on rockchip SoCs that
        are affected by newly introduced gpio clock handling"

      * tag 'clk-fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:
        clk: rockchip: Add pclk_peri to critical clocks on RK3066/RK3188
        clk: rockchip: add pclk_cpu to the list of rk3188 critical clocks
        clk: rockchip: handle critical clocks after registering all clocks
        clk: Hi6220: separately build stub clock driver
        clk: h8s2678: Fix compile error

  commit 4184a8fc57a43faa2625988cc87031db77af9d98
  Merge: 6ff33f3 5f25f066
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Tue Sep 15 01:29:43 2015 +0200

      Merge branch 'for-rafael' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mzx/devfreq into pm-devfreq

      Pull devfreq updates for v4.3 from MyungJoo Ham.

      * 'for-rafael' of 
https://git.kernel.org/pub/scm/linux/kernel/git/mzx/devfreq:
        PM / devfreq: Fix incorrect type issue.
        PM / devfreq: tegra: Update governor to use devfreq_update_stats()
        PM / devfreq: comments for get_dev_status usage updated
        PM / devfreq: drop comment about thermal setting max_freq
        PM / devfreq: cache the last call to get_dev_status()
        PM / devfreq: Drop unlikely before IS_ERR(_OR_NULL)
        PM / devfreq: exynos-ppmu: bit-wise operation bugfix.
        PM / devfreq: exynos-ppmu: Update documentation to support PPMUv2
        PM / devfreq: exynos-ppmu: Add the support of PPMUv2 for Exynos5433
        PM / devfreq: event: Remove incorrect property in exynos-ppmu DT binding

      Conflicts:
        drivers/devfreq/event/exynos-ppmu.c

  commit ae7858180510d6fd0dfaf66d209bc6103db1678f
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:29 2015 +0800

      selftests: exec: revert to default emit rule

      With the previous patch, the installation method change from install
      to rsync. There is no need to create subdir during test, the
      default EMIT_TESTS is enough.

      This patch essentially revert commit 84cbd9e4 ("selftests/exec: do not
      install subdir as it is already created").

      Suggested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit 900d65ee11aae3a23cb963f484b65eb3e269dd9c
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:28 2015 +0800

      selftests: change install command to rsync

      The command of install could not handle the special files in exec
      testcases, change the default rule to rsync to fix this.

      The installation is unchanged after this commit.

      Suggested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit b11054b959cf921a646b64983bc35193c1597739
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:27 2015 +0800

      selftests: mqueue: simplify the Makefile

      Use make's implict rule for building simple C programs.

      Suggested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit cc19ada7340b5ed87a94ea381ff7ade6a053b2f3
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:26 2015 +0800

      selftests: mqueue: allow extra cflags

      Change from = to += in order to allows the user to pass whatever
      CFLAGS they wish(E.g. pass the proper headers and librareis
      (popt.h and libpopt.so) in cross-compiling)

      Suggested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit 1087d019176df7e406387de3fe76129c74d24081
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Wed Sep 9 21:06:25 2015 +0800

      selftests: rename jump label to static_keys

      Commit 2bf9e0ab08c6 ("locking/static_keys: Provide a selftest")
      renamed jump_label directory to static_keys and failed to update
      the Makefile, causing the selftests build to fail.

      This commit fixes it by updating the Makefile with the new name
      and also moves the entry into the correct position to keep the
      list alphabetically sorted.

      Fixes: 2bf9e0ab08c6 ("locking/static_keys: Provide a selftest")
      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Acked-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit b623c4daadb5a4bfaef62783085b95bd9ba5a77c
  Author: Kees Cook <keescook@xxxxxxxxxxxx>
  Date:   Fri Aug 21 11:22:35 2015 -0700

      selftests/seccomp: add support for s390

      This adds support for s390 to the seccomp selftests. Some improvements
      were made to enhance the accuracy of failure reporting, and additional
      tests were added to validate assumptions about the currently traced
      syscall. Also adds early asserts for running on older kernels to avoid
      noise when the seccomp syscall is not implemented.

      Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit 7ef7cc9fdf9853b3027c55b9481991695ad5e5b2
  Author: Zhang Zhen <zhenzhang.zhang@xxxxxxxxxx>
  Date:   Mon Sep 14 12:13:27 2015 +0800

      seltests/zram: fix syntax error

      Not all shells define a variable UID. This is a bash and zsh feature only.
      In other shells, the UID variable is not defined, so here test command
      expands to [ != 0 ] which is a syntax error.

      Without this patch:
      root@HGH1000007090:/opt/work/linux/tools/testing/selftests/zram# sh 
zram.sh
      zram.sh: 8: [: !=: unexpected operator
      zram.sh : No zram.ko module or /dev/zram0 device file not found
      zram.sh : CONFIG_ZRAM is not set

      With this patch:
      root@HGH1000007090:/opt/work/linux/tools/testing/selftests/zram# sh 
./zram.sh
      zram.sh : No zram.ko module or /dev/zram0 device file not found
      zram.sh : CONFIG_ZRAM is not set

      Signed-off-by: Zhang Zhen <zhenzhang.zhang@xxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit 7168e947291f0ead07e5638b4599fb7845288b69
  Merge: 21b430d 60fdcb8
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Mon Sep 14 13:42:11 2015 -0700

      Merge branch 'fixes-rc1' into omap-for-v4.3/fixes

  commit 60fdcb8863d9b4a8b6c6b367886fadb50d4c0b07
  Author: Nicolas Chauvet <kwizart@xxxxxxxxx>
  Date:   Thu Sep 3 17:34:40 2015 +0200

      ARM: dts: Fixup model name for HP t410 dts

      This fix the model name for the device.
      Whole string taken from the HP support center web page

      Signed-off-by: Nicolas Chauvet <kwizart@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit c263a5b8120523b736ed4641657075f2024e75b7
  Author: Vishal Mahaveer <vishalm@xxxxxx>
  Date:   Tue Aug 25 13:57:49 2015 -0500

      ARM: dts: DRA7: fix a typo in ethernet

      Register address in name of the node is wrong

      Signed-off-by: Vishal Mahaveer <vishalm@xxxxxx>
      Acked-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 3ab74b89c4d50e6d29d3ace2d400a8a3f1e6de3f
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Wed Aug 5 19:13:49 2015 +0530

      ARM: omap2plus_defconfig: make PCF857x built-in

      One of the lines from PCF857x is connected to the vdd line of MMC1
      in DRA74x and DRA72x EVMs and is modelled as a regulator. If PCF857x
      is not made as built-in, the regulator_get in omap_hsmmc fails making
      it difficult to use MMC1 as rootfs.

      Make PCF857x built-in.

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      Signed-off-by: Sekhar Nori <nsekhar@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 737f146fe0dd1353f5e2c6153fedd81f48b5cd65
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Fri Sep 4 17:30:25 2015 +0530

      ARM: dts: Use ti,pbias compatible string for pbias

      Use platform specific compatible strings instead of the common
      "ti,pbias-omap" compatible string.

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 380528f742796e1244e931c51e77c9ed664f566c
  Author: Heiko Stübner <heiko@xxxxxxxxx>
  Date:   Sun Sep 13 13:20:36 2015 +0200

      clk: rockchip: add critical clock for rk3368

      Again a result of the gpio-clock-liberation the rk3368 needs the
      pclk_pd_pmu marked as critical, to boot successfully.

      Reported-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Tested-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 9c488de24f7264f08d341024bffdd637b4d04c96
  Merge: 57e6bbc eda2116
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 12:49:15 2015 -0700

      Merge branch 'for-next' of git://git.samba.org/sfrench/cifs-2.6

      Pull CIFS fixes from Steve French:
       "Two small cifs fixes"

      * 'for-next' of git://git.samba.org/sfrench/cifs-2.6:
        [CIFS] mount option sec=none not displayed properly in /proc/mounts
        CIFS: fix type confusion in copy offload ioctl

  commit 57e6bbcb4beb4c87aa93e78a1db08fdaab9ee65f
  Merge: 6ff33f3 c2172ce
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 12:24:10 2015 -0700

      Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM fixes from Russell King:
       "A number of fixes for the merge window, fixing a number of cases
        missed when testing the uaccess code, particularly cases which only
        show up with certain compiler versions"

      * 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm:
        ARM: 8431/1: fix alignement of __bug_table section entries
        arm/xen: Enable user access to the kernel before issuing a privcmd call
        ARM: domains: add memory dependencies to get_domain/set_domain
        ARM: domains: thread_info.h no longer needs asm/domains.h
        ARM: uaccess: fix undefined instruction on ARMv7M/noMMU
        ARM: uaccess: remove unneeded uaccess_save_and_disable macro
        ARM: swpan: fix nwfpe for uaccess changes
        ARM: 8429/1: disable GCC SRA optimization

  commit d8f8004ec7048fb2faa6967ab51259b5603562fb
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Wed Sep 9 16:18:14 2015 -0500

      ARM: OMAP5: Cleanup options for SoC only build

      OMAP5 SoC has Cortex-A15 which does not use TWD timer. It uses
      ARCH_TIMER instead, clean up unwanted configuration and enable
      OMAP_INTERCONNECT and OPP which is necessary for expected functionality
      on the SoC.

      Reported-by: Carlos Hernandez <ceh@xxxxxx>
      Reported-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit d2e104c63a81e64574a6af9806f2a5d5a48248d9
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Wed Sep 9 16:18:13 2015 -0500

      ARM: DRA7: Select missing options for SoC only build

      DRA7 does use OPP, uses OMAP interconnect and also does require SCU.
      These are missing in the SoC only build of DRA7 breaking various PM
      features in DRA7 only build.

      Reported-by: Carlos Hernandez <ceh@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit a3b7470951ab49e5592d20c2bcfe5ee675221591
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Wed Sep 9 16:18:12 2015 -0500

      ARM: OMAP2+: board-generic: Remove stale of_irq macros

      When commit c4082d499fa2 ("ARM: omap2+: board-generic: clean up the
      irq data from board file") cleaned up the direct usage of gic_of_init
      and omap_intc_of_init, it failed to clean up the macros properly.

      Since these macros are no longer used, lets just remove them.

      Fixes: c4082d499fa2 ("ARM: omap2+: board-generic: clean up the irq data 
from board file")
      Reported-by: Carlos Hernandez <ceh@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 6d785c963a660b0279c43a2b1cd9b1c89ce5514b
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Wed Sep 9 16:18:11 2015 -0500

      ARM: OMAP4+: PM: erratum is used by OMAP5 and DRA7 as well

      OMAP5 and DRA7 reuse the same pm44xx_erratum variable so, enable the
      same, else PM features such as Suspend to ram is broken in a SoC only
      build configuration.

      Reported-by: Carlos Hernandez <ceh@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit d34cf0d56658ff040c707313b4a71e86a767cbc2
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 18:24:18 2015 +0200

      ARM: dts: omap3-igep: Move eth IRQ pinmux to IGEPv2 common dtsi

      Only the IGEPv2 boards have a LAN9221i chip connected to the GPMC
      so the pinmux configuration for the GPIO connected to the IRQ line
      of the LAN chip should not be defined in the IGEP common dtsi but
      in the one common to the IGEPv2 boards.

      While there, use the OMAP3_CORE1_IOPAD() macro for the padconf reg.

      Suggested-by: Ladislav Michl <ladis@xxxxxxxxxxxxxx>
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Acked-by: Enric Balletbo i Serra <enric.balletbo@xxxxxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit c22c7f3e667bece46efe97780ab2df3af700aea0
  Author: Nishanth Menon <nm@xxxxxx>
  Date:   Thu Sep 3 14:24:00 2015 -0500

      ARM: dts: am57xx-beagle-x15: Add wakeup irq for mcp79410

      With the support in the generic PM framework for wakeirq and capability
      added to the rtc-ds1307 driver to support this, we can now define the
      optional wakeup irq to allow the RTC to wakeup the system from low power
      modes as part of suspend.

      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 259c0c04acde19d6286def1661ed22d0fb3b05b9
  Author: Teresa Remmet <t.remmet@xxxxxxxxx>
  Date:   Thu Sep 3 14:00:06 2015 +0200

      ARM: dts: am335x-phycore-som: Fix mpu voltage

      Fix the mpu voltage as it is set too low for the silicon
      revision 2.1.

      Signed-off-by: Teresa Remmet <t.remmet@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 423fe5f3c35ff0f374d5452eb2db93a28bf6b9e2
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Wed Jul 29 16:39:42 2015 +0530

      ARM: dts: am57xx-beagle-x15: Fix regulator populated in MMC1 dt node

      For beagle x15, both the vdd and io lines are connected to the
      same regulator (ldo1_reg). However vmmc_aux is populated to vdd_3v3.
      Remove it.

      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      Acked-by: Nishanth Menon <nm@xxxxxx>
      [tony@xxxxxxxxxxx: updated to apply]
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 87ee15ec26000c6edc10e63c415bee1239e042c8
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Mon Sep 14 07:07:28 2015 -0700

      ARM: dts: Fix dm814x control base to properly initialize Ethernet PHY

      Looks like I made a typo on the control base, all the 81xx
      SoCs have it at 0x48140000 base. We've just gotten away with
      the typo as the Ethernet phy was configured by the bootloader
      on my test system and we're not yet using the pinctrl.

      In addition to fixing the contol base, we need to also use the
      right Ethernet phy flags to initialize it. And we are still
      missing the PLL driver for dm814x and only relying on the
      divider and mux clocks.

      Fixes: f3d953ea3721 ("ARM: dts: Add minimal dm814x support")
      Cc: Matthijs van Duin <matthijsvanduin@xxxxxxxxx>
      Cc: Nicolas Chauvet <kwizart@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 3a2fa775bd1d0579113666c1a2e37654a34018a0
  Author: Carl Frederik Werner <frederik@xxxxxxx>
  Date:   Wed Sep 2 10:07:57 2015 +0900

      ARM: dts: omap3-beagle: make i2c3, ddc and tfp410 gpio work again

      Let's fix pinmux address of gpio 170 used by tfp410 powerdown-gpio.

      According to the OMAP35x Technical Reference Manual
        CONTROL_PADCONF_I2C3_SDA[15:0]  0x480021C4 mode0: i2c3_sda
        CONTROL_PADCONF_I2C3_SDA[31:16] 0x480021C4 mode4: gpio_170
      the pinmux address of gpio 170 must be 0x480021C6.

      The former wrong address broke i2c3 (used by hdmi ddc), resulting in
      kernel message:
        omap_i2c 48060000.i2c: controller timed out

      Fixes: 8cecf52befd7 ("ARM: omap3-beagle.dts: add display information")
      Cc: stable@xxxxxxxxxxxxxxx # v3.15+
      Signed-off-by: Carl Frederik Werner <frederik@xxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit df5c79e982b38eec1d184668d66f9ce0c426e2a1
  Merge: f17b329 721b51f
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Mon Sep 14 19:53:39 2015 +0100

      Merge branch 'fix/rt5645' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into asoc-fix-rt5645

  commit b4a21fc275e99fc63c77b30da92ee497f8a7bdb6
  Author: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
  Date:   Fri Sep 11 16:37:05 2015 -0700

      regmap: Allocate buffers with GFP_ATOMIC when fast_io == true

      If a regmap is using fast_io, allocate the scratch buffer in
      regmap_bulk_write() with GFP_ATOMIC instead of GFP_KERNEL.
      Otherwise we may schedule while atomic.

      Reported-by: Abhijeet Dharmapurikar <adharmap@xxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 295c3405a8bbd69ee8c8eb6580f30b0b8739b33a
  Author: Jyri Sarha <jsarha@xxxxxx>
  Date:   Wed Sep 9 21:27:42 2015 +0300

      ASoC: davinci-mcasp: Set .symmetric_rates = 1 in snd_soc_dai_driver

      The TX and RX direction share the same bit clock and frame sync, so
      the samplerate must be the same to both directions.

      Signed-off-by: Jyri Sarha <jsarha@xxxxxx>
      Acked-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit bd315aab8a3ab1bc7074774b89a5d8ec7c1ff7ab
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Mon Sep 14 10:23:55 2015 +0000

      perf top: Fix segfault pressing -> with no hist entries

      'perf top' segfaults with following operation:

       # perf top -e page-faults -p 11400 # 11400 never generates page-fault

      Then on the resulting empty interface, press right key:

        # ./perf top -e page-faults -p 11400
        perf: Segmentation fault
        -------- backtrace --------
        ./perf[0x535428]
        /lib64/libc.so.6(+0x3545f)[0x7f0dd360745f]
        ./perf[0x531d46]
        ./perf(perf_evlist__tui_browse_hists+0x96)[0x5340d6]
        ./perf[0x44ba2f]
        /lib64/libpthread.so.0(+0x81d0)[0x7f0dd49dc1d0]
        /lib64/libc.so.6(clone+0x6c)[0x7f0dd36b90dc]

      The bug resides in perf_evsel__hists_browse() that, in the above
      circumstance browser->selection can be NULL, but code after
      skip_annotation doesn't consider it.

      This patch fix it by checking browser->selection before fetching
      browser->selection->map.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1442226235-117265-1-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 921e54680aefe52f28d9ce9485edb1bfef4b92a8
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 1 14:50:15 2015 +0800

      ASoC: au1x: psc-i2s: Fix unused variable 'ret' warning

      Fix below build warning:
      sound/soc/au1x/psc-i2s.c: In function 'au1xpsc_i2s_drvprobe':
      sound/soc/au1x/psc-i2s.c:299:6: warning: unused variable 'ret' 
[-Wunused-variable]

      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Acked-by: Manuel Lauss <manuel.lauss@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 42617869bf095c650e67aad4001cab4224e7fa98
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Tue Sep 1 12:31:24 2015 +0800

      ASoC: SPEAr: Make SND_SPEAR_SOC select SND_SOC_GENERIC_DMAENGINE_PCM

      devm_snd_dmaengine_pcm_register() is guarded by
      CONFIG_SND_SOC_GENERIC_DMAENGINE_PCM.

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit e4fba9b5be12d577d2e2c19fdca6b0744c3f271e
  Author: Koro Chen <koro.chen@xxxxxxxxxxxx>
  Date:   Mon Sep 14 14:51:17 2015 +0800

      ASoC: mediatek: Increase periods_min in capture

      In capture, there is chance that hw_ptr reported at IRQ is
      a little smaller than period_size due to internal AFE buffer.
      In the case of ping-pong buffer:

      |xxxxxxxxxxxxxxxxxxxxxxxxxxxx--|-----------------------------|
                                  hw_ptr < period_size

      This available buffer will not be read since its size is smaller than
      avail_min (which is period_size by default), and read thread continues
      to sleep. If the next hw_ptr is just a little larger than buffer_size,
      overrun occurs. One more period can hold the possible unread buffer.

      Signed-off-by: Koro Chen <koro.chen@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 81523aac01a7f68af2576800c8623edfb6323017
  Author: Wei Yang <weiyang@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 14:12:53 2015 +0800

      KVM: make the declaration of functions within 80 characters

      After 'commit 0b8ba4a2b658 ("KVM: fix checkpatch.pl errors in
      kvm/coalesced_mmio.h")', the declaration of the two function will exceed 
80
      characters.

      This patch reduces the TAPs to make each line in 80 characters.

      Signed-off-by: Wei Yang <weiyang@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 5d7c631d926b59aa16f3c56eaeb83f1036c81dc7
  Author: Shaohua Li <shli@xxxxxx>
  Date:   Thu Jul 30 16:24:43 2015 -0700

      x86/apic: Serialize LVTT and TSC_DEADLINE writes

      The APIC LVTT register is MMIO mapped but the TSC_DEADLINE register is an
      MSR. The write to the TSC_DEADLINE MSR is not serializing, so it's not
      guaranteed that the write to LVTT has reached the APIC before the
      TSC_DEADLINE MSR is written. In such a case the write to the MSR is
      ignored and as a consequence the local timer interrupt never fires.

      The SDM decribes this issue for xAPIC and x2APIC modes. The
      serialization methods recommended by the SDM differ.

      xAPIC:
       "1. Memory-mapped write to LVT Timer Register, setting bits 18:17 to 10b.
        2. WRMSR to the IA32_TSC_DEADLINE MSR a value much larger than current 
time-stamp counter.
        3. If RDMSR of the IA32_TSC_DEADLINE MSR returns zero, go to step 2.
        4. WRMSR to the IA32_TSC_DEADLINE MSR the desired deadline."

      x2APIC:
       "To allow for efficient access to the APIC registers in x2APIC mode,
        the serializing semantics of WRMSR are relaxed when writing to the
        APIC registers. Thus, system software should not use 'WRMSR to APIC
        registers in x2APIC mode' as a serializing instruction. Read and write
        accesses to the APIC registers will occur in program order. A WRMSR to
        an APIC register may complete before all preceding stores are globally
        visible; software can prevent this by inserting a serializing
        instruction, an SFENCE, or an MFENCE before the WRMSR."

      The xAPIC method is to just wait for the memory mapped write to hit
      the LVTT by checking whether the MSR write has reached the hardware.
      There is no reason why a proper MFENCE after the memory mapped write would
      not do the same. Andi Kleen confirmed that MFENCE is sufficient for the
      xAPIC case as well.

      Issue MFENCE before writing to the TSC_DEADLINE MSR. This can be done
      unconditionally as all CPUs which have TSC_DEADLINE also have MFENCE
      support.

      [ tglx: Massaged the changelog ]

      Signed-off-by: Shaohua Li <shli@xxxxxx>
      Reviewed-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: <Kernel-team@xxxxxx>
      Cc: <lenb@xxxxxxxxxx>
      Cc: <fenghua.yu@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx #v3.7+
      Link: 
http://lkml.kernel.org/r/20150909041352.GA2059853@xxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 723831927e8813b5b336d383174f686ad708bf10
  Author: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
  Date:   Mon Sep 14 16:06:48 2015 +0300

      ASoC: davinci-mcasp: Revise the FIFO threshold calculation

      The FIFO threshold for McASP should be <=[tx/rx]numevt so the initial 
value
      for the refining should meet this requirement as well.

      Signed-off-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 4857c91f0d195f05908fff296ba1ec5fca87066c
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 12:00:55 2015 +0200

      x86/ioapic: Force affinity setting in setup_ioapic_dest()

      The recent ioapic cleanups changed the affinity setting in
      setup_ioapic_dest() from a direct write to the hardware to the delayed
      affinity setup via irq_set_affinity().

      That results in a warning from chained_irq_exit():
      WARNING: CPU: 0 PID: 5 at kernel/irq/migration.c:32 irq_move_masked_irq
      [<ffffffff810a0a88>] irq_move_masked_irq+0xb8/0xc0
      [<ffffffff8103c161>] ioapic_ack_level+0x111/0x130
      [<ffffffff812bbfe8>] intel_gpio_irq_handler+0x148/0x1c0

      The reason is that irq_set_affinity() does not write directly to the
      hardware. It marks the affinity setting as pending and executes it
      from the next interrupt. The chained handler infrastructure does not
      take the irq descriptor lock for performance reasons because such a
      chained interrupt is not visible to any interfaces. So the delayed
      affinity setting triggers the warning in irq_move_masked_irq().

      Restore the old behaviour by calling the set_affinity function of the
      ioapic chip in setup_ioapic_dest(). This is safe as none of the
      interrupts can be on the fly at this point.

      Fixes: aa5cb97f14a2 'x86/irq: Remove x86_io_apic_ops.set_affinity and 
related interfaces'
      Reported-and-tested-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: jarkko.nikula@xxxxxxxxxxxxxxx

  commit ba378ca9c04a5fc1b2cf0f0274a9d02eb3d1bad9
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 18:04:09 2015 +0200

      netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC

      Fix lookup of existing match/target structures in the corresponding list
      by skipping the family check if NFPROTO_UNSPEC is used.

      This is resulting in the allocation and insertion of one match/target
      structure for each use of them. So this not only bloats memory
      consumption but also severely affects the time to reload the ruleset
      from the iptables-compat utility.

      After this patch, iptables-compat-restore and iptables-compat take
      almost the same time to reload large rulesets.

      Fixes: 0ca743a55991 ("netfilter: nf_tables: add compatibility layer for 
x_tables")
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 63cdbc06b357dcb3a7104a421ee4a4550d7fadfd
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Mon Sep 14 17:06:27 2015 +0200

      netfilter: bridge: fix routing of bridge frames with call-iptables=1

      We can't re-use the physoutdev storage area.

      1.  When using NFQUEUE in PREROUTING, we attempt to bump a bogus
      refcnt since nf_bridge->physoutdev is garbage (ipv4/ipv6 address)

      2. for same reason, we crash in physdev match in FORWARD or later if
      skb is routed instead of bridged.

      This increases nf_bridge_info to 40 bytes, but we have no other choice.

      Fixes: 72b1e5e4cac7 ("netfilter: bridge: reduce nf_bridge_info to 32 
bytes again")
      Reported-by: Sander Eikelenboom <linux@xxxxxxxxxxxxxx>
      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 586b286b110e94eb31840ac5afc0c24e0881fe34
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Wed Sep 9 21:34:51 2015 -0400

      dm crypt: constrain crypt device's max_segment_size to PAGE_SIZE

      Setting the dm-crypt device's max_segment_size to PAGE_SIZE is an
      unfortunate constraint that is required to avoid the potential for
      exceeding dm-crypt's underlying device's max_segments limits -- due to
      crypt_alloc_buffer() possibly allocating pages for the encryption bio
      that are not as physically contiguous as the original bio.

      It is interesting to note that this problem was already fixed back in
      2007 via commit 91e106259 ("dm crypt: use bio_add_page").  But Linux 4.0
      commit cf2f1abfb ("dm crypt: don't allocate pages for a partial
      request") regressed dm-crypt back to _not_ using bio_add_page().  But
      given dm-crypt's cpu parallelization changes all depend on commit
      cf2f1abfb's abandoning of the more complex io fragments processing that
      dm-crypt previously had we cannot easily go back to using
      bio_add_page().

      So all said the cleanest way to resolve this issue is to fix dm-crypt to
      properly constrain the original bios entering dm-crypt so the encryption
      bios that dm-crypt generates from the original bios are always
      compatible with the underlying device's max_segments queue limits.

      It should be noted that technically Linux 4.3 does _not_ need this fix
      because of the block core's new late bio-splitting capability.  But, it
      is reasoned, there is little to be gained by having the block core split
      the encrypted bio that is composed of PAGE_SIZE segments.  That said, in
      the future we may revert this change.

      Fixes: cf2f1abfb ("dm crypt: don't allocate pages for a partial request")
      Fixes: https://bugzilla.kernel.org/show_bug.cgi?id=104421
      Suggested-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.0+

  commit 92d424ae898e0d04ac34263aa33e40acc1e1f3d1
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:46 2015 -0400

      perf test: Add entry for hists socket filter

      Add test case for hists socket filter.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-5-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 84734b06b63093cd44533f4caa43d4452fb11ec3
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:45 2015 -0400

      perf hists browser: Zoom in/out for processor socket

      Currently, users can zoom in/out for threads and dso in 'perf top' and
      'perf report'.

      This patch extends it for the processor sockets.

      'S' is the short key to zoom into current Processor Socket.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-4-git-send-email-kan.liang@xxxxxxxxx
      [ - Made it elide the Socket column when zooming into it,
          just like with the other zoom ops;
        - Make it use browser->pstack, to unzoom level by level;
        - Rename 'socket' variables to 'socket_id' to make it build on
          older systems where it shadows a global glibc declaration ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 21394d948a0c7c451d4a4d68afed9a06c4969636
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:44 2015 -0400

      perf report: Introduce --socket-filter option

      Introduce --socket-filter option for 'perf report' to only show entries
      for a processor socket that match this filter.

        $ perf report --socket-filter 1 --stdio
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        # Total Lost Samples: 0
        #
        # Samples: 752  of event 'cycles'
        # Event count (approx.): 350995599
        # Processor Socket: 1
        #
        # Overhead  Command    Shared Object     Symbol
        # ........  .........  ................  
.................................
        #
            97.02%  test       test              [.] plusB_c
             0.97%  test       test              [.] plusA_c
             0.23%  swapper    [kernel.vmlinux]  [k] acpi_idle_do_entry
             0.09%  rcu_sched  [kernel.vmlinux]  [k] 
dyntick_save_progress_counter
             0.01%  swapper    [kernel.vmlinux]  [k] task_waking_fair
             0.00%  swapper    [kernel.vmlinux]  [k] run_timer_softirq

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-3-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2e7ea3ab8282f6bb1d211d8af760a734c055f493
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:43 2015 -0400

      perf tools: Introduce new sort type "socket" for the processor socket

      This patch enable perf report to sort by processor socket:

        $ perf report --stdio --sort socket,comm,dso,symbol
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        # Total Lost Samples: 0
        #
        # Samples: 686  of event 'cycles'
        # Event count (approx.): 349215462
        #
        # Overhead SOCKET Command Shared Object    Symbol
        # ........ ...... ....... ................ ............................
        #
          97.05%    000   test    test             [.] plusB_c
           0.98%    000   test    test             [.] plusA_c
           0.93%    001   perf    [kernel.vmlinux] [k] smp_call_function_single
           0.19%    001   perf    [kernel.vmlinux] [k] page_fault
           0.19%    001   swapper [kernel.vmlinux] [k] pm_qos_request
           0.16%    000   test    [kernel.vmlinux] [k] add_mm_counter_fast

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-2-git-send-email-kan.liang@xxxxxxxxx
      [ Fix col calc, un-allcapsify col header & read the topology when not 
using perf.data ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0c4c4debb0adda4c18c158d95031dc2b9f637869
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 10:45:42 2015 -0400

      perf tools: Add processor socket info to hist_entry and addr_location

      This information will come from perf.data files of from the current
      system, cached when needed, such as when the 'socket' sort order gets
      introduced.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441377946-44429-1-git-send-email-kan.liang@xxxxxxxxx
      [ Don't blindly use env->cpu[al.cpu].socket_id & use machine->env, fixes 
by Jiri & Arnaldo ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4cde998d205894705b534878122631142a3eefe4
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 9 12:25:00 2015 -0300

      perf machine: Add pointer to sample's environment

      The 'struct machine' represents the machine where the samples were/are
      being collected, and we also have a 'struct perf_env' with extra details
      about such machine, that we were collecting at 'perf.data' creation time
      but we also needed when no perf.data file is being used, such as in
      'perf top'.

      So, get those structs closer together, as they provide a bigger picture
      of the sample's environment.

      In 'perf session', when the file argument is NULL, we can assume that
      the tool is sampling the running machine, so point machine->env to
      the global put in place in previous patches, while set it to the
      perf_header.env one when reading from a file.

      This paves the way for machine->env to be used in
      perf_event__preprocess_sample to populate addr_location.socket.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-2ajotl0khscutm68exictoy9@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit aa36ddd7afbb0a3db216c1391e28cd6d80ed1706
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 9 10:37:01 2015 -0300

      perf env: Introduce read_cpu_topology_map() method

      Out of the code to write the cpu topology map in the perf.data file
      header.

      Now if one needs the CPU topology map for the running machine, one needs
      to call perf_env__read_cpu_topology_map(perf_env) and the info will be
      stored in perf_env.cpu.

      For now we're using a global perf_env variable, that will have its
      contents freed after we run a builtin.

      v2: Check perf_env__read_cpu_topology_map() return in
          write_cpu_topology() (Kan Liang)

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441828225-667-5-git-send-email-acme@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5d8cf721cb13be92e96f22846e5bcd31040d4d0b
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Sep 11 10:49:45 2015 -0300

      perf cpu_map: Use sysfs__read_int in get_{core,socket}_id()

      We have the tools/lib/ sysfs__read_int() for that, avoid code
      duplication.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-fqg6vt5ku72pbf54ljg6tmoy@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 09f6acf2eacad3a0f9a4b9f77e0b021f0cb45780
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 10 12:20:14 2015 -0300

      tools lib api cpu: Introduce cpu.[ch] to obtain cpu related information

      E.g.:

       $ ./cpu__get_max_freq
       3200000

      It does that, as Kan's patch does, by looking at these files:

        $ cat /sys/devices/system/cpu/online
        0-3
        $ ./sysfs__read_ull
        devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq=3200000
        $

      I.e. find out the first online CPU, then read its cpufreq info.

      But do it in tools/lib/api/, so that other tools/ living code can use
      it, not just perf.

      Based-on-a-patch-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-915v4cvxqplaub8qco66b9mv@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2d729f6a8ac3edbf68de7239fab96c9736946af5
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Sep 10 11:58:50 2015 -0300

      tools lib api fs: Introduce sysfs__read_{int,ull}()

      To read either an int or an unsigned long long value from the given
      file.

      E.g.:

        $ cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        3200000
        $ ./sysfs__read_ull
        devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq=3200000
        $

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-4a12m4d5k8m4qgc1vguocvei@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e0838e029f4f6f271d6172b18f5473558ebdea1b
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Thu Sep 10 11:03:05 2015 -0300

      perf env: Read msr pmu type from header

      Get msr pmu type when processing pmu_mappings

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-3ngei63gepydwxhvytl2wx89@xxxxxxxxxxxxxx
      [ Fixed it up wrt moving perf_env from header.h ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b60114067c656be572f0ca4030c3a2c560e7255c
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Sep 7 10:38:04 2015 +0200

      perf tools: Add tools/include into tags directories

      Adding tools/include into tags directories, to have include definitions
      reachable via tags/cscope.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441615087-13886-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8168caded331a19302593a591f070136cb3a31c8
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 9 12:38:17 2015 -0300

      perf evsel: Remove forward declaration of 'struct perf_evlist'

      We have no use for it in evsel.h.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-um03yjrgyi3bj1hzqiqs4dsu@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a4978eca684a3b471f3da862f427e419283e93a3
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Sep 9 12:14:00 2015 -0300

      perf hists browser: Fixup the "cpu" column width calculation

      Since we were not setting it to at least 3 chars ('CPU'), it was being
      reset to zero when recalculating the columns width when refreshing the
      screen, in 'perf top'. Fix it.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-iqcdnkkqm6sew06x01fbijmy@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b699869285c4f6949f281ea57ac35ea9b9c6f467
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 8 16:58:20 2015 -0300

      perf env: Adopt perf_header__set_cmdline

      Move this from two globals to perf_env global, that eventually will
      be just perf_header->env or something else, to ease the refactoring
      series, leave it as a global and go on reading more of its fields,
      not as part of the header writing process but as a perf_env init one
      that will be used for perf.data-less situations.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-2j78tdf8zn1ci0y6ji15bifj@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit eebd0bfca5cb83f6e1ef0d872a16d45af0422114
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 8 15:52:20 2015 -0300

      perf env: Rename some leftovers from rename to perf_env

      In ce80d3bef9ff ("perf tools: Rename perf_session_env to perf_env") we
      forgot to rename a few functions to the "perf_env" prefix, do it now.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-b3ui3z6ock89z1814pu2er98@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f0ce888c064e07c73a103822f2ad8e77649fd107
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Sep 8 13:30:00 2015 -0300

      perf env: Move perf_env out of header.h and session.c into separate object

      Since it can be used separately from 'perf_session' and 'perf_header',
      move it to separate include file and object, next csets will try to move
      a perf_env__init() routine.

      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ff2rw99tsn670y1b6gxbwdsi@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e8210cefb7e1ec0760a6fe581ad0727a2dcf8dd1
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Sat Sep 5 20:02:20 2015 +0100

      perf tests: Introduce iterator function for tests

      In preparation for introducing more arrays of tests, e.g. "arch tests"
      (architecture-specific tests), abstract the code to iterate over the
      list of tests into a helper function.

      This way, code that uses a 'struct test' doesn't need to worry about how
      the tests are grouped together and changes to the list of tests doesn't
      require changes to the code using it.

      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Andi Kleen <andi@xxxxxxxxxxxxxx>
      Cc: Kanaka Juvva <kanaka.d.juvva@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Vikas Shivappa <vikas.shivappa@xxxxxxxxx>
      Cc: Vince Weaver <vince@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441479742-15402-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c84974ed9fb672930929e0d20ea3c366635a54aa
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Sep 4 04:58:31 2015 -0400

      perf test: Add entry to test cpu topology

      This patch test cpu core_id and socket_id which are stored in perf_env.

      Commiter note:

        # perf test topo
        40: Test topology in session: Ok

        # perf test -v topo
        40: Test topology in session:
        --- start ---
        test child forked, pid 31767
        templ file: /tmp/perf-test-VTZ1PL
        CPU 0, core 0, socket 0
        CPU 1, core 1, socket 0
        CPU 2, core 0, socket 0
        CPU 3, core 1, socket 0
        test child finished with 0
        ---- end ----
        Test topology in session: Ok
        #

      Based-on-a-patch-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441357111-64522-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fbf99625b88fd8808bf2b80efac453d63cae08e8
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:45 2015 +0200

      perf tools: Switch to tracing_path interface on appropriate places

      Using tracing_path interface on several places, that more or less
      copy the functionality of tracing_path interface.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-16-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 60a1133a5b39738671eff1e4d77bedc1ee3fa528
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:44 2015 +0200

      tools lib api fs: Remove debugfs, tracefs and findfs objects

      We have all the functionality in fs.c, let's remove unneeded
      objects.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-15-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4605eab3487dc818b1f3cbee2cd139cca3564be7
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:43 2015 +0200

      tools lib api fs: Replace debugfs/tracefs objects interface with fs.c

      Switching to the fs.c related filesystem framework.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-14-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4f234f06d608635a1cff936131285a91af213b37
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:36 2015 +0200

      tools lib api fs: Make tracing_path_strerror_open message generic

      Making tracing_path__strerror_open_tp message generic by mentioning both
      debugfs/tracefs words in error message plus the tracing_path instead of
      debugfs_mountpoint.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-7-git-send-email-jolsa@xxxxxxxxxx
      [ Add comment for the ENOENT case out of this patch discussion thread ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fd405cf6cfddd300377bd5fd9b93d2ff66fbc32d
  Author: Jan Stancek <jstancek@xxxxxxxxxx>
  Date:   Wed Sep 2 10:19:17 2015 +0200

      perf tests: Print objdump/dso buffers if they don't match

      Signed-off-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Corey Ashford <cjashfor@xxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/d0f42f786bc0e965918e0f422df25617a12a4021.1441181335.git.jstancek@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit edfdb7eab0fe5f98f2951598dc679b71bdb3e16b
  Author: Jan Stancek <jstancek@xxxxxxxxxx>
  Date:   Wed Sep 2 10:19:16 2015 +0200

      perf tests: Stop reading if objdump output crossed sections

      objdump output can span across multiple sections:

        Disassembly of section .text:
          0000000000000008 <crc32c+0x8>:
             8:       48 89 e5                mov    %rsp,%rbp
             b:       53                      push   %rbx
             c:       8b 01                   mov    (%rcx),%eax
          <snip>
            6b:       90                      nop

        Disassembly of section .init.text:
          0000000000000008 <init_module+0x8>:
             8:       00 00                   add    %al,(%rax)
             a:       00 00                   add    %al,(%rax)
             c:       48 89 e5

      Stop further reading if an address starts going backwards, assuming we
      crossed sections.

      Signed-off-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Corey Ashford <cjashfor@xxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/9d1ea95e5f9884fdff1be6f761a2feabef37412c.1441181335.git.jstancek@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 06f679c18fcf414cc8462938466f8361315f18cb
  Author: Jan Stancek <jstancek@xxxxxxxxxx>
  Date:   Thu Sep 3 13:23:32 2015 +0200

      perf tests: Make objdump disassemble zero blocks

      Add -z parameter to avoid skipping zero blocks:

       ffffffff816704fe <sysret_check+0x4b>:
       ffffffff816704fe:  7b 34         jnp ffffffff81670534 
<sysret_signal+0x1c>
             ...
       ffffffff81670501 <sysret_careful>:
       ffffffff81670501:  0f ba e2 03   bt  $0x3,%edx
       ffffffff81670505:  73 11         jae ffffffff81670518 <sysret_signal>

      Signed-off-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Corey Ashford <cjashfor@xxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/130c6267fbdb9af506633a9efa06f3269ff5bd2c.1441275982.git.jstancek@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 729a7ed103ae1b04a5c87a5855885e0973161da4
  Author: Jan Stancek <jstancek@xxxxxxxxxx>
  Date:   Wed Sep 2 10:19:14 2015 +0200

      perf tests: Take into account address of each objdump line

      objdump output can contain repeated bytes. At the moment test reads all
      output sequentially, assuming each address is represented in output only
      once:

        ffffffff8164efb3 <retint_swapgs+0x9>:
        ffffffff8164efb3:  c1 5d 00 eb        rcrl   $0xeb,0x0(%rbp)
        ffffffff8164efb7:  00 4c 8b 5c        add    %cl,0x5c(%rbx,%rcx,4)

        ffffffff8164efb8 <restore_c_regs_and_iret>:
        ffffffff8164efb8:  4c 8b 5c 24 30     mov    0x30(%rsp),%r11
        ffffffff8164efbd:  4c 8b 54 24 38     mov    0x38(%rsp),%r10

      Store objdump output to buffer according to offset calculated from
      address on each line.

      Signed-off-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Corey Ashford <cjashfor@xxxxxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/ad13289a55d6350f7717757c7e32c2d4286402bd.1441181335.git.jstancek@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 43297dda0a51e4ffed0888ce727c218cfb7474b6
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Mon Sep 14 16:06:03 2015 +0100

      KVM: arm64: add workaround for Cortex-A57 erratum #852523

      When restoring the system register state for an AArch32 guest at EL2,
      writes to DACR32_EL2 may not be correctly synchronised by Cortex-A57,
      which can lead to the guest effectively running with junk in the DACR
      and running into unexpected domain faults.

      This patch works around the issue by re-ordering our restoration of the
      AArch32 register aliases so that they happen before the AArch64 system
      registers. Ensuring that the registers are restored in this order
      guarantees that they will be correctly synchronised by the core.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 762982db33b23029e98c844611e2e8beeb75bc0d
  Author: Roger Quadros <rogerq@xxxxxx>
  Date:   Thu Aug 13 13:28:42 2015 +0300

      usb: phy: phy-generic: Fix reset behaviour on legacy boot

      The gpio-desc migration done in v4.0 caused a regression
      with legacy boots due to reversed reset logic.
      e.g. omap3-beagle USB host breaks on legacy boot.

      Request the reset GPIO with GPIOF_ACTIVE_LOW flag so that
      it matches the driver logic and pin behaviour.

      Fixes: e9f2cefb0cdc ("usb: phy: generic: migrate to gpio_desc")
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+
      Tested-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Roger Quadros <rogerq@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 523d5daf86e5e8b540bdc91e090197b5665f0519
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Aug 27 17:45:37 2015 +0200

      usb: musb: ux500: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 6fc6f4b87cb32fcd0bf5e5bce434301958a3b624
  Author: Pascal Huerst <pascal.huerst@xxxxxxxxx>
  Date:   Thu Sep 3 10:50:58 2015 +0200

      usb: musb: Disable interrupts on suspend, enable them on resume

      In certain situations, an interrupt triggers on resume, before 
musb_start()
      has been called. This has been observed to cause enumeration issues after
      suspend/resume cycles with AM335x.

      Signed-off-by: Pascal Huerst <pascal.huerst@xxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 6527cc27761a124de8c08e6488ce17fdcc74dbba
  Author: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
  Date:   Sun Sep 6 01:11:51 2015 +0300

      usb: gadget: amd5536udc: fix error handling in udc_pci_probe()

      If a failure happens early in udc_pci_probe(), error handling code
      just kfree(dev) and returns. The patch adds proper resource
      deallocations in udc_pci_probe() itself,
      since udc_pci_remove() is not suitabe to be called so early
      in initialization process.

      By the way, iounmap(dev->regs) is replaced by iounmap(dev->virt_addr)
      in udc_pci_remove() for clarity.

      Found by Linux Driver Verification project (linuxtesting.org).

      Signed-off-by: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 88ccdbd5fc59ce8c69261a20746ca2533be7e358
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 10:37:39 2015 -0700

      usb: phy: fix phy-qcom-8x16-usb build

      Fix build errors that happen when USB_QCOM_8X16_PHY=y and EXTCON=m:

      drivers/built-in.o: In function `phy_8x16_init':
      phy-qcom-8x16-usb.c:(.text+0x86ef4): undefined reference to 
`extcon_get_cable_state'
      drivers/built-in.o: In function `phy_8x16_probe':
      phy-qcom-8x16-usb.c:(.text+0x870bf): undefined reference to 
`extcon_get_edev_by_phandle'
      phy-qcom-8x16-usb.c:(.text+0x87133): undefined reference to 
`extcon_register_interest'
      phy-qcom-8x16-usb.c:(.text+0x87151): undefined reference to 
`extcon_unregister_interest'
      drivers/built-in.o: In function `phy_8x16_remove':
      phy-qcom-8x16-usb.c:(.text+0x872ec): undefined reference to 
`extcon_unregister_interest'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 40af177efc9385af15c49a40976f71e58e6af418
  Author: Bin Liu <b-liu@xxxxxx>
  Date:   Mon Sep 14 09:12:34 2015 -0500

      usb: musb: ensure in peripheral mode when checking session

      The change ensures otg is not in a A- state when checking for VBUS in
      peripheral mode.

      musb_start() where VBUS checking is in can be called in many situations.
      One example is in babble recovery routine, in which otg is transitioning
      from A-HOST to A-WAIT-BCON, but VBUS discharge takes time, so
      musb->is_active could be set to 1 due to this improper checking, then it
      causes musb_bus_suspend() failed which leads to warning log message
      flooding.

      Signed-off-by: Bin Liu <b-liu@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 51256484c033a6d57d71aa8f788c24e5dc82348a
  Merge: edb9272 0c06729
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Mon Sep 14 17:07:35 2015 +0200

      Merge tag 'kvm-arm-for-4.3-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into kvm-master

      KVM/ARM changes for 4.3-rc2

      - Fix timer interrupt injection after the rework
        that went in during the merge window
      - Reset the timer to zero on reboot
      - Make sure the TCR_EL2 RES1 bits are really set to 1
      - Fix a PSCI affinity bug for non-existing vcpus

  commit edb9272f35d8bc97c86101a13f67d0ba16f3eecc
  Author: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:38:51 2015 +0800

      KVM: fix polling for guest halt continued even if disable it

      If there is already some polling ongoing, it's impossible to disable the
      polling, since as soon as somebody sets halt_poll_ns to 0, polling will
      never stop, as grow and shrink are only handled if halt_poll_ns is != 0.

      This patch fix it by reset vcpu->halt_poll_ns in order to stop polling
      when polling is disabled.

      Reported-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit e2ae0692bf6f71c8b841889b655d0dc08413e4e3
  Author: Felipe Balbi <balbi@xxxxxx>
  Date:   Tue Aug 25 12:07:45 2015 -0500

      usb: dwc3: omap: enable irqs lately

      If we enable IRQs before requesting our
      extcon device, we might fall into a situation
      where and IRQ fires before we're ready to
      handle it.

      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit e4c1b1ba7f663fd77204201eef83baf58e2e5777
  Author: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
  Date:   Fri Aug 21 11:01:29 2015 +0200

      usb: gadget: fix possible regression introduced with ep->claimed

      This patch fixes possible regression introduced by
      patch reworking endpoint claiming mechanism. It restores
      setring ep->driver_data to NULL in usb_ep_autoconfig_reset(),
      which was removed by patch commit cc476b42a39d.

      Fixes: cc476b42a39d ("usb: gadget: encapsulate endpoint
        claiming mechanism")
      Reported-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Robert Baldyga <r.baldyga@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit f5cbb182586ea36c6ad0e90e3534d18a5e9af094
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:53 2015 +0100

      thermal: power_allocator: don't require tzp to be present for the thermal 
zone

      Thermal zones created using thermal_zone_device_create() may not have
      tzp.  As the governor gets its parameters from there, allocate it while
      the governor is bound to the thermal zone so that it can operate in it.
      In this case, tzp is freed when the thermal zone switches to another
      governor.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 8b7b390f805f09ff252351468a79ebabde1ab55a
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:52 2015 +0100

      thermal: power_allocator: relax the requirement of two passive trip points

      The power allocator governor currently requires that the thermal zone
      has at least two passive trip points.  If there aren't, the governor
      refuses to bind to the thermal zone.

      This commit relaxes that requirement.  Now the governor will bind to all
      thermal zones regardless of how many trip points they have.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit e055bb0f9a6e5c09bedf41c2a5b881edbd7f2ed0
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:51 2015 +0100

      thermal: power_allocator: relax the requirement of a sustainable_power in 
tzp

      The power allocator governor currently requires that a sustainable power
      is passed as part of the thermal zone's thermal zone parameters.  If
      that parameter is not provided, it doesn't register with the thermal
      zone.

      While this parameter is strongly recommended for optimal performance, it
      doesn't need to be mandatory.  Relax the requirement and allow the
      governor to bind to thermal zones that don't provide it by estimating it
      from the cooling devices' power model.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit c973c3bcec3752455c4d7545edd42935cd7942d9
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Sep 14 14:23:50 2015 +0100

      thermal: Add a function to get the minimum power

      The thermal core already has a function to get the maximum power of a
      cooling device: power_actor_get_max_power().  Add a function to get the
      minimum power of a cooling device.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Reviewed-by: Daniel Kurtz <djkurtz@xxxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit d0a9964e98731c708500a2e712f28f9d39183647
  Author: Mike Travis <travis@xxxxxxx>
  Date:   Sat Sep 12 21:51:10 2015 -0500

      x86/platform/uv: Implement simple dump failover if kdump fails

      The ability to trigger a kdump using the system NMI command
      was added by

          commit 12ba6c990fab ("x86/UV: Add kdump to UV NMI handler")
          Author: Mike Travis <travis@xxxxxxx>
          Date:   Mon Sep 23 16:25:03 2013 -0500

      This is useful because when kdump is working the information
      gathered is more informative than the original per CPU stack
      traces or "dump" option.  However a number of things can go
      wrong with kdump and then the stack traces are more useful than
      nothing.

      The two most common reasons for kdump to not be available are:

        1) if a problem occurs during boot before the kdump service is
           started, or
        2) the kdump daemon failed to start.

      In either case the call to crash_kexec() returns unexpectedly.

      When this happens uv_nmi_kdump() also sets the
      uv_nmi_kexec_failed flag which causes the slave CPU's to also
      return to the NMI handler. Upon this unexpected return to the
      NMI handler, the NMI handler will revert to the "dump" action
      which uses show_regs() to obtain a process trace dump for all
      the CPU's.

      Other minor changes:
          The "dump" action now generates both the show_regs() stack trace
          and show instruction pointer information.  Whereas the "ips"
          action only shows instruction pointers for non-idle CPU's.  This
          is more like an abbreviated "ps" display.

          Change printk(KERN_DEFAULT...) --> pr_info()

      Signed-off-by: Mike Travis <travis@xxxxxxx>
      Signed-off-by: George Beshers <gbeshers@xxxxxxx>
      Cc: Alex Thorlton <athorlton@xxxxxxx>
      Cc: Dimitri Sivanich <sivanich@xxxxxxx>
      Cc: Hedi Berriche <hedi@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Russ Anderson <rja@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 205ee117d4dc4a11ac3bd9638bb9b2e839f4de9a
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Wed Sep 9 02:57:21 2015 +0200

      netfilter: nf_log: don't zap all loggers on unregister

      like nf_log_unset, nf_log_unregister must not reset the list of loggers.
      Otherwise, a call to nf_log_unregister() will render loggers of other nf
      protocols unusable:

      iptables -A INPUT -j LOG
      modprobe nf_log_arp ; rmmod nf_log_arp
      iptables -A INPUT -j LOG
      iptables: No chain/target/match by that name

      Fixes: 30e0c6a6be ("netfilter: nf_log: prepare net namespace support for 
loggers")
      Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit cda34fc774d114afe98515a21c2063a803f922bc
  Author: Juergen Gross <jgross@xxxxxxxx>
  Date:   Mon Sep 14 12:42:23 2015 +0200

      x86/paravirt: Remove the unused pv_time_ops::get_tsc_khz method

      It's not used anywhere.

      Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
      Acked-by: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: akataria@xxxxxxxxxx
      Cc: chrisw@xxxxxxxxxxxx
      Cc: jeremy@xxxxxxxx
      Cc: virtualization@xxxxxxxxxxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1442227343-403-1-git-send-email-jgross@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit bf950040a53da35522e38066d9eb6ab7a1c9d136
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Fri Sep 11 18:22:02 2015 +0100

      arm64: pgtable: use a single bit for PTE_WRITE regardless of DBM

      Depending on CONFIG_ARM64_HW_AFDBM, we use either bit 57 or 51 of the
      pte to represent PTE_WRITE. Given that bit 51 is reserved prior to
      ARMv8.1, we can just use that bit regardless of the config option. That
      also matches what happens if a kernel configured with ARM64_HW_AFDBM=y
      is run on a CPU without the DBM functionality.

      Cc: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 62d96c71d248834af2891293dc23cc344ae2ec36
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Fri Sep 11 18:22:01 2015 +0100

      arm64: Fix pte_modify() to preserve the hardware dirty information

      The pte_modify() function with hardware AF/DBM enabled must transfer the
      hardware dirty information to the software PTE_DIRTY bit. However, it
      was setting this bit in newprot and the mask does not cover such bit.
      This patch sets PTE_DIRTY on the original pte which will be preserved in
      the returned value.

      Fixes: 2f4b829c625e ("arm64: Add support for hardware updates of the 
access and dirty pte bits")
      Cc: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit b847415ce96efef819534b230d84695b1bc6d36b
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Fri Sep 11 18:22:00 2015 +0100

      arm64: Fix the pte_hw_dirty() check when AF/DBM is enabled

      Commit 2f4b829c625e ("arm64: Add support for hardware updates of the
      access and dirty pte bits") introduced support for handling hardware
      updates of the access flag and dirty status. The PTE is automatically
      dirtied in hardware (if supported) by clearing the PTE_RDONLY bit when
      the PTE_DBM/PTE_WRITE bit is set. The pte_hw_dirty() macro was added to
      detect a hardware dirtied pte. The pte_dirty() macro checks for both
      software PTE_DIRTY and pte_hw_dirty().

      Functions like pte_modify() clear the PTE_RDONLY bit since it is meant
      to be set in set_pte_at() when written to memory. In such cases,
      pte_hw_dirty() would return true even though such pte is clean. This
      patch changes pte_hw_dirty() to test the PTE_DBM/PTE_WRITE bit together
      with PTE_RDONLY.

      Fixes: 2f4b829c625e ("arm64: Add support for hardware updates of the 
access and dirty pte bits")
      Reported-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Tested-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit ba9cc453c400049f632d4eb2f2835e2f96654ddc
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Fri Sep 11 08:49:47 2015 +0100

      arm64: dma-mapping: check whether cma area is initialized or not

      If CMA is turned on and CMA size is set to zero, kernel should
      behave as if CMA was not enabled at compile time.
      Every dma allocation should check existence of cma area
      before requesting memory.

      Arm has done this by commit e464ef16c4f0 ("arm: dma-mapping: add
      checking cma area initialized"), also do this for arm64.

      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit ef78f2a4bf84d8db9f36868decca2dc24e02a6af
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:31 2015 -0700

      x86/fpu: Check CPU-provided sizes against struct declarations

      We now have C structures defined for each of the XSAVE state
      components that we support.  This patch adds checks during our
      verification pass to ensure that the CPU-provided data
      enumerated in CPUID leaves matches our C structures.

      If not, we warn and dump all the XSAVE CPUID leaves.

      Note: this *actually* found an inconsistency with the MPX
      'bndcsr' state.  The hardware pads it out differently from
      our C structures.  This patch caught it and warned.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233131.A8DB36DA@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e6e888f96b4a531886f3bf29ba9af0b6f1026365
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:30 2015 -0700

      x86/fpu: Check to ensure increasing-offset xstate offsets

      The xstate CPUID leaves enumerate where each state component is
      inside the XSAVE buffer, along with the size of the entire
      buffer.  Our new XSAVE sanity-checking code extrapolates an
      expected _total_ buffer size by looking at the last component
      that it encounters.

      That method requires that the highest-numbered component also
      be the one with the highest offset.  This is a pretty safe
      assumption, but let's add some code to ensure it stays true.

      To make this check work correctly, we also need to ensure we
      only consider the offsets from enabled features because the
      offset register (ebx) will return 0 on unsupported features.

      This also means that we will preserve the -1's that we
      initialized xstate_offsets/sizes[] with.  That will help
      find bugs.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233130.0843AB15@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 65ac2e9baa7deebe3e9588769d44d85555e05619
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:30 2015 -0700

      x86/fpu: Correct and check XSAVE xstate size calculations

      Note: our xsaves support is currently broken and disabled.  This
      patch does not fix it, but it is an incremental improvement.

      This might be useful to someone backporting the entire set of
      XSAVES patches at some point, but it should not be backported
      alone.

      Ingo said he wanted something like this (bullets 2 and 3):

        http://lkml.kernel.org/r/20150808091508.GB32641@xxxxxxxxx

      There are currently two xsave buffer formats: standard and
      compacted.  The standard format is waht 'XSAVE' and 'XSAVEOPT'
      produce while 'XSAVES' and 'XSAVEC' produce a compacted-formet
      buffer.  (The kernel never uses XSAVEC)

      But, the XSAVES buffer *ALSO* contains "system state components"
      which are never saved by a plain XSAVE.  So, XSAVES has two
      things that might make its buffer differently-sized from an
      XSAVE-produced one.

      The current code assumes that an XSAVES buffer's size is simply
      the sum of the sizes of the (user) states which are supported.
      This seems to work in most cases, but it is not consistent with
      what the SDM says, and it breaks if we 'align' a component in
      the buffer.  The calculation is also unnecessary work since the
      CPU *tells* us the size of the buffer directly.

      This patch just reads the size of the buffer right out of the
      CPUID leaf instead of trying to derive it.

      But, blindly trusting the CPU like this is dangerous.  We add
      a verification pass in do_extra_xstate_size_checks() to ensure
      that the size we calculate matches with what we see from the
      hardware.  When it comes down to it, we trust but verify the
      CPU.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233130.234FE1EC@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 060dd0f712562925662c65b90d225d82304764f7
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:29 2015 -0700

      x86/fpu: Add C structures for AVX-512 state components

      AVX-512 has 3 separate state components:

        1. opmask registers
        2. zmm upper half of registers 0-15
        3. new zmm registers (16-31)

      This patch adds C structures for the three components along with
      a few comments mostly lifted from the SDM to explain what they
      do.  This will allow us to check our structures against what the
      hardware tells us about the sizes of the components.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233129.F2433B98@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 83aa3c45307228af4329cbb915a2f2142e5479ad
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:29 2015 -0700

      x86/fpu: Rework YMM definition

      We are about to rework all of the "extended state" definitions.
      This makes the 'ymm' naming consistent with the AVX-512 types
      we will introduce later.

      We also add a convenience type: "reg_128_bit" so that we do
      not have to spell out our arithmetic.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233129.B4EB045F@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1126cb4535c4ff172c37a412a6bd25d6b47a1901
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:29 2015 -0700

      x86/fpu/mpx: Rework MPX 'xstate' types

      MPX includes two separate "extended state components".  There is
      no real need to have an 'mpx_struct' because we never really
      manage the states together.

      We also separate out the actual data in 'mpx_bndcsr_state' from
      the padding.  We will shortly be checking the state sizes
      against our structures and need them to match.  For consistency,
      we also ensure to prefix these types with 'mpx_'.

      Lastly, we add some comments to mirror some of the descriptions
      in the Intel documents (SDM) of the various state components.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233129.384B73EB@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 633d54c47a5bedfb42f10e6a63eeeebd35abdb4c
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:29 2015 -0700

      x86/fpu: Add xfeature_enabled() helper instead of test_bit()

      We currently use test_bit() in a few places to see if an
      xfeature is enabled.  It ends up being a bit ugly because
      'xfeatures_mask' is a u64 and test_bit wants an 'unsigned long'
      so it requires a cast.  The *_bit() functions are also
      techincally atomic, which we have no need for here.

      So, remove the test_bit()s and replace with the new
      xfeature_enabled() helper.

      This also provides a central place to add a comment about the
      future need to support 'system xstates'.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233129.B1534F86@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ee9ae257eb17d3426ee9ab91449a3aa443298b36
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:28 2015 -0700

      x86/fpu: Remove 'xfeature_nr'

      xfeature_nr ended up being initialized too late for me to
      use it in the "xsave size sanity check" patch which is
      later in the series.  I tried to move around its initialization
      but realized that it was just as easy to get rid of it.

      We only have 9 XFEATURES.  Instead of dynamically calculating
      and storing the last feature, just use the compile-time max:
      XFEATURES_NR_MAX.  Note that even with 'xfeatures_nr' we can
      had "holes" in the xfeatures_mask that we had to deal with.

      We also change a 'leaf' variable to be a plain 'i'.  Although
      it is used to grab a cpuid leaf in this one loop, all of the
      other loops just use an 'i' and I find it much more obvious
      to keep the naming consistent across all the similar loops.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233128.3F30DF5A@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8a93c9e0dca131a0bf330ea9d1e57c1bcf3824ad
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:28 2015 -0700

      x86/fpu: Rework XSTATE_* macros to remove magic '2'

      The 'xstate.c' code has a bunch of references to '2'.  This
      is because we have a lot more work to do for the "extended"
      xstates than the "legacy" ones and state component 2 is the
      first "extended" state.

      This patch replaces all of the instances of '2' with
      FIRST_EXTENDED_XFEATURE, which clearly explains what is
      going on.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233128.A8C0BF51@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dad8c4fe8530f28dde73dadd1d588e3aaa507562
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:27 2015 -0700

      x86/fpu: Rename XFEATURES_NR_MAX

      This is a logcal followon to the last patch.  It makes the
      XFEATURE_MAX naming consistent with the other enum values.
      This is what Ingo suggested.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233127.A541448F@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d91cab78133d33b1dfd3d3fa7167fcbf74fb5f99
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:26 2015 -0700

      x86/fpu: Rename XSAVE macros

      There are two concepts that have some confusing naming:
       1. Extended State Component numbers (currently called
          XFEATURE_BIT_*)
       2. Extended State Component masks (currently called XSTATE_*)

      The numbers are (currently) from 0-9.  State component 3 is the
      bounds registers for MPX, for instance.

      But when we want to enable "state component 3", we go set a bit
      in XCR0.  The bit we set is 1<<3.  We can check to see if a
      state component feature is enabled by looking at its bit.

      The current 'xfeature_bit's are at best xfeature bit _numbers_.
      Calling them bits is at best inconsistent with ending the enum
      list with 'XFEATURES_NR_MAX'.

      This patch renames the enum to be 'xfeature'.  These also
      happen to be what the Intel documentation calls a "state
      component".

      We also want to differentiate these from the "XSTATE_*" macros.
      The "XSTATE_*" macros are a mask, and we rename them to match.

      These macros are reasonably widely used so this patch is a
      wee bit big, but this really is just a rename.

      The only non-mechanical part of this is the

        s/XSTATE_EXTEND_MASK/XFEATURE_MASK_EXTEND/

      We need a better name for it, but that's another patch.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233126.38653250@xxxxxxxxxxxxxxxxxx
      [ Ported to v4.3-rc1. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f454b478861325f067fd58ba7ee9f1b5c4a9d6a0
  Author: Jan Beulich <JBeulich@xxxxxxxx>
  Date:   Wed Sep 2 09:45:58 2015 -0600

      x86/ldt: Fix small LDT allocation for Xen

      While the following commit:

        37868fe113 ("x86/ldt: Make modify_ldt synchronous")

      added a nice comment explaining that Xen needs page-aligned
      whole page chunks for guest descriptor tables, it then
      nevertheless used kzalloc() on the small size path.

      As I'm unaware of guarantees for kmalloc(PAGE_SIZE, ) to return
      page-aligned memory blocks, I believe this needs to be switched
      back to __get_free_page() (or better get_zeroed_page()).

      Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: David Vrabel <david.vrabel@xxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/55E735D6020000780009F1E6@xxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 75933433d666c2ab13a7a93f4ec1e6f000a94ffc
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:25 2015 -0700

      x86/fpu: Remove partial LWP support definitions

      LightWeight Profiling was evidently an AMD profiling feature
      that we never got around to implementing.  Remove the references
      to it.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233125.7E602284@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4109ca066b6b899ac7549bf3aac94b178ac95891
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:25 2015 -0700

      x86/fpu: Remove XSTATE_RESERVE

      The original purpose of XSTATE_RESERVE was to carve out space
      to store all of the possible extended state components that
      get saved with the XSAVE instruction(s).

      However, we are now almost entirely dynamically allocating
      the buffers we use for XSAVE by placing them at the end of
      the task_struct and them sizing them at boot.  The one
      exception for that is the init_task.

      The maximum extended state component size that we have today
      is on systems with space for AVX-512 and Memory Protection
      Keys: 2696 bytes.  We have reserved a PAGE_SIZE buffer in
      the init_task via fpregs_state->__padding.

      This check ensures that even if the component sizes or
      layout were changed (which we do not expect), that we will
      still not overflow the init_task's buffer.

      In the case that we detect we might overflow the buffer,
      we completely disable XSAVE support in the kernel and try
      to boot as if we had 'legacy x87 FPU' support in place.
      This is a crippled state without any of the XSAVE-enabled
      features (MPX, AVX, etc...).  But, it at least let us
      boot safely.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233125.D948D475@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0a265375028b241a9173b7c569dd2368ba97fcd4
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:24 2015 -0700

      x86/fpu: Move XSAVE-disabling code to a helper

      When we want to _completely_ disable XSAVE support as far as
      the kernel is concerned, we have a big set of feature flags
      to clear.  We currently only do this in cases where the user
      asks for it to be disabled, but we are about to expand the
      places where we do it to handle errors too.

      Move the code in to xstate.c, and put it in the xstate.h
      header.  We will use it in the next patch too.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233124.EA9A70E5@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b0815359590f496f80e355a74319b6dc77010951
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 16:31:24 2015 -0700

      x86/fpu: Print xfeature buffer size in decimal

      This is utterly a personal taste thing, but I find it way easier
      to read structure sizes in decimal than in hex.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/20150902233124.1A8B04A8@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8ece249a811e93d3f60e3f1ebdc86c7e7a95bdbf
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:11:42 2015 +0100

      acpi/apei: Use appropriate pgprot_t to map GHES memory

      If the ACPI APEI firmware handles hardware error first (called
      "firmware first handling"), the firmware updates the GHES memory
      region with hardware error record (called "generic hardware
      error record"). Essentially the firmware writes hardware error
      records in the GHES memory region, triggers an NMI/interrupt,
      then the GHES driver goes off and grabs the error record from
      the GHES region.

      The kernel currently maps the GHES memory region as cacheable
      (PAGE_KERNEL) for all architectures. However, on some arm64
      platforms, there is a mismatch between how the kernel maps the
      GHES region (PAGE_KERNEL) and how the firmware maps it
      (EFI_MEMORY_UC, ie. uncacheable), leading to the possibility of
      the kernel GHES driver reading stale data from the cache when it
      receives the interrupt.

      With stale data being read, the kernel is unaware there is new
      hardware error to be handled when there actually is; this may
      lead to further damage in various scenarios, such as error
      propagation caused data corruption. If uncorrected error (such
      as double bit ECC error) happened in memory operation and if the
      kernel is unaware of such an event happening, errorneous data may
      be propagated to the disk.

      Instead GHES memory region should be mapped with page protection
      type according to what is returned from arch_apei_get_mem_attribute().

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      [ Small stylistic tweaks. ]
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441372302-23242-3-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 89e44b51cc0db50ea4b5bbb5d582c4db88bbaed8
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Sep 4 14:11:41 2015 +0100

      arm64, acpi/apei: Implement arch_apei_get_mem_attributes()

      Table 8 of UEFI 2.5 section 2.3.6.1 defines mappings from EFI
      memory types to MAIR attribute encodings for arm64.

      If the physical address has memory attributes defined by EFI
      memmap as EFI_MEMORY_[UC|WC|WT], return approprate page
      protection type according to the UEFI spec. Otherwise, return
      PAGE_KERNEL.

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      [ Small stylistic tweaks. ]
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Acked-by: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441372302-23242-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0e2815de552a638295cfdaf0865e575573bf263e
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 09:12:44 2015 +0200

      x86/headers: Clean up too long lines

      Signed-off-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: bp@xxxxxxxxx
      Cc: brgerst@xxxxxxxxx
      Cc: dvlasenk@xxxxxxxxxx
      Cc: luto@xxxxxxxxxxxxxx
      Cc: mikko.rapeli@xxxxxx
      Cc: oleg@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/20150909071244.GM3644@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit eef7635a22f6b144206b5ca2f1398f637acffc4d
  Author: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
  Date:   Fri Sep 11 09:34:26 2015 +0530

      clockevents: Remove unused set_mode() callback

      All users are migrated to the per-state callbacks, get rid of the
      unused interface and the core support code.

      Signed-off-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linaro-kernel@xxxxxxxxxxxxxxxx
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/fd60de14cf6d125489c031207567bb255ad946f6.1441943991.git.viresh.kumar@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 04a6b8bfee06e309be7e9ae4527cdab19c081761
  Author: Mathias Krause <mathias.krause@xxxxxxxxxxx>
  Date:   Fri Sep 11 09:57:20 2015 +0200

      xfrm6: Fix ICMPv6 and MH header checks in _decode_session6

      Ensure there's enough data left prior calling pskb_may_pull(). If
      skb->data was already advanced, we'll call pskb_may_pull() with a
      negative value converted to unsigned int -- leading to a huge
      positive value. That won't matter in practice as pskb_may_pull()
      will likely fail in this case, but it leads to underflow reports on
      kernels handling such kind of over-/underflows, e.g. a PaX enabled
      kernel instrumented with the size_overflow plugin.

      Reported-by: satmd <satmd@xxxxxxx>
      Reported-and-tested-by: Marcin Jurkowski <marcin1j@xxxxxxxxx>
      Signed-off-by: Mathias Krause <mathias.krause@xxxxxxxxxxx>
      Cc: PaX Team <pageexec@xxxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit 1e6428124fe22906be0de1622c8fed8e50e5de05
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 08:58:10 2015 +0200

      x86/vm86: Fix the misleading CONFIG_VM86 Kconfig help text

      The CONFIG_VM86 Kconfig help text is actively misleading, so fix it:

        - Don't mark it 'obsolete' in the text as we'll support the ABI as long 
as CPUs
          support it.

        - Qualify the part about software emulation and mention that for some 
apps you
          want a real vm86 mode.

        - Don't scare users away from the option, instead explain what it does.

      Reported-by: Stas Sergeev <stsp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Austin S Hemmelgarn <ahferroin7@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b838c950b397ebed94eb11b473f1f17428a1443d
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:20:25 2015 +0200

      soc: dove: Prepare irq handler for irq argument removal

      The irq argument of most interrupt flow handlers is unused or merily
      used instead of a local variable. The handlers which need the irq
      argument can retrieve the irq number from the irq descriptor.

      Search and update was done with coccinelle and the invaluable help of
      Julia Lawall.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>

  commit 5230347ea70a811f0a526e8e4f0f529ac31b7d18
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:27:13 2015 +0200

      soc: dove: Use irq_desc_get_xxx() to avoid redundant lookup of irq_desc

      Search and replace done with coccinelle

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>

  commit 391de7f9ef9e6a500343d977ccd037b70e62aa45
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:17:00 2015 +0200

      powerpc/cell: Prepare irq handler for irq argument removal

      The irq argument of most interrupt flow handlers is unused or merily
      used instead of a local variable. The handlers which need the irq
      argument can retrieve the irq number from the irq descriptor.

      Search and update was done with coccinelle and the invaluable help of
      Julia Lawall.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 0a0dbd92584061549d9775030269365dc16ad289
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:13:42 2015 +0200

      powerpc/85xx: Prepare irq handlers for irq argument removal

      The irq argument of most interrupt flow handlers is unused or merily
      used instead of a local variable. The handlers which need the irq
      argument can retrieve the irq number from the irq descriptor.

      Search and update was done with coccinelle and the invaluable help of
      Julia Lawall.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Scott Wood <scottwood@xxxxxxxxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 5aac2d3368210f15c2fc73f158e2110a0bb611ca
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Mon Sep 14 10:11:26 2015 +0200

      powerpc/mpc5121_ads_cpld: Prepare irq handler for irq argument removal

      The irq argument of most interrupt flow handlers is unused or merily
      used instead of a local variable. The handlers which need the irq
      argument can retrieve the irq number from the irq descriptor.

      Search and update was done with coccinelle and the invaluable help of
      Julia Lawall.

      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>
      Cc: Anatolij Gustschin <agust@xxxxxxx>
      Cc: linuxppc-dev@xxxxxxxxxxxxxxxx

  commit 2e586a7e017a502410ba1c1a7411179e1d3fbb2b
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Mon Sep 14 01:17:43 2015 -0700

      drm/vmwgfx: Map the fifo as cached

      On the guest kernel side, previously the FIFO has been mapped write-
      combined. This has worked since VMs up to now has not honored the mapping
      type and mapped the FIFO cached anyway. Since the FIFO is accessed cached
      by the CPU on the virtual device side, this leads to inconsistent
      mappings once the guest starts to honor the mapping types.

      So ask for cached mappings when we map the FIFO. We do this by
      using ioremap_cache() instead of ioremap_wc(), and remove the MTRR setup.
      On the TTM side, MOBs, GMRs and VRAM buffers are already requesting
      cached mappings for kernel- and user-space.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 54c12bc374408faddbff75dbf1a6167c19af39c4
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Mon Sep 14 01:13:11 2015 -0700

      drm/vmwgfx: Fix up user_dmabuf refcounting

      If user space calls unreference on a user_dmabuf it will typically
      kill the struct ttm_base_object member which is responsible for the
      user-space visibility. However the dmabuf part may still be alive and
      refcounted. In some situations, like for shared guest-backed surface
      referencing/opening, the driver may try to reference the
      struct ttm_base_object member again, causing an immediate kernel warning
      and a later kernel NULL pointer dereference.

      Fix this by always maintaining a reference on the struct
      ttm_base_object member, in situations where it might subsequently be
      referenced.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Brian Paul <brianp@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 19ab6bc5674a30fdb6a2436b068d19a3c17dc73e
  Author: Liu.Zhao <lzsos369@xxxxxxx>
  Date:   Mon Aug 24 08:36:12 2015 -0700

      USB: option: add ZTE PIDs

      This is intended to add ZTE device PIDs on kernel.

      Signed-off-by: Liu.Zhao <lzsos369@xxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      [johan: sort the new entries ]
      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>

  commit 91a4dc9f71e4b8f9b8da547d19f80e7be89d7539
  Merge: ebfb498 caa4704
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Sep 14 09:29:22 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fix from Arnaldo Carvalho de Melo:

        - The values of _SC_NPROCESSORS_CONF and _SC_NPROCESSORS_ONLN 
(sysconf(3)) were
          being read from perf.data files in the inverse order they are 
written, fix it.
          (Arnaldo Carvalho de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fa84b52cb681b27e6b5e003457562e25a239b9c4
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Sep 8 16:46:40 2015 +0200

      pinctrl: samsung: s3c24xx: fix syntax error

      ?SYNTAX ERROR

      irq_desc_get_irq_chip() does not exist. It should
      be irq_desc_get_chip(). Tested by compiling
      s3c2410_defconfig.

      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Reported-by: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 942cde724075f840ded89390b10dce1a47a4d712
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Thu Sep 3 10:34:30 2015 -0700

      pinctrl: core: Warn about NULL gpio_chip in pinctrl_ready_for_gpio_range()

      If the gpio driver is confused about the numbers for gpio-ranges,
      pinctrl_ready_for_gpio_range() may get called with invalid GPIO
      causing a NULL pointer exception. Let's instead provide a warning
      that allows fixing the problem and return with error.

      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 163dc9f39a26b41fc49319fce4145b35f9705789
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Sat Aug 1 13:22:38 2015 +0900

      pinctrl: join lines that can be a single line within 80 columns

      There is no reason to break a line shorter than 80 columns.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5a99233e9bcacc7ea23e173a75bbb7301abd3e6f
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Mon Aug 24 23:12:27 2015 +0200

      pinctrl: digicolor: convert null test to IS_ERR test

      Since commit 323de9efdf3e ("pinctrl: make pinctrl_register() return proper
      error code"), pinctrl_register returns an error code rather than NULL on
      failure.  Update a driver that was introduced more recently.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@
      expression e,e1,e2;
      @@

      e = pinctrl_register(...)
      ... when != e = e1
      if (
      -   e == NULL
      +   IS_ERR(e)
         ) {
           ...
           return
      -      e2
      +      PTR_ERR(e)
           ;
           }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Acked-by: Baruch Siach <baruch@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d259ec26a6c541a5437e9ed0a1e1891342af3cff
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Mon Aug 24 23:12:26 2015 +0200

      pinctrl: qcom: ssbi: convert null test to IS_ERR test

      Since commit 323de9efdf3e ("pinctrl: make pinctrl_register() return proper
      error code"), pinctrl_register returns an error code rather than NULL on
      failure.  Update some drivers that were introduced more recently.

      The semantic patch that makes this change is as follows:
      (http://coccinelle.lip6.fr/)

      // <smpl>
      @@
      expression e,e1,e2;
      @@

      e = pinctrl_register(...)
      ... when != e = e1
      if (
      -   e == NULL
      +   IS_ERR(e)
         ) {
           ...
           return
      -      e2
      +      PTR_ERR(e)
           ;
           }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 46d4f7c25e1bb59b1663878b843a7ec06eaf5806
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Thu Sep 3 10:31:27 2015 -0700

      gpio: omap: Fix GPIO numbering for deferred probe

      If gpio-omap probe fails with -EPROBE_DEFER, the GPIO numbering
      keeps increasing. Only increase the gpio count if gpiochip_add()
      was successful as otherwise the numbers will increase for each
      probe attempt.

      Cc: Javier Martinez Canillas <javier@xxxxxxxxxxxx>
      Cc: Kevin Hilman <khilman@xxxxxxxxxxxxxxxxxxx>
      Cc: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Reviewed-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ae80d64ee8c88b77c58254bcdc5c0981faab672d
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 10:46:15 2015 +0200

      Documentation: gpio: Explain that <function>-gpio is also supported

      The GPIO documentation mentions that GPIOs are mapped by defining a
      <function>-gpios property in the consumer device's node but a -gpio
      sufix is also supported after commit:

      dd34c37aa3e8 ("gpio: of: Allow -gpio suffix for property names")

      Update the documentation to match the implementation.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5e606abef57a89b3ca25f5d97a953c6cdad7cbac
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Fri Aug 28 11:44:49 2015 -0700

      gpio: omap: Fix gpiochip_add() handling for deferred probe

      Currently we gpio-omap breaks if gpiochip_add() returns -EPROBE_DEFER:

      [    0.570000] gpiochip_add: GPIOs 0..31 (gpio) failed to register
      [    0.570000] omap_gpio 48310000.gpio: Could not register gpio chip -517
      ...
      [    3.670000] omap_gpio 48310000.gpio: Unbalanced pm_runtime_enable!

      Let's fix the issue by adding the missing pm_runtime_put() on error.

      Cc: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Cc: Javier Martinez Canillas <javier@xxxxxxxxxxxx>
      Cc: Kevin Hilman <khilman@xxxxxxxxxxxxxxxxxxx>
      Cc: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Acked-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e799f35c32ea940222b568abf38d6abcab7fa8c1
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sun Aug 30 23:58:44 2015 +0200

      gpio: sx150x: Remove unnecessary MODULE_ALIAS()

      The driver has a I2C device id table that is used to create the module
      aliases and also "sx150x" isn't a supported I2C id, so it's never used.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 87e77e46c61a9333227ab41cdefb1875758a4f13
  Author: Dirk Behme <dirk.behme@xxxxxxxxx>
  Date:   Wed Sep 2 20:07:10 2015 +0200

      Documentation: gpio: board: describe the con_id parameter

      The con_id parameter has to match the GPIO description and is 
automatically
      extended by the GPIO suffix if not NULL. I had to look into the code to
      understand this and properly find the GPIO I've been looking for, so 
document
      this.

      Signed-off-by: Dirk Behme <dirk.behme@xxxxxxxxx>
      Acked-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 69de52ba321dda8dd7f632d1e480983494325ba0
  Author: Dirk Behme <dirk.behme@xxxxxxxxx>
  Date:   Wed Sep 2 20:07:09 2015 +0200

      Documentation: gpio: board: add flags parameter to gpiod_get*() functions

      With commit 39b2bbe3d715 ("gpio: add flags argument to gpiod_get*()
      functions") the gpiod_get*() functions got a 'flags' parameter. Reflect
      this in the documentation, too.

      Signed-off-by: Dirk Behme <dirk.behme@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e20538b82f1ffcc06e68feb117f24f211cff7a4d
  Author: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
  Date:   Fri Aug 28 09:44:18 2015 -0700

      gpio: Propagate errors from chip->get()

      It's possible to have gpio chips hanging off unreliable remote buses
      where the get() operation will fail to acquire a readout of the current
      gpio state. Propagate these errors to the consumer so that they can
      act on, retry or ignore these failing reads, instead of treating them as
      the line being held high.

      Signed-off-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Reviewed-by: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aad38b75fb632200eb64282469458d21ce2cc39a
  Author: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
  Date:   Tue Aug 25 09:12:43 2015 +0000

      gpio: rcar: GPIO_RCAR doesn't relate to ARM

      8cd1470("gpio: rcar: Add r8a7795 (R-Car H3) support") added
      GPIO support for r8a7795. r8a7795 based on CONFIG_ARM64.
      OTOH, GPIO_RCAR driver can be compiled fine on non-ARM.
      This patch removed ARM dependency for it.

      Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 1bbc557d976b4e5ae9a41d619bd79f09ccac9afc
  Author: Peng Fan <van.freenix@xxxxxxxxx>
  Date:   Sun Aug 23 21:11:53 2015 +0800

      gpio: mxs: need to check return value of irq_alloc_generic_chip

      Need to check return value of irq_alloc_generic_chip, because
      it may return NULL.
      1. Change mxs_gpio_init_gc return type from void to int.
      2. Add a new lable out_irqdomain_remove to remove the irq domain
         when mxc_gpio_init_gc fail.

      Signed-off-by: Peng Fan <van.freenix@xxxxxxxxx>
      Cc: Alexandre Courbot <gnurou@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9e26b0b114adb321a9bf41520bac304ef49e77d1
  Author: Peng Fan <van.freenix@xxxxxxxxx>
  Date:   Sun Aug 23 21:11:52 2015 +0800

      gpio: mxc: need to check return value of irq_alloc_generic_chip

      Need to check return value of irq_alloc_generic_chip, because
      it may return NULL.
      1. Change mxc_gpio_init_gc return type from void to int.
      2. Add a new lable out_irqdomain_remove to remove the irq domain
         when mxc_gpio_init_gc fail.

      Signed-off-by: Peng Fan <van.freenix@xxxxxxxxx>
      Cc: Alexandre Courbot <gnurou@xxxxxxxxx>
      [Manually rebased]
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit eba4f88d5af84e0fcaa5d6eb4fe35a75c47203cb
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Aug 17 19:21:43 2015 +0100

      thermal: cpu_cooling: free power table on error or when unregistering

      The power table is not being freed on error from cpufreq_cooling
      register or when unregistering.  Free it.

      Fixes: c36cf0717631 ("thermal: cpu_cooling: implement the power cooling 
device API")
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 459ac37506d195713b5e82271a2ac44a777e47df
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Mon Aug 17 19:21:42 2015 +0100

      thermal: cpu_cooling: don't call kcalloc() under rcu_read_lock

      build_dyn_power_table() allocates the power table while holding
      rcu_read_lock.  kcalloc using GFP_KERNEL may sleep, so it can't be
      called in an RCU read-side path.

      Move the rcu protection to the part of the function that really needs
      it: the part that handles the dev_pm_opp pointer received from
      dev_pm_opp_find_freq_ceil().  In the unlikely case that there is an OPP
      added to the cpu while this function is running, return -EAGAIN.

      Fixes: c36cf0717631 ("thermal: cpu_cooling: implement the power cooling 
device API")
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 0847e26a84faa0fcb4572d7e42d0a44cab69a83d
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 13:10:14 2015 +0200

      thermal: db8500_cpufreq_cooling: Fix module autoload for OF platform 
driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 64e05d8bcc837bc66cb2c6e71796c8883aa45939
  Author: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
  Date:   Thu Aug 27 07:32:11 2015 +0530

      thermal: cpu_cooling: Add MAINTAINERS entry

      None of the patches are reaching Viresh or Daniel directly as
      get_maintainers doesn't report us as maintainers. Looks like file header
      or history of commits isn't able to do that properly.

      Add a separate entry for cpu_cooling driver in MAINTAINERS.

      Acked-by: Eduardo Valentin <edubezval@xxxxxxxxx>
      Acked-by: Amit Daniel Kachhap <amit.daniel@xxxxxxxxxxx>
      Acked-by: Amit Daniel Kachhap <amit.kachhap@xxxxxxxxx>
      Signed-off-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit ec2feb475f4880246166a47e066e7a601a6103af
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 21:13:41 2015 -0700

      thermal: ti-soc: Kconfig fix to avoid menu showing wrongly

      Move the dependencies to menu, so we avoid showing it wrongly.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-omap@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 41ae3c02743e8f1f21ceebca614342d26b4eb080
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:58:36 2015 -0700

      thermal: ti-soc: allow compile test

      Adding COMPILE_TEST flag to ti-soc driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-omap@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit cb7fb4d342023d03070fcc1ed73fcd43682973d7
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:56:26 2015 -0700

      thermal: qcom_spmi: allow compile test

      Adding COMPILE_TEST flag to qcom_spmi driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 2bf427353eb606481d15d2843c76cdffa29ed418
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:53:35 2015 -0700

      thermal: exynos: allow compile test

      Adding COMPILE_TEST flag to exynos driver to facilitate
      maintenance.

      Cc: Lukasz Majewski <l.majewski@xxxxxxxxxxx>
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-samsung-soc@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 1b1582672121e1c1138e68b64128d94e7f61d10c
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:48:00 2015 -0700

      thermal: armada: allow compile test

      Adding COMPILE_TEST flag to armada driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 07fffd5ccab70bc00fd69b9ce2297a5e8d05b838
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:45:25 2015 -0700

      thermal: dove: allow compile test

      Adding COMPILE_TEST flag to dove driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 9c8aa959e13f5cb082ad244d2c9b806a67d9a8b6
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:44:46 2015 -0700

      thermal: kirkwood: allow compile test

      Adding COMPILE_TEST flag to kirkwood driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 444f9b00073668f028db0c14f609cf08abc9a2b3
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:43:57 2015 -0700

      thermal: rockchip: allow compile test

      Adding COMPILE_TEST flag to rockchip driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: Heiko Stuebner <heiko@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: linux-rockchip@xxxxxxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit aa2937b73a45e49704b24db8d9163d83002332d9
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:42:01 2015 -0700

      thermal: spear: allow compile test

      Adding COMPILE_TEST flag to spear driver to facilitate
      maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Acked-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit f9e2b05218e64fc6c614b90a650863981701f974
  Author: Eduardo Valentin <edubezval@xxxxxxxxx>
  Date:   Wed Sep 9 20:39:44 2015 -0700

      thermal: hisi: allow compile test

      Adding COMPILE_TEST flag to hisi driver to facilitate maintenance.

      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Cc: linux-pm@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit cd33dc9ac2977ebe30cecbf39d2992190fbac5b4
  Author: Punit Agrawal <punit.agrawal@xxxxxxx>
  Date:   Tue Sep 8 14:51:12 2015 +0100

      thermal: Fix thermal_zone_of_sensor_register to match documentation

      thermal_zone_of_sensor_register is documented as returning a pointer
      to either a valid thermal_zone_device on success, or a corresponding
      ERR_PTR() value.

      In contrast, the function returns NULL when THERMAL_OF is configured
      off. Fix this.

      Signed-off-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Acked-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Eduardo Valentin <edubezval@xxxxxxxxx>
      Cc: Zhang Rui <rui.zhang@xxxxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>

  commit 216076705d6ac291d42e0f8dd85e6a0da98c0fa3
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Tue Sep 8 08:56:13 2015 -0400

      dm thin: disable discard support for thin devices if pool's is disabled

      If the pool is configured with 'ignore_discard' its discard support is
      disabled.  The pool's thin devices should also have queue_limits that
      reflect discards are disabled.

      Fixes: 34fbcf62 ("dm thin: range discard support")
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.1+

  commit cbc41d0a761bffb3166a413a3c77100a737c0cd7
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 14:28:15 2015 +0200

      drivers: sh: Disable PM runtime for multi-platform ARM with genpd

      If the default PM Domain using PM_CLK is used for PM runtime, the real
      Clock Domain cannot be registered from DT later.

      Hence do not enable it when running a multi-platform kernel with genpd
      support on R-Car or RZ.  The CPG/MSTP Clock Domain driver will take care
      of PM runtime management of the module clocks.

      Now most multi-platform ARM shmobile platforms (SH-Mobile, R-Mobile,
      R-Car, RZ) use DT-based PM Domains to take care of PM runtime management
      of the module clocks, simplify the platform logic by replacing the
      explicit SoC checks by a single check for the presence of MSTP clocks in
      DT.

      Backwards-compatiblity with old DTs (mainly for R-Car Gen2) is provided
      by checking for the presence of a "#power-domain-cells" property in DT.

      The default PM Domain is still needed for:
        - backwards-compatibility with old DTs that lack PM Domain properties,
        - the CONFIG_PM=n case,
        - legacy (non-DT) ARM/shmobile platforms without genpd support
          (r8a7778, r8a7779),
        - legacy SuperH.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Reviewed-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit 9b302c1acf4114d51b7f0962df0b0ddee0dc75cd
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Tue Aug 4 14:28:14 2015 +0200

      drivers: sh: Disable legacy default PM Domain on emev2

      EMMA Mobile EV2 doesn't have MSTP clocks. All its device drivers manage
      clocks explicitly, without relying on Runtime PM, so it doesn't need the
      legacy default PM Domain.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Reviewed-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit 833b5794e3303cc97a0d2d4ba97f26cc9d9b4b79
  Author: Chanho Park <parkch98@xxxxxxxxx>
  Date:   Tue Sep 1 23:17:03 2015 +0900

      ARM: EXYNOS: reset Little cores when cpu is up

      The cpu booting of exynos5422 has been still broken since we discussed
      it in last year[1]. This patch is inspired from Odroid XU3
      code (Actually, it was from samsung exynos vendor kernel)[2]. This weird
      reset code was founded exynos5420 octa cores series SoCs and only
      required for the first boot core is the Little core (Cortex A7).
      Some of the exynos5420 boards and all of the exynos5422 boards will 
require
      this code.

      There is two ways to check the little core is the first cpu. One is
      checking GPG2CON[1] GPIO value and the other is checking the cluster
      number of the first cpu. I selected the latter because it's more easier
      than the former.

      [1] 
http://lists.infradead.org/pipermail/linux-arm-kernel/2015-June/350632.html
      [2] https://patchwork.kernel.org/patch/6782891/

      Cc: Kevin Hilman <khilman@xxxxxxxxxx>
      Cc: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Cc: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Tested-by: Kevin Hilman <khilman@xxxxxxxxxx>
      Signed-off-by: Chanho Park <parkch98@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1+
      [k.kozlowski: Adding stable for v4.1+, reformat comment]
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>

  commit 8b5081c876bde9b1df5e96ee6990d5acd20c128b
  Author: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:33 2015 -0400

      staging: unisys: visornic: handle error return from device registration

      There is no code to handle an error return in visornic, when it tries to
      register with visorbus. This patch handles an error return from
      visorbus_register_visor_driver() by dropping out of initialization.

      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 6155a3cf11a6d4ed102ef5a30f655d4d2a38076b
  Author: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:32 2015 -0400

      staging: unisys: stop device registration before visorbus registration

      In cases where visorbus is compiled directly into the kernel, if
      visorbus registration fails for any reason, it is still possible for
      other drivers to call visorbus_register_visor_driver(), which could
      cause an oops. Prevent this by saving the result of the call to
      create_bus() in a static variable, and return an error code when the bus
      hasn't been registered successfully.

      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 418627ddc6d1ed50a3dfd2c8f938741b0cbcc1ed
  Author: David Kershner <david.kershner@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:31 2015 -0400

      staging: unisys: visorbus: Unregister driver on error

      If there is an error in registering driver attributes, unregister
      the driver as well.

      Signed-off-by: David Kershner <david.kershner@xxxxxxxxxx>
      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit f6b6a8ec9a3bcba8cc9a9c302b514cf3848e7d35
  Author: David Kershner <david.kershner@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:30 2015 -0400

      staging: unisys: visornic: Fix receive bytes statistics

      The receive byte statistics was wrong in /proc/net/dev.

      Move the collection of statistics after the proper amount
      of bytes has been calculated and make sure you add it to
      rx_bytes instead of just replacing it.

      Signed-off-by: David Kershner <david.kershner@xxxxxxxxxx>
      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 5b12100a53c11ef760e78c2899be8f1bf33812ca
  Author: David Kershner <david.kershner@xxxxxxxxxx>
  Date:   Fri Sep 4 12:01:29 2015 -0400

      staging: unisys: unregister netdev when create debugfs fails

      Noticed we were not unregistering the netdevice if we failed to
      create the debugfs entries. This patch fixes that problem.

      Signed-off-by: David Kershner <david.kershner@xxxxxxxxxx>
      Signed-off-by: Benjamin Romer <benjamin.romer@xxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit dd3afa57c515801f37071734f56be9035fdeaa8c
  Author: Stefan Wahren <stefan.wahren@xxxxxxxx>
  Date:   Tue Aug 25 21:04:12 2015 +0000

      staging: fbtft: replace master->setup() with spi_setup()

      Calling the setup of the SPI master directly causes a NULL pointer
      dereference with master drivers without a separate setup function.
      This problem is reproduceable on ARM MXS platform.

      So fix this issue by using spi_setup() instead.

      Signed-off-by: Stefan Wahren <stefan.wahren@xxxxxxxx>
      Acked-by: Noralf Trønnes <noralf@xxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit cabb5b2a2866829177df2f1cee70f0dd42ee6ae0
  Author: Stefan Wahren <stefan.wahren@xxxxxxxx>
  Date:   Tue Aug 25 21:04:11 2015 +0000

      staging: fbtft: fix 9-bit SPI support detection

      Since the result of the setup function isn't adequate to check
      9-bit SPI support, we better check bits_per_word_mask. Btw this
      change avoids a NULL pointer dereference with master drivers
      without a separate setup function.

      Signed-off-by: Stefan Wahren <stefan.wahren@xxxxxxxx>
      Acked-by: Noralf Trønnes <noralf@xxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit d98229f0299d5d5a741873c5900159844b2b2de5
  Author: Andreas Dilger <andreas.dilger@xxxxxxxxx>
  Date:   Mon Aug 24 11:11:49 2015 -0400

      staging/lustre: change Lustre URLs and mailing list

      Now that the lustre.org domain has been liberated we can again
      use that for the main website URL and mailing list.

      Also update the URL for userspace tools downloads and Git repo.

      Signed-off-by: Andreas Dilger <andreas.dilger@xxxxxxxxx>
      Signed-off-by: Oleg Drokin <oleg.drokin@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit a6ee5ac15ddf2425a066339f1ab030c97ec74b25
  Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
  Date:   Fri Aug 21 14:02:57 2015 -0700

      staging/android: Update ION TODO per LPC discussion

      We discussed a bit with the folks on the Cc: list below what to do
      with ION. Two big take-aways:

      - High-performance drivers (like gpus) always want to play tricks with
        coherency and will lie to the dma api (radeon, nouveau, i915 gpu
        drivers all do so in upstream). What needs to be done here is fill
        gaps in dma-buf so that we can do this without breaking the dma-api
        expections of other clients like v4l. The consesus is that hw won't
        stop needing these tricks anytime soon.

      - Placement constraints for shared buffers won't be solved any other
        way than through something platform-specific like ion with
        platform-specific knowledge in userspace in something like gralloc.
        For general-purpose devices where this assumption would be painful
        for userspace (like servers) the consensus is that such devices will
        have proper MMUs where placement constraint handling is fairly
        irrelevant.

      Hence it is reasonable to destage ion as-is without changing the
      overall design to enable these use-cases and just fixing up a these
      few fairly minor things. Since there won't relly be an open-source
      userspace for ion (and hence drm maintainers won't take it) the
      proposal is to eventually move it to drivers/android/ion.[hc]. Laura
      would be ok with being maintainer once this is all done and ion is
      destaged.

      Note that Thiago is working on exposing the cpu cache flushing for
      cpu access from userspace through mmaps so this is alread in progress.
      Also adding him to the Cc: list.

      v2: Add ION_IOC_IMPORT to the list of ioctl that probably should go.

      Cc: Laura Abbott <labbott@xxxxxxxxxx>
      Cc: sumit.semwal@xxxxxxxxxx
      Cc: laurent.pinchart@xxxxxxxxxxxxxxxx
      Cc: ghackmann@xxxxxxxxxx
      Cc: robdclark@xxxxxxxxx
      Cc: david.brown@xxxxxxx
      Cc: romlem@xxxxxxxxxx
      Cc: Tiago Vignatti <tiago.vignatti@xxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit b786a8ad6a34b45ff6e40cf9c21f9c13c38e2f70
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Sep 1 22:05:58 2015 +0200

      Staging: most: MOST and MOSTCORE should depend on HAS_DMA

      If NO_DMA=y:

          ERROR: "dma_free_coherent" 
[drivers/staging/most/mostcore/mostcore.ko] undefined!
          ERROR: "dma_alloc_coherent" 
[drivers/staging/most/mostcore/mostcore.ko] undefined!

      As all MOST sub drivers use DMA functionality, add a dependency on
      HAS_DMA to MOSTCORE, and to MOST, which selects MOSTCORE.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Christian Gromm <christian.gromm@xxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 4de2ced795272db3ee5d668510b3a91a2bf1d1fb
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Mon Aug 17 11:08:23 2015 -0700

      staging: most: fix HDM_USB dependencies and build errors

      Fix kconfig dependency warning and build errors.

      warning: (HDM_USB) selects AIM_NETWORK which has unmet direct 
dependencies (STAGING && MOST && NET)

      drivers/built-in.o: In function `aim_resume_tx_channel':
      networking.c:(.text+0xd6f7a2): undefined reference to 
`netif_tx_wake_queue'
      drivers/built-in.o: In function `aim_rx_data':
      networking.c:(.text+0xd6f8c5): undefined reference to `__netdev_alloc_skb'
      networking.c:(.text+0xd6f99a): undefined reference to `skb_put'
      networking.c:(.text+0xd6fa44): undefined reference to `eth_type_trans'
      networking.c:(.text+0xd6fa6f): undefined reference to `netif_rx'
      drivers/built-in.o: In function `most_nd_setup':
      networking.c:(.text+0xd6fad2): undefined reference to `ether_setup'
      drivers/built-in.o: In function `most_nd_set_mac_address':
      networking.c:(.text+0xd6fb0f): undefined reference to `eth_mac_addr'
      drivers/built-in.o: In function `most_nd_open':
      networking.c:(.text+0xd6fd37): undefined reference to 
`netif_tx_wake_queue'
      drivers/built-in.o: In function `aim_probe_channel':
      networking.c:(.text+0xd6febb): undefined reference to `alloc_netdev_mqs'
      networking.c:(.text+0xd6ff18): undefined reference to `register_netdev'
      networking.c:(.text+0xd6ff4a): undefined reference to `free_netdev'
      drivers/built-in.o: In function `most_net_rm_netdev_safe.isra.0':
      networking.c:(.text+0xd6ffcf): undefined reference to `unregister_netdev'
      networking.c:(.text+0xd6ffdf): undefined reference to `free_netdev'
      drivers/built-in.o: In function `most_nd_start_xmit':
      networking.c:(.text+0xd70390): undefined reference to `kfree_skb'
      drivers/built-in.o: In function `most_deliver_netinfo':
      (.text+0xd70499): undefined reference to `netif_tx_wake_queue'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Christian Gromm <christian.gromm@xxxxxxxxxxxxx>
      Cc: Michael Fabry <Michael.Fabry@xxxxxxxxxxxxx>
      Cc: Christian Gromm <chris@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit caa470475d9b59eeff093ae650800d34612c4379
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Sep 11 12:36:12 2015 -0300

      perf header: Fixup reading of HEADER_NRCPUS feature

      The original patch introducing this header wrote the number of CPUs 
available
      and online in one order and then swapped those values when reading, fix 
it.

      Before:

        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 4
        # nrcpus avail : 4
        # echo 0 > /sys/devices/system/cpu/cpu2/online
        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 4
        # nrcpus avail : 3
        # echo 0 > /sys/devices/system/cpu/cpu1/online
        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 4
        # nrcpus avail : 2

      After the fix, bringing back the CPUs online:

        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 2
        # nrcpus avail : 4
        # echo 1 > /sys/devices/system/cpu/cpu2/online
        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 3
        # nrcpus avail : 4
        # echo 1 > /sys/devices/system/cpu/cpu1/online
        # perf record usleep 1
        # perf report --header-only | grep 'nrcpus \(online\|avail\)'
        # nrcpus online : 4
        # nrcpus avail : 4

      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: fbe96f29ce4b ("perf tools: Make perf.data more self-descriptive 
(v8)")
      Link: http://lkml.kernel.org/r/20150911153323.GP23511@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit bab84fa9cc09dfa9702029f83ea6bf8bf5ae96af
  Author: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
  Date:   Thu Aug 27 18:30:43 2015 +0600

      m68k/sun3: Use %pM format specifier to print ethernet address

      printk() supports %pM format specifier for printing 6-byte MAC/FDDI
      addresses in hex notation small buffers, let's use it intead of %x:%x...

      Signed-off-by: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>

  commit a797451b3a595759b4df48150e611237d4bd204a
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Wed Sep 2 14:25:48 2015 -0700

      ARM: dts: Add ddc i2c reference to veyron

      The ddc-i2c-bus property was missing from the veyron dtsi file since
      downstream the ddc-i2c-bus was still being specified in rk3288.dtsi and
      nobody noticed when the veyron dtsi was sent upstream.  Add it.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Tested-by: Brian Norris <briannorris@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>

  commit f594297830b29c8204c421fafe66001178ac0f9a
  Author: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 08:49:34 2015 -0400

      ARM: dts: Fix Makefile target for sun4i-a10-itead-iteaduino-plus

      Commit 79ae3e66f8d (ARM: dts: sun4i: Add Iteaduino Plus A10) added a new
      make target for the sun4i-a10-itead-iteaduino-plus dts file, but 
mistakenly
      used .dts instead of the correct .dtb suffix.  This resulted in a build 
error
      like:

              scripts/Makefile.dtbinst:42: target 
'sun4i-a10-itead-iteaduino-plus.dts' doesn't match the target pattern

      when doing a make dtbs_install.

      Fix it to use the proper file name.

      Signed-off-by: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>

  commit eaeef1ad9b6ea6df1d1220c254d9563da60cb9d1
  Author: Timo Sigurdsson <public_timo.s@xxxxxxxxxxxxxx>
  Date:   Tue Aug 4 23:08:01 2015 +0200

      ARM: dts: sunxi: Raise minimum CPU voltage for sun7i-a20 to meet SoC 
specifications

      sun7i-a20.dtsi contains a cpufreq operating point at 0.9 volts. The 
minimum
      CPU voltage for the Allwinner A20 SoC, however, is 1.0 volts. Thus, raise
      the voltage for the lowest operating point to 1.0 volts in order to stay
      within the SoC specifications. It is an undervolted setting that isn't
      stable across all SoCs and boards out there.

      Cc: <stable@xxxxxxxxxxxxxxx> # v4.0+
      Fixes: d96b7161916f ("ARM: dts: sun7i: Add cpu clock reference and 
operating points to dtsi")
      Signed-off-by: Timo Sigurdsson <public_timo.s@xxxxxxxxxxxxxx>
      Acked-by: Iain Paton <ipaton0@xxxxxxxxx>
      Signed-off-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>

  commit b692cb83b14d2f741f513221f5f78042c674c2a9
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 10:23:01 2015 +0300

      ARM: pxa: ssp: Fix build error by removing originally incorrect DT binding

      Commit 03fbf488cece ("spi: pxa2xx: Differentiate Intel LPSS types") caused
      build error here because it removed the type LPSS_SSP and I didn't notice
      the type was used here too.

      I believe commit a6e56c28a178 ("ARM: pxa: ssp: add DT bindings") added it
      accidentally by copying all enum pxa_ssp_type types from
      include/linux/pxa2xx_ssp.h even LPSS_SSP was for Intel LPSS SPI devices.

      Fix the build error by removing this incorrect binding.

      Fixes: 03fbf488cece ("spi: pxa2xx: Differentiate Intel LPSS types")
      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Reported-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.2
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>

  commit adf3442cc890f04af1e8e2c0b335c84e5092dca9
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Sun Aug 23 21:13:57 2015 +0200

      ARM: pxa: fix DFI bus lockups on startup

      After the conversion of pxa architecture to common clock framework, the
      NAND clock can be disabled on startup if no nand driver claims it.

      In this case, it happens that if the bootloader used the NAND and set
      the DFI arbitration bit, the next access to a static memory controller
      area, such as an ethernet card, the system bus will stall, and the core
      will be stalled forever.

      Fix this by clearing the DFI arbritration bit in pxa3xx startup. The bit
      will be enabled the pxa3xx-nand driver on need anyway. The only left
      requirement is that upon pxa3xx-nand removal, the bit should be cleared
      before the clock is disabled.

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>

  commit 8f3e5684d3fbd91ead283916676fa3dac22615e5
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:53 2015 -0700

      perf/core: Drop PERF_EVENT_TXN

      We currently use PERF_EVENT_TXN flag to determine if we are in the middle
      of a transaction. If in a transaction, we defer the schedulability checks
      from pmu->add() operation to the pmu->commit() operation.

      Now that we have "transaction types" (PERF_PMU_TXN_ADD, PERF_PMU_TXN_READ)
      we can use the type to determine if we are in a transaction and drop the
      PERF_EVENT_TXN flag.

      When PERF_EVENT_TXN is dropped, the cpuhw->group_flag on some 
architectures
      becomes unused, so drop that field as well.

      This is an extension of the Powerpc patch from Peter Zijlstra to s390,
      Sparc and x86 architectures.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-11-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 88a486132dffeb010d659e00361c4d114de09972
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:52 2015 -0700

      powerpc, perf/powerpc/hv-24x7: Use PMU_TXN_READ interface

      The 24x7 counters in Powerpc allow monitoring a large number of counters
      simultaneously. They also allow reading several counters in a single
      HCALL so we can get a more consistent snapshot of the system.

      Use the PMU's transaction interface to monitor and read several event
      counters at once. The idea is that users can group several 24x7 events
      into a single group of events. We use the following logic to submit
      the group of events to the PMU and read the values:

        pmu->start_txn()                // Initialize before first event

        for each event in group
                pmu->read(event);       // Queue each event to be read

        pmu->commit_txn()               // Read/update all queuedcounters

      The ->commit_txn() also updates the event counts in the respective
      perf_event objects.  The perf subsystem can then directly get the
      event counts from the perf_event and can avoid submitting a new
      ->read() request to the PMU.

      Thanks to input from Peter Zijlstra.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-10-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 4a00c16e552ea5e71756cd29cd2df7557ec9cac4
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:51 2015 -0700

      perf/core: Define PERF_PMU_TXN_READ interface

      Define a new PERF_PMU_TXN_READ interface to read a group of counters
      at once.

              pmu->start_txn()                // Initialize before first event

              for each event in group
                      pmu->read(event);       // Queue each event to be read

              rc = pmu->commit_txn()          // Read/update all queued counters

      Note that we use this interface with all PMUs.  PMUs that implement this
      interface use the ->read() operation to _queue_ the counters to be read
      and use ->commit_txn() to actually read all the queued counters at once.

      PMUs that don't implement PERF_PMU_TXN_READ ignore ->start_txn() and
      ->commit_txn() and continue to read counters one at a time.

      Thanks to input from Peter Zijlstra.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-9-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7d88962e230c8342080e7e2fe9dd5be43dc13b79
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:50 2015 -0700

      perf/core: Add return value for perf_event_read()

      When we implement the ability to read several counters at once (using
      the PERF_PMU_TXN_READ transaction interface), perf_event_read() can
      fail when the 'group' parameter is true (eg: trying to read too many
      events at once).

      For now, have perf_event_read() return an integer. Ignore the return
      value when the 'group' parameter is false.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-8-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fa8c269353d560b7c28119ad7617029f92e40b15
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:49 2015 -0700

      perf/core: Invert perf_read_group() loops

      In order to enable the use of perf_event_read(.group = true), we need
      to invert the sibling-child loop nesting of perf_read_group().

      Currently we iterate the child list for each sibling, this precludes
      using group reads. Flip things around so we iterate each group for
      each child.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      [ Made the patch compile and things. ]
      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-7-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0492d4c5b8c4dc3a7591bf6fa0e35d117812cc85
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:48 2015 -0700

      perf/core: Add group reads to perf_event_read()

      Enable perf_event_read() to update entire groups at once, this will be
      useful for read transactions.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/20150723080435.GE25159@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b15f495b4e9295cf21065d8569835a2f18cfe41b
  Author: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:47 2015 -0700

      perf/core: Rename perf_event_read_{one,group}, perf_read_hw

      In order to free up the perf_event_read_group() name:

       s/perf_event_read_\(one\|group\)/perf_read_\1/g
       s/perf_read_hw/__perf_read/g

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-5-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 01add3eaf1b25e497b14ca210f3bfe5f5dd2b112
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:46 2015 -0700

      perf/core: Split perf_event_read() and perf_event_count()

      perf_event_read() does two things:

        - call the PMU to read/update the counter value, and
        - compute the total count of the event and its children

      Not all callers need both. perf_event_reset() for instance needs the
      first piece but doesn't need the second.  Similarly, when we implement
      the ability to read a group of events using the transaction interface,
      we would need the two pieces done independently.

      Break up perf_event_read() and have it just read/update the counter
      and have the callers compute the total count if necessary.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-4-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fbbe07011581990ef74dfac06dc8511b1a14badb
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:45 2015 -0700

      perf/core: Add a 'flags' parameter to the PMU transactional interfaces

      Currently, the PMU interface allows reading only one counter at a time.
      But some PMUs like the 24x7 counters in Power, support reading several
      counters at once. To leveage this functionality, extend the transaction
      interface to support a "transaction type".

      The first type, PERF_PMU_TXN_ADD, refers to the existing transactions,
      i.e. used to _schedule_ all the events on the PMU as a group. A second
      transaction type, PERF_PMU_TXN_READ, will be used in a follow-on patch,
      by the 24x7 counters to read several counters at once.

      Extend the transaction interfaces to the PMU to accept a 'txn_flags'
      parameter and use this parameter to ignore any transactions that are
      not of type PERF_PMU_TXN_ADD.

      Thanks to Peter Zijlstra for his input.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      [peterz: s390 compile fix]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441336073-22750-3-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 845583767c306dac0290aab908c18b01772ea4b4
  Author: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 3 20:07:44 2015 -0700

      sparc, perf/sparc: Remove unnecessary assignment

      In ->commit_txn() 'cpuc' is already initialized when it is
      declared, so we can remove the duplicate assignment.

      Signed-off-by: Sukadev Bhattiprolu <sukadev@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: sparclinux@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441336073-22750-2-git-send-email-sukadev@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b0e878759452314676fbdd71df4ac67e7d08de5d
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 14:06:07 2015 +0200

      perf/abi: Document some more aspects of the perf ABI

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 73fdeb66592ee80dffb16fb8a9b7378a00c1a826
  Author: Huaitong Han <huaitong.han@xxxxxxxxx>
  Date:   Mon Aug 31 16:21:02 2015 +0800

      perf/x86/intel/pt: Fix KVM warning due to doing rdmsr() before the CPUID 
test

      If KVM does not support INTEL_PT, guest MSR_IA32_RTIT_CTL reading will
      produce host warning like "kvm [2469]: vcpu0 unhandled rdmsr: 0x570".

      Guest can determine whether the CPU supports Intel_PT according to CPUID,
      so test_cpu_cap function is added before rdmsr,and it is more in line with
      the code style.

      Signed-off-by: Huaitong Han <huaitong.han@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Reviewed-by: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: acme@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441009262-9792-1-git-send-email-huaitong.han@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 516792e67c39d31701641ab355acdb9cbfec0643
  Author: Kirill Tkhai <ktkhai@xxxxxxxx>
  Date:   Mon Aug 31 15:12:56 2015 +0300

      perf/core: Delete PF_EXITING checks from perf_cgroup_exit() callback

      cgroup_exit() is not called from copy_process() after commit:

        e8604cb43690 ("cgroup: fix spurious lockdep warning in cgroup_exit()")

      from do_exit(). So this check is useless and the comment is obsolete.

      Signed-off-by: Kirill Tkhai <ktkhai@xxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/55E444C8.3020402@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit deb27519bf1f4b21a761c0675dbdf1196df7d72a
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Mon Aug 17 08:37:31 2015 -0400

      perf/x86/intel: Fix LBR callstack issue caused by FREEZE_LBRS_ON_PMI

      This patch fixes an issue which introduced by commit
      1a78d93750bb5f61abdc59a91fc3bd06a214542a ("perf/x86/intel: Streamline
      LBR MSR handling in PMI").

      The old patch not only avoids writing LBR_SELECT MSR in PMI, but also
      avoids updating lbr_select variable. So in PMI, FREEZE_LBRS_ON_PMI bit
      is always mistakenly set for IA32_DEBUGCTLMSR MSR, which causes
      superfluous increase/decrease of LBR_TOS when collecting LBR callstack.

      Reported-by: Milian Wolff <mail@xxxxxxxxxx>
      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439815051-8616-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d2878d642a4edd1d57c691dc3e4d7847cbf9d442
  Author: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 17:09:28 2015 +0300

      perf/x86/intel/bts: Disallow use by unprivileged users on paranoid systems

      BTS leaks kernel addresses even in userspace-only mode due to imprecise IP
      sampling, so sometimes syscall entry points or page fault handler 
addresses
      end up in a userspace trace.

      Now, intel_bts driver exports trace data zero-copy, it does not scan 
through
      it to filter out the kernel addresses and it's would be a O(n) job.

      To work around this situation, this patch forbids the use of intel_bts
      driver by unprivileged users on systems with the paranoid setting above 
the
      (kernel's) default "1", which still allows kernel profiling. In other 
words,
      using intel_bts driver implies kernel tracing, regardless of the
      "exclude_kernel" attribute setting.

      Signed-off-by: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: hpa@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441030168-6853-3-git-send-email-alexander.shishkin@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a09d31f45224c219a4d5c728fa40150dc9d3e3e5
  Author: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 17:09:27 2015 +0300

      perf/x86/intel/ds: Work around BTS leaking kernel addresses

      BTS leaks kernel addresses even in userspace-only mode due to imprecise IP
      sampling, so sometimes syscall entry points or page fault handler 
addresses
      end up in a userspace trace.

      Since this driver uses a relatively small buffer for BTS records and it 
has
      to iterate through them anyway, it can also take on the additional job of
      filtering out the records that contain kernel addresses when kernel space
      tracing is not enabled.

      This patch changes the bts code to skip the offending records from perf
      output. In order to request the exact amount of space on the ring buffer,
      we need to do an extra pass through the records to know how many there are
      of the valid ones, but considering the small size of the buffer, this 
extra
      pass adds very little overhead to the nmi handler. This way we won't end
      up with awkward IP samples with zero IPs in the perf stream.

      Signed-off-by: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Cc: hpa@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441030168-6853-2-git-send-email-alexander.shishkin@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b20112edeadf0b8a1416de061caa4beb11539902
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Aug 21 12:05:18 2015 +0300

      perf/x86: Improve accuracy of perf/sched clock

      When TSC is stable perf/sched clock is based on it.
      However the conversion from cycles to nanoseconds
      is not as accurate as it could be.  Because
      CYC2NS_SCALE_FACTOR is 10, the accuracy is +/- 1/2048

      The change is to calculate the maximum shift that
      results in a multiplier that is still a 32-bit number.
      For example all frequencies over 1 GHz will have
      a shift of 32, making the accuracy of the conversion
      +/- 1/(2^33).  That is achieved by using the
      'clocks_calc_mult_shift()' function.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vince Weaver <vincent.weaver@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1440147918-22250-1-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 216dcaf290a5e93426cec283ac9edc67ff6756b3
  Merge: d2bb1d4 ebfb498
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Sep 13 11:25:55 2015 +0200

      Merge branch 'perf/urgent' into perf/core, to pick up fixes before 
applying new changes

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d2bb1d42b95fa88f092623bbb8ed533f316b6a3c
  Merge: 3bd7617 6ff33f3
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Sep 13 11:25:35 2015 +0200

      Merge tag 'v4.3-rc1' into perf/core, to refresh the tree

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 84567995612258c23bc55795575babe7ef605dd9
  Author: Boqun Feng <boqun.feng@xxxxxxxxx>
  Date:   Wed Aug 26 19:52:46 2015 +0800

      locking/atomics, cmpxchg: Privatize the inclusion of asm/cmpxchg.h

      After commit:

        654672d4ba1a ("locking/atomics: Add _{acquire|release|relaxed}() 
variants of some atomic operations")

      Architectures may only provide {cmp,}xchg_relaxed definitions in
      asm/cmpxchg.h. Other variants, such as {cmp,}xchg, may be built in
      linux/atomic.h, which means simply including asm/cmpxchg.h may not get
      the definitions of all the{cmp,}xchg variants.

      Therefore, we should privatize the inclusions of asm/cmpxchg.h to
      keep it only included in arch/* and replace the inclusions outside
      with linux/atomic.h

      Signed-off-by: Boqun Feng <boqun.feng@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Aybuke Ozdemir <aybuke.147@xxxxxxxxx>
      Cc: Chris Brannon <chris@xxxxxxxxxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Jonathan Corbet <corbet@xxxxxxx>
      Cc: Kirk Reiser <kirk@xxxxxxxxxx>
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Samuel Thibault <samuel.thibault@xxxxxxxxxxxx>
      Cc: Shradha Shah <sshah@xxxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: William Hubbs <w.d.hubbs@xxxxxxxxx>
      Cc: devel@xxxxxxxxxxxxxxxxxxxx
      Cc: linux-net-drivers@xxxxxxxxxxxxxx
      Cc: speakup@xxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440589966-26280-1-git-send-email-boqun.feng@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2619d7e9c92d524cb155ec89fd72875321512e5b
  Author: John Stultz <john.stultz@xxxxxxxxxx>
  Date:   Wed Sep 9 16:07:30 2015 -0700

      time: Fix timekeeping_freqadjust()'s incorrect use of abs() instead of 
abs64()

      The internal clocksteering done for fine-grained error
      correction uses a logarithmic approximation, so any time
      adjtimex() adjusts the clock steering, timekeeping_freqadjust()
      quickly approximates the correct clock frequency over a series
      of ticks.

      Unfortunately, the logic in timekeeping_freqadjust(), introduced
      in commit:

        dc491596f639 ("timekeeping: Rework frequency adjustments to work better 
w/ nohz")

      used the abs() function with a s64 error value to calculate the
      size of the approximated adjustment to be made.

      Per include/linux/kernel.h:

        "abs() should not be used for 64-bit types (s64, u64, long long) - use 
abs64()".

      Thus on 32-bit platforms, this resulted in the clocksteering to
      take a quite dampended random walk trying to converge on the
      proper frequency, which caused the adjustments to be made much
      slower then intended (most easily observed when large
      adjustments are made).

      This patch fixes the issue by using abs64() instead.

      Reported-by: Nuno Gonçalves <nunojpg@xxxxxxxxx>
      Tested-by: Nuno Goncalves <nunojpg@xxxxxxxxx>
      Signed-off-by: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.17+
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Prarit Bhargava <prarit@xxxxxxxxxx>
      Cc: Richard Cochran <richardcochran@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441840051-20244-1-git-send-email-john.stultz@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c7ef92cea98bc468bbc8e67b6e49d7365dc69482
  Merge: a6b2778 6ff33f3
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Sep 13 10:01:24 2015 +0200

      Merge tag 'v4.3-rc1' into locking/core, to refresh the tree

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 006cdf025a33cb008c3d466bed311c2c347b458f
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 09:06:17 2015 +0200

      sched/fair: Optimize per entity utilization tracking

      Currently the load_{sum,avg} and util_{sum,avg} tracking is asymmetric
      in that load tracking gets a 2^10 unit from the weight, but util gets
      no such factor.

      This results in more lost bits for util scaling and asymmetric scaling
      rules.

      Fix this by removing shifts, such that we gain the 2^10 factor from
      scaling. There is no risk of overflowing the u32 as the max value is
      now LOAD_AVG_MAX << 10, which is still well below UINT_MAX.

      This further entangles the assumption that both LOAD and CAPACITY
      shifts are the same (and 10) so put in an assertion for that.

      This fixes the math for the LOAD_RESOLUTION != 0 case.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6f2b04524f0b38bfbb8413f98d2d6af234508309
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Mon Sep 7 14:57:22 2015 +0100

      sched/fair: Defer calling scaling functions

      Do not call the scaling functions in case time goes backwards or the
      last update of the sched_avg structure has happened less than 1024ns
      ago.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx <daniel.lezcano@xxxxxxxxxx>
      Cc: mturquette@xxxxxxxxxxxx <mturquette@xxxxxxxxxxxx>
      Cc: pang.xunlei@xxxxxxxxxx <pang.xunlei@xxxxxxxxxx>
      Cc: rjw@xxxxxxxxxxxxx <rjw@xxxxxxxxxxxxx>
      Cc: sgurrappadi@xxxxxxxxxx <sgurrappadi@xxxxxxxxxx>
      Cc: vincent.guittot@xxxxxxxxxx <vincent.guittot@xxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx <yuyang.du@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/55EDA2E9.8040900@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6115c793ca1a6e39c7c15159cbb47baa04009cb8
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 7 15:09:15 2015 +0200

      sched/fair: Optimize __update_load_avg()

      Prior to this patch; the line:

        scaled_delta_w = (delta_w * 1024) >> 10;

      which is the result of the default arch_scale_freq_capacity()
      function, turns into:

          1b03: 49 89 d1                mov    %rdx,%r9
          1b06: 49 c1 e1 0a             shl    $0xa,%r9
          1b0a: 49 c1 e9 0a             shr    $0xa,%r9

      Which is silly; when made unsigned int, GCC recognises this as
      pointless ops and fails to emit them (confirmed on 4.9.3 and 5.1.1).

      Furthermore, afaict unsigned is actually the correct type for these
      fields anyway, as we've explicitly ruled out negative delta's earlier
      in this function.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 54a21385facbdcd89a78e8c3e5025f04c5f2b59c
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Sep 7 15:05:42 2015 +0200

      sched/fair: Rename scale() to cap_scale()

      Rename scale() to cap_scale() to better reflect its purpose, it is
      after all not a general purpose scale function, it has
      SCHED_CAPACITY_SHIFT hardcoded in it.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 98d8fd8126676f7ba6e133e65b2ca4b17989d32c
  Author: Morten Rasmussen <morten.rasmussen@xxxxxxx>
  Date:   Fri Aug 14 17:23:14 2015 +0100

      sched/fair: Initialize task load and utilization before placing task on rq

      Task load or utilization is not currently considered in
      select_task_rq_fair(), but if we want that in the future we should make
      sure it is not zero for new tasks.

      cc: Ingo Molnar <mingo@xxxxxxxxxx>
      cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Dietmar Eggemann <Dietmar.Eggemann@xxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: pang.xunlei@xxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Cc: sgurrappadi@xxxxxxxxxx
      Cc: vincent.guittot@xxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1439569394-11974-7-git-send-email-morten.rasmussen@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 231678b768da07d19ab5683a39eeb0c250631d02
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Fri Aug 14 17:23:13 2015 +0100

      sched/fair: Get rid of scaling utilization by capacity_orig

      Utilization is currently scaled by capacity_orig, but since we now have
      frequency and cpu invariant cfs_rq.avg.util_avg, frequency and cpu scaling
      now happens as part of the utilization tracking itself.
      So cfs_rq.avg.util_avg should no longer be scaled in cpu_util().

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Steve Muckle <steve.muckle@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx <daniel.lezcano@xxxxxxxxxx>
      Cc: mturquette@xxxxxxxxxxxx <mturquette@xxxxxxxxxxxx>
      Cc: pang.xunlei@xxxxxxxxxx <pang.xunlei@xxxxxxxxxx>
      Cc: rjw@xxxxxxxxxxxxx <rjw@xxxxxxxxxxxxx>
      Cc: sgurrappadi@xxxxxxxxxx <sgurrappadi@xxxxxxxxxx>
      Cc: vincent.guittot@xxxxxxxxxx <vincent.guittot@xxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx <yuyang.du@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/55EDAF43.30500@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9e91d61d9b0ca8d865dbd59af8d0d5c5b68003e9
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Fri Aug 14 17:23:12 2015 +0100

      sched/fair: Name utilization related data and functions consistently

      Use the advent of the per-entity load tracking rewrite to streamline the
      naming of utilization related data and functions by using
      {prefix_}util{_suffix} consistently. Moreover call both signals
      ({se,cfs}.avg.util_avg) utilization.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Dietmar Eggemann <Dietmar.Eggemann@xxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: pang.xunlei@xxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Cc: sgurrappadi@xxxxxxxxxx
      Cc: vincent.guittot@xxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1439569394-11974-5-git-send-email-morten.rasmussen@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e3279a2e6d697e00e74f905851ee7cf532f72b2d
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Sat Aug 15 00:04:41 2015 +0100

      sched/fair: Make utilization tracking CPU scale-invariant

      Besides the existing frequency scale-invariance correction factor, apply
      CPU scale-invariance correction factor to utilization tracking to
      compensate for any differences in compute capacity. This could be due to
      micro-architectural differences (i.e. instructions per seconds) between
      cpus in HMP systems (e.g. big.LITTLE), and/or differences in the current
      maximum frequency supported by individual cpus in SMP systems. In the
      existing implementation utilization isn't comparable between cpus as it
      is relative to the capacity of each individual CPU.

      Each segment of the sched_avg.util_sum geometric series is now scaled
      by the CPU performance factor too so the sched_avg.util_avg of each
      sched entity will be invariant from the particular CPU of the HMP/SMP
      system on which the sched entity is scheduled.

      With this patch, the utilization of a CPU stays relative to the max CPU
      performance of the fastest CPU in the system.

      In contrast to utilization (sched_avg.util_sum), load
      (sched_avg.load_sum) should not be scaled by compute capacity. The
      utilization metric is based on running time which only makes sense when
      cpus are _not_ fully utilized (utilization cannot go beyond 100% even if
      more tasks are added), where load is runnable time which isn't limited
      by the capacity of the CPU and therefore is a better metric for
      overloaded scenarios. If we run two nice-0 busy loops on two cpus with
      different compute capacity their load should be similar since their
      compute demands are the same. We have to assume that the compute demand
      of any task running on a fully utilized CPU (no spare cycles = 100%
      utilization) is high and the same no matter of the compute capacity of
      its current CPU, hence we shouldn't scale load by CPU capacity.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/55CE7409.1000700@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8cd5601c50603caa195ce86cc465cb04079ed488
  Author: Morten Rasmussen <morten.rasmussen@xxxxxxx>
  Date:   Fri Aug 14 17:23:10 2015 +0100

      sched/fair: Convert arch_scale_cpu_capacity() from weak function to 
#define

      Bring arch_scale_cpu_capacity() in line with the recent change of its
      arch_scale_freq_capacity() sibling in commit dfbca41f3479 ("sched:
      Optimize freq invariant accounting") from weak function to #define to
      allow inlining of the function.

      While at it, remove the ARCH_CAPACITY sched_feature as well. With the
      change to #define there isn't a straightforward way to allow runtime
      switch between an arch implementation and the default implementation of
      arch_scale_cpu_capacity() using sched_feature. The default was to use
      the arch-specific implementation, but only the arm architecture provides
      one and that is essentially equivalent to the default implementation.

      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Dietmar Eggemann <Dietmar.Eggemann@xxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: pang.xunlei@xxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Cc: sgurrappadi@xxxxxxxxxx
      Cc: vincent.guittot@xxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1439569394-11974-3-git-send-email-morten.rasmussen@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e0f5f3afd2cffa96291cd852056d83ff4e2e99c7
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Fri Aug 14 17:23:09 2015 +0100

      sched/fair: Make load tracking frequency scale-invariant

      Apply frequency scaling correction factor to per-entity load tracking to
      make it frequency invariant. Currently, load appears bigger when the CPU
      is running slower which affects load-balancing decisions.

      Each segment of the sched_avg.load_sum geometric series is now scaled by
      the current frequency so that the sched_avg.load_avg of each sched entity
      will be invariant from frequency scaling.

      Moreover, cfs_rq.runnable_load_sum is scaled by the current frequency as
      well.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Signed-off-by: Morten Rasmussen <morten.rasmussen@xxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Vincent Guittot <vincent.guittot@xxxxxxxxxx>
      Cc: Dietmar Eggemann <Dietmar.Eggemann@xxxxxxx>
      Cc: Juri Lelli <Juri.Lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: daniel.lezcano@xxxxxxxxxx
      Cc: mturquette@xxxxxxxxxxxx
      Cc: pang.xunlei@xxxxxxxxxx
      Cc: rjw@xxxxxxxxxxxxx
      Cc: sgurrappadi@xxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1439569394-11974-2-git-send-email-morten.rasmussen@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2a595721a1fa6b684c1c818f379bef834ac3d65e
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 11 21:54:21 2015 +0530

      sched/numa: Convert sched_numa_balancing to a static_branch

      Variable sched_numa_balancing toggles numa_balancing feature. Hence
      moving from a simple read mostly variable to a more apt static_branch.

      Suggested-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439310261-16124-1-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2b49d84b259fc18e131026e5d38e7855352f71b9
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 11 16:30:13 2015 +0530

      sched/numa: Remove the NUMA sched_feature

      Variable sched_numa_balancing is available for both CONFIG_SCHED_DEBUG
      and !CONFIG_SCHED_DEBUG. All code paths now check for
      sched_numa_balancing. Hence remove sched_feat(NUMA).

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439290813-6683-4-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c3b9bc5bbfc3750570d788afffd431263ef695c6
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 11 16:30:12 2015 +0530

      sched/numa: Disable sched_numa_balancing on UMA systems

      Commit 2a1ed24 ("sched/numa: Prefer NUMA hotness over cache hotness")
      sets sched feature NUMA to true. However this can enable NUMA hinting
      faults on a UMA system.

      This commit ensures that NUMA hinting faults occur only on a NUMA system
      by setting/resetting sched_numa_balancing.

      This commit:

        - Makes sched_numa_balancing common to CONFIG_SCHED_DEBUG and
          !CONFIG_SCHED_DEBUG. Earlier it was only in !CONFIG_SCHED_DEBUG.

        - Checks for sched_numa_balancing instead of sched_feat(NUMA).

      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439290813-6683-3-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 78a9c54649ea220065aad9902460a1d137c7eafd
  Author: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Aug 11 16:30:11 2015 +0530

      sched/numa: Rename numabalancing_enabled to sched_numa_balancing

      Simple rename of the 'numabalancing_enabled' variable to 
'sched_numa_balancing'.
      No functional changes.

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439290813-6683-2-git-send-email-srikar@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c5afb6a87f2386bcf09fa051e6ca390d43e2222e
  Author: Vincent Guittot <vincent.guittot@xxxxxxxxxx>
  Date:   Mon Aug 3 11:55:50 2015 +0200

      sched/fair: Fix nohz.next_balance update

      Since commit:

        d4573c3e1c99 ("sched: Improve load balancing in the presence of idle 
CPUs")

      the ILB CPU starts with the idle load balancing of other idle CPUs and
      finishes with itself in order to speed up the spread of tasks in all
      idle CPUs.

      The this_rq->next_balance is still used in nohz_idle_balance() as an
      intermediate step to gather the shortest next balance before updating
      nohz.next_balance. But the former has not been updated yet and is likely 
to
      be set with the current jiffies. As a result, the nohz.next_balance will 
be
      set with current jiffies instead of the real next balance date. This
      generates spurious kicks of nohz ilde balance.

      nohz_idle_balance() must set the nohz.next_balance without taking into
      account this_rq->next_balance which is not updated yet. Then, this_rq will
      update nohz.next_update with its next_balance once updated and if 
necessary.

      Signed-off-by: Vincent Guittot <vincent.guittot@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Acked-by: Jason Low <jason.low2@xxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: preeti@xxxxxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1438595750-20455-1-git-send-email-vincent.guittot@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 446685e9bfa11174332fbb0b3218b37015fbf4ff
  Author: Kirill Tkhai <ktkhai@xxxxxxxx>
  Date:   Mon Aug 31 15:12:56 2015 +0300

      sched/core: Delete PF_EXITING checks from cpu_cgroup_exit() callback

      cgroup_exit() is not called from copy_process() after commit:

        e8604cb43690 ("cgroup: fix spurious lockdep warning in cgroup_exit()")

      from do_exit(). So this check is useless and the comment is obsolete.

      Signed-off-by: Kirill Tkhai <ktkhai@xxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/55E444C8.3020402@xxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit bc54da2176cd38cedea767eff637229a191a2383
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Aug 31 17:13:55 2015 +0200

      sched/core: Remove unused argument from sched_class::task_move_group

      The previous patches made the second argument go unused, remove it.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Byungchul Park <byungchul.park@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit daa59407b558e6e621e9081a308d5db3ef991fb6
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:22:00 2015 +0900

      sched/fair: Unify switched_{from,to}_fair() and task_move_group_fair()

      By observing that switched_from_fair() detaches from a runqueue, and
      switched_to_fair() attaches to a runqueue, we can see that
      task_move_group_fair() is one followed by the other with flipping the
      runqueue in between.

      Therefore extract all the common bits and implement all three
      functions in terms of them.

      This should fix a few corner cases wrt. vruntime normalization; where,
      when we take a task off of a runqueue we convert to an approximation
      of lag by subtracting min_vruntime, and when placing a task on the a
      runqueue to the reverse.

      Suggested-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [peterz: Changelog]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-6-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a9280514bf1e54775b8d7cd93d87c05c2b5273e6
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 11 16:10:59 2015 +0200

      sched/fair: Make the entity load aging on attaching tunable

      In case there are problems with the aging on attach, provide a debug
      knob to turn it off.

      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Byungchul Park <byungchul.park@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: yuyang.du@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6efdb105d392da3ad5cb4ef951aed373cd049813
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:21:59 2015 +0900

      sched/fair: Fix switched_to_fair()'s per entity load tracking

      Where switched_from_fair() will remove the entity's load from the
      runqueue, switched_to_fair() does not currently add it back. This
      means that when a task leaves the fair class for a short duration; say
      because of PI; we loose its load contribution.

      This can ripple forward and disturb the load tracking because other
      operations (enqueue, dequeue) assume its factored in. Only once the
      runqueue empties will the load tracking recover.

      When we add it back in, age the per entity average to match up with
      the runqueue age. This has the obvious problem that if the task leaves
      the fair class for a significant time, the load will age to 0.

      Employ the normal migration rule for inter-runqueue moves in
      task_move_group_fair(). Again, there is the obvious problem of the
      task migrating while not in the fair class.

      The alternative solution would be to to omit the chunk in
      attach_entity_load_avg(), which would effectively reset the timestamp
      and use whatever avg there was.

      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [ Rewrote the changelog and comments. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-5-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1746babbb15594ba2d8d8196589bbbc2b5ff51c9
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:21:58 2015 +0900

      sched/fair: Have task_move_group_fair() also detach entity load from the 
old runqueue

      Since we attach the entity load to the new runqueue, we should also
      detatch the entity load from the old runqueue, otherwise load can
      accumulate.

      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [ Rewrote the changelog. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-4-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 50a2a3b246149d041065a67ccb3e98145f780a2f
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:21:57 2015 +0900

      sched/fair: Have task_move_group_fair() unconditionally add the entity 
load to the runqueue

      Currently we conditionally add the entity load to the rq when moving
      the task between cgroups.

      This doesn't make sense as we always 'migrate' the task between
      cgroups, so we should always migrate the load too.

      [ The history here is that we used to only migrate the blocked load
        which was only meaningfull when !queued. ]

      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [ Rewrote the changelog. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-3-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a05e8c51ff097ff73ec2947631d9102283545f7c
  Author: Byungchul Park <byungchul.park@xxxxxxx>
  Date:   Thu Aug 20 20:21:56 2015 +0900

      sched/fair: Factor out the {at,de}taching of the per entity load 
{to,from} the runqueue

      Currently we open-code the addition/subtraction of the per entity load
      to/from the runqueue, factor this out into helper functions.

      Signed-off-by: Byungchul Park <byungchul.park@xxxxxxx>
      [ Rewrote the changelog. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: yuyang.du@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1440069720-27038-2-git-send-email-byungchul.park@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 973759c80db96ed4b4c5cb85ac7d48107f801371
  Merge: a75a606 6ff33f3
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Sep 13 09:51:21 2015 +0200

      Merge tag 'v4.3-rc1' into sched/core, to refresh the branch

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ebfb4988f0378e2ac3b4a0aa1ea20d724293f392
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 11:58:27 2015 +0200

      perf/x86/intel: Fix constraint access

      Sasha reported that we can get here with .idx==-1, and
      cpuc->event_constraints unallocated.

      Suggested-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: b371b5943178 ("perf/x86: Fix event/group validation")
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7c5b190e115a2f7a51a85f261e7d7dca4b4bbe64
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Thu Sep 10 21:55:27 2015 +0200

      x86/cpu: Print family/model/stepping in hex

      924e101a7ab6 ("x86/debug: Dump family, model, stepping of the
      boot CPU") had its good intentions to dump the exact F/M/S as an
      aid during debugging sessions but its output can be ambiguous.
      Fix that:

      -smpboot: CPU0: Intel Core Processor (Broadwell) (fam: 06, model: 47, 
stepping: 02)
      +smpboot: CPU0: Intel Core Processor (Broadwell) (family: 0x6, model: 
0x47, stepping: 0x2)

      Also, spell out "family".

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441914927-32037-1-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7c52198b9c36001d47e11d50f7f1556805c5c3e3
  Author: George Beshers <gbeshers@xxxxxxx>
  Date:   Sat Sep 12 21:51:05 2015 -0500

      x86/platform/uv: Insert per_cpu accessor function on uv_hub_nmi

      UV: NMI: insert this_cpu_read accessor function on uv_hub_nmi.

      On SGI UV systems a 'power nmi' command from the CMC causes
      all processors to drop into uv_handle_nmi().  With the 4.0
      kernel this results in

          BUG: unable to handle kernel paging request

      The bug is caused by the current code trying to use the PER_CPU
      variable uv_cpu_nmi.hub without an appropriate accessor
      function. That oversight occurred in

          commit e16321709c82 ("uv: Replace __get_cpu_var")
          Author: Christoph Lameter <cl@xxxxxxxxx>
          Date:   Sun Aug 17 12:30:41 2014 -0500

      This patch inserts this_cpu_read() in the uv_hub_nmi macro
      restoring the intended functionality.

      Signed-off-by: George Beshers <gbeshers@xxxxxxx>
      Acked-by: Mike Travis <travis@xxxxxxx>
      Cc: Alex Thorlton <athorlton@xxxxxxx>
      Cc: Dimitri Sivanich <sivanich@xxxxxxx>
      Cc: Hedi Berriche <hedi@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Russ Anderson <rja@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit cd1faefa66425c3fa338777773c5c017edea3439
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Aug 30 19:45:19 2015 -0700

      hwmon: (nct6775) Add support for NCT6793D

      NCT6793D is register compatible with NCT6792D.

      Also move nct6775_sio_names[] closer to enum kinds to simplify
      adding new chips.

      Tested-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Reviewed-by: Jean Delvare <jdelvare@xxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 728d29400488d54974d3317fe8a232b45fdb42ee
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Mon Aug 31 16:13:47 2015 -0700

      hwmon: (nct6775) Swap STEP_UP_TIME and STEP_DOWN_TIME registers for most 
chips

      The STEP_UP_TIME and STEP_DOWN_TIME registers are swapped for all chips 
but
      NCT6775.

      Reported-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Reviewed-by: Jean Delvare <jdelvare@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v3.10+
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit a75a6068dac25d4022ebcd82192ed6345407843c
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Sep 10 15:07:50 2015 +0200

      cpu/hotplug: Read_lock(tasklist_lock) doesn't need to disable irqs

      check_for_tasks() doesn't need to disable irqs, recursive
      read_lock() from interrupt is fine.

      While at it, s/do_each_thread/for_each_process_thread/.

      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Reviewed-by: Kirill Tkhai <ktkhai@xxxxxxxx>
      Reviewed-by: Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx>
      Cc: Kirill Tkhai <ktkhai@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150910130750.GA20055@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 31409c97640ff5f1a49e34ac7f3c82097bf57bec
  Merge: e713c80 dc3a04d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 12 10:26:24 2015 +0200

      Merge branch 'for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu into core/urgent

      Pull RCU fix from Paul E. McKenney, fixing an inverted RCU_LOCKDEP_WARN() 
condition.

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit eda2116f4ab6d79cfcffc202b5d2bbb0797ba013
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Fri Sep 11 19:24:19 2015 -0500

      [CIFS] mount option sec=none not displayed properly in /proc/mounts

      When the user specifies "sec=none" in a cifs mount, we set
      sec_type as unspecified (and set a flag and the username will be
      null) rather than setting sectype as "none" so
      cifs_show_security was not properly displaying it in
      cifs /proc/mounts entries.

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>
      Reviewed-by: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>

  commit e8684c88774c0ddfeefdbed0aa469b25b9962f3e
  Author: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
  Date:   Sat Sep 12 00:34:48 2015 +0300

      irda: ali-ircc: Fix deadlock in ali_ircc_sir_change_speed()

      ali_ircc_sir_change_speed() is always called with self->lock held,
      so acquiring the lock inside it leads to unavoidable deadlock.

      Call graph:
      ali_ircc_sir_change_speed() is called from ali_ircc_change_speed()
        ali_ircc_fir_hard_xmit() under spin_lock_irqsave(&self->lock, flags);
        ali_ircc_sir_hard_xmit() under spin_lock_irqsave(&self->lock, flags);
        ali_ircc_net_ioctl() under spin_lock_irqsave(&self->lock, flags);
        ali_ircc_dma_xmit_complete()
          ali_ircc_fir_interrupt()
            ali_ircc_interrupt() under spin_lock(&self->lock);
        ali_ircc_sir_write_wakeup()
          ali_ircc_sir_interrupt()
            ali_ircc_interrupt() under spin_lock(&self->lock);

      The patch removes spin_lock/unlock from ali_ircc_sir_change_speed().

      Found by Linux Driver Verification project (linuxtesting.org).

      Signed-off-by: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 38c089d1d8d058f5dff018a811568aa8e8bc47fc
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Fri Sep 11 15:01:16 2015 -0700

      openvswitch: Fix dependency on IPv6 defrag.

      When NF_CONNTRACK is built-in, NF_DEFRAG_IPV6 is a module, and
      OPENVSWITCH is built-in, the following build error would occur:

      net/built-in.o: In function `ovs_ct_execute':
      (.text+0x10f587): undefined reference to `nf_ct_frag6_gather'

      Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
      Reported-by: Jim Davis <jim.epost@xxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 447e9a4d27484175a84daaa8e03d35c650f443b7
  Author: Doug Ledford <dledford@xxxxxxxxxx>
  Date:   Fri Sep 11 12:52:26 2015 -0400

      IB/ehca: Deprecate driver, move to staging, schedule deletion

      The ehca driver is only supported on IBM machines with a custom EBus.
      As they have opted to build their newer machines using more industry
      standard technology and haven't really been pushing EBus capable
      machines for a while, this driver can now safely be moved to the
      staging area and scheduled for eventual removal.  This plan was brought
      to IBM's attention and received their sign-off.

      Cc: alexs@xxxxxxxxxxxxxxxxxx
      Cc: hnguyen@xxxxxxxxxx
      Cc: raisch@xxxxxxxxxx
      Cc: stefan.roscher@xxxxxxxxxx
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit c2d4fbd2163e607915cc05798ce7fb7f31117cc1
  Author: Linus Lüssing <linus.luessing@xxxxxxxxx>
  Date:   Fri Sep 11 18:39:48 2015 +0200

      bridge: fix igmpv3 / mldv2 report parsing

      With the newly introduced helper functions the skb pulling is hidden in
      the checksumming function - and undone before returning to the caller.

      The IGMPv3 and MLDv2 report parsing functions in the bridge still
      assumed that the skb is pointing to the beginning of the IGMP/MLD
      message while it is now kept at the beginning of the IPv4/6 header,
      breaking the message parsing and creating packet loss.

      Fixing this by taking the offset between IP and IGMP/MLD header into
      account, too.

      Fixes: 9afd85c9e455 ("net: Export IGMP/MLD message validation code")
      Reported-by: Tobias Powalowski <tobias.powalowski@xxxxxxxxxxxxxx>
      Tested-by: Tobias Powalowski <tobias.powalowski@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Lüssing <linus.luessing@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a19a19de8310fb8ca2ca0621a9db1aab082943c5
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Sep 11 11:33:01 2015 +0200

      bnx2x: use ktime_get_seconds() for timestamp

      commit c48f350ff5e7 "bnx2x: Add MFW dump support" added the
      bnx2x_update_mfw_dump() function that reads the current time and stores
      it in a 32-bit field that gets passed into a buffer in a fixed format.

      This is potentially broken when the epoch overflows in 2038, and
      otherwise overflows in 2106. As we're trying to avoid uses of
      struct timeval for this reason, I noticed the addition of this
      function, and tried to rewrite it in a way that is more explicit
      about the overflow and that will keep working once we deprecate
      struct timeval.

      I assume that it is not possible to change the ABI any more, otherwise
      we should try to use a 64-bit field for the seconds right away.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Cc: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Acked-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4
  Author: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
  Date:   Thu Sep 10 17:31:15 2015 -0300

      sctp: fix race on protocol/netns initialization

      Consider sctp module is unloaded and is being requested because an user
      is creating a sctp socket.

      During initialization, sctp will add the new protocol type and then
      initialize pernet subsys:

              status = sctp_v4_protosw_init();
              if (status)
                      goto err_protosw_init;

              status = sctp_v6_protosw_init();
              if (status)
                      goto err_v6_protosw_init;

              status = register_pernet_subsys(&sctp_net_ops);

      The problem is that after those calls to sctp_v{4,6}_protosw_init(), it
      is possible for userspace to create SCTP sockets like if the module is
      already fully loaded. If that happens, one of the possible effects is
      that we will have readers for net->sctp.local_addr_list list earlier
      than expected and sctp_net_init() does not take precautions while
      dealing with that list, leading to a potential panic but not limited to
      that, as sctp_sock_init() will copy a bunch of blank/partially
      initialized values from net->sctp.

      The race happens like this:

           CPU 0                           |  CPU 1
        socket()                           |
         __sock_create                     | socket()
          inet_create                      |  __sock_create
           list_for_each_entry_rcu(        |
              answer, &inetsw[sock->type], |
              list) {                      |   inet_create
            /* no hits */                  |
           if (unlikely(err)) {            |
            ...                            |
            request_module()               |
            /* socket creation is blocked  |
             * the module is fully loaded  |
             */                            |
             sctp_init                     |
              sctp_v4_protosw_init         |
               inet_register_protosw       |
                list_add_rcu(&p->list,     |
                             last_perm);   |
                                           |  list_for_each_entry_rcu(
                                           |     answer, &inetsw[sock->type],
              sctp_v6_protosw_init         |     list) {
                                           |     /* hit, so assumes protocol
                                           |      * is already loaded
                                           |      */
                                           |  /* socket creation continues
                                           |   * before netns is initialized
                                           |   */
              register_pernet_subsys       |

      Simply inverting the initialization order between
      register_pernet_subsys() and sctp_v4_protosw_init() is not possible
      because register_pernet_subsys() will create a control sctp socket, so
      the protocol must be already visible by then. Deferring the socket
      creation to a work-queue is not good specially because we loose the
      ability to handle its errors.

      So, as suggested by Vlad, the fix is to split netns initialization in
      two moments: defaults and control socket, so that the defaults are
      already loaded by when we register the protocol, while control socket
      initialization is kept at the same moment it is today.

      Fixes: 4db67e808640 ("sctp: Make the address lists per network namespace")
      Signed-off-by: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 19539ce783dd27768d4f7f3b753152bf983db65b
  Author: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 18:25:07 2015 -0600

      ebpf: emit correct src_reg for conditional jumps

      Instead of always emitting BPF_REG_X, let's emit BPF_REG_X only when the
      source actually is BPF_X. This causes programs generated by the classic
      converter to not be importable via bpf(), as the eBPF verifier checks that
      the src_reg is correct or 0. While not a problem yet, this will be a
      problem when BPF_PROG_DUMP lands, and we can potentially dump and 
re-import
      programs generated by the converter.

      Signed-off-by: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
      CC: Alexei Starovoitov <ast@xxxxxxxxxx>
      CC: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1853c949646005b5959c483becde86608f548f24
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 20:05:46 2015 +0200

      netlink, mmap: transform mmap skb into full skb on taps

      Ken-ichirou reported that running netlink in mmap mode for receive in
      combination with nlmon will throw a NULL pointer dereference in
      __kfree_skb() on nlmon_xmit(), in my case I can also trigger an "unable
      to handle kernel paging request". The problem is the skb_clone() in
      __netlink_deliver_tap_skb() for skbs that are mmaped.

      I.e. the cloned skb doesn't have a destructor, whereas the mmap netlink
      skb has it pointed to netlink_skb_destructor(), set in the handler
      netlink_ring_setup_skb(). There, skb->head is being set to NULL, so
      that in such cases, __kfree_skb() doesn't perform a skb_release_data()
      via skb_release_all(), where skb->head is possibly being freed through
      kfree(head) into slab allocator, although netlink mmap skb->head points
      to the mmap buffer. Similarly, the same has to be done also for large
      netlink skbs where the data area is vmalloced. Therefore, as discussed,
      make a copy for these rather rare cases for now. This fixes the issue
      on my and Ken-ichirou's test-cases.

      Reference: http://thread.gmane.org/gmane.linux.network/371129
      Fixes: bcbde0d449ed ("net: netlink: virtual tap device management")
      Reported-by: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Tested-by: Ken-ichirou MATSUZAWA <chamaken@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2172ce2303051764829d4958bd50a11ada0590f
  Merge: a4a5a73 0b61f2c
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 19:18:28 2015 +0100

      Merge branch 'uaccess' into fixes

  commit a4a5a7379e4ca03c192b732d61e446994eb67bbc
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Fri Sep 11 17:12:27 2015 +0100

      ARM: 8431/1: fix alignement of __bug_table section entries

      On old ARM chips, unaligned accesses to memory are not trapped and
      fixed.  On module load, symbols are relocated, and the relocation of
      __bug_table symbols is done on a u32 basis. Yet the section is not
      aligned to a multiple of 4 address, but to a multiple of 2.

      This triggers an Oops on pxa architecture, where address 0xbf0021ea
      is the first relocation in the __bug_table section :
        apply_relocate(): pxa3xx_nand: section 13 reloc 0 sym ''
        Unable to handle kernel paging request at virtual address bf0021ea
        pgd = e1cd0000
        [bf0021ea] *pgd=c1cce851, *pte=c1cde04f, *ppte=c1cde01f
        Internal error: Oops: 23 [#1] ARM
        Modules linked in:
        CPU: 0 PID: 606 Comm: insmod Not tainted 
4.2.0-rc8-next-20150828-cm-x300+ #887
        Hardware name: CM-X300 module
        task: e1c68700 ti: e1c3e000 task.ti: e1c3e000
        PC is at apply_relocate+0x2f4/0x3d4
        LR is at 0xbf0021ea
        pc : [<c000e7c8>]    lr : [<bf0021ea>]    psr: 80000013
        sp : e1c3fe30  ip : 60000013  fp : e49e8c60
        r10: e49e8fa8  r9 : 00000000  r8 : e49e7c58
        r7 : e49e8c38  r6 : e49e8a58  r5 : e49e8920  r4 : e49e8918
        r3 : bf0021ea  r2 : bf007034  r1 : 00000000  r0 : bf000000
        Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
        Control: 0000397f  Table: c1cd0018  DAC: 00000051
        Process insmod (pid: 606, stack limit = 0xe1c3e198)
        [<c000e7c8>] (apply_relocate) from [<c005ce5c>] 
(load_module+0x1248/0x1f5c)
        [<c005ce5c>] (load_module) from [<c005dc54>] 
(SyS_init_module+0xe4/0x170)
        [<c005dc54>] (SyS_init_module) from [<c000a420>] 
(ret_fast_syscall+0x0/0x38)

      Fix this by ensuring entries in __bug_table are all aligned to at least
      of multiple of 4. This transforms a module section  __bug_table as :
      -   [12] __bug_table       PROGBITS        00000000 002232 000018 00   A  
0   0  1
      +   [12] __bug_table       PROGBITS        00000000 002232 000018 00   A  
0   0  4

      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Reviewed-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 0b61f2c0f37983c98ed4207f3f5e265938371b68
  Author: Julien Grall <julien.grall@xxxxxxxxxx>
  Date:   Fri Sep 11 17:25:59 2015 +0100

      arm/xen: Enable user access to the kernel before issuing a privcmd call

      When Xen is copying data to/from the guest it will check if the kernel
      has the right to do the access. If not, the hypercall will return an
      error.

      After the commit a5e090acbf545c0a3b04080f8a488b17ec41fe02 "ARM:
      software-based privileged-no-access support", the kernel can't access
      any longer the user space by default. This will result to fail on every
      hypercall made by the userspace (i.e via privcmd).

      We have to enable the userspace access and then restore the correct
      permission every time the privcmd is used to made an hypercall.

      I didn't find generic helpers to do a these operations, so the change
      is only arm32 specific.

      Reported-by: Riku Voipio <riku.voipio@xxxxxxxxxx>
      Signed-off-by: Julien Grall <julien.grall@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 6e8f580d1fcc18e290713984c379cb97131c015a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 08:34:52 2015 +0100

      ARM: domains: add memory dependencies to get_domain/set_domain

      We need to have memory dependencies on get_domain/set_domain to avoid
      the compiler over-optimising these inline assembly instructions.

      Loads/stores must not be reordered across a set_domain(), so introduce
      a compiler barrier for that assembly.

      The value of get_domain() must not be cached across a set_domain(), but
      we still want to allow the compiler to optimise it away.  Introduce a
      dependency on current_thread_info()->cpu_domain to avoid this; the new
      memory clobber in set_domain() should therefore cause the compiler to
      re-load this.  The other advantage of using this is we should have its
      address in the register set already, or very soon after at most call
      sites.

      Tested-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 716ff1921a86c637b8875c7bb312fc6755fa9300
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Fri Sep 11 08:17:39 2015 +0100

      ARM: domains: thread_info.h no longer needs asm/domains.h

      As of 1eef5d2f1b46 ("ARM: domains: switch to keeping domain value in
      register") we no longer need to include asm/domains.h into
      asm/thread_info.h.  Remove it.

      Tested-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 6fe810bda0bd9a5d7674fc671fac27b8aa8ec243
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Sat Sep 5 15:47:36 2015 -0400

      block: blkg_destroy_all() should clear q->root_blkg and ->root_rl.blkg

      While making the root blkg unconditional, ec13b1d6f0a0 ("blkcg: always
      create the blkcg_gq for the root blkcg") removed the part which clears
      q->root_blkg and ->root_rl.blkg during q exit.  This leaves the two
      pointers dangling after blkg_destroy_all().  blk-throttle exit path
      performs blkg traversals and dereferences ->root_blkg and can lead to
      the following oops.

       BUG: unable to handle kernel NULL pointer dereference at 0000000000000558
       IP: [<ffffffff81389746>] __blkg_lookup+0x26/0x70
       ...
       task: ffff88001b4e2580 ti: ffff88001ac0c000 task.ti: ffff88001ac0c000
       RIP: 0010:[<ffffffff81389746>]  [<ffffffff81389746>] 
__blkg_lookup+0x26/0x70
       ...
       Call Trace:
        [<ffffffff8138d14a>] blk_throtl_drain+0x5a/0x110
        [<ffffffff8138a108>] blkcg_drain_queue+0x18/0x20
        [<ffffffff81369a70>] __blk_drain_queue+0xc0/0x170
        [<ffffffff8136a101>] blk_queue_bypass_start+0x61/0x80
        [<ffffffff81388c59>] blkcg_deactivate_policy+0x39/0x100
        [<ffffffff8138d328>] blk_throtl_exit+0x38/0x50
        [<ffffffff8138a14e>] blkcg_exit_queue+0x3e/0x50
        [<ffffffff8137016e>] blk_release_queue+0x1e/0xc0
       ...

      While the bug is a straigh-forward use-after-free bug, it is tricky to
      reproduce because blkg release is RCU protected and the rest of exit
      path usually finishes before RCU grace period.

      This patch fixes the bug by updating blkg_destro_all() to clear
      q->root_blkg and ->root_rl.blkg.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: "Richard W.M. Jones" <rjones@xxxxxxxxxx>
      Reported-by: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/g/CA+5PVA5rzQ0s4723n5rHBcxQa9t0cW8BPPBekr_9aMRoWt2aYg@xxxxxxxxxxxxxx
      Fixes: ec13b1d6f0a0 ("blkcg: always create the blkcg_gq for the root 
blkcg")
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Tested-by: Richard W.M. Jones <rjones@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 46348456c1791053dcbe5a9e21825b10a3c8a8fb
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Thu Sep 3 19:28:23 2015 +0300

      block: Copy a user iovec if it includes gaps

      For drivers that don't support gaps in the SG lists handed to
      them we must bounce (copy the user buffers) and pass a bio that
      does not include gaps. This doesn't matter for any current user,
      but will help to allow iser which can't handle gaps to use the
      block virtual boundary instead of using driver-local bounce
      buffering when handling SG_IO commands.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 87a816df537e096d404add543ef47b796906c130
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Tue Sep 8 09:33:35 2015 -0600

      block: Refuse adding appending a gapped integrity page to a bio

      This is only theoretical at the moment given that the only
      subsystems that generate integrity payloads are the block layer
      itself and the scsi target (which generate well aligned integrity
      payloads). But when we will expose integrity meta-data to user-space,
      we'll need to refuse appending a page with a gap (if the queue
      virtual boundary is set).

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 7f39add3b08cbbdb99abe50e6d7c342e6800d684
  Author: Sagi Grimberg <sagig@xxxxxxxxxxxx>
  Date:   Fri Sep 11 09:03:04 2015 -0600

      block: Refuse request/bio merges with gaps in the integrity payload

      If a driver sets the block queue virtual boundary mask, it means that
      it cannot handle gaps so we must not allow those in the integrity
      payload as well.

      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>

      Fixed up by me to have duplicate integrity merge functions, depending
      on whether block integrity is enabled or not. Fixes a compilations
      issue with CONFIG_BLK_DEV_INTEGRITY unset.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 4c17a6d56bb0cad3066a714e94f7185a24b40f49
  Author: Jann Horn <jann@xxxxxxxxx>
  Date:   Fri Sep 11 16:27:27 2015 +0200

      CIFS: fix type confusion in copy offload ioctl

      This might lead to local privilege escalation (code execution as
      kernel) for systems where the following conditions are met:

       - CONFIG_CIFS_SMB2 and CONFIG_CIFS_POSIX are enabled
       - a cifs filesystem is mounted where:
        - the mount option "vers" was used and set to a value >=2.0
        - the attacker has write access to at least one file on the filesystem

      To attack this, an attacker would have to guess the target_tcon
      pointer (but guessing wrong doesn't cause a crash, it just returns an
      error code) and win a narrow race.

      CC: Stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jann Horn <jann@xxxxxxxxx>
      Signed-off-by: Steve French <smfrench@xxxxxxxxx>

  commit 84cba178a3b88efe2668a9039f70abda072faa21
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Thu Sep 10 13:11:55 2015 +0300

      crypto: testmgr - don't copy from source IV too much

      While the destination buffer 'iv' is MAX_IVLEN size,
      the source 'template[i].iv' could be smaller, thus
      memcpy may read read invalid memory.
      Use crypto_skcipher_ivsize() to get real ivsize
      and pass it to memcpy.

      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 7e90f9b2b56669260e5f6f97974735d187f79b7d
  Author: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 19:29:11 2015 +0800

      ASoC: wm8960: correct gain value for input PGA and add microphone PGA

      The input PGAs have a gain range from -17.25dB to +30dB in 0.75dB steps.

      The boost stage can provide additional gain. For line inputs, -12dB to
      +6dB gain is available on the boost mixer. For micphone inputs, it can
      provide up to +29dB additional gain from the microphone PGA.

      Signed-off-by: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 3758ff5f3dab57cd768d54279962a2f6bbc17188
  Author: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
  Date:   Wed Sep 9 19:29:10 2015 +0800

      ASoC: wm8960: correct the min gain value of some PGA

      The min gain is the corresponding gain value when the register value is 0
      instead of 1, just correct it.

      Signed-off-by: Zidan Wang <zidan.wang@xxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit dd85ebf681ef0ee1fc985c353dd45e8b53b5dc1e
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 10 16:48:13 2015 +0530

      spi: spidev: fix possible NULL dereference

      During the last close we are freeing spidev if spidev->spi is NULL, but
      just before checking if spidev->spi is NULL we are dereferencing it.
      Lets add a check there to avoid the NULL dereference.

      Fixes: 9169051617df ("spi: spidev: Don't mangle max_speed_hz in 
underlying spi device")
      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Reviewed-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Tested-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit f17b329b73a0393dc9d5fc5b4457189f92e5bbef
  Author: Oder Chiou <oder_chiou@xxxxxxxxxxx>
  Date:   Thu Sep 10 13:40:16 2015 +0800

      ASoC: rt5645: Remove incorrect settings

      The patch removes the incorrect settings to avoid the pop sound in the
      first playback with headphone after boot.

      Signed-off-by: Oder Chiou <oder_chiou@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 75881df3fd7708f234c1e2573ade812eb5701708
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 10 18:01:44 2015 +0530

      ASoC: dapm: fix memory leak

      Incase of an unknown event we were directly returning but we missed
      freeing params.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit d249872939bfa86c9cce44a56a8cbdbc7086519b
  Author: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
  Date:   Fri Jul 17 16:34:10 2015 +0300

      perf/x86/intel/bts: Set event->hw.itrace_started in pmu::start to match 
the new logic

      Since event->hw.itrace_started is now set in pmu::start() to signal the 
beginning of
      the trace, do so also in the intel_bts driver.

      Signed-off-by: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: acme@xxxxxxxxxxxxx
      Cc: adrian.hunter@xxxxxxxxx
      Cc: hpa@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1437140050-23363-4-git-send-email-alexander.shishkin@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5473e0cc37c03c576adbda7591a6cc8e37c1bb7f
  Author: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
  Date:   Fri Aug 28 14:55:56 2015 +0800

      sched: 'Annotate' migrate_tasks()

      Kernel testing triggered this warning:

      | WARNING: CPU: 0 PID: 13 at kernel/sched/core.c:1156 
do_set_cpus_allowed+0x7e/0x80()
      | Modules linked in:
      | CPU: 0 PID: 13 Comm: migration/0 Not tainted 4.2.0-rc1-00049-g25834c7 #2
      | Call Trace:
      |   dump_stack+0x4b/0x75
      |   warn_slowpath_common+0x8b/0xc0
      |   warn_slowpath_null+0x22/0x30
      |   do_set_cpus_allowed+0x7e/0x80
      |   cpuset_cpus_allowed_fallback+0x7c/0x170
      |   select_fallback_rq+0x221/0x280
      |   migration_call+0xe3/0x250
      |   notifier_call_chain+0x53/0x70
      |   __raw_notifier_call_chain+0x1e/0x30
      |   cpu_notify+0x28/0x50
      |   take_cpu_down+0x22/0x40
      |   multi_cpu_stop+0xd5/0x140
      |   cpu_stopper_thread+0xbc/0x170
      |   smpboot_thread_fn+0x174/0x2f0
      |   kthread+0xc4/0xe0
      |   ret_from_kernel_thread+0x21/0x30

      As Peterz pointed out:

      | So the normal rules for changing task_struct::cpus_allowed are holding
      | both pi_lock and rq->lock, such that holding either stabilizes the mask.
      |
      | This is so that wakeup can happen without rq->lock and load-balance
      | without pi_lock.
      |
      | From this we already get the relaxation that we can omit acquiring
      | rq->lock if the task is not on the rq, because in that case
      | load-balancing will not apply to it.
      |
      | ** these are the rules currently tested in do_set_cpus_allowed() **
      |
      | Now, since __set_cpus_allowed_ptr() uses task_rq_lock() which
      | unconditionally acquires both locks, we could get away with holding just
      | rq->lock when on_rq for modification because that'd still exclude
      | __set_cpus_allowed_ptr(), it would also work against
      | __kthread_bind_mask() because that assumes !on_rq.
      |
      | That said, this is all somewhat fragile.
      |
      | Now, I don't think dropping rq->lock is quite as disastrous as it
      | usually is because !cpu_active at this point, which means load-balance
      | will not interfere, but that too is somewhat fragile.
      |
      | So we end up with a choice of two fragile..

      This patch fixes it by following the rules for changing
      task_struct::cpus_allowed with both pi_lock and rq->lock held.

      Reported-by: kernel test robot <ying.huang@xxxxxxxxx>
      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      [ Modified changelog and patch. ]
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/BLU436-SMTP1660820490DE202E3934ED3806E0@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a6b277857fd2c990bc208ca1958d3f34d26052f7
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Sat Sep 5 16:55:05 2015 +0200

      locking/qspinlock/x86: Only emit the test-and-set fallback when building 
guest support

      Only emit the test-and-set fallback for Hypervisors lacking
      PARAVIRT_SPINLOCKS support when building for guests.

      Suggested-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: stable@xxxxxxxxxxxxxxx # 4.2
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 43b3f02899f74ae9914a39547cc5492156f0027a
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Sep 4 17:25:23 2015 +0200

      locking/qspinlock/x86: Fix performance regression under unaccelerated VMs

      Dave ran into horrible performance on a VM without PARAVIRT_SPINLOCKS
      set and Linus noted that the test-and-set implementation was retarded.

      One should spin on the variable with a load, not a RMW.

      While there, remove 'queued' from the name, as the lock isn't queued
      at all, but a simple test-and-set.

      Suggested-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Reported-by: Dave Chinner <david@xxxxxxxxxxxxx>
      Tested-by: Dave Chinner <david@xxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Waiman Long <Waiman.Long@xxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Link: 
http://lkml.kernel.org/r/20150904152523.GR18673@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5f25f066f75a67835abb5e400471a27abd09395b
  Author: Xiaolong Ye <yexl@xxxxxxxxxxx>
  Date:   Fri Sep 11 11:05:23 2015 +0800

      PM / devfreq: Fix incorrect type issue.

      time_in_state in struct devfreq is defined as unsigned long, so
      devm_kzalloc should use sizeof(unsigned long) as argument instead
      of sizeof(unsigned int), otherwise it will cause unexpected result
      in 64bit system.

      Signed-off-by: Xiaolong Ye <yexl@xxxxxxxxxxx>
      Signed-off-by: Kevin Liu <kliu5@xxxxxxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 14de3903181ca41dde73d57ad4f7a79a314ee6bf
  Author: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
  Date:   Tue Aug 18 13:47:41 2015 +0900

      PM / devfreq: tegra: Update governor to use devfreq_update_stats()

      Direct invocation of get_dev_status() is no more recommended.

      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit d54cdf3fc91aae3780433471d15d73413a845bc0
  Author: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
  Date:   Tue Aug 18 13:45:49 2015 +0900

      PM / devfreq: comments for get_dev_status usage updated

      With the introduction of devfreq_update_stats(), governors
      are not recommended to use get_dev_status() directly.

      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit d3b7e1745c0d1be2add1bb58065eef142c5a098f
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Fri Aug 14 18:57:00 2015 +0100

      PM / devfreq: drop comment about thermal setting max_freq

      The thermal infrastructure should use the devfreq cooling device, which
      uses the OPP library to disable OPPs as necessary.

      Fix a couple of typos in the same comment while we are at it.

      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 08e75e754a6d9838e490b74551d19fc04d0fd6f9
  Author: Javi Merino <javi.merino@xxxxxxx>
  Date:   Fri Aug 14 18:56:56 2015 +0100

      PM / devfreq: cache the last call to get_dev_status()

      The return value of get_dev_status() can be reused.  Cache it so that
      other parts of the kernel can reuse it instead of having to call the
      same function again.

      Cc: Kyungmin Park <kyungmin.park@xxxxxxxxxxx>
      Signed-off-by: Javi Merino <javi.merino@xxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 9348da2f1c2ca8e064d4907cdc5b3a19477df933
  Author: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
  Date:   Mon Aug 10 11:42:25 2015 +0530

      PM / devfreq: Drop unlikely before IS_ERR(_OR_NULL)

      IS_ERR(_OR_NULL) already contain an 'unlikely' compiler flag and there
      is no need to do that again from its callers. Drop it.

      Signed-off-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 86fa4cdb0f1e16d7e27278e29e4f0b9ba22f1a9b
  Author: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
  Date:   Wed Aug 5 10:55:10 2015 +0900

      PM / devfreq: exynos-ppmu: bit-wise operation bugfix.

      Make it u64 before left-shifting 32bits.

      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit d80f02231a1ee891f56f06ee6e4646db6ba28836
  Author: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>
  Date:   Fri Jul 24 13:17:25 2015 +0900

      PM / devfreq: exynos-ppmu: Update documentation to support PPMUv2

      This patch updates the documentation to include the information of PPMUv2.
      The PPMUv2 is used for Exynos5433 and Exynos7420 to monitor the 
performance
      of each IP in Exynos SoC.

      Cc: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
      Cc: Kyungmin Park <kyungmin.park@xxxxxxxxxxx>
      Signed-off-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>

  commit 77fe46a301a75795cf1d43ed2988a15c1600d1b5
  Author: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>
  Date:   Fri Jul 24 13:17:24 2015 +0900

      PM / devfreq: exynos-ppmu: Add the support of PPMUv2 for Exynos5433

      This patch adds the support for PPMU (Platform Performance Monitoring 
Unit)
      version 2.0 for Exynos5433 SoC. Exynos5433 SoC must need PPMUv2 which is
      quite different from PPMUv1.1. The exynos-ppmu.c driver supports both 
PPMUv1.1
      and PPMUv2.

      Cc: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>
      Cc: Kyungmin Park <kyungmin.park@xxxxxxxxxxx>
      Signed-off-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>

  commit f47ff87f79a0f65db6af5b6bebd67b8f011994d1
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Jul 13 08:58:51 2015 +0200

      PM / devfreq: event: Remove incorrect property in exynos-ppmu DT binding

      The exynos-ppmu driver is only a clock consumer and not a clock provider
      but its Device Tree binding listed #clock-cells as an optional property.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.ham@xxxxxxxxxxx>

  commit 53147b6cabee5e8d1997b5682fcc0c3b72ddf9c2
  Author: Azael Avalos <coproscefalo@xxxxxxxxx>
  Date:   Wed Sep 9 11:25:45 2015 -0600

      toshiba_acpi: Fix hotkeys registration on some toshiba models

      Commit a2b3471b5b13 ("toshiba_acpi: Use the Hotkey Event Type function
      for keymap choosing") changed the *setup_keyboard function to query for
      the Hotkey Event Type to help choose the correct keymap, but turns out
      that here are certain Toshiba models out there not implementing this
      feature, and thus, failing to continue the input device registration and
      leaving such laptops without hotkey support.

      This patch changes such check, and instead of returning an error if
      the Hotkey Event Type is not present, we simply inform userspace about it,
      changing the message printed from err to notice, making the function
      responsible for registering the input device to continue.

      This issue was found on a Toshiba Portege Z30-B, but there might be
      some other models out there affected by this regression as well.

      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1+
      Signed-off-by: Azael Avalos <coproscefalo@xxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit cf680eae34d26bd474c2ed3bd7d3aff59054aed5
  Author: Azael Avalos <coproscefalo@xxxxxxxxx>
  Date:   Wed Sep 9 11:25:44 2015 -0600

      toshiba_acpi: Fix USB Sleep and Music always disabled

      Commit e1a949c1b988 ("toshiba_acpi: Refactor *{get, set} functions return
      value") made changes on the return type of the HCI/SCI functions, but a
      typo on the USB Sleep and Music code is always reporting non existent
      support for such feature.

      This patch corrects the typo, changing an assignment to a comparison,
      making the laptops with actual support for such feature to work again.

      Signed-off-by: Azael Avalos <coproscefalo@xxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit 3bba75a2ec32bd5fa7024a4de3b8cf9ee113a76a
  Author: Romain Perier <romain.perier@xxxxxxxxx>
  Date:   Sun Aug 23 11:32:37 2015 +0200

      clk: rockchip: Add pclk_peri to critical clocks on RK3066/RK3188

      Now that the rockchip clock subsystem does clock gating with GPIO banks,
      these are no longer enabled once during probe and no longer stay enabled
      for eternity. When all these clocks are disabled, the parent clock 
pclk_peri
      might be disabled too, as no other child claims it. So, we need to add 
pclk_peri
      to the critical clocks.

      Signed-off-by: Romain Perier <romain.perier@xxxxxxxxx>
      Tested-by: Michael Niewoehner <linux@xxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 1166160ab531198f7abc773992c0e04d0f9b7600
  Author: Michael Niewoehner <linux@xxxxxxxxxxxxxx>
  Date:   Tue Aug 25 22:22:07 2015 +0200

      clk: rockchip: add pclk_cpu to the list of rk3188 critical clocks

      pclk_cpu needs to keep running because it is needed for devices like
      the act8865 regulator but with the recent gpio clock handling this is
      not always the case anymore. So add it to the list of critical clocks.

      Signed-off-by: Michael Niewoehner <linux@xxxxxxxxxxxxxx>
      Reviewed-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit bb0f73616396e7929b68d3bdea70064003599d33
  Author: Heiko Stuebner <heiko@xxxxxxxxx>
  Date:   Fri Aug 21 19:51:41 2015 +0200

      clk: rockchip: handle critical clocks after registering all clocks

      Currently the registration of critical clocks is done in the function
      shared between rk3066 and rk3188 clock trees. That results in them
      getting handled maybe before all of them are registered.

      Therefore move the critical clock handling down to the end of the soc-
      specific clock registration function, so that all clocks are registered
      before they're maybe handled as critical clock.

      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Tested-by: Michael Niewoehner <linux@xxxxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit e11fc21e756e662e465cac3da6547d438d0b1446
  Author: Grazvydas Ignotas <notasas@xxxxxxxxx>
  Date:   Sat Sep 5 02:32:34 2015 +0300

      twl4030_charger: fix another compile error

      When CONFIG_CHARGER_TWL4030=y and CONFIG_TWL4030_MADC=m we get a
      compile error:

      drivers/built-in.o: In function `twl4030_charger_update_current':
      twl4030_charger.c:(.text+0x504681): undefined reference to
      `twl4030_get_madc_conversion'

      Use IS_REACHABLE to fix it.

      Cc: NeilBrown <neil@xxxxxxxxxx>
      Reported-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Grazvydas Ignotas <notasas@xxxxxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Sebastian Reichel <sre@xxxxxxxxxx>

  commit aefc574bbbbe74bb891ba392d98f2d59a417c774
  Author: Sebastian Reichel <sre@xxxxxxxxxx>
  Date:   Thu Sep 10 10:00:55 2015 +0200

      Revert "twl4030_charger: correctly handle -EPROBE_DEFER from 
devm_usb_get_phy_by_node"

      Revert commit 3fc3895e4fe17ee92ae1d1bb9f04da6069e8c370, since
      it introduced a boot failure on some OMAP platforms.

      Reported-by: Kevin Hilman <khilman@xxxxxxxxxx>
      Signed-off-by: Sebastian Reichel <sre@xxxxxxxxxx>

  commit 30059d494a72603d066baf55c748803df968aa08
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Wed Apr 29 13:07:38 2015 -0400

      tile: use global strscpy() rather than private copy

      Now that strscpy() is a standard API, remove the local copy.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 30035e45753b708e7d47a98398500ca005e02b86
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Wed Apr 29 12:52:04 2015 -0400

      string: provide strscpy()

      The strscpy() API is intended to be used instead of strlcpy(),
      and instead of most uses of strncpy().

      - Unlike strlcpy(), it doesn't read from memory beyond (src + size).

      - Unlike strlcpy() or strncpy(), the API provides an easy way to check
        for destination buffer overflow: an -E2BIG error return value.

      - The provided implementation is robust in the face of the source
        buffer being asynchronously changed during the copy, unlike the
        current implementation of strlcpy().

      - Unlike strncpy(), the destination buffer will be NUL-terminated
        if the string in the source buffer is too long.

      - Also unlike strncpy(), the destination buffer will not be updated
        beyond the NUL termination, avoiding strncpy's behavior of zeroing
        the entire tail end of the destination buffer.  (A memset() after
        the strscpy() can be used if this behavior is desired.)

      - The implementation should be reasonably performant on all
        platforms since it uses the asm/word-at-a-time.h API rather than
        simple byte copy.  Kernel-to-kernel string copy is not considered
        to be performance critical in any case.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

  commit 135919a3a80565070b9645009e65f73e72c661c0
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Wed Sep 9 13:35:05 2015 -0400

      intel_idle: Skylake Client Support - updated

      Addition of PC9 state, and minor tweaks to existing PC6 and PC8 states.

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>

  commit 85b4e4eb2f9ac29ee8ec47f1f055f251cb251a3c
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 00:08:45 2015 +0200

      wmi: Remove private %pUL implementation

      The work performed by wmi_gtoa is equivalent to simply sprintf(out,
      "%pUL", in), so one could replace its body by this. However, most
      users feed the result directly as a %s argument to some other function
      which also understands the %p extensions (they all ultimately use
      vsnprintf), so we can eliminate some stack buffers and quite a bit of
      code by just using %pUL directly.

      In wmi_dev_uevent I'm not sure whether there's room for a
      nul-terminator in env->buf, so I've just replaced wmi_gtoa with the
      equivalent sprintf call.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit 85e0a0f21a14bfd9145422a6a627c3df47101bd8
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Thu Sep 10 10:36:06 2015 +0100

      Btrfs: remove unnecessary locking of cleaner_mutex to avoid deadlock

      After commmit e44163e17796 ("btrfs: explictly delete unused block groups
      in close_ctree and ro-remount"), added in the 4.3 merge window, we have
      calls to btrfs_delete_unused_bgs() while holding the cleaner_mutex.
      This can cause a deadlock with a concurrent block group relocation (when
      a filesystem balance or shrink operation is in progress for example)
      because btrfs_delete_unused_bgs() locks delete_unused_bgs_mutex and the
      relocation path locks first delete_unused_bgs_mutex and then it locks
      cleaner_mutex, resulting in a classic ABBA deadlock:

               CPU 0                                        CPU 1

      lock fs_info->cleaner_mutex

                                                 __btrfs_balance() || 
btrfs_shrink_device()
                                                   lock 
fs_info->delete_unused_bgs_mutex
                                                   btrfs_relocate_chunk()
                                                     
btrfs_relocate_block_group()
                                                       lock 
fs_info->cleaner_mutex
      btrfs_delete_unused_bgs()
        lock fs_info->delete_unused_bgs_mutex

      Fix this by not taking the cleaner_mutex before calling
      btrfs_delete_unused_bgs() because it's no longer needed after
      commit 67c5e7d464bc ("Btrfs: fix race between balance and unused block
      group deletion"). The mutex fs_info->delete_unused_bgs_mutex, the
      spinlock fs_info->unused_bgs_lock and a block group's spinlock are
      enough to get correct serialization between tasks running relocation
      and unused block group deletion (as well as between multiple tasks
      concurrently calling btrfs_delete_unused_bgs()).

      This issue was discussed (in the mailing list) during the review of
      the patch titled "btrfs: explictly delete unused block groups in
      close_ctree and ro-remount" and it was agreed that acquiring the
      cleaner mutex had to be dropped after the patch titled
      "Btrfs: fix race between balance and unused block group deletion"
      got merged (both patches were submitted at about the same time, but
      one landed in kernel 4.2 and the other in the 4.3 merge window).

      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit 3a0e27d84bb9abac5e39dc71706768a88c72cb71
  Author: Arnaud Pouliquen <arnaud.pouliquen@xxxxxx>
  Date:   Thu Sep 10 09:45:55 2015 +0200

      ASoC: sti: check return of of_property_read

      Add check on of_property_read to return error when
      DT required property is not defined.

      Signed-off-by: Arnaud Pouliquen <arnaud.pouliquen@xxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit d630526d0aa6acc0868dae892b1febda72029a3e
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 10:19:52 2015 +0200

      spi: atmel: remove warning when !CONFIG_PM_SLEEP

      When CONFIG_PM is defined but not CONFIG_PM_SLEEP (this happens when
      CONFIG_SUSPEND is not defined), there is the following warning:

      drivers/spi/spi-atmel.c:1723:12: warning: â??atmel_spi_suspendâ?? defined 
but not used [-Wunused-function]
      drivers/spi/spi-atmel.c:1741:12: warning: â??atmel_spi_resumeâ?? defined 
but not used [-Wunused-function]

      Enclose both atmel_spi_suspend and atmel_spi_resume in #ifdef
      CONFIG_PM_SLEEP/#endif to solve that.

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 2a3fffd45822070309bcf0b1e1dae624d633824a
  Author: Martin Sperl <kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 09:32:14 2015 +0000

      spi: bcm2835: BUG: fix wrong use of PAGE_MASK

      There is a bug in the alignment checking of transfers,
      that results in DMA not being used for un-aligned
      transfers that do not cross page-boundries, which is valid.

      This is due to a missconception of the meaning PAGE_MASK
      when implementing that check originally - (PAGE_SIZE - 1)
      should have been used instead.

      Also fixes a copy/paste error.

      Reported-by: <robert@xxxxxxxxxxx>
      Signed-off-by: Martin Sperl <kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 9da75de030bb6e49475ef37c8495d07e98cfeb33
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Wed Sep 9 14:27:07 2015 +0200

      crypto: sunxi-ss - Fix a possible driver hang with ciphers

      The sun4i_ss_opti_poll function cipher data until the output miter have
      a length of 0.
      If the crypto API client, give more SGs than necessary this could result
      in an infinite loop.
      Fix it by checking for remaining bytes, just like sun4i_ss_cipher_poll().

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit f1ab428711358fbb747ba392c3448462494e6c6a
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Wed Sep 9 18:22:35 2015 +1000

      crypto: vmx - VMX crypto should depend on CONFIG_VSX

      This code uses FP (floating point), Altivec and VSX (Vector-Scalar
      Extension). It can just depend on CONFIG_VSX though, because that
      already depends on FP and Altivec.

      Otherwise we get lots of link errors such as:

        drivers/built-in.o: In function `.p8_aes_setkey':
        aes.c:(.text+0x2d325c): undefined reference to `.enable_kernel_altivec'
        aes.c:(.text+0x2d326c): undefined reference to `.enable_kernel_vsx'

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e297c939b745e420ef0b9dc989cb87bda617b399
  Author: Paul Mackerras <paulus@xxxxxxxxxx>
  Date:   Thu Sep 10 14:36:21 2015 +1000

      powerpc/MSI: Fix race condition in tearing down MSI interrupts

      This fixes a race which can result in the same virtual IRQ number
      being assigned to two different MSI interrupts.  The most visible
      consequence of that is usually a warning and stack trace from the
      sysfs code about an attempt to create a duplicate entry in sysfs.

      The race happens when one CPU (say CPU 0) is disposing of an MSI
      while another CPU (say CPU 1) is setting up an MSI.  CPU 0 calls
      (for example) pnv_teardown_msi_irqs(), which calls
      msi_bitmap_free_hwirqs() to indicate that the MSI (i.e. its
      hardware IRQ number) is no longer in use.  Then, before CPU 0 gets
      to calling irq_dispose_mapping() to free up the virtal IRQ number,
      CPU 1 comes in and calls msi_bitmap_alloc_hwirqs() to allocate an
      MSI, and gets the same hardware IRQ number that CPU 0 just freed.
      CPU 1 then calls irq_create_mapping() to get a virtual IRQ number,
      which sees that there is currently a mapping for that hardware IRQ
      number and returns the corresponding virtual IRQ number (which is
      the same virtual IRQ number that CPU 0 was using).  CPU 0 then
      calls irq_dispose_mapping() and frees that virtual IRQ number.
      Now, if another CPU comes along and calls irq_create_mapping(), it
      is likely to get the virtual IRQ number that was just freed,
      resulting in the same virtual IRQ number apparently being used for
      two different hardware interrupts.

      To fix this race, we just move the call to msi_bitmap_free_hwirqs()
      to after the call to irq_dispose_mapping().  Since virq_to_hw()
      doesn't work for the virtual IRQ number after irq_dispose_mapping()
      has been called, we need to call it before irq_dispose_mapping() and
      remember the result for the msi_bitmap_free_hwirqs() call.

      The pattern of calling msi_bitmap_free_hwirqs() before
      irq_dispose_mapping() appears in 5 places under arch/powerpc, and
      appears to have originated in commit 05af7bd2d75e ("[POWERPC] MPIC
      U3/U4 MSI backend") from 2007.

      Fixes: 05af7bd2d75e ("[POWERPC] MPIC U3/U4 MSI backend")
      Cc: stable@xxxxxxxxxxxxxxx # v2.6.22+
      Reported-by: Alexey Kardashevskiy <aik@xxxxxxxxx>
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit af4cb25df93d2e7a97d65db2bfacaa4400988dea
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 21:19:49 2015 +0100

      ARM: uaccess: fix undefined instruction on ARMv7M/noMMU

      The use of get_domain() in copy_thread() results in an oops on
      ARMv7M/noMMU systems.  The thread cpu_domain value is only used when
      CONFIG_CPU_USE_DOMAINS is enabled, so there's no need to save the
      value in copy_thread() except when this is enabled, and this option
      will never be enabled on these platforms.

      Unhandled exception: IPSR = 00000006 LR = fffffff1
      CPU: 0 PID: 0 Comm: swapper Not tainted 
4.2.0-next-20150909-00001-gb8ec5ad #41
      Hardware name: NXP LPC18xx/43xx (Device Tree)
      task: 2823fbe0 ti: 2823c000 task.ti: 2823c000
      PC is at copy_thread+0x18/0x92
      LR is at copy_thread+0x19/0x92
      pc : [<2800a46e>]    lr : [<2800a46f>]    psr: 4100000b
      sp : 2823df00  ip : 00000000  fp : 287c81c0
      r10: 00000000  r9 : 00800300  r8 : 287c8000
      r7 : 287c8000  r6 : 2818908d  r5 : 00000000  r4 : 287ca000
      r3 : 00000000  r2 : 00000000  r1 : fffffff0  r0 : 287ca048
      xPSR: 4100000b

      Reported-by: Ariel D'Alessandro <ariel@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 296254f3223d201f2aa53f5f717eedfdc63f3db8
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 00:30:06 2015 +0100

      ARM: uaccess: remove unneeded uaccess_save_and_disable macro

      This macro is never referenced, remove it.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 39dc53deff30d9b239ac36cfeb0ef2022d03a449
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 00:29:15 2015 +0100

      ARM: swpan: fix nwfpe for uaccess changes

      NWFPE needs to access userspace to check whether the next instruction
      is another FP instruction.  Allow userspace access for this read.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit ddab2c0eaf57b2de0b2516a477e3ce0f7554509b
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Wed Sep 9 22:03:30 2015 +0300

      tools/virtio: fix build after 4.2 changes

      more stubs, mostly

      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>

  commit f1ec5ec7a94ba8138f9cbdc1e9e3b03aee29c4df
  Author: Liam Girdwood <liam.r.girdwood@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 9 12:10:31 2015 +0100

      ASoC: intel: Fix SSP port configuration after RTD3 resume.

      Currently the SSP port settings are being clobbered as part of the DSP
      RTD3 restore logic. make sure we save the correct params and restore them
      at resume. The FW sadly does not save SSP settings as part of the PM
      context.

      Signed-off-by: Liam Girdwood <liam.r.girdwood@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 721b51fcf91898299d96f4b72cb9434cda29dce6
  Author: John Lin <john.lin@xxxxxxxxxxx>
  Date:   Wed Sep 9 16:47:48 2015 +0800

      ASoC: rt5645: Add struct dmi_system_id "Google Ultima" for chrome platform

      Signed-off-by: John Lin <john.lin@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 6ccea107eba46fbc7de40e944bf17145c2809666
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 17:05:27 2015 +0300

      ath10k: print invalid mcs reported in rx descriptor

      Sometimes hardware reports invalid mcs index in rx descriptor
      when operating in VHT80 mode and all packets with invalid mcs
      will be eventually dropped in mac80211. This issue is observerd during
      testing on QCA99X0 chipsets.

      This patch adds a warn message for dumping the rx desc info which helps
      in analysing the issue when invalid mcs is received.

      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0c6d6f2606dfe3758265fb29bfe8103e89d99bab
  Author: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
  Date:   Wed Sep 2 13:20:20 2015 +0200

      ath10k: fix beamformer VHT sounding dimensions capability

      Similarly to the VHT STS, this is supposed to be propagated by firmware.
      In case it's not, use the default value, but as last resort.

      Signed-off-by: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 707a0c811ca02861f1500f0696efebcf3bd2e2e2
  Author: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
  Date:   Wed Sep 2 13:20:19 2015 +0200

      ath10k: fix beamformee VHT STS capability

      The VHT STS CAP shall be reported by firmware to host, like in case of
      QCA99x0. For QCA6174 hw family this isn't set for some reason.
      So for this particular chips, let's assume it has the ability to
      support VHT NDP in up to 4 STSs (which is true by the way).

      Change the published beamformee STS cap accordingly to 3 or to what
      the firmware reports.

      Assumption so far, it suppose to be the num_rf_chains-1, was
      completely wrong.

      Signed-off-by: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7b7da0a02192fd518c26c46dad6b14aca4569605
  Author: Vivek Natarajan <nataraja@xxxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 16:34:55 2015 +0530

      ath10k: drop probe responses when too many are queued

      In a noisy environment, when multiple interfaces are created,
      the management tx descriptors are fully occupied by the probe
      responses from all the interfaces. This prevents a new station
      from a successful association.

      Fix this by limiting the probe responses when the specified
      threshold limit is reached.

      Signed-off-by: Vivek Natarajan <nataraja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a925a3763982799460b9e9b5299520172652b785
  Author: Vasanthakumar Thiagarajan <vthiagar@xxxxxxxxxxxxxxxx>
  Date:   Fri Aug 28 17:21:34 2015 +0530

      ath10k: fix DMA alloc failure for target requested memory chunks

      During long hours of stress testing like AP interface up/down along
      with continuous ping flood from a station doing connect/disconnect,
      it is observed that the system is not able to allocate DMA consistent
      memory of size > 512KB chunks as requested by firmware in 
WMI_SERVICE_EVENTID.
      With the system memory getting fragmented during the run based on the
      size of the memory requested, the failure to return physically continguous
      memory of high order can happen. Once the system gets to this situation,
      bringing up the wifi interface will fail and a system reboot may be needed
      to make it work again. This problem is obseved with QCA99X0.

      To fix this issue, allocate the DMA memory requested by firmware during
      device probe time and keep it during the life time of the device. WMI 
service
      ready event handler is changed to allocate the memory chunks if it is
      not already allocated or if the memory allocated for the previous ready
      event is not same as the current requested ones. After this patch the
      memory usage when wifi is inactive will be inceased by few 100KB to
      3MB based on the target type.

      Failure happens with the following stack trace

      [29557.488773] kworker/u4:1: page allocation failure: order:8, mode:0xd0
      [29557.494297] CPU: 0 PID: 8402 Comm: kworker/u4:1 Not tainted 3.14.43 #7
      [29557.500793] Workqueue: ath10k_aux_wq 
ath10k_wmi_event_service_ready_work [ath10k_core]
      [29557.508602] [<c021e9b0>] (unwind_backtrace) from [<c021ba90>] 
(show_stack+0x10/0x14)
      [29557.516580] [<c021ba90>] (show_stack) from [<c03bdddc>] 
(dump_stack+0x88/0xcc)
      [29557.523612] [<c03bdddc>] (dump_stack) from [<c0290e34>] 
(warn_alloc_failed+0xdc/0x108)
      [29557.531515] [<c0290e34>] (warn_alloc_failed) from [<c0292d88>] 
(__alloc_pages_nodemask+0x4f0/0x654)
      [29557.540485] [<c0292d88>] (__alloc_pages_nodemask) from [<c0222b48>] 
(__dma_alloc_buffer.isra.20+0x2c/0x104)
      [29557.550260] [<c0222b48>] (__dma_alloc_buffer.isra.20) from 
[<c0222c34>] (__alloc_remap_buffer.isra.23+0x14/0xb8)
      [29557.560413] [<c0222c34>] (__alloc_remap_buffer.isra.23) from 
[<c022305c>] (__dma_alloc+0x224/0x2b8)
      [29557.569490] [<c022305c>] (__dma_alloc) from [<c0223208>] 
(arm_dma_alloc+0x84/0x90)
      [29557.577010] [<c0223208>] (arm_dma_alloc) from [<bf5159d0>] 
(ath10k_wmi_event_service_ready_work+0x2f8/0x420 [ath10k_core])
      [29557.588055] [<bf5159d0>] (ath10k_wmi_event_service_ready_work 
[ath10k_core]) from [<c024260c>] (process_one_work+0x20c/0x328)
      [29557.599305] [<c024260c>] (process_one_work) from [<c02432d0>] 
(worker_thread+0x228/0x360)
      [29557.607470] [<c02432d0>] (worker_thread) from [<c0247f88>] 
(kthread+0xd8/0xec)
      [29557.614750] [<c0247f88>] (kthread) from [<c0208d18>] 
(ret_from_fork+0x14/0x3c)
      [29557.712751] Normal: 696*4kB (UEMR) 512*8kB (UEMR) 367*16kB (UEMR) 
404*32kB (UEMR) 455*64kB (UEMR) 424*128kB (UEMR) 379*256kB (UMR) 327*512kB 
(UMR) 1*1024kB (R) 0*2048kB 0*4096kB = 374544kB

      Signed-off-by: Vasanthakumar Thiagarajan <vthiagar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 6986fdd699f9be57cc1478c738ea6347e3d52547
  Author: Michal Kazior <michal.kazior@xxxxxxxxx>
  Date:   Thu Aug 27 14:47:33 2015 +0200

      ath10k: fix mu-mimo rx status reporting

      MU-MIMO Rx involves different interpretation of
      the VHT-SIG-A compared to SU-MIMO.

      The incorrect interpretation led ath10k to report
      VHT MCS values greater than 9 which subsequently
      prompted mac80211 to drop such frames. This
      effectively broke Rx with MU-MIMO in many cases
      and manifested with a kernel warning in the log
      which looked like this:

        [   14.552520] WARNING: CPU: 2 PID: 0 at net/mac80211/rx.c:3578 
ieee80211_rx+0x26c/0x940 [mac80211]()
        [   14.552522] Rate marked as a VHT rate but data is invalid: MCS: 10, 
NSS: 2
        ... call trace follows ...

      Signed-off-by: Michal Kazior <michal.kazior@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b855d45dc3175eb3e602b945805c7b6aa8c04559
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Tue Sep 8 15:16:09 2015 +1000

      powerpc: Wire up sys_userfaultfd()

      The selftest passes on 64-bit LE and BE.

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 3bd7617596df560e2cb22ad97888cb42dae39d02
  Merge: 21adf76 cf2f33a
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Sep 8 16:22:29 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Use PERF_RECORD_SWITCH when available in intel-pt, instead of
          "sched:sched_switch" events, enabling an unprivileged user to trace
          multi-threaded or multi-process workloads. (Adrian Hunter)

        - Always use non inlined file name for 'srcfile' sort key. (Andi Kleen)

        - Quieten failed to read counter message, helps in systems without
          backend-stalled-cycles. (Andi Kleen)

      Infrastructure changes:

        - Add a 'perf test' entry for decoding of new x86 instructions. (Adrian 
Hunter)

        - Add new instructions (sha, clflushopt, clwb, pcommit, rdpkru, wrpkru, 
xsavec,
          xsaves, xrstors) to the x86 instruction decoder. (Adrian Hunter)

        - Add a build test to warn when source code drifts happen for the
          instruction decoder files in the kernel and in tools/perf. (Adrian 
Hunter)

        - Copy linux/filter.h to tools/include. (He Kuang)

        - Support function __get_dynamic_array_len in libtraceevent. (He 
Kuanguuu)

        - Tracing path finding/mounting/error reporting refactorings. (Jiri 
Olsa)

        - Store CPU socket and core IDs in perf.data. (Kan Liang)

        - Reorganize add/del probe insertion routines in 'perf probe'. 
(Namhyung Kim, Wang Nan)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit decb4c41159e1511197f2964da758fa7f2eeb741
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:43 2015 +0200

      x86/headers: Remove <asm/sigcontext.h> references on the kernel side

      Now that all type definitions are in the UAPI header, include it
      directly, instead of through <asm/sigcontext.h>.

      [ We still keep asm/sigcontext.h, so that uapi/asm/sigcontext32.h
        can include <asm/sigcontext.h>. ]

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-16-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 711531f4f3cb881f4598cddfcc36663101dee411
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:42 2015 +0200

      x86/headers: Remove direct sigcontext32.h uses

      Now that all sigcontext types are defined in asm/sigcontext.h,
      remove the various sigcontext32.h uses in the kernel.

      We still keep the header itself, which includes sigcontext.h, in
      case user-space relies on it.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-15-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 8fcb346b910e860d2525457742ae984c4ddc64b5
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:41 2015 +0200

      x86/headers: Convert sigcontext_ia32 uses to sigcontext_32

      Use the new name in kernel code, and move the old name to the
      user-space-only legacy section of the UAPI header.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-14-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit db1e031401c6abab983919e882916d028f3b385e
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:40 2015 +0200

      x86/headers: Unify 'struct sigcontext_ia32' and 'struct sigcontext_32'

      The two structures are identical - merge them and keep the
      legacy name as a define.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-13-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 530e5c827182a7a5322c55276b0617fd06874c24
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:39 2015 +0200

      x86/headers: Make sigcontext pointers bit independent

      Before we can eliminate the duplication between 'struct
      sigcontext_32' and 'struct sigcontext_ia32', make the 'fpstate'
      pointer field in 'struct sigcontext_32' bit independent.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-12-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f2c609bca0b6526810fa22330ce4d173cc023ef8
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:38 2015 +0200

      x86/headers: Move the 'struct sigcontext' definitions into the UAPI header

      Our goal is to eliminate the duplicate struct sigcontext_ia32
      definition, so move the kernel's primary sigcontext type into
      the UAPI header, defining these two variants:

        struct sigcontext_32
        struct sigcontext_64

      ... and map them to 'struct sigcontext'.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-11-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2d057c69e743bfb88f1259ddbf1b1160bdd850e5
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:37 2015 +0200

      x86/headers: Clean up the kernel's struct sigcontext types to be ABI-clean

      Use the __u16/32/64 types we standardized on in ABI definitions
      and which other sigcontext related types are already using.

      This will help unify struct sigcontext types between native
      32-bit, compat and 64-bit kernels.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-10-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 86e9fc3a0ecdd3c21a938e325daf462ca1724f68
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:36 2015 +0200

      x86/headers: Convert uses of _fpstate_ia32 to _fpstate_32

      Remove uses of _fpstate_ia32 from the kernel, and move the
      legacy _fpstate_ia32 definition to the user-space only portion
      of the header.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-9-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7bb0dc2222779b4cbf1ec9ad651e500e62fa5b11
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:35 2015 +0200

      x86/headers: Unify 'struct _fpstate_ia32' and i386 struct _fpstate

      'struct _fpstate_ia32' and 'struct _fpstate' on i386 are
      identical in all fields, except 'padding1' being named
      'padding'.

      We unify the two structures and add a union that is both named
      'padding1' and 'padding', in the (unlikely) case there's
      user-space code that relies on the padding field name.

      We rename the two main types to be:

        struct _fpstate_32
        struct _fpstate_64

      for the 32-bit and 64-bit frame, and map them to the main and
      compat structure names (_fpstate) depending on whether we are on
      32-bit or on 64-bit kernels.

      We also keep the old _fpstate_ia32 name as a legacy name.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-8-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 337a167d1a5b2704414679d1a993220a4613ec13
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:34 2015 +0200

      x86/headers: Unify register type definitions between 32-bit compat and 
i386

      The following sigcontext related types were duplicated across
      native 32-bit and compat 32-bit headers:

        struct _fpreg;
        struct _fpxreg;
        struct _xmmreg;

        X86_FXSR_MAGIC

      Unify them.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-7-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3f623a5b27c150451387e358774131780dbd2407
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:33 2015 +0200

      x86/headers: Use ABI types consistently in sigcontext*.h

      Use the __u16/32/64 types we standardized on in ABI definitions
      - and which most of this header was already using.

      This will allow us to more obviously unify the compat header
      into the main header.

      No change in functionality.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-6-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 128f8257a17a47b9a40f550cc2f36458cd8c07b0
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:32 2015 +0200

      x86/headers: Separate out legacy user-space structure definitions

      Better separate the user-space struct sigcontext definitions
      from the kernel definitions, so that we can unify the kernel
      definitions with sigcontext32.h.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-5-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit cbf5f4fbf435e871e59d49653d555266b8796efc
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:31 2015 +0200

      x86/headers: Clean up and better document uapi/asm/sigcontext.h

      Clean up sigcontext.h:

       - the explanations were full of typos and were hard to read in general
       - use consistent and readable vertical spacing
       - fix, harmonize and extend comments

      No field name has been changed, user-space might be relying on
      them.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-4-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c3f4986fb0774bb13feb4bade1276bed2ba8a3db
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:30 2015 +0200

      x86/headers: Clean up uapi/asm/sigcontext32.h

      Clean up sigcontext32.h a bit:

       - use consistent and readable vertical spacing
       - fix, harmonize and extend comments

      No field name has been changed, user-space might be relying on
      them.

      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-3-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b76cb6c869b966b4c991251136b45b3e1babc4e8
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:32:29 2015 +0200

      x86/headers: Fix (old) header file dependency bug in 
uapi/asm/sigcontext32.h

      Mikko Rapeli reported that the following standalone user-space
      header does not compile:

        #include <asm/sigcontext32.h>

      Due to undefined 'struct __fpx_sw_bytes' which is defined in
      asm/sigcontext.h.

      The following header order works:

        #include <asm/sigcontext.h>
        #include <asm/sigcontext32.h>

      and that's probably how everyone's been using these headers for
      the past decade or so, but it's a legit header file dependency
      bug, so include asm/sigcontext.h in sigcontext32.h to allow it
      to be built standlone.

      Reported-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Acked-by: Mikko Rapeli <mikko.rapeli@xxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1441438363-9999-2-git-send-email-mingo@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit edcd591c77a48da753456f92daf8bb50fe9bac93
  Author: Jonathan Corbet <corbet@xxxxxxx>
  Date:   Mon Sep 7 13:18:03 2015 -0600

      locking/static_keys: Fix a silly typo

      Commit:

        412758cb2670 ("jump label, locking/static_keys: Update docs")

      introduced a typo that might as well get fixed.

      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Jason Baron <jbaron@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150907131803.54c027e1@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit daebaabb5cfbe4a6f09ca0e0f8b7673efc704960
  Author: Bharata B Rao <bharata@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 15:52:40 2015 +0530

      powerpc/pseries: Release DRC when configure_connector fails

      Commit f32393c943e2 ("powerpc/pseries: Correct cpu affinity for
      dlpar added cpus") moved dlpar_acquire_drc() call to before
      dlpar_configure_connector() call in dlpar_cpu_probe(), but missed
      to release the DRC if dlpar_configure_connector() failed.
      During CPU hotplug, if configure-connector fails for any reason,
      then this will result in subsequent CPU hotplug attempts to fail.

      Release the acquired DRC if dlpar_configure_connector() call fails
      so that the DRC is left in right isolation and allocation state
      for the subsequent hotplug operation to succeed.

      Fixes: f32393c943e2 ("powerpc/pseries: Correct cpu affinity for dlpar 
added cpus")
      Cc: stable@xxxxxxxxxxxxxxx # 4.1+
      Signed-off-by: Bharata B Rao <bharata@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Nathan Fontenot <nfont@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 6af3e3adcac595a683bb55299a907d7d1ad61ab3
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Mon Sep 7 10:41:12 2015 +0100

      Btrfs: don't initialize a space info as full to prevent ENOSPC

      Commit 2e6e518335f8 ("Btrfs: fix block group ->space_info null pointer
      dereference") accidently marked a space info as full when initializing
      it with a value of 0 total bytes. This introduces an ENOSPC problem when
      writing file data if we mount a filesystem that has no data block groups
      allocated, because the data space info is initialized with 0 total bytes,
      marked as full, and it never gets its total bytes incremented by a
      (positive) value to unmark it as full (because there are no data block
      groups loaded when the fs is mounted).
      For metadata and system spaces this issue can never happen since we always
      have at least one metadata block group and one system block group (even
      for an empty filesystem).

      So fix this by just not initializing a space info as full, reverting the
      offending part of the commit mentioned above.

      The following test case for fstests reproduces the issue:

        seq=`basename $0`
        seqres=$RESULT_DIR/$seq
        echo "QA output created by $seq"
        tmp=/tmp/$$
        status=1        # failure is the default!
        trap "_cleanup; exit \$status" 0 1 2 3 15

        _cleanup()
        {
            rm -f $tmp.*
        }

        # get standard environment, filters and checks
        . ./common/rc
        . ./common/filter

        # real QA test starts here
        _need_to_be_root
        _supported_fs btrfs
        _supported_os Linux
        _require_scratch

        rm -f $seqres.full

        _scratch_mkfs >>$seqres.full 2>&1

        # Mount our filesystem without space caches enabled so that we do not
        # get any space used from the initial data block group that mkfs creates
        # (space caches used space from data block groups).
        _scratch_mount "-o nospace_cache"

        # Need an fs with at least 2Gb to make sure mkfs.btrfs does not create
        # an fs using mixed block groups (used both for data and metadata). We
        # really need to have dedicated block groups for data to reproduce the
        # issue and mkfs.btrfs defaults to mixed block groups only for small
        # filesystems (up to 1Gb).
        _require_fs_space $SCRATCH_MNT $((2 * 1024 * 1024))

        # Run balance with the purpose of deleting the unused data block group
        # that mkfs created. We could also wait for the background kthread to
        # automatically delete the unused block group, but we do not have a way
        # to make it run and wait for it to complete, so just do a balance
        # instead of some unreliable sleep
        _run_btrfs_util_prog balance start -dusage=0 $SCRATCH_MNT

        # Now unmount the filesystem, mount it again (either with or with space
        # caches enabled, it does not matter to trigger the problem) and attempt
        # to create a file with some data - this used to fail with ENOSPC
        # because there were no data block groups when the filesystem was
        # mounted and the data space info object was marked as full when
        # initialized (because it had 0 total bytes), which prevented the file
        # write path from attempting to allocate a data block group and fail
        # immediately with ENOSPC.
        _scratch_remount
        echo "hello world" > $SCRATCH_MNT/foobar

        echo "Silence is golden"
        status=0
        exit

      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit 6583d2032d57df9f1c00c753ca58e1a822901bf0
  Author: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
  Date:   Mon Sep 7 19:37:57 2015 +0800

      spi: mediatek: fix spi cs polarity error

      Mediatek spi HW can't set cs inactive(keep cs high) directly.
      Instead, it supplies pause mode to do it indirectly. If driver
      unsets SPI_CMD_PAUSE_MODE in CMD_REG, it also needs to reset
      internal state machine to let cs inactive at once.

      Signed-off-by: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit a077224fd35b2f7fbc93f14cf67074fc792fbac2
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Sep 3 13:24:40 2015 +0100

      ARM: 8429/1: disable GCC SRA optimization

      While working on the 32-bit ARM port of UEFI, I noticed a strange
      corruption in the kernel log. The following snprintf() statement
      (in drivers/firmware/efi/efi.c:efi_md_typeattr_format())

        snprintf(pos, size, "|%3s|%2s|%2s|%2s|%3s|%2s|%2s|%2s|%2s]",

      was producing the following output in the log:

        |    |   |   |   |    |WB|WT|WC|UC]
        |    |   |   |   |    |WB|WT|WC|UC]
        |    |   |   |   |    |WB|WT|WC|UC]
        |RUN|   |   |   |    |WB|WT|WC|UC]*
        |RUN|   |   |   |    |WB|WT|WC|UC]*
        |    |   |   |   |    |WB|WT|WC|UC]
        |RUN|   |   |   |    |WB|WT|WC|UC]*
        |    |   |   |   |    |WB|WT|WC|UC]
        |RUN|   |   |   |    |   |   |   |UC]
        |RUN|   |   |   |    |   |   |   |UC]

      As it turns out, this is caused by incorrect code being emitted for
      the string() function in lib/vsprintf.c. The following code

        if (!(spec.flags & LEFT)) {
                while (len < spec.field_width--) {
                        if (buf < end)
                                *buf = ' ';
                        ++buf;
                }
        }
        for (i = 0; i < len; ++i) {
                if (buf < end)
                        *buf = *s;
                ++buf; ++s;
        }
        while (len < spec.field_width--) {
                if (buf < end)
                        *buf = ' ';
                ++buf;
        }

      when called with len == 0, triggers an issue in the GCC SRA optimization
      pass (Scalar Replacement of Aggregates), which handles promotion of signed
      struct members incorrectly. This is a known but as yet unresolved issue.
      (https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65932). In this particular
      case, it is causing the second while loop to be executed erroneously a
      single time, causing the additional space characters to be printed.

      So disable the optimization by passing -fno-ipa-sra.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Acked-by: Nicolas Pitre <nico@xxxxxxxxxx>
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 7d1647dc4ba0a61fec5381c1abb59dc886b6ef3c
  Author: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
  Date:   Mon Sep 7 10:52:58 2015 +1000

      cxl: abort cxl_pci_enable_device_hook() if PCI channel is offline

      cxl_pci_enable_device_hook() is called when attempting to enable an AFU
      sitting on a vPHB. At present, the state of the underlying CXL card's PCI
      channel is only checked when it calls cxl_afu_check_and_enable() at the
      very end, after it has already set DMA options and initialised a default
      context.

      Check the CXL card's link status before setting DMA options or 
initialising
      a default context. If the link is down, print a warning and return
      immediately.

      Signed-off-by: Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx>
      Acked-by: Ian Munsie <imunsie@xxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit fa14486979b3a47307bcdb10f8b5baa875a5cf68
  Author: Nishanth Aravamudan <nacc@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 11:22:52 2015 -0700

      powerpc/powernv/pci-ioda: fix kdump with non-power-of-2 crashkernel=

      The 32-bit TCE table initialization relies on the DMA window having a
      size equal to a power of 2 (and checks for it explicitly). But
      crashkernel= has no constraint that requires a power-of-2 be specified.
      This causes the kdump kernel to fail to boot as none of the PCI devices
      (including the disk controller) are successfully initialized.

      After this change, the PCI devices successfully set up the 32-bit TCE
      table and kdump succeeds.

      Fixes: aca6913f5551 ("powerpc/powernv/ioda2: Introduce helpers to 
allocate TCE pages")
      Signed-off-by: Nishanth Aravamudan <nacc@xxxxxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.2
      Tested-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit bb0054552d080dd929907c5925d4bedc8bf6def7
  Author: Nishanth Aravamudan <nacc@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 08:39:28 2015 -0700

      powerpc/powernv/pci-ioda: fix 32-bit TCE table init in kdump kernel

      When attempting to kdump with the 4.2 kernel, we see for each PCI
      device:

       pci 0003:01     : [PE# 000] Assign DMA32 space
       pci 0003:01     : [PE# 000] Setting up 32-bit TCE table at 0..80000000
       pci 0003:01     : [PE# 000] Failed to create 32-bit TCE table, err -22
       PCI: Domain 0004 has 8 available 32-bit DMA segments
       PCI: 4 PE# for a total weight of 70
       pci 0004:01     : [PE# 002] Assign DMA32 space
       pci 0004:01     : [PE# 002] Setting up 32-bit TCE table at 0..80000000
       pci 0004:01     : [PE# 002] Failed to create 32-bit TCE table, err -22
       pci 0004:0d     : [PE# 005] Assign DMA32 space
       pci 0004:0d     : [PE# 005] Setting up 32-bit TCE table at 0..80000000
       pci 0004:0d     : [PE# 005] Failed to create 32-bit TCE table, err -22
       pci 0004:0e     : [PE# 006] Assign DMA32 space
       pci 0004:0e     : [PE# 006] Setting up 32-bit TCE table at 0..80000000
       pci 0004:0e     : [PE# 006] Failed to create 32-bit TCE table, err -22
       pci 0004:10     : [PE# 008] Assign DMA32 space
       pci 0004:10     : [PE# 008] Setting up 32-bit TCE table at 0..80000000
       pci 0004:10     : [PE# 008] Failed to create 32-bit TCE table, err -22

      and eventually the kdump kernel fails to boot as none of the PCI devices
      (including the disk controller) are successfully initialized.

      The EINVAL response is because the DMA window (the 2GB base window) is
      larger than the kdump kernel's reserved memory (crashkernel=, in this
      case specified to be 1024M). The check in question,

       if ((window_size > memory_hotplug_max()) || !is_power_of_2(window_size))

      is a valid sanity check for pnv_pci_ioda2_table_alloc_pages(), so adjust
      the caller to pass in a smaller window size if our maximum memory value
      is smaller than the DMA window.

      After this change, the PCI devices successfully set up the 32-bit TCE
      table and kdump succeeds.

      The problem was seen on a Firestone machine originally.

      Fixes: aca6913f5551 ("powerpc/powernv/ioda2: Introduce helpers to 
allocate TCE pages")
      Cc: stable@xxxxxxxxxxxxxxx # 4.2
      Signed-off-by: Nishanth Aravamudan <nacc@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Alexey Kardashevskiy <aik@xxxxxxxxx>
      [mpe: Coding style pedantry, use u64, change the indentation]
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 8901c18b6cafa51f7985f1031968bbfe9dc47735
  Author: Daniel Drake <drake@xxxxxxxxxxxx>
  Date:   Wed Sep 2 16:10:34 2015 -0600

      asus-nb-wmi: Add wapf=4 quirk for X456UA/X456UF

      These laptops boot with wifi as hard-blocked, with no obvious way to
      enable it. Using a quirk to set wapf=4 solves the problem.

      Signed-off-by: Daniel Drake <drake@xxxxxxxxxxxx>
      Acked-by: Corentin Chary <corentin.chary@xxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit a394d635193b641f2c86ead5ada5b115d57c51f8
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Sep 6 01:46:54 2015 +0300

      spi: Fix documentation of spi_alloc_master()

      Actually, spi_master_put() after spi_alloc_master() must _not_ be followed
      by kfree(). The memory is already freed with the call to spi_master_put()
      through spi_master_class, which registers a release function. Calling both
      spi_master_put() and kfree() results in often nasty (and delayed) crashes
      elsewhere in the kernel, often in the networking stack.

      This reverts commit eb4af0f5349235df2e4a5057a72fc8962d00308a.

      Link to patch and concerns: https://lkml.org/lkml/2012/9/3/269
      or
      http://lkml.iu.edu/hypermail/linux/kernel/1209.0/00790.html

      Alexey Klimov: This revert becomes valid after
      94c69f765f1b4a658d96905ec59928e3e3e07e6a when spi-imx.c
      has been fixed and there is no need to call kfree() so comment
      for spi_alloc_master() should be fixed.

      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Alexey Klimov <alexey.klimov@xxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 76fc5e7b2355af167dea1a32e93c57fc37900a5b
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Sep 4 17:00:43 2015 -0700

      x86/vm86: Block non-root vm86(old) if mmap_min_addr != 0

      vm86 exposes an interesting attack surface against the entry
      code. Since vm86 is mostly useless anyway if mmap_min_addr != 0,
      just turn it off in that case.

      There are some reports that vbetool can work despite setting
      mmap_min_addr to zero.  This shouldn't break that use case,
      as CAP_SYS_RAWIO already overrides mmap_min_addr.

      Suggested-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Austin S Hemmelgarn <ahferroin7@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
      Cc: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stas Sergeev <stsp@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 95cd2ea7d54b41b0b2828587f108fe270d59eede
  Merge: 66c117d e713c80
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sat Sep 5 09:00:30 2015 +0200

      Merge branch 'linus' into x86/urgent, to be able to merge a dependent fix

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit cf2f33a4e54096f90652cca3511fd6a456ea5abe
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Sep 4 13:22:06 2015 -0300

      perf trace: Add read/write to the file group

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-l6812iuai3g486z3mn8ufan8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0c0672922dcc70ffba11d96385e98e42fb3ae08d
  Author: Alexander Spyridakis <a.spyridakis@xxxxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 17:06:24 2015 +0200

      arm/arm64: KVM: Fix PSCI affinity info return value for non valid cores

      If a guest requests the affinity info for a non-existing vCPU we need to
      properly return an error, instead of erroneously reporting an off state.

      Signed-off-by: Alexander Spyridakis <a.spyridakis@xxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alvise Rigo <a.rigo@xxxxxxxxxxxxxxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 857d1a973077245f03b351e2539529c86267bfe4
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Aug 24 14:42:05 2015 +0100

      arm64: KVM: set {v,}TCR_EL2 RES1 bits

      Currently we don't set the RES1 bits of TCR_EL2 and VTCR_EL2 when
      configuring them, which could lead to unexpected behaviour when an
      architectural meaning is defined for those bits.

      Set the RES1 bits to avoid issues.

      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Suzuki Poulose <suzuki.poulose@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit e607f1426b584f2bd3f688a2d416baf963251e7a
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Fri Sep 4 21:16:03 2015 +0900

      perf probe: Print deleted events in cmd_probe()

      Showing actual trace event when deleteing perf events is only needed in
      perf probe command.  But the add functionality itself can be used by
      other places.  So move the printing code into the cmd_probe().

      The output is not changed.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-5-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e7895e422e4da63daedacad0a2ed1a5a6b502d66
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Fri Sep 4 21:16:02 2015 +0900

      perf probe: Split del_perf_probe_events()

      The del_perf_probe_events() does 2 things:

      1. find existing events which match to filter
      2. delete such trace events from kernel

      But sometimes we need to do something with the trace events.  So split
      the funtion into two, so that it can access intermediate trace events
      name using strlist if needed.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-4-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b02137cc6550c1fa28e9a7c943a79fe6e4c4378d
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Fri Sep 4 21:16:01 2015 +0900

      perf probe: Move print logic into cmd_probe()

      Showing actual trace event when adding perf events is only needed in
      perf probe command.  But the add functionality itself can be used by
      other places.  So move the printing code into the cmd_probe().

      Also it combines the output if more than one event is added.

      Before:
        $ sudo perf probe -a do_fork -a do_exit
        Added new event:
        probe:do_fork        (on do_fork)

        You can now use it in all perf tools, such as:

            perf record -e probe:do_fork -aR sleep 1

        Added new events:
        probe:do_exit        (on do_exit)
        probe:do_exit_1      (on do_exit)

        You can now use it in all perf tools, such as:

            perf record -e probe:do_exit_1 -aR sleep 1

      After:
        $ sudo perf probe -a do_fork -a do_exit
        Added new events:
        probe:do_fork        (on do_fork)
        probe:do_exit        (on do_exit)
        probe:do_exit_1      (on do_exit)

        You can now use it in all perf tools, such as:

            perf record -e probe:do_exit_1 -aR sleep 1

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-3-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 12fae5ef6dc6031ffcf4dffc6be5a16080e7dd7d
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Fri Sep 4 21:16:00 2015 +0900

      perf probe: Link trace_probe_event into perf_probe_event

      This patch drops struct __event_package structure.  Instead, it adds a
      'struct trace_probe_event' pointer to 'struct perf_probe_event'.

      The trace_probe_event information gives further patches a chance to
      access actual probe points and actual arguments.

      Using them, 'perf probe' can get the whole list of added probes and
      print them at once.

      Other users like the upcoming bpf_loader will be able to attach one bpf
      program to different probing points of an inline function (which has
      multiple probing points) and glob functions.

      Moreover, by reading the arguments information, bpf code for reading
      those arguments can be generated.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-2-git-send-email-namhyung@xxxxxxxxxx
      [namhyung: extract necessary part from the existing patch]
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 844dffa598b55fca6a83a856214fc0cfc3da24e5
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Fri Sep 4 21:15:59 2015 +0900

      perf probe: Split add_perf_probe_events()

      The add_perf_probe_events() does 3 things:

       1. convert all perf events to trace events
       2. add all trace events to kernel
       3. cleanup all trace events

      But sometimes we need to do something with the trace events.  So split
      the funtion into three, so that it can access intermediate trace events
      via struct __event_package if needed.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1441368963-11565-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4ad9e16af36bbe8657aabe494ff912acbc213ce4
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Fri Sep 4 16:24:39 2015 +0200

      arm/arm64: KVM: arch timer: Reset CNTV_CTL to 0

      Provide a better quality of implementation and be architecture compliant
      on ARMv7 for the architected timer by resetting the CNTV_CTL to 0 on
      reset of the timer.

      This change alone fixes the UEFI reset issue reported by Laszlo back in
      February.

      Cc: Laszlo Ersek <lersek@xxxxxxxxxx>
      Cc: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Drew Jones <drjones@xxxxxxxxxx>
      Cc: Wei Huang <wei@xxxxxxxxxx>
      Cc: Peter Maydell <peter.maydell@xxxxxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 04bdfa8ab5bab929cc57f73952c503a88372601d
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Fri Sep 4 16:24:38 2015 +0200

      arm/arm64: KVM: vgic: Move active state handling to flush_hwstate

      We currently set the physical active state only when we *inject* a new
      pending virtual interrupt, but this is actually not correct, because we
      could have been preempted and run something else on the system that
      resets the active state to clear.  This causes us to run the VM with the
      timer set to fire, but without setting the physical active state.

      The solution is to always check the LR configurations, and we if have a
      mapped interrupt in the LR in either the pending or active state
      (virtual), then set the physical active state.

      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>

  commit 86c2786994bd7c0d4b525bbfbe42ac540d0b8166
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Thu Aug 13 12:40:57 2015 +0300

      perf intel-pt: Add support for PERF_RECORD_SWITCH

      Add support for selecting and processing PERF_RECORD_SWITCH events for
      use by Intel PT.  If they are available, they will be used in preference
      to sched_switch events.

      This enables an unprivileged user to trace multi-threaded or
      multi-process workloads with any level of perf_event_paranoid.  However
      it depends on kernel support for PERF_RECORD_SWITCH.

      Without this patch, tracing a multi-threaded workload will decode
      without error but all the data will be attributed to the main thread.

      Without this patch, tracing a multi-process workload will result in
      decoder errors because the decoder will not know which executable is
      executing.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439458857-30636-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1b29ac59b1d692c06ec543a5f35e0d9ebb98e003
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Thu Sep 3 08:31:00 2015 -0400

      perf session: Don't call dump_sample() when evsel is NULL

      Need to check evsel before passing it to dump_sample().

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441283463-51050-5-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f83b6b64eba155cfb43ab8a5d9c422c3e7f603e6
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:31 2015 +0300

      x86/insn: perf tools: Add new xsave instructions

      Add xsavec, xsaves and xrstors to the op code map and the perf tools new
      instructions test.  To run the test:

        $ tools/perf/perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ tools/perf/perf test -v "x86 ins" 2>&1 | grep 'xsave\|xrst'

      For information about xsavec, xsaves and xrstors, refer the Intel SDM.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-8-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 978260cdbec3e34a3dfb2277ffc0aa1809457362
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:30 2015 +0300

      x86/insn: perf tools: Add new memory protection keys instructions

      Add rdpkru and wrpkru to the op code map and the perf tools new
      instructions test.  In the case of the test, only the bytes can be
      tested at the moment since binutils doesn't support the instructions
      yet.  To run the test:

        $ tools/perf/perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ tools/perf/perf test -v "x86 ins" 2>&1 | grep pkru

      For information about rdpkru and wrpkru, refer the Intel SDM.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-7-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ac1c8859a81e2fc45db1dbff30bdc572005734ca
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:29 2015 +0300

      x86/insn: perf tools: Add new memory instructions

      Intel Architecture Instruction Set Extensions Programing Reference (Oct
      2014) describes 3 new memory instructions, namely clflushopt, clwb and
      pcommit.  Add them to the op code map and the perf tools new
      instructions test. e.g.

        $ tools/perf/perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ tools/perf/perf test -v "x86 ins"

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-6-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3fe78d6af9e2f08c4014fd3ccbf9e1ff312dedf1
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:28 2015 +0300

      x86/insn: perf tools: Add new SHA instructions

      Intel SHA Extensions are explained in the Intel Architecture
      Instruction Set Extensions Programing Reference (Oct 2014).
      There are 7 new instructions.  Add them to the op code map
      and the perf tools new instructions test. e.g.

        $ tools/perf/perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ tools/perf/perf test -v "x86 ins" 2>&1 | grep sha

      Committer note:

      3 lines of details, for the curious:

        $ perf test -v "x86 ins" 2>&1 | grep sha256msg1 | tail -3
        Decoded ok: 0f 38 cc 84 08 78 56 34 12  sha256msg1 
0x12345678(%rax,%rcx,1),%xmm0
        Decoded ok: 0f 38 cc 84 c8 78 56 34 12  sha256msg1 
0x12345678(%rax,%rcx,8),%xmm0
        Decoded ok: 44 0f 38 cc bc c8 78 56 34 12       sha256msg1 
0x12345678(%rax,%rcx,8),%xmm15
        $

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-5-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 78173ec6311a22ca9f42cf949cf37754a8b71633
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:27 2015 +0300

      x86/insn: perf tools: Pedantically tweak opcode map for MPX instructions

      The MPX instructions are presently not described in the SDM
      opcode maps, and there are not encoding characters for bnd
      registers, address method or operand type.  So the kernel
      opcode map is using 'Gv' for bnd registers and 'Ev' for
      everything else.  That is fine because the instruction
      decoder does not use that information anyway, except as
      an indication that there is a ModR/M byte.

      Nevertheless, in some cases the 'Gv' and 'Ev' are the wrong
      way around, BNDLDX and BNDSTX have 2 operands not 3, and it
      wouldn't hurt to identify the mandatory prefixes.

      This has no effect on the decoding of valid instructions,
      but the addition of the mandatory prefixes will cause some
      invalid instructions to error out that wouldn't have
      previously.

      Note that perf tools has a copy of the instruction decoder
      and provides a test for new instructions which includes MPX
      instructions e.g.

        $ perf test "x86 ins"
        39: Test x86 instruction decoder - new instructions          : Ok

      Or to see the details:

        $ perf test -v "x86 ins"

      Commiter notes:

      And to see these MPX instructions specifically:

        $ perf test -v "x86 ins" 2>&1 | grep bndldx | head -3
        Decoded ok: 0f 1a 00                    bndldx (%eax),%bnd0
        Decoded ok: 0f 1a 05 78 56 34 12        bndldx 0x12345678,%bnd0
        Decoded ok: 0f 1a 18                    bndldx (%eax),%bnd3
        $ perf test -v "x86 ins" 2>&1 | grep bndstx | head -3
        Decoded ok: 0f 1b 00                    bndstx %bnd0,(%eax)
        Decoded ok: 0f 1b 05 78 56 34 12        bndstx %bnd0,0x12345678
        Decoded ok: 0f 1b 18                    bndstx %bnd3,(%eax)
        $

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-4-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 98e4619f2b2bb80d310feaac5589b44c000aecc1
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:26 2015 +0300

      perf tools: Add a test for decoding of new x86 instructions

      Add a new test titled:

        Test x86 instruction decoder - new instructions

      The purpose of this test is to check the instruction decoder after new
      instructions have been added.  Initially, MPX instructions are tested
      which are already supported, but the definitions in x86-opcode-map.txt
      will be tweaked in a subsequent patch, after which this test can be run
      to verify those changes.

      The data for the test comes from assembly language instructions in
      insn-x86-dat-src.c which is converted into bytes by the scripts
      gen-insn-x86-dat.sh and gen-insn-x86-dat.awk, and included into the test
      program insn-x86.c as insn-x86-dat-32.c and insn-x86-dat-64.c.

      The conversion is not done as part of the perf tools build because the
      test data must be under (git) change control in order for the test to be
      repeatably-correct.  Also it may require a recent version of binutils.

      Commiter notes:

      Using it:

        # perf test decoder
        39: Test x86 instruction decoder - new instructions          : Ok
        # perf test -v decoder
        39: Test x86 instruction decoder - new instructions          :
        --- start ---
        test child forked, pid 21970
        Decoded ok: 0f 31                       rdtsc
        Decoded ok: f3 0f 1b 00                 bndmk  (%eax),%bnd0
        Decoded ok: f3 0f 1b 05 78 56 34 12     bndmk  0x12345678,%bnd0
        Decoded ok: f3 0f 1b 18                 bndmk  (%eax),%bnd3
        <SNIP>
        Decoded ok: f2 e9 00 00 00 00           bnd jmpq 402 <main+0x402>
        Decoded ok: f2 e9 00 00 00 00           bnd jmpq 408 <main+0x408>
        Decoded ok: 67 f2 ff 21                 bnd jmpq *(%ecx)
        Decoded ok: f2 0f 85 00 00 00 00        bnd jne 413 <main+0x413>
        test child finished with 0
        ---- end ----
        Test x86 instruction decoder - new instructions: Ok
        #

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3a9d7723145a6c1be6e9afbb661e3ad7768be2e0
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Sep 2 15:15:25 2015 +0300

      perf tools: Display build warning if x86 instruction decoder differs from 
kernel

      perf tools has a copy of the x86 instruction decoder used by the kernel.
      The expectation is that the copy will be kept more-or-less in-synch with
      the kernel version.  Consequently it is helpful to know if there are
      differences.

      This patch adds a check into the perf tools build so that a diff is done
      on the sources, and a warning is printed if they are different.  Note
      that the warning is not fatal and the build continues as normal.

      The check is done as part of building the instruction decoder, so, like
      a compiler warning, it is not seen unless the instruction decoder has to
      be re-compiled. e.g.

        $ make -C tools/perf >/dev/null
        $ echo "/* blah */" >> tools/perf/util/intel-pt-decoder/inat_types.h
        $ make -C tools/perf >/dev/null
        Warning: Intel PT: x86 instruction decoder differs from kernel
        $ make -C tools/perf >/dev/null
        $

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Qiaowei Ren <qiaowei.ren@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441196131-20632-2-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 709adcb33928b5bf965587b23ed6544e964584a3
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:42 2015 +0200

      tools lib api fs: Add FSTYPE__configured() method

      Add FSTYPE__configured() (where FSTYPE is one of sysfs, procfs, debugfs,
      tracefs) interface that returns bool state of the filesystem mount:

        true - mounted, false - not mounted

      It will not try to mount the filesystem.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-13-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 73ca85ad364769ffa312b1d892816d8fa23a02bf
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:41 2015 +0200

      tools lib api fs: Add FSTYPE__mount() method

      Adding FSTYPE__mount (where FSTYPE is, as of now, one of sysfs, procfs,
      debugfs, tracefs) method that tries to mount the filesystem in case no
      mount of FSTYPE is found.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-12-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c495afb4988dcbb8bae11b8f1bbb7e11f172672b
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:40 2015 +0200

      tools lib api fs: Add tracefs into fs.c object

      Adding tracefs support into fs.c framework. It'll replace the tracefs
      object functionality in following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-11-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8ccfabdb873df2e18b235bfaf2722f7528d220f1
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:39 2015 +0200

      tools lib api fs: Add debugfs into fs.c object

      Adding debugfs support into fs.c framework. It'll replace the debugfs
      object functionality in following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-10-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 41e3a1fece31d0b2383281e4a917ff4b16fa9223
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:38 2015 +0200

      tools lib api fs: Move SYSFS_MAGIC PROC_SUPER_MAGIC into fs.c

      There's no need to export SYSFS_MAGIC PROC_SUPER_MAGIC in fs.h. Leave
      them in the fs.c.

      Link: http://lkml.kernel.org/n/tip-b2cd1bb7yvbazq5oua24oz18@xxxxxxxxxxxxxx
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-9-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b86b0d3570273c6ddc16b1972e82bf7778346286
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:37 2015 +0200

      tools lib api fs: Add STR and PATH_MAX macros to fs object

      We're going to get rid of findfs.h in following patches, but we'll still
      need these macros.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-8-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 988bdb319246dea977a375beee39a5452e99b3ef
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:35 2015 +0200

      tools lib api fs: Move debugfs__strerror_open into tracing_path.c object

      Moving debugfs__strerror_open out of api/fs/debugfs.c, because it's not
      debugfs specific. It'll be changed to consider tracefs mount as well in
      following patches.

      Renaming it into tracing_path__strerror_open_tp to fit into the
      namespace. No functional change is intended.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-6-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 592d5a6ba86a31681fa5e20a63a145b0a3b53c8a
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:34 2015 +0200

      tools lib api fs: Move tracing_path interface into api/fs/tracing_path.c

      Moving tracing_path interface into api/fs/tracing_path.c out of util.c.
      It seems generic enough to be used by others, and I couldn't think of
      better place.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-5-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 21adf76e908dd03ae47c8f4dd53b180996a725ad
  Merge: 5b92356 53ff6bc
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Sep 4 11:00:56 2015 +0200

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

        - In some cases where perf_event.fork.{pid,tid} should be used we were 
instead
          using perf_event.comm.{pid,tid}, which is not a problem for for the 
'pid'
          case, that sits in the same place in these union_perf_event members, 
but
          comm.tid sits where fork.ppid is, oops.

          These cases were considered as (potentially) problematic:

           - 'perf script' with !sample_id_all, i.e. only non old kernels 
without
              perf_event_attr.sample_id_all.

           - intel_pt could be affected when decoding without timestamps, as 
the exit
             event is only used to flush out data which anyway gets flushed at 
the
             end of the session.

           - intel_bts also uses the exit event to flush data which would 
probably not
             cause errors as it would get flushed at the end of the session 
instead.

          Fix it. (Adrian Hunter)

        - Due to relaxing the compiler checks for bison generated files, we 
missed
          updating one parse_events_add_pmu() caller when this function had its
          prototype changed, fix it. (Jiri Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 93efac3f2e03321129de67a3c0ba53048bb53e31
  Author: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Sep 4 13:21:06 2015 +0800

      ipv6: Fix IPsec pre-encap fragmentation check

      The IPv6 IPsec pre-encap path performs fragmentation for tunnel-mode
      packets.  That is, we perform fragmentation pre-encap rather than
      post-encap.

      A check was added later to ensure that proper MTU information is
      passed back for locally generated traffic.  Unfortunately this
      check was performed on all IPsec packets, including transport-mode
      packets.

      What's more, the check failed to take GSO into account.

      The end result is that transport-mode GSO packets get dropped at
      the check.

      This patch fixes it by moving the tunnel mode check forward as well
      as adding the GSO check.

      Fixes: dd767856a36e ("xfrm6: Don't call icmpv6_send on local error")
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit dc3a04d551b5d21f1badbb39bfe8e5bc1289b184
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Sep 2 17:11:22 2015 -0700

      security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition

      f78f5b90c4ff ("rcu: Rename rcu_lockdep_assert() to RCU_LOCKDEP_WARN()")
      introduced a bug by incorrectly inverting the condition when moving from
      rcu_lockdep_assert() to RCU_LOCKDEP_WARN().  This commit therefore fixes
      the inversion.

      Reported-by: Felipe Balbi <balbi@xxxxxx>
      Reported-by: Tejun Heo <tj@xxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Acked-by: Serge Hallyn <serge.hallyn@xxxxxxxxxxxxx>
      Tested-by: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>

  commit 66c117d7fa2ae429911e60d84bf31a90b2b96189
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Thu Sep 3 12:34:55 2015 +0200

      x86/alternatives: Make optimize_nops() interrupt safe and synced

      Richard reported the following crash:

      [    0.036000] BUG: unable to handle kernel paging request at 55501e06
      [    0.036000] IP: [<c0aae48b>] common_interrupt+0xb/0x38
      [    0.036000] Call Trace:
      [    0.036000]  [<c0409c80>] ? add_nops+0x90/0xa0
      [    0.036000]  [<c040a054>] apply_alternatives+0x274/0x630

      Chuck decoded:

       "  0:   8d 90 90 83 04 24       lea    0x24048390(%eax),%edx
          6:   80 fc 0f                cmp    $0xf,%ah
          9:   a8 0f                   test   $0xf,%al
       >> b:   a0 06 1e 50 55          mov    0x55501e06,%al
         10:   57                      push   %edi
         11:   56                      push   %esi

       Interrupt 0x30 occurred while the alternatives code was replacing the
       initial 0x90,0x90,0x90 NOPs (from the ASM_CLAC macro) with the
       optimized version, 0x8d,0x76,0x00. Only the first byte has been
       replaced so far, and it makes a mess out of the insn decoding."

      optimize_nops() is buggy in two aspects:

      - It's not disabling interrupts across the modification
      - It's lacking a sync_core() call

      Add both.

      Fixes: 4fd4b6e5537c 'x86/alternatives: Use optimized NOPs for padding'
      Reported-and-tested-by: "Richard W.M. Jones" <rjones@xxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Richard W.M. Jones <rjones@xxxxxxxxxx>
      Cc: Chuck Ebbert <cebbert.lkml@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/alpine.DEB.2.11.1509031232340.15006@nanos
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 9f42a89da6b4dc015631e01ba990d3db2cae2a1b
  Author: Leo Yan <leo.yan@xxxxxxxxxx>
  Date:   Wed Sep 2 10:57:47 2015 +0800

      clk: Hi6220: separately build stub clock driver

      The previous code, kernel builds Hi6220's common clock driver and stub
      clock driver together. Stub clock driver has introduced the dependency
      with CONFIG_MAILBOX, so kernel will not build Hi6220's common clock
      driver due ARM64's defconfig have not enabled CONFIG_MAILBOX by default.

      So separately build stub clock driver and common clock driver for
      Hi6220; and only let stub clock driver has the dependency with
      CONFIG_MAILBOX.

      Signed-off-by: Leo Yan <leo.yan@xxxxxxxxxx>
      Tested-by: Kevin Hilman <khilman@xxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 5e7c4274a70aa2d6f485996d0ca1dad52d0039ca
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Thu Sep 3 19:28:20 2015 +0300

      block: Check for gaps on front and back merges

      We are checking for gaps to previous bio_vec, which can
      only detect back merges gaps. Moreover, at the point where
      we check for a gap, we don't know if we will attempt a back
      or a front merge. Thus, check for gap to prev in a back merge
      attempt and check for a gap to next in a front merge attempt.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>
      [sagig: Minor rename change]
      Signed-off-by: Sagi Grimberg <sagig@xxxxxxxxxxxx>

  commit b9c93646fd5cb669d096fec5ad25a01f04cfde27
  Author: Kishon Vijay Abraham I <kishon@xxxxxx>
  Date:   Thu Sep 3 12:20:37 2015 +0530

      regulator: pbias: program pbias register offset in pbias driver

      Add separate compatible strings for every platform and populate the
      pbias register offset in the driver data.
      This helps avoid depending on the dt for pbias register offset.

      Also update the dt binding documentation for the new compatible
      strings.

      Suggested-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Kishon Vijay Abraham I <kishon@xxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit ac0e137ab0da80e8fc0db2027598e2f7f82a5a02
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Mon Aug 31 20:27:32 2015 -0700

      clk: h8s2678: Fix compile error

      Recent cleanup removed some include files without checking if the cleaned
      up code still compiles. This results in the following compile error.

      drivers/clk/h8300/clk-h8s2678.c: In function â??h8s2678_pll_clk_setupâ??:
      drivers/clk/h8300/clk-h8s2678.c:99:14: error:
        implicit declaration of function â??kzallocâ??
      drivers/clk/h8300/clk-h8s2678.c:138:2: error:
            implicit declaration of function â??kfreeâ??

      Cc: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>

  commit 5fdb7e1b976dc9d18aff8c711e51d17c4c324a0e
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Aug 31 14:17:31 2015 +0200

      null_blk: fix wrong capacity when bs is not 512 bytes

      set_capacity() sets device's capacity using 512 bytes sectors.
      null_blk calculates the number of sectors by size / bs, which
      set_capacity is called with. This led to null_blk exposing the
      wrong number of sectors when bs is not 512 bytes.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Reviewed-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit de65d2d26f81f7f84c7258b3a137f20e8fa5bb6a
  Author: Matias Bjørling <mb@xxxxxxxxxxx>
  Date:   Mon Aug 31 14:17:18 2015 +0200

      null_blk: fix memory leak on cleanup

      Driver was not freeing the memory allocated for internal nullb queues.
      This patch frees the memory during driver unload.

      Signed-off-by: Matias Bjørling <mb@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 5014c311baa2b21384321fa4a9f617a92e3e56f0
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Wed Sep 2 16:46:02 2015 -0600

      block: fix bogus compiler warnings in blk-merge.c

      The compiler can't figure out that bvprv is initialized whenever 'prev'
      is set to 1 as well. Use a pointer to bvprv instead, setting it to NULL
      initially, and get rid of the 'prev' tracking. This dumbs it down
      enough that gcc is happy.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 53ff6bc37be449f546158a39c528d7814dfb15a1
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Aug 18 12:07:05 2015 +0300

      perf tools: Fix use of wrong event when processing exit events

      In a couple of cases the 'comm' member of 'union event' has been used
      instead of the correct member ('fork') when processing exit events.

      In the cases where it has been used incorrectly, only the 'pid' and
      'tid' are affected.  The 'pid' value would be correct anyway because it
      is in the same position in 'comm' and 'fork' events, but the 'tid' would
      have been incorrectly assigned from 'ppid'.

      However, for exit events, the kernel puts the current task in the 'ppid'
      and 'ttid' which is the same as the exiting task.  That is 'ppid' ==
      'pid' and if the task is not multi-threaded, 'pid' == 'tid' i.e. the
      data goes wrong only when tracing multi-threaded programs.

      It is hard to find an example of how this would produce an error in
      practice.  There are 3 occurences of the fix:

      1. perf script is only affected if !sample_id_all which only happens on
        old kernels.

      2. intel_pt is only affected when decoding without timestamps
         and would probably still decode correctly - the exit event is
         only used to flush out data which anyway gets flushed at the
         end of the session

      3. intel_bts also uses the exit event to flush data which
         would probably not cause errors as it would get flushed at
         the end of the session instead

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1439888825-27708-1-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 65d4b265103a3cb2f0993c946815157a38797421
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:33 2015 +0200

      perf tools: Move tracing_path stuff under same namespace

      Renaming all functions touching tracing_path under same namespace. New
      interface is:

        char tracing_path[];
        - tracing mount path

        char tracing_events_path[];
        - tracing mount/events path

        void tracing_path_set(const char *mountpoint);
        - setting directly tracing_path(_events), used by --debugfs-dir option

        const char *tracing_path_mount(void);
        - initial setup of tracing_(events)_path, called from perf.c
          mounts debugfs/tracefs if needed and possible

        char *get_tracing_file(const char *name);
        void put_tracing_file(char *file);
        - get/put tracing file path

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-4-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f6a09af7de3b39b1e4fcff7374871f834498b7f0
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:32 2015 +0200

      perf tools: Remove mountpoint arg from perf_debugfs_mount

      It's not used by any caller. We either detect the mountpoint or use
      hardcoded one.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441180605-24737-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 245bad8eb45fca36638da53fb0a361397a707001
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 15:52:46 2015 -0700

      perf stat: Quieten failed to read counter message

      Since 3b3eb0445 running perf stat on a system without
      backend-stalled-cycles spits out ugly warnings by default.

      Since that is quite common, make the message a debug message only.

      We know anyways that the counter wasn't read by the normal <unsupported>
      output.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441147966-14917-1-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2bb00d2f95193aea5bfa98392907273115c96920
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Tue Sep 1 09:58:12 2015 -0400

      perf tools: Store the cpu socket and core ids in the perf.data header

      This patch stores the cpu socket_id and core_id in a perf.data header,
      and reads them into the perf_env struct when processing perf.data files.

      The changes modifies the CPU_TOPOLOGY section, making sure it is
      backward/forward compatible.

      The patch checks the section size before reading the core and socket ids.

      It never reads data crossing the section boundary.  An old perf binary
      without this patch can also correctly read the perf.data from a new perf
      with this patch.

      Because the new info is added at the end of the cpu_topology section, an
      old perf tool ignores the extra data.

      Examples:

      1. New perf with this patch read perf.data from an old perf without the
         patch:

        $ perf_new report -i perf_old.data --header-only -I
        ......
        # sibling threads : 33
        # sibling threads : 34
        # sibling threads : 35
        # Core ID and Socket ID information is not available
        # node0 meminfo  : total = 32823872 kB, free = 29315548 kB
        # node0 cpu list : 0-17,36-53
        ......

      2. Old perf without the patch reads perf.data from a new perf with the
         patch:

        $ perf_old report -i perf_new.data --header-only -I
        ......
        # sibling threads : 33
        # sibling threads : 34
        # sibling threads : 35
        # node0 meminfo  : total = 32823872 kB, free = 29190932 kB
        # node0 cpu list : 0-17,36-53
        ......

      3. New perf read new perf.data:

        $ perf_new report -i perf_new.data --header-only -I
        ......
        # sibling threads : 33
        # sibling threads : 34
        # sibling threads : 35
        # CPU 0: Core ID 0, Socket ID 0
        # CPU 1: Core ID 1, Socket ID 0
        ......
        # CPU 61: Core ID 10, Socket ID 1
        # CPU 62: Core ID 11, Socket ID 1
        # CPU 63: Core ID 16, Socket ID 1
        # node0 meminfo  : total = 32823872 kB, free = 29190932 kB
        # node0 cpu list : 0-17,36-53

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441115893-22006-2-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 193b6bd339ccb30c861a307a915d4532f443e0fb
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Tue Sep 1 09:58:11 2015 -0400

      perf cpumap: Factor out functions to get core_id and socket_id

      This patch moves the code which reads core_id and socket_id into
      separate functions.

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441115893-22006-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 76055940c1afc8d445992fb0278b80cf205bbf97
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Sat Aug 29 04:22:05 2015 +0000

      tools lib traceevent: Support function __get_dynamic_array_len

      Support helper function __get_dynamic_array_len() in libtraceevent, this
      function is used accompany with __print_array() or __print_hex(), but
      currently it is not an available function in the function list of
      process_function().

      The total allocated length of the dynamic array is embedded in the top
      half of __data_loc_##item field. This patch adds new arg type
      PRINT_DYNAMIC_ARRAY_LEN to return the length to eval_num_arg(),

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Acked-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1440822125-52691-32-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dabf626f7f0e5cbef0d1cfb5143e40213f079bb8
  Author: He Kuang <hekuang@xxxxxxxxxx>
  Date:   Sat Aug 29 04:21:55 2015 +0000

      perf tools: Copy linux/filter.h to tools/include

      This patch copies filter.h from include/linux/kernel.h to
      tools/include/linux/filter.h to enable other libraries to use macros in 
it,
      like libbpf which will be introduced by further patches.

      Currently, the filter.h copy only contains the useful macros needed by
      libbpf for not introducing too much dependence.

      tools/perf/MANIFEST is also updated for 'make perf-*-src-pkg'.

      One change:
        The 'imm' field of BPF_EMIT_CALL becomes ((FUNC) - BPF_FUNC_unspec) to
        suit user space code generator.

      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1440822125-52691-22-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      [ Removed stylistic changes, so that a diff to the original file gets 
reduced ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2f84b42b28eed0f980200401077e51571202f868
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Tue Sep 1 11:47:19 2015 -0700

      perf tools: Always use non inlined file name for 'srcfile' sort key

      When profiling the kernel with the 'srcfile' sort key it's common to
      "get stuck" in include. For example a lot of code uses current or other
      inlines, so they get accounted to some random include file. This is not
      very useful as a high level categorization.

      For example just profiling the idle loop usually shows mostly inlines,
      so you never see the actual cpuidle file.

      This patch changes the 'srcfile' sort key to always unwind the inline
      stack using BFD/DWARF. So we always account to the base function that
      called the inline.

      In a few cases include is still shown (for example for MSR accesses),
      but that is because they get inlining expanded as part of assigning to a
      global function pointer. For the majority it works fine though.

      v2: Use simpler while loop. Add maximum iteration count.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441133239-31254-1-git-send-email-andi@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 5ad4da4302712fba10624d28cb6c269fee592b69
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Sep 2 09:56:31 2015 +0200

      perf tools: Fix parse_events_add_pmu caller

      Following commit changed parse_events_add_pmu interface:
        36adec85a86f perf tools: Change parse_events_add_pmu interface

      but forgot to change one caller. Because of lessen compilation rules for
      the bison parser, the compiler did not warn on that.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Raphael Beamonte <raphael.beamonte@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Fixes: 36adec85a86f ("perf tools: Change parse_events_add_pmu interface")
      Link: 
http://lkml.kernel.org/r/1441180605-24737-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 9f8df6adf6c53abfa10e243cb289c34eb18ec581
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 2 16:14:06 2015 +0530

      regulator: core: fix possible NULL dereference

      We were checking rdev->supply for NULL after dereferencing it. Lets
      check for rdev->supply along with _regulator_is_enabled() and call
      regulator_enable() only if rdev->supply is not NULL.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 02bc933ebb59208f42c2e6305b2c17fd306f695d
  Author: Tan, Jui Nee <jui.nee.tan@xxxxxxxxx>
  Date:   Tue Sep 1 10:22:51 2015 +0800

      spi: spi-pxa2xx: Check status register to determine if SSSR_TINT is 
disabled

      On Intel Baytrail, there is case when interrupt handler get called, no SPI
      message is captured. The RX FIFO is indeed empty when RX timeout pending
      interrupt (SSSR_TINT) happens.

      Use the BIOS version where both HSUART and SPI are on the same IRQ. Both
      drivers are using IRQF_SHARED when calling the request_irq function. When
      running two separate and independent SPI and HSUART application that
      generate data traffic on both components, user will see messages like
      below on the console:

        pxa2xx-spi pxa2xx-spi.0: bad message state in interrupt handler

      This commit will fix this by first checking Receiver Time-out Interrupt,
      if it is disabled, ignore the request and return without servicing.

      Signed-off-by: Tan, Jui Nee <jui.nee.tan@xxxxxxxxx>
      Acked-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 7c8bb6cb95061b3143759459ed6c6b0c73bcfecb
  Author: Frederic Weisbecker <fweisbec@xxxxxxxxx>
  Date:   Tue Sep 1 16:51:00 2015 +0200

      nohz: Assert existing housekeepers when nohz full enabled

      The code ensures that when nohz full is running, at least the
      boot CPU serves as a housekeeper and it can't be later offlined.

      Let's assert this assumption to make sure that we have CPUs to
      handle unbound jobs like workqueues and timers while nohz full
      CPUs run undisturbed.

      Also improve the comments on housekeeper offlining prevention.

      Signed-off-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Chris Metcalf <cmetcalf@xxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Preeti U Murthy <preeti@xxxxxxxxxxxxxxxxxx>
      Cc: Vatika Harlalka <vatikaharlalka@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441119060-2230-3-git-send-email-fweisbec@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9642d18eee2cd169b60c6ac0f20bda745b5a3d1e
  Author: Vatika Harlalka <vatikaharlalka@xxxxxxxxx>
  Date:   Tue Sep 1 16:50:59 2015 +0200

      nohz: Affine unpinned timers to housekeepers

      The problem addressed in this patch is about affining unpinned
      timers. Adaptive or Full Dynticks CPUs are currently disturbed
      by unnecessary jitter due to firing of such timers on them.

      This patch will affine timers to online CPUs which are not full
      dynticks in NOHZ_FULL configured systems. It should not
      introduce overhead in nohz full off case due to static keys.

      Signed-off-by: Vatika Harlalka <vatikaharlalka@xxxxxxxxx>
      Signed-off-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Reviewed-by: Preeti U Murthy <preeti@xxxxxxxxxxxxxxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Chris Metcalf <cmetcalf@xxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441119060-2230-2-git-send-email-fweisbec@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 31e09b18c863718939e3e9c30eee55f9011d85ee
  Author: Linda Knippers <linda.knippers@xxxxxx>
  Date:   Tue Sep 1 15:41:55 2015 -0400

      x86/mm/srat: Print non-volatile flag in SRAT

      With the addition of NVDIMM support, a question came up as to
      whether NVDIMM ranges should be in the SRAT with this bit set.
      I think the consensus was no because the ranges are in the NFIT
      with proximity domain information there.

      ACPI is not clear on the meaning of this bit in the SRAT.
      If someone is setting it, we might want to ask them what they
      expect to happen with it.

      Right now this bit is only printed if all the ACPI debug
      information is turned on.

      Signed-off-by: Linda Knippers <linda.knippers@xxxxxx>
      Acked-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150901194154.GA4939@ljkz400
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 21b430d23d233c67e6589ea5054d18392e15a28e
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Tue Sep 1 13:59:25 2015 -0700

      ARM: omap2plus_defconfig: Enable MUSB DMA support

      With recent MUSB changes we can now build in support for multiple
      DMA implementations. So let's enable DMA by default to make life
      easier for distro use.

      Acked-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 81032e34e184a8d63598d215a6d4a3352018ffea
  Author: Vishal Mahaveer <vishalm@xxxxxx>
  Date:   Tue Sep 1 13:59:25 2015 -0700

      ARM: DRA752: Add ID detect for ES2.0

      ES2.0 is a minor variant of ES1.1. ES2.0 is an incremental revision
      with various fixes including the following:
        - reset logic fixes
        - few assymetric aging logic fixes
        - MMC clock rate fixes
        - Ethernet speed fixes
        - edma fixes for mcasp

      NOTE: even though we use a compatible of dra742 and dra752, the usage in
      the Linux kernel is more or less interchangable - we use dra752 more
      often in the linux kernel compared to dra742 and 4.2-rc6

      Signed-off-by: Vishal Mahaveer <vishalm@xxxxxx>
      Signed-off-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 05f4f1abc274ac7e8e83424d0cef2d842db91815
  Author: Frans Klaver <fransklaver@xxxxxxxxx>
  Date:   Tue Sep 1 13:59:25 2015 -0700

      ARM: OMAP3: vc: fix 'or' always true warning

      Fix the warning:
      arch/arm/mach-omap2/vc.c:302:47: warning: logical â??orâ?? of 
collectively exhaustive tests is always true [-Wlogical-op]

      As we're toggling both CLKREQ and OFFMODE, we should also be checking
      OFFMODE.

      Signed-off-by: Frans Klaver <fransklaver@xxxxxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 874b300a6a0bfe97225ed1f8648fa92238e4d9e9
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Tue Sep 1 13:59:25 2015 -0700

      ARM: OMAP2+: Fix booting if no timer parent clock is available

      When bringing up a new SoC we needlessly prevent booting at timer
      init if timer clock_set_parent fails. This can fail if the system
      is booting on bootloader configured PLL values until the clock
      framework driver for the PLL is implemented.

      Let's just WARN instead, this will provide helpful information
      for anybody bringing up a new SoC what needs to be fixed.

      This allows to boot dm814x that's still missing the PLL driver.

      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit fe8291e82b5d0b79b743683e5c0fb7e273f7a99a
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Tue Sep 1 13:59:24 2015 -0700

      ARM: OMAP2+: omap-device: fix race deferred probe of omap_hsmmc vs 
omap_device_late_init

      Kernel fails to boot 50% of times (form build to build) with
      RT-patchset applied due to the following race - on late boot
      stages deferred_probe_work_func->omap_hsmmc_probe races with 
omap_device_late_ini.

      The same issue has been reported now on linux-next (4.3) by Keerthy [1]

      late_initcall
       - deferred_probe_initcal() tries to re-probe all pending driver's probe.

      - later on, some driver is probing in this case It's cpsw.c
        (but could be any other drivers)
        cpsw_init
        - platform_driver_register
          - really_probe
             - driver_bound
               - driver_deferred_probe_trigger
        and boot proceed.
        So, at this moment we have deferred_probe_work_func scheduled.

      late_initcall_sync
        - omap_device_late_init
          - omap_device_idle

      CPU1                                      CPU2
        - deferred_probe_work_func
          - really_probe
            - omap_hsmmc_probe
        - pm_runtime_get_sync
                                        late_initcall_sync
                                        - omap_device_late_init
                                                if (od->_driver_status != 
BUS_NOTIFY_BOUND_DRIVER) {
                                                        if (od->_state == 
OMAP_DEVICE_STATE_ENABLED) {
                                                                - 
omap_device_idle [ops - IP is disabled]
        - [fail]
        - pm_runtime_put_sync
                - omap_hsmmc_runtime_suspend [ooops!]

      == log ==
       omap_hsmmc 480b4000.mmc: unable to get vmmc regulator -517
       davinci_mdio 48485000.mdio: davinci mdio revision 1.6
       davinci_mdio 48485000.mdio: detected phy mask fffffff3
       libphy: 48485000.mdio: probed
       davinci_mdio 48485000.mdio: phy[2]: device 48485000.mdio:02, driver 
unknown
       davinci_mdio 48485000.mdio: phy[3]: device 48485000.mdio:03, driver 
unknown
       omap_hsmmc 480b4000.mmc: unable to get vmmc regulator -517
       cpsw 48484000.ethernet: Detected MACID = b4:99:4c:c7:d2:48
       cpsw 48484000.ethernet: cpsw: Detected MACID = b4:99:4c:c7:d2:49
       hctosys: unable to open rtc device (rtc0)
       omap_hsmmc 480b4000.mmc: omap_device_late_idle: enabled but no driver.  
Idling
       ldousb: disabling
       Unhandled fault: imprecise external abort (0x1406) at 0x00000000
       [00000000] *pgd=00000000
       Internal error: : 1406 [#1] PREEMPT SMP ARM
       Modules linked in:
       CPU: 1 PID: 58 Comm: kworker/u4:1 Not tainted 
4.1.2-rt1-00467-g6da3c0a-dirty #5
       Hardware name: Generic DRA74X (Flattened Device Tree)
       Workqueue: deferwq deferred_probe_work_func
       task: ee6ddb00 ti: edd3c000 task.ti: edd3c000
       PC is at omap_hsmmc_runtime_suspend+0x1c/0x12c
       LR is at _od_runtime_suspend+0xc/0x24
       pc : [<c0471998>]    lr : [<c0029590>]    psr: a0000013
       sp : edd3dda0  ip : ee6ddb00  fp : c07be540
       r10: 00000000  r9 : c07be540  r8 : 00000008
       r7 : 00000000  r6 : ee646c10  r5 : ee646c10  r4 : edd79380
       r3 : fa0b4100  r2 : 00000000  r1 : 00000000  r0 : ee646c10
       Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment kernel
       Control: 10c5387d  Table: 8000406a  DAC: 00000015
       Process kworker/u4:1 (pid: 58, stack limit = 0xedd3c218)
       Stack: (0xedd3dda0 to 0xedd3e000)
       dda0: ee646c70 ee646c10 c0029584 00000000 00000008 c0029590 ee646c70 
ee646c10
       ddc0: c0029584 c03adfb8 ee646c10 00000004 0000000c c03adff0 ee646c10 
00000004
       dde0: 0000000c c03ae4ec 00000000 edd3c000 ee646c10 00000004 ee646c70 
00000004
       de00: fa0b4000 c03aec20 ee6ddb00 ee646c10 00000004 ee646c70 ee646c10 
fffffdfb
       de20: edd79380 00000000 fa0b4000 c03aee90 fffffdfb edd79000 ee646c00 
c0474290
       de40: 00000000 edda24c0 edd79380 edc81f00 00000000 00000200 00000001 
c06dd488
       de60: edda3960 ee646c10 ee646c10 c0824cc4 fffffdfb c0880c94 00000002 
edc92600
       de80: c0836378 c03a7f84 ee646c10 c0824cc4 00000000 c0880c80 c0880c94 
c03a6568
       dea0: 00000000 ee646c10 c03a66ac ee4f8000 00000000 00000001 edc92600 
c03a4b40
       dec0: ee404c94 edc83c4c ee646c10 ee646c10 ee646c44 c03a63c4 ee646c10 
ee646c10
       dee0: c0814448 c03a5aa8 ee646c10 c0814220 edd3c000 c03a5ec0 c0814250 
ee6be400
       df00: edd3c000 c004e5bc ee6ddb01 00000078 ee6ddb00 ee4f8000 ee6be418 
edd3c000
       df20: ee4f8028 00000088 c0836045 ee4f8000 ee6be400 c004e928 ee4f8028 
00000000
       df40: c004e8ec 00000000 ee6bf1c0 ee6be400 c004e8ec 00000000 00000000 
00000000
       df60: 00000000 c0053450 2e56fa97 00000000 afdffbd7 ee6be400 00000000 
00000000
       df80: edd3df80 edd3df80 00000000 00000000 edd3df90 edd3df90 edd3dfac 
ee6bf1c0
       dfa0: c0053384 00000000 00000000 c000f668 00000000 00000000 00000000 
00000000
       dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000
       dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 f1fc9d7e 
febfbdff
       [<c0471998>] (omap_hsmmc_runtime_suspend) from [<c0029590>] 
(_od_runtime_suspend+0xc/0x24)
       [<c0029590>] (_od_runtime_suspend) from [<c03adfb8>] 
(__rpm_callback+0x24/0x3c)
       [<c03adfb8>] (__rpm_callback) from [<c03adff0>] (rpm_callback+0x20/0x80)
       [<c03adff0>] (rpm_callback) from [<c03ae4ec>] (rpm_suspend+0xe4/0x618)
       [<c03ae4ec>] (rpm_suspend) from [<c03aee90>] 
(__pm_runtime_idle+0x60/0x80)
       [<c03aee90>] (__pm_runtime_idle) from [<c0474290>] 
(omap_hsmmc_probe+0x6bc/0xa7c)
       [<c0474290>] (omap_hsmmc_probe) from [<c03a7f84>] 
(platform_drv_probe+0x44/0xa4)
       [<c03a7f84>] (platform_drv_probe) from [<c03a6568>] 
(driver_probe_device+0x170/0x2b4)
       [<c03a6568>] (driver_probe_device) from [<c03a4b40>] 
(bus_for_each_drv+0x64/0x98)
       [<c03a4b40>] (bus_for_each_drv) from [<c03a63c4>] 
(device_attach+0x70/0x88)
       [<c03a63c4>] (device_attach) from [<c03a5aa8>] 
(bus_probe_device+0x84/0xac)
       [<c03a5aa8>] (bus_probe_device) from [<c03a5ec0>] 
(deferred_probe_work_func+0x58/0x88)
       [<c03a5ec0>] (deferred_probe_work_func) from [<c004e5bc>] 
(process_one_work+0x134/0x464)
       [<c004e5bc>] (process_one_work) from [<c004e928>] 
(worker_thread+0x3c/0x4fc)
       [<c004e928>] (worker_thread) from [<c0053450>] (kthread+0xcc/0xe4)
       [<c0053450>] (kthread) from [<c000f668>] (ret_from_fork+0x14/0x2c)
       Code: e594302c e593202c e584205c e594302c (e5932128)
       ---[ end trace 0000000000000002 ]---

      The issue happens because omap_device_late_init() do not take into
      account that some drivers are present, but their probes were not
      finished successfully and where deferred instead. This is the valid
      case, and omap_device_late_init() should not idle such devices.

      To fix this issue, the value of omap_device->_driver_status field
      should be checked not only for BUS_NOTIFY_BOUND_DRIVER (driver is
      present and has been bound to device successfully), but also checked
      for BUS_NOTIFY_BIND_DRIVER (driver about to be bound) - which means
      driver is present and there was try to bind it to device.

      [1] http://www.spinics.net/lists/arm-kernel/msg441880.html
      Cc: Tero Kristo <t-kristo@xxxxxx>
      Cc: Keerthy <j-keerthy@xxxxxx>
      Tested-by: Keerthy <j-keerthy@xxxxxx>
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 51d2eeef1d958ef6834b24f548194f5acea0f499
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Tue Sep 1 11:14:05 2015 +0530

      ASoC: wm0010: fix memory leak

      We were aborting if the kzalloc of img_swap fails but without freeing the
      already allocated out. Similarly we were aborting if spi_sync fails
      without releasing out and img_swap.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 5e26b1b3abce05c177feb589260031519a1bc7b1
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:41 2015 -0700

      ipvs: support scheduling inverse and icmp SCTP packets

      In the event of an icmp packet, take only the ports instead of trying to
      grab the full header.

      In the event of an inverse packet, use the source address and port.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 2b0f39ef3d8951036d778ddee503e2fdf8e4ff4f
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:40 2015 -0700

      ipvs: support scheduling inverse and icmp UDP packets

      In the event of an icmp packet, take only the ports instead of trying to
      grab the full header.

      In the event of an inverse packet, use the source address and port.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 8f88ea68e6146ff2d0df263b1f3e6e655e69ba98
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:39 2015 -0700

      ipvs: support scheduling inverse and icmp TCP packets

      In the event of an icmp packet, take only the ports instead of trying to
      grab the full header.

      In the event of an inverse packet, use the source address and port.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 89621f31d18b81a6c66a97fc2a80b3b6e5937a81
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:38 2015 -0700

      ipvs: ensure that ICMP cannot be sent in reply to ICMP

      Check the header for icmp before sending a PACKET_TOO_BIG

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 6044eeffafbe35154c5d3b04b73e8938a62e5d39
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:37 2015 -0700

      ipvs: attempt to schedule icmp packets

      Invoke the try_to_schedule logic from the icmp path and update it to the
      appropriate ip_vs_conn_put function.  The schedule functions have been
      updated to reject the packets immediately for now.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 1471f35efa86407fc180ca6d55363c684d166ef6
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:36 2015 -0700

      ipvs: sh: support scheduling icmp/inverse packets consistently

      "source_hash" the dest fields if it's an inverse packet.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3481894fcb0d7d3c226618e6b73a27796a7a3eca
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:35 2015 -0700

      ipvs: Use outer header in ip_vs_bypass_xmit_v6

      The ip_vs_iphdr may refer to an internal header, so use the outer one
      instead.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 94485fedcb176a9105961e47bd9dda23801c1906
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:34 2015 -0700

      ipvs: add schedule_icmp sysctl

      This sysctl will be used to enable the scheduling of icmp packets.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit ee78378f97648834d22ce97e91633ea40f044e3d
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:33 2015 -0700

      ipvs: Make ip_vs_schedule aware of inverse iph'es

      This is necessary to schedule icmp later.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 802c41adcf3be63f351c302c9665865d705cada9
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:32 2015 -0700

      ipvs: drop inverse argument to conn_{in,out}_get

      No longer necessary since the information is included in the ip_vs_iphdr
      itself.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 3b5ca61768457de5139229392d0333165abcf10f
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:31 2015 -0700

      ipvs: pull out ip_vs_try_to_schedule function

      This is necessary as we'll be trying to schedule icmp later and we'll want
      to share this code.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0b72902120d89153996f411bb3ec8ca7b4baf1d8
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:30 2015 -0700

      ipvs: Handle inverse and icmp headers in ip_vs_leave

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 4fd9beef37f3a14aa34cb025479a0e431dc9e58b
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:29 2015 -0700

      ipvs: Add hdr_flags to iphdr

      These flags contain information like whether or not the addresses are
      inverted or from icmp.  The first will allow us to drop an inverse param
      all over the place, and the second will later be useful in scheduling 
icmp.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit b0e010c527de742cb18e8d50a06dfd1a995b5382
  Author: Alex Gartrell <agartrell@xxxxxx>
  Date:   Wed Aug 26 09:40:28 2015 -0700

      ipvs: replace ip_vs_fill_ip4hdr with ip_vs_fill_iph_skb_off

      This removes some duplicated code and makes the ICMPv6 path look more like
      the ICMP path.

      Signed-off-by: Alex Gartrell <agartrell@xxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx>

  commit 0050ae57cd02dbd4f171622d0269e2fb7029a23e
  Merge: a57e456 488ca7d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Aug 31 19:47:03 2015 +0200

      Merge branch 'x86/cpufeature' into x86/urgent, because it's ready

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d76f41982f2fc88492efd96c7c3178044f32e125
  Author: Anatol Pomozov <anatol.pomozov@xxxxxxxxx>
  Date:   Mon Aug 31 08:24:23 2015 -0700

      ASoC: Document snd-soc-dummy-dai purpose

      Signed-off-by: Anatol Pomozov <anatol.pomozov@xxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 6bd3c6f75e0f9baddbf1196a7e3fceabb50c7e3c
  Author: Maciej S. Szmigiero <mail@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Aug 31 17:07:12 2015 +0200

      ASoC: fsl-asoc-card: put ASRC OF node in case of unknown device

      In case of unknown DT compatible device the ASRC OF node
      possibly acquired earlier by of_parse_phandle() has
      to be put before returning from probe method.

      Signed-off-by: Maciej Szmigiero <mail@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 3d4fe182003bcde778e29e84c14c0c4bb70a452e
  Author: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
  Date:   Mon Aug 31 21:18:58 2015 +0800

      spi: Mediatek: Document devicetree bindings update for spi bus

      This patch updates spi bindings, fixs clock usage description.

      Signed-off-by: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit adcbcfea15d62fab5ba40ac28f9d2a590cc5e5e8
  Author: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
  Date:   Mon Aug 31 21:18:57 2015 +0800

      spi: mediatek: fix spi clock usage error

      spi clock manages flow:
        CLK_TOP_SYSPLL3_D2 ---> CLK_TOP_SPI_SEL ---> CLK_PERI_SPI0
           (source clock)           (clock mux)       (clock gate)
      spi driver should choose source clock by clock mux, then enable
      clock gate.

      Signed-off-by: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit ca9f26a27949ba3b295e4f0841c0bec9ef440141
  Author: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
  Date:   Mon Aug 31 21:18:56 2015 +0800

      spi: mediatek: remove clk_disable_unprepare()

      This patch removes clk_disable_unprepare() in mtk_spi_remove().
      clk_disable_prepare/unprepare must be balance, spi-clk is disabled
      in mtk_spi_probe, so not needs to disable again.

      Signed-off-by: Leilk Liu <leilk.liu@xxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 79f682806240741f62faaa33d933ebe768caa07f
  Author: Liad Kaufman <liad.kaufman@xxxxxxxxx>
  Date:   Mon Aug 24 16:23:58 2015 +0300

      iwlwifi: mvm: remove SCD_QUEUE_CONFIG TLV flag

      We don't support firmwares that don't use the new API.
      This also allows to use all the SCD queues, so increase
      the reported number of queues to 31.

      Signed-off-by: Liad Kaufman <liad.kaufman@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 3c1f84a174e425f2e7a687a6cfd791f609cbc9eb
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Aug 26 13:48:55 2015 +0300

      iwlwifi: mvm: don't load -12.ucode anymore

      -13.ucode has been published long ago. Deprecate old
      versions of the firmware.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit cfe417bc47ba8f470941a1b8ad60911e163f1b34
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Wed Aug 26 12:22:12 2015 +0200

      iwlwifi: mvm: don't NUL-terminate low-latency debugfs file

      There's obviously no reason to write a NUL-terminating byte into
      the debugfs file. Apparently nobody tried to use this from a tool
      that doesn't strip NUL bytes though, so we never noticed. Fix it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit cf8c3cff3fcce966c6d31001c09c92778f961eea
  Author: Luciano Coelho <luciano.coelho@xxxxxxxxx>
  Date:   Mon Aug 24 14:53:25 2015 +0300

      iwlwifi: mvm: make sure d0i3 exit work runs before suspending

      If we are in d0i3 when entering suspend, we leave d0i3 so that
      mac80211 can call us to remove connections or whatever before going to
      suspend.  We do this by calling pm_runtime_resume() early in the slave
      transport flow and reactivating it later, when the wiphy suspend flow
      runs.

      The problem is that we queue a work in order to leave d0i3.  If this
      work hasn't run yet when the wiphy suspend flow is called, we have a
      race and entering d0i3 fails (because we're still holding the
      IWL_MVM_REF_EXIT_WORK reference).

      To solve this, simply flush the d0i3_exit_work at the beginning of the
      iwl_mvm_suspend() function.

      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 9493908095a3d0b4fa24ff529975376b3a2b8394
  Author: Gregory Greenman <gregory.greenman@xxxxxxxxx>
  Date:   Mon Aug 24 14:38:35 2015 +0300

      iwlwifi: mvm: don't ask for beacons when AP vif and no assoc sta

      When in AP mode, we need beacons from other APs for HT protection.
      However, when there's no any associated station we will not do
      any Tx and thus don't really need beacons. On the other hand, these
      beacons will cause a lot of unnecessary wakeups which increase our
      power consumption. Handle this by asking FW to pass beacons only when
      there's at least one associated station.

      Signed-off-by: Gregory Greenman <gregory.greenman@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit a73a2cea922de5d2dd03ad456e280ef92c8bb9f6
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Sun Aug 23 13:29:36 2015 +0300

      iwlwifi: Deinline iwl_{read,write}(8,32}

      With CONFIG_IWLWIFI_DEVICE_TRACING=y, these functions are rather large,
      too big for inlining.

      With this .config: http://busybox.net/~vda/kernel_config,
      after uninlining these functions have sizes and callsite counts
      as follows:

      iwl_read32  475 bytes, 51 callsites
      iwl_write32 477 bytes, 90 callsites
      iwl_write8  493 bytes, 3 callsites

      Reduction in size is about 74,000 bytes:

          text     data      bss       dec     hex filename
      90758147 17226024 36659200 144643371 89f152b vmlinux0
      90687995 17221928 36659200 144569123 89df323 vmlinux.after

      Reported-by: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit e50460192e6e326fc748037c7ba69565fc18f992
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Mon Aug 17 10:45:50 2015 +0300

      iwlwifi: mvm: add debugfs hook to send ECHO_CMD to the firmware

      ECHO_CMD is a simple command that can be sent to the
      firmware just to check that it is alive.
      This command is useful for debug purpose, provide a debugfs
      hook to send it.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 62e004fe941d56cb70ea9148bb79cf6698751248
  Author: Sara Sharon <sara.sharon@xxxxxxxxx>
  Date:   Thu Aug 20 14:12:58 2015 +0300

      iwlwifi: mvm: fix statistics variables type

      When receiving statistics notification there is a field of average energy.
      This is defines as signed 8 bit, while FW refers to it as unsigned.
      when the energy is higher than 127 this causes in iwl_mvm_stat_iterator
      a wrong computation of the signal
           int sig = -stats->general.beacon_filter_average_energy;
      resulting in incorrect CQM event (change from low to high).

      While at it - update the rest of the fields to the correct type.

      Signed-off-by: Sara Sharon <sara.sharon@xxxxxxxxx>
      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit dbb04b0d29f884dbb6d0a52dd7877445d2e776f1
  Author: Luciano Coelho <luciano.coelho@xxxxxxxxx>
  Date:   Tue Aug 18 12:07:48 2015 +0300

      iwlwifi: mvm: remove netdetect debugfs entry

      This debugfs entry was implemented just as a proof-of-concept before
      the full support for netdetect via cfg80211/mac80211 was implemented.
      Now that we have a proper way to enable netdetect from userspace, this
      entry is redundant and should be removed to avoid unnecessary
      maintenance work.

      Signed-off-by: Luciano Coelho <luciano.coelho@xxxxxxxxx>

  commit 275d7d44d802ef271a42dc87ac091a495ba72fc5
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Thu Aug 20 10:34:59 2015 +0930

      module: Fix locking in symbol_put_addr()

      Poma (on the way to another bug) reported an assertion triggering:

        [<ffffffff81150529>] module_assert_mutex_or_preempt+0x49/0x90
        [<ffffffff81150822>] __module_address+0x32/0x150
        [<ffffffff81150956>] __module_text_address+0x16/0x70
        [<ffffffff81150f19>] symbol_put_addr+0x29/0x40
        [<ffffffffa04b77ad>] dvb_frontend_detach+0x7d/0x90 [dvb_core]

      Laura Abbott <labbott@xxxxxxxxxx> produced a patch which lead us to
      inspect symbol_put_addr(). This function has a comment claiming it
      doesn't need to disable preemption around the module lookup
      because it holds a reference to the module it wants to find, which
      therefore cannot go away.

      This is wrong (and a false optimization too, preempt_disable() is really
      rather cheap, and I doubt any of this is on uber critical paths,
      otherwise it would've retained a pointer to the actual module anyway and
      avoided the second lookup).

      While its true that the module cannot go away while we hold a reference
      on it, the data structure we do the lookup in very much _CAN_ change
      while we do the lookup. Therefore fix the comment and add the
      required preempt_disable().

      Reported-by: poma <pomidorabelisima@xxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Fixes: a6e6abd575fc ("module: remove module_text_address()")
      Cc: stable@xxxxxxxxxx

  commit 488ca7d72d974e3c00ae73ed9f947590680bdf00
  Author: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
  Date:   Fri Aug 21 14:56:46 2015 -0700

      x86/cpufeatures: Enable cpuid for Intel SHA extensions

      Add Intel CPUID for Intel Secure Hash Algorithm Extensions. This feature
      provides new instructions for accelerated computation of SHA-1 and 
SHA-256.
      This allows the feature to be shown in the /proc/cpuinfo for cpus that
      support it.

      Refer to SHA extension programming guide in chapter 8.2 of the Intel
      Architecture Instruction Set Extensions Programming reference
      for definition of this feature's cpuid: CPUID.(EAX=07H, ECX=0):EBX.SHA 
[bit 29] = 1
      
https://software.intel.com/sites/default/files/managed/07/b7/319433-023.pdf

      Originally-by: Chandramouli Narayanan <mouli_7982@xxxxxxxxx>
      Signed-off-by: Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxx>
      Cc: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/1440194206.3940.6.camel@schen9-mobl2
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 8d446c8647c9ab8fcb45a8fc7dbbafe1f83aa2f3
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Aug 7 09:36:59 2015 +0100

      arm64/mm: Add PROT_DEVICE_nGnRnE and PROT_NORMAL_WT

      UEFI spec 2.5 section 2.3.6.1 defines that
      EFI_MEMORY_[UC|WC|WT|WB] are possible EFI memory types for
      AArch64.

      Each of those EFI memory types is mapped to a corresponding
      AArch64 memory type. So we need to define PROT_DEVICE_nGnRnE
      and PROT_NORMWL_WT additionaly.

      MT_NORMAL_WT is defined, and its encoding is added to MAIR_EL1
      when initializing the CPU.

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-6-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b40227fbfb1f98614e6f9bdc4cb3a54ab31d48a5
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Aug 7 09:36:58 2015 +0100

      acpi, x86: Implement arch_apei_get_mem_attributes()

      ... to allow an arch specific implementation of getting page
      protection type associated with a physical address.

      On x86, we currently have no way to look up the EFI memory map
      attributes for a region in a consistent way, because the
      memmap is discarded after efi_free_boot_services(). So if
      you call efi_mem_attributes() during boot and at runtime,
      you could theoretically see different attributes.

      Since we are yet to see any x86 platforms that require
      anything other than PAGE_KERNEL (some arm64 platforms
      require the equivalent of PAGE_KERNEL_NOCACHE), return that
      until we know differently.

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-5-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      [ Small fixes to spelling. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 7bf793115dd96ce9bd8ed1665fc187d961a95dba
  Author: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
  Date:   Fri Aug 7 09:36:57 2015 +0100

      efi, x86: Rearrange efi_mem_attributes()

      x86 and ia64 implement efi_mem_attributes() differently. This
      function needs to be available for other architectures
      (such as arm64) as well, such as for the purpose of ACPI/APEI.

      ia64 EFI does not set up a 'memmap' variable and does not set
      the EFI_MEMMAP flag, so it needs to have its unique implementation
      of efi_mem_attributes().

      Move efi_mem_attributes() implementation from x86 to the core
      EFI code, and declare it with __weak.

      It is recommended that other architectures should not override
      the default implementation.

      Signed-off-by: Jonathan (Zhixiong) Zhang <zjzhang@xxxxxxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-4-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fa5c35011a8d5f3d0c597a6336107eafd1b6046c
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Fri Aug 7 09:36:56 2015 +0100

      Revert "x86/efi: Request desired alignment via the PE/COFF headers"

      This reverts commit:

        aeffc4928ea2 ("x86/efi: Request desired alignment via the PE/COFF 
headers")

      Linn reports that Signtool complains that kernels built with
      CONFIG_EFI_STUB=y are violating the PE/COFF specification because
      the 'SizeOfImage' field is not a multiple of 'SectionAlignment'.

      This violation was introduced as an optimisation to skip having
      the kernel relocate itself during boot and instead have the
      firmware place it at a correctly aligned address.

      No one else has complained and I'm not aware of any firmware
      implementations that refuse to boot with commit aeffc4928ea2,
      but it's a real bug, so revert the offending commit.

      Reported-by: Linn Crosetto <linn@xxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Michael Brown <mbrown@xxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-3-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 248fbcd5aee00f6519a12c5ed3bc3dc0f5e84de5
  Author: Matt Fleming <matt.fleming@xxxxxxxxx>
  Date:   Fri Aug 7 09:36:55 2015 +0100

      x86/efi-bgrt: Switch pr_err() to pr_debug() for invalid BGRT

      It's totally legitimate, per the ACPI spec, for the firmware to
      set the BGRT 'status' field to zero to indicate that the BGRT
      image isn't being displayed, and we shouldn't be printing an
      error message in that case because it's just noise for users. So
      swap pr_err() for pr_debug().

      However, Josh points that out it still makes sense to test the
      validity of the upper 7 bits of the 'status' field, since
      they're marked as "reserved" in the spec and must be zero. If
      firmware violates this it really *is* an error.

      Reported-by: Tom Yan <tom.ty89@xxxxxxxxx>
      Tested-by: Tom Yan <tom.ty89@xxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-2-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 87db73aebf55554fefaa3eade0a28f282a1511b8
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Aug 7 09:36:54 2015 +0100

      efi: Add support for EFI_MEMORY_RO attribute introduced by UEFIv2.5

      The UEFI spec v2.5 introduces a new memory attribute
      EFI_MEMORY_RO, which is now the preferred attribute to convey
      that the nature of the contents of such a region allows it to be
      mapped read-only (i.e., it contains .text and .rodata only).

      The specification of the existing EFI_MEMORY_WP attribute has been
      updated to align more closely with its common use as a
      cacheability attribute rather than a permission attribute.

      Add the #define and add the attribute to the memory map dumping
      routine.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Matt Fleming <matt.fleming@xxxxxxxxx>
      Reviewed-by: Laszlo Ersek <lersek@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1438936621-5215-1-git-send-email-matt@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 15bbdec3931e617231c12b0920e497e87ec8c2c6
  Author: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
  Date:   Mon Jul 13 14:31:30 2015 +0300

      iommu: Make the iova library a module

      The iova library has use outside the intel-iommu driver, thus make it a
      module.

      Signed-off-by: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit 9b41760b03816b34f4c9eee2cbb8fda8439920fc
  Author: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
  Date:   Mon Jul 13 14:31:29 2015 +0300

      iommu: iova: Export symbols

      Use EXPORT_SYMBOL_GPL() to export the iova library symbols. The symbols
      include:

        init_iova_domain();
        iova_cache_get();
        iova_cache_put();
        iova_cache_init();
        alloc_iova();
        find_iova();
        __free_iova();
        free_iova();
        put_iova_domain();
        reserve_iova();
        copy_reserved_iova();

      Signed-off-by: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit ae1ff3d623905947158fd3394854c23026337810
  Author: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
  Date:   Mon Jul 13 14:31:28 2015 +0300

      iommu: iova: Move iova cache management to the iova library

      This is necessary to separate intel-iommu from the iova library.

      Signed-off-by: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit 8f6429c7cb59f28433253575cc8e3262eed63592
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Thu Jul 16 19:40:12 2015 +0100

      iommu/iova: Avoid over-allocating when size-aligned

      Currently, allocating a size-aligned IOVA region quietly adjusts the
      actual allocation size in the process, returning a rounded-up
      power-of-two-sized allocation. This results in mismatched behaviour in
      the IOMMU driver if the original size was not a power of two, where the
      original size is mapped, but the rounded-up IOVA size is unmapped.

      Whilst some IOMMUs will happily unmap already-unmapped pages, others
      consider this an error, so fix it by computing the necessary alignment
      padding without altering the actual allocation size. Also clean up by
      making pad_size unsigned, since its callers always pass unsigned values
      and negative padding makes little sense here anyway.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>

  commit a6e2f029ae34f41adb6ae3812c32c5d326e1abd2
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Wed Apr 29 12:48:40 2015 -0400

      Make asm/word-at-a-time.h available on all architectures

      Added the x86 implementation of word-at-a-time to the
      generic version, which previously only supported big-endian.

      Omitted the x86-specific load_unaligned_zeropad(), which in
      any case is also not present for the existing BE-only
      implementation of a word-at-a-time, and is only used under
      CONFIG_DCACHE_WORD_ACCESS.

      Added as a "generic-y" to the Kbuilds of all architectures
      that didn't previously have it.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>

pnmtopng: 210 colors found
Revision graph left in 
/home/logs/results/bisect/linux-linus/test-amd64-amd64-rumpuserxen-amd64.xen-boot.{dot,ps,png,html,svg}.
----------------------------------------
63832: tolerable FAIL

flight 63832 linux-linus real-bisect [real]
http://logs.test-lab.xenproject.org/osstest/logs/63832/

Failures :-/ but no regressions.

Tests which did not succeed,
including tests which could not be run:
 test-amd64-amd64-rumpuserxen-amd64  6 xen-boot          fail baseline untested


jobs:
 build-amd64-rumpuserxen                                      pass
 test-amd64-amd64-rumpuserxen-amd64                           fail


------------------------------------------------------------
sg-report-flight on osstest.test-lab.xenproject.org
logs: /home/logs/logs
images: /home/logs/images

Logs, config files, etc. are available at
    http://logs.test-lab.xenproject.org/osstest/logs

Explanation of these reports, and of osstest in general, is at
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README.email;hb=master
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README;hb=master

Test harness code can be found at
    http://xenbits.xen.org/gitweb?p=osstest.git;a=summary


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.